Function at 0x1400cf410
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x70], r8
mov eax, dword [0x141dd70b0]
sub eax, dword [0x141dd70b4]
or eax, 0xc5bf96f4
imul rax, rax, 0x6e3b8901
shr rax, 0x3e
cmp eax, 0x1e2f082b
jbe 0x1400cf470
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
nop dword [rax]
mov eax, dword [0x141dd70b8]
or eax, dword [0x141dd70bc]
xor eax, 0xdea2c3e
imul r10, rax, 0x4163420d
shr r10, 0x3b
or r10d, 0x9d40d50a
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rax, rsp
cmp r10d, 0x5e497bf4
jb 0x1400cf470
mov qword [rbp + 0x90], rcx
mov qword [rbp + 0x50], r9
mov qword [rbp - 0x58], r8
mov qword [rbp], rax
mov qword [rbp + 0x38], rdx
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x210
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x2b0
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x470
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x410
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, dword [0x141dd70c0]
imul eax, dword [0x141dd70c4]
xor eax, 0xfb4ee63c
add eax, 0xc7255643
mov ecx, 0xb81a38cf
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x5474a72
jne 0x1400cf710
mov eax, 0x2d0
call fcn.1400ef330
sub rsp, rax
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
nop dword [rax]
mov eax, dword [0x141dd70c8]
or eax, dword [0x141dd70cc]
add eax, 0xab394c19
or eax, 0x3527909e
imul eax, eax, 0xcb8fe7b
mov dword [rbp + 0x80], eax
mov eax, 0x2d0
call fcn.1400ef330
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rax, rsp
cmp dword [rbp + 0x80], 0xc9d2b6ec
ja 0x1400cf710
mov qword [rbp + 0x68], r11
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x38]
cmp byte [rax], 0
mov rsi, qword [rbp + 0x90]
mov qword [rbp + 0x78], r8
mov qword [rbp + 0x60], r9
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x48], r10
mov r15, qword [rbp + 0x50]
mov r11, rdi
je 0x1400cfc33
mov qword [rdx], 0
mov qword [r12], 0
mov qword [rbx], 0
mov qword [r14], 0
mov qword [rcx], 0
mov qword [r13], 0
mov r15, r12
mov r12, rbx
mov rdi, r13
nop dword [rax + rax]
mov eax, dword [0x141dd70d8]
or eax, dword [0x141dd70dc]
xor eax, 0x40e4188
imul eax, eax, 0x8826d882
and eax, 0x89657442
cmp eax, 0x82a4eb29
ja 0x1400cf8a0
mov rax, qword [rsi + 0xf8]
test rax, rax
mov r13, rcx
je 0x1400cf938
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov r8, rdx
mov r9, r15
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
test eax, eax
jne 0x1400cf938
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov eax, 0x9aabd34d
nop word cs:[rax + rax]
mov ecx, dword [0x141dd70e0]
add ecx, dword [0x141dd70e4]
xor ecx, 0x5a84a4c1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xeb896cb4
cmp ecx, 0x7008a37e
je 0x1400cf910
sub rsp, 0x20
mov rcx, r14
mov rdx, r13
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
nop
mov ecx, dword [0x141dd70e8]
imul ecx, dword [0x141dd70ec]
imul rcx, rcx, 0xc3ffab9
shr rcx, 0x3a
xor ecx, 0x192221c5
add ecx, 0x16ed5cbc
cmp ecx, 0x4e6d6511
ja 0x1400cf950
nop dword [rax]
mov ecx, dword [0x141dd70f0]
add ecx, dword [0x141dd70f4]
imul ecx, ecx, 0xaf4eaab5
imul rcx, rcx, 0x171b5019
shr rcx, 0x3c
or ecx, 0xe7f1c3fa
cmp ecx, 0xbdfaf1c2
je 0x1400cf980
test eax, eax
jne 0x1400cf9e2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd70f8]
xor eax, dword [0x141dd70fc]
and eax, 0x6692ba7f
add eax, 0x6b9edf92
or eax, 0x33b19ea1
cmp eax, 0x98e5a330
je 0x1400cf9c0
mov eax, dword [r15]
mov ecx, dword [r15 + 4]
mov edx, dword [0x141dd7100]
add edx, dword [0x141dd7104]
shl rcx, 0x20
or edx, 0xeb9652fe
add edx, 0x12b59cb5
cmp edx, 0x43ec8368
jbe 0x1400cfa18
mov rdx, qword [r12]
mov qword [rsi + 0x108], rdx
or rcx, rax
xor r11d, r11d
nop
mov eax, dword [0x141dd7108]
and eax, dword [0x141dd710c]
imul r15d, eax, 0xd5260401
mov rax, qword [r13]
mov r10, qword [rdi]
mov rbx, qword [rsi + 0x110]
cmp rax, rbx
cmovb rbx, r11
mov r14, qword [rsi + 0x118]
cmp r10, r14
cmovb r14, r11
mov rdx, qword [r12]
mov r8, qword [rsi + 0x100]
mov r9, qword [rsi + 0x108]
mov qword [rsi + 0x108], rdx
cmp r15d, 0x85a03df
je 0x1400cfa20
mov qword [rsi + 0x100], rcx
mov qword [rsi + 0x118], r10
sub r10, r14
mov qword [rsi + 0x110], rax
sub rax, rbx
add rax, r10
mov r10, 0xffffffffffffffff
cmovae r10, rax
test r10, r10
je 0x1400cfbbb
mov r15, qword [rbp + 0x50]
xor r11d, r11d
mov rdi, r10
shr rdi, 1
cvtsi2ss xmm1, r10
mov rbx, 0xffffffffffffffff
jmp 0x1400cfb0c
movaps xmm0, xmm1
mov esi, dword [0x141dd7110]
and esi, dword [0x141dd7114]
or esi, 0x5b8d44b2
xor esi, 0xf4bc1c84
imul esi, esi, 0x1f2a14eb
mov r12, rcx
sub r12, rax
mov rax, rdx
sub rax, r14
add rax, r12
cmovb rax, rbx
cmp esi, 0x5d018faf
jae 0x1400cfb3c
cmp rcx, r8
mov rax, r8
cmovb rax, r11
cmp rdx, r9
mov r14, r9
cmovb r14, r11
test r10, r10
jns 0x1400cfad0
mov esi, r10d
and esi, 1
or rsi, rdi
xorps xmm0, xmm0
cvtsi2ss xmm0, rsi
addss xmm0, xmm0
jmp 0x1400cfad3
mov ecx, dword [0x141dd7118]
and ecx, dword [0x141dd711c]
or ecx, 0x80a4118d
xor ecx, 0xd92711ac
or ecx, 0x2658c252
cmp ecx, 0x62dca321
mov rsi, qword [rbp + 0x90]
mov r11, qword [rbp + 0x88]
mov r9, qword [rbp + 0x70]
jae 0x1400d02da
test rax, rax
js 0x1400d029a
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
divss xmm1, xmm0
mulss xmm1, dword [0x140102d90]
test r9, r9
jns 0x1400d02c9
mov rcx, r9
shr rcx, 1
mov edx, r9d
and edx, 1
or rdx, rcx
cvtsi2ss xmm2, rdx
addss xmm2, xmm2
jmp 0x1400d02ce
mov eax, dword [0x141dd7128]
and eax, dword [0x141dd712c]
or eax, 0x25f359b7
add eax, 0x132ab073
mov ecx, 0x93fcd885
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x8884f672
mov r15, qword [rbp + 0x50]
jbe 0x1400cfbf4
mov dword [rsi + 0x150], 0
mov r11, qword [rbp + 0x88]
nop dword [rax + rax]
mov eax, dword [0x141dd7130]
imul eax, dword [0x141dd7134]
or eax, 0x7e774305
add eax, 0xc11f0e5b
imul rax, rax, 0x284d3c87
shr rax, 0x3d
mov dword [rsi + 0x150], 0
cmp eax, 0xc7d2ac73
ja 0x1400cfc00
mov eax, dword [0x141dd70d0]
xor ecx, ecx
xor edx, edx
div dword [0x141dd70d4]
nop word cs:[rax + rax]
test cl, cl
jne 0x1400cfc50
mov r13, qword [rbp + 0x38]
cmp byte [r13 + 1], 0
mov r12, qword [rbp + 0x58]
mov r14, qword [rbp + 0x20]
je 0x1400cff00
nop dword [rax + rax]
mov eax, dword [0x141dd7148]
or eax, dword [0x141dd714c]
or eax, 0x72f98462
xor eax, 0x75c97d0b
add eax, 0x3cd709c6
cmp eax, 0x6592ba6c
jb 0x1400cfc70
mov eax, dword [0x141dd7150]
xor edx, edx
div dword [0x141dd7154]
mov ecx, 0x887ee1af
nop word cs:[rax + rax]
mov eax, dword [0x141dd7158]
xor edx, edx
div dword [0x141dd715c]
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xe5df73e6
je 0x1400cfcb0
mov rdi, qword [rsi + 0xf8]
test rdi, rdi
je 0x1400cfeb0
mov eax, dword [0x141dd7160]
xor edx, edx
div dword [0x141dd7164]
mov ecx, 0x826fa7d1
mov eax, dword [0x141dd7168]
xor edx, edx
div dword [0x141dd716c]
and eax, 0xa9c0f55e
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x2369b664
ja 0x1400cfcf0
mov r13, r15
mov eax, dword [0x141dd7170]
mov ecx, dword [0x141dd7174]
add eax, ecx
add eax, 0xc7f9af57
and eax, 0xa480904a
xor eax, 0x3d370253
cmp eax, 0xdec299d6
jbe 0x1400cfd4f
mov rcx, qword [rdi + 0x10]
sub rsp, 0x20
mov rdx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov r15, qword [rbp + 0x68]
nop word [rax + rax]
mov eax, dword [0x141dd7178]
add eax, dword [0x141dd717c]
and eax, 0x800850c
or eax, 0x957352d3
imul esi, eax, 0xee917889
mov rcx, qword [rdi + 0x10]
sub rsp, 0x20
mov rdx, r15
call rbx
add rsp, 0x20
cmp esi, 0xbb8721b9
je 0x1400cfd60
test eax, eax
mov r15, r13
je 0x1400cfe09
mov rsi, qword [rbp + 0x90]
movups xmm0, xmmword [rsi + 0x140]
xor eax, eax
test al, al
mov r13, qword [rbp + 0x38]
je 0x1400cfdbb
movups xmmword [rsi + 0x130], xmm0
mov r11, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7180]
xor eax, dword [0x141dd7184]
xor eax, 0x9d1f584e
add eax, 0x2abdc393
xor eax, 0xe21172c8
movups xmmword [rsi + 0x130], xmm0
cmp eax, 0xb2c4015
jb 0x1400cfdd0
movups xmm0, xmmword [rcx + 0x18]
movups xmmword [rsi + 0x140], xmm0
jmp 0x1400cfeb0
mov eax, dword [0x141dd7188]
sub eax, dword [0x141dd718c]
add eax, 0x5d8869a6
imul rax, rax, 0x55d0d9b9
shr rax, 0x3e
or eax, 0x2dddc21e
cmp eax, 0xbc24e613
mov rsi, qword [rbp + 0x90]
mov r13, qword [rbp + 0x38]
jbe 0x1400cfe4a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
nop word cs:[rax + rax]
sub rsp, 0x20
call rdi
add rsp, 0x20
test bl, bl
jne 0x1400cfe60
mov r11, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7190]
and eax, dword [0x141dd7194]
imul eax, eax, 0x9260d4a2
or eax, 0xc8002128
and eax, 0xc9a231aa
cmp eax, 0x170b68eb
jb 0x1400cfe80
nop word cs:[rax + rax]
mov eax, dword [0x141dd7198]
imul eax, dword [0x141dd719c]
xor eax, 0x1f048e93
add eax, 0x3d41a7b
or eax, 0xc2d3639b
cmp eax, 0x3f7629d9
jb 0x1400cfeb0
nop word cs:[rax + rax]
mov eax, dword [0x141dd71a0]
xor edx, edx
div dword [0x141dd71a4]
or eax, 0x21adf7ff
imul eax, eax, 0xe8fbf9dc
cmp eax, 0x50386192
jbe 0x1400cfee0
movzx ecx, byte [r13 + 2]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7138]
xor edx, edx
div dword [0x141dd713c]
add eax, 0x35ad5eb
xor eax, 0xc2c34263
imul eax, eax, 0x5bc68d93
cmp eax, 0x8d3bf0fe
je 0x1400cff10
nop word cs:[rax + rax]
mov eax, dword [0x141dd7140]
sub eax, dword [0x141dd7144]
or eax, 0xfec7d7de
xor eax, 0x7209c2c8
cmp eax, 0xfe435162
ja 0x1400cff40
test cl, cl
je 0x1400cff80
mov rax, qword [rbp + 0x108]
mov qword [rsi + 0xe8], rax
mov rax, qword [rbp + 0x100]
mov qword [rsi + 0xf0], rax
nop dword [rax]
mov eax, dword [0x141dd71a8]
or eax, dword [0x141dd71ac]
add eax, 0x6519563a
or eax, 0x3f3fdb8e
cmp eax, 0x206f3f03
je 0x1400cff80
movabs rbx, 0x8000000000000000
mov r8, qword [rsi + 0xf8]
test r8, r8
je 0x1400d0448
movzx ecx, byte [r13 + 3]
mov eax, dword [0x141dd71b0]
xor edx, edx
div dword [0x141dd71b4]
nop word [rax + rax]
mov eax, dword [0x141dd71b8]
imul eax, dword [0x141dd71bc]
imul eax, eax, 0xf5d76ad3
and eax, 0xde0d0df3
xor eax, 0xc1c4493e
cmp eax, 0xad09e3df
ja 0x1400cffd0
nop word cs:[rax + rax]
mov eax, dword [0x141dd71c0]
xor edx, edx
div dword [0x141dd71c4]
or eax, 0x9a0a97c4
cmp eax, 0xff1641eb
je 0x1400d0000
mov rdi, qword [r8 + 0x10]
nop
mov eax, dword [0x141dd71c8]
xor edx, edx
div dword [0x141dd71cc]
and eax, 0x8eac58f5
imul eax, eax, 0x79faadd8
add eax, 0xb8ac9a5e
cmp eax, 0x64a88e41
ja 0x1400d0020
test ecx, ecx
je 0x1400d0448
cmp ecx, 1
je 0x1400d0068
cmp ecx, 2
jne 0x1400d03a9
cmp qword [rsi + 0x80], rbx
jne 0x1400d0448
mov rax, qword [rbp + 0x80]
mov qword [rax], 0
mov eax, dword [0x141dd71d0]
or eax, dword [0x141dd71d4]
and eax, 0xa709f28f
imul eax, eax, 0x2d5b13d5
add eax, 0xfc0501f9
cmp eax, 0x4a92b31b
jbe 0x1400d00c0
sub rsp, 0x20
mov rcx, rdi
mov edx, 8
mov r8, qword [rbp + 0x80]
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd71d8]
and eax, dword [0x141dd71dc]
or eax, 0xeafbc63a
imul esi, eax, 0x68c5c24
xor esi, 0xf9a49f6f
sub rsp, 0x20
mov rcx, rdi
mov edx, 8
mov r8, qword [rbp + 0x80]
call sub.ADVAPI32.dll_OpenProcessToken
mov rdx, qword [rbp + 0x80]
add rsp, 0x20
cmp esi, 0x45e82bcc
jb 0x1400d00c0
mov r11, qword [rbp + 0x88]
nop
mov ecx, dword [0x141dd71e0]
add ecx, dword [0x141dd71e4]
and ecx, 0x201308
add ecx, 0x1d11fe96
cmp ecx, 0x7cd3dfbe
ja 0x1400d0110
test eax, eax
je 0x1400d0412
mov rsi, qword [rdx]
lea rax, [rsi + 1]
cmp rax, 2
jb 0x1400d0427
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400d0150
mov rdi, qword [rbp + 0x28]
mov dword [rdi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, rsi
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
test eax, eax
jne 0x1400d01ce
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
movzx r8d, cx
or r8d, 0x80070000
nop dword [rax]
mov eax, dword [0x141dd71e8]
xor edx, edx
div dword [0x141dd71ec]
or eax, 0xdfffff6e
test ecx, ecx
mov edx, r8d
cmovle edx, ecx
cmp eax, 0xd49972e6
je 0x1400d01a0
cmp edx, 0x8007007a
jne 0x1400d03c0
mov edi, dword [rdi]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rbx, rax
inc rax
nop word cs:[rax + rax]
mov ecx, dword [0x141dd71f8]
or ecx, dword [0x141dd71fc]
add ecx, 0x22613f07
and ecx, 0x72a48758
add ecx, 0xee120001
cmp ecx, 0xb69d1fe0
ja 0x1400d01f0
cmp rax, 1
ja 0x1400d0383
mov eax, dword [0x141dd7200]
and eax, dword [0x141dd7204]
mov ecx, 0xdefa63ab
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x89b808a9
