Function at 0x1400018d0
Capabilities:
Encode data using xor
Execute anti-debugging instructions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x7b8
movdqa xmmword [rsp + 0x7a0], xmm11
movdqa xmmword [rsp + 0x790], xmm10
movdqa xmmword [rsp + 0x780], xmm9
movdqa xmmword [rsp + 0x770], xmm8
movdqa xmmword [rsp + 0x760], xmm7
movdqa xmmword [rsp + 0x750], xmm6
lea rsi, [rsp + 0x340]
mov rcx, rsi
call fcn.140113400
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
lea rax, [0x14019b3e2]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0xfcc1e873e0de7a0d
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef3c0
movabs rcx, 0x2f113bdba3ebe379
xor rcx, qword [rax]
movabs rdx, 0x1deb291c0521a22e
xor rdx, qword [rax + 8]
mov r8d, 0x61da3a78
xor r8d, dword [rax + 0x10]
mov qword [rsp + 0x340], rcx
mov qword [rsp + 0x348], rdx
mov dword [rsp + 0x350], r8d
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x340]
mov r8d, 0x14
call fcn.1401134b0
movzx eax, byte [rsp + 0x50]
cmp rax, 0x11
jne 0x140001b76
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x190], rax
lea rax, [0x140193a78]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
movabs rdx, 0xa4b41c0f53f0de00
mov qword [rsp + 0x340], rdx
mov rdx, qword [rsp + 0x340]
call fcn.1400ef8c0
movabs rcx, 0xfee3f2c04eedb6db
xor rcx, qword [rax]
movabs rdx, 0x56a0cdc897cde13d
xor rdx, qword [rax + 8]
movabs r8, 0x37fbe1baac24a2c4
xor r8, qword [rax + 0x10]
movabs r9, 0xc75d17ef325c0fdc
xor r9, qword [rax + 0x18]
movabs r10, 0x619e69eed1b862df
xor r10, qword [rax + 0x20]
mov qword [rsp + 0x340], rcx
mov qword [rsp + 0x348], rdx
mov qword [rsp + 0x350], r8
mov qword [rsp + 0x358], r9
mov qword [rsp + 0x360], r10
lea rcx, [rsp + 0x1f0]
lea rdx, [rsp + 0x190]
lea r8, [rsp + 0x340]
mov r9d, 0x28
call fcn.1400f5250
cmp byte [rsp + 0x1f0], 0x11
jne 0x1400046d1
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0xc8], rax
mov rbx, qword [rsp + 0x200]
mov rsi, qword [rsp + 0x208]
xor ecx, ecx
call fcn.1400e5d00
test rax, rax
je 0x1400046d1
movups xmm0, xmmword [rax]
inc qword [rax]
movaps xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [0x1401cda10]
movaps xmmword [rsp + 0xd0], xmm0
movdqu xmm0, xmmword [0x1401cda20]
movdqa xmmword [rsp + 0xe0], xmm0
lea r14, [rsi + rsi*2]
shl r14, 4
add r14, rbx
mov qword [rsp + 0x48], rbx
test rsi, rsi
je 0x1400020ec
lea r15, [rsp + 0x1f8]
lea r12, [rsp + 0x370]
lea r13, [rsp + 0x1f0]
movdqa xmm6, xmmword [0x140195040]
movdqa xmm7, xmmword [0x140195050]
pxor xmm8, xmm8
pcmpeqd xmm9, xmm9
mov rbx, qword [rsp + 0x48]
mov qword [rsp + 0x30], r14
jmp 0x140001c21
cmp rax, 0xf
ja case.0x140001b8a.5
lea rcx, [0x1401950b0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp qword [rsp + 0x58], 0
je case.0x140001b8a.0
lea rax, [rsp + 0x60]
mov r8, qword [rax]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x140001b8a.0
and al, 1
movzx eax, al
sub qword [rsp + 0xe0], rax
lea rax, [rcx - 0x10]
and r13, rax
mov rax, qword [rsp + 0x38]
mov byte [rdi + rcx], al
mov byte [r13 + rdi + 0x10], al
inc qword [rsp + 0xe8]
neg rcx
lea rax, [rcx + rcx*2]
mov qword [rdi + rax*8 - 0x18], rbp
mov qword [rdi + rax*8 - 0x10], rsi
mov qword [rdi + rax*8 - 8], rbp
mov r14, qword [rsp + 0x30]
lea r15, [rsp + 0x1f8]
lea r12, [rsp + 0x370]
lea r13, [rsp + 0x1f0]
nop
mov rcx, r13
call fcn.1400efb10
cmp rbx, r14
je 0x140002121
mov rax, rbx
add rbx, 0x30
mov rsi, qword [rax]
test rsi, rsi
je 0x1400020ec
mov qword [rsp + 0x1f0], rsi
mov rcx, qword [rax + 0x28]
mov qword [r15 + 0x20], rcx
movdqu xmm0, xmmword [rax + 8]
movdqu xmm1, xmmword [rax + 0x18]
movdqu xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15], xmm0
cmp qword [rsp + 0x208], 0
je 0x140001c10
movdqu xmm0, xmmword [rsp + 0x210]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmm6
movdqa xmmword [rsp + 0x340], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmm7
movdqa xmmword [rsp + 0x350], xmm1
movdqa xmmword [rsp + 0x360], xmm0
movdqa xmmword [r12], xmm8
mov qword [r12 + 0x10], 0
mov r8d, 0xb
lea rdi, [rsp + 0x340]
mov rcx, rdi
lea rdx, str.displayName
call fcn.1400f2f90
mov byte [rsp + 0xb0], 0xff
mov r8d, 1
mov rcx, rdi
lea rdx, [rsp + 0xb0]
call fcn.1400f2f90
mov rax, qword [rsp + 0x350]
mov r9, qword [rsp + 0x370]
shl r9, 0x38
or r9, qword [rsp + 0x378]
mov rcx, qword [rsp + 0x358]
mov r8, qword [rsp + 0x340]
add r8, rax
rol rax, 0xd
xor rcx, r9
xor rax, r8
rol r8, 0x20
mov rdx, qword [rsp + 0x348]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, r8
xor rax, rdx
rol rdx, 0x20
xor r8, r9
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
rol rcx, 0x15
xor rax, r8
add rdx, rax
rol rax, 0x11
mov r8, rdx
rol r8, 0x20
xor r8, rax
xor r8, rcx
xor r8, rdx
mov rax, qword [rsp + 0x1f8]
mov rcx, r8
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rcx, [rsi - 0x38]
xor edx, edx
and r8, rax
movdqu xmm1, xmmword [rsi + r8]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r9d, xmm2
nop word cs:[rax + rax]
test r9w, r9w
je 0x140001e90
mov r10d, r9d
lea r9d, [r10 - 1]
and r9d, r10d
tzcnt r10d, r10d
add r10, r8
and r10, rax
neg r10
imul r10, r10, 0x38
cmp qword [rcx + r10 + 0x10], 0xb
jne 0x140001e30
lea r11, [rcx + r10]
mov r11, qword [r11 + 8]
mov rdi, qword [r11]
movabs rbp, 0x4e79616c70736964
xor rdi, rbp
mov r11, qword [r11 + 3]
movabs rbp, 0x656d614e79616c70
xor r11, rbp
or r11, rdi
jne 0x140001e30
jmp 0x140001ec0
