Function at 0x140099c70
Capabilities:
Create thread
Terminate process

Disassembly:
mov qword [rsp + 0x18], r8
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg r11, rdx
xchg rdi, rcx
mov qword [rsp + 8], rdi
xchg rdi, rcx
push rbx
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
push r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x880
mov rdi, r9
xchg rdx, r14
mov rdx, r14
xchg rdx, r14
xchg r8, rcx
mov rsi, r8
xchg rcx, r8
call fcn.14009cd80
mov r10d, dword [rsi + 0x48]
xchg r15, rsi
mov qword [rsp + 0x220], r15
xchg r15, rsi
mov qword [rsp + 0x230], rsi
xchg r10, rsi
mov qword [rsp + 0x228], r10
xchg rsi, r10
test r10d, r10d
je 0x140099e2c
sub r10d, 1
je 0x140099da3
cmp r10d, 1
jne 0x140099e2c
mov rax, qword [rsi + 0x30]
cmp rax, qword [rsi + 0x38]
jne 0x140099d94
mov rcx, qword [rsi + 0x40]
sub rcx, rax
movabs rax, 0x2aaaaaaa49bb6d63
add rax, 0x7fffffff
xor rax, 0x6311c7c9
imul rcx
sar rdx, 1
sar rdx, 1
xchg r15, rdx
mov rax, r15
xchg r15, rdx
shr rax, 0x17
shr rax, 0x17
shr rax, 6
shr rax, 0xa
shr rax, 1
add rdx, rax
cmp rdx, 0x50
jae 0x140099d87
lea edx, [r10 + 0x4f]
lea rcx, [rsi + 0x30]
call fcn.1400a1890
lea rcx, [rsp + 0x220]
call fcn.140048370
xchg r9, rdx
mov r9, qword [rsi + 0x30]
xchg r9, rdx
jmp 0x140099e9d
xchg rdi, rax
mov rdi, qword [rsi + 0x18]
xchg rdi, rax
cmp rax, qword [rsi + 0x20]
jne 0x140099e1d
mov rcx, qword [rsi + 0x28]
sub rcx, rax
movabs rax, 0x2aaaaaaa77871efc
add rax, 0x33238baf
imul rcx
sar rdx, 1
sar rdx, 1
xchg rcx, rax
mov rcx, rdx
xchg rcx, rax
shr rax, 0x29
shr rax, 0xe
shr rax, 2
shr rax, 5
shr rax, 1
add rdx, rax
cmp rdx, 0x50
jae 0x140099e10
mov edx, 0x49a42415
sub edx, 0x49a423c5
lea rcx, [rsi + 0x18]
call fcn.1400a1890
lea rcx, [rsp + 0x228]
call fcn.14007b3d0
xchg r14, rdx
mov r14, qword [rsi + 0x18]
xchg rdx, r14
jmp 0x140099e9d
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x140099e9a
mov rcx, qword [rsi + 0x10]
sub rcx, rax
movabs rax, 0x2aaaaaaa5a4e07bd
add rax, 0x505ca2ee
imul rcx
sar rdx, 2
xchg rdx, rax
mov rdx, rax
xchg rdx, rax
shr rax, 0x13
shr rax, 0x29
shr rax, 2
shr rax, 1
add rdx, rax
cmp rdx, 0x50
jae 0x140099e8d
mov edx, 0x1099e37b
sub edx, 0x1099e32b
mov rcx, rsi
call fcn.1400a1890
lea rcx, [rsp + 0x230]
call fcn.140063aa0
mov rdx, qword [rsi]
add rdx, 0x2e8
lea rcx, [rsp + 0x168]
call fcn.14002a810
nop
lea rcx, [rsp + 0x168]
call fcn.14002ae70
nop
movabs r8, 0xffffffff79b02f68
add r8, 0x7fffffff
add r8, 0x64fd098
inc r8
cmp word [rax + r8*2], 0
jne 0x140099ed8
lea rbx, [rsi + 0x178]
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg rdi, rcx
mov rdi, rbx
xchg rdi, rcx
call fcn.14000f4a0
cmp qword [rbx + 0x18], 8
jb 0x140099f11
mov rbx, qword [rbx]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
mov rcx, qword [rsi + 0x198]
call fcn.1400a9b20
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
xor r12d, r12d
mov qword [rsp + 0x140], r12
movdqu xmmword [rsp + 0xb0], xmm0
xchg r12, rbp
mov qword [rsp + 0xc0], rbp
xchg rbp, r12
lea rcx, [rsp + 0x5c0]
call fcn.1400c3920
nop
mov rbx, qword [rsi + 0x308]
lea edx, [r12 + 2]
mov rcx, r14
call fcn.140019850
xor edx, edx
xchg r10, rax
mov rcx, r10
xchg r10, rax
call fcn.140019850
lea rdx, [rsp + 0x298]
xchg rcx, r14
mov r14, rax
xchg r14, rcx
call fcn.140033e40
nop
lea r8, [rsp + 0x298]
lea rdx, [rsp + 0x278]
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.14001c650
nop
xchg r9, rdx
mov r9, qword [rsp + 0x2b0]
xchg rdx, r9
cmp rdx, 0x10
jb 0x14009a021
inc rdx
mov rcx, qword [rsp + 0x298]
xchg rcx, r14
mov rax, r14
xchg r14, rcx
cmp rdx, 0x1000
jb 0x14009a01c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffe0e72922
sub rax, 0xffffffffe0e7292a
cmp rax, 0x1f
jbe 0x14009a01c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r13, r12
mov qword [rsp + 0x2a8], r13
xchg r12, r13
mov qword [rsp + 0x2b0], 0x7f14a1f4
sub qword [rsp + 0x2b0], 0x7f14a1e5
mov byte [rsp + 0x298], 0x5c
xor byte [rsp + 0x298], 0x5c
mov rbx, qword [rsi + 0x308]
mov edx, 0xe995ba
sub edx, 0xe995b8
xchg rcx, r15
mov r15, r14
xchg r15, rcx
call fcn.140019850
mov edx, 0x7b973ac9
sub edx, 0x7b973ac8
xchg r8, rax
mov rcx, r8
xchg r8, rax
call fcn.140019850
lea rdx, [rsp + 0x2b8]
xchg r12, rax
mov rcx, r12
xchg r12, rax
call fcn.140033e40
nop
lea r8, [rsp + 0x2b8]
lea rdx, [rsp + 0x258]
mov rcx, rbx
call fcn.14001c650
nop
mov rdx, qword [rsp + 0x2d0]
cmp rdx, 0x10
jb 0x14009a11a
inc rdx
mov rcx, qword [rsp + 0x2b8]
xchg rcx, r9
mov rax, r9
xchg r9, rcx
