Function at 0x1400d2960
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x2a8
mov dword [rsp + 0x228], 0x2a8a
mov eax, 0x2a
mov word [rsp + 0x54], ax
mov byte [rsp + 0x41], 0xd3
movzx eax, byte [0x140177b40]
mov byte [rsp + 0x40], al
movzx eax, word [0x140177b3c]
mov byte [rsp + 0x45], al
mov eax, dword [0x140177b34]
mov qword [rsp + 0x90], rax
movsx ax, byte [0x140177a56]
mov word [rsp + 0x48], ax
movzx eax, byte [0x140177ae2]
movzx eax, al
mov word [rsp + 0x4c], ax
movzx eax, byte [0x140177ae2]
movzx eax, al
mov dword [rsp + 0x6c], eax
mov eax, 0x63f9
mov word [rsp + 0x50], ax
mov byte [rsp + 0x44], 0x33
mov dword [rsp + 0x64], 0xbf48dc66
mov qword [rsp + 0x1a8], 0x2c
mov rax, qword [0x140177af8]
mov qword [rsp + 0x88], rax
movsxd rax, dword [0x140177b24]
mov qword [rsp + 0xd0], rax
movsxd rax, dword [0x140177b24]
mov qword [rsp + 0x78], rax
mov byte [rsp + 0x42], 0xa3
mov eax, 0xb7d6
mov word [rsp + 0x58], ax
mov dword [rsp + 0x68], 0x778f8cc4
movzx eax, byte [0x140177ad7]
mov byte [rsp + 0x43], al
movzx eax, word [0x140177b20]
mov word [rsp + 0x5c], ax
mov dword [rsp + 0x60], 0x1da33aca
movzx eax, word [0x140177ae4]
movzx eax, ax
mov dword [rsp + 0x70], eax
movzx eax, byte [0x140177a16]
movsx rax, al
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x230], 0xb7
movzx eax, byte [0x140177a16]
mov byte [rsp + 0xa0], al
mov eax, 0xffffa3a9
mov word [rsp + 0x1bc], ax
mov byte [rsp + 0xa1], 0x60
movzx eax, byte [0x140177a3e]
mov byte [rsp + 0xa2], al
movzx eax, byte [0x140177a3e]
movsx eax, al
mov dword [rsp + 0x22c], eax
mov dword [rsp + 0x234], 0x676d
mov eax, dword [0x140177b0c]
mov byte [rsp + 0xa3], al
mov dword [rsp + 0x238], 0x5fd17724
mov dword [rsp + 0x23c], 0x563beb5f
mov byte [rsp + 0xa4], 0xa2
mov qword [rsp + 0x268], 0x37
movzx eax, word [0x140177b3c]
movzx eax, ax
movsx ecx, word [rsp + 0x54]
mov eax, dword [0x141167a50]
mov dword [rsp + 0xa8], eax
mov eax, dword [0x140177b44]
mov eax, eax
movabs rcx, 0xfffa5eff430b60d3
xor rax, rcx
movsxd rcx, dword [0x140177b08]
and rax, rcx
mov byte [0x140177a13], al
movsx eax, word [0x140177b38]
mov ecx, dword [rsp + 0x60]
sub ecx, eax
mov eax, ecx
movsx ecx, word [rsp + 0x54]
imul eax, ecx
not eax
mov ecx, dword [rsp + 0x6c]
not ecx
movzx edx, word [rsp + 0x58]
movzx edx, dx
imul ecx, edx
movzx edx, byte [0x140177ad6]
movsx edx, dl
lea ecx, [rcx + rdx + 0x34]
not ecx
sub eax, ecx
not eax
mov word [rsp + 0x5c], ax
movzx eax, byte [rsp + 0x78]
mov byte [0x140177aab], al
mov eax, dword [rsp + 0xa8]
add eax, 0x1e
mov dword [rsp + 0x10c], eax
movzx eax, word [rsp + 0x48]
cwde
mov ecx, dword [rsp + 0x64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x64], eax
mov eax, dword [0x140177b18]
movabs rcx, 0xa41ffc9ddc63e
and rax, rcx
mov byte [0x140177ad6], al
movzx eax, byte [rsp + 0x45]
movzx eax, al
movzx ecx, word [rsp + 0x58]
movzx ecx, cx
xor edx, edx
sub edx, ecx
mov ecx, edx
xor eax, ecx
movsx ecx, word [0x140177af4]
imul eax, ecx
cdqe
mov qword [0x140177b10], rax
mov eax, dword [rsp + 0xa8]
add eax, 0x15f
mov dword [rsp + 0x108], eax
mov eax, dword [0x140177b24]
inc eax
mov dword [0x140177b24], eax
movsx eax, word [rsp + 0x54]
movsx ecx, word [0x140177af4]
add eax, ecx
mov word [rsp + 0x54], ax
mov dword [0x140177b24], 2
mov eax, dword [rsp + 0xa8]
add eax, 0x28d
mov dword [rsp + 0x240], eax
movzx eax, word [0x141167a50]
mov word [rsp + 0x50], ax
movzx eax, byte [0x140177ae2]
movzx eax, al
mov ecx, dword [0x140177b34]
add ecx, eax
mov eax, ecx
mov dword [0x140177b34], eax
mov eax, dword [0x141167a50]
mov dword [rsp + 0xac], eax
movzx eax, byte [0x140177a7e]
movsx eax, al
movzx ecx, word [0x140177b3c]
movzx ecx, cx
cmp eax, ecx
jl 0x1400d2cd4
movzx eax, byte [rsp + 0x40]
sub eax, 0x143e
mov word [0x140177b20], ax
movzx eax, byte [0x140177a3f]
movzx eax, al
sub eax, 0x7e37
mov word [rsp + 0x50], ax
jmp 0x1400d2d7b
movsx eax, word [0x140177b04]
test eax, eax
je 0x1400d2d7b
cmp qword [rsp + 0x78], 0
jne 0x1400d2cf9
mov qword [rsp + 0x1d8], 1
jmp 0x1400d2d05
mov qword [rsp + 0x1d8], 0
movzx eax, byte [rsp + 0x45]
movzx eax, al
movsx ecx, word [rsp + 0x4c]
sub eax, ecx
movsx ecx, word [0x140177af4]
sub eax, ecx
cdqe
movsx rcx, byte [0x140177a57]
mov rdx, qword [0x140177ae8]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0xd0]
not rdx
mov r8, qword [rsp + 0x1d8]
add r8, rdx
mov rdx, r8
imul rcx, rdx
sub rax, rcx
mov word [rsp + 0x5c], ax
movzx eax, word [0x141167a50]
mov word [0x140177a14], ax
mov rax, qword [0x140177ae8]
sub rax, 0xa600
mov qword [0x140177b10], rax
mov eax, dword [rsp + 0xac]
add eax, 0x170
mov dword [rsp + 0x144], eax
movzx eax, byte [0x141167a50]
mov byte [rsp + 0x40], al
