Function at 0x1400e00a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x550
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x4c8], 0xfffffffffffffffe
mov eax, dword [0x14018b334]
xor eax, dword [0x14018b338]
sub eax, 0xd36b62d9
xor eax, 0x692b6f67
add eax, 0x22d7ce7e
cmp eax, 0x9fa71824
jae 0x1400e2eaa
mov ecx, dword [0x14018b33c]
mov eax, dword [str.v0yW]
or ecx, eax
mov eax, ecx
and eax, 0xd0242355
or ecx, 0xd0242355
add eax, ecx
imul eax, eax, 0x7db2a212
mov ecx, eax
not ecx
and ecx, 0x1cd3a289
and eax, 0xe32c5d76
sub eax, ecx
mov dword [rbp + 0x4bc], eax
mov eax, 0x10
mov qword [rbp + 0x4a8], rax
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x348], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x350], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x358], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x360], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x368], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x370], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x378], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x380], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x388], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x390], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x398], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3a0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3a8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3b0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3b8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3c0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3c8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3d0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3d8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3e0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3e8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3f0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x3f8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x400], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x408], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x410], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x418], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x420], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x428], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x430], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x438], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x440], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x448], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x450], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x458], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x460], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x468], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x470], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x478], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x480], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x488], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x490], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x498], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x4a0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x4a8]
mov rcx, rsp
mov qword [rbp + 0x4b0], rcx
call fcn.14014d730
sub rsp, rax
mov eax, dword [rbp + 0x4bc]
mov rcx, rsp
mov qword [rbp + 0x4c0], rcx
cmp eax, 0x26018911
jbe 0x1400e00e6
mov ecx, dword [0x14018b344]
mov eax, dword [0x14018b348]
add ecx, 0xf113aad8
sub ecx, eax
sub ecx, 0xf113aad8
mov eax, ecx
and eax, 0x33850b4d
shl eax, 1
add ecx, 0x33850b4d
sub ecx, eax
mov eax, ecx
and eax, 0x9159fedf
xor ecx, 0xffffffff
and ecx, 0x6ea60120
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
and eax, 0xa751aa65
cmp eax, 0x37e1afd5
ja 0x1400e2eaf
mov edx, dword [0x14018b34c]
mov eax, dword [0x14018b350]
add edx, eax
mov eax, edx
not eax
and eax, 0x2d9a0e4c
and edx, 0xd265f1b3
sub edx, eax
or edx, 0x1f408c8c
mov eax, edx
and eax, 0x2c7fb24b
xor edx, 0xac7fb24b
mov ecx, eax
mov eax, edx
lea eax, [rax + rcx*2]
mov dword [rbp + 0x33c], eax
mov eax, 0x10
mov qword [rbp + 0x328], rax
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x268], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x270], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x278], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x280], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x288], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x290], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x298], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2a0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2a8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2b0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2b8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2c0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2c8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2d0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2d8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2e0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2e8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2f0], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x2f8], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x300], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x308], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x310], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x318], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x320], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x328]
mov rcx, rsp
mov qword [rbp + 0x330], rcx
call fcn.14014d730
sub rsp, rax
mov eax, dword [rbp + 0x33c]
mov rcx, rsp
mov qword [rbp + 0x340], rcx
cmp eax, 0x7ce3d4a9
ja 0x1400e2eaf
mov eax, dword [0x14018b354]
xor eax, dword [0x14018b358]
mov ecx, 0xdab0fc41
xor edx, edx
div ecx
add eax, 0xf3ba5377
imul eax, eax, 0xea9b2af8
cmp eax, 0xb9f7de46
jb 0x1400e2eb4
mov eax, dword [0x14018b35c]
mov ecx, dword [0x14018b360]
imul eax, ecx
imul eax, eax, 0xfa48d97d
mov ecx, eax
xor ecx, 0xb5d90fc3
and eax, 0x4a26f03c
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x7d20580a
or eax, 0x82dfa7f5
and eax, ecx
mov dword [rbp + 0x260], eax
mov eax, 0x10
mov qword [rbp + 0x220], rax
call fcn.14014d730
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x250], rax
mov eax, 0x110
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x220]
mov rcx, rsp
mov qword [rbp + 0x218], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x220]
mov rcx, rsp
mov qword [rbp + 0x228], rcx
call fcn.14014d730
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x230], rax
mov eax, 0x20
mov qword [rbp + 0x240], rax
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x240]
mov rcx, rsp
mov qword [rbp + 0x238], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x240]
mov rcx, rsp
mov qword [rbp + 0x248], rcx
call fcn.14014d730
sub rsp, rax
mov rax, qword [rbp + 0x250]
mov rcx, rsp
mov qword [rbp + 0x258], rcx
mov dword [rax], 0
sub rsp, 0x20
call fcn.1400d4c90
call fcn.1401400f0
add rsp, 0x20
mov cl, al
mov eax, dword [rbp + 0x260]
mov byte [rbp + 0x267], cl
cmp eax, 0x6609f8be
jbe 0x1400e2eb4
mov al, byte [rbp + 0x267]
test al, 1
jne 0x1400e108b
jmp 0x1400e0a4e
mov eax, dword [0x14018b36c]
xor edx, edx
div dword [0x14018b370]
mov rdx, qword [rbp + 0x218]
add eax, 0x31a9c73d
mov r8d, eax
xor r8d, 0xffffffff
and r8d, 0x7671d16b
mov ecx, eax
and ecx, 0x898e2e94
imul ecx, r8d
mov r8d, eax
and r8d, 0x7671d16b
or eax, 0x7671d16b
imul eax, r8d
add eax, ecx
xor eax, 0xfbfa14da
mov dword [rbp + 0x214], eax
xor eax, eax
mov ecx, eax
mov r8d, 0x104
sub rsp, 0x20
call qword [0x14019d4c8]
mov r11, qword [rbp + 0x228]
mov r8, qword [rbp + 0x340]
mov r10, qword [rbp + 0x320]
mov rcx, qword [rbp + 0x2a0]
mov rdx, qword [rbp + 0x298]
mov r9, qword [rbp + 0x330]
add rsp, 0x20
mov rax, qword [rbp + 0x290]
mov rsi, qword [0x14019d570]
mov qword [rbp + 0x1e0], rsi
lea rsi, str.runas
mov qword [r9], rsi
mov qword [r8], r11
mov r8, qword [r8]
mov qword [rbp + 0x208], r8
mov qword [r10], r8
mov dword [r8], 3
mov r10, r8
add r10, 4
mov qword [rbp + 0x1f0], r10
mov r9, qword [r9]
mov r9b, byte [r9]
mov qword [rax], 0
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x1ec], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e8e90
mov r11d, dword [rbp + 0x1ec]
mov r10, qword [rbp + 0x1f0]
mov r9, qword [rbp + 0x330]
mov rcx, qword [rbp + 0x2b8]
mov rdx, qword [rbp + 0x2b0]
mov r8, qword [rbp + 0x208]
add rsp, 0x20
mov bl, al
mov rax, qword [rbp + 0x2a8]
movsx esi, bl
xor r11d, esi
mov byte [r8 + 4], r11b
add r10, 1
mov qword [rbp + 0x1f8], r10
mov r9, qword [r9]
mov r9b, byte [r9 + 1]
mov qword [rax], 1
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x204], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eac0
mov edx, dword [rbp + 0x204]
mov rcx, qword [rbp + 0x208]
add rsp, 0x20
mov r8b, al
mov eax, dword [rbp + 0x214]
movsx r8d, r8b
xor edx, r8d
mov byte [rcx + 5], dl
cmp eax, 0x79334bdb
je 0x1400e0a4e
mov ecx, dword [0x14018b374]
sub ecx, dword [0x14018b378]
mov edx, ecx
and edx, 0x2160f203
mov eax, ecx
or eax, 0x2160f203
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0xde9f0dfc
or ecx, 0xde9f0dfc
imul ecx, edx
add ecx, eax
xor ecx, 0x2e93747
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xae0199d3
and ecx, 0x51fe662c
or eax, ecx
cmp eax, 0xbbcbb3c1
jae 0x1400e2ee1
mov rcx, qword [rbp + 0x2c0]
mov rdx, qword [rbp + 0x330]
mov r8, qword [rbp + 0x1f8]
mov eax, dword [0x14018b37c]
mov r10d, dword [0x14018b380]
mov r9d, r10d
and r9d, eax
xor r9d, 0xffffffff
add eax, r10d
add eax, 1
add eax, r9d
imul eax, eax, 0xad7b8bbe
or eax, 0xc7a4c609
sub eax, 0x8f7f8daa
sub eax, 0x95cc24d2
add eax, 0x8f7f8daa
add r8, 1
mov qword [rbp + 0x1d0], r8
mov rdx, qword [rdx]
mov dl, byte [rdx + 2]
mov byte [rbp + 0x1df], dl
mov qword [rcx], 2
cmp eax, 0x37450c8e
jbe 0x1400e2ee1
mov eax, dword [0x14018b384]
xor edx, edx
div dword [0x14018b388]
mov ecx, eax
and ecx, 0x6a95fbe1
mov eax, ecx
xor eax, 0xffffffff
or eax, 0x9e689b82
xor eax, 0xffffffff
or ecx, 0x6197647d
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
xor eax, 0xc5174dfc
cmp eax, 0x997d11f8
jb 0x1400e2ef4
mov r8, qword [rbp + 0x208]
mov rax, qword [rbp + 0x2c0]
mov rdx, qword [rbp + 0x2c8]
mov rcx, qword [rbp + 0x2d0]
mov r9b, byte [rbp + 0x1df]
mov r10d, dword [0x14018b38c]
mov edi, dword [0x14018b390]
mov ebx, edi
xor ebx, 0xffffffff
mov esi, r10d
and esi, ebx
mov r11d, r10d
or r11d, ebx
xor r11d, 0xffffffff
imul r11d, esi
mov esi, r10d
and esi, edi
or r10d, edi
imul r10d, esi
add r10d, r11d
mov r11d, r10d
xor r11d, 0x4b8a0827
and r10d, 0xb475f7d8
shl r10d, 1
sub r10d, r11d
imul r11d, r10d, 0x8d52be21
mov r10d, r11d
xor r10d, 0xffffffff
and r10d, 0xb71a9175
and r11d, 0x48e56e8a
or r10d, r11d
xor r10d, 0xa6b1c9a1
mov dword [rbp + 0x1bc], r10d
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x19c], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eac0
mov r11d, dword [rbp + 0x19c]
mov rcx, qword [rbp + 0x2e8]
mov rdx, qword [rbp + 0x2e0]
mov r9, qword [rbp + 0x330]
mov r8, qword [rbp + 0x208]
mov r10, qword [rbp + 0x1d0]
add rsp, 0x20
mov bl, al
mov rax, qword [rbp + 0x2d8]
movsx esi, bl
xor r11d, esi
mov byte [r10], r11b
add r10, 1
mov qword [rbp + 0x1a0], r10
mov r9, qword [r9]
mov r9b, byte [r9 + 3]
mov qword [rax], 3
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx r14d, byte [rdx]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e8e90
mov r10, qword [rbp + 0x1a0]
mov r9, qword [rbp + 0x330]
mov r8, qword [rbp + 0x208]
mov rcx, qword [rbp + 0x300]
mov rdx, qword [rbp + 0x2f8]
mov r11, qword [rbp + 0x1d0]
add rsp, 0x20
mov bl, al
mov rax, qword [rbp + 0x2f0]
movsx ebx, bl
mov esi, r14d
xor esi, 0xffffffff
and esi, 0xaf53cc33
and r14d, 0x50ac33cc
mov edi, ebx
xor edi, 0xffffffff
and edi, 0xaf53cc33
and ebx, 0x50ac33cc
or esi, r14d
or edi, ebx
xor esi, edi
mov bl, sil
mov byte [r11 + 1], bl
add r10, 1
mov qword [rbp + 0x1b0], r10
mov r9, qword [r9]
mov r9b, byte [r9 + 4]
mov qword [rax], 4
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x1ac], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e8e90
mov r9d, dword [rbp + 0x1ac]
mov r8, qword [rbp + 0x1d0]
mov rdx, qword [rbp + 0x1b0]
mov rcx, qword [rbp + 0x1f0]
add rsp, 0x20
mov r10b, al
mov eax, dword [rbp + 0x1bc]
movsx r10d, r10b
xor r9d, r10d
mov byte [r8 + 2], r9b
add rdx, 1
mov qword [rbp + 0x1c0], rdx
add rcx, 6
mov qword [rbp + 0x1c8], rcx
cmp eax, 0x417cffcf
je 0x1400e2ef4
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x190], rax
jmp 0x1400e0f40
mov rax, qword [rbp + 0x190]
mov rcx, qword [rbp + 0x1c8]
mov byte [rax], 0
add rax, 1
cmp rax, rcx
mov qword [rbp + 0x190], rax
jne 0x1400e0f40
jmp 0x1400e0f6a
mov rcx, qword [rbp + 0x228]
sub rsp, 0x20
call fcn.1400e35e0
add rsp, 0x20
mov qword [rbp + 0x188], rax
mov eax, dword [0x14018b3a4]
mov edx, dword [0x14018b3a8]
mov ecx, eax
xor ecx, edx
xor ecx, 0xffffffff
or eax, edx
and eax, ecx
sub eax, 0x40a6c105
mov ecx, 0xc6e8163f
xor edx, edx
div ecx
sub eax, 0x2bb56f19
cmp eax, 0xf571df64
jae 0x1400e3031
mov rax, qword [rbp + 0x1e0]
mov r8, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x188]
mov ecx, dword [0x14018b3ac]
xor ecx, dword [0x14018b3b0]
mov r9d, ecx
add r9d, 1
xor ecx, 0xffffffff
or ecx, 0xc7bda277
add ecx, r9d
imul ecx, ecx, 0xdd021dde
add ecx, 0x58f9153d
sub ecx, 0xb60e52b6
sub ecx, 0x58f9153d
mov dword [rbp + 0x184], ecx
xor ecx, ecx
mov r9d, ecx
sub rsp, 0x30
mov rcx, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 1