cmp rdx, 0x1000
jb 0x14009a115
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14009a115
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rsp + 0x2c8], r12
mov qword [rsp + 0x2d0], 0x4f6a606e
xor qword [rsp + 0x2d0], 0x4f6a6061
mov byte [rsp + 0x2b8], 0x5f
sub byte [rsp + 0x2b8], 0x5f
lea rcx, [rsp + 0x278]
xchg rdi, rax
mov rdi, qword [rsp + 0x288]
xchg rdi, rax
cmp qword [rsp + 0x290], 8
jb 0x14009a184
xchg r8, rdx
mov r8, qword [rsp + 0x278]
xchg rdx, r8
lea r8, [rdx + rax*2]
jmp 0x14009a190
lea r8, [rcx + rax*2]
lea rdx, [rsp + 0x278]
lea r9, [rsp + 0x30]
lea rcx, [rsp + 0x4a0]
call fcn.14002bac0
nop
lea rcx, [rsp + 0x258]
mov rax, qword [rsp + 0x268]
cmp qword [rsp + 0x270], 8
jb 0x14009a1d9
xchg rdx, r10
mov r10, qword [rsp + 0x258]
xchg rdx, r10
lea r8, [rdx + rax*2]
jmp 0x14009a1e5
lea r8, [rcx + rax*2]
lea rdx, [rsp + 0x258]
lea r9, [rsp + 0x30]
lea rcx, [rsp + 0x480]
call fcn.14002bac0
nop
lea rdx, [rsp + 0x4a0]
lea rcx, [rsp + 0x3a8]
call fcn.140025420
mov rdx, rax
xchg rcx, rdi
mov rdi, qword [rsp + 0x8e0]
xchg rcx, rdi
call fcn.14003f840
mov rdx, qword [rsp + 0x3c0]
cmp rdx, 0x10
jb 0x14009a284
inc rdx
mov rcx, qword [rsp + 0x3a8]
xchg r8, rax
mov r8, rcx
xchg r8, rax
cmp rdx, 0x1000
jb 0x14009a27f
nop
add rdx, 0x254f3e4a
sub rdx, 0x254f3e23
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009a27f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rsp + 0x3b8], r12
mov qword [rsp + 0x3c0], 0x22e8ce5c
xor qword [rsp + 0x3c0], 0x22e8ce53
mov byte [rsp + 0x3a8], 0x1f
xor byte [rsp + 0x3a8], 0x1f
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x3c8]
call fcn.140025420
xchg rdi, rax
mov rdx, rdi
xchg rdi, rax
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
call fcn.14003f840
xchg r15, rdx
mov r15, qword [rsp + 0x3e0]
xchg r15, rdx
cmp rdx, 0x10
jb 0x14009a33a
inc rdx
mov rcx, qword [rsp + 0x3c8]
xchg r13, rax
mov r13, rcx
xchg r13, rax
cmp rdx, 0x1000
jb 0x14009a335
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14009a335
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r12, rcx
mov qword [rsp + 0x3d8], rcx
xchg r12, rcx
mov qword [rsp + 0x3e0], 0x62849bb1
sub qword [rsp + 0x3e0], 0x62849ba2
mov byte [rsp + 0x3c8], 0x27
xor byte [rsp + 0x3c8], 0x27
mov edx, 0x4b60807f
sub edx, 0x4b60807e
xchg rcx, r14
mov r14, rcx
xchg rcx, r14
call fcn.140019850
mov rbx, rax
xchg r15, rax
mov qword [rsp + 0x38], r15
xchg r15, rax
xchg r13, rax
mov qword [rsp + 0x90], r13
xchg r13, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa0], xmm1
movabs r15, 0x8000000005d9dde7
sub r15, 0x5d9dde7
xchg r8, r14
mov r8, r15
xchg r14, r8
xchg r11, r15
mov qword [rsp + 0xa8], r11
xchg r11, r15
test rax, rax
jne 0x14009a40b
mov r8d, 0x590b4d86
sub r8d, 0x590b3f40
lea rdx, [0x140001720]
lea rcx, [0x1400026e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [rbx]
mov edx, ecx
sub edx, 1
je 0x14009a4aa
cmp edx, 1
je 0x14009a482
test ecx, ecx
je 0x14009a460
sub ecx, 1
je 0x14009a4aa
cmp ecx, 1
je 0x14009a482
xchg rcx, r14
mov rcx, r12
xchg r14, rcx
xchg r14, r12
mov qword [rsp + 0xa8], r14
xchg r12, r14
mov rdi, qword [rsp + 0x98]
jmp 0x14009a4c6
mov r14d, 0xf69d1af
sub r14d, 0xf69d1ae
mov qword [rsp + 0xa8], r14
mov rdi, qword [rsp + 0x98]
jmp 0x14009a4c6
xchg rsi, rdi
mov rdi, qword [rbx + 8]
xchg rsi, rdi
mov rsi, qword [rsi]
mov qword [rsp + 0xa0], rsi
xchg r13, rdi
mov r13, qword [rsp + 0x98]
xchg r13, rdi
jmp 0x14009a4ce
xchg r14, rax
mov r14, qword [rbx + 8]
xchg r14, rax
xchg rdi, r9
mov r9, qword [rax]
xchg r9, rdi
mov rdi, qword [rdi]
mov qword [rsp + 0x98], rdi
mov rsi, qword [rsp + 0xa0]
xchg rbx, r13
mov qword [rsp + 0x110], r13
xchg r13, rbx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x118], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
mov qword [rsp + 0x128], r15
test rbx, rbx
jne 0x14009a526
mov r8d, 0x2e4a347
sub r8d, 0x2e49501
lea rdx, [0x140001720]
lea rcx, [0x1400026e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [rbx]
mov edx, ecx
sub edx, 1
je 0x14009a5a9
cmp edx, 1
je 0x14009a585
mov qword [rsp + 0x128], r15
sub ecx, 1
je 0x14009a5a9
cmp ecx, 1
je 0x14009a585
mov r15d, 0x1058c6b4
sub r15d, 0x1058c6b3
xchg rdi, r15
mov qword [rsp + 0x128], rdi
xchg rdi, r15
xchg r9, r13
mov r9, qword [rsp + 0x118]
xchg r9, r13
jmp 0x14009a5c5
mov r12, qword [rbx + 8]
mov r12, qword [r12 + 8]
xchg r12, r10
mov qword [rsp + 0x120], r10
xchg r12, r10
mov r13, qword [rsp + 0x118]
jmp 0x14009a5db
xchg r13, rcx
mov rcx, qword [rbx + 8]
xchg r13, rcx
mov r13, qword [r13]
xchg rsi, r13
mov qword [rsp + 0x118], rsi
xchg r13, rsi
xchg r12, r10
mov r10, qword [rsp + 0x120]
xchg r10, r12
nop dword [rax + rax]
movzx ecx, byte [rbx]
mov edx, ecx
sub edx, 1
je 0x14009a602
cmp edx, 1
je 0x14009a5fa
cmp r14, r15
jmp 0x14009a605
cmp rsi, r12
jmp 0x14009a605
cmp rdi, r13
setne al
test al, al
je 0x14009b3cc
test ecx, ecx
je 0x14009c077
sub ecx, 1
je 0x14009a682
cmp ecx, 1
je 0x14009a641
test r14, r14
jne 0x14009bf81
xchg rsi, rcx
mov rsi, rbx
xchg rcx, rsi
jmp 0x14009a6b8
xchg r15, rax
mov r15, qword [rbx + 8]
xchg r15, rax
cmp rsi, qword [rax + 8]
jne 0x14009a674
mov r8d, 0x50a2ff4
sub r8d, 0x50a2121
lea rdx, [0x140001720]
lea rcx, [0x1400027b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
jmp 0x14009a6b8
xchg rdx, rax
mov rdx, qword [rbx + 8]
xchg rdx, rax
cmp rdi, qword [rax]
jne 0x14009a6b4
mov r8d, 0x1ae69152
xor r8d, 0x1ae69f9f
lea rdx, [0x140001720]
lea rcx, [0x140002740]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rdi + 0x40]
xchg rbx, r13
mov r13, qword [rsp + 0x8c0]
xchg rbx, r13
mov rbx, qword [rbx + 0x308]
lea rdx, [rsp + 0x2d8]
call fcn.140033e40
nop
lea r8, [rsp + 0x2d8]
lea rdx, [rsp + 0x1d0]
mov rcx, rbx
call fcn.14001c650
nop
xchg rdx, r8
mov r8, qword [rsp + 0x2f0]
xchg rdx, r8
cmp rdx, 0x10
jb 0x14009a76a
inc rdx
xchg rcx, r8
mov r8, qword [rsp + 0x2d8]
xchg rcx, r8
xchg r14, rax
mov r14, rcx
xchg r14, rax
cmp rdx, 0x1000
jb 0x14009a765
nop
sub rdx, 0x745cfb9e
add rdx, 0x745cfbc5
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffff86d3eb59
sub rax, 0xffffffff86d3eb61
cmp rax, 0x1f
jbe 0x14009a765
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xor ebx, ebx
mov qword [rsp + 0x2e8], rbx
mov qword [rsp + 0x2f0], 0x6dd77918
sub qword [rsp + 0x2f0], 0x6dd77909
mov byte [rsp + 0x2d8], bl
xchg rbx, r12
mov qword [rsp + 0xc8], r12
xchg rbx, r12
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0xe0], 0x2e2440f8
sub qword [rsp + 0xe0], 0x2e2440f1
mov word [rsp + 0xc8], bx
xor r8d, r8d
lea rdx, [0x14000186c]
lea rcx, [rsp + 0xc8]
call fcn.14000f4a0
nop
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], 0x6e007698
sub qword [rsp + 0x160], 0x6e007691
mov word [rsp + 0x148], bx
xor r8d, r8d
lea rdx, [0x14000186c]
lea rcx, [rsp + 0x148]
call fcn.14000f4a0
nop
mov qword [rsp + 0xf0], rbx
xchg r12, rbx
mov qword [rsp + 0x100], r12
xchg rbx, r12
mov qword [rsp + 0x108], 0x62cf42eb
xor qword [rsp + 0x108], 0x62cf42ec
mov word [rsp + 0xf0], bx
xor r8d, r8d
lea rdx, [0x14000186c]
lea rcx, [rsp + 0xf0]
call fcn.14000f4a0
nop
mov byte [rsp + 0x30], bl
lea rbx, [rsp + 0x1d0]
mov r9, qword [rsp + 0x1d0]
mov r8, qword [rsp + 0x1e8]
cmp r8, 8
cmovae rbx, r9
nop dword [rax + rax]
lea rcx, [rsp + 0x1d0]
cmp r8, 8
setae r11b
cmovae rcx, r9
xchg r10, rax
mov r10, qword [rsp + 0x1e0]
xchg r10, rax
lea r10, [rax + rax]
lea rax, [rcx + r10]
cmp rbx, rax
je 0x14009aa1b
movzx edx, word [rbx]
cmp byte [rsp + 0x30], 0
jne 0x14009a909
cmp dx, 0x2f
jne 0x14009aaf2
cmp word [rbx - 2], dx
jne 0x14009aaf2
mov byte [rsp + 0x30], 0x21
sub byte [rsp + 0x30], 0x20
sub rbx, 0xfffffffffffffffe
jmp 0x14009a8a3
cmp dx, 0x2f
jne 0x14009aac9
lea r8, [rsp + 0x1d0]
test r11b, r11b
cmovne r8, r9
xor ecx, ecx
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], 0xa94d4b6
sub qword [rsp + 0x218], 0xa94d4af
add r8, r10
cmp rbx, r8
je 0x14009a974
sub r8, rbx
sar r8, 1
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
lea rcx, [rsp + 0x200]
call fcn.14000f4a0
xchg r9, rdx
mov r9, qword [rsp + 0x160]
xchg r9, rdx
cmp rdx, 8
jb 0x14009a9d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009a9cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009a9cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rsp + 0x148], xmm0
movups xmm1, xmmword [rsp + 0x210]
movups xmmword [rsp + 0x158], xmm1
xor eax, eax
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], 0x6f80995c
xor qword [rsp + 0x218], 0x6f80995b
mov word [rsp + 0x200], ax
mov rcx, qword [rsp + 0x8c8]
call fcn.140023820
dec rax
xchg r9, rax
mov qword [rsp + 0xe8], r9
xchg r9, rax
xchg r9, rax
mov rdx, r9
xchg r9, rax
xchg r9, rcx
mov r9, qword [rsp + 0x8c8]
xchg rcx, r9
call fcn.140019850
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140036550
xchg rbx, rcx
mov rcx, qword [rsp + 0x70]
xchg rbx, rcx
test rbx, rbx
jne 0x14009aa97
mov r8d, 0x6747c366
sub r8d, 0x6747b4e3
lea rdx, [0x140001720]
lea rcx, [0x1400026e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [rbx]
test ecx, ecx
je 0x14009ab27
sub ecx, 1
je 0x14009ab13
cmp ecx, 1
je 0x14009aafb
xor ebx, ebx
xchg rsi, rbx
mov qword [rsp + 0x88], rsi
xchg rsi, rbx
jmp 0x14009ab41
lea rcx, [rsp + 0xc8]
call fcn.1400a4e20
xchg r8, rdi
mov rdi, qword [rsp + 0x1e8]
xchg r8, rdi
xchg rsi, r9
mov rsi, qword [rsp + 0x1d0]
xchg r9, rsi
add rbx, 2
jmp 0x14009a8a3
mov rax, qword [rbx + 8]
mov rax, qword [rax]
xchg rdx, rax
mov qword [rsp + 0x80], rdx
xchg rdx, rax
jmp 0x14009ab41
mov rax, qword [rbx + 8]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
jmp 0x14009ab41
mov qword [rsp + 0x88], 0x16c7f1d2
sub qword [rsp + 0x88], 0x16c7f1d1
nop
mov rdx, qword [rsp + 0xe8]
xchg rdi, rcx
mov rdi, qword [rsp + 0x8c8]
xchg rdi, rcx
call fcn.140019850
mov rdx, rax
lea rcx, [rsp + 0x238]
call fcn.140036550
mov rbx, qword [rsp + 0x238]
test rbx, rbx
jne 0x14009ab9e
mov r8d, 0x6dee5f9a
xor r8d, 0x6dee5132
lea rdx, [0x140001720]
lea rcx, [0x1400026e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [rbx]
sub ecx, 1
je 0x14009abe9
cmp ecx, 1
je 0x14009abd0
mov qword [rsp + 0x250], 0xef30769
sub qword [rsp + 0x250], 0xef30768
jmp 0x14009abfc
xchg r13, rax
mov r13, qword [rbx + 8]
xchg r13, rax
mov rax, qword [rax + 8]
mov qword [rsp + 0x248], rax
jmp 0x14009abfc
xchg r12, rax
mov r12, qword [rbx + 8]
xchg r12, rax
mov rax, qword [rax]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x70]
cmp rax, rbx
jne 0x14009bfcb
test rax, rax
jne 0x14009ac3d
mov r8d, 0x75254b23
sub r8d, 0x75253bb9
lea rdx, [0x140001720]
lea rcx, [0x1400026e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xchg rdx, rax
mov rdx, qword [rsp + 0x70]
xchg rdx, rax
movzx edx, byte [rax]
mov ecx, edx
sub ecx, 1
je 0x14009ac82
cmp ecx, 1
je 0x14009ac6d
xchg r10, rax
mov r10, qword [rsp + 0x88]
xchg r10, rax
cmp rax, qword [rsp + 0x250]
jmp 0x14009ac8f
mov rax, qword [rsp + 0x248]
cmp qword [rsp + 0x80], rax
jmp 0x14009ac8f
mov rax, qword [rsp + 0x240]
cmp qword [rsp + 0x78], rax
setne al
test al, al
je 0x14009afb3
mov rax, qword [rsp + 0x8c0]
mov rbx, qword [rax + 0x308]
cmp dl, 1
jne 0x14009c015
xchg rdx, r10
mov r10, qword [rsp + 0x78]
xchg r10, rdx
sub rdx, 0xffffffffffffffe0
lea rcx, [rsp + 0x2f8]
call fcn.1400161c0
nop
lea r8, [rsp + 0x2f8]
lea rdx, [rsp + 0x3e8]
mov rcx, rbx
call fcn.14001c650
lea rdx, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rdx, qword [rsp + 0xc8]
xchg r8, rbx
mov rbx, qword [rax + 0x10]
xchg r8, rbx
cmp qword [rax + 0x18], 8
jb 0x14009ad19
mov rax, qword [rax]
cmp r8, qword [rsp + 0xd8]
jne 0x14009ad45
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400a2fe0
test eax, eax
jne 0x14009ad45
mov bl, 0x20
sub bl, 0x1f
jmp 0x14009ad47
xor bl, bl
xchg r8, rdx
mov r8, qword [rsp + 0x400]
xchg rdx, r8
cmp rdx, 8
jb 0x14009adaf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009adaa
nop
add rdx, 0x580140b9
sub rdx, 0x58014092
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009adaa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xor eax, eax
xchg r10, rax
mov qword [rsp + 0x3f8], r10
xchg r10, rax
mov qword [rsp + 0x400], 0x10132514
sub qword [rsp + 0x400], 0x1013250d
mov word [rsp + 0x3e8], ax
xchg rcx, rdx
mov rcx, qword [rsp + 0x310]
xchg rcx, rdx
cmp rdx, 0x10
jb 0x14009ae4c
inc rdx
xchg rsi, rcx
mov rsi, qword [rsp + 0x2f8]
xchg rcx, rsi
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14009ae45
nop
sub rdx, 0x304ef0fd
add rdx, 0x304ef124
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14009ae45
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xor eax, eax
mov qword [rsp + 0x308], rax
mov qword [rsp + 0x310], 0x356f2b77
sub qword [rsp + 0x310], 0x356f2b68
mov byte [rsp + 0x2f8], 0x35
xor byte [rsp + 0x2f8], 0x35
test bl, bl
je 0x14009b19c
xchg r10, rax
mov r10, qword [rsp + 0x8c0]
xchg r10, rax
mov rbx, qword [rax + 0x308]
lea rcx, [rsp + 0x70]
call fcn.140040530
lea rdx, [rsp + 0x460]
xchg r15, rax
mov rcx, r15
xchg r15, rax
call fcn.140033e40
nop
lea r8, [rsp + 0x460]
lea rdx, [rsp + 0x408]
xchg rbp, rcx
mov rbp, rbx
xchg rcx, rbp
call fcn.14001c650
xchg r11, rax
mov rbx, r11
xchg r11, rax
lea rax, [rsp + 0xf0]
cmp rax, rbx
je 0x14009af98
xchg rdi, rdx
mov rdi, qword [rsp + 0x108]
xchg rdx, rdi
cmp rdx, 8
jb 0x14009af55
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
xchg r13, rcx
mov rax, r13
xchg r13, rcx
cmp rdx, 0x1000
jb 0x14009af50
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14009af50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r15, rbx
movups xmm0, xmmword [r15]
xchg rbx, r15
movups xmmword [rsp + 0xf0], xmm0
xchg rsi, rbx
movups xmm1, xmmword [rsi + 0x10]
xchg rsi, rbx
movups xmmword [rsp + 0x100], xmm1
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0x2f882432
sub qword [rbx + 0x18], 0x2f88242b
mov word [rbx], ax
nop word [rax + rax]
lea rcx, [rsp + 0x408]
call fcn.14000f270
nop
lea rcx, [rsp + 0x460]
call fcn.14001d210
cmp qword [rsp + 0x100], 0
jne 0x14009aff1
lea rdx, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rdx, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xd8]
lea rcx, [rsp + 0xf0]
call fcn.14000f4a0
lea rax, [rsp + 0xb0]
xchg rbp, rax
mov qword [rsp + 0x318], rbp
xchg rbp, rax
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x320], rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x328]
call fcn.1400168d0
nop
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x348]
call fcn.1400168d0
nop
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x368]
call fcn.1400168d0
nop
mov ecx, 0x64c84832
xor ecx, 0x64c84842
call fcn.140110294
xchg r12, rax
mov r9, r12
xchg r12, rax
xor ebx, ebx
test rax, rax
je 0x14009b1eb
xchg rdi, rax
mov rdi, qword [rsp + 0x318]
xchg rdi, rax
mov qword [r9], rax
xchg r9, rax
mov r9, qword [rsp + 0x320]
xchg r9, rax
xchg r15, rax
mov qword [r9 + 8], r15
xchg r15, rax
mov qword [r9 + 0x20], rbx
xchg r15, rbx
mov qword [r9 + 0x28], r15
xchg rbx, r15
movups xmm0, xmmword [rsp + 0x328]
movups xmmword [r9 + 0x10], xmm0
movups xmm1, xmmword [rsp + 0x338]
xchg rsi, r9
movups xmmword [rsi + 0x20], xmm1
xchg rsi, r9
mov qword [rsp + 0x338], rbx
mov qword [rsp + 0x340], 0x66f4f78
sub qword [rsp + 0x340], 0x66f4f71
mov word [rsp + 0x328], bx
mov qword [r9 + 0x40], rbx
mov qword [r9 + 0x48], rbx
movups xmm0, xmmword [rsp + 0x348]
xchg rbx, r9
movups xmmword [rbx + 0x30], xmm0
xchg r9, rbx
movups xmm1, xmmword [rsp + 0x358]
xchg r12, r9
movups xmmword [r12 + 0x40], xmm1
xchg r12, r9
xchg rbx, r14
mov qword [rsp + 0x358], r14
xchg rbx, r14
mov qword [rsp + 0x360], 0x33b85af4
sub qword [rsp + 0x360], 0x33b85aed
mov word [rsp + 0x348], bx
mov qword [r9 + 0x60], rbx
mov qword [r9 + 0x68], rbx
movups xmm0, xmmword [rsp + 0x368]
movups xmmword [r9 + 0x50], xmm0
movups xmm1, xmmword [rsp + 0x378]
movups xmmword [r9 + 0x60], xmm1
mov qword [rsp + 0x378], rbx
mov qword [rsp + 0x380], 0xdd7d21d
xor qword [rsp + 0x380], 0xdd7d21a
mov word [rsp + 0x368], bx
jmp 0x14009b1f4
mov rbx, qword [rsp + 0x70]
movzx ecx, byte [rbx]
sub ecx, 1
je 0x14009b1d1
cmp ecx, 1
je 0x14009b1c3
inc qword [rsp + 0x88]
jmp 0x14009ab41
sub qword [rsp + 0x80], 0xfffffffffffffff0
jmp 0x14009ab41
mov edx, 0xe29e5cc
xor edx, 0xe29e5cd
lea rcx, [rsp + 0x78]
call fcn.1400334f0
jmp 0x14009ab41
xchg rbx, r15
mov r9, r15
xchg r15, rbx
xchg r9, rsi
mov qword [rsp + 0xe8], rsi
xchg rsi, r9
lea rax, [rsp + 0x188]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r8, [0x1400311c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
xchg r11, rax
mov qword [rsp + 0x180], r11
xchg r11, rax
test rax, rax
je 0x14009c05f
xchg r13, rbx
mov qword [rsp + 0xe8], r13
xchg rbx, r13
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x130]
call fcn.1400a5200
nop
cmp dword [rsp + 0x188], 0
je 0x14009b272
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
lea rcx, [rsp + 0x318]
call 0x14003c720
nop
lea rcx, [rsp + 0xf0]
call fcn.14000f270
nop
lea rcx, [rsp + 0x148]
call fcn.14000f270
nop
lea rcx, [rsp + 0xc8]
call fcn.14000f270
nop
lea rcx, [rsp + 0x1d0]
call fcn.14000f270
mov rbx, qword [rsp + 0x38]
test rbx, rbx
jne 0x14009b2e6
mov r8d, 0x67f737b6
xor r8d, 0x67f738af
lea rdx, [0x140001720]
lea rcx, [0x1400026e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movzx ecx, byte [rbx]
sub ecx, 1
je 0x14009b32d
cmp ecx, 1
je 0x14009b30b
inc r14
mov qword [rsp + 0xa8], r14
jmp 0x14009a5db
nop
add rsi, 0x4bd2733
sub rsi, 0x4bd2723
xchg rsi, rbx
mov qword [rsp + 0xa0], rbx
xchg rbx, rsi
jmp 0x14009a5db
xchg r9, rax
mov r9, rdi
xchg r9, rax
mov rcx, qword [rdi + 0x10]
cmp byte [rcx + 0x19], 0
je 0x14009b37e
mov rdi, qword [rdi + 8]
cmp byte [rdi + 0x19], 0
jne 0x14009b3b9
nop
cmp rax, qword [rdi + 0x10]
jne 0x14009b3b9
xchg r10, rax
mov r10, rdi
xchg r10, rax
mov rdi, qword [rdi + 8]
cmp byte [rdi + 0x19], 0
je 0x14009b352
mov qword [rsp + 0x98], rdi
jmp 0x14009a5db
xchg rbx, rcx
mov rdi, rbx
xchg rcx, rbx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
jne 0x14009b3b9
