Function at 0x1402d9fb0
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x328
movaps xmmword [rsp + 0x310], xmm6
mov qword [rsp + 0x130], r8
mov r12, rdx
mov qword [rsp + 0x60], rcx
mov rax, qword [0x140b74de8]
xor rax, rsp
mov qword [rsp + 0x308], rax
test rdx, rdx
mov eax, 0x33af1e64
mov ecx, 0x4ccc87f4
cmove ecx, eax
mov dword [rsp + 0xb4], ecx
mov r13, qword [sym.imp.KERNEL32.dll_VirtualFree]
xorps xmm6, xmm6
mov r14d, 0xf7feff39
mov r15d, 0x6b46bc4a
mov eax, 0x2f70e700
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88b63100
mov ecx, 0x8544bb95
nop word [rax + rax]
cmove eax, ecx
cmp dword [0x140b7e1b4], 0xa
cmovl eax, ecx
cmp eax, 0xf1798ac
jle 0x1402da0b0
cmp eax, 0x4a06384e
jle 0x1402da120
cmp eax, 0x6703619b
jle 0x1402da209
cmp eax, 0x6e727b93
jle 0x1402da365
cmp eax, 0x78c1485e
jle 0x1402da5bd
cmp eax, 0x7d799830
jg 0x1402daa8a
cmp eax, 0x78c1485f
je 0x1402dae93
cmp eax, 0x7a355e15
jne 0x1402da04d
mov eax, 0x5989bd23
jmp 0x1402da04d
cmp eax, 0xbd2e9af8
jg 0x1402da170
cmp eax, 0x9f97a7e5
jg 0x1402da26e
cmp eax, 0x8f1fc4f7
jg 0x1402da39b
cmp eax, 0x88b630ff
jle 0x1402da5ea
cmp eax, 0x8dc28032
jg 0x1402daabe
cmp eax, 0x88b63100
je 0x1402dae9d
cmp eax, 0x8a3322c7
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0dfb714
mov ecx, 0x21aca60e
jmp 0x1402da040
cmp eax, 0x2f413e9a
jg 0x1402da2d3
cmp eax, 0x2586cd1d
jg 0x1402da3e5
cmp eax, 0x1c13eb0f
jle 0x1402da62d
cmp eax, 0x219b3306
jg 0x1402daaf2
cmp eax, 0x1c13eb10
je 0x1402daea7
cmp eax, 0x20916342
jne 0x1402da04d
mov eax, 0xba27331e
jmp 0x1402da04d
cmp eax, 0xed82998b
jg 0x1402da314
cmp eax, 0xd918f327
jg 0x1402da42f
cmp eax, 0xc0db2cec
jle 0x1402da668
cmp eax, 0xcc6eb93e
jg 0x1402dab26
cmp eax, 0xc0db2ced
je 0x1402daec4
cmp eax, 0xc5073127
jne 0x1402da04d
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x128], rax
lea rcx, [rsp + 0x1a0]
call fcn.14029aff0
mov rax, qword [rsp + 0x110]
mov edx, dword [rsp + 0x84]
test edx, edx
mov eax, 0xaf715bd3
mov ecx, 0x8f356564
cmove eax, ecx
mov rcx, qword [rsp + 0x128]
mov qword [rsp + 0xe0], rcx
mov dword [rsp + 0x80], edx
jmp 0x1402da04d
cmp eax, 0x55c34c30
jg 0x1402da475
cmp eax, 0x4ccc87f3
jle 0x1402da6d8
cmp eax, 0x523607de
jg 0x1402dab53
cmp eax, 0x4ccc87f4
je 0x1402daed8
cmp eax, 0x4ed6f58b
jne 0x1402da04d
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x148], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x26e5c749
mov ecx, 0xed82998c
jmp 0x1402da040
cmp eax, 0xaf715bd2
jg 0x1402da4bf
cmp eax, 0xa543f22d
jle 0x1402da7cd
cmp eax, 0xac0edc77
jg 0x1402dab73
cmp eax, 0xa543f22e
je 0x1402daef6
cmp eax, 0xaa697533
jne 0x1402da04d
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x188], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x37dbec35
mov ecx, 0xb3c0c61c
jmp 0x1402da040
cmp eax, 0x4091c295
jg 0x1402da510
cmp eax, 0x33af1e63
jle 0x1402da7f8
cmp eax, 0x39537a0e
jg 0x1402dab93
cmp eax, 0x33af1e64
je 0x1402daf0a
cmp eax, 0x37dbec35
jne 0x1402da04d
mov eax, 0xb3c0c61c
jmp 0x1402da04d
cmp eax, 0xfe705194
jg 0x1402da55f
cmp eax, 0xf3eb897d
jle 0x1402da837
cmp eax, 0xfa216e00
jg 0x1402dabbd
cmp eax, 0xf3eb897e
je 0x1402daf28
cmp eax, 0xf749d181
jne 0x1402da04d
mov eax, 0x418d6e68
mov rcx, qword [rsp + 0x198]
mov qword [rsp + 0xf8], rcx
jmp 0x1402da04d
cmp eax, 0x6aaaf882
jle 0x1402da862
cmp eax, 0x6cd9b7ef
jg 0x1402daca0
cmp eax, 0x6aaaf883
je 0x1402daf46
cmp eax, 0x6c7dbea7
jne 0x1402da04d
mov eax, 0x7ef67c93
jmp 0x1402da04d
cmp eax, 0x9b899c86
jle 0x1402da8a5
cmp eax, 0x9e41e7be
jg 0x1402dad05
cmp eax, 0x9b899c87
je 0x1402dafa0
cmp eax, 0x9c2e6b02
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4a001ddd
mov ecx, 0xac0edc78
jmp 0x1402da040
cmp eax, 0x2aa660e6
jle 0x1402da8e0
cmp eax, 0x2d834cc3
jg 0x1402dad49
cmp eax, 0x2aa660e7
je 0x1402dafb7
cmp eax, 0x2bd0598b
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x78c1485f
mov ecx, 0xf749d181
jmp 0x1402da040
cmp eax, 0xe0daa594
jle 0x1402da926
cmp eax, 0xe5f6aa63
jg 0x1402dad9e
cmp eax, 0xe0daa595
je 0x1402dafd1
cmp eax, 0xe18220cf
jne 0x1402da04d
mov eax, 0xaa697533
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0xc8], rcx
jmp 0x1402da04d
cmp eax, 0x59c5743c
jle 0x1402da97d
cmp eax, 0x60e4a6c5
jg 0x1402dadce
cmp eax, 0x59c5743d
je 0x1402dafe5
cmp eax, 0x5c397b84
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x26e5c749
mov ecx, 0x4ed6f58b
jmp 0x1402da040
cmp eax, 0xb3c0c61b
jle 0x1402da9bc
cmp eax, 0xb7d6ad8e
jg 0x1402dadfe
cmp eax, 0xb3c0c61c
je 0x1402daff9
cmp eax, 0xb49f57a8
jne 0x1402da04d
mov eax, dword [rsp + 0xbc]
mov dword [rsp + 0x7c], eax
mov eax, 0xe0af3675
mov rcx, qword [rsp + 0x128]
mov qword [rsp + 0x138], rcx
jmp 0x1402da04d
cmp eax, 0x4815a183
jle 0x1402daa0c
cmp eax, 0x4a001ddc
jg 0x1402dae2a
cmp eax, 0x4815a184
je 0x1402db017
cmp eax, 0x48cf2dbd
jne 0x1402da04d
mov rax, qword [rsp + 0x58]
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf3eb897e
mov ecx, 0x2f129731
jmp 0x1402da040
cmp eax, 0xa5059cd
jle 0x1402daa4b
cmp eax, 0xcb20f19
jg 0x1402dae54
cmp eax, 0xa5059ce
je 0x1402db035
cmp eax, 0xc1245c5
jne 0x1402da04d
mov rax, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x178]
mov eax, dword [rax + rcx*4]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
cmp eax, 0x1001
mov eax, 0x55c34c31
mov ecx, 0x671669e4
cmovb eax, ecx
jmp 0x1402da04d
cmp eax, 0x725d58a2
jg 0x1402dae7e
cmp eax, 0x6e727b94
je 0x1402db07e
cmp eax, 0x723ae24b
jne 0x1402da04d
mov eax, dword [rsp + 0xb4]
jmp 0x1402da04d
cmp eax, 0x80945cf8
je 0x1402db09c
cmp eax, 0x8544bb95
je 0x1402db0a6
cmp eax, 0x85b0dbff
jne 0x1402da04d
mov edx, dword [rsp + 0x48]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov eax, 0xa028f584
jmp 0x1402da04d
cmp eax, 0xf1798ad
je 0x1402db0d1
cmp eax, 0x15c2fa8a
je 0x1402db0ee
cmp eax, 0x163648de
jne 0x1402da04d
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov r8d, 0x8000
