Function at 0x1400cf0d0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x78], r9
mov qword [rbp + 0x30], r8
mov qword [rbp + 0x90], rdx
mov qword [rbp + 0xa8], rcx
xor eax, eax
test al, al
jne 0x1400cf244
mov ecx, dword [0x141dd6528]
imul ecx, dword [0x141dd652c]
add ecx, 0xcd3fcdb3
or ecx, 0x9e97f9bf
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x9c258808
jne 0x1400cf326
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
jmp 0x1400cf10b
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x20], r15
mov qword [rbp], r14
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x10], rdi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 8], r11
mov qword [rbp - 0x68], r10
mov qword [rbp - 0x58], r9
mov qword [rbp + 8], r8
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], rdx
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x210
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x68], rsp
xor eax, eax
test al, al
jne 0x1400cf4cb
mov ecx, dword [0x141dd6530]
and ecx, dword [0x141dd6534]
add ecx, 0xf84bee86
or ecx, 0x7a2483eb
and ecx, 0xfaa493ff
mov eax, 0x2b0
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x470
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x410
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x2d0
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0xa0], rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r8, rsp
cmp ecx, 0x20d16eb7
jne 0x1400cf5ad
mov eax, 0x2b0
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x470
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x410
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x2d0
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
jmp 0x1400cf386
mov qword [rbp + 0x98], rdi
mov qword [rbp + 0x48], r11
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x80], r10
mov qword [rbp + 0x18], r9
mov qword [rbp - 0x70], rdx
mov qword [rbp + 0x28], r14
mov qword [rbp - 0x40], rbx
mov qword [rbp + 0x78], r13
mov rax, qword [rbp + 0x90]
cmp byte [rax], 0
mov r13, qword [rbp + 0xa8]
mov qword [rbp + 0xb0], r8
je 0x1400cf880
mov eax, dword [0x141dd6548]
and eax, dword [0x141dd654c]
mov ecx, 0xb2dc1ca5
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0xeb5e8812
and eax, 0x45141082
cmp eax, 0x92328695
mov r14, qword [rbp + 0x80]
mov r12, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x98]
jbe 0x1400cf64e
mov qword [r15], 0
mov qword [r12], 0
mov qword [r14], 0
mov dword [rcx], 0
mov rbx, rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dd6550]
xor eax, dword [0x141dd6554]
xor eax, 0xf600104
or eax, 0x50938cd9
mov qword [r15], 0
mov qword [r12], 0
mov qword [r14], 0
mov dword [rcx], 0
cmp eax, 0xda287f01
je 0x1400cf660
mov dword [rcx + 4], 0
mov rsi, qword [rbp + 0x50]
mov qword [rsi], 0
mov qword [rbx], 0
mov rdi, qword [r13 + 0xf8]
test rdi, rdi
je 0x1400cf7e9
mov eax, dword [0x141dd6558]
xor edx, edx
div dword [0x141dd655c]
imul eax, eax, 0x31e2ed46
imul rax, rax, 0x4c622f5d
shr rax, 0x3d
add eax, 0x7fcf58e
cmp eax, 0x150cbeff
ja 0x1400cf73c
mov eax, dword [0x141dd6560]
or eax, dword [0x141dd6564]
add eax, 0x7a5864c4
or eax, 0xbbc1e238
shr eax, 1
mov r13d, 0x8b7b55df
imul r13, rax
shr r13, 0x3e
mov rcx, qword [rdi + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov rdx, r15
mov r8, r15
mov r9, r12
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
cmp r13d, 0x9750a595
jbe 0x1400cf760
mov rcx, qword [rdi + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov rdx, r15
mov r8, r15
mov r9, r12
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
jmp 0x1400cf6ed
mov ecx, dword [0x141dd6568]
xor ecx, dword [0x141dd656c]
shr ecx, 4
imul rcx, rcx, 0x10e21c0d
shr rcx, 0x37
or ecx, 0xba98109e
xor ecx, 0x59b2e8d1
cmp ecx, 0x1390d269
jb 0x1400cf760
test eax, eax
mov r13, qword [rbp + 0xa8]
jne 0x1400cf7e9
xor eax, eax
test al, al
je 0x1400cf7ad
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov r15d, dword [0x141dd6570]
imul r15d, dword [0x141dd6574]
and r15d, 0x23483a6b
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp r15d, 0xe477b2ee
je 0x1400cf7c0
sub rsp, 0x20
mov rcx, qword [rbp + 0x98]
mov rdx, rsi
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6578]
or ecx, dword [0x141dd657c]
add ecx, 0xeef63808
or ecx, 0x72cf09ef
cmp ecx, 0xb2bf0a13
je 0x1400cf810
test eax, eax
jne 0x1400d1b59
mov eax, dword [0x141dd6580]
xor eax, dword [0x141dd6584]
mov ecx, 0x82792329
imul rcx, rax
shr rcx, 0x3b
or ecx, 0xeaf50487
add ecx, 0x29765796
cmp ecx, 0x471c5992
ja 0x1400d1b49
jmp 0x1400d1b27
mov dword [r13 + 0x150], 0
mov r8, qword [rbp + 0xb0]
mov rbx, qword [rbp + 0x90]
mov r15, qword [rbp + 0x68]
mov r14, qword [rbp + 0x128]
mov r12, qword [rbp + 0x120]
mov rsi, qword [rbp + 0x18]
nop dword [rax]
mov eax, dword [0x141dd6538]
and eax, dword [0x141dd653c]
xor eax, 0x21000
and eax, 0x4021400
cmp eax, 0x3c80c1f7
ja 0x1400cf8a0
movzx eax, byte [rbx + 1]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6540]
sub ecx, dword [0x141dd6544]
imul ecx, ecx, 0x98405121
or ecx, 0xef696dc4
add ecx, 0xb1520221
cmp ecx, 0xed80aa08
ja 0x1400cf8d0
test al, al
je 0x1400cfad4
mov rax, qword [r13 + 0xf8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd65a8]
or ecx, dword [0x141dd65ac]
or ecx, 0xbb690e71
imul ecx, ecx, 0x211c880b
xor ecx, 0x71bc5093
cmp ecx, 0x1e175800
jb 0x1400cf910
test rax, rax
je 0x1400cfab0
nop
mov ecx, dword [0x141dd65b0]
xor ecx, dword [0x141dd65b4]
xor ecx, 0xc0dda86e
imul ecx, ecx, 0xbe73e1a9
add ecx, 0x6a6e31f5
cmp ecx, 0x459a9f5b
jb 0x1400cf940
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
test eax, eax
je 0x1400cf9dc
mov r8, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd65b8]
and eax, dword [0x141dd65bc]
add eax, 0xd562630f
xor eax, 0x7210022e
or eax, 0x9283450
cmp eax, 0xa24c88bd
jb 0x1400cf990
movups xmm0, xmmword [r13 + 0x140]
mov eax, dword [0x141dd65c0]
xor eax, dword [0x141dd65c4]
imul eax, eax, 0x5d12f28e
cmp eax, 0xe0f8e64e
je 0x1400cfa96
jmp 0x1400cfa7c
mov eax, dword [0x141dd65c8]
or eax, dword [0x141dd65cc]
imul eax, eax, 0xdc3acd98
add eax, 0xe64fc650
cmp eax, 0xbb5731ee
jbe 0x1400cfa08
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov edi, dword [0x141dd65d0]
and edi, dword [0x141dd65d4]
or edi, 0x218c5218
xor edi, 0x23d4d453
or edi, 0xd8222924
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x97f1d799
jb 0x1400cfa10
mov r8, qword [rbp + 0xb0]
nop word [rax + rax]
mov eax, dword [0x141dd65d8]
xor edx, edx
div dword [0x141dd65dc]
xor eax, 0x804e8ab4
imul rax, rax, 0x7b7df1c7
shr rax, 0x3e
or eax, 0xacabac
cmp eax, 0x91cc952a
ja 0x1400cfa50
jmp 0x1400cfab0
movups xmmword [r13 + 0x130], xmm0
movups xmm1, xmmword [rsi + 0x18]
movups xmmword [r13 + 0x140], xmm1
mov al, 1
test al, al
jne 0x1400cfab0
movups xmmword [r13 + 0x130], xmm0
movups xmm1, xmmword [rsi + 0x18]
movups xmmword [r13 + 0x140], xmm1
jmp 0x1400cfa7c
mov eax, dword [0x141dd65e0]
and eax, dword [0x141dd65e4]
imul eax, eax, 0x8f8d356c
imul rax, rax, 0x42af227f
shr rax, 0x3d
cmp eax, 0x41b6ae86
je 0x1400cfab0
cmp byte [rbx + 2], 0
je 0x1400cfb63
xor eax, eax
test al, al
jne 0x1400cfae0
xor eax, eax
test al, al
je 0x1400cfb00
mov qword [r13 + 0xe8], r14
mov qword [r13 + 0xf0], r12
nop dword [rax + rax]
mov eax, dword [0x141dd7090]
imul eax, dword [0x141dd7094]
imul rcx, rax, 0xed2026b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xc6915d53
mov qword [r13 + 0xe8], r14
mov qword [r13 + 0xf0], r12
cmp eax, 0x5797bac0
je 0x1400cfb00
nop dword [rax]
mov eax, dword [0x141dd7098]
imul eax, dword [0x141dd709c]
xor eax, 0x13184148
or eax, 0x24418aa7
add eax, 0xeb51fe41
cmp eax, 0xd4896094
ja 0x1400cfb40
movzx eax, byte [rbx + 3]
mov rcx, qword [r13 + 0xf8]
nop
mov edx, dword [0x141dd65e8]
and edx, dword [0x141dd65ec]
xor edx, 0x2d255fde
add edx, 0x723ee83
cmp edx, 0x579b7776
jb 0x1400cfb70
movabs r14, 0x8000000000000000
test rcx, rcx
mov r12, qword [rbp + 0x28]
je 0x1400d0550
nop word [rax + rax]
mov edx, dword [0x141dd65f0]
imul edx, dword [0x141dd65f4]
add edx, 0x314a52bc
xor edx, 0x2011e6fa
add edx, 0x8ce64062
cmp edx, 0xc96dafff
ja 0x1400cfbb0
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov edx, dword [0x141dd65f8]
xor edx, dword [0x141dd65fc]
imul rdx, rdx, 0x268751b
shr rdx, 0x37
imul edx, edx, 0xc4f37826
cmp edx, 0xca85493
je 0x1400cfbe0
test eax, eax
je 0x1400d0550
cmp eax, 1
je 0x1400cfc80
mov eax, dword [0x141dd6600]
xor edx, edx
div dword [0x141dd6604]
mov eax, dword [0x141dd6608]
xor edx, edx
div dword [0x141dd660c]
xor eax, 0x47743928
imul eax, eax, 0x1ee03c9b
cmp eax, 0x6d07ea30
je 0x1400cfc20
mov rax, qword [r13 + 0x80]
nop word [rax + rax]
mov edx, dword [0x141dd6610]
imul edx, dword [0x141dd6614]
or edx, 0x8a00008
xor edx, 0x1480080a
or edx, 0xe31cb7d5
cmp edx, 0x2ce7cbd2
je 0x1400cfc50
cmp rax, r14
jne 0x1400d0550
mov rsi, qword [rbp - 0x70]
mov qword [rsi], 0
sub rsp, 0x20
mov edx, 8
mov r8, rsi
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
mov ecx, 0x9b89037f
nop word cs:[rax + rax]
mov edx, dword [0x141dd6618]
imul edx, dword [0x141dd661c]
imul rdx, rcx
shr rdx, 0x3f
imul edx, edx, 0x5d3fc8ce
or edx, 0x88cea1bb
cmp edx, 0xe34210d0
ja 0x1400cfcb0
test eax, eax
mov r8, qword [rbp + 0xb0]
je 0x1400d04e8
mov r15, qword [rsi]
nop dword [rax + rax]
mov eax, dword [0x141dd6620]
sub eax, dword [0x141dd6624]
imul eax, eax, 0xf216dda5
or eax, 0xbf812005
and eax, 0xbf892dc5
cmp eax, 0xaa89455d
je 0x1400cfcf0
lea rax, [r15 + 1]
cmp rax, 2
jb 0x1400d0500
mov dword [r12], 0
mov eax, dword [0x141dd6628]
xor edx, edx
div dword [0x141dd662c]
imul eax, eax, 0x71863edf
or eax, 0x151709b4
imul eax, eax, 0x227c0d60
cmp eax, 0x681cd138
je 0x1400cfd8f
mov esi, dword [0x141dd6630]
and esi, dword [0x141dd6634]
add esi, 0x4bc3e045
or esi, 0x20b37fee
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r15
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
cmp esi, 0xee51f66a
jbe 0x1400cfdb1
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r15
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
jmp 0x1400cfd4f
test eax, eax
jne 0x1400cfe6e
mov eax, dword [0x141dd6638]
and eax, dword [0x141dd663c]
imul eax, eax, 0x6ff91204
xor eax, 0x48280220
or eax, 0x3797d589
cmp eax, 0xc3148c72
jbe 0x1400cfdea
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov edi, dword [0x141dd6640]
and edi, dword [0x141dd6644]
add edi, 0x62437b8e
or edi, 0xc5e1b0fe
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xbc55175d
jb 0x1400cfe00
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r8d, 0xc47a23f9
nop
mov eax, dword [0x141dd6648]
xor edx, edx
div dword [0x141dd664c]
or eax, 0xfdeffdd2
imul rax, r8
shr rax, 0x3f
cmp eax, 0xcabd5827
ja 0x1400cfe40
cmp ecx, 0x8007007a
jne 0x1400d0440
xor eax, eax
test al, al
jne 0x1400cfe70
mov edi, dword [r12]
mov eax, dword [0x141dd6668]
and eax, dword [0x141dd666c]
and eax, 0x41817800
or eax, 0xbe56857d
imul eax, eax, 0x152feec8
cmp eax, 0xcc336333
jbe 0x1400cfea9
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor ebx, ebx
nop word cs:[rax + rax]
sub rsp, 0x20
call rsi
add rsp, 0x20
test bl, bl
jne 0x1400cfec0
mov edx, 0xc25fad39
mov rcx, rax
inc rcx
mov rbx, qword [rbp + 0x90]
mov r8d, dword [0x141dd6670]
mov r9d, dword [0x141dd6674]
add r8d, r9d
add r8d, 0x8c4df706
imul r8, rdx
shr r8, 0x3f
xor r8d, 0xf81b5ec5
cmp r8d, 0x66a42ed7
jb 0x1400cfee0
cmp rcx, 1
ja 0x1400cff3d
mov eax, dword [0x141dd6678]
or eax, dword [0x141dd667c]
xor eax, 0x12081d32
imul eax, eax, 0xf9ae275
cmp eax, 0x3e72fda
jb 0x1400d042b
jmp 0x1400d0417
sub rsp, 0x20
mov rcx, rax
mov edx, 8
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov rdi, rax
nop dword [rax]
mov eax, dword [0x141dd6680]
xor eax, dword [0x141dd6684]
or eax, 0xe5fed060
imul rcx, rax, 0xa095c51
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xda5251a5
cmp eax, 0xacc48ccd
je 0x1400cff60
test rdi, rdi
je 0x1400d0440
mov r9d, dword [r12]
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r15
mov edx, 1
mov r8, rdi
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
test eax, eax
je 0x1400d0161
nop word cs:[rax + rax]
mov eax, dword [0x141dd66a0]
xor edx, edx
div dword [0x141dd66a4]
imul rax, rax, 0x4313953d
shr rax, 0x3e
imul eax, eax, 0xb5af8b82
xor eax, 0x6e0c5b15
cmp eax, 0x1eb7bb60
jb 0x1400cffd0
mov rdx, qword [rdi]
sub rsp, 0x20