nop dword [rax]
xchg rdi, r13
mov r13, rcx
xchg r13, rdi
xchg r10, rax
mov r10, qword [rcx]
xchg r10, rax
xchg r13, rax
mov rcx, r13
xchg r13, rax
cmp byte [rax + 0x19], 0
je 0x14009b398
xchg r15, rdi
mov qword [rsp + 0x98], r15
xchg r15, rdi
jmp 0x14009a5db
lea rcx, [rsp + 0x480]
call fcn.140018350
nop
lea rcx, [rsp + 0x4a0]
call fcn.140018350
nop
lea rcx, [rsp + 0x258]
call fcn.14000f270
nop
lea rcx, [rsp + 0x278]
call fcn.14000f270
nop
xchg r12, r13
mov r12, qword [rsp + 0x8c0]
xchg r13, r12
xchg r15, rsi
mov r15, qword [r13 + 0x2f8]
xchg rsi, r15
xchg rbx, r15
mov r15, qword [r13 + 0x2f0]
xchg rbx, r15
cmp rbx, rsi
je 0x14009b481
nop
xchg rdi, r9
mov r9, qword [rbx]
xchg r9, rdi
mov edx, 0x30ac0695
xor edx, 0x30ac06f1
xor ecx, ecx
call fcn.1400c6ab0
cmp eax, 0x1e
jge 0x14009b469
mov rax, qword [rdi]
xchg r8, rcx
mov r8, rdi
xchg r8, rcx
call qword [rax + 8]
nop
sub rbx, 0x26617f
add rbx, 0x266187
cmp rbx, rsi
jne 0x14009b436
cmp dword [r13 + 0xe8], 0
je 0x14009b6de
mov rcx, qword [0x140128e90]
call fcn.14000da40
mov ebx, eax
test eax, eax
jle 0x14009b5ab
xor edx, edx
lea rcx, [rsp + 0x190]
call fcn.140015af0
nop
xor edx, edx
lea rcx, [rsp + 0x388]
call fcn.140015af0
nop
lea r8, [rsp + 0x190]
mov edx, 0x19415e37
sub edx, 0x19415e32
xchg rcx, r8
mov r8, qword [r13 + 0x308]
xchg rcx, r8
call fcn.14001a890
test al, al
je 0x14009b590
lea rax, [rsp + 0x58]
mov qword [rsp + 0x38], rax
lea eax, [rbx + 0x277d]
mov dword [rsp + 0x8c0], eax
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0x58]
call fcn.14002b370
xchg rbp, rax
mov rbx, rbp
xchg rbp, rax
mov edx, 0x6a06fd6
xor edx, 0x6a06fd7
lea rcx, [rsp + 0x190]
call fcn.140019850
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
xchg rbx, r11
mov rdx, r11
xchg rbx, r11
call fcn.140019190
lea rcx, [r13 + 0x308]
call fcn.14002dd70
mov r9b, 0x64
sub r9b, 0x63
lea r8, [rsp + 0x388]
lea rdx, [rsp + 0x190]
xchg r11, rax
mov rcx, r11
xchg r11, rax
call fcn.14001af90
mov ecx, 0x563200d2
add ecx, 0xa9cdff2d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0x388]
call fcn.140018320
nop
lea rcx, [rsp + 0x190]
call fcn.140018320
mov edx, 0x7cf91920
sub edx, 0x7cf918bc
xor ecx, ecx
call fcn.1400c6ab0
cmp eax, 0x1e
jge 0x14009b6de
mov rcx, qword [0x140128e90]
call fcn.14000caf0
mov ebx, eax
test eax, eax
jle 0x14009b6de
xor edx, edx
lea rcx, [rsp + 0x1a0]
call fcn.140015af0
nop
xor edx, edx
lea rcx, [rsp + 0x398]
call fcn.140015af0
nop
lea r8, [rsp + 0x1a0]
mov edx, 0x1c301058
sub edx, 0x1c301053
mov rcx, qword [r13 + 0x308]
call fcn.14001a890
test al, al
je 0x14009b6c3
lea rax, [rsp + 0x58]
xchg rdi, rax
mov qword [rsp + 0x38], rdi
xchg rdi, rax
lea eax, [rbx + 0x27e1]
mov dword [rsp + 0x8c0], eax
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0x58]
call fcn.14002b370
mov rbx, rax
mov edx, 0x61f3fa0
sub edx, 0x61f3f9f
lea rcx, [rsp + 0x1a0]
call fcn.140019850
xchg r13, rcx
mov r13, rax
xchg rcx, r13
xchg r9, rbx
mov rdx, r9
xchg r9, rbx
call fcn.140019190
lea rcx, [r13 + 0x308]
call fcn.14002dd70
mov r9b, 0x72
sub r9b, 0x71
lea r8, [rsp + 0x398]
lea rdx, [rsp + 0x1a0]
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.14001af90
mov ecx, 0x2b5c5b98
add ecx, 0xd4a3a467
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0x398]
call fcn.140018320
nop
lea rcx, [rsp + 0x1a0]
call fcn.140018320
mov rbx, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x138]
cmp rbx, rdi
je 0x14009b71d
xchg r8, rbx
mov rcx, r8
xchg r8, rbx
call 0x1400a42d0
nop
add rbx, 0x2e82bca1
sub rbx, 0x2e82bc91
cmp rbx, rdi
jne 0x14009b6f7
lea rcx, [rsp + 0xb0]
call fcn.1400a5f20
test rax, rax
jne 0x14009b782
lea r9d, [rax - 1]
lea r8d, [rax + 0x21]
lea rdx, [rsp + 0x58]
xchg rdi, rcx
mov rdi, r13
xchg rcx, rdi
call fcn.1400961b0
nop
lea rcx, [rsp + 0x58]
call fcn.14002ae70
mov rdx, rax
mov rcx, r13
call fcn.14009c0d0
xchg rcx, r13
mov r13, rcx
xchg rcx, r13
call fcn.140096560
nop
lea rcx, [rsp + 0x58]
call fcn.14002ab80
jmp 0x14009bedc
lea rcx, [rsp + 0xb0]
call fcn.1400a5f20
cmp rax, 1
jbe 0x14009b7b7
movzx r8d, byte [rsp + 0x8c0]
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xb0]
call fcn.140034860
mov rsi, qword [r13 + 0x2f8]
mov rbx, qword [r13 + 0x2f0]
cmp rbx, rsi
je 0x14009b817
nop dword [rax]
mov rdi, qword [rbx]
mov edx, 0x2b268eb8
sub edx, 0x2b268e54
xor ecx, ecx
call fcn.1400c6ab0
cmp eax, 0x1e
jge 0x14009b7ff
mov rax, qword [rdi]
xchg rcx, r14
mov r14, rdi
xchg r14, rcx
call qword [rax + 8]
nop
add rbx, 0x740f73f0
sub rbx, 0x740f73e8
cmp rbx, rsi
jne 0x14009b7d2
cmp dword [r13 + 0xe8], 0
je 0x14009ba65
mov rcx, qword [0x140128e90]
call fcn.14000da40
mov ebx, eax
test eax, eax
jle 0x14009b937
xor edx, edx
lea rcx, [rsp + 0x1b0]
call fcn.140015af0
nop
xor edx, edx
lea rcx, [rsp + 0x1f0]
call fcn.140015af0
nop
lea r8, [rsp + 0x1b0]
mov edx, 0x6ff558a0
sub edx, 0x6ff5589b
mov rcx, qword [r13 + 0x308]
call fcn.14001a890
test al, al
je 0x14009b91c
lea rax, [rsp + 0x58]
mov qword [rsp + 0x38], rax
lea eax, [rbx + 0x277d]
mov dword [rsp + 0x8c0], eax
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0x58]
call fcn.14002b370
xchg r8, rax
mov rbx, r8
xchg r8, rax
mov edx, 0x619385d4
sub edx, 0x619385d3
lea rcx, [rsp + 0x1b0]
call fcn.140019850
xchg rbx, rax
mov rcx, rbx
xchg rbx, rax
xchg r13, rbx
mov rdx, r13
xchg r13, rbx
call fcn.140019190
lea rcx, [r13 + 0x308]
call fcn.14002dd70
mov r9b, 0x18
xor r9b, 0x19
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0x1b0]
mov rcx, rax
call fcn.14001af90
mov ecx, 0x4437cb14
add ecx, 0xbbc834eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0x1f0]
call fcn.140018320
nop
lea rcx, [rsp + 0x1b0]
call fcn.140018320
mov edx, 0x1e1d790d
xor edx, 0x1e1d7969
xor ecx, ecx
call fcn.1400c6ab0
cmp eax, 0x1e
jge 0x14009ba65
mov rcx, qword [0x140128e90]
call fcn.14000caf0
mov ebx, eax
test eax, eax
jle 0x14009ba65
xor edx, edx
lea rcx, [rsp + 0x1c0]
call fcn.140015af0
nop
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.140015af0
nop
lea r8, [rsp + 0x1c0]
mov edx, 0x2463323e
sub edx, 0x24633239
mov rcx, qword [r13 + 0x308]
call fcn.14001a890
test al, al
je 0x14009ba4d
lea rax, [rsp + 0x1f0]
xchg r14, rax
mov qword [rsp + 0x38], r14
xchg r14, rax
lea eax, [rbx + 0x27e1]
mov dword [rsp + 0x8c0], eax
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0x1f0]
call fcn.14002b370
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x4de4af14
xor edx, 0x4de4af15
lea rcx, [rsp + 0x1c0]
call fcn.140019850
xchg r12, rax
mov rcx, r12
xchg r12, rax
xchg rcx, rbx
mov rdx, rcx
xchg rcx, rbx
call fcn.140019190
lea rcx, [r13 + 0x308]
call fcn.14002dd70
mov r9b, 0x59
sub r9b, 0x58
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x1c0]
mov rcx, rax
call fcn.14001af90
mov ecx, 0x1ca97bb2
xor ecx, 0xe356844d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rsp + 0x58]
call fcn.140018320
nop
lea rcx, [rsp + 0x1c0]
call fcn.140018320
mov r9d, 0x2287334
add r9d, 0xfdd78ccb
lea r8d, [r9 + 0x23]
lea rdx, [rsp + 0x428]
xchg r13, r14
mov rcx, r14
xchg r13, r14
call fcn.1400961b0
nop
xchg r9, r15
mov r9, qword [rsp + 0xb8]
xchg r15, r9
xchg r12, rdi
mov r12, qword [rsp + 0xb0]
xchg r12, rdi
cmp rdi, r15
je 0x14009bdb4
sub rdi, 0xffffffffffffffe0
mov rbx, qword [rsp + 0x8d0]
nop word [rax + rax]
mov rax, qword [rbx]
mov qword [rbx + 8], rax
mov dword [rsp + 0x48], 0x2bf15cb7
xor dword [rsp + 0x48], 0x954fe209
mov dword [rsp + 0x4e], 0x63179c73
add dword [rsp + 0x4e], 0x9c9862ef
mov dword [rsp + 0x52], 0x11e4364a
add dword [rsp + 0x52], 0xed87c96b
xor eax, eax
mov word [rsp + 0x56], ax
xor ebx, ebx
mov edx, ebx
nop word [rax + rax]
movzx ecx, word [rsp + rdx*2 + 0x4e]
movzx eax, byte [rsp + rdx + 0x48]
add ax, cx
mov word [rsp + rdx*2 + 0x4e], ax
mov byte [rsp + rdx + 0x48], bl
inc rdx
cmp rdx, 4
jb 0x14009bb0c
lea rdx, [rsp + 0x4e]
lea rcx, [rsp + 0x5a0]
call fcn.140035cf0
mov rsi, rax
mov edx, dword [rdi + 0x20]
lea rcx, [rsp + 0x580]
call fcn.1400a6380
xchg r8, rax
mov r14, r8
xchg r8, rax
mov word [rsp + 0x38], 0x213d
xor word [rsp + 0x38], 0x9f83
mov dword [rsp + 0x3c], 0x274e6c55
add dword [rsp + 0x3c], 0xd81c930d
xor eax, eax
mov word [rsp + 0x40], ax
xchg rbx, r14
mov rdx, r14
xchg rbx, r14
movzx ecx, word [rsp + rdx*2 + 0x3c]
movzx eax, byte [rsp + rdx + 0x38]
add ax, cx
mov word [rsp + rdx*2 + 0x3c], ax
mov byte [rsp + rdx + 0x38], 0x1b
sub byte [rsp + rdx + 0x38], 0x1b
inc rdx
cmp rdx, 2
jb 0x14009bb89
lea rdx, [rsp + 0x3c]
lea rcx, [rsp + 0x560]
call fcn.140035cf0
xchg rbx, r9
mov r9, rax
xchg r9, rbx
lea rcx, [rsp + 0x428]
call fcn.14002ae70
xchg rdx, r9
mov r9, rax
xchg rdx, r9
lea rcx, [rsp + 0x540]
call fcn.140035cf0
nop
xchg rbx, r8
mov rbx, r8
xchg rbx, r8
xchg r15, rdx
mov r15, rax
xchg rdx, r15
lea rcx, [rsp + 0x520]
call fcn.14002dd90
nop
xchg r14, r8
mov r14, r8
xchg r8, r14
mov rdx, rax
lea rcx, [rsp + 0x500]
call fcn.14002dd90
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x4e0]
call fcn.14002dd90
mov rdx, rax
lea rcx, [r13 + 0x178]
call fcn.14003f950
lea rcx, [rsp + 0x4e0]
call fcn.14000f270
nop
lea rcx, [rsp + 0x500]
call fcn.14000f270
nop
lea rcx, [rsp + 0x520]
call fcn.14000f270
nop
lea rcx, [rsp + 0x540]
call fcn.14000f270
nop
lea rcx, [rsp + 0x560]
call fcn.14000f270
nop
xor ebx, ebx
mov eax, ebx
nop word [rax + rax]
mov byte [rsp + rax + 0x3c], bl
inc rax
cmp rax, 4
jb 0x14009bca0
lea rcx, [rsp + 0x580]
call fcn.14000f270
nop
lea rcx, [rsp + 0x5a0]
call fcn.14000f270
nop
xchg rbx, r14
mov rax, r14
xchg rbx, r14
nop dword [rax]
mov byte [rsp + rax + 0x4e], 0x7d
sub byte [rsp + rax + 0x4e], 0x7d
inc rax
cmp rax, 8
jb 0x14009bcda
lea rcx, [r13 + 0x178]
call fcn.1400a2ce0
xchg rbx, rdx
mov rbx, rax
xchg rdx, rbx
mov rcx, qword [r13 + 0x198]
call fcn.1400a9b20
xchg rbx, r10
mov r10, qword [r13 + 0x2d8]
xchg rbx, r10
test rbx, rbx
je 0x14009bd47
xchg r9, rcx
mov r9, rdi
xchg r9, rcx
call fcn.1400a2ce0
mov rdx, rax
xchg r15, rbx
mov rcx, r15
xchg r15, rbx
call fcn.1400a9b20
mov rcx, rdi
call fcn.1400a2ce0
mov rdx, rax
lea rcx, [rsp + 0x760]
call fcn.1400ba070
nop
lea rcx, [rdi - 0x20]
call fcn.1400a2ce0
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
mov rbx, qword [rsp + 0x8d0]
xchg r8, rsi
mov rsi, rbx
xchg rsi, r8
lea rcx, [rsp + 0x760]
call fcn.1400bb4f0
test al, al
jne 0x14009bdf4
lea rcx, [rsp + 0x760]
call fcn.1400baaa0
sub rdi, 0xffffffffffffffb8
lea rax, [rdi - 0x20]
cmp rax, r15
jne 0x14009bac4
mov rcx, qword [r13 + 0x2d8]
test rcx, rcx
je 0x14009bdd0
lea rdx, [0x14000186c]
call fcn.1400a9b20
mov ecx, 0x4821d81e
add ecx, 0x37ef2bfd
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
lea rcx, [rsp + 0x428]
call fcn.14002ab80
jmp 0x14009bedc
cmp byte [rsp + 0x8e8], 0
jne 0x14009be5d
mov edx, 0x405a7283
sub edx, 0x405a7280
mov rcx, qword [rsp + 0x8c8]
call fcn.140019850
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.14002da10
mov r8, qword [rbx]
mov rcx, qword [rbx + 8]
sub rcx, r8
movsxd r9, eax
cmp r9, rcx
jae 0x14009be5d
nop dword [rax]
nop word [rax + rax]
dec qword [rbx + 8]
mov rax, qword [rbx + 8]
sub rax, r8
cmp r9, rax
jb 0x14009be49
xchg r12, rcx
mov r12, qword [r13 + 0x2d8]
xchg r12, rcx
test rcx, rcx
je 0x14009be80
lea rdx, [0x14000186c]
call fcn.1400a9b20
nop
lea rcx, [rsp + 0x760]
call fcn.1400baaa0
nop
lea rcx, [rsp + 0x428]
call fcn.14002ab80
nop
lea rcx, [rsp + 0x5c0]
call fcn.1400c3af0
nop
lea rcx, [rsp + 0xb0]
call fcn.14003e7b0
nop
lea rcx, [rsp + 0x130]
call fcn.14003eb20
nop
lea rcx, [rsp + 0x168]
call fcn.14002ab80
mov al, 3
sub al, 2
jmp 0x14009bf15
lea rcx, [rsp + 0x5c0]
call fcn.1400c3af0
nop
lea rcx, [rsp + 0xb0]
call fcn.14003e7b0
nop
lea rcx, [rsp + 0x130]
call fcn.14003eb20
nop
lea rcx, [rsp + 0x168]
call fcn.14002ab80
xor al, al
add rsp, 0x880
push rcx
push rax
push rcx
push rbx
xchg qword [rsp + 0x20], r15
pop rbx
pop rcx
pop rax
pop rcx
add rsp, 8
push rcx
push rdx
push rcx
push rbx
push rax
xchg qword [rsp + 0x28], r14
add rsp, 0x30
nop
xchg qword [rsp], r13
add rsp, 8
nop
add rsp, 8
mov r12, qword [rsp - 8]
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
xchg qword [rsp], rsi
add rsp, 8
push rdx
push rcx
push rax
push rdx
push rax
push rax
push rax
xchg qword [rsp + 0x38], rbx
pop rax
pop rax
pop rax
pop rdx
pop rax
pop rcx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
lea rdx, [0x140002820]
lea rcx, [rsp + 0x440]
call fcn.140016340
nop
lea r8, [rsp + 0x440]
mov edx, 0x1872ebb2
sub edx, 0x1872eadc
lea rcx, [rsp + 0x678]
call fcn.1400a3060
lea rdx, [0x140127388]
lea rcx, [rsp + 0x678]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, [0x140002838]
lea rcx, [rsp + 0x4c0]
call fcn.140016340
nop
lea r8, [rsp + 0x4c0]
mov edx, 0x380a93cd
sub edx, 0x380a92f9
lea rcx, [rsp + 0x6b0]
call fcn.1400a3060
lea rdx, [0x140127388]
lea rcx, [rsp + 0x6b0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, [0x140002710]
lea rcx, [rsp + 0x408]
call fcn.140016340
nop
lea r8, [rsp + 0x408]
mov edx, 0x957b962
xor edx, 0x957b9ad
lea rcx, [rsp + 0x6e8]
call fcn.1400a3060
lea rdx, [0x140127388]
lea rcx, [rsp + 0x6e8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov dword [rsp + 0x188], ebx
mov ecx, 0x720ae408
xor ecx, 0x720ae40e
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
lea rdx, [0x140002820]
lea rcx, [rsp + 0x408]
call fcn.140016340
nop
lea r8, [rsp + 0x408]
mov edx, 0x4ec813f9
sub edx, 0x4ec81323
lea rcx, [rsp + 0x720]
call fcn.1400a3060
lea rdx, [0x140127388]
lea rcx, [rsp + 0x720]
call sub.VCRUNTIME140.dll__CxxThrowException
int3