cmp qword [rsp + 0x1a8], 0
jne 0x1400d2db1
mov dword [rsp + 0x194], 1
jmp 0x1400d2dbc
mov dword [rsp + 0x194], 0
movsx eax, word [0x140177b04]
xor eax, dword [rsp + 0x194]
mov byte [0x140177a3e], al
movzx eax, byte [0x140177a16]
movsx rax, al
add rax, qword [rsp + 0x88]
movzx ecx, byte [0x140177a16]
movsx rcx, cl
and rcx, rax
mov rax, rcx
mov byte [0x140177a16], al
mov eax, dword [rsp + 0xac]
add eax, 0x1f9
mov dword [rsp + 0x1c8], eax
mov eax, dword [0x140177b28]
add eax, 0x4e74d7a4
mov word [0x140177b2c], ax
mov eax, dword [0x140177b44]
mov eax, eax
mov rcx, qword [rsp + 0x98]
sub rcx, rax
mov rax, rcx
mov ecx, dword [0x140177b34]
or rax, rcx
mov dword [0x140177b44], eax
movsx eax, byte [0x140177a7f]
add eax, 0x5b
mov byte [0x140177a7e], al
mov eax, dword [rsp + 0xac]
add eax, 0x149
mov dword [rsp + 0x84], eax
movsx eax, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x48]
movsx ecx, cx
cmp eax, ecx
jne 0x1400d2eb1
movzx eax, word [rsp + 0x48]
cwde
mov ecx, dword [rsp + 0x60]
xor ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov rax, qword [0x140177af8]
add rax, 0x57
mov qword [rsp + 0x78], rax
movzx eax, byte [0x140177a7f]
mov byte [0x140177a13], al
jmp 0x1400d2f2e
mov eax, dword [0x140177b44]
test eax, eax
jne 0x1400d2ec8
mov dword [rsp + 0x198], 1
jmp 0x1400d2ed3
mov dword [rsp + 0x198], 0
movzx eax, word [0x140177ae4]
movzx eax, ax
mov ecx, dword [0x140177b08]
and ecx, eax
mov eax, ecx
cdqe
movsx rcx, byte [rsp + 0x41]
imul rcx, qword [rsp + 0x1a8]
xor rax, rcx
movsx ecx, word [0x140177af4]
mov edx, dword [rsp + 0x198]
add edx, ecx
mov ecx, edx
movsx edx, byte [rsp + 0x43]
sub ecx, edx
movsxd rcx, ecx
sub rax, rcx
mov word [rsp + 0x4c], ax
mov eax, dword [0x140177b44]
mov eax, eax
mov qword [0x140177af8], rax
mov eax, dword [0x141167a50]
mov dword [rsp + 0xb0], eax
cmp dword [rsp + 0x68], 0
jne 0x1400d2f4f
mov dword [rsp + 0x19c], 1
jmp 0x1400d2f5a
mov dword [rsp + 0x19c], 0
movzx eax, byte [rsp + 0x42]
movsx eax, al
add eax, dword [rsp + 0x19c]
movsx ecx, word [rsp + 0x50]
movzx edx, byte [0x140177ae2]
movzx edx, dl
add ecx, edx
add eax, ecx
movzx ecx, word [0x140177b3c]
movzx ecx, cx
sub ecx, 0x82
movzx edx, byte [0x140177ae2]
movzx edx, dl
mov r8d, 0x994c0436
sub r8d, edx
mov edx, r8d
imul ecx, edx
sub eax, ecx
test eax, eax
jne 0x1400d2fba
mov eax, 1
mov word [rsp + 0x80], ax
jmp 0x1400d2fc4
xor eax, eax
mov word [rsp + 0x80], ax
movzx eax, word [rsp + 0x80]
mov word [0x140177a14], ax
movsx ax, byte [0x140177aaa]
mov ecx, 2
imul rcx, rcx, 0x4d47
lea rdx, [0x1412cfb10]
mov word [rdx + rcx], ax
movsx eax, word [0x140177b04]
sub eax, 0xda96312
cdqe
mov rcx, qword [rsp + 0x98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x98], rax
mov eax, dword [rsp + 0xb0]
add eax, 0xffbb
mov dword [rsp + 0xec], eax
movzx eax, word [0x140177a14]
movzx eax, ax
test eax, eax
je 0x1400d3091
movzx eax, byte [0x140177a7e]
movsx eax, al
add eax, 0xd3
cdqe
mov qword [rsp + 0x88], rax
movsx eax, word [0x140177b04]
test eax, eax
je 0x1400d306b
movzx eax, byte [0x140177ad7]
mov dword [rsp + 0x1a0], eax
jmp 0x1400d3079
movsx eax, word [0x140177b2c]
mov dword [rsp + 0x1a0], eax
movsxd rax, dword [rsp + 0x1a0]
mov qword [0x140177b48], rax
mov byte [0x140177a57], 0xa8
jmp 0x1400d30b6
mov eax, dword [0x140177b44]
dec eax
mov dword [0x140177b44], eax
movsx rax, word [rsp + 0x5c]
mov rcx, qword [rsp + 0x88]
lea rax, [rax + rcx + 0x1f]
mov byte [rsp + 0x42], al
mov eax, dword [rsp + 0xb0]
add eax, 0xb428
mov dword [rsp + 0x244], eax
movzx eax, byte [0x140177ae2]
movzx eax, al
test eax, eax
je 0x1400d3136
cmp dword [rsp + 0x60], 0
je 0x1400d3134
movzx eax, byte [0x140177ae3]
movsx eax, al
movzx ecx, byte [0x140177a17]
movsx ecx, cl
imul eax, ecx
mov ecx, dword [rsp + 0x70]
not ecx
mov edx, dword [rsp + 0x70]
add edx, ecx
mov ecx, edx
movsx edx, word [rsp + 0x4c]
add edx, dword [rsp + 0x68]
imul ecx, edx
add eax, ecx
not eax
mov byte [rsp + 0x43], al
movzx eax, byte [0x140177ad6]
movsx rax, al
movabs rcx, 0xa5a31ae46e4a5
sub rax, rcx
mov qword [rsp + 0x78], rax
jmp 0x1400d315a
mov eax, dword [0x140177b08]
sar eax, 1
mov word [0x140177af0], ax
movsx eax, word [0x140177af4]
movsx ecx, word [rsp + 0x5c]
sub eax, ecx
mov word [0x140177af4], ax
mov eax, dword [rsp + 0xb0]
add eax, 0xa9
mov dword [rsp + 0x1c0], eax
movzx eax, word [0x140177af0]
cwde
sar eax, 6
mov word [rsp + 0x4c], ax
movzx eax, word [0x140177af0]
cwde
movzx ecx, byte [0x140177a7e]
movsx ecx, cl
sub eax, ecx
movzx ecx, word [0x140177af0]
movsx ecx, cx
add ecx, eax
mov eax, ecx
mov word [0x140177af0], ax
movzx eax, byte [0x140177a3e]
movsx eax, al
sub eax, 0x6af0a4db
mov dword [rsp + 0x64], eax
cmp qword [0x140177b48], 0
jne 0x1400d31e6
movsx eax, word [0x140177b20]
test eax, eax
jne 0x1400d31e6
movsx eax, word [0x140177b38]
test eax, eax
jne 0x1400d31e6
mov dword [rsp + 0xe0], 0
jmp 0x1400d31f1
mov dword [rsp + 0xe0], 1
cmp qword [rsp + 0x90], 0
jne 0x1400d3209
mov dword [rsp + 0xd8], 1
jmp 0x1400d3214
mov dword [rsp + 0xd8], 0
mov eax, dword [rsp + 0x6c]
cmp eax, dword [rsp + 0xd8]
jge 0x1400d322e
mov dword [rsp + 0xdc], 1
jmp 0x1400d3239
mov dword [rsp + 0xdc], 0
movzx eax, byte [0x140177a7e]
movsx eax, al
cmp eax, dword [rsp + 0xdc]
jge 0x1400d3259
mov dword [rsp + 0xe4], 1
jmp 0x1400d3264
mov dword [rsp + 0xe4], 0
mov eax, dword [rsp + 0xe0]
not eax
cmp eax, dword [rsp + 0xe4]
jl 0x1400d32b9
movsx eax, word [0x140177b00]
shl eax, 1
mov byte [rsp + 0x42], al
movsx eax, word [0x140177af4]
test eax, eax
je 0x1400d329e
movsx eax, byte [0x140177a57]
mov dword [rsp + 0xe8], eax
jmp 0x1400d32ac
movsx eax, word [0x140177b04]
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0x64], eax
jmp 0x1400d3336
movsx rax, word [rsp + 0x50]
movabs rcx, 0xfff36173619e2e6e
mov rdx, qword [rsp + 0x90]
add rcx, rdx
add rax, rcx
mov qword [rsp + 0x90], rax
mov eax, dword [0x140177b24]
add eax, 0xe070
mov byte [0x140177a7f], al
cmp qword [rsp + 0x88], 0
jne 0x1400d3309
mov qword [rsp + 0x1e0], 1
jmp 0x1400d3315
mov qword [rsp + 0x1e0], 0
movabs rax, 0x363f78f87bfb2
mov rcx, qword [rsp + 0x1e0]
imul rcx, rax
mov rax, rcx
not rax
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0xec]
add eax, 0xc29
mov ecx, dword [rsp + 0xec]
mov edx, dword [rsp + 0x1c0]
add ecx, edx
imul eax, ecx
cdqe
movabs rcx, 0x10c4ca695
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x1cc], eax
movzx eax, byte [0x140177aab]
movzx eax, al
mov ecx, dword [0x140177b28]
add ecx, eax
mov eax, ecx
mov eax, eax
imul rax, qword [rsp + 0x90]
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x60]
add eax, 0xa4
mov byte [0x140177a7f], al
movsx eax, word [0x140177b2c]
mov dword [rsp + 0x68], eax
mov eax, dword [0x141167a50]
mov dword [rsp + 0xb4], eax
xor r8d, r8d
movzx edx, byte [0x140177a16]
xor ecx, ecx
call fcn.1400c0f00
mov byte [rsp + 0x44], al
movzx eax, byte [rsp + 0x44]
movzx eax, al
test eax, eax
jg 0x1400d33e6
mov dword [rsp + 0xf4], 1
jmp 0x1400d33f1
mov dword [rsp + 0xf4], 0
movzx eax, byte [rsp + 0x44]
movzx eax, al
cmp eax, 0x11
jg 0x1400d340b
mov dword [rsp + 0xf0], 1
jmp 0x1400d3416
mov dword [rsp + 0xf0], 0
mov eax, dword [rsp + 0xf0]
cmp dword [rsp + 0xf4], eax
je 0x1400d3495
movzx eax, byte [0x140177ae2]
movzx eax, al
cmp rax, qword [rsp + 0xd0]
jg 0x1400d3467
movzx eax, byte [rsp + 0x42]
movsx eax, al
mov ecx, dword [rsp + 0x68]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x68]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x64]
add eax, 0xbd17
mov byte [0x140177aab], al
jmp 0x1400d3495
mov eax, dword [0x140177b44]
test eax, eax
jne 0x1400d3495
movsx eax, byte [0x140177a7f]
mov ecx, dword [0x140177b40]
lea eax, [rcx + rax + 0x62]
mov dword [0x140177b40], eax
mov eax, 0xf69b6dc3
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0xb4]
add eax, 0x6e6d
mov dword [rsp + 0xfc], eax
movzx eax, byte [0x140177ae3]
movsx eax, al
test eax, eax
je 0x1400d34b8
jmp 0x1400d3504
movsx eax, byte [0x140177a57]
test eax, eax
jne 0x1400d34d0
mov dword [rsp + 0xf8], 1
jmp 0x1400d34db
mov dword [rsp + 0xf8], 0
movzx eax, byte [rsp + 0x40]
not eax
cmp eax, dword [rsp + 0xf8]
jl 0x1400d3504
movzx eax, byte [0x140177ad6]
movsx eax, al
xor eax, 0xf49f3daf
mov eax, eax
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0xb4]
add eax, 0xea29
mov dword [rsp + 0x248], eax
mov eax, dword [rsp + 0xb4]
add eax, 0xc1
mov dword [rsp + 0x24c], eax
movsx eax, word [rsp + 0x4c]
cmp eax, dword [rsp + 0x60]
jne 0x1400d353a
jmp 0x1400d3621
cmp qword [0x140177af8], 0
je 0x1400d355d
mov eax, dword [0x141167a50]
mov qword [0x140177af8], rax
mov byte [0x140177a7e], 0xfd
jmp 0x1400d3621
mov eax, dword [rsp + 0x6c]
not eax
test eax, eax
je 0x1400d358b
movzx eax, word [0x140177b2c]
inc ax
mov word [0x140177b2c], ax
movzx eax, word [rsp + 0x58]
movzx eax, ax
not eax
mov byte [rsp + 0x40], al
jmp 0x1400d3621
mov rax, qword [0x140177b10]
cmp qword [rsp + 0x1a8], rax
jbe 0x1400d35aa
mov qword [rsp + 0x1e8], 1
jmp 0x1400d35b6
mov qword [rsp + 0x1e8], 0
movabs rax, 0xfff1e2aea4e9e77e
cmp qword [rsp + 0x1e8], rax
jne 0x1400d3621
movzx eax, byte [rsp + 0x42]
movsx eax, al
add eax, 0xe5
mov byte [rsp + 0x40], al
movsxd rax, dword [0x140177b08]
movabs rcx, 0x158a3ba174797
add rax, rcx
mov dword [0x140177b08], eax
movzx eax, byte [0x140177a7e]
movsx rax, al
movabs rcx, 0x49eae4175966e
imul rax, rcx
movzx ecx, byte [0x140177ad7]
add rcx, rax
mov rax, rcx
mov byte [0x140177ad7], al
movsx eax, word [rsp + 0x54]
add eax, 0x2ac4
mov byte [0x140177ae3], al
mov byte [rsp + 0x44], 0x93
mov eax, dword [0x140177b34]
mov ecx, dword [0x140177b40]
xor ecx, eax
mov eax, ecx
mov eax, eax
xor rax, qword [rsp + 0xd0]
mov dword [0x140177b08], eax
mov eax, dword [rsp + 0xfc]
mov ecx, dword [rsp + 0xfc]
add eax, ecx
xor eax, 0xdf6f
mov dword [rsp + 0x1d0], eax
mov eax, dword [0x141167a50]
mov dword [rsp + 0xb8], eax
movzx eax, byte [0x140177a13]
test eax, eax
je 0x1400d369a
movzx eax, word [0x140177a54]
mov dword [rsp + 0x100], eax
jmp 0x1400d36a6
movsx eax, byte [rsp + 0x41]
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x100]
mov dword [0x140177b44], eax
mov eax, dword [0x141167a50]
mov qword [rsp + 0x88], rax
movzx eax, byte [0x140177ad6]
movsx eax, al
movsx ecx, word [0x140177b00]
add eax, ecx
movzx ecx, byte [0x140177ad6]
movsx ecx, cl
add ecx, eax
mov eax, ecx
mov byte [0x140177ad6], al
mov eax, dword [rsp + 0xb8]
add eax, 0xa42d
mov dword [rsp + 0x104], eax
movzx eax, byte [0x140177a13]
sub eax, 0x65
test eax, eax
jne 0x1400d3719
mov eax, dword [0x140177b40]
cmp dword [rsp + 0x68], eax
je 0x1400d37de
movzx eax, byte [rsp + 0x42]
movsx eax, al
test eax, eax
jne 0x1400d372c
cmp dword [rsp + 0x68], 0
je 0x1400d3796
cmp dword [0x140177b28], 0
jne 0x1400d3743
mov qword [rsp + 0x1f0], 1
jmp 0x1400d374f
mov qword [rsp + 0x1f0], 0
movzx eax, byte [0x140177a13]
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0x1f0]
add rdx, rcx
mov rcx, rdx
or rax, rcx
not rax
mov byte [0x140177a17], al
mov eax, 8
imul rax, rax, 0x2233
lea rcx, [0x1412e8d70]
mov eax, dword [rcx + rax]
mov dword [0x140177b28], eax
jmp 0x1400d37dc
movzx eax, word [0x140177a14]
movzx eax, ax
mov ecx, dword [rsp + 0x64]
imul ecx, eax
mov eax, ecx
mov word [rsp + 0x58], ax
mov eax, dword [0x140177b40]
movabs rcx, 0x8c02872059ae1
sub rax, rcx
mov dword [rsp + 0x64], eax
movsx rax, word [rsp + 0x50]
movabs rcx, 0x8de87cf41cf7c
and rax, rcx
mov byte [rsp + 0x43], al
jmp 0x1400d3846
movabs rax, 0xfff6533f72845922
xor ecx, ecx
cmp rcx, rax
je 0x1400d3846
movzx eax, byte [0x140177a13]
xor eax, 0x9f83
mov dword [0x140177b34], eax
movsxd rax, dword [rsp + 0x68]
mov rcx, qword [0x140177ae8]
sub rcx, rax
mov rax, rcx
mov qword [0x140177ae8], rax
movzx eax, byte [0x140177ae2]
movzx eax, al
movabs rcx, 0xa871672e282ad
imul rax, rcx
mov rcx, qword [0x140177b48]
add rcx, rax
mov rax, rcx
mov qword [0x140177b48], rax
mov eax, dword [rsp + 0xb8]
add eax, 0x17
mov dword [rsp + 0x250], eax
movabs rax, 0xd21f6fde4740b
mov rcx, qword [rsp + 0x90]
xor rcx, rax
mov rax, rcx
mov word [0x140177af4], ax
movzx eax, byte [0x140177ae2]
mov ecx, 1
imul rcx, rcx, 0x5d
lea rdx, [0x1412e8cb0]
mov byte [rdx + rcx], al
mov dword [0x140177b08], 0x6486
mov eax, dword [rsp + 0xb8]
add eax, 0x6fee
mov dword [rsp + 0x254], eax
movsx eax, word [rsp + 0x50]
not eax
mov ecx, dword [0x140177b40]
add ecx, eax
mov eax, ecx
imul eax, eax, 0x31
movsx ecx, word [rsp + 0x50]
movzx edx, word [0x140177a14]
movzx edx, dx
not edx
imul ecx, edx
add ecx, 0x2931
xor eax, ecx
mov byte [rsp + 0x41], al
mov eax, dword [rsp + 0x104]
mov ecx, dword [rsp + 0x104]
xor eax, ecx
mov ecx, dword [rsp + 0x108]
mov edx, dword [rsp + 0x108]
sub ecx, edx
mov edx, dword [rsp + 0x10c]
mov r8d, dword [rsp + 0x10c]
add edx, r8d
imul ecx, edx
sub eax, ecx
mov dword [rsp + 0x1b0], eax
mov eax, dword [0x140177b0c]
movzx ecx, ax
call fcn.1400c0860
mov word [0x140177b04], ax
movsx eax, word [0x140177b04]
test eax, eax
jge 0x1400d394c
mov dword [rsp + 0x114], 1
jmp 0x1400d3957
mov dword [rsp + 0x114], 0
movsx eax, word [0x140177b04]
cmp eax, 0x5f
jge 0x1400d3970
mov dword [rsp + 0x110], 1
jmp 0x1400d397b
mov dword [rsp + 0x110], 0
mov eax, dword [rsp + 0x110]
mov eax, dword [0x141167a50]
mov dword [rsp + 0xbc], eax
movzx eax, byte [rsp + 0x40]
movzx ecx, word [rsp + 0x58]
movzx ecx, cx
cmp eax, ecx
jg 0x1400d39ad
mov dword [rsp + 0x11c], 1
jmp 0x1400d39b8
mov dword [rsp + 0x11c], 0
movzx eax, byte [rsp + 0x40]
cmp eax, 0x54
jg 0x1400d39cf
mov dword [rsp + 0x118], 1
jmp 0x1400d39da
mov dword [rsp + 0x118], 0
mov eax, dword [rsp + 0x118]
cmp dword [rsp + 0x11c], eax
je 0x1400d3a08
movsx eax, byte [rsp + 0x41]
movsx ecx, word [rsp + 0x50]
sub eax, ecx
mov byte [rsp + 0x41], al
movzx eax, word [0x141167a50]
mov word [rsp + 0x58], ax
jmp 0x1400d3a6d
movzx eax, word [rsp + 0x48]
cwde
test eax, eax
je 0x1400d3a6d
movsx eax, word [rsp + 0x4c]
not eax
test eax, eax
je 0x1400d3a6d
movzx eax, byte [rsp + 0x40]
movabs rcx, 0xb42b6ec4021bd
add rax, rcx
mov word [0x140177ae4], ax
movzx eax, byte [rsp + 0x40]
add eax, 0xb3
cdqe
mov qword [rsp + 0x78], rax
movzx eax, byte [0x140177a7e]
movsx eax, al
movsx ecx, word [rsp + 0x4c]
imul eax, ecx
movzx ecx, byte [0x140177a7e]
movsx ecx, cl
sub ecx, eax
mov eax, ecx
mov byte [0x140177a7e], al
mov eax, dword [rsp + 0xbc]
add eax, 0x2316
mov dword [rsp + 0x258], eax
mov eax, dword [0x140177aac]
cmp dword [0x140177b28], eax
jne 0x1400d3a9b
mov dword [rsp + 0x124], 1
jmp 0x1400d3aa6
mov dword [rsp + 0x124], 0
cmp dword [0x140177b28], 0x4d
jne 0x1400d3abc
mov dword [rsp + 0x120], 1
jmp 0x1400d3ac7
mov dword [rsp + 0x120], 0
mov eax, dword [rsp + 0x120]
cmp dword [rsp + 0x124], eax
jge 0x1400d3b20
movsx eax, word [rsp + 0x54]
mov ecx, dword [0x140177b40]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x140177b40]
add ecx, eax
mov eax, ecx
mov dword [0x140177b40], eax
movzx eax, word [0x140177ae0]
movabs rcx, 0x9d79af215439c
add rax, rcx
mov rcx, qword [rsp + 0x78]
add rax, rcx
mov word [0x140177ae0], ax
mov byte [0x140177a7f], 0x44
mov eax, dword [rsp + 0xbc]
add eax, 0x67
mov dword [rsp + 0x1c4], eax
movsx rax, word [0x140177b2c]
movsxd rcx, dword [0x140177b24]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0x1a
mov qword [rsp + 0x20], rcx
mov r9d, 0x87
mov r8d, 0x87
xor edx, edx
xor ecx, ecx
call fcn.1400c2230
mov word [0x140177b2c], ax
cmp dword [rsp + 0x68], 0
jne 0x1400d3b84
mov qword [rsp + 0x1f8], 1
jmp 0x1400d3b90
mov qword [rsp + 0x1f8], 0
mov rax, qword [0x140177b10]
imul rax, qword [rsp + 0x1f8]
mov ecx, dword [rsp + 0x60]
not ecx
add ecx, 0x582a9eda
movsxd rcx, ecx
cmp rax, rcx
ja 0x1400d3d20
movzx eax, word [rsp + 0x48]
cwde
test eax, eax
je 0x1400d3bd8
cmp dword [0x140177b18], 0
je 0x1400d3bd8
mov dword [rsp + 0x130], 1
jmp 0x1400d3be3
mov dword [rsp + 0x130], 0
movsx rax, byte [rsp + 0x41]
cmp rax, qword [rsp + 0x88]
jae 0x1400d3c00
mov dword [rsp + 0x12c], 1
jmp 0x1400d3c0b
mov dword [rsp + 0x12c], 0
movsx eax, word [rsp + 0x4c]
cmp eax, 0x47
jg 0x1400d3c22
mov dword [rsp + 0x128], 1
jmp 0x1400d3c2d
mov dword [rsp + 0x128], 0
movzx eax, byte [0x140177a7e]
movsx eax, al
cmp eax, dword [rsp + 0x128]
je 0x1400d3c4d
mov dword [rsp + 0x134], 1
jmp 0x1400d3c58
mov dword [rsp + 0x134], 0
mov eax, dword [rsp + 0x12c]
mov ecx, dword [rsp + 0x130]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x134]
jl 0x1400d3c80
mov dword [rsp + 0x138], 1
jmp 0x1400d3c8b
mov dword [rsp + 0x138], 0
mov eax, dword [rsp + 0x138]
not eax
test eax, eax
je 0x1400d3d20
mov eax, dword [0x140177b34]
mov rcx, qword [rsp + 0x90]
sub rcx, rax
mov rax, rcx
movsx ecx, word [0x140177b04]
movzx edx, word [0x140177ae0]
sub ecx, edx
movsxd rcx, ecx
and rax, rcx
movzx ecx, byte [0x140177ae3]
movsx ecx, cl
add ecx, 0xe456ed50
movzx edx, byte [0x140177ad6]
movsx edx, dl
not edx
sub ecx, edx
mov ecx, ecx
sub rax, rcx
mov byte [0x140177a7e], al
movsx eax, byte [rsp + 0x41]
add eax, dword [rsp + 0x70]
xor eax, 0xd89b2917
mov dword [0x140177b28], eax
movsx rax, word [rsp + 0x4c]
imul rax, qword [rsp + 0x78]
movsx rcx, word [rsp + 0x4c]
sub rcx, rax
mov rax, rcx
mov word [rsp + 0x4c], ax
mov eax, dword [rsp + 0xbc]
add eax, 0xe257
mov dword [rsp + 0x25c], eax
cmp dword [0x140177b40], 0
jne 0x1400d3d49
mov dword [rsp + 0x13c], 1
jmp 0x1400d3d54
mov dword [rsp + 0x13c], 0
movzx eax, byte [rsp + 0x45]
movzx eax, al
test eax, eax
jne 0x1400d3d6d
mov dword [rsp + 0x140], 1
jmp 0x1400d3d78
mov dword [rsp + 0x140], 0
movsx eax, byte [0x140177a57]
movsx ecx, word [rsp + 0x4c]
imul ecx, dword [rsp + 0x13c]
add eax, ecx
movzx ecx, byte [0x140177ae2]
movzx ecx, cl
add ecx, dword [rsp + 0x140]
movzx edx, word [rsp + 0x48]
movsx edx, dx
movzx r8d, byte [0x140177ae3]
movsx r8d, r8b
sub edx, r8d
not edx
sub ecx, edx
not ecx
sub eax, ecx
mov word [rsp + 0x58], ax
movsx eax, byte [rsp + 0x43]
movsx ecx, word [0x140177b20]
add eax, ecx
mov word [0x140177a14], ax
mov eax, dword [rsp + 0x1c4]
imul eax, eax, 0x97a6
xor eax, 0x3d03ca
mov ecx, dword [rsp + 0x144]
mov edx, dword [rsp + 0x1c8]
add ecx, edx
mov edx, dword [rsp + 0x84]
mov r8d, dword [rsp + 0x84]
xor edx, r8d
imul ecx, edx
mov edx, dword [rsp + 0x84]
mov r8d, dword [rsp + 0x144]
sub edx, r8d
mov r8d, dword [rsp + 0x84]
mov r9d, dword [rsp + 0x84]
imul r8d, r9d
sub edx, r8d
imul ecx, edx
add eax, ecx
mov dword [rsp + 0x1b4], eax
movzx eax, word [rsp + 0x48]
cwde
shl eax, 2
mov byte [rsp + 0x42], al
movzx eax, word [0x140177b3c]
movzx eax, ax
test eax, eax
jne 0x1400d3e6c
mov dword [rsp + 0x148], 1
jmp 0x1400d3e77
mov dword [rsp + 0x148], 0
movzx eax, word [0x140177af0]
cwde
test eax, eax
jne 0x1400d3e90
mov dword [rsp + 0x14c], 1
jmp 0x1400d3e9b
mov dword [rsp + 0x14c], 0
movzx eax, word [0x140177af0]
cwde
add eax, dword [rsp + 0x148]
movsx ecx, byte [0x140177aaa]
mov edx, dword [0x140177b34]
add edx, ecx
mov ecx, edx
movzx edx, word [rsp + 0x58]
movzx edx, dx
mov r8d, dword [rsp + 0x14c]
sub r8d, edx
mov edx, r8d
add ecx, edx
sub eax, ecx
mov byte [rsp + 0x43], al
mov eax, dword [0x141167a50]
mov dword [rsp + 0xc0], eax
movzx eax, word [0x140177a54]
add eax, 0x96fd7fa9
mov ecx, dword [0x140177b1c]
sub ecx, eax
mov eax, ecx
mov dword [0x140177b1c], eax
movsx eax, word [0x140177b2c]
mov ecx, dword [rsp + 0x70]
lea eax, [rcx + rax + 0x5584a8b6]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0xc0]
add eax, 0xd7c7
mov dword [rsp + 0x260], eax
movzx eax, word [0x140177b28]
mov word [rsp + 0x20], ax
movzx r9d, word [rsp + 0x78]
movzx r8d, word [0x140177b18]
mov dx, 0xc7
mov cx, 0x1f
call fcn.1400c1cf0
movzx eax, ax
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x6c]
test eax, eax
je 0x1400d3fa1
movsx eax, byte [rsp + 0x41]
add eax, 0x2d
cdqe
mov qword [rsp + 0xd0], rax
movsx eax, word [0x140177b20]
add eax, 0xf7d6
mov word [rsp + 0x50], ax
movzx eax, word [rsp + 0x48]
movsx rax, ax
mov ecx, 8
imul rcx, rcx, 0x33
lea rdx, [0x14125c9c0]
mov qword [rdx + rcx], rax
mov eax, dword [rsp + 0xc0]
add eax, 0x8e
mov dword [rsp + 0x154], eax
movsx eax, word [0x140177af4]
test eax, eax
je 0x1400d3fcd
movsx eax, byte [rsp + 0x43]
mov dword [rsp + 0x150], eax
jmp 0x1400d3fdc
movzx eax, word [rsp + 0x58]
movzx eax, ax
mov dword [rsp + 0x150], eax
movzx eax, word [rsp + 0x150]
mov word [0x140177a14], ax
movsx eax, word [0x140177b2c]
sar eax, 4
mov word [0x140177b00], ax
mov eax, dword [rsp + 0xc0]
add eax, 0xed
mov dword [rsp + 0x220], eax
movzx eax, word [0x140177b3c]
movzx eax, ax
sub eax, 0x1b44
mov word [rsp + 0x4c], ax
mov dword [0x140177b44], 2
mov eax, dword [rsp + 0x154]
mov ecx, dword [rsp + 0x154]
add eax, ecx
xor eax, 0x10b
mov dword [rsp + 0x1b8], eax
movzx eax, word [0x140177ae0]
movsx ecx, word [rsp + 0x54]
cmp eax, ecx
je 0x1400d40ed
movzx eax, byte [0x140177a13]
cmp dword [0x140177b24], eax
jne 0x1400d409c
movsx eax, word [rsp + 0x5c]
add eax, 0x8cf8
mov byte [0x140177a56], al
movzx eax, byte [0x140177a16]
movsx rax, al
movabs rcx, 0x807ad92979685
xor rax, rcx
mov dword [0x140177b34], eax
jmp 0x1400d40e8
movsx eax, word [0x140177af4]
movzx ecx, byte [0x140177a17]
movsx ecx, cl
cmp eax, ecx
jne 0x1400d40e8
movzx eax, byte [0x140177ae3]
movsx rax, al
movabs rcx, 0xce0854b39d307
xor rax, rcx
mov word [0x140177a14], ax
mov eax, 0x9d3c3541
mov rcx, qword [rsp + 0x98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x78], rax
jmp 0x1400d416d
cmp dword [rsp + 0x60], 0
je 0x1400d416d
cmp dword [0x140177b28], 0
jne 0x1400d410a
mov dword [rsp + 0x158], 1
jmp 0x1400d4115
mov dword [rsp + 0x158], 0
movsx eax, byte [rsp + 0x41]
mov ecx, dword [rsp + 0x158]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x45]
movzx ecx, cl
not ecx
add eax, dword [rsp + 0x64]
add ecx, eax
mov eax, ecx
not eax
mov byte [0x140177a56], al
mov eax, dword [0x140177b30]
shl eax, 7
mov eax, eax
mov qword [0x140177af8], rax
mov eax, 2
imul rax, rax, 0xd
lea rcx, [0x1411e4810]
movzx edx, word [rsp + 0x88]
mov word [rcx + rax], dx
mov eax, dword [0x141167a50]
mov dword [rsp + 0xc4], eax
lea rax, [rsp + 0x270]
lea rcx, str.wcspbrk
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov word [0x140177b04], ax
mov eax, dword [rsp + 0x1cc]
mov ecx, dword [rsp + 0xc4]
add eax, ecx
mov dword [rsp + 0x17c], eax
mov r8b, 0xf5
mov dl, 0xc
xor ecx, ecx
call fcn.1400c0f00
movsx eax, al
mov dword [rsp + 0x6c], eax
movzx eax, word [0x140177ae4]
movzx eax, ax
mov ecx, dword [0x140177b08]
not ecx
add eax, ecx
movsx ecx, byte [rsp + 0x43]
not ecx
cmp eax, ecx
jle 0x1400d4201
mov dword [rsp + 0x15c], 1
jmp 0x1400d420c
mov dword [rsp + 0x15c], 0
movzx eax, byte [0x140177ae2]
movzx eax, al
cmp dword [rsp + 0x15c], eax
jne 0x1400d4421
movsx eax, word [rsp + 0x50]
mov edx, 0xe6
mov ecx, eax
call fcn.1400c1520
mov byte [0x140177aab], al
movzx eax, byte [0x140177aab]
movzx eax, al
test eax, eax
je 0x1400d441c
movzx eax, byte [0x140177ad7]
mov ecx, dword [rsp + 0x6c]
cmp eax, ecx
jle 0x1400d4268
mov dword [rsp + 0x164], 1
jmp 0x1400d4273
mov dword [rsp + 0x164], 0
movzx eax, byte [0x140177ad7]
cmp eax, 0x4a
jle 0x1400d428c
mov dword [rsp + 0x160], 1
jmp 0x1400d4297
mov dword [rsp + 0x160], 0
mov eax, dword [rsp + 0x160]
cmp dword [rsp + 0x164], eax
jl 0x1400d4300
movsx eax, word [rsp + 0x5c]
test eax, eax
je 0x1400d42c1
mov rax, qword [0x140177b48]
mov qword [rsp + 0x200], rax
jmp 0x1400d42d1
movsx rax, byte [0x140177aaa]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x98], rax
movzx eax, byte [0x140177ae2]
movzx eax, al
mov ecx, dword [0x140177b40]
sub ecx, eax
mov eax, ecx
mov dword [0x140177b40], eax
jmp 0x1400d441c
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d4344
movzx eax, byte [0x140177ae2]
movzx eax, al
sub eax, 0xef
cdqe
mov rcx, qword [rsp + 0x90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
movzx eax, byte [0x140177ad6]
dec al
mov byte [0x140177ad6], al
jmp 0x1400d441c
movsx eax, byte [rsp + 0x41]
movsx ecx, word [rsp + 0x5c]
cmp eax, ecx
jle 0x1400d435f
mov dword [rsp + 0x168], 1
jmp 0x1400d436a
mov dword [rsp + 0x168], 0
mov eax, dword [rsp + 0x168]
not eax
test eax, eax
je 0x1400d43b3
movzx eax, word [0x140177af0]
movsx rax, ax
movabs rcx, 0x7a87b6800267f
add rax, rcx
mov dword [0x140177b08], eax
mov eax, 0xca966fa5
mov qword [0x140177af8], rax
movzx eax, byte [0x140177a13]
sub eax, 0x9db0
mov byte [rsp + 0x40], al
jmp 0x1400d441c
movzx eax, byte [rsp + 0x42]
movsx eax, al
test eax, eax
jne 0x1400d43cd
mov qword [rsp + 0x208], 1
jmp 0x1400d43d9
mov qword [rsp + 0x208], 0
mov rax, qword [rsp + 0x208]
cmp qword [rsp + 0xd0], rax
jge 0x1400d441c
movzx eax, word [rsp + 0x48]
cwde
movzx ecx, byte [rsp + 0x40]
add eax, ecx
movzx ecx, word [rsp + 0x48]
movsx ecx, cx
add ecx, eax
mov eax, ecx
mov word [rsp + 0x48], ax
movsx eax, byte [0x140177a56]
sub eax, 0x23764e4c
mov word [0x140177af0], ax
jmp 0x1400d44d8
xor eax, eax
cmp eax, 0x77
je 0x1400d44d8
movzx eax, byte [0x140177ae2]
movzx eax, al
test eax, eax
jne 0x1400d4448
mov qword [rsp + 0x210], 1
jmp 0x1400d4454
mov qword [rsp + 0x210], 0
mov rax, qword [rsp + 0x210]
mov rcx, qword [0x140177af8]
sub rcx, rax
mov rax, rcx
mov ecx, dword [0x140177b34]
not ecx
movzx edx, byte [0x140177ae3]
movsx edx, dl
xor ecx, edx
mov ecx, ecx
imul rax, rcx
not rax
mov ecx, dword [0x140177b28]
mov rdx, qword [rsp + 0xd0]
xor rdx, rcx
mov rcx, rdx
movzx edx, word [0x140177a54]
sub rcx, rdx
imul rax, rcx
mov dword [rsp + 0x60], eax
movsx rax, word [0x140177b38]
movabs rcx, 0x9a423d35593c8
sub rax, rcx
mov dword [0x140177b30], eax
movzx eax, word [0x140177af0]
dec ax
mov word [0x140177af0], ax
mov eax, dword [rsp + 0x1d0]
mov ecx, dword [rsp + 0xc4]
add eax, ecx
mov dword [rsp + 0x224], eax
movsx eax, word [rsp + 0x54]
cmp eax, dword [rsp + 0x70]
jb 0x1400d4507
mov dword [rsp + 0x16c], 1
jmp 0x1400d4512
mov dword [rsp + 0x16c], 0
cmp dword [rsp + 0x16c], 0
jg 0x1400d452c
movzx eax, word [0x140177b3c]
movzx eax, ax
not eax
test eax, eax
je 0x1400d455f
lea rax, [rsp + 0x280]
lea rcx, str.NdrCStdStubBuffer2
mov rdi, rax
mov rsi, rcx
mov ecx, 0x13
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov word [0x140177b00], ax
jmp 0x1400d45c1
cmp qword [rsp + 0x1a8], 0
jne 0x1400d45c1
movsx eax, word [rsp + 0x54]
test eax, eax
jne 0x1400d45c1
xor eax, eax
cmp eax, 0xf6
jne 0x1400d45c1
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x64]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x64], eax
movzx eax, byte [0x140177ae3]
movsx eax, al
mov ecx, dword [0x140177b30]
imul ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov eax, dword [0x140177b08]
add eax, 0x3cd3e1dc
cdqe
mov qword [0x140177ae8], rax
mov eax, dword [rsp + 0xc4]
add eax, 0x3d6
mov dword [rsp + 0xc8], eax
movsx eax, byte [0x140177aaa]
movzx ecx, byte [rsp + 0x40]
cmp eax, ecx
jle 0x1400d464f
mov eax, dword [0x140177b40]
mov rcx, qword [0x140177ae8]
cmp rax, rcx
je 0x1400d464d
movsx eax, byte [rsp + 0x43]
not eax
and eax, 0
test eax, eax
jne 0x1400d4611
mov dword [rsp + 0x170], 1
jmp 0x1400d461c
mov dword [rsp + 0x170], 0
imul eax, dword [rsp + 0x170], 0x56
movzx ecx, word [rsp + 0x48]
movsx ecx, cx
sub eax, ecx
mov byte [0x140177a3f], al
movsx eax, byte [rsp + 0x41]
movzx ecx, byte [0x140177ae3]
movsx ecx, cl
add eax, ecx
not eax
mov byte [0x140177ad7], al
jmp 0x1400d4669
cmp dword [rsp + 0x68], 0
je 0x1400d4669
movzx eax, byte [rsp + 0x42]
mov byte [rsp + 0x45], al
imul eax, dword [rsp + 0x64], 0x2b
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0xcc], eax
movzx eax, byte [0x140177ae2]
movzx eax, al
cmp rax, qword [rsp + 0x98]
jge 0x1400d46e5
mov eax, dword [0x141167a50]
mov dword [rsp + 0x60], eax
movzx eax, word [rsp + 0x48]
movsx rax, ax
imul rax, qword [rsp + 0x78]
not rax
mov ecx, dword [0x140177b24]
not ecx
movzx edx, byte [0x140177ae2]
movzx edx, dl
and ecx, edx
movsxd rcx, ecx
add rax, rcx
mov byte [0x140177a57], al
mov eax, dword [0x140177b30]
mov eax, eax
movabs rcx, 0x28782c22de30c
sub rax, rcx
mov word [0x140177a54], ax
jmp 0x1400d4741
mov rax, qword [0x140177b48]
not rax
test rax, rax
je 0x1400d4741
mov qword [0x140177b10], 1
mov eax, 0xffffcf34
mov word [0x140177b04], ax
cmp dword [0x140177b40], 0
je 0x1400d4723
mov eax, dword [0x140177b24]
mov dword [rsp + 0x174], eax
jmp 0x1400d4734
movzx eax, word [0x140177a14]
movzx eax, ax
mov dword [rsp + 0x174], eax
movzx eax, word [rsp + 0x174]
mov word [rsp + 0x4c], ax
mov dword [rsp + 0x178], 0
cmp qword [rsp + 0x2c0], 0
jne 0x1400d4850
mov cx, 0x25
call fcn.1400c0860
cwde
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x1400d4824
movsx eax, byte [0x140177a56]
test eax, eax
je 0x1400d47c5
movabs rax, 0x2d9435a2665ea
mov rcx, qword [rsp + 0x98]
sub rcx, rax
mov rax, rcx
mov dword [0x140177b08], eax
movzx eax, word [0x140177a14]
movzx eax, ax
add eax, 0x68
mov word [rsp + 0x54], ax
movzx eax, word [0x140177b3c]
movzx eax, ax
sub eax, 0xec
mov word [rsp + 0x54], ax
jmp 0x1400d4822
cmp qword [rsp + 0x1a8], 0
jne 0x1400d4822
movzx eax, word [0x140177af0]
cwde
test eax, eax
jne 0x1400d4822
mov eax, dword [rsp + 0x70]
mov ecx, dword [0x140177b18]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140177b18]
add ecx, eax
mov eax, ecx
mov dword [0x140177b18], eax
movzx eax, word [0x140177ae4]
movzx eax, ax
movabs rcx, 0xffffffff1aca6732
lea rax, [rax + rcx]
mov ecx, dword [0x140177b08]
lea eax, [rax + rcx]
mov word [0x140177ae4], ax
jmp 0x1400d4846
movsx eax, byte [rsp + 0x43]
test eax, eax
je 0x1400d4846
mov dword [0x140177b18], 0x7228b9c6
mov eax, dword [rsp + 0x64]
xor eax, 0xe1cb
mov byte [0x140177a7e], al
mov eax, 1
jmp 0x1400d4b38
lea r9, [rsp + 0xcc]
mov r8d, dword [rsp + 0x2d0]
mov rdx, qword [rsp + 0x2c8]
mov rcx, qword [rsp + 0x2c0]
call sub.KERNEL32.dll_K32EnumProcessModules
mov dword [rsp + 0x178], eax
mov eax, dword [rsp + 0x1b4]
cmp dword [rsp + 0x178], eax
jne 0x1400d4896
mov eax, 1
jmp 0x1400d4b38
mov eax, dword [rsp + 0x17c]
mov ecx, dword [rsp + 0xc8]
add eax, ecx
mov ecx, dword [rsp + 0x1b8]
mov edx, dword [rsp + 0xc8]
sub ecx, edx
mov edx, dword [rsp + 0x17c]
mov edi, dword [rsp + 0xc8]
xor edx, edi
add ecx, edx
cmp eax, ecx
je 0x1400d4ad3
cmp qword [rsp + 0x88], 0
je 0x1400d48f2
cmp qword [0x140177b48], 0
je 0x1400d48f2
mov dword [rsp + 0x184], 1
jmp 0x1400d48fd
mov dword [rsp + 0x184], 0
movzx eax, byte [rsp + 0x44]
movzx eax, al
test eax, eax
jne 0x1400d4916
mov dword [rsp + 0x180], 1
jmp 0x1400d4921
mov dword [rsp + 0x180], 0
mov eax, dword [rsp + 0x180]
cmp dword [rsp + 0x184], eax
je 0x1400d49bf
movzx eax, byte [rsp + 0x44]
movzx eax, al
test eax, eax
je 0x1400d4955
cmp dword [rsp + 0x64], 0
jne 0x1400d4955
mov dword [rsp + 0x18c], 0
jmp 0x1400d4960
mov dword [rsp + 0x18c], 1
cmp qword [rsp + 0x98], 0x8d
jge 0x1400d497b
mov dword [rsp + 0x188], 1
jmp 0x1400d4986
mov dword [rsp + 0x188], 0
mov eax, dword [rsp + 0x188]
cmp dword [rsp + 0x18c], eax
jg 0x1400d49a3
mov dword [rsp + 0x190], 1
jmp 0x1400d49ae
mov dword [rsp + 0x190], 0
mov eax, dword [rsp + 0x190]
not eax
test eax, eax
je 0x1400d4a4e
movzx eax, word [rsp + 0x48]
cwde
movsx ecx, word [rsp + 0x54]
cmp eax, ecx
jne 0x1400d4a00
movzx eax, byte [rsp + 0x42]
movsx eax, al
mov ecx, dword [0x140177b34]
imul ecx, eax
mov eax, ecx
mov ecx, dword [0x140177b34]
sub ecx, eax
mov eax, ecx
mov dword [0x140177b34], eax
movzx eax, byte [0x141167a50]
mov byte [0x140177a56], al
jmp 0x1400d4a4c
movzx eax, byte [rsp + 0x40]
movsx ecx, word [0x140177b00]
sub eax, ecx
not eax
test eax, eax
je 0x1400d4a4c
mov eax, dword [0x140177b30]
mov eax, eax
add rax, qword [rsp + 0x78]
mov dword [0x140177b30], eax
mov eax, dword [rsp + 0x6c]
cdqe
movabs rcx, 0xaf83a5f082a68
xor rax, rcx
movzx ecx, byte [rsp + 0x44]
movzx ecx, cl
and rcx, rax
mov rax, rcx
mov byte [rsp + 0x44], al
jmp 0x1400d4a95
movzx eax, byte [rsp + 0x45]
inc al
mov byte [rsp + 0x45], al
mov eax, 0x6774
mov word [rsp + 0x50], ax
cmp dword [rsp + 0x60], 0
je 0x1400d4a79
movzx eax, byte [rsp + 0x40]
mov qword [rsp + 0x218], rax
jmp 0x1400d4a86
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x218]
mov qword [0x140177af8], rax
mov eax, dword [rsp + 0x2d0]
cmp dword [rsp + 0xcc], eax
jbe 0x1400d4ad3
movzx eax, word [0x140177af0]
cwde
sub eax, 0x7e
mov ecx, dword [0x140177b40]
sub ecx, eax
mov eax, ecx
mov dword [0x140177b40], eax
movzx eax, word [rsp + 0x58]
mov word [0x140177ae0], ax
mov eax, 2
jmp 0x1400d4b38
imul eax, dword [rsp + 0x64], 0
mov byte [0x140177a3e], al
movsx rax, byte [rsp + 0x41]
mov rcx, qword [0x140177b10]
imul rcx, rax
mov rax, rcx
movsx ecx, byte [0x140177a57]
mov edx, dword [0x140177b24]
not edx
add ecx, edx
movsxd rcx, ecx
and rax, rcx
mov word [0x140177af0], ax
movzx eax, byte [0x141167a50]
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0xcc]
xor edx, edx
mov ecx, 8
div rcx
mov rcx, qword [rsp + 0x2d8]
mov dword [rcx], eax
xor eax, eax
add rsp, 0x2a8
pop rdi
pop rsi
ret