Function at 0x1400ce070
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x68], r9
mov qword [rbp + 0x68], r8
mov qword [rbp + 0x90], rdx
mov qword [rbp + 0xb0], rcx
mov eax, dword [0x141dd40c8]
sub eax, dword [0x141dd40cc]
imul eax, eax, 0x15c8d649
add eax, 0x74010cf6
and eax, 0x5dd288dc
cmp eax, 0x4a6a375e
je 0x1400ce2a1
mov eax, dword [0x141dd40d0]
xor eax, dword [0x141dd40d4]
xor eax, 0x63af6d1e
imul ecx, eax, 0xad808be2
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x210
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x2b0
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x470
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x410
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xa8], rsp
mov eax, 0x2d0
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
cmp ecx, 0xa27f12ee
jne 0x1400ce3f8
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x210
call fcn.1400ed360
sub rsp, rax
mov eax, 0x2b0
call fcn.1400ed360
sub rsp, rax
mov eax, 0x470
call fcn.1400ed360
sub rsp, rax
mov eax, 0x410
call fcn.1400ed360
sub rsp, rax
mov eax, 0x2d0
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
jmp 0x1400ce0c8
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0x88], r8
mov qword [rbp + 0x60], r11
mov qword [rbp + 0x40], r10
mov qword [rbp + 0x50], r9
mov rcx, qword [rbp + 0x90]
cmp byte [rcx], 0
mov qword [rbp + 0x28], rax
je 0x1400ce485
mov r8, qword [rbp + 0x38]
mov qword [r8], 0
mov r9, qword [rbp + 0x70]
mov qword [r9], 0
mov qword [r12], 0
mov dword [rbx], 0
mov eax, dword [0x141dd40d8]
add eax, dword [0x141dd40dc]
imul eax, eax, 0xaec61ca9
imul rax, rax, 0x7933d779
shr rax, 0x3e
imul eax, eax, 0xe66eb40d
cmp eax, 0xd17f2f36
jbe 0x1400ce935
jmp 0x1400ce971
mov r14, qword [rbp + 0x90]
cmp byte [r14 + 1], 0
mov r12, qword [rbp + 0xb0]
mov r15, qword [rbp + 0x98]
mov rdi, qword [rbp + 0x120]
mov rbx, qword [rbp + 0x128]
je 0x1400ce620
mov rax, qword [r12 + 0xf8]
nop dword [rax + rax]
mov ecx, dword [0x141dd4188]
or ecx, dword [0x141dd418c]
and ecx, 0x19000c6
xor ecx, 0x629f363
cmp ecx, 0xb4912b2d
ja 0x1400ce4c0
test rax, rax
mov rsi, qword [rbp + 0x30]
je 0x1400ceff0
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4190]
xor ecx, dword [0x141dd4194]
add ecx, 0x84648f8f
or ecx, 0xb57ffaef
xor ecx, 0x59cfc805
cmp ecx, 0xbf08f4da
ja 0x1400ce510
test eax, eax
je 0x1400ce5f4
mov eax, dword [0x141dd4198]
mov ecx, dword [0x141dd419c]
add eax, ecx
add eax, 0x18d08ff1
and eax, 0xd1077a44
add eax, 0x48fb78e7
cmp eax, 0xa1046393
jbe 0x1400ce590
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [r12 + 0x140], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd41a0]
and eax, dword [0x141dd41a4]
add eax, 0x92f74d2e
and eax, 0x44018204
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [r12 + 0x140], xmm0
cmp eax, 0xe74bf35
je 0x1400ce590
nop dword [rax]
mov eax, dword [0x141dd41a8]
xor edx, edx
div dword [0x141dd41ac]
add eax, 0x3762c485
and eax, 0x10451123
cmp eax, 0xaa864da1
ja 0x1400ce5d0
jmp 0x1400ceff0
mov eax, dword [0x141dd41b0]
xor eax, dword [0x141dd41b4]
imul eax, eax, 0xd5c43966
add eax, 0xae6e37fc
and eax, 0x8c721ba0
cmp eax, 0x9b9d8619
jbe 0x1400cefa8
jmp 0x1400cefdb
mov r13, qword [rbp + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4170]
add eax, dword [0x141dd4174]
xor eax, 0x300800
or eax, 0xa90b1775
and eax, 0xf93f1f7d
cmp eax, 0x8978bad0
jb 0x1400ce630
nop word cs:[rax + rax]
mov eax, dword [0x141dd4178]
and eax, dword [0x141dd417c]
add eax, 0x314e1ab8
or eax, 0xf1436675
add eax, 0x53fcc02e
cmp eax, 0xa39fe289
ja 0x1400ce660
movzx eax, byte [r14 + 2]
nop word [rax + rax]
mov ecx, dword [0x141dd4180]
xor ecx, dword [0x141dd4184]
and ecx, 0xdd6a5469
imul ecx, ecx, 0xae844ad5
cmp ecx, 0xf37de54a
je 0x1400ce690
test al, al
je 0x1400ce780
mov eax, dword [0x141dd4bd0]
add eax, dword [0x141dd4bd4]
or eax, 0xbeaed7ff
imul eax, eax, 0x99e5519
cmp eax, 0x9857bf48
jne 0x1400ce6de
mov qword [r12 + 0xe8], rbx
mov eax, 0xafaa6f11
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4bd8]
sub ecx, dword [0x141dd4bdc]
and ecx, 0xa10206b0
or ecx, 0x46bdf94e
imul rcx, rax
shr rcx, 0x3e
mov qword [r12 + 0xe8], rbx
cmp ecx, 0x490e142e
ja 0x1400ce6f0
mov eax, dword [0x141dd4be0]
or eax, dword [0x141dd4be4]
xor eax, 0xad491295
imul eax, eax, 0x7461aaf6
cmp eax, 0x7e0054d0
jae 0x1400ce750
mov qword [r12 + 0xf0], rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd4be8]
and eax, dword [0x141dd4bec]
or eax, 0xeeb7b2e6
imul eax, eax, 0xae01e39b
mov qword [r12 + 0xf0], rdi
cmp eax, 0x5317c328
jae 0x1400ce750
nop word cs:[rax + rax]
mov eax, dword [0x141dd41c8]
xor edx, edx
div dword [0x141dd41cc]
xor eax, 0xf30c6dc4
add eax, 0x86768f76
or eax, 0x77a5383
cmp eax, 0x716703aa
jb 0x1400ce780
movzx eax, byte [r14 + 3]
mov rcx, qword [r12 + 0xf8]
nop word cs:[rax + rax]
mov edx, dword [0x141dd41d0]
and edx, dword [0x141dd41d4]
imul edx, edx, 0xc4babacf
add edx, 0x6a4c6cc3
cmp edx, 0x57382aaa
ja 0x1400ce7c0
movabs rdi, 0x8000000000000000
test rcx, rcx
je 0x1400cf3e2
test eax, eax
je 0x1400cf3e2
mov rbx, qword [rcx + 0x10]
cmp eax, 1
je 0x1400ce8c1
cmp eax, 2
jne 0x1400ce910
mov eax, 0xa1a1a4a5
nop word cs:[rax + rax]
mov ecx, dword [0x141dd41e0]
sub ecx, dword [0x141dd41e4]
add ecx, 0x1a6c97e6
xor ecx, 0x483e818e
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x1b64e8dc
je 0x1400ce820
mov rcx, qword [r12 + 0x80]
mov eax, dword [0x141dd41e8]
xor edx, edx
div dword [0x141dd41ec]
nop
mov eax, dword [0x141dd41f0]
xor edx, edx
div dword [0x141dd41f4]
and eax, 0x9a011f
add eax, 0xb12dd9a3
or eax, 0x5ca3b991
cmp eax, 0xb8103cd3
jb 0x1400ce860
nop word cs:[rax + rax]
mov eax, dword [0x141dd41f8]
xor eax, dword [0x141dd41fc]
xor eax, 0xc5919c6
imul rax, rax, 0x40d8ec03
shr rax, 0x3e
xor eax, 0x4662bb1f
cmp eax, 0x2344b726
jb 0x1400ce890
cmp rcx, rdi
jne 0x1400cf3e2
mov rdi, r14
mov r14, qword [rbp + 0xa0]
mov qword [r14], 0
mov eax, dword [0x141dd4200]
sub eax, dword [0x141dd4204]
imul eax, eax, 0xd190e1e7
add eax, 0x5ae1d4f8
mov ecx, 0xdf73672f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x2737d838
jbe 0x1400cf018
jmp 0x1400cf05d
mov eax, dword [0x141dd41d8]
xor eax, dword [0x141dd41dc]
and eax, 0x5870a5e4
imul eax, eax, 0xe7cfd939
add eax, 0xafcf60ce
cmp eax, 0x5ff149fd
jb 0x1400ce910
ud2
mov eax, dword [0x141dd40e0]
imul eax, dword [0x141dd40e4]
imul eax, eax, 0xf4778af4
imul rcx, rax, 0x1abbbfd3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
mov dword [rbx + 4], 0
mov dword [r15], 0
cmp eax, 0x5c8ac78d
jbe 0x1400ce981
mov dword [rbx + 4], 0
mov dword [r15], 0
jmp 0x1400ce935
mov eax, dword [0x141dd40e8]
xor edx, edx
div dword [0x141dd40ec]
add eax, 0xfd20d287
or eax, 0x621bb982
mov ecx, 0x95b9841f
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x50bf0a69
mov r13, qword [rbp + 0x68]
jne 0x1400ce9d0
mov dword [r15 + 4], 0
mov qword [r14], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd40f0]
xor eax, dword [0x141dd40f4]
imul eax, eax, 0xf912f99c
add eax, 0xa3d009f7
mov dword [r15 + 4], 0
mov qword [r14], 0
cmp eax, 0x881247fa
jb 0x1400ce9d0
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf8]
test rax, rax
je 0x1400cea88
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rdx, r8
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
nop word [rax + rax]
mov ecx, dword [0x141dd40f8]
or ecx, dword [0x141dd40fc]
and ecx, 0x4000206d
add ecx, 0x76753bab
cmp ecx, 0xea64c61e
ja 0x1400cea30
mov ecx, dword [0x141dd4100]
or ecx, dword [0x141dd4104]
and ecx, 0x87c6a14a
imul ecx, ecx, 0xc5efaa1d
add ecx, 0x3741f788
cmp ecx, 0x8d7994f2
jb 0x1400cea50
test eax, eax
jne 0x1400cea88
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov eax, dword [0x141dd4108]
mov ecx, dword [0x141dd410c]
add eax, ecx
add eax, 0x979cd4c0
xor eax, 0x44084
or eax, 0xf819bc71
cmp eax, 0x2eb05735
jb 0x1400ceae9
mov edi, dword [0x141dd4110]
or edi, dword [0x141dd4114]
xor edi, 0x40801484
or edi, 0xbd7f2a1b
add edi, 0xdda185b8
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r14
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
cmp edi, 0x282531f3
jae 0x1400ceb02
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r14
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
jmp 0x1400ceaac
test eax, eax
jne 0x1400ceb80
xor eax, eax
test al, al
je 0x1400ceb1a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov edi, dword [0x141dd4118]
sub edi, dword [0x141dd411c]
xor edi, 0xb5000010
or edi, 0xadfdfe7
sub rsp, 0x20
call rbx
add rsp, 0x20
cmp edi, 0x8a3019c8
ja 0x1400ceb30
nop word [rax + rax]
mov eax, dword [0x141dd4120]
xor edx, edx
div dword [0x141dd4124]
add eax, 0x83fb5d55
and eax, 0x2aeec054
cmp eax, 0xe83332b2
je 0x1400ceb60
nop
mov eax, dword [0x141dd4128]
xor eax, dword [0x141dd412c]
and eax, 0x303a745c
cmp eax, 0x702d064d
je 0x1400ceb80
mov ecx, dword [r12]
mov r9d, dword [r12 + 4]
shl r9, 0x20
mov rax, qword [rbp + 0x70]
mov r8, qword [rax]
mov eax, dword [0x141dd4130]
xor edx, edx
div dword [0x141dd4134]
or rcx, r9
nop dword [rax]
mov eax, dword [0x141dd4138]
or eax, dword [0x141dd413c]
or eax, 0x80901a90
and eax, 0xc3b31e93
cmp eax, 0xaedeae7f
je 0x1400cebc0
mov r10d, dword [r15]
mov r11d, dword [r15 + 4]
shl r11, 0x20
xor eax, eax
test al, al
mov r12, qword [rbp + 0xb0]
jne 0x1400cec66
mov r9, r11
or r9, r10
mov rsi, qword [r14]
mov rdi, qword [r12 + 0x110]
xor ebx, ebx
cmp r9, rdi
cmovb rdi, rbx
mov r15, qword [r12 + 0x118]
mov rax, qword [r12 + 0x100]
mov rdx, qword [r12 + 0x108]
mov qword [r12 + 0x108], rcx
mov qword [r12 + 0x100], r8
mov qword [r12 + 0x118], rsi
mov qword [r12 + 0x110], r9
sub r9, rdi
cmp rsi, r15
cmovb r15, rbx
sub rsi, r15
add rsi, r9
mov r9, 0xffffffffffffffff
cmovae r9, rsi
test bl, bl
je 0x1400cec94
mov rax, r11
or rax, r10
mov rdx, qword [r14]
mov qword [r12 + 0x108], rcx
mov qword [r12 + 0x100], r8
mov qword [r12 + 0x118], rdx
mov qword [r12 + 0x110], rax
jmp 0x1400cebf5
test r9, r9
je 0x1400cecfb
mov r10d, dword [0x141dd4140]
or r10d, dword [0x141dd4144]
xor r10d, 0xfaa42f4e
mov r11d, 0x9a76d3d1
imul r11, r10
shr r11, 0x3f
cmp r11d, 0xd779f387
jbe 0x1400cee42
xor esi, esi
cmp r8, rax
mov r11, rax
cmovb r11, rsi
mov r10, r8
sub r10, r11
cmp rcx, rdx
cmovae rsi, rdx
mov r11, rcx
sub r11, rsi
test r9, r9
js 0x1400ceda6
cvtsi2ss xmm0, r9
jmp 0x1400cedbe
mov eax, dword [0x141dd4158]
and eax, dword [0x141dd415c]
imul eax, eax, 0x1aae13bc
or eax, 0x9b6234b5
add eax, 0xfd6c5bb0
cmp eax, 0x1b61d8cd
jae 0x1400ced30
mov dword [r12 + 0x150], 0
nop word [rax + rax]
mov eax, dword [0x141dd4160]
imul eax, dword [0x141dd4164]
imul eax, eax, 0xd9f71d68
and eax, 0xc3edb260
imul eax, eax, 0xc17690be
mov dword [r12 + 0x150], 0
cmp eax, 0x3f9e7e07
je 0x1400ced30
nop word cs:[rax + rax]
mov eax, dword [0x141dd4168]
add eax, dword [0x141dd416c]
and eax, 0x1f52c9c9
add eax, 0x3aee2062
imul rcx, rax, 0x11515245
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x742b6471
ja 0x1400ced70
jmp 0x1400ce485
mov rsi, r9
shr rsi, 1
mov edi, r9d
and edi, 1
or rdi, rsi
cvtsi2ss xmm0, rdi
addss xmm0, xmm0
add r11, r10
mov r10, 0xffffffffffffffff
cmovae r10, r11
test r10, r10
js 0x1400cee05
cvtsi2ss xmm1, r10
divss xmm1, xmm0
mulss xmm1, dword [0x1400ffdb0]
test r13, r13
jns 0x1400cee2c
mov r10, r13
shr r10, 1
mov r11d, r13d
and r11d, 1
or r11, r10
xorps xmm0, xmm0
cvtsi2ss xmm0, r11
addss xmm0, xmm0
jmp 0x1400cee34
mov r11, r10
shr r11, 1
and r10d, 1
or r10, r11
cvtsi2ss xmm1, r10
addss xmm1, xmm1
divss xmm1, xmm0
mulss xmm1, dword [0x1400ffdb0]
test r13, r13
js 0x1400cede7
xorps xmm0, xmm0
cvtsi2ss xmm0, r13
mulss xmm1, xmm0
movss dword [r12 + 0x150], xmm1
xor r10d, r10d
mov r11, r9
xorps xmm0, xmm0
cvtsi2ss xmm0, r9
shr r11, 1
mov rsi, 0xffffffffffffffff
mov rbx, r13
shr rbx, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, r13
movss xmm2, dword [0x1400ffdb0]
jmp 0x1400ceed3
movaps xmm5, xmm1
mov edi, dword [0x141dd4148]
xor edi, dword [0x141dd414c]
and edi, 0x273c229f
add edi, 0x650e72e0
imul r14, rdi, 0x5a795779
shr r14, 0x20
sub edi, r14d
shr edi, 1
add edi, r14d
shr edi, 0x18
divss xmm4, xmm3
mulss xmm4, xmm2
mulss xmm4, xmm5
movss dword [r12 + 0x150], xmm4
cmp edi, 0x437bbe4c
jbe 0x1400cef80
cmp r8, rax
mov r14, rax
cmovb r14, r10
cmp rcx, rdx
mov r15, rdx
cmovb r15, r10
test r9, r9
js 0x1400cef00
movaps xmm3, xmm0
jmp 0x1400cef15
mov edi, r9d
and edi, 1
or rdi, r11
xorps xmm3, xmm3
cvtsi2ss xmm3, rdi
addss xmm3, xmm3
mov rdi, r8
sub rdi, r14
mov r14, rcx
sub r14, r15
add r14, rdi
cmovb r14, rsi
test r14, r14
js 0x1400cef40
xorps xmm4, xmm4
cvtsi2ss xmm4, r14
test r13, r13
jns 0x1400cee80
jmp 0x1400cef62
mov rdi, r14
shr rdi, 1
and r14d, 1
or r14, rdi
xorps xmm4, xmm4
cvtsi2ss xmm4, r14
addss xmm4, xmm4
test r13, r13
jns 0x1400cee80
mov edi, r13d
and edi, 1
or rdi, rbx
xorps xmm5, xmm5
cvtsi2ss xmm5, rdi
addss xmm5, xmm5
jmp 0x1400cee83
mov eax, dword [0x141dd4150]
and eax, dword [0x141dd4154]
imul eax, eax, 0x1c220c58
or eax, 0x81dcd68e
and eax, 0x99feffae
cmp eax, 0x9ea6505d
ja 0x1400cef80
jmp 0x1400ce485
mov eax, dword [0x141dd41b8]
sub eax, dword [0x141dd41bc]
or eax, 0x1a3dedc9
imul esi, eax, 0x26bf15a4
or esi, 0x9df6594e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0xf56107c6
jbe 0x1400ceff0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400cefa8
mov eax, dword [0x141dd41c0]
xor eax, dword [0x141dd41c4]
imul eax, eax, 0x4774b3f6
or eax, 0xc91208d5
and eax, 0xfbd6b9fd
cmp eax, 0x3dbce73
jbe 0x1400ceff0
jmp 0x1400ce620
mov eax, dword [0x141dd4208]
xor edx, edx
div dword [0x141dd420c]
add eax, 0xcb027d21
xor eax, 0x35e9d3f1
mov esi, 0xb38a758d
imul rsi, rax
shr rsi, 0x3f
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, r14
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
cmp esi, 0x1ab78a93
jbe 0x1400cf080
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, r14
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
jmp 0x1400cf018
mov ecx, dword [0x141dd4210]
xor ecx, dword [0x141dd4214]
or ecx, 0x542eadaa
imul rcx, rcx, 0xcc211d1
shr rcx, 0x39
imul ecx, ecx, 0x2e76abd
cmp ecx, 0xd67c0451
ja 0x1400cf080
test eax, eax
mov rax, qword [rbp + 0xa0]
mov r14, rdi
movabs rdi, 0x8000000000000000
je 0x1400cf3a8
mov rcx, qword [rax]
nop word [rax + rax]
mov eax, dword [0x141dd4218]
imul eax, dword [0x141dd421c]
imul eax, eax, 0x7ce557db
add eax, 0x683a05eb
or eax, 0x26e0715a
cmp eax, 0x5c2860c9
jb 0x1400cf0d0
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400cf3b6
mov rax, qword [rbp + 0x88]
mov dword [rax], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x70], rcx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
test eax, eax
jne 0x1400cf189
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movzx ecx, ax
or ecx, 0x80070000
nop dword [rax + rax]
mov r8d, dword [0x141dd4220]
imul r8d, dword [0x141dd4224]
and r8d, 0x22032081
xor r8d, 0x52f4e95e
test eax, eax
mov edx, ecx
cmovle edx, eax
cmp r8d, 0x47dbcf6e
jb 0x1400cf150
cmp edx, 0x8007007a
jne 0x1400cf368
mov eax, dword [0x141dd4230]
sub eax, dword [0x141dd4234]
add eax, 0x1adfd675
or eax, 0x89eb5787
cmp eax, 0x78cca232
jne 0x1400cf1b4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rsi, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4238]
mov ecx, dword [0x141dd423c]
lea edi, [rax + rcx]
add edi, 0xaf2e6847
xor edi, 0x16700641
add edi, 0xa4c2b3c3
mov r14d, dword [rsi]
sub rsp, 0x20
call rbx
add rsp, 0x20
cmp edi, 0x7f43e4f4
jb 0x1400cf1d0
mov r15, rax
mov rcx, rax
inc rcx
nop
mov eax, dword [0x141dd4240]
xor edx, edx
div dword [0x141dd4244]
imul eax, eax, 0xe566bd5
or eax, 0x10e071
and eax, 0x8311f8f1
cmp eax, 0x6ffbfed
ja 0x1400cf210
nop word cs:[rax + rax]
mov eax, dword [0x141dd4248]
xor eax, dword [0x141dd424c]
or eax, 0xa90d4e7
add eax, 0x8fa261bb
cmp eax, 0xbd86ead8
ja 0x1400cf240
cmp rcx, 1
ja 0x1400cf2a7
mov eax, dword [0x141dd4250]
xor edx, edx
div dword [0x141dd4254]
and eax, 0xa74adc27
add eax, 0xfa8970c2
mov ecx, 0xc79f38c5
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x116428e3
mov r14, qword [rbp + 0x90]
mov r15, qword [rbp + 0x98]
jbe 0x1400cfa0e
jmp 0x1400cfa46
mov eax, dword [0x141dd4260]
xor eax, dword [0x141dd4264]
cmp eax, 0x7efcecbb
jne 0x1400cf2d3
sub rsp, 0x20
mov rcx, r15
mov edx, 8
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov r12, qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop word [rax + rax]
mov eax, dword [0x141dd4268]
or eax, dword [0x141dd426c]
imul edi, eax, 0x7878eace
add edi, 0x613b2e16
sub rsp, 0x20
mov rcx, r15
mov edx, 8
mov r8, r14
call r12
add rsp, 0x20
cmp edi, 0x2d931188
jb 0x1400cf2e0
mov rbx, rax
test rax, rax
mov r12, qword [rbp + 0xb0]
mov r14, qword [rbp + 0x90]
mov r15, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x88]
je 0x1400cf368
mov eax, dword [0x141dd4270]
sub eax, dword [0x141dd4274]
mov r14d, dword [rsi]
imul eax, eax, 0xd6b19bc8
and eax, 0xfcafef18
cmp eax, 0xb4a03619
mov r15, qword [rbp + 0x70]
jbe 0x1400cfa56
jmp 0x1400cfaa1
sub rsp, 0x20
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
nop word [rax + rax]
mov ecx, dword [0x141dd4228]
xor ecx, dword [0x141dd422c]
imul ecx, ecx, 0x27eaf5d2
cmp ecx, 0x7ff7c71b
je 0x1400cf380
test eax, eax
movabs rdi, 0x8000000000000000
jne 0x1400cf3b6
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, 0x95cd116b
nop dword [rax + rax]
mov eax, dword [0x141dd42a0]
xor edx, edx
div dword [0x141dd42a4]
xor eax, 0xcf74874e
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x6e6a161
je 0x1400cf3c0
movzx esi, byte [r14 + 4]
movzx eax, byte [r14 + 5]
mov dword [rbp + 0x68], eax
nop
mov eax, dword [0x141dd4308]
and eax, dword [0x141dd430c]
and eax, 0xfe4a3aa8
imul rax, rax, 0x5e266e29
shr rax, 0x3d
cmp eax, 0x4d94e35a
je 0x1400cf3f0
movzx ebx, byte [r14 + 6]
movzx r9d, byte [r14 + 7]
nop dword [rax]
mov eax, dword [0x141dd4310]
or eax, dword [0x141dd4314]
xor eax, 0x20050004
or eax, 0x9fbaafbb
cmp eax, 0x6582bb0c
je 0x1400cf420
test r9d, r9d
je 0x1400cf4c0
cmp r9d, 1
je 0x1400cf672
nop dword [rax]
mov eax, dword [str.K_]
sub eax, dword [0x141dd431c]
imul eax, eax, 0xc3ee4727
and eax, 0x40ea4fc4
imul rcx, rax, 0x2501fdc7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xf090918f
je 0x1400cf450
mov rax, qword [r12 + 0x40]
nop word [rax + rax]
mov ecx, dword [0x141dd4320]
and ecx, dword [0x141dd4324]
imul ecx, ecx, 0x35635e5b
add ecx, 0x426e9d83
and ecx, 0x21a1c51d
cmp ecx, 0xc1d07b2d
je 0x1400cf490
test rax, rax
je 0x1400cf672
nop
mov eax, dword [0x141dd4328]
imul eax, dword [0x141dd432c]
imul rax, rax, 0x27eb1b03
shr rax, 0x3d
or eax, 0x21c4ccd8
cmp eax, 0xbd80a2b2
je 0x1400cf4c0
test ebx, ebx
je 0x1400cf55f
cmp ebx, 1
je 0x1400cf672
nop word cs:[rax + rax]
mov eax, dword [0x141dd4330]
and eax, dword [0x141dd4334]
add eax, 0xe9eeb13d
or eax, 0x7251ccd5
and eax, 0xfedbfff7
cmp eax, 0x9908a46b
jb 0x1400cf500
mov rax, qword [r12 + 0x58]
nop word [rax + rax]
mov ecx, dword [0x141dd4338]
and ecx, dword [0x141dd433c]
or ecx, 0x4ef5d539
xor ecx, 0x5858ce28
imul ecx, ecx, 0xf7cd348b
cmp ecx, 0x37c33561
je 0x1400cf530
test rax, rax
je 0x1400cf672
test esi, esi
je 0x1400cf620
cmp esi, 1
je 0x1400cf672
mov eax, dword [0x141dd4340]
xor edx, edx
div dword [0x141dd4344]
nop
mov eax, dword [0x141dd4348]
mov ecx, dword [0x141dd434c]
add eax, ecx
add eax, 0xdf67ae5c
xor eax, 0x21a10403
and eax, 0xb3a984a3
cmp eax, 0xf95822c9
ja 0x1400cf580
nop word cs:[rax + rax]
mov eax, dword [0x141dd4350]
sub eax, dword [0x141dd4354]
or eax, 0xda4344c0
add eax, 0x315d4f50
cmp eax, 0xa1a936bb
ja 0x1400cf5b0
mov rax, qword [r12 + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4358]
or ecx, dword [0x141dd435c]
or ecx, 0xbb08c3fa
add ecx, 0xf050513
imul rdx, rcx, 0x11e68c63
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
cmp ecx, 0x8beacf7
je 0x1400cf5e0
cmp rax, rdi
je 0x1400cf672
nop dword [rax]
mov eax, dword [0x141dd4360]
or eax, dword [0x141dd4364]
add eax, 0x8e2368a3
xor eax, 0xc0621000
and eax, 0xc173189c
cmp eax, 0xc925f11b
je 0x1400cf620
cmp dword [rbp + 0x68], 0
je 0x1400d1f70
cmp dword [rbp + 0x68], 1
je 0x1400cf672
cmp dword [rbp + 0x68], 2
jne 0x1400cf9ac
xor eax, eax
nop
test al, al
jne 0x1400cf660
cmp qword [r12 + 0xb8], rdi
jne 0x1400d1f70
mov rcx, qword [r12 + 0xf8]
mov eax, 0x8772dcb7
nop
mov edx, dword [0x141dd4370]
add edx, dword [0x141dd4374]
mov r8, rdx
imul r8, rax
shr r8, 0x20
sub edx, r8d
shr edx, 1
add edx, r8d
shr edx, 0x1e
cmp edx, 0x322a2213
je 0x1400cf680
test rcx, rcx
je 0x1400d1f70
nop word cs:[rax + rax]
mov eax, dword [0x141dd4378]
xor edx, edx
div dword [0x141dd437c]
imul eax, eax, 0x6be60dbb
add eax, 0x190e0a07
imul rdx, rax, 0x68be2c3
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x19
cmp eax, 0xf46f179e
je 0x1400cf6c0
mov dword [rbp + 0x30], r9d
mov rax, qword [rcx + 0x10]
mov qword [rbp + 0xa0], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd4380]
and eax, dword [0x141dd4384]
and eax, 0xf92e75bd
imul eax, eax, 0x56272fa4
cmp eax, 0x753ec99b
je 0x1400cf710
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xa0]
mov edx, 0x1a
mov r8, qword [rbp + 0x40]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1400d1f50
mov rdx, qword [rbp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4388]
or eax, dword [0x141dd438c]
add eax, 0xccccce19
imul rcx, rax, 0x2fc78cd7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x19
cmp eax, 0xdb483ee0
je 0x1400cf770
mov rcx, qword [rdx]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400cf7b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4390]
xor eax, dword [0x141dd4394]
add eax, 0x425d9802
and eax, 0x93d4eb9e
add eax, 0xaf5b2fba
cmp eax, 0x67ca86b3
jb 0x1400cf7c0
test rcx, rcx
mov dword [rbp + 0x38], esi
mov dword [rbp + 0x40], ebx
mov qword [rbp + 0x70], rcx
je 0x1400cf824
mov eax, dword [0x141dd4760]
sub eax, dword [0x141dd4764]
xor eax, 0x90efaa4
imul eax, eax, 0x1db13abb
or eax, 0x13efb4b7
cmp eax, 0xdc24defa
mov rbx, qword [rbp + 0xa0]
jbe 0x1400d1b23
jmp 0x1400d1b67
mov eax, dword [0x141dd4398]
xor edx, edx
div dword [0x141dd439c]
xor eax, 0x91ded7f3
imul rax, rax, 0x3bf1e3f9
shr rax, 0x3c
cmp eax, 0xa8cbca25
jne 0x1400cf872
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xa0]
xor edx, edx
mov r8, qword [rbp + 0x50]
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov rbx, qword [rbp + 0xa0]
nop dword [rax]
mov eax, dword [0x141dd43a0]
sub eax, dword [0x141dd43a4]
xor eax, 0xae14a156
imul esi, eax, 0xbb69ae6b
and esi, 0xec5b2577
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rbx
xor edx, edx
mov r8, qword [rbp + 0x50]
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
mov r8, qword [rbp + 0x50]
add rsp, 0x30
cmp esi, 0xbf22ec29
je 0x1400cf880
nop
mov ecx, dword [0x141dd43a8]
or ecx, dword [0x141dd43ac]
imul ecx, ecx, 0x50d5841b
or ecx, 0xa1e838ca
cmp ecx, 0x278fd62f
je 0x1400cf8d0
mov ecx, dword [0x141dd43b0]
sub ecx, dword [0x141dd43b4]
add ecx, 0xb3351ef8
xor ecx, 0x80600022
or ecx, 0x6f9b2b5d
cmp ecx, 0x6d9beedf
jb 0x1400cf8f0
test eax, eax
js 0x1400d1f50
mov rdx, qword [r8 + 8]
mov rax, qword [r8 + 0x28]
xor ecx, ecx
test rax, rax
setne cl
mov qword [r12], rcx
mov qword [r12 + 8], rax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, qword [rbp + 0xa0]
mov rsi, qword [rbp + 0x80]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400cf9cf
mov rsi, qword [rsi + 0x20]
mov eax, dword [0x141dd43b8]
or eax, dword [0x141dd43bc]
or eax, 0x42332a40
and eax, 0xcb332ec3
imul rax, rax, 0x7f70e9e7
shr rax, 0x3c
cmp eax, 0x8d05ca7f
mov rbx, qword [rbp + 0xa0]
mov r14, qword [rbp + 0xa8]
jne 0x1400cfef9
jmp 0x1400cff40
mov eax, dword [0x141dd4368]
or eax, dword [0x141dd436c]
imul eax, eax, 0x51486ef3
add eax, 0xfcbaf78c
cmp eax, 0x3e0f70db
jb 0x1400cf9ac
jmp 0x1400ce933
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd43c8]
sub eax, dword [0x141dd43cc]
imul eax, eax, 0x3d7bdc76
xor eax, 0x98ad2b93
imul rax, rax, 0x7ad3e9fb
shr rax, 0x3e
cmp eax, 0xca408782
je 0x1400cf9e0
jmp 0x1400d0140
mov edi, dword [0x141dd4258]
sub edi, dword [0x141dd425c]
xor edi, 0xa5026863
and edi, 0xfd73fb63
xor edi, 0x7c2ae7c9
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0x5088f36
ja 0x1400cf368