pcmpeqb xmm1, xmm9
pmovmskb r9d, xmm1
test r9d, r9d
jne 0x140001c10
add r8, rdx
add r8, 0x10
add rdx, 0x10
jmp 0x140001e0b
cmp byte [rsi + r10 - 0x20], 2
jne 0x140001c10
add rsi, r10
mov r15, qword [rsi - 0x10]
mov rbp, qword [rsi - 8]
test rbp, rbp
je 0x140001f24
js 0x1400046d1
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x140001f0a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov qword [0x140205100], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x140001f29
jmp 0x1400046d1
mov esi, 1
mov rcx, rsi
mov rdx, r15
mov r8, rbp
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x740], xmm0
lea rcx, [rsp + 0x740]
mov rdx, rsi
mov r8, rbp
call fcn.1400f3180
mov r15, rax
cmp qword [rsp + 0xe0], 0
je 0x1400020d2
mov rdi, qword [rsp + 0xd0]
mov r13, qword [rsp + 0xd8]
mov rax, r15
shr rax, 0x39
mov qword [rsp + 0x38], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm10, xmm0, 0
xor eax, eax
mov qword [rsp + 0x28], rax
xor r14d, r14d
and r15, r13
movdqu xmm11, xmmword [rdi + r15]
movdqa xmm0, xmm11
pcmpeqb xmm0, xmm10
pmovmskb r12d, xmm0
nop dword [rax]
test r12w, r12w
je 0x140002010
mov eax, r12d
lea r12d, [rax - 1]
and r12d, eax
tzcnt eax, eax
add rax, r15
and rax, r13
neg rax
lea rax, [rax + rax*2]
cmp rbp, qword [rdi + rax*8 - 8]
jne 0x140001fc0
lea rax, [rdi + rax*8]
mov rdx, qword [rax - 0x10]
mov rcx, rsi
mov r8, rbp
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140001fc0
jmp 0x140002070
cmp r14, 1
mov r14d, 1
je 0x140002039
pmovmskb eax, xmm11
xor r14d, r14d
test eax, eax
setne r14b
tzcnt eax, eax
add rax, r15
and rax, r13
mov qword [rsp + 0x40], rax
pcmpeqb xmm11, xmm9
pmovmskb eax, xmm11
test eax, eax
jne 0x1400020ac
mov rax, qword [rsp + 0x28]
add r15, rax
add r15, 0x10
add rax, 0x10
mov qword [rsp + 0x28], rax
jmp 0x140001fa5
test rbp, rbp
mov r14, qword [rsp + 0x30]
lea r15, [rsp + 0x1f8]
lea r12, [rsp + 0x370]
lea r13, [rsp + 0x1f0]
je 0x140001c10
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
jmp 0x140001c10
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rdi + rcx]
test al, al
js 0x140001bb3
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
tzcnt ecx, eax
movzx eax, byte [rdi + rcx]
jmp 0x140001bb3
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0xf0]
call fcn.1400f0780
jmp 0x140001f6c
mov rax, r14
sub rax, rbx
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp r14, rbx
je 0x140002121
mov rsi, rdx
shr rsi, 5
nop dword [rax + rax]
mov rcx, rbx
call fcn.1400efb10
add rbx, 0x30
dec rsi
jne 0x140002110
cmp qword [rsp + 0xc8], 0
je 0x14000213f
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x48]
call sub.kernel32.dll_HeapFree
mov rbx, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe8]
test rbx, rbx
je 0x14000222e
mov rsi, qword [rsp + 0xd0]
test rdi, rdi
je 0x1400021fd
movdqa xmm0, xmmword [rsi]
pmovmskb r13d, xmm0
not r13d
lea r14, [rsi + 0x10]
mov r15, rsi
mov r12, rdi
jmp 0x1400021a2
dec r12
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
test r12, r12
je 0x1400021fd
test r13w, r13w
jne 0x1400021d1
nop dword [rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r13d, xmm0
add r15, 0xfffffffffffffe80
add r14, 0x10
cmp r13d, 0xffff
je 0x1400021b0
not r13d
tzcnt eax, r13d
neg rax
lea rax, [rax + rax*2]
cmp qword [r15 + rax*8 - 0x18], 0
je 0x140002190
lea rax, [r15 + rax*8]
mov r8, qword [rax - 0x10]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140002190
lea rax, [rbx + 1]
mov ecx, 0x18
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rbx, rax
cmp rbx, 0xffffffffffffffef
je 0x14000222e
sub rsi, rax
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x190]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rdi, rdi
je case.0x140001b8a.0
lea rdx, [0x1401f0d38]
lea r13, [rsp + 0x340]
mov r8d, 0xa
mov rcx, r13
call fcn.1401134b0
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0xb0], rax
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400022ab
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0xd8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1400046d1
lea rax, [0x14019afbb]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x57d3c83a50758f83
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef840
movabs rsi, 0x1c2087b0bceff0cb
xor rsi, qword [rax]
movabs rdi, 0x6b6eb8739606babb
xor rdi, qword [rax + 8]
movabs rbx, 0xf326dd930704e23
xor rbx, qword [rax + 0x10]
movabs r14, 0x4203a9c13a4ff3d
xor r14, qword [rax + 0x18]
movzx ebp, byte [rax + 0x20]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x140002362
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x21
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov r12, rax
xor bpl, 0x85
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r14
mov byte [rax + 0x20], bpl
lea rax, [0x140198aaf]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x28a8ffbce5f6ec08
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef960
movabs rsi, 0xbc3fd966cce1f49f
xor rsi, qword [rax]
movabs rdi, 0x1b27eb65a574670f
xor rdi, qword [rax + 8]
movabs rbx, 0x8da8fe922f2c3040
xor rbx, qword [rax + 0x10]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14000241c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x18
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rsp + 0x28], rax
mov qword [rax + 0x10], rbx
lea rax, [0x140192649]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x868feab9bfac17d1