cmp ecx, 0x8de7acdd
jbe 0x1400d0255
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141dd7208]
and eax, dword [0x141dd720c]
imul rbx, rax, 0x6112e775
shr rbx, 0x3d
or ebx, 0x6cd0b10a
add ebx, 0xcdd21cf5
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp ebx, 0x708bef26
jae 0x1400d0260
jmp 0x1400d03c0
mov rcx, rax
shr rcx, 1
mov edx, eax
and edx, 1
or rdx, rcx
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
divss xmm1, xmm0
mulss xmm1, dword [0x140102d90]
test r9, r9
js 0x1400cfb9e
cvtsi2ss xmm2, r9
mulss xmm1, xmm2
movss dword [rsi + 0x150], xmm1
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rcx, rax
shr rcx, 1
mov rdx, r9
shr rdx, 1
xorps xmm2, xmm2
cvtsi2ss xmm2, r9
movss xmm3, dword [0x140102d90]
jmp 0x1400d0341
movaps xmm5, xmm2
mov r8d, dword [0x141dd7120]
imul r8d, dword [0x141dd7124]
xor r8d, 0xf7d26a1
add r8d, 0x6ec52d79
divss xmm4, xmm0
mulss xmm4, xmm3
mulss xmm4, xmm5
movss dword [rsi + 0x150], xmm4
cmp r8d, 0x1bf90605
jae 0x1400cfc33
test rax, rax
js 0x1400d0350
movaps xmm4, xmm1
test r9, r9
jns 0x1400d0300
jmp 0x1400d036b
mov r8d, eax
and r8d, 1
or r8, rcx
xorps xmm4, xmm4
cvtsi2ss xmm4, r8
addss xmm4, xmm4
test r9, r9
jns 0x1400d0300
mov r8d, r9d
and r8d, 1
or r8, rdx
xorps xmm5, xmm5
cvtsi2ss xmm5, r8
addss xmm5, xmm5
jmp 0x1400d0303
mov eax, dword [0x141dd7210]
xor eax, dword [0x141dd7214]
add eax, 0xc4ae8e63
or eax, 0x85f4520
cmp eax, 0xc9195645
ja 0x1400d1d58
jmp 0x1400d1d1a
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400d03b0
jmp 0x1400d17e6
mov eax, dword [str.ns__]
imul eax, dword [0x141dd71f4]
add eax, 0xf7f1d684
or eax, 0x73104047
imul eax, eax, 0x3bbfc50f
cmp eax, 0x9de7e358
ja 0x1400d03c0
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test eax, eax
mov r15, qword [rbp + 0x50]
mov r12, qword [rbp + 0x58]
movabs rbx, 0x8000000000000000
mov r11, qword [rbp + 0x88]
jne 0x1400d0427
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r11, qword [rbp + 0x88]
add rsp, 0x20
mov rsi, qword [rbp + 0x90]
nop
mov eax, dword [0x141dd7258]
xor eax, dword [0x141dd725c]
and eax, 0xc2059436
cmp eax, 0x79e9be96
je 0x1400d0430
movzx r8d, byte [r13 + 4]
movzx ecx, byte [r13 + 5]
nop word cs:[rax + rax]
mov eax, dword [0x141dd72f0]
imul eax, dword [0x141dd72f4]
or eax, 0x5f777327
imul eax, eax, 0x2499e87f
cmp eax, 0x2a73fd60
je 0x1400d0460
movzx r9d, byte [r13 + 6]
movzx r10d, byte [r13 + 7]
test r10d, r10d
je 0x1400d0509
cmp r10d, 1
je 0x1400d05cb
cmp r10d, 2
jne 0x1400d115a
nop word cs:[rax + rax]
mov eax, dword [0x141dd7300]
add eax, dword [0x141dd7304]
or eax, 0xcd858761
imul eax, eax, 0xace3e612
add eax, 0x7095f306
cmp eax, 0x2eac0f11
jb 0x1400d04b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7308]
xor eax, dword [0x141dd730c]
imul eax, eax, 0x7bda229c
add eax, 0x36c8a3f0
cmp eax, 0x7a855b9a
ja 0x1400d04e0
cmp qword [rsi + 0x40], 0
je 0x1400d05cb
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400d0510
test r9d, r9d
je 0x1400d0555
cmp r9d, 1
je 0x1400d05cb
cmp r9d, 2
jne 0x1400d0778
nop dword [rax]
mov eax, dword [0x141dd7318]
add eax, dword [0x141dd731c]
imul eax, eax, 0x47d77adc
and eax, 0x87930404
cmp eax, 0xcfbb114d
je 0x1400d0530
cmp qword [rsi + 0x58], 0
je 0x1400d05cb
test r8d, r8d
je 0x1400d058b
cmp r8d, 1
je 0x1400d05cb
mov eax, dword [0x141dd7320]
or eax, dword [0x141dd7324]
add eax, 0xe6518fac
and eax, 0x4a2cc5d5
add eax, 0x4c0202b9
cmp eax, 0x89e4cbc1
jb 0x1400d0560
cmp qword [rsi + 0x98], rbx
je 0x1400d05cb
test ecx, ecx
je 0x1400d15d4
cmp ecx, 1
je 0x1400d05cb
nop dword [rax + rax]
mov eax, dword [0x141dd7328]
add eax, dword [0x141dd732c]
imul eax, eax, 0xa28c0837
add eax, 0x63d18561
cmp eax, 0x70ed179c
jb 0x1400d05a0
cmp qword [rsi + 0xb8], rbx
jne 0x1400d15d4
mov rdi, qword [rsi + 0xf8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7330]
xor edx, edx
div dword [0x141dd7334]
and eax, 0x5ed9397
imul eax, eax, 0xac7bd2fc
and eax, 0x139336bc
cmp eax, 0x9190adda
ja 0x1400d05e0
test rdi, rdi
je 0x1400d15d4
mov dword [rbp + 0x28], r10d
mov r15, r13
mov dword [rbp + 0x48], r9d
mov dword [rbp + 0x70], r8d
mov dword [rbp + 0x68], ecx
mov eax, dword [0x141dd7338]
xor eax, dword [0x141dd733c]
add eax, 0x57587e5e
or eax, 0x9d402c4d
cmp eax, 0x9d09c92b
jae 0x1400d066c
mov rcx, qword [rdi + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov edx, 0x1a
mov r8, r11
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
mov r11, qword [rbp + 0x88]
add rsp, 0x30
mov ebx, 0x82185c95
nop word cs:[rax + rax]
mov eax, dword [0x141dd7340]
xor edx, edx
div dword [0x141dd7344]
mov esi, eax
add esi, 0xdc680375
shr esi, 1
imul rsi, rbx
shr rsi, 0x3e
add esi, 0x3b5ad259
mov r13, qword [rdi + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r13
mov edx, 0x1a
mov r8, r11
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
mov r11, qword [rbp + 0x88]
add rsp, 0x30
cmp esi, 0xd3b6b120
ja 0x1400d0680
mov qword [rbp + 0x80], r13
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400d06f0
test eax, eax
mov rsi, qword [rbp + 0x90]
movabs rbx, 0x8000000000000000
mov rdi, qword [rbp + 0x80]
mov r13, r15
mov r15, qword [rbp + 0x50]
mov r8, qword [rbp + 0x60]
js 0x1400d15c2
nop
mov eax, dword [0x141dd7348]
xor eax, dword [0x141dd734c]
or eax, 0x25b6b7c6
add eax, 0x44073b7b
or eax, 0xcde3ee48
cmp eax, 0x4ecf5972
jb 0x1400d0720
mov r15, qword [r11]
test r15, r15
je 0x1400d07a0
mov rbx, r13
mov eax, dword [0x141dd7738]
or eax, dword [0x141dd773c]
imul eax, eax, 0x6386267a
or eax, 0xa540073e
cmp eax, 0xce575533
mov r13, qword [rbp - 0x28]
je 0x1400d11d7
jmp 0x1400d1190
mov eax, dword [0x141dd7310]
and eax, dword [0x141dd7314]
xor eax, 0xb9bc62a3
imul rax, rax, 0x214fd839
shr rax, 0x3d
cmp eax, 0x1e12db40
je 0x1400d0778
jmp 0x1400d17e6
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rdi
xor edx, edx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1400d0df0
mov r8, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7360]
sub eax, dword [0x141dd7364]
imul ecx, eax, 0x3eed97b0
and ecx, 0xa0204070
mov rdi, qword [rdx + 0x28]
xor ebx, ebx
test rdi, rdi
setne al
cmp ecx, 0x58ebcc43
je 0x1400d07e0
mov qword [rbp + 8], r15
mov rsi, qword [rdx + 8]
mov bl, al
mov eax, dword [0x141dd7368]
add eax, dword [0x141dd736c]
or eax, 0xe81a9db5
mov ecx, 0x8c80d945
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xccdd7c7c
jne 0x1400d0875
mov rax, qword [rbp + 0x90]
mov qword [rax], rbx
mov qword [rax + 8], rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, qword [rbp + 0x80]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x78]
add rsp, 0x30
mov r15, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp + 0x90]
mov r14, qword [rbp + 0x80]
nop word [rax + rax]
mov eax, dword [0x141dd7370]
sub eax, dword [0x141dd7374]
imul r13d, eax, 0xe9202c25
xor r13d, 0x9101c0ba
mov eax, 0x9ac0d311
imul r13, rax
shr r13, 0x3d
mov qword [r12], rbx
mov qword [r12 + 8], rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r14
mov rdx, rsi
call r15
mov r8, qword [rbp + 0x78]
add rsp, 0x30
cmp r13d, 0xd39a26a8
ja 0x1400d0890
nop dword [rax]
mov ecx, dword [0x141dd7378]
and ecx, dword [0x141dd737c]
and ecx, 0xcd547c3c
imul ecx, ecx, 0x5c7c1f19
xor ecx, 0xcd84635
cmp ecx, 0x10e547ce
jb 0x1400d08f0
test eax, eax
mov rsi, qword [rbp + 0x90]
mov r15, qword [rbp + 0x50]
mov r12, qword [rbp + 0x58]
mov r14, qword [rbp + 0x20]
movabs rbx, 0x8000000000000000
mov rcx, qword [rbp + 0x80]
mov rdi, qword [rbp + 0x40]
je 0x1400d0e57
mov rdx, qword [r8 + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400d0e9d
xor eax, eax
mov r8d, dword [rbp + 0x70]
mov edx, dword [rbp + 0x28]
nop dword [rax + rax]
test al, al
jne 0x1400d0980
movzx eax, word [rdi + 0x38]
mov qword [rbp + 0x78], rax
mov r13, qword [rdi + 0x40]
lea r15, [rsi + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7388]
mov ecx, dword [0x141dd738c]
add eax, ecx
add eax, 0xf8cafcb
and eax, 0x888884de
add eax, 0xa198d572
cmp eax, 0x546fc7b0
jb 0x1400d09a0
mov r14, qword [rdi + 0x80]
test edx, edx
mov qword [rbp + 0x60], r13
je 0x1400d1b7f
movzx esi, word [rdi + 0x70]
mov rdi, qword [rdi + 0x78]
cmp edx, 1
je 0x1400d0a4b
cmp edx, 2
jne 0x1400d0f84
nop dword [rax]
mov eax, dword [0x141dd7398]
sub eax, dword [0x141dd739c]
and eax, 0xbb608939
imul eax, eax, 0x4669ffd0
add eax, 0xa1d903b0
cmp eax, 0xc48491ff
ja 0x1400d09f0
mov rax, qword [rbp + 0x90]
mov rax, qword [rax + 0x40]
nop
mov ecx, dword [0x141dd73a0]
mov edx, dword [0x141dd73a4]
add ecx, edx
add ecx, 0x70410503
or ecx, 0xeb7051b5
cmp ecx, 0x1258d6ab
je 0x1400d0a20
test rax, rax
jne 0x1400d1b7f
mov eax, dword [0x141dd73a8]
imul eax, dword [0x141dd73ac]
shr eax, 8
imul rax, rax, 0x428365
shr rax, 0x2e
imul eax, eax, 0x4d7b2e34
cmp eax, 0x650f1e50
jne 0x1400d0a80
mov eax, dword [0x141ddb270]
nop dword [rax]
mov eax, dword [0x141dd73b0]
imul eax, dword [0x141dd73b4]
add eax, 0x8cfe5fff
or eax, 0x245eab20
imul ecx, eax, 0xe84df759
mov eax, dword [0x141ddb270]
cmp ecx, 0xeede84e2
jb 0x1400d0a80
mov ecx, 0x8e25d9cd
mov edx, dword [0x141dd73b8]
and edx, dword [0x141dd73bc]
and edx, 0x88140084
or edx, 0x47ea9259
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0x963250c2
ja 0x1400d0ab0
cmp eax, 3
jne 0x1400d111c
mov eax, dword [0x141dd73c8]
xor edx, edx
div dword [0x141dd73cc]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d0b00
movzx eax, byte [0x141ddb274]
nop dword [rax + rax]
mov ecx, dword [0x141dd73d0]
sub ecx, dword [0x141dd73d4]
add ecx, 0x1af9a6c7
or ecx, 0x2821028
and ecx, 0xca8a10b9
cmp ecx, 0xa8497e42
ja 0x1400d0b10
sub rsp, 0x20
test al, al
je 0x1400d0faf
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x80]
call fcn.1400d6380
add rsp, 0x20
mov rcx, qword [rbp + 0x90]
nop dword [rax]
mov eax, dword [0x141dd7478]
xor eax, dword [0x141dd747c]
imul eax, eax, 0xcc91384f
or eax, 0xfd084c07
xor eax, 0xcacd1f1
cmp eax, 0x95583baf
jb 0x1400d0b60
mov rax, qword [rcx + 0x38]
mov qword [rbp + 0x88], rax
mov rdi, qword [rcx + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7480]
and eax, dword [0x141dd7484]
or eax, 0x603196b4
and eax, 0x673df6f6
cmp eax, 0x703a76ad
je 0x1400d0ba0
test rdi, rdi
je 0x1400d0c6d
xor ebx, ebx
mov esi, 0xd0c7703b
mov r13, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7488]
xor edx, edx
div dword [0x141dd748c]
add eax, 0x1ee6a988
mov rcx, rax
imul rcx, rsi
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
and eax, 1
cmp eax, 0xd3b50850
ja 0x1400d0be0
cmp qword [r13], 0
je 0x1400d0c40
mov r8, qword [r13 + 8]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd7490]
sub eax, dword [0x141dd7494]
or eax, 0x787c79b2
and eax, 0x78fcfffa
cmp eax, 0x9f7e953a
ja 0x1400d0c40
add r13, 0x20
inc rbx
dec rdi
jne 0x1400d0be0
mov rcx, qword [r15]
mov eax, dword [0x141dd7498]
xor edx, edx
div dword [0x141dd749c]
nop
mov eax, dword [0x141dd74a0]
add eax, dword [0x141dd74a4]
or eax, 0xc695c287
add eax, 0xb2db1bc2
imul rax, rax, 0x254bf73
shr rax, 0x38
cmp eax, 0x179fbb3
ja 0x1400d0c80
mov eax, 0xc23dcdf1
mov edx, 0xb825c0fd
mov r12, qword [rbp + 0x58]
nop word cs:[rax + rax]
mov r8d, dword [0x141dd74a8]
add r8d, dword [0x141dd74ac]
imul r8, rax
shr r8, 0x38
add r8d, 0xe35beda9
imul r8, rdx
shr r8, 0x3f
cmp r8d, 0x513c79cd
je 0x1400d0cc0
test rcx, rcx
je 0x1400d0db6
mov eax, dword [0x141dd74b0]
or eax, dword [0x141dd74b4]
and eax, 0x445e2812
add eax, 0xab446ce1
and eax, 0x4fa80480
cmp eax, 0xc47ca266
jbe 0x1400d0d20
mov rax, qword [0x141ddb260]
xor eax, eax
mov rsi, qword [rbp + 0x88]
mov rdi, qword [0x141ddb260]
test al, al
jne 0x1400d0d29
mov eax, dword [0x141dd74b8]
xor eax, dword [0x141dd74bc]
add eax, 0x2ee6df9a
mov ecx, 0xea54e31f
imul rcx, rax
shr rcx, 0x3b
add ecx, 0x2932f139
cmp ecx, 0xbc1eb4e3
jbe 0x1400d0d76
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd74c0]
xor eax, dword [0x141dd74c4]
imul ebx, eax, 0x3f656d29
xor ebx, 0xa20a960c
add ebx, 0x5e1d33a1
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r13
add rsp, 0x20
cmp ebx, 0x4105eafd
jb 0x1400d0d7d
mov eax, dword [0x141dd74c8]
add eax, dword [0x141dd74cc]
imul eax, eax, 0x46b558a7
add eax, 0x5335ac8e
cmp eax, 0xd2c42f94
mov r8, qword [rbp + 0x30]
ja 0x1400d1818
jmp 0x1400d17e8
mov eax, dword [0x141dd7350]
imul eax, dword [str._f_u_]
add eax, 0xaf6b7f14
imul rcx, rax, 0x9382145
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x5f57d45c
cmp eax, 0x44580add
jb 0x1400d0df0
mov r15, qword [rbp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7358]
and eax, dword [0x141dd735c]
and eax, 0x2e16d37c
add eax, 0x334b4498
or eax, 0x93712a73
cmp eax, 0x6dba1b33
jbe 0x1400d0e30
jmp 0x1400d15c2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r13, qword [rbp + 0x38]
nop dword [rax]
mov eax, dword [0x141dd7380]
xor edx, edx
div dword [0x141dd7384]
add eax, 0xd7c31e43
imul rax, rax, 0x54fc3087
shr rax, 0x3c
and eax, 2
cmp eax, 0x645248b9
je 0x1400d0e70
jmp 0x1400d0f60
mov eax, dword [0x141dd7720]
xor edx, edx
div dword [0x141dd7724]
or eax, 0xff9ffdbe
and eax, 0xfffffffe
cmp eax, 0xc967e1f5
jne 0x1400d0ec8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
xor edi, edi
mov r13, qword [rbp + 0x38]
nop word cs:[rax + rax]
sub rsp, 0x20
call rsi
add rsp, 0x20
test dil, dil
jne 0x1400d0ee0
mov rsi, qword [rbp + 0x90]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7728]
sub eax, dword [0x141dd772c]
add eax, 0x9f912f1
cmp eax, 0x9b652472
ja 0x1400d0f00
nop dword [rax + rax]
mov eax, dword [0x141dd7730]
xor eax, dword [0x141dd7734]
add eax, 0x5b5c47d5
or eax, 0x75438108
imul rcx, rax, 0x1f81ba13
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xf38b5750
jae 0x1400d0f20
nop word cs:[rax + rax]
mov eax, dword [0x141dd7748]
xor edx, edx
div dword [0x141dd774c]
xor eax, 0x24800440
and eax, 0x26880648
cmp eax, 0x398823da
ja 0x1400d0f60
jmp 0x1400d15c2
mov eax, dword [0x141dd7390]
or eax, dword [0x141dd7394]
xor eax, 0x92dcafab
imul rax, rax, 0x48defaf1
shr rax, 0x3d
and eax, 1
cmp eax, 0x795d251c
ja 0x1400d0f84
jmp 0x1400d17e6
mov r13, qword [rbp - 0x58]
mov rcx, r13
mov rdx, qword [rbp + 0x80]
mov r8, rdi
mov r9, rsi
call fcn.1400d5a50
add rsp, 0x20
mov rdi, qword [r13]
cmp rdi, rbx
jne 0x1400d1059
mov eax, dword [str.H_A_]
xor edx, edx
div dword [0x141dd740c]
imul eax, eax, 0x62574152
imul rcx, rax, 0x9c1bcb9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
xor eax, 0x79efea69
cmp eax, 0xef09a433
mov rcx, qword [rbp]
jbe 0x1400d1018
mov qword [rcx], 0
mov eax, dword [0x141dd7410]
xor edx, edx
div dword [0x141dd7414]
xor eax, 0x65ee491
imul eax, eax, 0x4223d01e
and eax, 0xc2c2cba2
mov qword [rcx], 0
cmp eax, 0xfe3aae3d
je 0x1400d1018
mov qword [rcx + 8], 8
mov qword [rcx + 0x10], 0
jmp 0x1400d1908
mov eax, dword [0x141dd73d8]
sub eax, dword [0x141dd73dc]
imul rax, rax, 0x130dfc7f
shr rax, 0x3c
add eax, 0xecb7df7f
cmp eax, 0x354a9be8
jb 0x1400d1059
mov rax, qword [rbp - 0x58]
mov rsi, qword [rax + 8]
sub rsp, 0x20
mov rcx, qword [rbp]
mov rdx, rsi
call fcn.1400d5eb0
add rsp, 0x20
test rdi, rdi
je 0x1400d1908
mov eax, dword [0x141dd73e0]
or eax, dword [0x141dd73e4]
mov ecx, 0xf573a6cd
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0xed2b0b2e
cmp ecx, 0xfc2dec26
jbe 0x1400d10cf
mov rax, qword [0x141ddb260]
mov eax, dword [0x141dd73e8]
xor edx, edx
div dword [0x141dd73ec]
or eax, 0x9fe27f41
imul eax, eax, 0x7077e4e0
mov rdi, qword [0x141ddb260]
cmp eax, 0x63a37b32
ja 0x1400d10cf
mov eax, dword [0x141dd73f0]
add eax, dword [0x141dd73f4]
xor eax, 0x80000380
or eax, 0x7ebdfc7e
cmp eax, 0xabf67c1a
ja 0x1400d18ce
jmp 0x1400d189e
sub rsp, 0x20
call fcn.1401003dc
add rsp, 0x20
mov eax, dword [0x141dd73c0]
imul eax, dword [0x141dd73c4]
and eax, 0xcee489d1
add eax, 0xf31b2a90
shr eax, 2
imul rax, rax, 0x261786cb
shr rax, 0x37
cmp eax, 0x26a077d1
ja 0x1400d1129
jmp 0x1400d0ae1
mov eax, 0x9eb1c15b
nop
mov ecx, dword [0x141dd72f8]
imul ecx, dword [0x141dd72fc]
add ecx, 0xed722507
or ecx, 0x1c1c870e
shr ecx, 1
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x9c478b10
je 0x1400d1160
jmp 0x1400d17e6
mov eax, dword [0x141dd7740]
imul eax, dword [0x141dd7744]
imul esi, eax, 0xc1747393
add esi, 0x522c5694
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, rdi
mov rdx, r15
mov r8, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp esi, 0xb656c5ce
jae 0x1400d11ff
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, rdi
mov rdx, r15
mov r8, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1400d1190
test eax, eax
je 0x1400d1444
mov rax, qword [rbp - 0x28]
mov esi, dword [rax + 0x10]
mov eax, dword [0x141dd7750]
or eax, dword [0x141dd7754]
add eax, 0xd32ab182
xor eax, 0x418050c
and eax, 0x24381f4c
cmp eax, 0x2ba7cc48
jbe 0x1400d1257
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, rdi
mov rdx, rsi
mov r8, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov r13, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp + 0x10]
nop word cs:[rax + rax]
mov ebx, dword [0x141dd7758]
add ebx, dword [str.__0_f]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call r13
add rsp, 0x30
cmp ebx, 0x42493722
je 0x1400d1270
test eax, eax
je 0x1400d14b9
movabs rbx, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x141dd7770]
sub eax, dword [0x141dd7774]
imul eax, eax, 0x7cf031
or eax, 0xb74703f4
xor eax, 0xade578de
cmp eax, 0xecc28dce
ja 0x1400d12c0
mov rdx, qword [rbp + 0x10]
movzx r14d, word [rdx + 0x24]
mov r10d, dword [rdx + 0x28]
movzx esi, word [rdx + 0x40]
mov eax, 0x905686a7
mov r13, qword [rbp - 0x40]
mov r11d, dword [rbp + 0x70]
mov r9d, dword [rbp + 0x28]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7778]
xor ecx, dword [0x141dd777c]
imul rcx, rax
shr rcx, 0x3d
xor ecx, 0xc4584a82
or ecx, 0x2ba50079
cmp ecx, 0x4659af11
jb 0x1400d1310
mov r15d, dword [rdx + 0x44]
mov eax, dword [rdx + 0x48]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x90]
lea r8, [rax + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7780]
xor eax, dword [0x141dd7784]
and eax, 0x5d6f219e
add eax, 0xdf115647
or eax, 0x3ee3c54c
cmp eax, 0x62c4931d
je 0x1400d1360
test r9d, r9d
mov qword [rbp - 0x28], r10
je 0x1400d3a40
cmp r9d, 1
je 0x1400d1410
mov eax, dword [0x141dd7788]
xor edx, edx
div dword [0x141dd778c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7790]
mov ecx, dword [0x141dd7794]
add eax, ecx
add eax, 0x68b24251
or eax, 0x9bd9a84
cmp eax, 0xfb51796c
je 0x1400d13b0
mov rax, qword [rbp + 0x90]
mov rax, qword [rax + 0x40]
nop word [rax + rax]
mov ecx, dword [0x141dd7798]
imul ecx, dword [0x141dd779c]
imul ecx, ecx, 0x89ad639e
and ecx, 0x10bc1232
add ecx, 0xc9f05040
cmp ecx, 0x999cfb0c
jb 0x1400d13e0
test rax, rax
jne 0x1400d3a40
mov qword [rbp + 0x78], r8
mov eax, dword [0x141ddb270]
cmp eax, 3
je 0x1400d33fe
mov eax, dword [0x141dd77a0]
or eax, dword [0x141dd77a4]
add eax, 0x344eb6e9
cmp eax, 0xced23edc
ja 0x1400d33ef
jmp 0x1400d33c3
mov eax, dword [0x141dd7760]
imul eax, dword [0x141dd7764]
cmp eax, 0xcd535161
mov r13, rbx
jne 0x1400d1469
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15, qword [rbp + 0x50]
movabs rbx, 0x8000000000000000
nop
mov eax, dword [0x141dd7768]
xor edx, edx
div dword [0x141dd776c]
mov esi, eax
xor esi, 0x6440c0d3
or esi, 0x91bc0b2c
add esi, 0xfec1f9ef
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp esi, 0x779da72c
jbe 0x1400d1480
jmp 0x1400d1598
mov eax, dword [0x141dd7b00]
and eax, dword [0x141dd7b04]
and eax, 0xb7db5859
add eax, 0x3f209c10
or eax, 0x71a92d8c
cmp eax, 0xbaf3531a
movabs rbx, 0x8000000000000000
mov r15, qword [rbp + 0x50]
jae 0x1400d14f7
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13, qword [rbp + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b08]
sub eax, dword [0x141dd7b0c]
imul rax, rax, 0x17b1740b
shr rax, 0x3a
imul edi, eax, 0xb447b520
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xf982297d
ja 0x1400d1510
nop
mov eax, dword [0x141dd7b10]
xor eax, dword [0x141dd7b14]
xor eax, 0x365db56d
add eax, 0x5af93243
xor eax, 0x42aac525
cmp eax, 0xe98ee689
ja 0x1400d1540
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b18]
xor edx, edx
div dword [0x141dd7b1c]
xor eax, 0x121450d2
imul rax, rax, 0x78d3aab7
shr rax, 0x3c
and eax, 0xfffffffe
cmp eax, 0xb8f69db8
je 0x1400d1570
mov rsi, qword [rbp + 0x90]
nop
mov eax, dword [0x141dd7b20]
sub eax, dword [0x141dd7b24]
xor eax, 0x36a63ade
add eax, 0xef96334b
and eax, 0x26e06492
cmp eax, 0x6e5d04aa
je 0x1400d15a0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d15d0
mov eax, dword [str.tF_tKo]
xor edx, edx
div dword [0x141dd7b2c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b30]
imul eax, dword [0x141dd7b34]
or eax, 0x163d0ded
add eax, 0x3d0bf363
or eax, 0x70eb153
cmp eax, 0x5f94c69e
je 0x1400d15f0
movzx ecx, byte [r13 + 8]
mov eax, dword [0x141dd7b38]
xor edx, edx
div dword [0x141dd7b3c]
lea rdi, [rsi + 0x60]
nop word [rax + rax]
mov eax, dword [0x141dd7b40]
imul eax, dword [0x141dd7b44]
imul eax, eax, 0xb6db2cce
cmp eax, 0xdaa6a81a
je 0x1400d1630
test ecx, ecx
je 0x1400d4f6b
cmp ecx, 1
je 0x1400d16a0
cmp ecx, 2
jne 0x1400d17a0
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7b50]
xor ecx, dword [0x141dd7b54]
imul ecx, ecx, 0xd5ee5636
cmp ecx, 0x210b24d9
je 0x1400d1670
cmp rax, rbx
jne 0x1400d4f6b
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b58]
mov ecx, dword [0x141dd7b5c]
add eax, ecx
add eax, 0xd6c2d1c2
or eax, 0xfd92e16c
and eax, 0xff9af5ec
cmp eax, 0x8b1d4af2
jb 0x1400d16a0
mov rcx, qword [rsi + 0xf8]
nop dword [rax + rax]
mov eax, dword [0x141dd7b60]
and eax, dword [0x141dd7b64]
imul eax, eax, 0x307aa163
add eax, 0xb46d5eb9
cmp eax, 0x532b2350
jb 0x1400d16d0
mov eax, 0x9550d78f
nop word cs:[rax + rax]
mov edx, dword [0x141dd7b68]
imul edx, dword [0x141dd7b6c]
imul edx, edx, 0x88d69eb6
or edx, 0x164b5c80
mov r8, rdx
imul r8, rax
shr r8, 0x20
sub edx, r8d
shr edx, 1
add edx, r8d
shr edx, 0x1d
cmp edx, 0x80dd751c
ja 0x1400d1700
test rcx, rcx
je 0x1400d17ba
mov eax, dword [0x141dd7b90]
xor edx, edx
div dword [0x141dd7b94]
nop word [rax + rax]
mov eax, dword [0x141dd7b98]
and eax, dword [0x141dd7b9c]
or eax, 0x6ab3d2f7
xor eax, 0xf91a9de6
cmp eax, 0x6b5eb699
jb 0x1400d1750
mov rsi, qword [rcx + 0x10]
mov eax, dword [0x141dd7ba0]
sub eax, dword [0x141dd7ba4]
imul eax, eax, 0x73d32dec
cmp eax, 0x3b2ac497
je 0x1400d3649
jmp 0x1400d360b
mov eax, dword [0x141dd7b48]
or eax, dword [0x141dd7b4c]
add eax, 0x4e515300
cmp eax, 0xa1a1cc97
jb 0x1400d17a0
jmp 0x1400d17e6
mov eax, dword [0x141dd7b80]
add eax, dword [0x141dd7b84]
xor eax, 0x696f38fa
imul eax, eax, 0x4b5a11f3
add eax, 0x6e07b445
cmp eax, 0xcf70e377
ja 0x1400d4f66
jmp 0x1400d4f3a
ud2
mov eax, dword [0x141dd74d0]
xor edx, edx
div dword [0x141dd74d4]
or eax, 0x85c1534a
imul eax, eax, 0xc6edcced
mov rcx, qword [r8 + 0x10]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [r8]
movups xmmword [r15], xmm0
cmp eax, 0xac21c0e
jne 0x1400d182a
mov rax, qword [r8 + 0x10]
mov qword [r15 + 0x10], rax
movups xmm0, xmmword [r8]
movups xmmword [r15], xmm0
jmp 0x1400d17e8
movabs rbx, 0x8000000000000000
mov r8d, dword [rbp + 0x70]
mov r13, qword [rbp + 0x60]
nop dword [rax]
mov eax, dword [0x141dd74d8]
sub eax, dword [0x141dd74dc]
add eax, 0xcb7eee40
and eax, 0x3d112931
xor eax, 0x77f6c2eb
cmp eax, 0x485fb559
jb 0x1400d1840
mov eax, 0x80eac33b
nop word [rax + rax]
mov ecx, dword [0x141dd74e0]
imul ecx, dword [0x141dd74e4]
or ecx, 0x576c37e5
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x72a375a7
cmp ecx, 0x960ddb87
ja 0x1400d1870
jmp 0x1400d1b7f
mov eax, dword [0x141dd73f8]
and eax, dword [0x141dd73fc]
imul ebx, eax, 0x79b7010c
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x6605f53f
jne 0x1400d18e6
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d189e
mov eax, dword [0x141dd7400]
and eax, dword [0x141dd7404]
or eax, 0x1b16c0dd
xor eax, 0xc041b4f7
add eax, 0xe1b02f00
cmp eax, 0xb465a22c
jae 0x1400d18e6
mov eax, dword [0x141dd7418]
sub eax, dword [0x141dd741c]
imul eax, eax, 0xc780930a
add eax, 0xd1b9b3f8
xor eax, 0xd14e2a18
cmp eax, 0x6a2265c3
ja 0x1400d1908
mov rax, qword [rbp + 0x90]
mov rsi, qword [rax + 0x38]
mov eax, dword [0x141dd7420]
xor eax, dword [0x141dd7424]
cmp eax, 0x42b2f251
je 0x1400d1936
mov rax, qword [rbp + 0x90]
mov rax, qword [rax + 0x40]
test rax, rax
je 0x1400d1a7a
mov r12, rax
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
xor ebx, ebx
nop dword [rax]
mov eax, dword [0x141dd7428]
add eax, dword [str.1PpD_]
and eax, 0x41601300
or eax, 0x229e68ff
imul eax, eax, 0xffb2c980
cmp eax, 0x1c3323b0
ja 0x1400d1970
mov r13, rbx
shl r13, 5
cmp qword [rsi + r13], 0
je 0x1400d1a20