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400cfa0e
mov eax, dword [0x141dd4278]
imul eax, dword [0x141dd427c]
add eax, 0x1d7a52d3
imul rdi, rax, 0x7cec0ccb
shr rdi, 0x3e
or edi, 0xeb6d7d24
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, r15
mov edx, 1
mov r8, rbx
mov r9d, r14d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
cmp edi, 0x483ef965
jae 0x1400cfac3
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, r15
mov edx, 1
mov r8, rbx
mov r9d, r14d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
jmp 0x1400cfa56
mov r14, qword [rbp + 0x90]
movabs rdi, 0x8000000000000000
mov r15, qword [rbp + 0x98]
nop dword [rax + rax]
mov ecx, dword [0x141dd4280]
add ecx, dword [0x141dd4284]
xor ecx, 0xd730401
imul ecx, ecx, 0x3f87eb39
add ecx, 0x92b3a547
cmp ecx, 0xb073df80
jb 0x1400cfae0
test eax, eax
je 0x1400cfd43
mov rdx, qword [rbx]
sub rsp, 0x20
mov r14, qword [rbp + 0x60]
mov rcx, r14
call fcn.1400d4120
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd4298]
add eax, dword [0x141dd429c]
xor eax, 0xce07c90c
imul eax, eax, 0x4909b3e6
cmp eax, 0x45c3c2b
je 0x1400cfb30
mov r14, qword [r14]
cmp r14, rdi
jne 0x1400cfc5f
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d3f70
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov ecx, dword [0x141dd42e8]
and ecx, dword [0x141dd42ec]
add ecx, 0x63a7cff
and ecx, 0x4b85a5db
add ecx, 0xfe30be5a
cmp ecx, 0xa0f7bbbe
ja 0x1400cfb74
test eax, eax
mov r14, qword [rbp + 0x90]
jne 0x1400cfc32
mov eax, dword [0x141dd42f0]
imul eax, dword [0x141dd42f4]
imul eax, eax, 0x34c89061
add eax, 0x59b33cf2
mov ecx, 0x8ce930f3
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x416565e0
jne 0x1400cfbe4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov esi, 0x89e8b353
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [0x141dd42f8]
xor edi, dword [0x141dd42fc]
add edi, 0x8d79ae61
xor edi, 0xc0548a41
imul rdi, rsi
shr rdi, 0x3e
sub rsp, 0x20
call rbx
add rsp, 0x20
cmp edi, 0x86005842
je 0x1400cfbf0
xor eax, eax
movabs rdi, 0x8000000000000000
test al, al
jne 0x1400cfc2e
mov eax, dword [0x141dd4300]
and eax, dword [0x141dd4304]
xor eax, 0xe8fb8510
imul rax, rax, 0x1529caa9
shr rax, 0x3c
or eax, 0x585ddc8c
cmp eax, 0x862b98ba
ja 0x1400cfc32
jmp 0x1400cf3e2
mov eax, dword [0x141dd42a8]
and eax, dword [0x141dd42ac]
imul eax, eax, 0x55c19f17
cmp eax, 0x8ae4075d
je 0x1400cfc5f
mov rax, qword [rbp + 0x60]
mov r15, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov eax, dword [0x141dd42b0]
imul eax, dword [0x141dd42b4]
add eax, 0x7a8c0717
imul rax, rax, 0x6793aae7
shr rax, 0x3e
imul eax, eax, 0x395875d
cmp eax, 0x2d0aa69e
je 0x1400cfc84
mov eax, dword [0x141dd42b8]
add eax, dword [0x141dd42bc]
and eax, 0xa70ef431
cmp eax, 0x28164475
je 0x1400cfcae
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0x80]
shl rax, 1
test rax, rax
je 0x1400cfd2d
mov rax, qword [rbp + 0xb0]
mov r8, qword [rax + 0x88]
mov eax, dword [str.R_vf]
xor edx, edx
div dword [0x141dd42c4]
add eax, 0x85c82d77
and eax, 0xc2d1235d
cmp eax, 0x9cd2cfcf
jbe 0x1400cfd10
mov rax, qword [0x141dd7fe0]
xor eax, eax
mov rcx, qword [0x141dd7fe0]
test al, al
jne 0x1400cfd12
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor eax, eax
test al, al
mov r13, qword [rbp + 0xb0]
je 0x1400cfdc4
jmp 0x1400cfe09
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov eax, dword [0x141dd4288]
or eax, dword [0x141dd428c]
or eax, 0x90455995
mov ecx, 0xbcc57d69
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x50a8702b
cmp eax, 0xcfe4d5e0
je 0x1400cfdb2
mov eax, dword [0x141dd4290]
xor edx, edx
div dword [0x141dd4294]
imul edi, eax, 0x7a9fa1b4
and edi, 0x1b34affc
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d3f70
add rsp, 0x20
cmp edi, 0xac831227
jbe 0x1400cf368
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d3f70
add rsp, 0x20
jmp 0x1400cfd7c
mov edi, dword [0x141dd42c8]
xor edi, dword [0x141dd42cc]
and edi, 0x88c0803
xor edi, 0x4c08c821
mov qword [r13 + 0x80], r14
mov qword [r13 + 0x88], r15
mov qword [r13 + 0x90], r12
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d3f70
add rsp, 0x20
cmp edi, 0xccf782db
jbe 0x1400cfe30
mov qword [r13 + 0x80], r14
mov qword [r13 + 0x88], r15
mov qword [r13 + 0x90], r12
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d3f70
add rsp, 0x20
jmp 0x1400cfdc4
sub rsp, 0x20
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test eax, eax
jne 0x1400cfeb4
mov eax, dword [0x141dd42d0]
and eax, dword [0x141dd42d4]
xor eax, 0x802080
and eax, 0x1a02280
cmp eax, 0xfc60f92f
je 0x1400cfea4
mov eax, dword [str.mM4]
sub eax, dword [0x141dd42dc]
or eax, 0x6bb84318
imul rcx, rax, 0x1d45b6ff
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul esi, eax, 0x4d19ee7e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x30037ee5
jae 0x1400cfeb4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400cfe63
mov r12, qword [rbp + 0xb0]
mov r13, qword [rbp + 0x10]
mov r14, qword [rbp + 0x90]
movabs rdi, 0x8000000000000000
mov r15, qword [rbp + 0x98]
mov eax, dword [0x141dd42e0]
sub eax, dword [0x141dd42e4]
and eax, 0x30282582
xor eax, 0x340838a2
cmp eax, 0x92b62d13
ja 0x1400cfed7
jmp 0x1400cf3e2
mov edi, dword [0x141dd43c0]
imul edi, dword [0x141dd43c4]
add edi, 0x85646154
and edi, 0xd7d4a09b
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, rbx
mov rdx, rsi
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp edi, 0xd8d0338e
jbe 0x1400cff68
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, rbx
mov rdx, rsi
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1400cfef9
test eax, eax
je 0x1400d0101
mov eax, dword [0x141dd43d0]
xor edx, edx
div dword [0x141dd43d4]
movabs rdi, 0x8000000000000000
mov r14, qword [rbp + 0x90]
mov r8d, dword [rbp + 0x30]
mov rcx, qword [rbp + 0xa8]
nop word [rax + rax]
mov eax, dword [0x141dd43d8]
or eax, dword [0x141dd43dc]
cmp eax, 0xda5c1ded
je 0x1400cffa0
movzx r9d, word [rcx + 0x38]
mov r10, qword [rcx + 0x40]
mov rbx, qword [rcx + 0x78]
movzx r12d, word [rcx + 0x70]
mov rax, qword [rbp + 0xb0]
add rax, 0x30
mov qword [rbp + 0x88], rax
nop word [rax + rax]
mov eax, dword [0x141dd43e0]
xor edx, edx
div dword [0x141dd43e4]
add eax, 0xec3d4783
or eax, 0xa74b1433
xor eax, 0x50e0c52e
cmp eax, 0xc696912a
ja 0x1400cffe0
mov r13, qword [rcx + 0x80]
mov eax, 0x9657937f
mov ecx, dword [0x141dd43e8]
xor ecx, dword [0x141dd43ec]
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x61431a85
je 0x1400d0010
test r8d, r8d
mov qword [rbp + 0x80], r9
mov qword [rbp + 0x50], r10
je 0x1400d0943
cmp r8d, 1
je 0x1400d00c1
nop dword [rax + rax]
mov eax, dword [0x141dd43f0]
xor edx, edx
div dword [0x141dd43f4]
xor eax, 0x2810d01c
and eax, 0xf816f81d
add eax, 0xc2484f83
cmp eax, 0xf3615b8
jb 0x1400d0050
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0x40]
mov ecx, 0xc4616edf
nop word cs:[rax + rax]
mov edx, dword [0x141dd43f8]
add edx, dword [0x141dd43fc]
imul edx, edx, 0x52a8e547
add edx, 0xd1c29217
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0x5f1a20da
ja 0x1400d0090
test rax, rax
jne 0x1400d0943
mov eax, dword [0x141dd7ff0]
cmp eax, 3
je 0x1400d01e0
mov eax, dword [0x141dd4400]
sub eax, dword [str.XdW]
imul eax, eax, 0x4504a5c0
or eax, 0x687e22e0
mov ecx, 0x928635eb
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x1e532ee8
jbe 0x1400d0165
jmp 0x1400d019b
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movabs rdi, 0x8000000000000000
mov r14, qword [rbp + 0x90]
mov eax, dword [0x141dd4758]
xor edx, edx
div dword [0x141dd475c]
add eax, 0x6f8daf07
xor eax, 0xcd1e9337
cmp eax, 0xce197e2a
jae 0x1400d0120
nop
mov eax, dword [0x141dd4778]
xor edx, edx
div dword [0x141dd477c]
xor eax, 0xd35f267f
imul eax, eax, 0x7fad1b73
cmp eax, 0xe04b51f8
je 0x1400d0140
jmp 0x1400d1f50
mov eax, dword [0x141dd4408]
and eax, dword [0x141dd440c]
shr eax, 1
mov ecx, 0x84e6f08f
imul rcx, rax
shr rcx, 0x3d
imul esi, ecx, 0x58230fed
sub rsp, 0x20
call fcn.1400fd26e
add rsp, 0x20
cmp esi, 0x9d45a525
jbe 0x1400d01b0
sub rsp, 0x20
call fcn.1400fd26e
add rsp, 0x20
jmp 0x1400d0165
mov eax, dword [0x141dd4410]
add eax, dword [0x141dd4414]
xor eax, 0x20a7ff77
add eax, 0xc3e81907
xor eax, 0xe2421d8
cmp eax, 0xe2655b3c
ja 0x1400d01b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4418]
sub eax, dword [0x141dd441c]
add eax, 0xe0e8d3d0
or eax, 0x2e98a1ce
cmp eax, 0xc937d383
jb 0x1400d01e0
movzx eax, byte [0x141dd7ff4]
mov ecx, 0xd12a0e09
nop dword [rax]
mov edx, dword [0x141dd4420]
sub edx, dword [0x141dd4424]
imul edx, edx, 0x1a41be38
imul rdx, rcx
shr rdx, 0x3f
add edx, 0xa4273f7f
cmp edx, 0xab55f1e9
ja 0x1400d0210
test al, al
mov qword [rbp + 0x60], r13
je 0x1400d0448
sub rsp, 0x20
lea rcx, [rbp - 0x40]
mov rdx, qword [rbp + 0xa0]
call fcn.1400d4f00
add rsp, 0x20
mov rcx, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd44b0]
xor edx, edx
div dword [0x141dd44b4]
cmp eax, 0x490bb0ab
je 0x1400d0270
mov rbx, qword [rcx + 0x38]
mov rax, qword [rcx + 0x40]
mov qword [rbp + 0xa8], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd44b8]
imul eax, dword [0x141dd44bc]
imul eax, eax, 0x1629ecab
cmp eax, 0x392b703d
je 0x1400d02a0
cmp qword [rbp + 0xa8], 0
je 0x1400d03b0
xor r15d, r15d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r14d, r14d
mov rax, r14
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1400d0377
add rax, rbx
nop word [rax + rax]
mov ecx, dword [0x141dd44c0]
sub ecx, dword [0x141dd44c4]
or ecx, 0x2f8b77de
add ecx, 0xa1191ffe
cmp ecx, 0x271ce023
jb 0x1400d02f0
mov r12, qword [rax + 8]
mov r13, qword [0x141dd7fe0]
mov eax, dword [0x141dd44c8]
sub eax, dword [0x141dd44cc]
add eax, 0x7c15711c
imul rax, rax, 0x36b0513f
shr rax, 0x3d
add eax, 0x9a6f7157
cmp eax, 0x42f73bcb
jae 0x1400d0360
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call rsi
add rsp, 0x20
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call rsi
add rsp, 0x20
test r15b, r15b
jne 0x1400d0360
inc r14
nop word [rax + rax]
mov eax, dword [0x141dd44d0]
and eax, dword [0x141dd44d4]
add eax, 0x214f1972
and eax, 0xced5a13d
cmp eax, 0xa20591e9
ja 0x1400d0380
cmp r14, qword [rbp + 0xa8]
jne 0x1400d02d5
nop word [rax + rax]
mov eax, dword [0x141dd44d8]
sub eax, dword [0x141dd44dc]
add eax, 0xf6caae01
and eax, 0x9f366c94
add eax, 0xa01acbb4
cmp eax, 0xf463eeee
ja 0x1400d03b0
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
mov r14, qword [rbp + 0x90]
mov r15, qword [rbp + 0x98]
mov r13, qword [rbp + 0x60]
nop
mov ecx, dword [0x141dd44e0]
imul ecx, dword [0x141dd44e4]
or ecx, 0xc0084010
and ecx, 0xd4084510
cmp ecx, 0x1d9becd4
jb 0x1400d03f0
test rax, rax
je 0x1400d08bd
mov r12, qword [0x141dd7fe0]
mov eax, dword [0x141dd44e8]
sub eax, dword [0x141dd44ec]
imul eax, eax, 0xddbcd6e0
or eax, 0x97532c0c
cmp eax, 0x1be1684b
jne 0x1400d0842
jmp 0x1400d0887
mov eax, dword [0x141dd4428]
sub eax, dword [0x141dd442c]
or eax, 0x212ca29a
imul eax, eax, 0xd5a645d9
add eax, 0x76815d2b
cmp eax, 0x129894f6
jae 0x1400d0489
sub rsp, 0x20
lea rcx, [rbp - 0x40]
mov rdx, qword [rbp + 0xa0]
mov r8, rbx
mov r9, r12
call fcn.1400d46f0
add rsp, 0x20
mov esi, 0x86f02107
lea r13, [rbp - 0x40]
mov r14, qword [rbp + 0xa0]
mov edi, dword [0x141dd4430]
sub edi, dword [0x141dd4434]
add edi, 0xb8699927
and edi, 0xb2e68d76
mov rax, rdi
imul rax, rsi
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1e
sub rsp, 0x20
mov rcx, r13
mov rdx, r14
mov r8, rbx
mov r9, r12
call fcn.1400d46f0
add rsp, 0x20
cmp edi, 0xf7027497
ja 0x1400d0499
mov rsi, qword [rbp - 0x40]
mov eax, dword [0x141dd4438]
or eax, dword [0x141dd443c]
xor eax, 0x1be256e
add eax, 0x2c4774a2
or eax, 0xfbc277f5
cmp eax, 0x4319b5a3
jb 0x1400d04ea
movabs rdi, 0x8000000000000000
cmp rsi, rdi
mov r14, qword [rbp + 0xb0]
jne 0x1400d053f
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 8
mov qword [rbp], 0
jmp 0x1400d05e9
mov eax, dword [0x141dd4440]
imul eax, dword [0x141dd4444]
add eax, 0x8b5b239
mov ecx, 0xa60fa1a1
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x7cb2045
je 0x1400d05a3
mov eax, dword [0x141dd4448]
xor eax, dword [0x141dd444c]
