Function at 0x140025cf0
Capabilities:
Check for debugger via api
Check for process debug object
Check for time delay via queryperformancecounter
Check processdebugflags
Check processdebugport
Create process on windows
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x188
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xf0], xmm6
mov eax, dword [0x141dc43a0]
xor edx, edx
div dword [0x141dc43a4]
add eax, 0xb97de12c
shr eax, 2
imul rax, rax, 0x435f59d9
shr rax, 0x3b
or eax, 0xd726c875
cmp eax, 0x88370313
jae 0x140025f50
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x70
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
nop dword [rax + rax]
mov ecx, dword [str.eE_]
or ecx, dword [0x141dc43ac]
or ecx, 0x84000800
xor ecx, 0x184060
and ecx, 0xa438c872
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r15, rsp
mov eax, 0x70
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xd0], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xe0], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xc8], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xd8], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xe8], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r11, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r10, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x9aff27f9
je 0x140025f50
mov qword [rbp + 0xb8], rsi
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0xc0], r10
mov qword [rbp + 0xa8], r8
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0x78], r9
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x58], rbx
mov qword [rbp - 8], r11
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov r13, qword [rbp + 0xe8]
mov qword [r13], 0
mov rax, qword [rbp + 0xd8]
mov rdi, rax
mov dword [rax], 0
mov rax, qword [rbp + 0xb0]
mov rsi, rax
mov dword [rax], 0
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 8
mov rbx, r13
mov r8, r13
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x140026340
test eax, eax
mov r13, qword [rbp + 0x28]
je 0x140026660
mov eax, dword [0x141dc43c8]
sub eax, dword [0x141dc43cc]
imul eax, eax, 0x368cf97b
or eax, 0xad5edfdd
cmp eax, 0xfff94417
ja 0x140026350
mov rcx, qword [rbx]
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov edx, 0x14
mov r8, rdi
mov r9d, 4
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
mov ecx, eax
nop word cs:[rax + rax]
mov eax, dword [str.NS_r__]
xor edx, edx
div dword [0x141dc43d4]
imul eax, eax, 0x2aa7a634
xor eax, 0x87f7b65c
add eax, 0x1c58e339
cmp eax, 0x3193bd15
jb 0x1400263a0
test ecx, ecx
je 0x140026660
mov eax, dword [rdi]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400263e0
nop word cs:[rax + rax]
mov ecx, dword [0x141dc43d8]
sub ecx, dword [0x141dc43dc]
xor ecx, 0x1000480
or ecx, 0x84fbd969
and ecx, 0xa7fbdded
cmp ecx, 0xf54f406
je 0x1400263f0
test eax, eax
je 0x1400266d3
movabs rdi, 0x6473f65616740f59
movabs rbx, 0x5c3c7d014d9e5a4a
movabs r14, 0x4259c9f0a01aad2f
movabs r15, 0x3bbd058d17997c23
movabs r13, 0x28ee358551049bf3
mov eax, dword [0x141dc4610]
or eax, dword [0x141dc4614]
add eax, 0xa119842a
imul rax, rax, 0x4b26585
shr rax, 0x38
add eax, 0xe8bd8ec4
cmp eax, 0x404fd457
mov rsi, qword [rbp + 0x78]
mov r12, qword [rbp + 0x80]
jae 0x1400264e2
lea rax, [0x141da67be]
mov rcx, qword [rbp + 0xb8]
mov qword [rcx], rax
mov rcx, qword [rcx]
mov qword [r12], r13
mov rdx, qword [r12]
sub rsp, 0x20
call fcn.140019be0
add rsp, 0x20
mov rcx, qword [rax]
xor rcx, rdi
mov rdx, qword [rax + 8]
xor rdx, rbx
mov r8, qword [rax + 0x10]
xor r8, r14
mov r9, qword [rax + 0x18]
xor r9, r15
mov r10, qword [rax + 0x20]
mov r10d, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
mov qword [rsi], rcx
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], r8
mov qword [rsi + 0x18], r9
mov r14, qword [rbp + 0xb8]
mov r15, rbx
nop dword [rax]
mov eax, dword [0x141dc4618]
or eax, dword [0x141dc461c]
add eax, 0xe6f54c50
shr eax, 6
imul rbx, rax, 0x405c101
shr rbx, 0x34
lea rax, [0x141da67be]
mov qword [r14], rax
mov rcx, qword [r14]
mov qword [r12], r13
mov rdx, qword [r12]
sub rsp, 0x20
call fcn.140019be0
add rsp, 0x20
mov r8, qword [rax]
mov r9, qword [rax + 8]
mov r10, qword [rax + 0x10]
mov r11, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov edx, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
movabs rcx, 0x6473f65616740f59
xor r8, rcx
mov qword [rsi], r8
xor r9, r15
mov qword [rsi + 8], r9
movabs rcx, 0x4259c9f0a01aad2f
xor r10, rcx
mov qword [rsi + 0x10], r10
movabs rcx, 0x3bbd058d17997c23
xor r11, rcx
mov qword [rsi + 0x18], r11
movabs rcx, 0x3021bc15fa91e96b
xor rdi, rcx
mov ecx, 0xf3c0e744
xor edx, ecx
cmp ebx, 0xa4315845
je 0x1400264f0
xor al, 0xd0
xor r8d, r8d
test r8b, r8b
mov r10, qword [rbp + 0xa8]
je 0x1400265c2
mov qword [rsi + 0x20], rdi
mov dword [rsi + 0x28], edx
mov byte [rsi + 0x2c], al
mov qword [r10], rsi
mov r13, qword [rbp + 0x18]
mov r9, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0xc0]
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4620]
xor r8d, dword [0x141dc4624]
or r8d, 0xabd972a8
and r8d, 0xeff9f3fc
mov qword [rsi + 0x20], rdi
mov dword [rsi + 0x28], edx
mov byte [rsi + 0x2c], al
mov qword [r10], rsi
cmp r8d, 0x736d84b7
je 0x1400265e0
mov qword [r10 + 8], 0x2d
mov qword [r9], r10
lea rax, [0x14008c810]
mov qword [r9 + 8], rax
lea rax, [0x140103eb0]
mov qword [rcx], rax
mov qword [rcx + 8], 2
mov qword [rcx + 0x20], 0
mov qword [rcx + 0x10], r9
mov qword [rcx + 0x18], 1
sub rsp, 0x20
call fcn.1400a0b00
add rsp, 0x20
jmp 0x1400282b0
mov eax, dword [0x141dc43b0]
sub eax, dword [0x141dc43b4]
add eax, 0x1c88fc52
cmp eax, 0x2a96858a
jb 0x140026660
nop dword [rax + rax]
mov eax, dword [0x141dc43b8]
xor edx, edx
div dword [0x141dc43bc]
xor eax, 0x1813ac3
and eax, 0xc5c17ec3
imul eax, eax, 0x2a6b0236
cmp eax, 0xe31e63d6
ja 0x140026680
nop word cs:[rax + rax]
mov eax, dword [0x141dc43c0]
add eax, dword [0x141dc43c4]
imul eax, eax, 0x88813b83
and eax, 0xca83be47
add eax, 0xeeb32c69
cmp eax, 0xc2980035
jae 0x1400266b0