add r13, rsi
mov eax, dword [0x141dd7430]
xor edx, edx
div dword [0x141dd7434]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7438]
xor edx, edx
div dword [0x141dd743c]
cmp eax, 0xa09a4f4e
je 0x1400d19c0
xor eax, eax
test al, al
jne 0x1400d1a5e
mov r8, qword [r13 + 8]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call rdi
add rsp, 0x20
xor eax, eax
test al, al
jne 0x1400d1a5e
nop dword [rax]
mov eax, dword [0x141dd7440]
xor edx, edx
div dword [0x141dd7444]
imul eax, eax, 0xf49411b3
add eax, 0x8d0e4be3
cmp eax, 0x368f87e5
jb 0x1400d1a00
inc rbx
mov eax, dword [0x141dd7448]
xor edx, edx
div dword [0x141dd744c]
mov eax, dword [0x141dd7450]
sub eax, dword [0x141dd7454]
xor eax, 0xe39312df
add eax, 0x3714e5c6
or eax, 0x29a98b28
cmp eax, 0x6b5f76a0
ja 0x1400d1a31
cmp rbx, r12
jne 0x1400d1970
jmp 0x1400d1a7a
mov r8, qword [r13 + 8]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call rdi
add rsp, 0x20
jmp 0x1400d19df
mov rax, qword [r15]
mov ecx, dword [0x141dd7458]
or ecx, dword [0x141dd745c]
xor ecx, 0x87600c9d
imul ecx, ecx, 0x369b9fd1
add ecx, 0xa0aeb0d9
cmp ecx, 0xa7830aba
jb 0x1400d1a7d
test rax, rax
je 0x1400d1b2d
mov rdi, qword [0x141ddb260]
mov eax, dword [0x141dd7460]
sub eax, dword [0x141dd7464]
and eax, 0xac32f35b
imul rax, rax, 0x18622cb7
shr rax, 0x3b
and eax, 1
cmp eax, 0x5d326e0d
jbe 0x1400d1aef
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13d, dword [0x141dd7468]
or r13d, dword [str.c_M]
and r13d, 0x651a2570
add r13d, 0x5bac88c3
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp r13d, 0x1a4bc6ba
jb 0x1400d1af6
mov rcx, qword [rbp]
mov rax, qword [rcx + 0x10]
mov qword [r15 + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [r15], xmm0
movabs rbx, 0x8000000000000000
mov r8d, dword [rbp + 0x70]
mov r13, qword [rbp + 0x60]
mov r12, qword [rbp + 0x58]
mov eax, dword [0x141dd7470]
xor eax, dword [0x141dd7474]
imul eax, eax, 0x8d0e6b0b
add eax, 0x7c220a25
imul rax, rax, 0x4b5c869
shr rax, 0x3a
cmp eax, 0xefa43eda
jae 0x1400d1b56
mov rsi, qword [rbp + 0x90]
lea rax, [rsi + 0x48]
mov qword [rbp + 0x30], rax
xor eax, eax
mov ecx, dword [rbp + 0x68]
mov rdi, qword [rbp + 0x80]
mov r15, qword [rbp + 8]
nop
test al, al
jne 0x1400d1ba0
nop word cs:[rax + rax]
mov eax, dword [0x141dd74e8]
xor eax, dword [0x141dd74ec]
and eax, 0x5fc47d89
xor eax, 0xfd50130c
imul eax, eax, 0xa7e81372
cmp eax, 0xc326f556
je 0x1400d1bb0
cmp dword [rbp + 0x48], 0
je 0x1400d2b40
cmp dword [rbp + 0x48], 1
je 0x1400d1c51
nop word cs:[rax + rax]
mov eax, dword [0x141dd74f0]
xor eax, dword [0x141dd74f4]
or eax, 0x318b32
imul eax, eax, 0xee44886
add eax, 0x5e62580e
cmp eax, 0x122db172
jb 0x1400d1bf0
mov rcx, qword [rsi + 0x58]
nop word [rax + rax]
mov eax, dword [0x141dd74f8]
xor edx, edx
div dword [0x141dd74fc]
or eax, 0x96dbae6b
imul eax, eax, 0xe40907ea
add eax, 0x210e9852
cmp eax, 0x25bda5e9
jb 0x1400d1c20
test rcx, rcx
mov ecx, dword [rbp + 0x68]
jne 0x1400d2b40
sub rsp, 0x20
mov r9d, 0x30
mov rcx, rdi
mov rdx, r14
mov rdi, qword [rbp - 8]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
mov r13, qword [rbp + 0x18]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7500]
sub ecx, dword [0x141dd7504]
imul ecx, ecx, 0xd7064b19
add ecx, 0x3efa767e
or ecx, 0x2ceae774
cmp ecx, 0xf6d48604
ja 0x1400d1c80
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1400d1cb0
test rax, rax
je 0x1400d2390
nop dword [rax]
mov eax, dword [0x141dd7508]
mov ecx, dword [0x141dd750c]
add eax, ecx
add eax, 0xfaed8d8e
and eax, 0x288a0
cmp eax, 0x70ccb79b
ja 0x1400d1cc0
mov rsi, qword [rdi]
mov rdi, qword [rdi + 0x18]
mov eax, dword [0x141dd7510]
xor edx, edx
div dword [0x141dd7514]
xor eax, 0x3880488a
and eax, 0x3b92ceae
add eax, 0x756dd4a6
cmp eax, 0x4ee37d38
mov r15, qword [rbp + 0x80]
jb 0x1400d2351
jmp 0x1400d230c
mov r14d, dword [0x141dd7218]
xor r14d, dword [0x141dd721c]
add r14d, 0x477fb93b
and r14d, 0x14a286ae
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
cmp r14d, 0x7cbd6664
jbe 0x1400d1d73
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
jmp 0x1400d1d1a
mov r15, rax
test rax, rax
mov r14, qword [rbp + 0x20]
mov r12, qword [rbp + 0x28]
je 0x1400d03c0
mov edi, dword [r12]
mov eax, dword [0x141dd7220]
and eax, dword [str.CiKk]
add eax, 0xc175efe9
and eax, 0xecdbec56
imul eax, eax, 0xcbd4c552
cmp eax, 0xda2b12e3
ja 0x1400d1ded
mov eax, dword [0x141dd7228]
add eax, dword [0x141dd722c]
or eax, 0x86339d99
imul ebx, eax, 0xf3d33be3
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, rsi
mov edx, 1
mov r8, r15
mov r9d, edi
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
cmp ebx, 0x7a4b2233
jne 0x1400d1e0f
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, rsi
mov edx, 1
mov r8, r15
mov r9d, edi
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
jmp 0x1400d1dae
test eax, eax
je 0x1400d2191
nop word [rax + rax]
mov eax, dword [0x141dd7238]
or eax, dword [0x141dd723c]
imul eax, eax, 0x854b38c5
cmp eax, 0xdd40187d
je 0x1400d1e20
mov eax, dword [0x141dd7240]
mov ecx, dword [0x141dd7244]
add eax, ecx
add eax, 0x5b4d8ddd
xor eax, 0xc06bc140
or eax, 0x3a841a27
cmp eax, 0xe8b284b0
movabs rbx, 0x8000000000000000
mov rcx, qword [rbp + 0x48]
jbe 0x1400d1e80
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.1400d5390
mov rcx, qword [rbp + 0x48]
add rsp, 0x20
nop
mov eax, dword [str.iMkJ]
add eax, dword [0x141dd724c]
imul edi, eax, 0x5870ebf6
add edi, 0xe27271c0
and edi, 0xece2a61a
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.1400d5390
mov rcx, qword [rbp + 0x48]
add rsp, 0x20
cmp edi, 0x4ed22f10
je 0x1400d1e80
mov rdi, qword [rcx]
nop dword [rax]
mov eax, dword [0x141dd7250]
imul eax, dword [0x141dd7254]
imul rax, rax, 0x29eee8f7
shr rax, 0x3d
or eax, 0xa02625bc
cmp eax, 0xb6bfff0
je 0x1400d1ec0
cmp rdi, rbx
jne 0x1400d1f1b
sub rsp, 0x20
mov rcx, r15
call fcn.1400d5300
add rsp, 0x20
mov eax, dword [0x141dd72c0]
imul eax, dword [0x141dd72c4]
add eax, 0xc4171bfc
cmp eax, 0x11f6af76
jb 0x1400d2214
jmp 0x1400d21fd
mov eax, dword [0x141dd7260]
and eax, dword [0x141dd7264]
xor eax, 0xf522dc00
imul eax, eax, 0x344fc7f3
imul rax, rax, 0x226ede49
shr rax, 0x3d
cmp eax, 0x236cc86c
je 0x1400d1f1b
mov rbx, qword [rcx + 8]
mov eax, dword [0x141dd7268]
xor edx, edx
div dword [0x141dd726c]
mov eax, dword [0x141dd7270]
sub eax, dword [0x141dd7274]
imul eax, eax, 0x65fd2af3
or eax, 0x2cf543c4
imul rdx, rax, 0xaf5043b
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
cmp eax, 0x26536306
ja 0x1400d1f56
mov r14, qword [rcx + 0x10]
mov rax, qword [rbp + 0x90]
mov rax, qword [rax + 0x80]
shl rax, 1
test rax, rax
je 0x1400d1ff9
mov eax, dword [0x141dd7278]
xor edx, edx
div dword [0x141dd727c]
or eax, 0x111237f9
cmp eax, 0x5a587fd9
je 0x1400d1fa2
mov rax, qword [rbp + 0x90]
mov r8, qword [rax + 0x88]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd7280]
sub eax, dword [0x141dd7284]
add eax, 0x8eb21a60
cmp eax, 0x48f72f3d
ja 0x1400d1fe1
mov eax, dword [0x141dd7288]
imul eax, dword [0x141dd728c]
or eax, 0x9b52dbe4
imul eax, eax, 0x53e0b275
cmp eax, 0xfec12046
jne 0x1400d202d
mov rax, qword [rbp + 0x90]
mov qword [rax + 0x80], rdi
mov qword [rax + 0x88], rbx
xor eax, eax
mov rcx, qword [rbp + 0x90]
mov qword [rcx + 0x80], rdi
mov qword [rcx + 0x88], rbx
test al, al
jne 0x1400d2036
mov qword [rcx + 0x90], r14
sub rsp, 0x20
mov rcx, r15
call fcn.1400d5300
add rsp, 0x20
mov eax, dword [0x141dd7290]
add eax, dword [0x141dd7294]
imul rax, rax, 0x66c024ff
shr rax, 0x3e
imul eax, eax, 0x3a990278
cmp eax, 0x2aa84fb2
jbe 0x1400d2094
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rbp + 0x50]
mov r14, qword [rbp + 0x20]
mov ebx, dword [0x141dd7298]
imul ebx, dword [0x141dd729c]
and ebx, 0x433bedf0
sub rsp, 0x20
mov rcx, rsi
call rdi
add rsp, 0x20
cmp ebx, 0x6f5e55c6
je 0x1400d20a3
test eax, eax
mov r12, qword [rbp + 0x58]
movabs rbx, 0x8000000000000000
jne 0x1400d2166
mov eax, dword [0x141dd72a0]
xor eax, dword [0x141dd72a4]
imul eax, eax, 0xe5216248
add eax, 0x8d72ad50
cmp eax, 0x897c3e0a
jbe 0x1400d210d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141dd72a8]
xor edx, edx
div dword [0x141dd72ac]
mov esi, eax
add esi, 0x314d89d5
xor esi, 0xbf482800
or esi, 0x40b5c77f
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp esi, 0x7bc507ce
jb 0x1400d2114
mov eax, dword [0x141dd72b0]
imul eax, dword [0x141dd72b4]
or eax, 0xbdfffe71
add eax, 0x9698f0a2
cmp eax, 0x3c05c71
jb 0x1400d2148
mov rsi, qword [rbp + 0x90]
mov r11, qword [rbp + 0x88]
mov eax, dword [0x141dd72b8]
sub eax, dword [str._Hc5]
and eax, 0x65a90d69
cmp eax, 0x2615fcdb
je 0x1400d2174
jmp 0x1400d0448
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400d21b5
sub rsp, 0x20
mov rcx, r15
call fcn.1400d5300
add rsp, 0x20
xor edi, edi
sub rsp, 0x20
mov rcx, r15
call fcn.1400d5300
add rsp, 0x20
test dil, dil
jne 0x1400d21b7
mov ecx, 0x821b1559
mov eax, dword [0x141dd7230]
xor edx, edx
div dword [0x141dd7234]
or eax, 0xfe471394
imul rax, rcx
shr rax, 0x3d
or eax, 0x20dc26b0
cmp eax, 0xb4b7b0da
jae 0x1400d21d1
jmp 0x1400d03c0
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
xor ecx, ecx
test cl, cl
je 0x1400d2227
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400d21fd
mov r15, qword [rbp + 0x50]
mov ecx, dword [0x141dd72c8]
sub ecx, dword [0x141dd72cc]
xor ecx, 0xac918193
imul ecx, ecx, 0xdf68d3c2
cmp ecx, 0x9619d64c
je 0x1400d222b
test eax, eax
mov rsi, qword [rbp + 0x90]
mov r12, qword [rbp + 0x58]
mov r11, qword [rbp + 0x88]
jne 0x1400d22f4
mov eax, dword [0x141dd72d0]
sub eax, dword [str._ABu]
imul eax, eax, 0x3febd891
imul rax, rax, 0x1c8c5111
shr rax, 0x3a
or eax, 0xc1bd6ba8
cmp eax, 0x1b4f42ad
jb 0x1400d22bd
mov eax, dword [0x141dd72d8]
imul eax, dword [0x141dd72dc]
imul esi, eax, 0x6074f31b
add esi, 0x3e15c5be
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x34790354
jae 0x1400d22cd
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d228e
mov rsi, qword [rbp + 0x90]
mov r11, qword [rbp + 0x88]
mov eax, dword [0x141dd72e0]
sub eax, dword [0x141dd72e4]
imul eax, eax, 0xa9d070d2
cmp eax, 0x9a5e3379
je 0x1400d22db
mov eax, dword [0x141dd72e8]
or eax, dword [0x141dd72ec]
cmp eax, 0xbf6e02b4
je 0x1400d22f4
jmp 0x1400d0448
mov ebx, dword [0x141dd7518]
xor ebx, dword [0x141dd751c]
and ebx, 0x84e02dd6
add ebx, 0xa8311e05
xor ebx, 0x646e4112
mov r9, rsi
sub r9, r14
add r9, rdi
sub rsp, 0x20
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.1400d5a50
add rsp, 0x20
cmp ebx, 0x98446138
jae 0x1400d2372
mov r9, rsi
sub r9, r14
add r9, rdi
sub rsp, 0x20
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.1400d5a50
add rsp, 0x20
jmp 0x1400d230c
mov rcx, qword [r13]
movabs rax, 0x8000000000000000
cmp rcx, rax
mov rsi, qword [rbp + 0x90]
jne 0x1400d25be
mov eax, dword [0x141dd7520]
xor edx, edx
div dword [0x141dd7524]
add eax, 0x8f7ef9df
and eax, 0x629a9725
imul rax, rax, 0xd383283
shr rax, 0x33
cmp eax, 0x33ede21f
je 0x1400d2390
mov r12, qword [rsi + 0x50]
mov rax, qword [rsi + 0x58]
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400d24a3
mov ebx, 0x8fa68775
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov rax, rsi
shl rax, 5
cmp qword [r12 + rax], 0
je 0x1400d2460
add rax, r12
mov r14, qword [rax + 8]
mov r15, qword [0x141ddb260]
xor eax, eax
test al, al
jne 0x1400d2449
nop word cs:[rax + rax]
mov edi, dword [0x141dd7528]
and edi, dword [0x141dd752c]
add edi, 0xfb44c2c9
xor edi, 0x9000d10
and edi, 0xf048d13
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call r13
add rsp, 0x20
cmp edi, 0xca1a24a6
jne 0x1400d2460
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call r13
add rsp, 0x20
jmp 0x1400d2410
inc rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dd7530]
sub eax, dword [0x141dd7534]
imul rax, rbx
shr rax, 0x3f
imul eax, eax, 0x609295aa
add eax, 0x7fc766a5
cmp eax, 0x78b6534a
jb 0x1400d2470
cmp rsi, qword [rbp + 0x88]
jne 0x1400d23e0
mov r8, r12
mov rdi, qword [rbp + 0x80]
mov r15, qword [rbp + 8]
mov r13, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7538]
xor eax, dword [0x141dd753c]
add eax, 0xbbb3a92
xor eax, 0x74751735
add eax, 0xdcab1f20
cmp eax, 0xfc438dd7
ja 0x1400d24c0
mov rax, qword [rbp + 0x30]
mov rax, qword [rax]
mov r12, qword [rbp + 0x58]
nop dword [rax]
mov ecx, dword [0x141dd7540]
xor ecx, dword [0x141dd7544]
add ecx, 0x448ceacd
and ecx, 0xf940207d
xor ecx, 0x8dc441ac
cmp ecx, 0x905ef09a
jb 0x1400d24f0
mov rsi, qword [rbp + 0x90]
movabs rbx, 0x8000000000000000
nop word [rax + rax]
mov ecx, dword [0x141dd7548]
xor ecx, dword [0x141dd754c]
imul ecx, ecx, 0xd9582e63
add ecx, 0x65a13d72
and ecx, 0x6e955d08
cmp ecx, 0x7e41e6bd
je 0x1400d2530
test rax, rax
je 0x1400d259d
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd7550]
sub eax, dword [0x141dd7554]
xor eax, 0x240040
or eax, 0x161bf78f
cmp eax, 0x5f3e6e6b
je 0x1400d2580
mov qword [rsi + 0x48], 0
mov qword [rsi + 0x50], 8
mov qword [rsi + 0x58], 0
mov r8d, dword [rbp + 0x70]
jmp 0x1400d2b07
mov eax, dword [0x141dd7558]
sub eax, dword [0x141dd755c]
or eax, 0x335a8ffb
imul eax, eax, 0xa84f9332
add eax, 0x68330164
cmp eax, 0x3f4e9091
jb 0x1400d25be
mov qword [rbp], rcx
mov eax, 0xadef45ed
mov ecx, dword [0x141dd7560]
xor ecx, dword [0x141dd7564]
or ecx, 0x843552c5
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc14ffad
je 0x1400d25ea
mov eax, dword [0x141dd7568]
xor edx, edx
div dword [0x141dd756c]
xor eax, 0x463fb60b
imul eax, eax, 0x2281893b
or eax, 0x927fd807
cmp eax, 0x20b41ba1
jae 0x1400d2639
mov qword [rsi + 0x58], 0
mov rax, qword [r13 + 8]
mov qword [rbp - 8], rax
mov rax, qword [r13 + 0x10]
mov qword [rbp + 0x18], rax
mov r11, qword [rsi + 0x50]
mov eax, dword [0x141dd7570]
xor edx, edx
div dword [0x141dd7574]
xor eax, 0xc6e82b56
imul rax, rax, 0x4a501c3
shr rax, 0x3a
add eax, 0xb80aea15
mov rcx, qword [rsi + 0x58]
mov qword [rsi + 0x58], 0
cmp eax, 0xb031ebb9
jb 0x1400d264d
test rcx, rcx
je 0x1400d2769
xor ebx, ebx
mov edi, 0x933d2531
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
mov qword [rbp + 0x40], rcx
jmp 0x1400d26ae
inc rdx
cmp rdx, rcx
je 0x1400d2769
mov rax, rdx
shl rax, 5
cmp qword [r11 + rax], 0
je 0x1400d26a2
mov qword [rbp + 0x88], rdx
mov r12, r11
add rax, r11
mov r14, qword [rax + 8]
mov r15, qword [0x141ddb260]
mov eax, dword [0x141dd7580]
mov ecx, dword [0x141dd7584]
add eax, ecx
add eax, 0xeba45922
and eax, 0x4b48c0a7
cmp eax, 0x9d0c849e
jne 0x1400d2710
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call r13
add rsp, 0x20
nop word cs:[rax + rax]
mov esi, dword [0x141dd7588]
and esi, dword [0x141dd758c]
imul rsi, rdi
shr rsi, 0x3e
or esi, 0xcc01d4bc
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call r13
add rsp, 0x20
cmp esi, 0x8ee3135f
jb 0x1400d2710
mov r11, r12
mov rcx, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x88]
nop word cs:[rax + rax]
test bl, bl
jne 0x1400d2760
jmp 0x1400d26a2
mov rax, qword [rbp - 8]
mov rcx, qword [rbp + 0x18]
lea r14, [rax + rcx*2]
mov eax, 0xa543d423
mov ecx, dword [0x141dd7578]
sub ecx, dword [0x141dd757c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xc01540b2
cmp ecx, 0xfc116b67
ja 0x1400d277a
xor edx, edx
mov esi, 0xa2084d4f
mov r15d, 0xb41ed691
xor ebx, ebx
xor ecx, ecx
mov rdi, qword [rbp + 0x80]
mov r13, qword [rbp + 0x60]
mov r12, qword [rbp + 0x58]
mov qword [rbp + 0x88], rbx
test dl, dl
jne 0x1400d27c3
cmp rcx, qword [rbp + 0x18]
movabs rbx, 0x8000000000000000
je 0x1400d2a36
mov rax, qword [rbp - 8]
lea r9, [rax + rcx*2]
xor r8d, r8d
mov r10, r9
mov eax, dword [0x141dd7590]
xor edx, edx
div dword [0x141dd7594]
nop word [rax + rax]
mov eax, dword [0x141dd7598]
add eax, dword [0x141dd759c]
imul rax, rsi
shr rax, 0x3f
or eax, 0xa1ecbdee
cmp eax, 0x3c108f79
jb 0x1400d2800
cmp word [r10], 0
je 0x1400d2838
add r10, 2
inc r8
cmp r10, r14
jne 0x1400d27e9
jmp 0x1400d2a36
mov eax, dword [0x141dd75b0]
xor edx, edx
div dword [0x141dd75b4]
mov eax, dword [0x141dd75b8]
and eax, dword [0x141dd75bc]
imul eax, eax, 0x6d2b8af7
cmp eax, 0x8fdb118f
je 0x1400d2846
lea rax, [r8 + rcx]
cmp rax, rcx
jb 0x1400d3144
mov qword [rbp + 0x40], rax
cmp rax, qword [rbp + 0x18]
ja 0x1400d17e6
mov eax, dword [0x141dd75f0]
xor edx, edx
div dword [0x141dd75f4]
add eax, 0xc6d3f46e
imul rax, rax, 0x4c3008c1
shr rax, 0x3d
imul eax, eax, 0xe080e0d6
cmp eax, 0xf4e02730
ja 0x1400d287a
lea rax, [r9 + r8*2]
xor ecx, ecx
test cl, cl
jne 0x1400d28ab
mov rcx, r9
nop word cs:[rax + rax]
mov edx, dword [0x141dd75f8]
or edx, dword [0x141dd75fc]
add edx, 0x50ac35af
imul rdx, r15
shr rdx, 0x3f
imul edx, edx, 0x47b14bcc
cmp edx, 0x26df4db9
ja 0x1400d28c0
cmp rcx, rax
je 0x1400d2a36
mov edx, dword [0x141dd7600]
imul edx, dword [0x141dd7604]
xor edx, 0x4a712d86
add edx, 0xb1d71b98
cmp edx, 0x1b1c1a56
jb 0x1400d28f1
lea rdx, [rcx + 2]
mov r10d, dword [0x141dd7608]
or r10d, dword [0x141dd760c]
and r10d, 0xd3c66b71
add r10d, 0x6c6a3882
and r10d, 0xe8483b51
cmp r10d, 0x6b1c6ae6
je 0x1400d2916
cmp word [rcx], 0x3d
mov rcx, rdx
jne 0x1400d28c0
mov rbx, r11
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
mov rdx, r9
call fcn.14008bbc0
add rsp, 0x20
mov eax, dword [0x141dd7610]
xor edx, edx
div dword [0x141dd7614]
or eax, 0xefcfaf7f
xor eax, 0xd94c977a
cmp eax, 0x5ecfbb9
jb 0x1400d2966
mov rax, qword [rbp + 0x30]
mov rax, qword [rax]
mov r11, rbx
xor edx, edx
mov rbx, qword [rbp + 0x88]
mov ecx, dword [0x141dd7618]
or ecx, dword [0x141dd761c]
cmp ecx, 0x9e314902
je 0x1400d2998
cmp rbx, rax
jne 0x1400d29e8
sub rsp, 0x20
mov rcx, qword [rbp + 0x30]
call fcn.1400d6980
add rsp, 0x20
mov eax, dword [0x141dd7620]
sub eax, dword [0x141dd7624]
imul eax, eax, 0x594ff85c
cmp eax, 0x4aed14b4
je 0x1400d29c2
mov rax, qword [rbp + 0x90]
mov r11, qword [rax + 0x50]
xor edx, edx
mov rax, rbx
shl rax, 5
mov rcx, qword [rbp - 0x50]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r11 + rax + 0x10], xmm1
movups xmmword [r11 + rax], xmm0
inc rbx
mov rax, qword [rbp + 0x90]
mov qword [rax + 0x58], rbx
mov rax, qword [rbp + 0x40]
inc rax
mov rcx, rax
cmp rax, qword [rbp + 0x18]
jbe 0x1400d27bc
xor eax, eax
test al, al
jne 0x1400d31bb
jmp 0x1400d318b
mov eax, dword [0x141dd75c0]
add eax, dword [0x141dd75c4]
or eax, 0xfffb5d3f
imul eax, eax, 0xe26f4551
cmp eax, 0x4f3adf
je 0x1400d2a36
cmp qword [rbp], 0
mov rsi, qword [rbp + 0x90]
mov r8d, dword [rbp + 0x70]
mov r15, qword [rbp + 8]
je 0x1400d2b07
mov eax, dword [0x141dd75c8]
add eax, dword [0x141dd75cc]
shr eax, 1
mov ecx, 0x9aa2cedd
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x28ad99d7
and ecx, 0x282c11c3
cmp ecx, 0x4c622ba2
jne 0x1400d2aa4
mov rax, qword [0x141ddb260]
mov eax, dword [0x141dd75d0]
add eax, dword [0x141dd75d4]
or eax, 0x6873a6f2
xor eax, 0x7121226c
add eax, 0xe739d03a
mov rcx, qword [0x141ddb260]
cmp eax, 0x1be7cfed
jb 0x1400d2aa4
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r8d, dword [rbp + 0x70]
mov eax, dword [0x141dd75d8]
or eax, dword [0x141dd75dc]
or eax, 0xe05df4a8
add eax, 0xed260c20
xor eax, 0xa50d36ef
cmp eax, 0x8a2fe05
jbe 0x1400d2ae5
mov ecx, dword [rbp + 0x68]
nop word [rax + rax]
mov eax, dword [0x141dd7628]
imul eax, dword [0x141dd762c]
and eax, 0x8f71b2ba
xor eax, 0x1fe0c2c0
add eax, 0xd01ee7fd
cmp eax, 0x1c9828ea
jb 0x1400d2b10
nop word cs:[rax + rax]
mov eax, dword [0x141dd7630]
imul eax, dword [0x141dd7634]
xor eax, 0x5d1589b3
add eax, 0x27673aff
cmp eax, 0xdf19ae9d
ja 0x1400d2b40
lea r9, [rsi + 0x98]
lea r10, [rsi + 0xb8]
mov r14, qword [rbp + 0x20]
mov eax, dword [0x141dd7638]
sub eax, dword [0x141dd763c]
add eax, 0x84b34fc7
and eax, 0xd40031
cmp eax, 0xecc96951
ja 0x1400d2b70
test r8d, r8d
je 0x1400d2b9d
cmp r8d, 1
jne 0x1400d2ba2
mov r11b, 1
jmp 0x1400d2bb3
xor r11d, r11d
jmp 0x1400d2bb3
cmp r8d, 2
jne 0x1400d3113
cmp qword [r9], rbx
sete r11b
mov rsi, qword [rbp + 0x78]
nop word [rax + rax]
mov eax, dword [0x141dd7648]
imul eax, dword [0x141dd764c]
add eax, 0x4d30b4eb
and eax, 0x2d5f014f
cmp eax, 0xc82df5af
je 0x1400d2bc0
test ecx, ecx
je 0x1400d2c56
cmp ecx, 1
je 0x1400d2c8a
mov rax, qword [r10]
movabs r8, 0x8000000000000000
nop dword [rax + rax]
mov ecx, dword [0x141dd7650]
add ecx, dword [0x141dd7654]
imul edx, ecx, 0x4692091e
add edx, 0xc955bdef
cmp rax, r8
sete cl
cmp edx, 0xab16c82f
ja 0x1400d2c00
nop word cs:[rax + rax]
mov eax, dword [0x141dd7658]
xor edx, edx
div dword [0x141dd765c]
or eax, 0xc055541
add eax, 0xd7d73eb1
or eax, 0xb9880dc3
cmp eax, 0xdc08a9d9
je 0x1400d2c30
jmp 0x1400d2c58
xor ecx, ecx
or cl, r11b
nop dword [rax + rax]
mov eax, dword [0x141dd7660]
and eax, dword [0x141dd7664]
and eax, 0xc4c58751
add eax, 0x86d4f0af
and eax, 0xc3034bf2
cmp eax, 0x45ec4f96
ja 0x1400d2c60
test cl, cl
je 0x1400d3360
mov dword [rbp + 0x30], r11d
mov qword [rbp + 0x40], r10
mov qword [rbp + 0x88], r9
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400d2ca0
mov eax, dword [0x141dd7668]
add eax, dword [0x141dd766c]
or eax, 0x75eee170
xor eax, 0x24e774d9
add eax, 0xdb98a768
cmp eax, 0x321a1cb2
jbe 0x1400d2ce0
sub rsp, 0x20
mov rcx, qword [rbp - 0x30]
mov rdx, rdi
mov r8, r13
mov r9, rsi
call fcn.1400d5a50
add rsp, 0x20
mov r12, r13
mov r13, rsi
mov rbx, rdi
mov rdi, qword [rbp - 0x30]
nop dword [rax]
mov eax, dword [0x141dd7670]
xor edx, edx
div dword [0x141dd7674]
mov esi, eax
add esi, 0xd8c83008
and esi, 0xaaa7ea0f
add esi, 0xda1261a
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r12
mov r9, r13
call fcn.1400d5a50
add rsp, 0x20
cmp esi, 0x5854c318
jb 0x1400d2cf0
xor eax, eax
mov r12, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp + 0x88]
movabs rdi, 0x8000000000000000
nop
test al, al
jne 0x1400d2d50
mov r10, qword [rcx]
cmp r10, rdi
jne 0x1400d2df4
mov rdx, qword [rbp + 0x90]
nop word [rax + rax]
mov eax, dword [0x141dd7690]
and eax, dword [0x141dd7694]
and eax, 0x2a43600
or eax, 0xf153c897
imul eax, eax, 0xde0a27b1
cmp eax, 0xef17e4a8
ja 0x1400d2d70
mov rax, qword [r8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7698]
xor ecx, dword [0x141dd769c]
and ecx, 0x6401040
xor ecx, 0x7b6d2911
cmp ecx, 0x6923feaf
jb 0x1400d2da0
shl rax, 1
test rax, rax
je 0x1400d3238
mov eax, dword [0x141dd76a0]
imul eax, dword [0x141dd76a4]
imul eax, eax, 0xf063f319
add eax, 0x29b940dd
cmp eax, 0x3df582c6
jb 0x1400d3218
jmp 0x1400d31e8
mov r13, qword [rcx + 8]
mov rcx, qword [rcx + 0x10]
test rcx, rcx
mov qword [rbp + 0x60], r10
je 0x1400d2e4d
lea r8, [rcx + rcx]
xor ebx, ebx
mov r9, r13
cmp word [r13 + rbx*2], 0
je 0x1400d2e4f
mov eax, dword [0x141dd7678]
xor edx, edx
div dword [0x141dd767c]
add eax, 0xe6388561
and eax, 0xc841e66c
xor eax, 0x2dbb2855
cmp eax, 0xdcd0d989
jb 0x1400d2e17
add r9, 2
inc rbx
add r8, 0xfffffffffffffffe
jne 0x1400d2e0e
mov rbx, rcx
jmp 0x1400d2e4f
xor ebx, ebx
mov eax, dword [0x141dd7680]
sub eax, dword [0x141dd7684]
imul rax, rax, 0x890a6f1
shr rax, 0x38
imul eax, eax, 0x73c4b298
imul rax, rax, 0x68c6c247
shr rax, 0x3e
cmp eax, 0x20ba3f81
jne 0x1400d2eb4
sub rsp, 0x20
mov rsi, qword [rbp - 0x10]
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call fcn.14008bbc0
add rsp, 0x20
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x68]
mov r9, qword [rbp + 0x40]
call fcn.1400d6c80
add rsp, 0x20
mov rsi, qword [rbp - 0x10]
mov r15, qword [rbp + 0x40]
nop dword [rax]
mov edi, dword [0x141dd7688]
add edi, dword [0x141dd768c]
and edi, 0x98061250
or edi, 0x67d1a486
mov eax, 0x9f014f95
imul rdi, rax
shr rdi, 0x3e
sub rsp, 0x20
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call fcn.14008bbc0
add rsp, 0x20
mov r14, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x68]
mov rdx, r14
mov r9, r15
call fcn.1400d6c80
add rsp, 0x20
cmp edi, 0x380e61da
je 0x1400d2ec0
mov qword [rbp + 0x78], r13
cmp byte [rbp + 0x30], 0
je 0x1400d3075
mov rcx, qword [rbp - 0x10]
mov r15, qword [rbp + 8]
mov eax, dword [0x141dd76c0]
xor eax, dword [0x141dd76c4]
add eax, 0x505a4f56
and eax, 0xa147de09
cmp eax, 0x3c60167d
ja 0x1400d2f37
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
mov r13, qword [rbp - 0x68]
movups xmmword [r13 + 0x10], xmm1
movups xmmword [r13], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, dword [0x141dd76c8]
and eax, dword [0x141dd76cc]
imul eax, eax, 0x4995eafb
xor eax, 0xc86bfa14
imul rax, rax, 0x7abafa27
shr rax, 0x3c
cmp eax, 0x451ce9b1
ja 0x1400d2f70
mov rax, qword [rcx]
shl rax, 1
test rax, rax
je 0x1400d305e
mov eax, dword [0x141dd76d0]
imul eax, dword [0x141dd76d4]
imul eax, eax, 0x5b795a9a
add eax, 0x1c275f37
and eax, 0xad52a298
cmp eax, 0x8bfeebbf
jbe 0x1400d2ff1
mov rax, qword [rbp + 0x90]
mov r8, qword [rax + 0xa0]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [rbp + 0x90]
mov ebx, dword [0x141dd76d8]
imul ebx, dword [0x141dd76dc]
or ebx, 0xef7dbf7e
add ebx, 0x48fea2c9
mov r8, qword [r14 + 0xa0]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call rdi
add rsp, 0x20
cmp ebx, 0x7d3a58f3
ja 0x1400d2fff
mov rcx, qword [rbp + 0x88]
mov eax, dword [0x141dd76e0]
or eax, dword [0x141dd76e4]
xor eax, 0x1d8a2012
and eax, 0x9deb32ff
cmp eax, 0x4c87427c
je 0x1400d3041
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov r13, qword [rbp + 0x78]
jmp 0x1400d30b0
mov rax, qword [rbp - 0x10]
cmp qword [rax], 0
mov r15, qword [rbp + 8]
mov r13, qword [rbp + 0x78]
je 0x1400d30b0
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd76e8]
or eax, dword [0x141dd76ec]
xor eax, 0x6f2df6b2
add eax, 0xb53e95d4
imul rax, rax, 0x22509347
shr rax, 0x3b
cmp eax, 0x53eff68a
ja 0x1400d30b0
mov r14, qword [rbp + 0x20]
nop dword [rax]
mov eax, dword [0x141dd76f0]
add eax, dword [0x141dd76f4]
imul eax, eax, 0x10bd27c8
cmp eax, 0xf951bf71
je 0x1400d30e0
cmp qword [rbp + 0x60], 0
je 0x1400d331a
xor eax, eax
test al, al
jne 0x1400d3264
jmp 0x1400d3240
mov ecx, 0x9f6ab9dd
mov eax, dword [0x141dd7640]
xor edx, edx
div dword [0x141dd7644]
add eax, 0xee5288bf
imul rax, rcx
shr rax, 0x3e
or eax, 0xc090a582
cmp eax, 0xae7b844b
je 0x1400d3118
jmp 0x1400d17e6
mov eax, dword [0x141dd75e0]
xor edx, edx
div dword [0x141dd75e4]
or eax, 0x200412d4
and eax, 0x671d1adc
cmp eax, 0x60cc457
jne 0x1400d3165
ud2
mov eax, dword [0x141dd75e8]
imul eax, dword [0x141dd75ec]
imul eax, eax, 0xd1ab0af8
add eax, 0x849361b4
ud2
mov eax, dword [0x141dd75a0]
xor edx, edx
div dword [0x141dd75a4]
imul eax, eax, 0x839c1dd9
and eax, 0xaee96679
mov ecx, 0xd2bb398f
imul rcx, rax
shr rcx, 0x3f
ud2
ud2
mov eax, dword [0x141dd76a8]
or eax, dword [0x141dd76ac]
or eax, 0x6f6417b3
add eax, 0xb0a07c1
and eax, 0xc256cab0
mov r8, qword [rdx + 0xa0]
mov rcx, qword [0x141ddb260]
cmp eax, 0xd9bf7039
jbe 0x1400d3221
mov rax, qword [0x141ddb260]
jmp 0x1400d31e8
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r8, qword [rbp + 0x88]
xor eax, eax
test al, al
jne 0x1400d32b8
jmp 0x1400d3292
mov eax, dword [0x141dd76f8]
xor eax, dword [0x141dd76fc]
or eax, 0x681f761f
add eax, 0xeb60d8e5
mov rdi, qword [0x141ddb260]
cmp eax, 0x8ff0ba83
jbe 0x1400d326d
mov rax, qword [0x141ddb260]
jmp 0x1400d3240
mov eax, dword [0x141dd7700]
sub eax, dword [0x141dd7704]
and eax, 0xc0a94c8e
imul eax, eax, 0x3542a19f
xor eax, 0x136f9550
cmp eax, 0x7c20ca4b
ja 0x1400d3302
jmp 0x1400d32e6
mov eax, dword [0x141dd76b0]
and eax, dword [0x141dd76b4]
xor eax, 0x20a169a1
and eax, 0xe0ad69a5
imul eax, eax, 0xb1432a75
mov qword [r8], rdi
cmp eax, 0xe98046a6
jbe 0x1400d32c0
mov qword [r8], rdi
jmp 0x1400d3292
mov eax, dword [0x141dd76b8]
add eax, dword [0x141dd76bc]
imul rax, rax, 0x398e6a41
shr rax, 0x3d
imul eax, eax, 0x889df4ab
cmp eax, 0xa4e89750
je 0x1400d32c0
jmp 0x1400d331a
sub rsp, 0x20
xor ebx, ebx
mov rcx, rdi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test bl, bl
je 0x1400d331a
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d32e6
mov rdi, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7708]
and eax, dword [0x141dd770c]
imul eax, eax, 0x7e7f8b85
and eax, 0xff8c0a87
add eax, 0x7b65303a
cmp eax, 0x558b6f0f
jb 0x1400d3330
nop word cs:[rax + rax]
mov eax, dword [0x141dd7710]
xor edx, edx
div dword [0x141dd7714]
and eax, 0x68a9de06
add eax, 0x1ccc9912
imul rcx, rax, 0x2e7abc3b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x51818fa0
je 0x1400d3360
mov r13, qword [rbp + 0x38]
nop word [rax + rax]
mov eax, dword [0x141dd7718]
sub eax, dword [0x141dd771c]
and eax, 0xc23bef3d
imul eax, eax, 0xe4b2d53e
cmp eax, 0x1686377b
jbe 0x1400d33a0
jmp 0x1400d074a
mov eax, dword [0x141dd77a8]
and eax, dword [0x141dd77ac]
or eax, 0x61fbafb3
imul edi, eax, 0x6079157c
sub rsp, 0x20
call fcn.1401003dc
add rsp, 0x20
cmp edi, 0x8a1fcc87
jne 0x1400d33fe
sub rsp, 0x20
call fcn.1401003dc
add rsp, 0x20
jmp 0x1400d33c3
movzx eax, byte [0x141ddb274]
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x1400d3410
test al, al
mov rdx, qword [rbp + 0x80]
je 0x1400d35d3
sub rsp, 0x20
mov rcx, qword [rbp - 0x60]
call fcn.1400d6380
add rsp, 0x20
mov rax, qword [rbp + 0x90]
mov rsi, qword [rax + 0x38]
mov rdi, qword [rax + 0x40]
test rdi, rdi
mov r11d, dword [rbp + 0x70]
je 0x1400d34fb
xor ebx, ebx
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r13d, r13d
nop dword [rax]
mov eax, dword [0x141dd7868]
xor edx, edx
div dword [0x141dd786c]
or eax, 0x8904253b
and eax, 0xdb64253f
add eax, 0x53fd662d
cmp eax, 0xd522a3ee
jb 0x1400d3460
mov rax, r13
shl rax, 5
cmp qword [rsi + rax], 0
je 0x1400d34c4
add rax, rsi
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call r15
mov r11d, dword [rbp + 0x70]
add rsp, 0x20
nop word cs:[rax + rax]
test bl, bl
jne 0x1400d34c0
inc r13
nop word [rax + rax]
mov eax, dword [0x141dd7870]
or eax, dword [0x141dd7874]
add eax, 0x383bb2ed
or eax, 0xa826f431
and eax, 0xfdaefe7f
cmp eax, 0x129db8ea
jb 0x1400d34d0
cmp r13, rdi
jne 0x1400d3460
mov rdi, qword [rbp + 0x78]
nop
mov eax, dword [0x141dd7878]
xor eax, dword [0x141dd787c]
add eax, 0xa331f5df
xor eax, 0x5043082d
imul eax, eax, 0x569172e5
cmp eax, 0xa0b7fa97
je 0x1400d3500
cmp qword [rdi], 0
movabs rbx, 0x8000000000000000
je 0x1400d35a3
mov eax, dword [0x141dd7880]
or eax, dword [0x141dd7884]
add eax, 0x70aa4a8d
or eax, 0xe04962d0
cmp eax, 0x30cf8621
jae 0x1400d3557
mov rax, qword [0x141ddb260]
mov eax, 0xb1ddc8d3
nop dword [rax]
mov edx, dword [0x141dd7888]
xor edx, dword [0x141dd788c]
add edx, 0x95aa44c
imul rdx, rax
shr rdx, 0x3e
and edx, 1
mov rcx, qword [0x141ddb260]
cmp edx, 0x33346deb
ja 0x1400d3560
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r11d, dword [rbp + 0x70]
mov eax, dword [0x141dd7890]
xor eax, dword [0x141dd7894]
xor eax, 0x40769005
imul rax, rax, 0x63298f9
shr rax, 0x3a
cmp eax, 0x6f8a1129
mov rcx, qword [rbp - 0x60]
ja 0x1400d368a
jmp 0x1400d3672
mov rbx, r14
mov eax, dword [0x141dd77b0]
and eax, dword [0x141dd77b4]
imul rax, rax, 0x59ffee1b
shr rax, 0x3e
imul eax, eax, 0xfab0d589
add eax, 0xcb8d4cb5
cmp eax, 0xda45db76
mov r14, rdx
ja 0x1400d36d2
jmp 0x1400d369a
mov eax, dword [0x141dd7ba8]
mov ecx, dword [0x141dd7bac]
add eax, ecx
add eax, 0xa3e2f740
xor eax, 0x37b1f7b7
imul ebx, eax, 0xa1bff8e0
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
cmp ebx, 0xcde9e7c2
jbe 0x1400d3663
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
jmp 0x1400d360b
xor eax, eax
test al, al
jne 0x1400d5049
jmp 0x1400d5002
mov rax, qword [rcx + 0x10]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdi], xmm0
xor eax, eax
test al, al
je 0x1400d3a40
mov rax, qword [rcx + 0x10]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdi], xmm0
jmp 0x1400d3672
mov eax, dword [0x141dd77b8]
xor eax, dword [0x141dd77bc]
and eax, 0x820446
imul edi, eax, 0x4194b756
sub rsp, 0x20
mov rcx, r13
mov rdx, r14
mov r8, r15
mov r9, rsi
call fcn.1400d5a50
add rsp, 0x20
cmp edi, 0xcedb48d8
jbe 0x1400d36ed
sub rsp, 0x20
mov rcx, r13
mov rdx, r14
mov r8, r15
mov r9, rsi
call fcn.1400d5a50
add rsp, 0x20
jmp 0x1400d369a
mov rdi, qword [r13]
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x1400d374d
mov eax, dword [0x141dd7800]
xor edx, edx
div dword [0x141dd7804]
imul eax, eax, 0xe6e3cba2
add eax, 0x2d57342c
cmp eax, 0x85d330c9
mov rcx, qword [rbp - 0x18]
mov r14, rbx
jbe 0x1400d372e
mov qword [rcx], 0
xor eax, eax
mov qword [rcx], 0
test al, al
jne 0x1400d3730
mov qword [rcx + 8], 8
mov qword [rcx + 0x10], 0
jmp 0x1400d3786
mov eax, dword [0x141dd77c0]
xor eax, dword [0x141dd77c4]
imul rax, rax, 0x16dd8db5
shr rax, 0x3c
or eax, 0xddb21422
imul eax, eax, 0x4acb0ee2
cmp eax, 0xd9378891
mov r15, qword [rbp - 0x18]
mov r14, rbx
ja 0x1400d453d
jmp 0x1400d4506
mov rcx, qword [rbp + 0x90]
nop dword [rax]
mov eax, dword [0x141dd7808]
and eax, dword [0x141dd780c]
add eax, 0xa8922f51
and eax, 0x400e310
cmp eax, 0x831de5a2
ja 0x1400d3790
mov rsi, qword [rcx + 0x38]
mov rdi, qword [rcx + 0x40]
test rdi, rdi
je 0x1400d3894
xor ebx, ebx
mov r15d, 0xb652e473
mov r13d, 0xd7005537
nop dword [rax]
mov eax, dword [0x141dd7810]
add eax, dword [0x141dd7814]
imul rax, r15
shr rax, 0x3f
xor eax, 0x96a3ff63
imul eax, eax, 0xa53bdbf7
cmp eax, 0x6851abba
ja 0x1400d37d0
mov rax, rbx
shl rax, 5
cmp qword [rsi + rax], 0
je 0x1400d384e
add rax, rsi
nop word [rax + rax]
mov ecx, dword [0x141dd7818]
imul ecx, dword [0x141dd781c]
imul rcx, r13
shr rcx, 0x3f
or ecx, 0x4e707a10
cmp ecx, 0x797080bf
ja 0x1400d3810
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
inc rbx
mov eax, dword [0x141dd7820]
xor edx, edx
div dword [0x141dd7824]
nop
mov eax, dword [0x141dd7828]
xor edx, edx
div dword [0x141dd782c]
imul eax, eax, 0x8d206506
xor eax, 0x4e1fbd72
imul rax, rax, 0x72ef84a5
shr rax, 0x3e
cmp eax, 0x460ecfb1
ja 0x1400d3860
cmp rbx, rdi
jne 0x1400d37d0
mov r9, qword [rbp + 0x78]
mov rcx, qword [r9]
nop dword [rax + rax]
mov eax, dword [0x141dd7830]
add eax, dword [0x141dd7834]
or eax, 0x7550dcd7
add eax, 0x9041d2f7
and eax, 0x94f6e2e6
cmp eax, 0x79521597
jb 0x1400d38a0
mov r8, qword [rbp - 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7838]
xor edx, edx
div dword [0x141dd783c]
or eax, 0x46a12a3e
add eax, 0x2d065df5
or eax, 0x64af487f
cmp eax, 0x2f1a8aa7
jb 0x1400d38d0
test rcx, rcx
movabs rbx, 0x8000000000000000
je 0x1400d39d3
mov r15, qword [0x141ddb260]
mov eax, dword [0x141dd7840]
and eax, dword [0x141dd7844]
add eax, 0x6488a14f
mov ecx, 0xc91eb95b
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xdd82f4a6
jne 0x1400d394a
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7848]
sub eax, dword [0x141dd784c]
xor eax, 0x31865e43
imul rbx, rax, 0x46e55e05
shr rbx, 0x3e
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rsi
call rdi
add rsp, 0x20
cmp ebx, 0xc6157d50
ja 0x1400d3960
movabs rbx, 0x8000000000000000
mov r8, qword [rbp - 0x18]
mov r9, qword [rbp + 0x78]
nop dword [rax + rax]
mov eax, dword [0x141dd7850]
or eax, dword [0x141dd7854]
and eax, 0x4d544c39
imul eax, eax, 0x4cfe49bf
add eax, 0x50c44a62
cmp eax, 0xec624742
ja 0x1400d39b0
mov rax, qword [r8 + 0x10]
mov qword [r9 + 0x10], rax
movups xmm0, xmmword [r8]
movups xmmword [r9], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7858]
sub eax, dword [0x141dd785c]
add eax, 0xcc1d8c48
or eax, 0x3a2aa6cc
add eax, 0xb1f97189
cmp eax, 0x52e81043
jb 0x1400d39f0
mov r11d, dword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7860]
xor edx, edx
div dword [0x141dd7864]
imul eax, eax, 0xa4a10cb0
add eax, 0xcd9bb950
cmp eax, 0xf010864a
jae 0x1400d3a20
mov qword [rbp + 0x60], r14
mov rsi, qword [rbp + 0x90]
lea r9, [rsi + 0x48]
nop
mov eax, dword [0x141dd7898]
sub eax, dword [0x141dd789c]
imul eax, eax, 0xe042f21e
xor eax, 0xf4a5faae
add eax, 0xb9922474
cmp eax, 0x2907760
jb 0x1400d3a50
mov eax, 0xa335acf5
mov r10, qword [rbp - 0x48]
mov r14, qword [rbp - 0x20]
mov edx, dword [rbp + 0x48]
mov r13, qword [rbp + 0x88]
nop word [rax + rax]
mov ecx, dword [0x141dd78a0]
sub ecx, dword [0x141dd78a4]
xor ecx, 0xfbd59185
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x162d2105
ja 0x1400d3a90
test edx, edx
mov ecx, dword [rbp + 0x68]
je 0x1400d46de
cmp edx, 1
je 0x1400d3afc
cmp edx, 2
jne 0x1400d3f20
mov rax, qword [rsi + 0x58]
nop
mov ecx, dword [0x141dd78b0]
or ecx, dword [0x141dd78b4]
add ecx, 0x58147322
or ecx, 0x894466dc
cmp ecx, 0xc0ad5d64
jb 0x1400d3ad0
test rax, rax
mov ecx, dword [rbp + 0x68]
jne 0x1400d46de
mov qword [rbp + 0x48], r9
mov rdi, qword [rbp - 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dd78b8]
xor edx, edx
div dword [0x141dd78bc]
or eax, 0xd9fff7bf
cmp eax, 0x9da13742
je 0x1400d3b10
sub rsp, 0x20
mov r9d, 0x30
mov r15, qword [rbp + 0x80]
mov rcx, r15
mov rdx, r13
mov r8, r14
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
je 0x1400d3c60
mov r9, qword [r14]
sub r9, r13
add r9, qword [r14 + 0x18]
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
mov r8, r13
call fcn.1400d5a50
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd78d0]
add eax, dword [0x141dd78d4]
xor eax, 0x1553a630
shr eax, 3
imul rax, rax, 0x128204c7
shr rax, 0x39
add eax, 0xbc67acff
cmp eax, 0xf5e8d8bb
ja 0x1400d3b80
mov rax, qword [rdi]
cmp rax, rbx
je 0x1400d3ca8
mov qword [rbp - 0x40], rax
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d3bc0
mov eax, dword [0x141dd7920]
or eax, dword [0x141dd7924]
imul eax, eax, 0x58117271
xor eax, 0x7dc393f3
cmp eax, 0x3d6c7dfa
jae 0x1400d3bea
mov qword [rsi + 0x58], 0
mov rax, qword [rdi + 8]
mov qword [rbp + 0x10], rax
mov rax, qword [rdi + 0x10]
mov qword [rbp - 0x20], rax
mov rax, qword [rsi + 0x50]
mov qword [rbp + 0x88], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd7928]
imul eax, dword [0x141dd792c]
add eax, 0x37451074
or eax, 0x3d813715
mov r14, qword [rsi + 0x58]
mov qword [rsi + 0x58], 0
cmp eax, 0xf7806231
ja 0x1400d3c10
test r14, r14
je 0x1400d4021
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d3de3
mov eax, dword [0x141dd78c0]
imul eax, dword [0x141dd78c4]
imul eax, eax, 0xe008b63c
add eax, 0xa1b2a420
and eax, 0x6392d380
cmp eax, 0x671bd1db
ja 0x1400d3c60
nop word cs:[rax + rax]
mov eax, dword [0x141dd78c8]
add eax, dword [0x141dd78cc]
or eax, 0x67e3cc00
cmp eax, 0x8e797b34
je 0x1400d3c90
mov r14, qword [rsi + 0x50]
mov rax, qword [rsi + 0x58]
mov qword [rbp + 0x88], rax
mov eax, 0x81db442d
nop dword [rax]
mov ecx, dword [0x141dd78d8]
sub ecx, dword [0x141dd78dc]
or ecx, 0x3ad32d3e
xor ecx, 0x44196396
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x14864787
je 0x1400d3cc0
cmp qword [rbp + 0x88], 0
je 0x1400d3f4e
xor ebx, ebx
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
nop word cs:[rax + rax]
mov rax, rsi
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400d3d96
add rax, r14
nop word cs:[rax + rax]
test bl, bl
jne 0x1400d3d30
mov r15, qword [rax + 8]
mov eax, dword [0x141dd78e0]
and eax, dword [0x141dd78e4]
cmp eax, 0xbe4663c
je 0x1400d3db0
nop dword [rax + rax]
mov edi, dword [0x141dd78e8]
xor edi, dword [0x141dd78ec]
or edi, 0x80309608
and edi, 0xba33d6e8
shr edi, 1
mov eax, 0x85d037e9
imul rdi, rax
shr rdi, 0x3d
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r13
add rsp, 0x20
cmp edi, 0x21d244
ja 0x1400d3db0
inc rsi
test bl, bl
jne 0x1400d3d99
cmp rsi, qword [rbp + 0x88]
jne 0x1400d3d10
jmp 0x1400d3f4e
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r13
add rsp, 0x20
jmp 0x1400d3d50
inc rdi
cmp rdi, r14
mov rsi, qword [rbp + 0x90]
je 0x1400d4021
mov rcx, qword [rbp + 0x88]
nop word [rax + rax]
mov eax, dword [0x141dd7940]
and eax, dword [0x141dd7944]
add eax, 0x118ecfe8
imul rax, rax, 0x4ebe818b
shr rax, 0x3e
or eax, 0x2a2c05f6
cmp eax, 0xd988dac1
ja 0x1400d3df0
mov rax, rdi
shl rax, 5
cmp qword [rcx + rax], 0
je 0x1400d3dd0
add rax, qword [rbp + 0x88]
mov ecx, dword [0x141dd7948]
sub ecx, dword [0x141dd794c]
imul ecx, ecx, 0xba31ab30
add ecx, 0x89409de3
imul rcx, rcx, 0x5dad1b21
shr rcx, 0x3e
cmp ecx, 0xb3923290
ja 0x1400d3e2d
mov r15, qword [rax + 8]
mov eax, dword [str._uB6]
or eax, dword [0x141dd7954]
or eax, 0x29e5388f
cmp eax, 0xadbeca82
jne 0x1400d3e80
mov rax, qword [0x141ddb260]
nop dword [rax + rax]
mov eax, dword [0x141dd7958]
sub eax, dword [0x141dd795c]
xor eax, 0x8aebb133
add eax, 0xb7f31826
mov r13, qword [0x141ddb260]
cmp eax, 0x3cc6e637
ja 0x1400d3e80
mov eax, dword [0x141dd7960]
and eax, dword [0x141dd7964]
add eax, 0xbddf2124
and eax, 0xf610e750
add eax, 0x20bded3a
cmp eax, 0xcc48c4c0
jae 0x1400d3ee0
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r15
call rbx
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd7968]
or eax, dword [0x141dd796c]
and eax, 0x9b2a64aa
add eax, 0xbb7fca21
imul rsi, rax, 0x52baf55b
shr rsi, 0x3d
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r15
call rbx
add rsp, 0x20
cmp esi, 0xb6d310d6
ja 0x1400d3ee0
jmp 0x1400d3dd0
mov eax, dword [0x141dd78a8]
imul eax, dword [0x141dd78ac]
imul rax, rax, 0x9184d19
shr rax, 0x38
or eax, 0xefbee9e0
xor eax, 0x8cdf6f23
cmp eax, 0x35dfeb83
jb 0x1400d3f20
jmp 0x1400d17e6
xor eax, eax
mov r11d, dword [rbp + 0x70]
mov rdi, qword [rbp + 0x48]
nop dword [rax + rax]
test al, al
jne 0x1400d3f60
mov rcx, qword [rdi]
mov rsi, qword [rbp + 0x90]
movabs rbx, 0x8000000000000000
nop dword [rax + rax]
mov eax, dword [0x141dd78f0]
xor edx, edx
div dword [0x141dd78f4]
imul eax, eax, 0xe5c9a33d
add eax, 0xb8802698
cmp eax, 0x98daaece
jb 0x1400d3f80
test rcx, rcx
je 0x1400d3ff2
mov eax, dword [0x141dd78f8]
add eax, dword [0x141dd78fc]
imul eax, eax, 0x316d4391
xor eax, 0xb11520d9
cmp eax, 0x4cc92845
jbe 0x1400d3fca
mov rax, qword [0x141ddb260]
xor eax, eax
nop dword [rax]
mov rcx, qword [0x141ddb260]
test al, al
jne 0x1400d3fd0
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r11d, dword [rbp + 0x70]
mov eax, dword [0x141dd7900]
imul eax, dword [0x141dd7904]
or eax, 0x273288cc
add eax, 0xeba56e21
and eax, 0x5ab355be
cmp eax, 0x22344c3e
mov ecx, dword [rbp + 0x68]
je 0x1400d46a5
jmp 0x1400d4681
mov r10, qword [rbp - 0x48]
mov r14, qword [rbp - 0x70]
mov r8, qword [rbp + 0x10]
mov r11, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7930]
and eax, dword [0x141dd7934]
or eax, 0x7609e6be
xor eax, 0xe812fa02
imul eax, eax, 0x8236ccbe
cmp eax, 0xb772c632
jb 0x1400d4040
lea rdi, [r8 + r11*2]
movabs rbx, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141dd7938]
add eax, dword [0x141dd793c]
and eax, 0xfd1ae1f7
add eax, 0xc80c741b
cmp eax, 0x3bae73ba
jb 0x1400d4080
xor r15d, r15d
xor eax, eax
cmp rax, r11
je 0x1400d43f8
lea rdx, [r8 + rax*2]
xor ecx, ecx
xor r13d, r13d
mov qword [rbp + 0x78], rdx
nop dword [rax + rax]
mov r9d, dword [0x141dd7970]
sub r9d, dword [0x141dd7974]
xor r9d, 0xc5d7fc27
imul r9d, r9d, 0x439a39f7
imul r9, r9, 0x13b181b
shr r9, 0x36
cmp r9d, 0x525ad663
je 0x1400d40c0
cmp word [rdx], 0
je 0x1400d4170
add rdx, 2
inc r13
nop dword [rax]
mov r9d, dword [0x141dd7978]
imul r9d, dword [0x141dd797c]
imul r9d, r9d, 0xdf07cb99
add r9d, 0x1b3df866
and r9d, 0x561451c9
cmp r9d, 0x49809e66
ja 0x1400d4100
nop dword [rax]
mov r9d, dword [0x141dd7980]
or r9d, dword [0x141dd7984]
and r9d, 0xb046c888
imul r9d, r9d, 0x521dd2ba
and r9d, 0x96a7ed70
cmp r9d, 0xa8a337c2
je 0x1400d4130
add rcx, 2
cmp rdx, rdi
jne 0x1400d40c0
jmp 0x1400d43f8
mov edx, dword [0x141dd7988]
and edx, dword [0x141dd798c]
imul edx, edx, 0xee30ea40
or edx, 0xbadfbfe2
cmp edx, 0x955da9f5
jb 0x1400d4170
lea r9, [rax + r13]
cmp r9, rax
jb 0x1400d4491
cmp r9, r11
ja 0x1400d44a0
mov r11, qword [rbp + 0x78]
mov eax, dword [0x141dd79b0]
sub eax, dword [0x141dd79b4]
mov edx, 0x8049c281
imul rax, rdx
shr rax, 0x3c
or eax, 0x746fa013
cmp eax, 0x43e6cc88
jb 0x1400d41aa
nop
mov eax, dword [0x141dd79b8]
xor edx, edx
div dword [0x141dd79bc]
and eax, 0x10
cmp eax, 0x29724710
je 0x1400d41d0
mov rax, r11
nop dword [rax + rax]
mov edx, dword [0x141dd79d8]
add edx, dword [0x141dd79dc]
or edx, 0x3969976f
add edx, 0xda7d1609
or edx, 0xbfb57634
cmp edx, 0xe80fdbca
je 0x1400d41f0
test rcx, rcx
je 0x1400d43f8
mov edx, dword [0x141dd79e0]
sub edx, dword [0x141dd79e4]
imul rdx, rdx, 0xa04c293
shr rdx, 0x3a
add edx, 0xabc5b59f
xor edx, 0x8d5daf5c
cmp edx, 0x3400e3b2
ja 0x1400d421f
add rcx, 0xfffffffffffffffe
cmp word [rax], 0x3d
lea rax, [rax + 2]
mov rdx, qword [rbp + 0x78]
jne 0x1400d41f0
mov qword [rbp + 0x40], r9
mov qword [rbp + 0x28], rdi
mov rdi, r10
mov eax, dword [0x141dd79e8]
sub eax, dword [0x141dd79ec]
add eax, 0x3218d4a0
and eax, 0x5ca5dc6
cmp eax, 0xac124e1b
je 0x1400d43dc
mov esi, dword [0x141dd79f0]
or esi, dword [0x141dd79f4]
add esi, 0xa8d22d34
and esi, 0xb5cbfc7a
xor esi, 0xd1dc0bb
sub rsp, 0x20
mov rcx, r14
mov r8, r13
call fcn.14008bbc0
mov rdx, qword [rbp + 0x78]
add rsp, 0x20
cmp esi, 0xf1c34653
ja 0x1400d43dc
mov eax, dword [0x141dd79f8]
xor edx, edx
div dword [0x141dd79fc]
add eax, 0x36769fa
imul rax, rax, 0x7966f4cd
shr rax, 0x3e
xor eax, 0xd12b1481
cmp eax, 0x47bd6ee0
jb 0x1400d42c9
mov rax, qword [rbp + 0x48]
cmp r15, qword [rax]
mov rsi, qword [rbp + 0x90]
mov r8, qword [rbp + 0x88]
jne 0x1400d431f
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
call fcn.1400d6980
add rsp, 0x20
mov r8, qword [rsi + 0x50]
mov eax, dword [0x141dd7a00]
add eax, dword [0x141dd7a04]
imul eax, eax, 0x4f1c2cd8
add eax, 0xfd4776e8
cmp eax, 0x7013748b
mov r9, qword [rbp + 0x40]
jae 0x1400d4364
mov rax, r15
shl rax, 5
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [r8 + rax + 0x10], xmm1
movups xmmword [r8 + rax], xmm0
lea rax, [r15 + 1]
mov qword [rsi + 0x58], rax
mov r10, rdi
mov eax, dword [0x141dd7a08]
xor edx, edx
div dword [0x141dd7a0c]
imul ecx, eax, 0x1d16170b
xor ecx, 0x8914266b
or ecx, 0x74ab4194
mov rdx, r15
shl rdx, 5
lea rax, [r15 + 1]
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [r8 + rdx + 0x10], xmm1
movups xmmword [r8 + rdx], xmm0
mov qword [rsi + 0x58], rax
cmp ecx, 0x3f4ae0c7
jb 0x1400d4367
mov qword [rbp + 0x88], r8
inc r9
mov r15, rax
mov rax, r9
mov r11, qword [rbp - 0x20]
cmp r9, r11
mov r8, qword [rbp + 0x10]
mov rdi, qword [rbp + 0x28]
jbe 0x1400d40a2
jmp 0x1400d17e6
sub rsp, 0x20
mov rcx, r14
mov r8, r13
call fcn.14008bbc0
mov rdx, qword [rbp + 0x78]
add rsp, 0x20
jmp 0x1400d4288
mov ecx, 0x9c9912a7
nop dword [rax]
mov eax, dword [0x141dd7990]
xor edx, edx
div dword [0x141dd7994]
or eax, 0xfacf3efa
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x908d7ebe
je 0x1400d4400
cmp qword [rbp - 0x40], 0
mov ecx, dword [rbp + 0x68]
mov r11d, dword [rbp + 0x70]
je 0x1400d46de
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov rdi, r10
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, rdi
mov r11d, dword [rbp + 0x70]
mov ecx, dword [rbp + 0x68]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd7998]
add eax, dword [0x141dd799c]
shr eax, 3
imul rax, rax, 0x10514cad
shr rax, 0x38
imul eax, eax, 0x70948674
or eax, 0xb4cbfed3
cmp eax, 0x4c7fbc55
jb 0x1400d4460
jmp 0x1400d46de
xor eax, eax
test al, al
jne 0x1400d4a80
jmp 0x1400d4a61
mov eax, dword [0x141dd79c0]
or eax, dword [0x141dd79c4]
and eax, 0x125e3f14
add eax, 0xf9b7793
cmp eax, 0xfa18d0c7
jbe 0x1400d44bf
ud2
mov eax, dword [0x141dd79c8]
imul eax, dword [0x141dd79cc]
add eax, 0xf341203e
or eax, 0xaabf8f88
ud2
mov eax, dword [0x141dd77c8]
and eax, dword [0x141dd77cc]
imul ebx, eax, 0x1d4d9792
or ebx, 0x452e22d5
mov rsi, qword [r13 + 8]
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
call fcn.1400d5eb0
add rsp, 0x20
cmp ebx, 0xd864a68d
jne 0x1400d4560
mov rdx, qword [r13 + 8]
sub rsp, 0x20
mov rcx, r15
call fcn.1400d5eb0
add rsp, 0x20
jmp 0x1400d4506
mov eax, dword [str._iG_n._]
add eax, dword [0x141dd77d4]
or eax, 0xa0b9e9da
cmp eax, 0xd5026c2d
je 0x1400d4560
nop dword [rax + rax]
mov eax, dword [0x141dd77d8]
imul eax, dword [0x141dd77dc]
imul eax, eax, 0x447e6796
or eax, 0xf991ec92
add eax, 0x9607e3df
cmp eax, 0x56d947d5
jb 0x1400d4580
test rdi, rdi
je 0x1400d3786
mov eax, dword [0x141dd77e0]
xor edx, edx
div dword [0x141dd77e4]
or eax, 0x1108060e
xor eax, 0x666
or eax, 0xcab77991
cmp eax, 0xad4a3a71
jb 0x1400d45fc
mov eax, dword [0x141dd77e8]
or eax, dword [0x141dd77ec]
imul eax, eax, 0x88dad18c
and eax, 0x7f9b26a0
imul eax, eax, 0xd366f998
mov r15, qword [0x141ddb260]
cmp eax, 0xc3245da6
jae 0x1400d4605
mov rax, qword [0x141ddb260]
jmp 0x1400d45d1
mov eax, dword [0x141dd77f0]
or eax, dword [0x141dd77f4]
imul eax, eax, 0x9de3ab7d
xor eax, 0x28a2865e
imul eax, eax, 0x149e1490
cmp eax, 0x7a2ada59
jb 0x1400d4669
mov edi, dword [0x141dd77f8]
sub edi, dword [0x141dd77fc]
add edi, 0x5ababead
and edi, 0x2e894114
add edi, 0xf823e6a0
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x6c592cf2
jae 0x1400d3786
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d4629
mov eax, dword [0x141dd7908]
or eax, dword [0x141dd790c]
or eax, 0x86165ad
and eax, 0xa7975bf
mov qword [rdi], 0
cmp eax, 0x8b99701e
jbe 0x1400d46ae
mov qword [rdi], 0
jmp 0x1400d4681
mov eax, dword [0x141dd7910]
or eax, dword [0x141dd7914]
add eax, 0x9dea39c9
or eax, 0x4e44c1c6
imul eax, eax, 0xbdc76b3c
cmp eax, 0xa5d10484
mov r10, qword [rbp - 0x48]
ja 0x1400d48d2
jmp 0x1400d4896
lea rdx, [rsi + 0x98]
lea r8, [rsi + 0xb8]
nop dword [rax]
mov eax, dword [str.ORU6]
xor eax, dword [0x141dd7a14]
and eax, 0x31408224
cmp eax, 0xab93b1ad
je 0x1400d46f0
test r11d, r11d
je 0x1400d4756
cmp r11d, 1
jne 0x1400d4806
nop word [rax + rax]
mov eax, dword [0x141dd7a20]
and eax, dword [0x141dd7a24]
and eax, 0x1a003cb1
add eax, 0x4cf9be80
or eax, 0xe9c929dd
cmp eax, 0x7b4be64d
jbe 0x1400d4720
mov r13b, 1
test ecx, ecx
je 0x1400d475d
cmp ecx, 1
je 0x1400d4770
cmp qword [r8], rbx
sete al
jmp 0x1400d475f
xor r13d, r13d
test ecx, ecx
jne 0x1400d4749
xor eax, eax
or al, r13b
cmp al, 1
jne 0x1400d4ea0
nop word [rax + rax]
mov eax, dword [0x141dd7a38]
and eax, dword [0x141dd7a3c]
imul eax, eax, 0x5f9bad56
add eax, 0x5b32090e
cmp eax, 0x1b7ba5c1
jb 0x1400d4770
mov qword [rbp + 0x78], r8
mov qword [rbp + 0x88], rdx
nop dword [rax]
mov eax, dword [0x141dd7a40]
add eax, dword [0x141dd7a44]
imul eax, eax, 0xa2908d87
imul rcx, rax, 0x19255d4d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xb14bd2ec
je 0x1400d47a0
mov eax, dword [0x141dd7a48]
and eax, dword [0x141dd7a4c]
xor eax, 0xbdfbb5a5
imul eax, eax, 0x890ce807
cmp eax, 0xbe56969
mov r14, qword [rbp + 0x80]
mov rbx, qword [rbp + 0x60]
mov rdi, qword [rbp - 0x28]
mov r15, r10
je 0x1400d4925
jmp 0x1400d48e4
cmp r11d, 2
jne 0x1400d4874
nop dword [rax]
mov eax, dword [0x141dd7a28]
and eax, dword [0x141dd7a2c]
add eax, 0x209c61a1
xor eax, 0xae07def6
cmp eax, 0xa1dca84f
ja 0x1400d4810
mov rax, qword [rdx]
mov ecx, dword [0x141dd7a30]
xor ecx, dword [0x141dd7a34]
or ecx, 0xac1d647
add ecx, 0x8d201728
or ecx, 0xab0a78f4
cmp rax, rbx
sete r13b
cmp ecx, 0x1b26c480
jb 0x1400d4830
xor eax, eax
nop
test al, al
jne 0x1400d4860
mov ecx, dword [rbp + 0x68]
test ecx, ecx
jne 0x1400d4749
jmp 0x1400d475d
mov eax, dword [0x141dd7a18]
or eax, dword [0x141dd7a1c]
and eax, 0x4684826
xor eax, 0x587bc334
cmp eax, 0xc3b84fb0
ja 0x1400d4874
jmp 0x1400d17e6
mov eax, dword [0x141dd7918]
and eax, dword [0x141dd791c]
add eax, 0x6e97fc20
xor eax, 0x8a2e815d
imul rax, rax, 0x17351e01
shr rax, 0x3c
mov qword [rsi + 0x50], 8
mov qword [rsi + 0x58], 0
cmp eax, 0xe4296ce3
jb 0x1400d46de
mov qword [rsi + 0x50], 8
mov qword [rsi + 0x58], 0
jmp 0x1400d4896
mov eax, dword [0x141dd7a50]
add eax, dword [0x141dd7a54]
imul eax, eax, 0xeee53e5a
xor eax, 0xfca8981f
imul esi, eax, 0x74151118
sub rsp, 0x20
mov rcx, r10
mov rdx, r14
mov r8, rdi
mov r9, rbx
call fcn.1400d5a50
mov r10, r15
add rsp, 0x20
cmp esi, 0x9207f639
jbe 0x1400d4943
sub rsp, 0x20
mov rcx, r10
mov rdx, r14
mov r8, rdi
mov r9, rbx
call fcn.1400d5a50
mov r10, r15
add rsp, 0x20
jmp 0x1400d48e4
mov r9, qword [r10]
movabs rbx, 0x8000000000000000
cmp r9, rbx
jne 0x1400d49c8
mov rsi, qword [rbp + 0x88]
mov rax, qword [rsi]
nop
mov ecx, dword [0x141dd7a70]
or ecx, dword [0x141dd7a74]
cmp ecx, 0xeab20eba
je 0x1400d4960
shl rax, 1
test rax, rax
je 0x1400d4afb
mov eax, 0x86913027
mov rdx, qword [rbp + 0x90]
nop dword [rax]
mov ecx, dword [0x141dd7a78]
or ecx, dword [0x141dd7a7c]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x33a1de98
cmp ecx, 0x9125e546
je 0x1400d4990
mov r8, qword [rdx + 0xa0]
xor eax, eax
test al, al
jne 0x1400d4ae2
jmp 0x1400d4abe
mov r8, qword [r10 + 8]
mov rax, qword [r10 + 0x10]
test rax, rax
mov qword [rbp + 0x60], r9
je 0x1400d4a1c
lea rcx, [rax + rax]
xor edi, edi
nop
mov edx, dword [0x141dd7a58]
sub edx, dword [0x141dd7a5c]
or edx, 0x70168af2
imul edx, edx, 0xb54e9850
or edx, 0x747bdc02
cmp edx, 0xc7c800de
jb 0x1400d49e0
cmp word [r8 + rdi*2], 0
je 0x1400d4a1e
inc rdi
add rcx, 0xfffffffffffffffe
jne 0x1400d49e0
mov rdi, rax
jmp 0x1400d4a1e
xor edi, edi
mov eax, dword [0x141dd7a60]
and eax, dword [0x141dd7a64]
and eax, 0x9a68f505
imul rax, rax, 0x7475e531
shr rax, 0x3e
or eax, 0xa63a53f2
cmp eax, 0xc80c25a8
mov r14, qword [rbp - 0x38]
mov esi, dword [rbp + 0x68]
mov qword [rbp + 0x80], r8
mov r15, qword [rbp + 0x78]
ja 0x1400d4b82
jmp 0x1400d4b22
mov eax, dword [0x141dd79a0]
sub eax, dword [0x141dd79a4]
and eax, 0xa4506
xor eax, 0x13cf1711
ud2
ud2
mov eax, dword [0x141dd7a80]
add eax, dword [0x141dd7a84]
or eax, 0xb83de37d
add eax, 0xa2f25d39
mov rcx, qword [0x141ddb260]
cmp eax, 0xb6153d53
jbe 0x1400d4aeb
mov rax, qword [0x141ddb260]
jmp 0x1400d4abe
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd7a88]
imul eax, dword [0x141dd7a8c]
add eax, 0xd7c4c00
xor eax, 0xd1e0ce8f
cmp eax, 0x192a6ea4
jb 0x1400d4f35
jmp 0x1400d4f28
mov r12d, dword [0x141dd7a68]
imul r12d, dword [0x141dd7a6c]
xor r12d, 0xa00000
and r12d, 0xa40082
sub rsp, 0x20
mov rcx, r14
mov rdx, r8
mov r8, rdi
call fcn.14008bbc0
add rsp, 0x20
mov rbx, qword [r14 + 8]
mov r8, qword [r14 + 0x10]
sub rsp, 0x20
mov ecx, esi
mov rdx, rbx
mov r9, r15
call fcn.1400d6c80
mov r8, qword [rbp + 0x80]
add rsp, 0x20
cmp r12d, 0x59723f8f
jbe 0x1400d4bbe
sub rsp, 0x20
mov rcx, r14
mov rdx, r8
mov r8, rdi
call fcn.14008bbc0
add rsp, 0x20
mov rdx, qword [r14 + 8]
mov r8, qword [r14 + 0x10]
sub rsp, 0x20
mov ecx, esi
mov r9, r15
call fcn.1400d6c80
mov r8, qword [rbp + 0x80]
add rsp, 0x20
jmp 0x1400d4b22
test r13b, r13b
je 0x1400d4c98
mov r12, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x38]
mov rsi, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7a90]
and eax, dword [0x141dd7a94]
add eax, 0x9c848841
and eax, 0x8b25e376
add eax, 0xd81ab2d7
cmp eax, 0x74ced67c
jb 0x1400d4be0
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
mov rdi, qword [rbp - 0x78]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rbx, qword [rbp + 0x88]
mov rax, qword [rbx]
shl rax, 1
test rax, rax
je 0x1400d4c75
mov eax, dword [0x141dd7a98]
imul eax, dword [0x141dd7a9c]
add eax, 0x1bb5447b
and eax, 0x95830255
xor eax, 0xb4619988
cmp eax, 0x50bf7d63
ja 0x1400d4c26
mov rax, qword [rbp + 0x90]
mov r8, qword [rax + 0xa0]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r8, qword [rbp + 0x80]
mov eax, dword [0x141dd7aa0]
xor edx, edx
div dword [0x141dd7aa4]
add eax, 0x1789b3a6
cmp eax, 0xf3e75e66
ja 0x1400d4d54
jmp 0x1400d4d40
mov r12, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x38]
mov rsi, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7ab0]
imul eax, dword [0x141dd7ab4]
imul eax, eax, 0x9c9f0ec5
and eax, 0x2caa448e
add eax, 0x7a42d6f7
cmp eax, 0xbdf37811
ja 0x1400d4cb0
mov rax, qword [rcx]
nop word [rax + rax]
mov ecx, dword [0x141dd7ab8]
xor ecx, dword [0x141dd7abc]
xor ecx, 0x214164c
imul rdx, rcx, 0x41d4cbe1
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
or ecx, 0x1bc9fc70
cmp ecx, 0xbbcd414e
ja 0x1400d4ce0
test rax, rax
je 0x1400d4da0
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0x80]
add rsp, 0x20
jmp 0x1400d4da0
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
xor eax, eax
test al, al
je 0x1400d4d64
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
jmp 0x1400d4d40
mov eax, 0x822f6927
nop dword [rax]
mov ecx, dword [0x141dd7aa8]
and ecx, dword [0x141dd7aac]
or ecx, 0x954b269e
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xdf8f0f37
cmp ecx, 0x572148d6
je 0x1400d4d70
nop word [rax + rax]
mov eax, dword [0x141dd7ac0]
sub eax, dword [0x141dd7ac4]
and eax, 0x4868bfc9
xor eax, 0x3141dcf2
cmp eax, 0x20dc2845
jb 0x1400d4da0
test rsi, rsi
movabs rbx, 0x8000000000000000
je 0x1400d4e64
mov eax, dword [0x141dd7ac8]
imul eax, dword [0x141dd7acc]
or eax, 0x6fcff986
and eax, 0xffcff98f
cmp eax, 0xc4cb398c
jne 0x1400d4e00
mov rax, qword [0x141ddb260]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7ad0]
imul eax, dword [0x141dd7ad4]
or eax, 0xc7640493
add eax, 0xe585d983
xor eax, 0x7a33c4b
mov rcx, qword [0x141ddb260]
cmp eax, 0x3805da32
jb 0x1400d4e00
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd7ad8]
and eax, dword [0x141dd7adc]
imul eax, eax, 0x1dabf587
and eax, 0xec00295e
imul eax, eax, 0xd50898b6
cmp eax, 0xfb1cedad
je 0x1400d4e40
mov rsi, qword [rbp + 0x90]
nop dword [rax + rax]
mov eax, dword [0x141dd7ae0]
or eax, dword [0x141dd7ae4]
imul eax, eax, 0x40747e60
add eax, 0x9f36c68e
or eax, 0xe7f2d973
cmp eax, 0xfba50e5b
ja 0x1400d4e70
nop word cs:[rax + rax]
mov eax, dword [0x141dd7ae8]
sub eax, dword [0x141dd7aec]
imul eax, eax, 0xb9ebd049
and eax, 0x26400824
cmp eax, 0x73b2a5f7
ja 0x1400d4ea0
mov eax, 0x82eee175
mov r15, qword [rbp + 0x50]
mov r14, qword [rbp + 0x20]
mov r13, qword [rbp + 0x38]
nop
mov ecx, dword [0x141dd7af0]
sub ecx, dword [0x141dd7af4]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xbc79e23c
cmp ecx, 0xf6ec8525
ja 0x1400d4ed0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7af8]
sub eax, dword [0x141dd7afc]
xor eax, 0x763c8d67
imul eax, eax, 0x14a1213d
add eax, 0xc69fede7
cmp eax, 0xee1806dd
jae 0x1400d4f00
jmp 0x1400d15d4
mov qword [rsi], rbx
xor eax, eax
test al, al
je 0x1400d4e64
mov qword [rsi], rbx
jmp 0x1400d4f28
mov eax, dword [0x141dd7b88]
mov ecx, dword [0x141dd7b8c]
add eax, ecx
add eax, 0x4e4bcf58
or eax, 0x7cf6b8cc
imul eax, eax, 0x9467dfe1
mov qword [r14], rbx
cmp eax, 0xd71e83a4
jne 0x1400d51bc
mov qword [r14], rbx
jmp 0x1400d4f3a
xor eax, eax
sub r15, qword [rsi + 0x120]
cmovae rax, r15
mov ecx, dword [0x141dd7b70]
sub ecx, dword [0x141dd7b74]
and ecx, 0xd070d6fe
add ecx, 0x9b2b9e3
imul rcx, rcx, 0x51747f7d
shr rcx, 0x3e
cmp ecx, 0x20c732ea
jbe 0x1400d4fc0
mov qword [rsi + 0x128], rax
mov byte [rsi + 0x154], 1
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7b78]
and ecx, dword [0x141dd7b7c]
or ecx, 0x54c628b6
imul ecx, ecx, 0x685029f9
mov qword [rsi + 0x128], rax
mov byte [rsi + 0x154], 1
cmp ecx, 0xb865299f
je 0x1400d4fc0
lea rsp, [rbp + 0x98]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd7bb0]
xor eax, dword [0x141dd7bb4]
add eax, 0x271f1f52
shr eax, 1
mov ebx, 0x812b10af
imul rbx, rax
shr rbx, 0x38
and ebx, 0x10
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r12
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
cmp ebx, 0x50aecfa9
jbe 0x1400d5067
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r12
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
jmp 0x1400d5002
xor ecx, ecx
nop dword [rax]
mov eax, dword [0x141dd7bb8]
and eax, dword [0x141dd7bbc]
imul eax, eax, 0x3aaab447
cmp eax, 0x6eb65850
je 0x1400d5070
cmp word [r12 + rcx*2], 0
je 0x1400d514a
cmp word [r12 + rcx*2 + 2], 0
je 0x1400d5147
lea rsi, [rcx + 2]
movzx eax, word [r12 + rcx*2 + 4]
nop dword [rax]
mov edx, dword [0x141dd7bc0]
and edx, dword [0x141dd7bc4]
add edx, 0xfd5b9857
xor edx, 0xf050c5a4
cmp edx, 0xe57c29e0
jb 0x1400d50b0
test ax, ax
je 0x1400d514d
mov eax, dword [0x141dd7bc8]
xor edx, edx
div dword [0x141dd7bcc]
mov eax, dword [str.j_nSz]
xor edx, edx
div dword [0x141dd7bd4]
imul rax, rax, 0x79c60a51
shr rax, 0x3b
imul eax, eax, 0x4d94adfc
cmp eax, 0xbae4c360
je 0x1400d50e3
add rcx, 3
nop dword [rax]
mov eax, dword [0x141dd7bd8]
imul eax, dword [0x141dd7bdc]
add eax, 0x55625016
or eax, 0xa2a2888
and eax, 0xaeb7a8c
cmp eax, 0x5e2147ed
ja 0x1400d5110
cmp rcx, 0x105
jne 0x1400d5070
mov esi, 0x105
jmp 0x1400d514d
inc rcx
mov rsi, rcx
mov eax, dword [0x141dd7be0]
xor edx, edx
div dword [0x141dd7be4]
imul eax, eax, 0x35aabd00
cmp eax, 0x420a2b6
jb 0x1400d51a4
mov ebx, dword [0x141dd7be8]
sub ebx, dword [0x141dd7bec]
or ebx, 0x5168dc1
add ebx, 0x6cbaea8c
or ebx, 0xeac2a8ca
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, rsi
call fcn.14008bbc0
add rsp, 0x20
cmp ebx, 0x9698e03a
jae 0x1400d51bc
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, rsi
call fcn.14008bbc0
add rsp, 0x20
jmp 0x1400d5168
mov rax, qword [rdi]
nop
mov ecx, dword [0x141dd7bf0]
mov edx, dword [0x141dd7bf4]
add ecx, edx
add ecx, 0x37eab0af
imul rcx, rcx, 0x4ae8a7a5
shr rcx, 0x3d
xor ecx, 0x467ea9c6
cmp ecx, 0x72ea0a2a
ja 0x1400d51c0
shl rax, 1
test rax, rax
mov rbx, qword [rbp + 0x90]
je 0x1400d5271
mov eax, dword [0x141dd7bf8]
or eax, dword [0x141dd7bfc]
add eax, 0xb3d7c7d5
xor eax, 0x40a78612
cmp eax, 0x9c9ce0a7
jb 0x1400d5254
mov esi, dword [0x141dd7c00]
or esi, dword [0x141dd7c04]
add esi, 0x6d4a3709
and esi, 0x715ee306
mov r8, qword [rbx + 0x68]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x6c35d6b7
jbe 0x1400d5271
mov r8, qword [rbx + 0x68]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d5219
mov eax, dword [0x141dd7c08]
or eax, dword [0x141dd7c0c]
xor eax, 0xfc16f7de
imul rcx, rax, 0x301b9171
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
or eax, 0xbe526a30
cmp eax, 0x780ba50b
jne 0x1400d52b2
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rsi, qword [rbp + 0x90]
nop dword [rax]
mov eax, dword [0x141dd7c10]
or eax, dword [0x141dd7c14]
or eax, 0x965ed286
imul eax, eax, 0x70fd808e
add eax, 0x3e93d7d4
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
cmp eax, 0xef855902
ja 0x1400d52c0
jmp 0x1400d4f6b