Function at 0x140003450
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2e8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x250], xmm9
movdqa xmmword [rbp + 0x240], xmm8
movdqa xmmword [rbp + 0x230], xmm7
movaps xmmword [rbp + 0x220], xmm6
mov r12, rdx
mov qword [rbp + 0x28], rcx
mov eax, dword [0x141dbe508]
xor eax, dword [0x141dbe50c]
and eax, 0x7dc30b88
imul rax, rax, 0x18e96473
shr rax, 0x3b
or eax, 0xe1fddf32
cmp eax, 0xf4b8e363
jne 0x1400034fc
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp + 0x140], 0
mov rax, qword [r12]
sub rsp, 0x30
lea rcx, [rbp + 0x140]
mov qword [rsp + 0x20], rcx
mov rcx, r12
xor edx, edx
mov r8d, 0x40
xor r9d, r9d
call qword [rax + 0x38]
add rsp, 0x30
lea rdi, [rbp + 0x140]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe510]
xor edx, edx
div dword [0x141dbe514]
mov ebx, eax
xor ebx, 0x669ac419
add ebx, 0x541ce762
and ebx, 0x61170e4a
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov r14, rsp
mov qword [rbp + 0x140], 0
mov rax, qword [r12]
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r12
xor edx, edx
mov r8d, 0x40
xor r9d, r9d
call qword [rax + 0x38]
add rsp, 0x30
cmp ebx, 0xc1bd2387
ja 0x140003510
mov esi, eax
test eax, eax
js 0x1400035aa
nop dword [rax]
mov eax, dword [0x141dbe518]
imul eax, dword [0x141dbe51c]
cmp eax, 0x83328290
je 0x140003580
mov r15, qword [rbp + 0x140]
xor eax, eax
test al, al
jne 0x140003710
jmp 0x1400036ca
mov qword [rbp + 0x1b0], 0
sub rsp, 0x20
lea rdx, [rbp + 0x1b0]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
mov rbx, qword [rbp + 0x1b0]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe528]
xor edx, edx
div dword [0x141dbe52c]
or eax, 0xa0009000
and eax, 0xa922be44
add eax, 0x22eb4e05
cmp eax, 0x100745ef
jb 0x1400035e0
test rbx, rbx
je 0x1400036c3
nop dword [rax]
mov eax, dword [0x141dbe5e8]
or eax, dword [0x141dbe5ec]
or eax, 0x9f185bec
cmp eax, 0xd9bc0b13
je 0x140003610
mov rax, qword [rbx]
nop dword [rax + rax]
mov ecx, dword [0x141dbe5f0]
and ecx, dword [0x141dbe5f4]
imul rcx, rcx, 0x57897efd
shr rcx, 0x3c
add ecx, 0xb73b768a
cmp ecx, 0x7f91b337
jb 0x140003630
mov ecx, dword [0x141dbe5f8]
and ecx, dword [0x141dbe5fc]
mov rdi, qword [rax + 0x10]
imul eax, ecx, 0xb8bae82d
or eax, 0x77a8db04
cmp eax, 0x69af7c0c
jne 0x140003684
sub rsp, 0x20
mov rcx, rbx
call rdi
add rsp, 0x20
mov r14d, 0x80380d39
nop word [rax + rax]
mov r15d, dword [0x141dbe600]
add r15d, dword [0x141dbe604]
imul r15, r14
shr r15, 0x3c
add r15d, 0xd2f25eb
sub rsp, 0x20
mov rcx, rbx
call rdi
add rsp, 0x20
cmp r15d, 0x6384193e
jae 0x140003690
xor eax, eax
jmp 0x140003b82
mov eax, dword [0x141dbe520]
sub eax, dword [0x141dbe524]
imul eax, eax, 0x4faaee31
or eax, 0xf0c030b4
imul rsi, rax, 0x37b55e79
shr rsi, 0x3d
sub rsp, 0x20
lea rcx, [rbp + 0x1b0]
mov rdx, r15
mov r8w, 8
call fcn.1400dee60
add rsp, 0x20
cmp esi, 0x784735cc
jbe 0x14000372e
sub rsp, 0x20
lea rcx, [rbp + 0x1b0]
mov rdx, r15
mov r8w, 8
call fcn.1400dee60
add rsp, 0x20
jmp 0x1400036ca
movzx edi, byte [rbp + 0x1b0]
cmp dil, 0x12
mov qword [rbp + 0x1f8], r14
jne 0x140003a69
nop word cs:[rax + rax]
mov eax, dword [0x141dbe530]
add eax, dword [0x141dbe534]
or eax, 0xdc450db
imul eax, eax, 0x283803af
cmp eax, 0x9067ffd7
je 0x140003750
nop
mov eax, dword [0x141dbe538]
or eax, dword [0x141dbe53c]
add eax, 0xf7cafe37
xor eax, 0x9c56d627
imul eax, eax, 0xf2721fac
cmp eax, 0xbeb6f738
je 0x140003770
mov r8, qword [rbp + 0x1b8]
mov eax, dword [0x141dbe540]
and eax, dword [0x141dbe544]
imul rax, rax, 0x62ece261
shr rax, 0x3c
or eax, 0x52e19851
imul eax, eax, 0xc77ef28d
cmp eax, 0x256d4ef3
mov rsi, qword [rbp + 0x1c0]
mov rcx, r8
shl rcx, 5
movabs rdi, 0xaaaaaaaaaaaaaaab
xor r9d, r9d
nop dword [rax]
mov rax, rcx
mul rdi
test r9b, r9b
jne 0x1400037e0
mov rbx, rdx
mov r9, qword [rbp + 0x1c8]
mov r13, rsi
test r9, r9
je 0x1400038e5
shl r9, 5
add r9, rsi
lea r10, [rbp + 0x1b7]
nop
mov eax, dword [0x141dbe548]
or eax, dword [0x141dbe54c]
imul eax, eax, 0x57b5216f
add eax, 0x5e7bb59a
and eax, 0xbc868460
cmp eax, 0xb6ff196c
ja 0x140003810
nop word cs:[rax + rax]
mov eax, dword [0x141dbe550]
sub eax, dword [0x141dbe554]
and eax, 0xc8800528
or eax, 0x154fd881
imul eax, eax, 0xc04fa057
cmp eax, 0xb785ec61
je 0x140003840
mov r13, rsi
mov r11, rsi
nop dword [rax]
movzx eax, byte [r11]
movdqu xmm0, xmmword [r11 + 1]
movups xmm1, xmmword [r11 + 0x10]
movups xmmword [rbp + 0x1bf], xmm1
movdqa xmmword [rbp + 0x1b0], xmm0
cmp al, 2
jne 0x140003b5a
mov eax, dword [0x141dbe560]
xor edx, edx
div dword [0x141dbe564]
imul eax, eax, 0xf8dfc99e
or eax, 0xcffdfed5
cmp eax, 0xa7d6b3d4
jb 0x140003896
mov rax, qword [r10 + 0x10]
mov qword [rbp + 0xd0], rax
movdqu xmm0, xmmword [r10]
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [r13 + 0x10], rax
movdqu xmmword [r13], xmm0
add r13, 0x18
add r11, 0x20
cmp r11, r9
jne 0x140003870
shr rbx, 4
nop dword [rax]
mov eax, dword [str.3ycQ]
and eax, dword [0x141dbe56c]
and eax, 0xc2008401
xor eax, 0xca008020
or eax, 0x20ee7bda
cmp eax, 0x9310b32e
jb 0x1400038f0
mov r9, rsi
test r8, r8
mov qword [rbp + 0x138], rbx
je 0x140003ca4
lea rax, [rbx*8]
lea r14, [rax + rax*2]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe570]
and eax, dword [0x141dbe574]
xor eax, 0x15fa9625
add eax, 0xa6019065
cmp eax, 0xd771b793
ja 0x140003940
nop dword [rax]
mov eax, dword [0x141dbe578]
imul eax, dword [0x141dbe57c]
imul rdx, rax, 0xc1e3239
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
imul eax, eax, 0xa3125449
cmp eax, 0x396da491
je 0x140003960
nop
mov eax, dword [0x141dbe580]
or eax, dword [0x141dbe584]
imul eax, eax, 0xfece6ef3
cmp eax, 0x4ca742aa
je 0x140003990
mov r9, rsi
cmp rcx, r14
je 0x140003ca4
nop word cs:[rax + rax]
mov eax, dword [0x141dbe588]
imul eax, dword [0x141dbe58c]
and eax, 0xd590fbba
imul eax, eax, 0x7b04f8f6
add eax, 0xb663f69e
cmp eax, 0x6d4e1f61
ja 0x1400039c0
test rcx, rcx
je 0x140003b4f
nop dword [rax]
mov eax, dword [0x141dbe590]
or eax, dword [0x141dbe594]
xor eax, 0x14fbd4c0
imul eax, eax, 0x41c1ddf5
and eax, 0x244a4671
cmp eax, 0x8f8e518c
ja 0x1400039f0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe598]
and eax, dword [0x141dbe59c]
add eax, 0x8a3a9161
xor eax, 0xcf24217
add eax, 0xd1a352d3
cmp eax, 0x6bc27f3b
jb 0x140003a20
mov eax, dword [0x141dbe5a0]
and eax, dword [0x141dbe5a4]
xor eax, 0x5358f726
imul eax, eax, 0xc25afe5e
cmp eax, 0x557fa49c
ja 0x140003c76
jmp 0x140003c35
mov eax, dword [rbp + 0x1b1]
mov ecx, dword [rbp + 0x1b4]
mov dword [rbp + 0x144], ecx
mov dword [rbp + 0x141], eax
mov eax, dword [0x141dbe5c8]
xor edx, edx
div dword [0x141dbe5cc]
imul eax, eax, 0x2a65550b
add eax, 0x16b1aea6
mov ecx, 0xba1a8c11
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x33b47d8e
jbe 0x140003ad0
mov rax, qword [rbp + 0x1b8]
mov byte [rbp + 0x140], dil
mov qword [rbp + 0x148], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dbe5d0]
imul eax, dword [0x141dbe5d4]
and eax, 0x6205f058
add eax, 0x80ea8e92
or eax, 0x39fff1ce
mov rcx, qword [rbp + 0x1b8]
mov r13, qword [rbp + 0x1c0]
mov rdx, qword [rbp + 0x1c8]
mov byte [rbp + 0x140], dil
mov qword [rbp + 0x148], rcx
cmp eax, 0x23d3081b
jb 0x140003ad0
mov qword [rbp + 0x138], rcx
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x1e8], rdx
mov qword [rbp + 0x158], rdx
mov eax, dword [0x141dbe5d8]
imul eax, dword [0x141dbe5dc]
cmp eax, 0x93d01b8f
jne 0x140003d1e
jmp 0x140003d50
mov r9d, 8
jmp 0x140003ca4
ud2
xor edi, edi
shl rsi, 0x20
shl eax, 8
or rax, rsi
movzx esi, dil
or rsi, rax
mov rax, qword [r12]
sub rsp, 0x20
mov rcx, r12
call qword [rax + 0x10]
add rsp, 0x20
mov rcx, rbx
mov rbx, r13
mov rdi, qword [rbp + 0x1e8]
mov rax, qword [rbp + 0x28]
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
mov qword [rax], 0
nop
mov eax, dword [0x141dbec10]
imul eax, dword [0x141dbec14]
and eax, 0x9dc68cdf
imul eax, eax, 0xa2e68227
imul rcx, rax, 0x11b19ff1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x5697a02b
je 0x140003bd0
movaps xmm6, xmmword [rbp + 0x220]
movaps xmm7, xmmword [rbp + 0x230]
movaps xmm8, xmmword [rbp + 0x240]
movaps xmm9, xmmword [rbp + 0x250]
lea rsp, [rbp + 0x268]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dbe5a8]
xor edx, edx
div dword [0x141dbe5ac]
mov ebx, eax
add ebx, 0xaa9997eb
and ebx, 0x15dc8cd
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
mov r9, r14
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
add rsp, 0x20
cmp ebx, 0x2cab8deb
jne 0x140003c95
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
mov r9, r14
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
add rsp, 0x20
jmp 0x140003c35
mov r9, rax
test rax, rax
mov rbx, qword [rbp + 0x138]
je 0x140003cf0
sub r13, rsi
mov rax, r13
mul rdi
shr rdx, 4
mov qword [rbp + 0x148], rbx
mov qword [rbp + 0x150], r9
mov qword [rbp + 0x1e8], rdx
mov qword [rbp + 0x158], rdx
mov byte [rbp + 0x140], 0x12
mov dil, 0x12
mov r13, r9
mov eax, dword [0x141dbe5d8]
imul eax, dword [0x141dbe5dc]
cmp eax, 0x93d01b8f
je 0x140003d50
jmp 0x140003d1e
mov eax, dword [0x141dbe5b0]
xor eax, dword [0x141dbe5b4]
add eax, 0x50aa0b0f
imul rax, rax, 0x1d5499e5
shr rax, 0x3b
cmp eax, 0xfc8483aa
je 0x140006d8f
jmp 0x140006d7a
ud2
mov eax, dword [0x141dbe5e0]
xor edx, edx
div dword [0x141dbe5e4]
xor eax, 0x882f988e
imul ebx, eax, 0xc4cb7d0e
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.oleaut32.dll_SafeArrayDestroy]
add rsp, 0x20
cmp ebx, 0x300f71f7
jbe 0x140003d63
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.oleaut32.dll_SafeArrayDestroy]
add rsp, 0x20
jmp 0x140003d1e
mov esi, eax
test eax, eax
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0x170], r13
js 0x140003f00
movzx eax, byte [rbp + 0x147]
shl eax, 0x10
movzx ecx, word [rbp + 0x145]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rbp + 0x141]
or rax, rcx
mov rsi, rax
shr rsi, 0x18
nop word cs:[rax + rax]
mov ecx, dword [0x141dbe6d0]
xor ecx, dword [0x141dbe6d4]
add ecx, 0x28b811c8
xor ecx, 0xfda278bd
imul rcx, rcx, 0x4ea673c3
shr rcx, 0x3d
cmp ecx, 0x20098001
ja 0x140003db0
cmp dil, 0x12
mov rbx, qword [rbp + 0x138]
jne 0x140003b84
mov eax, dword [0x141dbe6d8]
xor edx, edx
div dword [0x141dbe6dc]
nop word [rax + rax]
mov eax, dword [0x141dbe6e0]
xor edx, edx
div dword [0x141dbe6e4]
xor eax, 0x5f6bd894
add eax, 0xd00138d7
and eax, 0xeb2060b0
cmp eax, 0x3bc0a16e
je 0x140003e00
mov rax, qword [rbp + 0x1e8]
lea rax, [rax + rax*2]
lea rax, [rax*8]
add rax, r13
mov qword [rbp - 0x18], rax
nop
mov eax, dword [0x141dbe6e8]
xor eax, dword [0x141dbe6ec]
or eax, 0x75dbfdbe
imul eax, eax, 0xf327efb6
cmp eax, 0xdb6999e9
jb 0x140003e40
nop
mov eax, dword [0x141dbe6f0]
xor eax, dword [0x141dbe6f4]
add eax, 0x42bcea09
xor eax, 0x2200018
or eax, 0x6d4eefc6
cmp eax, 0x7e491397
ja 0x140003e60
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
test byte [rax + 0x70], 1
je 0x1400043d8
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x78]
mov r8, qword [rax + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe710]
xor edx, edx
div dword [0x141dbe714]
imul eax, eax, 0x4b840f77
add eax, 0x16707b4f
imul rax, rax, 0x1b3ddbe5
shr rax, 0x39
cmp eax, 0x875cecb2
je 0x140003ed0
jmp 0x1400044c5
mov eax, dword [0x141dbe608]
xor edx, edx
div dword [0x141dbe60c]
or eax, 0xbc83a30d
add eax, 0xd99c6937
or eax, 0x47d6c541
cmp eax, 0x705169d4
jae 0x140003f46
mov qword [rbp + 0x1b0], 0
sub rsp, 0x20
lea rdx, [rbp + 0x1b0]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
lea r14, [rbp + 0x1b0]
mov rbx, qword [sym.imp.oleaut32.dll_GetErrorInfo]
nop word cs:[rax + rax]
mov r15d, dword [0x141dbe610]
sub r15d, dword [0x141dbe614]
add r15d, 0xdfc15540
and r15d, 0x28b7b130
mov qword [rbp + 0x1b0], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call rbx
add rsp, 0x20
cmp r15d, 0x63a27751
je 0x140003f60
mov rcx, qword [rbp + 0x1b0]
mov rbx, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x1e8]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe618]
add eax, dword [0x141dbe61c]
and eax, 0xfd7bda1b
imul eax, eax, 0x21cd2407
add eax, 0xb39bf90b
cmp eax, 0xfc43bbda
ja 0x140003fc0
test rcx, rcx
je 0x140004020
mov rax, qword [rcx]
nop dword [rax + rax]
mov edx, dword [0x141dbe620]
or edx, dword [0x141dbe624]
or edx, 0xe3bfeb5f
cmp edx, 0x42ac99ce
je 0x140003ff0
sub rsp, 0x20
call qword [rax + 0x10]
add rsp, 0x20
mov rdx, qword [rbp + 0x1e8]
nop dword [rax]
mov eax, dword [0x141dbe628]
or eax, dword [0x141dbe62c]
imul eax, eax, 0xd5be7b9e
or eax, 0xd0208044
and eax, 0xd2a1dadc
cmp eax, 0x433ff2fd
jb 0x140004020
cmp dil, 0x12
jne 0x140004277
nop dword [rax]
mov eax, dword [0x141dbe630]
sub eax, dword [0x141dbe634]
imul eax, eax, 0xd1c3a8f6
or eax, 0x8896a52
cmp eax, 0xd9b5ecf6
ja 0x140004050
mov rax, rbx
test rdx, rdx
je 0x140004266
xor edi, edi
mov ebx, 0xd695ab89
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r12d, r12d
nop dword [rax + rax]
mov eax, dword [0x141dbe638]
and eax, dword [0x141dbe63c]
and eax, 0xd449124b
imul rcx, rax, 0xd022939
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0xfc9212f5
cmp eax, 0xc42d3862
jb 0x140004090
lea rax, [r12 + r12*2]
cmp qword [r13 + rax*8], 0
je 0x140004191
mov rcx, qword [rbp + 0x170]
lea rcx, [rcx + rax*8]
nop dword [rax]
test dil, dil
jne 0x1400040e0
mov eax, dword [0x141dbe640]
xor edx, edx
div dword [0x141dbe644]
add eax, 0x6cb6bbdb
imul rax, rbx
shr rax, 0x3e
add eax, 0xff824231
cmp eax, 0x6aa8dfff
jb 0x1400040e5
mov r14, qword [rcx + 8]
mov eax, dword [0x141dbe648]
add eax, dword [0x141dbe64c]
xor eax, 0x370521a8
add eax, 0xb153b139
or eax, 0x9e87f232
cmp eax, 0xf12f60ca
jbe 0x140004150
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call r15
add rsp, 0x20
nop dword [rax]
mov eax, dword [str.___fA]
add eax, dword [0x141dbe654]
imul r13d, eax, 0xbe54e25b
and r13d, 0xb9a7eca1
xor r13d, 0xaa4c964f
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call r15
add rsp, 0x20
cmp r13d, 0xa6d34565
ja 0x140004150
inc r12
mov eax, dword [0x141dbe658]
xor edx, edx
div dword [0x141dbe65c]
mov rcx, qword [rbp + 0x1e8]
nop dword [rax]
test dil, dil
jne 0x1400041b0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe660]
sub eax, dword [0x141dbe664]
imul eax, eax, 0x38cef5ab
and eax, 0xf44f214c
imul rax, rax, 0x7067374b
shr rax, 0x3e
cmp eax, 0xf3295bf2
je 0x1400041c0
cmp r12, rcx
mov r13, qword [rbp + 0x170]
jne 0x140004090
mov r12, qword [rbp + 0xf0]
mov rbx, qword [rbp + 0x138]
nop word [rax + rax]
mov eax, dword [0x141dbe668]
xor edx, edx
div dword [0x141dbe66c]
or eax, 0x5ff54e4
add eax, 0xb890d9e9
and eax, 0x4008659
cmp eax, 0x9d7a1657
ja 0x140004210
mov rax, qword [rbp + 0x148]
nop dword [rax + rax]
mov ecx, dword [0x141dbe670]
xor ecx, dword [0x141dbe674]
add ecx, 0x1eb7c0dd
and ecx, 0xcf892409
add ecx, 0xe6e25908
cmp ecx, 0xe0fee31f
ja 0x140004240
mov r14, r13
test rax, rax
jne 0x1400043b0
jmp case.0x140004293.0
cmp dil, 0x10
ja case.default.0x140004293
movzx eax, dil
lea rcx, [0x141db9038]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [0x141dbe690]
sub eax, dword [0x141dbe694]
add eax, 0x4512db7d
shr eax, 2
imul rax, rax, 0x404fb561
shr rax, 0x3b
cmp eax, 0x75cd53cb
je case.0x140004293.6
jmp case.0x140004293.9
mov eax, dword [0x141dbe698]
or eax, dword [0x141dbe69c]
imul rax, rax, 0x4c1a4d9b
shr rax, 0x39
add eax, 0x9dbd2a2c
or eax, 0xb8f94a7e
cmp eax, 0xf8f6463e
ja case.0x140004293.10
jmp case.0x140004293.9
mov eax, dword [0x141dbe6a0]
xor eax, dword [0x141dbe6a4]
and eax, 0x71184f33
cmp eax, 0x3c184d03
je case.0x140004293.12
nop dword [rax + rax]
mov eax, dword [str.xwg]
or eax, dword [0x141dbe6ac]
or eax, 0xff5bd976
and eax, 0xfffbdbf6
cmp eax, 0xf0c3977e
jb 0x140004320
jmp case.0x140004293.9
mov eax, dword [0x141dbe678]
mov ecx, dword [0x141dbe67c]
add eax, ecx
add eax, 0xf50800cd
and eax, 0x46347357
cmp eax, 0x47d707a6
ja case.default.0x140004293
mov ecx, 0x10
test rbx, rbx
je case.0x140004293.0
mov eax, dword [0x141dbe680]
xor edx, edx
div dword [0x141dbe684]
nop dword [rax + rax]
mov eax, dword [0x141dbe688]
add eax, dword [0x141dbe68c]
imul rax, rax, 0x4ad8539f
shr rax, 0x3e
add eax, 0xade4c201
and eax, 0x8444c002
cmp eax, 0x26355906
jbe 0x140004380
mov r14, qword [rbp + rcx + 0x140]
mov eax, dword [0x141dbe6b0]
xor edx, edx
div dword [0x141dbe6b4]
add eax, 0x972b49c1
and eax, 0x871fb60
cmp eax, 0x3db2462a
ja 0x140006e63
jmp 0x140006e25
mov eax, dword [0x141dbe6f8]
or eax, dword [0x141dbe6fc]
xor eax, 0x910a009
and eax, 0x3bffa809
xor eax, 0x668f0f43
cmp eax, 0x8acf338
jae 0x140004420
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
sub rsp, 0x20
lea rcx, [rbp + 0x1b0]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
xorps xmm6, xmm6
lea rsi, [rbp + 0x1b0]
mov rdi, qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe700]
xor eax, dword [0x141dbe704]
imul ebx, eax, 0x49469cda
or ebx, 0xc8b4ba22
movaps xmmword [rbp + 0x1b0], xmm6
sub rsp, 0x20
mov edx, 0x10
mov rcx, rsi
call rdi
add rsp, 0x20
cmp ebx, 0x81e9ecea
je 0x140004440
mov rdi, qword [rbp + 0x1b0]
mov eax, dword [0x141dbe708]
xor eax, dword [0x141dbe70c]
or eax, 0xa9b9ffba
and eax, 0xabf9ffba
cmp eax, 0x86532cc3
jb 0x140004480
mov r8, qword [rbp + 0x1b8]
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 0x70], 1
mov qword [rax + 0x80], r8
lea rax, [rdi + 1]
mov ecx, dword [0x141dda6bc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x78], rax
lea r13, [0x141db8ae0]
mov rax, qword [rbp + 0x1f8]
mov qword [rax], r13
pxor xmm0, xmm0
movdqu xmmword [rax + 8], xmm0
mov qword [rax + 0x18], 0
mov qword [rax + 0x20], rdi
mov qword [rax + 0x28], r8
mov rdx, qword [rbp + 0x1e8]
test rdx, rdx
je 0x140006a97
mov eax, dword [str.Ma_fa]
xor ecx, ecx
xor edx, edx
div dword [0x141dbe71c]
nop dword [rax]
test cl, cl
jne 0x140004530
mov eax, 0xf8780679
nop dword [rax]
mov ecx, dword [0x141dbe720]
and ecx, dword [0x141dbe724]
add ecx, 0x2ff9a8e1
imul rcx, rax
shr rcx, 0x39
add ecx, 0x2209acac
cmp ecx, 0x6e3ba2ce
ja 0x140004540
lea r10, [0x141db8ae0]
xor ebx, ebx
xorps xmm6, xmm6
pcmpeqd xmm7, xmm7
mov r13d, 0x8da6a677
mov dword [rbp + 0x204], eax
mov dword [rbp + 0x1f4], eax
mov rdi, qword [rbp + 0x170]
xor r9d, r9d
nop word cs:[rax + rax]
mov eax, dword [0x141dbe728]
or eax, dword [0x141dbe72c]
and eax, 0x2000042
cmp eax, 0xe3fb29ca
je 0x1400045a0
mov r8, qword [rdi + 0x10]
test r8, r8
js 0x140006c17
lea rcx, [rdi + 0x18]
mov rsi, qword [rdi + 8]
mov eax, dword [str.N3WX]
xor edx, edx
div dword [0x141dbe73c]
add eax, 0xe72b6404
or eax, 0x3758fcf9
cmp eax, 0x1c9e0bdf
je 0x1400045cd
test r8, r8
mov qword [rbp + 0x128], r8
mov qword [rbp + 0xa8], r10
mov qword [rbp - 0x20], rcx
mov qword [rbp + 0x1a0], r9
je 0x1400046a5
mov eax, dword [0x141dbe740]
or eax, dword [0x141dbe744]
add eax, 0x82e54757
cmp eax, 0xed6a4056
jbe 0x140004630
movzx eax, byte [0x141dda6b8]
nop dword [rax]
mov eax, dword [0x141dbe748]
and eax, dword [0x141dbe74c]
or eax, 0xc516f7c7
add eax, 0x14c3054f
movzx ecx, byte [0x141dda6b8]
cmp eax, 0x60fa9e09
jb 0x140004630
sub rsp, 0x20
xor ecx, ecx
mov rdx, r8
call fcn.1400bf230
add rsp, 0x20
mov r15, rax
nop dword [rax]
mov eax, dword [0x141dbe750]
or eax, dword [0x141dbe754]
imul eax, eax, 0x3936a3c2
imul rax, rax, 0x7ea97ed
shr rax, 0x3a
cmp eax, 0x6ebb6391
je 0x140004670
test r15, r15
mov r8, qword [rbp + 0x128]
jne 0x1400046ab
jmp 0x140006cd0
mov r15d, 1
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov r12, qword [rdi + 0x10]
test r12, r12
mov qword [rbp + 0x130], r15
je 0x140004704
mov rax, r12
shr rax, 0x20
jne 0x140006c7b
mov rax, qword [rdi + 8]
mov qword [rbp + 0x1a8], rax
add rax, r12
mov qword [rbp + 0x210], rax
test bl, bl
mov r15, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
jne 0x1400047f6
jmp 0x1400047ca
test bl, bl
mov ecx, 0x8ef72d79
je 0x14000471f
movaps xmmword [rbp + 0x180], xmm6
mov qword [rbp + 0x190], 0
mov rsi, qword [rbp + 0xf0]
lea rdi, [rbp + 0x1f0]
lea r12, [rbp + 0x180]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe768]
xor eax, dword [0x141dbe76c]
imul rax, rax, 0x2cb8bf59
shr rax, 0x3d
imul eax, eax, 0x38900669
and eax, 0x50dac1d
movaps xmmword [rbp + 0x180], xmm6
mov qword [rbp + 0x190], 0
cmp eax, 0x7c2c1c00
ja 0x140004740
mov dword [rbp + 0x1f0], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe770]
and eax, dword [0x141dbe774]
add eax, 0x63115415
imul rax, rcx
shr rax, 0x3f
or eax, 0xcaa4dd0e
cmp eax, 0xb2a822f
je 0x140004790
xor eax, eax
mov qword [rbp + 0x198], rax
lea r14, [0x141db8d64]
jmp 0x140004db0
mov esi, dword [0x141dbe778]
add esi, dword [0x141dbe77c]
mov eax, 0xdd483d4d
imul rsi, rax
shr rsi, 0x3f
sub rsp, 0x20
call r15
add rsp, 0x20
cmp esi, 0x44c8715e
jne 0x140004803
sub rsp, 0x20
call r15
add rsp, 0x20
jmp 0x1400047ca
mov r14, rax
lea r15, [r12 + r12]
movabs rax, 0x1fffffffe
and r15, rax
mov eax, dword [0x141dbe780]
or eax, dword [0x141dbe784]
add r15, 0x20
imul eax, eax, 0xfb537914
or eax, 0x2a22212a
cmp eax, 0x6e6161f5
jne 0x14000484f
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov r13d, 0x9131d4a9
mov rdi, qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax]
mov eax, dword [0x141dbe788]
xor eax, dword [0x141dbe78c]
imul esi, eax, 0x753729c3
shr esi, 1
imul rsi, r13
shr rsi, 0x3e
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call rdi
add rsp, 0x20
cmp esi, 0xb19a565a
je 0x140004860
mov r13d, 0x8da6a677
mov r11, rax
mov r14, qword [rbp + 0x210]
mov r10, qword [rbp + 0x1a8]
nop dword [rax]
mov eax, dword [0x141dbe790]
and eax, dword [0x141dbe794]
add eax, 0x4c8c7a2d
or eax, 0x1440c501
and eax, 0x1651c503
cmp eax, 0xb06d61fd
ja 0x1400048b0
test r11, r11
je 0x140006c7b
mov eax, dword [0x141dbe798]
imul eax, dword [0x141dbe79c]
shr eax, 1
mov ecx, 0x8b92382f
imul rax, rcx
shr rax, 0x3e
or eax, 0x3998fcc2
cmp eax, 0x793c9875
je 0x14000493e
movups xmmword [r11 + 0x10], xmm6
movups xmmword [r11], xmm6
test bl, bl
jne 0x14000493e
mov eax, dword [0x141dbe7a0]
sub eax, dword [0x141dbe7a4]
and eax, 0x693dee3c
add eax, 0x730c278a
cmp eax, 0x9182ef3a
mov edx, 0xc4ab4335
mov esi, 0x8236785f
mov edi, 0xeb39afad
jb 0x140004981
jmp 0x140004949
movups xmmword [r11 + 0x10], xmm6
movups xmmword [r11], xmm6
jmp 0x140004903
mov eax, dword [0x141dbe7a8]
xor eax, dword [0x141dbe7ac]
imul rax, rax, 0x5f701107
shr rax, 0x3e
imul eax, eax, 0xb197fcd5
lea rcx, [r11 + 0x1c]
mov dword [r11 + 4], r12d
mov dword [r11 + 0x18], 1
mov qword [r11 + 0x10], rcx
cmp eax, 0xe3b280a7
jbe 0x1400049a0
mov dword [r11 + 4], r12d
mov dword [r11 + 0x18], 1
lea rax, [r11 + 0x1c]
mov qword [r11 + 0x10], rax
jmp 0x140004949
mov eax, dword [0x141dbe7b0]
xor eax, dword [0x141dbe7b4]
imul rax, rdx
shr rax, 0x3e
imul eax, eax, 0x5ec79da8
add eax, 0xb03a8ef0
cmp eax, 0x7210d9b6
ja 0x1400049a0
xor r8d, r8d
xor ecx, ecx
mov rax, r11
mov qword [rbp + 0x198], r11
jmp 0x140004a00
xor edx, edx
lea rax, [rcx + 1]
mov r9, qword [r11 + 0x10]
mov word [r9 + rcx*2], r8w
inc ecx
mov dword [r11 + 4], ecx
mov r12d, ecx
mov r8d, edx
mov rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dbe7b8]
or eax, dword [0x141dbe7bc]
xor eax, 0x10a22421
and eax, 0x10a23621
cmp eax, 0x1880c86d
je 0x140004a00
test r8w, r8w
jne 0x1400049d7
mov eax, dword [0x141dbe7c0]
xor eax, dword [0x141dbe7c4]
xor eax, 0x70a808c8
imul rax, rax, 0x6e40079
shr rax, 0x3a
cmp eax, 0xd06e7a61
je 0x140004a23
cmp r10, r14
je 0x140004d6e
lea r9, [r10 + 1]
mov eax, dword [0x141dbe7c8]
xor edx, edx
div dword [0x141dbe7cc]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe7d0]
xor edx, edx
div dword [0x141dbe7d4]
and eax, 0x74240c48
imul eax, eax, 0xb9522434
xor eax, 0xd9e95bb7
cmp eax, 0x4c8aa703
jb 0x140004a70
movzx r8d, byte [r10]
mov eax, dword [0x141dbe7d8]
imul eax, dword [0x141dbe7dc]
xor eax, 0x65d1903
or eax, 0x3922e4ac
imul rax, rsi
shr rax, 0x3d
cmp eax, 0x35d50f84
ja 0x140004a99
test r8b, r8b
js 0x140004af6
nop word cs:[rax + rax]
mov eax, dword [0x141dbe7f0]
xor eax, dword [0x141dbe7f4]
or eax, 0x5e504f80
imul eax, eax, 0xbc9cd3d1
cmp eax, 0xdb6f2ab5
ja 0x140004ad0
mov r10, r9
jmp 0x140004c90
mov r12, r10
mov eax, dword [0x141dbe7e0]
imul eax, dword [0x141dbe7e4]
or eax, 0xff5ffffe
cmp eax, 0x2aa3497b
je 0x140004af9
mov r10d, r8d
and r10d, 0x1f
mov eax, dword [0x141dbe7e8]
xor eax, dword [0x141dbe7ec]
xor eax, 0xa366d801
add eax, 0xd455e312
cmp eax, 0x87a71e29
ja 0x140004b19
mov rax, r12
movzx r11d, byte [r12 + 1]
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x140004c77
lea r9, [rax + 3]
movzx r14d, byte [rax + 2]
shl r11d, 6
and r14d, 0x3f
mov eax, dword [0x141dbe7f8]
xor edx, edx
div dword [0x141dbe7fc]
mov eax, dword [0x141dbe800]
and eax, dword [0x141dbe804]
cmp eax, 0xa514a8b9
je 0x140004b6c
or r11d, r14d
mov eax, r10d
shl eax, 0xc
mov r14, qword [rbp + 0x210]
nop
mov edx, dword [0x141dbe808]
and edx, dword [0x141dbe80c]
add edx, 0x1b3cb7d1
and edx, 0x2e17222e
imul edx, edx, 0xece0eaf0
cmp edx, 0x776f158d
ja 0x140004b90
cmp r8b, 0xf0
jb 0x140004c9b
mov eax, dword [0x141dbe810]
xor edx, edx
div dword [0x141dbe814]
nop
test bl, bl
jne 0x140004bd0
add r12, 4
mov eax, dword [0x141dbe818]
xor edx, edx
div dword [0x141dbe81c]
or eax, 0x4422a23c
imul rax, rdi
shr rax, 0x3c
or eax, 0x2658a000
cmp eax, 0x38222642
ja 0x140004bd8
and r10d, 7
shl r10d, 0x12
shl r11d, 6
movzx r8d, byte [r9]
mov eax, dword [0x141dbe820]
xor edx, edx
div dword [0x141dbe824]
nop dword [rax]
mov eax, dword [0x141dbe828]
or eax, dword [0x141dbe82c]
imul rdx, rax, 0x273176fd
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
imul eax, eax, 0x15c6f76a
and eax, 0x1586cc54
cmp eax, 0xee31f9d4
ja 0x140004c20
and r8d, 0x3f
or r11d, r8d
or r11d, r10d
mov r9, r12
mov r8d, r11d
cmp r11d, 0xffff
mov r11, qword [rbp + 0x198]
ja 0x140004cc0
jmp 0x140004aee
add rax, 2
shl r10d, 6
or r10d, r11d
mov r8d, r10d
mov r11, qword [rbp + 0x198]
mov r10, rax
nop
xor edx, edx
test dl, dl
jne 0x140004c90
jmp 0x1400049d9
or r11d, eax
mov r8d, r11d
cmp r11d, 0xffff
mov r11, qword [rbp + 0x198]
jbe 0x140004aee
nop word cs:[rax + rax]
mov eax, dword [0x141dbe830]
xor edx, edx
div dword [0x141dbe834]
imul rdx, rax, 0x4a7d5af
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
and eax, 1
cmp eax, 0x72b78e99
je 0x140004cc0
lea eax, [r8 + 0xff0000]
shr eax, 0xa
nop word cs:[rax + rax]
mov edx, dword [0x141dbe838]
sub edx, dword [0x141dbe83c]
and edx, 0xb385374c
xor edx, 0x36da1910
add edx, 0x2570cafe
cmp edx, 0x5125aff3
jb 0x140004d00
or eax, 0xd800
mov r10d, r8d
and r10d, 0x3ff
mov r8d, eax
mov eax, dword [0x141dbe840]
xor edx, edx
div dword [0x141dbe844]
add eax, 0x99bacda4
or eax, 0x676f0e62
and eax, 0x776fcfe2
movzx edx, r10w
or edx, 0xdc00
cmp eax, 0xe536715d
je 0x140004d38
mov r10, r9
jmp 0x1400049d9
mov rax, qword [r11 + 0x10]
mov ecx, r12d
mov word [rax + rcx*2], 0
movaps xmmword [rbp + 0x180], xmm6
mov qword [rbp + 0x190], 0
mov dword [rbp + 0x1f0], 0
mov r14, qword [r11 + 0x10]
mov rsi, qword [rbp + 0xf0]
lea rdi, [rbp + 0x1f0]
lea r12, [rbp + 0x180]
mov eax, dword [0x141dbe858]
xor edx, edx
div dword [0x141dbe85c]
add eax, 0xd3548b5e
or eax, 0xf9fb9fbf
cmp eax, 0x18bead21
jae 0x140004e00
mov rax, qword [rsi]
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
mov rcx, rsi
mov rdx, r14
xor r8d, r8d
mov r9, r12
call qword [rax + 0x20]
add rsp, 0x30
nop word [rax + rax]
mov rax, qword [rsi]
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
mov rcx, rsi
mov rdx, r14
xor r8d, r8d
mov r9, r12
call qword [rax + 0x20]
add rsp, 0x30
test bl, bl
jne 0x140004e00
mov r15d, eax
test eax, eax
js 0x14000500d
nop word [rax + rax]
mov eax, dword [0x141dbe870]
or eax, dword [0x141dbe874]
imul rax, rax, 0x6b26a18f
shr rax, 0x3d
cmp eax, 0xd19ff1b4
je 0x140004e40
lea rsi, [rbp + 0x98]
mov r15, qword [sym.imp.propsys.dll_VariantToPropVariant]
mov eax, dword [0x141dbe878]
and eax, dword [0x141dbe87c]
mov ecx, 0xfa4227e1
imul rax, rcx
shr rax, 0x3e
add eax, 0xbcb34b8f
cmp eax, 0xfb10e3e0
ja 0x140004e6c
movzx r8d, word [rbp + 0x180]
test r8d, 0x2000
jne 0x14000511e
movzx eax, r8w
nop word [rax + rax]
mov ecx, dword [0x141dbe888]
add ecx, dword [0x141dbe88c]
and ecx, 0xe822421a
add ecx, 0xf5a9d65c
cmp ecx, 0xf154b68b
ja 0x140004eb0
mov r14b, 5
cmp eax, 0x15
mov r9d, 0xbe3beb85
ja case.0x140004ef2.6
mov eax, eax
lea rcx, [0x141db907c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov r12, rsi
mov dword [rbp + 0x210], 0
jmp 0x140005008
mov eax, dword [0x141dbe938]
sub eax, dword [0x141dbe93c]
and eax, 0xe2974570
add eax, 0x346b35e2
cmp eax, 0xf6d7f570
ja case.0x140004ef2.20
mov r15, qword [rbp + 0x188]
nop word cs:[rax + rax]
test bl, bl
jne 0x140004f40
mov r12, rsi
mov al, 6
jmp 0x140006a7b
mov eax, dword [0x141dbe958]
add eax, dword [0x141dbe95c]
imul eax, eax, 0xb3f8354b
add eax, 0xcf72a815
imul rax, rax, 0x73e7507d
shr rax, 0x3d
cmp eax, 0x1f3792b3
ja case.0x140004ef2.17
mov r12, rsi
mov al, 0xa
mov dword [rbp + 0x210], eax
movzx r9d, byte [rbp + 0x188]
jmp 0x140005800
mov eax, dword [str.E_nV]
xor edx, edx
div dword [0x141dbe96c]
or eax, 0x9ecbf2ad
and eax, 0xdedbfaed
cmp eax, 0x22be153f
je case.0x140004ef2.19
mov eax, dword [rbp + 0x188]
mov dword [rbp + 0x208], eax
nop dword [rax + rax]
test bl, bl
jne 0x140004fd0
mov r12, rsi
mov al, 0xc
jmp 0x140005768
mov eax, dword [0x141dbe978]
xor eax, dword [0x141dbe97c]
add eax, 0x384c2524
and eax, 0xf4b0f7a8
cmp eax, 0x542a7837
ja case.0x140004ef2.1
mov r12, rsi
mov al, 1
mov dword [rbp + 0x210], eax
jmp 0x140006a81
mov eax, dword [0x141dbe860]
sub eax, dword [0x141dbe864]
and eax, 0x681b5055
add eax, 0x810071e5
imul rax, rax, 0x6117a111
shr rax, 0x3c
cmp eax, 0x1aae49c5
mov rdi, qword [sym.imp.oleaut32.dll_GetErrorInfo]
jne 0x14000505a
mov qword [rbp + 0x1b0], 0
sub rsp, 0x20
xor ecx, ecx
lea rdx, [rbp + 0x1b0]
call rdi
add rsp, 0x20
lea r14, [rbp + 0x1b0]
nop word cs:[rax + rax]
mov esi, dword [0x141dbe868]
and esi, dword [0x141dbe86c]
add esi, 0xdd33e9fd
and esi, 0xc34cabe7
add esi, 0x28fe690b
mov qword [rbp + 0x1b0], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call rdi
add rsp, 0x20
cmp esi, 0x8be6812f
jb 0x140005070
mov r14, qword [rbp + 0x1b0]
test r14, r14
je 0x140005893
mov ecx, 0x82b9342f
nop word cs:[rax + rax]
mov eax, dword [0x141dbe9c8]
or eax, dword [0x141dbe9cc]
add eax, 0x28f3893e
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0x2881fdcd
cmp eax, 0xa7c08e83
je 0x1400050d0
mov rax, qword [r14]
mov rdi, qword [rax + 0x10]
mov eax, dword [0x141dbe9d0]
xor eax, dword [0x141dbe9d4]
and eax, 0x839120dc
cmp eax, 0xdb89be74
je 0x140005884
jmp 0x140005863
mov rdx, qword [rbp + 0x188]
and r8d, 0xfff
sub rsp, 0x20
lea rcx, [rbp + 0x1b0]
call fcn.1400dee60
add rsp, 0x20
movzx r14d, byte [rbp + 0x1b0]
mov r9d, 0xbe3beb85
nop
mov eax, dword [0x141dbe880]
mov ecx, dword [0x141dbe884]
add eax, ecx
add eax, 0x425be427
and eax, 0x2c01a729
add eax, 0x4e1a2218
cmp eax, 0x878f9c2a
ja 0x140005150
cmp r14b, 0x12
jne 0x1400051d2
mov r12, rsi
mov rcx, qword [rbp + 0x1b8]
lea rax, [rbp + 0x1c0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x50], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe890]
imul eax, dword [0x141dbe894]
cmp eax, 0x8547bada
je 0x1400051a0
mov qword [rbp + 0x120], rcx
movdqa xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x70], xmm0
mov al, 0xe
mov dword [rbp + 0x210], eax
jmp 0x14000589b
movzx eax, byte [rbp + 0x1b1]
mov dword [rbp + 0x1f4], eax
movzx r8d, word [rbp + 0x1b2]
mov r15d, dword [rbp + 0x1b4]
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x120], rax
lea rax, [rbp + 0x1c0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x70], xmm0
mov eax, dword [0x141dbe9f0]
imul eax, dword [0x141dbe9f4]
add eax, 0xa84f6a31
xor eax, 0xdfe9150c
imul rax, rax, 0x7e7d54fd
shr rax, 0x3e
cmp eax, 0xc4f39f21
je 0x140005cbe
jmp 0x140005b98
test bl, bl
jne case.0x140004ef2.21
mov r15, qword [rbp + 0x188]
nop dword [rax]
mov eax, dword [0x141dbe970]
imul eax, dword [0x141dbe974]
or eax, 0xc7358eec
imul eax, eax, 0x310d1705
cmp eax, 0x38ba6f5b
je 0x140005250
mov r12, rsi
mov al, 0xd
jmp 0x140006a7b
mov eax, dword [0x141dbe928]
or eax, dword [0x141dbe92c]
or eax, 0xb79aa048
cmp eax, 0x6f4bc628
je case.0x140004ef2.16
movzx r9d, byte [rbp + 0x188]
mov al, 1
nop dword [rax + rax]
test al, al
je 0x1400052a0
mov r12, rsi
mov al, 3
mov dword [rbp + 0x210], eax
jmp 0x140005800
mov eax, dword [0x141dbe980]
add eax, dword [0x141dbe984]
imul eax, eax, 0xaf0cae5
xor eax, 0xda03020
or eax, 0x725f4fc3
cmp eax, 0xc8c26dcf
jb case.0x140004ef2.13
mov r15, qword [rbp + 0x188]
mov eax, dword [0x141dbe988]
xor edx, edx
div dword [0x141dbe98c]
movzx ecx, word [rbp + 0x20e]
mov eax, dword [0x141dbe990]
xor edx, edx
div dword [0x141dbe994]
imul eax, eax, 0xc957d4c0
cmp eax, 0xeab11401
ja 0x1400052f3
nop
test bl, bl
jne 0x140005310
test r15, r15
je 0x1400057be
mov eax, dword [0x141dbe9b0]
sub eax, dword [0x141dbe9b4]
mov rdi, qword [r15]
xor eax, 0x80086424
and eax, 0x846ae6a4
cmp eax, 0x3498fe71
jne 0x140005350
sub rsp, 0x20
mov rcx, r15
call qword [rdi + 8]
add rsp, 0x20
nop dword [rax + rax]
mov esi, dword [0x141dbe9b8]
sub esi, dword [0x141dbe9bc]
sub rsp, 0x20
mov rcx, r15
call qword [rdi + 8]
add rsp, 0x20
cmp esi, 0x3fa3a613
je 0x140005350
lea r12, [rbp + 0x98]
mov eax, dword [0x141dbe9c0]
or eax, dword [0x141dbe9c4]
add eax, 0x7c7bda6c
mov ecx, 0xb49f1ab5
imul rax, rcx
shr rax, 0x3f
add eax, 0x797f452d
mov cl, 0xf
mov dword [rbp + 0x210], ecx
cmp eax, 0x5cddd42e
jbe 0x140005379
jmp 0x140006a81
movzx eax, word [rbp + 0x188]
mov word [rbp + 0x20e], ax
nop
test bl, bl
jne 0x1400053c0
mov r12, rsi
mov al, 4
mov dword [rbp + 0x210], eax
jmp 0x140006a81
mov r12, rsi
mov eax, dword [0x141dbe940]
xor edx, edx
div dword [0x141dbe944]
mov eax, dword [0x141dbe948]
xor edx, edx
div dword [0x141dbe94c]
add eax, 0x376e9649
and eax, 0x28e230ef
imul eax, eax, 0x740961f5
mov cl, 8
mov dword [rbp + 0x210], ecx
mov r15, qword [rbp + 0x188]
cmp eax, 0xb05e26d4
jbe 0x1400053e5
jmp 0x140006a81
mov r12, rsi
mov eax, dword [0x141dbe960]
or eax, dword [0x141dbe964]
xor eax, 0xa0f64a2
add eax, 0x45aa9300
xor eax, 0x65317996
mov cl, 0xb
mov dword [rbp + 0x210], ecx
movzx ecx, word [rbp + 0x188]
mov word [rbp + 0x20e], cx
cmp eax, 0x9599f492
jb 0x140005421
jmp 0x140006a81
mov eax, dword [0x141dbe898]
mov ecx, dword [0x141dbe89c]
add eax, ecx
add eax, 0x7b706133
or eax, 0x299f040c
imul rax, rax, 0x1ead08b1
shr rax, 0x3c
cmp eax, 0xcce21185
jbe 0x140005490
mov qword [rbp + 0x10], 0
lea rdi, [rbp + 0x100]
nop word [rax + rax]
mov eax, dword [0x141dbe8a0]
xor edx, edx
div dword [0x141dbe8a4]
imul eax, eax, 0xf56dcc52
mov qword [rbp + 0x10], 0
cmp eax, 0xc9303131
je 0x1400054a0
mov eax, dword [0x141dbe8a8]
sub eax, dword [0x141dbe8ac]
or eax, 0x97cc448d
imul eax, eax, 0xc4da552e
add eax, 0x210e94b0
cmp eax, 0xcc45e902
jae 0x140005520
mov qword [rbp + 0x18], 1
mov qword [rbp + 0x20], 0
movaps xmmword [rbp + 0x100], xmm6
mov qword [rbp + 0x110], 0
sub rsp, 0x20
mov rcx, r12
mov rdx, rdi
call r15
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dbe8b0]
add eax, dword [0x141dbe8b4]
imul esi, eax, 0x35dba36c
or esi, 0xf3e7ddbf
mov qword [rbp + 0x18], 1
mov qword [rbp + 0x20], 0
movaps xmmword [rbp + 0x100], xmm6
mov qword [rbp + 0x110], 0
sub rsp, 0x20
mov rcx, r12
mov rdx, rdi
call r15
add rsp, 0x20
cmp esi, 0xd853e4a5
jb 0x140005520
mov ecx, dword [0x141dbe8b8]
xor ecx, dword [0x141dbe8bc]
and ecx, 0x22066000
xor ecx, 0x144080
or ecx, 0xdde11f6f
cmp ecx, 0x438924d8
jne 0x1400055b1
mov rcx, qword [rbp + 0x110]
mov qword [rbp + 0x60], rcx
movdqa xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x50], xmm0
lea r14, [rbp + 0x80]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x110]
mov qword [rbp + 0x60], rcx
mov ecx, dword [0x141dbe8c0]
xor ecx, dword [0x141dbe8c4]
add ecx, 0xb92387a7
xor ecx, 0x6907d327
movdqa xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x50], xmm0
cmp ecx, 0xdf871524
ja 0x1400055c0
test eax, eax
js 0x14000578c
mov rcx, qword [rbp + 0x100]
mov eax, dword [rbp + 0x108]
lea r8, [rbp + 0x10c]
mov edx, dword [r8 + 8]
lea r9, [rbp - 0x2c]
mov dword [r9 + 8], edx
mov rdx, qword [r8]
mov qword [r9], rdx
mov qword [rbp - 0x38], rcx
mov ecx, dword [0x141dbe8c8]
and ecx, dword [0x141dbe8cc]
cmp ecx, 0x1784c1b3
jne 0x140005650
mov dword [rbp - 0x30], eax
mov qword [rbp + 0x100], 0
nop dword [rax]
mov ecx, dword [0x141dbe8d0]
and ecx, dword [0x141dbe8d4]
xor ecx, 0x9124e300
and ecx, 0x9934eb1c
imul ecx, ecx, 0x86eb9d0f
mov dword [rbp - 0x30], eax
mov qword [rbp + 0x100], 0
cmp ecx, 0xd0a0586a
jb 0x140005650
sub rsp, 0x20
lea rcx, [rbp - 0x38]
mov rdx, rdi
call qword [sym.imp.propsys.dll_PropVariantToBSTR]
add rsp, 0x20
mov rdi, qword [rbp + 0x100]
test eax, eax
lea r12, [rbp + 0x98]
js 0x140005805
mov r14, rdi
xor r15d, r15d
lea rsi, [rbp + 0x118]
lea rdi, [0x1400dd790]
jmp 0x14000584c
movzx r8d, word [rbp + 0x188]
movzx eax, r8w
nop word cs:[rax + rax]
mov ecx, dword [0x141dbe950]
and ecx, dword [0x141dbe954]
xor ecx, 0x10ac932c
imul ecx, ecx, 0x28dac3d0
cmp ecx, 0x134b1336
je 0x1400056e0
mov cl, 9
mov dword [rbp + 0x210], ecx
test eax, eax
je 0x1400057fa
mov r14b, 7
cmp eax, 0xffff
jne case.0x140004ef2.6
mov r12, rsi
mov r9b, 1
jmp 0x140005800
mov eax, dword [rbp + 0x188]
mov dword [rbp + 0x208], eax
nop word cs:[rax + rax]
mov eax, dword [0x141dbe930]
xor eax, dword [0x141dbe934]
imul rax, rax, 0x57e8f459
shr rax, 0x3c
add eax, 0xd64f51b
cmp eax, 0x8e2395
jbe 0x140005740
mov r12, rsi
mov al, 5
mov dword [rbp + 0x210], eax
jmp 0x140005787
mov r12, rsi
mov al, 7
mov dword [rbp + 0x210], eax
mov eax, dword [rbp + 0x188]
mov dword [rbp + 0x208], eax
jmp 0x140006a81
mov eax, dword [0x141dbe8d8]
and eax, dword [0x141dbe8dc]
add eax, 0xaaec72e
or eax, 0x40b20636
and eax, 0xe0bbe73f
cmp eax, 0x7130e5fe
mov rdi, qword [sym.imp.oleaut32.dll_GetErrorInfo]
ja 0x140006794
jmp 0x14000674f
mov r14b, 0xf
mov r8d, ecx
nop word cs:[rax + rax]
mov eax, dword [0x141dbe9a8]
sub eax, dword [0x141dbe9ac]
imul eax, eax, 0xa8c992e0
and eax, 0xf8ef7d60
cmp eax, 0x6c75bd71
ja case.0x140004ef2.6
mov r15d, dword [rbp + 0x208]
jmp 0x14000520c
mov r12, rsi
xor r9d, r9d
jmp 0x140006a81
mov r15d, eax
mov qword [rbp + 0x50], 0
sub rsp, 0x20
xor ecx, ecx
lea rdx, [rbp + 0x50]
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
mov r14, qword [rbp + 0x50]
mov rcx, rdi
test rdi, rdi
lea rsi, [rbp + 0x118]
lea rdi, [0x1400dd790]
je 0x14000584c
sub rsp, 0x20
call qword [sym.imp.oleaut32.dll_SysFreeString]
add rsp, 0x20
sub rsp, 0x20
lea rcx, [rbp - 0x38]
call qword [sym.imp.ole32.dll_PropVariantClear]
add rsp, 0x20
jmp 0x1400067e4
mov esi, dword [0x141dbe9d8]
and esi, dword [0x141dbe9dc]
sub rsp, 0x20
mov rcx, r14
call rdi
add rsp, 0x20
cmp esi, 0x5090927f
jne 0x140005893
sub rsp, 0x20
mov rcx, r14
call rdi
add rsp, 0x20
jmp 0x140005863
xor r14d, r14d
jmp 0x140005c3d
mov eax, dword [0x141dbe9e0]
xor edx, edx
div dword [0x141dbe9e4]
mov ecx, 0xa14e59c5
imul rax, rcx
shr rax, 0x3e
or eax, 0xffafdf2e
cmp eax, 0xbe8084ba
lea r14, [rbp + 0x140]
mov dword [rbp + 0x1f4], r9d
movzx edi, word [rbp + 0x20e]
mov rsi, r12
je 0x1400059b7
mov r12d, dword [str._rikB]
and r12d, dword [0x141dbe9ec]
and r12d, 0x5f42d057
add r12d, 0x496317e8
or r12d, 0x9acd8b33
movaps xmm0, xmmword [rbp + 0x70]
movaps xmmword [rbp - 0x10], xmm0
mov eax, dword [rbp + 0x210]
mov byte [rbp + 0x88], al
mov byte [rbp + 0x89], r9b
mov word [rbp + 0x8a], di
mov eax, dword [rbp + 0x208]
mov dword [rbp + 0x8c], eax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x90], rax
movups xmmword [rsi], xmm0
mov r8d, dword [rbp + 0x1f0]
sub rsp, 0x20
mov rcx, r14
lea rdx, [rbp + 0x88]
call fcn.1400e45f0
mov r9d, dword [rbp + 0x1f4]
add rsp, 0x20
mov rax, qword [rbp + 0x140]
movzx r10d, byte [rbp + 0x148]
movzx ecx, byte [rbp + 0x149]
movzx r8d, word [rbp + 0x14a]
mov r15d, dword [rbp + 0x14c]
mov rdx, qword [rbp + 0x150]
lea r11, [rbp + 0x158]
movdqu xmm0, xmmword [r11]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp + 0xb0], xmm0
cmp r12d, 0xf142db8a
jbe 0x140005a38
movaps xmm0, xmmword [rbp + 0x70]
movaps xmmword [rbp - 0x10], xmm0
mov eax, dword [rbp + 0x210]
mov byte [rbp + 0x88], al
mov byte [rbp + 0x89], r9b
mov word [rbp + 0x8a], di
mov eax, dword [rbp + 0x208]
mov dword [rbp + 0x8c], eax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x90], rax
movups xmmword [rsi], xmm0
mov r8d, dword [rbp + 0x1f0]
sub rsp, 0x20
mov rcx, r14
lea rdx, [rbp + 0x88]
call fcn.1400e45f0
mov r9d, dword [rbp + 0x1f4]
add rsp, 0x20
lea rax, [rbp + 0x158]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp + 0xb0], xmm0
jmp 0x1400058de
mov dword [rbp + 0x210], r10d
test rax, rax
je 0x140005a5d
lea r12, [rbp + 0x180]
mov r9d, 0xbe3beb85
mov r14d, dword [rbp + 0x210]
jmp 0x140005bfc
mov qword [rbp + 0xf8], rdx
mov byte [rbp + 0x21f], cl
mov dword [rbp + 0x204], r8d
lea rdi, [rbp + 0x180]
nop dword [rax + rax]
mov eax, dword [0x141dbea00]
and eax, dword [0x141dbea04]
add eax, 0x767263b7
or eax, 0xdd764769
add eax, 0x42e694eb
cmp eax, 0xd795efbc
ja 0x140005a80
mov eax, dword [0x141dbea08]
add eax, dword [0x141dbea0c]
or eax, 0x4292030c
and eax, 0x4ad2cf8d
imul eax, eax, 0xdc88358f
cmp eax, 0x82392271
mov r14, qword [sym.imp.oleaut32.dll_VariantClear]
jne 0x140005ae0
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dbea10]
add eax, dword [0x141dbea14]
and eax, 0x984f7e6d
imul eax, eax, 0xbda3869a
imul rsi, rax, 0x10cad619
shr rsi, 0x3b
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
cmp esi, 0x4953752b
ja 0x140005ae0
mov r10, qword [rbp + 0x198]
test r10, r10
mov r8d, 0xff
mov r9d, dword [rbp + 0x204]
movzx r11d, byte [rbp + 0x21f]
mov r14d, dword [rbp + 0x210]
je 0x140006704
mov eax, dword [r10]
mov ecx, dword [0x141dbea18]
xor ecx, dword [0x141dbea1c]
xor ecx, 0x10b6ca20
imul ecx, ecx, 0xba2062d6
and ecx, 0x7f6b1864
cmp ecx, 0x9d59f4b
ja 0x140005b47
test al, 1
jne 0x140006704
mov eax, dword [0x141dbea20]
xor edx, edx
div dword [0x141dbea24]
add eax, 0x454b411d
cmp eax, 0xbc164e02
ja 0x1400066a8
jmp 0x140006677
mov eax, dword [0x141dbe9f8]
xor edx, edx
div dword [0x141dbe9fc]
or eax, 0x54c02d48
mov ecx, 0x8cfab0b7
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x8e5163db
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmmword [rbp + 0xb0], xmm0
cmp eax, 0xdfcd53f3
je 0x140005cbe
mov eax, dword [rbp + 0x1f4]
mov ecx, eax
mov rdx, qword [rbp + 0x120]
mov eax, r8d
mov word [rbp + 0x20e], r8w
mov dword [rbp + 0x208], r15d
mov byte [rbp + 0x21f], cl
mov dword [rbp + 0x204], r8d
nop dword [rax]
mov eax, dword [0x141dbea40]
xor eax, dword [0x141dbea44]
imul eax, eax, 0xb61379a9
imul rax, r9
shr rax, 0x3d
add eax, 0xee97f75d
cmp eax, 0xacb865a4
jb 0x140005c10
mov qword [rbp + 0xf8], rdx
sub rsp, 0x20
mov rcx, r12
call qword [sym.imp.oleaut32.dll_VariantClear]
add rsp, 0x20
mov rdx, qword [rbp + 0x198]
test rdx, rdx
mov r8d, 0xff
je 0x140006ab7
mov eax, dword [rdx]
nop word cs:[rax + rax]
mov ecx, dword [0x141dbea48]
sub ecx, dword [0x141dbea4c]
xor ecx, 0x81c008
or ecx, 0xb87e3765
xor ecx, 0x65a5c167
cmp ecx, 0xfa100df1
ja 0x140005c70
test al, 1
jne 0x140006ab7
mov eax, dword [0x141dbea50]
xor eax, dword [0x141dbea54]
imul eax, eax, 0x9e93a8f6
and eax, 0x8f2118a
cmp eax, 0x965a5625
je 0x140005cfe
jmp 0x140005cd5
movdqa xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmmword [rbp + 0xb0], xmm0
jmp 0x140005b98
mov eax, dword [0x141dbea58]
imul eax, dword [0x141dbea5c]
imul eax, eax, 0x885a4172
add eax, 0xcc2e1a6
mov ecx, 0xffffffff
lock xadd dword [rdx + 0x18], ecx
cmp eax, 0x408e6bed
jbe 0x140005d10
lock dec dword [rdx + 0x18]
jmp 0x140005cd5
mov eax, dword [0x141dbea60]
imul eax, dword [0x141dbea64]
xor eax, 0x994a0aed
imul eax, eax, 0x4a6d8b01
imul rax, rax, 0x38c7d931
shr rax, 0x3d
cmp eax, 0x78b30c85
ja 0x140005d10
dec ecx
nop dword [rax]
mov edx, dword [0x141dbea68]
imul edx, dword [0x141dbea6c]
add edx, 0x3f439458
or edx, 0xed8852c2
add edx, 0xad7c7c64
xor eax, eax
test ecx, ecx
setne al
cmovs eax, r8d
cmp edx, 0x9ee594d3
jb 0x140005d40
test al, al
jne 0x140005da1
nop word cs:[rax + rax]
mov eax, dword [0x141dbea80]
xor edx, edx
div dword [0x141dbea84]
or eax, 0xf2634588
and eax, 0xff6b7de8
cmp eax, 0x1f9f39a
je 0x140005d80
jmp 0x140005db0
movzx eax, al
cmp eax, 1
jne 0x140006d3f
nop dword [rax]
mov eax, dword [0x141dbea88]
sub eax, dword [0x141dbea8c]
imul eax, eax, 0x7df18c93
xor eax, 0x49a004c0
or eax, 0xb61cbb3e
cmp eax, 0x8e6b6bb8
jb 0x140005db0
test ecx, ecx
jne 0x140006ab7
xor edi, edi
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor edx, edx
mov r8, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
movdqa xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x30], xmm0
test dil, dil
mov r9d, dword [rbp + 0x204]
movzx r11d, byte [rbp + 0x21f]
je 0x140006f58
mov byte [rbp - 0x58], r14b
mov byte [rbp + 0x21f], r11b
mov byte [rbp - 0x57], r11b
mov dword [rbp + 0x204], r9d
mov word [rbp - 0x56], r9w
mov dword [rbp - 0x54], r15d
mov rax, qword [rbp + 0xf8]
mov qword [rbp - 0x50], rax
movdqa xmm0, xmmword [rbp + 0x30]
lea rax, [rbp - 0x48]
movdqu xmmword [rax], xmm0
sub rsp, 0x20
lea rcx, [rbp + 0xc0]
lea rdx, [rbp - 0x58]
call fcn.14001c370
add rsp, 0x20
cmp qword [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xc8]
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x1a8], rdx
mov qword [rbp + 0x178], rax
jne 0x140006af2
mov eax, dword [0x141dbeac8]
sub eax, dword [0x141dbeacc]
imul eax, eax, 0xa53e428e
mov ecx, 0xb841bf59
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0x10500aca
cmp eax, 0x94e12a9
lea rcx, [rbp + 0xd8]
jae 0x140005ed7
movdqu xmm0, xmmword [rcx]
movdqa xmmword [rbp + 0x40], xmm0
mov r9, qword [rbp + 0x128]
nop
mov eax, dword [0x141dbead0]
xor eax, dword [0x141dbead4]
and eax, 0x69b4f1b4
add eax, 0xea360c8e
shr eax, 3
imul rax, rax, 0x21c41887
shr rax, 0x35
movdqu xmm0, xmmword [rcx]
movdqa xmmword [rbp + 0x40], xmm0
cmp eax, 0x303fef8d
je 0x140005ee0
mov rax, qword [rbp + 0x1f8]
mov r12, qword [rax + 0x20]
mov eax, dword [0x141dbead8]
sub eax, dword [0x141dbeadc]
and eax, 0x2f1aaa5b
xor eax, 0xeeb73e25
add eax, 0x99124f0a
cmp eax, 0xad438ed9
ja 0x140005f1f
mov rdi, qword [rbp + 0x1f8]
mov r15, qword [rdi + 0x28]
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r8, qword [rbp + 0x130]
call fcn.1400c0b40
add rsp, 0x20
mov rsi, rax
cmp qword [rdi + 0x10], 0
mov r10, qword [rbp + 0xa8]
mov r9, qword [rbp + 0x1a0]
jne 0x140005ff1
mov eax, dword [0x141dbeae0]
add eax, dword [0x141dbeae4]
xor eax, 0x87b315
add eax, 0x3aab395c
xor eax, 0xcddb5c00
cmp eax, 0xbb2568d5
ja 0x14000642d
mov r14, qword [rbp + 0x1f8]
mov eax, dword [0x141dbeae8]
sub eax, dword [0x141dbeaec]
add eax, 0xe5070baa
and eax, 0x5bfd8ff4
imul rdi, rax, 0x15e71eed
shr rdi, 0x3a
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, r15
call fcn.1400efde0
add rsp, 0x20
cmp edi, 0xa5ff7b39
ja 0x140005fab
mov r10, qword [r14]
mov r9, qword [r14 + 8]
mov eax, dword [0x141dbeaf0]
xor edx, edx
div dword [0x141dbeaf4]
mov eax, dword [0x141dbeaf8]
add eax, dword [0x141dbeafc]
imul eax, eax, 0xc98e0c2e
xor eax, 0x8e97bfc7
add eax, 0xe61d2af3
cmp eax, 0x16926c41
jb 0x140005fff
mov r14, rsi
shr r14, 0x39
movd xmm0, r14d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm8, xmm0, 0
xor r11d, r11d
xor edi, edi
mov r8, qword [rbp + 0x128]
mov qword [rbp + 0x1a0], r9
mov qword [rbp + 0x210], r14
mov qword [rbp + 0x198], r11
nop
mov eax, dword [0x141dbeb00]
or eax, dword [0x141dbeb04]
xor eax, 0x29b7fc00
or eax, 0xd4480177
cmp eax, 0xd5f37238
je 0x140006060
and rsi, r9
movdqu xmm9, xmmword [r10 + rsi]
movdqa xmm0, xmm9
pcmpeqb xmm0, xmm8
pmovmskb r12d, xmm0
test r12w, r12w
je 0x1400061a3
nop
tzcnt eax, r12d
add rax, rsi
and rax, r9
neg rax
imul r14, rax, 0x38
cmp r8, qword [r10 + r14 - 0x28]
jne 0x140006157
add r14, r10
mov r15, r10
nop word cs:[rax + rax]
mov eax, dword [0x141dbeb08]
xor eax, dword [0x141dbeb0c]
or eax, 0x4dd545a2
add eax, 0xca933454
and eax, 0x9242674d
cmp eax, 0x7239a578
jb 0x1400060d0
mov rdx, qword [r14 - 0x30]
sub rsp, 0x20
mov rcx, qword [rbp + 0x130]
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
mov r10, r15
mov r9, qword [rbp + 0x1a0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dbeb10]
sub ecx, dword [0x141dbeb14]
and ecx, 0xe3e49489
xor ecx, 0xb53a5b17
imul rcx, r13
shr rcx, 0x3f
cmp ecx, 0x9b766dcf
je 0x140006120
test eax, eax
mov r8, qword [rbp + 0x128]
je 0x1400062ac
mov eax, dword [0x141dbeb20]
sub eax, dword [0x141dbeb24]
imul eax, eax, 0x6cee34b6
add eax, 0x4001ea4e
imul rax, rax, 0x716f9db3
shr rax, 0x3e
cmp eax, 0x36a0c4c0
ja 0x140006157
lea eax, [r12 - 1]
nop word cs:[rax + rax]
test bl, bl
jne 0x140006190
and eax, r12d
mov r12d, eax
test ax, ax
jne 0x1400060a0
mov eax, dword [0x141dbeb18]
xor eax, dword [0x141dbeb1c]
cmp eax, 0x84314c4d
je 0x1400061a3
cmp rdi, 1
mov edi, 1
mov r14, qword [rbp + 0x210]
mov r11, qword [rbp + 0x198]
je 0x140006220
mov eax, dword [0x141dbeb28]
xor edx, edx
div dword [0x141dbeb2c]
and eax, 0xf2b0df5d
imul eax, eax, 0xa9bb4109
add eax, 0xff79e5c2
cmp eax, 0xa587962e
jb 0x1400061cf
pmovmskb eax, xmm9
tzcnt ecx, eax
add rcx, rsi
and rcx, r9
mov qword [rbp + 0xa8], rcx
xor edi, edi
test ax, ax
setne dil
nop word cs:[rax + rax]
mov eax, dword [0x141dbeb30]
and eax, dword [0x141dbeb34]
xor eax, 0x166fed35
add eax, 0x79301af2
and eax, 0x378e7c52
cmp eax, 0xe44c77e2
ja 0x140006220
pcmpeqb xmm9, xmm7
pmovmskb eax, xmm9
test ax, ax
jne 0x14000636f
mov eax, dword [0x141dbeb38]
xor edx, edx
div dword [0x141dbeb3c]
imul eax, eax, 0x799fa98c
xor eax, 0xcd4352ac
add eax, 0xfb05165d
cmp eax, 0xe0dedfe
jb 0x140006255
add r11, 0x10
nop
mov eax, dword [0x141dbeb40]
imul eax, dword [0x141dbeb44]
xor eax, 0x74d34fc4
imul eax, eax, 0x216b4221
add eax, 0xbc6aab67
cmp eax, 0xfec25ef
jbe 0x140006280
add rsi, r11
jmp 0x140006057
test bl, bl
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x178]
je 0x1400062e9
movups xmm0, xmmword [r14 - 0x20]
movups xmm1, xmmword [r14 - 0x10]
movaps xmmword [rbp + 0x1c0], xmm1
movaps xmmword [rbp + 0x1b0], xmm0
mov qword [r14 - 0x20], rcx
mov qword [r14 - 0x18], rdx
movdqa xmm0, xmmword [rbp + 0x40]
movdqu xmmword [r14 - 0x10], xmm0
mov r12, qword [rbp + 0x130]
mov eax, dword [0x141dbeb58]
xor eax, dword [0x141dbeb5c]
add eax, 0xa5d9342d
and eax, 0xdc664d4a
movups xmm0, xmmword [r14 - 0x20]
movups xmm1, xmmword [r14 - 0x10]
movaps xmmword [rbp + 0x1c0], xmm1
movaps xmmword [rbp + 0x1b0], xmm0
mov qword [r14 - 0x20], rcx
mov qword [r14 - 0x18], rdx
movdqa xmm0, xmmword [rbp + 0x40]
movdqu xmmword [r14 - 0x10], xmm0
cmp eax, 0x7a4f1670
je 0x1400062f0
test r8, r8
je 0x1400064fa
mov eax, dword [0x141dbeb60]
or eax, dword [0x141dbeb64]
mov ecx, 0xd01c09b1
imul rax, rcx
shr rax, 0x3f
add eax, 0x64ce7d7f
cmp eax, 0xe514229d
ja 0x14000649d
jmp 0x14000644c
mov r9, qword [rbp + 0x130]
mov rsi, qword [rbp + 0x1a8]
mov r15, qword [rbp + 0xa8]
nop word cs:[rax + rax]
mov eax, dword [0x141dbeb48]
add eax, dword [0x141dbeb4c]
imul eax, eax, 0xacdb9406
add eax, 0x630df62e
cmp eax, 0x247e5eb2
ja 0x140006390
movzx eax, byte [r10 + r15]
test al, al
js 0x1400063f0
movdqa xmm0, xmmword [r10]
pmovmskb eax, xmm0
tzcnt r15d, eax
movzx eax, byte [r10 + r15]
nop word [rax + rax]
mov ecx, dword [0x141dbeb50]
xor ecx, dword [0x141dbeb54]
xor ecx, 0xa000200
or ecx, 0xf5fff9ff
cmp ecx, 0x1088cf7
jb 0x1400063d0
mov ecx, dword [0x141dbeb80]
xor ecx, dword [0x141dbeb84]
mov edx, 0x9ead9c91
imul rcx, rdx
shr rcx, 0x3e
xor ecx, 0xcf6bd3b5
add ecx, 0x4b9e57b6
cmp ecx, 0x8361efdd
mov rdi, qword [rbp + 0x178]
ja 0x14000660a
jmp 0x140006555
sub rsp, 0x20
mov rcx, qword [rbp + 0x1f8]
mov rdx, r12
mov r8, r15
call fcn.1400efde0
add rsp, 0x20
jmp 0x140005fa4
mov eax, dword [0x141dbeb68]
add eax, dword [0x141dbeb6c]
xor eax, 0xc2432281
add eax, 0xcd975503
and eax, 0xda586a03
mov rsi, qword [0x141dda6a0]
cmp eax, 0x50293dba
ja 0x14000649d
mov eax, dword [0x141dbeb70]
xor edx, edx
div dword [0x141dbeb74]
imul rax, rax, 0x5c7ed415
shr rax, 0x3e
imul eax, eax, 0xa001e2fb
cmp eax, 0x6efbf4fa
je 0x1400064e2
jmp 0x1400064a6
mov rax, qword [0x141dda6a0]
jmp 0x14000644c
mov edi, dword [0x141dbeb78]
and edi, dword [0x141dbeb7c]
and edi, 0xeb74df79
xor edi, 0x652e03f8
add edi, 0x337314b9
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xf71823e4
jbe 0x1400064fa
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400064a6
movzx eax, byte [rbp + 0x1b0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dbeb88]
imul ecx, dword [0x141dbeb8c]
or ecx, 0x943f0a33
and ecx, 0xfd3f8a73
cmp ecx, 0xa2ee98a1
je 0x140006510
cmp al, 0x11
mov r10, r15
je 0x1400065c3
sub rsp, 0x20
lea rcx, [rbp + 0x1b0]
call fcn.14000fa40
mov r10, r15
add rsp, 0x20
jmp 0x1400065c3
movaps xmm0, xmmword [rbp + 0x40]
mov ecx, eax
and cl, 1
movzx ecx, cl
mov rdx, qword [rbp + 0x1f8]
sub qword [rdx + 0x10], rcx
movaps xmmword [rbp + 0x140], xmm0
lea rcx, [r15 - 0x10]
and rcx, qword [rbp + 0x1a0]
mov byte [r10 + r15], r14b
mov byte [rcx + r10 + 0x10], r14b
inc qword [rdx + 0x18]
mov rcx, r15
neg rcx
imul rcx, rcx, 0x38
mov qword [r10 + rcx - 0x38], r8
mov qword [r10 + rcx - 0x30], r9
mov qword [r10 + rcx - 0x28], r8
mov qword [r10 + rcx - 0x20], rsi
mov qword [r10 + rcx - 0x18], rdi
movdqa xmm0, xmmword [rbp + 0x140]
movdqu xmmword [r10 + rcx - 0x10], xmm0
mov cl, 1
test cl, cl
je 0x14000660a
mov ecx, 0xdaede535
mov eax, dword [0x141dbeb90]
sub eax, dword [0x141dbeb94]
xor eax, 0xe7ab5679
imul rax, rcx
shr rax, 0x3f
add eax, 0xc0cc83e3
cmp eax, 0x4811c903
jb 0x1400065c8
mov rax, qword [rbp - 0x20]
mov rdi, rax
cmp rax, qword [rbp - 0x18]
mov r9, qword [rbp + 0x1a0]
jne 0x1400045a0
jmp 0x140006b4d
movaps xmm0, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0x140], xmm0
mov ecx, eax
and cl, 1
movzx ecx, cl
mov r11, qword [rbp + 0x1f8]
sub qword [r11 + 0x10], rcx
mov rcx, r15
neg rcx
lea rdx, [r15 - 0x10]
and rdx, qword [rbp + 0x1a0]
mov byte [r10 + r15], r14b
mov byte [rdx + r10 + 0x10], r14b
inc qword [r11 + 0x18]
imul rcx, rcx, 0x38
mov qword [r10 + rcx - 0x38], r8
mov qword [r10 + rcx - 0x30], r9
mov qword [r10 + rcx - 0x28], r8
mov qword [r10 + rcx - 0x20], rsi
mov qword [r10 + rcx - 0x18], rdi
movdqa xmm0, xmmword [rbp + 0x140]
movdqu xmmword [r10 + rcx - 0x10], xmm0
jmp 0x140006555
mov eax, dword [0x141dbea28]
xor eax, dword [0x141dbea2c]
imul ecx, eax, 0x52a08285
or ecx, 0xe979ca73
add ecx, 0x9ea6f34b
mov eax, 0xffffffff
lock xadd dword [r10 + 0x18], eax
cmp ecx, 0xd12cc0f6
jbe 0x1400066af
lock dec dword [r10 + 0x18]
jmp 0x140006677
dec eax
nop word cs:[rax + rax]
xor ecx, ecx
test eax, eax
setne cl
cmovs ecx, r8d
test bl, bl
jne 0x1400066c0
test cl, cl
je 0x1400066e0
movzx ecx, cl
cmp ecx, 1
je 0x1400066e0
jmp 0x140006c3f
mov ecx, dword [0x141dbea38]
or ecx, dword [0x141dbea3c]
imul ecx, ecx, 0x763473cf
add ecx, 0xf5adb325
cmp ecx, 0xc2d2006a
jb 0x1400066e0
test eax, eax
je 0x140006747
movdqa xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x30], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dbea90]
xor eax, dword [0x141dbea94]
add eax, 0x29863e9b
xor eax, 0x86e01aa
or eax, 0xf7117c05
cmp eax, 0x49342f17
je 0x140006720
jmp 0x140005e22
mov dil, 1
jmp 0x140005ddd
mov eax, dword [0x141dbe8e0]
sub eax, dword [0x141dbe8e4]
imul rax, rax, 0x131e075
shr rax, 0x37
imul esi, eax, 0xab6e7661
add esi, 0x41319f4c
mov qword [rbp + 0x80], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call rdi
add rsp, 0x20
cmp esi, 0x596fef11
jbe 0x1400067b0
mov qword [rbp + 0x80], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call rdi
add rsp, 0x20
jmp 0x14000674f
mov r14, qword [rbp + 0x80]
sub rsp, 0x20
lea rcx, [rbp + 0x50]
call qword [sym.imp.ole32.dll_PropVariantClear]
add rsp, 0x20
mov r15d, 1
lea r12, [rbp + 0x98]
lea rsi, [rbp + 0x118]
lea rdi, [0x1400dd790]
mov eax, dword [0x141dbe8e8]
sub eax, dword [0x141dbe8ec]
cmp eax, 0x594dc843
lea rdx, [0x141db8ce8]
je 0x14000688e
test r15d, r15d
sete al
mov ecx, 0
cmove rcx, r14
mov qword [rbp + 0x118], rcx
test r14, r14
sete cl
test bl, bl
jne 0x14000688e
or al, cl
jne 0x140006874
mov ecx, 0x95487bb7
mov eax, dword [0x141dbe910]
or eax, dword [0x141dbe914]
imul rax, rcx
shr rax, 0x3e
xor eax, 0xa67a0bca
add eax, 0x2e4ac34c
cmp eax, 0xfed09264
ja 0x14000682b
mov rax, qword [r14]
sub rsp, 0x20
mov rcx, r14
call qword [rax + 0x10]
add rsp, 0x20
lea rdx, [0x141db8ce8]
nop dword [rax + rax]
test bl, bl
jne 0x140006870
mov eax, dword [0x141dbe8f0]
sub eax, dword [0x141dbe8f4]
add eax, 0x4d3fc21b
cmp eax, 0x8bd24bd7
ja 0x1400068e3
jmp 0x1400068a6
test r15d, r15d
mov eax, 0
cmove rax, r14
mov qword [rbp + 0x118], rax
jmp 0x140006802
mov eax, dword [0x141dbe8f8]
imul eax, dword [0x141dbe8fc]
and eax, 0x672b16ad
add eax, 0x70d4badc
and eax, 0x56103ad5
mov qword [rbp], rsi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x1b0], rdx
mov qword [rbp + 0x1b8], 1
cmp eax, 0xc9fbd0e0
jne 0x1400068ff
mov qword [rbp], rsi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x1b0], rdx
mov qword [rbp + 0x1b8], 1
jmp 0x1400068a6
mov eax, dword [0x141dbe900]
and eax, dword [0x141dbe904]
and eax, 0x69f0bfc5
xor eax, 0xabd21e08
imul rax, rax, 0x2cfa85e7
shr rax, 0x37
cmp eax, 0xe23a1523
mov rcx, rbp
je 0x14000696a
mov eax, dword [0x141dbe908]
or eax, dword [0x141dbe90c]
or eax, 0x518cddd6
xor eax, 0xd038ba76
imul eax, eax, 0x6e4b0037
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1c8], 1
cmp eax, 0x99797c1c
jbe 0x140006989
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1c8], 1
jmp 0x14000692a
sub rsp, 0x20
lea rcx, [rbp + 0x10]
lea rdx, [0x141db8d08]
lea r8, [rbp + 0x1b0]
call fcn.140053150
add rsp, 0x20
mov r14d, eax
mov rcx, qword [rbp + 0x118]
test rcx, rcx
mov esi, 0xb05ada9d
mov edi, 0xae8c6b8d
je 0x1400069e0
sub rsp, 0x20
call qword [sym.imp.oleaut32.dll_SysFreeString]
add rsp, 0x20
nop
test bl, bl
jne 0x1400069d0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe918]
or eax, dword [0x141dbe91c]
or eax, 0x6af32e47
add eax, 0x9c80209
or eax, 0x844760e5
cmp eax, 0x201511fd
jb 0x1400069e0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe920]
xor edx, edx
div dword [0x141dbe924]
imul rax, rsi
shr rax, 0x3d
imul eax, eax, 0xc91b4b10
imul rax, rdi
shr rax, 0x3b
cmp eax, 0x8a82fd23
ja 0x140006a10
test r14b, r14b
jne 0x140006d6b
mov r15, qword [rbp + 0x10]
lea rax, [rbp + 0x18]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp - 0x80], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe998]
imul eax, dword [0x141dbe99c]
add eax, 0xf9eae420
cmp eax, 0x481fa59a
jbe 0x140006a60
mov al, 2
mov dword [rbp + 0x210], eax
movdqa xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x120], r15
jmp 0x14000589b
mov qword [rbp + 0x1a0], r8
xor ebx, ebx
xor eax, eax
mov qword [rbp + 0x178], rax
xor eax, eax
mov qword [rbp + 0x1a8], rax
jmp 0x140007059
mov eax, dword [0x141dbea98]
xor edx, edx
div dword [0x141dbea9c]
mov ecx, 0xdfcd1f3d
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xf8f6d8bc
mov r9d, dword [rbp + 0x204]
movzx r11d, byte [rbp + 0x21f]
je 0x140006f12
jmp 0x140006ed2
mov rbx, qword [rbp + 0xd8]
mov rdi, qword [rbp + 0xe0]
mov r8, qword [rbp + 0x130]
nop word [rax + rax]
mov eax, dword [0x141dbeac0]
or eax, dword [0x141dbeac4]
xor eax, 0x4752319
imul eax, eax, 0xe74388cd
add eax, 0x45f8fa4a
cmp eax, 0x471aa144
jb 0x140006b10
cmp qword [rbp + 0x128], 0
mov rsi, qword [rbp + 0x1f8]
jne 0x140007028
jmp 0x14000703f
mov rax, qword [rbp + 0x1f8]
mov r13, qword [rax]
mov r8, qword [rax + 8]
mov eax, dword [0x141dbeb98]
xor edx, edx
div dword [0x141dbeb9c]
mov eax, 0x93a4ac31
mov rdx, qword [rbp + 0x1e8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dbeba0]
and ecx, dword [0x141dbeba4]
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x473e7b95
and ecx, 0x21e1282
cmp ecx, 0x954126f9
je 0x140006b80
mov rax, qword [rbp + 0x1f8]
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov r9, qword [rax + 0x28]
nop
mov eax, dword [0x141dbeba8]
xor eax, dword [0x141dbebac]
and eax, 0x26d7f363
imul eax, eax, 0xae1766b1
cmp eax, 0x4fbb0aa0
je 0x140006bc0
mov qword [rbp + 0x1a0], r9
mov qword [rbp + 0x178], rcx
mov qword [rbp + 0x1a8], r8
jmp 0x140007059
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x140006c00
mov ecx, 8
test r13, r13
jne 0x14000436d
jmp case.0x140004293.0
ud2
cmp ecx, 0xff
je 0x140003d1c
mov eax, dword [0x141dbea30]
and eax, dword [0x141dbea34]
shr eax, 7
imul rax, rax, 0x10bb5eb
shr rax, 0x30
or eax, 0x2efc555e
add eax, 0xf8e13cbf
cmp eax, 0x32ca5ea5
ja 0x140006c4b
jmp 0x140003d1c
mov eax, dword [0x141dbe848]
and eax, dword [0x141dbe84c]
imul rax, rax, 0x703e121b
shr rax, 0x3e
or eax, 0xcb74b78a
cmp eax, 0xd15e15ad
jne 0x140006ca0
ud2
mov eax, dword [0x141dbe850]
and eax, dword [0x141dbe854]
imul rax, rax, 0x1dd35e15
shr rax, 0x38
xor eax, 0x81bd9105
imul eax, eax, 0x66ad0261
ud2
mov eax, dword [0x141dbe758]
sub eax, dword [0x141dbe75c]
and eax, 0x4410fece
add eax, 0x8205630e
xor eax, 0x36b186b4
cmp eax, 0x7ee6572c
jae 0x140006cf4
ud2
xor eax, eax
nop word cs:[rax + rax]
ud2
mov eax, dword [0x141dbea70]
imul eax, dword [0x141dbea74]
and eax, 0x4e530e24
add eax, 0x99197b45
or eax, 0x546efc35
cmp eax, 0xbcc1f2f9
jb 0x140006ea2
jmp 0x140006e7f
xor eax, eax
test al, al
jne 0x140006ece
jmp 0x140006ea6
mov eax, dword [0x141dbe5b8]
sub eax, dword [0x141dbe5bc]
ud2
ud2
mov eax, dword [0x141dbe6c0]
sub eax, dword [0x141dbe6c4]
or eax, 0xd00a100a
xor eax, 0x378bc228
or eax, 0x742cd5
cmp eax, 0xf0f8217d
ja case.0x140004293.0
nop word cs:[rax + rax]
mov eax, dword [0x141dbe6c8]
xor eax, dword [0x141dbe6cc]
imul eax, eax, 0xfed3b10f
add eax, 0x7d2426a7
cmp eax, 0x36b27383
jb 0x140006e00
xor eax, eax
jmp 0x140003b82
mov edi, dword [0x141dbe6b8]
xor edi, dword [0x141dbe6bc]
add edi, 0xa1342d9c
and edi, 0xef172a25
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x1d4f3851
jae case.0x140004293.0
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140006e25
mov eax, dword [0x141dbea78]
add eax, dword [0x141dbea7c]
or eax, 0x46816a47
add eax, 0x101a1c0c
ud2
ud2
mov eax, dword [0x141dbe9a0]
sub eax, dword [0x141dbe9a4]
and eax, 0x1ec025bf
add eax, 0x48d814c7
and eax, 0x1f1022ad
ud2
ud2
mov eax, dword [0x141dbeaa0]
imul eax, dword [0x141dbeaa4]
imul rcx, rax, 0x12006bbd
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul eax, eax, 0x5eec0126
and eax, 0x5f0d957e
movdqa xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x30], xmm0
cmp eax, 0xa1c80070
jbe 0x140006f30
movdqa xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x30], xmm0
jmp 0x140006ed2
mov eax, dword [0x141dbeaa8]
xor eax, dword [0x141dbeaac]
and eax, 0x837f8760
xor eax, 0x210a4945
imul rax, rax, 0x793e9fdd
shr rax, 0x3a
cmp eax, 0x46e70d24
je 0x140006f30
mov eax, dword [0x141dbeab0]
sub eax, dword [0x141dbeab4]
add eax, 0xef4dc793
mov ecx, 0xa2bfc0d9
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xef1ffde
mov rsi, qword [rbp + 0x1f8]
mov rcx, qword [rbp + 0x128]
jne 0x140006fb0
mov byte [rbp + 0xc9], r11b
mov word [rbp + 0xca], r9w
mov dword [rbp + 0xcc], r15d
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0xd0], rax
mov eax, dword [0x141dbeab8]
xor eax, dword [0x141dbeabc]
add eax, 0x6350fab4
mov byte [rbp + 0xc8], r14b
mov byte [rbp + 0xc9], r11b
mov word [rbp + 0xca], r9w
mov dword [rbp + 0xcc], r15d
movdqa xmm0, xmmword [rbp + 0x30]
movdqu xmmword [rbp + 0xd8], xmm0
cmp eax, 0xe8f91bbb
ja 0x140006fb0
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0x1a8], rax
mov rbx, qword [rbp + 0xd8]
mov rdi, qword [rbp + 0xe0]
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0x178], rax
test rcx, rcx
mov r8, qword [rbp + 0x130]
je 0x14000703f
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
sub rsp, 0x20
mov rcx, rsi
call fcn.14000da10
add rsp, 0x20
xor r13d, r13d
mov rdx, qword [rbp + 0x1e8]
test rdx, rdx
je 0x140007154
xor esi, esi
mov r14d, 0xcf6d9153
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dbebb0]
or eax, dword [0x141dbebb4]
imul rax, rax, 0x388900a5
shr rax, 0x3d
or eax, 0xbe8c0390
imul eax, eax, 0xe31df455
cmp eax, 0x24f38a04
jb 0x140007080
lea rax, [rsi + rsi*2]
mov rcx, qword [rbp + 0x170]
cmp qword [rcx + rax*8], 0
je 0x140007110
mov rcx, qword [rbp + 0x170]
lea rcx, [rcx + rax*8]
mov eax, dword [0x141dbebb8]
xor edx, edx
div dword [0x141dbebbc]
mov eax, dword [0x141dbebc0]
sub eax, dword [0x141dbebc4]
imul eax, eax, 0x9a19dae2
or eax, 0x3d449808
imul eax, eax, 0x29588459
cmp eax, 0xda86a835
ja 0x1400070d4
mov r8, qword [rcx + 8]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
inc rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dbebc8]
xor edx, edx
div dword [0x141dbebcc]
add eax, 0x87e3a80a
imul rax, r14
shr rax, 0x3f
xor eax, 0xacdece79
cmp eax, 0x495e3eff
jb 0x140007120
cmp rsi, qword [rbp + 0x1e8]
jne 0x140007080
cmp qword [rbp + 0x138], 0
je 0x14000726f
mov eax, dword [0x141dbebd0]
and eax, dword [0x141dbebd4]
imul eax, eax, 0x10061fd5
add eax, 0x3977b777
mov ecx, 0xa8de69b9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xf545842b
jbe 0x1400071a0
mov rax, qword [0x141dda6a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dbebd8]
and eax, dword [0x141dbebdc]
add eax, 0x7d789632
or eax, 0xdde47ec
mov rsi, qword [0x141dda6a0]
cmp eax, 0x4ee9ca74
je 0x1400071a0
mov eax, dword [0x141dbebe0]
or eax, dword [0x141dbebe4]
and eax, 0xf9d8ced
add eax, 0xe310ed98
or eax, 0xd3b4c694
cmp eax, 0x5b1f6a45
jne 0x140007200
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, qword [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [rbp + 0x170]
nop
mov eax, dword [0x141dbebe8]
add eax, dword [0x141dbebec]
and eax, 0x2dca1952
or eax, 0x92304209
imul r12d, eax, 0xdd87c737
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call r14
add rsp, 0x20
cmp r12d, 0x2dfafc46
je 0x140007210
nop dword [rax]
mov eax, dword [0x141dbebf0]
imul eax, dword [0x141dbebf4]
or eax, 0xd4857e6d
imul eax, eax, 0x532c3330
cmp eax, 0x6878e37a
jae 0x140007250
mov r12, qword [rbp + 0xf0]
nop word cs:[rax + rax]
mov eax, dword [0x141dbebf8]
add eax, dword [0x141dbebfc]
imul rax, rax, 0x684843d3
shr rax, 0x3e
or eax, 0x2a426f1a
cmp eax, 0x692b2ea
jb 0x140007280
mov eax, dword [0x141dbec00]
add eax, dword [0x141dbec04]
mov rsi, qword [r12]
imul rax, rax, 0x6e1417fd
shr rax, 0x3d
cmp eax, 0xfb63d7e3
je 0x140007300
mov eax, dword [0x141dbec08]
add eax, dword [0x141dbec0c]
and eax, 0x87b6629a
add eax, 0x5ad27992
mov r14d, 0xaf79429b
imul r14, rax
shr r14, 0x3f
sub rsp, 0x20
mov rcx, r12
call qword [rsi + 0x10]
add rsp, 0x20
cmp r14d, 0xd414d6af
jbe 0x140007310
sub rsp, 0x20
mov rcx, r12
call qword [rsi + 0x10]
add rsp, 0x20
jmp 0x1400072c5
test r13, r13
je 0x14000734a
mov rax, qword [rbp + 0x28]
mov qword [rax], r13
mov rcx, qword [rbp + 0x1a8]
mov qword [rax + 8], rcx
mov rcx, qword [rbp + 0x178]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
mov rcx, qword [rbp + 0x1a0]
mov qword [rax + 0x28], rcx
jmp 0x140003bd0
mov rsi, qword [rbp + 0x1a8]
mov rcx, qword [rbp + 0x178]
jmp 0x140003bb4