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x20], r14
movabs rax, 0x8000000000000001
dec rax
mov qword [rbp + 0x80], rax
xor ebx, ebx
xorps xmm6, xmm6
lea rsi, [0x14008c810]
mov r12d, 0xe861b98f
nop word cs:[rax + rax]
mov rdi, qword [rbp - 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dc43e0]
and eax, dword [0x141dc43e4]
or eax, 0x5fc0727c
imul eax, eax, 0xfcf5bc22
or eax, 0xb812d562
cmp eax, 0x4a1ff555
jb 0x140026720
sub rsp, 0x20
mov rcx, rdi
call fcn.140092520
add rsp, 0x20
mov rax, qword [rdi]
mov r14, qword [rdi + 8]
cmp rax, qword [rbp + 0x80]
mov qword [rbp + 0xc0], r14
je 0x140027918
mov qword [rbp + 0xb8], rax
mov eax, dword [0x141dc43e8]
xor eax, dword [0x141dc43ec]
and eax, 0xebab43eb
add eax, 0xd9079de6
cmp eax, 0xc3609b17
ja 0x140026775
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov rsi, qword [rbp - 0x78]
mov rcx, rsi
mov rdx, r14
call fcn.140055a70
add rsp, 0x20
mov rcx, qword [rsi]
mov eax, dword [0x141dc43f0]
xor edx, edx
div dword [0x141dc43f4]
mov r13, qword [rbp + 0x70]
mov eax, dword [0x141dc43f8]
or eax, dword [0x141dc43fc]
imul eax, eax, 0xed21cdbe
add eax, 0xaf90f2e
cmp eax, 0xde3b8129
ja 0x1400267c2
test rcx, rcx
jne 0x140027ada
mov r8, qword [rsi + 8]
mov eax, dword [0x141dc4400]
xor edx, edx
div dword [0x141dc4404]
mov eax, dword [0x141dc4408]
sub eax, dword [0x141dc440c]
add eax, 0xdc227853
xor eax, 0xc240082
or eax, 0xc188bc7c
cmp eax, 0x153e3e75
je 0x1400267fb
mov rdi, qword [rsi + 0x10]
mov eax, dword [0x141dc4410]
xor edx, edx
div dword [0x141dc4414]
mov ecx, 0x834365f7
mov eax, dword [0x141dc4418]
and eax, dword [0x141dc441c]
cmp eax, 0x4e7c0afb
je 0x140026834
test rdi, rdi
js 0x140027b3a
mov eax, dword [0x141dc4428]
and eax, dword [0x141dc442c]
and eax, 0x292f4081
imul eax, eax, 0xf422da0a
cmp eax, 0x9c68ea71
ja 0x140026850
nop
mov eax, dword [0x141dc4430]
xor edx, edx
div dword [0x141dc4434]
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0x38b0c89b
cmp eax, 0xf986afea
ja 0x140026870
test rdi, rdi
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xe8], r8
je 0x1400269b0
mov eax, dword [0x141dc4438]
or eax, dword [0x141dc443c]
and eax, 0xbd20a35f
add eax, 0x49517ce0
or eax, 0x20de9f5e
cmp eax, 0xf55c1daa
jne 0x1400268e0
movzx eax, byte [0x141ddc4f8]
nop word cs:[rax + rax]
mov eax, dword [0x141dc4440]
and eax, dword [0x141dc4444]
xor eax, 0x8200990
and eax, 0x8c30eb90
movzx ecx, byte [0x141ddc4f8]
cmp eax, 0x4939c3f5
je 0x1400268e0
test bl, bl
je 0x140026920
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.1400c0a10
add rsp, 0x20
nop word [rax + rax]
mov esi, dword [0x141dc4448]
add esi, dword [0x141dc444c]
or esi, 0xffcffbf7
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.1400c0a10
add rsp, 0x20
cmp esi, 0xb15d8d1c
je 0x140026920
mov r8, qword [rbp + 0xe8]
nop word cs:[rax + rax]
mov edx, dword [0x141dc4450]
sub edx, dword [0x141dc4454]
add edx, 0x67e4fe2
imul rcx, rdx, 0x2e4c6bd
shr rcx, 0x20
sub edx, ecx
shr edx, 1
add edx, ecx
shr edx, 0x1d
and edx, 0xfffffffd
cmp edx, 0x15ba3a62
je 0x140026960
mov rdi, r13
mov qword [rbp + 0xd8], rax
test rax, rax
jne 0x1400269bf
jmp 0x140027b7e
mov rdi, r13
mov eax, 1
mov qword [rbp + 0xd8], rax
mov eax, dword [0x141dc4458]
and eax, dword [0x141dc445c]
or eax, 0xf3fffdbb
cmp eax, 0x62360c0b
jb 0x140026af0
nop dword [rax + rax]
mov eax, dword [0x141dc4460]
xor edx, edx
div dword [0x141dc4464]
imul esi, eax, 0x63e209f3
add esi, 0x21828a79
or esi, 0x9019c140
sub rsp, 0x20
mov r13, qword [rbp + 0xd8]
mov rcx, r13
mov rdx, r8
mov r14, qword [rbp + 0xb0]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0xc8]
mov qword [rax], 0
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
lea rax, [r13 + r14]
mov rdx, qword [rbp + 0x10]
mov qword [rdx], r13
mov qword [rdx + 8], rax
mov word [rdx + 0x10], 0
mov dword [rdx + 0x18], 1
sub rsp, 0x20
mov r14, qword [rbp + 0xe0]
mov rcx, r14
call fcn.14001ce80
add rsp, 0x20
mov rdx, qword [rbp + 8]
mov qword [rdx], 1
mov qword [rdx + 8], 1
mov word [rdx + 0x10], 0
mov dword [rdx + 0x18], 1
sub rsp, 0x20
mov r13, qword [rbp + 0xd0]
mov rcx, r13
call fcn.14001ce80
mov r8, qword [rbp + 0xe8]
add rsp, 0x20
mov rcx, qword [r14 + 8]
mov rax, qword [r13 + 8]
mov rdx, qword [rbp + 0x90]
mov dword [rdx], 0
movups xmmword [rdi + 0x60], xmm6
movups xmmword [rdi + 0x50], xmm6
movups xmmword [rdi + 0x40], xmm6
movups xmmword [rdi + 0x30], xmm6
movups xmmword [rdi + 0x20], xmm6
movups xmmword [rdi + 0x10], xmm6
movups xmmword [rdi], xmm6
cmp esi, 0xe9bf085a
jbe 0x140026bd0
sub rsp, 0x20
mov r14, qword [rbp + 0xd8]
mov rcx, r14
mov rdx, r8
mov rsi, qword [rbp + 0xb0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0xc8]
mov qword [rax], 0
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
lea rax, [r14 + rsi]
mov rdx, qword [rbp + 0x10]
mov qword [rdx], r14
mov qword [rdx + 8], rax
mov word [rdx + 0x10], 0
mov dword [rdx + 0x18], 1
sub rsp, 0x20
mov rcx, qword [rbp + 0xe0]
call fcn.14001ce80
add rsp, 0x20
mov rdx, qword [rbp + 8]
mov qword [rdx], 1
mov qword [rdx + 8], 1
mov word [rdx + 0x10], 0
mov dword [rdx + 0x18], 1
sub rsp, 0x20
mov rcx, qword [rbp + 0xd0]
call fcn.14001ce80
mov r8, qword [rbp + 0xe8]
add rsp, 0x20
mov rax, qword [rbp + 0x90]
mov dword [rax], 0
movups xmmword [rdi + 0x60], xmm6
movups xmmword [rdi + 0x50], xmm6
movups xmmword [rdi + 0x40], xmm6
movups xmmword [rdi + 0x30], xmm6
movups xmmword [rdi + 0x20], xmm6
movups xmmword [rdi + 0x10], xmm6
movups xmmword [rdi], xmm6
jmp 0x1400269e0
mov qword [rbp + 0x78], rcx
mov qword [rbp + 0xe8], rax
mov al, 1
test al, al
je 0x140027b5a
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
mov edx, 8
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
test rax, rax
je 0x140027b7e
mov rcx, rax
mov word [rax], 0x72
mov eax, dword [0x141dc4480]
add eax, dword [0x141dc4484]
xor eax, 0xf507c534
imul eax, eax, 0x9b183feb
add eax, 0xa711de89
cmp eax, 0x540bfe32
mov edx, 4
lea r11, [0x141dba4f8]
jb 0x140026c6b
mov eax, dword [0x141dc4488]
xor eax, dword [0x141dc448c]
add eax, 0x7b07a7f0
and eax, 0xf81973f4
imul rax, rax, 0x1b2dc861
shr rax, 0x39
mov qword [r15], rdx
cmp eax, 0x6547aed9
jne 0x140026c70
mov qword [r15], rdx
jmp 0x140026c40
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], 1
mov edx, 1
xor eax, eax
lea r13, [0x141dba4f3]
nop word [rax + rax]
mov r14, rdx
test ax, ax
je 0x140026cb0
xor esi, esi
mov edi, eax
jmp 0x140026f70
mov eax, dword [0x141dc4490]
mov edx, dword [str.p_9_r]
add eax, edx
add eax, 0xbb001ca2
or eax, 0xe875f864
add eax, 0xf1d7bb5b
cmp eax, 0x16d995c0
jb 0x140026cb0
cmp r13, r11
je 0x1400270a0
nop dword [rax]
mov eax, dword [0x141dc4498]
add eax, dword [0x141dc449c]
imul rax, rax, 0x1c81a683
shr rax, 0x3c
add eax, 0x5c5e2bdf
xor eax, 0x3ac4e0e3
cmp eax, 0xd62cbfdf
ja 0x140026ce0
lea r8, [r13 + 1]
movzx eax, byte [r13]
nop word cs:[rax + rax]
test bl, bl
jne 0x140026d20
test al, al
js 0x140026d90
mov edx, dword [0x141dc44a0]
xor edx, dword [0x141dc44a4]
xor edx, 0x18da9dc7
imul rdx, rdx, 0x34b2c40f
shr rdx, 0x3b
or edx, 0x4c3664b8
cmp edx, 0x60581d1f
ja 0x140026d28
nop word cs:[rax + rax]
mov edx, dword [0x141dc44a8]
imul edx, dword [0x141dc44ac]
imul edx, edx, 0xb9e8a93f
add edx, 0xb4865039
imul rdx, r12
shr rdx, 0x3e
cmp edx, 0x442bc3bc
jae 0x140026d60
mov edi, eax
jmp 0x140026f40
test bl, bl
jne 0x140026d90
mov r9d, eax
and r9d, 0x1f
movzx r10d, byte [r13 + 1]
and r10d, 0x3f
cmp al, 0xdf
jbe 0x140026f25
mov r8d, 0xcef4718b
nop word cs:[rax + rax]
mov edx, dword [0x141dc44b0]
and edx, dword [0x141dc44b4]
imul rdx, r8
shr rdx, 0x3d
or edx, 0xfb6dd2fd
cmp edx, 0x9271dc19
jb 0x140026dc0
lea r8, [r13 + 3]
shl r10d, 6
movzx edx, byte [r13 + 2]
nop
mov r11d, dword [0x141dc44b8]
add r11d, dword [0x141dc44bc]
imul r11, r11, 0x34b2fa73
shr r11, 0x3d
imul r11d, r11d, 0x4bf94757
cmp r11d, 0x20d77c84
jb 0x140026df0
and edx, 0x3f
or r10d, edx
mov edi, r9d
shl edi, 0xc
or edi, r10d
nop dword [rax + rax]
mov edx, dword [0x141dc44c0]
add edx, dword [0x141dc44c4]
shr edx, 2
imul rdx, rdx, 0x8962923
shr rdx, 0x37
cmp edx, 0xb9f1809
je 0x140026e30
cmp al, 0xf0
lea r11, [0x141dba4f8]
jb 0x140026eaf
mov eax, dword [0x141dc44c8]
xor edx, edx
div dword [0x141dc44cc]
mov eax, dword [0x141dc44d0]
add eax, dword [0x141dc44d4]
xor eax, 0x7360e5bb
add eax, 0xfd12f161
cmp eax, 0xf494b9f7
ja 0x140026e6b
and r9d, 7
shl r9d, 0x12
shl r10d, 6
movzx eax, byte [r13 + 3]
add r13, 4
and eax, 0x3f
or eax, r10d
mov edi, eax
or edi, r9d
test bl, bl
jne 0x140026ea3
mov r8, r13
cmp edi, 0xffff
jbe 0x140026f40
mov eax, dword [0x141dc44e0]
xor edx, edx
div dword [0x141dc44e4]
mov eax, dword [0x141dc44e8]
and eax, dword [0x141dc44ec]
and eax, 0xa1ebf820
add eax, 0xfc85b047
cmp eax, 0xb097ef8c
ja 0x140026ec9
lea r9d, [rdi + 0xff0000]
mov eax, dword [0x141dc44f0]
xor edx, edx
div dword [0x141dc44f4]
nop dword [rax + rax]
test bl, bl
jne 0x140026f00
shr r9d, 0xa
or r9d, 0xd800
and edi, 0x3ff
or edi, 0xdc00
mov r13, r8
mov esi, edi
mov edi, r9d
jmp 0x140026f70
add r13, 2
shl r9d, 6
or r9d, r10d
mov r8, r13
mov edi, r9d
nop word cs:[rax + rax]
mov eax, dword [0x141dc44d8]
add eax, dword [0x141dc44dc]
xor eax, 0x2121b01
or eax, 0xfd81a0be
add eax, 0x13512ad8
xor esi, esi
cmp eax, 0x34c2b0f0
ja 0x140026f40
mov r13, r8
nop word [rax + rax]
mov eax, dword [0x141dc44f8]
xor eax, dword [0x141dc44fc]
imul rax, rax, 0xd35694d
shr rax, 0x38
xor eax, 0x80401e
or eax, 0x7b489f60
cmp eax, 0x1e76f85e
jb 0x140026f70
cmp r14, qword [r15]
je 0x140026fd4
mov eax, dword [0x141dc4500]
xor edx, edx
div dword [0x141dc4504]
imul eax, eax, 0x506d254
add eax, 0x1a05290
shr eax, 4
imul rax, rax, 0xa1e8c5
shr rax, 0x33
cmp eax, 0x8a8e1886
jne 0x140027050
jmp 0x140027088
lea rax, [0x141dba4f2]
sub rax, r13
add rax, 8
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
cmp si, 1
sbb rdx, 0
lea r8, [rdx + 2]
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r15
mov rdx, r14
call fcn.1400fe550
lea r11, [0x141dba4f8]
add rsp, 0x30
mov eax, dword [0x141dc4510]
and eax, dword [0x141dc4514]
imul eax, eax, 0x4438b907
add eax, 0xf06a90ca
mov rcx, qword [r15 + 8]
cmp eax, 0xc4d127b5
jae 0x140027027
jmp 0x140026f9d
mov r8d, dword [0x141dc4508]
sub r8d, dword [0x141dc450c]
add r8d, 0x2e315a01
or r8d, 0x51b9251b
lea rdx, [r14 + 1]
mov word [rcx + r14*2], di
mov qword [r15 + 0x10], rdx
mov eax, esi
cmp r8d, 0xc11240fe
jae 0x140026c90
mov word [rcx + r14*2], di
lea rax, [r14 + 1]
mov qword [r15 + 0x10], rax
jmp 0x140027050
mov rax, qword [r15]
mov qword [rbp + 0xa8], rax
mov rdi, qword [r15 + 8]
sub rsp, 0x20
xor ecx, ecx
mov edx, 6
call qword [sym.imp.ole32.dll_CoInitializeEx]
add rsp, 0x20
mov rsi, qword [rbp + 0x70]
movabs rax, 0x14000000070
mov qword [rsi], rax
mov qword [rbp + 0xa0], rdi
mov qword [rsi + 0x10], rdi
test bl, bl
mov rcx, qword [rbp + 0x78]
jne 0x140027118
nop word [rax + rax]
mov eax, dword [0x141dc4518]
xor edx, edx
div dword [0x141dc451c]
or eax, 0xecd5781e
xor eax, 0x11af4700
add eax, 0x840dab12
mov qword [rsi + 0x18], rcx
cmp eax, 0x8614adbd
jbe 0x140027120
mov qword [rsi + 0x18], rcx
jmp 0x1400270f0
test bl, bl
mov r13, qword [sym.imp.shell32.dll_ShellExecuteExW]
mov r14, qword [rbp + 0xe8]
jne 0x140027250
nop word cs:[rax + rax]
mov eax, dword [0x141dc4520]
xor edx, edx
div dword [0x141dc4524]
mov edi, eax
mov qword [rsi + 0x20], r14
mov dword [rsi + 0x30], 1
sub rsp, 0x20
mov rcx, rsi
call r13
add rsp, 0x20
test eax, eax
sete al
mov rcx, qword [rsi + 0x68]
test rcx, rcx
sete dl
cmp edi, 0x60ad29e6
je 0x140027250
or al, dl
je 0x140027270
mov r8, qword [rbp + 0xa0]
mov eax, dword [0x141dc4528]
xor edx, edx
div dword [0x141dc452c]
xor eax, 0x8302ac
and eax, 0x239332fd
imul rax, rax, 0xdb004e5
shr rax, 0x38
cmp eax, 0x9b513a18
ja 0x140027193
cmp qword [rbp + 0xa8], 0
mov rsi, qword [rbp + 0xd0]
mov rdi, qword [rbp + 0xe0]
je 0x140027232
mov eax, dword [0x141dc4530]
add eax, dword [0x141dc4534]
or eax, 0xfdf76fbc
add eax, 0x2e0d4c53
cmp eax, 0x4356e8ac
jbe 0x1400271f9
mov rax, qword [0x141ddc4e0]
mov r9, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dc4538]
or eax, dword [0x141dc453c]
xor eax, 0x1dc61567
imul eax, eax, 0x3b0ab99b
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x62abb3b1
ja 0x140027200
sub rsp, 0x20
xor edx, edx
call r9
add rsp, 0x20
mov r14d, 0xffffffff
cmp qword [rsi], 0
jne 0x140027417
jmp 0x140027432
mov qword [rsi + 0x20], r14
mov dword [rsi + 0x30], 1
sub rsp, 0x20
mov rcx, rsi
call r13
add rsp, 0x20
jmp 0x140027140
sub rsp, 0x20
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add rsp, 0x20
mov rax, qword [rbp + 0x70]
mov rdi, qword [rax + 0x68]
mov eax, dword [0x141dc4540]
xor edx, edx
div dword [0x141dc4544]
add eax, 0xb89e96b7
imul rax, rax, 0x1b9b22d5
shr rax, 0x3c
or eax, 0x7afbb02
cmp eax, 0xba1f1ac4
jbe 0x1400272cd
sub rsp, 0x20
mov rcx, rdi
mov rdx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
add rsp, 0x20
mov r13, qword [rbp + 0x90]
mov r14, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
nop dword [rax + rax]
mov eax, dword [0x141dc4548]
xor eax, dword [0x141dc454c]
shr eax, 2
imul rsi, rax, 0x999e0c9
shr rsi, 0x36
xor esi, 0x7e771a9d
add esi, 0x46928a03
sub rsp, 0x20
mov rcx, rdi
mov rdx, r13
call r14
add rsp, 0x20
cmp esi, 0x9b59530d
jb 0x1400272e0
mov ecx, dword [r13]
mov dword [rbp + 0xe8], ecx
mov ecx, dword [0x141dc4550]
sub ecx, dword [str.P9B__]
or ecx, 0xfadebdac
and ecx, 0xfbfebffd
cmp eax, 1
mov r14d, 0
sbb r14d, r14d
cmp ecx, 0x80d10168
jb 0x140027329
cmp qword [rbp + 0xa8], 0
mov rsi, qword [rbp + 0xa0]
je 0x1400273d2
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dc4558]
add eax, dword [0x141dc455c]
imul eax, eax, 0x9c3cd184
add eax, 0x5fdde0d
cmp eax, 0xa1bd55d0
ja 0x1400274e0
nop
mov eax, dword [0x141dc4560]
add eax, dword [0x141dc4564]
and eax, 0x35b7ea5e
imul r13d, eax, 0x7e2dfcda
or r13d, 0xcb3ea036
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r13d, 0xe433f210
jb 0x1400274e0
or r14d, dword [rbp + 0xe8]
nop dword [rax]
mov eax, dword [0x141dc4568]
xor eax, dword [0x141dc456c]
xor eax, 0xd148cbec
imul eax, eax, 0x29fd7f6d
add eax, 0x264962bf
cmp eax, 0x8986d3ba
jb 0x1400273e0
mov rsi, qword [rbp + 0xd0]
mov rdi, qword [rbp + 0xe0]
cmp qword [rsi], 0
je 0x140027432
mov r8, qword [rsi + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4570]
sub ecx, dword [0x141dc4574]
imul ecx, ecx, 0xb83be9d9
or ecx, 0xe996107e
add ecx, 0x9c14ac03
cmp ecx, 0x68aa8187
jb 0x140027440
mov dword [rbp + 0xe8], r14d
nop dword [rax]
mov ecx, dword [0x141dc4578]
and ecx, dword [0x141dc457c]
or ecx, 0xedade5f9
and ecx, 0xedbde5fb
cmp ecx, 0xef45f11c
je 0x140027470
test rax, rax
je 0x1400275b0
mov rax, qword [rbp + 0xe0]
mov r14, qword [rax + 8]
mov eax, dword [0x141dc4580]
add eax, dword [0x141dc4584]
mov ecx, 0xafa42d39
imul rax, rcx
shr rax, 0x3c
or eax, 0x143a3877
add eax, 0xf1109c24
cmp eax, 0x8ab68d87
jbe 0x140027500
jmp 0x140027840
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140027390
mov eax, dword [0x141dc4588]
and eax, dword [0x141dc458c]
add eax, 0xaee8fff6
and eax, 0x3c8c30ae
mov rdi, qword [0x141ddc4e0]
cmp eax, 0x4a908362
je 0x140027840
mov eax, dword [0x141dc4590]
or eax, dword [0x141dc4594]
shr eax, 2
imul rax, rax, 0x4331eef5
shr rax, 0x3a
add eax, 0x60d7c46f
cmp eax, 0xc07fdda7
jbe 0x140027564
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dc4598]
xor edx, edx
div dword [0x141dc459c]
mov r13d, eax
add r13d, 0x28067610
mov eax, 0x8e513707
imul r13, rax
shr r13, 0x3e
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call rsi
add rsp, 0x20
cmp r13d, 0x71d96d18
je 0x140027570
mov rdx, qword [rbp + 0xc8]
mov rax, qword [rdx]
nop word [rax + rax]
mov ecx, dword [0x141dc45a0]
imul ecx, dword [0x141dc45a4]
add ecx, 0x90ce293c
xor ecx, 0xb9eccbc9
cmp ecx, 0x156bcd45
jb 0x1400275c0
test rax, rax
mov r13, qword [rbp + 0x28]
lea rdi, [0x140103eb0]
mov r14, qword [rbp - 0x68]
je 0x140027620
mov r8, qword [rdx + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test bl, bl
jne 0x140027610
nop word cs:[rax + rax]
mov eax, dword [0x141dc45a8]
xor edx, edx
div dword [0x141dc45ac]
and eax, 0x97bbb0ad
add eax, 0xf7a2dcfc
xor eax, 0xc18548d9
cmp eax, 0xe0defaec
ja 0x140027620
lea rsi, [0x14008c810]
nop dword [rax + rax]
mov eax, dword [0x141dc45b0]
xor edx, edx
div dword [0x141dc45b4]
add eax, 0x6083e79d
and eax, 0x38b45fcb
imul eax, eax, 0xd77b2aa3
cmp eax, 0x21d6e398
jb 0x140027650
cmp qword [rbp + 0xb0], 0
je 0x14002769d
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdx, qword [rbp - 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dc45c8]
add eax, dword [0x141dc45cc]
and eax, 0xf62c592
imul eax, eax, 0x3a4d5b6b
or eax, 0xa22cd2a1
cmp eax, 0xedef6b4e
ja 0x1400276b0
nop word cs:[rax + rax]
mov eax, dword [0x141dc45d0]
xor eax, dword [0x141dc45d4]
add eax, 0x43448f49
or eax, 0x1fa939ab
cmp eax, 0x998384bc
je 0x1400276e0
cmp dword [rbp + 0xe8], 0
je 0x140027850
lea rax, [0x141db0a09]
mov qword [r14], rax
mov rcx, qword [r14]
movabs rax, 0x595f673b99754862
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.1400196e0
add rsp, 0x20
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
movabs r10, 0x27ba6ed99e947921
xor rcx, r10
mov r10, qword [rbp - 0x60]
mov qword [r10], rcx
movabs rcx, 0x347de5c2264e06c9
xor rdx, rcx
mov qword [r10 + 8], rdx
movabs rcx, 0xf37d98069079d5a0
xor r8, rcx
mov qword [r10 + 0x10], r8
movabs rcx, 0x69a9b624fd27f38
xor r9, rcx
mov qword [r10 + 0x18], r9
xor al, 0xb9
mov byte [r10 + 0x20], al
mov rax, qword [rbp - 0x58]
mov qword [rax], r10
mov qword [rax + 8], 0x21
mov rdx, qword [rbp - 0x50]
mov qword [rdx], rax
mov qword [rdx + 8], rsi
mov rcx, qword [rbp - 0x48]
mov qword [rcx], rdi
mov qword [rcx + 8], 2
mov qword [rcx + 0x20], 0
mov qword [rcx + 0x10], rdx
mov qword [rcx + 0x18], 1
sub rsp, 0x20
call fcn.1400a0b00
add rsp, 0x20
cmp qword [rbp + 0xb8], 0
je 0x140026710
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dc45d8]
imul eax, dword [0x141dc45dc]
add eax, 0x36cf20aa
or eax, 0x7e0633b6
cmp eax, 0xfbd933c3
je 0x140027810
jmp 0x140026710
mov rax, qword [0x141ddc4e0]
jmp 0x140027500
mov eax, dword [0x141dc45e0]
imul eax, dword [0x141dc45e4]
add eax, 0xb16cb536