call r13
mov eax, 0xcf66df8
jmp 0x1402da04d
cmp eax, 0xbd2e9af9
je 0x1402db11b
cmp eax, 0xbfc00bf0
je 0x1402db135
cmp eax, 0xc0029da7
jne 0x1402da04d
mov rdx, qword [rsp + 0x98]
add rdx, qword [rsp + 0x170]
lea rcx, [rsp + 0x1a0]
call fcn.14028dbd0
mov ecx, 0x2953c052
nop dword [rax + rax]
cmp ecx, 0xe5c6d0b0
je 0x1402db210
cmp ecx, 0x2953c052
jne 0x1402da6b0
mov rcx, qword [rsp + 0x130]
call fcn.14028f8b0
mov ecx, 0xe5c6d0b0
jmp 0x1402da6b0
cmp eax, 0x4a06384f
je 0x1402db248
cmp eax, 0x4adfea29
je 0x1402db252
cmp eax, 0x4be5b4eb
jne 0x1402da04d
mov esi, dword [rsp + 0x44]
add rsi, r12
mov r13, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x38]
mov ecx, 0x25de3e55
mov edx, dword [0x140b7e098]
lea edi, [rdx - 1]
imul edi, edx
test dil, 1
sete dl
cmp dword [0x140b7e09c], 0xa
setl bl
or bl, dl
mov edx, 0x1641141b
cmovne edx, r14d
mov edi, 0x1641141b
cmovne edi, r15d
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x1641141a
jle 0x1402da780
cmp ecx, 0x1641141b
je 0x1402da795
cmp ecx, 0x6b46bc4a
je 0x1402da79c
cmp ecx, 0x25de3e55
jne 0x1402da750
jmp 0x1402da7b0
cmp ecx, 0xdd241186
je 0x1402da7a0
cmp ecx, 0xf7feff39
jne 0x1402da750
jmp 0x1402db270
mov ecx, 0x6b46bc4a
jmp 0x1402da750
mov ecx, edx
jmp 0x1402da750
mov ecx, edi
jmp 0x1402da750
mov rcx, qword [rsp + 0x60]
mov rdx, rbp
mov r8, rsi
mov r9, r13
call fcn.1402c4d40
mov ecx, 0xdd241186
jmp 0x1402da712
cmp eax, 0x9f97a7e6
je 0x1402db28b
cmp eax, 0xa028f584
je 0x1402db2af
cmp eax, 0xa0dfb714
jne 0x1402da04d
mov eax, 0x21aca60e
jmp 0x1402da04d
cmp eax, 0x2f413e9b
je 0x1402db2fa
cmp eax, 0x2f70e700
je 0x1402db311
cmp eax, 0x326ac91a
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4a001ddd
mov ecx, 0x9c2e6b02
jmp 0x1402da040
cmp eax, 0xed82998c
je 0x1402db31b
cmp eax, 0xef24f117
je 0x1402db325
cmp eax, 0xf22a4b4e
jne 0x1402da04d
mov eax, 0x28223de9
jmp 0x1402da04d
cmp eax, 0x6703619c
je 0x1402db34a
cmp eax, 0x671669e4
je 0x1402db36f
cmp eax, 0x674113a2
jne 0x1402da04d
mov rax, qword [rsp + 0x90]
add rax, qword [rsp + 0xa0]
mov qword [rsp + 0x180], rax
mov eax, 0x219b3307
jmp 0x1402da04d
cmp eax, 0x8f1fc4f8
je 0x1402db38d
cmp eax, 0x8f356564
je 0x1402db3a7
cmp eax, 0x959cda9f
jne 0x1402da04d
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov r8d, 0x8000
call r13
mov eax, 0xe0daa595
jmp 0x1402da04d
cmp eax, 0x2586cd1e
je 0x1402db3bf
cmp eax, 0x26e5c749
je 0x1402db490
cmp eax, 0x28223de9
jne 0x1402da04d
mov cl, byte [rsp + 0x2d]
cmp byte [rsp + 0x2e], 0
mov eax, 0x8a3322c7
mov edx, 0x44ea1ae9
cmovne eax, edx
test cl, cl
mov ecx, 0x8a3322c7
cmove eax, ecx
jmp 0x1402da04d
cmp eax, 0xd918f328
je 0x1402db49a
cmp eax, 0xdbab0086
je 0x1402db4a4
cmp eax, 0xe0af3675
jne 0x1402da04d
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x120], rax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x50]
cmp ecx, dword [rax + 0x18]
mov eax, 0x326ac91a
mov ecx, 0xa5059ce
cmovb eax, ecx
jmp 0x1402da04d
cmp eax, 0x55c34c31
je 0x1402db58d
cmp eax, 0x561ae4ed
je 0x1402db5ab
cmp eax, 0x5989bd23
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7a355e15
mov ecx, 0xbd2e9af9
jmp 0x1402da040
cmp eax, 0xaf715bd3
je 0x1402db5bf
cmp eax, 0xb0d05d3b
je 0x1402db5e9
cmp eax, 0xb18890d7
jne 0x1402da04d
mov rax, qword [rsp + 0x70]
sub rax, qword [rsp + 0x108]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x20]
mov qword [rsp + 0x150], rax
mov eax, 0x6aaaf883
jmp 0x1402da04d
cmp eax, 0x4091c296
je 0x1402da021
cmp eax, 0x418d6e68
je 0x1402db60f
cmp eax, 0x44ea1ae9
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x85b0dbff
mov ecx, 0xa028f584
jmp 0x1402da040
cmp eax, 0xfe705195
je 0x1402db629
cmp eax, 0xdd162
je 0x1402db647
cmp eax, 0x7ede0d3
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5344e755
mov ecx, 0xea7e39fa
jmp 0x1402da040
cmp eax, 0x7d799831
je 0x1402db672
cmp eax, 0x7ef67c93
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6c7dbea7
mov ecx, 0xb49f57a8
jmp 0x1402da040
cmp eax, 0x8dc28033
je 0x1402db67c
cmp eax, 0x8ee1bccd
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xac578004
mov ecx, 0x561ae4ed
jmp 0x1402da040
cmp eax, 0x219b3307
je 0x1402db6a1
cmp eax, 0x21aca60e
jne 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0dfb714
mov ecx, 0x4a04eb69
jmp 0x1402da040
cmp eax, 0xcc6eb93f
je 0x1402db6c3
cmp eax, 0xd47fbc82
jne 0x1402da04d
cmp byte [rsp + 0x2b], 0
mov eax, 0x59c5743d
mov ecx, 0x5c397b84
cmovne eax, ecx
jmp 0x1402da04d
cmp eax, 0x523607df
je 0x1402db6dd
cmp eax, 0x5344e755
jne 0x1402da04d
mov eax, 0x7ede0d3
jmp 0x1402da04d
cmp eax, 0xac0edc78
je 0x1402db6fb
cmp eax, 0xac578004
jne 0x1402da04d
mov eax, 0x8ee1bccd
jmp 0x1402da04d
cmp eax, 0x39537a0f
je 0x1402db720
cmp eax, 0x3d4a19da
jne 0x1402da04d
mov eax, 0x76ecfcca
xor ecx, ecx
mov qword [rsp + 0xc0], rcx
jmp 0x1402da04d
cmp eax, 0xfa216e01
je 0x1402db73e
cmp eax, 0xfd255ba0
jne 0x1402da04d
mov rcx, qword [rsp + 0x68]
mov r8d, 0x108
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rsp + 0x58]
mov ecx, 0x25de3e55
mov edx, dword [0x140b7e098]
lea ebp, [rdx - 1]
imul ebp, edx
test bpl, 1
sete dl
cmp dword [0x140b7e09c], 0xa
setl bl
or bl, dl
mov edx, 0x1641141b
cmovne edx, r14d
mov ebp, 0x1641141b
cmovne ebp, r15d
cmp ecx, 0x1641141a
jle 0x1402dac50
cmp ecx, 0x1641141b
je 0x1402dac65
cmp ecx, 0x6b46bc4a
je 0x1402dac6c
cmp ecx, 0x25de3e55
jne 0x1402dac20
jmp 0x1402dac80
cmp ecx, 0xdd241186
je 0x1402dac70
cmp ecx, 0xf7feff39
jne 0x1402dac20
jmp 0x1402db761
mov ecx, 0x6b46bc4a
jmp 0x1402dac20
mov ecx, edx
jmp 0x1402dac20
mov ecx, ebp
jmp 0x1402dac20
mov r9d, 0x40
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
mov r8, r12
call fcn.1402c4d40
mov ecx, 0xdd241186
jmp 0x1402dabef
cmp eax, 0x6cd9b7f0
je 0x1402db78d
cmp eax, 0x6ce629a5
jne 0x1402da04d
mov rax, qword [rsp + 0x88]
mov eax, dword [rax]
mov dword [rsp + 0x44], eax
mov rax, qword [rsp + 0x88]
mov eax, dword [rax + 4]
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x44], 0
setne byte [rsp + 0x2d]
cmp dword [rsp + 0x48], 0
setne byte [rsp + 0x2e]
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f1fc4f8
mov ecx, 0xf22a4b4e
jmp 0x1402da040
cmp eax, 0x9e41e7bf
je 0x1402db7ab
cmp eax, 0x9f06e3d8
jne 0x1402da04d
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x198], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x78c1485f
mov ecx, 0x2bd0598b
jmp 0x1402da040
cmp eax, 0x2d834cc4
je 0x1402db7c9
cmp eax, 0x2f129731
jne 0x1402da04d
mov rax, qword [rsp + 0x58]
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x68], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf3eb897e
mov ecx, 0xb7d6ad8f
jmp 0x1402da040
cmp eax, 0xe5f6aa64
je 0x1402db7f7
cmp eax, 0xea7e39fa
jne 0x1402da04d
mov eax, 0x9f06e3d8
mov rcx, qword [rsp + 0x190]
mov qword [rsp + 0xf0], rcx
jmp 0x1402da04d
cmp eax, 0x60e4a6c6
je 0x1402db801
cmp eax, 0x65fa0aa2
jne 0x1402da04d
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov r8d, 0x8000
call r13
mov eax, 0xa543f22e
jmp 0x1402da04d
cmp eax, 0xb7d6ad8f
je 0x1402db80f
cmp eax, 0xba27331e
jne 0x1402da04d
movzx eax, word [rsp + 0x56]
mov dword [rsp + 0xb8], eax
mov eax, 0x9e41e7bf
jmp 0x1402da04d
cmp eax, 0x4a001ddd
je 0x1402db819
cmp eax, 0x4a04eb69
jne 0x1402da04d
mov eax, 0x418d6e68
xor ecx, ecx
mov qword [rsp + 0xf8], rcx
jmp 0x1402da04d
cmp eax, 0xcb20f1a
je 0x1402db823
cmp eax, 0xcf66df8
jne 0x1402da04d
mov eax, 0x2d834cc4
xor ecx, ecx
mov qword [rsp + 0xd8], rcx
jmp 0x1402da04d
cmp eax, 0x725d58a3
jne 0x1402db8cd
mov eax, 0x523607df
jmp 0x1402da04d
mov eax, 0x2bd0598b
jmp 0x1402da04d
mov eax, 0x8544bb95
jmp 0x1402da04d
mov rax, qword [rsp + 0x148]
cmp dword [rax], 0x4550
setne byte [rsp + 0x2c]
mov eax, 0x2f413e9b
jmp 0x1402da04d
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x70], rax
mov eax, 0xfe705195
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd918f328
mov ecx, 0xdd162
jmp 0x1402da040
mov eax, 0x9f06e3d8
xor ecx, ecx
mov qword [rsp + 0xf0], rcx
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80945cf8
mov ecx, 0x4adfea29
jmp 0x1402da040
mov rax, qword [rsp + 0x58]
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov eax, 0x2f129731
jmp 0x1402da04d
mov rax, qword [rsp + 0x98]
add rax, qword [rsp + 0x150]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x24]
add rax, qword [rsp + 0x98]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x1c]
add rax, qword [rsp + 0x98]
mov qword [rsp + 0x168], rax
mov eax, 0xe0af3675
mov dword [rsp + 0x7c], 0
jmp 0x1402da04d
cmp byte [rsp + 0x2f], 0
mov eax, 0x65fa0aa2
mov ecx, 0xb18890d7
cmovne eax, ecx
jmp 0x1402da04d
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov r8d, 0x8000
call r13
mov eax, 0x4815a184
jmp 0x1402da04d
mov eax, 0xe18220cf
xor ecx, ecx
mov qword [rsp + 0xd0], rcx
jmp 0x1402da04d
mov eax, 0x9f97a7e6
xor ecx, ecx
mov qword [rsp + 0x100], rcx
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x37dbec35
mov ecx, 0x6703619c
jmp 0x1402da040
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7a355e15
mov ecx, 0x5989bd23
jmp 0x1402da040
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov eax, dword [rsp + 0x50]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x118]
mov eax, dword [rax + rcx*4]
mov qword [rsp + 0x170], rax
mov eax, 0xc0029da7
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x725d58a3
mov ecx, 0x523607df
jmp 0x1402da040
mov eax, 0x4adfea29
jmp 0x1402da04d
movzx eax, word [rsp + 0x2c8]
mov word [rsp + 0x56], ax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88b63100
mov ecx, 0x20916342
jmp 0x1402da040
movsxd rax, dword [rsp + 0x304]
add rax, r12
mov qword [rsp + 0x140], rax
mov eax, 0x2586cd1e
jmp 0x1402da04d
mov eax, dword [rsp + 0x4c]
add rax, r12
mov qword [rsp + 0xa8], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x60e4a6c6
mov ecx, 0x4a06384f
jmp 0x1402da040
mov eax, 0xe18220cf
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rcx
jmp 0x1402da04d
mov rcx, qword [rsp + 0x68]
mov r8d, 0x108
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rsp + 0x58]
mov ecx, 0x25de3e55
mov edx, dword [0x140b7e098]
lea ebp, [rdx - 1]
imul ebp, edx
test bpl, 1
sete dl
cmp dword [0x140b7e09c], 0xa
setl bl
or bl, dl
mov edx, 0x1641141b
cmovne edx, r14d
mov ebp, 0x1641141b
cmovne ebp, r15d
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x1641141a
jle 0x1402db1c0
cmp ecx, 0x1641141b
je 0x1402db1d5
cmp ecx, 0x6b46bc4a
je 0x1402db1dc
cmp ecx, 0x25de3e55
jne 0x1402db190
jmp 0x1402db1f0
cmp ecx, 0xdd241186
je 0x1402db1e0
cmp ecx, 0xf7feff39
jne 0x1402db190
jmp 0x1402db83a
mov ecx, 0x6b46bc4a
jmp 0x1402db190
mov ecx, edx
jmp 0x1402db190
mov ecx, ebp
jmp 0x1402db190
mov r9d, 0x40
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
mov r8, r12
call fcn.1402c4d40
mov ecx, 0xdd241186
jmp 0x1402db151
mov qword [rsp + 0x30], rax
mov rsi, qword [rsp + 0x30]
mov ecx, 0x2953c052
nop
cmp ecx, 0xe5c6d0b0
je 0x1402db84e
cmp ecx, 0x2953c052
jne 0x1402db220
lea rcx, [rsp + 0x1a0]
call fcn.14028f8b0
mov ecx, 0xe5c6d0b0
jmp 0x1402db220
mov eax, 0x8dc28033
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80945cf8
mov ecx, 0x3d4a19da
jmp 0x1402da040
and al, 1
mov byte [rsp + 0x30], al
mov al, byte [rsp + 0x30]
mov eax, 0xdbab0086
mov r13, qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1402da04d
mov rax, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov eax, 0x76ecfcca
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0xc0], rcx
jmp 0x1402da04d
mov eax, dword [rsp + 0x48]
mov qword [rsp + 0x90], rax
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x38], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x85b0dbff
mov ecx, 0xe5f6aa64
jmp 0x1402da040
cmp byte [rsp + 0x2c], 0
mov eax, 0xcc6eb93f
mov ecx, 0x59c5743d
cmovne eax, ecx
jmp 0x1402da04d
mov eax, 0x723ae24b
jmp 0x1402da04d
mov eax, 0x1c13eb10
jmp 0x1402da04d
mov eax, 0xc5073127
mov dword [rsp + 0x84], 0
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0xe8], rcx
jmp 0x1402da04d
mov eax, 0xc5073127
mov dword [rsp + 0x84], 1
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0xe8], rcx
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xac578004
mov ecx, 0x8ee1bccd
jmp 0x1402da040
mov rax, qword [rsp + 0x88]
mov rax, qword [rsp + 0x88]
mov eax, 0x6ce629a5
jmp 0x1402da04d
mov eax, dword [rsp + 0x50]
add eax, 1
mov dword [rsp + 0xbc], eax
mov eax, 0x6cd9b7f0
jmp 0x1402da04d
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x140]
mov ecx, 0x25de3e55
mov edx, dword [0x140b7e098]
lea ebp, [rdx - 1]
imul ebp, edx
test bpl, 1
sete dl
cmp dword [0x140b7e09c], 0xa
setl bl
or bl, dl
mov edx, 0x1641141b
cmovne edx, r14d
mov ebp, 0x1641141b
cmovne ebp, r15d
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x1641141a
jle 0x1402db440
cmp ecx, 0x1641141b
je 0x1402db455
cmp ecx, 0x6b46bc4a
je 0x1402db45c
cmp ecx, 0x25de3e55
jne 0x1402db410
jmp 0x1402db470
cmp ecx, 0xdd241186
je 0x1402db460
cmp ecx, 0xf7feff39
jne 0x1402db410
jmp 0x1402db875
mov ecx, 0x6b46bc4a
jmp 0x1402db410
mov ecx, edx
jmp 0x1402db410
mov ecx, ebp
jmp 0x1402db410
mov r9d, 0x108
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
mov r8, rdi
call fcn.1402c4d40
mov ecx, 0xdd241186
jmp 0x1402db3d1
mov eax, 0x4ed6f58b
jmp 0x1402da04d
mov eax, 0xdd162
jmp 0x1402da04d
mov eax, dword [rsp + 0x44]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
add rax, r12
mov qword [rsp + 0xa0], rax
mov rsi, qword [rsp + 0x90]
mov r13, qword [rsp + 0x38]
mov rbp, qword [rsp + 0xa0]
mov ecx, 0x25de3e55
mov edx, dword [0x140b7e098]
lea edi, [rdx - 1]
imul edi, edx
test dil, 1
sete dl
cmp dword [0x140b7e09c], 0xa
setl bl
or bl, dl
mov edx, 0x1641141b
cmovne edx, r14d
mov edi, 0x1641141b
cmovne edi, r15d
nop
cmp ecx, 0x1641141a
jle 0x1402db540
cmp ecx, 0x1641141b
je 0x1402db555
cmp ecx, 0x6b46bc4a
je 0x1402db55c
cmp ecx, 0x25de3e55
jne 0x1402db510
jmp 0x1402db570
cmp ecx, 0xdd241186
je 0x1402db560
cmp ecx, 0xf7feff39
jne 0x1402db510
jmp 0x1402db88d
mov ecx, 0x6b46bc4a
jmp 0x1402db510
mov ecx, edx
jmp 0x1402db510
mov ecx, edi
jmp 0x1402db510
mov rcx, qword [rsp + 0x60]
mov rdx, r13
mov r8, rbp
mov r9, rsi
call fcn.1402c4d40
mov ecx, 0xdd241186
jmp 0x1402db4dd
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x60e4a6c6
mov ecx, 0x15c2fa8a
jmp 0x1402da040
mov eax, 0xaa697533
xor ecx, ecx
mov qword [rsp + 0xc8], rcx
jmp 0x1402da04d
cmp dword [rsp + 0x80], 2
mov eax, 0x2d834cc4
mov ecx, 0x163648de
cmove eax, ecx
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xd8], rcx
jmp 0x1402da04d
mov rax, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x118]
movzx eax, word [rax + rcx*2]
mov qword [rsp + 0x178], rax
mov eax, 0xc1245c5
jmp 0x1402da04d
mov eax, 0x9f97a7e6
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x100], rcx
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4be5b4eb
mov ecx, 0xdbab0086
jmp 0x1402da040
lea rax, [rsp + 0x2c8]
mov qword [rsp + 0x58], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd918f328
mov ecx, 0x7d799831
jmp 0x1402da040
mov eax, 0x48cf2dbd
jmp 0x1402da04d
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
mov eax, 0x674113a2
mov ecx, 0x2aa660e7
cmovb eax, ecx
jmp 0x1402da04d
mov rax, qword [rsp + 0xa8]
cmp rax, qword [rsp + 0x180]
mov eax, 0x959cda9f
mov ecx, 0x2aa660e7
cmova eax, ecx
jmp 0x1402da04d
lea rax, [rsp + 0x248]
mov qword [rsp + 0x88], rax
mov eax, 0x39537a0f
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x725d58a3
mov ecx, 0xef24f117
jmp 0x1402da040
mov eax, 0xaf715bd3
mov dword [rsp + 0x80], 2
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0xe0], rcx
jmp 0x1402da04d
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f1fc4f8
mov ecx, 0x6ce629a5
jmp 0x1402da040
mov rax, qword [rsp + 0x68]
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbfc00bf0
mov ecx, 0xfd255ba0
jmp 0x1402da040
and al, 1
mov byte [rsp + 0x30], al
mov al, byte [rsp + 0x30]
mov byte [rsp + 0x2a], al
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbfc00bf0
mov ecx, 0xcb20f1a
jmp 0x1402da040
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6c7dbea7
mov ecx, 0x7ef67c93
jmp 0x1402da040
mov eax, dword [rsp + 0xb8]
cmp eax, 0x5a4d
mov eax, 0x59c5743d
mov ecx, 0xf1798ad
cmove eax, ecx
jmp 0x1402da04d
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x190], rax
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5344e755
mov ecx, 0x7ede0d3
jmp 0x1402da040
mov eax, 0xc0db2ced
jmp 0x1402da04d
mov eax, dword [rsp + 0x4c]
mov eax, 0x15c2fa8a
jmp 0x1402da04d
mov eax, 0xfa216e01
jmp 0x1402da04d
mov eax, 0x9c2e6b02
jmp 0x1402da04d
cmp byte [rsp + 0x2a], 0
mov eax, 0x59c5743d
mov ecx, 0x4091c296
cmovne eax, ecx
jmp 0x1402da04d
and al, 1
mov byte [rsp + 0x30], al
mov al, byte [rsp + 0x30]
mov eax, 0xfd255ba0
jmp 0x1402da04d
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x30]
mov rdx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
mov eax, 0x6e727b94
mov ecx, 0xb0d05d3b
cmove eax, ecx
jmp 0x1402da04d
and al, 1
mov byte [rsp + 0x30], al
mov al, byte [rsp + 0x30]
mov byte [rsp + 0x2b], al
mov eax, 0xd47fbc82
jmp 0x1402da04d
and al, 1
mov byte [rsp + 0x30], al
mov al, byte [rsp + 0x30]
mov byte [rsp + 0x2f], al
mov eax, dword [0x140b7e1b0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4be5b4eb
mov ecx, 0x9b899c87
cmove eax, ecx
cmp dword [0x140b7e1b4], 0xa
cmovl eax, ecx
mov r13, qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1402da04d
cmp eax, 0x76ecfcca
jne 0x1402da04d
mov rcx, qword [rsp + 0x308]
xor rcx, rsp
call fcn.1406ad9c0
mov rax, qword [rsp + 0xc0]
movaps xmm6, xmmword [rsp + 0x310]
add rsp, 0x328
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret