Function at 0x140027390
Capabilities:
Access peb ldr_data
Encode data using base64
Encode data using xor
Get hostname
Validate payment card number using luhn algorithm

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4f8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x460], xmm8
movdqa xmmword [rbp + 0x450], xmm7
movdqa xmmword [rbp + 0x440], xmm6
nop word cs:[rax + rax]
mov eax, dword [0x140210e98]
add eax, dword [0x140210e9c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x75223ec
and ecx, 0xf8addc13
imul ecx, edx
mov edx, eax
and edx, 0xf8addc13
or eax, 0xf8addc13
imul eax, edx
add eax, ecx
shr eax, 8
imul rax, rax, 0x9c69a1
shr rax, 0x2f
or eax, 0x9e2d0f2c
mov qword [rbp + 0x438], rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x180], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2f8], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x358], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0xd0
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0xd0
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x370], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x298], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x290], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x60
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x330], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3c0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2b0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2b8], rsp
mov eax, 0x60
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x190], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x400], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x188], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x198], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x350], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x360], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x308], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2a8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x178], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x338], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x170], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x168], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x368], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x160], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3b8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3d8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2a0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x318], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x320], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2d0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x340], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3e0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x378], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x388], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x398], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x380], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2c8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x348], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3c8], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3e8], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3f0], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2c0], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x390], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x310], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1a0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1a8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
cmp dword [rbp + 0x438], 0xccc5dcac
ja 0x1400273d0
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x158], r9
mov qword [rbp + 0x150], r8
mov qword [rbp + 0x288], rdx
mov qword [rbp + 0x280], rcx
mov qword [rbp + 0x278], r13
mov qword [rbp + 0x270], r12
mov qword [rbp + 0x148], r15
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x138], rbx
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x268], rsi
mov qword [rbp + 0x260], r11
mov qword [rbp + 0x128], r10
mov eax, dword [0x140210ea0]
xor edx, edx
div dword [0x140210ea4]
mov ecx, eax
xor ecx, 0xe6d32274
and ecx, eax
mov eax, ecx
xor eax, 0x3302024
xor ecx, 0xecc1d7d3
mov edx, ecx
and edx, 0x548fdfca
and eax, 0xab702035
imul eax, edx
mov edx, ecx
and edx, 0xab702035
or ecx, 0xab702035
imul ecx, edx
add ecx, eax
cmp ecx, 0x8d4e5366
jne 0x140027be0
mov eax, 0xd0
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
sub rsp, 0x20
mov rcx, r14
call fcn.14012efa0
mov rcx, r14
call fcn.14012f850
add rsp, 0x20
mov dword [rbp + 0x434], 0
sub rsp, 0x20
lea r8, [rbp + 0x434]
mov ecx, 5
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140210ea8]
mov ecx, dword [0x140210eac]
not eax
not ecx
or ecx, eax
mov r12d, ecx
not r12d
mov eax, r12d
and eax, 0xe8082d72
and ecx, 0x17f7d28d
imul ecx, eax
mov eax, r12d
and eax, 0x17f7d28d
or r12d, 0x17f7d28d
imul r12d, eax
add r12d, ecx
mov eax, r12d
and eax, 0xa0c1c49
add eax, eax
sub r12d, eax
add r12d, 0xa0c1c49
mov eax, r12d
xor eax, 0x52db33a9
and r12d, 0x2d24cc56
add r12d, r12d
sub r12d, eax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xe8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x3f8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x428], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x438], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1b8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1b0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xa0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xa8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xb8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xd0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xd8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xc0], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xc8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1c0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1c8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1d0], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1d8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x328], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1e0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1e8], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1f0], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x1f8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x200], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x208], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x210], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x220], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x228], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x218], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xe0], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2d8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x230], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x238], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x240], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xf0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0xf8], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2e0], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2e8], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x2f0], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x300], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rbx, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rsi, rsp
mov eax, 0xd0
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
sub rsp, 0x20
mov rcx, rdi
call fcn.14012efa0
mov rcx, rdi
call fcn.14014f230
add rsp, 0x20
mov dword [rbp + 0x434], 0
sub rsp, 0x20
mov ecx, 5
xor edx, edx
lea r8, [rbp + 0x434]
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
add rsp, 0x20
cmp r12d, 0x6a272bb7
jb 0x140027be0
mov qword [rbp + 0x408], rsi
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x108], r15
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x248], rdi
test eax, eax
mov r13, qword [rbp + 0x428]
mov rdi, qword [rbp + 0x438]
jne 0x140028120
nop
mov eax, dword [0x140210eb0]
add eax, dword [0x140210eb4]
imul rax, rax, 0x7345c57f
shr rax, 0x39
mov ecx, eax
not ecx
or ecx, 0x5f82f01f
lea r14d, [rax + rcx]
add r14d, 0x57ce4d3d
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
cmp r14d, 0xb98d62a6
ja 0x140028090
nop word cs:[rax + rax]
mov eax, dword [0x140210eb8]
xor eax, dword [0x140210ebc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd14ad482
and ecx, 0x2eb52b7d
imul ecx, edx
mov edx, eax
and edx, 0x2eb52b7d
or eax, 0x2eb52b7d
imul eax, edx
add eax, ecx
imul eax, eax, 0x4fc6df49
cmp eax, 0x2bf8cb90
je 0x1400280e0
mov esi, dword [rbp + 0x434]
test rsi, rsi
je 0x14002821d
lea rdx, [rsi + rsi]
nop word cs:[rax + rax]
mov eax, dword [0x140210ec0]
mov ecx, dword [0x140210ec4]
not eax
not ecx
or ecx, eax
and ecx, 0x5c0825dc
mov eax, ecx
xor eax, 0x50000144
xor ecx, 0xa63bc839
mov r8d, eax
and r8d, 0x180024c0
and ecx, 0xe63bc93d
imul ecx, r8d
mov r8d, eax
and r8d, 0x4408011c
or eax, 0xe63bc93d
imul eax, r8d
add eax, ecx
cmp eax, 0xcdb663a8
ja 0x140028140
sub rsp, 0x20
mov ecx, 8
call fcn.140107940
add rsp, 0x20
mov r15, rax
nop word [rax + rax]
mov eax, dword [0x140210ec8]
and eax, dword [0x140210ecc]
imul eax, eax, 0xa5745b95
or eax, 0xbfbe757f
cmp eax, 0xfb76a00b
jb 0x1400281b0
test r15, r15
je 0x140028aca
nop word [rax + rax]
mov eax, dword [0x140210ed4]
add eax, dword [0x140210ed0]
mov ecx, eax
not ecx
or eax, 0x940e95fe
or ecx, 0x15d52c30
and ecx, eax
mov eax, ecx
not eax
or eax, 0x62204001
and eax, 0xe221f083
and ecx, 0x5da097c
or ecx, eax
cmp ecx, 0x8b143a1d
ja 0x1400281e0
jmp 0x140028223
mov r15d, 2
movabs r12, 0x8000000000000000
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], r15
mov qword [rbp + 0x3b0], rsi
sub rsp, 0x20
lea r8, [rbp + 0x434]
mov ecx, 5
mov rdx, r15
call fcn.14014f270
add rsp, 0x20
test eax, eax
je 0x1400282d5
lea rax, [r15 + rsi*2]
