Function at 0x140010d44
Capabilities:
Encode data using xor
Encrypt data using chaskey
Execute anti-debugging instructions
Hash data using murmur3

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e8]
sub rsp, 0x3e8
xor esi, esi
mov dword [rbp + 0x94], esi
mov qword [rbp + 0x100], rsi
mov dword [rbp + 0x10c], esi
mov dword [rbp + 0xb0], esi
mov qword [rbp - 0x10], rsi
mov dword [rbp + 0xc], esi
lea edx, [rsi + 4]
mov dword [rbp + 0xa8], esi
lea ecx, [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14000a714
mov rax, qword [rbp - 0x10]
mov r14d, 0x8007007a
mov qword [rbp + 0x148], rax
test rax, rax
je 0x14002b592
xor eax, eax
mov dword [rsp + 0x30], esi
mov r14d, esi
mov dword [rbp + 0x9c], esi
mov r13d, esi
mov dword [rbp - 0x28], esi
mov dword [rbp - 8], esi
lea rsi, [0x1400a93b0]
mov qword [rbp + 0x258], rsi
mov qword [rsp + 0x34], rax
mov dword [rsp + 0x3c], eax
mov qword [rbp - 0x24], rax
mov dword [rbp - 0x1c], eax
mov qword [rbp + 0x130], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
lea edx, [r13 + 8]
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
or dword [rbp + 8], 0xffffffff
lea r12, [0x1400a94f8]
xor r10d, r10d
mov r15, rax
mov ebx, 0xc0000017
test rax, rax
je 0x14002b59c
mov r8, qword [rbp + 0x130]
mov rcx, rax
mov rdx, qword [rbp + 0x258]
call sub.msvcrt.dll_memcpy
mov esi, dword [rbp + 0x130]
mov r14, r15
mov qword [rsp + 0x20], r15
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x188], 8
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
lea edx, [r13 + 8]
mov rcx, rax
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r12, rax
test rax, rax
je 0x14002b5a3
mov r8, qword [rbp + 0x188]
mov rcx, rax
mov rdx, qword [rbp + 0x268]
call sub.msvcrt.dll_memcpy
mov r14, qword [rbp + 0x188]
mov r13, r12
mov qword [rsp + 0x40], r12
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x140], rax
xor r10d, r10d
lea r8, [rsp + 0x28]
mov dword [rbp + 0x330], r10d
lea ebx, [r10 + 4]
mov edx, ebx
mov ecx, ebx
call fcn.14000ad5c
mov r11d, dword [rbp - 0x68]
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
lea r8, [rbp + 0x330]
mov edx, r11d
xor ecx, ecx
call fcn.14000ad5c
mov edi, eax
mov r9d, 0x10000000
or edi, r9d
jl 0x14002b5af
lea r8, [rsp + 0x28]
mov edx, esi
mov ecx, ebx
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
or edi, r9d
jl 0x14002b5af
lea r8, [rsp + 0x28]
mov edx, r14d
mov ecx, ebx
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
or edi, r9d
jl 0x14002b5af
lea r8, [rsp + 0x28]
mov ecx, ebx
lea edx, [rbx + 4]
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
or edi, r9d
jl 0x14002b5af
lea r8, [rbp - 0x30]
lea rcx, str.Printing_Spooler_Core_Spoolss_Licensing_Network_Default_Printer_Enabled
call fcn.14000ad04
xor r10d, r10d
test eax, eax
js 0x14002b5aa
mov rax, qword [rbp - 0x30]
lea r8, [rsp + 0x28]
inc rax
mov ecx, ebx
lea edx, [rax + rax]
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
mov r9d, 0x10000000
or edi, r9d
jl 0x14002b5af
lea r8, [rsp + 0x28]
mov edx, ebx
mov ecx, ebx
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
or edi, r9d
jl 0x14002b5af
lea r8, [rsp + 0x28]
mov edx, ebx
mov ecx, ebx
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r11d, dword [rsp + 0x28]
mov dword [rbp - 0x68], r11d
js 0x14002b5af
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
or edi, r9d
jl 0x14002b5af
mov eax, dword [rbp + 0x330]
mov dword [rsp + 0x34], eax
mov ebx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r9, rax
test rax, rax
je 0x14002b5b7
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r10d
lea rax, [rbp + 0x58]
mov dword [rbp + 0x58], r10d
test rax, rax
je 0x14002b5c5
lea r8, [rbp - 0x70]
mov rcx, r9
lea edx, [r10 + 4]
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011157
mov ecx, dword [rsp + 0x34]
lea rax, [r9 + 8]
add rcx, r9
cmp rax, rcx
ja 0x14002b5be
mov rcx, qword [rbp - 0x70]
mov dword [r9], edx
mov eax, dword [rbp + 0x58]
mov dword [rcx], eax
inc dword [rsp + 0x30]
test edi, edi
js 0x14002b5af
test esi, esi
je 0x14002b61a
cmp qword [rsp + 0x38], r10
je 0x14002b5cf
mov r11d, r10d
mov r9, qword [rsp + 0x38]
mov qword [rsp + 0x70], r9
cmp dword [rsp + 0x30], r10d
jbe 0x1400111d8
mov r10d, dword [rbp + 0x2c]
mov edx, dword [r9]
lea r8, [rbp + 0x330]
mov ecx, 4
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r10d, dword [rbp + 0x330]
mov dword [rbp + 0x2c], r10d
js 0x14001121e
mov edx, r10d
lea r8, [rsp + 0x70]
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14001121e
mov r9, qword [rsp + 0x70]
inc r11d
cmp r11d, dword [rsp + 0x30]
jb 0x14001118a
xor r10d, r10d
lea r8, [rbp - 0x70]
mov edx, 4
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011221
mov ecx, dword [rsp + 0x34]
lea rax, [rsi + 4]
add rcx, qword [rsp + 0x38]
add rax, r9
mov r8, rsi
cmp rax, rcx
ja 0x14002b5be
mov rcx, qword [rbp - 0x70]
mov rdx, r15
mov dword [r9], esi
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x30]
xor r10d, r10d
test edi, edi
js 0x14002b5af
test r14d, r14d
je 0x14002b68e
cmp qword [rsp + 0x38], r10
je 0x14002b624
mov ecx, r10d
mov r9, qword [rsp + 0x38]
cmp dword [rsp + 0x30], r10d
jbe 0x14001127a
mov eax, dword [r9]
add eax, 4
cmp eax, 4
jb 0x14002b684
mov dword [rbp + 0x90], eax
mov edx, eax
add rdx, r9
cmp rdx, r9
jb 0x14002b67a
inc ecx
mov r9, rdx
cmp ecx, dword [rsp + 0x30]
jb 0x14001124c
lea r8, [rbp - 0x70]
mov edx, 4
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400112c3
mov ecx, dword [rsp + 0x34]
add rcx, qword [rsp + 0x38]
mov r8d, r14d
lea rax, [r8 + 4]
add rax, r9
cmp rax, rcx
ja 0x14002b5be
mov rcx, qword [rbp - 0x70]
mov rdx, r12
mov dword [r9], r14d
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x30]
xor r10d, r10d
mov r12d, 4
test edi, edi
js 0x14002b5af
mov rax, qword [rbp + 0x140]
mov qword [rbp + 0x158], rax
lea rax, [rbp + 0x158]
test rax, rax
je 0x14002b6f4
cmp qword [rsp + 0x38], r10
je 0x14002b698
mov ecx, r10d
mov r9, qword [rsp + 0x38]
cmp dword [rsp + 0x30], r10d
jbe 0x140011337
mov eax, dword [r9]
add eax, 4
cmp eax, r12d
jb 0x14002b6ea
mov dword [rbp + 0x98], eax
mov edx, eax
add rdx, r9
cmp rdx, r9
jb 0x14002b67a
inc ecx
mov r9, rdx
cmp ecx, dword [rsp + 0x30]
jb 0x140011309
lea r8, [rbp - 0x70]
mov rdx, r12
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14001137d
mov ecx, dword [rsp + 0x34]
lea rax, [r9 + 0xc]
add rcx, qword [rsp + 0x38]
cmp rax, rcx
ja 0x14002b5be
mov rax, qword [rbp - 0x70]
mov dword [r9], 8
movsd xmm0, qword [rbp + 0x158]
movsd qword [rax], xmm0
inc dword [rsp + 0x30]
test edi, edi
js 0x14002b5af
lea rbx, str.Printing_Spooler_Core_Spoolss_Licensing_Network_Default_Printer_Enabled
mov rcx, rbx
lea r8, [rbp + 0x330]
call fcn.14000ad04
xor r10d, r10d
test eax, eax
js 0x14002b5aa
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
lea edx, [r10 + 1]
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011475
mov eax, dword [rbp + 0x330]
xor r11d, r11d
lea r10d, [rax + rax]
test rbx, rbx
je 0x14002b6fe
test r10d, r10d
je 0x14002b707
cmp qword [rsp + 0x38], r11
je 0x14002b711
mov ecx, r11d
mov r9, qword [rsp + 0x38]
cmp dword [rsp + 0x30], r11d
jbe 0x14001142e
mov eax, dword [r9]
add eax, 4
cmp eax, r12d
jb 0x14002b767
mov dword [rbp + 0xac], eax
mov edx, eax
add rdx, r9
cmp rdx, r9
jb 0x14002b767
inc ecx
mov r9, rdx
cmp ecx, dword [rsp + 0x30]
jb 0x140011400
lea r8, [rbp - 0x70]
mov rdx, r12
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011472
mov ecx, dword [rsp + 0x34]
lea rax, [r10 + 4]
add rcx, qword [rsp + 0x38]
add rax, r9
mov r8d, r10d
cmp rax, rcx
ja 0x14002b771
mov rcx, qword [rbp - 0x70]
mov rdx, rbx
mov dword [r9], r10d
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x30]
xor r10d, r10d
test edi, edi
js 0x14002b5af
mov eax, dword [rbp + 0xc]
mov dword [rbp + 0x78], eax
lea rax, [rbp + 0x78]
test rax, rax
je 0x14002b7d5
cmp qword [rsp + 0x38], r10
je 0x14002b77b
mov ecx, r10d
mov r9, qword [rsp + 0x38]
cmp dword [rsp + 0x30], r10d
jbe 0x1400114d8
mov eax, dword [r9]
add eax, 4
cmp eax, r12d
jb 0x14002b7cb
mov dword [rbp + 0x88], eax
mov edx, eax
add rdx, r9
cmp rdx, r9
jb 0x14002b67a
inc ecx
mov r9, rdx
cmp ecx, dword [rsp + 0x30]
jb 0x1400114aa
lea r8, [rbp - 0x70]
mov rdx, r12
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011513
mov ecx, dword [rsp + 0x34]
lea rax, [r9 + 8]
add rcx, qword [rsp + 0x38]
cmp rax, rcx
ja 0x14002b5be
mov rcx, qword [rbp - 0x70]
mov dword [r9], r12d
mov eax, dword [rbp + 0x78]
mov dword [rcx], eax
inc dword [rsp + 0x30]
test edi, edi
js 0x14002b5af
lea rax, [rbp + 0x70]
mov dword [rbp + 0x70], r12d
test rax, rax
je 0x14002b833
cmp qword [rsp + 0x38], r10
je 0x14002b7df
mov ecx, r10d
mov r9, qword [rsp + 0x38]
cmp dword [rsp + 0x30], r10d
jbe 0x140011571
mov eax, dword [r9]
add eax, 4
cmp eax, r12d
jb 0x14002b829
mov dword [rbp + 0x50], eax
mov edx, eax
add rdx, r9
cmp rdx, r9
jb 0x14002b67a
inc ecx
mov r9, rdx
cmp ecx, dword [rsp + 0x30]
jb 0x140011546
lea r8, [rbp - 0x70]
mov rdx, r12
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400115ac
mov ecx, dword [rsp + 0x34]
lea rax, [r9 + 8]
add rcx, qword [rsp + 0x38]
cmp rax, rcx
ja 0x14002b5be
mov rcx, qword [rbp - 0x70]
mov dword [r9], r12d
mov eax, dword [rbp + 0x70]
mov dword [rcx], eax
inc dword [rsp + 0x30]
test edi, edi
js 0x14002b5af
lea r8, [rbp + 0x330]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
mov r10d, dword [rbp - 0x44]
test eax, eax
mov edi, eax
cmovns r10d, dword [rbp + 0x330]
mov dword [rbp - 0x44], r10d
js 0x14002b83d
lea r8, [rsp + 0x28]
mov dword [rbp + 0x330], r10d
mov edx, 8
call fcn.14000ad5c
test eax, eax
mov r9d, r10d
mov edi, eax
cmovns r9d, dword [rsp + 0x28]
mov dword [rbp - 0x44], r9d
js 0x14002b83d
lea r8, [rbp + 0x330]
mov edx, r9d
mov ecx, r10d
call fcn.14000ad5c
xor r10d, r10d
mov edi, eax
test eax, eax
js 0x14002b840
lea r8, [rsp + 0x28]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r9d, dword [rsp + 0x28]
mov dword [rbp - 0x44], r9d
js 0x14002b840
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r9d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002b840
lea r8, [rsp + 0x28]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r9d, dword [rsp + 0x28]
mov dword [rbp - 0x44], r9d
js 0x14002b840
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r9d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002b840
lea r8, [rsp + 0x28]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r9d, dword [rsp + 0x28]
mov dword [rbp - 0x44], r9d
js 0x14002b840
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r9d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002b840
lea r8, [rsp + 0x28]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
test eax, eax
mov edi, eax
cmovns r9d, dword [rsp + 0x28]
mov dword [rbp - 0x44], r9d
js 0x14002b840
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r9d
call fcn.14000ad5c
mov edi, eax
mov eax, dword [rbp + 0x330]
test edi, edi
cmovns eax, dword [rbp + 0x330]
mov dword [rbp - 0x40], eax
test edi, edi
js 0x14002b5af
mov r12, r10
mov qword [rbp - 0x30], r10
mov r14d, r10d
mov qword [rbp + 0xb8], r10
mov qword [rbp + 0x10], r10
mov r15d, r10d
mov dword [rbp + 0x330], r10d
mov r13, r10
mov qword [rbp - 0x60], r10
mov dword [rbp - 0x80], r10d
mov qword [rbp + 0x20], r10
mov qword [rsp + 0x78], r10
mov dword [rbp - 0x38], r10d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x168], rax
mov dword [rbp - 0x58], 8
mov edx, dword [rsp + 0x34]
lea r8, [rbp - 0x58]
mov ecx, 8
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14001186c
mov eax, dword [rbp - 0x58]
add rax, 7
and eax, 0xfffffff8
cmp eax, dword [rbp - 0x58]
jb 0x14002b84b
mov dword [rbp - 0x58], eax
mov ebx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
je 0x14002b855
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x70]
mov eax, dword [rsp + 0x30]
lea edx, [r10 + 4]
mov rcx, rbx
mov dword [rbx], eax
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011863
mov rcx, qword [rsp + 0x70]
lea r8, [rsp + 0x70]
mov eax, dword [rsp + 0x34]
mov dword [rcx], eax
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140011863
mov ecx, dword [rbp - 0x58]
mov rax, qword [rbp + 0x168]
mov qword [rcx + rbx - 8], rax
mov r8d, dword [rsp + 0x34]
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x70]
call sub.msvcrt.dll_memcpy
mov r14d, dword [rbp - 0x58]
xor r10d, r10d
mov r12, rbx
mov qword [rbp - 0x30], rbx
mov ebx, r10d
test rbx, rbx
jne 0x14002b85f
or edi, 0x10000000
jl 0x140012d32
mov qword [rbp + 0x1a8], r10
mov rsi, r10
mov qword [rbp + 0x238], r10
mov qword [rbp + 0x1b8], r10
mov qword [rbp + 0x248], r10
mov qword [rbp + 0xd0], r10
mov qword [rbp + 0x190], r10
mov qword [rsp + 0x70], r10
test r12, r12
je 0x14002b87b
mov edi, r14d
test r14d, r14d
je 0x14002b9ee
lea rax, [rdi + 8]
mov rcx, rax
mov qword [rbp - 0x50], rax
call fcn.14000ab60
xor r10d, r10d
mov qword [rsp + 0x28], rax
mov r15, rax
test rax, rax
je 0x14002b9ee
mov dl, r10b
mov ecx, r10d
test r14d, r14d
je 0x1400118fa
xor dl, byte [rcx + r12]
inc rcx
cmp rcx, rdi
jb 0x1400118ee
xor r14d, r14d
or r11d, 0xffffffff
mov r8, rdi
mov dword [rbp + 0x348], r11d
mov ebx, r14d
mov r9, r12
mov dword [rsp + 0x54], ebx
mov r10, rax
mov r12d, r14d
mov r13d, r14d
and r8d, 7
jne 0x14002b885
mov r14, rdi
shr r14, 3
test r14, r14
je 0x140011c6e
lea rsi, [r10 + 7]
lea r15, [r9 + 2]
movzx eax, byte [r15 - 1]
movzx r10d, byte [r15 - 2]
movzx r9d, byte [r15 + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [r15]
lea r15, [r15 + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [r15 - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [r15 - 5]
or r9d, eax
movzx eax, byte [r15 - 4]
shl r9d, 8
or r9d, eax
movzx eax, byte [r15 - 3]
shl r9d, 8
or r9d, eax
xor r11d, r9d
lea eax, [r11 + 0x36fdf9bd]
rol eax, 8
imul ecx, eax, 0x3bd6
mov eax, r11d
ror eax, 9
add ecx, eax
mov eax, 0x36fdf9bd
xor ecx, r10d
xor ebx, ecx
sub eax, ebx
rol eax, 7
imul ecx, eax, 0xdb6b
mov eax, ebx
ror eax, 0xb
add ecx, eax
xor r11d, ecx
mov eax, r11d
mov r8d, r11d
xor eax, 0xdb6b
ror r8d, 0xa
imul ecx, eax, 0xf9bd
add r8d, ecx
xor ebx, r8d
mov r8d, 0xdb6b3bd6
lea eax, [rbx + 0x2494c42a]
ror eax, 1
imul ecx, eax, 0x36fd
mov eax, ebx
rol eax, 0xe
xor ecx, eax
mov eax, 0x36fdf9bd
xor r11d, ecx
mov ecx, r11d
xor ecx, r8d
sub eax, ecx
xor ebx, eax
mov eax, ebx
not eax
ror eax, 0xe
add eax, 0xdb6b
imul eax, eax, 0x3bd6
xor r11d, eax
mov eax, r11d
xor eax, r8d
ror eax, 0xf
imul ecx, eax, 0xf9bd
mov eax, r11d
rol eax, 6
xor ecx, eax
xor ebx, ecx
lea eax, [rbx + 0x24948d2d]
xor r11d, eax
mov eax, r11d
xor eax, 0xf9bd
imul ecx, eax, 0x3bd6
mov eax, r11d
shr eax, 6
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x3bd6
rol eax, 3
imul ecx, eax, 0xdb6b
mov eax, ebx
rol eax, 0xc
sub ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x2494c42a]
rol eax, 0xd
imul ecx, eax, 0xf9bd
mov eax, r11d
ror eax, 0xf
xor ecx, eax
mov eax, r8d
xor ebx, ecx
sub eax, ebx
rol eax, 3
imul ecx, eax, 0x36fd
mov eax, ebx
rol eax, 9
sub ecx, eax
xor r11d, ecx
lea eax, [r11 - 0xf9bd]
rol eax, 3
imul ecx, eax, 0x3bd6
mov eax, r11d
shr eax, 0xf
xor ecx, eax
xor ebx, ecx
lea eax, [rbx - 0xf9bd]
imul ecx, eax, 0xdb6b
mov eax, ebx
shr eax, 0xd
sub ecx, eax
mov eax, r8d
xor r11d, ecx
sub eax, r11d
ror eax, 9
imul ecx, eax, 0xf9bd
mov eax, r11d
ror eax, 0xb
xor ecx, eax
xor ebx, ecx
lea eax, [rbx + 0x24948d2d]
xor r11d, eax
mov eax, r11d
mov r8d, r11d
xor eax, 0xdb6b
ror r8d, 7
imul ecx, eax, 0x3bd6
sub ecx, r8d
xor ebx, ecx
mov eax, ebx
xor eax, 0x36fd
rol eax, 4
imul ecx, eax, 0xdb6b
mov eax, ebx
ror eax, 0x10
sub ecx, eax
mov eax, 0xdb6b3bd6
xor r11d, ecx
sub eax, r11d
ror eax, 0xa
imul ecx, eax, 0xf9bd
mov eax, r11d
ror eax, 4
add ecx, eax
xor ebx, ecx
lea eax, [rbx + 0x2494c42a]
ror eax, 4
imul ecx, eax, 0x36fd
mov eax, ebx
ror eax, 9
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x36fdf9bd
rol eax, 8
imul ecx, eax, 0x3bd6
mov eax, r11d
rol eax, 2
sub ecx, eax
mov eax, 0x36fdf9bd
xor ebx, ecx
sub eax, ebx
ror eax, 0xb
imul ecx, eax, 0xdb6b
mov eax, ebx
ror eax, 0xc
sub ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0xdb6b
imul ecx, eax, 0xf9bd
mov eax, r11d
shr eax, 8
xor ecx, eax
xor ebx, ecx
xor r11d, ebx
xor ebx, r13d
mov dword [rsp + 0x54], ebx
xor r11d, 0xed96c26b
xor r11d, r12d
mov r13d, r10d
mov dword [rbp + 0x348], r11d
mov r12d, r9d
mov byte [rsi - 4], bl
mov al, byte [rbp + 0x348]
ror dword [rsp + 0x54], 8
mov byte [rsi], al
lea rsi, [rsi + 8]
ror dword [rbp + 0x348], 8
mov al, byte [rsp + 0x54]
mov byte [rsi - 0xd], al
mov al, byte [rbp + 0x348]
ror dword [rsp + 0x54], 8
mov byte [rsi - 9], al
ror dword [rbp + 0x348], 8
mov al, byte [rsp + 0x54]
mov byte [rsi - 0xe], al
ror dword [rsp + 0x54], 8
mov al, byte [rbp + 0x348]
mov byte [rsi - 0xa], al
ror dword [rbp + 0x348], 8
mov al, byte [rsp + 0x54]
mov byte [rsi - 0xf], al
mov al, byte [rbp + 0x348]
mov byte [rsi - 0xb], al
mov ebx, dword [rsp + 0x54]
mov r11d, dword [rbp + 0x348]
ror ebx, 8
ror r11d, 8
mov dword [rsp + 0x54], ebx
mov dword [rbp + 0x348], r11d
sub r14, 1
jne 0x140011940
mov rsi, qword [rsp + 0x70]
mov r15, qword [rsp + 0x28]
movzx eax, dl
mov qword [r15 + rdi], rax
mov rdi, qword [rbp - 0x50]
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0xd0], r15
lea rax, [0x1400a94f0]
mov r12d, 8
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x238], r12
lea r14, [0x1400a9450]
mov r13d, 0xa0
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x248], r13
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
lea r8d, [r12 + 0x28]
mov edx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
je 0x14002b953
mov dword [rax], edi
mov edi, edi
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, edi
mov edx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002b95d
mov qword [rbx + 8], rax
mov r8d, edi
mov rdx, r15
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rbx + 0x10], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, r13d
mov edx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002b95d
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [r14]
lea edx, [r12 + 0x78]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + rdx - 0x10], xmm1
movups xmm0, xmmword [r14 + rdx]
movups xmmword [rax + rdx], xmm0
movups xmm1, xmmword [r14 + rdx + 0x10]
movups xmmword [rax + rdx + 0x10], xmm1
mov dword [rbx + 0x20], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, r12d
mov edx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002b95d
mov qword [rbx + 0x28], rax
movsd xmm0, qword [0x1400a94f0]
mov rsi, rbx
movsd qword [rax], xmm0
mov edi, r10d
mov ebx, r10d
test rbx, rbx
jne 0x14002b967
mov r13, qword [rbp - 0x60]
test edi, edi
js 0x140011dfc
mov qword [rbp + 0xb8], rsi
mov rsi, r10
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x140011e26
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0xd0], r10
test rsi, rsi
jne 0x14002b9f8
mov r15d, dword [rbp + 0x330]
or edi, 0x10000000
jl 0x140012d32
mov rsi, qword [rbp + 0xb8]
lea r8, [rbp + 0x330]
mov r14d, 4
mov ecx, r14d
mov dword [rbp + 0x330], r14d
mov edx, dword [rsi]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002ba7f
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002ba7f
mov edx, dword [rsi + 0x10]
lea r8, [rbp + 0x330]
mov ecx, dword [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002ba7f
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002ba7f
mov edx, dword [rsi + 0x20]
lea r8, [rbp + 0x330]
mov ecx, dword [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
mov eax, dword [rbp + 0x18]
test edi, edi
cmovns eax, dword [rbp + 0x330]
mov dword [rbp + 0x18], eax
test edi, edi
js 0x140012040
mov ebx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
je 0x14002ba87
mov qword [rbp + 0x330], rax
lea r8, [rbp + 0x330]
mov eax, dword [rsi]
mov rdx, r14
mov rcx, rbx
mov dword [rbx], eax
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140012037
mov r8d, dword [rsi]
mov rdx, qword [rsi + 8]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov edx, dword [rsi]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
xor r10d, r10d
mov edi, eax
test eax, eax
js 0x140012037
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov eax, dword [rsi + 0x10]
mov rdx, r14
mov dword [rcx], eax
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140012037
mov r8d, dword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov edx, dword [rsi + 0x10]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
xor r10d, r10d
mov edi, eax
test eax, eax
js 0x140012037
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov eax, dword [rsi + 0x20]
mov rdx, r14
mov dword [rcx], eax
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140012037
mov r8d, dword [rsi + 0x20]
mov rdx, qword [rsi + 0x28]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov edx, dword [rsi + 0x20]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
xor r10d, r10d
mov edi, eax
test eax, eax
js 0x140012037
mov r15d, dword [rbp + 0x18]
mov qword [rbp + 0x10], rbx
mov ebx, r10d
test rbx, rbx
jne 0x14002ba91
or edi, 0x10000000
jl 0x140012d32
mov ebx, r10d
mov qword [rbp + 0x1c8], r10
mov dword [rbp + 0xe0], ebx
mov r11d, r10d
mov dword [rbp + 0x108], r10d
mov qword [rbp + 0x240], r10
mov dword [rbp + 4], 8
mov edx, dword [rbp - 0x40]
lea r8, [rbp + 4]
mov ecx, 8
call fcn.14000ad5c
mov edi, eax
or edi, 0x10000000
jl 0x1400122da
mov eax, dword [rbp + 4]
add rax, 7
and eax, 0xfffffff8
cmp eax, dword [rbp + 4]
jb 0x14002baad
mov dword [rbp + 0x8c], eax
mov edx, ecx
lea r8, [rbp + 0x8c]
mov ecx, eax
call fcn.14000ad5c
mov r9d, dword [rbp + 0x64]
test eax, eax
mov edi, eax
cmovns r9d, dword [rbp + 0x8c]
mov dword [rbp + 0x64], r9d
test edi, edi
js 0x140012d32
cmp qword [rsp + 0x38], r10
je 0x14002babb
cmp dword [rsp + 0x30], 1
jbe 0x14002babb
mov rcx, qword [rsp + 0x38]
xor r14d, r14d
mov qword [rbp + 0x330], rcx
lea r12d, [r14 + 4]
mov esi, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002bac5
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, esi
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002bac5
mov rcx, qword [rbp + 0x330]
inc r10d
cmp r10d, 1
jb 0x140012101
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002bac5
mov rax, qword [rbp + 0x330]
test r10d, r10d
mov r11d, r10d
mov dword [rbp + 0x108], r10d
cmove rax, r14
mov r10, r14
mov qword [rbp + 0x1c8], rax
test edi, edi
js 0x14002baf6
cmp dword [rsp + 0x30], 2
jbe 0x14002bacd
mov rcx, qword [rsp + 0x38]
mov r8d, r10d
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x14002baf1
mov ecx, dword [rcx]
add rcx, rdx
cmp rcx, rdx
jb 0x14002baf1
inc r8d
mov qword [rbp + 0x330], rcx
cmp r8d, 2
jb 0x1400121a4
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
mov r14, r12
call fcn.14000ad74
xor ecx, ecx
mov edi, eax
test eax, eax
js 0x14002bad4
mov rax, qword [rbp + 0x330]
test r10d, r10d
mov ebx, r10d
mov r10d, ecx
cmove rax, rcx
mov dword [rbp + 0xe0], ebx
mov qword [rbp + 0x240], rax
test edi, edi
js 0x140012d32
lea r8, [rbp + 0x330]
mov dword [rbp + 0x330], r14d
mov edx, r9d
mov ecx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002badc
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002badc
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002badc
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14002badc
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, ebx
call fcn.14000ad5c
mov edi, eax
mov eax, dword [rbp + 0xa4]
test edi, edi
cmovns eax, dword [rbp + 0x330]
mov dword [rbp + 0xa4], eax
test edi, edi
js 0x140012d32
cmp eax, 0x400000
ja 0x14002bae7
mov dword [rbp - 0x80], eax
test edi, edi
js 0x140012d32
mov ebx, dword [rbp - 0x80]
mov edi, r10d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002bafe
mov r13, rax
mov qword [rbp - 0x60], rax
or edi, 0x10000000
jl 0x140012d32
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x14002bb08
test r13, r13
je 0x14002bb08
lea r8, [rbp + 0x1d8]
mov ecx, 1
lea rdx, [0x1400735c8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
xor esi, esi
test eax, eax
je 0x14002bb12
mov rcx, qword [rbp + 0x1d8]
lea rdx, [0x1400735e0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14002bb12
mov eax, dword [rbp - 0x80]
mov rcx, rbx
mov dword [rbp + 0x2bc], eax
mov qword [rbp + 0x2a8], rdi
mov dword [rbp + 0x2b8], r15d
mov qword [rbp + 0x2b0], r13
mov dword [rbp + 0x2c0], esi
call qword [0x1400719c8]
lea r8d, [rsi + 0x20]
xor r9d, r9d
lea rdx, [rbp + 0x2a8]
lea ecx, [r8 + 0x66]
call rbx
mov r9d, dword [rbp - 0x80]
mov edi, eax
xor r10d, r10d
or edi, 0x10000000
cmovns r9d, dword [rbp + 0x2bc]
mov dword [rbp - 0x80], r9d
cmp edi, 0xd0000023
je 0x14002bb3c
test edi, edi
js 0x140012d32
mov dword [rbp + 0x330], r10d
mov rsi, r10
mov qword [rsp + 0x28], r13
cmp r9d, r14d
jb 0x14002bb4a
mov r12d, dword [r13]
lea r8, [rsp + 0x28]
mov rdx, r14
mov rcx, r13
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400126eb
lea r8, [rbp + 0x330]
xor ecx, ecx
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400126eb
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r12d
jb 0x14002bb4a
mov rax, qword [rsp + 0x28]
lea r8, [rsp + 0x28]
mov rcx, rax
mov qword [rsp + 0x70], rax
mov edx, r12d
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400126eb
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400126eb
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r14d
jb 0x14002bb4a
mov rcx, qword [rsp + 0x28]
lea r8, [rsp + 0x28]
mov rdx, r14
mov r15d, dword [rcx]
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400126eb
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400126eb
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r15d
jb 0x14002bb4a
mov r13, qword [rsp + 0x28]
lea r8, [rsp + 0x28]
mov rcx, r13
mov edx, r15d
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400126eb
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400126eb
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r14d
jb 0x14002bb4a
mov rcx, qword [rsp + 0x28]
lea r8, [rsp + 0x28]
mov edx, 4
mov r14d, dword [rcx]
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x1400126eb
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400126eb
mov ecx, dword [rbp + 0x330]
mov eax, r9d
sub eax, ecx
cmp eax, r14d
jb 0x14002bb4a
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400126eb
cmp r9d, dword [rbp + 0x330]
jne 0x14002bb4a
lea ecx, [r14 + r15]
mov eax, r9d
add ecx, r12d
add rcx, 0xc
cmp rcx, rax
jne 0x14002bb4a
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
je 0x14002bb54
mov edi, r10d
cmp qword [rsp + 0x70], r10
je 0x14002bb68
mov dword [rax], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
mov r8d, r12d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002bb5e
mov qword [rbx + 8], rax
mov rdx, qword [rsp + 0x70]
mov r8d, r12d
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r10d, r10d
test r13, r13
je 0x14002bb74
mov dword [rbx + 0x10], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002bb5e
mov qword [rbx + 0x18], rax
mov r8, r15
mov rdx, r13
mov rcx, rax
mov edi, r10d
call sub.msvcrt.dll_memcpy
xor r10d, r10d
mov r15, qword [rsp + 0x28]
test r15, r15
je 0x14002bb81
mov dword [rbx + 0x20], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002bb5e
mov qword [rbx + 0x28], rax
mov r8, r14
mov rdx, r15
mov rcx, rax
mov edi, r10d
call sub.msvcrt.dll_memcpy
xor r10d, r10d
mov rsi, rbx
mov rbx, r10
test rbx, rbx
jne 0x14002bb8e
test edi, edi
js 0x1400126e2
mov qword [rbp + 0x20], rsi
mov rsi, r10
test rsi, rsi
jne 0x14002bc15
or edi, 0x10000000
jl 0x140012d32
mov rax, qword [rbp + 0x20]
mov rbx, r10
mov qword [rbp + 0x38], rbx
mov edi, r10d
mov qword [rbp + 0x178], r10
test rax, rax
je 0x14002bc9c
mov rsi, qword [rax + 8]
mov qword [rbp - 0x78], rsi
test rsi, rsi
je 0x14002bc9c
cmp dword [rax], r10d
je 0x14002bc9c
mov r14d, dword [rax]
test r14, r14
je 0x14002bd98
add r14, 0xfffffffffffffff8
mov rcx, r14
mov qword [rbp - 0x50], r14
call fcn.14000ab60
xor r10d, r10d
mov qword [rsp + 0x70], rax
mov r15, rax
test rax, rax
je 0x14002bd94
xor r11d, r11d
mov dl, r10b
mov r8, r14
mov byte [rbp + 0x330], dl
mov dword [rsp + 0x4c], r11d
mov r9, rsi
mov dword [rbp - 0x40], r11d
mov r10, rax
mov esi, r11d
mov ebx, r11d
and r8d, 7
jne 0x14002bca6
or r13d, 0xffffffff
mov dword [rbp + 0x338], ebx
mov r12, r14
shr r12, 3
test r12, r12
je 0x140012acb
mov edx, dword [rbp - 0x40]
lea r15, [r10 + 7]
lea r14, [r9 + 2]
movzx eax, byte [r14 - 1]
mov r9d, 0x532d7f78
movzx r11d, byte [r14 - 2]
movzx r10d, byte [r14 + 2]
shl r11d, 8
or r11d, eax
shl r10d, 8
movzx eax, byte [r14]
lea r14, [r14 + 8]
shl r11d, 8
or r11d, eax
movzx eax, byte [r14 - 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [r14 - 5]
or r10d, eax
xor esi, r11d
movzx eax, byte [r14 - 4]
shl r10d, 8
or r10d, eax
movzx eax, byte [r14 - 3]
shl r10d, 8
or r10d, eax
xor ebx, r10d
xor ebx, esi
xor ebx, 0x5384b529
lea eax, [rbx - 0x532d7f78]
rol eax, 5
imul ecx, eax, 0xca51
mov eax, ebx
rol eax, 0xa
add ecx, eax
xor esi, ecx
lea eax, [rsi + 0xa9ca51]
ror eax, 9
imul ecx, eax, 0x532d
mov eax, esi
rol eax, 2
sub ecx, eax
xor ebx, ecx
lea eax, [rbx - 0xca51]
imul ecx, eax, 0x7f78
mov eax, ebx
shr eax, 0xd
sub ecx, eax
xor esi, ecx
mov eax, esi
xor eax, 0x532d
rol eax, 6
imul ecx, eax, 0xa9
mov eax, esi
rol eax, 2
sub ecx, eax
mov eax, 0xa9ca51
xor ebx, ecx
mov ecx, ebx
xor ecx, r9d
sub eax, ecx
xor esi, eax
mov eax, esi
mov r8d, esi
xor eax, 0xca51
ror r8d, 6
imul ecx, eax, 0x532d
xor r8d, ecx
xor ebx, r8d
lea eax, [rbx + 0xa9ca51]
ror eax, 0xf
imul ecx, eax, 0x7f78
mov eax, ebx
rol eax, 2
add ecx, eax
xor esi, ecx
lea eax, [rsi - 0x532d7f78]
ror eax, 0xe
imul ecx, eax, 0xa9
mov eax, esi
rol eax, 8
sub ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, r9d
mov r8d, 0x532d
ror eax, 0xc
imul ecx, eax, 0xca51
mov eax, ebx
ror eax, 0xa
xor ecx, eax
xor esi, ecx
mov eax, esi
xor eax, 0xa9
imul ecx, eax, 0x532d
mov eax, esi
shr eax, 0xa
xor ecx, eax
xor ebx, ecx
mov eax, ebx
mov r9d, ebx
not eax
ror eax, 5
add eax, 0x7f78
imul eax, eax, 0xa9
xor esi, eax
xor r9d, esi
xor r9d, 0x5384b529
mov eax, r9d
ror eax, 5
sub eax, r8d
imul eax, eax, 0xa9
xor ebx, eax
lea eax, [rbx - 0x532d]
rol eax, 3
imul ecx, eax, 0x7f78
mov eax, ebx
shr eax, 7
xor ecx, eax
xor r9d, ecx
lea eax, [r9 - 0x532d7f78]
rol eax, 0xe
imul ecx, eax, 0xa9
mov eax, r9d
ror eax, 0xc
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x532d7f78
rol eax, 9
imul ecx, eax, 0xca51
mov eax, ebx
ror eax, 2
add ecx, eax
xor r9d, ecx
lea eax, [r9 + 0xa9ca51]
rol eax, 8
imul ecx, eax, 0x532d
mov eax, r9d
ror eax, 6
sub ecx, eax
mov eax, 0xa9ca51
xor ebx, ecx
sub eax, ebx
ror eax, 0xe
imul ecx, eax, 0x7f78
mov eax, ebx
ror eax, 0xc
sub ecx, eax
xor r9d, ecx
mov eax, r9d
xor eax, r8d
rol eax, 5
imul ecx, eax, 0xa9
mov eax, r9d
rol eax, 0xf
xor ecx, eax
xor ebx, ecx
lea eax, [rbx - 0x532d7f78]
rol eax, 0xa
imul ecx, eax, 0xca51
mov eax, ebx
ror eax, 4
xor ecx, eax
xor r9d, ecx
mov eax, r9d
not eax
ror eax, 2
add eax, r8d
imul eax, eax, 0xca51
xor ebx, eax
mov eax, ebx
mov r8d, ebx
xor eax, 0xca51
ror r8d, 6
imul ecx, eax, 0x7f78
xor ebx, r13d
mov dword [rbp + 0x338], ebx
mov r13d, r10d
add r8d, ecx
xor r8d, edx
mov edx, r11d
xor r9d, r8d
mov dword [rsp + 0x4c], r9d
mov byte [r15 - 4], r9b
mov al, byte [rbp + 0x338]
ror dword [rsp + 0x4c], 8
mov byte [r15], al
lea r15, [r15 + 8]
ror dword [rbp + 0x338], 8
mov al, byte [rsp + 0x4c]
mov byte [r15 - 0xd], al
mov al, byte [rbp + 0x338]
ror dword [rsp + 0x4c], 8
mov byte [r15 - 9], al
ror dword [rbp + 0x338], 8
mov al, byte [rsp + 0x4c]
mov byte [r15 - 0xe], al
ror dword [rsp + 0x4c], 8
mov al, byte [rbp + 0x338]
mov byte [r15 - 0xa], al
ror dword [rbp + 0x338], 8
mov al, byte [rsp + 0x4c]
mov byte [r15 - 0xf], al
mov al, byte [rbp + 0x338]
mov byte [r15 - 0xb], al
mov esi, dword [rsp + 0x4c]
mov ebx, dword [rbp + 0x338]
ror esi, 8
ror ebx, 8
mov dword [rsp + 0x4c], esi
mov dword [rbp + 0x338], ebx
sub r12, 1
jne 0x1400127b2
mov dl, byte [rbp + 0x330]
mov r14, qword [rbp - 0x50]
mov r15, qword [rsp + 0x70]
xor r10d, r10d
mov eax, r10d
test r14, r14
je 0x140012ae2
xor dl, byte [rax + r15]
inc rax
cmp rax, r14
jb 0x140012ad6
mov rcx, qword [rbp - 0x78]
movzx eax, dl
cmp rax, qword [r14 + rcx]
jne 0x14002bd72
mov rbx, r15
mov qword [rbp + 0x178], r14
mov qword [rbp + 0x38], rbx
mov r15, r10
mov esi, edi
test r15, r15
jne 0x14002bd80
test esi, esi
js 0x14002bd98
mov eax, dword [rbp + 0x178]
mov qword [rsp + 0x78], rbx
mov rbx, r10
mov qword [rbp + 0x38], rbx
mov dword [rbp - 0x38], eax
test rbx, rbx
jne 0x14002bda2
or edi, 0x10000000
jl 0x140012d32
mov r9, qword [rsp + 0x78]
mov r11d, 4
mov dword [rbp + 0x330], r10d
mov qword [rsp + 0x70], r9
cmp dword [rbp - 0x38], r11d
jb 0x14002bdea
mov r13d, dword [r9]
lea r8, [rsp + 0x70]
mov edx, r11d
mov rcx, r9
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140012d2e
lea r8, [rbp + 0x330]
xor ecx, ecx
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x140012d2e
mov eax, dword [rbp - 0x38]
sub eax, dword [rbp + 0x330]
cmp eax, r11d
jb 0x14002bdea
mov rcx, qword [rsp + 0x70]
lea r8, [rsp + 0x70]
mov r14d, dword [rcx]
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140012d2e
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x140012d2e
mov eax, dword [rbp - 0x38]
mov ecx, dword [rbp + 0x330]
sub eax, ecx
cmp eax, r14d
jb 0x14002bdea
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x140012d2e
mov edx, dword [rbp - 0x38]
mov rbx, qword [rsp + 0x70]
lea rcx, [rdx + r9]
lea rax, [r14 + rbx]
cmp rcx, rax
jb 0x14002bdea
sub rdx, r14
sub rdx, rbx
add rdx, r9
cmp rdx, 8
jae 0x14002bdea
mov r15, r10
mov edi, r10d
mov r12d, r10d
test rbx, rbx
je 0x140012cd0
lea r8, [rbp + 0x330]
mov edx, r14d
mov rcx, rbx
mov r9, rbx
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x140012d20
mov rcx, qword [rbp + 0x330]
cmp rbx, rcx
jae 0x140012cc7
lea rax, [r9 + 4]
cmp rax, r9
jb 0x14002bdd6
cmp rax, rcx
ja 0x14002bdcc
mov eax, dword [r9]
add eax, r11d
cmp eax, r11d
jb 0x14002bdc2
mov dword [rbp + 0x278], eax
mov edx, eax
add rdx, r9
cmp rdx, r9
jb 0x14002bdd6
mov r9, rdx
mov edi, r10d
cmp rdx, rcx
ja 0x14002bdcc
inc r12d
cmp rdx, rcx
jb 0x140012c77
cmp r9, rcx
jne 0x14002bdcc
test r14d, r14d
je 0x140012cfe
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r15, rax
test rax, rax
je 0x14002bde0
mov edi, r10d
test rbx, rbx
je 0x140012d14
mov r8, r14
mov rdx, rbx
mov rcx, r15
call sub.msvcrt.dll_memcpy
xor r10d, r10d
mov qword [rbp - 0x20], r15
mov dword [rbp - 0x24], r14d
mov dword [rbp - 0x28], r12d
test edi, edi
js 0x140012d2e
cmp r13d, dword [rbp - 0x28]
jne 0x14002bdea
bts edi, 0x1c
mov r14d, 0x8007007a
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140012d58
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rsi, qword [rbp + 0xb8]
test rsi, rsi
je 0x140012df1
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140012d8c
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 8], r10
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x140012db0
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 0x18], r10
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x140012dd3
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0xb8], r10
mov rbx, qword [rbp + 0x10]
test rbx, rbx
je 0x140012e11
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rbx, qword [rbp - 0x60]
test rbx, rbx
je 0x140012e31
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rsi, qword [rbp + 0x20]
test rsi, rsi
je 0x140012ec0
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140012e62
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 8], r10
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x140012e86
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 0x18], r10
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x140012ea9
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x140012ee1
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
test edi, edi
js 0x1400132e7
cmp dword [rbp - 0x28], 1
jb 0x14002bdf4
mov r12d, 4
cmp qword [rbp - 0x20], r10
je 0x14002bdfe
cmp dword [rbp - 0x28], r10d
jbe 0x14002bdfe
mov rbx, qword [rbp - 0x20]
lea r8, [rbp + 0x330]
mov edx, r12d
mov qword [rbp + 0x330], rbx
mov rcx, rbx
mov r9d, dword [rbx]
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002be08
mov rax, qword [rbp + 0x330]
test r9d, r9d
mov dword [rbp + 0x128], r9d
cmove rax, r10
mov qword [rbp + 0x1e8], rax
test edi, edi
js 0x1400132e7
cmp r9d, r12d
jne 0x14002be1b
mov eax, dword [rax]
mov dword [rbp - 8], eax
test edi, edi
js 0x1400132e7
mov edi, dword [rbp - 8]
cmp edi, 0xd0000023
cmove edi, r14d
mov dword [rbp - 8], edi
cmp edi, r14d
je 0x140012f8e
test edi, edi
js 0x1400132e7
cmp dword [rbp - 0x28], 6
jne 0x14002bdf4
cmp qword [rbp - 0x20], r10
je 0x14002be25
mov rcx, qword [rbp - 0x20]
mov r9d, r10d
mov qword [rbp + 0x330], rcx
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002be2f
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r10d
call fcn.14000ad74
xor r10d, r10d
mov edi, eax
test eax, eax
js 0x14002be32
mov rcx, qword [rbp + 0x330]
inc r9d
cmp r9d, 1
jb 0x140012fb0
mov r9d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002be32
mov rax, qword [rbp + 0x330]
test r9d, r9d
mov dword [rbp + 0xe8], r9d
cmove rax, r10
mov qword [rbp + 0x250], rax
test edi, edi
js 0x1400132e7
cmp r9d, 8
jne 0x14002be1b
mov rax, qword [rax]
mov qword [rbp + 0x218], rax
test edi, edi
js 0x1400132e7
cmp qword [rbp - 0x20], r10
je 0x14002be45
mov rcx, qword [rbp - 0x20]
mov r8d, r10d
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x14002be62
mov ecx, dword [rcx]
add rcx, rdx
cmp rcx, rdx
jb 0x14002be62
inc r8d
mov qword [rbp + 0x330], rcx
cmp r8d, 2
jb 0x14001306c
mov r9d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002be4f
mov rax, qword [rbp + 0x330]
test r9d, r9d
mov dword [rbp + 0x110], r9d
cmove rax, r10
mov qword [rbp + 0x1f8], rax
test edi, edi
js 0x1400132e7
cmp r9d, r12d
jne 0x14002be1b
mov eax, dword [rax]
mov dword [rbp + 0xdc], eax
test edi, edi
js 0x1400132e7
cmp qword [rbp - 0x20], r10
je 0x14002be6c
mov rcx, qword [rbp - 0x20]
mov r8d, r10d
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x14002bee6
mov ecx, dword [rcx]
add rcx, rdx
cmp rcx, rdx
jb 0x14002bee6
inc r8d
mov qword [rbp + 0x330], rcx
cmp r8d, 3
jb 0x140013101
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
xor ebx, ebx
mov edi, eax
test eax, eax
js 0x14002be76
mov r11, qword [rbp + 0x330]
test r10d, r10d
mov dword [rbp + 0xf0], r10d
cmove r11, rbx
mov qword [rbp + 0x280], r11
test eax, eax
js 0x14002bea6
mov rcx, qword [rbp - 0x20]
mov r8d, ebx
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x14002beb8
mov ecx, dword [rcx]
add rcx, rdx
cmp rcx, rdx
jb 0x14002beb8
inc r8d
mov qword [rbp + 0x330], rcx
cmp r8d, r12d
jb 0x140013175
mov r9d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002be89
mov rax, qword [rbp + 0x330]
test r9d, r9d
mov dword [rbp + 0x120], r9d
cmove rax, rbx
mov qword [rbp + 0x208], rax
test edi, edi
js 0x14002bea6
cmp r9d, r12d
jne 0x14002be9c
mov eax, dword [rax]
mov dword [rbp + 0x118], eax
test edi, edi
js 0x14002bea6
mov rcx, qword [rbp - 0x20]
mov r8d, ebx
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x14002bed5
mov ecx, dword [rcx]
add rcx, rdx
cmp rcx, rdx
jb 0x14002bed5
inc r8d
mov qword [rbp + 0x330], rcx
cmp r8d, 5
jb 0x1400131ff
mov r9d, dword [rcx]
lea r8, [rbp + 0x330]
mov rdx, r12
call fcn.14000ad74
mov edi, eax
test eax, eax
js 0x14002bec2
mov rax, qword [rbp + 0x330]
test r9d, r9d
mov dword [rbp + 0xf8], r9d
cmove rax, rbx
mov qword [rbp + 0x260], rax
test edi, edi
js 0x14002bea6
cmp r9d, r12d
jne 0x14002be9c
mov eax, dword [rax]
mov dword [rbp + 0x9c], eax
test edi, edi
js 0x14002bea6
mov rax, qword [rbp + 0x218]
cmp qword [rbp + 0x140], rax
jne 0x14002bedf
mov eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x118]
mov dword [rbp + 0xc], eax
mov eax, dword [rbp + 0xdc]
mov dword [rbp + 0xb0], eax
mov dword [rbp + 0xa8], ecx
cmp ecx, r12d
ja 0x14002bea3
cmp r10d, r12d
ja 0x14002bea3
mov rcx, qword [rbp + 0x148]
mov rdx, r11
mov r8d, r10d
call sub.msvcrt.dll_memcpy
mov eax, dword [rbp - 8]
xor r10d, r10d
test eax, eax
cmovne edi, eax
mov r14, qword [rsp + 0x20]
mov r13, qword [rsp + 0x40]
lea r12, [0x1400a94f8]
lea rsi, [0x1400a93b0]
mov rbx, qword [rsp + 0x38]
mov qword [rsp + 0x30], 0
test rbx, rbx
je 0x14001332e
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsp + 0x38], r10
mov rbx, qword [rbp - 0x20]
mov qword [rbp - 0x28], 0
test rbx, rbx
je 0x14001335a
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp - 0x20], r10
test r14, r14
je 0x140013376
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
test r13, r13
je 0x140013392
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
test edi, edi
js 0x14002e3e2
cmp dword [rbp + 0xc], r10d
jne 0x14002bef0
mov eax, dword [rbp + 0xa8]
xor esi, esi
mov ebx, dword [rbp + 0xb0]
mov r14d, 0x8007007a
mov dword [rbp + 0x270], eax
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x100], rax
mov qword [rbp - 0x10], r10
lea rcx, [rbp - 0x10]
call fcn.14000a6e8
test edi, edi
js 0x14002e3f5
cmp ebx, 4
jne 0x140013442
mov rcx, qword [rbp + 0x100]
call fcn.14000a740
mov ebx, dword [rbp + 0x10c]
test al, al
cmovne rcx, rsi
mov eax, dword [rcx]
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0x100]
call fcn.14000a6e8
test ebx, ebx
js 0x14001342c
cmp dword [rbp + 0x94], 1
jne 0x14001342c
call fcn.14001015c
test eax, eax
jne 0x14002e440
mov eax, ebx
add rsp, 0x3e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ebx, 0xc004f01e
jmp 0x140013406
mov edi, 0x8007000e
jmp 0x14002e3ea
mov edi, ebx
jmp 0x1400132ff
mov edi, ebx
jmp 0x1400132f1
mov edi, 0xc000003e
mov r14, r15
jmp 0x1400132f1
mov edi, 0xc0000017
jmp 0x14002b5af
mov edi, 0xc0000023
jmp 0x14002b5af
mov edi, 0xc000000d
jmp 0x140011157
lea r8, [rbp + 0x330]
mov edx, esi
mov ecx, 4
call fcn.14000ad5c
mov edx, dword [rbp + 0x2c]
test eax, eax
mov edi, eax
cmovns edx, dword [rbp + 0x330]
mov dword [rbp + 0x2c], edx
js 0x140011221
mov ecx, dword [rsp + 0x34]
lea r8, [rsp + 0x34]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x140011221
inc dword [rsp + 0x30]
jmp 0x140011229
mov edi, 0xc000000d
jmp 0x140011221
mov r12d, 4
lea r8, [rbp + 0x330]
mov ecx, r12d
mov edx, r14d
call fcn.14000ad5c
mov edx, dword [rbp + 0x90]
test eax, eax
mov edi, eax
cmovns edx, dword [rbp + 0x330]
mov dword [rbp + 0x90], edx
js 0x1400112c9
mov ecx, dword [rsp + 0x34]
lea r8, [rsp + 0x34]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400112c9
inc dword [rsp + 0x30]
jmp 0x1400112d1
mov edi, 0xc0000095
jmp 0x14002b5af
mov edi, 0xc0000095
jmp 0x1400112c3
mov edi, 0xc000000d
jmp 0x1400112c3
lea r8, [rbp + 0x330]
mov edx, 8
mov ecx, r12d
call fcn.14000ad5c
mov edx, dword [rbp + 0x98]
test eax, eax
mov edi, eax
cmovns edx, dword [rbp + 0x330]
mov dword [rbp + 0x98], edx
js 0x14001137d
mov ecx, dword [rsp + 0x34]
lea r8, [rsp + 0x34]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x14001137d
inc dword [rsp + 0x30]
jmp 0x140011385
mov edi, 0xc0000095
jmp 0x14001137d
mov edi, 0xc000000d
jmp 0x14001137d
test r10d, r10d
je 0x1400113e6
mov edi, 0xc000000d
jmp 0x140011472
lea r8, [rbp + 0x330]
mov edx, r10d
mov ecx, r12d
call fcn.14000ad5c
mov edx, dword [rbp + 0xac]
xor r10d, r10d
test eax, eax
mov edi, eax
cmovns edx, dword [rbp + 0x330]
mov dword [rbp + 0xac], edx
js 0x140011475
mov ecx, dword [rsp + 0x34]
lea r8, [rsp + 0x34]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x140011475
inc dword [rsp + 0x30]
mov edi, r10d
jmp 0x140011475
mov edi, 0xc0000095
jmp 0x140011472
mov edi, 0xc0000023
jmp 0x140011472
lea r8, [rbp + 0x330]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
mov edx, dword [rbp + 0x88]
test eax, eax
mov edi, eax
cmovns edx, dword [rbp + 0x330]
mov dword [rbp + 0x88], edx
js 0x140011513
mov ecx, dword [rsp + 0x34]
lea r8, [rsp + 0x34]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x140011513
inc dword [rsp + 0x30]
jmp 0x14001151b
mov edi, 0xc0000095
jmp 0x140011513
mov edi, 0xc000000d
jmp 0x140011513
lea r8, [rbp + 0x330]
mov edx, r12d
mov ecx, r12d
call fcn.14000ad5c
mov edx, dword [rbp + 0x50]
test eax, eax
mov edi, eax
cmovns edx, dword [rbp + 0x330]
mov dword [rbp + 0x50], edx
js 0x1400115ac
mov ecx, dword [rsp + 0x34]
lea r8, [rsp + 0x34]
call fcn.14000ad5c
mov edi, eax
test eax, eax
js 0x1400115ac
inc dword [rsp + 0x30]
jmp 0x1400115b4
mov edi, 0xc0000095
jmp 0x1400115ac
mov edi, 0xc000000d
jmp 0x1400115ac
xor r10d, r10d
mov eax, dword [rbp + 0x330]
jmp 0x14001173f
mov edi, 0xc0000095
jmp 0x14001186c
mov edi, 0xc0000017
jmp 0x14001186c
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x14001186c
mov edi, 0xc000000d
jmp 0x140011e36
test r8d, r8d
jle 0x14002b8ba
mov r11d, 0x38
movzx eax, byte [r9]
cmp ebx, 4
jge 0x14002b8a4
lea ecx, [r11 - 0x20]
shl eax, cl
or r13d, eax
jmp 0x14002b8ac
mov ecx, r11d
shl eax, cl
or r12d, eax
inc r9
inc ebx
sub r11d, 8
cmp ebx, r8d
jl 0x14002b890
mov ebx, r13d
mov r11d, r12d
xor ebx, 0x875330f4
xor r11d, 0x549791cd
mov dword [rsp + 0x54], ebx
mov eax, r14d
mov dword [rbp + 0x348], r11d
test r8d, r8d
jle 0x14002b909
cmp eax, 4
jge 0x14002b8ed
rol ebx, 8
mov byte [r10], bl
jmp 0x14002b8f4
rol r11d, 8
mov byte [r10], r11b
inc r10
inc eax
cmp eax, r8d
jl 0x14002b8e0
mov ebx, dword [rsp + 0x54]
mov r11d, dword [rbp + 0x348]
lea eax, [r8 - 4]
test eax, eax
jle 0x14002b92d
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov dword [rbp + 0x348], r11d
jmp 0x140011928
mov dword [rbp + 0x348], r14d
mov r11d, r14d
test eax, eax
jns 0x140011928
neg eax
shl eax, 3
mov ecx, eax
shr ebx, cl
shl ebx, cl
mov dword [rsp + 0x54], ebx
jmp 0x140011928
mov edi, 0xc0000017
jmp 0x140011dea
mov edi, 0xc0000017
jmp 0x140011de1
mov r14, qword [rbx + 8]
test r14, r14
je 0x14002b98b
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 8], r10
mov r14, qword [rbx + 0x18]
test r14, r14
je 0x14002b9af
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 0x18], r10
mov r14, qword [rbx + 0x28]
test r14, r14
je 0x14002b9d2
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x140011dea
mov edi, 0xc0000001
jmp 0x140011dfc
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x14002ba1c
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 8], r10
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x14002ba40
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 0x18], r10
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x14002ba63
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x140011e2f
mov eax, dword [rbp + 0x18]
jmp 0x140011ef4
mov edi, 0xc0000017
jmp 0x140012040
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x140012040
mov r9d, dword [rbp + 0x64]
mov edi, 0xc0000095
jmp 0x1400120d0
mov edi, 0xc000000d
jmp 0x1400122da
xor r10d, r10d
jmp 0x140012189
mov edi, 0xc000000d
jmp 0x14002baf6
xor r10d, r10d
jmp 0x140012211
mov eax, dword [rbp + 0xa4]
jmp 0x1400122c4
mov edi, 0x8000ffff
jmp 0x140012d32
mov edi, 0xc0000095
mov r14, r12
jmp 0x1400122da
mov edi, 0xc0000017
jmp 0x140012312
mov edi, 0x80070057
jmp 0x140012d32
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
xor r10d, r10d
mov edi, eax
test eax, eax
jle 0x14002bb2a
movzx edi, ax
or edi, 0x80070000
test edi, edi
js 0x14002bb33
mov edi, 0x80004005
mov r9d, dword [rbp - 0x80]
jmp 0x1400123d3
mov r14d, 0x8007007a
mov edi, r14d
jmp 0x140012d38
mov edi, 0xc000003e
jmp 0x1400126eb
mov edi, 0xc0000017
jmp 0x1400126d7
mov edi, 0xc0000017
jmp 0x1400126ce
mov dword [rax], r10d
mov qword [rax + 8], r10
jmp 0x140012633
mov dword [rbx + 0x10], r10d
mov qword [rbx + 0x18], r10
jmp 0x14001267b
mov dword [rbx + 0x20], r10d
mov qword [rbx + 0x28], r10
jmp 0x1400126c8
mov r14, qword [rbx + 8]
test r14, r14
je 0x14002bbb2
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 8], r10
mov r14, qword [rbx + 0x18]
test r14, r14
je 0x14002bbd6
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 0x18], r10
mov r14, qword [rbx + 0x28]
test r14, r14
je 0x14002bbf9
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x1400126d7
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x14002bc39
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 8], r10
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x14002bc5d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsi + 0x18], r10
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x14002bc80
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x1400126eb
mov edi, 0xc000000d
jmp 0x140012b35
or dword [rbp + 0x338], 0xffffffff
mov r13d, r11d
test r8d, r8d
jle 0x14002bcea
mov r11d, 0x38
movzx eax, byte [r9]
cmp ebx, 4
jge 0x14002bcce
lea ecx, [r11 - 0x20]
shl eax, cl
or esi, eax
jmp 0x14002bcd6
mov ecx, r11d
shl eax, cl
or r13d, eax
inc r9
inc ebx
sub r11d, 8
cmp ebx, r8d
jl 0x14002bcbb
mov dword [rbp - 0x40], esi
xor r11d, r11d
xor esi, 0xe5d64a7e
mov ebx, r13d
xor ebx, 0x9c54a8c9
mov dword [rsp + 0x4c], esi
mov dword [rbp + 0x338], ebx
mov eax, r11d
test r8d, r8d
jle 0x14002bd32
cmp eax, 4
jge 0x14002bd18
rol esi, 8
mov byte [r10], sil
jmp 0x14002bd1e
rol ebx, 8
mov byte [r10], bl
inc r10
inc eax
cmp eax, r8d
jl 0x14002bd0b
mov esi, dword [rsp + 0x4c]
mov ebx, dword [rbp + 0x338]
lea eax, [r8 - 4]
test eax, eax
jle 0x14002bd4d
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr ebx, cl
shl ebx, cl
jmp 0x140012791
mov ebx, r11d
mov dword [rbp + 0x338], ebx
test eax, eax
jns 0x140012797
neg eax
shl eax, 3
mov ecx, eax
shr esi, cl
shl esi, cl
mov dword [rsp + 0x4c], esi
jmp 0x140012797
mov rbx, qword [rbp + 0x38]
mov esi, 0xc004d501
jmp 0x140012b06
mov rcx, r15
call fcn.140025e74
mov rbx, qword [rbp + 0x38]
xor r10d, r10d
jmp 0x140012b0f
mov rbx, qword [rbp + 0x38]
mov edi, 0xc0000001
jmp 0x140012b2c
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0x38], r10
jmp 0x140012b35
mov edi, 0xc0000095
jmp 0x140012d20
mov edi, 0xc000000d
jmp 0x140012d2e
mov edi, 0xc0000095
jmp 0x140012d2e
mov edi, 0xc0000017
jmp 0x140012d20
mov edi, 0xc000003e
jmp 0x140012d2e
mov edi, 0xc004d501
jmp 0x1400132e7
mov edi, 0xc000000d
jmp 0x140012f69
mov r9d, dword [rbp + 0x128]
mov rax, qword [rbp + 0x1e8]
jmp 0x140012f53
mov edi, 0xc0000023
jmp 0x1400132e7
mov edi, 0xc000000d
jmp 0x140013053
xor r10d, r10d
mov r9d, dword [rbp + 0xe8]
mov rax, qword [rbp + 0x250]
jmp 0x140013037
mov edi, 0xc000000d
jmp 0x1400130e8
mov r9d, dword [rbp + 0x110]
mov rax, qword [rbp + 0x1f8]
jmp 0x1400130cf
mov edi, 0xc0000095
jmp 0x1400130e8
mov edi, 0xc000000d
jmp 0x1400132e7
mov r10d, dword [rbp + 0xf0]
mov r11, qword [rbp + 0x280]
jmp 0x140013166
mov r9d, dword [rbp + 0x120]
mov rax, qword [rbp + 0x208]
jmp 0x1400131d7
mov edi, 0xc0000023
jmp 0x14002bea6
mov edi, r14d
mov r14, qword [rsp + 0x20]
xor r10d, r10d
mov r13, qword [rsp + 0x40]
jmp 0x1400132f1
mov edi, 0xc0000095
jmp 0x1400131f0
mov r9d, dword [rbp + 0xf8]
mov rax, qword [rbp + 0x260]
jmp 0x140013262
mov edi, 0xc0000095
jmp 0x14001327b
mov edi, 0xc004d501
jmp 0x14002bea6
mov edi, 0xc0000095
jmp 0x1400132e7
xor eax, eax
mov dword [rsp + 0x60], r10d
mov qword [rsp + 0x64], rax
mov r14, r10
mov dword [rsp + 0x6c], eax
mov r13, r10
mov qword [rbp + 0x44], rax
mov dword [rbp + 0x4c], eax
mov dword [rbp + 0x40], r10d
mov dword [rbp + 0xd8], r10d
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x180], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r15, rax
test rax, rax
je 0x14002e346
mov r8, qword [rbp + 0x180]
mov rcx, rax
mov rdx, qword [rbp + 0x230]
call sub.msvcrt.dll_memcpy
mov esi, dword [rbp + 0x180]
mov r14, r15
mov qword [rsp + 0x20], r15
mov qword [rbp + 0x198], r12
mov qword [rbp + 0x150], 8
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r12, rax
test rax, rax
je 0x14002e346
mov r8, qword [rbp + 0x150]
mov rcx, rax
mov rdx, qword [rbp + 0x198]
call sub.msvcrt.dll_memcpy
mov r14, qword [rbp + 0x150]
mov r13, r12
mov qword [rbp - 0x60], r12
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x1a0], rax
xor r10d, r10d
lea r8, [rsp + 0x28]
mov dword [rbp + 0x330], r10d
lea r11d, [r10 + 4]
mov edx, r11d
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x28]
mov dword [rbp + 0x28], edx
lea r8, [rbp + 0x330]
xor ecx, ecx
call fcn.14000ad5c
mov r9d, 0x10000000
or eax, r9d
jl 0x14002e343
lea r8, [rsp + 0x28]
mov edx, esi
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x28]
mov dword [rbp + 0x28], edx
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
or eax, r9d
jl 0x14002e343
lea r8, [rsp + 0x28]
mov edx, r14d
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x28]
mov dword [rbp + 0x28], edx
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
or eax, r9d
jl 0x14002e343
lea r8, [rsp + 0x28]
mov ecx, r11d
lea edx, [r10 + 8]
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x28]
mov dword [rbp + 0x28], edx
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
or eax, r9d
jl 0x14002e343
mov eax, dword [rbp + 0x330]
mov dword [rsp + 0x64], eax
mov ebx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r9, rax
test rax, rax
je 0x14002e343
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], r10d
lea rax, [rbp + 0x80]
lea r11d, [r10 + 4]
mov dword [rbp + 0x80], r11d
test rax, rax
je 0x14002c16e
lea r8, [rbp - 0x70]
mov edx, r11d
mov rcx, r9
call fcn.14000ad74
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x64]
lea rcx, [r9 + 8]
add rdx, r9
cmp rcx, rdx
ja 0x14002e343
mov rdx, qword [rbp - 0x70]
mov dword [r9], r11d
mov ecx, dword [rbp + 0x80]
mov dword [rdx], ecx
inc dword [rsp + 0x60]
jmp 0x14002c173
mov eax, 0xc000000d
test eax, eax
js 0x14002e343
test esi, esi
je 0x14002c286
cmp qword [rsp + 0x68], r10
jne 0x14002c1ce
lea r8, [rbp + 0x330]
mov edx, esi
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rbp + 0x330]
mov dword [rbp + 0xe4], edx
mov ecx, dword [rsp + 0x64]
lea r8, [rsp + 0x64]
call fcn.14000ad5c
test eax, eax
js 0x14002e343
inc dword [rsp + 0x60]
jmp 0x14002c293
mov r9, qword [rsp + 0x68]
xor r11d, r11d
mov qword [rsp + 0x78], r9
cmp dword [rsp + 0x60], r11d
jbe 0x14002c230
mov edx, dword [r9]
lea r8, [rbp + 0x330]
mov ecx, 4
call fcn.14000ad5c
test eax, eax
js 0x14002e340
mov eax, dword [rbp + 0x330]
mov dword [rbp + 0xe4], eax
mov edx, eax
lea r8, [rsp + 0x78]
mov rcx, r9
call fcn.14000ad74
test eax, eax
js 0x14002e340
mov r9, qword [rsp + 0x78]
inc r10d
cmp r10d, dword [rsp + 0x60]
jb 0x14002c1e2
lea r8, [rbp - 0x70]
mov edx, 4
mov rcx, r9
call fcn.14000ad74
xor r10d, r10d
mov ebx, eax
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x64]
lea rcx, [rsi + 4]
add rdx, qword [rsp + 0x68]
add rcx, r9
mov r8, rsi
cmp rcx, rdx
ja 0x14002e343
mov rcx, qword [rbp - 0x70]
mov rdx, r15
mov dword [r9], esi
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x60]
xor r10d, r10d
lea r11d, [r10 + 4]
jmp 0x14002c28b
mov ebx, 0xc000000d
test ebx, ebx
js 0x14002e343
test r14d, r14d
je 0x14002c39c
cmp qword [rsp + 0x68], r10
jne 0x14002c2e8
lea r8, [rbp + 0x330]
mov edx, r14d
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rbp + 0x330]
mov dword [rbp + 0xec], edx
mov ecx, dword [rsp + 0x64]
lea r8, [rsp + 0x64]
call fcn.14000ad5c
test eax, eax
js 0x14002e343
inc dword [rsp + 0x60]
jmp 0x14002c3af
mov r9, qword [rsp + 0x68]
xor r11d, r11d
mov qword [rsp + 0x78], r9
cmp dword [rsp + 0x60], r11d
jbe 0x14002c34a
mov edx, dword [r9]
lea r8, [rbp + 0x330]
mov ecx, 4
call fcn.14000ad5c
test eax, eax
js 0x14002e340
mov eax, dword [rbp + 0x330]
mov dword [rbp + 0xec], eax
mov edx, eax
lea r8, [rsp + 0x78]
mov rcx, r9
call fcn.14000ad74
test eax, eax
js 0x14002e340
mov r9, qword [rsp + 0x78]
inc r10d
cmp r10d, dword [rsp + 0x60]
jb 0x14002c2fc
lea r8, [rbp - 0x70]
mov edx, 4
mov rcx, r9
call fcn.14000ad74
xor r10d, r10d
mov ebx, eax
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x64]
add rdx, qword [rsp + 0x68]
mov r8d, r14d
lea rcx, [r8 + 4]
add rcx, r9
cmp rcx, rdx
ja 0x14002e343
mov rcx, qword [rbp - 0x70]
mov rdx, r12
mov dword [r9], r14d
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x60]
xor r10d, r10d
jmp 0x14002c3a1
mov ebx, 0xc000000d
test ebx, ebx
js 0x14002e343
mov r11d, 4
mov rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x170], rax
lea rax, [rbp + 0x170]
test rax, rax
je 0x14002c4d0
cmp qword [rsp + 0x68], r10
jne 0x14002c41b
lea r8, [rbp + 0x330]
mov edx, 8
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rbp + 0x330]
mov dword [rbp + 0xf4], edx
mov ecx, dword [rsp + 0x64]
lea r8, [rsp + 0x64]
call fcn.14000ad5c
test eax, eax
js 0x14002e343
inc dword [rsp + 0x60]
jmp 0x14002c4dd
mov r9, qword [rsp + 0x68]
xor r11d, r11d
mov qword [rsp + 0x78], r9
cmp dword [rsp + 0x60], r11d
jbe 0x14002c47d
mov edx, dword [r9]
lea r8, [rbp + 0x330]
mov ecx, 4
call fcn.14000ad5c
test eax, eax
js 0x14002e340
mov eax, dword [rbp + 0x330]
mov dword [rbp + 0xf4], eax
mov edx, eax
lea r8, [rsp + 0x78]
mov rcx, r9
call fcn.14000ad74
test eax, eax
js 0x14002e340
mov r9, qword [rsp + 0x78]
inc r10d
cmp r10d, dword [rsp + 0x60]
jb 0x14002c42f
mov r11d, 4
lea r8, [rbp - 0x70]
mov edx, r11d
mov rcx, r9
call fcn.14000ad74
xor r10d, r10d
test eax, eax
js 0x14002e343
mov edx, dword [rsp + 0x64]
lea rcx, [r9 + 0xc]
add rdx, qword [rsp + 0x68]
cmp rcx, rdx
ja 0x14002e343
mov rcx, qword [rbp - 0x70]
mov dword [r9], 8
movsd xmm0, qword [rbp + 0x170]
movsd qword [rcx], xmm0
inc dword [rsp + 0x60]
jmp 0x14002c4d5
mov eax, 0xc000000d
test eax, eax
js 0x14002e343
lea r8, [rbp + 0x330]
mov edx, r11d
mov ecx, r11d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov r9d, dword [rbp + 0x330]
mov dword [rbp + 0x114], r9d
lea r8, [rbp + 0x330]
mov dword [rsp + 0x28], r9d
mov edx, 8
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov edx, dword [rbp + 0x330]
mov dword [rbp + 0x114], edx
lea r8, [rsp + 0x28]
mov ecx, r9d
call fcn.14000ad5c
test eax, eax
js 0x14002e343
mov rbx, r10
mov qword [rbp + 0xc0], r10
mov qword [rsp + 0x70], rbx
mov r15d, r10d
mov qword [rsp + 0x78], r10
mov r13d, r10d
mov dword [rbp - 0x40], r10d
mov r12, r10
mov qword [rbp - 0x10], r10
mov dword [rbp - 0x7c], r10d
mov qword [rbp + 0x20], r10
mov qword [rbp + 0x10], r10
mov dword [rbp - 0x18], r10d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x160], rax
mov dword [rbp - 0x48], 8
mov edx, dword [rsp + 0x64]
lea r8, [rbp - 0x48]
mov ecx, 8
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002c698
mov eax, dword [rbp - 0x48]
add rax, 7
and eax, 0xfffffff8
cmp eax, dword [rbp - 0x48]
jae 0x14002c5c5
mov esi, 0xc0000095
jmp 0x14002c698
mov dword [rbp - 0x48], eax
mov ebx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
jne 0x14002c5f9
mov esi, 0xc0000017
mov rbx, r12
jmp 0x14002c698
mov qword [rbp + 0x330], rax
lea r8, [rbp + 0x330]
mov eax, dword [rsp + 0x60]
mov r11d, 4
mov edx, r11d
mov dword [rbx], eax
mov rcx, rbx
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002c677
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov eax, dword [rsp + 0x64]
mov dword [rcx], eax
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002c677
mov ecx, dword [rbp - 0x48]
mov rax, qword [rbp + 0x160]
mov qword [rcx + rbx - 8], rax
mov r8d, dword [rsp + 0x64]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov r15d, dword [rbp - 0x48]
xor r10d, r10d
mov qword [rsp + 0x70], rbx
mov ebx, r10d
test rbx, rbx
je 0x14002c693
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rbx, qword [rsp + 0x70]
or esi, 0x10000000
jl 0x14002e04f
mov qword [rbp + 0x1c0], r10
mov r14, r10
mov qword [rbp + 0x1d0], r10
mov qword [rbp + 0x1e0], r10
mov qword [rbp + 0x1f0], r10
mov qword [rbp + 0xc8], r10
mov qword [rbp + 0x1b0], r10
mov qword [rbp - 0x78], r10
test rbx, rbx
jne 0x14002c6e4
mov esi, 0xc000000d
jmp 0x14002ce42
mov esi, r15d
mov qword [rbp - 0x50], rsi
test r15d, r15d
je 0x14002cd84
lea rax, [rsi + 8]
mov rcx, rax
mov qword [rsp + 0x40], rax
call fcn.14000ab60
xor r10d, r10d
mov qword [rbp - 0x30], rax
mov r12, rax
test rax, rax
je 0x14002cd84
mov dl, r10b
mov ecx, r10d
test r15d, r15d
je 0x14002c72e
xor dl, byte [rcx + rbx]
inc rcx
cmp rcx, rsi
jb 0x14002c723
xor ecx, ecx
or r11d, 0xffffffff
mov r8, rsi
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x48], r11d
mov r10, rbx
mov dword [rbp + 0x330], ecx
mov r9, rax
mov ebx, ecx
mov r13d, ecx
and r8d, 7
je 0x14002c823
mov dword [rbp + 0x330], ecx
mov r15d, ecx
test r8d, r8d
jle 0x14002c7a0
lea r11d, [rcx + 0x38]
movzx eax, byte [r10]
cmp ebx, 4
jge 0x14002c781
lea ecx, [r11 - 0x20]
shl eax, cl
or r15d, eax
jmp 0x14002c789
mov ecx, r11d
shl eax, cl
or r13d, eax
inc r10
inc ebx
sub r11d, 8
cmp ebx, r8d
jl 0x14002c76d
mov dword [rbp + 0x330], r15d
xor ecx, ecx
mov ebx, r15d
mov r11d, r13d
xor ebx, 0x875330f4
xor r11d, 0x549791cd
mov dword [rsp + 0x58], ebx
mov eax, ecx
mov dword [rsp + 0x48], r11d
test r8d, r8d
jle 0x14002c7ea
cmp eax, 4
jge 0x14002c7d0
rol ebx, 8
mov byte [r9], bl
jmp 0x14002c7d7
rol r11d, 8
mov byte [r9], r11b
inc r9
inc eax
cmp eax, r8d
jl 0x14002c7c3
mov ebx, dword [rsp + 0x58]
mov r11d, dword [rsp + 0x48]
lea eax, [r8 - 4]
test eax, eax
jle 0x14002c809
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov dword [rsp + 0x48], r11d
jmp 0x14002c823
mov dword [rsp + 0x48], ecx
mov r11d, ecx
test eax, eax
jns 0x14002c823
neg eax
shl eax, 3
mov ecx, eax
shr ebx, cl
shl ebx, cl
mov dword [rsp + 0x58], ebx
mov r15, rsi
shr r15, 3
test r15, r15
je 0x14002cb69
mov r14d, dword [rbp + 0x330]
lea r12, [r9 + 7]
lea rsi, [r10 + 2]
movzx eax, byte [rsi - 1]
movzx r10d, byte [rsi - 2]
movzx r9d, byte [rsi + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [rsi]
lea rsi, [rsi + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi - 5]
or r9d, eax
movzx eax, byte [rsi - 4]
shl r9d, 8
or r9d, eax
movzx eax, byte [rsi - 3]
shl r9d, 8
or r9d, eax
xor r11d, r9d
lea eax, [r11 + 0x36fdf9bd]
rol eax, 8
imul ecx, eax, 0x3bd6
mov eax, r11d
ror eax, 9
add ecx, eax
mov eax, 0x36fdf9bd
xor ecx, r10d
xor ebx, ecx
sub eax, ebx
rol eax, 7
imul ecx, eax, 0xdb6b
mov eax, ebx
ror eax, 0xb
add ecx, eax
xor r11d, ecx
mov eax, r11d
mov r8d, r11d
xor eax, 0xdb6b
ror r8d, 0xa
imul ecx, eax, 0xf9bd
add r8d, ecx
xor ebx, r8d
mov r8d, 0xdb6b3bd6
lea eax, [rbx + 0x2494c42a]
ror eax, 1
imul ecx, eax, 0x36fd
mov eax, ebx
rol eax, 0xe
xor ecx, eax
mov eax, 0x36fdf9bd
xor r11d, ecx
mov ecx, r11d
xor ecx, r8d
sub eax, ecx
xor ebx, eax
mov eax, ebx
not eax
ror eax, 0xe
add eax, 0xdb6b
imul eax, eax, 0x3bd6
xor r11d, eax
mov eax, r11d
xor eax, r8d
ror eax, 0xf
imul ecx, eax, 0xf9bd
mov eax, r11d
rol eax, 6
xor ecx, eax
xor ebx, ecx
lea eax, [rbx + 0x24948d2d]
xor r11d, eax
mov eax, r11d
xor eax, 0xf9bd
imul ecx, eax, 0x3bd6
mov eax, r11d
shr eax, 6
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x3bd6
rol eax, 3
imul ecx, eax, 0xdb6b
mov eax, ebx
rol eax, 0xc
sub ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x2494c42a]
rol eax, 0xd
imul ecx, eax, 0xf9bd
mov eax, r11d
ror eax, 0xf
xor ecx, eax
mov eax, r8d
xor ebx, ecx
sub eax, ebx
rol eax, 3
imul ecx, eax, 0x36fd
mov eax, ebx
rol eax, 9
sub ecx, eax
xor r11d, ecx
lea eax, [r11 - 0xf9bd]
rol eax, 3
imul ecx, eax, 0x3bd6
mov eax, r11d
shr eax, 0xf
xor ecx, eax
xor ebx, ecx
lea eax, [rbx - 0xf9bd]
imul ecx, eax, 0xdb6b
mov eax, ebx
shr eax, 0xd
sub ecx, eax
mov eax, r8d
xor r11d, ecx
sub eax, r11d
ror eax, 9
imul ecx, eax, 0xf9bd
mov eax, r11d
ror eax, 0xb
xor ecx, eax
xor ebx, ecx
lea eax, [rbx + 0x24948d2d]
xor r11d, eax
mov eax, r11d
mov r8d, r11d
xor eax, 0xdb6b
ror r8d, 7
imul ecx, eax, 0x3bd6
sub ecx, r8d
xor ebx, ecx
mov eax, ebx
xor eax, 0x36fd
rol eax, 4
imul ecx, eax, 0xdb6b
mov eax, ebx
ror eax, 0x10
sub ecx, eax
mov eax, 0xdb6b3bd6
xor r11d, ecx
sub eax, r11d
ror eax, 0xa
imul ecx, eax, 0xf9bd
mov eax, r11d
ror eax, 4
add ecx, eax
xor ebx, ecx
lea eax, [rbx + 0x2494c42a]
ror eax, 4
imul ecx, eax, 0x36fd
mov eax, ebx
ror eax, 9
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x36fdf9bd
rol eax, 8
imul ecx, eax, 0x3bd6
mov eax, r11d
rol eax, 2
sub ecx, eax
mov eax, 0x36fdf9bd
xor ebx, ecx
sub eax, ebx
ror eax, 0xb
imul ecx, eax, 0xdb6b
mov eax, ebx
ror eax, 0xc
sub ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0xdb6b
imul ecx, eax, 0xf9bd
mov eax, r11d
shr eax, 8
xor ecx, eax
xor ebx, ecx
xor r11d, ebx
xor ebx, r14d
mov dword [rsp + 0x58], ebx
xor r11d, 0xed96c26b
xor r11d, r13d
mov r14d, r10d
mov dword [rsp + 0x48], r11d
mov r13d, r9d
mov byte [r12 - 4], bl
mov al, byte [rsp + 0x48]
ror dword [rsp + 0x58], 8
mov byte [r12], al
lea r12, [r12 + 8]
ror dword [rsp + 0x48], 8
mov al, byte [rsp + 0x58]
mov byte [r12 - 0xd], al
mov al, byte [rsp + 0x48]
ror dword [rsp + 0x58], 8
mov byte [r12 - 9], al
ror dword [rsp + 0x48], 8
mov al, byte [rsp + 0x58]
mov byte [r12 - 0xe], al
ror dword [rsp + 0x58], 8
mov al, byte [rsp + 0x48]
mov byte [r12 - 0xa], al
ror dword [rsp + 0x48], 8
mov al, byte [rsp + 0x58]
mov byte [r12 - 0xf], al
mov al, byte [rsp + 0x48]
mov byte [r12 - 0xb], al
mov ebx, dword [rsp + 0x58]
mov r11d, dword [rsp + 0x48]
ror ebx, 8
ror r11d, 8
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x48], r11d
sub r15, 1
jne 0x14002c842
mov r14, qword [rbp - 0x78]
mov rsi, qword [rbp - 0x50]
mov r12, qword [rbp - 0x30]
movzx eax, dl
mov qword [r12 + rsi], rax
mov rsi, qword [rsp + 0x40]
mov qword [rbp + 0x1b0], rsi
mov qword [rbp + 0xc8], r12
lea rax, [0x1400a94f0]
mov r13d, 8
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1d0], r13
lea r15, [0x1400a9450]
mov qword [rbp + 0x1f0], 0xa0
mov qword [rbp + 0x1e0], r15
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
lea r8d, [r13 + 0x28]
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
jne 0x14002cbe2
mov esi, 0xc0000017
jmp 0x14002cd70
mov dword [rax], esi
mov esi, esi
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, esi
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002cce0
mov qword [rbx + 8], rax
mov r8d, esi
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov esi, 0xa0
mov dword [rbx + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, esi
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002cce0
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [r15]
lea ecx, [rsi - 0x20]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r15 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r15 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r15 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r15 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r15 + 0x70]
movups xmmword [rax + rcx - 0x10], xmm1
movups xmm0, xmmword [r15 + rcx]
movups xmmword [rax + rcx], xmm0
movups xmm1, xmmword [r15 + rcx + 0x10]
movups xmmword [rax + rcx + 0x10], xmm1
mov dword [rbx + 0x20], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r13
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002cce0
mov qword [rbx + 0x28], rax
movsd xmm0, qword [0x1400a94f0]
mov r14, rbx
movsd qword [rax], xmm0
mov esi, r10d
mov ebx, r10d
jmp 0x14002cce5
mov esi, 0xc0000017
test rbx, rbx
je 0x14002cd70
mov r15, qword [rbx + 8]
test r15, r15
je 0x14002cd12
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 8], r10
mov r15, qword [rbx + 0x18]
test r15, r15
je 0x14002cd36
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 0x18], r10
mov r15, qword [rbx + 0x28]
test r15, r15
je 0x14002cd59
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov r13d, dword [rbp - 0x40]
test esi, esi
js 0x14002cd89
mov qword [rbp + 0xc0], r14
mov r14, r10
jmp 0x14002cd89
mov esi, 0xc0000001
mov rbx, qword [rbp + 0xc8]
test rbx, rbx
je 0x14002cdb3
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0xc8], r10
test r14, r14
je 0x14002ce3e
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x14002cde0
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 8], r10
mov rbx, qword [r14 + 0x18]
test rbx, rbx
je 0x14002ce04
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 0x18], r10
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x14002ce27
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov r12, qword [rbp - 0x10]
or esi, 0x10000000
jl 0x14002e04f
mov r14, qword [rbp + 0xc0]
lea r8, [rbp + 0x330]
mov r15d, 4
mov ecx, r15d
mov dword [rbp + 0x330], r15d
mov edx, dword [r14]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002cef5
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002cef5
mov edx, dword [r14 + 0x10]
lea r8, [rbp + 0x330]
mov ecx, dword [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002cef5
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002cef5
mov edx, dword [r14 + 0x20]
lea r8, [rbp + 0x330]
mov ecx, dword [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
mov eax, dword [rbp - 4]
test esi, esi
cmovns eax, dword [rbp + 0x330]
mov dword [rbp - 4], eax
jmp 0x14002cef8
mov eax, dword [rbp - 4]
test esi, esi
js 0x14002d064
mov ebx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
jne 0x14002cf2e
mov esi, 0xc0000017
jmp 0x14002d064
mov qword [rbp + 0x330], rax
lea r8, [rbp + 0x330]
mov eax, dword [r14]
mov rdx, r15
mov rcx, rbx
mov dword [rbx], eax
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d048
mov r8d, dword [r14]
mov rdx, qword [r14 + 8]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
xor r10d, r10d
mov esi, eax
test eax, eax
js 0x14002d048
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov eax, dword [r14 + 0x10]
mov rdx, r15
mov dword [rcx], eax
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d048
mov r8d, dword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x10]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
xor r10d, r10d
mov esi, eax
test eax, eax
js 0x14002d048
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov eax, dword [r14 + 0x20]
mov rdx, r15
mov dword [rcx], eax
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d048
mov r8d, dword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
mov rcx, qword [rbp + 0x330]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x20]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
xor r10d, r10d
mov esi, eax
test eax, eax
js 0x14002d048
mov r13d, dword [rbp - 4]
mov qword [rsp + 0x78], rbx
mov ebx, r10d
test rbx, rbx
je 0x14002d064
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
or esi, 0x10000000
jl 0x14002e04f
mov ebx, r10d
mov qword [rbp + 0x200], r10
mov dword [rbp + 0x124], ebx
mov r11d, r10d
mov dword [rbp + 0x11c], r10d
mov qword [rbp + 0x210], r10
mov dword [rbp], 8
mov edx, dword [rsp + 0x28]
lea r8, [rbp]
mov ecx, 8
call fcn.14000ad5c
mov esi, eax
or esi, 0x10000000
jl 0x14002d1c4
mov eax, dword [rbp]
add rax, 7
and eax, 0xfffffff8
cmp eax, dword [rbp]
jae 0x14002d0d2
mov r9d, dword [rbp + 0x68]
mov esi, 0xc0000095
jmp 0x14002d0f3
mov dword [rbp + 0x60], eax
mov edx, ecx
lea r8, [rbp + 0x60]
mov ecx, eax
call fcn.14000ad5c
mov r9d, dword [rbp + 0x68]
test eax, eax
mov esi, eax
cmovns r9d, dword [rbp + 0x60]
mov dword [rbp + 0x68], r9d
test esi, esi
js 0x14002e04f
cmp qword [rsp + 0x68], r10
je 0x14002d1a4
cmp dword [rsp + 0x60], 1
jbe 0x14002d1a4
mov rcx, qword [rsp + 0x68]
xor r15d, r15d
mov qword [rbp + 0x330], rcx
mov r14d, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d1ab
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d1ab
mov rcx, qword [rbp + 0x330]
inc r10d
cmp r10d, 1
jb 0x14002d120
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d1ab
mov rax, qword [rbp + 0x330]
test r10d, r10d
mov r11d, r10d
mov dword [rbp + 0x11c], r10d
cmove rax, r15
mov r10, r15
mov qword [rbp + 0x200], rax
jmp 0x14002d1ae
mov esi, 0xc000000d
jmp 0x14002d1c4
xor r10d, r10d
test esi, esi
js 0x14002d1be
cmp dword [rsp + 0x60], 2
ja 0x14002d1ff
mov esi, 0xc000000d
mov r15d, 4
test esi, esi
js 0x14002e04f
mov ebx, dword [rbp - 0x7c]
mov esi, r10d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
jne 0x14002d363
mov esi, 0xc0000017
jmp 0x14002d36a
mov rcx, qword [rsp + 0x68]
mov qword [rbp + 0x330], rcx
mov r14d, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d28e
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r14d
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d28e
mov rcx, qword [rbp + 0x330]
inc r10d
cmp r10d, 2
jb 0x14002d20b
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d28e
mov rax, qword [rbp + 0x330]
test r10d, r10d
mov ebx, r10d
mov r10, r15
cmove rax, r15
mov dword [rbp + 0x124], ebx
mov qword [rbp + 0x210], rax
jmp 0x14002d291
xor r10d, r10d
mov r15d, 4
test esi, esi
js 0x14002e04f
lea r8, [rbp + 0x330]
mov dword [rbp + 0x330], r15d
mov edx, r9d
mov ecx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d33c
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d33c
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r11d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d33c
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d33c
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov edx, ebx
call fcn.14000ad5c
mov esi, eax
mov eax, dword [rbp + 0xa0]
test esi, esi
cmovns eax, dword [rbp + 0x330]
mov dword [rbp + 0xa0], eax
jmp 0x14002d342
mov eax, dword [rbp + 0xa0]
test esi, esi
js 0x14002e04f
cmp eax, 0x400000
jbe 0x14002d35b
mov esi, 0x8000ffff
jmp 0x14002e04f
mov dword [rbp - 0x7c], eax
jmp 0x14002d1c4
mov r12, rax
mov qword [rbp - 0x10], rax
or esi, 0x10000000
jl 0x14002e04f
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x14002d42c
test r12, r12
je 0x14002d42c
lea r8, [rbp + 0x220]
mov ecx, 1
lea rdx, [0x1400735c8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
xor r14d, r14d
test eax, eax
je 0x14002d436
mov rcx, qword [rbp + 0x220]
lea rdx, [0x1400735e0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14002d436
mov eax, dword [rbp - 0x7c]
mov rcx, rbx
mov dword [rbp + 0x29c], eax
mov qword [rbp + 0x288], rsi
mov dword [rbp + 0x298], r13d
mov qword [rbp + 0x290], r12
mov dword [rbp + 0x2a0], r14d
call qword [0x1400719c8]
lea r8d, [r14 + 0x20]
xor r9d, r9d
lea rdx, [rbp + 0x288]
lea ecx, [r8 + 0x66]
call rbx
mov r9d, dword [rbp - 0x7c]
mov esi, eax
xor r10d, r10d
or esi, 0x10000000
cmovns r9d, dword [rbp + 0x29c]
mov dword [rbp - 0x7c], r9d
jmp 0x14002d45b
mov esi, 0x80070057
jmp 0x14002e04f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
xor r10d, r10d
mov esi, eax
test eax, eax
jle 0x14002d44e
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14002d457
mov esi, 0x80004005
mov r9d, dword [rbp - 0x7c]
cmp esi, 0xd0000023
jne 0x14002d46d
mov esi, 0x8007007a
jmp 0x14002e04f
test esi, esi
js 0x14002e04f
mov dword [rbp + 0x330], r10d
mov r14, r10
mov qword [rsp + 0x40], r12
cmp r9d, r15d
jb 0x14002d673
mov r13d, dword [r12]
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, r12
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d899
lea r8, [rbp + 0x330]
xor ecx, ecx
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d899
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r13d
jb 0x14002d673
mov rax, qword [rsp + 0x40]
lea r8, [rsp + 0x40]
mov rcx, rax
mov qword [rbp - 0x30], rax
mov edx, r13d
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d899
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d899
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r15d
jb 0x14002d673
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x40]
mov rdx, r15
mov r12d, dword [rcx]
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d899
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d899
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r12d
jb 0x14002d673
mov rax, qword [rsp + 0x40]
lea r8, [rsp + 0x40]
mov rcx, rax
mov qword [rbp - 0x50], rax
mov edx, r12d
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d899
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d899
mov eax, r9d
sub eax, dword [rbp + 0x330]
cmp eax, r15d
jb 0x14002d673
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x40]
mov edx, 4
mov r15d, dword [rcx]
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002d899
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d899
mov ecx, dword [rbp + 0x330]
mov eax, r9d
sub eax, ecx
cmp eax, r15d
jb 0x14002d673
lea r8, [rbp + 0x330]
mov edx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002d899
cmp r9d, dword [rbp + 0x330]
jne 0x14002d673
lea ecx, [r15 + r12]
mov eax, r9d
add ecx, r13d
add rcx, 0xc
cmp rcx, rax
jne 0x14002d673
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov rbx, rax
test rax, rax
jne 0x14002d67d
mov esi, 0xc0000017
jmp 0x14002d803
mov esi, 0xc000003e
jmp 0x14002d899
mov esi, r10d
cmp qword [rbp - 0x30], r10
je 0x14002d6ca
mov dword [rax], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002d6c0
mov qword [rbx + 8], rax
mov rdx, qword [rbp - 0x30]
mov r8, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r10d, r10d
jmp 0x14002d6d1
mov esi, 0xc0000017
jmp 0x14002d778
mov dword [rax], r10d
mov qword [rax + 8], r10
mov r13, qword [rbp - 0x50]
test r13, r13
je 0x14002d717
mov dword [rbx + 0x10], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002d6c0
mov qword [rbx + 0x18], rax
mov r8, r12
mov rdx, r13
mov rcx, rax
mov esi, r10d
call sub.msvcrt.dll_memcpy
xor r10d, r10d
jmp 0x14002d71f
mov dword [rbx + 0x10], r10d
mov qword [rbx + 0x18], r10
mov r12, qword [rsp + 0x40]
test r12, r12
je 0x14002d76a
mov dword [rbx + 0x20], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
test rax, rax
je 0x14002d6c0
mov qword [rbx + 0x28], rax
mov r8, r15
mov rdx, r12
mov rcx, rax
mov esi, r10d
call sub.msvcrt.dll_memcpy
xor r10d, r10d
jmp 0x14002d772
mov dword [rbx + 0x20], r10d
mov qword [rbx + 0x28], r10
mov r14, rbx
mov rbx, r10
test rbx, rbx
je 0x14002d803
mov r15, qword [rbx + 8]
test r15, r15
je 0x14002d7a5
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 8], r10
mov r15, qword [rbx + 0x18]
test r15, r15
je 0x14002d7c9
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbx + 0x18], r10
mov r15, qword [rbx + 0x28]
test r15, r15
je 0x14002d7ec
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
test esi, esi
js 0x14002d80e
mov qword [rbp + 0x20], r14
mov r14, r10
test r14, r14
je 0x14002d899
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x14002d83b
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 8], r10
mov rbx, qword [r14 + 0x18]
test rbx, rbx
je 0x14002d85f
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 0x18], r10
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x14002d882
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
or esi, 0x10000000
jl 0x14002e04f
mov rax, qword [rbp + 0x20]
mov rbx, r10
mov qword [rbp + 0x30], rbx
mov esi, r10d
mov qword [rbp + 0x138], r10
mov dword [rsp + 0x28], r10d
test rax, rax
je 0x14002d96a
mov r14, qword [rax + 8]
mov qword [rsp + 0x40], r14
test r14, r14
je 0x14002d96a
cmp dword [rax], r10d
je 0x14002d96a
mov r15d, dword [rax]
mov dword [rbp - 0x40], r10d
test r15, r15
je 0x14002ddf1
add r15, 0xfffffffffffffff8
mov rcx, r15
mov qword [rbp - 0x50], r15
call fcn.14000ab60
xor r10d, r10d
mov qword [rbp - 0x30], rax
mov r12, rax
test rax, rax
je 0x14002dded
xor ecx, ecx
mov dl, r10b
mov r8, r15
mov byte [rbp + 0x330], dl
mov dword [rsp + 0x50], ecx
mov r10, r14
mov r9, rax
mov r13d, ecx
and r8d, 7
je 0x14002da18
or ebx, 0xffffffff
mov dword [rbp + 8], ecx
mov dword [rbp + 0x340], ebx
mov ebx, ecx
mov r11d, ecx
test r8d, r8d
jle 0x14002d98f
lea r14d, [rcx + 0x38]
movzx eax, byte [r10]
cmp r11d, 4
jge 0x14002d974
lea ecx, [r14 - 0x20]
shl eax, cl
or r13d, eax
jmp 0x14002d97b
mov esi, 0xc000000d
jmp 0x14002de16
mov ecx, r14d
shl eax, cl
or ebx, eax
inc r10
inc r11d
sub r14d, 8
cmp r11d, r8d
jl 0x14002d955
mov dword [rbp + 8], ebx
xor ecx, ecx
xor ebx, 0x9c54a8c9
mov r14d, r13d
xor r14d, 0xe5d64a7e
mov dword [rbp + 0x340], ebx
mov dword [rsp + 0x50], r14d
mov eax, ecx
test r8d, r8d
jle 0x14002d9da
cmp eax, 4
jge 0x14002d9bf
rol r14d, 8
mov byte [r9], r14b
jmp 0x14002d9c5
rol ebx, 8
mov byte [r9], bl
inc r9
inc eax
cmp eax, r8d
jl 0x14002d9b1
mov r14d, dword [rsp + 0x50]
mov ebx, dword [rbp + 0x340]
lea eax, [r8 - 4]
test eax, eax
jle 0x14002d9f8
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr ebx, cl
shl ebx, cl
mov dword [rbp + 0x340], ebx
jmp 0x14002da23
mov dword [rbp + 0x340], ecx
mov ebx, ecx
test eax, eax
jns 0x14002da23
neg eax
shl eax, 3
mov ecx, eax
shr r14d, cl
shl r14d, cl
mov dword [rsp + 0x50], r14d
jmp 0x14002da23
mov ebx, ecx
mov dword [rbp + 0x340], ecx
mov r14d, ecx
mov rax, r15
shr rax, 3
test rax, rax
je 0x14002dd78
mov esi, dword [rbp + 8]
lea r12, [r9 + 7]
lea r15, [r10 + 2]
mov rdx, rax
movzx eax, byte [r15 - 1]
mov r9d, 0x532d7f78
movzx r11d, byte [r15 - 2]
movzx r10d, byte [r15 + 2]
shl r11d, 8
or r11d, eax
shl r10d, 8
movzx eax, byte [r15]
lea r15, [r15 + 8]
shl r11d, 8
or r11d, eax
movzx eax, byte [r15 - 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [r15 - 5]
or r10d, eax
xor r14d, r11d
movzx eax, byte [r15 - 4]
shl r10d, 8
or r10d, eax
movzx eax, byte [r15 - 3]
shl r10d, 8
or r10d, eax
xor ebx, r10d
xor ebx, r14d
xor ebx, 0x5384b529
lea eax, [rbx - 0x532d7f78]
rol eax, 5
imul ecx, eax, 0xca51
mov eax, ebx
rol eax, 0xa
add ecx, eax
xor r14d, ecx
lea eax, [r14 + 0xa9ca51]
ror eax, 9
imul ecx, eax, 0x532d
mov eax, r14d
rol eax, 2
sub ecx, eax
xor ebx, ecx
lea eax, [rbx - 0xca51]
imul ecx, eax, 0x7f78
mov eax, ebx
shr eax, 0xd
sub ecx, eax
xor r14d, ecx
mov eax, r14d
xor eax, 0x532d
rol eax, 6
imul ecx, eax, 0xa9
mov eax, r14d
rol eax, 2
sub ecx, eax
mov eax, 0xa9ca51
xor ebx, ecx
mov ecx, ebx
xor ecx, r9d
sub eax, ecx
xor r14d, eax
mov eax, r14d
mov r8d, r14d
xor eax, 0xca51
ror r8d, 6
imul ecx, eax, 0x532d
xor r8d, ecx
xor ebx, r8d
lea eax, [rbx + 0xa9ca51]
ror eax, 0xf
imul ecx, eax, 0x7f78
mov eax, ebx
rol eax, 2
add ecx, eax
xor r14d, ecx
lea eax, [r14 - 0x532d7f78]
ror eax, 0xe
imul ecx, eax, 0xa9
mov eax, r14d
rol eax, 8
sub ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, r9d
mov r8d, 0x532d
ror eax, 0xc
imul ecx, eax, 0xca51
mov eax, ebx
ror eax, 0xa
xor ecx, eax
xor r14d, ecx
mov eax, r14d
xor eax, 0xa9
imul ecx, eax, 0x532d
mov eax, r14d
shr eax, 0xa
xor ecx, eax
xor ebx, ecx
mov eax, ebx
mov r9d, ebx
not eax
ror eax, 5
add eax, 0x7f78
imul eax, eax, 0xa9
xor r14d, eax
xor r9d, r14d
xor r9d, 0x5384b529
mov eax, r9d
ror eax, 5
sub eax, r8d
imul eax, eax, 0xa9
xor ebx, eax
lea eax, [rbx - 0x532d]
rol eax, 3
imul ecx, eax, 0x7f78
mov eax, ebx
shr eax, 7
xor ecx, eax
xor r9d, ecx
lea eax, [r9 - 0x532d7f78]
rol eax, 0xe
imul ecx, eax, 0xa9
mov eax, r9d
ror eax, 0xc
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x532d7f78
rol eax, 9
imul ecx, eax, 0xca51
mov eax, ebx
ror eax, 2
add ecx, eax
xor r9d, ecx
lea eax, [r9 + 0xa9ca51]
rol eax, 8
imul ecx, eax, 0x532d
mov eax, r9d
ror eax, 6
sub ecx, eax
mov eax, 0xa9ca51
xor ebx, ecx
sub eax, ebx
ror eax, 0xe
imul ecx, eax, 0x7f78
mov eax, ebx
ror eax, 0xc
sub ecx, eax
xor r9d, ecx
mov eax, r9d
xor eax, r8d
rol eax, 5
imul ecx, eax, 0xa9
mov eax, r9d
rol eax, 0xf
xor ecx, eax
xor ebx, ecx
lea eax, [rbx - 0x532d7f78]
rol eax, 0xa
imul ecx, eax, 0xca51
mov eax, ebx
ror eax, 4
xor ecx, eax
xor r9d, ecx
mov eax, r9d
not eax
ror eax, 2
add eax, r8d
imul eax, eax, 0xca51
xor ebx, eax
mov eax, ebx
mov r8d, ebx
xor eax, 0xca51
ror r8d, 6
imul ecx, eax, 0x7f78
xor ebx, esi
mov dword [rbp + 0x340], ebx
mov esi, r10d
add r8d, ecx
xor r8d, r13d
mov r13d, r11d
xor r9d, r8d
mov dword [rsp + 0x50], r9d
mov byte [r12 - 4], r9b
mov al, byte [rbp + 0x340]
ror dword [rsp + 0x50], 8
mov byte [r12], al
lea r12, [r12 + 8]
ror dword [rbp + 0x340], 8
mov al, byte [rsp + 0x50]
mov byte [r12 - 0xd], al
mov al, byte [rbp + 0x340]
ror dword [rsp + 0x50], 8
mov byte [r12 - 9], al
ror dword [rbp + 0x340], 8
mov al, byte [rsp + 0x50]
mov byte [r12 - 0xe], al
ror dword [rsp + 0x50], 8
mov al, byte [rbp + 0x340]
mov byte [r12 - 0xa], al
ror dword [rbp + 0x340], 8
mov al, byte [rsp + 0x50]
mov byte [r12 - 0xf], al
mov al, byte [rbp + 0x340]
mov byte [r12 - 0xb], al
mov r14d, dword [rsp + 0x50]
mov ebx, dword [rbp + 0x340]
ror r14d, 8
ror ebx, 8
mov dword [rsp + 0x50], r14d
mov dword [rbp + 0x340], ebx
sub rdx, 1
jne 0x14002da41
mov dl, byte [rbp + 0x330]
mov esi, dword [rsp + 0x28]
mov r15, qword [rbp - 0x50]
mov r12, qword [rbp - 0x30]
xor r10d, r10d
mov eax, r10d
test r15, r15
je 0x14002dd8f
xor dl, byte [rax + r12]
inc rax
cmp rax, r15
jb 0x14002dd83
mov rcx, qword [rsp + 0x40]
movzx eax, dl
cmp rax, qword [r15 + rcx]
je 0x14002dda9
mov rbx, qword [rbp + 0x30]
mov r14d, 0xc004d501
jmp 0x14002ddbe
mov r14d, dword [rbp - 0x40]
mov rbx, r12
mov qword [rbp + 0x30], rbx
mov r12, r10
mov qword [rbp + 0x138], r15
test r12, r12
je 0x14002ddd2
mov rcx, r12
call fcn.140025e74
mov rbx, qword [rbp + 0x30]
xor r10d, r10d
test r14d, r14d
js 0x14002ddf1
mov eax, dword [rbp + 0x138]
mov qword [rbp + 0x10], rbx
mov rbx, r10
mov qword [rbp + 0x30], rbx
mov dword [rbp - 0x18], eax
jmp 0x14002ddf6
mov rbx, qword [rbp + 0x30]
mov esi, 0xc0000001
test rbx, rbx
je 0x14002de16
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0x30], r10
or esi, 0x10000000
jl 0x14002e04f
mov r9, qword [rbp + 0x10]
mov r11d, 4
mov dword [rbp + 0x330], r10d
mov qword [rsp + 0x40], r9
cmp dword [rbp - 0x18], r11d
jb 0x14002e043
mov eax, dword [r9]
lea r8, [rsp + 0x40]
mov edx, r11d
mov dword [rsp + 0x28], eax
mov rcx, r9
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002e048
lea r8, [rbp + 0x330]
xor ecx, ecx
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002e048
mov eax, dword [rbp - 0x18]
sub eax, dword [rbp + 0x330]
cmp eax, r11d
jb 0x14002e043
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x40]
mov r15d, dword [rcx]
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002e048
mov ecx, dword [rbp + 0x330]
lea r8, [rbp + 0x330]
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002e048
mov eax, dword [rbp - 0x18]
mov ecx, dword [rbp + 0x330]
sub eax, ecx
cmp eax, r15d
jb 0x14002e043
lea r8, [rbp + 0x330]
mov edx, r15d
call fcn.14000ad5c
mov esi, eax
test eax, eax
js 0x14002e048
mov edx, dword [rbp - 0x18]
mov rbx, qword [rsp + 0x40]
lea rcx, [rdx + r9]
lea rax, [rbx + r15]
cmp rcx, rax
jb 0x14002e043
sub rdx, rbx
sub rdx, r15
add rdx, r9
cmp rdx, 8
jae 0x14002e043
mov r12, r10
mov esi, r10d
mov r13d, r10d
test rbx, rbx
je 0x14002dfdf
lea r8, [rbp + 0x330]
mov edx, r15d
mov rcx, rbx
mov r9, rbx
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002e036
mov r11, qword [rbp + 0x330]
cmp rbx, r11
jae 0x14002dfda
mov r10d, dword [rbp + 0x12c]
lea r8, [rbp - 0x78]
mov edx, 4
mov rcx, r9
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002e048
cmp qword [rbp - 0x78], r11
ja 0x14002e00d
mov edx, dword [r9]
lea r8, [rbp + 0x330]
mov ecx, 4
call fcn.14000ad5c
test eax, eax
mov esi, eax
cmovns r10d, dword [rbp + 0x330]
mov dword [rbp + 0x12c], r10d
js 0x14002e048
mov edx, r10d
lea r8, [rbp - 0x50]
mov rcx, r9
call fcn.14000ad74
mov esi, eax
test eax, eax
js 0x14002e048
mov r9, qword [rbp - 0x50]
cmp r9, r11
ja 0x14002e00d
inc r13d
cmp r9, r11
jb 0x14002df62
cmp r9, r11
jne 0x14002e00d
test r15d, r15d
je 0x14002e017
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r10d, r10d
mov r12, rax
test rax, rax
jne 0x14002e014
mov esi, 0xc0000017
jmp 0x14002e036
mov esi, 0xc000000d
jmp 0x14002e048
mov esi, r10d
test rbx, rbx
je 0x14002e02a
mov r8, r15
mov rdx, rbx
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0x48], r12
mov dword [rbp + 0x44], r15d
mov dword [rbp + 0x40], r13d
test esi, esi
js 0x14002e048
mov eax, dword [rsp + 0x28]
cmp eax, dword [rbp + 0x40]
je 0x14002e048
mov esi, 0xc000003e
bts esi, 0x1c
xor r10d, r10d
mov r14, qword [rsp + 0x70]
test r14, r14
je 0x14002e070
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov r14, qword [rbp + 0xc0]
test r14, r14
je 0x14002e109
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x14002e0a4
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 8], r10
mov rbx, qword [r14 + 0x18]
test rbx, rbx
je 0x14002e0c8
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 0x18], r10
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x14002e0eb
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0xc0], r10
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x14002e12a
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rbx, qword [rbp - 0x10]
test rbx, rbx
je 0x14002e14a
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov r14, qword [rbp + 0x20]
test r14, r14
je 0x14002e1d9
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x14002e17b
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 8], r10
mov rbx, qword [r14 + 0x18]
test rbx, rbx
je 0x14002e19f
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [r14 + 0x18], r10
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x14002e1c2
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov rbx, qword [rbp + 0x10]
test rbx, rbx
je 0x14002e1f9
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
test esi, esi
js 0x14002e327
mov r9d, dword [rbp + 0x40]
cmp r9d, 1
jb 0x14002e327
mov rbx, qword [rbp + 0x48]
test rbx, rbx
je 0x14002e327
test r9d, r9d
je 0x14002e327
mov r10d, dword [rbx]
lea r8, [rbp + 0x330]
mov r11d, 4
mov qword [rbp + 0x330], rbx
mov edx, r11d
mov rcx, rbx
call fcn.14000ad74
xor ecx, ecx
test eax, eax
js 0x14002e332
mov rax, qword [rbp + 0x330]
test r10d, r10d
mov dword [rbp + 0x228], r10d
cmove rax, rcx
mov qword [rbp + 0x2c8], rax
cmp r10d, r11d
jne 0x14002e332
mov eax, dword [rax]
mov dword [rbp + 0xd8], eax
xor r10d, r10d
test eax, eax
js 0x14002e327
cmp r9d, 1
jbe 0x14002e327
mov qword [rbp + 0x330], rbx
mov r9d, r10d
lea r8, [rbp + 0x330]
mov rdx, r11
mov rcx, rbx
call fcn.14000ad74
test eax, eax
js 0x14002e327
mov edx, dword [rbx]
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000ad74
test eax, eax
js 0x14002e327
inc r9d
cmp r9d, 1
jae 0x14002e2de
mov rbx, qword [rbp + 0x330]
jmp 0x14002e29d
mov rcx, qword [rbp + 0x330]
lea r8, [rbp + 0x330]
mov rdx, r11
mov r9d, dword [rcx]
call fcn.14000ad74
test eax, eax
js 0x14002e327
mov rax, qword [rbp + 0x330]
test r9d, r9d
mov dword [rbp + 0x274], r9d
cmove rax, r10
mov qword [rbp + 0x2d0], rax
cmp r9d, 8
jne 0x14002e327
mov rax, qword [rax]
mov qword [rbp + 0x2d8], rax
mov r14, qword [rsp + 0x20]
mov r13, qword [rbp - 0x60]
jmp 0x14002e346
mov r14, qword [rsp + 0x20]
xor r10d, r10d
mov r13, qword [rbp - 0x60]
jmp 0x14002e346
xor r10d, r10d
mov r14, r15
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x60], 0
test rbx, rbx
je 0x14002e375
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rsp + 0x68], r10
mov rbx, qword [rbp + 0x48]
mov qword [rbp + 0x40], 0
test rbx, rbx
je 0x14002e3a1
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
mov qword [rbp + 0x48], r10
test r14, r14
je 0x14002e3bd
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
test r13, r13
je 0x1400133a4
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_GetProcessHeap]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor r10d, r10d
jmp 0x1400133a4
xor esi, esi
mov r14d, 0x8007007a
mov ebx, dword [rbp + 0x330]
jmp 0x1400133d0
cmp edi, 0xd0000034
jne 0x14002e404
mov edi, 0xc004f012
jmp 0x14002e439
cmp edi, 0xd00000e5
je 0x14002e423
cmp edi, 0xc004d501
je 0x14002e423
cmp edi, 0xd000003e
jne 0x14002e428
mov edi, 0xc004f028
jmp 0x14002e439
mov edi, 0xc004f027
test edi, edi
jns 0x1400133e1
cmp edi, r14d
je 0x140013442
mov ebx, edi
jmp 0x140013406
cmp qword [0x1400ab350], rsi
jne 0x14001342c
mov ecx, 0x30
call fcn.140024914
test rax, rax
je 0x14002e466
mov rcx, rax
call fcn.140066d94
jmp 0x14002e469
mov rax, rsi
mov qword [0x1400ab350], rax
test rax, rax
jne 0x14002e47f
mov ebx, 0x8007000e
jmp 0x14001342c
call fcn.140067874
mov ebx, eax
jmp 0x14001342c