or eax, 0xa507c292
cmp eax, 0x19d0f372
jb 0x140027850
cmp qword [rbp + 0xb8], 0
mov r15, qword [rbp + 0x58]
mov rbx, qword [rbp + 0xc0]
je 0x140027c5d
mov eax, dword [0x141dc45e8]
add eax, dword [0x141dc45ec]
and eax, 0x8001400
or eax, 0x427f29b1
cmp eax, 0x9701c339
jbe 0x1400278b0
mov rax, qword [0x141ddc4e0]
nop dword [rax + rax]
mov eax, dword [0x141dc45f0]
sub eax, dword [0x141dc45f4]
and eax, 0x49f2320b
add eax, 0x7570a40d
or eax, 0x3f5b8b2b
mov rsi, qword [0x141ddc4e0]
cmp eax, 0x6d8fbdbb
je 0x1400278b0
mov eax, dword [str.:cHx]
mov ecx, dword [0x141dc45fc]
add eax, ecx
add eax, 0xfa66b1f2
mov ecx, 0x83c3f437
imul rcx, rax
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
imul eax, eax, 0xb42a5ff0
cmp eax, 0x90d61271
jne 0x140027bda
jmp 0x140027c1a
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x140027920
test r14, r14
mov r15, qword [rbp + 0x58]
mov rdi, qword [rbp + 0x30]
je 0x140027c5d
movabs r11, 0xfd95095e3a6861b1
movabs r12, 0x80aafc04f153c8a7
movabs r13, 0x73d7bddf5b238f5b
movabs r14, 0x63c9020a48e60ebf
movabs rsi, 0x4361ba5209efe2c9
mov eax, dword [0x141dc4648]
xor eax, dword [0x141dc464c]
add eax, 0x3a7afc87
xor eax, 0xa62110
or eax, 0xf549480f
lea r15, [0x141db16e8]
cmp eax, 0x4e3d2dbd
jne 0x140027a0a
mov rax, qword [rbp + 0x40]
mov qword [rax], r15
mov rcx, qword [rax]
mov rax, qword [rbp + 0x38]
mov qword [rax], r14
mov rdx, qword [rax]
sub rsp, 0x20
mov rbx, rsi
mov rsi, r11
call fcn.14001a0c0
mov r11, rsi
mov rsi, rbx
add rsp, 0x20
mov rcx, qword [rax]
xor rcx, r13
mov rdx, qword [rax + 8]
xor rdx, rbx
mov r8, qword [rax + 0x10]
xor r8, r12
mov r9, qword [rax + 0x18]
xor r9, r11
movzx eax, byte [rax + 0x20]
xor al, 0x21
mov r10, qword [rbp + 0x68]
mov qword [r10], rcx
mov qword [r10 + 8], rdx
mov qword [r10 + 0x10], r8
mov qword [r10 + 0x18], r9
mov byte [r10 + 0x20], al
mov qword [rdi], r10
mov qword [rdi + 8], 0x21
mov rax, qword [rbp + 0x88]
mov qword [rax], rdi
mov rbx, qword [rbp + 0x68]
nop
mov rax, qword [rbp + 0x40]
mov qword [rax], r15
mov rcx, qword [rax]
mov rax, qword [rbp + 0x38]
mov qword [rax], r14
mov rdx, qword [rax]
sub rsp, 0x20
mov rdi, r15
mov r15, rsi
mov rsi, r14
mov r14, r13
mov r13, r12
mov r12, r11
call fcn.14001a0c0
mov r11, r12
mov r12, r13
mov r13, r14
mov r14, rsi
mov rsi, r15
mov r15, rdi
add rsp, 0x20
mov rcx, qword [rax]
xor rcx, r13
mov rdx, qword [rax + 8]
xor rdx, rsi
mov r8, qword [rax + 0x10]
xor r8, r12
mov r9, qword [rax + 0x18]
xor r9, r11
movzx eax, byte [rax + 0x20]
xor al, 0x21
mov qword [rbx], rcx
mov qword [rbx + 8], rdx
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r9
mov byte [rbx + 0x20], al
mov rcx, qword [rbp + 0x30]
mov qword [rcx], rbx
mov qword [rcx + 8], 0x21
mov rax, qword [rbp + 0x88]
mov qword [rax], rcx
xor eax, eax
test al, al
jne 0x140027a10
lea rax, [0x14008c810]
mov r14, qword [rbp + 0x88]
mov qword [r14 + 8], rax
lea rax, [0x140103eb0]
mov rdi, qword [rbp]
mov qword [rdi], rax
xor eax, eax
test al, al
je 0x140027f46
jmp 0x140027f9c
mov eax, 0x94433973
nop
mov ecx, dword [0x141dc45b8]
or ecx, dword [0x141dc45bc]
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xac76172d
imul ecx, ecx, 0x3cda1dc1
cmp ecx, 0xf171eeee
ja 0x140027ae0
ud2
ud2
mov eax, dword [0x141dc4468]
or eax, dword [0x141dc446c]
add eax, 0xb94a7ab8
xor eax, 0xd521c052
add eax, 0xf9d3adb3
cmp eax, 0x195f28b5
jae 0x140027b80
jmp 0x140027ba7
ud2
mov eax, dword [0x141dc4470]
mov ecx, dword [0x141dc4474]
add eax, ecx
add eax, 0xff46d74d
xor eax, 0x71bc6546
imul eax, eax, 0xd554bfb3
ud2
ud2
mov eax, dword [0x141dc4600]
xor edx, edx
div dword [0x141dc4604]
mov edi, eax
add edi, 0x50b6b20e
or edi, 0x3b0f1061
and edi, 0xfbef1b71
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x44ef2c3e
jae 0x140027c32
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140027bda
lea rsi, [0x14008c810]
nop dword [rax]
mov eax, dword [0x141dc4608]
or eax, dword [0x141dc460c]
xor eax, 0x90d24407
and eax, 0xdcd24df7
cmp eax, 0x54c5ee2e
je 0x140027c40
movabs rdi, 0x9d45940f69b50d5a
mov eax, dword [0x141dc4628]
xor edx, edx
div dword [0x141dc462c]
add eax, 0xed824be0
lea rbx, [0x141da748a]
cmp eax, 0xc816cdcb
jae 0x140027cb0
mov qword [r13], rbx
mov rcx, qword [r13]
mov qword [r15], rdi
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.1400177c0
add rsp, 0x20
mov rax, qword [rax]
nop word cs:[rax + rax]
mov r14d, dword [0x141dc4630]
and r14d, dword [0x141dc4634]
or r14d, 0x303104f1
and r14d, 0x703115f7
mov qword [r13], rbx
mov rcx, qword [r13]
mov qword [r15], rdi
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.1400177c0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rax]
cmp r14d, 0x4b5463a2
je 0x140027cb0
mov rdi, rax
movabs r8, 0x72396d0abc24f508
movabs r10, 0x60f835fa28c43580
movabs r11, 0x5cc1f4aaac985a06
movabs r9, 0x44f21e587249d16a
movabs r13, 0x22fd9cbde01aa544
xor eax, eax
test al, al
jne 0x140027d7b
mov eax, dword [0x141dc4638]
xor edx, edx
div dword [0x141dc463c]
mov edx, 0x970b851f
imul rdx, rax
shr rdx, 0x3f
or edx, 0xd08fe392
mov rbx, qword [rcx + 8]
xor rbx, r13
mov r14, qword [rcx + 0x10]
xor r14, r8
mov r15, qword [rcx + 0x18]
xor r15, r11
mov rax, qword [rcx + 0x20]
xor rax, r10
movzx r12d, word [rcx + 0x28]
cmp edx, 0x2c156ec7
jae 0x140027d91
mov rax, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
mov rax, qword [rcx + 0x18]
mov rax, qword [rcx + 0x20]
movzx eax, word [rcx + 0x28]
jmp 0x140027d31
mov dword [rbp + 0xe0], r12d
mov qword [rbp + 0xc8], rax
mov rdx, rdi
xor rdx, r9
mov eax, dword [0x141dc4640]
mov ecx, dword [0x141dc4644]
add eax, ecx
add eax, 0x394ccf65
imul rcx, rax, 0x538ed98f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
add eax, 0x88d920dd
cmp eax, 0x3a4cad5b
mov r12, qword [rbp + 0x20]
jae 0x140027e6d
mov r9d, dword [rbp + 0xe0]
mov eax, r9d
xor al, 0xf9
mov rcx, qword [rbp + 0x48]
mov qword [rcx], rdx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], r15
mov r8, qword [rbp + 0xc8]
mov qword [rcx + 0x20], r8
mov byte [rcx + 0x28], al
mov eax, r9d
shr eax, 8
xor al, 0x9d
mov byte [rcx + 0x29], al
mov rax, qword [rbp + 0x50]
mov qword [rax], rcx
mov qword [rax + 8], 0x2a
mov qword [r12], rax
mov qword [r12 + 8], rsi
mov rcx, qword [rbp + 0x60]
lea rax, [0x140103eb0]
mov qword [rcx], rax
mov qword [rcx + 8], 2
mov qword [rcx + 0x20], 0
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], 1
sub rsp, 0x20
mov rdi, rdx
call fcn.1400a0b00
mov rdx, rdi
add rsp, 0x20
mov ecx, dword [rbp + 0xe0]
mov eax, ecx
shr eax, 8
mov dword [rbp + 0xd0], eax
mov r12, qword [rbp + 0x48]
mov r13, qword [rbp + 0x50]
mov rdi, qword [rbp + 0x60]
nop word [rax + rax]
mov eax, ecx
xor al, 0xf9
mov qword [r12], rdx
mov qword [r12 + 8], rbx
mov qword [r12 + 0x10], r14
mov qword [r12 + 0x18], r15
mov rcx, qword [rbp + 0xc8]
mov qword [r12 + 0x20], rcx
mov byte [r12 + 0x28], al
mov eax, dword [rbp + 0xd0]
xor al, 0x9d
mov byte [r12 + 0x29], al
mov qword [r13], r12
mov qword [r13 + 8], 0x2a
mov rcx, qword [rbp + 0x20]
mov qword [rcx], r13
lea rax, [0x14008c810]
mov qword [rcx + 8], rax
lea rax, [0x140103eb0]
mov qword [rdi], rax
mov qword [rdi + 8], 2
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x10], rcx
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, rdi
mov rsi, r15
mov r15, r14
mov r14, rbx
mov rbx, rdx
call fcn.1400a0b00
mov ecx, dword [rbp + 0xe0]
mov rdx, rbx
mov rbx, r14
mov r14, r15
mov r15, rsi
add rsp, 0x20
xor eax, eax
test al, al
jne 0x140027e90
jmp 0x140029065
mov eax, dword [0x141dc4650]
sub eax, dword [0x141dc4654]
xor eax, 0x353cb726
imul eax, eax, 0x316a967b
imul rsi, rax, 0x38757341
shr rsi, 0x3d
mov qword [rdi + 8], 2
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, rdi
call fcn.1400a0b00
add rsp, 0x20
cmp esi, 0xa9264336
jbe 0x140027fcd
mov qword [rdi + 8], 2
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, rdi
call fcn.1400a0b00
add rsp, 0x20
jmp 0x140027f46
mov rdx, qword [rbp + 0xc0]
mov eax, edx
and eax, 3
lea rcx, [0x141dbb4ac]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
mov r13, qword [rbp + 0x18]
jmp rax
mov eax, dword [0x141dc46d0]
and eax, dword [0x141dc46d4]
imul eax, eax, 0x8989f3b8
add eax, 0xaf36a3e5
cmp eax, 0xbac4411b
ja 0x1400282b0
mov eax, dword [0x141dc46d8]
xor edx, edx
div dword [0x141dc46dc]
imul rax, rax, 0x52704461
shr rax, 0x3e
or eax, 0x41906d80
cmp eax, 0xa229527
mov rbx, qword [rbp - 0x40]
jb 0x14002831e
mov eax, dword [0x141dc46e0]
xor edx, edx
div dword [0x141dc46e4]
imul eax, eax, 0x4ae9cb60
add eax, 0x7e01b40f
mov qword [rbx], 0
cmp eax, 0xbe417ffb
jbe 0x140028327
mov qword [rbx], 0
jmp 0x1400282f7
xor eax, eax
test al, al
je 0x14002833e
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
nop word cs:[rax + rax]
mov eax, dword [0x141dc46e8]
and eax, dword [0x141dc46ec]
xor eax, 0xa7e515ec
imul rdi, rax, 0x5f2d7637
shr rdi, 0x3e
add edi, 0xb2540867
sub rsp, 0x20
mov rcx, rbx
call rsi
add rsp, 0x20
cmp edi, 0xebc84f48
ja 0x140028350
test eax, eax
je 0x140028667
nop
mov eax, dword [0x141dc46f8]
imul eax, dword [0x141dc46fc]
imul eax, eax, 0x7c40b51d
add eax, 0xd2b4504e
cmp eax, 0x5edb6f4a
jb 0x140028390
mov rdi, qword [rbx]
mov r15, qword [0x141ddc4d8]
test r15, r15
jne 0x14002845d
mov rsi, qword [rbp - 0x10]
mov qword [rsi], 0
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
add rsp, 0x20
nop
mov ecx, dword [0x141dc4700]
imul ecx, dword [0x141dc4704]
imul ecx, ecx, 0x214ceb16
add ecx, 0xb3320ea8
cmp ecx, 0x8b2f2e57
ja 0x1400283e0
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4708]
imul ecx, dword [0x141dc470c]
or ecx, 0x5e6d6f2d
and ecx, 0x7ffdefed
cmp ecx, 0xea5c9c66
je 0x140028410
test eax, eax
je 0x1400286ad
mov r15, qword [rsi]
mov qword [0x141ddc4d8], r15
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140028450
test r15, r15
je 0x140028712
mov eax, dword [0x141dc4730]
or eax, dword [0x141dc4734]
imul rax, rax, 0x1bc6d5d3
shr rax, 0x39
cmp eax, 0xe20274b2
jne 0x14002855e
mov rax, rdi
or rax, r15
shr rax, 0x20
je 0x140028495
mov rax, rdi
xor edx, edx
div r15
jmp 0x14002849c
mov eax, edi
xor edx, edx
div r15d
mov rsi, qword [rbp + 0x98]
imul rax, rdx, 0x3b9aca00
mov rcx, rax
or rcx, r15
shr rcx, 0x20
je 0x1400284bd
xor edx, edx
div r15
jmp 0x1400284c2
xor edx, edx
div r15d
sub rsp, 0x20
mov ecx, 0x23
call fcn.14008ca60
add rsp, 0x20
mov qword [rsi], 0
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
add rsp, 0x20
jmp 0x14002855e
xor edx, edx
div r15
or ebx, 0xb8881d5b
add ebx, 0xf691803
or ebx, 0x924e9e8
imul r14, rcx, 0x3b9aca00
add r14, rax
mov rax, r14
shr rax, 9
movabs r12, 0x44b82fa09b5a53
mul r12
mov rsi, rdx
sub rsp, 0x20
mov ecx, 0x23
call fcn.14008ca60
add rsp, 0x20
mov rcx, qword [rbp + 0x98]
mov qword [rcx], 0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
add rsp, 0x20
cmp ebx, 0x12927b1b
jae 0x1400285ba
mov eax, dword [0x141dc4738]
xor edx, edx
div dword [0x141dc473c]
mov ebx, eax
mov rax, rdi
or rax, r15
shr rax, 0x20
je 0x140028590
mov rax, rdi
xor edx, edx
div r15
mov rcx, rax
jmp 0x140028599
mov eax, edi
xor edx, edx
div r15d
mov ecx, eax
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, r15
shr rdx, 0x20
jne 0x1400284f0
xor edx, edx
div r15d
jmp 0x1400284f5
test eax, eax
je 0x1400286eb
shr rsi, 0xb
imul eax, esi, 0x3b9aca00
mov rcx, qword [rbp + 0x98]
mov rbx, qword [rcx]
mov ecx, dword [0x141dc4750]
imul ecx, dword [0x141dc4754]
add ecx, 0x64833c4a
xor ecx, 0x31422400
and ecx, 0x7fd73621
cmp ecx, 0x454144b6
mov r15, qword [rbp - 0x38]
jbe 0x140028608
mov rcx, qword [0x141ddc4d8]
sub r14d, eax
nop dword [rax + rax]
mov eax, dword [0x141dc4758]
imul eax, dword [0x141dc475c]
add eax, 0x4cc99ae7
or eax, 0x47aa4ec7
mov r9, qword [0x141ddc4d8]
cmp eax, 0xef579db9
je 0x140028610
test r9, r9
jne 0x1400288b7
mov qword [r15], 0
mov eax, dword [0x141dc4760]
or eax, dword [0x141dc4764]
imul eax, eax, 0xdebff686
cmp eax, 0xd0ef94b8
jne 0x1400287d0
jmp 0x140028808
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
ud2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
ud2
mov eax, dword [0x141dc4740]
or eax, dword [0x141dc4744]
add eax, 0x44ff851d
xor eax, 0x3c0a1006
add eax, 0xc96c3ed3
cmp eax, 0x40449912
jae 0x14002878b
jmp 0x1400287c0
mov eax, dword [str.I_d_]
xor edx, edx
div dword [0x141dc471c]
add eax, 0xc308ea75
xor eax, 0xbdde8278
mov ecx, 0x8fc27f2d
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x75a4a6bc
ja 0x14002875f
mov eax, dword [0x141dc4720]
or eax, dword [0x141dc4724]
imul eax, eax, 0xbf32c94a
or eax, 0x7fffb33b
ud2
ud2
mov eax, dword [0x141dc4748]
mov ecx, dword [0x141dc474c]
lea esi, [rax + rcx]
add esi, 0xa8c39285
xor esi, 0xb88e0bb8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0xcec40eb
jae 0x140027b7e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x14002878b
mov eax, dword [0x141dc4768]
sub eax, dword [0x141dc476c]
mov edi, 0xf698c657
imul rdi, rax
shr rdi, 0x3f
add edi, 0x3a1cda1
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
add rsp, 0x20
cmp edi, 0xf5519953
jbe 0x140028820
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
add rsp, 0x20
jmp 0x1400287d0
mov ecx, dword [0x141dc4770]
and ecx, dword [0x141dc4774]
add ecx, 0x84653b5a
xor ecx, 0xaaf290ff
cmp ecx, 0x667c8e2e
ja 0x140028820
test eax, eax
je 0x1400290bd
mov r9, qword [r15]
mov qword [0x141ddc4d8], r9
mov eax, dword [0x141dc4788]
xor edx, edx
div dword [0x141dc478c]
mov eax, dword [0x141dc4790]
xor edx, edx
div dword [0x141dc4794]
imul eax, eax, 0xa2673f50
add eax, 0x2bdbf210
and eax, 0x3f5098e0
cmp eax, 0x4751988d
ja 0x140028860
nop word cs:[rax + rax]
mov eax, dword [0x141dc4798]
or eax, dword [0x141dc479c]
imul eax, eax, 0xc8d8fb94
add eax, 0x2ef06be4
cmp eax, 0xa3b6b229
jb 0x140028890
test r9, r9
je 0x140027b7e
xor eax, eax
test al, al
je 0x140028944
mov rax, rbx
or rax, r9
shr rax, 0x20
je 0x1400288d7
mov rax, rbx
xor edx, edx
div r9
jmp 0x1400288de
mov eax, ebx
xor edx, edx
div r9d
imul rax, rdx, 0x3b9aca00
mov rcx, rax
or rcx, r9
shr rcx, 0x20
je 0x1400288ff
xor edx, edx
div r9
mov rax, qword [0x141ddc4d8]
jmp 0x140028944
xor edx, edx
div r9d
mov rax, qword [0x141ddc4d8]
jmp 0x140028944
xor edx, edx
div r9
add ecx, 0x927685ba
imul r15, r8, 0x3b9aca00
add r15, rax
mov rax, r15
shr rax, 9
mul r12
or ecx, 0x578c02a5
mov r10, qword [0x141ddc4d8]
cmp ecx, 0xe8741276
jbe 0x140028994
mov eax, dword [0x141dc47a0]
xor edx, edx
div dword [0x141dc47a4]
mov ecx, eax
mov rax, rbx
or rax, r9
shr rax, 0x20
je 0x140028970
mov rax, rbx
xor edx, edx
div r9
mov r8, rax
jmp 0x14002897a
mov eax, ebx
xor edx, edx
div r9d
mov r8d, eax
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, r9
shr rdx, 0x20
jne 0x140028910
xor edx, edx
div r9d
jmp 0x140028915
mov rdi, rdx
test r10, r10
jne 0x140028aae
mov eax, dword [0x141dc47a8]
sub eax, dword [0x141dc47ac]
mov qword [r13], 0
add eax, 0xd63769c9
or eax, 0xe31b66a1
cmp eax, 0x638b1f6e
jne 0x1400289d6
sub rsp, 0x20
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
nop dword [rax]
mov eax, dword [0x141dc47b0]
xor eax, dword [0x141dc47b4]
imul eax, eax, 0xd0d5d251
xor eax, 0x16ce183d
imul r12, rax, 0x33aaf921
shr r12, 0x3d
sub rsp, 0x20
mov rcx, r13
call rbx
add rsp, 0x20
cmp r12d, 0x1a7e573b
je 0x1400289e0
test eax, eax
je 0x140029200
mov eax, dword [0x141dc47d0]
and eax, dword [0x141dc47d4]
imul eax, eax, 0x7d5ab1f8
or eax, 0x8743fb69
imul rax, rax, 0x97e86c7
shr rax, 0x38
cmp eax, 0xa7b058e4
je 0x140028a20
mov r10, qword [r13]
mov eax, dword [0x141dc47d8]
sub eax, dword [0x141dc47dc]
add eax, 0x7afc9b4d
mov ecx, 0xeb2ae0e1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x31f56820
cmp ecx, 0xb19c6255
jbe 0x140028a80
mov qword [0x141ddc4d8], r10
mov eax, dword [0x141dc47e0]
xor eax, dword [0x141dc47e4]
xor eax, 0x39246ecd
imul eax, eax, 0x1a101ea7
mov qword [0x141ddc4d8], r10
cmp eax, 0x5db96cad
je 0x140028a80
test r10, r10
je 0x14002922c
shr rdi, 0xb
imul ecx, edi, 0x3b9aca00
cmp r10, 0x3b9aca00
ja 0x140028acd
mov eax, 0x3b9aca00
xor edx, edx
div r10d
jmp 0x140028acf
xor eax, eax
sub r15d, ecx
lea ecx, [rax - 0x3b9aca00]
xor r8d, r8d
cmp r10, 2
cmovae ecx, eax
setb al
xor r9d, r9d
cmp rsi, rdi
setne r9b
mov edx, 0xff
cmovae edx, r9d
test dl, dl
jne 0x140028b5f
nop dword [rax]
mov edx, dword [0x141dc47f8]
and edx, dword [0x141dc47fc]
imul edx, edx, 0x7e0d9d1f
or edx, 0x5fdee1bd
cmp edx, 0xf5601c53
ja 0x140028b00
cmp r15d, r14d
setne dl
mov r9d, dword [0x141dc4800]
sub r9d, dword [0x141dc4804]
or r9d, 0x14b3211b
imul r9, r9, 0x70f79e9f
shr r9, 0x3d
imul r9d, r9d, 0xd3e6a395
cmp r9d, 0xf4ae8cec
ja 0x140028b20
cmp r15d, r14d
ja 0x140028c60
cmp dl, 1
jne 0x140028c60
mov r8b, al
nop dword [rax + rax]
mov eax, dword [0x141dc4830]
sub eax, dword [0x141dc4834]
and eax, 0x80138422
or eax, 0x1fec3bdd
imul eax, eax, 0x1e7a55e7
cmp eax, 0x22349f83
jb 0x140028b70
mov r9, rsi
sub r9, rdi
jb 0x140029151
mov eax, 0xc4ecca5d
nop word cs:[rax + rax]
mov edx, dword [0x141dc4838]
add edx, dword [0x141dc483c]
or edx, 0x8fd483bc
imul edx, edx, 0xcedfdcbe
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x37ec7cb9
ja 0x140028bb0
nop dword [rax + rax]
mov eax, dword [0x141dc4840]
xor eax, dword [0x141dc4844]
imul rax, rax, 0x16729b31
shr rax, 0x3b
or eax, 0x10a04048
and eax, 0x10a04049
cmp eax, 0x2a0e8d6f
ja 0x140028be0
cmp r15d, r14d
jbe 0x140028c88
xor eax, eax
nop
test al, al
jne 0x140028c10
test r9, r9
je 0x140029151
dec r9
lea r10d, [r14 + 0x3b9aca00]
nop word [rax + rax]
mov eax, dword [0x141dc4848]
xor eax, dword [str.pQ6]
or eax, 0x3010174b
imul eax, eax, 0x6962b42a
add eax, 0x2379ccd6
cmp eax, 0x970f05a2
ja 0x140028c30
jmp 0x140028c8b
mov eax, dword [0x141dc4808]
or eax, dword [0x141dc480c]
and eax, 0xddc1b6cd
imul rax, rax, 0x4e17a92b
shr rax, 0x3e
cmp eax, 0xef73ae50
je 0x140028c60
jmp 0x140028d85
mov r10d, r14d
sub r10d, r15d
xor eax, eax
test al, al
jne 0x140028c90
cmp r10d, 0x3b9aca00
jb 0x140028d57
mov eax, r10d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul edx, eax, 0x3b9aca00
sub r10d, edx
nop dword [rax + rax]
mov edx, dword [0x141dc4850]
imul edx, dword [0x141dc4854]
add edx, 0xbb5024b3
xor edx, 0xf0d8e6ee
add edx, 0x2e559062
cmp edx, 0xa8a50ee3
ja 0x140028cc0
mov r11d, eax
nop word [rax + rax]
mov eax, dword [0x141dc4858]
xor edx, edx
div dword [0x141dc485c]
or eax, 0x221bb8b0
add eax, 0xfb91fa2e
xor eax, 0xa170086e
mov rdx, r9
add rdx, r11
setb bl
cmp eax, 0x94ce3ff1
jb 0x140028cf0
test bl, bl
jne 0x140029080
nop word cs:[rax + rax]
mov eax, dword [0x141dc4860]
xor eax, dword [0x141dc4864]
add eax, 0xdaeb2795
or eax, 0x7ff7f7fd
cmp eax, 0x1a4d449e
jb 0x140028d30
xor eax, eax
nop
test al, al
jne 0x140028d50
mov r9, rdx
xor eax, eax
cmp r9, r8
setne al
mov edx, 0xff
cmovb eax, edx
xor r8d, r8d
cmp r10d, ecx
setne r8b
cmovb r8d, edx
test al, al
cmovne r8d, eax
cmp r8b, 1
jne 0x1400290e8
cmp rsi, rdi
ja 0x1400290e8
sub rdi, rsi
cmp r15d, r14d
jae 0x140028de7
nop word cs:[rax + rax]
mov eax, dword [0x141dc4810]
add eax, dword [0x141dc4814]
imul rax, rax, 0xea0d783
shr rax, 0x3b
imul eax, eax, 0xa1e6fe86
xor eax, 0x5f873774
cmp eax, 0x103b2374
jb 0x140028da0
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x140028dd0
test rdi, rdi
je 0x1400290e8
dec rdi
add r15d, 0x3b9aca00
sub r15d, r14d
cmp r15d, 0x3b9aca00
jb 0x140028e50
mov eax, r15d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
add rdi, rax
jb 0x1400291b0
imul eax, eax, 0x3b9aca00
sub r15d, eax
mov eax, 0x9126be17
nop dword [rax + rax]
mov ecx, dword [0x141dc4818]
imul ecx, dword [0x141dc481c]
or ecx, 0x4346c68d
xor ecx, 0x1347bf8c
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x4d7ac585
je 0x140028e20
nop dword [rax]
mov eax, dword [0x141dc4880]
sub eax, dword [0x141dc4884]
xor eax, 0x8e52e63b
add eax, 0xac11957d
shr eax, 2
imul rdx, rax, 0x489cf221
shr rdx, 0x3b
cmp r15d, 0x3b9aca00
sete al
cmp rdi, 0x19
setb cl
cmp edx, 0x202a1435
ja 0x140028e50
or al, cl
jne 0x1400290e8
mov eax, dword [0x141dc4888]
and eax, dword [0x141dc488c]
and eax, 0x471800
add eax, 0x4f9ef2a2
cmp eax, 0xfe4dcab6
mov rdi, qword [rbp - 8]
jbe 0x140028ed0
sub rsp, 0x20
mov rcx, rdi
call fcn.1400df310
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dc4890]
add eax, dword [0x141dc4894]
imul esi, eax, 0x14ebfbd7
sub rsp, 0x20
mov rcx, rdi
call fcn.1400df310
add rsp, 0x20
cmp esi, 0x42c0bae2
je 0x140028ed0
cmp byte [rdi], 0x12
jne 0x140027b7e
sub rsp, 0x20
call fcn.14001e110
add rsp, 0x20
mov r14, qword [rbp - 0x18]
mov qword [r14], 0
mov rdi, qword [rbp - 0x28]
mov dword [rdi], 0
mov rsi, qword [rbp - 0x30]
mov qword [rsi], 0
mov rbx, qword [rbp - 0x20]
mov dword [rbx], 0
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcess
mov rcx, rax
mov rdx, rbx
call sub.KERNEL32.dll_CheckRemoteDebuggerPresent
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 7
mov r8, r14
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x10
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x1f
mov r8, rdi
mov r9d, 4
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x10
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x1e
mov r8, rsi
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov ecx, dword [rbx]
mov rdx, qword [r14]
nop word [rax + rax]
test rdx, rdx
sete r8b
test ecx, ecx
sete al
mov r9d, dword [0x141dc48a0]
or r9d, dword [str.mf_]
xor r9d, 0x456cff98
imul r11d, r9d, 0x132f8ef4
cmp dword [rdi], 0
setne r9b
cmp qword [rsi], 0
sete r10b
cmp r11d, 0xe6cf3aa7
ja 0x140028fe0
and al, r8b
and al, r9b
and al, r10b
je 0x140029125
nop
mov eax, dword [0x141dc48c0]
and eax, dword [0x141dc48c4]
and eax, 0x12020ac1
add eax, 0xaaa54487
cmp eax, 0x4bbab1ce
jb 0x140029030
sub rsp, 0x20
mov ecx, 0x80000001
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
call fcn.140029390
add rsp, 0x20
movaps xmm6, xmmword [rbp + 0xf0]
lea rsp, [rbp + 0x108]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2
mov eax, dword [0x141dc4778]
or eax, dword [0x141dc477c]
add eax, 0x8fde5ea4
xor eax, 0x8210188
or eax, 0x7196de75
cmp eax, 0xaf3496ae
jbe 0x140029252
jmp 0x140029289
sub rsp, 0x20
call fcn.1400c0780
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dc4898]
xor edx, edx
div dword [0x141dc489c]
imul eax, eax, 0x2da7de58
add eax, 0x90e70ed9
cmp eax, 0x43b4d873
jb 0x140029100
jmp 0x140027b7e
mov eax, dword [0x141dc48a8]
or eax, dword [0x141dc48ac]
and eax, 0xc32c2c98
imul rax, rax, 0x49ad688f
shr rax, 0x3b
cmp eax, 0x85263266
jne 0x140029312
jmp 0x140029343
mov eax, dword [0x141dc4870]
or eax, dword [0x141dc4874]
xor eax, 0x1d21052
add eax, 0x43414ad1
cmp eax, 0x8fb788ed
jbe 0x140029170
ud2
mov eax, 0x94c050eb
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4878]
imul ecx, dword [str.Vg_i]
imul ecx, ecx, 0x2af83b04
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x75cc7867
ud2
mov eax, dword [0x141dc4820]
mov ecx, dword [0x141dc4824]
add eax, ecx
add eax, 0xd6f2e83c
or eax, 0xc80f9df5
cmp eax, 0xe163fc28
jae 0x1400291e0
ud2
mov eax, dword [0x141dc4828]
or eax, dword [0x141dc482c]
imul eax, eax, 0x6f34961e
ud2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov eax, dword [0x141dc47b8]
or eax, dword [0x141dc47bc]
imul eax, eax, 0x744fcf6
cmp eax, 0xb5ea9e68
jne 0x140029299
jmp 0x1400292b9
mov eax, dword [0x141dc47e8]
sub eax, dword [0x141dc47ec]
and eax, 0x70210b0
add eax, 0x27f20329
cmp eax, 0xc4b5384
jae 0x1400292eb
jmp 0x14002930e
mov eax, dword [0x141dc4780]
add eax, dword [0x141dc4784]
xor eax, 0x486792c0
imul esi, eax, 0x610ccff5
add esi, 0xe2f24d3e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x9ecb3886
jbe 0x140027b7e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x140029252
mov eax, dword [0x141dc47c0]
imul eax, dword [0x141dc47c4]
and eax, 0x903800c5
xor eax, 0x8c3620d1
ud2
ud2
mov eax, dword [0x141dc47f0]
sub eax, dword [0x141dc47f4]
or eax, 0xbeff9747
add eax, 0xacbdd49b
ud2
ud2
mov eax, dword [0x141dc48b0]
add eax, dword [0x141dc48b4]
or eax, 0x15d00cd5
xor eax, 0x5155510f
imul esi, eax, 0xd1e56383
sub rsp, 0x20
call fcn.1400c0780
add rsp, 0x20
cmp esi, 0x3d093f26
jae 0x140029360
sub rsp, 0x20
call fcn.1400c0780
add rsp, 0x20
jmp 0x140029312
mov eax, dword [0x141dc48b8]
xor edx, edx
div dword [0x141dc48bc]
and eax, 0xad0a6c05
add eax, 0xc222a135
and eax, 0xe22ded22
cmp eax, 0x80212404
jb 0x140029360
jmp 0x140027b7e