mov rsi, qword [rbp - 0x40]
mov rcx, rsi
call fcn.1400d5310
add rsp, 0x20
mov r14, qword [rsi]
movabs rax, 0x8000000000000000
cmp r14, rax
jne 0x1400d01f9
mov eax, dword [0x141dd6708]
xor edx, edx
div dword [0x141dd670c]
shr eax, 4
imul rax, rax, 0x1160a793
shr rax, 0x37
imul eax, eax, 0x8a369b88
and eax, 0xd9ec3478
cmp eax, 0x9cf2145a
jne 0x1400d0066
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d5200
add rsp, 0x20
movabs r14, 0x8000000000000000
mov eax, dword [0x141dd6710]
xor eax, dword [0x141dd6714]
imul esi, eax, 0xcf46af2e
add esi, 0xa451b9bd
or esi, 0xc89f09c6
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d5200
add rsp, 0x20
cmp esi, 0xcb1e931d
jb 0x1400d0070
mov eax, dword [0x141dd6718]
xor edx, edx
div dword [0x141dd671c]
or eax, 0x3bcfb7f7
cmp eax, 0x96d6735
jne 0x1400d00d1
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x141dd6720]
imul eax, dword [0x141dd6724]
and eax, 0x24282080
imul edi, eax, 0xb100995f
sub rsp, 0x20
mov rcx, r15
call rsi
add rsp, 0x20
cmp edi, 0x4bb9b618
ja 0x1400d00d8
mov ecx, eax
mov eax, dword [0x141dd6728]
xor edx, edx
div dword [0x141dd672c]
cmp eax, 0xeee8a9e
je 0x1400d0107
test ecx, ecx
mov r15, qword [rbp + 0x68]
mov r8, qword [rbp + 0xb0]
jne 0x1400d0cb3
mov eax, dword [0x141dd6730]
add eax, dword [0x141dd6734]
or eax, 0x35e43a7e
imul rax, rax, 0x6f201bcf
shr rax, 0x3e
imul eax, eax, 0xe1df9bb2
cmp eax, 0xe61c1212
ja 0x1400d0c6a
jmp 0x1400d0c56
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov eax, dword [0x141dd6688]
or eax, dword [0x141dd668c]
imul eax, eax, 0x70a2ef58
cmp eax, 0xfb1ad2a4
jne 0x1400d0198
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d5200
add rsp, 0x20
mov eax, dword [0x141dd6690]
xor eax, dword [0x141dd6694]
imul eax, eax, 0x3d1aa6b0
imul rsi, rax, 0x3277a399
shr rsi, 0x3b
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d5200
add rsp, 0x20
cmp esi, 0x3a6e223f
je 0x1400d0198
mov eax, 0xe51d6a03
mov ecx, dword [0x141dd6698]
and ecx, dword [0x141dd669c]
imul ecx, ecx, 0x631ea28c
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x2c42b709
je 0x1400d01d2
jmp 0x1400d0440
mov rax, qword [rsi + 8]
mov qword [rbp + 0x98], rax
mov eax, dword [0x141dd66b8]
imul eax, dword [0x141dd66bc]
add eax, 0x45348ec6
and eax, 0x1340539a
add eax, 0xd435920e
cmp eax, 0x93229444
jb 0x1400d0204
mov rsi, qword [rsi + 0x10]
mov rcx, qword [r13 + 0x80]
mov eax, dword [0x141dd66c0]
xor edx, edx
div dword [0x141dd66c4]
imul eax, eax, 0x11d6fb34
and eax, 0xb8e33260
xor eax, 0x234a6067
cmp eax, 0x7008bdbd
ja 0x1400d0232
shl rcx, 1
test rcx, rcx
je 0x1400d02ec
mov eax, dword [0x141dd66c8]
imul eax, dword [0x141dd66cc]
mov rcx, qword [rbp + 0xa8]
mov rbx, qword [rcx + 0x88]
or eax, 0x3e0d0114
and eax, 0x3e4d0714
cmp eax, 0xfb00a7d3
jne 0x1400d02a9
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12d, dword [0x141dd66d0]
xor r12d, dword [0x141dd66d4]
add r12d, 0x132ad8cf
xor r12d, 0x92443580
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r13
add rsp, 0x20
cmp r12d, 0x40eb0aad
jb 0x1400d02b0
mov r13, qword [rbp + 0xa8]
mov qword [r13 + 0x80], r14
mov rax, qword [rbp + 0x98]
mov qword [r13 + 0x88], rax
mov eax, dword [0x141dd66d8]
add eax, dword [0x141dd66dc]
xor eax, 0x7c21c849
add eax, 0x867c4c0f
or eax, 0x9bcf86ec
cmp eax, 0xdd623e03
jae 0x1400d034a
mov qword [r13 + 0x90], rsi
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d5200
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x141dd66e0]
sub eax, dword [0x141dd66e4]
add eax, 0x1a524b3c
xor eax, 0x733b3cbf
imul r14d, eax, 0x95ff076
mov qword [r13 + 0x90], rsi
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d5200
mov rcx, r15
call rbx
add rsp, 0x20
cmp r14d, 0x75546e0d
ja 0x1400d0351
mov ecx, dword [0x141dd66e8]
add ecx, dword [0x141dd66ec]
imul ecx, ecx, 0x36d20672
xor ecx, 0x3f497ac2
add ecx, 0xa3c67609
cmp ecx, 0xb4e3234d
jb 0x1400d0393
test eax, eax
mov rbx, qword [rbp + 0x90]
mov r15, qword [rbp + 0x68]
mov r8, qword [rbp + 0xb0]
movabs r14, 0x8000000000000000
jne 0x1400d0550
mov eax, dword [0x141dd66f0]
and eax, dword [0x141dd66f4]
mov ecx, 0xb3abf7c7
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xd103ba4b
imul rax, rcx, 0x44e9ab73
shr rax, 0x3d
cmp eax, 0x53bf1314
ja 0x1400d1053
jmp 0x1400d101b
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov al, 1
test al, al
jne 0x1400d0440
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d0417
mov eax, dword [0x141dd6650]
xor edx, edx
div dword [0x141dd6654]
add eax, 0x43b98010
or eax, 0xef3614f5
cmp eax, 0xe886ddec
jb 0x1400d0440
mov eax, dword [0x141dd6658]
xor eax, dword [0x141dd665c]
imul rcx, rax, 0x2d36a7b1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0xab2979ee
cmp eax, 0xe290221e
jbe 0x1400d049c
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6660]
sub eax, dword [0x141dd6664]
imul edi, eax, 0x3995e803
add edi, 0x73547be0
sub rsp, 0x20
mov rcx, r15
call rsi
add rsp, 0x20
cmp edi, 0x72ac79cd
ja 0x1400d04b0
test eax, eax
mov r8, qword [rbp + 0xb0]
jne 0x1400d0500
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [rbp + 0xb0]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd66a8]
xor eax, dword [0x141dd66ac]
imul eax, eax, 0x9a8f44a0
and eax, 0x18044e20
cmp eax, 0xd479eec1
ja 0x1400d0500
mov r15, qword [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x141dd66b0]
and eax, dword [0x141dd66b4]
xor eax, 0xaf3f7f5c
add eax, 0x52134705
cmp eax, 0x4e6105d
jae 0x1400d0530
nop dword [rax]
mov eax, dword [0x141dd6748]
add eax, dword [0x141dd674c]
imul eax, eax, 0xe0791176
add eax, 0xba15f6d3
or eax, 0x7254f4b3
cmp eax, 0xca49c8ed
ja 0x1400d0550
movzx esi, byte [rbx + 4]
movzx edi, byte [rbx + 5]
movzx r9d, byte [rbx + 6]
movzx r10d, byte [rbx + 7]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6750]
and eax, dword [0x141dd6754]
or eax, 0x4ca3e4f5
xor eax, 0x8d6625c
imul rax, rax, 0x24853ed3
shr rax, 0x3d
cmp eax, 0x2b586b1a
ja 0x1400d0590
test r10d, r10d
je 0x1400d0660
cmp r10d, 1
je 0x1400d07c9
nop dword [rax + rax]
mov eax, dword [0x141dd6758]
and eax, dword [str.f_G_nK]
and eax, 0x4a806ec
imul eax, eax, 0xa660739f
cmp eax, 0x504a68b4
jb 0x1400d05d0
mov rcx, qword [r13 + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6760]
add eax, dword [0x141dd6764]
imul eax, eax, 0xe30f254d
add eax, 0xd78e52f0
or eax, 0xc112b46a
cmp eax, 0x955ea5a0
jb 0x1400d0600
nop word cs:[rax + rax]
mov eax, dword [0x141dd6768]
xor edx, edx
div dword [0x141dd676c]
imul eax, eax, 0x6f559d44
add eax, 0x28bb7c1c
cmp eax, 0x7aa3b65d
jb 0x1400d0630
test rcx, rcx
je 0x1400d07c9
nop dword [rax]
mov eax, dword [0x141dd6770]
imul eax, dword [0x141dd6774]
xor eax, 0x1f7c4b7b
add eax, 0x95e47d55
and eax, 0x32628e9e
cmp eax, 0xc8c0380c
ja 0x1400d0660
test r9d, r9d
je 0x1400d06ff
cmp r9d, 1
je 0x1400d07c9
nop word cs:[rax + rax]
mov eax, dword [0x141dd6778]
xor edx, edx
div dword [0x141dd677c]
imul eax, eax, 0xa8824c87
xor eax, 0xebba70
cmp eax, 0x5a79c185
jb 0x1400d06a0
mov rax, qword [r13 + 0x58]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6780]
and ecx, dword [0x141dd6784]
imul ecx, ecx, 0xf60ecca0
add ecx, 0x5ff29100
or ecx, 0x17f4a492
cmp ecx, 0xf927aed5
je 0x1400d06d0
test rax, rax
je 0x1400d07c9
test esi, esi
je 0x1400d074b
cmp esi, 1
je 0x1400d07c9
mov rax, qword [r13 + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6788]
sub ecx, dword [0x141dd678c]
imul ecx, ecx, 0xdd2fcc16
or ecx, 0xd0f34772
xor ecx, 0x44c4acbf
cmp ecx, 0xf282bca4
ja 0x1400d0720
cmp rax, r14
je 0x1400d07c9
test edi, edi
je 0x1400d183b
cmp edi, 1
je 0x1400d07c9
mov rax, qword [r13 + 0xb8]
mov ecx, 0xe7e8ade3
nop word cs:[rax + rax]
mov edx, dword [0x141dd6790]
sub edx, dword [0x141dd6794]
xor edx, 0xbc0ee3bb
imul rdx, rcx
shr rdx, 0x3c
or edx, 0xbc2571b0
cmp edx, 0x8cc9d8ad
jb 0x1400d0770
nop dword [rax + rax]
mov ecx, dword [str.W_f_]
xor ecx, dword [0x141dd679c]
or ecx, 0xf847ee9f
and ecx, 0xfacfeedf
cmp ecx, 0xf4b068bb
jb 0x1400d07a0
cmp rax, r14
jne 0x1400d183b
mov rcx, qword [r13 + 0xf8]
mov eax, dword [0x141dd67a0]
sub eax, dword [0x141dd67a4]
add eax, 0x9d9f803a
imul rax, rax, 0x30489cfb
shr rax, 0x3d
cmp eax, 0x585ea79d
ja 0x1400d07d0
test rcx, rcx
je 0x1400d183b
mov r8d, 0xb8ae1e81
nop word cs:[rax + rax]
mov eax, dword [0x141dd67a8]
xor edx, edx
div dword [0x141dd67ac]
imul rax, r8
shr rax, 0x3e
or eax, 0xf8d10600
and eax, 0xf8d10602
cmp eax, 0x1625def9
jb 0x1400d0810
mov dword [rbp + 0x28], r10d
mov dword [rbp + 0x18], r9d
nop
mov eax, dword [0x141dd67b0]
sub eax, dword [0x141dd67b4]
imul eax, eax, 0xedff8591
add eax, 0x164be4a3
cmp eax, 0x8be2dfc6
jb 0x1400d0840
mov r12, qword [rcx + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r12
mov edx, 0x1a
mov r8, qword [rbp + 0x78]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1400d1834
nop word cs:[rax + rax]
mov eax, dword [0x141dd67b8]
add eax, dword [0x141dd67bc]
imul eax, eax, 0x6e655338
add eax, 0x75514cb8
cmp eax, 0xa9b98823
jb 0x1400d08a0
mov rax, qword [rbp + 0x78]
mov r10, qword [rax]
mov eax, 0xaf7c8d57
nop word [rax + rax]
mov ecx, dword [0x141dd67c0]
mov edx, dword [0x141dd67c4]
add ecx, edx
add ecx, 0x2777fae3
imul rcx, rax
shr rcx, 0x3b
add ecx, 0xfa2f66d4
cmp ecx, 0x2cd11fb0
jb 0x1400d08d0
test r10, r10
mov qword [rbp + 0x98], r12
je 0x1400d0a6c
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r12
mov rdx, r10
mov r8, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6c68]
sub ecx, dword [0x141dd6c6c]
add ecx, 0x219b8a49
xor ecx, 0xc2f686ed
add ecx, 0xf2bbccda
cmp ecx, 0x76c01467
jb 0x1400d0940
test eax, eax
je 0x1400d0bf4
mov rax, qword [rbp + 0x58]
mov edx, dword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r12
mov r8, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400d0c43
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d09b0
mov rax, qword [rbp + 0x20]
movzx ecx, word [rax + 0x24]
mov qword [rbp + 0xa0], rcx
mov ecx, dword [rax + 0x28]
mov qword [rbp + 0x88], rcx
mov r14d, dword [rax + 0x48]
mov ecx, dword [rbp + 0x28]
test ecx, ecx
mov r8, qword [rbp + 0xb0]
mov dword [rbp + 0x50], edi
mov dword [rbp + 0x80], esi
je 0x1400d3e19
movzx r15d, word [rax + 0x40]
mov r12d, dword [rax + 0x44]
cmp ecx, 1
je 0x1400d0a40
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d0a00
mov rax, qword [r13 + 0x40]
nop dword [rax + rax]
mov ecx, dword [0x141dd6c80]
imul ecx, dword [0x141dd6c84]
and ecx, 0x71365a63
imul ecx, ecx, 0xd1444aab
xor ecx, 0x25c9a5dd
cmp ecx, 0xb5c7b74a
ja 0x1400d0a10
test rax, rax
jne 0x1400d3e19
mov eax, dword [0x141dd6c88]
imul eax, dword [0x141dd6c8c]
add r13, 0x30
xor eax, 0x6cfdc070
imul eax, eax, 0x32357698
cmp eax, 0xa8894a30
ja 0x1400d0ce7
jmp 0x1400d0cdb
mov qword [rbp + 0x78], r10
mov eax, dword [0x141dd67c8]
sub eax, dword [0x141dd67cc]
add eax, 0xc0a11b7c
cmp eax, 0x31e6b0f9
ja 0x1400d0a70
mov r14d, edi
mov dword [rbp + 0x80], esi
mov eax, dword [0x141dd67d0]
xor eax, dword [0x141dd67d4]
cmp eax, 0x904753cb
jne 0x1400d0acc
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r12
xor edx, edx
mov r8, qword [rbp + 0xa0]
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov rdi, qword [rbp + 0xa0]
nop word cs:[rax + rax]
mov esi, dword [0x141dd67d8]
or esi, dword [0x141dd67dc]
xor esi, 0xd22b17f2
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r12
xor edx, edx
mov r8, rdi
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
cmp esi, 0x555bb4cf
jb 0x1400d0ae0
nop
mov ecx, dword [0x141dd67e0]
imul ecx, dword [0x141dd67e4]
or ecx, 0xefdadf95
cmp ecx, 0xc12ee2b2
je 0x1400d0b20
test eax, eax
js 0x1400d0ba0
mov dword [rbp + 0x50], r14d
mov rax, qword [rbp + 0xa0]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x28]
xor eax, eax
test rsi, rsi
setne al
mov qword [r13], rax
mov eax, dword [0x141dd67f8]
xor eax, dword [0x141dd67fc]
and eax, 0xbe69cbb8
imul rax, rax, 0x23b3c9b7
shr rax, 0x36
xor eax, 0x71f1b7ad
cmp eax, 0xd17b63a7
mov r15, qword [rbp + 0x60]
ja 0x1400d10d9
jmp 0x1400d108e
mov eax, dword [0x141dd67e8]
and eax, dword [0x141dd67ec]
imul eax, eax, 0x87dd299e
and eax, 0x4a604212
cmp eax, 0x9f0911ce
ja 0x1400d0ba0
mov r15, qword [rbp + 0x68]
movabs r14, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x141dd67f0]
imul eax, dword [str.yB]
imul eax, eax, 0x8aad7d3a
add eax, 0xb61e77da
cmp eax, 0x90b42e3e
jb 0x1400d0bd0
jmp 0x1400d1834