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef440
movabs rsi, 0xb91e12584ef18644
xor rsi, qword [rax]
movabs rdi, 0x73141e7111f0d1b2
xor rdi, qword [rax + 8]
movabs r14, 0xdf0a598ceb92859c
xor r14, qword [rax + 0x10]
movabs r15, 0xc08517ce1349e1b1
xor r15, qword [rax + 0x18]
movzx ebp, byte [rax + 0x22]
movzx ebx, word [rax + 0x20]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400024e2
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x23
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov edx, ebx
shr edx, 8
xor bl, 0xf0
xor dl, 0x38
movzx ecx, bl
movzx edx, dl
shl edx, 8
or edx, ecx
movd xmm0, edx
xor bpl, 0xe0
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r15
movd ecx, xmm0
mov word [rax + 0x20], cx
mov qword [rsp + 0x30], rax
mov byte [rax + 0x22], bpl
lea rax, [0x14019a609]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x8f6a5a15e90951f6
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef740
movabs rsi, 0xb60ee14aef969e23
xor rsi, qword [rax]
movabs rdi, 0x2a7545642ed51f79
xor rdi, qword [rax + 8]
mov ebx, 0xd9e90508
xor ebx, dword [rax + 0x10]
movzx ebp, word [rax + 0x14]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400025be
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x16
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov r14, rax
mov eax, ebp
xor al, 0x2c
shr ebp, 8
xor bpl, 0x4c
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [r14], rsi
mov qword [r14 + 8], rdi
mov dword [r14 + 0x10], ebx
movd eax, xmm0
mov word [r14 + 0x14], ax
lea rax, [0x140197970]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0xc20586a8f62da60f
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef460
movq xmm6, qword [rax]
movq xmm8, qword [rax + 8]
movq xmm7, qword [rax + 0x10]
movq xmm9, qword [rax + 0x18]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14000267c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x20
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
punpcklqdq xmm7, xmm9
punpcklqdq xmm6, xmm8
pxor xmm6, xmmword [0x140195060]
pxor xmm7, xmmword [0x140195070]
movdqu xmmword [rax], xmm6
mov qword [rsp + 0xc8], rax
movdqu xmmword [rax + 0x10], xmm7
lea rax, [0x1401982ab]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0xcb7b0d7ae427f497
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef990
movabs rsi, 0xa9254ccb1119ab9e
xor rsi, qword [rax]
movabs rdi, 0x3f1ec70a1739be35
xor rdi, qword [rax + 8]
movabs r14, 0x9c31cef018016a55
xor r14, qword [rax + 0x10]
mov ebx, 0x181c1ce7
xor ebx, dword [rax + 0x18]
movzx ebp, byte [rax + 0x1e]
movzx r12d, word [rax + 0x1c]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x140002762
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x1f
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov r15, rax
mov eax, r12d
shr eax, 8
xor r12b, 0xc7
xor al, 0x95
movzx ecx, r12b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 0x96
mov qword [r15], rsi
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], r14
mov dword [r15 + 0x18], ebx
movd eax, xmm0
mov word [r15 + 0x1c], ax
mov byte [r15 + 0x1e], bpl
lea rax, [0x1401950d6]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x5cc1f808f69c35cd
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef640
movq xmm6, qword [rax]
movq xmm8, qword [rax + 8]
movq xmm7, qword [rax + 0x10]
movq xmm9, qword [rax + 0x18]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14000282d
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x20
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov rsi, rax
punpcklqdq xmm7, xmm9
punpcklqdq xmm6, xmm8
pxor xmm6, xmmword [0x140195080]
pxor xmm7, xmmword [0x140195090]
movdqu xmmword [rax], xmm6
movdqu xmmword [rax + 0x10], xmm7
lea rax, [0x1401906c3]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x6497df9d93ac1c64
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef4c0
movabs rdi, 0xcfac4a63bbadad05
xor rdi, qword [rax]
movabs rbx, 0x4e6d82349ae12b73
xor rbx, qword [rax + 8]
movabs rbp, 0xacf18f533b44d901
xor rbp, qword [rax + 0x10]
movabs r13, 0x68abad883e6f9a1e
xor r13, qword [rax + 0x18]
movzx r12d, word [rax + 0x20]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x140002906
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x22
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov r14, rax
mov eax, r12d
xor al, 0xa5
shr r12d, 8
xor r12b, 0xc3
movzx eax, al
movzx ecx, r12b
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [r14], rdi
mov qword [r14 + 8], rbx
mov qword [r14 + 0x10], rbp
mov qword [r14 + 0x18], r13
movd eax, xmm0
mov word [r14 + 0x20], ax
lea rax, [0x140190d0d]
mov qword [rsp + 0x340], rax
lea rdx, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
movabs rax, 0xb666add89f4a2024
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef560
movabs rdi, 0x214e263aeacaf32d
xor rdi, qword [rax]
movabs rbx, 0x9c4762d854ab8b3e
xor rbx, qword [rax + 8]
movabs r13, 0xe124b25c73970016
xor r13, qword [rax + 0x10]
mov ebp, 0x9a8e348b
xor ebp, dword [rax + 0x18]
movzx r12d, byte [rax + 0x1c]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400029f3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x1d
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
xor r12b, 4
mov qword [rax], rdi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], r13
mov dword [rax + 0x18], ebp
mov byte [rax + 0x1c], r12b
mov rdi, qword [rsp + 0x48]
mov qword [rdi], 0x21
mov rcx, qword [rsp + 0x38]
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], 0x21
mov qword [rdi + 0x18], 0x18
mov rcx, qword [rsp + 0x28]
mov qword [rdi + 0x20], rcx
mov qword [rdi + 0x28], 0x18
mov qword [rdi + 0x30], 0x23
mov rcx, qword [rsp + 0x30]
mov qword [rdi + 0x38], rcx
mov qword [rdi + 0x40], 0x23
mov qword [rdi + 0x48], 0x16
mov rcx, qword [rsp + 0x40]
mov qword [rdi + 0x50], rcx
mov qword [rdi + 0x58], 0x16
mov qword [rdi + 0x60], 0x20
mov rcx, qword [rsp + 0xc8]
mov qword [rdi + 0x68], rcx
mov qword [rdi + 0x70], 0x20
mov qword [rdi + 0x78], 0x1f
mov qword [rdi + 0x80], r15
mov qword [rdi + 0x88], 0x1f
mov qword [rdi + 0x90], 0x20
mov qword [rdi + 0x98], rsi
mov qword [rdi + 0xa0], 0x20
mov qword [rdi + 0xa8], 0x22
mov qword [rdi + 0xb0], r14
mov qword [rdi + 0xb8], 0x22
mov qword [rdi + 0xc0], 0x1d
mov qword [rdi + 0xc8], rax
mov qword [rdi + 0xd0], 0x1d
lea rax, [rsp + 0xb0]
movq xmm7, rax
lea r12, [rdi + 0x20]
mov ebx, 0xc0
xor esi, esi
lea rbp, [rsp + 0x340]
movdqa xmm6, xmmword [0x1401950a0]
nop dword [rax]
lea rax, [rsi + rsi*2]
inc rsi
mov r14, qword [rdi + rax*8]
movabs rcx, 0x8000000000000000
cmp r14, rcx
je 0x140002fed
mov qword [rsp + 0x28], rsi
lea rax, [rdi + rax*8]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
test rsi, rsi
je 0x140002bc0
js 0x1400046d1
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x140002ba2
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov qword [0x140205100], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r13, rax
test rax, rax
jne 0x140002bc6
jmp 0x1400046d1
mov r13d, 1
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rbx
mov rcx, r13
mov qword [rsp + 0x40], rdi
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov edx, 3
lea rcx, [0x1401cd5e7]
call fcn.14010fa70
mov r14, rax
mov rcx, r13
mov rdx, rsi
call fcn.14010fa70
mov rdi, rax
mov rdx, qword [rsp + 0xb0]
mov r15, rbp
mov rcx, rbp
mov r8, r14
mov r9, rax
call fcn.1400f8a60
mov rbx, qword [rsp + 0x340]
mov rbp, qword [rsp + 0x348]
test rbx, rbx
je 0x140002fc0
test rbp, rbp
je 0x140002c46
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
test rdi, rdi
je 0x140002c53
mov rcx, rdi
call sub.oleaut32.dll_SysFreeString
test r14, r14
mov rbp, r15
je 0x140002c63
mov rcx, r14
call sub.oleaut32.dll_SysFreeString
test rsi, rsi
lea r15, [rsp + 0x350]
je 0x140002c81
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r13
call sub.kernel32.dll_HeapFree
test rbx, rbx
jne 0x1400046d1
mov byte [rsp + 0x50], 0x11
pshufd xmm0, xmm8, 0xee
movq rsi, xmm0
mov rcx, rbp
mov rdx, rsi
lea r8, [rsp + 0x50]
call fcn.1400f6a70
cmp qword [rsp + 0x340], 0
je 0x140002ec0
mov rdi, qword [rsp + 0x348]
movdqu xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqa xmmword [rsp + 0x1f0], xmm0
movdqa xmmword [rsp + 0x200], xmm1
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x210], rax
test rdi, rdi
je 0x140002ec0
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xf0], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movaps xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x140002d4b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov qword [0x140205100], rax
mov r8d, 0xc0
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov r14, rax
mov qword [rax], rdi
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmm1, xmmword [rsp + 0xe0]
movups xmmword [rax + 8], xmm0
movdqu xmmword [rax + 0x18], xmm1
mov rax, qword [rsp + 0xf0]
mov qword [r14 + 0x28], rax
mov qword [rsp + 0x190], 4
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x1a0], 1
mov r13d, 1
mov edi, 0x38
jmp 0x140002e00
mov qword [r14 + rdi - 8], rbx
movdqa xmm0, xmmword [rsp + 0xd0]
movdqa xmm1, xmmword [rsp + 0xe0]
movdqu xmmword [r14 + rdi], xmm0
movdqu xmmword [r14 + rdi + 0x10], xmm1
mov rax, qword [rsp + 0xf0]
mov qword [r14 + rdi + 0x20], rax
inc r13
mov qword [rsp + 0x1a0], r13
add rdi, 0x30
mov rcx, rbp
mov rdx, rsi
lea r8, [rsp + 0x50]
call fcn.1400f6a70
cmp qword [rsp + 0x340], 0
je 0x140002f30
mov rbx, qword [rsp + 0x348]
movups xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movaps xmmword [rsp + 0x1f0], xmm0
movdqa xmmword [rsp + 0x200], xmm1
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x210], rax
test rbx, rbx
je 0x140002f30
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xf0], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movaps xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
cmp r13, qword [rsp + 0x190]
jne 0x140002dc0
mov r8d, 1
lea rcx, [rsp + 0x190]
mov rdx, r13
call fcn.1400f3690
mov r14, qword [rsp + 0x198]
jmp 0x140002dc0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
cmp byte [rsp + 0x50], 0x11
jne 0x140004686
mov bl, 1
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x28]
mov r14, qword [rsp + 0x30]
test r14, r14
je 0x140002efd
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.kernel32.dll_HeapFree
test bl, bl
jne 0x140003454
mov rbx, qword [rsp + 0x38]
add rbx, 0xffffffffffffffe8
add r12, 0x18
cmp rsi, 9
jne 0x140002b40
jmp 0x140002ff7
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
movdqa xmm9, xmmword [rsp + 0x190]
cmp byte [rsp + 0x50], 0x11
jne 0x14000468d
pshufd xmm0, xmm9, 0xee
movq rsi, xmm0
mov rdi, rsi
test r13, r13
sete bl
mov r14, qword [rsp + 0x30]
je 0x140002f81
nop dword [rax]
mov rcx, rdi
call fcn.1400efb10
add rdi, 0x30
dec r13
jne 0x140002f70
movq rax, xmm9
test rax, rax
je 0x140002f9c
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x28]
test r14, r14
jne 0x140002eea
jmp 0x140002efd
test rdi, rdi
je 0x140002fcd
mov rcx, rdi
call sub.oleaut32.dll_SysFreeString
movq xmm0, rbp
movdqa xmm8, xmm7
punpcklqdq xmm8, xmm0
test r14, r14
mov rbp, r15
jne 0x140002c5b
jmp 0x140002c63
cmp rsi, 9
jne 0x1400034c7
mov rcx, qword [0x140205100]
xor esi, esi
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r9d, 0x64
nop
rdtsc
mov r8, rax
mov eax, 1
cpuid
rdtsc
sub rsi, r8
add rsi, rax
dec r9
jne 0x140003020
cmp rsi, 0x22343
ja case.0x140001b8a.0
lea rdx, [0x1401f0d38]
lea rsi, [rsp + 0x340]
mov r8d, 0xa
mov rcx, rsi
call fcn.1401134b0
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0xd0], rax
lea rax, [0x140197a06]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x410b0b75e88491c6
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef510
movabs rcx, 0x8d8a5d9ff30f7c3b
xor rcx, qword [rax]
movabs rdx, 0x5b179f0c01020ee3
xor rdx, qword [rax + 8]
movabs r8, 0x33076f1b63f2597
xor r8, qword [rax + 0x10]
movabs r9, 0x7dad36d8b02450c6
xor r9, qword [rax + 0x18]
movabs r10, 0x78f68b0db5bd3703
xor r10, qword [rax + 0x20]
mov r11d, 0x9b788706
xor r11d, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
xor al, 0x8a
mov qword [rsp + 0x340], rcx
mov qword [rsp + 0x348], rdx
mov qword [rsp + 0x350], r8
mov qword [rsp + 0x358], r9
mov qword [rsp + 0x360], r10
mov dword [rsp + 0x368], r11d
mov byte [rsp + 0x36c], al
lea rcx, [rsp + 0x1f0]
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0x340]
mov r9d, 0x2d
call fcn.1400f5250
cmp byte [rsp + 0x1f0], 0x11
jne 0x1400046d1
mov rbx, qword [rsp + 0x1f8]
mov rsi, qword [rsp + 0x200]
mov r12, qword [rsp + 0x208]
test r12, r12
je 0x140003288
mov qword [rsp + 0x40], rbx
lea rax, [r12 + r12*2]
shl rax, 4
add rax, rsi
mov qword [rsp + 0x30], rax
lea rdi, [0x14019c798]
mov qword [rsp + 0x38], rsi
mov rax, rsi
mov r15, qword [rax]
mov rsi, qword [rax + 0x18]
add rax, 0x30
mov qword [rsp + 0x28], rax
movdqa xmm0, xmmword [r15]
pmovmskb ebp, xmm0
not ebp
lea r13, [r15 + 0x10]
nop dword [rax + rax]
sub rsi, 1
jb 0x140003255
test bp, bp
jne 0x14000320f
nop dword [rax + rax]
movdqa xmm0, xmmword [r13]
pmovmskb ebp, xmm0
add r15, 0xfffffffffffffc80
add r13, 0x10
cmp ebp, 0xffff
je 0x1400031f0
not ebp
tzcnt eax, ebp
neg rax
imul r14, rax, 0x38
add r14, r15
add r14, 0xffffffffffffffe0
je 0x140003255
mov rcx, r14
mov rdx, rdi
call fcn.140001730
test al, al
jne 0x140003481
lea ebx, [rbp - 1]
and ebx, ebp
mov rcx, r14
lea rdx, [0x14019c7b8]
call fcn.140001730
mov ebp, ebx
test al, al
je 0x1400031e0
jmp 0x140003481
mov rax, qword [rsp + 0x28]
cmp rax, qword [rsp + 0x30]
jne 0x1400031b9
test r12, r12
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
je 0x140003288
mov rdi, rsi
mov rcx, rdi
call fcn.1400efb10
add rdi, 0x30
dec r12
jne 0x140003277
test rbx, rbx
je 0x14000329e
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x1401f0d38]
lea rsi, [rsp + 0x340]
mov r8d, 0xa
mov rcx, rsi
call fcn.1401134b0
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x190], rax
lea rax, [0x14019b317]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x1c6933000f9aa9ec
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef610
movabs rcx, 0x7fba55ac972ef4f4
xor rcx, qword [rax]
movabs rdx, 0x6653301494f62a4b
xor rdx, qword [rax + 8]
movabs r8, 0x6e9977740a67b7bc
xor r8, qword [rax + 0x10]
mov r9d, 0x4e8d3eaf
xor r9d, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
mov r10d, eax
xor r10b, 0x63
shr eax, 8
xor al, 0xea
movzx r10d, r10b
movzx eax, al
shl eax, 8
or eax, r10d
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], rdx
mov qword [rsp + 0xe0], r8
mov dword [rsp + 0xe8], r9d
mov word [rsp + 0xec], ax
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0x190]
lea r8, [rsp + 0xd0]
mov r9d, 0x1e
call fcn.1400f5250
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
mov r12, qword [rsp + 0x348]
mov rdi, qword [rsp + 0x350]
mov rbp, qword [rsp + 0x358]
lea rax, [rbp*2]
add rax, rbp
shl rax, 4
add rax, rdi
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x228], 0
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0x1f0]
call fcn.1400f67a0
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x340], rax
jne 0x14000355f
mov ebx, 8
xor r14d, r14d
xor esi, esi
jmp 0x1400036cf
cmp rsi, 9
mov rax, qword [rsp + 0x38]
jne 0x140003509
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xb0]
jmp 0x14000378f
mov rsi, qword [rsp + 0x38]
mov rdi, rsi
nop dword [rax]
mov rcx, rdi
call fcn.1400efb10
add rdi, 0x30
dec r12
jne 0x140003490
cmp qword [rsp + 0x40], 0
je 0x1400034ba
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xd0]
jmp 0x14000378f
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, rbx
mul rcx
mov rsi, rdx
shr rsi, 4
jmp 0x1400034ed
add r12, 0x18
dec rsi
je 0x140002ff7
cmp qword [r12 - 8], 0
je 0x1400034e0
mov r8, qword [r12]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x1400034e0
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
mov rsi, rdx
shr rsi, 4
jmp 0x14000352d
add r12, 0x18
dec rsi
je 0x140003463
cmp qword [r12 - 8], 0
je 0x140003520
mov r8, qword [r12]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140003520
cmp qword [rsp + 0x60], 0
je case.0x140001b8a.0
lea rax, [rsp + 0x58]
jmp 0x140001b9d
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14000358a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x60
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov rbx, rax
mov qword [rsp + 0x28], r12
mov rax, qword [rsp + 0x350]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x340]
movups xmmword [rbx], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], 1
movups xmm0, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x390], xmm0
movups xmm0, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x380], xmm0
movdqu xmm0, xmmword [rsp + 0x1f0]
movdqu xmm1, xmmword [rsp + 0x200]
movdqu xmm2, xmmword [rsp + 0x210]
movups xmm3, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0x370], xmm3
movdqa xmmword [rsp + 0x360], xmm2
movdqa xmmword [rsp + 0x350], xmm1
movdqa xmmword [rsp + 0x340], xmm0
mov esi, 1
mov r13d, 0x18
lea r14, [rsp + 0xd0]
lea r15, [rsp + 0x340]
lea r12, [rsp + 0x50]
jmp 0x140003688
mov rax, qword [rsp + 0xe0]
mov qword [rbx + r13 + 0x10], rax
movdqu xmm0, xmmword [rsp + 0xd0]
movdqu xmmword [rbx + r13], xmm0
inc rsi
mov qword [rsp + 0x60], rsi
add r13, 0x18
mov rcx, r14
mov rdx, r15
call fcn.1400f67a0
movabs rax, 0x8000000000000000
cmp qword [rsp + 0xd0], rax
je 0x1400036c0
cmp rsi, qword [rsp + 0x50]
jne 0x140003660
mov rcx, r12
mov rdx, rsi
call fcn.1400f3750
mov rbx, qword [rsp + 0x58]
jmp 0x140003660
mov r14, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov r12, qword [rsp + 0x28]
lea rax, [rsi*8]
lea rax, [rax + rax*2]
mov rcx, rbx
nop
test rax, rax
je 0x14000447c
mov rdx, qword [rcx + 0x10]
cmp rdx, 0x40
je 0x140003704
add rcx, 0x18
add rax, 0xffffffffffffffe8
cmp rdx, 0x80
jne 0x1400036e0
test rsi, rsi
je 0x140003733
lea r15, [rbx + 8]
jmp 0x140003719
add r15, 0x18
dec rsi
je 0x140003733
cmp qword [r15 - 8], 0
je 0x140003710
mov r8, qword [r15]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140003710
test r14, r14
je 0x140003749
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
test rbp, rbp
je 0x140003771
mov rsi, rdi
nop word cs:[rax + rax]
mov rcx, rsi
call fcn.1400efb10
add rsi, 0x30
dec rbp
jne 0x140003760
test r12, r12
je 0x140003787
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x190]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rax, [0x14019904f]
mov qword [rsp + 0x340], rax
lea rdx, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
movabs rax, 0x10b0d044a6b6a300
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef310
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x380], xmm0
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmmword [rsp + 0x360], xmm0
movdqa xmmword [rsp + 0x350], xmm0
movdqa xmmword [rsp + 0x340], xmm0
mov qword [rsp + 0x390], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x14019c7d8]
nop
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x348], r8
add rcx, 8
cmp rcx, 0x50
jb 0x140003820
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x240], rax
movaps xmm0, xmmword [rsp + 0x380]
movaps xmmword [rsp + 0x230], xmm0
movdqa xmm0, xmmword [rsp + 0x340]
movdqa xmm1, xmmword [rsp + 0x350]
movdqa xmm2, xmmword [rsp + 0x360]
movaps xmm3, xmmword [rsp + 0x370]
movaps xmmword [rsp + 0x220], xmm3
movdqa xmmword [rsp + 0x210], xmm2
movdqa xmmword [rsp + 0x200], xmm1
movdqa xmmword [rsp + 0x1f0], xmm0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400038cd
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x58
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1400046d1
mov rcx, qword [rsp + 0x240]
mov qword [rax + 0x50], rcx
movaps xmm0, xmmword [rsp + 0x230]
movups xmmword [rax + 0x40], xmm0
movdqa xmm0, xmmword [rsp + 0x1f0]
movdqa xmm1, xmmword [rsp + 0x200]
movdqa xmm2, xmmword [rsp + 0x210]
movaps xmm3, xmmword [rsp + 0x220]
movups xmmword [rax + 0x30], xmm3
movdqu xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x30], rax
movdqu xmmword [rax], xmm0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 2
mov qword [rsp + 0xe0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
xor r14d, r14d
mov edi, 0xffffffff
xor r13d, r13d
xor ebx, ebx
cmp r8, 0x201
jb 0x14000399f
jmp 0x1400039c0
jae 0x140003a7d
cmp r8, 0x201
jae 0x1400039c0
mov esi, 0x200
lea r15, [rsp + 0x340]
mov r12, r8
jmp 0x1400039f1
sub r8, rbx
sub r13, rbx
cmp r13, r8
jb 0x140003a53
cmp r14, rdi
mov ebx, 0xffffffff
cmovb rbx, r14
mov qword [rsp + 0xe0], rbx
mov r13, r14
mov rsi, rbx
mov r15, qword [rsp + 0x28]
mov r12, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rax, qword [0x1401940c8]
mov ecx, r12d
mov rdx, r15
call rax
mov ebp, eax
test eax, eax
jne 0x140003a1a
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x140003bb2
mov r8d, ebp
cmp r12, r8
jne 0x140003990
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400046d1
add r12, r12
cmp r12, rdi
cmovae r12, rdi
mov r8, r12
cmp r8, 0x201
jae 0x1400039c0
jmp 0x14000399f
lea rcx, [rsp + 0xd0]
mov rdx, rbx
call fcn.1400d78b0
mov r14, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x28], rax
jmp 0x1400039cf
cmp rsi, r8
jb 0x1400046d1
lea rcx, [rsp + 0x1f0]
mov rdx, r15
call fcn.1400d5fc0
test r14, r14
je 0x140003aae
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x28]
call sub.kernel32.dll_HeapFree
mov r13, qword [rsp + 0x1f0]
movabs rax, 0x8000000000000000
cmp r13, rax
je 0x1400046d1
mov rbp, qword [rsp + 0x1f8]
mov rdi, qword [rsp + 0x200]
lea rax, [0x1401908f6]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
movabs rdx, 0x911177ac655a74e1
mov qword [rsp + 0x340], rdx
mov rdx, qword [rsp + 0x340]
call fcn.1400ef540
movabs rcx, 0x86f02fe1f6682e14
xor rcx, qword [rax]
movabs rdx, 0x87c364de2858287
xor rdx, qword [rax + 8]
movabs r8, 0x6859592f580ff3f7
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0xb1
mov qword [rsp + 0x1f0], rcx
mov qword [rsp + 0x1f8], rdx
mov qword [rsp + 0x200], r8
mov byte [rsp + 0x208], al
test rdi, rdi
je 0x140003be7
js 0x1400046d1
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x140003b9b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x140003bec
jmp 0x1400046d1
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x1f8], rax
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1f0], rax
test r14, r14
jne 0x140003a9b
jmp 0x140003aae
mov ebx, 1
mov rcx, rbx
mov rdx, rbp
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], rbx
mov qword [rsp + 0x350], rdi
mov byte [rsp + 0x358], 0
lea rcx, [rsp + 0x340]
lea r15, [rsp + 0x1f0]
mov r8d, 0x19
mov rdx, r15
call fcn.1400e2e30
mov rbx, qword [rsp + 0x340]
mov rdi, qword [rsp + 0x348]
mov rsi, qword [rsp + 0x350]
lea r12, [rsp + 0x340]
mov rcx, r12
call fcn.14009e9d0
lea rcx, [rsp + 0x50]
mov rdx, r12
call fcn.14009de60
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
cmp ecx, 0x3b9aca01
jne 0x140003d3b
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xd0], 3
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x30]
call sub.kernel32.dll_HeapFree
cmp dword [rsp + 0xd0], 3
jne 0x140003fbb
lea rcx, [rsp + 0xd0]
call fcn.140001450
test rbx, rbx
je 0x140003cdb
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x140003cf1
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapFree
mov al, 1
movaps xmm6, xmmword [rsp + 0x750]
movaps xmm7, xmmword [rsp + 0x760]
movaps xmm8, xmmword [rsp + 0x770]
movaps xmm9, xmmword [rsp + 0x780]
movaps xmm10, xmmword [rsp + 0x790]
movaps xmm11, xmmword [rsp + 0x7a0]
add rsp, 0x7b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, qword [rsp + 0x58]
movq xmm0, rcx
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdx
movq qword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0x190]
mov r8d, 0x58
mov r14, qword [rsp + 0x30]
mov rdx, r14
call fcn.140094eb0
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x190], rax
jne 0x140003dbb
mov r12, rsi
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x348], rax
mov eax, 2
jmp 0x140003f33
mov r12, rsi
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x390], xmm0
mov dword [rsp + 0x431], 0
mov dword [rsp + 0x434], 0
movups xmm1, xmmword [rsp + 0x190]
movups xmm2, xmmword [rsp + 0x1a0]
movups xmm3, xmmword [rsp + 0x1b0]
movups xmm4, xmmword [rsp + 0x1c0]
movups xmmword [rsp + 0x56], xmm1
movups xmmword [rsp + 0x66], xmm2
movups xmmword [rsp + 0x76], xmm3
movups xmmword [rsp + 0x86], xmm4
movups xmm1, xmmword [rsp + 0x1d0]
movups xmmword [rsp + 0x96], xmm1
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xa6], rax
mov qword [rsp + 0x368], 0
mov qword [rsp + 0x380], 0
mov qword [rsp + 0x388], 8
mov qword [rsp + 0x3a0], 8
mov qword [rsp + 0x3a8], 0
mov qword [rsp + 0x3b0], 2
mov qword [rsp + 0x3b8], 0
mov word [rsp + 0x3c0], 0
mov rax, qword [rsp + 0x9e]
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0xa6]
mov qword [rsp + 0x418], rax
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x402], xmm1
movdqu xmm1, xmmword [rsp + 0x50]
movdqu xmm2, xmmword [rsp + 0x60]
movups xmm3, xmmword [rsp + 0x70]
movups xmm4, xmmword [rsp + 0x80]
movups xmmword [rsp + 0x3f2], xmm4
movups xmmword [rsp + 0x3e2], xmm3
movdqu xmmword [rsp + 0x3d2], xmm2
movdqu xmmword [rsp + 0x3c2], xmm1
mov dword [rsp + 0x428], 0x3b9aca00
mov byte [rsp + 0x430], 1
movdqu xmmword [rsp + 0x438], xmm0
mov byte [rsp + 0x448], 2
mov qword [rsp + 0x450], 2
xor eax, eax
mov qword [rsp + 0x340], rax
mov rsi, qword [rsp + 0xb0]
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0xc0]
lock inc qword [rsi]
jle 0x1400046d1
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x60], ecx
lea r14, [rsp + 0x1f0]
lea rdx, [rsp + 0x50]
lea r8, [rsp + 0x340]
mov rcx, r14
call fcn.14009ee60
lea rcx, [rsp + 0xd0]
mov rdx, r14
call fcn.14009faa0
lock dec qword [rsi]
jne 0x140003faa
lea rcx, [rsp + 0xb0]
call fcn.1400f2610
mov rsi, r12
cmp dword [rsp + 0xd0], 3
je 0x140003cb8
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x340], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x348], xmm0
mov dword [rsp + 0x358], 7
mov qword [rsp + 0x35c], 0
mov word [rsp + 0x364], 0
mov byte [rsp + 0x361], 1
mov byte [rsp + 0x364], 1
mov byte [rsp + 0x363], 1
lea r14, [rsp + 0x340]
mov rcx, rdi
mov rdx, rsi
mov r8, r14
call fcn.1400d9bd0
mov r13, rax
mov r12, rdx
lea rax, [0x14019a5fd]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0xe43c52165f36c533
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef870
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
test r13, r13
jne 0x1400046d1
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0xd0]
lea r14, [rsp + 0x50]
mov r8, r14
call fcn.1400f8270
lea rax, [0x140190404]
mov qword [rsp + 0x1f0], rax
mov rcx, qword [rsp + 0x1f0]
movabs rax, 0x17c62df633b4694
mov qword [rsp + 0x1f0], rax
mov rdx, qword [rsp + 0x1f0]
call fcn.1400ef360
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx ecx, byte [rax + 0x1a]
movzx eax, word [rax + 0x18]
cmp qword [rsp + 0x340], 0
jne 0x1400046d1
mov rcx, r12
call sub.kernel32.dll_CloseHandle
test rsi, rsi
je 0x14000414e
js 0x1400046d1
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x140004137
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400046d1
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x140004154
jmp 0x1400046d1
mov r15d, 1
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbp
mov rcx, r15
mov qword [rsp + 0x48], rdi
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x340], rsi
mov qword [rsp + 0x348], r15
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x350], rsi
mov byte [rsp + 0x358], 0
mov qword [rsp + 0x360], 0
mov qword [rsp + 0x368], 8
mov qword [rsp + 0x370], 0
mov qword [rsp + 0x3c8], 0
mov qword [rsp + 0x3d8], 0
mov word [rsp + 0x3e0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x378], rax
mov dword [rsp + 0x400], 0
mov word [rsp + 0x404], 0
mov dword [rsp + 0x398], 6
mov dword [rsp + 0x3a8], 6
mov dword [rsp + 0x3b8], 6
mov qword [rsp + 0x3e8], 0
mov qword [rsp + 0x3f8], 0
lea rcx, [rsp + 0x1f0]
lea rdx, [rsp + 0x340]
call fcn.1400dd860
lea rax, [0x14018d78e]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
movabs rax, 0x79e52ce52e83b395
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0x50]
call fcn.1400ef710
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
mov rbx, qword [rsp + 0x1f0]
cmp rbx, 2
je 0x1400046d1
mov r13, qword [rsp + 0x1f8]
mov rdi, qword [rsp + 0x200]
mov r12, qword [rsp + 0x208]
mov rsi, qword [rsp + 0x210]
mov r14, qword [rsp + 0x218]
mov rcx, qword [rsp + 0x220]
mov rbp, qword [rsp + 0x228]
call sub.kernel32.dll_CloseHandle
mov rcx, rbp
call sub.kernel32.dll_CloseHandle
test rbx, rbx
je 0x1400042f5
mov rcx, r13
call sub.kernel32.dll_CloseHandle
test rdi, rdi
je 0x140004302
mov rcx, r12
call sub.kernel32.dll_CloseHandle
test rsi, rsi
mov rbp, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x28]
je 0x140004319
mov rcx, r14
call sub.kernel32.dll_CloseHandle
cmp qword [rsp + 0x40], 0
je 0x140004373
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
mov rbx, qword [rsp + 0x370]
test rbx, rbx
je 0x140004373
mov rsi, qword [rsp + 0x368]
add rsi, 0x10
jmp 0x140004359
add rsi, 0x28
dec rbx
je 0x140004373
cmp qword [rsi - 8], 0
je 0x140004350
mov r8, qword [rsi]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140004350
lea rbx, [rsp + 0x3c8]
cmp qword [rsp + 0x360], 0
je 0x14000439c
mov r8, qword [rsp + 0x368]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, rbx
call fcn.1400f6170
mov rax, qword [rsp + 0x378]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1400043d6
test rax, rax
je 0x1400043d6
mov r8, qword [rsp + 0x380]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov eax, dword [rsp + 0x398]
cmp eax, 4
jae 0x140004440
mov eax, dword [rsp + 0x3a8]
cmp eax, 4
jae 0x140004454
lea rbx, [rsp + 0x3e8]
mov eax, dword [rsp + 0x3b8]
cmp eax, 4
jae 0x140004468
mov rcx, rbx
call fcn.1400f5e30
lea rcx, [rsp + 0xd0]
call fcn.140001450
cmp qword [rsp + 0x38], 0
je 0x140004432
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x48]
call sub.kernel32.dll_HeapFree
test rdi, rdi
jne 0x140003ce0
jmp 0x140003cf1
cmp eax, 6
je 0x1400043e2
mov rcx, qword [rsp + 0x3a0]
call sub.kernel32.dll_CloseHandle
jmp 0x1400043e2
cmp eax, 6
je 0x1400043ee
mov rcx, qword [rsp + 0x3b0]
call sub.kernel32.dll_CloseHandle
jmp 0x1400043ee
cmp eax, 6
je 0x140004402
mov rcx, qword [rsp + 0x3c0]
call sub.kernel32.dll_CloseHandle
jmp 0x140004402
mov rcx, rbx
mov rdx, rsi
call fcn.1400f6750
test r14, r14
je 0x14000449d
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
test rbp, rbp
je 0x1400044c1
mov rsi, rdi
nop word cs:[rax + rax]
mov rcx, rsi
call fcn.1400efb10
add rsi, 0x30
dec rbp
jne 0x1400044b0
test r12, r12
je 0x1400044d7
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x190]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x1401f0d38]
lea rsi, [rsp + 0x340]
mov r8d, 0xa
mov rcx, rsi
call fcn.1401134b0
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0xd0], rax
lea rax, [0x14019982c]
mov qword [rsp + 0x340], rax
mov rcx, qword [rsp + 0x340]
movabs rax, 0x265154c01a70a718
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
call fcn.1400ef270
movabs rcx, 0x8fbf27517157894e
xor rcx, qword [rax]
movabs rdx, 0xe4474cdb01f36d9b
xor rdx, qword [rax + 8]
movabs r8, 0xe2bbaf70b6596c95
xor r8, qword [rax + 0x10]
mov r9d, 0x7de97f9a
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0x77
xor r11b, 0xc4
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0x58
mov qword [rsp + 0x1f0], rcx
mov qword [rsp + 0x1f8], rdx
mov qword [rsp + 0x200], r8
mov dword [rsp + 0x208], r9d
mov word [rsp + 0x20c], r11w
mov byte [rsp + 0x20e], r10b
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0x1f0]
mov r9d, 0x1f
call fcn.1400f5250
cmp byte [rsp + 0x340], 0x11
jne 0x1400046d1
mov r14, qword [rsp + 0x348]
mov rsi, qword [rsp + 0x350]
mov rbx, qword [rsp + 0x358]
test rbx, rbx
je 0x140004651
mov rdi, rsi
mov r15, rbx
nop word cs:[rax + rax]
mov rcx, rdi
call fcn.1400efb10
add rdi, 0x30
dec r15
jne 0x140004640
test r14, r14
je 0x140004667
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp rbx, 2
jb case.0x140001b8a.0
xor eax, eax
jmp 0x140003cf3
mov esi, 8
jmp 0x1400046b6
pshufd xmm0, xmm9, 0xee
movq rsi, xmm0
test r13, r13
je 0x1400046b1
mov rdi, rsi
mov rcx, rdi
call fcn.1400efb10
add rdi, 0x30
dec r13
jne 0x1400046a0
movdqa xmm6, xmm9
movq rax, xmm6
test rax, rax
je 0x1400046d1
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
ud2