call rax
add rsp, 0x30
mov eax, dword [rbp + 0x184]
cmp eax, 0xf74326a5
ja 0x1400e3031
mov ecx, dword [0x14018b3b4]
xor eax, eax
sub eax, dword [0x14018b3b8]
add ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x2fd88eb3
and ecx, 0xd027714c
or eax, ecx
xor eax, 0xf99284cb
xor ecx, ecx
sub ecx, eax
add ecx, 0x124029be
xor eax, eax
sub eax, ecx
cmp eax, 0x1bff3499
jae 0x1400e306e
xor ecx, ecx
sub rsp, 0x20
call fcn.14013eae0
mov ecx, dword [0x14018b3c4]
imul ecx, dword [0x14018b3c8]
add ecx, 0x4d275f27
add ecx, 0x2a5d4c6e
add ecx, 0xbd4dfdc
sub ecx, 0x2a5d4c6e
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
or eax, 0x9256dd0b
cmp eax, 0xf46a84f7
jbe 0x1400e3079
mov rax, qword [0x14019d510]
mov qword [rbp + 0x178], rax
mov ecx, dword [0x14018b3d4]
and ecx, dword [0x14018b3d8]
mov eax, ecx
xor eax, 0xffffffff
or eax, 0x809f25d5
and ecx, 0x7f60da2a
xor eax, 0xffffffff
or eax, ecx
add eax, 0x16ccf880
sub eax, 0xcc4d955c
cmp eax, 0x80f0e852
jbe 0x1400e307e
mov rax, qword [rbp + 0x178]
xor ecx, ecx
mov r8d, ecx
xor r9d, r9d
sub rsp, 0x20
mov rcx, r8
mov rdx, r8
call rax
add rsp, 0x20
mov rcx, qword [rbp + 0x238]
mov eax, dword [str._v_7_f]
mov r9d, dword [0x14018b3f0]
mov edx, eax
xor edx, 0xffffffff
mov r8d, r9d
and r8d, edx
mov r10d, r9d
xor r10d, 0xffffffff
mov edx, eax
and edx, r10d
imul edx, r8d
mov r8d, eax
and r8d, r9d
or eax, r9d
imul eax, r8d
add eax, edx
mov r8d, eax
xor r8d, 0xffffffff
and r8d, 0xc88f6660
mov edx, eax
and edx, 0x3770999f
imul edx, r8d
mov r8d, eax
and r8d, 0xc88f6660
or eax, 0xc88f6660
imul eax, r8d
add eax, edx
sub eax, 0x53195602
and eax, 0xccf30510
mov dword [rbp + 0x174], eax
lea rdx, str.explorer.exe
sub rsp, 0x20
call fcn.1400e4630
add rsp, 0x20
mov eax, dword [rbp + 0x174]
cmp eax, 0x7ee96816
jbe 0x1400e1130
mov rcx, qword [rbp + 0x238]
sub rsp, 0x20
call fcn.1401485f0
add rsp, 0x20
mov dword [rbp + 0x170], eax
jmp 0x1400e11f1
mov eax, dword [0x14018b3f4]
mov r8d, dword [0x14018b3f8]
mov r9d, r8d
xor r9d, 0xffffffff
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x1b0f0d90
mov ecx, eax
and ecx, 0xe4f0f26f
imul ecx, edx
mov edx, eax
and edx, 0x1b0f0d90
or eax, 0x1b0f0d90
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0xbc46b2d3
shl ecx, 1
add eax, 0xbc46b2d3
sub eax, ecx
xor eax, 0x8a47520f
cmp eax, 0x313b7b90
jbe 0x1400e30a2
mov rcx, qword [rbp + 0x238]
mov edx, dword [0x14018b3fc]
and edx, dword [0x14018b400]
mov eax, edx
xor eax, 0xffffffff
and eax, 0xb8526245
xor eax, 0xffffffff
xor edx, 0xffffffff
or edx, 0xb8526245
and eax, edx
xor eax, 0xffffffff
or eax, 0x5e8e2b98
add eax, 0x4c9f8237
sub eax, 0xf0796e70
sub eax, 0x4c9f8237
mov dword [rbp + 0x16c], eax
sub rsp, 0x20
call fcn.14013eb00
mov edx, dword [rbp + 0x170]
mov rcx, qword [rbp + 0x230]
mov eax, dword [rbp + 0x16c]
add rsp, 0x20
mov dword [rcx], edx
cmp eax, 0xb69b78f5
ja 0x1400e126b
mov eax, dword [0x14018b404]
mov edx, dword [0x14018b408]
mov ecx, eax
xor ecx, 0xffffffff
and ecx, edx
xor edx, 0xffffffff
and eax, edx
sub eax, ecx
and eax, 0x39ac3e9c
imul eax, eax, 0x6f792aef
add eax, 0xacfaa9be
sub eax, 0xa878656d
sub eax, 0xacfaa9be
cmp eax, 0xdfff4d75
jae 0x1400e30ca
mov rcx, qword [rbp + 0x248]
mov eax, dword [0x14018b40c]
sub eax, dword [0x14018b410]
mov r8d, 0xb92da7cc
xor edx, edx
div r8d
mov edx, eax
and edx, 0xcadfae21
xor edx, 0xffffffff
add eax, 0xcadfae21
add eax, 1
add eax, edx
mov edx, eax
and edx, 0x9f550ecb
shl edx, 1
xor eax, 0x9f550ecb
add eax, edx
mov dword [rbp + 0x168], eax
sub rsp, 0x20
call fcn.14013eb20
add rsp, 0x20
mov eax, dword [rbp + 0x168]
cmp eax, 0xc9b62119
je 0x1400e30ca
mov rdx, qword [rbp + 0x248]
mov rax, qword [rbp + 0x230]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14013eb40
add rsp, 0x20
mov byte [rbp + 0x167], al
jmp 0x1400e13af
mov eax, dword [0x14018b414]
xor edx, edx
div dword [0x14018b418]
imul eax, eax, 0xad684819
sub eax, 0xbfc08e40
mov edx, eax
and edx, 0x93c230e1
mov ecx, eax
or ecx, 0x93c230e1
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x6c3dcf1e
or eax, 0x6c3dcf1e
imul eax, edx
add eax, ecx
cmp eax, 0x8c09f818
je 0x1400e30e3
mov al, byte [rbp + 0x167]
test al, 1
jne 0x1400e140e
jmp 0x1400e2df1
mov eax, dword [0x14018b424]
add eax, dword [0x14018b428]
imul eax, eax, 0x33c0eafd
mov ecx, 0xc3c1426b
xor edx, edx
div ecx
sub eax, 0xc80e0350
cmp eax, 0x2e3bc519
jbe 0x1400e30e8
mov rax, qword [rbp + 0x318]
mov rcx, qword [rbp + 0x258]
mov rdx, qword [rbp + 0x310]
lea r8, str.User_running_as:
mov qword [rdx], r8
mov qword [rax], rcx
mov eax, dword [0x14018b434]
xor edx, edx
div dword [0x14018b438]
mov ecx, eax
or ecx, 0x1b39ce2a
xor ecx, 0x1e0bff59
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xbb60fb96
and ecx, 0x449f0469
or eax, ecx
cmp eax, 0x8e6fad77
jb 0x1400e310f
mov rcx, qword [rbp + 0x308]
mov rax, qword [rbp + 0x318]
mov rax, qword [rax]
mov qword [rbp + 0x158], rax
mov qword [rcx], rax
mov dword [rax], 0x1c
mov eax, dword [0x14018b444]
xor eax, dword [0x14018b448]
mov ecx, 0xe1dcd0c9
xor edx, edx
div ecx
xor eax, 0xfd9cd983
sub eax, 0x80396bde
cmp eax, 0xe0ce0243
jae 0x1400e312e
mov r9, qword [rbp + 0x310]
mov r8, qword [rbp + 0x158]
mov rax, qword [rbp + 0x348]
mov rdx, qword [rbp + 0x350]
mov rcx, qword [rbp + 0x358]
mov r10, r8
add r10, 4
mov qword [rbp + 0x140], r10
mov r9, qword [r9]
mov r9b, byte [r9]
mov qword [rax], 0
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x13c], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
mov r8d, dword [rbp + 0x13c]
mov rdx, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x140]
add rsp, 0x20
mov r9b, al
mov rax, qword [rbp + 0x310]
movsx r10d, r9b
mov r9d, r8d
and r9d, r10d
shl r9d, 1
add r8d, r10d
sub r8d, r9d
mov byte [rdx + 4], r8b
add rcx, 1
mov qword [rbp + 0x148], rcx
mov rax, qword [rax]
add rax, 1
mov qword [rbp + 0x150], rax
mov rax, qword [rbp + 0x368]
mov rdx, qword [rbp + 0x360]
mov rcx, qword [rbp + 0x150]
mov cl, byte [rcx]
mov qword [rdx], 1
mov byte [rax], cl
mov eax, dword [0x14018b464]
add eax, dword [0x14018b468]
add eax, 0x86df0363
mov ecx, eax
and ecx, 0x62e90f64
xor ecx, 0xffffffff
add eax, 0x62e90f64
add eax, 1
add eax, ecx
add eax, 0xf15c5fdb
add eax, 1
cmp eax, 0xa762f634
jbe 0x1400e317c
mov rax, qword [rbp + 0x360]
mov rdx, qword [rbp + 0x368]
mov rcx, qword [rbp + 0x370]
mov r8, qword [rbp + 0x158]
mov r10d, dword [0x14018b46c]
imul r10d, dword [0x14018b470]
add r10d, 0x9639a1
or r10d, 0x49dab1e1
mov r9d, r10d
xor r9d, 0xffffffff
and r9d, 0x7d063ddb
and r10d, 0x82f9c224
or r9d, r10d
xor r9d, 0xd645a4ad
mov dword [rbp + 0x134], r9d
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x130], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
mov ecx, dword [rbp + 0x130]
add rsp, 0x20
mov dl, al
mov eax, dword [rbp + 0x134]
movsx r8d, dl
mov r9d, ecx
xor r9d, r8d
xor r9d, 0xffffffff
mov edx, r8d
and edx, r9d
shl edx, 1
sub edx, r8d
sub ecx, edx
mov byte [rbp + 0x13b], cl
cmp eax, 0xe624f9d1
jae 0x1400e15e7
mov rcx, qword [rbp + 0x148]
mov dl, byte [rbp + 0x13b]
mov eax, dword [0x14018b47c]
mov r9d, dword [0x14018b480]
mov r8d, eax
xor r8d, 0xffffffff
and r8d, r9d
xor r9d, 0xffffffff
and eax, r9d
sub eax, r8d
sub eax, 0x43032bfb
mov r8d, eax
xor r8d, 0x127741e6
xor r8d, 0xffffffff
or eax, 0x127741e6
and eax, r8d
mov r9d, eax
and r9d, 0x84da38e0
mov r8d, eax
or r8d, 0x84da38e0
xor r8d, 0xffffffff
imul r8d, r9d
mov r9d, eax
and r9d, 0x7b25c71f
or eax, 0x7b25c71f
imul eax, r9d
add eax, r8d
mov byte [rcx], dl
cmp eax, 0xc7dcd8c
je 0x1400e169f
mov rax, qword [rbp + 0x378]
mov rdx, qword [rbp + 0x380]
mov rcx, qword [rbp + 0x388]
mov r8, qword [rbp + 0x158]
mov r9, qword [rbp + 0x310]
mov r10, qword [rbp + 0x148]
add r10, 1
mov qword [rbp + 0x120], r10
mov r9, qword [r9]
mov r9b, byte [r9 + 2]
mov qword [rax], 2
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x128], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
mov cl, al
mov eax, dword [rbp + 0x128]
movsx edx, cl
mov ecx, eax
and ecx, edx
shl ecx, 1
add eax, edx
sub eax, ecx
mov byte [rbp + 0x12f], al
mov eax, dword [0x14018b484]
mov ecx, dword [0x14018b488]
sub eax, 0x84c1d12e
add eax, ecx
add eax, 0x84c1d12e
and eax, 0xdbed2db
sub eax, 0xf310b729
mov edx, eax
xor edx, 0xffffffff
and edx, 0xaa2d831b
mov ecx, eax
and ecx, 0x55d27ce4
imul ecx, edx
mov edx, eax
and edx, 0xaa2d831b
or eax, 0xaa2d831b
imul eax, edx
add eax, ecx
cmp eax, 0x77fd50f3
je 0x1400e31ac
mov eax, dword [str.J__t]
or eax, dword [0x14018b490]
mov ecx, 0x6552c01a
xor edx, edx
div ecx
add eax, 0x55d9e184
mov ecx, eax
and ecx, 0xaf98c11c
mov edx, eax
xor edx, 0x50673ee3
add eax, edx
sub eax, ecx
cmp eax, 0xbb7633fd
jae 0x1400e31ac
mov eax, dword [0x14018b494]
mov ecx, dword [0x14018b498]
sub eax, 0x15386376
add eax, ecx
add eax, 0x15386376
add eax, 0x43b58963
add eax, 0x187c23c2
xor eax, 0x30b28d4e
cmp eax, 0xaddc0b0c
jae 0x1400e31b1
mov rax, qword [rbp + 0x398]
mov rdx, qword [rbp + 0x390]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp + 0x120]
mov r9b, byte [rbp + 0x12f]
mov byte [r8], r9b
add r8, 1
mov qword [rbp + 0x118], r8
mov rcx, qword [rcx]
mov cl, byte [rcx + 3]
mov qword [rdx], 3
mov byte [rax], cl
mov eax, dword [0x14018b4a4]
mov edx, dword [0x14018b4a8]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, 0xb5eb1bea
xor edx, edx
div ecx
add eax, 0x2ba9da30
xor eax, 0xddfc2f86
cmp eax, 0x991c66c4
jb 0x1400e31eb
mov rax, qword [rbp + 0x390]
mov rdx, qword [rbp + 0x398]
mov rcx, qword [rbp + 0x3a0]
mov r8, qword [rbp + 0x158]
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x110], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
movsx eax, al
mov dword [rbp + 0x114], eax
mov eax, dword [0x14018b4b4]
imul eax, dword [0x14018b4b8]
sub eax, 0xfcec6e0
xor eax, 0x4b776293
mov ecx, eax
and ecx, 0xaa7f64f4
shl ecx, 1
xor eax, 0xaa7f64f4
add eax, ecx
cmp eax, 0x84e22c1a
jae 0x1400e321b
mov edx, dword [rbp + 0x114]
mov ecx, dword [rbp + 0x110]
mov eax, dword [0x14018b4bc]
mov r8d, dword [0x14018b4c0]
xor eax, 0xffffffff
xor r8d, 0xffffffff
and eax, r8d
xor eax, 0xffffffff
xor eax, 0xb325e6fb
or eax, 0xb7b20645
imul eax, eax, 0xe6ae78d0
xor ecx, edx
mov byte [rbp + 0x10f], cl
cmp eax, 0x9e305dfb
ja 0x1400e1956
mov rax, qword [rbp + 0x118]
mov cl, byte [rbp + 0x10f]
mov byte [rax], cl
mov eax, dword [0x14018b4c4]
add eax, dword [0x14018b4c8]
mov ecx, 0x2a746c2
xor edx, edx
div ecx
xor eax, 0xa26de087
add eax, 0xddd0b311
cmp eax, 0xb69b071e
jae 0x1400e3220
mov rcx, qword [rbp + 0x3b0]
mov rdx, qword [rbp + 0x3b8]
mov r8, qword [rbp + 0x158]
mov r10, qword [rbp + 0x3a8]
mov r9, qword [rbp + 0x310]
mov r11, qword [rbp + 0x118]
mov eax, dword [0x14018b4cc]
mov ebx, dword [0x14018b4d0]
mov r14d, ebx
xor r14d, 0xffffffff
mov edi, eax
and edi, r14d
mov esi, eax
or esi, r14d
xor esi, 0xffffffff
imul esi, edi
mov edi, eax
and edi, ebx
or eax, ebx
imul eax, edi
add eax, esi
add eax, 0x46deaa51
imul eax, eax, 0xf500487
add eax, 0xba285541
add r11, 1
mov qword [rbp + 0xf8], r11
mov r9, qword [r9]
mov r9b, byte [r9 + 4]
mov qword [r10], 4
mov byte [rcx], r9b
mov qword [rdx], r8
mov rdx, qword [rdx]
mov qword [rbp + 0x100], rdx
movsx ecx, byte [rcx]
mov dword [rbp + 0x108], ecx
cmp eax, 0xe424dbe4
je 0x1400e3220
mov rcx, qword [rbp + 0x100]
mov rax, qword [rbp + 0x3a8]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
mov ecx, dword [rbp + 0x108]
add rsp, 0x20
movsx r8d, al
mov eax, ecx
xor eax, 0xffffffff
and eax, r8d
xor eax, 0xffffffff
mov edx, r8d
xor edx, 0xffffffff
xor r8d, 0xffffffff
or edx, r8d
xor ecx, 0xffffffff
xor edx, 0xffffffff
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov byte [rbp + 0xf7], al
mov r8d, dword [0x14018b4d4]
mov edx, dword [0x14018b4d8]
mov eax, r8d
xor eax, 0xffffffff
and eax, 0x9b1900ee
and r8d, 0x64e6ff11
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x9b1900ee
and edx, 0x64e6ff11
or eax, r8d
or ecx, edx
xor eax, ecx
xor eax, 0xffffffff
or eax, 0x47d3478c
xor eax, 0xffffffff
and eax, 0xaffeb50c
or eax, 0x46bb45e6
cmp eax, 0xd74ecdff
jae 0x1400e325c
mov rcx, qword [rbp + 0xf8]
mov r11d, dword [0x14018b4dc]
mov r10d, dword [0x14018b4e0]
mov edx, r11d
xor edx, 0xffffffff
mov r8d, r10d
xor r8d, 0xffffffff
mov eax, edx
and eax, 0xe62c9bae
and r11d, 0x19d36451
mov r9d, r8d
and r9d, 0xe62c9bae
and r10d, 0x19d36451
or eax, r11d
or r9d, r10d
xor eax, r9d
or edx, r8d
xor edx, 0xffffffff
or eax, edx
add eax, 0xf87356f6
sub eax, 0x6b6eeeb4
sub eax, 0xf87356f6
mov r8d, 0x16882e59
xor edx, edx
div r8d
mov dl, byte [rbp + 0xf7]
mov r8d, eax
and r8d, 0xdfa72e0f
xor r8d, 0xffffffff
add eax, 0xdfa72e0f
add eax, 1
add eax, r8d
mov byte [rcx], dl
cmp eax, 0x640f2935
jbe 0x1400e1b27
jmp 0x1400e1bc4
mov rax, qword [rbp + 0x310]
mov rcx, qword [rbp + 0xf8]
add rcx, 1
mov qword [rbp + 0xe8], rcx
mov rax, qword [rax]
mov al, byte [rax + 5]
mov byte [rbp + 0xf6], al
mov r8, qword [rbp + 0x158]
mov rax, qword [rbp + 0x3c0]
mov rdx, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x3d0]
mov r9b, byte [rbp + 0xf6]
mov qword [rax], 5
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx ebx, byte [rdx]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eb60
mov rcx, qword [rbp + 0x3e8]
mov rdx, qword [rbp + 0x3e0]
mov r10, qword [rbp + 0xe8]
mov r9, qword [rbp + 0x310]
mov r8, qword [rbp + 0x158]
add rsp, 0x20
mov r11b, al
mov rax, qword [rbp + 0x3d8]
movsx edi, r11b
mov r11d, ebx
xor r11d, 0xffffffff
and r11d, 0xaf09fa76
and ebx, 0x50f60589
mov esi, edi
xor esi, 0xffffffff
and esi, 0xaf09fa76
and edi, 0x50f60589
or r11d, ebx
or esi, edi
xor r11d, esi
mov byte [r10], r11b
add r10, 1
mov qword [rbp + 0xd0], r10
mov r9, qword [r9]
mov r9b, byte [r9 + 6]
mov qword [rax], 6
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx esi, byte [rdx]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eb60
mov r11, qword [rbp + 0xe8]
mov r10, qword [rbp + 0xd0]
mov r9, qword [rbp + 0x310]
mov r8, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x400]
mov rdx, qword [rbp + 0x3f8]
add rsp, 0x20
mov bl, al
mov rax, qword [rbp + 0x3f0]
movsx edi, bl
xor esi, edi
mov bl, sil
mov byte [r11 + 1], bl
add r10, 1
mov qword [rbp + 0xd8], r10
mov r9, qword [r9]
mov r9b, byte [r9 + 7]
mov qword [rax], 7
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0xe0], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
mov byte [rbp + 0xe7], al
mov edx, dword [rbp + 0xe0]
mov cl, byte [rbp + 0xe7]
mov eax, dword [0x14018b50c]
and eax, dword [0x14018b510]
xor eax, 0xffffffff
or eax, 0xaa1a09f3
xor eax, 0xffffffff
add eax, 0xaea91161
mov r9d, eax
and r9d, 0x674227bc
mov r8d, eax
or r8d, 0x674227bc
xor r8d, 0xffffffff
imul r8d, r9d
mov r9d, eax
and r9d, 0x98bdd843
or eax, 0x98bdd843
imul eax, r9d
add eax, r8d
movsx r8d, cl
mov r9d, edx
xor r9d, 0xffffffff
mov ecx, r8d
and ecx, r9d
xor r8d, 0xffffffff
and edx, r8d
or ecx, edx
mov dword [rbp + 0xcc], ecx
cmp eax, 0x495089d
jb 0x1400e3270
mov eax, dword [0x14018b514]
xor edx, edx
div dword [0x14018b518]
and eax, 0xc67ac58c
add eax, 0x640e5ae9
add eax, 0xcb880172
cmp eax, 0x8fe4f8d
jbe 0x1400e3275
mov rax, qword [rbp + 0x410]
mov rcx, qword [rbp + 0x418]
mov rdx, qword [rbp + 0x158]
mov r9, qword [rbp + 0x408]
mov r8, qword [rbp + 0x310]
mov r10, qword [rbp + 0xd8]
mov r11d, dword [rbp + 0xcc]
mov byte [r10], r11b
add r10, 1
mov qword [rbp + 0xb8], r10
mov r8, qword [r8]
mov r8b, byte [r8 + 8]
mov qword [r9], 8
mov byte [rax], r8b
mov qword [rcx], rdx
mov rcx, qword [rcx]
mov qword [rbp + 0xc0], rcx
movsx eax, byte [rax]
mov dword [rbp + 0xc8], eax
mov eax, dword [0x14018b524]
and eax, dword [0x14018b528]
imul eax, eax, 0x47ac6593
and eax, 0x94c70153
sub eax, 0x28f8848a
cmp eax, 0xc23464e1
jbe 0x1400e327a
mov rax, qword [rbp + 0x408]
mov rax, qword [rax]
mov qword [rbp + 0xb0], rax
mov eax, dword [0x14018b534]
mov edx, dword [0x14018b538]
mov ecx, eax
xor ecx, 0xffffffff
and ecx, edx
xor edx, 0xffffffff
and eax, edx
sub eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
or ecx, 0xdefaa34c
xor eax, 0xffffffff
or eax, 0xdefaa34c
xor ecx, 0xffffffff
xor eax, 0xffffffff
or ecx, eax
mov eax, ecx
and eax, 0x271affc6
or ecx, 0x271affc6
xor eax, 0xffffffff
and eax, ecx
add eax, 0xf9b64a0
sub eax, 0xa77197c5
sub eax, 0xf9b64a0
cmp eax, 0xc3c3152
je 0x1400e327f
mov rdx, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xc0]
mov r8d, dword [0x14018b53c]
mov r9d, dword [0x14018b540]
mov eax, r8d
or eax, r9d
xor eax, 0xffffffff
or r8d, r9d
xor r8d, 0xffffffff
or eax, r8d
xor eax, 0xffffffff
mov r8d, eax
xor r8d, 0xa5f52d06
xor r8d, 0xffffffff
and r8d, 0xa5f52d06
shl r8d, 1
sub r8d, 0xa5f52d06
sub eax, r8d
mov r8d, eax
add r8d, 1
xor eax, 0xffffffff
or eax, 0x823dd41c
add eax, r8d
add eax, 0x99c404c9
mov dword [rbp + 0xa8], eax
sub rsp, 0x20
call fcn.1400e91d0
mov ecx, dword [rbp + 0xc8]
add rsp, 0x20
mov dl, al
mov eax, dword [rbp + 0xa8]
movsx r8d, dl
mov edx, ecx
and edx, r8d
shl edx, 1
add ecx, r8d
sub ecx, edx
mov byte [rbp + 0xaf], cl
cmp eax, 0x1250ba9e
jbe 0x1400e1ef1
mov rax, qword [rbp + 0x420]
mov rcx, qword [rbp + 0x310]
mov rdx, qword [rbp + 0xb8]
mov r8b, byte [rbp + 0xaf]
mov byte [rdx], r8b
add rdx, 1
mov qword [rbp + 0x98], rdx
mov rcx, qword [rcx]
mov cl, byte [rcx + 9]
mov byte [rbp + 0xa7], cl
mov qword [rax], 9
mov rcx, qword [rbp + 0x428]
mov rdx, qword [rbp + 0x430]
mov r8, qword [rbp + 0x158]
mov r9b, byte [rbp + 0xa7]
mov eax, dword [0x14018b54c]
sub eax, dword [0x14018b550]
mov r10d, eax
and r10d, 0xe28084d2
shl r10d, 1
xor eax, 0xe28084d2
add eax, r10d
or eax, 0x2235c546
sub eax, 0x7eefdc0
mov byte [rcx], r9b
mov qword [rdx], r8
mov rdx, qword [rdx]
mov qword [rbp + 0x88], rdx
movsx ecx, byte [rcx]
mov dword [rbp + 0x94], ecx
cmp eax, 0xd24234de
ja 0x1400e329f
jmp 0x1400e204b
mov rcx, qword [rbp + 0x88]
mov rax, qword [rbp + 0x420]
mov edx, dword [0x14018b55c]
or edx, dword [0x14018b560]
imul r8d, edx, 0x7503e1df
mov edx, r8d
and edx, 0xf3cb8e19
xor r8d, 0xffffffff
or r8d, 0xc3471e6
xor r8d, 0xffffffff
or edx, r8d
mov r9d, edx
and r9d, 0x6fb01b99
mov r8d, edx
or r8d, 0x6fb01b99
xor r8d, 0xffffffff
imul r8d, r9d
mov r9d, edx
and r9d, 0x904fe466
or edx, 0x904fe466
imul edx, r9d
add edx, r8d
mov dword [rbp + 0x80], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
mov edx, dword [rbp + 0x94]
add rsp, 0x20
mov cl, al
mov eax, dword [rbp + 0x80]
movsx r8d, cl
mov r9d, edx
xor r9d, 0xffffffff
mov ecx, r8d
and ecx, r9d
xor r8d, 0xffffffff
and edx, r8d
or ecx, edx
mov byte [rbp + 0x87], cl
cmp eax, 0x576f522e
jae 0x1400e204b
mov eax, dword [0x14018b564]
mov edx, dword [0x14018b568]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, 0x7ae04e31
xor edx, edx
div ecx
mov ecx, eax
and ecx, 0xf0468f36
xor ecx, 0xffffffff
add eax, 0xf0468f36
add eax, 1
add eax, ecx
imul eax, eax, 0x3bd655aa
cmp eax, 0xcf4790ca
je 0x1400e32c6
mov rax, qword [rbp + 0x440]
mov rdx, qword [rbp + 0x438]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp + 0x98]
mov r9b, byte [rbp + 0x87]
mov byte [r8], r9b
add r8, 1
mov qword [rbp + 0x78], r8
mov rcx, qword [rcx]
mov cl, byte [rcx + 0xa]
mov qword [rdx], 0xa
mov byte [rax], cl
mov rax, qword [rbp + 0x448]
mov rcx, qword [rbp + 0x158]
mov qword [rax], rcx
mov rax, qword [rax]
mov qword [rbp + 0x70], rax
mov eax, dword [0x14018b584]
xor edx, edx
div dword [0x14018b588]
imul ecx, eax, 0x374e038d
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x58b35c6f
and ecx, 0xa74ca390
or eax, ecx
xor eax, 0xffffffff
and eax, 0x611d085a
xor eax, 0xffffffff
cmp eax, 0x7aafe2ac
jbe 0x1400e3300
mov rcx, qword [rbp + 0x70]
mov rax, qword [rbp + 0x438]
mov rdx, qword [rbp + 0x440]
mov r8d, dword [0x14018b58c]
mov r11d, dword [0x14018b590]
mov esi, r11d
xor esi, 0xffffffff
mov r10d, r8d
and r10d, esi
mov r9d, r8d
or r9d, esi
xor r9d, 0xffffffff
imul r9d, r10d
mov r10d, r8d
and r10d, r11d
or r8d, r11d
imul r8d, r10d
add r8d, r9d
or r8d, 0x9bebe001
mov r10d, r8d
xor r10d, 0xffffffff
and r10d, 0x9d1a4ecb
or r8d, 0x62e5b134
xor r8d, 0xffffffff
or r10d, r8d
mov r8d, r10d
xor r8d, 0xffffffff
and r10d, 0xcbe276b5
mov r9d, r8d
and r9d, 0x341d894a
imul r9d, r10d
mov r10d, r8d
and r10d, 0xcbe276b5
or r8d, 0xcbe276b5
imul r8d, r10d
add r8d, r9d
mov dword [rbp + 0x68], r8d
movsx edx, byte [rdx]
mov dword [rbp + 0x64], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eb60
mov ecx, dword [rbp + 0x64]
add rsp, 0x20
mov dl, al
mov eax, dword [rbp + 0x68]
movsx edx, dl
xor ecx, edx
mov byte [rbp + 0x6f], cl
cmp eax, 0xad6fb3fb
je 0x1400e3300
mov eax, dword [0x14018b594]
add eax, dword [0x14018b598]
sub eax, 0xfb7ae02a
or eax, 0xe9b91810
add eax, 0xe666077
cmp eax, 0x534731ff
ja 0x1400e3320
mov rcx, qword [rbp + 0x450]
mov rdx, qword [rbp + 0x310]
mov r8, qword [rbp + 0x78]
mov r9b, byte [rbp + 0x6f]
mov r10d, dword [0x14018b59c]
mov esi, dword [0x14018b5a0]
mov edi, esi
xor edi, 0xffffffff
mov r11d, r10d
and r11d, edi
mov eax, r10d
or eax, edi
xor eax, 0xffffffff
imul eax, r11d
mov r11d, r10d
and r11d, esi
or r10d, esi
imul r10d, r11d
add r10d, eax
mov eax, r10d
and eax, 0x538b1988
xor r10d, 0x538b1988
or eax, r10d
xor eax, 0xd59f38a5
imul eax, eax, 0x20e11906
mov byte [r8], r9b
add r8, 1
mov qword [rbp + 0x58], r8
mov rdx, qword [rdx]
mov dl, byte [rdx + 0xb]
mov byte [rbp + 0x63], dl
mov qword [rcx], 0xb
cmp eax, 0x3e94b7d2
jae 0x1400e22df
mov rax, qword [rbp + 0x450]
mov rdx, qword [rbp + 0x458]
mov rcx, qword [rbp + 0x460]
mov r8, qword [rbp + 0x158]
mov r9b, byte [rbp + 0x63]
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x50], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
mov cl, al
mov eax, dword [rbp + 0x50]
movsx edx, cl
mov r8d, eax
xor r8d, edx
xor r8d, 0xffffffff
mov ecx, edx
and ecx, r8d
shl ecx, 1
sub ecx, edx
sub eax, ecx
mov byte [rbp + 0x57], al
mov eax, dword [0x14018b5a4]
xor edx, edx
div dword [0x14018b5a8]
mov ecx, 0x718bc994
xor edx, edx
div ecx
or eax, 0x350e8d40
mov ecx, eax
and ecx, 0xe121a41f
xor ecx, 0xffffffff
add eax, 0xe121a41f
add eax, 1
add eax, ecx
cmp eax, 0x492c8e0c
jbe 0x1400e333c
mov edx, dword [0x14018b5ac]
or edx, dword [0x14018b5b0]
mov ecx, edx
xor ecx, 0xffffffff
mov eax, ecx
and eax, 0x46575e5
and edx, 0xfb9a8a1a
or eax, edx
xor eax, 0x113e9442
or ecx, 0xeaa41e58
xor ecx, 0xffffffff
or eax, ecx
add eax, 0x38fe5f23
mov edx, eax
xor edx, 0xffffffff
and edx, 0x53ace19
mov ecx, eax
and ecx, 0xfac531e6
imul ecx, edx
mov edx, eax
and edx, 0x53ace19
or eax, 0x53ace19
imul eax, edx
add eax, ecx
cmp eax, 0xac2c7c04
ja 0x1400e2407
mov eax, dword [0x14018b5b4]
xor edx, edx
div dword [0x14018b5b8]
or eax, 0x630ac728
add eax, 0x272869ab
add eax, 0xee56eacc
cmp eax, 0x227cdda9
je 0x1400e3341
mov rcx, qword [rbp + 0x478]
mov rdx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x470]
mov r10, qword [rbp + 0x468]
mov r9, qword [rbp + 0x310]
mov r11, qword [rbp + 0x58]
mov bl, byte [rbp + 0x57]
mov eax, dword [0x14018b5bc]
or eax, dword [0x14018b5c0]
sub eax, 0xadcb6f39
imul eax, eax, 0x810858a6
and eax, 0xc0c27bdf
mov byte [r11], bl
add r11, 1
mov qword [rbp + 0x40], r11
mov r9, qword [r9]
mov r9b, byte [r9 + 0xc]
mov qword [r10], 0xc
mov byte [r8], r9b
mov qword [rcx], rdx
mov rcx, qword [rcx]
mov qword [rbp + 0x48], rcx
cmp eax, 0x206deeb7
jb 0x1400e3341
mov eax, dword [0x14018b5c4]
mov r8d, dword [0x14018b5c8]
mov r9d, r8d
xor r9d, 0xffffffff
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
add eax, 0x21cc3cc0
xor ecx, ecx
sub ecx, eax
add ecx, 0xc745d88d
xor eax, eax
sub eax, ecx
add eax, 0x82947e19
cmp eax, 0x175976fa
jb 0x1400e3388
mov rcx, qword [rbp + 0x48]
mov rax, qword [rbp + 0x468]
mov rdx, qword [rbp + 0x470]
movsx edx, byte [rdx]
mov dword [rbp + 0x38], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
movsx eax, al
mov dword [rbp + 0x3c], eax
mov eax, dword [0x14018b5d4]
sub eax, dword [0x14018b5d8]
or eax, 0xa88fa6ac
add eax, 0xb6645ccf
sub eax, 0xd2a18f09
cmp eax, 0x62a7cf14
jbe 0x1400e33a8
mov r8d, dword [rbp + 0x3c]
mov eax, dword [0x14018b5dc]
mov r9d, dword [0x14018b5e0]
mov r10d, r9d
xor r10d, 0xffffffff
mov edx, eax
and edx, r10d
mov ecx, eax
or ecx, r10d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r9d
or eax, r9d
imul eax, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
add ecx, 0xc1d38a2d
xor eax, eax
sub eax, ecx
mov ecx, 0xe53e551c
xor edx, edx
div ecx
mov edx, dword [rbp + 0x38]
xor eax, 0xcd0c5594
mov ecx, edx
xor ecx, 0xffffffff
mov r9d, edx
xor r9d, 0xffffffff
or ecx, r9d
and ecx, r8d
xor edx, 0xffffffff
or edx, r8d
xor edx, 0xffffffff
or ecx, edx
mov byte [rbp + 0x37], cl
cmp eax, 0xb7fcf8ad
jbe 0x1400e33a8
mov rax, qword [rbp + 0x488]
mov rdx, qword [rbp + 0x480]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp + 0x40]
mov r9b, byte [rbp + 0x37]
mov byte [r8], r9b
add r8, 1
mov qword [rbp + 0x28], r8
mov rcx, qword [rcx]
mov cl, byte [rcx + 0xd]
mov qword [rdx], 0xd
mov byte [rax], cl
mov rax, qword [rbp + 0x480]
mov rdx, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x490]
mov r8, qword [rbp + 0x158]
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 0x20], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
mov cl, al
mov eax, dword [rbp + 0x20]
movsx ecx, cl
xor eax, ecx
mov dword [rbp + 0x24], eax
mov ecx, dword [0x14018b5f4]
imul ecx, dword [0x14018b5f8]
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xcea979ad
and ecx, 0x31568652
or eax, ecx
and eax, 0xbd1f8ddd
add eax, 0x5cd2aa6
add eax, 0xc7e20237
sub eax, 0x5cd2aa6
cmp eax, 0xac5663ad
jae 0x1400e33ad
mov ecx, dword [rbp + 0x24]
mov eax, dword [0x14018b5fc]
or eax, dword [0x14018b600]
mov edx, eax
add edx, 1
xor eax, 0xffffffff
or eax, 0xd3ed7392
add eax, edx
xor eax, 0x671361ad
mov edx, eax
xor edx, 0xffffffff
and edx, 0xa4b22c94
and eax, 0x5b4dd36b
sub eax, edx
mov byte [rbp + 0x1f], cl
cmp eax, 0x6def5956
ja 0x1400e26ef
mov edx, dword [0x14018b604]
and edx, dword [0x14018b608]
mov ecx, edx
xor ecx, 0xffffffff
mov eax, ecx
and eax, 0x59263b88
and edx, 0xa6d9c477
or eax, edx
xor eax, 0x7d24aff5
or ecx, 0xdbfd6b82
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0x5caab8ba
xor eax, 0xdaa6614b
cmp eax, 0x6569ad15
je 0x1400e33b2
mov rax, qword [rbp + 0x498]
mov rcx, qword [rbp + 0x310]
mov rdx, qword [rbp + 0x28]
mov r8b, byte [rbp + 0x1f]
mov byte [rdx], r8b
add rdx, 1
mov qword [rbp + 0x10], rdx
mov rcx, qword [rcx]
mov cl, byte [rcx + 0xe]
mov byte [rbp + 0x1e], cl
mov qword [rax], 0xe
mov eax, dword [0x14018b614]
and eax, dword [0x14018b618]
sub eax, 0x45d233f7
sub eax, 0x549280e0
add eax, 0x45d233f7
xor ecx, ecx
sub ecx, eax
add ecx, 0xafec6c06
xor eax, eax
sub eax, ecx
sub eax, 0x61e9fdc
cmp eax, 0xd3f33bae
jbe 0x1400e33ce
mov rax, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x4a0]
mov rcx, qword [rbp + 0x4b0]
mov r8, qword [rbp + 0x158]
mov r9b, byte [rbp + 0x1e]
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp + 8], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
mov ecx, dword [rbp + 8]
add rsp, 0x20
movsx edx, al
mov r8d, ecx
xor r8d, 0xffffffff
mov eax, edx
and eax, r8d
xor edx, 0xffffffff
and ecx, edx
or eax, ecx
mov byte [rbp + 0xf], al
mov rax, qword [rbp + 0x10]
mov cl, byte [rbp + 0xf]
mov byte [rax], cl
add rax, 1
mov qword [rbp], rax
mov rax, qword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x270]
mov r8, qword [rbp + 0x158]
mov r9, qword [rbp + 0x310]
mov r9, qword [r9]
mov r9b, byte [r9 + 0xf]
mov qword [rax], 0xf
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp - 8], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
mov cl, al
mov eax, dword [rbp - 8]
movsx ecx, cl
xor eax, ecx
mov byte [rbp - 1], al
mov eax, dword [0x14018b644]
xor edx, edx
div dword [0x14018b648]
mov ecx, 0x7e0e10fe
xor edx, edx
div ecx
mov edx, eax
and edx, 0xb2ae246a
mov ecx, eax
or ecx, 0xb2ae246a
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x4d51db95
or eax, 0x4d51db95
imul eax, edx
add eax, ecx
add eax, 0xcc991135
add eax, 1
cmp eax, 0xebc6e624
ja 0x1400e33df
mov rax, qword [rbp + 0x280]
mov rdx, qword [rbp + 0x278]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp]
mov r9b, byte [rbp - 1]
mov byte [r8], r9b
add r8, 1
mov qword [rbp - 0x10], r8
mov rcx, qword [rcx]
mov cl, byte [rcx + 0x10]
mov qword [rdx], 0x10
mov byte [rax], cl
mov eax, dword [0x14018b654]
xor edx, edx
div dword [0x14018b658]
sub eax, 0xd2ad982
mov ecx, eax
and ecx, 0x49442b2
shl ecx, 1
add eax, 0x49442b2
sub eax, ecx
xor eax, 0x4a5ed34e
cmp eax, 0xb3b2750c
jb 0x1400e3413
mov rax, qword [rbp + 0x280]
mov rcx, qword [rbp + 0x288]
mov rdx, qword [rbp + 0x158]
mov qword [rcx], rdx
mov rcx, qword [rcx]
mov qword [rbp - 0x20], rcx
mov al, byte [rax]
mov byte [rbp - 0x11], al
mov rcx, qword [rbp - 0x20]
mov eax, dword [0x14018b66c]
xor edx, edx
div dword [str._2_]
mov dl, byte [rbp - 0x11]
mov r8d, eax
mov rax, qword [rbp + 0x278]
imul r8d, r8d, 0x8e986b05
xor r8d, 0x64f396d3
add r8d, 0x99fcad85
sub r8d, 0xa2f7df6a
sub r8d, 0x99fcad85
mov dword [rbp - 0x28], r8d
movsx edx, dl
mov dword [rbp - 0x2c], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
mov ecx, dword [rbp - 0x2c]
add rsp, 0x20
mov dl, al
mov eax, dword [rbp - 0x28]
movsx edx, dl
xor ecx, edx
mov byte [rbp - 0x21], cl
cmp eax, 0xd5f6d3a2
jae 0x1400e298b
mov eax, dword [0x14018b674]
mov edx, dword [0x14018b678]
mov ecx, eax
and ecx, edx
shl ecx, 1
add eax, edx
sub eax, ecx
sub eax, 0x2b07e6c7
sub eax, 0xacc7f204
add eax, 0x2b07e6c7
sub eax, 0x4084a1c7
sub eax, 0x9e5f8d31
cmp eax, 0x9766a274
je 0x1400e3429
mov rcx, qword [rbp - 0x10]
mov eax, dword [0x14018b67c]
mov edx, dword [0x14018b680]
xor edx, 0xffffffff
sub edx, 0xffffffff
sub eax, edx
mov edx, eax
and edx, 0xaed19a76
shl edx, 1
add eax, 0xaed19a76
sub eax, edx
mov r8d, 0x2cb6d938
xor edx, edx
div r8d
mov dl, byte [rbp - 0x21]
sub eax, 0xc4b44d41
add eax, 0xb2f3db5d
add eax, 0xc4b44d41
mov byte [rcx], dl
cmp eax, 0x54db77e9
jb 0x1400e2a3c
mov eax, dword [0x14018b684]
xor edx, edx
div dword [0x14018b688]
xor eax, 0x7d859247
sub eax, 0xf7a75198
or eax, 0x1e38f3e4
cmp eax, 0x2267a1c3
jbe 0x1400e3437
mov rcx, qword [rbp - 0x10]
mov eax, dword [0x14018b68c]
add eax, dword [0x14018b690]
sub eax, 0xe6df6497
xor eax, 0xffffffff
or eax, 0xb7f99060
xor eax, 0xffffffff
add eax, 0xce32356b
add rcx, 1
mov qword [rbp - 0x38], rcx
cmp eax, 0x9787d99b
jb 0x1400e3437
mov rax, qword [rbp - 0x38]
mov rcx, qword [rbp + 0x140]
add rcx, 0x12
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp - 0x48]
mov rax, qword [rbp - 0x50]
mov byte [rax], 0
add rax, 1
cmp rax, rcx
mov qword [rbp - 0x40], rax
jne 0x1400e2b06
mov eax, dword [0x14018b6a4]
mov edx, dword [0x14018b6a8]
mov ecx, eax
xor ecx, edx
xor ecx, 0xffffffff
or eax, edx
and eax, ecx
add eax, 0x506972ea
xor eax, 0x63d6483d
sub eax, 0x49370784
cmp eax, 0x9af223bb
ja 0x1400e343c
mov eax, dword [0x14018b6ac]
mov ecx, dword [0x14018b6b0]
xor ecx, 0xffffffff
sub ecx, 0xffffffff
sub eax, ecx
sub eax, 0x581094a3
sub eax, 0xd83a9069
add eax, 0x237e5e09
cmp eax, 0x63b3644
jb 0x1400e343c
mov eax, dword [0x14018b6b4]
mov r8d, dword [0x14018b6b8]
mov ecx, eax
xor ecx, 0xffffffff
mov edx, r8d
and edx, ecx
mov r9d, r8d
xor r9d, 0xffffffff
mov ecx, eax
and ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0xfbc7bf66
mov edx, eax
xor edx, 0x4384099
add eax, edx
sub eax, ecx
mov edx, eax
and edx, 0x70a28b94
mov ecx, eax
or ecx, 0x70a28b94
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x8f5d746b
or eax, 0x8f5d746b
imul eax, edx
add eax, ecx
imul eax, eax, 0xbef6f9f6
cmp eax, 0x41fc4e46
jbe 0x1400e3441
mov r8d, dword [0x14018b6bc]
mov edx, dword [0x14018b6c0]
mov eax, r8d
xor eax, 0xffffffff
and eax, 0x32772400
and r8d, 0xcd88dbff
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x32772400
and edx, 0xcd88dbff
or eax, r8d
or ecx, edx
xor eax, ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x5c2903c3
add eax, ecx
mov ecx, eax
xor ecx, 0x3138a1c2
and ecx, eax
mov eax, ecx
and eax, 0x891f6e4d
xor ecx, 0xffffffff
or ecx, 0x76e091b2
xor ecx, 0xffffffff
or eax, ecx
cmp eax, 0xbf287bca
ja 0x1400e2c09
mov eax, dword [0x14018b6c4]
mov edx, dword [0x14018b6c8]
mov ecx, edx
and ecx, eax
xor ecx, 0xffffffff
add eax, edx
add eax, 1
add eax, ecx
imul eax, eax, 0x60aa4fe8
xor eax, 0x14f01d3
xor eax, 0x2f853e6a
cmp eax, 0x2e05cb5c
jbe 0x1400e3446
mov eax, dword [0x14018b6cc]
sub eax, dword [0x14018b6d0]
sub eax, 0x6ea8d947
sub eax, 0xd8be4c18
add eax, 0x6ea8d947
mov ecx, eax
xor ecx, 0x52f32fbc
and eax, 0xad0cd043
shl eax, 1
sub eax, ecx
xor eax, 0x97fdc139
cmp eax, 0x5fd9e17b
ja 0x1400e2cae
mov rcx, qword [rbp + 0x258]
sub rsp, 0x20
call fcn.1400e72e0
add rsp, 0x20
mov qword [rbp - 0x58], rax
jmp 0x1400e2d07
mov rdx, qword [rbp - 0x58]
sub rsp, 0x20
lea rcx, [0x14019d7e0]
call fcn.14013eb80
add rsp, 0x20
mov qword [rbp - 0x60], rax
jmp 0x1400e2d28
mov rdx, qword [rbp + 0x248]
mov rcx, qword [rbp - 0x60]
sub rsp, 0x20
call fcn.14013eba0
add rsp, 0x20
mov qword [rbp - 0x68], rax
jmp 0x1400e2d49
mov rcx, qword [rbp - 0x68]
sub rsp, 0x20
lea rdx, [0x1400e8600]
call fcn.1400e82a0
add rsp, 0x20
jmp 0x1400e2d66
mov eax, dword [0x14018b6d4]
mov ecx, dword [0x14018b6d8]
sub eax, 0xd8bab172
add eax, ecx
add eax, 0xd8bab172
add eax, 0xcf6cfd11
xor ecx, ecx
sub ecx, eax
add ecx, 0x34730ef7
xor eax, eax
sub eax, ecx
and eax, 0xb69664bc
cmp eax, 0xaafb05b
jbe 0x1400e344b
mov eax, dword [0x14018b6dc]
xor edx, edx
div dword [0x14018b6e0]
mov edx, eax
sub edx, 0xd2de5c36
sub edx, 0xb68521c0
mov ecx, edx
xor ecx, 0xffffffff
mov eax, ecx
and eax, 0x550eea50
and edx, 0xaaf115af
or eax, edx
xor eax, 0x80941d6
or ecx, 0xa2f85479
xor ecx, 0xffffffff
or eax, ecx
cmp eax, 0xc9715ece
je 0x1400e344b
jmp 0x1400e2df1
lea rcx, str.pause
sub rsp, 0x20
call fcn.14015a6bc
mov rcx, qword [rbp + 0x248]
add rsp, 0x20
mov rax, qword [rbp + 0x250]
mov dword [rax], 0
sub rsp, 0x20
call fcn.1400d78f0
add rsp, 0x20
mov rcx, qword [rbp + 0x250]
mov edx, dword [0x14018b70c]
mov r8d, dword [0x14018b710]
mov r9d, edx
xor r9d, 0xffffffff
mov eax, r8d
and eax, r9d
xor r8d, 0xffffffff
and edx, r8d
or eax, edx
and eax, 0x26a90d78
imul eax, eax, 0xd7a1a8c4
mov r8d, eax
and r8d, 0x64b2398f
mov edx, eax
or edx, 0x64b2398f
xor edx, 0xffffffff
imul edx, r8d
mov r8d, eax
and r8d, 0x9b4dc670
or eax, 0x9b4dc670
imul eax, r8d
add eax, edx
mov ecx, dword [rcx]
mov dword [rbp - 0x6c], ecx
cmp eax, 0x3ff8ee59
jb 0x1400e2e26
mov eax, dword [rbp - 0x6c]
lea rsp, [rbp + 0x4d0]
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
jmp 0x1400e00e6
jmp 0x1400e0607
mov eax, 0x10
call fcn.14014d730
sub rsp, rax
mov rax, rsp
mov dword [rax], 0
sub rsp, 0x20
call fcn.1400d4c90
call fcn.1401400f0
add rsp, 0x20
jmp 0x1400e0911
mov rax, qword [rbp + 0x2c0]
mov qword [rax], 2
jmp 0x1400e0c51
mov r8, qword [rbp + 0x208]
mov rax, qword [rbp + 0x2c0]
mov rdx, qword [rbp + 0x2c8]
mov rcx, qword [rbp + 0x2d0]
mov r9b, byte [rbp + 0x1df]
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp - 0x78], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eac0
mov r11d, dword [rbp - 0x78]
mov rcx, qword [rbp + 0x2e8]
mov rdx, qword [rbp + 0x2e0]
mov r9, qword [rbp + 0x330]
mov r8, qword [rbp + 0x208]
mov r10, qword [rbp + 0x1d0]
add rsp, 0x20
mov bl, al
mov rax, qword [rbp + 0x2d8]
movsx esi, bl
xor r11d, esi
mov byte [r10], r11b
mov r9, qword [r9]
mov r9b, byte [r9 + 3]
mov qword [rax], 3
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp - 0x74], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e8e90
mov r11d, dword [rbp - 0x74]
mov r9, qword [rbp + 0x330]
mov r8, qword [rbp + 0x208]
mov rcx, qword [rbp + 0x300]
mov rdx, qword [rbp + 0x2f8]
mov r10, qword [rbp + 0x1d0]
add rsp, 0x20
mov bl, al
mov rax, qword [rbp + 0x2f0]
movsx esi, bl
xor r11d, esi
mov byte [r10 + 1], r11b
mov r9, qword [r9]
mov r9b, byte [r9 + 4]
mov qword [rax], 4
mov byte [rdx], r9b
mov qword [rcx], r8
mov rcx, qword [rcx]
movsx edx, byte [rdx]
mov dword [rbp - 0x70], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eac0
mov edx, dword [rbp - 0x70]
add rsp, 0x20
mov cl, al
mov rax, qword [rbp + 0x1d0]
movsx r8d, cl
mov r9d, edx
xor r9d, 0xffffffff
mov ecx, r8d
and ecx, r9d
xor r8d, 0xffffffff
and edx, r8d
or ecx, edx
mov byte [rax + 2], cl
jmp 0x1400e0d0a
mov rax, qword [rbp + 0x1e0]
mov r8, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x188]
xor ecx, ecx
mov r9d, ecx
sub rsp, 0x30
mov rcx, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 1
call rax
add rsp, 0x30
jmp 0x1400e0fba
xor ecx, ecx
sub rsp, 0x20
call fcn.140154f50
jmp 0x1400e10cd
mov rax, qword [rbp + 0x178]
xor ecx, ecx
mov r8d, ecx
xor r9d, r9d
sub rsp, 0x20
mov rcx, r8
mov rdx, r8
call rax
add rsp, 0x20
jmp 0x1400e1111
mov rcx, qword [rbp + 0x238]
sub rsp, 0x20
call fcn.14013eb00
mov ecx, dword [rbp + 0x170]
mov rax, qword [rbp + 0x230]
add rsp, 0x20
mov dword [rax], ecx
jmp 0x1400e126b
mov rcx, qword [rbp + 0x248]
sub rsp, 0x20
call fcn.14013eb20
add rsp, 0x20
jmp 0x1400e131f
jmp 0x1400e13fb
mov rax, qword [rbp + 0x318]
mov rcx, qword [rbp + 0x258]
mov rdx, qword [rbp + 0x310]
lea r8, str.User_running_as:
mov qword [rdx], r8
mov qword [rax], rcx
jmp 0x1400e1439
mov rcx, qword [rbp + 0x308]
mov rax, qword [rbp + 0x318]
mov rax, qword [rax]
mov qword [rcx], rax
mov dword [rax], 0x1c
jmp 0x1400e1494
mov rax, qword [rbp + 0x348]
mov rcx, qword [rbp + 0x358]
mov rdx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x350]
mov r9, qword [rbp + 0x310]
mov r9, qword [r9]
mov r9b, byte [r9]
mov qword [rax], 0
mov byte [r8], r9b
mov qword [rcx], rdx
mov rcx, qword [rcx]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14013eb60
add rsp, 0x20
jmp 0x1400e14df
mov rax, qword [rbp + 0x360]
mov rcx, qword [rbp + 0x370]
mov rdx, qword [rbp + 0x158]
mov qword [rcx], rdx
mov rcx, qword [rcx]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
jmp 0x1400e15e7
jmp 0x1400e17fc
mov rax, qword [rbp + 0x398]
mov rdx, qword [rbp + 0x390]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp + 0x120]
mov r9b, byte [rbp + 0x12f]
mov byte [r8], r9b
mov rcx, qword [rcx]
mov cl, byte [rcx + 3]
mov qword [rdx], 3
mov byte [rax], cl
jmp 0x1400e1867
mov rax, qword [rbp + 0x390]
mov rcx, qword [rbp + 0x3a0]
mov rdx, qword [rbp + 0x158]
mov qword [rcx], rdx
mov rcx, qword [rcx]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
jmp 0x1400e18df
jmp 0x1400e1956
mov rax, qword [rbp + 0x3b8]
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x3b0]
mov r9, qword [rbp + 0x3a8]
mov r8, qword [rbp + 0x310]
mov r8, qword [r8]
mov r8b, byte [r8 + 4]
mov qword [r9], 4
mov byte [rdx], r8b
mov qword [rax], rcx
jmp 0x1400e19d8
mov rax, qword [rbp + 0xf8]
mov cl, byte [rbp + 0xf7]
mov byte [rax], cl
jmp 0x1400e1b27
jmp 0x1400e1d45
jmp 0x1400e1df2
jmp 0x1400e1e7f
mov rdx, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xc0]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
jmp 0x1400e1ef1
mov rax, qword [rbp + 0x430]
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x428]
mov r8b, byte [rbp + 0xa7]
mov byte [rdx], r8b
mov qword [rax], rcx
jmp 0x1400e1fdb
mov rax, qword [rbp + 0x440]
mov rdx, qword [rbp + 0x438]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp + 0x98]
mov r9b, byte [rbp + 0x87]
mov byte [r8], r9b
mov rcx, qword [rcx]
mov cl, byte [rcx + 0xa]
mov qword [rdx], 0xa
mov byte [rax], cl
jmp 0x1400e2152
mov rcx, qword [rbp + 0x70]
mov rax, qword [rbp + 0x438]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
jmp 0x1400e21e3
mov rax, qword [rbp + 0x450]
mov rcx, qword [rbp + 0x78]
mov dl, byte [rbp + 0x6f]
mov byte [rcx], dl
mov qword [rax], 0xb
jmp 0x1400e22df
jmp 0x1400e2407
mov rax, qword [rbp + 0x478]
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x470]
mov r9, qword [rbp + 0x468]
mov r8, qword [rbp + 0x310]
mov r10, qword [rbp + 0x58]
mov r11b, byte [rbp + 0x57]
mov byte [r10], r11b
mov r8, qword [r8]
mov r8b, byte [r8 + 0xc]
mov qword [r9], 0xc
mov byte [rdx], r8b
mov qword [rax], rcx
jmp 0x1400e2497
mov rcx, qword [rbp + 0x48]
mov rax, qword [rbp + 0x468]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.1400e91d0
add rsp, 0x20
jmp 0x1400e2562
jmp 0x1400e25b6
jmp 0x1400e26ef
mov rax, qword [rbp + 0x498]
mov rcx, qword [rbp + 0x28]
mov dl, byte [rbp + 0x1f]
mov byte [rcx], dl
mov qword [rax], 0xe
jmp 0x1400e2777
mov rax, qword [rbp + 0x4a0]
mov cl, byte [rbp + 0x1e]
mov byte [rax], cl
jmp 0x1400e27e1
mov rax, qword [rbp + 0x280]
mov rdx, qword [rbp + 0x278]
mov rcx, qword [rbp + 0x310]
mov r8, qword [rbp]
mov r9b, byte [rbp - 1]
mov byte [r8], r9b
mov rcx, qword [rcx]
mov cl, byte [rcx + 0x10]
mov qword [rdx], 0x10
mov byte [rax], cl
jmp 0x1400e28fc
mov rax, qword [rbp + 0x288]
mov rcx, qword [rbp + 0x158]
mov qword [rax], rcx
jmp 0x1400e2967
mov rax, qword [rbp - 0x10]
mov cl, byte [rbp - 0x21]
mov byte [rax], cl
jmp 0x1400e2a3c
jmp 0x1400e2ab7
jmp 0x1400e2b5b
jmp 0x1400e2c09
jmp 0x1400e2cae
jmp 0x1400e2da1