mov eax, dword [0x141dd6c70]
xor eax, dword [0x141dd6c74]
cmp eax, 0xb9ae0674
jne 0x1400d0c15
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov edi, dword [0x141dd6c78]
or edi, dword [0x141dd6c7c]
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x9b2873e8
je 0x1400d0c20
jmp 0x1400d1834
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d1834
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400d0c7a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d0c56
mov r8, qword [rbp + 0xb0]
mov eax, dword [0x141dd6738]
sub eax, dword [0x141dd673c]
imul eax, eax, 0x26686b18
imul rcx, rax, 0x4756e09
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0x328869ea
cmp eax, 0xaf0d9919
ja 0x1400d0c81
mov eax, dword [0x141dd6740]
and eax, dword [0x141dd6744]
and eax, 0xb76af89d
imul eax, eax, 0xa76bf00a
add eax, 0x5e125e82
cmp eax, 0x65b017ee
jb 0x1400d0cb3
jmp 0x1400d0550
mov ecx, dword [0x141dda6b0]
xor eax, eax
test al, al
je 0x1400d0cef
mov eax, dword [0x141dda6b0]
jmp 0x1400d0cdb
mov eax, dword [0x141dd6c90]
xor edx, edx
div dword [0x141dd6c94]
mov rdi, qword [rbp - 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6c98]
xor edx, edx
div dword [0x141dd6c9c]
or eax, 0xf12c3bc1
imul rax, rax, 0x55131e0b
shr rax, 0x3e
cmp eax, 0xcadd4b34
je 0x1400d0d10
nop word cs:[rax + rax]
mov eax, dword [str.0ehr]
xor eax, dword [0x141dd6ca4]
imul eax, eax, 0xcd6831a5
add eax, 0xee5c59c0
xor eax, 0x4327ffd1
cmp eax, 0xf98175f0
ja 0x1400d0d40
cmp ecx, 3
jne 0x1400d1009
nop dword [rax]
mov eax, dword [0x141dd6ca8]
xor eax, dword [0x141dd6cac]
or eax, 0xeddf5589
add eax, 0x4c232092
imul rax, rax, 0x376505a7
shr rax, 0x3b
cmp eax, 0x3fc78706
je 0x1400d0d70
movzx ecx, byte [0x141dda6b4]
mov eax, dword [0x141dd6cb0]
xor edx, edx
div dword [0x141dd6cb4]
nop dword [rax]
mov eax, dword [0x141dd6cb8]
add eax, dword [0x141dd6cbc]
xor eax, 0x4eb79bfa
add eax, 0xe3b9bf04
and eax, 0x4e872c32
cmp eax, 0xf8339a51
je 0x1400d0db0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6cc0]
imul eax, dword [0x141dd6cc4]
add eax, 0x95825d3a
xor eax, 0xc2400109
or eax, 0x2caea6b6
cmp eax, 0xa3dac357
ja 0x1400d0de0
test cl, cl
je 0x1400d0f00
sub rsp, 0x20
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x98]
call fcn.1400d6220
add rsp, 0x20
mov rax, qword [rbp + 0xa8]
mov r15, qword [rax + 0x38]
mov r8, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6d70]
sub eax, dword [0x141dd6d74]
add eax, 0xc5c06ac8
or eax, 0x7b107d8a
cmp eax, 0xb828f7e4
ja 0x1400d0e40
mov rax, qword [rbp + 0xa8]
mov rsi, qword [rax + 0x40]
test rsi, rsi
je 0x1400d0f75
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, r15
jmp 0x1400d0e90
add r12, 0x20
inc rdi
dec rsi
je 0x1400d0f75
mov eax, dword [0x141dd6d78]
xor eax, dword [0x141dd6d7c]
imul rax, rax, 0x1daf8aa3
shr rax, 0x3c
imul eax, eax, 0x570b4cf2
xor eax, 0xb634b1be
cmp eax, 0x37f4f2ad
jb 0x1400d0e90
cmp qword [r12], 0
je 0x1400d0e80
mov r8, qword [r12 + 8]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call rbx
mov r8, qword [rbp + 0xb0]
add rsp, 0x20
nop
mov eax, dword [0x141dd6d80]
sub eax, dword [0x141dd6d84]
and eax, 0x160f8154
cmp eax, 0x2eac6b50
je 0x1400d0ee0
jmp 0x1400d0e80
mov eax, dword [0x141dd6cc8]
xor edx, edx
div dword [0x141dd6ccc]
or eax, 0xcf46599b
add eax, 0x15ec4e31
cmp eax, 0x780dd39
jb 0x1400d0f00
nop
mov eax, dword [0x141dd6cd0]
add eax, dword [0x141dd6cd4]
imul eax, eax, 0x1cd226c0
add eax, 0x6838de73
and eax, 0xa3308ea1
cmp eax, 0x327c1f1a
ja 0x1400d0f20
mov eax, dword [0x141dd6cd8]
and eax, dword [0x141dd6cdc]
xor eax, 0x83140e00
and eax, 0xc3975ecc
add eax, 0xb59f97b8
cmp eax, 0x21284c00
mov rbx, qword [rbp + 0x98]
jb 0x1400d38bd
jmp 0x1400d3876
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d0f80
mov rax, qword [r13]
mov rbx, qword [rbp + 0x90]
mov edi, dword [rbp + 0x50]
mov esi, dword [rbp + 0x80]
nop dword [rax + rax]
mov ecx, dword [0x141dd6d88]
or ecx, dword [0x141dd6d8c]
xor ecx, 0xb5c90163
imul ecx, ecx, 0x57d21b20
and ecx, 0xf59e4040
cmp ecx, 0xe85aca0a
je 0x1400d0fa0
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1400d0fd0
test rax, rax
je 0x1400d3ddd
mov eax, dword [0x141dd6d90]
imul eax, dword [0x141dd6d94]
xor eax, 0x4828861
or eax, 0x3a3d379e
add eax, 0x13a981f0
cmp eax, 0xa8a79236
jb 0x1400d3a0d
jmp 0x1400d39ee
sub rsp, 0x20
call fcn.1400ff208
add rsp, 0x20
jmp 0x1400d0d70
mov eax, dword [0x141dd66f8]
and eax, dword [0x141dd66fc]
add eax, 0xfe333e7c
imul rsi, rax, 0x77283359
shr rsi, 0x3c
xor esi, 0x1e85d6ec
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x200e5e3a
jbe 0x1400d1063
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d101b
mov r8, qword [rbp + 0xb0]
mov eax, dword [0x141dd6700]
xor edx, edx
div dword [0x141dd6704]
add eax, 0xfdcbee24
and eax, 0x8805401
cmp eax, 0x35d50bf9
ja 0x1400d106a
jmp 0x1400d0550
mov ebx, dword [0x141dd6800]
imul ebx, dword [0x141dd6804]
add ebx, 0xea05550
and ebx, 0xf172aa8f
mov qword [r13 + 8], rsi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r12
mov rdx, rdi
mov r8, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp ebx, 0x98ed4d4a
jne 0x1400d1105
mov qword [r13 + 8], rsi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r12
mov rdx, rdi
mov r8, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1400d108e
test eax, eax
mov r15, qword [rbp + 0x68]
movabs r14, 0x8000000000000000
je 0x1400d1712
nop dword [rax + rax]
mov eax, dword [0x141dd6808]
xor edx, edx
div dword [0x141dd680c]
imul eax, eax, 0x4e2c65d0
add eax, 0xc5c070e0
cmp eax, 0x51f8b288
ja 0x1400d1120
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d1150
mov rax, qword [rbp + 0x60]
mov rdi, qword [rax + 0x20]
mov eax, dword [0x141dd6810]
imul eax, dword [0x141dd6814]
imul eax, eax, 0x51c136b6
add eax, 0xdc62cc64
or eax, 0x47bbd8ff
cmp eax, 0xbfa87a0e
jbe 0x1400d11aa
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r12
mov rdx, rdi
mov r8, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov esi, 0x829edc91
mov rbx, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp + 0x88]
nop dword [rax]
mov r14d, dword [0x141dd6818]
imul r14d, dword [0x141dd681c]
add r14d, 0x9056face
imul r14, rsi
shr r14, 0x3f
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r12
mov rdx, rdi
mov r8, r15
call rbx
add rsp, 0x30
cmp r14d, 0x67d3404c
ja 0x1400d11c0
test eax, eax
je 0x1400d1786
mov rax, qword [rbp + 0x88]
movzx edx, word [rax + 0x38]
mov r9, qword [rax + 0x40]
movzx edi, word [rax + 0x70]
mov eax, 0xb4165c5b
lea rcx, [r13 + 0x30]
mov qword [rbp + 0x48], rcx
mov rbx, qword [rbp + 0x90]
movabs r14, 0x8000000000000000
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6830]
or ecx, dword [0x141dd6834]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x1c402120
cmp ecx, 0x4ca3621f
ja 0x1400d1250
mov rax, qword [rbp + 0x88]
mov rcx, qword [rax + 0x80]
mov qword [rbp + 0x30], rcx
cmp dword [rbp + 0x28], 0
mov esi, dword [rbp + 0x80]
mov r10, qword [rbp + 0x78]
mov qword [rbp + 0x60], rdx
mov qword [rbp + 0xa0], r9
je 0x1400d22e1
mov r15, qword [rax + 0x78]
cmp dword [rbp + 0x28], 1
je 0x1400d1309
cmp dword [rbp + 0x28], 2
jne 0x1400d19ed
nop word [rax + rax]
mov eax, dword [0x141dd6840]
sub eax, dword [0x141dd6844]
and eax, 0x509e600
cmp eax, 0xd5b63a03
je 0x1400d12c0
mov rcx, qword [r13 + 0x40]
nop dword [rax]
mov eax, dword [0x141dd6848]
xor edx, edx
div dword [0x141dd684c]
imul eax, eax, 0x39af79ab
xor eax, 0x72d73f6f
cmp eax, 0x725ac154
jb 0x1400d12e0
test rcx, rcx
jne 0x1400d22e1
mov eax, dword [0x141dda6b0]
cmp eax, 3
je 0x1400d136d
mov eax, dword [0x141dd6850]
add eax, dword [0x141dd6854]
imul eax, eax, 0x926d6d12
add eax, 0xaca85946
xor eax, 0xa98748ee
cmp eax, 0xd91bcb4c
ja 0x1400d1b15
mov eax, dword [0x141dd6858]
add eax, dword [0x141dd685c]
and eax, 0xab2be31
imul esi, eax, 0xff50951a
and esi, 0x38c0c1da
sub rsp, 0x20
call fcn.1400ff208
add rsp, 0x20
cmp esi, 0x992dae60
ja 0x1400d133b
mov eax, 0xa4fc46d5
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6860]
or ecx, dword [0x141dd6864]
shr ecx, 1
imul rcx, rax
shr rcx, 0x39
add ecx, 0x5c241ded
or ecx, 0x3f4d461a
cmp ecx, 0x83ea65c1
ja 0x1400d1380
movzx eax, byte [0x141dda6b4]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6868]
or ecx, dword [0x141dd686c]
cmp ecx, 0xa25e6d33
je 0x1400d13c0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6870]
xor ecx, dword [0x141dd6874]
or ecx, 0x801000
and ecx, 0x40a8100c
cmp ecx, 0x71fc1ee4
ja 0x1400d13e0
sub rsp, 0x20
test al, al
je 0x1400d1a0f
mov rcx, qword [rbp + 0x70]
mov rdx, r12
call fcn.1400d6220
add rsp, 0x20
mov rdi, qword [r13 + 0x38]
mov rax, qword [r13 + 0x40]
mov qword [rbp + 0x88], rax
test rax, rax
je 0x1400d15e0
xor r12d, r12d
mov ebx, 0x84b90ee7
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd6900]
xor edx, edx
div dword [0x141dd6904]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6908]
xor edx, edx
div dword [0x141dd690c]
xor eax, 0x81a0dc18
imul rax, rbx
shr rax, 0x3b
add eax, 0x1bfd35dc
cmp eax, 0x3e3a5cbf
ja 0x1400d1460
mov rcx, r12
shl rcx, 5
cmp qword [rdi + rcx], 0
je 0x1400d156a
add rcx, rdi
mov eax, dword [0x141dd6910]
and eax, dword [0x141dd6914]
and eax, 0x8234d188
cmp eax, 0xcf629ee0
je 0x1400d15d2
nop dword [rax + rax]
mov eax, dword [0x141dd6918]
xor edx, edx
div dword [0x141dd691c]
and eax, 0x21b94a2d
add eax, 0x67ba83ef
mov r15, qword [rcx + 8]
mov r13, qword [0x141dda6a0]
cmp eax, 0x9ca178e9
ja 0x1400d15d2
mov eax, dword [0x141dd6920]
sub eax, dword [0x141dd6924]
imul eax, eax, 0x93a7d221
add eax, 0x878859ba
xor eax, 0xe6052a91
cmp eax, 0xd07b1867
jbe 0x1400d1530
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r15
call rsi
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd6928]
mov ecx, dword [0x141dd692c]
add eax, ecx
add eax, 0x15283cd7
and eax, 0x43948c88
imul r14d, eax, 0x4aa982e5
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r15
call rsi
add rsp, 0x20
cmp r14d, 0x34abc50b
jb 0x1400d1530
inc r12
mov r13, qword [rbp + 0xa8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6930]
and eax, dword [0x141dd6934]
cmp eax, 0xc531ddb9
je 0x1400d1580
nop word cs:[rax + rax]
mov eax, dword [0x141dd6938]
sub eax, dword [0x141dd693c]
or eax, 0xe2168503
imul eax, eax, 0xe624ba07
xor eax, 0x934b689d
cmp eax, 0x29b1690d
jb 0x1400d15a0
cmp r12, qword [rbp + 0x88]
jne 0x1400d1443
jmp 0x1400d15e0
mov rax, qword [0x141dda6a0]
jmp 0x1400d14c0
mov eax, dword [0x141dd6940]
sub eax, dword [0x141dd6944]
xor eax, 0xc4397920
add eax, 0x96d53ea5
cmp eax, 0xa3182cbe
jb 0x1400d15e0
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rbx, qword [rbp + 0x90]
mov esi, dword [rbp + 0x80]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6948]
and ecx, dword [0x141dd694c]
xor ecx, 0x970e5be8
add ecx, 0xa2180d3f
xor ecx, 0xbea9c0ce
cmp ecx, 0x917dec2a
ja 0x1400d1620
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6950]
add ecx, dword [0x141dd6954]
imul ecx, ecx, 0x104b949
add ecx, 0x1b22861d
cmp ecx, 0x57b3f829
ja 0x1400d1650
test rax, rax
mov r12, qword [rbp + 0x98]
je 0x1400d1696
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor eax, eax
test al, al
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0x48]
je 0x1400d16b2
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov r10, qword [rbp + 0x78]
mov r9, qword [rbp + 0xa0]
nop dword [rax]
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [0x141dd6958]
and eax, dword [0x141dd695c]
imul eax, eax, 0x93aaf1d8
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
cmp eax, 0xac1e6b14
jb 0x1400d16c0
nop word [rax + rax]
mov eax, dword [0x141dd6960]
and eax, dword [0x141dd6964]
and eax, 0x8b22ea4c
add eax, 0x25b3184d
cmp eax, 0xa0b7a823
ja 0x1400d16f0
jmp 0x1400d22e1
mov eax, dword [0x141dd6820]
xor edx, edx
div dword [0x141dd6824]
and eax, 0x67b5056f
cmp eax, 0xa6159027
mov rbx, qword [rbp + 0x90]
jne 0x1400d1741
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edi, dword [0x141dd6828]
imul edi, dword [0x141dd682c]
add edi, 0x923f2457
or edi, 0x49ed72b
xor edi, 0x9009994d
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x1c4ec1b0
jb 0x1400d1750
jmp 0x1400d1834
mov eax, dword [0x141dd6c50]
imul eax, dword [0x141dd6c54]
or eax, 0x369c3ba2
imul eax, eax, 0xdabbcdde
imul rax, rax, 0x121a51b3
shr rax, 0x3b
cmp eax, 0xb5e4e67
mov rbx, qword [rbp + 0x90]
movabs r14, 0x8000000000000000
jbe 0x1400d17cf
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15, qword [rbp + 0x68]
nop word [rax + rax]
mov eax, dword [0x141dd6c58]
and eax, dword [0x141dd6c5c]
xor eax, 0x54accfbc
imul edi, eax, 0xff5b9921
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x7944be99
je 0x1400d17e0
nop dword [rax]
mov eax, dword [str._aiHS]
imul eax, dword [0x141dd6c64]
imul eax, eax, 0x8da219e4
add eax, 0x309771ef
and eax, 0xa50863f0
cmp eax, 0xb49022e7
jae 0x1400d1810
mov r8, qword [rbp + 0xb0]
mov eax, dword [0x141dd7068]
xor edx, edx
div dword [0x141dd706c]
nop dword [rax]
mov eax, dword [0x141dd7070]
or eax, dword [0x141dd7074]
cmp eax, 0x766fc382
je 0x1400d1850
movzx eax, byte [rbx + 8]
test eax, eax
je 0x1400d1f80
lea rbx, [r13 + 0x60]
cmp eax, 1
je 0x1400d18e0
cmp eax, 2
jne 0x1400d1960
mov eax, 0xb6457869
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7080]
sub ecx, dword [0x141dd7084]
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x4c1216f5
ja 0x1400d1890
mov rax, qword [rbx]
nop
mov ecx, dword [0x141dd7088]
add ecx, dword [0x141dd708c]
and ecx, 0x1640004
xor ecx, 0x14c8050
or ecx, 0xfe937dab
cmp ecx, 0x1a448673
jb 0x1400d18b0
cmp rax, r14
jne 0x1400d1f80
nop
mov eax, dword [0x141dd70a0]
or eax, dword [0x141dd70a4]
or eax, 0x7fcfdacf
imul eax, eax, 0x388f278b
cmp eax, 0xa3f00310
jb 0x1400d18e0
mov rax, qword [r13 + 0xf8]
test rax, rax
je 0x1400d1988
mov rdi, qword [rax + 0x10]
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
mov eax, dword [0x141dd70c0]
imul eax, dword [0x141dd70c4]
imul eax, eax, 0x30f7d994
add eax, 0xd30cee02
and eax, 0x1c75cfe4
cmp eax, 0xb17ac15d
ja 0x1400d1d73
jmp 0x1400d1d2f
mov eax, dword [0x141dd7078]
and eax, dword [0x141dd707c]
or eax, 0x5a6ffed7
imul rax, rax, 0x32e3a0b7
shr rax, 0x3d
cmp eax, 0x2d32c945
ja 0x1400d1960
jmp 0x1400d2389
mov qword [r8], r14
nop dword [rax + rax]
mov eax, dword [0x141dd70b8]
and eax, dword [0x141dd70bc]
add eax, 0xe00c7b52
xor eax, 0xdad6c12e
cmp eax, 0x8b2f8c15
jae 0x1400d1990
mov rax, qword [rbx]
shl rax, 1
test rax, rax
jne 0x1400d1ed7
mov eax, dword [0x141dd70f8]
xor eax, dword [0x141dd70fc]
and eax, 0x5f4bb750
imul rax, rax, 0x6bf3d999
shr rax, 0x3d
or eax, 0xf69e9556
cmp eax, 0xd4b9ff57
je 0x1400d1f39
jmp 0x1400d1efe
mov eax, dword [str._pw4]
xor eax, dword [0x141dd683c]
or eax, 0x4040640e
and eax, 0x5852f40e
cmp eax, 0xd330bb2d
ja 0x1400d19ed
jmp 0x1400d2389
mov rcx, qword [rbp + 0x10]
mov rdx, r12
mov r8, r15
mov r15, rcx
mov r9, rdi
call fcn.1400d59e0
add rsp, 0x20
mov rsi, qword [r15]
mov eax, dword [0x141dd6878]
and eax, dword [0x141dd687c]
or eax, 0xe47f4fee
cmp eax, 0x3af7a781
je 0x1400d1a2b
cmp rsi, r14
jne 0x1400d1a7f
mov eax, dword [0x141dd68b0]
xor edx, edx
div dword [0x141dd68b4]
and eax, 0xd1065c0f
imul rax, rax, 0x6c05000d
shr rax, 0x3e
add eax, 0x3a792155
cmp eax, 0x14139781
mov r14, qword [rbp + 0x40]
jb 0x1400d2047
jmp 0x1400d200f
mov eax, dword [0x141dd6880]
xor edx, edx
div dword [0x141dd6884]
add eax, 0xbe7c02b8
or eax, 0x42002181
and eax, 0x66202385
cmp eax, 0xdbc17e30
mov r14, qword [rbp + 0x40]
jne 0x1400d1abb
mov rdx, qword [r15 + 8]
sub rsp, 0x20
mov rcx, r14
call fcn.1400d5d30
add rsp, 0x20
mov ebx, dword [0x141dd6888]
or ebx, dword [0x141dd688c]
mov rdi, qword [r15 + 8]
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.1400d5d30
add rsp, 0x20
cmp ebx, 0xc8009523
je 0x1400d1abb
test rsi, rsi
je 0x1400d2141
mov eax, dword [0x141dd6890]
sub eax, dword [0x141dd6894]
or eax, 0x3bd76add
and eax, 0x3bffeeff
cmp eax, 0xb56d513e
ja 0x1400d20b8
jmp 0x1400d208e
sub rsp, 0x20
call fcn.1400ff208
add rsp, 0x20
jmp 0x1400d133b
mov edi, dword [0x141dd6588]
and edi, dword [0x141dd658c]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0x77a7e460
jne 0x1400d1b59
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d1b27
mov rax, qword [r12]
mov r9, qword [rsi]
mov r10, qword [rbx]
mov rcx, qword [r13 + 0x110]
mov r11, qword [r13 + 0x118]
xor edx, edx
cmp r9, rcx
cmovb rcx, rdx
mov rdi, r9
sub rdi, rcx
cmp r10, r11
cmovb r11, rdx
mov rcx, qword [r14]
mov edx, dword [0x141dd6590]
xor edx, dword [0x141dd6594]
add edx, 0xd25ce3e8
or edx, 0x7c8d69dd
and edx, 0xffed7fff
cmp edx, 0x872f25fd
ja 0x1400d1c14
mov ebx, dword [0x141dd6598]
add ebx, dword [0x141dd659c]
or ebx, 0x91280540
and ebx, 0x99a8074b
add ebx, 0xd8025103
mov r8, r10
sub r8, r11
add r8, rdi
mov rdx, 0xffffffffffffffff
cmovae rdx, r8
mov rsi, qword [r13 + 0x100]
mov r8, qword [r13 + 0x108]
mov qword [r13 + 0x108], rcx
mov qword [r13 + 0x100], rax
mov qword [r13 + 0x118], r10
mov qword [r13 + 0x110], r9
cmp ebx, 0xbd650366
jbe 0x1400d1c35
mov qword [r13 + 0x108], rcx
mov qword [r13 + 0x100], rax
mov qword [r13 + 0x118], r10
mov qword [r13 + 0x110], r9
jmp 0x1400d1bb0
test rdx, rdx
je 0x1400cf86e
xor r9d, r9d
cmp rax, rsi
cmovae r9, rsi
sub rax, r9
mov r9, rdx
shr r9, 1
cvtsi2ss xmm1, rdx
mov r10, 0xffffffffffffffff
jmp 0x1400d1c90
movaps xmm0, xmm1
mov esi, dword [0x141dd65a0]
and esi, dword [0x141dd65a4]
imul edi, esi, 0x8f57ca90
add edi, 0xfd1d78a0
mov rsi, rcx
sub rsi, r11
add rsi, rax
cmovb rsi, r10
cmp edi, 0x6e088b18
jbe 0x1400d1cb8
cmp rcx, r8
mov r11d, 0
cmovae r11, r8
test rdx, rdx
jns 0x1400d1c60
mov esi, edx
and esi, 1
or rsi, r9
xorps xmm0, xmm0
cvtsi2ss xmm0, rsi
addss xmm0, xmm0
jmp 0x1400d1c63
test rsi, rsi
js 0x1400d1cc7
xorps xmm1, xmm1
cvtsi2ss xmm1, rsi
jmp 0x1400d1cdf
mov rax, rsi
shr rax, 1
and esi, 1
or rsi, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rsi
addss xmm1, xmm1
mov r8, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0x30]
divss xmm1, xmm0
mulss xmm1, dword [0x140101d90]
test rcx, rcx
js 0x1400d1d05
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
jmp 0x1400d1d1d
mov rax, rcx
shr rax, 1
and ecx, 1
or rcx, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm1, xmm0
movss dword [r13 + 0x150], xmm1
jmp 0x1400cf880
mov eax, dword [0x141dd70c8]
sub eax, dword [0x141dd70cc]
add eax, 0x497ffdd1
and eax, 0xe96298b7
imul r14d, eax, 0x9effd8ad
sub rsp, 0x20
xor esi, esi
mov rcx, rdi
xor edx, edx
mov r8, r15
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
cmp r14d, 0x958315a0
jbe 0x1400d1d91
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
jmp 0x1400d1d2f
mov eax, 0x96bbaf3f
nop word cs:[rax + rax]
cmp word [r15 + rsi*2], 0
je 0x1400d1ea8
mov ecx, dword [0x141dd70d0]
or ecx, dword [0x141dd70d4]
or ecx, 0x1641084
and ecx, 0x37dd7c4
imul ecx, ecx, 0x11fd8680
cmp ecx, 0x9a72f564
jb 0x1400d1dac
cmp word [r15 + rsi*2 + 2], 0
je 0x1400d1ea5
nop
mov ecx, dword [0x141dd70d8]
add ecx, dword [0x141dd70dc]
or ecx, 0xe0507e18
add ecx, 0x1b02aa3e
xor ecx, 0xcd921cc8
cmp ecx, 0x9ee0ab3
jb 0x1400d1de0
lea r8, [rsi + 2]
movzx ecx, word [r15 + rsi*2 + 4]
mov edx, dword [0x141dd70e0]
imul edx, dword [0x141dd70e4]
and edx, 0xa0901240
imul edx, edx, 0x160a5767
cmp edx, 0x7b0f147b
ja 0x1400d1e10
test cx, cx
je 0x1400d1eab
nop word cs:[rax + rax]
mov ecx, dword [0x141dd70e8]
imul ecx, dword [0x141dd70ec]
add ecx, 0xfc4e1a00
imul rcx, rax
shr rcx, 0x3b
or ecx, 0x367cde21
cmp ecx, 0x1653687a
jb 0x1400d1e40
add rsi, 3
nop dword [rax]
mov ecx, dword [0x141dd70f0]
or ecx, dword [0x141dd70f4]
add ecx, 0x5028b194
and ecx, 0x820150
cmp ecx, 0x46a1a798
je 0x1400d1e70
cmp rsi, 0x105
jne 0x1400d1da0
mov r8d, 0x105
jmp 0x1400d1eab
inc rsi
mov r8, rsi
sub rsp, 0x20
mov rsi, qword [rbp + 0xb0]
mov rcx, rsi
mov rdx, r15
call fcn.14008b7e0
mov r8, rsi
add rsp, 0x20
mov rax, qword [rbx]
shl rax, 1
test rax, rax
je 0x1400d19bc
mov r8, qword [r13 + 0x68]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0xb0]
add rsp, 0x20
jmp 0x1400d19bc
mov eax, dword [0x141dd7100]
add eax, dword [0x141dd7104]
and eax, 0xe353ef2
add eax, 0xcf0caf43
mov ecx, 0xb4082d93
imul rcx, rax
shr rcx, 0x3e
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
cmp ecx, 0x469e34a7
jbe 0x1400d1f50
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
jmp 0x1400d1efe
mov eax, dword [0x141dd7108]
or eax, dword [0x141dd710c]
imul eax, eax, 0x242f0507
add eax, 0x647b07e9
xor eax, 0xeb87f4f7
cmp eax, 0xed28d572
ja 0x1400d1f50
nop word cs:[rax + rax]
mov eax, dword [0x141dd70a8]
xor edx, edx
div dword [0x141dd70ac]
or eax, 0xbf504e38
imul eax, eax, 0xd823b3ce
cmp eax, 0x10e7b82e
je 0x1400d1f80
xor eax, eax
mov rdx, qword [rbp - 0x78]
sub rdx, qword [r13 + 0x120]
mov ecx, 0
cmovae rcx, rdx
mov qword [r13 + 0x128], rcx
test al, al
je 0x1400d1fd0
mov byte [r13 + 0x154], 1
nop dword [rax]
mov eax, dword [0x141dd70b0]
sub eax, dword [0x141dd70b4]
add eax, 0xc16c91c8
and eax, 0xd97f5a78
imul eax, eax, 0x61e03308
mov byte [r13 + 0x154], 1
cmp eax, 0x45207d96
je 0x1400d1fd0
lea rsp, [rbp + 0xb8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd68b8]
or eax, dword [0x141dd68bc]
imul eax, eax, 0x95a1a3ed
imul rax, rax, 0x1787fe47
shr rax, 0x3b
or eax, 0x6c116c44
mov qword [r14], 0
mov qword [r14 + 8], 8
cmp eax, 0x8cc136a6
jbe 0x1400d2058
mov qword [r14], 0
mov qword [r14 + 8], 8
jmp 0x1400d200f
mov eax, dword [0x141dd68c0]
add eax, dword [0x141dd68c4]
or eax, 0x394670d2
imul eax, eax, 0x5794be0a
imul rax, rax, 0x591b0d81
shr rax, 0x3d
cmp eax, 0x57253ee4
je 0x1400d2058
mov qword [r14 + 0x10], 0
jmp 0x1400d2141
mov eax, dword [0x141dd6898]
imul eax, dword [0x141dd689c]
xor eax, 0x44048203
or eax, 0x9beb695c
add eax, 0x73564025
mov r15, qword [0x141dda6a0]
cmp eax, 0xca5342b6
jbe 0x1400d20c1
mov rax, qword [0x141dda6a0]
jmp 0x1400d208e
mov eax, dword [0x141dd68a0]
imul eax, dword [0x141dd68a4]
add eax, 0xe2bc543d
imul rax, rax, 0x34f3deb3
shr rax, 0x3d
imul eax, eax, 0xdb3f6d17
cmp eax, 0xcd25a8dc
jae 0x1400d2101
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd68a8]
and eax, dword [0x141dd68ac]
or eax, 0x8d92b103
imul rbx, rax, 0x5b823c9f
shr rbx, 0x3c
and ebx, 3
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
cmp ebx, 0x8bd611fe
ja 0x1400d2108
mov rdi, qword [r13 + 0x38]
mov rsi, qword [r13 + 0x40]
test rsi, rsi
mov r10, qword [rbp + 0x78]
mov r9, qword [rbp + 0xa0]
je 0x1400d21f7
lea rbx, [rdi + 8]
xor r15d, r15d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbx - 8], 0
je 0x1400d21c4
mov eax, dword [0x141dd68c8]
xor edx, edx
div dword [0x141dd68cc]
mov eax, dword [0x141dd68d0]
add eax, dword [0x141dd68d4]
xor eax, 0x40200800
or eax, 0x9f8ee1fe
and eax, 0xdfbef9fe
cmp eax, 0x140d2fdb
jb 0x1400d2180
mov r8, qword [rbx]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
mov r10, qword [rbp + 0x78]
mov r9, qword [rbp + 0xa0]
mov eax, dword [0x141dd68d8]
or eax, dword [0x141dd68dc]
imul eax, eax, 0x4cbe250b
xor eax, 0xcfd76d62
add eax, 0x8c2dd62e
cmp eax, 0x40c55e9d
jb 0x1400d21c4
add rbx, 0x20
inc r15
dec rsi
jne 0x1400d216b
mov rax, qword [rbp + 0x48]
cmp qword [rax], 0
mov rbx, qword [rbp + 0x90]
mov esi, dword [rbp + 0x80]
mov r12, qword [rbp + 0x98]
je 0x1400d22a4
mov eax, dword [0x141dd68e0]
sub eax, dword [0x141dd68e4]
add eax, 0xc478b0db
and eax, 0xbc101940
cmp eax, 0x9504392c
jne 0x1400d223d
mov rax, qword [0x141dda6a0]
mov eax, dword [0x141dd68e8]
or eax, dword [0x141dd68ec]
add eax, 0x27098bc1
mov rcx, qword [0x141dda6a0]
cmp eax, 0xd8d8e3ad
ja 0x1400d223d
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r10, qword [rbp + 0x78]
mov r9, qword [rbp + 0xa0]
mov eax, dword [0x141dd68f0]
xor eax, dword [0x141dd68f4]
xor eax, 0xc985ca5c
add eax, 0x5794111f
shr eax, 1
imul rax, rax, 0x43ee58af
shr rax, 0x3b
cmp eax, 0xd785575e
je 0x1400d227a
mov rax, qword [r14 + 0x10]
mov rcx, qword [rbp + 0x48]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r14]
movups xmmword [rcx], xmm0
mov eax, dword [0x141dd68f8]
imul eax, dword [0x141dd68fc]
imul eax, eax, 0x32314fa
add eax, 0xee273b52
imul rax, rax, 0x5304f7e7
shr rax, 0x3e
cmp eax, 0x27985369
ja 0x1400d22b7
lea rax, [r13 + 0x48]
mov qword [rbp + 0x88], rax
nop dword [rax]
mov eax, dword [0x141dd6968]
xor edx, edx
div dword [0x141dd696c]
or eax, 0xa2d50118
add eax, 0x4711054b
xor eax, 0x64f13fa0
cmp eax, 0xa157625a
ja 0x1400d22f0
mov edi, dword [rbp + 0x50]
nop word [rax + rax]
mov eax, dword [0x141dd6970]
imul eax, dword [0x141dd6974]
or eax, 0x63614020
xor eax, 0x618
or eax, 0x1c8698c5
cmp eax, 0x1324211e
je 0x1400d2320
cmp dword [rbp + 0x18], 0
mov r15, qword [rbp + 0x68]
je 0x1400d2e79
cmp dword [rbp + 0x18], 1
je 0x1400d2362
cmp qword [r13 + 0x58], 0
jne 0x1400d2e79
mov eax, dword [0x141dd6978]
xor eax, dword [0x141dd697c]
xor eax, 0x90416002
and eax, 0xf0eb7243
cmp eax, 0xfd9409f1
mov r14, qword [rbp + 0x38]
mov r15, qword [rbp + 0x30]
je 0x1400d23d4
jmp 0x1400d238b
ud2
mov eax, dword [0x141dd6980]
sub eax, dword [0x141dd6984]
xor eax, 0xfbfe11be
mov esi, 0x8677c29b
imul rsi, rax
shr rsi, 0x3d
xor esi, 0x75e766be
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, r15
mov r8, r14
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
cmp esi, 0x4a074900
jae 0x1400d23f3
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, r15
mov r8, r14
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
jmp 0x1400d238b
movabs rdi, 0x8000000000000000
mov rbx, qword [rbp - 0x48]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400d2410
test rax, rax
je 0x1400d298d
mov rcx, r15
mov r15, qword [r14]
mov rsi, qword [r14 + 0x18]
mov eax, dword [0x141dd6990]
or eax, dword [0x141dd6994]
sub r15, rcx
add eax, 0xd75eb29a
and eax, 0x1f332d03
cmp eax, 0x3d515782
jne 0x1400d2462
lea r9, [r15 + rsi]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r12
mov r8, qword [rbp + 0x30]
call fcn.1400d59e0
add rsp, 0x20
add r15, rsi
mov r14, qword [rbp + 0x30]
nop dword [rax]
mov esi, dword [0x141dd6998]
xor esi, dword [0x141dd699c]
and esi, 0x4c8afb33
add esi, 0x1e9ed429
and esi, 0x5b8bac52
sub rsp, 0x20
mov rcx, rbx
mov rdx, r12
mov r8, r14
mov r9, r15
call fcn.1400d59e0
add rsp, 0x20
cmp esi, 0x63f6b213
ja 0x1400d2470
mov rax, qword [rbx]
cmp rax, rdi
je 0x1400d29b5
mov qword [rbp + 0x40], rax
mov r14, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x70], rax
mov rax, qword [r13 + 0x50]
mov qword [rbp + 0x38], rax
mov rsi, qword [r13 + 0x58]
mov qword [r13 + 0x58], 0
test rsi, rsi
je 0x1400d25ec
mov rax, qword [rbp + 0x38]
lea rbx, [rax + 8]
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12d, 0xd7520d8f
cmp qword [rbx - 8], 0
je 0x1400d25c0
mov eax, dword [0x141dd6a18]
add eax, dword [0x141dd6a1c]
imul rax, rax, 0x1c9536a5
shr rax, 0x3b
or eax, 0xa8550cb6
imul eax, eax, 0xebba4834
cmp eax, 0x5dd2af62
jb 0x1400d2573
mov eax, dword [0x141dd6a20]
mov ecx, dword [0x141dd6a24]
lea edi, [rax + rcx]
add edi, 0xc3c7c181
xor edi, 0x1d05437a
imul rdi, r12
shr rdi, 0x3f
mov r8, qword [rbx]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
cmp edi, 0xa45278cb
jne 0x1400d2590
mov r8, qword [rbx]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
jmp 0x1400d2531
mov eax, dword [0x141dd6a28]
imul eax, dword [0x141dd6a2c]
add eax, 0xed28c290
xor eax, 0xfe2907fb
imul eax, eax, 0x29e36ee9
cmp eax, 0xafc9462a
ja 0x1400d2590
nop word cs:[rax + rax]
mov eax, dword [0x141dd6a30]
xor edx, edx
div dword [0x141dd6a34]
add eax, 0xd75cabbb
and eax, 0xc9108134
cmp eax, 0xc9588a19
ja 0x1400d25c0
add rbx, 0x20
dec rsi
jne 0x1400d24fd
mov r10, qword [rbp + 0x70]
mov eax, dword [0x141dd6a10]
add eax, dword [0x141dd6a14]
or eax, 0x2148773a
imul eax, eax, 0xeec95040
cmp eax, 0x8701ffc
je 0x1400d25f0
lea r11, [r10 + r10]
xor r12d, r12d
mov esi, 0xd71b6723
mov edi, 0x820b2dc1
xor ebx, ebx
xor ecx, ecx
nop word cs:[rax + rax]
test r12b, r12b
jne 0x1400d2630
cmp rcx, r10
je 0x1400d2bde
lea r15, [r14 + rcx*2]
mov r8, r11
sub r8, rcx
sub r8, rcx
xor r13d, r13d
mov r9, r15
mov eax, dword [0x141dd6a38]
add eax, dword [0x141dd6a3c]
imul eax, eax, 0xb89d009a
add eax, 0x56fe5fd8
cmp eax, 0x5d0f5aec
ja 0x1400d2651
cmp word [r15 + r13*2], 0
je 0x1400d26de
mov eax, dword [0x141dd6a40]
xor edx, edx
div dword [0x141dd6a44]
mov eax, dword [0x141dd6a48]
or eax, dword [0x141dd6a4c]
add eax, 0x21c8a46c
or eax, 0xca91b6be
add eax, 0xaba0cda2
cmp eax, 0x6bcb5d14
jb 0x1400d2685
add r9, 2
mov eax, dword [0x141dd6a50]
xor edx, edx
div dword [0x141dd6a54]
mov eax, dword [0x141dd6a58]
sub eax, dword [0x141dd6a5c]
cmp eax, 0xe9aa287f
je 0x1400d26b9
inc r13
add r8, 0xfffffffffffffffe
jne 0x1400d2651
jmp 0x1400d2bde
mov eax, dword [0x141dd6a78]
add eax, dword [0x141dd6a7c]
imul rax, rsi
shr rax, 0x3f
or eax, 0xed0d5ad4
xor eax, 0xf9cb414d
cmp eax, 0xca41da8a
ja 0x1400d26de
lea rsi, [rcx + r13]
cmp rsi, rcx
jb 0x1400d2c69
test r12b, r12b
jne 0x1400d2710
cmp rsi, r10
ja 0x1400d2c55
lea rcx, [r15 + r13*2]
mov r8, r15
nop word cs:[rax + rax]
mov eax, dword [0x141dd6ab8]
xor edx, edx
div dword [0x141dd6abc]
imul eax, eax, 0x5d70bfc8
or eax, 0x70a38cea
add eax, 0x71628304
cmp eax, 0xd40c5d7c
jb 0x1400d2730
cmp r8, rcx
je 0x1400d2bde
movzx eax, word [r8]
add r8, 2
nop word cs:[rax + rax]
mov edx, dword [0x141dd6ac0]
sub edx, dword [0x141dd6ac4]
imul edx, edx, 0xc73b30c8
add edx, 0x2d998de5
cmp edx, 0xd22e9891
ja 0x1400d2770
cmp ax, 0x3d
jne 0x1400d2730
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x48], r11
mov eax, dword [0x141dd6ac8]
or eax, dword [0x141dd6acc]
add eax, 0x2d2eb3aa
imul rax, rdi
shr rax, 0x3d
xor eax, 0xf5ab0ed7
cmp eax, 0xd3774cc9
mov rbx, qword [rbp - 0x18]
jb 0x1400d2803
mov eax, dword [0x141dd6ad0]
xor eax, dword [0x141dd6ad4]
imul edi, eax, 0xfc9becd6
or edi, 0xf17b6391
add edi, 0xfe1254ca
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r13
call fcn.14008b7e0
add rsp, 0x20
cmp edi, 0x9449cae
jae 0x1400d281b
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r13
call fcn.14008b7e0
add rsp, 0x20
jmp 0x1400d27c7
mov r15, qword [rbp + 0xa8]
mov rbx, qword [rbp + 0x88]
mov ecx, 0xc7d8b209
mov eax, dword [0x141dd6ad8]
and eax, dword [0x141dd6adc]
imul rax, rcx
shr rax, 0x3e
or eax, 0xd2885fcc
imul eax, eax, 0x5b4c97d7
cmp eax, 0x7e0e9078
ja 0x1400d282e
mov rax, qword [rbp + 0x10]
cmp rax, qword [rbx]
jne 0x1400d28d5
mov eax, dword [0x141dd6ae0]
sub eax, dword [0x141dd6ae4]
imul eax, eax, 0x5d6371b6
or eax, 0x83a8af02
imul eax, eax, 0xc7037bde
cmp eax, 0x3b93afc9
jne 0x1400d2891
sub rsp, 0x20
mov rcx, rbx
call fcn.1400176d0
add rsp, 0x20
mov edi, dword [0x141dd6ae8]
imul edi, dword [0x141dd6aec]
or edi, 0xf9649a7f
add edi, 0x50bde661
xor edi, 0xabb9a7bb
sub rsp, 0x20
mov rcx, rbx
call fcn.1400176d0
add rsp, 0x20
cmp edi, 0xdca3392
jb 0x1400d2891
mov rax, qword [r15 + 0x50]
mov qword [rbp + 0x38], rax
test r12b, r12b
jne 0x1400d28c8
mov rbx, qword [rbp + 0x10]
mov rax, rbx
shl rax, 5
mov rcx, qword [rbp - 0x18]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
mov rcx, qword [rbp + 0x38]
movups xmmword [rcx + rax + 0x10], xmm1
movups xmmword [rcx + rax], xmm0
inc rbx
mov qword [r15 + 0x58], rbx
inc rsi
mov rcx, rsi
mov r10, qword [rbp + 0x70]
cmp rsi, r10
mov r11, qword [rbp + 0x48]
mov esi, 0xd71b6723
mov edi, 0x820b2dc1
jbe 0x1400d2630
mov eax, dword [0x141dd6a60]
or eax, dword [0x141dd6a64]
add eax, 0xb457d42
and eax, 0xeb2ed6b
imul eax, eax, 0xd0b4b38f
cmp eax, 0xcd224ec6
jbe 0x1400d2945
ud2
mov eax, 0xe8007929
mov ecx, dword [0x141dd6a68]
xor ecx, dword [0x141dd6a6c]
add ecx, 0x71140b67
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x38179de4
ud2
mov eax, dword [0x141dd6988]
or eax, dword [0x141dd698c]
add eax, 0x16b26883
imul rax, rax, 0xf432811
shr rax, 0x39
xor eax, 0x1e6e9219
cmp eax, 0xa229a4ac
jae 0x1400d298d
mov rax, qword [r13 + 0x50]
mov qword [rbp + 0x70], rax
nop dword [rax]
mov eax, dword [0x141dd69a0]
imul eax, dword [0x141dd69a4]
imul eax, eax, 0xe4664383
and eax, 0xe234d941
cmp eax, 0xf97655f2
ja 0x1400d29c0
mov rsi, qword [r13 + 0x58]
test rsi, rsi
je 0x1400d2b31
mov rax, qword [rbp + 0x70]
lea rbx, [rax + 8]
xor r12d, r12d
mov r13d, 0xc9429d5f
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
cmp qword [rbx - 8], 0
je 0x1400d2ae0
mov eax, dword [0x141dd69a8]
xor edx, edx
div dword [0x141dd69ac]
mov eax, dword [0x141dd69b0]
add eax, dword [0x141dd69b4]
imul rax, r13
shr rax, 0x3d
add eax, 0x1f32989e
cmp eax, 0xa1d0927f
ja 0x1400d2a29
mov eax, dword [0x141dd69b8]
xor eax, dword [0x141dd69bc]
and eax, 0xa0739b36
imul eax, eax, 0xf59d1f16
add eax, 0xd2c64c60
cmp eax, 0xf4b5e2b2
ja 0x1400d2a49
mov r15, qword [rbx]
mov eax, dword [0x141dd69c0]
xor eax, dword [0x141dd69c4]
imul rax, rax, 0x241fce41
shr rax, 0x39
add eax, 0x7b312b9e
or eax, 0x3485db08
cmp eax, 0xb8fbee0c
ja 0x1400d2b15
nop word [rax + rax]
mov eax, dword [0x141dd69c8]
imul eax, dword [0x141dd69cc]
imul edi, eax, 0x6ffd07f1
add edi, 0x3627f950
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r14
add rsp, 0x20
cmp edi, 0xa80d44e7
jb 0x1400d2b15
nop dword [rax + rax]
mov eax, dword [0x141dd69d0]
xor eax, dword [str._eW19_]
imul eax, eax, 0x16ead00
and eax, 0x2833b400
add eax, 0xa526cfe4
cmp eax, 0xaf28d23f
jb 0x1400d2ae0
add rbx, 0x20
inc r12
dec rsi
jne 0x1400d2a10
jmp 0x1400d2b31
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r14
add rsp, 0x20
jmp 0x1400d2aa0
mov eax, dword [0x141dd69d8]
xor edx, edx
div dword [0x141dd69dc]
mov eax, 0xa7dbd15d
mov r15, qword [rbp + 0x68]
mov rsi, qword [rbp + 0x88]
nop
mov ecx, dword [0x141dd69e0]
add ecx, dword [0x141dd69e4]
imul ecx, ecx, 0x480fd0f2
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x76fd7813
cmp ecx, 0xbda7533d
ja 0x1400d2b50
mov rax, qword [rsi]
nop dword [rax + rax]
mov ecx, dword [0x141dd69e8]
add ecx, dword [0x141dd69ec]
imul ecx, ecx, 0x8c07ee33
cmp ecx, 0xd4fdf6df
je 0x1400d2b80
test rax, rax
mov r13, qword [rbp + 0xa8]
je 0x1400d2dce
mov eax, dword [0x141dd69f0]
or eax, dword [0x141dd69f4]
xor eax, 0x982ebf01
mov ecx, 0x8b6c411b
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0xf3da3c51
cmp eax, 0xba8c946
je 0x1400d2d8b
jmp 0x1400d2d7e
mov eax, 0xc559000f
mov ecx, dword [0x141dd6a80]
and ecx, dword [0x141dd6a84]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xbdf24900
imul rcx, rcx, 0x660e8c73
shr rcx, 0x3d
cmp ecx, 0xceed5357
je 0x1400d2be3
cmp qword [rbp + 0x40], 0
mov r13, qword [rbp + 0xa8]
mov r15, qword [rbp + 0x68]
je 0x1400d2e2a
mov eax, dword [0x141dd6a88]
add eax, dword [0x141dd6a8c]
imul eax, eax, 0x787f6a02
add eax, 0x6872b36a
imul rax, rax, 0x97e8b1f
shr rax, 0x39
cmp eax, 0x601513de
ja 0x1400d2cef
jmp 0x1400d2cb6
ud2
mov eax, dword [0x141dd6aa8]
xor eax, dword [0x141dd6aac]
imul rax, rax, 0x4e387e33
shr rax, 0x3e
or eax, 0x98813f08
cmp eax, 0x67fc3330
jne 0x1400d2c8e
ud2
mov eax, dword [0x141dd6ab0]
xor eax, dword [0x141dd6ab4]
shr eax, 4
imul rax, rax, 0x4d266c3
shr rax, 0x36
ud2
mov eax, dword [0x141dd6a90]
or eax, dword [0x141dd6a94]
imul rax, rax, 0x3168bd0d
shr rax, 0x3b
imul eax, eax, 0xdde348b6
mov ecx, 0xbe633ca9
imul rcx, rax
shr rcx, 0x3f
mov rdi, qword [0x141dda6a0]
cmp ecx, 0x4aabd031
jbe 0x1400d2cf8
mov rax, qword [0x141dda6a0]
jmp 0x1400d2cb6
mov eax, dword [0x141dd6a98]
imul eax, dword [0x141dd6a9c]
mov ecx, 0xaf2fb68d
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x6e91035f
imul rax, rcx, 0x1e9458c3
shr rax, 0x3a
cmp eax, 0xb4d58a87
jbe 0x1400d2d40
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd6aa0]
add eax, dword [0x141dd6aa4]
imul ebx, eax, 0xb66fa019
add ebx, 0xa1e61cb9
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call rsi
add rsp, 0x20
cmp ebx, 0xbcc663c8
jae 0x1400d2d47
jmp 0x1400d2e2a
mov rcx, qword [0x141dda6a0]
xor eax, eax
test al, al
je 0x1400d2d94
mov rax, qword [0x141dda6a0]
jmp 0x1400d2d7e
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd69f8]
xor eax, dword [str.Y__q]
imul eax, eax, 0x8c8ce6cd
or eax, 0xef87ffff
cmp eax, 0x9ab2eaae
jb 0x1400d2db0
mov eax, dword [0x141dd6a00]
and eax, dword [0x141dd6a04]
and eax, 0xdf78c335
cmp eax, 0xdf871d3e
jne 0x1400d2df0
mov qword [rsi], 0
nop dword [rax]
mov eax, dword [0x141dd6a08]
sub eax, dword [0x141dd6a0c]
add eax, 0xc0054b4d
xor eax, 0xf9eba050
imul eax, eax, 0x588510c5
mov qword [rsi], 0
cmp eax, 0x4bd2170b
jb 0x1400d2df0
mov qword [r13 + 0x50], 8
mov qword [r13 + 0x58], 0
mov eax, 0xdc7d6207
mov rbx, qword [rbp + 0x90]
mov edi, dword [rbp + 0x50]
mov esi, dword [rbp + 0x80]
mov r10, qword [rbp + 0x78]
mov r9, qword [rbp + 0xa0]
nop word [rax + rax]
mov ecx, dword [0x141dd6af0]
imul ecx, dword [0x141dd6af4]
and ecx, 0x566c6179
imul ecx, ecx, 0x31193be7
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x69318be8
ja 0x1400d2e50
mov rax, r13
lea r11, [r13 + 0x98]
lea r14, [r13 + 0xb8]
nop word [rax + rax]
mov eax, dword [0x141dd6af8]
imul eax, dword [0x141dd6afc]
or eax, 0x6a7297f4
add eax, 0xa057638d
and eax, 0xae0cd282
cmp eax, 0x3ef4ec41
ja 0x1400d2e90
test esi, esi
je 0x1400d2ee7
cmp esi, 1
jne 0x1400d2eef
nop dword [rax]
mov eax, dword [0x141dd6b08]
mov ecx, dword [0x141dd6b0c]
add eax, ecx
add eax, 0xbdebd4e6
and eax, 0xdbd1d4b2
cmp eax, 0x7ef9a507
ja 0x1400d2ec0
mov r12b, 1
jmp 0x1400d2f90
xor r12d, r12d
jmp 0x1400d2f90
cmp esi, 2
jne 0x1400d3083
nop dword [rax + rax]
mov eax, dword [0x141dd6b10]
or eax, dword [0x141dd6b14]
add eax, 0x72375252
or eax, 0xe7f87968
and eax, 0xfffafb69
cmp eax, 0x4c51b816
jb 0x1400d2f00
mov rax, qword [r11]
movabs rdx, 0x8000000000000000
nop
mov ecx, dword [0x141dd6b18]
add ecx, dword [0x141dd6b1c]
xor ecx, 0xb4682b60
shr ecx, 2
imul rcx, rcx, 0x4906b2b1
shr rcx, 0x3a
and ecx, 0xfffffffc
cmp rax, rdx
sete r12b
cmp ecx, 0xae0ada41
ja 0x1400d2f30
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b20]
or eax, dword [0x141dd6b24]
cmp eax, 0xeb5579bd
je 0x1400d2f70
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b28]
sub eax, dword [0x141dd6b2c]
imul eax, eax, 0xbdaeab74
or eax, 0x88c6f4f4
cmp eax, 0x75cbadcd
jb 0x1400d2f90
test edi, edi
je 0x1400d3028
cmp edi, 1
je 0x1400d3035
cmp edi, 2
jne 0x1400d3066
mov rcx, qword [r14]
movabs r8, 0x8000000000000000
nop dword [rax]
mov edx, dword [0x141dd6b38]
add edx, dword [0x141dd6b3c]
and edx, 0x11024868
or edx, 0x8c3db497
xor edx, 0xbe82c5e8
cmp rcx, r8
sete al
cmp edx, 0x1e90c950
jb 0x1400d2fd0
nop dword [rax]
mov ecx, dword [0x141dd6b40]
xor ecx, dword [0x141dd6b44]
or ecx, 0xe0808841
and ecx, 0xf9c2c8e1
add ecx, 0x9b69b47d
cmp ecx, 0x459663be
jb 0x1400d3000
jmp 0x1400d302a
xor eax, eax
or al, r12b
cmp al, 1
jne 0x1400d37b0
mov qword [rbp + 0x88], r11
mov eax, dword [0x141dd6b48]
add eax, dword [0x141dd6b4c]
imul eax, eax, 0x993a9b86
cmp eax, 0xf4383aaa
mov rdi, qword [rbp + 0x98]
mov r13, qword [rbp - 0x20]
je 0x1400d30f3
jmp 0x1400d30af
mov eax, dword [0x141dd6b30]
sub eax, dword [0x141dd6b34]
add eax, 0x37ef8f02
cmp eax, 0xe6587493
ja 0x1400d3066
jmp 0x1400d2389
mov eax, 0xca166bc7
mov ecx, dword [0x141dd6b00]
and ecx, dword [0x141dd6b04]
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x86aa689d
cmp ecx, 0x97a51f8e
ja 0x1400d3088
jmp 0x1400d2389
mov eax, dword [0x141dd6b50]
mov ecx, dword [0x141dd6b54]
lea esi, [rax + rcx]
add esi, 0xc4644287
xor esi, 0xb062464c
sub rsp, 0x20
mov rcx, r13
mov rdx, rdi
mov r8, r9
mov r9, qword [rbp + 0x60]
call fcn.1400d59e0
mov r9, qword [rbp + 0xa0]
add rsp, 0x20
cmp esi, 0x45ea79c9
jbe 0x1400d3116
sub rsp, 0x20
mov rcx, r13
mov rdx, rdi
mov r8, r9
mov r9, qword [rbp + 0x60]
call fcn.1400d59e0
mov r9, qword [rbp + 0xa0]
add rsp, 0x20
jmp 0x1400d30af
mov r11, qword [r13]
movabs rax, 0x8000000000000000
cmp r11, rax
jne 0x1400d3230
mov rdi, qword [rbp + 0x88]
movabs rsi, 0x8000000000000000
nop
mov eax, dword [0x141dd6b98]
or eax, dword [0x141dd6b9c]
imul eax, eax, 0xa3936b7d
or eax, 0x58d0ccc8
imul rax, rax, 0x5122165
shr rax, 0x3a
cmp eax, 0x6bd4eecf
ja 0x1400d3140
mov rax, qword [rdi]
mov r10, qword [rbp + 0x78]
mov ecx, dword [0x141dd6ba0]
sub ecx, dword [0x141dd6ba4]
add ecx, 0x3b4f73f3
xor ecx, 0x726c9ae1
imul ecx, ecx, 0xe2391821
cmp ecx, 0x768af9bb
jb 0x1400d3170
shl rax, 1
test rax, rax
je 0x1400d31ef
mov rax, qword [rbp + 0xa8]
mov r8, qword [rax + 0xa0]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, qword [rbp + 0x78]
add rsp, 0x20
mov eax, dword [0x141dd6ba8]
or eax, dword [0x141dd6bac]
imul rax, rax, 0x7ff37089
shr rax, 0x3e
add eax, 0x738a6db3
xor eax, 0xd353c206
cmp eax, 0x8dc08c66
jb 0x1400d31c7
xor eax, eax
test al, al
je 0x1400d31f8
mov qword [rdi], rsi
mov eax, 0xcbbbaeff
nop dword [rax]
mov ecx, dword [0x141dd6bb0]
sub ecx, dword [0x141dd6bb4]
xor ecx, 0x362611a6
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xaf428a9
mov qword [rdi], rsi
cmp ecx, 0x352e81c2
je 0x1400d3200
jmp 0x1400d3775
mov rcx, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b58]
imul eax, dword [0x141dd6b5c]
add eax, 0xde635cf6
or eax, 0x9b33c48f
cmp eax, 0xd58e0884
jb 0x1400d3240
mov r10, qword [rcx + 8]
mov rcx, qword [rcx + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b60]
and eax, dword [0x141dd6b64]
or eax, 0x398480d2
and eax, 0x399480da
cmp eax, 0x847b4b66
je 0x1400d3270
lea r8, [r10 + rcx*2]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b68]
sub eax, dword [0x141dd6b6c]
add eax, 0x98b56dba
or eax, 0x15f35745
cmp eax, 0x92d07955
ja 0x1400d32a0
test rcx, rcx
mov qword [rbp + 0xa0], r10
mov qword [rbp + 0x60], r11
mov dword [rbp + 0x70], r12d
je 0x1400d3375
xor r9d, r9d
xor ebx, ebx
nop word [rax + rax]
test r9b, r9b
jne 0x1400d32e0
cmp word [r10], 0
je 0x1400d337c
mov eax, dword [0x141dd6b70]
xor edx, edx
div dword [0x141dd6b74]
and eax, 0x88214010
cmp eax, 0xe9d82982
je 0x1400d32f0
add r10, 2
nop
mov eax, dword [0x141dd6b78]
sub eax, dword [0x141dd6b7c]
and eax, 0xc0b73413
add eax, 0xebb50ebe
or eax, 0x64e7d32a
cmp eax, 0x1aec5ee
jb 0x1400d3310
inc rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b80]
add eax, dword [0x141dd6b84]
imul eax, eax, 0x1a3641e7
imul rax, rax, 0x3b7db3fd
shr rax, 0x3d
cmp eax, 0xec8f46b6
ja 0x1400d3340
cmp r10, r8
jne 0x1400d32e0
mov r12, r14
mov rbx, rcx
jmp 0x1400d337f
mov r12, r14
xor ebx, ebx
jmp 0x1400d337f
mov r12, r14
mov eax, dword [0x141dd6b88]
xor eax, dword [0x141dd6b8c]
xor eax, 0xc6057855
add eax, 0x5c6ef5aa
cmp eax, 0xdd091f01
mov r13d, dword [rbp + 0x50]
mov rdi, qword [rbp]
mov r14, qword [rbp + 0xa0]
ja 0x1400d3400
mov esi, dword [0x141dd6b90]
imul esi, dword [0x141dd6b94]
xor esi, 0xc2458b40
or esi, 0x3db83498
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call fcn.14008b7e0
add rsp, 0x20
mov r15, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov ecx, r13d
mov rdx, r15
mov r9, r12
call fcn.1400d67f0
add rsp, 0x20
cmp esi, 0x5aac6811
jae 0x1400d3436
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call fcn.14008b7e0
add rsp, 0x20
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov ecx, r13d
mov r9, r12
call fcn.1400d67f0
add rsp, 0x20
jmp 0x1400d33ab
cmp byte [rbp + 0x70], 0
je 0x1400d35d0
mov rax, qword [rbp]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov r12, qword [rbp - 0x38]
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
mov rdi, qword [rbp + 0x88]
mov rax, qword [rdi]
mov ecx, dword [0x141dd6bb8]
xor ecx, dword [0x141dd6bbc]
add ecx, 0x544c6b91
imul rcx, rcx, 0x8ab02e1
shr rcx, 0x3a
cmp ecx, 0x1588c9fb
ja 0x1400d3464
shl rax, 1
test rax, rax
je 0x1400d3542
mov eax, dword [0x141dd6bc0]
mov ecx, dword [0x141dd6bc4]
add eax, ecx
add eax, 0xa185dd70
and eax, 0x1ca2a0b7
imul eax, eax, 0x2fe76e8a
cmp eax, 0x4680e289
jb 0x1400d3495
mov rax, qword [rbp + 0xa8]
mov rbx, qword [rax + 0xa0]
mov r14, qword [0x141dda6a0]
mov eax, dword [0x141dd6bc8]
sub eax, dword [0x141dd6bcc]
add eax, 0x62afca0
imul rax, rax, 0x428ef2fb
shr rax, 0x3e
or eax, 0xaf36256a
cmp eax, 0x6b9c36fc
jae 0x1400d350d
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd6bd0]
sub eax, dword [0x141dd6bd4]
imul r15d, eax, 0x69efbf4f
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
add rsp, 0x20
cmp r15d, 0x6f917e65
je 0x1400d3514
mov eax, dword [0x141dd6bd8]
imul eax, dword [0x141dd6bdc]
and eax, 0x777ac9b7
imul rax, rax, 0x38d8360f
shr rax, 0x3c
imul eax, eax, 0x985b942
cmp eax, 0x10382d8f
jbe 0x1400d357e
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov eax, dword [0x141dd6be0]
sub eax, dword [0x141dd6be4]
imul eax, eax, 0xa9bd8238
add eax, 0x8ef9e410
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
cmp eax, 0xe6c34f57
ja 0x1400d357e
mov eax, dword [0x141dd6be8]
and eax, dword [0x141dd6bec]
add eax, 0x28e407dd
and eax, 0x35568a40
cmp eax, 0xb80b88a1
jae 0x1400d35ae
jmp 0x1400d3670
mov rcx, qword [rbp]
mov eax, dword [0x141dd6bf0]
xor edx, edx
div dword [0x141dd6bf4]
add eax, 0x70a3a93
and eax, 0x12ee6c8e
cmp eax, 0x99364987
je 0x1400d35d4
mov rax, qword [rcx]
mov ecx, dword [0x141dd6bf8]
sub ecx, dword [0x141dd6bfc]
add ecx, 0xd9a63e54
imul rcx, rcx, 0x12a1a431
shr rcx, 0x38
cmp ecx, 0x7f4bce33
ja 0x1400d35f6
test rax, rax
je 0x1400d3670
xor eax, eax
test al, al
je 0x1400d362d
mov rax, qword [0x141dda6a0]
xor eax, eax
mov rbx, qword [0x141dda6a0]
test al, al
jne 0x1400d362f
mov eax, dword [0x141dd6c00]
or eax, dword [0x141dd6c04]
add eax, 0xd30a1fdd
or eax, 0x4477e450
and eax, 0x4d7ff7fc
cmp eax, 0x99b235b7
ja 0x1400d385e
jmp 0x1400d3817
mov eax, dword [0x141dd6c10]
xor eax, dword [0x141dd6c14]
and eax, 0x240240
cmp eax, 0x359af905
je 0x1400d3670
mov ecx, 0xb41b8987
mov rbx, qword [rbp + 0x90]
mov r15, qword [rbp + 0x68]
mov r10, qword [rbp + 0x78]
mov r8, qword [rbp + 0x60]
mov eax, dword [0x141dd6c18]
xor edx, edx
div dword [0x141dd6c1c]
or eax, 0x70824df3
imul eax, eax, 0xe9194540
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x2ac20c48
ja 0x1400d36a0
nop dword [rax + rax]
mov eax, dword [0x141dd6c20]
and eax, dword [0x141dd6c24]
imul eax, eax, 0x20e6c3f
or eax, 0xb1276257
xor eax, 0xf041448f
cmp eax, 0xebc86a1e
ja 0x1400d36d0
test r8, r8
je 0x1400d3775
mov eax, dword [0x141dd6c28]
xor edx, edx
div dword [0x141dd6c2c]
add eax, 0x2b7d76da
or eax, 0x2b03f823
and eax, 0xff0bfcf7
cmp eax, 0x3beb40a8
jbe 0x1400d3723
mov rax, qword [0x141dda6a0]
mov eax, 0x97ac90f5
nop dword [rax + rax]
mov edx, dword [0x141dd6c30]
imul edx, dword [0x141dd6c34]
imul rdx, rax
shr rdx, 0x3f
or edx, 0x5002020
mov rcx, qword [0x141dda6a0]
cmp edx, 0x5ef8a154
je 0x1400d3730
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r10, qword [rbp + 0x78]
mov edi, dword [rbp + 0x50]
mov esi, dword [rbp + 0x80]
nop
mov eax, dword [0x141dd6c38]
add eax, dword [0x141dd6c3c]
xor eax, 0xc078f424
imul eax, eax, 0x2eab3225
add eax, 0x749ba8e
cmp eax, 0xa282a209
jb 0x1400d3780
nop word cs:[rax + rax]
mov eax, dword [0x141dd6c40]
xor eax, dword [0x141dd6c44]
add eax, 0x5ba8afcb
or eax, 0x9e9079d8
cmp eax, 0x70970268
je 0x1400d37b0
mov r13, qword [rbp + 0xa8]
movabs r14, 0x8000000000000000
mov r12, qword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6c48]
or eax, dword [0x141dd6c4c]
or eax, 0x25ec984d
add eax, 0xba3852de
and eax, 0x8026dcc8
cmp eax, 0x572264a0
je 0x1400d37f0
jmp 0x1400d090a
mov eax, dword [0x141dd6c08]
xor edx, edx
div dword [0x141dd6c0c]
imul rax, rax, 0x7a36ca1d
shr rax, 0x3a
imul esi, eax, 0x7416aa26
or esi, 0x839109d5
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x66e93e47
jne 0x1400d3670
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d3817
mov eax, dword [0x141dd6ce0]
or eax, dword [0x141dd6ce4]
shr eax, 3
imul rax, rax, 0x13d758b
shr rax, 0x35
imul esi, eax, 0x244e4de8
and esi, 0x60a7488
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r12
mov r9, r15
call fcn.1400d59e0
add rsp, 0x20
cmp esi, 0x65bdd975
jne 0x1400d38d8
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r12
mov r9, r15
call fcn.1400d59e0
add rsp, 0x20
jmp 0x1400d3876
mov rsi, qword [rdi]
movabs rax, 0x8000000000000000
cmp rsi, rax
jne 0x1400d391a
mov eax, dword [0x141dd6d20]
xor eax, dword [0x141dd6d24]
imul rax, rax, 0x774d3413
shr rax, 0x3d
xor eax, 0xd0a8ab43
cmp eax, 0xa5fd5988
mov rcx, qword [rbp - 8]
jb 0x1400d3a69
jmp 0x1400d3a3d
mov eax, dword [0x141dd6ce8]
sub eax, dword [0x141dd6cec]
xor eax, 0x1000002
or eax, 0x42bc0ae0
and eax, 0xebbc8ef2
cmp eax, 0x256a577a
mov rbx, qword [rbp - 8]
jae 0x1400d3958
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax + 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d5d30
add rsp, 0x20
mov r12, qword [rbp - 0x10]
nop dword [rax]
mov edi, dword [0x141dd6cf0]
xor edi, dword [0x141dd6cf4]
add edi, 0x507106c2
or edi, 0xc6fdd7fe
mov r15, qword [r12 + 8]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
call fcn.1400d5d30
add rsp, 0x20
cmp edi, 0xbc7eba47
jb 0x1400d3960
nop dword [rax + rax]
mov eax, dword [0x141dd6cf8]
or eax, dword [str.__c]
imul eax, eax, 0x9f459155
cmp eax, 0x97c8c4e0
je 0x1400d39a0
test rsi, rsi
je 0x1400d3b40
mov eax, dword [0x141dd6d00]
and eax, dword [0x141dd6d04]
imul rax, rax, 0x286eb137
shr rax, 0x3d
or eax, 0x288c03c4
cmp eax, 0xac036627
ja 0x1400d3ab1
jmp 0x1400d3a87
mov eax, dword [0x141dd6d98]
xor eax, dword [0x141dd6d9c]
and eax, 0x24401a00
mov r12, qword [0x141dda6a0]
cmp eax, 0x9b177a5
jne 0x1400d3a16
mov rax, qword [0x141dda6a0]
jmp 0x1400d39ee
mov eax, dword [0x141dd6da0]
sub eax, dword [0x141dd6da4]
imul eax, eax, 0x135e230e
add eax, 0xe5c0ad24
cmp eax, 0x420e11f4
jb 0x1400d3d8f
jmp 0x1400d3d4d
mov eax, dword [str.I__ny]
xor eax, dword [0x141dd6d2c]
add eax, 0x6b02c0f4
and eax, 0x6e67a5ea
mov qword [rcx], 0
mov qword [rcx + 8], 8
cmp eax, 0x4b872540
jne 0x1400d3a7a
mov qword [rcx], 0
mov qword [rcx + 8], 8
jmp 0x1400d3a3d
mov qword [rcx + 0x10], 0
jmp 0x1400d3b40
mov eax, dword [0x141dd6d08]
imul eax, dword [0x141dd6d0c]
add eax, 0xf74e4a27
xor eax, 0x9090d801
and eax, 0xb095d849
mov r12, qword [0x141dda6a0]
cmp eax, 0xe760c79a
jbe 0x1400d3aba
mov rax, qword [0x141dda6a0]
jmp 0x1400d3a87
mov eax, dword [0x141dd6d10]
imul eax, dword [0x141dd6d14]
and eax, 0xd515ca1
xor eax, 0xe9534a40
add eax, 0x114d63ae
cmp eax, 0xb6d9fa31
jae 0x1400d3af3
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd6d18]
imul eax, dword [0x141dd6d1c]
add eax, 0x19b39e47
imul rdi, rax, 0x45535d31
shr rdi, 0x39
and edi, 0x1e
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call rsi
add rsp, 0x20
cmp edi, 0xd4f0ffd5
ja 0x1400d3afa
nop word cs:[rax + rax]
mov eax, dword [0x141dd6d30]
mov ecx, dword [0x141dd6d34]
add eax, ecx
add eax, 0xe341435f
xor eax, 0x2dc542cb
add eax, 0xbfc60bc6
cmp eax, 0x322175df
jb 0x1400d3b40
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0x38]
mov qword [rbp + 0x58], rax
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d3b80
mov rax, qword [rbp + 0xa8]
mov rsi, qword [rax + 0x40]
test rsi, rsi
je 0x1400d3c0e
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rbp + 0x58]
xor r15d, r15d
nop word cs:[rax + rax]
test dil, dil
jne 0x1400d3bb0
cmp qword [r12], 0
je 0x1400d3be0
mov r8, qword [r12 + 8]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [str._Z_]
or eax, dword [0x141dd6d3c]
and eax, 0x41ceb8
add eax, 0xa5af888a
and eax, 0x209f1c00
cmp eax, 0x70c035d4
je 0x1400d3be0
add r12, 0x20
inc r15
dec rsi
jne 0x1400d3bb0
mov eax, dword [0x141dd6d40]
xor edx, edx
div dword [0x141dd6d44]
nop dword [rax]
mov eax, dword [0x141dd6d48]
xor edx, edx
div dword [0x141dd6d4c]
imul rax, rax, 0x5831c5fd
shr rax, 0x3a
and eax, 0xa
add eax, 0x97bf7cd7
cmp eax, 0xeb460503
ja 0x1400d3c20
cmp qword [r13], 0
mov rbx, qword [rbp + 0x90]
mov rsi, qword [rbp - 8]
mov edi, dword [rbp + 0x50]
je 0x1400d3ca3
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd6d50]
xor eax, dword [0x141dd6d54]
imul rax, rax, 0x6de12787
shr rax, 0x3c
add eax, 0xf0f7cc45
cmp eax, 0x633e50d6
jb 0x1400d3c80
mov eax, dword [0x141dd6d58]
xor eax, dword [0x141dd6d5c]
or eax, 0x38d4460c
cmp eax, 0x5b4e132d
je 0x1400d3ce8
mov rax, qword [rsi + 0x10]
mov qword [r13 + 0x10], rax
mov eax, dword [0x141dd6d60]
or eax, dword [0x141dd6d64]
xor eax, 0x48400280
and eax, 0xc8500681
movups xmm0, xmmword [rsi]
movups xmmword [r13], xmm0
cmp eax, 0xfb03ce0
jne 0x1400d3cfa
mov rax, qword [rsi + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rsi]
movups xmmword [r13], xmm0
jmp 0x1400d3cbb
mov ecx, 0xc4ac47e5
mov r13, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb0]
mov esi, dword [rbp + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6d68]
xor edx, edx
div dword [0x141dd6d6c]
imul eax, eax, 0xe7207225
add eax, 0x43c83d59
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x219cc407
ja 0x1400d3d20
jmp 0x1400d3e19
mov eax, dword [0x141dd6da8]
xor eax, dword [0x141dd6dac]
add eax, 0x9e8fe264
mov ecx, 0xfaa48379
imul rcx, rax
shr rcx, 0x3e
imul esi, ecx, 0xfd72e4c7
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xc51201b1
jae 0x1400d3da7
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d3d4d
mov r8, qword [rbp + 0xb0]
mov esi, dword [rbp + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6db0]
or eax, dword [0x141dd6db4]
add eax, 0x5670e075
and eax, 0x84e92540
cmp eax, 0xe858d235
je 0x1400d3dc0
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [r13], xmm0
mov r13, qword [rbp + 0xa8]
nop dword [rax + rax]
mov eax, dword [0x141dd6db8]
sub eax, dword [0x141dd6dbc]
imul eax, eax, 0xc228fa40
cmp eax, 0x37c08638
je 0x1400d3e00
lea rax, [r13 + 0x48]
mov qword [rbp + 0x20], rax
mov r15, qword [rbp - 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6dc0]
xor edx, edx
div dword [0x141dd6dc4]
and eax, 0x16080890
add eax, 0xa19b638b
cmp eax, 0x78faadad
jb 0x1400d3e30
nop
mov eax, dword [0x141dd6dc8]
mov ecx, dword [0x141dd6dcc]
add eax, ecx
add eax, 0xc4f5ffa0
xor eax, 0x6003954b
or eax, 0xe906a84
cmp eax, 0x80726013
ja 0x1400d3e50
mov r12, qword [rbp + 0x98]
nop dword [rax + rax]
mov eax, dword [0x141dd6dd0]
and eax, dword [0x141dd6dd4]
add eax, 0xa4ae3ed9
and eax, 0x8821cc0
cmp eax, 0x4783287d
ja 0x1400d3e80
mov eax, dword [rbp + 0x18]
test eax, eax
je 0x1400d4994
cmp eax, 1
je 0x1400d3ef0
cmp eax, 2
jne 0x1400d4217
nop word cs:[rax + rax]
mov eax, dword [0x141dd6de0]
sub eax, dword [0x141dd6de4]
or eax, 0x12e9a9ce
imul eax, eax, 0xa6eb66d3
or eax, 0x72b3f70a
cmp eax, 0xea78970a
je 0x1400d3ec0
cmp qword [r13 + 0x58], 0
jne 0x1400d4994
nop
mov eax, dword [0x141dd6de8]
or eax, dword [0x141dd6dec]
and eax, 0x8815001
xor eax, 0xcff01ad
cmp eax, 0xb675b445
ja 0x1400d3ef0
mov eax, dword [0x141dd6df0]
sub eax, dword [0x141dd6df4]
xor eax, 0xde3c62ca
cmp eax, 0x79ff4cc3
mov rbx, qword [rbp - 0x58]
jae 0x1400d3f46
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, r14
mov r8, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
nop dword [rax]
mov edi, dword [0x141dd6df8]
and edi, dword [0x141dd6dfc]
or edi, 0x4de7ab8c
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, r14
mov r8, r15
call rsi
add rsp, 0x20
cmp edi, 0xebc33c85
je 0x1400d3f50
test rax, rax
je 0x1400d4000
mov r12, qword [r15]
sub r12, r14
add r12, qword [r15 + 0x18]
xor eax, eax
test al, al
je 0x1400d3fb5
sub rsp, 0x20
mov rcx, rbx
mov rdx, qword [rbp + 0x98]
mov r8, r14
mov r9, r12
call fcn.1400d59e0
add rsp, 0x20
xor esi, esi
mov rdi, qword [rbp + 0x98]
nop
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8, r14
mov r9, r12
call fcn.1400d59e0
add rsp, 0x20
test sil, sil
jne 0x1400d3fc0
mov rcx, qword [rbx]
movabs rax, 0x8000000000000000
cmp rcx, rax
mov r12, rdi
jne 0x1400d4303
nop word [rax + rax]
mov eax, dword [0x141dd6e00]
or eax, dword [0x141dd6e04]
add eax, 0xd1694fde
cmp eax, 0x645caf3a
jb 0x1400d4000
mov r14, qword [r13 + 0x50]
nop dword [rax]
mov eax, dword [0x141dd6e08]
or eax, dword [0x141dd6e0c]
imul eax, eax, 0x2783bffa
or eax, 0x826e86c3
cmp eax, 0xaa0ca4
je 0x1400d4020
mov rsi, qword [r13 + 0x58]
mov r8, qword [rbp + 0xb0]
nop dword [rax]
mov eax, dword [0x141dd6e10]
or eax, dword [0x141dd6e14]
xor eax, 0xaffdf8f8
imul eax, eax, 0x367d07f3
cmp eax, 0xa70803c9
jb 0x1400d4050
test rsi, rsi
je 0x1400d4234
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, rdi
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400d4171
mov ecx, dword [0x141dd6e18]
and ecx, dword [0x141dd6e1c]
or ecx, 0x57eb0432
imul ecx, ecx, 0x8ce56e7e
add ecx, 0x27d09b8a
cmp ecx, 0xc9e7a10c
jbe 0x1400d40bf
mov rcx, qword [0x141dda6a0]
add rax, r14
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6e20]
sub ecx, dword [0x141dd6e24]
or ecx, 0x6dac4fe4
add ecx, 0xeaa5e83b
imul rcx, rcx, 0x30b1ffd3
shr rcx, 0x3b
mov r12, qword [rax + 8]
mov r13, qword [0x141dda6a0]
cmp ecx, 0xfc254add
ja 0x1400d40d0
mov eax, dword [0x141dd6e28]
and eax, dword [0x141dd6e2c]
imul eax, eax, 0x648e7ef0
xor eax, 0x35db81f5
cmp eax, 0x795e6a28
jb 0x1400d4200
nop dword [rax + rax]
mov eax, dword [0x141dd6e30]
imul eax, dword [0x141dd6e34]
imul r15d, eax, 0xe6b08ef1
xor r15d, 0x6a042218
and r15d, 0xef8c6799
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call rbx
add rsp, 0x20
cmp r15d, 0x5e98603d
je 0x1400d4200
inc rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd6e38]
and eax, dword [0x141dd6e3c]
add eax, 0x2c547ed7
imul rax, rax, 0x6b8f6ee3
shr rax, 0x3d
cmp eax, 0x655ddb9a
ja 0x1400d4180
mov r13, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb0]
mov r12, qword [rbp + 0x98]
nop dword [rax + rax]
mov eax, dword [0x141dd6e40]
xor edx, edx
div dword [0x141dd6e44]
xor eax, 0x24beec86
imul rax, rax, 0x7eabba37
shr rax, 0x3e
add eax, 0x7400916b
cmp eax, 0x208bff0b
jb 0x1400d41c0
cmp rdi, rsi
jne 0x1400d4080
jmp 0x1400d4234
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call rbx
add rsp, 0x20
jmp 0x1400d4130
mov eax, dword [0x141dd6dd8]
xor eax, dword [0x141dd6ddc]
add eax, 0x9744f6c7
cmp eax, 0x3aa04f7d
jb 0x1400d4217
jmp 0x1400d2389
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
mov rbx, qword [rbp + 0x90]
mov edi, dword [rbp + 0x50]
mov esi, dword [rbp + 0x80]
nop dword [rax + rax]
mov ecx, dword [0x141dd6e48]
or ecx, dword [0x141dd6e4c]
imul rcx, rcx, 0x78c6200f
shr rcx, 0x3e
xor ecx, 0x1b9623af
cmp ecx, 0x98c3a4f2
ja 0x1400d4250
test rax, rax
je 0x1400d42c2
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0xb0]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd6e50]
and eax, dword [0x141dd6e54]
or eax, 0x234bcac0
add eax, 0x80d43e5c
and eax, 0x30503016
cmp eax, 0x1b61fb63
je 0x1400d42a0
mov qword [r13 + 0x48], 0
mov qword [r13 + 0x50], 8
mov qword [r13 + 0x58], 0
nop word [rax + rax]
mov eax, dword [0x141dd6e58]
imul eax, dword [0x141dd6e5c]
or eax, 0x1f6a3524
and eax, 0x9fee7525
cmp eax, 0xcfc545a
je 0x1400d42e0
jmp 0x1400d4940
mov qword [rbp + 0x38], rcx
mov rax, qword [rbx + 8]
mov qword [rbp + 0x70], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x60], rax
mov rax, qword [r13 + 0x50]
mov qword [rbp + 0x58], rax
mov rsi, qword [r13 + 0x58]
mov qword [r13 + 0x58], 0
test rsi, rsi
je 0x1400d450c
xor edi, edi
mov ebx, 0xab2cf6bd
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6e70]
sub eax, dword [0x141dd6e74]
xor eax, 0xa054e5b6
imul eax, eax, 0x1927b6fe
add eax, 0x18387ba5
cmp eax, 0x362afc0c
ja 0x1400d4350
mov rax, rdi
shl rax, 5
mov rcx, qword [rbp + 0x58]
cmp qword [rcx + rax], 0
je 0x1400d44a0
add rax, qword [rbp + 0x58]
mov ecx, dword [0x141dd6e78]
sub ecx, dword [0x141dd6e7c]
add ecx, 0x2607aeaf
and ecx, 0x43d79de9
add ecx, 0x28df9a1e
cmp ecx, 0x91f6630d
ja 0x1400d438d
mov ecx, dword [0x141dd6e80]
and ecx, dword [0x141dd6e84]
imul rcx, rcx, 0x6b1e8f9b
shr rcx, 0x3e
imul ecx, ecx, 0x651f2a9e
cmp ecx, 0x17e20281
jne 0x1400d43e0
mov rcx, qword [0x141dda6a0]
nop
mov ecx, dword [0x141dd6e88]
mov edx, dword [0x141dd6e8c]
add ecx, edx
add ecx, 0xa81b2790
shr ecx, 3
imul rcx, rcx, 0x42c8c67
shr rcx, 0x33
imul ecx, ecx, 0x87e65d55
mov r12, qword [rax + 8]
mov r13, qword [0x141dda6a0]
cmp ecx, 0xf1d7574b
ja 0x1400d43e0
mov eax, dword [0x141dd6e90]
xor edx, edx
div dword [0x141dd6e94]
add eax, 0x9b34e82c
and eax, 0x90081400
cmp eax, 0x768aa320
jb 0x1400d447f
nop word [rax + rax]
mov r14d, dword [0x141dd6e98]
sub r14d, dword [0x141dd6e9c]
add r14d, 0x2bb8df1a
or r14d, 0xef3fbb6b
xor r14d, 0x5c663212
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call r15
add rsp, 0x20
cmp r14d, 0x113884c2
jae 0x1400d44a0
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call r15
add rsp, 0x20
jmp 0x1400d4440
inc rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd6ea0]
imul eax, dword [0x141dd6ea4]
add eax, 0x71302efc
imul rax, rbx
shr rax, 0x3d
cmp eax, 0x8824b04f
ja 0x1400d44b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6ea8]
and eax, dword [0x141dd6eac]
imul eax, eax, 0x612f9f50
and eax, 0x92c7f4f0
add eax, 0x4e432583
cmp eax, 0x6f90c7c6
jb 0x1400d44e0
cmp rdi, rsi
jne 0x1400d4350
mov eax, 0xab81eea5
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6e60]
or ecx, dword [0x141dd6e64]
imul ecx, ecx, 0xdfc3eedf
add ecx, 0xca21630e
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x1d3a8eed
ja 0x1400d4520
mov r15, qword [rbp + 0x70]
mov rax, qword [rbp + 0x60]
lea rbx, [r15 + rax*2]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6e68]
sub eax, dword [0x141dd6e6c]
xor eax, 0x4a80734a
imul eax, eax, 0xb8b4300c
cmp eax, 0x3d94efc7
je 0x1400d4560
xor edi, edi
xor r10d, r10d
xor eax, eax
mov ecx, dword [0x141dd6eb0]
xor ecx, dword [0x141dd6eb4]
imul rcx, rcx, 0x33255dc5
shr rcx, 0x3d
imul ecx, ecx, 0x5a4d117
cmp ecx, 0x5ea97517
je 0x1400d4585
cmp rax, qword [rbp + 0x60]
je 0x1400d4882
lea r12, [r15 + rax*2]
xor r13d, r13d
mov rcx, r12
nop
cmp word [rcx], 0
je 0x1400d45fe
add rcx, 2
nop word [rax + rax]
mov edx, dword [0x141dd6eb8]
imul edx, dword [0x141dd6ebc]
xor edx, 0x10c47032
or edx, 0xc6338b88
cmp edx, 0x1dac7549
je 0x1400d45d0
inc r13
cmp rcx, rbx
jne 0x1400d45c0
jmp 0x1400d4882
mov ecx, dword [0x141dd6ec0]
or ecx, dword [str.RN8xE]
or ecx, 0x23228b7a
add ecx, 0x92aa2062
cmp ecx, 0x92232523
ja 0x1400d45fe
lea rsi, [rax + r13]
cmp rsi, rax
jb 0x1400d4e77
mov eax, dword [0x141dd6ed8]
xor edx, edx
div dword [0x141dd6edc]
imul eax, eax, 0xc2bc32d3
or eax, 0xa7d14a3c
and eax, 0xb7ff7a7c
cmp eax, 0xf16feba5
je 0x1400d462b
test dil, dil
jne 0x1400d4650
cmp rsi, qword [rbp + 0x60]
ja 0x1400d4e3d
nop
mov eax, dword [0x141dd6ef0]
and eax, dword [0x141dd6ef4]
add eax, 0x6de0cabd
or eax, 0x61c1b47e
cmp eax, 0xccefd19b
je 0x1400d4660
lea rcx, [r12 + r13*2]
mov r8, r12
mov eax, dword [0x141dd6f00]
xor edx, edx
div dword [0x141dd6f04]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f08]
xor eax, dword [0x141dd6f0c]
add eax, 0xef2aebc0
or eax, 0x1c299dc4
imul eax, eax, 0x41351234
cmp eax, 0x8e422e50
je 0x1400d46a0
cmp r8, rcx
je 0x1400d4882
mov eax, dword [0x141dd6f10]
xor edx, edx
div dword [0x141dd6f14]
nop word [rax + rax]
mov eax, dword [0x141dd6f18]
xor eax, dword [0x141dd6f1c]
imul rdx, rax, 0x1f19c425
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
imul eax, eax, 0x2a1bc74e
cmp eax, 0x26987f1a
ja 0x1400d46e0
movzx eax, word [r8]
add r8, 2
nop word cs:[rax + rax]
mov edx, dword [0x141dd6f20]
mov r9d, dword [0x141dd6f24]
add edx, r9d
add edx, 0xfb0437c3
xor edx, 0x4803120
and edx, 0xdfd0f930
cmp edx, 0x5ccf876d
je 0x1400d4720
cmp ax, 0x3d
jne 0x1400d4684
mov qword [rbp + 0x40], r10
test dil, dil
je 0x1400d4774
sub rsp, 0x20
mov rcx, qword [rbp + 8]
mov rdx, r12
mov r8, r13
call fcn.14008b7e0
add rsp, 0x20
mov r15, qword [rbp + 8]
mov eax, dword [0x141dd6f28]
xor edx, edx
div dword [0x141dd6f2c]
imul r14d, eax, 0x2fe4e529
and r14d, 0x5696666a
sub rsp, 0x20
mov rcx, r15
mov rdx, r12
mov r8, r13
call fcn.14008b7e0
add rsp, 0x20
cmp r14d, 0xd8ca2d42
ja 0x1400d4778
mov r14, qword [rbp + 0xa8]
mov r15, qword [rbp + 0x70]
mov r10, qword [rbp + 0x40]
mov eax, dword [0x141dd6f30]
sub eax, dword [0x141dd6f34]
imul eax, eax, 0x76b33f13
add eax, 0xf33bfe0
cmp eax, 0xbf46a70
jb 0x1400d47c2
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
mov ecx, dword [0x141dd6f38]
add ecx, dword [0x141dd6f3c]
xor ecx, 0x4012000
or ecx, 0x73d49ddf
and ecx, 0x7fdfbdff
cmp ecx, 0xf318a468
je 0x1400d47e7
cmp r10, rax
jne 0x1400d4847
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
call fcn.1400176d0
add rsp, 0x20
mov eax, dword [0x141dd6f40]
and eax, dword [0x141dd6f44]
xor eax, 0x1a0dbf4c
cmp eax, 0x50ef423
jb 0x1400d4823
mov rax, qword [r14 + 0x50]
mov qword [rbp + 0x58], rax
mov r10, qword [rbp + 0x40]
mov rax, r10
shl rax, 5
mov rcx, qword [rbp + 8]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
mov rcx, qword [rbp + 0x58]
movups xmmword [rcx + rax + 0x10], xmm1
movups xmmword [rcx + rax], xmm0
inc r10
mov qword [r14 + 0x58], r10
inc rsi
mov rax, rsi
cmp rsi, qword [rbp + 0x60]
jbe 0x1400d4585
jmp 0x1400d2389
mov eax, 0xbdfc2641
nop word [rax + rax]
mov ecx, dword [0x141dd6ec8]
and ecx, dword [0x141dd6ecc]
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x1696834a
je 0x1400d4890
mov r13, qword [rbp + 0xa8]
mov rbx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xb0]
mov edi, dword [rbp + 0x50]
mov esi, dword [rbp + 0x80]
mov r12, qword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6ed0]
add eax, dword [0x141dd6ed4]
imul eax, eax, 0x14f66c51
or eax, 0x1088108c
and eax, 0xd3bc368d
cmp eax, 0xfefa18cf
ja 0x1400d48e0
cmp qword [rbp + 0x38], 0
je 0x1400d4940
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rbp + 0xb0]
add rsp, 0x20
mov al, 1
nop dword [rax]
test al, al
je 0x1400d4930
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f48]
imul eax, dword [0x141dd6f4c]
imul eax, eax, 0x20bb55a8
xor eax, 0x60eb99a4
add eax, 0x19b199e2
cmp eax, 0x4db6ef1e
jb 0x1400d4940
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f50]
imul eax, dword [0x141dd6f54]
add eax, 0x163434db
imul rax, rax, 0x6ec477df
shr rax, 0x3e
cmp eax, 0x6ce2a4eb
je 0x1400d4970
lea r15, [r13 + 0x98]
nop dword [rax + rax]
mov eax, dword [0x141dd6f58]
and eax, dword [0x141dd6f5c]
xor eax, 0x4955f9a5
add eax, 0x7550a7cd
or eax, 0x9b05743b
cmp eax, 0x252f247f
jb 0x1400d49a0
lea r14, [r13 + 0xb8]
mov eax, dword [0x141dd6f60]
xor edx, edx
div dword [0x141dd6f64]
nop word [rax + rax]
mov eax, dword [0x141dd6f68]
sub eax, dword [0x141dd6f6c]
or eax, 0x6756e2a0
cmp eax, 0x32ece2c7
je 0x1400d49e0
test esi, esi
je 0x1400d4a7a
cmp esi, 1
jne 0x1400d4a10
mov sil, 1
jmp 0x1400d4a80
mov eax, dword [0x141dd6f70]
imul eax, dword [0x141dd6f74]
imul eax, eax, 0x5430adfb
add eax, 0xe4af833
xor eax, 0x7f8ca156
cmp eax, 0x5ab4915c
ja 0x1400d4a10
movabs rax, 0x8000000000000000
cmp qword [r15], rax
sete sil
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f78]
sub eax, dword [0x141dd6f7c]
and eax, 0x87a64571
add eax, 0xe37dd747
imul rax, rax, 0x71cfcb19
shr rax, 0x3e
cmp eax, 0x4b9847e0
ja 0x1400d4a50
jmp 0x1400d4a80
xor esi, esi
nop dword [rax]
mov eax, dword [0x141dd6f80]
sub eax, dword [0x141dd6f84]
xor eax, 0xccfa8910
or eax, 0x2204726d
cmp eax, 0xf435ed01
ja 0x1400d4a80
test edi, edi
je 0x1400d4ab8
cmp edi, 1
je 0x1400d4af0
movabs rax, 0x8000000000000000
cmp qword [r14], rax
sete al
jmp 0x1400d4aba
xor eax, eax
or al, sil
nop dword [rax]
mov ecx, dword [0x141dd6f88]
xor ecx, dword [0x141dd6f8c]
or ecx, 0xaef99c99
imul ecx, ecx, 0x3b7b500d
cmp ecx, 0xf99abcfb
je 0x1400d4ac0
test al, al
je 0x1400d4f00
nop dword [rax + rax]
mov eax, dword [0x141dd6f90]
add eax, dword [0x141dd6f94]
and eax, 0x2dee5e11
add eax, 0x91ee91ae
or eax, 0xd102a88f
cmp eax, 0xfce46e02
je 0x1400d4af0
sub rsp, 0x20
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
mov rdx, r12
mov r8, qword [rbp + 0x88]
mov r9, qword [rbp + 0xa0]
call fcn.1400d59e0
add rsp, 0x20
mov r9, qword [rbx]
nop word [rax + rax]
mov eax, dword [0x141dd6f98]
xor edx, edx
div dword [0x141dd6f9c]
add eax, 0x8c82c340
xor eax, 0xc33a9967
imul rax, rax, 0x67be0693
shr rax, 0x3e
cmp eax, 0xf12f7a73
je 0x1400d4b40
movabs rax, 0x8000000000000000
cmp r9, rax
jne 0x1400d4c29
mov rax, qword [r15]
mov ecx, 0x9e885be1
nop word cs:[rax + rax]
mov edx, dword [0x141dd6fb8]
add edx, dword [0x141dd6fbc]
xor edx, 0xe6dc5790
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xebd6c366
je 0x1400d4b90
shl rax, 1
test rax, rax
movabs rsi, 0x8000000000000000
je 0x1400d4be2
mov r8, qword [r13 + 0xa0]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov qword [r15], rsi
mov eax, 0x870e3ab5
nop word [rax + rax]
mov ecx, dword [0x141dd6fc0]
and ecx, dword [0x141dd6fc4]
or ecx, 0xb56f8942
mov rdx, rcx
imul rdx, rax
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1c
or ecx, 0x275095db
cmp ecx, 0x1239a380
je 0x1400d4bf0
jmp 0x1400d4ea0
mov qword [rbp + 0xa0], r15
mov r15d, edi
nop word cs:[rax + rax]
mov eax, dword [0x141dd6fa0]
imul eax, dword [0x141dd6fa4]
or eax, 0x4fbff7af
xor eax, 0x9e0701d4
cmp eax, 0x776de4c
jb 0x1400d4c40
mov rdi, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
mov eax, 0xb2957373
nop dword [rax + rax]
mov ecx, dword [0x141dd6fa8]
or ecx, dword [0x141dd6fac]
imul rcx, rax
shr rcx, 0x3d
add ecx, 0xce4fed94
and ecx, 0x4c47a992
cmp ecx, 0x36a1ecb5
je 0x1400d4c70
test r8, r8
mov qword [rbp + 0x58], r9
je 0x1400d4cf9
lea rax, [r8 + r8]
xor ecx, ecx
nop word [rax + rax]
cmp word [rdi + rcx*2], 0
je 0x1400d4cd0
inc rcx
add rax, 0xfffffffffffffffe
jne 0x1400d4cb0
jmp 0x1400d4cfc
mov eax, dword [0x141dd6fb0]
xor edx, edx
div dword [0x141dd6fb4]
or eax, 0x4e3d63e2
add eax, 0xed6aafbf
and eax, 0xf8a29410
cmp eax, 0xacfd03e1
je 0x1400d4cd0
mov r8, rcx
jmp 0x1400d4cfc
xor r8d, r8d
sub rsp, 0x20
mov r12, qword [rbp - 0x28]
mov rcx, r12
mov rdx, rdi
call fcn.14008b7e0
add rsp, 0x20
mov rbx, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
sub rsp, 0x20
mov ecx, r15d
mov rdx, rbx
mov r9, r14
call fcn.1400d67f0
add rsp, 0x20
test sil, sil
je 0x1400d4d94
nop dword [rax + rax]
mov eax, dword [0x141dd6fc8]
xor edx, edx
div dword [0x141dd6fcc]
or eax, 0xa5e65e49
and eax, 0xb7ee7ed9
cmp eax, 0x41a8b8ed
je 0x1400d4d40
mov eax, dword [0x141dd6fd0]
add eax, dword [0x141dd6fd4]
and eax, 0x2b50676b
add eax, 0x269b3578
cmp eax, 0x54cbb27d
mov rsi, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x28]
mov rbx, qword [rbp + 0xa0]
ja 0x1400d4f92
jmp 0x1400d4f62
mov rax, qword [r12]
nop dword [rax + rax]
mov ecx, dword [str.5Viy]
or ecx, dword [0x141dd7004]
or ecx, 0x24edceb8
imul ecx, ecx, 0x6cf43f40
and ecx, 0x7183a180
cmp ecx, 0x7c1587b3
ja 0x1400d4da0
test rax, rax
je 0x1400d50d0
mov eax, dword [0x141dd7008]
sub eax, dword [0x141dd700c]
add eax, 0xb80ad488
xor eax, 0x48b9c2c8
imul eax, eax, 0xd25b56e
cmp eax, 0xf413da69
jne 0x1400d4df9
mov rax, qword [0x141dda6a0]
xor eax, eax
nop dword [rax + rax]
mov r14, qword [0x141dda6a0]
test al, al
jne 0x1400d4e00
mov eax, dword [0x141dd7010]
sub eax, dword [0x141dd7014]
imul eax, eax, 0xca2cfea9
imul rax, rax, 0xdbb6c29
shr rax, 0x3b
xor eax, 0xc08781cf
cmp eax, 0x6dd75580
jb 0x1400d50ae
jmp 0x1400d5084
ud2
mov eax, dword [0x141dd6ee0]
or eax, dword [0x141dd6ee4]
add eax, 0x1d77c9fd
and eax, 0xf99ecd0b
cmp eax, 0xdd255b3f
ja 0x1400d51af
jmp 0x1400d5187
mov eax, dword [0x141dd7048]
xor eax, dword [0x141dd704c]
imul eax, eax, 0x75d41aeb
and eax, 0xc06497f
xor eax, 0x730d3b3b
cmp eax, 0x4a347c1e
jb 0x1400d4ea0
mov rbx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7050]
xor eax, dword [0x141dd7054]
add eax, 0x3c529088
cmp eax, 0xd34b4b24
ja 0x1400d4ee0
nop dword [rax + rax]
mov eax, dword [0x141dd7058]
sub eax, dword [0x141dd705c]
imul rcx, rax, 0x3a78f77b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x36b39eaa
je 0x1400d4f00
mov r15, qword [rbp + 0x68]
movabs r14, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141dd7060]
or eax, dword [0x141dd7064]
add eax, 0x36c74764
and eax, 0x2ca73056
cmp eax, 0xf3a9ebce
je 0x1400d4f40
jmp 0x1400d183b
mov eax, dword [0x141dd6fd8]
and eax, dword [0x141dd6fdc]
and eax, 0x4144099
xor eax, 0x49000010
or eax, 0xb261ab66
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp eax, 0xbca2570e
jne 0x1400d4fa2
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
jmp 0x1400d4f62
mov rax, qword [rbx]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6fe0]
sub ecx, dword [0x141dd6fe4]
or ecx, 0x23058c0
and ecx, 0xb3158c5
imul ecx, ecx, 0x6c2f497c
cmp ecx, 0x9e5c66
je 0x1400d4fb0
shl rax, 1
test rax, rax
je 0x1400d5044
xor eax, eax
test al, al
je 0x1400d4feb
mov rax, qword [0x141dda6a0]
mov eax, dword [0x141dd6fe8]
xor eax, dword [0x141dd6fec]
and eax, 0x2f802311
mov r8, qword [r13 + 0xa0]
mov rcx, qword [0x141dda6a0]
cmp eax, 0x371fd06b
je 0x1400d4feb
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd6ff0]
imul eax, dword [0x141dd6ff4]
add eax, 0x294d6a93
or eax, 0x53ab3b92
add eax, 0xa9a723f5
cmp eax, 0x83ab01bf
ja 0x1400d5021
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6ff8]
sub eax, dword [0x141dd6ffc]
or eax, 0x1c6e8d58
add eax, 0x87d5c252
and eax, 0xc3d5e4e0
cmp eax, 0x354700a9
jbe 0x1400d5060
jmp 0x1400d50d0
mov esi, dword [0x141dd7018]
and esi, dword [0x141dd701c]
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xc7601bc5
jne 0x1400d50d0
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d5084
mov eax, dword [0x141dd7020]
xor eax, dword [0x141dd7024]
add eax, 0x42ba9f3c
and eax, 0x14027031
cmp eax, 0x3e717a77
ja 0x1400d50d0
mov eax, 0x81219427
mov rdx, qword [rbp + 0x58]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7028]
or ecx, dword [0x141dd702c]
or ecx, 0x2df6e785
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xb39c1b81
cmp ecx, 0x1f049834
jb 0x1400d5100
nop dword [rax + rax]
mov eax, dword [0x141dd7030]
or eax, dword [0x141dd7034]
add eax, 0x7af38b47
imul rax, rax, 0x2bec68c9
shr rax, 0x3c
and eax, 0xfffffffe
cmp eax, 0x9e1ccebc
ja 0x1400d5130
test rdx, rdx
je 0x1400d4ea0
mov rbx, qword [0x141dda6a0]
mov eax, dword [0x141dd7038]
xor edx, edx
div dword [0x141dd703c]
xor eax, 0xbe17e95b
add eax, 0x59c5ece2
cmp eax, 0x12591225
jb 0x1400d51e7
jmp 0x1400d51b3
mov eax, dword [0x141dd6ee8]
or eax, dword [0x141dd6eec]
xor eax, 0xcec9bfb
add eax, 0x2b52c5e4
and eax, 0x2d10e0a8
ud2
ud2
mov esi, dword [0x141dd7040]
xor esi, dword [0x141dd7044]
and esi, 0x5ee60baf
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xe9a1c1f9
jne 0x1400d4ea0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d51b3