xor eax, 0xa4b4e61f
imul edi, eax, 0x6386e4ec
add edi, 0x73ac6bcc
mov rbx, qword [rbp - 0x38]
sub rsp, 0x20
lea rcx, [rbp - 0x10]
mov rdx, rbx
call fcn.1400d4b10
add rsp, 0x20
cmp edi, 0x4097d7aa
jae 0x1400d05ba
mov rdx, qword [rbp - 0x38]
sub rsp, 0x20
lea rcx, [rbp - 0x10]
call fcn.1400d4b10
add rsp, 0x20
jmp 0x1400d0566
xor eax, eax
test al, al
jne 0x1400d05bc
test rsi, rsi
movabs rdi, 0x8000000000000000
je 0x1400d05e9
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor eax, eax
test al, al
jne 0x1400d05eb
mov rbx, qword [r14 + 0x38]
mov eax, dword [0x141dd4450]
xor edx, edx
div dword [0x141dd4454]
mov eax, dword [0x141dd4458]
xor edx, edx
div dword [0x141dd445c]
and eax, 0x960a3a4c
imul eax, eax, 0x67af795e
xor eax, 0x7cdaf4a0
cmp eax, 0xb05d399f
ja 0x1400d0601
mov r13, qword [r14 + 0x40]
test r13, r13
je 0x1400d0748
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd4460]
add eax, dword [0x141dd4464]
or eax, 0xde55ff7e
imul eax, eax, 0x8ba3528b
cmp eax, 0x13cbdabe
jb 0x1400d0640
mov rcx, r14
shl rcx, 5
cmp qword [rbx + rcx], 0
je 0x1400d071b
add rcx, rbx
mov eax, dword [0x141dd4468]
xor edx, edx
div dword [0x141dd446c]
xor eax, 0xe06f779e
add eax, 0xa26afb5f
cmp eax, 0x7a8b904a
jb 0x1400d0673
mov r12, qword [rcx + 8]
mov eax, dword [0x141dd4470]
or eax, dword [0x141dd4474]
add eax, 0x4f2dbf27
imul rax, rax, 0x7be764b9
shr rax, 0x3c
or eax, 0x3803ca14
cmp eax, 0x60d998fc
jbe 0x1400d06e0
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call r15
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd4478]
or eax, dword [0x141dd447c]
and eax, 0x3699a090
xor eax, 0xfe9c13f5
imul esi, eax, 0xa8316660
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call r15
add rsp, 0x20
cmp esi, 0xf5eab9cd
ja 0x1400d06e0
inc r14
nop
mov eax, dword [0x141dd4480]
mov ecx, dword [0x141dd4484]
add eax, ecx
add eax, 0x7515fc45
and eax, 0x433580ec
cmp eax, 0x97a9fd1
je 0x1400d0720
cmp r14, r13
jne 0x1400d0640
mov eax, dword [0x141dd4488]
or eax, dword [0x141dd448c]
add eax, 0x2fc29068
or eax, 0x7fe00cf2
xor eax, 0xbdd7e0d9
cmp eax, 0xc506abfe
ja 0x1400d0748
mov rax, qword [rbp + 0x88]
mov rcx, qword [rax]
mov r14, qword [rbp + 0x90]
mov r15, qword [rbp + 0x98]
mov r13, qword [rbp + 0x60]
mov eax, dword [0x141dd4490]
xor edx, edx
div dword [0x141dd4494]
and eax, 0x29441808
cmp eax, 0x5e463e1e
ja 0x1400d0786
mov eax, dword [0x141dd4498]
xor edx, edx
div dword [0x141dd449c]
add eax, 0xa943faa8
xor eax, 0xf52fd13c
cmp eax, 0x3258a75b
jb 0x1400d07a0
test rcx, rcx
je 0x1400d0827
mov eax, dword [0x141dd44a0]
and eax, dword [0x141dd44a4]
and eax, 0x224f0607
xor eax, 0x52e6b6cc
imul rax, rax, 0xbc43f1
shr rax, 0x35
cmp eax, 0xb8eec0fb
ja 0x1400d080b
mov eax, dword [0x141dd44a8]
or eax, dword [0x141dd44ac]
add eax, 0x1311b9a1
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x3d93c2c9
jae 0x1400d0814
mov rax, qword [0x141dd7fe0]
jmp 0x1400d07ec
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rbp]
mov rcx, qword [rbp + 0x88]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rcx], xmm0
jmp 0x1400d0943
mov eax, dword [0x141dd44f0]
xor edx, edx
div dword [0x141dd44f4]
mov r13d, eax
or r13d, 0x5000c481
and r13d, 0x7964c581
xor r13d, 0xcb9aa85e
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r13d, 0xb05331b4
jbe 0x1400d089f
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d0842
mov r13, qword [rbp + 0x60]
mov eax, dword [0x141dd44f8]
xor edx, edx
div dword [0x141dd44fc]
and eax, 0x4c0c2e54
cmp eax, 0xd3d056c3
je 0x1400d08a3
xor eax, eax
test al, al
mov rcx, qword [rbp + 0x88]
je 0x1400d08e0
mov rax, qword [rbp - 0x30]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rcx], xmm0
nop dword [rax]
mov rax, qword [rbp - 0x30]
mov qword [rcx + 0x10], rax
mov eax, dword [0x141dd4500]
sub eax, dword [0x141dd4504]
and eax, 0x7c772df1
add eax, 0xe550c713
or eax, 0xe729473
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rcx], xmm0
cmp eax, 0xaf7922d8
ja 0x1400d08e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4508]
add eax, dword [0x141dd450c]
and eax, 0xa2e0922f
imul eax, eax, 0xe995e1e
add eax, 0xd8454286
cmp eax, 0x732c9b5d
ja 0x1400d0920
mov rsi, qword [rbp + 0xb0]
lea rdx, [rsi + 0x48]
xor eax, eax
mov r12, qword [rbp + 0xa0]
mov ecx, dword [rbp + 0x40]
nop word [rax + rax]
test al, al
jne 0x1400d0960
test ecx, ecx
je 0x1400d11e3
cmp ecx, 1
je 0x1400d09c0
mov rax, qword [rsi + 0x58]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4510]
sub ecx, dword [0x141dd4514]
shr ecx, 2
imul rcx, rcx, 0x83b9df
shr rcx, 0x34
imul ecx, ecx, 0x12500d36
cmp ecx, 0x9f4d5f02
je 0x1400d0980
test rax, rax
jne 0x1400d11e3
nop word cs:[rax + rax]
mov eax, dword [0x141dd4518]
sub eax, dword [0x141dd451c]
add eax, 0x8eb6330d
and eax, 0xb136ff14
imul rax, rax, 0x5bf068ff
shr rax, 0x3d
cmp eax, 0xafd68b22
ja 0x1400d09c0
mov qword [rbp + 0x88], rdx
mov eax, dword [0x141dd4520]
add eax, dword [0x141dd4524]
imul rax, rax, 0x7ae69231
shr rax, 0x3e
or eax, 0x81ce1ec8
cmp eax, 0xff0ed102
jbe 0x1400d0a30
sub rsp, 0x20
lea r8, [rbp - 0x40]
mov r9d, 0x30
mov rcx, r12
mov rdx, r13
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
mov rbx, r12
lea r12, [rbp - 0x40]
mov rsi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
nop
mov eax, dword [0x141dd4528]
sub eax, dword [0x141dd452c]
and eax, 0xd3add96f
imul edi, eax, 0x61c6b19c
add edi, 0xf46ecd40
sub rsp, 0x20
mov r9d, 0x30
mov rcx, rbx
mov rdx, r13
mov r8, r12
call rsi
add rsp, 0x20
cmp edi, 0x679a1443
jb 0x1400d0a40
mov rsi, qword [rbp + 0xb0]
movabs rdi, 0x8000000000000000
mov rdx, qword [rbp + 0xa0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4530]
sub ecx, dword [0x141dd4534]
and ecx, 0x1ecf6286
xor ecx, 0xdff5f681
imul ecx, ecx, 0xe065f6ab
cmp ecx, 0x786cbe48
jb 0x1400d0aa0
test rax, rax
je 0x1400d0b1f
nop dword [rax + rax]
mov eax, dword [0x141dd4538]
or eax, dword [0x141dd453c]
imul eax, eax, 0xf23b0ac4
or eax, 0xac731363
and eax, 0xac7bf363
cmp eax, 0x8614e253
jb 0x1400d0ad0
mov r9, qword [rbp - 0x40]
sub r9, r13
add r9, qword [rbp - 0x28]
sub rsp, 0x20
lea rcx, [rbp - 0x10]
mov r8, r13
call fcn.1400d46f0
add rsp, 0x20
mov rax, qword [rbp - 0x10]
cmp rax, rdi
jne 0x1400d0d5d
mov r15, qword [rsi + 0x50]
mov rax, qword [rsi + 0x58]
mov qword [rbp + 0xa8], rax
xor eax, eax
test al, al
jne 0x1400d0b30
cmp qword [rbp + 0xa8], 0
je 0x1400d0c38
xor r14d, r14d
mov r12d, 0xca9e51df
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400d0b60
mov rbx, rsi
shl rbx, 5
cmp qword [r15 + rbx], 0
je 0x1400d0bfe
add rbx, r15
mov eax, dword [0x141dd4540]
and eax, dword [0x141dd4544]
and eax, 0xe68f647
imul eax, eax, 0xa54a6054
or eax, 0xc6fec0ca
cmp eax, 0x29674d85
jae 0x1400d0bc0
mov r8, qword [rbx + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r13
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd4548]
sub eax, dword [0x141dd454c]
imul edi, eax, 0x6cae04fe
or edi, 0xfd86ee9f
add edi, 0xcac84242
mov r8, qword [rbx + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r13
add rsp, 0x20
cmp edi, 0xbacd34e
jb 0x1400d0bc0
inc rsi
mov eax, dword [0x141dd4550]
sub eax, dword [0x141dd4554]
imul rax, r12
shr rax, 0x3f
or eax, 0x3d60af8
cmp eax, 0x8e6ea89a
ja 0x1400d0c01
cmp rsi, qword [rbp + 0xa8]
movabs rdi, 0x8000000000000000
jne 0x1400d0b60
mov eax, dword [0x141dd4558]
xor edx, edx
div dword [0x141dd455c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4560]
sub eax, dword [0x141dd4564]
or eax, 0x880a4808
and eax, 0xc82ae82a
cmp eax, 0xed184623
ja 0x1400d0c50
mov rax, qword [rbp + 0x88]
cmp qword [rax], 0
mov rsi, qword [rbp + 0xb0]
mov r14, qword [rbp + 0x90]
je 0x1400d0ca2
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd4568]
add eax, dword [0x141dd456c]
imul rax, rax, 0x5c8646d3
shr rax, 0x3d
add eax, 0xec7dcf4f
or eax, 0xae0db34d
cmp eax, 0x47e81eb0
jae 0x1400d0cda
mov qword [rsi + 0x48], 0
mov qword [rsi + 0x50], 8
mov r15, qword [rbp + 0x98]
mov r12, qword [rbp + 0xa0]
nop dword [rax + rax]
mov eax, dword [0x141dd4570]
or eax, dword [0x141dd4574]
imul eax, eax, 0x1992a19c
add eax, 0x4d8066f2
and eax, 0x5f83bd24
mov qword [rsi + 0x48], 0
mov qword [rsi + 0x50], 8
cmp eax, 0x61b9edaf
ja 0x1400d0cf0
mov qword [rsi + 0x58], 0
mov eax, 0x95ad3b03
mov ecx, dword [0x141dd4578]
xor ecx, dword [0x141dd457c]
add ecx, 0xc81f9af0
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x7ac699c8
cmp ecx, 0x14e23ebb
ja 0x1400d0d30
jmp 0x1400d11e3
mov qword [rbp + 0x60], rax
mov eax, dword [str.A_y_v]
and eax, dword [0x141dd4584]
imul eax, eax, 0x274bcb37
and eax, 0x1edfacbf
cmp eax, 0x6f8abbc5
je 0x1400d0d61
mov eax, dword [0x141dd4588]
and eax, dword [0x141dd458c]
add eax, 0x58713a8c
xor eax, 0x42d4e810
or eax, 0x9c2a1762
cmp eax, 0xfd8204c2
jbe 0x1400d0da9
mov qword [rsi + 0x58], 0
mov r13, qword [rbp - 8]
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov rcx, rsi
mov eax, dword [0x141dd4590]
imul eax, dword [0x141dd4594]
or eax, 0x8112001
xor eax, 0x8001841
or eax, 0xd7eac6aa
mov r12, qword [rcx + 0x50]
mov rsi, qword [rcx + 0x58]
mov qword [rcx + 0x58], 0
cmp eax, 0x76f514dc
je 0x1400d0dbb
test rsi, rsi
je 0x1400d0e69
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r15d, r15d
mov eax, dword [0x141dd45b0]
xor edx, edx
div dword [0x141dd45b4]
mov eax, dword [0x141dd45b8]
xor eax, dword [0x141dd45bc]
add eax, 0x6282b52
cmp eax, 0x3de4967f
jb 0x1400d0e0d
mov rax, r15
shl rax, 5
cmp qword [r12 + rax], 0
je 0x1400d0e4e
add rax, r12
mov r8, qword [rax + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
inc r15
nop word cs:[rax + rax]
test bl, bl
jne 0x1400d0e60
cmp r15, rsi
jne 0x1400d0dff
mov rbx, r13
mov rax, qword [rbp + 0xa8]
lea r15, [rax*2]
add r15, r13
mov eax, dword [0x141dd4598]
add eax, dword [0x141dd459c]
and eax, 0xfd9ed1e4
imul eax, eax, 0xbf2a470
cmp eax, 0xced5acf5
je 0x1400d0e7e
mov r14, qword [rbp + 0x90]
mov eax, dword [0x141dd45a0]
or eax, dword [0x141dd45a4]
or eax, 0x81f02c00
and eax, 0xc9f06e04
add eax, 0x3583ecc9
cmp eax, 0x61a2046d
jb 0x1400d0ea3
mov eax, dword [0x141dd45a8]
add eax, dword [0x141dd45ac]
imul rax, rax, 0x4da686e9
shr rax, 0x3b
or eax, 0x5691a805
imul eax, eax, 0x6cda2a66
cmp eax, 0xbfc32b88
jb 0x1400d0ec5
xor r13d, r13d
lea r11, [rbp - 0x40]
xor esi, esi
cmp rsi, qword [rbp + 0xa8]
je 0x1400d1167
lea rdx, [rbx + rsi*2]
xor eax, eax
xor r8d, r8d
mov rcx, rdx
cmp word [rcx], 0
je 0x1400d0fa0
mov r9d, dword [0x141dd45c0]
imul r9d, dword [0x141dd45c4]
cmp r9d, 0x904dc08b
je 0x1400d0f1a
add rcx, 2
inc r8
mov r9d, dword [0x141dd45c8]
add r9d, dword [0x141dd45cc]
or r9d, 0xb46d8023
add r9d, 0x1195b3e4
imul r9, r9, 0x12f0f0a5
shr r9, 0x3c
cmp r9d, 0xbf0ce145
ja 0x1400d0f39
nop dword [rax]
mov r9d, dword [0x141dd45d0]
or r9d, dword [0x141dd45d4]
add r9d, 0xc278465c
cmp r9d, 0xe222bd6f
ja 0x1400d0f70
add rax, 2
cmp rcx, r15
jne 0x1400d0f10
jmp 0x1400d1167
add rsi, r8
jb 0x1400d15f0
mov ecx, dword [0x141dd4600]
sub ecx, dword [0x141dd4604]
add ecx, 0x2ebd163b
imul r9, rcx, 0xfe14887
shr r9, 0x20
sub ecx, r9d
shr ecx, 1
add ecx, r9d
shr ecx, 0x1e
cmp ecx, 0x1eeafe74
je 0x1400d0fa9
cmp rsi, qword [rbp + 0xa8]
ja 0x1400d163a
mov ecx, dword [0x141dd4618]
and ecx, dword [0x141dd461c]
add ecx, 0x81e8ab5e
xor ecx, 0x3a199f4e
add ecx, 0xf855e599
cmp ecx, 0x49af9793
ja 0x1400d0fe6
mov rcx, rdx
mov r9d, dword [0x141dd4638]
mov r10d, dword [0x141dd463c]
add r9d, r10d
add r9d, 0x6bf3cb04
or r9d, 0x91e3dac9
cmp r9d, 0x97ec82fe
je 0x1400d100f
test rax, rax
je 0x1400d1167
add rax, 0xfffffffffffffffe
cmp word [rcx], 0x3d
lea rcx, [rcx + 2]
jne 0x1400d100f
sub rsp, 0x20
mov rcx, r11
call fcn.14008a680
add rsp, 0x20
mov rax, qword [rbp + 0x88]
cmp r13, qword [rax]
jne 0x1400d10ab
sub rsp, 0x20
mov rcx, qword [rbp + 0x88]
call fcn.1400179d0
add rsp, 0x20
mov rax, qword [rbp + 0xb0]
mov r12, qword [rax + 0x50]
mov eax, dword [0x141dd4640]
and eax, dword [0x141dd4644]
add eax, 0xf9831f50
or eax, 0x79412ac8
xor eax, 0xa6fd0b6c
cmp eax, 0xbffe79c9
jb 0x1400d1089
mov rax, r13
shl rax, 5
movups xmm0, xmmword [rbp - 0x40]
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [r12 + rax + 0x10], xmm1
movups xmmword [r12 + rax], xmm0
inc r13
mov rax, qword [rbp + 0xb0]
mov qword [rax + 0x58], r13
inc rsi
cmp rsi, qword [rbp + 0xa8]
lea r11, [rbp - 0x40]
jbe 0x1400d0ef7
mov eax, dword [0x141dd45d8]
xor edx, edx
div dword [0x141dd45dc]
add eax, 0x8c5535ab
or eax, 0x6a81af6f
xor eax, 0xa40cd5b8
cmp eax, 0x1c6bab71
jae 0x1400d110d
ud2
mov eax, dword [0x141dd45e0]
xor eax, dword [0x141dd45e4]
imul eax, eax, 0xdd7ad60f
imul rcx, rax, 0x28bc0e0f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x397d6f6e
ud2
mov eax, dword [0x141dd45f0]
xor eax, dword [0x141dd45f4]
cmp eax, 0xc92bafdd
je 0x1400d1167
cmp qword [rbp + 0x60], 0
mov rsi, qword [rbp + 0xb0]
mov r15, qword [rbp + 0x98]
mov r12, qword [rbp + 0xa0]
je 0x1400d11e3
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd45f8]
imul eax, dword [0x141dd45fc]
add eax, 0x6fe2feb6
imul rcx, rax, 0x1b2a0c3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul eax, eax, 0xc39d8f0e
cmp eax, 0x3b54cbf7
ja 0x1400d11b0
lea r8, [rsi + 0x98]
mov eax, dword [rbp + 0x38]
test eax, eax
je 0x1400d1225
cmp eax, 1
jne 0x1400d122a
nop word cs:[rax + rax]
mov eax, dword [0x141dd4650]
xor edx, edx
div dword [0x141dd4654]
or eax, 0xf65fdfba
imul eax, eax, 0x73b06ea
cmp eax, 0x9856ef6e
jae 0x1400d1200
mov r13b, 1
jmp 0x1400d129e
xor r13d, r13d
jmp 0x1400d129e
cmp eax, 2
jne 0x1400d12fc
mov rax, qword [r8]
mov ecx, 0xdafe25cb
nop dword [rax + rax]
mov edx, dword [0x141dd4658]
and edx, dword [0x141dd465c]
imul rdx, rdx, 0x3f18a9c3
shr rdx, 0x3b
imul edx, edx, 0x609928f6
imul rdx, rcx
shr rdx, 0x3e
cmp rax, rdi
sete r13b
cmp edx, 0x18c957f5
ja 0x1400d1240
nop word cs:[rax + rax]
mov eax, dword [0x141dd4660]
imul eax, dword [0x141dd4664]
add eax, 0x8da2e0c0
and eax, 0x37201130
cmp eax, 0x3d87f98b
je 0x1400d1280
mov rax, qword [rbp + 0xb0]
lea rdx, [rax + 0xb8]
nop dword [rax]
mov eax, dword [0x141dd4668]
imul eax, dword [0x141dd466c]
xor eax, 0x3928840
and eax, 0x8b93aa49
cmp eax, 0xb5dee1de
ja 0x1400d12b0
mov eax, dword [rbp + 0x68]
test eax, eax
je 0x1400d1323
cmp eax, 1
je 0x1400d1330
cmp qword [rdx], rdi
sete al
mov ecx, dword [0x141dd4670]
xor ecx, dword [0x141dd4674]
or ecx, 0xd4462e23
cmp ecx, 0xd3eb740a
je 0x1400d12e0
jmp 0x1400d1325
mov eax, dword [0x141dd4648]
and eax, dword [0x141dd464c]
add eax, 0xa0b0781
xor eax, 0x386c116f
add eax, 0x6d4c8ce1
cmp eax, 0x6bc66b9d
jb 0x1400d12fc
jmp 0x1400ce933
xor eax, eax
or al, r13b
cmp al, 1
jne 0x1400d1ad0
mov qword [rbp + 0x88], rdx
mov qword [rbp + 0xa8], r8
mov eax, dword [0x141dd4678]
add eax, dword [0x141dd467c]
imul rax, rax, 0x4aa13293
shr rax, 0x3e
add eax, 0xe7ebf2d3
cmp eax, 0xc05767a
jae 0x1400d1380
sub rsp, 0x20
lea rcx, [rbp - 0x80]
mov rdx, r12
mov r8, qword [rbp + 0x50]
mov r9, qword [rbp + 0x80]
call fcn.1400d46f0
add rsp, 0x20
lea r15, [rbp - 0x80]
mov rbx, qword [rbp + 0x80]
mov r14, qword [rbp + 0x50]
nop
mov esi, dword [0x141dd4680]
imul esi, dword [0x141dd4684]
or esi, 0x4924058
xor esi, 0x20884650
or esi, 0x5a45b9a7
sub rsp, 0x20
mov rcx, r15
mov rdx, r12
mov r8, r14
mov r9, rbx
call fcn.1400d46f0
add rsp, 0x20
cmp esi, 0xae139ee9
je 0x1400d1390
mov r15, qword [rbp + 0x98]
mov rbx, qword [rbp + 0xa8]
mov r14, qword [rbp + 0x90]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4688]
xor eax, dword [0x141dd468c]
cmp eax, 0x11bff55f
je 0x1400d13f0
mov r10, qword [rbp - 0x80]
nop word [rax + rax]
mov eax, dword [0x141dd4690]
mov ecx, dword [0x141dd4694]
add eax, ecx
add eax, 0xa19a799f
imul rax, rax, 0x2a0d9dbd
shr rax, 0x3a
and eax, 0xfffffff8
cmp eax, 0x85df5d2d
ja 0x1400d1410
cmp r10, rdi
jne 0x1400d14a0
mov rax, qword [rbx]
mov ecx, dword [0x141dd46d0]
sub ecx, dword [0x141dd46d4]
imul ecx, ecx, 0x46d3afc8
cmp ecx, 0x5862173f
je 0x1400d1440
shl rax, 1
test rax, rax
je 0x1400d19f3
xor eax, eax
test al, al
jne 0x1400d1468
mov eax, dword [0x141dd46d8]
imul eax, dword [0x141dd46dc]
add eax, 0xf6e6168e
xor eax, 0xb9853526
add eax, 0x12725adb
cmp eax, 0x557f5b45
mov rdi, qword [rbp + 0xb0]
jae 0x1400d1960
jmp 0x1400d19aa
mov eax, dword [0x141dd4698]
and eax, dword [0x141dd469c]
add eax, 0x110916e4
cmp eax, 0x3cb0b292
ja 0x1400d14a0
mov eax, dword [0x141dd46a0]
xor edx, edx
div dword [0x141dd46a4]
shr eax, 2
imul rax, rax, 0x277a8119
shr rax, 0x3b
xor eax, 0x1979fee1
imul eax, eax, 0xc5736b5a
cmp eax, 0xa10f05f0
mov rsi, qword [rbp - 0x78]
nop dword [rax + rax]
mov eax, dword [0x141dd46a8]
add eax, dword [0x141dd46ac]
xor eax, 0xc7436689
imul eax, eax, 0xbff6b26a
cmp eax, 0xfef1c1c8
ja 0x1400d14f0
mov r14, qword [rbp - 0x70]
test r14, r14
mov qword [rbp + 0x80], r10
je 0x1400d15c8
lea rcx, [rsi + r14*2]
xor eax, eax
mov edx, 0xc7b24653
mov r8, rsi
mov r9d, dword [0x141dd46b0]
and r9d, dword [0x141dd46b4]
add r9d, 0xe76b1c93
or r9d, 0xc5c0ba4e
cmp r9d, 0x58f21b88
je 0x1400d1530
cmp word [r8], 0
je 0x1400d15cd
add r8, 2
inc rax
mov r9d, dword [0x141dd46b8]
or r9d, dword [0x141dd46bc]
imul r9, rdx
shr r9, 0x3f
add r9d, 0xec466dc9
and r9d, 0xc044d4a
cmp r9d, 0x149d8db4
je 0x1400d1563
mov r9d, dword [0x141dd46c0]
imul r9d, dword [0x141dd46c4]
or r9d, 0x1a2e93d8
add r9d, 0xa6da6a4
or r9d, 0x9dd950cd
cmp r9d, 0x69c5f532
jb 0x1400d1590
cmp r8, rcx
jne 0x1400d1530
jmp 0x1400d15d6
xor r14d, r14d
jmp 0x1400d15d6
xor ecx, ecx
test cl, cl
jne 0x1400d15cf
mov r14, rax
xor eax, eax
test al, al
mov r12d, dword [rbp + 0x68]
mov rbx, qword [rbp + 0x88]
je 0x1400d16a4
jmp 0x1400d1702
xor eax, eax
test al, al
je 0x1400d15f8
ud2
mov eax, dword [0x141dd4608]
xor eax, dword [0x141dd460c]
and eax, 0xd083b009
add eax, 0xa0fd3094
ud2
mov eax, dword [0x141dd4620]
and eax, dword [0x141dd4624]
xor eax, 0x180000
or eax, 0xc6a05935
and eax, 0xe6b87bbf
cmp eax, 0xb662c662
jne 0x1400d165e
ud2
mov eax, dword [0x141dd4628]
or eax, dword [0x141dd462c]
and eax, 0x7e538860
add eax, 0xb2ce3525
xor eax, 0x5011928a
ud2
mov eax, dword [0x141dd46c8]
add eax, dword [0x141dd46cc]
and eax, 0x3e80f29f
add eax, 0x28f0c070
imul rdi, rax, 0x56c87f59
shr rdi, 0x3d
sub rsp, 0x20
lea rcx, [rbp - 0x10]
mov rdx, rsi
mov r8, r14
call fcn.14008a680
add rsp, 0x20
mov r15, qword [rbp - 8]
mov r8, qword [rbp]
sub rsp, 0x20
mov ecx, r12d
mov rdx, r15
mov r9, rbx
call fcn.1400d5590
add rsp, 0x20
cmp edi, 0x3c88ac72
jne 0x1400d1739
sub rsp, 0x20
lea rcx, [rbp - 0x10]
mov rdx, rsi
mov r8, r14
call fcn.14008a680
add rsp, 0x20
mov rdx, qword [rbp - 8]
mov r8, qword [rbp]
sub rsp, 0x20
mov ecx, r12d
mov r9, rbx
call fcn.1400d5590
add rsp, 0x20
jmp 0x1400d16a4
test r13b, r13b
je 0x1400d189b
xor eax, eax
movabs rdi, 0x8000000000000000
mov r12, qword [rbp + 0x80]
test al, al
jne 0x1400d1755
movups xmm0, xmmword [rbp - 0x10]
movups xmm1, xmmword [rbp]
movaps xmmword [rbp - 0x30], xmm1
movaps xmmword [rbp - 0x40], xmm0
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax]
shl rax, 1
test rax, rax
je 0x1400d181e
mov rax, qword [rbp + 0xb0]
mov rbx, qword [rax + 0xa0]
mov r14, qword [0x141dd7fe0]
mov eax, dword [0x141dd4700]
sub eax, dword [0x141dd4704]
or eax, 0xc771bf8e
add eax, 0xf12e31b3
or eax, 0x7e233d24
cmp eax, 0x38d44dc0
jae 0x1400d17cc
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd4708]
xor edx, edx
div dword [0x141dd470c]
mov r15d, eax
add r15d, 0x286e12dd
shr r15d, 1
mov eax, 0xc98dcd41
imul r15, rax
shr r15, 0x3c
add r15d, 0xe01f938f
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
add rsp, 0x20
cmp r15d, 0x16de67b5
jb 0x1400d17d3
mov eax, dword [0x141dd4710]
and eax, dword [0x141dd4714]
xor eax, 0xf5cd7903
imul rax, rax, 0x30b54f0f
shr rax, 0x3d
cmp eax, 0xe3c4b411
mov rcx, qword [rbp + 0xa8]
jne 0x1400d1857
movaps xmm0, xmmword [rbp - 0x40]
movaps xmm1, xmmword [rbp - 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov r14, qword [rbp + 0x90]
mov eax, dword [0x141dd4718]
xor eax, dword [0x141dd471c]
and eax, 0xe0fc5e95
imul eax, eax, 0xe74a432e
imul rax, rax, 0x7407c7d5
shr rax, 0x3e
movaps xmm0, xmmword [rbp - 0x40]
movaps xmm1, xmmword [rbp - 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
cmp eax, 0xe32e100e
ja 0x1400d185e
jmp 0x1400d192f
mov rax, qword [rbp - 0x10]
xor ecx, ecx
mov r14, qword [rbp + 0x90]
movabs rdi, 0x8000000000000000
mov r12, qword [rbp + 0x80]
test cl, cl
jne 0x1400d18b9
test rax, rax
je 0x1400d192f
mov eax, dword [0x141dd4720]
imul eax, dword [0x141dd4724]
mov ecx, 0xdc5b521b
imul rcx, rax
shr rcx, 0x3b
xor ecx, 0x1491891
or ecx, 0xc696e50e
cmp ecx, 0xfb3e38fa
jne 0x1400d18f7
mov rax, qword [0x141dd7fe0]
mov eax, dword [0x141dd4728]
add eax, dword [0x141dd472c]
and eax, 0x6aa18350
imul eax, eax, 0x7a1af3fe
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x74cea5d1
ja 0x1400d18f7
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test r12, r12
mov r15, qword [rbp + 0x98]
je 0x1400d1ad0
mov eax, dword [0x141dd4730]
or eax, dword [0x141dd4734]
add eax, 0x8e4f6f5b
cmp eax, 0x36b19d2a
jbe 0x1400d1a54
jmp 0x1400d1a79
mov eax, dword [0x141dd46e0]
xor eax, dword [0x141dd46e4]
or eax, 0x6357f544
mov esi, 0x83fbdfc9
imul rsi, rax
shr rsi, 0x3e
add esi, 0x23f2e867
mov r8, qword [rdi + 0xa0]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x3fca22cf
jbe 0x1400d19ca
mov r8, qword [rdi + 0xa0]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d1960
movabs rdi, 0x8000000000000000
mov eax, dword [0x141dd46e8]
xor edx, edx
div dword [0x141dd46ec]
or eax, 0xffb34fff
add eax, 0x7c0030e0
cmp eax, 0xc08ac71b
ja 0x1400d19d4
mov eax, dword [0x141dd46f0]
xor edx, edx
div dword [0x141dd46f4]
or eax, 0x80308000
and eax, 0x89f0ac56
shr eax, 1
imul rax, rax, 0x48dbfc45
shr rax, 0x3c
cmp eax, 0x11569789
jbe 0x1400d1a30
mov qword [rbx], rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd46f8]
xor edx, edx
div dword [0x141dd46fc]
or eax, 0x559159cb
add eax, 0x9ae5e726
mov qword [rbx], rdi
cmp eax, 0x1dc835d8
jb 0x1400d1a30
jmp 0x1400d1ad0
mov eax, dword [0x141dd4738]
sub eax, dword [0x141dd473c]
imul eax, eax, 0x385a527b
and eax, 0x38b73b6e
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x64a61f56
jne 0x1400d1a82
mov rax, qword [0x141dd7fe0]
jmp 0x1400d1a54
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd4740]
imul eax, dword [0x141dd4744]
xor eax, 0x232ff3e3
add eax, 0x6022c30b
or eax, 0x700998a6
cmp eax, 0x62fd3c9e
jb 0x1400d1aa0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4748]
imul eax, dword [0x141dd474c]
and eax, 0x396b8d24
imul eax, eax, 0xdfcdc3c5
cmp eax, 0x755c76eb
jb 0x1400d1ad0
mov r12, qword [rbp + 0xb0]
mov r13, qword [rbp + 0x10]
nop word [rax + rax]
mov eax, dword [0x141dd4750]
xor eax, dword [0x141dd4754]
imul eax, eax, 0x86d3f83d
or eax, 0xfffcf779
cmp eax, 0xe0b38133
jb 0x1400d1b00
jmp 0x1400cf7f1
mov eax, dword [0x141dd4768]
mov ecx, dword [0x141dd476c]
lea esi, [rax + rcx]
add esi, 0x3c147a4
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, rbx
mov rdx, qword [rbp + 0x70]
mov r8, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp esi, 0x3d474c76
jbe 0x1400d1b90
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, rbx
mov rdx, qword [rbp + 0x70]
mov r8, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1400d1b23
mov ecx, dword [0x141dd4770]
sub ecx, dword [0x141dd4774]
and ecx, 0x3f2fc09d
add ecx, 0x73e9bffa
and ecx, 0x2d27a400
cmp ecx, 0xf70ba3ee
ja 0x1400d1b90
test eax, eax
mov rsi, qword [rbp - 0x58]
je 0x1400d1e29
nop word cs:[rax + rax]
mov eax, dword [0x141dd4780]
and eax, dword [0x141dd4784]
xor eax, 0x380eae38
shr eax, 3
imul rax, rax, 0x2d9ee5a3
shr rax, 0x35
add eax, 0x8b587567
cmp eax, 0x48dcd75f
jb 0x1400d1bd0
mov edx, dword [r15 + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, qword [rbp + 0xa0]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4788]
sub ecx, dword [0x141dd478c]
imul ecx, ecx, 0x73bbe520
add ecx, 0x68980aec
or ecx, 0x40e85c8f
cmp ecx, 0xd1d1b37e
jb 0x1400d1c30
test eax, eax
mov r10, qword [rbp + 0x78]
mov ecx, dword [rbp + 0x30]
je 0x1400d1e55
nop word cs:[rax + rax]
mov eax, dword [0x141dd47a0]
add eax, dword [0x141dd47a4]
imul eax, eax, 0xe74cc095
and eax, 0x9fd72828
add eax, 0xeb8e115a
cmp eax, 0x72122df2
jb 0x1400d1c70
movzx r15d, word [rsi + 0x24]
mov edx, dword [rsi + 0x28]
mov ebx, dword [rsi + 0x44]
movzx r12d, word [rsi + 0x40]
mov rax, qword [rbp + 0xb0]
lea r13, [rax + 0x30]
nop
mov eax, dword [0x141dd47a8]
and eax, dword [0x141dd47ac]
imul eax, eax, 0x34f541c1
add eax, 0x6ef99140
and eax, 0x51986a53
cmp eax, 0x7892d02f
je 0x1400d1cb0
mov eax, dword [rsi + 0x48]
mov qword [rbp + 0x98], rax
test ecx, ecx
mov qword [rbp - 0x58], rdx
je 0x1400d2b0d
cmp ecx, 1
je 0x1400d1d3c
cmp ecx, 2
jne 0x1400d1ef0
mov eax, dword [0x141dd47b0]
xor edx, edx
div dword [0x141dd47b4]
nop word cs:[rax + rax]
mov eax, dword [0x141dd47b8]
imul eax, dword [0x141dd47bc]
imul eax, eax, 0xbc728c53
cmp eax, 0x7518181a
je 0x1400d1d10
mov rax, qword [rbp + 0xb0]
cmp qword [rax + 0x40], 0
jne 0x1400d2b0d
mov eax, dword [0x141dd47c0]
sub eax, dword [0x141dd47c4]
add eax, 0xa4d099fc
xor eax, 0xbca9af88
imul eax, eax, 0x4a48b27
cmp eax, 0x807e8840
jbe 0x1400d1d65
mov eax, dword [0x141dd7ff0]
mov r14, qword [rbp + 0x48]
nop dword [rax]
mov eax, dword [0x141dd47c8]
sub eax, dword [0x141dd47cc]
imul eax, eax, 0x86923a5b
and eax, 0xef74ebc7
add eax, 0x96eff983
mov ecx, dword [0x141dd7ff0]
cmp eax, 0x7df6cc6d
ja 0x1400d1d70
mov eax, dword [0x141dd47d0]
xor r8d, r8d
xor edx, edx
div dword [0x141dd47d4]
nop word [rax + rax]
test r8b, r8b
jne 0x1400d1db0
nop word cs:[rax + rax]
mov eax, dword [0x141dd47d8]
xor edx, edx
div dword [0x141dd47dc]
add eax, 0x727197a8
imul rax, rax, 0x78cd9b6f
shr rax, 0x3e
cmp eax, 0x82c30f07
je 0x1400d1dc0
cmp ecx, 3
je 0x1400d2290
mov eax, dword [0x141dd47e0]
and eax, dword [0x141dd47e4]
and eax, 0xe909110d
imul eax, eax, 0x6575a915
imul rcx, rax, 0x20869f05
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xad8a453f
jne 0x1400d2248
jmp 0x1400d227b
mov eax, dword [0x141dd4790]
sub eax, dword [0x141dd4794]
imul rax, rax, 0x42304d2d
shr rax, 0x3e
add eax, 0x79271da1
cmp eax, 0x47f5d67
jae 0x1400d1efb
jmp 0x1400d1f34
mov eax, dword [0x141dd4b88]
or eax, dword [0x141dd4b8c]
imul rax, rax, 0x13d6dfbd
shr rax, 0x3c
or eax, 0x997ed0a6
cmp eax, 0xb067bd
jae 0x1400d1e86
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141dd4b90]
add eax, dword [0x141dd4b94]
or eax, 0x40040
and eax, 0x69171547
imul rdi, rax, 0x68f02807
shr rdi, 0x3d
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x2843679b
ja 0x1400d1e90
movabs rdi, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x141dd4b98]
or eax, dword [0x141dd4b9c]
imul eax, eax, 0xea09ebef
add eax, 0x2d74396c
cmp eax, 0x34b93dc4
ja 0x1400d1ed0
jmp 0x1400d1f50
xor eax, eax
test al, al
jne 0x1400d1ef2
jmp 0x1400ce933
mov eax, dword [0x141dd4798]
add eax, dword [0x141dd479c]
imul rsi, rax, 0x1bccaa49
shr rsi, 0x3b
or esi, 0x6601c4aa
xor esi, 0x420b7e61
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x381c467e
jb 0x1400d1f50
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d1efb
mov eax, dword [0x141dd4ba0]
or eax, dword [0x141dd4ba4]
add eax, 0xc0736385
cmp eax, 0x53b6daee
jb 0x1400d1f50
nop dword [rax + rax]
mov eax, dword [0x141dd4ba8]
imul eax, dword [0x141dd4bac]
shr eax, 3
imul rax, rax, 0x252292eb
shr rax, 0x34
and eax, 0x1d
imul eax, eax, 0x556426c7
cmp eax, 0x11a14157
je 0x1400d1f70
movzx eax, byte [r14 + 8]
test eax, eax
je 0x1400d3e35
lea rbx, [r12 + 0x60]
cmp eax, 1
je 0x1400d202d
cmp eax, 2
jne 0x1400d21c0
nop dword [rax + rax]
mov eax, dword [0x141dd4bb8]
and eax, dword [0x141dd4bbc]
imul eax, eax, 0xc9cd86b4
add eax, 0xdd12a882
and eax, 0x23515762
cmp eax, 0xf60e0f91
je 0x1400d1fc0
mov rcx, qword [rbx]
mov eax, dword [0x141dd4bc0]
xor edx, edx
div dword [0x141dd4bc4]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4bc8]
xor eax, dword [0x141dd4bcc]
imul rax, rax, 0x3e8da2a3
shr rax, 0x3c
imul eax, eax, 0x1190d7bd
cmp eax, 0x531dbae8
je 0x1400d2000
cmp rcx, rdi
jne 0x1400d3e35
xor eax, eax
nop
test al, al
jne 0x1400d2030
mov rcx, qword [r12 + 0xf8]
mov eax, dword [0x141dd4bf0]
xor edx, edx
div dword [0x141dd4bf4]
nop word [rax + rax]
mov eax, dword [0x141dd4bf8]
or eax, dword [0x141dd4bfc]
imul eax, eax, 0xe0caca80
add eax, 0xab56fb26
xor eax, 0x3c613b7d
cmp eax, 0xc7b14d20
ja 0x1400d2050
test rcx, rcx
mov rdx, qword [rbp + 0x28]
je 0x1400d21e0
mov rsi, qword [rcx + 0x10]
mov eax, dword [0x141dd4c28]
imul eax, dword [0x141dd4c2c]
or eax, 0x8021
xor eax, 0x500100
and eax, 0x50c339
cmp eax, 0x62900b18
jne 0x1400d20d3
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r13
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
mov r14, qword [sym.imp.psapi.dll_GetModuleFileNameExW]
nop word [rax + rax]
mov eax, dword [0x141dd4c30]
sub eax, dword [0x141dd4c34]
or eax, 0x104c83
and eax, 0x7c304eeb
imul edi, eax, 0xa4ba0ba9
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r13
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x105
call r14
add rsp, 0x20
cmp edi, 0x109e8b67
je 0x1400d20e0
xor ecx, ecx
xor r8d, r8d
nop word cs:[rax + rax]
mov eax, dword [0x141dd4c38]
xor edx, edx
div dword [0x141dd4c3c]
nop
test cl, cl
jne 0x1400d2150
cmp word [r13 + r8*2], 0
je 0x1400d2210
cmp word [r13 + r8*2 + 2], 0
je 0x1400d2206
cmp word [r13 + r8*2 + 4], 0
je 0x1400d220b
mov eax, dword [0x141dd4c40]
xor eax, dword [0x141dd4c44]
xor eax, 0xd3fba5f9
imul eax, eax, 0xc6f55039
add eax, 0x16737d41
cmp eax, 0x6cf9f8d6
ja 0x1400d217b
add r8, 3
cmp r8, 0x105
jne 0x1400d2140
mov r8d, 0x105
jmp 0x1400d222f
mov eax, dword [0x141dd4bb0]
and eax, dword [0x141dd4bb4]
or eax, 0xbbddffaf
and eax, 0xffffffef
cmp eax, 0x4dfb99fa
jb 0x1400d21c0
jmp 0x1400ce933
mov eax, dword [0x141dd4c10]
sub eax, dword [0x141dd4c14]
add eax, 0x78865da
xor eax, 0x55c25935
cmp eax, 0x7a67e143
jae 0x1400d3d4e
jmp 0x1400d3d7e
inc r8
jmp 0x1400d2210
add r8, 2
nop
mov eax, dword [0x141dd4c48]
xor edx, edx
div dword [0x141dd4c4c]
or eax, 0xb3c39766
add eax, 0x4c47fa6c
cmp eax, 0xaccf327
ja 0x1400d2210
sub rsp, 0x20
mov rcx, qword [rbp + 0x28]
mov rdx, r13
call fcn.14008a680
add rsp, 0x20
jmp 0x1400d3db8
mov esi, dword [0x141dd47e8]
and esi, dword [0x141dd47ec]
xor esi, 0x18410a19
and esi, 0x9953aabb
xor esi, 0xfa718fef
sub rsp, 0x20
call fcn.1400fd26e
add rsp, 0x20
cmp esi, 0x454f1852
jae 0x1400d2290
sub rsp, 0x20
call fcn.1400fd26e
add rsp, 0x20
jmp 0x1400d2248
mov eax, dword [0x141dd47f0]
or eax, dword [0x141dd47f4]
add eax, 0x616f5a99
or eax, 0xfa923ad
cmp eax, 0x7cb8573f
je 0x1400d2290
movzx eax, byte [0x141dd7ff4]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd47f8]
sub ecx, dword [0x141dd47fc]
add ecx, 0xb50cc3
or ecx, 0x14010a0
and ecx, 0xb36830a6
cmp ecx, 0x25d16f3f
je 0x1400d22c0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4800]
and ecx, dword [0x141dd4804]
imul rcx, rcx, 0x4e43a185
shr rcx, 0x37
and ecx, 0xffffff80
cmp ecx, 0x4270efcd
ja 0x1400d22f0
test al, al
mov qword [rbp + 0xa8], r15
je 0x1400d2581
sub rsp, 0x20
mov rcx, qword [rbp + 0x18]
mov rdx, qword [rbp + 0xa0]
call fcn.1400d4f00
add rsp, 0x20
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rax + 0x38]
mov qword [rbp + 0x80], rcx
mov r15, qword [rax + 0x40]
test r15, r15
je 0x1400d244e
xor ebx, ebx
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [rbp + 0x80]
nop dword [rax + rax]
mov eax, dword [0x141dd48b0]
sub eax, dword [0x141dd48b4]
or eax, 0xabd5af58
imul eax, eax, 0x24792567
add eax, 0xe575ea71
cmp eax, 0x2510621
jb 0x1400d2370
cmp qword [r14], 0
je 0x1400d2410
mov r12, qword [r14 + 8]
mov eax, dword [0x141dd48b8]
add eax, dword [0x141dd48bc]
imul eax, eax, 0x65d689f2
add eax, 0x9e39e21b
or eax, 0xf04a0675
cmp eax, 0x6dea4a6b
jb 0x1400d23f6
mov edi, dword [0x141dd48c0]
or edi, dword [0x141dd48c4]
add edi, 0xae5eb11d
and edi, 0x20029314
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call rsi
add rsp, 0x20
cmp edi, 0xd77ed120
jne 0x1400d2410
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call rsi
add rsp, 0x20
jmp 0x1400d23c0
mov eax, dword [0x141dd48c8]
xor edx, edx
div dword [0x141dd48cc]
or eax, 0x1240002
and eax, 0xe17e1e26
add eax, 0xffacafe0
cmp eax, 0x60c9aab5
ja 0x1400d2410
add r14, 0x20
inc rbx
dec r15
movabs rdi, 0x8000000000000000
jne 0x1400d2370
mov r10, qword [rbp + 0x78]
mov r14, qword [rbp + 0x90]
mov r15, qword [rbp + 0xa8]
mov eax, dword [0x141dd48d0]
xor eax, dword [0x141dd48d4]
imul eax, eax, 0x6484dc18
cmp eax, 0xcbb210ed
je 0x1400d2460
mov rcx, qword [r13]
mov eax, dword [0x141dd48d8]
xor edx, edx
div dword [0x141dd48dc]
mov rbx, qword [rbp + 0x18]
nop
mov eax, dword [0x141dd48e0]
xor edx, edx
div dword [0x141dd48e4]
and eax, 0xf38e1725
imul eax, eax, 0xca6a6f5a
imul rdx, rax, 0x1f59cde1
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
cmp eax, 0x4f6d9cc8
ja 0x1400d2490
test rcx, rcx
je 0x1400d2555
mov eax, dword [0x141dd48e8]
and eax, dword [0x141dd48ec]
imul rax, rax, 0x487331ff
shr rax, 0x3e
or eax, 0xd30c04bc
cmp eax, 0x3db302c7
jae 0x1400d2500
mov rax, qword [0x141dd7fe0]
nop word [rax + rax]
mov eax, dword [0x141dd48f0]
or eax, dword [0x141dd48f4]
imul eax, eax, 0x805ac582
add eax, 0x8f06ee0b
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x84832b75
ja 0x1400d2500
sub rsp, 0x20
xor esi, esi
xor edx, edx
mov r8, qword [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r10, qword [rbp + 0x78]
nop word cs:[rax + rax]
test sil, sil
jne 0x1400d2550
mov eax, dword [0x141dd48f8]
sub eax, dword [0x141dd48fc]
and eax, 0x40b4a20
or eax, 0xc9e4a113
imul eax, eax, 0x9c9b74ee
cmp eax, 0xd238544a
jbe 0x1400d2a68
jmp 0x1400d2aa4
mov eax, dword [0x141dd4808]
add eax, dword [0x141dd480c]
xor eax, 0x1832902
or eax, 0xde2892e5
imul rax, rax, 0x600946b9
shr rax, 0x3c
cmp eax, 0xe792becd
nop word [rax + rax]
mov eax, dword [0x141dd4810]
xor eax, dword [0x141dd4814]
add eax, 0x89c0be05
and eax, 0xdc3c08e3
add eax, 0xa76ee9d4
cmp eax, 0xeb00d219
ja 0x1400d25b0
mov eax, 0x8836b365
nop word [rax + rax]
mov ecx, dword [0x141dd4818]
imul ecx, dword [0x141dd481c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xa6adafc8
cmp ecx, 0x6fbc6cf2
jb 0x1400d25e0
mov eax, dword [0x141dd4820]
sub eax, dword [0x141dd4824]
add eax, 0xa410bc89
mov ecx, 0x95914797
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x47580c4a
cmp ecx, 0xc8fae452
mov r15, qword [rbp + 0xa0]
je 0x1400d2676
mov eax, dword [0x141dd4828]
mov ecx, dword [0x141dd482c]
add eax, ecx
add eax, 0xc40c5d34
imul rsi, rax, 0xd3a33f3
shr rsi, 0x3a
sub rsp, 0x20
lea rcx, [rbp - 0x40]
mov rdx, r15
mov r8, rbx
mov r9, r12
call fcn.1400d46f0
add rsp, 0x20
cmp esi, 0xbcbe84df
jne 0x1400d2692
sub rsp, 0x20
lea rcx, [rbp - 0x40]
mov rdx, r15
mov r8, rbx
mov r9, r12
call fcn.1400d46f0
add rsp, 0x20
jmp 0x1400d2636
mov rsi, qword [rbp - 0x40]
cmp rsi, rdi
jne 0x1400d271d
mov eax, dword [0x141dd4858]
sub eax, dword [0x141dd485c]
mov qword [r14], 0
xor eax, 0x7783a39f
imul eax, eax, 0xe53c11fc
cmp eax, 0x342904c8
mov r15, qword [rbp + 0xa8]
jae 0x1400d26db
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], 0
mov eax, 0x99aa2f93
mov ecx, dword [0x141dd4860]
or ecx, dword [0x141dd4864]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x4cf5079c
xor ecx, 0xc7299e3b
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], 0
cmp ecx, 0xf68d1e8e
ja 0x1400d26e0
jmp 0x1400d284c
mov eax, dword [0x141dd4830]
and eax, dword [0x141dd4834]
imul rax, rax, 0xa337763
shr rax, 0x3a
imul eax, eax, 0x71393b02
add eax, 0x4d95991a
cmp eax, 0x8fc7d55e
mov r15, qword [rbp + 0xa8]
ja 0x1400d276a
mov rbx, qword [rbp - 0x38]
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
call fcn.1400d4b10
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400d2780
mov rdx, qword [rbp - 0x38]
sub rsp, 0x20
mov rcx, r14
call fcn.1400d4b10
add rsp, 0x20
jmp 0x1400d274d
test rsi, rsi
je 0x1400d284c
mov eax, dword [0x141dd4838]
xor edx, edx
div dword [0x141dd483c]
and eax, 0x1c2abc78
add eax, 0xee92536b
or eax, 0xde56da5
cmp eax, 0xafd6df4a
jb 0x1400d27d1
mov eax, dword [0x141dd4840]
xor eax, dword [0x141dd4844]
add eax, 0xc69965b5
and eax, 0x2b43343e
mov r12, qword [0x141dd7fe0]
cmp eax, 0x1be1f958
jne 0x1400d27da
mov rax, qword [0x141dd7fe0]
jmp 0x1400d27ad
mov eax, dword [0x141dd4848]
imul eax, dword [0x141dd484c]
add eax, 0xd364fb2c
and eax, 0x436dc10
cmp eax, 0xd17a21ad
je 0x1400d2834
mov esi, dword [0x141dd4850]
or esi, dword [0x141dd4854]
add esi, 0xe3be54ef
or esi, 0x59564000
and esi, 0x7b57c424
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x2852711b
jne 0x1400d284c
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d27f8
mov rcx, qword [rbp + 0xb0]
mov r10, qword [rbp + 0x78]
nop word [rax + rax]
mov eax, dword [0x141dd4868]
sub eax, dword [0x141dd486c]
imul eax, eax, 0x274f8e37
or eax, 0x5435a3f6
cmp eax, 0x1516391
je 0x1400d2860
mov rbx, qword [rcx + 0x38]
mov r12, qword [rcx + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4870]
xor eax, dword [0x141dd4874]
xor eax, 0xd8534f42
add eax, 0xb5f4b7
imul rax, rax, 0x15d0e16f
shr rax, 0x3c
cmp eax, 0x411adbdf
ja 0x1400d2890
test r12, r12
je 0x1400d2996
xor esi, esi
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dd4878]
xor edx, edx
div dword [0x141dd487c]
and eax, 0x83e2edfd
add eax, 0xba54818
imul rax, rax, 0x83b1e6b
shr rax, 0x38
cmp eax, 0x9d9ee835
ja 0x1400d28d0
mov rax, rsi
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1400d2947
add rax, rbx
mov ecx, dword [0x141dd4880]
sub ecx, dword [0x141dd4884]
add ecx, 0xd5d4248
xor ecx, 0x3ddfd3a8
cmp ecx, 0x618af80c
ja 0x1400d290b
mov r8, qword [rax + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
mov r10, qword [rbp + 0x78]
inc rsi
nop word [rax + rax]
mov eax, dword [0x141dd4888]
xor eax, dword [0x141dd488c]
imul eax, eax, 0xb9191b3c
and eax, 0x3b8ac454
cmp eax, 0x29511397
je 0x1400d2950
nop
mov eax, dword [0x141dd4890]
add eax, dword [0x141dd4894]
or eax, 0x6ffff2c5
xor eax, 0x6fabc058
cmp eax, 0xdb2409a5
ja 0x1400d2970
cmp rsi, r12
jne 0x1400d28d0
mov rax, qword [r13]
mov r14, qword [rbp + 0x90]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4898]
sub ecx, dword [0x141dd489c]
add ecx, 0xb5aca167
or ecx, 0x598d6da1
add ecx, 0xfe65496d
cmp ecx, 0x46748dac
jb 0x1400d29b0
test rax, rax
je 0x1400d29f9
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, qword [rbp + 0x78]
add rsp, 0x20
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [r13], xmm0
mov ecx, 0xbe960737
nop word cs:[rax + rax]
mov eax, dword [0x141dd48a0]
xor edx, edx
div dword [0x141dd48a4]
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xa210a506
je 0x1400d2a20
nop dword [rax]
mov eax, dword [0x141dd48a8]
add eax, dword [0x141dd48ac]
xor eax, 0x1674b17b
imul rax, rax, 0x8aced17
shr rax, 0x3b
cmp eax, 0xd37450cf
je 0x1400d2a40
jmp 0x1400d2b0d
mov eax, dword [0x141dd4900]
sub eax, dword [0x141dd4904]
add eax, 0x64061af0
mov ecx, 0xda8e41ad
imul rcx, rax
shr rcx, 0x3c
add ecx, 0xcdc2af59
mov rax, qword [rbx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rbx]
movups xmmword [r13], xmm0
cmp ecx, 0x42e3fed7
jae 0x1400d2ac0
mov rax, qword [rbx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rbx]
movups xmmword [r13], xmm0
jmp 0x1400d2a68
mov eax, dword [0x141dd4908]
or eax, dword [0x141dd490c]
imul eax, eax, 0xc269b9fe
or eax, 0x8c8d1496
and eax, 0xcdffbdb6
cmp eax, 0x4660a44a
jb 0x1400d2ac0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4910]
add eax, dword [0x141dd4914]
and eax, 0x1a418b40
add eax, 0xb50c0d15
cmp eax, 0x897360e6
jb 0x1400d2af0
mov r12, qword [rbp + 0xb0]
lea rbx, [r12 + 0x48]
nop dword [rax]
mov eax, dword [0x141dd4918]
mov ecx, dword [0x141dd491c]
add eax, ecx
add eax, 0xf17ea890
xor eax, 0x92440d88
or eax, 0x64b97057
cmp eax, 0xa6579d14
je 0x1400d2b20
mov rsi, qword [rbp + 0x58]
nop dword [rax + rax]
mov eax, dword [0x141dd4920]
and eax, dword [0x141dd4924]
cmp eax, 0x521631a2
je 0x1400d2b50
mov eax, dword [rbp + 0x40]
test eax, eax
je 0x1400d35a4
cmp eax, 1
je 0x1400d2c0f
cmp eax, 2
jne 0x1400d317f
mov eax, dword [0x141dd4930]
or eax, dword [0x141dd4934]
imul eax, eax, 0xbcbc1d8
add eax, 0x532f5c30
and eax, 0x83e03808
cmp eax, 0x1322f87d
jb 0x1400d2b80
nop word cs:[rax + rax]
mov eax, dword [0x141dd4938]
sub eax, dword [0x141dd493c]
imul eax, eax, 0x458e78cf
add eax, 0x27ebad94
or eax, 0xeb981825
cmp eax, 0xad3a14ec
jb 0x1400d2bb0
mov rax, qword [r12 + 0x58]
nop dword [rax + rax]
mov ecx, dword [0x141dd4940]
xor ecx, dword [0x141dd4944]
xor ecx, 0x4dd2d927
add ecx, 0x39114feb
and ecx, 0xcac830fe
cmp ecx, 0x60a7d63c
jb 0x1400d2be0
test rax, rax
jne 0x1400d35a4
mov eax, dword [0x141dd4948]
xor ecx, ecx
xor edx, edx
div dword [0x141dd494c]
nop
test cl, cl
jne 0x1400d2c20
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0x98]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
je 0x1400d2ee0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4958]
and eax, dword [0x141dd495c]
and eax, 0x9c0987fe
imul eax, eax, 0x4598de00
add eax, 0x2942ee00
cmp eax, 0xe0dd755f
ja 0x1400d2c60
mov r9, qword [rsi]
mov r8, qword [rbp + 0x98]
sub r9, r8
add r9, qword [rsi + 0x18]
sub rsp, 0x20
mov rsi, qword [rbp + 0x20]
mov rcx, rsi
mov rdx, qword [rbp + 0xa0]
call fcn.1400d46f0
add rsp, 0x20
mov rax, qword [rsi]
cmp rax, rdi
je 0x1400d2f02
mov qword [rbp + 0x18], rax
mov eax, dword [0x141dd49c0]
xor edx, edx
div dword [0x141dd49c4]
mov r10, qword [rbp + 0x78]
mov eax, 0x801e9ecb
nop word cs:[rax + rax]
mov ecx, dword [0x141dd49c8]
xor ecx, dword [0x141dd49cc]
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x69973dad
and ecx, 0x882398e
cmp ecx, 0xc80f9cc1
ja 0x1400d2ce0
mov qword [rbp + 0xa8], r15
mov rax, qword [rsi + 8]
mov qword [rbp + 0x80], rax
nop word [rax + rax]
mov eax, dword [0x141dd49d0]
mov ecx, dword [0x141dd49d4]
add eax, ecx
add eax, 0x64790f4d
shr eax, 1
imul rax, rax, 0x45682331
shr rax, 0x3c
or eax, 0x5be880e8
cmp eax, 0x4ec40440
jb 0x1400d2d20
mov rax, qword [rsi + 0x10]
mov qword [rbp + 0x58], rax
mov rax, qword [r12 + 0x50]
mov qword [rbp + 0x98], rax
mov rax, r12
mov r12, qword [r12 + 0x58]
mov qword [rax + 0x58], 0
test r12, r12
je 0x1400d31a2
xor r13d, r13d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd49e0]
xor eax, dword [0x141dd49e4]
imul eax, eax, 0xb7cd2bea
cmp eax, 0xa409ca73
je 0x1400d2d90
mov rsi, r13
shl rsi, 5
mov rax, qword [rbp + 0x98]
cmp qword [rax + rsi], 0
je 0x1400d2e62
add rsi, qword [rbp + 0x98]
nop dword [rax]
mov eax, dword [0x141dd49e8]
xor edx, edx
div dword [0x141dd49ec]
or eax, 0x410528c0
and eax, 0x63252ae5
xor eax, 0xc83781a2
cmp eax, 0xeae84ee1
ja 0x1400d2dd0
mov eax, dword [0x141dd49f0]
xor edx, edx
div dword [str.A.]
add eax, 0x266ad6c0
or eax, 0xabeb0004
cmp eax, 0xb1be33b4
je 0x1400d2ebe
mov eax, dword [0x141dd49f8]
or eax, dword [0x141dd49fc]
or eax, 0x9a01f545
imul rcx, rax, 0x31901207
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x18
imul edi, eax, 0x17b10fb8
mov r8, qword [rsi + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
cmp edi, 0xe8adfc74
je 0x1400d2ebe
inc r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd4a00]
and eax, dword [0x141dd4a04]
imul eax, eax, 0x8e947de4
imul rcx, rax, 0x3163bc51
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
xor eax, 0x85cafcc5
cmp eax, 0xc980cd28
ja 0x1400d2e70
cmp r13, r12
mov r10, qword [rbp + 0x78]
movabs rdi, 0x8000000000000000
jne 0x1400d2d90
jmp 0x1400d31a2
mov r8, qword [rsi + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
jmp 0x1400d2e17
mov eax, dword [0x141dd4950]
or eax, dword [0x141dd4954]
xor eax, 0x1410000
or eax, 0x4a24600d
and eax, 0x6b65604d
cmp eax, 0x31aab997
jbe 0x1400d2ee0
mov r13, r15
mov r15, qword [r12 + 0x50]
nop word [rax + rax]
mov eax, dword [0x141dd4960]
add eax, dword [0x141dd4964]
or eax, 0x7028c31e
and eax, 0x78eff79e
cmp eax, 0xf24c1935
je 0x1400d2f10
mov r12, qword [r12 + 0x58]
test r12, r12
je 0x1400d3040
xor esi, esi
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4968]
xor edx, edx
div dword [0x141dd496c]
mov eax, dword [0x141dd4970]
add eax, dword [0x141dd4974]
or eax, 0x23000fa8
add eax, 0x9dff1108
and eax, 0x4425a181
cmp eax, 0xd629abbb
je 0x1400d2f5e
mov rax, rsi
shl rax, 5
cmp qword [r15 + rax], 0
je 0x1400d3015
add rax, r15
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4978]
add ecx, dword [0x141dd497c]
imul ecx, ecx, 0xf9ff3eab
add ecx, 0x6677c9ea
imul rcx, rcx, 0x448b14db
shr rcx, 0x3c
cmp ecx, 0x66b1fbea
ja 0x1400d2fa0
mov r8, qword [rax + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd4980]
xor edx, edx
div dword [0x141dd4984]
and eax, 0xbf6bf62
imul eax, eax, 0xdefec9df
add eax, 0x300231cb
cmp eax, 0xf83c8494
ja 0x1400d2ff0
inc rsi
nop dword [rax + rax]
mov eax, dword [0x141dd4988]
sub eax, dword [0x141dd498c]
cmp eax, 0x93def59d
je 0x1400d3020
cmp rsi, r12
jne 0x1400d2f50
nop dword [rax]
mov eax, dword [0x141dd4990]
imul eax, dword [0x141dd4994]
add eax, 0xcd0ce89e
xor eax, 0xea5c29bb
imul eax, eax, 0x93c365b6
cmp eax, 0xd1e88ef2
je 0x1400d3040
mov rax, qword [rbx]
mov r12, qword [rbp + 0xb0]
nop
mov ecx, dword [0x141dd4998]
and ecx, dword [0x141dd499c]
imul ecx, ecx, 0xed6f339a
imul rcx, rcx, 0x7291e9eb
shr rcx, 0x3e
cmp ecx, 0x9dcb787e
ja 0x1400d3070
test rax, rax
mov r14, qword [rbp + 0x90]
je 0x1400d30bb
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd49a0]
mov ecx, dword [str.nmdc__n]
add eax, ecx
add eax, 0x4644f7c6
and eax, 0x8eb96e49
cmp eax, 0x207ae1c6
jne 0x1400d30e1
mov qword [rbx], 0
mov r10, qword [rbp + 0x78]
mov r15, r13
nop dword [rax + rax]
mov eax, dword [0x141dd49a8]
or eax, dword [0x141dd49ac]
add eax, 0xd6b9c75d
and eax, 0x862ed339
imul eax, eax, 0x6adfe587
mov qword [rbx], 0
cmp eax, 0xa4cff6d5
jb 0x1400d30f0
mov eax, dword [0x141dd49b0]
sub eax, dword [0x141dd49b4]
add eax, 0x4481643b
xor eax, 0xde24325d
add eax, 0xccd0eaed
cmp eax, 0x310f9626
jae 0x1400d3150
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
nop
mov eax, dword [0x141dd49b8]
or eax, dword [0x141dd49bc]
or eax, 0xbf5fb9ee
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
cmp eax, 0xd7d2b039
je 0x1400d3150
jmp 0x1400d3560
mov eax, dword [0x141dd4928]
xor eax, dword [0x141dd492c]
imul eax, eax, 0x425f7d7a
or eax, 0x1a620e4e
cmp eax, 0x5c52f01
je 0x1400d317f
jmp 0x1400ce933
mov rax, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x58]
lea r12, [rax + rcx*2]
nop word cs:[rax + rax]
mov eax, dword [0x141dd49d8]
imul eax, dword [0x141dd49dc]
add eax, 0x3465e636
cmp eax, 0x94aee92b
jb 0x1400d31c0
xor esi, esi
mov edx, 0xb328130b
xor r11d, r11d
mov r15, qword [rbp + 0xa8]
cmp r11, qword [rbp + 0x58]
je 0x1400d3510
mov rax, qword [rbp + 0x80]
lea rax, [rax + r11*2]
xor r13d, r13d
mov qword [rbp + 0x48], rax
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4a08]
and ecx, dword [0x141dd4a0c]
imul ecx, ecx, 0xa79aed0b
add ecx, 0x7834fa08
and ecx, 0x75f3d3db
cmp ecx, 0x73fe9c2b
ja 0x1400d3210
cmp word [rax], 0
je 0x1400d324d
add rax, 2
inc r13
cmp rax, r12
jne 0x1400d3210
jmp 0x1400d3510
add r11, r13
jb 0x1400d3722
mov rcx, qword [rbp + 0x48]
nop word [rax + rax]
mov eax, dword [str._vXV]
sub eax, dword [0x141dd4a34]
or eax, 0x4a110c52
and eax, 0x5a11dc5a
xor eax, 0x45624df4
cmp eax, 0x1c20690c
ja 0x1400d3260
cmp r11, qword [rbp + 0x58]
ja 0x1400d36f9
lea rcx, [rcx + r13*2]
mov eax, dword [0x141dd4a48]
and eax, dword [0x141dd4a4c]
add eax, 0xbb8337d1
imul rax, rdx
shr rax, 0x3f
cmp eax, 0xb0634cff
je 0x1400d3290
mov rax, qword [rbp + 0x48]
nop word cs:[rax + rax]
mov edx, dword [0x141dd4a58]
imul edx, dword [0x141dd4a5c]
add edx, 0x66b73f1
xor edx, 0x6db2980f
add edx, 0x4649562e
cmp edx, 0x31688dd0
jb 0x1400d32c0
cmp rax, rcx
je 0x1400d3510
lea r8, [rax + 2]
mov edx, dword [0x141dd4a60]
imul edx, dword [0x141dd4a64]
xor edx, 0x1bdd2253
imul edx, edx, 0xbe47efb4
and edx, 0x149fd85c
cmp edx, 0x4a575fbe
ja 0x1400d32f4
movzx r9d, word [rax]
nop
mov eax, dword [0x141dd4a68]
xor edx, edx
div dword [0x141dd4a6c]
xor eax, 0x2c010142
and eax, 0x2ca9017b
add eax, 0x356e5473
cmp eax, 0xa608b7a1
ja 0x1400d3320
mov rax, r8
cmp r9w, 0x3d
jne 0x1400d32c0
mov qword [rbp + 0x20], r11
mov qword [rbp + 0x70], rsi
mov eax, dword [0x141dd4a70]
imul eax, dword [0x141dd4a74]
imul eax, eax, 0xf975a339
add eax, 0xd18bbdb8
cmp eax, 0x1cdd9023
mov r15, qword [rbp + 0x48]
jb 0x1400d33ba
mov esi, dword [0x141dd4a78]
or esi, dword [0x141dd4a7c]
or esi, 0xc91174a3
xor esi, 0xb6b03f00
add esi, 0x145593da
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov rdx, r15
mov r8, r13
call fcn.14008a680
add rsp, 0x20
cmp esi, 0x34b94767
jae 0x1400d33d3
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov rdx, r15
mov r8, r13
call fcn.14008a680
add rsp, 0x20
jmp 0x1400d337d
mov eax, dword [0x141dd4a80]
xor edx, edx
div dword [0x141dd4a84]
mov eax, dword [0x141dd4a88]
and eax, dword [0x141dd4a8c]
cmp eax, 0x1e51b4d0
je 0x1400d33e1
mov rax, qword [rbx]
mov r15, qword [rbp + 0xa8]
mov rsi, qword [rbp + 0x70]
mov edx, 0x88b7f491
mov r11, qword [rbp + 0x20]
mov ecx, dword [0x141dd4a90]
xor ecx, dword [0x141dd4a94]
imul ecx, ecx, 0x686fc889
imul rcx, rdx
shr rcx, 0x3e
cmp ecx, 0xa2bb89ac
je 0x1400d340b
cmp rsi, rax
jne 0x1400d3458
sub rsp, 0x20
mov rcx, rbx
call fcn.1400179d0
mov r11, qword [rbp + 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0x50]
mov qword [rbp + 0x98], rax
mov rax, rsi
shl rax, 5
mov rcx, qword [rbp - 0x48]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
mov rcx, qword [rbp + 0x98]
movups xmmword [rcx + rax + 0x10], xmm1
movups xmmword [rcx + rax], xmm0
inc rsi
mov rax, qword [rbp + 0xb0]
mov qword [rax + 0x58], rsi
inc r11
cmp r11, qword [rbp + 0x58]
mov r10, qword [rbp + 0x78]
mov edx, 0xb328130b
jbe 0x1400d31ea
mov eax, dword [0x141dd4a10]
xor edx, edx
div dword [0x141dd4a14]
or eax, 0xce3a4242
imul eax, eax, 0xf19d5554
cmp eax, 0x962a6941
jne 0x1400d34c0
ud2
mov eax, dword [0x141dd4a18]
imul eax, dword [0x141dd4a1c]
imul rax, rax, 0xa072e2b
shr rax, 0x3b
ud2
mov eax, dword [0x141dd4a28]
sub eax, dword [0x141dd4a2c]
add eax, 0xf02d40ef
and eax, 0x1ad370a8
cmp eax, 0x9d0c49d0
je 0x1400d3510
cmp qword [rbp + 0x18], 0
mov r12, qword [rbp + 0xb0]
je 0x1400d3560
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, qword [rbp + 0x78]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd4a98]
xor edx, edx
div dword [0x141dd4a9c]
or eax, 0x13e5c455
cmp eax, 0xcbd7e33e
je 0x1400d3560
nop word [rax + rax]
mov eax, dword [0x141dd4aa0]
mov ecx, dword [0x141dd4aa4]
add eax, ecx
add eax, 0x7893dd93
and eax, 0x20bc6b20
add eax, 0x934511b
cmp eax, 0x6bbd5e22
ja 0x1400d3580
mov rbx, r15
lea r15, [r12 + 0x98]
lea r9, [r12 + 0xb8]
nop word [rax + rax]
mov eax, dword [0x141dd4aa8]
add eax, dword [0x141dd4aac]
imul eax, eax, 0x7d7ae6f6
and eax, 0x58334002
cmp eax, 0x961f8f7d
ja 0x1400d35c0
mov eax, dword [rbp + 0x38]
test eax, eax
je 0x1400d35ef
cmp eax, 1
jne 0x1400d35f4
mov r11b, 1
jmp 0x1400d3600
xor r11d, r11d
jmp 0x1400d3600
cmp qword [r15], rdi
sete r11b
nop dword [rax + rax]
mov eax, dword [0x141dd4ab0]
sub eax, dword [0x141dd4ab4]
imul eax, eax, 0xd2157e1f
add eax, 0xc318b4ff
cmp eax, 0x59216d08
jb 0x1400d3600
mov eax, dword [rbp + 0x68]
test eax, eax
je 0x1400d3675
cmp eax, 1
je 0x1400d36b0
mov rcx, qword [r9]
mov edx, 0xc86d84ff
nop word cs:[rax + rax]
mov r8d, dword [0x141dd4ab8]
sub r8d, dword [0x141dd4abc]
or r8d, 0x2eec5e13
xor r8d, 0x691e5764
imul r8, rdx
shr r8, 0x3d
cmp rcx, rdi
sete al
cmp r8d, 0x8826cf37
ja 0x1400d3640
jmp 0x1400d3677
xor eax, eax
mov ecx, 0x947cb2b9
or al, r11b
nop
mov edx, dword [0x141dd4ac0]
xor edx, dword [str.__byo]
imul rdx, rcx
shr rdx, 0x3e
imul edx, edx, 0x3005e79d
add edx, 0xb49f35a6
cmp edx, 0x862dd0fb
ja 0x1400d3680
test al, al
je 0x1400d3d00
mov dword [rbp + 0x58], r11d
mov qword [rbp + 0x98], r9
mov eax, dword [0x141dd4ac8]
imul eax, dword [0x141dd4acc]
imul eax, eax, 0x273f61d2
add eax, 0xddbeb27c
imul rax, rax, 0x22a81ce9
shr rax, 0x3d
cmp eax, 0xb76c622
mov r12, qword [rbp + 0xa0]
mov r13, qword [rbp - 0x58]
jbe 0x1400d3773
jmp 0x1400d37b1
ud2
mov eax, dword [0x141dd4a38]
imul eax, dword [0x141dd4a3c]
add eax, 0x80d981c4
and eax, 0xb993c94b
xor eax, 0x47e32041
cmp eax, 0xab05071d
jb 0x1400d376f
mov eax, dword [0x141dd4a40]
and eax, dword [0x141dd4a44]
imul rax, rax, 0x50346a8b
shr rax, 0x3e
imul eax, eax, 0xd9a90b6c
ud2
ud2
mov eax, dword [0x141dd4ad0]
imul eax, dword [0x141dd4ad4]
imul esi, eax, 0xc9fc920e
add esi, 0xefe669b0
sub rsp, 0x20
mov rcx, r10
mov rdx, r12
mov r8, r13
mov r9, rbx
call fcn.1400d46f0
mov r10, qword [rbp + 0x78]
add rsp, 0x20
cmp esi, 0x49fbdc31
jae 0x1400d37d0
sub rsp, 0x20
mov rcx, r10
mov rdx, r12
mov r8, r13
mov r9, rbx
call fcn.1400d46f0
mov r10, qword [rbp + 0x78]
add rsp, 0x20
jmp 0x1400d3773
mov r12, qword [r10]
cmp r12, rdi
jne 0x1400d3890
mov eax, dword [0x141dd4af8]
xor edx, edx
div dword [0x141dd4afc]
nop word [rax + rax]
mov eax, dword [0x141dd4b00]
xor eax, dword [0x141dd4b04]
and eax, 0x7d24a9ef
add eax, 0xe4c06a16
cmp eax, 0x1482c4a4
jb 0x1400d37f0
mov rax, qword [r15]
shl rax, 1
test rax, rax
mov r12, qword [rbp + 0xb0]
je 0x1400d3ccd
nop word cs:[rax + rax]
mov eax, dword [0x141dd4b08]
and eax, dword [0x141dd4b0c]
or eax, 0x9844cc
and eax, 0x809944ec
cmp eax, 0xd4ef9e84
ja 0x1400d3830
mov rsi, qword [r12 + 0xa0]
mov eax, dword [str.J_tP]
xor edx, edx
div dword [0x141dd4b14]
add eax, 0x4cf48b06
and eax, 0x7ba49392
add eax, 0x59719475
cmp eax, 0x90ecf768
jae 0x1400d3c90
jmp 0x1400d3cb1
mov eax, dword [0x141dd4ad8]
xor edx, edx
div dword [0x141dd4adc]
and eax, 0x34055974
cmp eax, 0xe0b649b3
je 0x1400d3890
mov rsi, qword [r10 + 8]
mov rax, qword [r10 + 0x10]
mov rcx, qword [rbp - 0x50]
mov edx, 0xbca7bedf
lea r11, [rsi + rax*2]
nop
mov r8d, dword [0x141dd4ae0]
or r8d, dword [0x141dd4ae4]
imul r8d, r8d, 0x210df75d
imul r8, rdx
shr r8, 0x3f
add r8d, 0xc82759bf
cmp r8d, 0x5552a798
jb 0x1400d38c0
xor r8d, r8d
test rax, rax
je 0x1400d3989
mov rdx, rsi
nop dword [rax]
mov r9d, dword [0x141dd4ae8]
or r9d, dword [0x141dd4aec]
add r9d, 0x1e6ece41
or r9d, 0xa769ff9e
imul r9d, r9d, 0x80532622
cmp r9d, 0xe8472ab0
ja 0x1400d3900
cmp word [rdx], 0
je 0x1400d3989
add rdx, 2
inc r8
nop dword [rax]
mov r9d, dword [0x141dd4af0]
or r9d, dword [0x141dd4af4]
imul r10, r9, 0x376ecabf
shr r10, 0x20
sub r9d, r10d
shr r9d, 1
add r9d, r10d
shr r9d, 0x1f
or r9d, 0x284e5c14
imul r9d, r9d, 0x86059cef
cmp r9d, 0xc8e02c3a
je 0x1400d3940
cmp rdx, r11
jne 0x1400d3900
mov r8, rax
sub rsp, 0x20
mov rdx, rsi
mov rdi, rcx
call fcn.14008a680
add rsp, 0x20
mov r14, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x68]
mov rdx, r14
mov r9, qword [rbp + 0x98]
call fcn.1400d5590
add rsp, 0x20
cmp byte [rbp + 0x58], 0
je 0x1400d3a72
nop dword [rax + rax]
mov eax, dword [0x141dd4b18]
and eax, dword [0x141dd4b1c]
imul eax, eax, 0x1b09756b
add eax, 0x34d20d6e
or eax, 0x2ba2ddf6
cmp eax, 0x88f80bd0
je 0x1400d39d0
mov rax, qword [rbp - 0x50]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rcx, qword [rbp - 0x60]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov rax, qword [r15]
shl rax, 1
test rax, rax
movabs rdi, 0x8000000000000000
je 0x1400d3a47
mov rax, qword [rbp + 0xb0]
mov r8, qword [rax + 0xa0]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp - 0x60]
add rsp, 0x20
mov eax, dword [0x141dd4b20]
or eax, dword [0x141dd4b24]
add eax, 0xf111ca96
or eax, 0x6f14d82d
xor eax, 0x888c3f40
cmp eax, 0xdf7e5e39
jbe 0x1400d3b4a
jmp 0x1400d3b7f
mov rcx, qword [rbp - 0x50]
movabs rdi, 0x8000000000000000
mov eax, dword [0x141dd4b30]
sub eax, dword [0x141dd4b34]
and eax, 0x885e0956
imul eax, eax, 0xd67132f3
cmp eax, 0x85c35aec
je 0x1400d3a80
mov rax, qword [rcx]
mov ecx, 0xf8be7e7f
nop word cs:[rax + rax]
mov edx, dword [0x141dd4b38]
imul edx, dword [0x141dd4b3c]
imul rdx, rcx
shr rdx, 0x3d
xor edx, 0x390657d2
add edx, 0x21b7246b
cmp edx, 0x8f60bb1f
ja 0x1400d3ab0
test rax, rax
je 0x1400d3ba0
mov rbx, qword [0x141dd7fe0]
mov eax, dword [0x141dd4b40]
xor eax, dword [0x141dd4b44]
add eax, 0x2928ce33
and eax, 0x3622efd6
cmp eax, 0xa93affc7
jne 0x1400d3b1c
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor r15d, r15d
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call r13
add rsp, 0x20
test r15b, r15b
jne 0x1400d3b30
jmp 0x1400d3ba0
mov eax, dword [0x141dd4b28]
xor edx, edx
div dword [0x141dd4b2c]
add eax, 0x7169dd13
and eax, 0xd9ffdfa6
imul eax, eax, 0x8b507a72
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
cmp eax, 0x26deacce
jae 0x1400d3ba0
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
jmp 0x1400d3b4a
mov eax, dword [0x141dd4b48]
xor edx, edx
div dword [0x141dd4b4c]
cmp eax, 0xd65b285a
je 0x1400d3ba0
mov r14, qword [rbp + 0x90]
nop dword [rax]
mov eax, dword [0x141dd4b50]
imul eax, dword [str.BC3L]
cmp eax, 0xc0969629
je 0x1400d3bc0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4b58]
or eax, dword [0x141dd4b5c]
imul eax, eax, 0x2f6c31d2
add eax, 0x81c83b2e
and eax, 0xb4796326
cmp eax, 0x8a54a194
je 0x1400d3be0
test r12, r12
mov r12, qword [rbp + 0xb0]
je 0x1400d3ce0
mov eax, dword [0x141dd4b60]
or eax, dword [0x141dd4b64]
add eax, 0xabe758f1
xor eax, 0x267e9cc7
mov ecx, 0xda32ca5d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xe82593c0
jbe 0x1400d3c45
mov rax, qword [0x141dd7fe0]
mov eax, 0xa2d26ae9
nop word [rax + rax]
mov ecx, dword [0x141dd4b68]
mov edx, dword [0x141dd4b6c]
add edx, ecx
add edx, 0xb27b6057
imul rdx, rax
shr rdx, 0x3f
mov rcx, qword [0x141dd7fe0]
cmp edx, 0x8062d96e
je 0x1400d3c50
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d3ce0
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edi, edi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test dil, dil
je 0x1400d3ccd
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d3c90
movabs rdi, 0x8000000000000000
mov qword [r15], rdi
nop word [rax + rax]
mov eax, dword [str.P_n_vwR:]
and eax, dword [0x141dd4b74]
and eax, 0x2223810
imul eax, eax, 0x444f518f
cmp eax, 0xceec9811
je 0x1400d3ce0
nop
mov eax, dword [0x141dd4b78]
or eax, dword [0x141dd4b7c]
and eax, 0x4a3a734d
add eax, 0x53996936
or eax, 0xa47ffbb9
cmp eax, 0x75765468
jb 0x1400d3d00
mov r13, qword [rbp + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4b80]
imul eax, dword [0x141dd4b84]
and eax, 0x8a4ed77d
cmp eax, 0x5176379f
je 0x1400d3d30
jmp 0x1400d1f70
mov eax, dword [0x141dd4c18]
and eax, dword [0x141dd4c1c]
imul rcx, rax, 0x27de2b3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xd72714a2
mov qword [rdx], rdi
cmp eax, 0x3f9282a
jne 0x1400d3d90
mov qword [rdx], rdi
jmp 0x1400d3d4e
mov eax, dword [str.l13P]
sub eax, dword [0x141dd4c24]
xor eax, 0xae3ad972
imul rax, rax, 0x7e36da29
shr rax, 0x3e
add eax, 0xdbe014cf
cmp eax, 0x61d68322
jbe 0x1400d3d90
mov eax, 0xb3956ffb
nop dword [rax]
mov ecx, dword [0x141dd4c50]
or ecx, dword [0x141dd4c54]
xor ecx, 0x80c62088
and ecx, 0xafe6accc
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x9f57f4a0
ja 0x1400d3dc0
mov rax, qword [rbx]
shl rax, 1
test rax, rax
mov rcx, qword [rbp + 0x28]
jne 0x1400d3e06
xor eax, eax
test al, al
je 0x1400d3ee7
jmp 0x1400d3f12
mov r8, qword [r12 + 0x68]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0x28]
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400d3ee7
jmp 0x1400d3f12
mov eax, dword [0x141dd4c00]
xor edx, edx
div dword [0x141dd4c04]
imul rcx, rax, 0x2b9f8d5f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0x632069fb
or eax, 0xed091c78
cmp eax, 0x7c5b4c42
mov r8, qword [rbp - 0x68]
jne 0x1400d3e85
xor eax, eax
mov rcx, r8
sub rcx, qword [r12 + 0x120]
cmovae rax, rcx
mov qword [r12 + 0x128], rax
xor eax, eax
nop word [rax + rax]
mov rcx, r8
sub rcx, qword [r12 + 0x120]
mov edx, 0
cmovae rdx, rcx
mov qword [r12 + 0x128], rdx
test al, al
jne 0x1400d3e90
mov byte [r12 + 0x154], 1
nop dword [rax]
mov eax, dword [0x141dd4c08]
or eax, dword [0x141dd4c0c]
cmp eax, 0xa17782d0
je 0x1400d3ec0
lea rsp, [rbp + 0xb8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd4c58]
xor eax, dword [0x141dd4c5c]
add eax, 0xbf0726c4
and eax, 0x9dc8b319
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
cmp eax, 0xb48de963
jne 0x1400d3f30
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
jmp 0x1400d3ee7
mov eax, dword [0x141dd4c60]
xor edx, edx
div dword [0x141dd4c64]
add eax, 0x1e5fd2ed
imul rcx, rax, 0x54d894b1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0xd1298d1b
jae 0x1400d3f30
jmp 0x1400d3e35