nop word cs:[rax + rax]
mov ecx, dword [0x140210ef0]
mov edx, dword [0x140210ef4]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
or edx, 0xffaa46bd
cmp edx, 0x4c6bc535
je 0x140028270
test esi, esi
je 0x1400283ac
xor r14d, r14d
mov rcx, r15
nop dword [rax + rax]
cmp word [rcx], 0
je 0x1400283b3
add rcx, 2
mov edx, r14d
and edx, 1
or r14, 1
add r14, rdx
cmp rcx, rax
jne 0x1400282b0
jmp 0x140028555
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
test esi, esi
je 0x14002839d
mov eax, dword [0x140210ef8]
mov ecx, dword [0x140210efc]
add eax, ecx
add eax, 0x12fd5fc4
mov ecx, eax
xor ecx, 0x45
and ecx, 0x28201945
xor eax, 0x7f69b918
lea eax, [rax + rcx*2]
cmp eax, 0xe47fc0c4
jne 0x14002831f
mov rax, qword [0x14022cb48]
mov r14, qword [0x14022cb48]
mov eax, dword [0x140210f00]
mov ecx, eax
not ecx
or ecx, dword [0x140210f04]
add eax, ecx
inc eax
mov ecx, eax
not ecx
and ecx, 0xd78d558f
mov edx, eax
and edx, 0x2872aa70
imul edx, ecx
mov ecx, eax
and ecx, 0xd78d558f
or eax, 0xd78d558f
imul eax, ecx
add eax, edx
add eax, 0xf9fa8d57
xor eax, 0x1fae0211
cmp eax, 0x11c95979
jne 0x140028387
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov al, 1
nop
test al, al
je 0x1400283a0
mov r15, r12
jmp 0x1400286fc
xor esi, esi
jmp 0x140028555
mov rdi, r14
sub rdi, rsi
jbe 0x140028548
nop
mov eax, dword [0x140210f08]
mov ecx, dword [0x140210f0c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
or eax, 0x99da7ee1
or ecx, 0x6625811e
and ecx, eax
cmp ecx, 0x5982bfeb
je 0x1400283c0
sub rsp, 0x20
lea rcx, [rbp + 0x3a0]
mov rdx, rsi
mov r8, rdi
call fcn.14014f290
add rsp, 0x20
mov r15, qword [rbp + 0x3a8]
mov r12, qword [rbp + 0x3b0]
lea rcx, [r15 + r12*2]
cmp rdi, 2
jb 0x14002849f
not rsi
add r14, rsi
add r14, r14
sub rsp, 0x20
xor edx, edx
mov r8, r14
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
add r12, rdi
lea rax, [r12 + r12]
dec r12
lea rcx, [rax + r15]
add rcx, 0xfffffffffffffffe
nop word cs:[rax + rax]
mov eax, dword [0x140210f14]
add eax, dword [0x140210f10]
imul rax, rax, 0x2fb72eaf
shr rax, 0x3c
mov edx, eax
and edx, 1
xor eax, 0x18b19f01
or eax, edx
add eax, 0x4dd25635
cmp eax, 0x7075c948
ja 0x140028470
mov edx, dword [0x140210f18]
mov r8d, dword [0x140210f1c]
mov eax, edx
not eax
mov r9d, r8d
not r9d
mov r10d, eax
and r10d, 0x92f20cbc
and edx, 0x6d0df343
or edx, r10d
or eax, r9d
and r9d, 0x92f20cbc
and r8d, 0x6d0df343
or r8d, r9d
xor r8d, edx
not eax
or eax, r8d
mov edx, eax
xor edx, 0xc6dde19f
add edx, eax
and eax, 0x39221e60
sub edx, eax
not edx
and edx, 0x88d81d54
cmp edx, 0x23721e6c
jbe 0x14002850b
mov word [rcx], 0
inc r12
nop
mov eax, dword [0x140210f20]
and eax, dword [0x140210f24]
mov edx, eax
xor edx, 0xbaf623ba
add edx, eax
and eax, 0x4509dc45
sub edx, eax
xor edx, 0xd23a09c5
add edx, 0x30167cb
mov word [rcx], 0
cmp edx, 0x81ad5c30
ja 0x140028510
jmp 0x14002854b
mov r12, r14
mov qword [rbp + 0x3b0], r12
mov rsi, r12
sub rsp, 0x20
lea rcx, [rbp + 0x410]
mov rdx, r15
mov r8, rsi
call fcn.14014f2b0
add rsp, 0x20
mov rdi, qword [rbp + 0x410]
mov r9, qword [rbp + 0x418]
mov r12, qword [rbp + 0x420]
cmp qword [rbp + 0x3a0], 0
je 0x140028680
mov rsi, r13
mov rbx, r9
mov r14, qword [0x14022cb48]
mov eax, dword [0x140210f28]
add eax, dword [0x140210f2c]
mov ecx, eax
xor ecx, 0xa0518e6
and ecx, eax
mov eax, ecx
not eax
or eax, 0x485f3c2b
or ecx, 0xb7a0c3d4
and ecx, eax
imul eax, ecx, 0x656328ff
cmp eax, 0x9da3394c
jne 0x1400285f0
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140210f30]
imul eax, dword [0x140210f34]
mov ecx, 0x845cab6f
imul rax, rcx
shr rax, 0x3e
imul r13d, eax, 0xa21a82ab
add r13d, 0x87c5e8ee
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
cmp r13d, 0xee1cda95
ja 0x1400285f0
mov r9, rbx
mov r13, rsi
nop dword [rax]
mov eax, dword [0x140210f38]
mov ecx, dword [0x140210f3c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x214cfcce
or eax, 0x214cfcce
and eax, ecx
mov ecx, eax
and ecx, 0x7dd81d14
add ecx, ecx
sub eax, ecx
cmp eax, 0x27f63d70
je 0x140028640
nop word cs:[rax + rax]
mov eax, dword [0x140210f40]
mov ecx, dword [0x140210f44]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x87a91112
and ecx, 0x7856eeed
imul ecx, edx
mov edx, eax
and edx, 0x7856eeed
or eax, 0x7856eeed
imul eax, edx
lea edx, [rax + rcx]
add edx, 0xeb1be47e
add eax, ecx
not edx
or edx, 0x7e72bd36
add eax, edx
add eax, 0xeb1be47f
cmp eax, 0xac531699
ja 0x140028680
mov r15, rdi
mov rdi, qword [rbp + 0x438]
mov r14, r12
mov eax, dword [0x140210f48]
or eax, dword [0x140210f4c]
movabs rsi, 0x579ec04521ba847f
imul eax, eax, 0xa28cff55
mov ecx, eax
not ecx
and ecx, 0x8b07fb7f
mov edx, eax
and edx, 0x74f80480
imul edx, ecx
mov ecx, eax
and ecx, 0x8b07fb7f
or eax, 0x8b07fb7f
imul eax, ecx
add eax, edx
imul eax, eax, 0x4cdb7bb3
lea r12, [0x140201ed6]
cmp eax, 0xa6a48488
jbe 0x1400287f8
mov qword [rdi], r12
mov rcx, qword [rdi]
mov dword [r13], 0x35172f5f
mov edx, dword [r13]
sub rsp, 0x20
mov rbx, r9
call fcn.140023e50
add rsp, 0x20
mov rcx, qword [rax]
xor rcx, rsi
mov edx, 0x7d52d64e
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
mov r10d, eax
and r10b, 0x63
add r10b, r10b
sub al, r10b
add al, 0xe3
mov r10d, r9d
not r10b
or r9b, 0x4a
or r10b, 0xb5
and r10b, r9b
not r10b
xor r8b, 0xfb
mov r9, qword [rbp + 0x408]
mov qword [r9], rcx
mov r9, rbx
mov rcx, qword [rbp + 0x408]
mov dword [rcx + 8], edx
mov rcx, qword [rbp + 0x408]
mov byte [rcx + 0xc], al
mov rax, qword [rbp + 0x408]
mov byte [rax + 0xd], r10b
mov rax, qword [rbp + 0x408]
mov byte [rax + 0xe], r8b
mov qword [rbp + 0x3d0], r14
nop
mov r14d, dword [0x140210f50]
or r14d, dword [0x140210f54]
mov eax, r14d
not eax
mov ecx, r14d
and ecx, 0x796c4fb4
and eax, 0x8693b04b
imul eax, ecx
mov ecx, r14d
and ecx, 0x8693b04b
or r14d, 0x8693b04b
imul r14d, ecx
add r14d, eax
and r14d, 0xc72a8704
add r14d, 0x6828d333
movabs rax, 0x8000000000000000
cmp r15, rax
setne r13b
mov esi, 1
cmovne rsi, r9
mov ebx, 0
cmovne rbx, r15
mov rax, qword [rbp + 0x438]
mov qword [rax], r12
mov rcx, qword [rax]
mov rax, qword [rbp + 0x428]
mov dword [rax], 0x35172f5f
mov edx, dword [rax]
sub rsp, 0x20
mov rdi, r12
mov r12, r15
mov r15, r9
call fcn.140023e50
add rsp, 0x20
mov rcx, qword [rax]
not rcx
mov rdx, rcx
movabs r8, 0x579ec04521ba847f
and rdx, r8
not rdx
or rcx, r8
and rcx, rdx
mov edx, dword [rax + 8]
mov r8d, edx
and r8d, 0x7d52d64e
add r8d, r8d
neg r8d
movzx r9d, byte [rax + 0xe]
movzx r10d, word [rax + 0xc]
mov r11d, r10d
shr r11d, 8
xor r10b, 0xe3
xor r11b, 0xb5
xor r9b, 0xfb
cmp qword [rbp + 0x3d0], 0xf
sete al
not rcx
lea edx, [rdx + r8 + 0x7d52d64e]
mov r8, qword [rbp + 0x408]
mov qword [r8], rcx
mov dword [r8 + 8], edx
mov byte [r8 + 0xc], r10b
mov byte [r8 + 0xd], r11b
mov byte [r8 + 0xe], r9b
mov r9, r15
mov r15, r12
mov r12, rdi
cmp r14d, 0x2cab9842
jb 0x140028800
and r13b, al
mov qword [rbp + 0x258], rsi
mov qword [rbp + 0x250], rbx
je 0x140028960
mov rax, qword [rsi]
xor rax, qword [r8]
mov rcx, qword [rsi + 7]
xor rcx, qword [r8 + 7]
or rcx, rax
je 0x1400289ef
nop dword [rax]
mov eax, dword [0x140210f58]
mov ecx, dword [0x140210f5c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0xf1b03166
mov ecx, eax
xor ecx, 0x972bba4
and ecx, eax
cmp ecx, 0x3139b476
je 0x140028960
mov eax, dword [0x140210f64]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x140210f60]
xor ecx, eax
xor ecx, 0x151141e
mov eax, ecx
and eax, 0x9753751e
and ecx, 0x14135108
add ecx, ecx
sub eax, ecx
add eax, 0xbcb7d928
cmp eax, 0xb454cf06
mov r13, qword [rbp + 0x3e0]
mov r14, qword [rbp + 0x2c0]
mov rdi, qword [rbp + 0x2c8]
mov r15, qword [rbp + 0x348]
mov r12, qword [rbp + 0x310]
ja 0x140028b83
jmp 0x140028b26
lea rax, [0x1401f3da1]
mov r9, qword [rbp + 0x3f8]
mov r10, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov ecx, dword [0x140211870]
imul ecx, dword [0x140211874]
and ecx, 0x4bc9031b
add ecx, 0xbbb43cc3
mov edx, ecx
not edx
and edx, 0x7bc9c138
mov r8d, ecx
and r8d, 0x84200647
imul r8d, edx
mov edx, ecx
and edx, 0x7bdd3998
or ecx, 0x7bddf9b8
imul ecx, edx
add ecx, r8d
mov qword [r10], rax
mov rsi, qword [r10]
mov dword [r9], 0x5aac2f9f
cmp ecx, 0xebfefa59
jbe 0x140028a76
mov qword [r10], rax
mov dword [r9], 0x5aac2f9f
jmp 0x140028a10
movabs r12, 0x7ebf5a926fc9b6
mov eax, dword [0x140211878]
sub eax, dword [0x14021187c]
imul eax, eax, 0x714030ea
add eax, 0x5996d56
not eax
and eax, 0xe261b334
cmp eax, 0x2da0a344
mov r13, qword [rbp + 0x100]
mov r15, qword [rbp + 0x108]
mov rbx, qword [rbp + 0x110]
mov rdi, qword [rbp + 0x118]
jb 0x140032b4b
jmp 0x1400329f0
mov eax, dword [0x140210ed8]
imul eax, dword [0x140210edc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfe00d7f
and ecx, 0xf01ff280
imul ecx, edx
mov edx, eax
and edx, 0xf01ff280
or eax, 0xf01ff280
imul eax, edx
add eax, ecx
mov ecx, 0xbc9454a8
sub ecx, eax
not ecx
and ecx, 0x49ac9bd6
add ecx, ecx
sub eax, ecx
add eax, 0xd184735
cmp eax, 0xbd7c1a7c
ja 0x140028c9c
jmp 0x140028c68
mov eax, dword [0x140210f68]
mov esi, dword [0x140210f6c]
xor esi, eax
not esi
and esi, eax
and esi, 0x2f6c888d
add esi, 0x411d0cf7
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x178914e1
and eax, 0x2876e91e
imul eax, ecx
mov ecx, esi
and ecx, 0x6874891e
or esi, 0x6876e91e
imul esi, ecx
add esi, eax
sub rsp, 0x20
mov rcx, r12
call fcn.140133dd0
add rsp, 0x20
cmp esi, 0x4169e3f4
jae 0x140028b95
sub rsp, 0x20
mov rcx, r12
call fcn.140133dd0
add rsp, 0x20
jmp 0x140028b26
cmp byte [r12], 0x12
jne 0x140028c33
lea rax, [0x140201891]
mov qword [r15], rax
mov rcx, qword [r15]
mov dword [rdi], 0xf1f986bb
mov edx, dword [rdi]
sub rsp, 0x20
call fcn.140023920
add rsp, 0x20
mov rcx, qword [rax]
movabs rdx, 0xe7df36d7fd702c4b
xor rdx, qword [rax + 8]
mov esi, 0x21bf1cf5
xor esi, dword [rax + 0x10]
movabs rax, 0x3b016283f617be08
mov r8, rcx
and r8, rax
add r8, r8
sub rax, r8
add rax, rcx
mov qword [r14], rax
mov qword [r14 + 8], rdx
mov eax, dword [0x140210f70]
mov ecx, dword [0x140210f74]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0x3b476d8f
add ecx, 0x8eb52b7d
cmp ecx, 0x453c5370
mov rbx, qword [rbp + 0x390]
jb 0x140028d39
jmp 0x140028cd2
mov eax, dword [0x140210f88]
xor edx, edx
div dword [0x140210f8c]
or eax, 0xe5f53feb
mov ecx, eax
not ecx
imul ecx, ecx, 0x257104c8
and eax, 0xda8efb37
sub ecx, eax
cmp ecx, 0xc8b67874
ja 0x14002b364
jmp 0x1400290f9
mov eax, dword [0x140210ee4]
add eax, dword [0x140210ee0]
and eax, 0xae023c2b
mov ecx, eax
xor ecx, 0xa0021408
xor eax, 0x6000020
or ecx, 0x47d46bf3
or eax, 0xe9fe57dc
and eax, ecx
ud2
ud2
mov eax, dword [0x140210f78]
mov edi, dword [0x140210f7c]
not eax
not edi
mov ecx, eax
or ecx, edi
and edi, eax
not edi
and edi, ecx
add edi, 0x7c056a6
mov eax, edi
and eax, 0x265c94d2
add eax, eax
sub edi, eax
add edi, 0xa65c94d2
mov eax, edi
not eax
and eax, 0xb3d57e3a
and edi, 0x4c2a81c5
sub edi, eax
mov dword [r14 + 0x10], esi
sub rsp, 0x20
mov r8d, 0x14
mov rcx, rbx
mov rdx, r14
call fcn.140134470
add rsp, 0x20
cmp edi, 0x6e0f5338
jae 0x140028d5b
mov dword [r14 + 0x10], esi
sub rsp, 0x20
mov r8d, 0x14
mov rcx, rbx
mov rdx, r14
call fcn.14014f4f0
add rsp, 0x20
jmp 0x140028cd2
movzx eax, byte [rbx]
mov ecx, 0x980729db
nop word cs:[rax + rax]
mov r8d, dword [0x140210f80]
mov edx, dword [0x140210f84]
not r8d
not edx
and edx, r8d
not edx
shr edx, 1
imul rdx, rcx
shr rdx, 0x3d
lea r8d, [rdx + 0x4383474]
xor edx, 0xfa85c38a
mov r9d, edx
and r9d, 0x62840201
and r8d, 0x4383476
imul r8d, r9d
mov r9d, edx
and r9d, 0x9801c18a
or edx, 0x9c39f5fe
imul edx, r9d
add edx, r8d
cmp edx, 0xdf7a451e
je 0x140028d70
cmp eax, 0x12
mov r8, qword [rbp + 0x3f0]
mov rdx, qword [rbp + 0x398]
mov rcx, qword [rbp + 0x380]
mov ecx, dword [rbp + 0x380]
mov eax, dword [0x140211880]
xor edx, edx
div dword [0x140211884]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc6b36e77
and ecx, 0x394c9188
imul ecx, edx
mov edx, eax
and edx, 0x394c9188
or eax, 0x394c9188
imul eax, edx
add eax, ecx
mov r14d, 0xe873965f
imul r14, rax
shr r14, 0x3c
xor r14d, 0xb95aa72f
mov edx, dword [r9]
sub rsp, 0x20
mov rcx, rsi
call fcn.140023130
add rsp, 0x20
mov rcx, qword [rax]
movabs rdx, 0xaf711ec701fd4e3a
xor rcx, rdx
mov rdx, qword [rax + 8]
not rdx
mov r8, rdx
movabs r9, 0xab2ac10ce661550c
or r8, r9
and rdx, r9
not rdx
and rdx, r8
mov r9, qword [rax + 0x10]
not r9
mov r8, r9
or r8, r12
and r9, r12
not r8
or r8, r9
mov r10, qword [rax + 0x18]
movzx r9d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov qword [r13], rcx
mov qword [r13 + 8], rdx
mov qword [r13 + 0x10], r8
movabs rcx, 0x7b59e92a25270690
xor r10, rcx
mov qword [r13 + 0x18], r10
mov ecx, eax
mov edx, eax
and dl, 0x14
add dl, dl
sub al, dl
add al, 0x94
mov byte [r13 + 0x20], al
shr ecx, 8
mov eax, ecx
and al, 0x48
add al, al
sub cl, al
add cl, 0xc8
mov byte [r13 + 0x21], cl
xor r9b, 0xed
mov byte [r13 + 0x22], r9b
mov qword [rbx], r15
lea rax, [0x1400b72e0]
mov qword [rbx + 8], rax
lea rax, [0x14017a200]
mov qword [rdi], rax
mov qword [r15], r13
mov qword [r15 + 8], 0x23
mov qword [rdi + 8], 2
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, rdi
call fcn.14014f3d0
mov r9, qword [rbp + 0x3f8]
add rsp, 0x20
cmp r14d, 0x45ddd6a6
jae 0x140032c61
mov edx, dword [r9]
sub rsp, 0x20
mov rcx, rsi
call fcn.14014f550
add rsp, 0x20
mov rdx, qword [rax]
mov r8, rdx
movabs rcx, 0xaf711ec701fd4e3a
xor r8, rcx
not r8
and r8, rcx
add r8, r8
sub rcx, r8
add rcx, rdx
mov rdx, qword [rax + 8]
mov r8, rdx
movabs r9, 0x54d53ef3199eaaf3
and r8, r9
add r8, r8
add rdx, r9
sub rdx, r8
mov r8, qword [rax + 0x10]
not r8
mov r9, r8
and r9, r12
not r9
or r8, r12
and r8, r9
mov r9, qword [rax + 0x18]
mov r10, r9
movabs r11, 0x7b59e92a25270690
and r10, r11
add r10, r10
add r9, r11
sub r9, r10
movzx r10d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov qword [r13], rcx
mov qword [r13 + 8], rdx
not r8
mov qword [r13 + 0x10], r8
mov qword [r13 + 0x18], r9
mov ecx, eax
xor al, 0x94
mov byte [r13 + 0x20], al
shr ecx, 8
xor cl, 0xc8
mov byte [r13 + 0x21], cl
xor r10b, 0xed
mov byte [r13 + 0x22], r10b
mov qword [rbx], r15
lea rax, [0x1400b72e0]
mov qword [rbx + 8], rax
lea rax, [0x14017a200]
mov qword [rdi], rax
mov qword [r15], r13
mov qword [r15 + 8], 0x23
mov qword [rdi + 8], 2
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d3210
mov r9, qword [rbp + 0x3f8]
add rsp, 0x20
jmp 0x1400329f0
cmp qword [rbp + 0x250], 0
je 0x140032d55
nop
mov eax, dword [0x140211888]
mov ecx, dword [0x14021188c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xff41d961
and eax, 0xbe269e
sub eax, ecx
add eax, 0xfd4092ce
mov ecx, eax
and ecx, 0x216cebe5
xor eax, 0x216cebe5
lea eax, [rax + rcx*2]
cmp eax, 0x3a52e3a2
jb 0x140032c70
mov eax, dword [0x140211890]
mov ecx, dword [0x140211894]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xe14761fd
xor eax, 0x97929112
cmp eax, 0x7e14d44a
jae 0x140032cf4
mov rax, qword [0x14022cb48]
mov rsi, qword [0x14022cb48]
mov edi, 0x94beb361
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [rbp + 0x258]
nop
mov eax, dword [0x140211898]
mov ecx, dword [0x14021189c]
not eax
not ecx
or ecx, eax
not ecx
imul rcx, rdi
shr rcx, 0x3d
imul r14d, ecx, 0x54d2448f
add r14d, 0xae5c8b0e
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call rbx
add rsp, 0x20
cmp r14d, 0xfafa6fb4
ja 0x140032d10
mov eax, dword [0x1402118a0]
and eax, dword [0x1402118a4]
add eax, 0xd61d8eef
and eax, 0x87b8302c
imul eax, eax, 0x7da04ff0
cmp eax, 0x746662d9
mov rdi, qword [rbp + 0x248]
jb 0x140032de0
mov eax, dword [0x1402118a8]
xor edx, edx
div dword [0x1402118ac]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf6aa1515
and ecx, 0x955eaea
imul ecx, edx
mov edx, eax
and edx, 0x955eaea
or eax, 0x955eaea
imul eax, edx
add eax, ecx
shr eax, 3
imul rsi, rax, 0x27d17fe5
shr rsi, 0x38
add esi, 0xcc9e2747
sub rsp, 0x20
mov rcx, rdi
call fcn.14014f390
add rsp, 0x20
cmp esi, 0x82cba692
jae 0x140032e00
sub rsp, 0x20
mov rcx, rdi
call fcn.140016fb0
add rsp, 0x20
jmp 0x140032d7f
mov eax, dword [0x1402118b0]
add eax, dword [0x1402118b4]
or eax, 0xdf90c281
imul eax, eax, 0xffdf40fb
cmp eax, 0xd44d64a8
je 0x140032e00
nop
mov eax, dword [str.o._T_D]
add eax, dword [0x1402118b8]
mov ecx, eax
xor ecx, 0x94c8c050
xor eax, 0xb333822
or ecx, 0x62242f8f
and ecx, eax
xor ecx, 0x328bd337
cmp ecx, 0x7f1a5c07
jae 0x140032e20
nop
mov eax, dword [0x1402119c0]
sub eax, dword [0x1402119c4]
add eax, 0x7df5fcd3
mov ecx, eax
or ecx, 0x10704b64
mov edx, eax
not edx
and edx, 0x4831480
mov r8d, ecx
and r8d, 0xfb0ce37b
imul r8d, edx
and ecx, 0x4f31c84
or eax, 0x14f35fe4
imul eax, ecx
add eax, r8d
cmp eax, 0xa2ae6999
ja 0x140032e50
movaps xmm6, xmmword [rbp + 0x440]
movaps xmm7, xmmword [rbp + 0x450]
movaps xmm8, xmmword [rbp + 0x460]
lea rsp, [rbp + 0x478]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret