Function at 0x140001030
Capabilities:
Authenticate hmac
Parse pe header

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x338
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1c8], r9
mov r12, r8
mov rbx, rdx
mov r13, rcx
sub rsp, 0x20
movabs rcx, 0xe7e1faeed5c31f77
mov edx, 0x86
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0xb4
mov r8d, 0x25
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor rsi, rax
sub rsp, 0x20
movabs rcx, 0xbc38ac1217bd6a47
mov edx, 0x54
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
xor edi, eax
imul edi, esi
lea rax, [rdi*4 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140006950
sub rsp, rax
mov r15, rsp
lea rax, [r13 + 0x3c]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax]
mov dword [rbp + 0x26c], eax
movsxd rax, dword [rbp + 0x26c]
mov qword [rbp + 0x170], rax
mov rax, qword [rbp + 0x170]
add rax, r13
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0x168]
mov eax, dword [rax]
mov dword [rbp + 0x24c], eax
mov rax, qword [rbp + 0x170]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xc7
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x99
mov r8d, 0xe7
mov r9, rsi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xca
mov r8, rsi
mov r9, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
mov ecx, 2
mov edx, 0x373a8e
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
movabs rcx, 0x74e980029c4ad7ef
mov edx, 0x21
mov r8, rsi
call fcn.140006b10
xor ecx, ecx
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x1f
call fcn.140006b10
mov ecx, 0xfffffffd
call fcn.140006b10
mov ecx, 0xffffffff
mov r8d, 0xe0ad13
mov rdx, rsi
call fcn.140006b10
mov ecx, 2
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
movabs rcx, 0x8b167ffd63b56d61
mov rdx, rsi
call fcn.140006b10
xor ecx, ecx
mov rdx, rsi
call fcn.140006b10
mov ecx, 0x4550
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x24c]
cmp ecx, eax
sete byte [rbp + 0x2af]
movzx eax, byte [rbp + 0x2af]
mov qword [rbp + 0x220], 0
cmp al, 1
jne 0x1400063ee
mov rax, qword [rbp + 0x168]
add rax, 4
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x40]
movzx esi, word [rax]
movzx eax, byte [rbp + 0x2af]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x24c]
mov eax, dword [rbp + 0x24c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xe4
mov edx, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xffffffff
mov r8d, 0xf4
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x24c]
sub rsp, 0x20
mov ecx, 2
mov edx, 0xb8515b
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x24c]
sub rsp, 0x20
movabs rcx, 0xf508e4aa1c1fe651
mov r8d, 0x5f
mov edx, esi
call fcn.140006b10
mov r8d, 0x77
mov r9d, 0x16
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x170]
sub rsp, 0x20
mov ecx, 0x6c
mov edx, 0x62
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x27a7
mov edx, 0x52
call fcn.140006b10
mov ecx, 0x1d
mov edx, 0xed
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x26c]
sub rsp, 0x20
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0x1e25
mov edx, 0xd1
call fcn.140006b10
movabs rcx, 0xb4310aab6cf0fd8c
mov edx, 0xeb8367
mov r8d, esi
call fcn.140006b10
mov r8d, 0x96
xor ecx, ecx
mov edx, esi
call fcn.140006b10
mov ecx, 0x14c
mov r8d, 0x6a
mov edx, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
cmp si, ax
sete byte [rbp + 0x29b]
mov qword [rbp + 0x220], 0
cmp byte [rbp + 0x29b], 0
jne 0x1400063ee
mov qword [rbp + 0x208], rbx
mov r14, qword [0x140015190]
mov rax, qword [rbp + 0x168]
add rax, 0x18
mov qword [rbp + 0x130], rax
mov rax, qword [rbp + 0x130]
add rax, 0x38
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x38]
mov eax, dword [rax]
mov dword [rbp + 0x2b0], eax
mov eax, dword [rbp + 0x2b0]
mov qword [rbp + 0x160], rax
mov rax, qword [rbp + 0x130]
add rax, 0x18
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov rsi, qword [rax]
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2b0]
mov eax, dword [rbp + 0x2b0]
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x56
call fcn.140006b10
add rsp, 0x20
mov r8d, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0x300ac4
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xb
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 2
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2b0]
mov eax, dword [rbp + 0x2b0]
sub rsp, 0x20
movabs rcx, 0x65670cb4f0706a55
mov edx, 0xb1
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x170]
mov rax, qword [rbp + 0x160]
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, edx
mov r9d, edx
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xc439f5
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xd1
call fcn.140006b10
mov ecx, 2
mov edx, 0x8b
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
movabs rcx, 0x9a98f34b0f8fc5ab
mov r8d, 0x7b6d69
mov r9d, 0x91
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x2af]
sub rsp, 0x20
mov ecx, 1
mov edx, 0xf9
mov r8d, 0x7a
call fcn.140006b10
movabs rcx, 0xd96089c53640ac4b
mov edx, 0x77
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x2af]
mov rax, qword [rbp + 0x160]
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0x2c
mov r8d, 0x1d
call fcn.140006b10
add rsp, 0x20
mov r9d, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xfd
mov r8d, 0xad
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xb629
call fcn.140006b10
mov ecx, 0x4d
mov edx, 0x87
mov r8d, 0xb7
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0x32e9
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov r8d, 0x37
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x160]
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0x3000
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
mov edx, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0x40
call fcn.140006b10
mov rcx, rsi
mov rdx, rdi
mov r8d, ebx
mov rbx, r12
mov r9d, eax
call r14
add rsp, 0x20
mov qword [rbp + 0x50], rax
test rax, rax
jne 0x1400019ad
mov r14, qword [0x140015190]
mov rax, qword [rbp + 0x38]
mov esi, dword [rax]
movzx eax, byte [rbp + 0x29b]
sub rsp, 0x20
mov ecx, 0xaa
mov edx, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0x5bfd
mov edx, 0x3db7e7
call fcn.140006b10
mov ecx, 0x70
mov r8d, 0xda
mov edx, esi
call fcn.140006b10
mov ecx, 0x5189
mov edx, esi
call fcn.140006b10
movabs rcx, 0x41319412884b997
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x160]
movzx eax, byte [rbp + 0x29b]
sub rsp, 0x20
mov ecx, 0xc4
mov r9d, 0x87
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x952d
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xe
mov edx, 0x53
mov r8d, 0x13
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0xfd31
mov edx, 0xd5a46a
call fcn.140006b10
movabs rcx, 0xfbece6bed77b7669
call fcn.140006b10
xor ecx, ecx
mov edx, esi
call fcn.140006b10
mov ecx, 0x69
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x3c
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x20b1
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x7d
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2b0]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x6217
call fcn.140006b10
add rsp, 0x20
movabs rdi, 0x696710e4e934200c
lea rcx, [rdi + 0x40]
sub rsp, 0x20
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov r8d, 9
mov r9d, 0x82
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x2af]
sub rsp, 0x20
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov edx, 0x69
mov rcx, rdi
mov r8d, esi
call fcn.140006b10
mov edx, 0x22
xor ecx, ecx
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov rcx, rsi
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0x3000
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
mov ecx, 0x40
mov edx, esi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov rbx, r12
mov r9d, eax
call r14
add rsp, 0x20
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x220], 0
test rax, rax
je 0x1400063ee
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x210], rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
movabs rcx, 0xebbe7347c1332567
mov edx, 0x9f
mov r8d, 0xdf
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x9b
mov r8d, 0x59
mov r9d, 0x45
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor rdi, rax
sub rsp, 0x20
movabs rcx, 0x48e8202fae3bfb30
mov edx, 0xe7
call fcn.140006b10
mov edx, 0x76
xor ecx, ecx
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0x50
call fcn.140006b10
mov rcx, rsi
mov edx, edi
mov r8, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov qword [rbp + 0x280], rax
cmp qword [rbp + 0x280], 0
sete byte [rbp + 0x2b7]
movzx eax, byte [rbp + 0x2b7]
cmp al, 1
jne 0x140001bfd
movzx esi, byte [rbp + 0x2b7]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xae
call fcn.140006b10
mov ecx, 0x7afafa69
mov edx, esi
call fcn.140006b10
mov ecx, 0xa061440
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x1050504
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x1010104
mov r9d, 3
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xb071544
mov edx, 0xba
mov r8d, esi
call fcn.140006b10
movabs rbx, 0x5a56cf88d7007f54
mov edx, 0xcf10ed
mov rcx, rbx
mov r8d, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor edi, eax
movzx eax, byte [rbp + 0x2b7]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 1
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 2
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
or rbx, 0x8000
sub rsp, 0x20
mov r8d, 0xd7
mov r9d, 0xa4
mov rcx, rbx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
xor ebx, eax
xor ebx, edi
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov rcx, rbx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x210]
sub rsp, 0x20
mov rdx, rdi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x14000626d
mov qword [rbp - 0x68], r15
mov rax, qword [rbp + 0x280]
add rax, 8
mov qword [rbp + 0x200], rax
mov rax, qword [rbp + 0x200]
mov rcx, qword [rbp + 0x210]
mov qword [rax], rcx
mov rax, qword [rbp + 0x280]
add rax, 0x18
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x280]
add rax, 0x10
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x280]
add rax, 0x1c
mov qword [rbp - 0x70], rax
mov rdi, qword [rbp + 0x40]
movzx r12d, byte [rbp + 0x2b7]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x11
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x1d0], rbx
mov rbx, rax
xor ebx, r12d
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, 0xb2
mov r8d, r12d
call fcn.140006b10
add rsp, 0x20
or ebx, eax
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.140006b10
add rsp, 0x20
and ebx, eax
sub rsp, 0x20
mov ecx, 0x1050504
mov r8d, 0xae15d3
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, r12d
sub rsp, 0x20
mov ecx, 0x1010104
mov edx, 0x7e
mov r8d, 0x9c
mov r9d, r12d
call fcn.140006b10
add rsp, 0x20
or esi, eax
add esi, ebx
sub rsp, 0x20
mov ecx, 0xb071544
mov edx, 0xd4
call fcn.140006b10
add rsp, 0x20
xor esi, eax
movabs rbx, 0x703996444aea0da3
lea rcx, [rbx + 0x10]
sub rsp, 0x20
mov r8d, 0x9d
mov edx, r12d
call fcn.140006b10
mov edx, 0x2a
mov r8d, 0x2b
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x2b7]
sub rsp, 0x20
mov ecx, 0xd9
mov edx, 0x607e93
call fcn.140006b10
mov ecx, 0xff
mov edx, 0xe3
mov r8d, 0x14
call fcn.140006b10
mov ecx, 0xc371
mov edx, r12d
call fcn.140006b10
mov ecx, 0x41
mov edx, 0x519a5b
mov r8d, r12d
mov r9d, r12d
call fcn.140006b10
add rsp, 0x20
or esi, eax
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
and esi, eax
imul esi, esi
sub rsp, 0x20
mov ecx, 0x9133
mov edx, 0x99
call fcn.140006b10
add rsp, 0x20
imul esi, eax
sub rsp, 0x20
mov rcx, rbx
mov edx, r12d
mov r8d, r12d
mov r9d, r12d
call fcn.140006b10
mov r9d, 0x34
xor ecx, ecx
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x28]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movzx eax, word [rdi + 0x12]
mov word [rbp + 0x25e], ax
movzx ebx, word [rbp + 0x25e]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
add rsp, 0x20
mov r14, rax
xor r14d, esi
or r14d, ebx
mov edi, ebx
or edi, esi
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x1f0], r13
mov r13, rax
xor r13d, edi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
mov r15, rax
imul r15d, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, ebx
sub rsp, 0x20
mov ecx, 2
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
imul edi, eax
sub edi, esi
xor ebx, esi
sub ebx, r14d
sub ebx, r15d
xor ebx, edi
sub rsp, 0x20
movabs rcx, 0xd2229f23818666a1
call fcn.140006b10
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
add r14d, eax
lea eax, [rsi + rbx]
mov ecx, esi
xor ecx, ebx
sub eax, ecx
and ebx, esi
add ebx, ebx
xor ebx, eax
sub rsp, 0x20
movabs rcx, 0x686d25bc1fbadded
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
add ebx, eax
imul ebx, r14d
movzx r14d, word [rbp + 0x25e]
mov ecx, ebx
shr r14d, cl
movzx eax, byte [rbp + 0x2b7]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r12d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x1f
call fcn.140006b10
mov ecx, 0xfffffffd
mov r8d, 0x3b
mov edx, r12d
mov r9d, r12d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r12d
mov r8d, r12d
mov r9d, r12d
call fcn.140006b10
mov ecx, 2
mov edx, r12d
mov r8d, r12d
mov r9d, r12d
call fcn.140006b10
movabs rcx, 0x34d241a0f2091e2a
mov edx, 0xe8fe4d
mov r8d, 0xdc
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x6e
mov r8d, 0xcd
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, edi
movzx eax, word [rbp + 0x25e]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xb4
mov r8d, r12d
call fcn.140006b10
mov ecx, 0xffffffff
mov r8d, 0x9e
mov edx, r12d
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x851655
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r12d
call fcn.140006b10
mov ecx, 2
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
movabs rcx, 0xcb2dbe5f0df6e1d7
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
add rsp, 0x20
add eax, edi
add eax, esi
and eax, r14d
mov word [rbp + 0x23a], ax
movzx eax, word [rbp + 0x23a]
mov rcx, qword [rbp + 0x280]
add rcx, 0x20
mov qword [rbp + 0x20], rcx
mov rcx, qword [rbp + 0x20]
mov dword [rcx], eax
mov rax, qword [rbp + 0x280]
add rax, 0x28
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x208]
mov qword [rax], rcx
mov rax, qword [rbp + 0x280]
add rax, 0x30
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rbp + 0x1d0]
mov qword [rax], rcx
mov rax, qword [rbp + 0x280]
add rax, 0x38
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x1c8]
mov qword [rax], rcx
mov rax, qword [rbp + 0x280]
add rax, 0x40
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rbp + 0x320]
mov qword [rax], rcx
mov r15, qword [0x140015190]
mov r14, qword [rbp + 0x130]
mov esi, dword [r14 + 0x3c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xf4f5d1
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0x6a
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x6bfc77
call fcn.140006b10
mov ecx, 2
mov edx, 0x1b
mov r8d, 0x99
call fcn.140006b10
add rsp, 0x20
movabs rbx, 0x6180688d931c00e4
lea rcx, [rbx + 0x1000]
sub rsp, 0x20
mov edx, 0x3c
mov r8d, r12d
mov r9d, r12d
call fcn.140006b10
mov edx, 0x16
xor ecx, ecx
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r12d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r12d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r12d
call fcn.140006b10
mov ecx, 2
call fcn.140006b10
mov edx, 0x2a
mov rcx, rbx
mov r8d, r12d
mov r9d, r12d
call fcn.140006b10
mov r8d, 0xd1
xor ecx, ecx
mov edx, r12d
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x2a0fa0
mov r8d, r12d
call fcn.140006b10
mov ecx, 0xff85
call fcn.140006b10
mov ecx, 0x87
mov edx, r12d
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x25
mov r8d, r12d
call fcn.140006b10
mov ecx, 0x8441
mov edx, 0xf6
mov r9d, 0x25fb7a
mov r8d, r12d
call fcn.140006b10
movabs rcx, 0x2a8daa52683a7c37
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
mov edx, 0x3b
mov r8d, 0xa7
mov r9d, 0x29
xor ecx, ecx
call fcn.140006b10
mov ecx, 0x5a
mov edx, r12d
call fcn.140006b10
mov ecx, 0xff
mov edx, r12d
call fcn.140006b10
mov ecx, 0xcb53
mov edx, 2
call fcn.140006b10
mov ecx, 0x88
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0xf
mov edx, r12d
call fcn.140006b10
mov ecx, 0x529
mov edx, r12d
call fcn.140006b10
movabs rcx, 0xd57255ad97c583cd
mov edx, r12d
call fcn.140006b10
mov edx, 0x1c
xor ecx, ecx
call fcn.140006b10
mov edx, 0xa979f1
mov rcx, rsi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov ecx, 0x1000
mov edx, 0x43
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 4
mov edx, r12d
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x210]
sub rsp, 0x20
mov rdx, rsi
mov r8d, edi
mov r9d, eax
call r15
add rsp, 0x20
mov rsi, rax
mov eax, dword [r14 + 0x3c]
mov dword [rbp + 0x248], eax
mov r8d, dword [rbp + 0x248]
sub rsp, 0x20
mov rcx, rsi
mov rdx, qword [rbp + 0x1f0]
call fcn.140006ae0
add rsp, 0x20
mov rax, qword [rbp + 0x48]
movsxd rax, dword [rax]
lea rcx, [rsi + rax]
mov rdx, qword [rbp + 0x280]
mov qword [rdx], rcx
mov rcx, qword [rbp + 0x210]
mov qword [rbp + 8], rcx
mov rcx, qword [rbp + 8]
mov qword [rsi + rax + 0x30], rcx
mov rax, qword [rbp + 0x280]
mov rax, qword [rax]
mov qword [rbp + 0x158], rax
mov rax, qword [rbp + 0x158]
movzx esi, word [rax + 6]
sub rsp, 0x20
mov ecx, 1
mov edx, r12d
call fcn.140006b10
xor ecx, ecx
mov edx, r12d
mov r8d, r12d
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x158]
mov qword [rbp + 0x60], rcx
cmp si, ax
je 0x140002d1e
mov rsi, qword [rbp + 0x158]
movzx eax, word [rbp + 0x25e]
mov rax, qword [rbp + 8]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0xb5
mov rdx, rsi
call fcn.140006b10
movabs rcx, 0x10a0c44593c4a357
mov edx, 0xa4
call fcn.140006b10
mov r9d, 0x24
xor ecx, ecx
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
movzx eax, word [rbp + 0x23a]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x248]
mov eax, dword [rbp + 0x248]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x1f
mov r9d, 0x31
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xfffffffd
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x248]
sub rsp, 0x20
mov ecx, 2
mov r8d, 0xa110c4
mov rdx, rsi
mov r9, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x248]
sub rsp, 0x20
movabs rcx, 0xef5f3bba6c3b5cc1
mov rdx, rsi
call fcn.140006b10
mov ecx, 0x18
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
add rax, rsi
mov rcx, qword [rbp + 0x158]
movzx ecx, word [rcx + 0x14]
add rcx, rax
mov rax, qword [rbp + 0x168]
add rax, 0x38
mov qword [rbp - 0x78], rax
mov qword [rbp + 0x58], rcx
mov dword [rbp + 0x19c], 0
jmp 0x14000289f
mov r12, qword [0x140015190]
mov esi, dword [rbp + 0x27c]
mov rax, qword [rbp + 0x200]
mov rcx, qword [rbp + 0x1f8]
mov r13d, dword [rcx + 0xc]
mov r15, r13
add r15, qword [rax]
movzx eax, byte [rbp + 0x29a]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xfffffffd
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 5
mov r8d, 0x2f
mov r9d, 5
call fcn.140006b10
mov ecx, 2
mov edx, 0x85
call fcn.140006b10
movabs rcx, 0x71535cf89aaeea1f
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov r14, rax
sub rsp, 0x20
mov edx, 0xfb
mov r8d, 0xe1
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add r14d, eax
mov edi, dword [rbp + 0x27c]
add edi, r13d
mov eax, dword [rbp + 0x27c]
xor eax, r13d
sub edi, eax
mov ebx, dword [rbp + 0x27c]
and ebx, r13d
sub rsp, 0x20
mov ecx, 1
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl ebx, cl
xor ebx, edi
sub rsp, 0x20
movabs rcx, 0x30485652a11df000
call fcn.140006b10
add rsp, 0x20
add ebx, eax
imul ebx, r14d
sub rsp, 0x20
mov ecx, 0xc
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
mov ecx, 0xff
mov edx, 0xca
call fcn.140006b10
mov ecx, 0x11a5
mov r8d, 0xe5
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xcd
mov r8d, 0xa
mov rdx, rsi
mov r9, rsi
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0xab
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xdbaf
mov r8d, 0x5ebb9b
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
movabs r14, 0x7b1f79e97d6e3383
lea rcx, [r14 + 0x40]
sub rsp, 0x20
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x1f
xor ecx, ecx
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
xor edi, eax
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x2a
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xfffffffd
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x4b58a2
mov r8d, 0x9b
mov r9, rsi
call fcn.140006b10
mov ecx, 2
mov edx, 0xfd
mov r8d, 0xfe
mov r9d, 0xc6
call fcn.140006b10
mov edx, 0x8b
mov rcx, r14
call fcn.140006b10
add rsp, 0x20
mov r13, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
xor r13d, eax
xor r13d, edi
sub rsp, 0x20
mov rcx, rsi
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov rcx, r13
call fcn.140006b10
mov rcx, r15
mov rdx, rdi
mov r8d, esi
mov r9d, eax
call r12
add rsp, 0x20
mov rsi, rax
mov rax, qword [rbp + 0x1f8]
mov edx, dword [rax + 0x14]
add rdx, qword [rbp + 0x1f0]
mov rax, qword [rbp]
mov r8d, dword [rax]
sub rsp, 0x20
mov rcx, rsi
call fcn.140006ae0
add rsp, 0x20
mov rax, qword [rbp + 0x1f8]
mov dword [rax + 8], esi
sub rsp, 0x20
mov edx, 0xb2
mov r8d, 0x2e
movabs rcx, 0x2e8d86cbfb7bfb5d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x41
mov r8d, 0x72
mov r9d, 0x2b
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add esi, eax
sub rsp, 0x20
mov edx, 0x5f
movabs rcx, 0xe52149c6b3a330f5
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov edx, 0x9d
mov r8d, 0xa9
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add edi, eax
imul edi, esi
add edi, dword [rbp + 0x250]
mov rax, qword [rbp + 0x1f8]
add rax, 0x28
mov rcx, qword [rbp + 0x280]
mov rcx, qword [rcx]
mov qword [rbp + 0x118], rcx
mov rcx, qword [rbp + 0x118]
movzx ecx, word [rcx + 6]
mov qword [rbp + 0x58], rax
mov dword [rbp + 0x19c], edi
cmp edi, ecx
jae 0x140002ced
mov eax, dword [rbp + 0x19c]
mov dword [rbp + 0x250], eax
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x1f8], rax
mov rax, qword [rbp + 0x1f8]
add rax, 0x10
mov qword [rbp], rax
mov rax, qword [rbp]
mov eax, dword [rax]
mov dword [rbp + 0x27c], eax
mov edx, dword [rbp + 0x250]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xe62886
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x27c]
mov edx, dword [rbp + 0x250]
sub rsp, 0x20
mov ecx, 0x7afafa69
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x250]
sub rsp, 0x20
mov ecx, 0x1050504
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x27c]
mov edx, dword [rbp + 0x250]
sub rsp, 0x20
mov ecx, 0x1010104
mov r8d, 0xb6
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x250]
sub rsp, 0x20
mov ecx, 0xb071544
mov r8d, edx
call fcn.140006b10
mov edx, 0x1a
mov r8d, 0x45
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x27c]
cmp ecx, eax
sete byte [rbp + 0x29a]
movzx eax, byte [rbp + 0x29a]
cmp al, 1
jne 0x140002510
mov rax, qword [rbp - 0x78]
mov eax, dword [rax]
mov dword [rbp + 0x230], eax
movzx edi, byte [rbp + 0x29a]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xb9
call fcn.140006b10
add rsp, 0x20
mov r15, rax
xor r15d, dword [rbp + 0x27c]
or r15d, edi
mov esi, dword [rbp + 0x27c]
or esi, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x55
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 0xfffffffd
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xcd
mov r8d, 0xe9
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, edi
mov edx, dword [rbp + 0x230]
sub rsp, 0x20
mov ecx, 2
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
sub eax, dword [rbp + 0x27c]
xor edi, dword [rbp + 0x27c]
sub edi, r15d
sub edi, r14d
xor edi, eax
mov eax, dword [rbp + 0x230]
cmp eax, edi
setg byte [rbp + 0x27b]
movzx eax, byte [rbp + 0x27b]
cmp al, 1
jne 0x1400027db
mov r13, qword [0x140015190]
mov r15d, dword [rbp + 0x230]
mov rax, qword [rbp + 0x200]
mov rcx, qword [rbp + 0x1f8]
mov r12d, dword [rcx + 0xc]
mov r14, r12
add r14, qword [rax]
sub rsp, 0x20
mov ecx, 0x81
mov edx, 0x92
mov r8, r15
mov r9, r15
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, dword [rbp + 0x230]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x7e
mov r8d, 0xcf
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xa2c5
mov rdx, r15
mov r8, r15
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
imul edi, ebx
sub rsp, 0x20
mov ecx, 0xe9
mov edx, 0x8d4f8d
mov r8d, 0x5d
mov r9d, 0x8b
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r12d
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, ebx
imul esi, esi
sub rsp, 0x20
mov ecx, 0xba2b
mov rdx, r15
call fcn.140006b10
add rsp, 0x20
imul eax, esi
xor esi, esi
cmp edi, eax
sete sil
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
movabs rdi, 0x1533fa4f8f4d4270
lea ebx, [rdi + rax]
add ebx, 0x1000
movzx eax, byte [rbp + 0x27b]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
mov rcx, rdi
mov rdx, r15
mov r8, r15
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
mov r8, r15
mov r9, r15
call fcn.140006b10
add rsp, 0x20
xor edi, eax
xor edi, ebx
mov ebx, r12d
sub ebx, esi
neg esi
mov eax, esi
xor eax, r12d
sub ebx, eax
and esi, r12d
sub rsp, 0x20
mov ecx, 1
mov edx, 0x44
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl esi, cl
xor esi, ebx
sub rsp, 0x20
movabs rbx, 0x58382e415ba93023
mov rcx, rbx
call fcn.140006b10
add rsp, 0x20
add esi, eax
sub rsp, 0x20
mov ecx, 1
mov r9d, 0xa7
mov rdx, r15
mov r8, r15
call fcn.140006b10
add rsp, 0x20
lea rcx, [rbx + 0x40]
sub rsp, 0x20
mov edx, 2
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor ebx, eax
xor ebx, esi
sub rsp, 0x20
mov rcx, r15
mov rdx, r15
mov r8, r15
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x5a
mov r8d, 0x54
mov rcx, rdi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r15
call fcn.140006b10
mov rcx, r14
mov rdx, rsi
mov r8d, edi
mov r9d, eax
call r13
add rsp, 0x20
mov rcx, qword [rbp + 0x1f8]
mov dword [rcx + 8], eax
sub rsp, 0x20
mov rcx, rax
xor edx, edx
mov r8, r15
call fcn.1400069b0
add rsp, 0x20
jmp 0x1400027db
cmp qword [rbp + 0x210], 0
mov rax, qword [rbp + 0x118]
mov rcx, qword [rbp + 0x118]
mov qword [rbp + 0x60], rax
mov dword [rbp + 0x234], 1
mov qword [rbp + 0x178], rcx
je 0x140003aec
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x30]
mov rax, qword [rax]
mov qword [rbp + 0x218], rax
mov rbx, qword [rbp + 0x218]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xf6
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, 0xde
mov r8d, 0x31
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, esi
sub rsp, 0x20
mov ecx, 0xa061440
mov edx, 0x77
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, edi
mov rdx, qword [rbp + 0x218]
sub rsp, 0x20
mov ecx, 0x1050504
mov r8, rdx
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, ebx
mov rdx, qword [rbp + 0x218]
sub rsp, 0x20
mov ecx, 0x1010104
mov r8, rdx
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, edi
add ebx, esi
mov rdx, qword [rbp + 0x218]
sub rsp, 0x20
mov ecx, 0xb071544
call fcn.140006b10
add rsp, 0x20
xor eax, ebx
sub rax, qword [rbp + 0x218]
add rax, qword [rbp + 0x210]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x148]
mov esi, dword [rax + 0xb4]
mov rax, qword [rbp + 0x218]
sub rsp, 0x20
mov ecx, 0xcd
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0xacd9
mov edx, 9
call fcn.140006b10
mov ecx, 0xde
mov edx, 0xef
mov r8d, 0x9b
mov r9d, 0xc7
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x218]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x31
mov r9, rdx
call fcn.140006b10
mov ecx, 0x5999
mov edx, 0x74
call fcn.140006b10
add rsp, 0x20
test esi, esi
sete byte [rbp + 0x27a]
mov dword [rbp + 0x234], 0
cmp byte [rbp + 0x27a], 0
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x178], rax
jne 0x140003aec
mov rax, qword [rbp + 0x148]
mov rcx, qword [rbp + 0x200]
mov edx, dword [rax + 0xb0]
mov rax, rdx
add rax, qword [rcx]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov eax, dword [rax]
mov dword [rbp + 0x198], eax
mov rsi, qword [rbp + 0x218]
movzx eax, byte [rbp + 0x27a]
lea edi, [rsi + rax]
mov ecx, esi
xor ecx, eax
sub edi, ecx
and esi, eax
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl esi, cl
xor esi, edi
mov eax, dword [rbp + 0x198]
mov dword [rbp + 0x234], 1
mov rcx, qword [rbp + 0x148]
mov qword [rbp + 0x178], rcx
cmp eax, esi
je 0x140003aec
mov rax, qword [rbp - 8]
mov dword [rbp + 0xec], eax
mov rax, qword [rbp - 0x10]
mov ecx, dword [rbp + 0x198]
mov dword [rbp + 0x1a0], ecx
mov qword [rbp + 0x68], rax
jmp 0x140003046
mov eax, dword [rbp + 0x258]
mov qword [rbp + 0x70], rax
mov rsi, qword [rbp + 0x70]
mov r15, qword [rbp + 0xf0]
mov r12d, dword [r15 + rsi]
add r15, rsi
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r12d
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, 0xbc
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, edi
sub rsp, 0x20
mov ecx, 0xa061440
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
mov r14, rax
and r14d, ebx
sub rsp, 0x20
mov ecx, 0x1050504
mov edx, 0x34
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, r12d
sub rsp, 0x20
mov ecx, 0x1010104
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
add edi, r14d
sub rsp, 0x20
mov ecx, 0xb071544
mov rdx, rsi
call fcn.140006b10
add rsp, 0x20
xor eax, edi
mov dword [rbp + 0x1a0], r12d
mov qword [rbp + 0x68], r15
cmp r12d, eax
je 0x140003ad1
mov rax, qword [rbp + 0x68]
mov qword [rbp + 0xf0], rax
mov r14d, dword [rbp + 0x1a0]
mov rax, qword [rbp + 0x200]
mov rcx, r14
add rcx, qword [rax]
mov qword [rbp - 0x18], rcx
mov rax, qword [rbp + 0xf0]
add rax, 4
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov r12d, dword [rax]
mov ebx, r14d
not ebx
or ebx, r12d
mov esi, r12d
or esi, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x71
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, esi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, edi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r12d
sub rsp, 0x20
mov ecx, 2
mov edx, 0x54
mov r8d, 0xbb
call fcn.140006b10
add rsp, 0x20
imul eax, edi
sub eax, r14d
mov r13d, r12d
xor r13d, r14d
sub r13d, ebx
sub r13d, esi
xor r13d, eax
sub rsp, 0x20
movabs rcx, 0x128de0fb5713a577
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r14d
mov r8d, r14d
mov r9d, r14d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
add rdi, rsi
sub rsp, 0x20
mov ecx, 0x81
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x26
call fcn.140006b10
mov ecx, 0x4061
call fcn.140006b10
mov ecx, 0x3e
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x3c
mov r8d, 0xe6
mov r9d, 0x51
call fcn.140006b10
mov ecx, 0xe80f
mov edx, 0x9a
mov r8d, r14d
call fcn.140006b10
mov edx, 0xe5
movabs rcx, 0x128de0faa8ec5a8f
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov r15, rax
add r15, rbx
xor r15, rdi
add r15, r12
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, r14d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r14d
call fcn.140006b10
mov ecx, 2
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
mov edx, 0xf5
movabs rcx, 0x8364527323540e0d
mov r8d, r14d
call fcn.140006b10
xor ecx, ecx
mov edx, r14d
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r14d
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x59
mov r8d, r14d
call fcn.140006b10
mov ecx, 2
mov edx, r14d
mov r8d, r14d
mov r9d, r14d
call fcn.140006b10
mov edx, 0xc7
mov r8d, 0xc7
mov r9d, 0x95
movabs rcx, 0x7d6939151b79f0c5
call fcn.140006b10
xor ecx, ecx
mov edx, r14d
call fcn.140006b10
mov ecx, 1
mov edx, 0x4b
mov r8d, 0x33
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shr r15, cl
sub rsp, 0x20
mov ecx, 0x7e
mov edx, 0x65
mov r8d, 0x5c
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, r13d
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xd1
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x3cc7
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
imul edi, ebx
sub rsp, 0x20
mov ecx, 0x40
mov edx, 0x54
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r15d
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xea
mov r9d, 0x5d
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, ebx
imul esi, esi
sub rsp, 0x20
mov ecx, 0x668b
mov r8d, 0xb4
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
imul eax, esi
xor ecx, ecx
cmp edi, eax
sete cl
neg ecx
mov qword [rbp + 0x70], r12
cmp r15d, ecx
jle 0x140002f7a
mov rax, qword [rbp + 0xf0]
add rax, 8
mov dword [rbp + 0x1a4], 0
mov qword [rbp + 0x78], rax
jmp 0x1400037d6
mov eax, dword [rbp + 0x194]
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rcx + rax]
add rdx, qword [rbp - 8]
mov qword [rcx + rax], rdx
sub rsp, 0x20
mov edx, 0x4f
mov r8d, 0x78a28b
movabs rcx, 0x37b621719e0d44a1
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor rdi, rax
sub rsp, 0x20
mov edx, 0xb6
movabs rcx, 0xc849de8e61f2bb60
mov r8, rdi
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
call fcn.140006b10
mov ecx, 1
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
add eax, dword [rbp + 0x2a8]
mov qword [rbp + 0x1c8], rax
mov rax, qword [rbp - 0x48]
add rax, 2
mov qword [rbp + 0x1f0], rax
mov rax, qword [rbp - 0x20]
mov eax, dword [rax]
mov dword [rbp + 0x258], eax
mov eax, dword [rbp + 0x258]
mov qword [rbp + 0x208], rax
sub rsp, 0x20
mov ecx, 0x4a
mov edx, 0x3ff2e0
mov r8d, 0x59
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, dword [rbp + 0x258]
sub rsp, 0x20
mov ecx, 0xff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
and esi, eax
imul esi, esi
sub rsp, 0x20
mov ecx, 0x29e3
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
imul esi, eax
sub rsp, 0x20
mov ecx, 0xbe
mov edx, 0x55
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0xbe8d
mov rdx, rdi
mov r8, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
movabs r12, 0x33d66e12fa7e323f
lea rcx, [r12 + 0xb039b88]
sub rsp, 0x20
mov edx, 0xc4
call fcn.140006b10
mov ecx, 0xffffffff
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r13, rax
xor r13d, dword [rbp + 0x258]
or r13d, esi
mov ebx, dword [rbp + 0x258]
or ebx, esi
mov r14, rsi
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, ebx
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r15, rax
imul r15d, esi
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x87
mov rdx, rdi
mov r9, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
mov rbx, r14
xor esi, ebx
sub rsp, 0x20
mov ecx, 2
mov r8d, 0xc63fdb
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
imul esi, eax
sub esi, dword [rbp + 0x258]
mov r14d, dword [rbp + 0x258]
xor r14d, ebx
sub r14d, r13d
sub r14d, r15d
xor r14d, esi
sub rsp, 0x20
mov rcx, r12
mov rdx, rdi
call fcn.140006b10
mov edx, 0x7b
movabs rcx, 0x1fffffff8
call fcn.140006b10
add rsp, 0x20
add rax, qword [rbp + 0x208]
mov qword [rbp + 0x208], rax
sub rsp, 0x20
mov ecx, 0x63
mov edx, 0x4d
mov r8d, 0xa6
mov r9d, 0xf9
call fcn.140006b10
mov ecx, 0xff
mov rdx, rdi
call fcn.140006b10
mov ecx, 0x8e75
mov edx, 0xbb
call fcn.140006b10
mov ecx, 0x5e
call fcn.140006b10
mov ecx, 0xff
mov rdx, rdi
call fcn.140006b10
mov ecx, 0x6731
call fcn.140006b10
mov edx, 0xde
movabs rcx, 0x213d9f32a5d2adeb
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor esi, eax
mov qword [rbp + 0x1d0], rsi
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x1b
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov r12, rax
xor r12d, r14d
mov r15, rbx
or r12d, r15d
mov esi, r15d
or esi, r14d
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, esi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov rdx, rdi
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, ebx
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x65
mov rdx, rdi
call fcn.140006b10
add rsp, 0x20
mov r13, rax
xor r13d, r15d
sub rsp, 0x20
mov ecx, 2
mov edx, 0x44
call fcn.140006b10
add rsp, 0x20
imul r13d, eax
sub r13d, r14d
xor r14d, r15d
sub r14d, r12d
sub r14d, esi
sub rsp, 0x20
mov edx, 0x8e
movabs rcx, 0xfe94cae11f2112c3
mov r8, rdi
call fcn.140006b10
add rsp, 0x20
xor r13d, eax
xor r13d, r14d
imul r13d, dword [rbp + 0x1d0]
mov ecx, r13d
mov rdx, qword [rbp + 0x208]
shr rdx, cl
mov rax, qword [rbp + 0x1c8]
mov dword [rbp + 0x1a4], eax
mov rcx, qword [rbp + 0x1f0]
mov qword [rbp + 0x78], rcx
cmp eax, edx
jge 0x140002f70
mov rax, qword [rbp + 0x78]
mov qword [rbp - 0x48], rax
mov eax, dword [rbp + 0x1a4]
mov dword [rbp + 0x2a8], eax
mov rax, qword [rbp - 0x48]
movzx r15d, word [rax]
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 9
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r15d
or edi, r15d
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r15d
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xfffffffd
mov r8d, 0x7c1d99
call fcn.140006b10
add rsp, 0x20
imul esi, eax
add esi, edi
mov r8d, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x53
mov r9d, r8d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r15d
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 2
call fcn.140006b10
add rsp, 0x20
imul edi, eax
sub edi, r15d
neg esi
xor esi, edi
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov r8d, 0x8e
movabs rcx, 0xe3420514e669edd3
mov r9d, edx
call fcn.140006b10
add rsp, 0x20
add esi, eax
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0x46
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, r15d
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xfe69
mov edx, 0xd2
call fcn.140006b10
add rsp, 0x20
mov r14, rax
imul r14d, ebx
sub rsp, 0x20
mov ecx, 0x67
mov edx, 0x86
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r15d
mov r8d, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x5a
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, ebx
imul edi, edi
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0x7d8f
mov r8d, 0x4c
call fcn.140006b10
add rsp, 0x20
imul eax, edi
xor edx, edx
cmp r14d, eax
sete dl
mov ecx, 0xbbe75c44
sub ecx, edx
imul ecx, esi
mov esi, r15d
shr esi, cl
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0x22
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0x9257
mov r8d, 0xb5
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0x7e
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0x4627
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
movabs rcx, 0x88449f41c77c89f
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 1
mov r8d, edx
call fcn.140006b10
movabs rcx, 0x3027c82f2b569ca1
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x2a8]
sub rsp, 0x20
mov ecx, 0xfff
mov r8d, 0x5c
mov r9d, edx
call fcn.140006b10
add rsp, 0x20
and eax, r15d
mov dword [rbp + 0x194], eax
cmp esi, 0xa
je 0x1400033e0
cmp esi, 3
jne 0x1400033f6
mov eax, dword [rbp + 0x194]
mov rcx, qword [rbp - 0x18]
mov edx, dword [rcx + rax]
add edx, dword [rbp + 0xec]
mov dword [rcx + rax], edx
jmp 0x1400033f6
mov rax, qword [rbp + 0x280]
mov rax, qword [rax]
mov dword [rbp + 0x234], 1
mov qword [rbp + 0x178], rax
mov rax, qword [rbp + 0x178]
mov qword [rbp - 0x50], rax
mov esi, dword [rbp + 0x234]
mov rax, qword [rbp + 0x280]
mov dword [rax + 0x24], esi
mov rax, qword [rbp - 0x50]
mov r15d, dword [rax + 0x94]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, r15d
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, edi
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.140006b10
add rsp, 0x20
mov r14, rax
and r14d, ebx
sub rsp, 0x20
mov ecx, 0x1050504
mov edx, 0xed
mov r8d, 0xcf
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, r15d
sub rsp, 0x20
mov ecx, 0x1010104
mov edx, 0x3f1acd
mov r9d, 0x56
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
add edi, r14d
sub rsp, 0x20
mov ecx, 0xb071544
mov edx, 0xb8026b
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
xor eax, edi
cmp r15d, eax
sete byte [rbp + 0x279]
cmp byte [rbp + 0x279], 0
jne 0x140003d41
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp + 0x200]
mov rcx, qword [rcx]
mov qword [rbp + 0x1e8], rcx
mov edi, dword [rax + 0x90]
mov rsi, rdi
add rsi, qword [rbp + 0x1e8]
movzx eax, byte [rbp + 0x279]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0xc5
mov r9d, 0x4e
mov edx, edi
call fcn.140006b10
add rsp, 0x20
movabs rbx, 0x3090cbe3f6f61e83
lea rcx, [rbx + 0x14]
sub rsp, 0x20
mov edx, 0x21d9e7
call fcn.140006b10
xor ecx, ecx
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0x1c
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0xff
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0x2513
mov edx, edi
call fcn.140006b10
mov ecx, 0x82
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0xff
mov edx, 0xda
mov r8d, edi
call fcn.140006b10
mov ecx, 0xfd99
mov edx, edi
call fcn.140006b10
mov rcx, rbx
call fcn.140006b10
mov r9d, 0xaa8b1d
xor ecx, ecx
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0x14
mov edx, 0xdd
mov r8d, edi
call fcn.140006b10
mov rcx, rsi
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
add rsp, 0x20
mov ebx, eax
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xc
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x80], rsi
cmp ebx, eax
je 0x140004425
mov rax, qword [rbp + 0x280]
mov rax, qword [rax]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
mov rax, qword [rax + 0x30]
mov qword [rbp + 0x260], rax
mov rax, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x85d97e
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0x7afafa69
mov r8d, 0x267863
mov r9, rdx
call fcn.140006b10
add rsp, 0x20
mov r8, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0xa061440
mov edx, 0x66
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0x1050504
mov r8d, 0xe2
mov r9d, 0x4f
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0x1010104
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0xb071544
call fcn.140006b10
add rsp, 0x20
mov r8, qword [rbp + 0x260]
sub rsp, 0x20
movabs rcx, 0x85692875309da59d
mov edx, 0x43
mov r9, r8
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0xae
mov edx, 0xd6
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x79a3
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0x4d
mov r8d, 0xa9
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0xff
mov r8, rdx
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0x232f
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
movabs rcx, 0x473ef74b00000000
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
xor ecx, ecx
mov r8, rdx
call fcn.140006b10
movabs rcx, 0xffffffff00000000
call fcn.140006b10
add rsp, 0x20
and rax, qword [rbp + 0x260]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x1e0]
movzx esi, word [rax + 6]
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 1
mov r8d, 0x23
mov r9, rdx
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x260]
sub rsp, 0x20
mov r8d, 0xaf
mov r9d, 4
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
cmp si, ax
sete byte [rbp + 0x275]
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0xd0], rax
cmp byte [rbp + 0x275], 0
je 0x140004fc6
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x138], rax
mov rax, qword [rbp + 0x200]
mov rax, qword [rax]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x138]
mov eax, dword [rax + 0xd0]
mov dword [rbp + 0x288], eax
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x288]
mov edx, dword [rbp + 0x288]
sub rsp, 0x20
mov ecx, 0x7afafa69
mov r8d, 0xc3ca48
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x288]
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x288]
sub rsp, 0x20
mov ecx, 0x1050504
mov r8d, 0x858458
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x288]
mov edx, dword [rbp + 0x288]
sub rsp, 0x20
mov ecx, 0x1010104
call fcn.140006b10
mov ecx, 0xb071544
mov edx, 0xb4
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x288]
cmp ecx, eax
sete byte [rbp + 0x273]
cmp byte [rbp + 0x273], 0
mov rax, qword [rbp + 0x138]
mov qword [rbp + 0x180], rax
jne 0x140004226
mov esi, dword [rbp + 0x288]
mov rax, qword [rbp - 0x30]
mov rax, qword [rax + rsi + 0x18]
mov qword [rbp - 0x38], rax
movzx eax, byte [rbp + 0x273]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xee
mov r9d, 0x39
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x288]
mov eax, dword [rbp + 0x288]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x61
mov r8, rsi
call fcn.140006b10
mov ecx, 0xfffffffd
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 2
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x288]
mov eax, dword [rbp + 0x288]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp + 0x138]
mov qword [rbp + 0x180], rdx
cmp rcx, rax
je 0x140004226
mov rax, qword [rbp - 0x38]
mov rcx, qword [rax]
mov qword [rbp + 0xd8], rcx
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0x138]
mov qword [rbp + 0x180], rax
test rcx, rcx
je 0x140004226
movabs r14, 0x15e74b815ea14d65
movabs rdi, 0xea18b47ea15eb29c
nop
mov rbx, qword [rbp + 0xe0]
mov rsi, qword [rbp + 0xd8]
sub rsp, 0x20
mov edx, 0xba
mov rcx, r14
call fcn.140006b10
mov edx, 0x81d8a9
xor ecx, ecx
call fcn.140006b10
mov edx, 0x7d
mov r8d, 0x1a
mov rcx, rdi
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
mov edx, eax
xor r8d, r8d
call rsi
add rsp, 0x20
mov rax, qword [rbx + 8]
add rbx, 8
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rbx
test rax, rax
jne 0x140004190
mov rax, qword [rbp + 0x280]
mov rax, qword [rax]
mov qword [rbp + 0x180], rax
mov rax, qword [rbp + 0x180]
mov eax, dword [rax + 0x28]
mov dword [rbp + 0x268], eax
mov edx, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x268]
mov edx, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0x7afafa69
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0x1010104
mov edx, 0x42
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0xb071544
call fcn.140006b10
mov edx, 0xcb75bd
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x268]
cmp ecx, eax
sete byte [rbp + 0x298]
cmp byte [rbp + 0x298], 0
je 0x140005fef
mov rax, qword [rbp + 0x280]
mov qword [rax + 0x48], 0
jmp 0x1400063e0
mov r14, qword [rbp + 0x1b0]
add r14, 0x14
sub rsp, 0x20
mov edx, 0x7a
movabs rcx, 0x240c5d5d9e5f4ee0
call fcn.140006b10
add rsp, 0x20
mov r12, rax
sub rsp, 0x20
mov edx, 0xdd
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
add r12, rax
sub rsp, 0x20
mov edx, 0x86
movabs rcx, 0xdbf3a2a261a0b134
call fcn.140006b10
add rsp, 0x20
lea rdx, [rax + r12]
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
add rsp, 0x20
mov r15d, eax
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0xb9
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
xor esi, r15d
sub rsp, 0x20
mov ecx, 0x7afafa69
mov r8d, 0x757df0
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, esi
sub rsp, 0x20
mov ecx, 0xa061440
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
and esi, ebx
sub rsp, 0x20
mov ecx, 0x1050504
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, r15d
sub rsp, 0x20
mov ecx, 0x1010104
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
add edi, esi
sub rsp, 0x20
mov ecx, 0xb071544
mov r8d, 0xba
mov rdx, r12
call fcn.140006b10
add rsp, 0x20
xor eax, edi
mov qword [rbp + 0x80], r14
cmp r15d, eax
jne 0x140003d41
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x1b0], rax
mov rax, qword [rbp + 0x1b0]
mov eax, dword [rax + 0xc]
mov dword [rbp + 0x290], eax
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, 0xf4
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0x1050504
mov r8d, 0xc990ca
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x290]
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0x1010104
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 0xb071544
mov r8d, edx
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x290]
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x290]
cmp ecx, eax
sete byte [rbp + 0x278]
cmp byte [rbp + 0x278], 0
jne 0x140003d41
mov rax, qword [rbp + 0x18]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x1c0]
mov rdx, qword [rcx]
mov ecx, dword [rbp + 0x290]
mov qword [rbp + 0x150], rcx
mov rcx, qword [rbp + 0x1e8]
add rcx, qword [rbp + 0x150]
sub rsp, 0x20
call rax
add rsp, 0x20
mov qword [rbp + 0x1b8], rax
cmp qword [rbp + 0x1b8], 0
sete byte [rbp + 0x2a7]
cmp byte [rbp + 0x2a7], 0
jne 0x14000625d
mov rax, qword [rbp + 0x128]
mov r14d, dword [rax]
mov rax, qword [rbp + 0x150]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x727b2f
mov r8d, 0x97
call fcn.140006b10
movabs rcx, 0x75641eaf5279043e
call fcn.140006b10
add rsp, 0x20
movzx edi, byte [rbp + 0x2a7]
mov rbx, qword [rbp + 0x150]
sub rsp, 0x20
mov ecx, 0x3e
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
or esi, edi
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xd9
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, esi
imul edi, edi
sub rsp, 0x20
mov ecx, 0x3463
mov edx, 0x79
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
imul esi, edi
sub rsp, 0x20
mov ecx, 0x3b
mov edx, 0xbb
mov r8d, 0x7811d5
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, ebx
sub rsp, 0x20
mov ecx, 0xff
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0xce47
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
imul eax, ebx
mov qword [rbp + 0x1c8], rax
xor edi, edi
cmp esi, eax
sete dil
sub rsp, 0x20
mov r8d, 0x4c
movabs rcx, 0x8a9be150ad86fbc3
mov edx, r14d
mov r9d, r14d
call fcn.140006b10
mov edx, 0xd65284
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
add eax, r14d
cdqe
mov qword [rbp + 0x110], rax
mov dword [rbp + 0x208], edi
mov r15d, edi
neg r15d
mov esi, r14d
sub esi, edi
mov eax, r15d
xor eax, r14d
sub esi, eax
mov edi, r15d
and edi, r14d
sub rsp, 0x20
mov ecx, 1
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl edi, cl
xor edi, esi
mov qword [rbp + 0x1d0], rdi
sub rsp, 0x20
movabs rcx, 0x79766092ace4a02a
mov edx, r14d
call fcn.140006b10
xor ecx, ecx
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x278]
movzx eax, byte [rbp + 0x2a7]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, r14d
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 2
mov edx, 0x7e
mov r8d, r14d
call fcn.140006b10
movabs rcx, 0x86899f6d531b5fd9
mov edx, r14d
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov ecx, 3
mov edx, 0x62
mov r9d, 0x67
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov rdx, qword [rbp + 0x110]
mov ecx, eax
shl rdx, cl
mov qword [rbp + 0x1f0], rdx
sub rsp, 0x20
mov ecx, 1
mov edx, 0x36
call fcn.140006b10
mov r8d, 0x173aa9
movabs rcx, 0x31be2457cfad437c
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov edx, 0x4f
xor ecx, ecx
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
xor esi, eax
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
xor ebx, r15d
or ebx, dword [rbp + 0x290]
mov edi, dword [rbp + 0x290]
or edi, r15d
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x85
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov r13, rax
xor r13d, edi
sub rsp, 0x20
mov ecx, 0xfffffffd
mov edx, 0xe671ed
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
mov r12, rax
imul r12d, r13d
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, dword [rbp + 0x290]
sub rsp, 0x20
mov ecx, 2
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
imul edi, eax
add edi, dword [rbp + 0x208]
xor r15d, dword [rbp + 0x290]
sub r15d, ebx
sub r15d, r12d
xor r15d, edi
movabs rax, 0x31be2457cfad437c
lea rcx, [rax + 0x1000]
sub rsp, 0x20
call fcn.140006b10
add rsp, 0x20
mov r12, rax
sub rsp, 0x20
mov edx, 0x55
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
xor r12d, eax
xor r12d, esi
mov r13, qword [rbp + 0x1d0]
lea esi, [r15 + r13]
mov eax, r13d
xor eax, r15d
sub esi, eax
and r15d, r13d
sub rsp, 0x20
mov ecx, 1
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov ecx, eax
shl r15d, cl
sub rsp, 0x20
movabs rcx, 0x25c98e4bc47374f
mov edx, r14d
mov r8d, r14d
call fcn.140006b10
add rsp, 0x20
xor esi, eax
xor esi, r15d
sub rsp, 0x20
mov ecx, 0xb5
mov edx, 0x11
mov r8d, 0x72
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
or edi, dword [rbp + 0x1c8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x7c
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, edi
imul ebx, ebx
sub rsp, 0x20
mov ecx, 0x6e15
mov r8d, 0x2e
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
imul edi, ebx
sub rsp, 0x20
mov ecx, 0x42
mov edx, 0xa
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, r13d
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x3b
call fcn.140006b10
add rsp, 0x20
and eax, ebx
imul eax, eax
imul eax, eax, 0xeef1
xor ebx, ebx
cmp edi, eax
sete bl
sub rsp, 0x20
movabs rcx, 0xfda3671b43b8c8b5
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
sub eax, ebx
add esi, eax
sub rsp, 0x20
mov rcx, qword [rbp + 0x1f0]
mov edx, r14d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov rcx, r12
movabs r12, 0x9bea66a23eff7fee
call fcn.140006b10
xor ecx, ecx
mov rdx, rdi
mov r8d, eax
mov r9d, esi
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov qword [rbp + 0x108], rax
cmp qword [rbp + 0x108], 0
sete byte [rbp + 0x277]
cmp byte [rbp + 0x277], 0
jne 0x140006102
mov rax, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x108]
mov qword [rax], rcx
mov rax, qword [rbp + 0x128]
movsxd rdi, dword [rax]
movzx eax, byte [rbp + 0x277]
mov rax, qword [rbp + 0x110]
sub rsp, 0x20
mov ecx, 0x9a
mov edx, 0x52
mov r8d, 0x39
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x71
mov r8d, 0x67
call fcn.140006b10
mov ecx, 0x1e89
mov r8d, 0x9d
mov edx, edi
call fcn.140006b10
mov ecx, 0xcc
mov edx, 0x39
mov r8d, 0xbb41f2
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x62fb
mov r8d, 0x8c
mov edx, edi
mov r9d, edi
call fcn.140006b10
mov r8d, 0x7c
movabs rcx, 0x223c8c36984b1bef
mov edx, edi
call fcn.140006b10
mov edx, 0x35
mov r8d, 0x94
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x110]
sub rsp, 0x20
mov ecx, 0xd4
mov r8d, 0xb5b64d
mov edx, edi
call fcn.140006b10
mov ecx, 0xff
mov edx, edi
call fcn.140006b10
mov ecx, 0xabbb
mov edx, edi
call fcn.140006b10
mov ecx, 0x1e
call fcn.140006b10
mov ecx, 0xff
mov edx, edi
call fcn.140006b10
mov edx, 0xe3
mov r8d, 0xb2
movabs rcx, 0xeffb7c60e1c3730f
mov r9d, edi
call fcn.140006b10
xor ecx, ecx
mov edx, edi
mov r8d, edi
call fcn.140006b10
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
add eax, edi
mov rcx, qword [rbp + 0x128]
mov dword [rcx], eax
mov rax, qword [rbp + 0x108]
mov rcx, qword [rbp + 0x1b8]
mov qword [rax + rdi*8], rcx
mov rax, qword [rbp + 0x1b0]
mov eax, dword [rax]
mov dword [rbp + 0x190], eax
movzx eax, byte [rbp + 0x2a7]
mov rax, qword [rbp + 0x150]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x52
mov r8d, edi
mov r9d, edi
call fcn.140006b10
xor ecx, ecx
mov edx, edi
mov r8d, edi
mov r9d, edi
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x190]
cmp ecx, eax
jne 0x140004c64
mov rax, qword [rbp + 0x1b0]
mov eax, dword [rax + 0x10]
add rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], rax
jmp 0x140004c90
mov eax, dword [rbp + 0x190]
add rax, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x1b0]
mov ecx, dword [rcx + 0x10]
add rcx, qword [rbp + 0x1e8]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], rcx
mov rdi, qword [rbp + 0x90]
mov rbx, qword [rbp + 0x88]
mov rsi, qword [rbx]
sub rsp, 0x20
mov ecx, 0xffffffff
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
mov ecx, 0x7afafa69
call fcn.140006b10
mov ecx, 0xa061440
mov rdx, rsi
call fcn.140006b10
mov ecx, 0x1050504
mov edx, 0x64
mov r8, rsi
mov r9, rsi
call fcn.140006b10
mov ecx, 0x1010104
mov r8d, 0x87
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xb071544
mov edx, 0xe9
call fcn.140006b10
mov edx, 0x65
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], rbx
cmp rsi, rax
je 0x1400042f8
nop word cs:[rax + rax]
mov rax, qword [rbp + 0xa8]
mov qword [rbp - 0x80], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp + 0x98]
mov qword [rbp + 0x140], rax
mov rdx, qword [rbp + 0x140]
sub rsp, 0x20
mov rcx, 0xffffffffffffffff
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp + 0x140]
cmp rcx, rax
setg byte [rbp + 0x299]
cmp byte [rbp + 0x299], 0
je 0x140004de0
mov rax, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x140]
mov rbx, qword [rbp + 0x120]
mov rdx, qword [rbp + 0x1c0]
mov r8, qword [rdx]
lea rdx, [rax + rcx]
add rdx, 2
mov rcx, qword [rbp + 0x1b8]
sub rsp, 0x20
call qword [rbx]
jmp 0x140004f34
mov rax, qword [rbp + 0x120]
mov r15, qword [rax]
mov rax, qword [rbp + 0x1c0]
mov r14, qword [rax]
movzx edi, byte [rbp + 0x299]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0x7afafa69
mov r8d, 0x14
mov edx, edi
call fcn.140006b10
mov ecx, 0xa061440
mov edx, 0x12
mov r8d, 0x7c
mov r9d, edi
call fcn.140006b10
mov ecx, 0x1050504
mov r8d, 0x7d
mov edx, edi
call fcn.140006b10
mov ecx, 0x1010104
mov edx, 0xd7
call fcn.140006b10
mov ecx, 0xb071544
mov edx, edi
call fcn.140006b10
movabs rcx, 0x6415995dc1018011
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
movzx eax, byte [rbp + 0x299]
sub rsp, 0x20
mov ecx, 0xed
mov edx, 0x39
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x17
mov edx, edi
mov r9d, edi
call fcn.140006b10
mov ecx, 0x970f
mov edx, 0x54
mov r8d, edi
mov r9d, edi
call fcn.140006b10
mov ecx, 0x3f
mov edx, 0xac
call fcn.140006b10
mov ecx, 0xff
mov edx, edi
mov r8d, edi
mov r9d, edi
call fcn.140006b10
mov ecx, 0x782b
call fcn.140006b10
mov edx, 0xb2
mov rcx, r12
mov r8d, edi
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov r8d, 0xba
xor ecx, ecx
mov edx, edi
call fcn.140006b10
add rsp, 0x20
xor rsi, rax
add rsi, rbx
and rsi, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x1b8]
sub rsp, 0x20
mov rdx, rsi
mov r8, r14
call r15
add rsp, 0x20
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rbp - 0x58]
mov qword [rcx], rax
test rax, rax
sete byte [rbp + 0x276]
cmp byte [rbp + 0x276], 0
jne 0x140006102
mov rdi, qword [rbp - 0x80]
mov rbx, qword [rbp - 0x58]
add rbx, 8
mov rsi, qword [rdi + 8]
add rdi, 8
movzx eax, byte [rbp + 0x276]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x867679
call fcn.140006b10
xor ecx, ecx
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], rdi
cmp rsi, rax
jne 0x140004d40
jmp 0x1400042f8
movabs r13, 0x450218919f119190
movabs r12, 0x255ef891917a92b5
movabs r14, 0x3ab98374c4ba044
mov rsi, qword [rbp + 0x1e0]
mov rax, qword [rbp + 0x260]
movzx eax, byte [rbp + 0x275]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x95
mov r8, rsi
call fcn.140006b10
movabs rcx, 0x62768f7c04d4a086
mov r8d, 0xbd
mov rdx, rsi
call fcn.140006b10
xor ecx, ecx
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
add rsp, 0x20
mov rax, qword [rbp + 0x260]
sub rsp, 0x20
mov ecx, 0x54
mov rdx, rsi
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x43
mov rdx, rsi
mov r9, rsi
call fcn.140006b10
mov ecx, 0x6fcb
call fcn.140006b10
mov ecx, 0x56
mov edx, 0x69
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x99f5d2
call fcn.140006b10
mov ecx, 0x51cb
call fcn.140006b10
movabs rcx, 0x9d897083fb2b5f92
mov r9d, 0xe
mov rdx, rsi
mov r8, rsi
call fcn.140006b10
mov ecx, 0x18
mov edx, 0x32
mov r8, rsi
mov r9, rsi
call fcn.140006b10
add rsp, 0x20
add rax, rsi
mov rcx, qword [rbp + 0x1e0]
movzx ecx, word [rcx + 0x14]
add rcx, rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], rcx
mov dword [rbp + 0x1a8], 0
jmp 0x1400052d5
mov rax, qword [rbp + 0x1d8]
mov ebx, dword [rax + 0x10]
mov rax, qword [rbp + 0x1d8]
mov esi, dword [rax + 8]
or rsi, qword [rbp - 0x28]
sub rsp, 0x20
mov ecx, 0x6d
mov edx, 0x6d
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 0xff
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov ecx, 0x3ba5
mov r8d, 0x49
mov edx, ebx
call fcn.140006b10
mov ecx, 0xbe
mov edx, 0x13
call fcn.140006b10
mov ecx, 0xff
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov ecx, 0x949f
mov edx, 0x41
call fcn.140006b10
movabs rcx, 0x7209bfa0ad7c10df
call fcn.140006b10
mov ecx, 0x7b
mov edx, 0xa1
call fcn.140006b10
mov ecx, 0xff
mov edx, 4
mov r8d, ebx
call fcn.140006b10
mov ecx, 0x3daf
mov r8d, 0xdd
mov edx, ebx
call fcn.140006b10
mov ecx, 0x67
mov r9d, 0xfa
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov ecx, 0xff
mov edx, ebx
call fcn.140006b10
mov ecx, 0xc091
mov edx, 0xe2
call fcn.140006b10
movabs rcx, 0x8df6405f5284af21
mov edx, ebx
call fcn.140006b10
xor ecx, ecx
mov edx, ebx
mov r8d, ebx
call fcn.140006b10
mov rcx, rbx
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
mov ecx, 0xc000
mov edx, ebx
call fcn.140006b10
mov rcx, rsi
mov rdx, rdi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
add rsp, 0x20
lea rcx, [r13 + 1]
sub rsp, 0x20
mov edx, 0xf7
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
mov rcx, r13
call fcn.140006b10
mov edx, 0x5d
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
add eax, dword [rbp + 0x29c]
mov rcx, qword [rbp + 0x1d8]
add rcx, 0x28
mov rdx, qword [rbp + 0x280]
mov rdx, qword [rdx]
movzx ebx, word [rdx + 6]
mov qword [rbp + 0xb8], rdx
mov qword [rbp + 0xc0], rcx
mov dword [rbp + 0x1a8], eax
mov qword [rbp + 0xd0], rdx
cmp eax, ebx
jae 0x140003f99
mov eax, dword [rbp + 0x1a8]
mov dword [rbp + 0x29c], eax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0xb8]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp + 0x1d8]
mov eax, dword [rax + 0x24]
mov dword [rbp + 0x28c], eax
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0x87
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov r8d, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0x7afafa69
mov edx, 0x47
mov r9d, 0x47f45d
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0xa061440
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0x1050504
mov r8d, edx
mov r9d, edx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0x1010104
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0xb071544
call fcn.140006b10
add rsp, 0x20
mov r8d, dword [rbp + 0x29c]
sub rsp, 0x20
mov edx, 0xab
mov rcx, r12
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
lea rcx, [r12 + 0x2000000]
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
call fcn.140006b10
mov ecx, 0x2000000
call fcn.140006b10
add rsp, 0x20
and eax, dword [rbp + 0x28c]
mov dword [rbp + 0x2a0], eax
mov r9d, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0xb7
mov edx, 0xf7
mov r8d, 0x94
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xff
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0xee4f
mov r8d, 0x6eba31
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0x1a
mov r8d, 0x5e
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2a0]
mov edx, dword [rbp + 0x29c]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0x57
mov r9d, 0xf2
call fcn.140006b10
mov ecx, 0x3749
call fcn.140006b10
add rsp, 0x20
mov r8d, dword [rbp + 0x29c]
sub rsp, 0x20
mov edx, 0x56
xor ecx, ecx
mov r9d, r8d
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x2a0]
cmp ecx, eax
sete byte [rbp + 0x2a6]
cmp byte [rbp + 0x2a6], 0
je 0x140005110
movzx r15d, byte [rbp + 0x2a6]
sub rsp, 0x20
mov ecx, 0x4a
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
mov ecx, 0xebb1
mov edx, r15d
call fcn.140006b10
mov ecx, 0xd1
mov edx, 0x43
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
mov ecx, 0x96b
mov edx, 0xcb
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
movabs rsi, 0x4e101c34779585ef
lea rcx, [rsi + 1]
sub rsp, 0x20
mov edx, 0x83
call fcn.140006b10
mov ecx, 0xb9
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
mov ecx, 0x1a4d
mov edx, r15d
call fcn.140006b10
mov ecx, 0xb4
call fcn.140006b10
mov ecx, 0xff
mov edx, r15d
call fcn.140006b10
mov ecx, 0x6439
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
mov rcx, rsi
mov edx, r15d
call fcn.140006b10
mov r9d, 0x4a
xor ecx, ecx
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
mov ecx, 0x1f
mov r8d, 0x7a
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov esi, dword [rbp + 0x28c]
mov ecx, eax
shr rsi, cl
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 1
call fcn.140006b10
movabs rcx, 0x93a4057983b78de7
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x83
mov r8d, 0xda
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x77
mov r8d, 0xe2
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, r15d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x2b
mov r9d, 0x54
mov r8d, r15d
call fcn.140006b10
mov ecx, 2
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
movabs rcx, 0xceb94e3d90444f32
call fcn.140006b10
mov r8d, 0xff
xor ecx, ecx
mov edx, r15d
call fcn.140006b10
mov ecx, 0x1e
mov edx, 0x5b9f1e
mov r8d, 0x4c
call fcn.140006b10
add rsp, 0x20
mov edi, dword [rbp + 0x28c]
mov ecx, eax
shr rdi, cl
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 1
mov edx, r15d
call fcn.140006b10
movabs rcx, 0x3d6c2f3d553fd4d9
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
xor ecx, ecx
mov edx, r15d
call fcn.140006b10
mov ecx, 1
mov edx, 0x79
mov r8d, 0xef
call fcn.140006b10
movabs rcx, 0x4940f9c5ccd36b69
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
mov ecx, 1
mov edx, 0xea
mov r8d, 0x84
call fcn.140006b10
add rsp, 0x20
and edi, eax
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xa2
mov edx, r15d
mov r9d, r15d
call fcn.140006b10
mov ecx, 0xffffffff
mov r8d, 0xb7
mov edx, r15d
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, r15d
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r15d
call fcn.140006b10
mov ecx, 2
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
lea rcx, [r14 + 0x15]
sub rsp, 0x20
mov edx, 0x43
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x64
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 0xffffffff
mov r8d, 0xb1
mov r9d, 0xa7
mov edx, r15d
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 9
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, r15d
call fcn.140006b10
mov ecx, 2
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov rcx, r14
mov edx, r15d
call fcn.140006b10
mov edx, 3
xor ecx, ecx
mov r8d, r15d
call fcn.140006b10
mov ecx, 0x1d
mov edx, 0x7d
mov r8d, 0x3418cd
mov r9d, r15d
call fcn.140006b10
add rsp, 0x20
mov ebx, dword [rbp + 0x28c]
mov ecx, eax
shr ebx, cl
movzx eax, byte [rbp + 0x2a6]
sub rsp, 0x20
mov ecx, 0xb7
mov edx, 0xd6
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x8c66ec
mov r8d, 0xf3
call fcn.140006b10
mov ecx, 0xf1af
mov edx, 0x73
call fcn.140006b10
mov ecx, 0x64
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x64
mov r8d, r15d
call fcn.140006b10
mov ecx, 0x2593
mov edx, r15d
call fcn.140006b10
movabs rcx, 0xb6732508bf351d31
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
mov ecx, 0xcd
mov edx, 0xf5fe25
call fcn.140006b10
mov ecx, 0xff
mov edx, 0x96
call fcn.140006b10
mov ecx, 0xb99
mov edx, r15d
call fcn.140006b10
mov ecx, 0x66
mov r8d, 0x31
mov edx, r15d
call fcn.140006b10
mov ecx, 0xff
call fcn.140006b10
mov ecx, 0x2239
mov edx, r15d
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
mov r8d, 0x7f
movabs rcx, 0xde0fa667c4bf1bd1
mov edx, r15d
call fcn.140006b10
mov edx, 0x22
mov r8d, 3
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
and eax, ebx
mov dword [rbp + 0x22c], eax
mov eax, dword [rbp + 0x22c]
mov qword [rbp + 0x100], rdi
mov rcx, qword [rbp + 0x100]
shl rax, 4
lea rdx, section..rdata
add rax, rdx
lea rax, [rax + rcx*8]
mov eax, dword [rax + rsi*4]
mov dword [rbp + 0x244], eax
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
mov eax, dword [rbp + 0x2a0]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x9f
call fcn.140006b10
movabs rcx, 0x78993f7e5177a95d
call fcn.140006b10
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
xor esi, eax
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x69
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0xbf
mov r8d, 0xd5
mov r9d, r15d
call fcn.140006b10
mov ecx, 2
mov edx, r15d
mov r8d, r15d
mov r9d, r15d
call fcn.140006b10
movabs rcx, 0x399908ed0e352245
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, r15d
call fcn.140006b10
add rsp, 0x20
xor edi, eax
imul edi, esi
mov eax, dword [rbp + 0x28c]
mov ecx, edi
shr eax, cl
mov dword [rbp + 0x240], eax
sub rsp, 0x20
mov ecx, 1
mov edx, 0xc3
call fcn.140006b10
movabs rsi, 0x574adaf04471bd3c
mov rcx, rsi
mov edx, r15d
call fcn.140006b10
mov ecx, 1
mov edx, 0xe
call fcn.140006b10
add rsp, 0x20
lea rcx, [rsi + 0x200]
sub rsp, 0x20
mov edx, 0x24
mov r8d, r15d
call fcn.140006b10
mov ecx, 0x200
mov edx, 0x3c3a15
call fcn.140006b10
add rsp, 0x20
and eax, dword [rbp + 0x240]
or eax, dword [rbp + 0x244]
mov dword [rbp + 0x18c], eax
mov rax, qword [rbp + 0x1d8]
mov esi, dword [rax + 0x10]
sub rsp, 0x20
mov ecx, 1
mov edx, r15d
mov r8d, r15d
call fcn.140006b10
xor ecx, ecx
call fcn.140006b10
add rsp, 0x20
cmp esi, eax
sete byte [rbp + 0x274]
movzx eax, byte [rbp + 0x274]
mov dword [rbp + 0x1ac], esi
cmp al, 1
jne 0x140005f87
mov rsi, qword [rbp + 0x100]
sub rsp, 0x20
mov ecx, 0x33
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x244]
sub rsp, 0x20
mov ecx, 0xff
mov r8d, 0xf9
mov edx, esi
call fcn.140006b10
mov ecx, 0xfe8f
mov edx, esi
call fcn.140006b10
mov ecx, 0xdd
mov edx, 0x2e
mov r8d, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, 0xf3
mov r8d, 0xae
mov r9d, esi
call fcn.140006b10
mov ecx, 0xc491
mov edx, esi
call fcn.140006b10
add rsp, 0x20
movabs rdi, 0x687685c57df5cc96
lea rcx, [rdi + 0x40]
sub rsp, 0x20
mov edx, 0xac
mov r8d, esi
call fcn.140006b10
mov r8d, 0xb1
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x22c]
mov eax, dword [rbp + 0x240]
mov eax, dword [rbp + 0x22c]
mov eax, dword [rbp + 0x240]
mov eax, dword [rbp + 0x22c]
mov eax, dword [rbp + 0x240]
sub rsp, 0x20
mov ecx, 1
mov edx, 0x37
call fcn.140006b10
mov rcx, rdi
call fcn.140006b10
mov edx, 0x6e
xor ecx, ecx
mov r8d, esi
call fcn.140006b10
mov ecx, 0x40
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, dword [rbp + 0x28c]
movzx eax, byte [rbp + 0x274]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xffffffff
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, 0xd1
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x2b
mov r8d, esi
call fcn.140006b10
mov ecx, 2
call fcn.140006b10
mov r8d, 0x927483
mov r9d, 0xd
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
cmp edi, eax
jne 0x140005ed7
mov rsi, qword [rbp + 0x100]
mov eax, dword [rbp + 0x244]
mov eax, dword [rbp + 0x244]
mov eax, dword [rbp + 0x244]
sub rsp, 0x20
mov edx, 0x57de09
mov r8d, 0x3e
movabs rcx, 0x6be1ea779297188
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov r15, rax
xor r15d, edi
movzx eax, byte [rbp + 0x2a6]
sub rsp, 0x20
mov ecx, 0x6b
mov r8d, 0xf6
mov edx, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x240]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x5a
mov r8d, esi
call fcn.140006b10
mov ecx, 0xc77
call fcn.140006b10
mov ecx, 0x91
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x6dc3
call fcn.140006b10
mov edx, 0xb
movabs rcx, 0xf941e15886d68ef8
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
add edi, ebx
add edi, r15d
and edi, dword [rbp + 0x28c]
sub rsp, 0x20
mov ecx, 0x50
mov edx, esi
call fcn.140006b10
mov ecx, 0xff
mov r8d, 0x17
mov edx, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0x6085
mov r8d, 0xc5
mov edx, esi
mov r9d, esi
call fcn.140006b10
mov ecx, 0xb3
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x18c]
sub rsp, 0x20
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0x970d
mov edx, esi
call fcn.140006b10
xor ecx, ecx
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
cmp edi, eax
je 0x140005258
mov rax, qword [rbp - 0x60]
add rax, 0x24
jmp 0x140005edf
mov rax, qword [rbp - 0x60]
add rax, 0x20
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
mov esi, dword [rax]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, 0x64
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
xor edi, esi
sub rsp, 0x20
mov ecx, 0x7afafa69
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
or ebx, edi
sub rsp, 0x20
mov ecx, 0xa061440
mov edx, 0xcf
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rdi, rax
and edi, ebx
sub rsp, 0x20
mov ecx, 0x1050504
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
and ebx, esi
or ebx, 0x1010104
add ebx, edi
sub rsp, 0x20
mov ecx, 0xb071544
mov edx, 0xd3
call fcn.140006b10
add rsp, 0x20
xor eax, ebx
mov dword [rbp + 0x1ac], esi
cmp esi, eax
je 0x140005258
mov esi, dword [rbp + 0x1ac]
mov r15, qword [0x140015198]
mov rax, qword [rbp + 0x1d8]
mov edi, dword [rax + 8]
or rdi, qword [rbp - 0x28]
sub rsp, 0x20
mov edx, 0x54
mov rcx, rsi
mov r8d, esi
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
mov rbx, rax
mov ecx, dword [rbp + 0x18c]
sub rsp, 0x20
mov edx, 0xb801a8
mov r8d, esi
mov r9d, esi
call fcn.140006b10
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
mov r9, qword [rbp - 0x68]
call r15
jmp 0x140005254
mov rax, qword [rbp + 0x20]
mov eax, dword [rax]
mov dword [rbp + 0x254], eax
sub rsp, 0x20
mov ecx, 0x31
mov edx, 0x5c
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x268]
mov r8d, dword [rbp + 0x254]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xf9
mov r9d, r8d
call fcn.140006b10
mov ecx, 0x41cb
mov edx, 0x6b
call fcn.140006b10
add rsp, 0x20
mov edx, dword [rbp + 0x254]
sub rsp, 0x20
mov ecx, 0x75
mov r8d, edx
mov r9d, edx
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x254]
mov r8d, dword [rbp + 0x254]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0xd
call fcn.140006b10
mov ecx, 0xc551
mov edx, 0x2e
call fcn.140006b10
add rsp, 0x20
mov r8d, dword [rbp + 0x254]
sub rsp, 0x20
mov edx, 0x84
xor ecx, ecx
mov r9d, r8d
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x254]
cmp ecx, eax
sete byte [rbp + 0x297]
mov eax, dword [rbp + 0x268]
mov qword [rbp + 0xf8], rax
mov rax, qword [rbp + 0xf8]
add rax, qword [rbp + 0x210]
mov qword [rbp - 0x40], rax
cmp byte [rbp + 0x297], 0
je 0x140006126
mov rax, qword [rbp + 0x280]
mov rcx, qword [rbp - 0x40]
mov qword [rax + 0x48], rcx
jmp 0x1400063e0
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x1c0]
mov rdx, qword [rcx]
mov rcx, qword [rbp + 0x1b8]
sub rsp, 0x20
call qword [rax]
add rsp, 0x20
jmp 0x14000625d
movzx esi, byte [rbp + 0x298]
movzx eax, byte [rbp + 0x297]
sub rsp, 0x20
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.140006b10
movabs rcx, 0x3af91141c3cf4612
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov edx, 0x87
mov r8d, 0x38e3b9
xor ecx, ecx
mov r9d, esi
call fcn.140006b10
add rsp, 0x20
movzx eax, byte [rbp + 0x297]
mov rax, qword [rbp + 0xf8]
sub rsp, 0x20
mov ecx, 0xff
mov edx, esi
call fcn.140006b10
mov ecx, 0x16f7
mov edx, esi
call fcn.140006b10
mov ecx, 0x98
mov edx, 0xf6
mov r8d, esi
call fcn.140006b10
mov ecx, 0xff
mov edx, 0xfe
mov r8d, esi
call fcn.140006b10
mov ecx, 0x14bd
mov edx, 0xf9
call fcn.140006b10
movabs rcx, 0xc506eebe3c30b9ef
mov edx, 0x55
call fcn.140006b10
mov r9d, 0xdd
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 1
call fcn.140006b10
add rsp, 0x20
mov rbx, qword [rbp - 0x40]
mov rcx, qword [rbp + 0x210]
sub rsp, 0x20
mov edx, eax
mov r8, qword [rbp + 0x320]
call rbx
add rsp, 0x20
mov dword [rbp + 0x23c], eax
movzx eax, byte [rbp + 0x298]
sub rsp, 0x20
mov ecx, 1
mov edx, esi
call fcn.140006b10
mov r8d, 0x111f07
xor ecx, ecx
mov edx, esi
call fcn.140006b10
add rsp, 0x20
mov ecx, dword [rbp + 0x23c]
cmp ecx, eax
jne 0x140006281
mov rcx, qword [rbp + 0x280]
sub rsp, 0x20
call fcn.140006440
add rsp, 0x20
mov qword [rbp + 0x220], 0
jmp 0x1400063ee
mov rsi, qword [rbp + 0xf8]
sub rsp, 0x20
mov ecx, 0xffffffff
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x23c]
mov eax, dword [rbp + 0x23c]
sub rsp, 0x20
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0xfffffffd
mov edx, esi
call fcn.140006b10
mov ecx, 0xffffffff
mov edx, 0x44
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x23c]
sub rsp, 0x20
mov ecx, 2
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x23c]
sub rsp, 0x20
movabs rcx, 0x5a8435bdcb74fb32
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x14
mov edx, 0x52
mov r8d, 0x14
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x254]
sub rsp, 0x20
mov ecx, 0xff
mov edx, 0x9d
call fcn.140006b10
mov ecx, 0xdc93
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x9e
mov edx, 0xd7
call fcn.140006b10
add rsp, 0x20
mov eax, dword [rbp + 0x268]
sub rsp, 0x20
mov ecx, 0xff
mov r9d, 0x2d
mov edx, esi
mov r8d, esi
call fcn.140006b10
mov ecx, 0x1855
mov edx, 0x25
mov r8d, 0x7d
mov r9d, esi
call fcn.140006b10
movabs rcx, 0xa57bca42348b04cf
mov edx, 0x2c
mov r8d, 2
mov r9d, esi
call fcn.140006b10
mov edx, 0xb5
xor ecx, ecx
call fcn.140006b10
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.140006b10
add rsp, 0x20
mov rcx, qword [rbp - 0x70]
mov dword [rcx], eax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x220], rax
mov rax, qword [rbp + 0x220]
lea rsp, [rbp + 0x2b8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret