Function at 0x1400d62d0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x68], r9
mov qword [rbp + 0x38], r8
mov eax, dword [0x141f45080]
add eax, dword [0x141f45084]
imul eax, eax, 0x58f48a58
add eax, 0xca453714
or eax, 0xa7691bf9
cmp eax, 0x1b5fdedd
jb 0x1400d63a2
mov eax, dword [0x141f45088]
xor eax, dword [0x141f4508c]
add eax, 0x356fd992
mov r10d, 0xf71aaecf
imul r10, rax
shr r10, 0x3f
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rax, rsp
cmp r10d, 0x552476ea
jbe 0x1400d63f5
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
jmp 0x1400d631a
mov qword [rbp - 0x10], rdi
mov qword [rbp - 0x48], rsi
mov qword [rbp + 0x10], r11
mov qword [rbp + 0x98], rdx
mov qword [rbp + 0x20], r9
mov qword [rbp - 0x50], rax
mov qword [rbp - 8], r8
mov qword [rbp + 0x70], rcx
mov eax, dword [0x141f45090]
xor edx, edx
div dword [0x141f45094]
mov ecx, 0xb6e8dbd3
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x878c98a0
cmp ecx, 0x77f61113
jne 0x1400d6570
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x210
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x2b0
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x470
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x410
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x2d0
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x141f45098]
xor eax, dword [0x141f4509c]
xor eax, 0x4fdcc0a8
imul rax, rax, 0x42034c83
shr rax, 0x3d
mov qword [rbp + 0xb0], rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r10, rsp
mov eax, 0x210
call fcn.1400f4d10
sub rsp, rax
mov rdx, rsp
mov eax, 0x2b0
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x470
call fcn.1400f4d10
sub rsp, rax
mov rbx, rsp
mov eax, 0x410
call fcn.1400f4d10
sub rsp, rax
mov rsi, rsp
mov eax, 0x2d0
call fcn.1400f4d10
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rax, rsp
cmp dword [rbp + 0xb0], 0xe168002e
je 0x1400d6570
mov qword [rbp + 0x48], rax
mov qword [rbp - 0x18], rcx
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0x68], r13
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0x18], rsi
mov qword [rbp], rbx
mov qword [rbp - 0x58], rdi
mov qword [rbp + 0x28], r11
mov qword [rbp - 0x28], r10
mov qword [rbp + 8], r9
mov qword [rbp - 0x20], r8
mov qword [rbp + 0x30], rdx
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov r15, qword [rbp + 0x98]
cmp byte [r15], 0
mov r13, qword [rbp + 0x70]
mov r14, qword [rbp + 0x78]
mov rsi, r12
je 0x1400d6bc1
mov qword [rbp + 0x80], rsi
mov qword [rbx], 0
mov qword [rbp + 0xa0], r9
mov qword [r9], 0
mov qword [rbp + 0x88], r8
mov qword [r8], 0
mov qword [rbp + 0x90], r10
mov qword [r10], 0
mov rsi, rdx
mov qword [rdx], 0
mov qword [rbp + 0x58], rcx
mov qword [rcx], 0
mov rdi, qword [r13 + 0xf8]
test rdi, rdi
je 0x1400d6980
mov eax, dword [0x141f450b0]
xor eax, dword [0x141f450b4]
imul eax, eax, 0xc62660be
imul rcx, rax, 0x6aa27cf5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
or eax, 0xd76687a6
cmp eax, 0x7068a4f9
jne 0x1400d689d
mov rcx, qword [rdi + 0x10]
sub rsp, 0x30
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov r8, rbx
mov r9, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
mov r15, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov r14, qword [rbp + 0x88]
mov r12, qword [rbp + 0xa0]
nop word cs:[rax + rax]
mov eax, dword [0x141f450b8]
and eax, dword [0x141f450bc]
and eax, 0xb0003282
or eax, 0xefdcc1c
imul r13d, eax, 0x8109fa81
mov rcx, qword [rdi + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov rdx, rbx
mov r8, rbx
mov r9, r12
call r15
add rsp, 0x30
cmp r13d, 0xdc846539
ja 0x1400d68c0
test eax, eax
mov r13, qword [rbp + 0x70]
mov r14, qword [rbp + 0x78]
jne 0x1400d6980
mov eax, dword [0x141f450c0]
imul eax, dword [0x141f450c4]
add eax, 0x3dcf25e9
imul rax, rax, 0x751f9c29
shr rax, 0x3d
or eax, 0xb367abec
cmp eax, 0xf576f2d
jae 0x1400d6946
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141f450c8]
and eax, dword [0x141f450cc]
xor eax, 0x20400549
or eax, 0xc7bbe206
imul r15d, eax, 0xd229914
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp r15d, 0x9953a29d
jb 0x1400d6950
sub rsp, 0x20
mov rcx, qword [rbp + 0x90]
mov rdx, rsi
mov rdi, qword [rbp + 0x58]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
nop
mov ecx, dword [0x141f450d0]
sub ecx, dword [0x141f450d4]
or ecx, 0x88193000
xor ecx, 0x9b0a1000
or ecx, 0x64e44fef
cmp ecx, 0xe6f868b9
je 0x1400d69a0
test eax, eax
jne 0x1400d69d8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rax, qword [rbp + 0xa0]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
mov rdx, qword [rsi]
mov r10, qword [rdi]
mov r11, qword [r13 + 0x110]
xor edi, edi
cmp rdx, r11
cmovb r11, rdi
mov r15, qword [r13 + 0x118]
mov r9, qword [r13 + 0x100]
mov r8, qword [r13 + 0x108]
mov qword [r13 + 0x108], rax
mov qword [r13 + 0x100], rcx
mov qword [r13 + 0x118], r10
mov qword [r13 + 0x110], rdx
sub rdx, r11
cmp r10, r15
cmovb r15, rdi
sub r10, r15
add r10, rdx
mov rdx, 0xffffffffffffffff
cmovae rdx, r10
test rdx, rdx
je 0x1400d6a8b
xor r10d, r10d
cmp rcx, r9
cmovb r9, r10
sub rcx, r9
cmp rax, r8
cmovb r8, r10
sub rax, r8
test rdx, rdx
mov r15, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x80]
js 0x1400d6b14
cvtsi2ss xmm1, rdx
jmp 0x1400d6b29
mov eax, 0x911273fb
mov r15, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x80]
nop
mov ecx, dword [0x141f450e8]
xor ecx, dword [0x141f450ec]
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xa8683ac7
cmp ecx, 0x4bef489
je 0x1400d6aa0
mov eax, dword [0x141f450f0]
xor eax, dword [0x141f450f4]
add eax, 0x12d164e8
mov ecx, 0xc839bb85
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xc41afe71
cmp ecx, 0x65b85cde
jae 0x1400d6afb
mov dword [r13 + 0x150], 0
xor eax, eax
nop dword [rax]
mov dword [r13 + 0x150], 0
test al, al
jne 0x1400d6b00
jmp 0x1400d6bc1
mov r8, rdx
shr r8, 1
and edx, 1
or rdx, r8
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
mov rdx, qword [rbp + 0x38]
add rax, rcx
mov rcx, 0xffffffffffffffff
cmovae rcx, rax
test rcx, rcx
js 0x1400d6b68
cvtsi2ss xmm0, rcx
divss xmm0, xmm1
test rdx, rdx
jns 0x1400d6b86
mov rax, rdx
shr rax, 1
and edx, 1
or rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
jmp 0x1400d6b8e
mov rax, rcx
shr rax, 1
and ecx, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
divss xmm0, xmm1
test rdx, rdx
js 0x1400d6b4e
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
mulss xmm0, dword [0x140108db0]
mov eax, dword [0x141f450d8]
xor eax, dword [0x141f450dc]
add eax, 0x563ca374
and eax, 0xf813055d
add eax, 0x36a6277e
cmp eax, 0x69477537
jbe 0x1400d7878
jmp 0x1400d78b1
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d6bd0
movzx eax, byte [r15 + 1]
mov rbx, qword [rbp + 0x128]
mov ecx, dword [0x141f450a0]
sub ecx, dword [0x141f450a4]
cmp ecx, 0xb044aeea
je 0x1400d6be0
nop word cs:[rax + rax]
mov ecx, dword [0x141f450a8]
mov edx, dword [0x141f450ac]
add ecx, edx
add ecx, 0xd7fb35f5
cmp ecx, 0x82ce7cf7
ja 0x1400d6c00
test al, al
je 0x1400d6c93
mov rdi, qword [r13 + 0xf8]
test rdi, rdi
je 0x1400d79e0
mov r14, rsi
mov r12, r15
nop word cs:[rax + rax]
mov eax, dword [0x141f45108]
imul eax, dword [0x141f4510c]
and eax, 0x81b08011
xor eax, 0x90020000
or eax, 0x6c4c6f8e
cmp eax, 0xdc580ea5
jb 0x1400d6c40
mov eax, dword [0x141f45110]
imul eax, dword [0x141f45114]
xor eax, 0x4a070480
and eax, 0x5a7fd7a8
add eax, 0x1aa52f2a
cmp eax, 0x2984f9b
mov rsi, qword [rbp + 0x50]
jae 0x1400d78c3
jmp 0x1400d78ef
movzx eax, byte [r15 + 2]
nop dword [rax + rax]
mov ecx, dword [0x141f450f8]
sub ecx, dword [0x141f450fc]
add ecx, 0x6b87856
or ecx, 0x77ff33df
cmp ecx, 0x6bf934b7
jb 0x1400d6ca0
mov ecx, dword [0x141f45100]
add ecx, dword [0x141f45104]
or ecx, 0xdda3ec75
add ecx, 0x8d741e2a
cmp ecx, 0xd8bc8004
ja 0x1400d6cc0
test al, al
je 0x1400d6d4d
mov eax, dword [0x141f45b98]
imul eax, dword [0x141f45b9c]
or eax, 0xc2a74a3b
and eax, 0xc6efea3b
cmp eax, 0xb153a546
jne 0x1400d6d09
mov qword [r13 + 0xe8], rbx
mov eax, 0xbad6a757
nop
mov ecx, dword [0x141f45ba0]
add ecx, dword [0x141f45ba4]
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x8821e040
imul ecx, ecx, 0xa73c5a40
mov qword [r13 + 0xe8], rbx
cmp ecx, 0xb660d004
jb 0x1400d6d10
mov rax, qword [rbp + 0x120]
mov qword [r13 + 0xf0], rax
mov eax, 0x88d969d1
nop word cs:[rax + rax]
mov ecx, dword [0x141f45148]
or ecx, dword [0x141f4514c]
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xb0ae2542
je 0x1400d6d60
movzx ecx, byte [r15 + 3]
mov eax, dword [0x141f45150]
xor edx, edx
div dword [0x141f45154]
nop
mov eax, dword [0x141f45158]
or eax, dword [0x141f4515c]
imul eax, eax, 0xdc72612e
or eax, 0xae92ed94
add eax, 0x91b5799a
cmp eax, 0x772d2fd6
jb 0x1400d6d90
mov r8, qword [r13 + 0xf8]
movabs rdi, 0x8000000000000000
test r8, r8
je 0x1400d7273
mov eax, dword [0x141f45160]
xor edx, edx
div dword [0x141f45164]
mov eax, 0xaf3a8fb7
mov edx, dword [0x141f45168]
sub edx, dword [0x141f4516c]
add edx, 0x4a4796ac
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0xa0a41096
ja 0x1400d6de0
mov r12, qword [r8 + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141f45170]
sub eax, dword [0x141f45174]
xor eax, 0xdd9e1d25
add eax, 0x5a5cd23f
imul rax, rax, 0xba23c15
shr rax, 0x3b
cmp eax, 0x8f48d004
ja 0x1400d6e10
test ecx, ecx
je 0x1400d7273
cmp ecx, 1
je 0x1400d6e7a
mov rax, qword [r13 + 0x80]
nop dword [rax]
mov ecx, dword [0x141f45178]
imul ecx, dword [0x141f4517c]
add ecx, 0x27f11865
or ecx, 0xf63b1210
cmp ecx, 0xe39532bc
jb 0x1400d6e50
cmp rax, rdi
jne 0x1400d7273
mov rdi, r13
mov eax, dword [0x141f45180]
xor eax, dword [0x141f45184]
imul eax, eax, 0x53871b6d
add eax, 0x8b374fb3
xor eax, 0x2024fe41
cmp eax, 0x2f784e01
jae 0x1400d6ec0
mov r8, qword [rbp + 0x48]
mov qword [r8], 0
sub rsp, 0x20
mov rcx, r12
mov edx, 8
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
mov rbx, qword [rbp + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141f45188]
xor edx, edx
div dword [str..sM]
mov r13d, eax
add r13d, 0xd667486c
and r13d, 0xfdf90806
mov qword [rbx], 0
sub rsp, 0x20
mov rcx, r12
mov edx, 8
mov r8, rbx
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
cmp r13d, 0x3e6e5824
jb 0x1400d6ed0
test eax, eax
mov r13, rdi
je 0x1400d71b6
nop word cs:[rax + rax]
mov eax, dword [0x141f45190]
imul eax, dword [0x141f45194]
or eax, 0x1080020
and eax, 0x19cb0028
imul eax, eax, 0x212205d9
cmp eax, 0xdd283ffc
je 0x1400d6f30
mov rax, qword [rbp + 0x48]
mov rbx, qword [rax]
mov ecx, 0xca0d6975
mov eax, dword [0x141f45198]
xor edx, edx
div dword [0x141f4519c]
or eax, 0xc620929b
imul rax, rcx
shr rax, 0x3e
or eax, 0x5c704105
cmp eax, 0x1704b8c0
jb 0x1400d6f60
lea rax, [rbx + 1]
cmp rax, 2
jb 0x1400d7243
nop word cs:[rax + rax]
mov eax, dword [0x141f451a0]
sub eax, dword [0x141f451a4]
imul rax, rax, 0x3e096d81
shr rax, 0x3d
imul eax, eax, 0xe0c785d3
add eax, 0x1e59fee9
cmp eax, 0x4e6b1999
jb 0x1400d6fa0
mov dword [rsi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, rbx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
mov qword [rbp + 0x80], rsi
nop word cs:[rax + rax]
mov ecx, dword [0x141f451a8]
sub ecx, dword [0x141f451ac]
add ecx, 0x90abf89e
and ecx, 0xbdac7dd6
imul ecx, ecx, 0x909283e
cmp ecx, 0x7401f1bd
ja 0x1400d7000
test eax, eax
jne 0x1400d7052
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
cmp ecx, 0x8007007a
jne 0x1400d7120
mov rax, qword [rbp + 0x80]
mov r13d, dword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov r12, rax
inc rax
mov ecx, dword [0x141f451c8]
imul ecx, dword [0x141f451cc]
imul rcx, rcx, 0x42db8a4f
shr rcx, 0x3e
add ecx, 0x3d4bfdcd
and ecx, 0x30493885
cmp ecx, 0x460fdcea
ja 0x1400d7070
nop dword [rax]
mov ecx, dword [0x141f451d0]
sub ecx, dword [0x141f451d4]
or ecx, 0xeca94f
add ecx, 0xf8fe67e
and ecx, 0xb13735
cmp ecx, 0x2b3bf091
ja 0x1400d70a0
cmp rax, 1
ja 0x1400d710f
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r13, rdi
nop dword [rax]
mov eax, dword [0x141f451d8]
imul eax, dword [str._B_]
shr eax, 5
imul rax, rax, 0x8f96e77
shr rax, 0x36
imul eax, eax, 0x9d78b2af
or eax, 0x7f285067
cmp eax, 0xe690dfe9
je 0x1400d70e0
jmp 0x1400d7120
xor eax, eax
test al, al
je 0x1400d7a08
jmp 0x1400d7a2a
mov eax, dword [0x141f451b0]
and eax, dword [0x141f451b4]
add eax, 0xfc5fbc08
cmp eax, 0xd45b9c72
jb 0x1400d7120
mov eax, dword [0x141f451b8]
sub eax, dword [0x141f451bc]
or eax, 0xbe70fe84
xor eax, 0x8ea989bf
imul rax, rax, 0x2c40d781
shr rax, 0x3a
cmp eax, 0xe88ebb73
jne 0x1400d7171
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov edi, dword [0x141f451c0]
imul edi, dword [0x141f451c4]
or edi, 0x42244
and edi, 0x8042245
sub rsp, 0x20
mov rcx, rbx
call rsi
add rsp, 0x20
cmp edi, 0x41fba552
ja 0x1400d7180
test eax, eax
jne 0x1400d7243
mov eax, dword [0x141f45220]
imul eax, dword [0x141f45224]
or eax, 0xfdca5c2
add eax, 0x3a591c15
cmp eax, 0x48ff619f
jae 0x1400d71e2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141f45228]
add eax, dword [0x141f4522c]
imul edi, eax, 0x9ed8d394
imul rax, rdi, 0x2ab1d6f1
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1f
or edi, 0x9f5f4ed2
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xadc0cc17
ja 0x1400d71f0
nop
mov eax, dword [0x141f45230]
add eax, dword [0x141f45234]
cmp eax, 0x9e45be4f
je 0x1400d7230
movabs rdi, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x141f45238]
or eax, dword [0x141f4523c]
add eax, 0xa2ee46f3
imul rax, rax, 0x3beb40d9
shr rax, 0x3b
cmp eax, 0x494d3c13
je 0x1400d7250
mov eax, 0xa21b005d
mov r12, qword [rbp + 0x30]
mov r8, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov ecx, dword [0x141f452a0]
sub ecx, dword [0x141f452a4]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x8cfcb740
add ecx, 0x7f4dc000
cmp ecx, 0xc2ee13ff
ja 0x1400d7290
movzx r10d, byte [r15 + 4]
movzx r9d, byte [r15 + 5]
nop word cs:[rax + rax]
mov eax, dword [0x141f452a8]
or eax, dword [0x141f452ac]
or eax, 0x2083837
and eax, 0x8208383f
cmp eax, 0x6d475497
jb 0x1400d72d0
movzx esi, byte [r15 + 6]
movzx ebx, byte [r15 + 7]
nop word [rax + rax]
mov eax, dword [0x141f452b0]
xor edx, edx
div dword [0x141f452b4]
imul eax, eax, 0x185a0787
or eax, 0xac9be7b2
imul eax, eax, 0xb9a4fd5d
cmp eax, 0x3efa6930
jb 0x1400d7300
test ebx, ebx
je 0x1400d737c
cmp ebx, 1
je 0x1400d7540
cmp ebx, 2
jne 0x1400d77c0
mov rcx, qword [r13 + 0x40]
mov eax, dword [0x141f452c0]
xor edx, edx
div dword [0x141f452c4]
nop
mov eax, dword [0x141f452c8]
or eax, dword [0x141f452cc]
add eax, 0x8d9ed90
imul rax, rax, 0x3184fe33
shr rax, 0x38
cmp eax, 0x850a8b09
ja 0x1400d7350
test rcx, rcx
je 0x1400d7540
xor eax, eax
nop
test al, al
jne 0x1400d7380
test esi, esi
je 0x1400d73e9
cmp esi, 1
je 0x1400d7540
cmp esi, 2
jne 0x1400d77e7
mov eax, dword [0x141f452d8]
xor edx, edx
div dword [0x141f452dc]
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d73b0
mov rax, qword [r13 + 0x58]
nop dword [rax + rax]
mov ecx, dword [0x141f452e0]
or ecx, dword [str.W_5_]
imul ecx, ecx, 0xed7da84f
add ecx, 0xb74d62ea
cmp ecx, 0x59ebd21c
jb 0x1400d73c0
test rax, rax
je 0x1400d7540
test r10d, r10d
je 0x1400d74a0
cmp r10d, 1
je 0x1400d7540
cmp r10d, 2
jne 0x1400d783d
mov eax, dword [0x141f452f0]
xor ecx, ecx
xor edx, edx
div dword [0x141f452f4]
nop word cs:[rax + rax]
test cl, cl
jne 0x1400d7420
mov eax, dword [0x141f452f8]
xor edx, edx
div dword [0x141f452fc]
nop word cs:[rax + rax]
mov eax, dword [0x141f45300]
xor edx, edx
div dword [0x141f45304]
or eax, 0x2020210
and eax, 0x2a202b0
cmp eax, 0xb6bb62a3
je 0x1400d7440
mov rcx, qword [r13 + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141f45308]
xor edx, edx
div dword [0x141f4530c]
and eax, 0x1c124060
cmp eax, 0xfd837d83
je 0x1400d7470
cmp rcx, rdi
je 0x1400d7540
nop word cs:[rax + rax]
mov eax, dword [0x141f45310]
sub eax, dword [0x141f45314]
or eax, 0x800010
and eax, 0x808051
cmp eax, 0xf25cee2
ja 0x1400d74a0
test r9d, r9d
je 0x1400dbc80
cmp r9d, 1
je 0x1400d7540
nop dword [rax]
mov eax, dword [0x141f45318]
xor edx, edx
div dword [0x141f4531c]
add eax, 0x9cc96053
or eax, 0x2d003301
imul rax, rax, 0x35628941
shr rax, 0x3d
cmp eax, 0xe2b7120
je 0x1400d74d0
mov rax, qword [r13 + 0xb8]
nop word cs:[rax + rax]
mov ecx, dword [0x141f45320]
imul ecx, dword [0x141f45324]
add ecx, 0x67377548
or ecx, 0x30865820
and ecx, 0x34b65821
cmp ecx, 0x8877f9b2
ja 0x1400d7510
cmp rax, rdi
jne 0x1400dbc80
mov eax, dword [0x141f45328]
or eax, dword [0x141f4532c]
or eax, 0x7cdcf7a7
cmp eax, 0x363601e2
je 0x1400d7540
mov rax, qword [r13 + 0xf8]
nop
mov ecx, dword [0x141f45330]
sub ecx, dword [0x141f45334]
imul ecx, ecx, 0x9af7cacc
and ecx, 0x64c28260
cmp ecx, 0x36afdb7e
je 0x1400d7560
test rax, rax
je 0x1400dbc80
mov dword [rbp + 0x48], r10d
mov dword [rbp + 0x88], r9d
nop word cs:[rax + rax]
mov ecx, dword [0x141f45338]
add ecx, dword [0x141f4533c]
imul ecx, ecx, 0x44c3cb40
add ecx, 0x5c7928c0
cmp ecx, 0x9d2e8e05
ja 0x1400d75a0
mov rdi, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 0x1a
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1400dbc50
mov eax, dword [0x141f45340]
xor edx, edx
div dword [0x141f45344]
and eax, 0x10200828
cmp eax, 0x5efa9a13
je 0x1400d75f0
mov rax, qword [rbp + 0xb0]
mov r10, qword [rax]
mov eax, dword [0x141f45348]
xor edx, edx
div dword [0x141f4534c]
mov eax, 0xb350ae9d
nop word [rax + rax]
mov ecx, dword [0x141f45350]
xor ecx, dword [0x141f45354]
imul rcx, rax
shr rcx, 0x3d
imul ecx, ecx, 0xf9fa765f
and ecx, 0xba38b54f
cmp ecx, 0x97f08aa8
je 0x1400d7630
nop dword [rax + rax]
mov eax, dword [0x141f45358]
xor edx, edx
div dword [0x141f4535c]
add eax, 0xb751a4fc
imul rax, rax, 0x1f47bd3b
shr rax, 0x3c
xor eax, 0xae134275
cmp eax, 0xfa747b40
ja 0x1400d7660
test r10, r10
mov qword [rbp + 0xa0], rdi
mov dword [rbp + 0x80], esi
mov dword [rbp + 0x50], ebx
mov qword [rbp + 0xb0], r10
je 0x1400d780e
mov eax, dword [0x141f45750]
add eax, dword [0x141f45754]
imul eax, eax, 0xea794461
and eax, 0x2254144
cmp eax, 0x4b96b674
jbe 0x1400d76f6
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, rdi
mov rdx, r10
mov r8, qword [rbp]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [rbp + 0xb0]
add rsp, 0x30
mov rsi, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, rdi
mov rbx, qword [rbp]
nop word cs:[rax + rax]
mov eax, dword [0x141f45758]
and eax, dword [0x141f4575c]
imul edi, eax, 0x2c7738da
or edi, 0x26d3439e
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r15
mov rdx, r10
mov r8, rbx
call rsi
mov r10, qword [rbp + 0xb0]
add rsp, 0x30
cmp edi, 0x25718dbe
je 0x1400d7710
test eax, eax
mov r15, qword [rbp + 0x98]
je 0x1400d7865
mov rcx, qword [rbp]
nop dword [rax]
mov eax, dword [0x141f45768]
xor edx, edx
div dword [0x141f4576c]
xor eax, 0xca720d2b
or eax, 0x118de254
cmp eax, 0xfb253180
je 0x1400d7770
mov esi, dword [rcx + 0x10]
mov eax, dword [0x141f45770]
xor edx, edx
div dword [0x141f45774]
imul eax, eax, 0x57f8fb0a
cmp eax, 0x3cfdb3d2
mov r15, qword [rbp + 0xa0]
jne 0x1400d9f03
jmp 0x1400d9f43
mov eax, dword [0x141f452b8]
sub eax, dword [0x141f452bc]
add eax, 0x2b3a8b7d
or eax, 0x60080200
and eax, 0x707a1385
cmp eax, 0x178e3e2c
jb 0x1400d77c0
jmp 0x1400d7ed1
mov eax, dword [0x141f452d0]
add eax, dword [0x141f452d4]
xor eax, 0x40044008
or eax, 0x3e5a9956
and eax, 0x7f5ed97e
cmp eax, 0x6481d8b7
jb 0x1400d77e7
jmp 0x1400d7ed1
mov eax, dword [0x141f45360]
add eax, dword [0x141f45364]
or eax, 0x102b86a9
add eax, 0xba9dd726
xor eax, 0xe9788a3f
cmp eax, 0xf9ecf6ba
mov rbx, qword [rbp + 0x68]
jbe 0x1400d7ed3
jmp 0x1400d7f23
mov eax, dword [0x141f452e8]
imul eax, dword [0x141f452ec]
xor eax, 0x80000041
or eax, 0x18240110
and eax, 0x98243957
cmp eax, 0x148e9c3e
jb 0x1400d783d
jmp 0x1400d7ed1
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400dbc30
mov eax, dword [0x141f450e0]
imul eax, dword [0x141f450e4]
imul eax, eax, 0x52d4355f
imul rax, rax, 0x30be362d
shr rax, 0x3d
movaps xmm2, xmm0
mulss xmm2, xmm1
movss dword [r13 + 0x150], xmm2
cmp eax, 0x419e7754
jne 0x1400d6bc1
movaps xmm2, xmm0
mulss xmm2, xmm1
movss dword [r13 + 0x150], xmm2
jmp 0x1400d7878
mov r15d, dword [0x141f45118]
sub r15d, dword [0x141f4511c]
mov rcx, qword [rdi + 0x10]
sub rsp, 0x20
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
cmp r15d, 0x8091bce3
jne 0x1400d7910
mov rcx, qword [rdi + 0x10]
sub rsp, 0x20
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
jmp 0x1400d78c3
mov ecx, dword [0x141f45120]
sub ecx, dword [0x141f45124]
cmp ecx, 0x2e21d068
je 0x1400d7910
test eax, eax
mov r15, r12
mov rsi, r14
je 0x1400d79cc
mov eax, dword [0x141f45128]
xor edx, edx
div dword [0x141f4512c]
mov r14, qword [rbp + 0x78]
xor eax, eax
mov rcx, qword [rbp + 0x50]
nop word [rax + rax]
test al, al
jne 0x1400d7950
mov eax, dword [0x141f45130]
xor eax, dword [0x141f45134]
xor eax, 0xc2817a54
add eax, 0x173822b7
or eax, 0xc00de55
cmp eax, 0x33f07ad4
jae 0x1400d7990
movups xmm0, xmmword [r13 + 0x140]
movups xmmword [r13 + 0x130], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141f45138]
or eax, dword [0x141f4513c]
imul eax, eax, 0xde3541f8
xor eax, 0xd03baa4c
movups xmm0, xmmword [r13 + 0x140]
movups xmmword [r13 + 0x130], xmm0
cmp eax, 0xe286761e
ja 0x1400d7990
movups xmm0, xmmword [rcx + 0x18]
movups xmmword [r13 + 0x140], xmm0
jmp 0x1400d79e0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r14, qword [rbp + 0x78]
nop
mov eax, dword [0x141f45140]
sub eax, dword [0x141f45144]
add eax, 0x5d6b8453
or eax, 0xdb9ff64d
imul eax, eax, 0x173abbe
cmp eax, 0x160ee932
jb 0x1400d79e0
jmp 0x1400d6c93
sub rsp, 0x20
mov rcx, r12
mov edx, 8
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov rsi, rax
xor eax, eax
test al, al
je 0x1400d7a45
sub rsp, 0x20
mov rcx, r12
mov edx, 8
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
jmp 0x1400d7a08
mov r13, rdi
nop dword [rax + rax]
mov eax, dword [0x141f451e0]
sub eax, dword [0x141f451e4]
add eax, 0xc3236ec6
or eax, 0x767dbc4
xor eax, 0x33db8944
cmp eax, 0x966f5d75
ja 0x1400d7a50
test rsi, rsi
je 0x1400d7120
nop dword [rax + rax]
mov eax, dword [0x141f451e8]
xor edx, edx
div dword [0x141f451ec]
add eax, 0xf6214fe7
imul rax, rax, 0x7e96cc9
shr rax, 0x3a
cmp eax, 0x3f39e772
je 0x1400d7a80
mov rax, qword [rbp + 0x80]
mov r12d, dword [rax]
mov eax, dword [0x141f451f0]
xor edx, edx
div dword [0x141f451f4]
or eax, 0xabfb3782
and eax, 0xaffb37e2
cmp eax, 0x93def073
jne 0x1400d7af5
sub rsp, 0x30
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov edx, 1
mov r8, rsi
mov r9d, r12d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
xor edi, edi
mov r15, qword [rbp + 0x80]
nop
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov edx, 1
mov r8, rsi
mov r9d, r12d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
test dil, dil
jne 0x1400d7b00
mov rdx, rsi
nop dword [rax + rax]
mov ecx, dword [0x141f451f8]
and ecx, dword [0x141f451fc]
imul ecx, ecx, 0x477439
add ecx, 0x953ff23d
xor ecx, 0xf82d400c
cmp ecx, 0x7c44d4ff
ja 0x1400d7b30
test eax, eax
movabs rdi, 0x8000000000000000
mov r12, qword [rbp - 0x18]
mov r15, qword [rbp + 0x98]
je 0x1400d7c4a
nop word cs:[rax + rax]
mov eax, dword [0x141f45210]
xor eax, dword [0x141f45214]
add eax, 0xcc07f952
cmp eax, 0xd7b89061
ja 0x1400d7b80
mov rdx, qword [rdx]
sub rsp, 0x20
mov rcx, r12
call fcn.1400dc300
add rsp, 0x20
mov r12, qword [r12]
nop
mov eax, dword [0x141f45218]
xor eax, dword [0x141f4521c]
or eax, 0x4232b750
add eax, 0x13de26e
xor eax, 0x62b52b76
cmp eax, 0xb839d1df
ja 0x1400d7bb0
cmp r12, rdi
jne 0x1400d7cc6
sub rsp, 0x20
mov rcx, rsi
call fcn.1400dc190
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov ecx, eax
mov eax, dword [0x141f45280]
xor edx, edx
div dword [0x141f45284]
or eax, 0x9933a6f8
imul eax, eax, 0x4fa3eb78
cmp eax, 0xcaa0f9a
je 0x1400d7bf6
test ecx, ecx
jne 0x1400d7ea8
mov eax, dword [0x141f45288]
add eax, dword [0x141f4528c]
xor eax, 0xb5793688
imul eax, eax, 0xe3c14b2e
add eax, 0x80d4b2f
cmp eax, 0xaf9a3a40
jbe 0x1400d7e65
jmp 0x1400d7e98
mov eax, dword [0x141f45200]
xor eax, dword [0x141f45204]
imul eax, eax, 0xcca5cda5
or eax, 0xf1a4fec8
xor eax, 0xfc2220af
cmp eax, 0x555f02b
jbe 0x1400d7c7b
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141f45208]
xor eax, dword [0x141f4520c]
and eax, 0x8ea4c106
imul rdi, rax, 0x2ca1f22b
shr rdi, 0x3b
sub rsp, 0x20
call r12
add rsp, 0x20
cmp edi, 0x1b06a5d7
ja 0x1400d7c82
sub rsp, 0x20
mov rcx, rsi
call fcn.1400dc190
add rsp, 0x20
jmp 0x1400d7120
mov eax, dword [0x141f45240]
xor edx, edx
div dword [0x141f45244]
mov rcx, rsi
mov r15, r14
mov eax, dword [0x141f45248]
and eax, dword [0x141f4524c]
imul eax, eax, 0xb0b30341
add eax, 0x700aaa2a
imul rax, rax, 0x517d689d
shr rax, 0x3e
cmp eax, 0xc50070d9
je 0x1400d7cda
mov rax, qword [rbp - 0x18]
mov rdi, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rax, qword [r13 + 0x80]
shl rax, 1
test rax, rax
je 0x1400d7d76
mov eax, dword [0x141f45250]
xor edx, edx
div dword [0x141f45254]
mov eax, dword [0x141f45258]
imul eax, dword [0x141f4525c]
xor eax, 0xc3295fd3
imul rax, rax, 0x40f228a5
shr rax, 0x3e
or eax, 0x832f832
cmp eax, 0x43e79bbf
ja 0x1400d7d2c
mov r8, qword [r13 + 0x88]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rcx, rsi
mov qword [r13 + 0x80], r12
mov qword [r13 + 0x88], rdi
mov qword [r13 + 0x90], r14
sub rsp, 0x20
call fcn.1400dc190
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
xor ecx, ecx
test cl, cl
jne 0x1400d7da3
test eax, eax
mov r14, r15
mov r15, qword [rbp + 0x98]
jne 0x1400d7e11
mov eax, dword [0x141f45260]
xor eax, dword [0x141f45264]
xor eax, 0x82296f42
and eax, 0xc3296f77
cmp eax, 0xafd19141
jne 0x1400d7de0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141f45268]
and eax, dword [0x141f4526c]
imul edi, eax, 0x1f3752d5
and edi, 0x8a0c0094
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x56b531cc
jb 0x1400d7de7
mov eax, dword [0x141f45270]
xor eax, dword [0x141f45274]
imul eax, eax, 0x602ed5a4
add eax, 0x90e8f05c
or eax, 0x7f16fd58
cmp eax, 0x4f70a37a
jb 0x1400d7e11
movabs rdi, 0x8000000000000000
mov eax, dword [0x141f45278]
and eax, dword [0x141f4527c]
or eax, 0x4d1216f0
xor eax, 0x3780a9f4
add eax, 0xc273a695
cmp eax, 0xf12593b4
jae 0x1400d7e3e
jmp 0x1400d7273
mov eax, dword [0x141f45290]
xor eax, dword [0x141f45294]
imul rsi, rax, 0xd8afe4b
shr rsi, 0x3b
or esi, 0x27d6bdda
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0xf9cd9910
jbe 0x1400d7ea8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d7e65
mov eax, dword [0x141f45298]
xor edx, edx
div dword [0x141f4529c]
add eax, 0xd93ef41
xor eax, 0xc008c008
or eax, 0x3ef518b7
cmp eax, 0xfdbf8b19
jb 0x1400d7ea8
jmp 0x1400d7273
ud2
mov eax, dword [0x141f45368]
add eax, dword [0x141f4536c]
imul eax, eax, 0xb7008096
add eax, 0x8ba6a930
mov esi, 0x8c47cb1b
imul rsi, rax
shr rsi, 0x3f
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rdi
xor edx, edx
mov r8, rbx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
cmp esi, 0xd1125c1f
jne 0x1400d7f50
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rdi
xor edx, edx
mov r8, rbx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
jmp 0x1400d7ed3
mov ecx, dword [0x141f45370]
sub ecx, dword [0x141f45374]
add ecx, 0xb692acc5
xor ecx, 0xa904001
and ecx, 0x1fb84efb
cmp ecx, 0x396490c7
je 0x1400d7f50
test eax, eax
js 0x1400d82d0
mov rax, rbx
mov rbx, qword [rbx + 8]
mov rsi, qword [rax + 0x28]
xor eax, eax
test rsi, rsi
setne al
mov qword [r13], rax
mov eax, dword [0x141f45388]
or eax, dword [0x141f4538c]
imul rax, rax, 0x752498db
shr rax, 0x3d
add eax, 0x9bc7b77a
or eax, 0x7ec8d33b
cmp eax, 0xc368e2c6
jae 0x1400d7feb
mov qword [r13 + 8], rsi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, rdi
mov rdx, rbx
mov r8, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov r15, rdi
mov rdi, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop word cs:[rax + rax]
mov r14d, dword [0x141f45390]
xor r14d, dword [0x141f45394]
and r14d, 0xc318a02
add r14d, 0x3ea51eda
mov qword [r13 + 8], rsi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r15
mov rdx, rbx
mov r8, qword [rbp + 0xa8]
call rdi
mov rcx, qword [rbp + 0xa8]
add rsp, 0x30
cmp r14d, 0x42fb35df
ja 0x1400d8000
test eax, eax
je 0x1400d8312
mov rdx, qword [rcx + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, qword [rbp + 0xa0]
mov rsi, qword [rbp + 0x18]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov ecx, eax
mov r8d, 0xebf43c0b
movabs r11, 0x8000000000000000
mov r15, qword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141f45398]
xor edx, edx
div dword [0x141f4539c]
imul rax, r8
shr rax, 0x3f
imul eax, eax, 0xc4ddeba0
add eax, 0x124d88e0
cmp eax, 0xc5f79914
ja 0x1400d80b0
test ecx, ecx
mov r9d, dword [rbp + 0x50]
mov r14, qword [rbp + 0x10]
je 0x1400d8355
mov ecx, 0x82d1ef41
nop dword [rax]
mov eax, dword [0x141f453a8]
xor edx, edx
div dword [0x141f453ac]
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xabb1b314
je 0x1400d80f0
movzx edi, word [rsi + 0x38]
mov rdx, qword [rsi + 0x40]
mov r8, qword [rsi + 0x80]
test r9d, r9d
mov r10, qword [rbp + 0xb0]
mov qword [rbp + 0xa8], r8
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x38], rdx
je 0x1400d8baf
mov rbx, qword [rsi + 0x78]
movzx r15d, word [rsi + 0x70]
cmp dword [rbp + 0x50], 1
je 0x1400d81b3
nop word [rax + rax]
mov eax, dword [0x141f453b0]
imul eax, dword [0x141f453b4]
imul rax, rax, 0x2a8950d1
shr rax, 0x34
imul eax, eax, 0x150cae11
or eax, 0x39feb2c8
cmp eax, 0xe391a510
ja 0x1400d8150
mov eax, 0xa4a67797
nop
mov ecx, dword [0x141f453b8]
sub ecx, dword [0x141f453bc]
or ecx, 0xf31a6f7e
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x52ebb283
cmp ecx, 0xa6755390
ja 0x1400d8180
cmp qword [r13 + 0x40], 0
jne 0x1400d8baf
mov eax, dword [0x141f453c0]
add eax, dword [str.WMsnX0]
mov ecx, 0x900fae55
imul rcx, rax
shr rcx, 0x3e
add ecx, 0xd9751145
imul rax, rcx, 0x2fe41083
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1e
cmp ecx, 0x8308b363
jbe 0x1400d81f4
mov eax, dword [0x141f49070]
lea rax, [r13 + 0x30]
mov qword [rbp + 0x90], rax
nop
mov eax, dword [0x141f453c8]
imul eax, dword [0x141f453cc]
add eax, 0x6baf64aa
or eax, 0xc098c1e9
imul ecx, eax, 0x8e60c470
mov eax, dword [0x141f49070]
cmp ecx, 0x6f31f8f4
ja 0x1400d8200
nop dword [rax + rax]
mov ecx, dword [0x141f453d0]
imul ecx, dword [0x141f453d4]
imul ecx, ecx, 0x21c52908
xor ecx, 0xdcc59272
cmp ecx, 0x6d89473e
ja 0x1400d8230
nop word cs:[rax + rax]
mov ecx, dword [0x141f453d8]
and ecx, dword [0x141f453dc]
imul ecx, ecx, 0xd0efde85
shr ecx, 1
imul rcx, rcx, 0x43034383
shr rcx, 0x37
imul ecx, ecx, 0xa468b309
cmp ecx, 0x2f367d3
je 0x1400d8260
cmp eax, 3
je 0x1400d8428
mov eax, dword [0x141f453e0]
or eax, dword [0x141f453e4]
imul eax, eax, 0xb8e129e9
xor eax, 0x4200a20d
or eax, 0x355b55e2
cmp eax, 0x7197a58b
jne 0x1400d83d9
jmp 0x1400d83ec
mov eax, dword [0x141f45378]
xor edx, edx
div dword [0x141f4537c]
imul eax, eax, 0x64f0159e
xor eax, 0x659dd772
cmp eax, 0xb49871a
jb 0x1400d82d0
mov eax, dword [0x141f45380]
and eax, dword [0x141f45384]
add eax, 0xb2785f28
and eax, 0x77e3a47f
cmp eax, 0xf5a694d1
ja 0x1400d82f0
jmp 0x1400dbc50
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r15, qword [rbp + 0x98]
nop word [rax + rax]
mov eax, dword [0x141f453a0]
or eax, dword [0x141f453a4]
imul eax, eax, 0x3e31d46b
add eax, 0x19417e5c
and eax, 0xb6c00363
cmp eax, 0x9ff96383
ja 0x1400d8330
jmp 0x1400d83b0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d8370
nop word cs:[rax + rax]
mov eax, dword [0x141f45748]
imul eax, dword [0x141f4574c]
or eax, 0x9a6d576d
imul rax, rax, 0x4421c9d3
shr rax, 0x3e
imul eax, eax, 0xcf35cb94
cmp eax, 0x32c3e575
je 0x1400d8380
nop word [rax + rax]
mov eax, dword [0x141f45760]
xor edx, edx
div dword [0x141f45764]
add eax, 0xc1593451
xor eax, 0x10040900
or eax, 0xa0f9d6f7
cmp eax, 0x73a7346f
jb 0x1400d83b0
jmp 0x1400dbc50
sub rsp, 0x20
call fcn.140105f54
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400d8400
sub rsp, 0x20
call fcn.140105f54
add rsp, 0x20
jmp 0x1400d83d9
mov eax, dword [0x141f453e8]
sub eax, dword [0x141f453ec]
add eax, 0xda693821
and eax, 0xd148c46d
imul rax, rax, 0x12a03e9
shr rax, 0x34
cmp eax, 0x46a22540
ja 0x1400d8400
movzx eax, byte [0x141f49074]
nop
mov ecx, dword [0x141f453f0]
sub ecx, dword [0x141f453f4]
shr ecx, 4
imul rcx, rcx, 0xaf2ca91
shr rcx, 0x35
imul ecx, ecx, 0x655c4840
cmp ecx, 0xb4726f0d
je 0x1400d8430
nop dword [rax + rax]
mov ecx, dword [0x141f453f8]
and ecx, dword [0x141f453fc]
imul ecx, ecx, 0x227a09a9
add ecx, 0x9a1b3f9c
or ecx, 0x12c6408d
cmp ecx, 0xa326fb87
je 0x1400d8460
test al, al
je 0x1400d867e
mov eax, dword [0x141f45498]
xor eax, dword [0x141f4549c]
cmp eax, 0x3237db26
mov rdi, qword [rbp + 0xa0]
mov r14, qword [rbp - 0x48]
jne 0x1400d84c0
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.1400dce30
add rsp, 0x20
nop
mov eax, dword [0x141f454a0]
xor edx, edx
div dword [0x141f454a4]
imul esi, eax, 0xc3640874
add esi, 0xde2288d4
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.1400dce30
add rsp, 0x20
cmp esi, 0xde5c3d6d
ja 0x1400d84c0
mov rbx, qword [r13 + 0x38]
mov r12, r13
mov rdi, qword [r13 + 0x40]
test rdi, rdi
je 0x1400d85f0
xor esi, esi
mov r15d, 0xb4dae86b
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141f454a8]
and eax, dword [0x141f454ac]
add eax, 0xf0d7dd4b
or eax, 0x648031c0
and eax, 0x6c9c79e1
cmp eax, 0x1d9bdea7
je 0x1400d8520
mov rax, rsi
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1400d85a0
add rax, rbx
nop word cs:[rax + rax]
mov ecx, dword [0x141f454b0]
sub ecx, dword [0x141f454b4]
imul rcx, r15
shr rcx, 0x3f
add ecx, 0xb5585de9
or ecx, 0xb82b5b5d
cmp ecx, 0x28458e8a
jb 0x1400d8560
mov r8, qword [rax + 8]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call r13
add rsp, 0x20
inc rsi
nop word cs:[rax + rax]
mov eax, dword [0x141f454b8]
imul eax, dword [str.DLHh]
and eax, 0x9e7b9b10
imul eax, eax, 0xa89f405b
imul rax, rax, 0x579cc157
shr rax, 0x3c
cmp eax, 0x1998e42f
ja 0x1400d85b0
cmp rsi, rdi
jne 0x1400d8520
nop word cs:[rax + rax]
mov eax, dword [0x141f454c0]
add eax, dword [0x141f454c4]
imul eax, eax, 0x536d3e95
add eax, 0x9eafa035
imul rcx, rax, 0x50b77359
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x5a76baad
je 0x1400d85f0
mov rax, qword [rbp + 0x90]
mov rax, qword [rax]
mov rdi, qword [rbp + 0x58]
xor ecx, ecx
mov r13, r12
nop word cs:[rax + rax]
test cl, cl
jne 0x1400d8640
test rax, rax
mov r12, qword [rbp + 0x30]
je 0x1400d8b81
mov r15, qword [0x141f49060]
mov eax, dword [0x141f454c8]
or eax, dword [0x141f454cc]
add eax, 0xce16a18c
and eax, 0xf9318f7e
cmp eax, 0x2a428449
jne 0x1400d8b2d
jmp 0x1400d8b69
mov eax, dword [0x141f45400]
add eax, dword [0x141f45404]
and eax, 0x85d8d98
imul eax, eax, 0x32f72a3e
add eax, 0x5fc2f49e
cmp eax, 0xca01ddde
ja 0x1400d867e
mov eax, dword [0x141f45408]
and eax, dword [0x141f4540c]
imul eax, eax, 0x40e03951
add eax, 0x773df5bc
mov ecx, 0xb6318f99
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xdc41584b
jne 0x1400d86eb
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp + 0xa0]
mov r8, rbx
mov r9, r15
call fcn.1400dc790
add rsp, 0x20
mov r12, qword [rbp + 0xa0]
mov rdi, qword [rbp - 0x10]
mov esi, dword [0x141f45410]
sub esi, dword [0x141f45414]
or esi, 0xbfbff2e9
and esi, 0xfffffbfb
sub rsp, 0x20
mov rcx, rdi
mov rdx, r12
mov r8, rbx
mov r9, r15
call fcn.1400dc790
add rsp, 0x20
cmp esi, 0xd5e73aa9
ja 0x1400d86f6
mov rsi, qword [rdi]
mov r15, rdi
mov eax, dword [0x141f45418]
or eax, dword [0x141f4541c]
and eax, 0x93333eae
imul rax, rax, 0x3a0e99f1
shr rax, 0x3d
cmp eax, 0x39d369a6
je 0x1400d8735
movabs rax, 0x8000000000000000
cmp rsi, rax
jne 0x1400d87ff
mov qword [r14], 0
mov eax, dword [0x141f45440]
xor eax, dword [0x141f45444]
and eax, 0xc4ad97b1
xor eax, 0x56610b61
add eax, 0x2fc5e8ae
cmp eax, 0x6b8c6428
jae 0x1400d87a4
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], 0
mov eax, dword [0x141f45448]
xor edx, edx
div dword [0x141f4544c]
imul eax, eax, 0xae506d42
xor eax, 0x9c9eee26
imul eax, eax, 0xea43eede
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], 0
cmp eax, 0xc1ecb73c
ja 0x1400d87a4
mov eax, dword [0x141f45450]
xor edx, edx
div dword [0x141f45454]
imul eax, eax, 0x4e38a8
add eax, 0x5016d838
cmp eax, 0x5a1a469c
ja 0x1400d87da
jmp 0x1400d8901
mov eax, dword [0x141f45420]
and eax, dword [0x141f45424]
or eax, 0x13bee049
add eax, 0x8c69f903
xor eax, 0xc62a4a2d
cmp eax, 0x82813d9d
jae 0x1400d8835
mov rdx, qword [r15 + 8]
sub rsp, 0x20
mov rcx, r14
call fcn.1400dcb00
add rsp, 0x20
mov eax, dword [0x141f45428]
sub eax, dword [0x141f4542c]
and eax, 0x7668dc70
imul edi, eax, 0xadd22998
mov rbx, qword [r15 + 8]
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
call fcn.1400dcb00
add rsp, 0x20
cmp edi, 0x754e9603
je 0x1400d8835
xor eax, eax
test al, al
jne 0x1400d886d
test rsi, rsi
je 0x1400d8901
mov r15, qword [0x141f49060]
mov eax, dword [0x141f45430]
sub eax, dword [0x141f45434]
mov ecx, 0xe1746171
imul rcx, rax
shr rcx, 0x3c
imul eax, ecx, 0x619b7e01
add eax, 0xef96baaf
cmp eax, 0x7f555b42
jae 0x1400d88c2
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [0x141f45438]
sub edi, dword [0x141f4543c]
and edi, 0x2e62aaa5
add edi, 0x85a5567d
or edi, 0xd7c1bb4d
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call rsi
add rsp, 0x20
cmp edi, 0xdad2803e
jbe 0x1400d88c9
mov eax, dword [0x141f45458]
imul eax, dword [0x141f4545c]
and eax, 0x7cd79abb
add eax, 0x7d846173
and eax, 0x69dca834
cmp eax, 0x335b232e
jb 0x1400d8901
mov rax, qword [r13 + 0x38]
mov qword [rbp + 0x68], rax
mov rdi, qword [r13 + 0x40]
test rdi, rdi
je 0x1400d8a08
mov rax, qword [rbp + 0x68]
lea rbx, [rax + 8]
xor esi, esi
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d895c
add rbx, 0x20
inc rsi
dec rdi
je 0x1400d8a08
cmp qword [rbx - 8], 0
je 0x1400d894c
mov eax, dword [0x141f45460]
xor eax, dword [0x141f45464]
xor eax, 0x53000040
and eax, 0x5b840040
cmp eax, 0x3dc3d29e
je 0x1400d8963
mov r15, qword [rbx]
mov eax, dword [0x141f45468]
xor edx, edx
div dword [0x141f4546c]
xor eax, 0x56ce4da6
imul eax, eax, 0x7768495f
or eax, 0x94a1e9a3
cmp eax, 0xf7027020
ja 0x1400d89ef
mov eax, dword [0x141f45470]
xor edx, edx
div dword [0x141f45474]
imul r12d, eax, 0x32d1869a
and r12d, 0xab100cf8
add r12d, 0x6e95b9cc
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r13
add rsp, 0x20
cmp r12d, 0x6beaf3eb
jae 0x1400d894c
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r13
add rsp, 0x20
jmp 0x1400d89a8
mov rbx, qword [rbp + 0x90]
cmp qword [rbx], 0
mov r12, qword [rbp + 0x30]
movabs r11, 0x8000000000000000
mov rdi, qword [rbp + 0x58]
je 0x1400d8aad
mov eax, dword [0x141f45478]
imul eax, dword [0x141f4547c]
mov ecx, 0x89424a63
imul rcx, rax
shr rcx, 0x3f
not ecx
and ecx, 0x51043343
cmp ecx, 0xf5446c6d
jbe 0x1400d8a5c
mov rax, qword [0x141f49060]
mov rsi, r11
mov eax, 0x8ab0a0bb
mov ecx, dword [0x141f45480]
imul ecx, dword [0x141f45484]
xor ecx, 0x9e1db84
imul edx, ecx, 0xaba6adba
shr edx, 1
imul rdx, rax
shr rdx, 0x3d
mov rcx, qword [0x141f49060]
cmp edx, 0x235383cd
ja 0x1400d8a64
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r11, rsi
mov eax, dword [0x141f45488]
and eax, dword [0x141f4548c]
or eax, 0xb70d59f
add eax, 0x4226339e
or eax, 0xe5e4525f
cmp eax, 0x6c337960
mov r10, qword [rbp + 0xb0]
mov r8, qword [rbp + 0xa8]
jne 0x1400d8aec
mov rax, qword [r14 + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [r14]
movups xmmword [rbx], xmm0
mov r13, qword [rbp + 0x70]
mov eax, dword [0x141f45490]
xor eax, dword [0x141f45494]
mov rcx, qword [r14 + 0x10]
mov qword [rbx + 0x10], rcx
xor eax, 0x2d64de99
imul eax, eax, 0x8976dbe6
imul rax, rax, 0x184b86bb
shr rax, 0x3b
movups xmm0, xmmword [r14]
movups xmmword [rbx], xmm0
cmp eax, 0xfb93bc2a
je 0x1400d8af0
jmp 0x1400d8baf
mov esi, dword [0x141f454d0]
and esi, dword [0x141f454d4]
add esi, 0xe83555f4
or esi, 0xec28d397
add esi, 0xcb02cec5
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x96771057
jae 0x1400d8b81
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d8b2d
mov rax, qword [r14 + 0x10]
mov rcx, qword [rbp + 0x90]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r14]
movups xmmword [rcx], xmm0
mov r10, qword [rbp + 0xb0]
mov r8, qword [rbp + 0xa8]
movabs r11, 0x8000000000000000
mov eax, dword [0x141f454d8]
xor edx, edx
div dword [0x141f454dc]
lea rsi, [r13 + 0x48]
mov r9d, dword [rbp + 0x88]
mov ecx, dword [rbp + 0x80]
nop
mov eax, dword [0x141f454e0]
imul eax, dword [0x141f454e4]
add eax, 0xe7dcdfef
xor eax, 0x50b94900
and eax, 0x50bb4b0f
cmp eax, 0x10617098
je 0x1400d8bd0
nop word cs:[rax + rax]
mov eax, dword [0x141f454e8]
and eax, dword [0x141f454ec]
cmp eax, 0x4056a907
je 0x1400d8c00
test ecx, ecx
je 0x1400d972a
cmp ecx, 1
je 0x1400d8c5e
mov eax, dword [0x141f454f0]
xor edx, edx
div dword [0x141f454f4]
nop
mov eax, dword [0x141f454f8]
xor eax, dword [0x141f454fc]
imul eax, eax, 0x6e7a7355
add eax, 0x22f2366c
xor eax, 0xa4500c63
cmp eax, 0xf2966a22
ja 0x1400d8c30
cmp qword [r13 + 0x58], 0
jne 0x1400d972a
mov eax, 0xa0beb81d
nop word cs:[rax + rax]
mov ecx, dword [0x141f45500]
add ecx, dword [0x141f45504]
xor ecx, 0x3c4cb8a
imul ecx, ecx, 0x1a8444dc
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x9895c976
ja 0x1400d8c70
mov qword [rbp + 0x90], rsi
mov eax, dword [0x141f45508]
sub eax, dword [str._Qo]
or eax, 0x499321c8
and eax, 0x6fdb2bd8
xor eax, 0x68be32a4
cmp eax, 0xa967e9da
jbe 0x1400d8cea
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0xa0]
mov rdx, r8
mov r8, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov r8, qword [rbp + 0xa8]
add rsp, 0x20
mov esi, 0xcae3e153
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov rbx, qword [rbp + 0xa0]
mov r14, qword [rbp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141f45510]
xor edx, edx
div dword [0x141f45514]
imul rax, rsi
shr rax, 0x3f
imul r15d, eax, 0x21e267cb
add r15d, 0x2b7068bf
sub rsp, 0x20
mov r9d, 0x30
mov rcx, rbx
mov rdx, r8
mov r8, r14
call rdi
mov r8, qword [rbp + 0xa8]
add rsp, 0x20
cmp r15d, 0xc6deb0ec
ja 0x1400d8d10
test rax, rax
je 0x1400d8d99
mov r14, qword [rbp + 0x20]
mov rsi, qword [r14]
mov eax, dword [0x141f45520]
add eax, dword [0x141f45524]
imul eax, eax, 0xe0ec1f02
xor eax, 0x499cb73
add eax, 0xb24407f8
cmp eax, 0xec26f5b2
mov r15, qword [rbp + 0xa0]
mov rbx, qword [rbp - 0x50]
jbe 0x1400d8dc0
jmp 0x1400d8e0a
mov eax, dword [0x141f45518]
or eax, dword [0x141f4551c]
and eax, 0x144b7c20
add eax, 0x8ce5d8a8
and eax, 0x1985b000
cmp eax, 0x623921d8
je 0x1400d8d99
jmp 0x1400d8e46
mov eax, dword [0x141f45528]
xor eax, dword [0x141f4552c]
imul edi, eax, 0x2bbb90b6
or edi, 0x1814601
and edi, 0xd857fc5
mov r9, rsi
sub r9, r8
add r9, qword [r14 + 0x18]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
call fcn.1400dc790
mov r8, qword [rbp + 0xa8]
add rsp, 0x20
cmp edi, 0xbf1b820
jae 0x1400d8e30
mov r9, rsi
sub r9, r8
add r9, qword [r14 + 0x18]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
call fcn.1400dc790
mov r8, qword [rbp + 0xa8]
add rsp, 0x20
jmp 0x1400d8dc0
mov rcx, qword [rbx]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1400d8ff6
xor eax, eax
mov r10, qword [rbp + 0xb0]
mov rbx, qword [rbp + 0x90]
nop word cs:[rax + rax]
test al, al
jne 0x1400d8e60
mov r14, qword [r13 + 0x50]
mov rsi, qword [r13 + 0x58]
nop dword [rax]
mov eax, dword [0x141f45530]
and eax, dword [0x141f45534]
cmp eax, 0x750f52de
je 0x1400d8e70
test rsi, rsi
je 0x1400d8f61
xor edi, edi
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov rax, rdi
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400d8f33
add rax, r14
nop word cs:[rax + rax]
mov ecx, dword [0x141f45538]
xor ecx, dword [0x141f4553c]
add ecx, 0x8dc403b6
xor ecx, 0xb43ba112
imul ecx, ecx, 0x551ed4f5
cmp ecx, 0x8298387d
ja 0x1400d8ec0
mov r8, qword [rax + 8]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
mov r10, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141f45540]
or eax, dword [0x141f45544]
or eax, 0x121edb1d
imul eax, eax, 0x19e1686d
and eax, 0x61f50300
cmp eax, 0xcc81a7e2
ja 0x1400d8f10
inc rdi
nop word cs:[rax + rax]
mov eax, dword [0x141f45548]
xor eax, dword [0x141f4554c]
and eax, 0xf15aac00
cmp eax, 0x7b8ac32b
je 0x1400d8f40
cmp rdi, rsi
jne 0x1400d8ea0
mov r9d, dword [rbp + 0x88]
nop dword [rax + rax]
mov eax, dword [0x141f45550]
or eax, dword [0x141f45554]
add eax, 0x1942893
imul rcx, rax, 0x6a71fbf
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0xbb93f6c5
cmp eax, 0xed5bdb1b
ja 0x1400d8f70
cmp qword [rbx], 0
movabs r11, 0x8000000000000000
mov rdi, qword [rbp + 0x58]
je 0x1400d96a4
mov rbx, r11
mov r15, qword [0x141f49060]
mov eax, dword [0x141f45558]
xor eax, dword [0x141f4555c]
add eax, 0x3d996542
or eax, 0x9f598d70
shr eax, 1
imul rax, rax, 0x4fa1505
shr rax, 0x39
cmp eax, 0xf7b50c9e
jbe 0x1400d960c
jmp 0x1400d9648
mov qword [rbp + 0x10], rcx
mov eax, 0xd5d54913
mov ecx, dword [0x141f45580]
xor ecx, dword [0x141f45584]
imul rcx, rax
shr rcx, 0x3d
xor ecx, 0x40e01899
imul rcx, rcx, 0x659b92f7
shr rcx, 0x3c
cmp ecx, 0xb6ce47c4
ja 0x1400d8fff
mov rdx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0xa8], rax
mov rbx, qword [r13 + 0x50]
mov eax, 0xa056dbb1
mov ecx, dword [0x141f45588]
or ecx, dword [0x141f4558c]
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x645052e2
xor ecx, 0x14c76004
cmp ecx, 0x1f2da817
jb 0x1400d9044
mov rsi, qword [r13 + 0x58]
mov eax, dword [0x141f45590]
sub eax, dword [0x141f45594]
xor eax, 0xe5f0b152
add eax, 0xa619b367
or eax, 0x6ab1e47
cmp eax, 0xb10fa64a
jne 0x1400d909a
mov qword [r13 + 0x58], 0
mov qword [rbp + 0x18], rdx
mov eax, 0xd60ef263
mov ecx, dword [0x141f45598]
xor ecx, dword [0x141f4559c]
and ecx, 0x473e84eb
imul ecx, ecx, 0xd96ecb26
imul rcx, rax
shr rcx, 0x3f
mov qword [r13 + 0x58], 0
cmp ecx, 0xc1bc5a8d
ja 0x1400d90a3
test rsi, rsi
je 0x1400d91f0
xor edi, edi
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141f455a0]
imul eax, dword [0x141f455a4]
imul rax, rax, 0x5a5002fd
shr rax, 0x3e
imul eax, eax, 0xdb6bfdc8
add eax, 0x81bca047
cmp eax, 0x28daf38
jb 0x1400d90e5
mov rax, rdi
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1400d91b5
add rax, rbx
mov r15, qword [rax + 8]
mov eax, dword [0x141f455a8]
imul eax, dword [0x141f455ac]
imul eax, eax, 0xdb0bf3c8
add eax, 0x317af2d8
and eax, 0xcf31caf8
cmp eax, 0x627cccb5
jae 0x1400d9170
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r14
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141f455b0]
mov ecx, dword [0x141f455b4]
lea r12d, [rax + rcx]
add r12d, 0x38cac43e
or r12d, 0x4446e461
add r12d, 0xbfc05ca
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r14
add rsp, 0x20
cmp r12d, 0xb97e8e22
jb 0x1400d9170
inc rdi
nop dword [rax + rax]
mov eax, dword [0x141f455b8]
imul eax, dword [0x141f455bc]
and eax, 0x1804822e
xor eax, 0xc8861a28
or eax, 0x77965d1
cmp eax, 0xb3336e7a
jb 0x1400d91c0
cmp rdi, rsi
mov r12, qword [rbp + 0x30]
jne 0x1400d90e5
mov rax, qword [rbp + 0xa8]
add rax, rax
mov qword [rbp + 0x68], rax
xor r15d, r15d
xor ecx, ecx
mov r14, qword [rbp + 0x18]
movabs r11, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141f455c0]
xor edx, edx
div dword [0x141f455c4]
add eax, 0xeb23bf20
imul rax, rax, 0xc289add
shr rax, 0x3b
or eax, 0x4c39d276
cmp eax, 0x89d6c5d1
ja 0x1400d9220
cmp rcx, qword [rbp + 0xa8]
mov rdi, qword [rbp + 0x58]
je 0x1400d94bf
lea rdx, [r14 + rcx*2]
mov rax, qword [rbp + 0x68]
sub rax, rcx
sub rax, rcx
xor r8d, r8d
mov r9, rdx
cmp word [rdx + r8*2], 0
je 0x1400d92b5
mov r10d, dword [0x141f455c8]
sub r10d, dword [0x141f455cc]
add r10d, 0xaf54dc16
or r10d, 0x21e920bd
add r10d, 0x6129099b
cmp r10d, 0x73eb56f3
ja 0x1400d9277
add r9, 2
inc r8
add rax, 0xfffffffffffffffe
jne 0x1400d926f
jmp 0x1400d94bf
mov eax, dword [0x141f455e8]
or eax, dword [0x141f455ec]
and eax, 0x2e3040a0
imul eax, eax, 0xbe0b4495
cmp eax, 0xd9ba0dd0
ja 0x1400d92b5
lea rsi, [r8 + rcx]
cmp rsi, rcx
jb 0x1400d9588
mov eax, dword [0x141f45608]
and eax, dword [0x141f4560c]
imul eax, eax, 0x5888d65c
add eax, 0x2d05d6d4
or eax, 0x1e5ec36a
cmp eax, 0xc140fa7
je 0x1400d92e0
cmp rsi, qword [rbp + 0xa8]
ja 0x1400d9597
lea rax, [rdx + r8*2]
mov ecx, dword [0x141f45620]
add ecx, dword [0x141f45624]
imul ecx, ecx, 0x3eb05a2d
add ecx, 0x372349dd
xor ecx, 0x4c731ff9
cmp ecx, 0xacc8c24e
ja 0x1400d9314
mov rcx, rdx
cmp rcx, rax
je 0x1400d94bf
movzx r9d, word [rcx]
add rcx, 2
nop
mov r10d, dword [0x141f45640]
imul r10d, dword [0x141f45644]
add r10d, 0x430a591b
or r10d, 0x7a41074e
xor r10d, 0x91c86785
cmp r10d, 0x70dd7997
ja 0x1400d9350
cmp r9w, 0x3d
jne 0x1400d933d
sub rsp, 0x20
mov rdi, qword [rbp - 8]
mov rcx, rdi
call fcn.1400918d0
add rsp, 0x20
mov rax, qword [rbp + 0x90]
mov rax, qword [rax]
mov ecx, dword [0x141f45648]
xor ecx, dword [0x141f4564c]
and ecx, 0x41da8050
imul ecx, ecx, 0x33b081a2
cmp ecx, 0xa0014f17
je 0x1400d93a2
cmp r15, rax
jne 0x1400d945f
mov eax, dword [0x141f45650]
mov ecx, dword [0x141f45654]
add eax, ecx
add eax, 0x29201f1f
and eax, 0xd46689f6
cmp eax, 0xf6b23025
mov rbx, qword [rbp + 0x90]
je 0x1400d9428
mov edi, dword [0x141f45658]
imul edi, dword [0x141f4565c]
or edi, 0x82044613
and edi, 0x8274d613
add edi, 0x7de5621a
sub rsp, 0x20
mov rcx, rbx
call fcn.140016ab0
add rsp, 0x20
cmp edi, 0xbe19a784
jbe 0x1400d943a
sub rsp, 0x20
mov rcx, rbx
call fcn.140016ab0
add rsp, 0x20
jmp 0x1400d93f1
mov rbx, qword [r13 + 0x50]
mov eax, dword [0x141f45660]
add eax, dword [0x141f45664]
and eax, 0x81a146
add eax, 0x1c8783b0
cmp eax, 0xd585cf6
jb 0x1400d943e
mov rdi, qword [rbp - 8]
mov rax, r15
shl rax, 5
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
mov rcx, rbx
movups xmmword [rbx + rax + 0x10], xmm1
movups xmmword [rbx + rax], xmm0
inc r15
mov qword [r13 + 0x58], r15
inc rsi
mov rcx, rsi
cmp rsi, qword [rbp + 0xa8]
jbe 0x1400d9207
mov eax, dword [0x141f455d0]
imul eax, dword [0x141f455d4]
add eax, 0x8cfdba49
xor eax, 0x90400308
or eax, 0x71decb7
cmp eax, 0x7054d87
jae 0x1400d9cba
jmp 0x1400d9cdf
cmp qword [rbp + 0x10], 0
mov r9d, dword [rbp + 0x88]
mov r10, qword [rbp + 0xb0]
je 0x1400d9710
mov eax, dword [0x141f455f0]
mov ecx, dword [0x141f455f4]
add eax, ecx
add eax, 0x5b94c951
or eax, 0x4a1f6230
imul eax, eax, 0xce9796b1
cmp eax, 0xe58cedc8
jne 0x1400d9504
mov rax, qword [0x141f49060]
mov rbx, r11
mov esi, r9d
mov eax, dword [str._kX]
xor edx, edx
div dword [0x141f455fc]
or eax, 0xf2476a10
imul rax, rax, 0x4b82bddb
shr rax, 0x3d
imul eax, eax, 0x5377a940
mov rcx, qword [0x141f49060]
cmp eax, 0x3a453a62
jb 0x1400d950a
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0x94868e85
mov r10, qword [rbp + 0xb0]
mov r9d, esi
mov r11, rbx
mov ecx, dword [0x141f45600]
sub ecx, dword [0x141f45604]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x5047911e
cmp ecx, 0xb0d91161
jae 0x1400d9561
jmp 0x1400d9710
xor eax, eax
test al, al
je 0x1400d9d0a
jmp 0x1400d9d3a
mov eax, dword [0x141f45628]
or eax, dword [0x141f4562c]
add eax, 0x96878be4
or eax, 0x1242b100
and eax, 0x1246fb44
cmp eax, 0x5cfb3dc9
jne 0x1400d95bb
ud2
mov eax, dword [0x141f45630]
sub eax, dword [0x141f45634]
add eax, 0xc6b95b3e
and eax, 0xec3f85bb
xor eax, 0xceb9f4f6
ud2
mov esi, dword [0x141f45560]
sub esi, dword [0x141f45564]
or esi, 0x101a100
and esi, 0x753b996
add esi, 0x40d532b7
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x799e826f
jbe 0x1400d9660
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d960c
mov r9d, dword [rbp + 0x88]
mov r10, qword [rbp + 0xb0]
mov r11, rbx
mov rbx, qword [rbp + 0x90]
nop dword [rax + rax]
mov eax, dword [0x141f45568]
add eax, dword [0x141f4556c]
imul eax, eax, 0x60732e80
or eax, 0x2409978d
imul eax, eax, 0x72ca8dd5
cmp eax, 0x2ee5008b
je 0x1400d9680
mov eax, dword [0x141f45570]
xor eax, dword [0x141f45574]
imul eax, eax, 0x7d6ad890
and eax, 0xe5fa5c80
cmp eax, 0x13a9c920
jne 0x1400d96d0
mov qword [rbx], 0
nop dword [rax]
mov eax, dword [0x141f45578]
or eax, dword [0x141f4557c]
or eax, 0x9ce97ae5
and eax, 0xbcffffff
mov qword [rbx], 0
cmp eax, 0x3180124f
je 0x1400d96d0
mov qword [r13 + 0x50], 8
mov qword [r13 + 0x58], 0
nop word cs:[rax + rax]
mov eax, dword [0x141f45668]
xor edx, edx
div dword [0x141f4566c]
and eax, 0x946c741d
cmp eax, 0xdb71960f
je 0x1400d9710
lea r8, [r13 + 0x98]
lea rsi, [r13 + 0xb8]
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d9740
mov eax, dword [rbp + 0x48]
test eax, eax
je 0x1400d9776
cmp eax, 1
jne 0x1400d977a
mov eax, dword [0x141f45678]
sub eax, dword [0x141f4567c]
or eax, 0x24600a82
xor eax, 0x11602680
or eax, 0xc81fd179
cmp eax, 0xdf27d759
je 0x1400d9750
mov bl, 1
jmp 0x1400d9789
xor ebx, ebx
jmp 0x1400d9789
cmp eax, 2
jne 0x1400d9828
cmp qword [r8], r11
sete bl
test r9d, r9d
je 0x1400d9878
cmp r9d, 1
je 0x1400d9884
cmp r9d, 2
jne 0x1400d9850
mov rcx, qword [rsi]
mov eax, dword [0x141f45688]
xor edx, edx
div dword [0x141f4568c]
nop word [rax + rax]
mov edx, dword [0x141f45690]
sub edx, dword [0x141f45694]
imul rax, rdx, 0x2e8ad937
shr rax, 0x20
sub edx, eax
shr edx, 1
add edx, eax
shr edx, 0x1e
or edx, 0x2552b031
cmp rcx, r11
sete al
cmp edx, 0xbe5cee92
je 0x1400d97c0
nop word cs:[rax + rax]
mov ecx, dword [0x141f45698]
or ecx, dword [0x141f4569c]
add ecx, 0xbb349d33
or ecx, 0x202276be
add ecx, 0x977d97e3
cmp ecx, 0xa48d439b
jb 0x1400d9800
jmp 0x1400d987a
mov eax, dword [0x141f45670]
sub eax, dword [0x141f45674]
imul eax, eax, 0x1ba5757c
add eax, 0xcace9509
and eax, 0x5beb2f81
cmp eax, 0xc27115e9
ja 0x1400d9828
jmp 0x1400d7ed1
mov eax, dword [0x141f45680]
xor eax, dword [0x141f45684]
imul eax, eax, 0x40d22256
xor eax, 0x190836a8
and eax, 0x392a77bc
cmp eax, 0x52df8e5f
ja 0x1400d9850
jmp 0x1400d7ed1
xor eax, eax
or al, bl
cmp al, 1
jne 0x1400d9ed3
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d9890
mov dword [rbp + 0x68], ebx
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0xa8], r8
mov eax, dword [0x141f456a0]
xor eax, dword [0x141f456a4]
xor eax, 0xaacb590
add eax, 0x199daf25
and eax, 0x9df77e37
cmp eax, 0x114f4ff8
jae 0x1400d98e6
sub rsp, 0x20
mov rcx, qword [rbp + 0x40]
mov rdx, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x38]
mov r9, rdi
call fcn.1400dc790
add rsp, 0x20
mov r15, qword [rbp + 0xa0]
mov rbx, qword [rbp + 0x40]
mov rsi, rdi
mov r14, qword [rbp + 0x38]
nop dword [rax + rax]
mov eax, dword [0x141f456a8]
mov ecx, dword [0x141f456ac]
add eax, ecx
add eax, 0xe36ebf71
and eax, 0x85ff35a2
imul edi, eax, 0x70588b6b
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r14
mov r9, rsi
call fcn.1400dc790
add rsp, 0x20
cmp edi, 0x281a5920
jb 0x1400d9900
mov r14, qword [rbx]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d9950
movabs rax, 0x8000000000000000
cmp r14, rax
mov r15, qword [rbp - 0x78]
jne 0x1400d9ac8
nop dword [rax + rax]
mov eax, dword [0x141f456c8]
and eax, dword [0x141f456cc]
or eax, 0xdffbffff
cmp eax, 0xaa04e68
jb 0x1400d9970
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax]
nop word cs:[rax + rax]
mov ecx, dword [0x141f456d0]
sub ecx, dword [0x141f456d4]
and ecx, 0x407c9104
cmp ecx, 0x2c6216d0
je 0x1400d99a0
shl rax, 1
test rax, rax
je 0x1400d9a51
mov eax, dword [0x141f456d8]
and eax, dword [0x141f456dc]
add eax, 0x11889a2e
or eax, 0x7be73abf
cmp eax, 0xf7a680eb
ja 0x1400d99c6
mov rsi, qword [r13 + 0xa0]
xor eax, eax
test al, al
je 0x1400d9a0a
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [str.3:U]
xor edx, edx
div dword [0x141f456e4]
mov edi, eax
add edi, 0xb5bc9dbb
xor edi, 0x30004050
and edi, 0xb86859dd
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp edi, 0x96c4260b
ja 0x1400d9a11
mov eax, dword [0x141f456e8]
add eax, dword [0x141f456ec]
xor eax, 0x6beee9d0
cmp eax, 0xa563c667
movabs rcx, 0x8000000000000000
mov rdx, qword [rbp + 0xa8]
jbe 0x1400d9a7d
mov qword [rdx], rcx
xor eax, eax
mov r10, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov qword [rdx], rcx
test al, al
jne 0x1400d9a90
nop word [rax + rax]
mov eax, dword [0x141f456f0]
sub eax, dword [0x141f456f4]
imul eax, eax, 0x454de8cd
xor eax, 0x1320031
and eax, 0xf93716b1
cmp eax, 0x6277b400
jb 0x1400d9aa0
jmp 0x1400d9eb0
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d9ad0
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
lea rax, [rdx + r8*2]
mov r9d, dword [0x141f456b0]
add r9d, dword [0x141f456b4]
and r9d, 0x3b8cf486
add r9d, 0x2f3cb273
xor r9d, 0xcba73617
cmp r9d, 0x7ae132d5
jb 0x1400d9ae0
test r8, r8
mov rsi, qword [rbp + 0xa8]
mov ebx, dword [rbp + 0x68]
je 0x1400d9b8b
xor r10d, r10d
mov r11, rdx
cmp word [r11], 0
je 0x1400d9b5d
add r11, 2
inc r10
nop
mov r9d, dword [0x141f456b8]
imul r9d, dword [0x141f456bc]
or r9d, 0xf7dfbef8
imul r9d, r9d, 0xfd9f5d09
cmp r9d, 0x8ea75c4b
je 0x1400d9b30
cmp r11, rax
jne 0x1400d9b21
jmp 0x1400d9b8e
mov eax, dword [0x141f456c0]
sub eax, dword [0x141f456c4]
imul rax, rax, 0x7579aa33
shr rax, 0x3e
imul eax, eax, 0x66876698
add eax, 0x8db1740
cmp eax, 0x27c5e48c
ja 0x1400d9b5d
mov r8, r10
jmp 0x1400d9b8e
xor r8d, r8d
sub rsp, 0x20
mov rcx, r15
mov qword [rbp + 0x40], rdx
call fcn.1400918d0
add rsp, 0x20
mov rdi, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x88]
mov rdx, rdi
mov r9, qword [rbp + 0x90]
call fcn.1400dd4a0
add rsp, 0x20
test bl, bl
je 0x1400d9c67
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
mov rax, qword [rbp - 0x30]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov rax, qword [rsi]
shl rax, 1
test rax, rax
je 0x1400d9db4
xor eax, eax
test al, al
jne 0x1400d9bf4
mov rdi, qword [r13 + 0xa0]
mov eax, dword [0x141f456f8]
and eax, dword [0x141f456fc]
and eax, 0x3b28e921
xor eax, 0xdf78eae1
imul eax, eax, 0x1ec425f2
cmp eax, 0x1cc96818
jbe 0x1400d9c29
mov rax, qword [0x141f49060]
xor eax, eax
mov rbx, qword [0x141f49060]
test al, al
jne 0x1400d9c2b
mov eax, dword [0x141f45700]
and eax, dword [0x141f45704]
imul rax, rax, 0x6f76d24d
shr rax, 0x3d
xor eax, 0xec4be349
add eax, 0xacd4516b
cmp eax, 0xc1f1cb7
jae 0x1400d9d66
jmp 0x1400d9d9c
mov rax, qword [r15]
mov r10, qword [rbp + 0xb0]
mov ecx, dword [0x141f45720]
and ecx, dword [0x141f45724]
and ecx, 0x41180
cmp ecx, 0x88f99c3
ja 0x1400d9c71
test rax, rax
je 0x1400d9e28
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, qword [rbp + 0xb0]
add rsp, 0x20
jmp 0x1400d9e28
mov eax, dword [0x141f455d8]
xor eax, dword [0x141f455dc]
imul eax, eax, 0x8e112a8f
add eax, 0xde30b307
and eax, 0x6c460ce8
ud2
ud2
mov eax, dword [0x141f45610]
imul eax, dword [0x141f45614]
mov ecx, 0xc2ffda37
imul rcx, rax
shr rcx, 0x3c
xor ecx, 0x208d104
and ecx, 0x208d10d
ud2
ud2
mov esi, dword [0x141f45708]
add esi, dword [0x141f4570c]
or esi, 0x96b841ec
add esi, 0xcb192023
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xf14b2aef
jbe 0x1400d9db4
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d9d66
mov eax, dword [0x141f45710]
xor eax, dword [0x141f45714]
add eax, 0x652272a1
and eax, 0xf81b6e48
cmp eax, 0x4943ed5a
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp + 0xa8]
jne 0x1400d9dec
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
mov r10, qword [rbp + 0xb0]
mov eax, dword [0x141f45718]
xor edx, edx
div dword [0x141f4571c]
and eax, 0x10a0840
or eax, 0xbaf5f12e
imul eax, eax, 0x8ed18b5f
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
cmp eax, 0xeec83afd
ja 0x1400d9df3
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d9e30
nop word cs:[rax + rax]
mov eax, dword [0x141f45728]
imul eax, dword [0x141f4572c]
xor eax, 0x72a35e1a
imul eax, eax, 0xedc63bba
add eax, 0x386573b2
cmp eax, 0x549debfe
jb 0x1400d9e40
test r14, r14
je 0x1400d9eb0
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r10, qword [rbp + 0xb0]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141f45730]
sub eax, dword [0x141f45734]
imul eax, eax, 0x701500be
and eax, 0xff6158c4
cmp eax, 0xb0c646ff
je 0x1400d9e90
nop
mov eax, dword [0x141f45738]
or eax, dword [0x141f4573c]
add eax, 0xa70213a0
imul rax, rax, 0x2cd3df59
shr rax, 0x3c
cmp eax, 0x52989ea5
je 0x1400d9eb0
mov r14, qword [rbp + 0x78]
mov rdi, qword [rbp + 0xa0]
nop
mov eax, dword [0x141f45740]
imul eax, dword [0x141f45744]
add eax, 0x2bfce636
and eax, 0x148
cmp eax, 0xdd657a62
jae 0x1400d9ee0
jmp 0x1400d76aa
mov edi, dword [0x141f45778]
xor edi, dword [0x141f4577c]
or edi, 0x8e259b81
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r15
mov rdx, rsi
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp edi, 0x7d6bdbb
jne 0x1400d9f6b
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r15
mov rdx, rsi
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1400d9f03
mov ecx, eax
mov eax, dword [0x141f45780]
xor edx, edx
div dword [0x141f45784]
nop dword [rax + rax]
mov eax, dword [0x141f45788]
xor edx, edx
div dword [0x141f4578c]
imul rax, rax, 0x1b28c0bd
shr rax, 0x3a
and eax, 0xfffffffd
cmp eax, 0x18c6e8dc
je 0x1400d9f80
test ecx, ecx
movabs rdi, 0x8000000000000000
mov r15, qword [rbp + 0x98]
je 0x1400da36e
nop dword [rax]
mov eax, dword [0x141f45790]
sub eax, dword [0x141f45794]
add eax, 0x43bd905b
or eax, 0xdbfaf5bf
cmp eax, 0xd62988bd
jb 0x1400d9fc0
movzx eax, word [r14 + 0x24]
mov qword [rbp + 0xb0], rax
mov eax, dword [r14 + 0x28]
mov qword [rbp + 0x40], rax
mov rax, r14
movzx r14d, word [r14 + 0x40]
mov rcx, rax
mov r15d, dword [rax + 0x44]
lea rsi, [r13 + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141f45798]
imul eax, dword [0x141f4579c]
xor eax, 0x100924
and eax, 0x43710924
cmp eax, 0xbbe3fbed
je 0x1400da010
mov ebx, dword [rcx + 0x48]
mov eax, dword [rbp + 0x50]
test eax, eax
je 0x1400da95c
cmp eax, 1
je 0x1400da07a
cmp eax, 2
jne 0x1400da395
mov eax, 0xe2c95453
nop
mov ecx, dword [0x141f457a8]
or ecx, dword [0x141f457ac]
imul rcx, rax
shr rcx, 0x3b
and ecx, 0xfffffffc
cmp ecx, 0xa6ff8e13
je 0x1400da050
cmp qword [r13 + 0x40], 0
jne 0x1400da95c
mov eax, dword [0x141f49070]
mov rdi, qword [rbp + 0xa0]
nop word [rax + rax]
mov ecx, dword [0x141f457b0]
sub ecx, dword [0x141f457b4]
and ecx, 0x10084200
cmp ecx, 0x3e3fc1bb
je 0x1400da090
mov ecx, 0xb3d3049d
nop
mov edx, dword [0x141f457b8]
or edx, dword [0x141f457bc]
imul rdx, rcx
shr rdx, 0x3e
imul edx, edx, 0x599bb840
cmp edx, 0x9d278e73
je 0x1400da0b0
cmp eax, 3
jne 0x1400da531
nop dword [rax + rax]
mov eax, dword [0x141f457c8]
xor eax, dword [0x141f457cc]
add eax, 0xbd2c673c
or eax, 0xd1b02f7f
xor eax, 0xce254a2f
cmp eax, 0xa21e6951
ja 0x1400da0e0
cmp byte [0x141f49074], 0
je 0x1400da200
mov eax, dword [0x141f45878]
xor eax, dword [0x141f4587c]
add eax, 0x7e1a2039
and eax, 0x6999aeda
cmp eax, 0x25dd10cf
mov r14, qword [rbp - 0x38]
jbe 0x1400da143
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.1400dce30
add rsp, 0x20
mov r15, rdi
nop word cs:[rax + rax]
mov edi, dword [0x141f45880]
sub edi, dword [0x141f45884]
or edi, 0xfbdbffff
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
call fcn.1400dce30
add rsp, 0x20
cmp edi, 0xc05e9cb1
je 0x1400da150
mov r14, qword [r13 + 0x38]
mov rdi, qword [r13 + 0x40]
test rdi, rdi
je 0x1400da3b9
xor r15d, r15d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400da1b0
inc r15
cmp r15, rdi
je 0x1400da3b9
nop word cs:[rax + rax]
mov eax, dword [0x141f45888]
sub eax, dword [0x141f4588c]
and eax, 0x8a984b59
add eax, 0x9cdbb613
or eax, 0x528aaf47
cmp eax, 0x2e02b7bd
jb 0x1400da1b0
mov rax, r15
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400da19a
add rax, r14
mov r8, qword [rax + 8]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
jmp 0x1400da19a
mov eax, dword [0x141f457d0]
and eax, dword [str.xQ5Yo]
imul eax, eax, 0x5d72a3cb
add eax, 0xd8b9506f
and eax, 0x3a09d3f8
cmp eax, 0xe95da782
je 0x1400da200
nop word cs:[rax + rax]
mov eax, dword [0x141f457d8]
sub eax, dword [0x141f457dc]
imul eax, eax, 0x72d74e2b
add eax, 0xe4f12d13
and eax, 0xa77146b1
cmp eax, 0x362c7912
jb 0x1400da230
sub rsp, 0x20
mov rcx, qword [rbp - 0x70]
mov rdx, rdi
mov r8, r15
mov r9, r14
mov r14, rcx
call fcn.1400dc790
add rsp, 0x20
mov rdi, qword [r14]
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x1400da4e5
mov eax, dword [0x141f45808]
or eax, dword [0x141f4580c]
imul rcx, rax, 0x360adbbf
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0xa911f88f
cmp eax, 0x35e80117
mov r8, qword [rbp + 0x60]
jae 0x1400da2bd
mov qword [r8], 0
mov ecx, 0x8365c6b5
nop word cs:[rax + rax]
mov eax, dword [0x141f45810]
xor edx, edx
div dword [0x141f45814]
add eax, 0xf3996c5e
imul rax, rcx
shr rax, 0x3e
add eax, 0x2505f80d
mov qword [r8], 0
cmp eax, 0x72fd76d1
ja 0x1400da2d0
mov eax, dword [0x141f45818]
add eax, dword [0x141f4581c]
xor eax, 0x92011200
or eax, 0x20e2e5df
mov ecx, 0x8630ddef
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xf6c7d127
jbe 0x1400da340
mov qword [r8 + 8], 8
mov qword [r8 + 0x10], 0
nop dword [rax]
mov eax, dword [str.a_S_]
imul eax, dword [0x141f45824]
xor eax, 0x737d962b
mov qword [r8 + 8], 8
mov qword [r8 + 0x10], 0
cmp eax, 0xceb43456
jb 0x1400da340
jmp 0x1400da65c
mov eax, dword [0x141f45b48]
imul eax, dword [0x141f45b4c]
and eax, 0xa4246493
xor eax, 0xfc105e52
cmp eax, 0x851eb92e
jae 0x1400dbbe7
jmp 0x1400dbc1b
mov eax, dword [0x141f457a0]
xor edx, edx
div dword [0x141f457a4]
or eax, 0x685f37f7
add eax, 0x8b971f28
cmp eax, 0x95b629cd
jb 0x1400da395
jmp 0x1400d7ed1
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141f45890]
imul eax, dword [0x141f45894]
imul eax, eax, 0x65e80934
add eax, 0x2c064ca
xor eax, 0xa0bc5fb4
cmp eax, 0x2ea4d484
jb 0x1400da3d0
mov rax, qword [rsi]
nop word [rax + rax]
mov ecx, dword [0x141f45898]
xor ecx, dword [0x141f4589c]
add ecx, 0xc937d5d1
and ecx, 0xb0a92a70
cmp ecx, 0xa217724e
ja 0x1400da400
mov ecx, dword [0x141f458a0]
or ecx, dword [0x141f458a4]
imul ecx, ecx, 0x60da73ce
or ecx, 0x8c92b269
imul ecx, ecx, 0xe714f5f3
cmp ecx, 0xaf1b1c23
ja 0x1400da420
test rax, rax
je 0x1400da8f9
mov eax, dword [0x141f458a8]
xor edx, edx
div dword [0x141f458ac]
add eax, 0xd00f8989
shr eax, 1
mov ecx, 0x89e13f51
imul rcx, rax
shr rcx, 0x3a
cmp ecx, 0xdcca1470
jne 0x1400da480
mov rax, qword [0x141f49060]
mov eax, dword [0x141f458b0]
xor eax, dword [0x141f458b4]
imul eax, eax, 0x2f7dd4ef
or eax, 0xe7df3649
and eax, 0xf7df77c9
mov r15, qword [0x141f49060]
cmp eax, 0x7de746bd
jb 0x1400da480
mov eax, dword [0x141f458b8]
and eax, dword [0x141f458bc]
imul rcx, rax, 0x20b7a5af
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xa80b72da
add eax, 0xc65217ea
cmp eax, 0xd9f449df
jbe 0x1400da89c
jmp 0x1400da8e1
mov eax, dword [0x141f457e0]
xor r8d, r8d
xor edx, edx
div dword [0x141f457e4]
mov rcx, qword [rbp + 0x60]
nop word [rax + rax]
test r8b, r8b
jne 0x1400da500
mov r14, qword [r14 + 8]
mov eax, dword [0x141f457e8]
sub eax, dword [0x141f457ec]
or eax, 0x4de741c9
xor eax, 0xb15bd8f7
imul eax, eax, 0xfefa7295
cmp eax, 0x3b16305b
jne 0x1400da570
jmp 0x1400da5b6
sub rsp, 0x20
call fcn.140105f54
add rsp, 0x20
mov eax, 0x9ac9e261
mov ecx, dword [0x141f457c0]
xor ecx, dword [0x141f457c4]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xf0a678f6
add ecx, 0xcf20baa9
cmp ecx, 0x6882614e
jb 0x1400da543
jmp 0x1400da0e0
mov eax, dword [0x141f457f0]
or eax, dword [0x141f457f4]
shr eax, 1
mov edx, 0x8cb7dfc5
imul rdx, rax
shr rdx, 0x3e
imul r15d, edx, 0xa582fd09
add r15d, 0x24a121cb
sub rsp, 0x20
mov rdx, r14
call fcn.1400dcb00
mov rcx, qword [rbp + 0x60]
add rsp, 0x20
cmp r15d, 0x7158b25b
jbe 0x1400da5cc
sub rsp, 0x20
mov rdx, r14
call fcn.1400dcb00
mov rcx, qword [rbp + 0x60]
add rsp, 0x20
jmp 0x1400da570
mov eax, 0x946a2df1
nop word cs:[rax + rax]
mov ecx, dword [0x141f457f8]
imul ecx, dword [0x141f457fc]
or ecx, 0x840e5358
xor ecx, 0x129de5ee
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xbd82ff1a
ja 0x1400da5e0
test rdi, rdi
je 0x1400da65c
mov eax, dword [0x141f45800]
add eax, dword [0x141f45804]
imul eax, eax, 0x626dea56
add eax, 0x91fce6b6
or eax, 0xfab382c2
cmp eax, 0xa9a33932
jb 0x1400da640
mov rcx, qword [0x141f49060]
xor eax, eax
test al, al
je 0x1400da649
mov rax, qword [0x141f49060]
jmp 0x1400da633
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xcb4580b3
nop word cs:[rax + rax]
mov ecx, dword [0x141f45828]
imul ecx, dword [0x141f4582c]
add ecx, 0xa03f9865
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xc55e20d8
ja 0x1400da670
mov r12, qword [r13 + 0x38]
mov rdi, qword [r13 + 0x40]
mov eax, 0xa8f0609b
mov ecx, dword [0x141f45830]
imul ecx, dword [0x141f45834]
xor ecx, 0xcc396cf7
add ecx, 0x8b353b59
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x9e6e94e4
ja 0x1400da6a0
test rdi, rdi
je 0x1400da784
xor r15d, r15d
mov r13d, 0x95228be7
mov r14, r12
nop
mov eax, dword [0x141f45838]
imul eax, dword [0x141f4583c]
imul rax, rax, 0x58916c7f
shr rax, 0x3d
imul eax, eax, 0xd4955d00
cmp eax, 0x67a07bb1
jb 0x1400da6e0
cmp qword [r14], 0
je 0x1400da756
mov r8, qword [r14 + 8]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141f45840]
imul eax, dword [0x141f45844]
and eax, 0xf1f66e32
xor eax, 0x4d439f47
imul rax, r13
shr rax, 0x3e
cmp eax, 0x744639c1
ja 0x1400da730
mov eax, dword [0x141f45848]
add eax, dword [0x141f4584c]
or eax, 0x31c404f4
imul eax, eax, 0xc68819b1
cmp eax, 0x4f6e33a8
je 0x1400da756
add r14, 0x20
inc r15
dec rdi
jne 0x1400da6e0
mov rax, qword [rsi]
nop word [rax + rax]
mov ecx, dword [0x141f45850]
sub ecx, dword [0x141f45854]
imul ecx, ecx, 0x52bf857b
add ecx, 0x4a3e3994
cmp ecx, 0x461390d6
jb 0x1400da790
test rax, rax
mov r13, qword [rbp + 0x70]
je 0x1400da827
mov r15, qword [0x141f49060]
mov eax, dword [0x141f45858]
sub eax, dword [0x141f4585c]
imul eax, eax, 0xf8696303
add eax, 0x9c33c0b2
cmp eax, 0xfd518a78
ja 0x1400da80f
mov edi, dword [0x141f45860]
imul edi, dword [0x141f45864]
or edi, 0xf7ebf1aa
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x583ec66
jne 0x1400da827
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400da7de
mov eax, dword [0x141f45868]
sub eax, dword [0x141f4586c]
xor eax, 0x9cbf8549
imul eax, eax, 0xc250a65a
or eax, 0x6c15546e
cmp eax, 0x3604b7c2
movabs rdi, 0x8000000000000000
mov rcx, qword [rbp + 0x60]
jb 0x1400da88c
mov rax, qword [rcx + 0x10]
mov qword [rsi + 0x10], rax
mov eax, dword [0x141f45870]
or eax, dword [0x141f45874]
add eax, 0x995d69f4
or eax, 0x6c2cc020
add eax, 0x33ac9217
movups xmm0, xmmword [rcx]
movups xmmword [rsi], xmm0
cmp eax, 0x7a91ed20
jae 0x1400da95c
mov rax, qword [rcx + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rsi], xmm0
jmp 0x1400da858
mov eax, dword [0x141f458c0]
xor edx, edx
div dword [0x141f458c4]
mov r12d, eax
and r12d, 0x5063de43
add r12d, 0xbafcce84
xor r12d, 0x1a584589
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r12d, 0xe9cfbff
jae 0x1400da8f9
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400da89c
mov eax, dword [0x141f458c8]
imul eax, dword [0x141f458cc]
imul eax, eax, 0x54e8637c
add eax, 0xb3be668f
or eax, 0xd9034f01
cmp eax, 0xa934b19b
mov rcx, qword [rbp - 0x38]
jae 0x1400da930
mov rax, qword [rcx + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rsi], xmm0
nop
mov rax, qword [rcx + 0x10]
mov qword [rsi + 0x10], rax
mov eax, dword [0x141f458d0]
imul eax, dword [0x141f458d4]
xor eax, 0x4111300
or eax, 0xe98668be
movups xmm0, xmmword [rcx]
movups xmmword [rsi], xmm0
cmp eax, 0x24c5e89b
je 0x1400da930
lea r14, [r13 + 0x48]
mov eax, dword [0x141f458d8]
and eax, dword [0x141f458dc]
xor eax, 0xa08e98a1
imul eax, eax, 0xbf425bab
cmp eax, 0xd1a62a
je 0x1400da960
mov eax, 0xa35dddbf
mov r15, qword [rbp + 0x98]
mov r8d, dword [rbp + 0x88]
mov edx, dword [rbp + 0x80]
nop word [rax + rax]
mov ecx, dword [0x141f458e0]
sub ecx, dword [0x141f458e4]
imul rcx, rax
bt rcx, 0x3d
mov ecx, 0
adc ecx, 0x23a0ce9b
cmp ecx, 0x58279dc6
ja 0x1400da9a0
test edx, edx
je 0x1400db354
cmp edx, 1
je 0x1400daa0e
cmp edx, 2
jne 0x1400daa3e
nop word [rax + rax]
mov eax, dword [0x141f458e8]
add eax, dword [0x141f458ec]
and eax, 0xbfa4551e
imul eax, eax, 0x7a9ef63e
add eax, 0xe5cbb30
cmp eax, 0x46ce9ec9
ja 0x1400da9e0
cmp qword [r13 + 0x58], 0
jne 0x1400db354
mov eax, dword [0x141f458f0]
imul eax, dword [0x141f458f4]
add eax, 0x2540970e
xor eax, 0x8044e
or eax, 0xd7a138b0
cmp eax, 0x18b86e13
mov rsi, qword [rbp - 0x40]
mov r12, qword [rbp + 0xa0]
jae 0x1400daa49
jmp 0x1400daa8e
xor eax, eax
test al, al
jne 0x1400daa40
jmp 0x1400d7ed1
mov eax, dword [0x141f458f8]
xor edx, edx
div dword [0x141f458fc]
mov r15d, eax
xor r15d, 0x1b379bd0
add r15d, 0x459a5f91
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, rbx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
cmp r15d, 0x5c58aaec
jae 0x1400daaad
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, rbx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
jmp 0x1400daa49
mov rsi, qword [rbp - 0x58]
nop word cs:[rax + rax]
mov ecx, dword [0x141f45900]
sub ecx, dword [0x141f45904]
imul ecx, ecx, 0x9b61d7a6
add ecx, 0xd3bb17cc
cmp ecx, 0x7b3af465
jb 0x1400daac0
test rax, rax
je 0x1400daf10
nop dword [rax]
mov eax, dword [str.E__n]
sub eax, dword [0x141f4591c]
imul eax, eax, 0x4437f3cf
or eax, 0x7df2dd1f
xor eax, 0xe882c25c
cmp eax, 0xaf1d157d
ja 0x1400daaf0
mov rax, qword [rbp - 0x40]
mov r9, qword [rax]
mov rax, qword [rax + 0x18]
sub r9, rbx
add r9, rax
nop word cs:[rax + rax]
mov eax, dword [0x141f45920]
or eax, dword [0x141f45924]
imul eax, eax, 0x66bae9ec
or eax, 0xa9eadc95
cmp eax, 0xb42c54d9
ja 0x1400dab30
sub rsp, 0x20
mov rcx, rsi
mov rdx, qword [rbp + 0xa0]
mov r8, rbx
call fcn.1400dc790
add rsp, 0x20
mov rax, qword [rsi]
cmp rax, rdi
je 0x1400daf70
mov qword [rbp + 0x60], rax
nop dword [rax + rax]
mov eax, dword [0x141f45998]
xor eax, dword [0x141f4599c]
or eax, 0x3fcf866a
imul eax, eax, 0xfcd4b21e
and eax, 0x284dfc14
cmp eax, 0x9455eacb
ja 0x1400dab80
mov rbx, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
mov qword [rbp + 0x78], rax
mov r12, qword [r13 + 0x50]
mov rsi, qword [r13 + 0x58]
mov qword [r13 + 0x58], 0
test rsi, rsi
je 0x1400dac38
xor edi, edi
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141f459a8]
imul eax, dword [0x141f459ac]
add eax, 0xef147fa3
and eax, 0x14097242
add eax, 0xe0cb05ec
cmp eax, 0x204f70fd
jb 0x1400dabd0
mov rax, rdi
shl rax, 5
cmp qword [r12 + rax], 0
je 0x1400dac1c
add rax, r12
mov r8, qword [rax + 8]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
inc rdi
nop
mov eax, dword [0x141f459b0]
xor eax, dword [0x141f459b4]
cmp eax, 0xc1e1bda7
je 0x1400dac20
cmp rdi, rsi
jne 0x1400dabd0
mov rax, qword [rbp + 0x78]
lea r13, [rbx + rax*2]
xor edi, edi
nop word cs:[rax + rax]
mov eax, dword [0x141f459a0]
or eax, dword [0x141f459a4]
add eax, 0x475743b8
or eax, 0xa6aa3549
xor eax, 0xfb0228bb
cmp eax, 0x4e10336b
ja 0x1400dac50
xor r15d, r15d
xor ecx, ecx
nop word [rax + rax]
mov eax, dword [0x141f459b8]
sub eax, dword [str.U_vpw]
cmp eax, 0xce28ccd6
je 0x1400dac80
cmp rcx, qword [rbp + 0x78]
je 0x1400db000
lea r9, [rbx + rcx*2]
xor r8d, r8d
mov r10, r9
nop word [rax + rax]
cmp word [r10], 0
je 0x1400dace5
add r10, 2
inc r8
nop
mov eax, dword [0x141f459c0]
xor edx, edx
div dword [0x141f459c4]
imul eax, eax, 0x9349f5a0
cmp eax, 0x6fbc8505
je 0x1400dacc0
cmp r10, r13
jne 0x1400dacb0
jmp 0x1400db000
mov eax, dword [0x141f459d8]
and eax, dword [0x141f459dc]
cmp eax, 0x8fbbc00f
je 0x1400dace5
lea rsi, [r8 + rcx]
cmp rsi, rcx
jb 0x1400d7ed1
nop word cs:[rax + rax]
test r15b, r15b
jne 0x1400dad10
cmp rsi, qword [rbp + 0x78]
ja 0x1400d7ed1
nop
mov eax, dword [0x141f459f8]
or eax, dword [0x141f459fc]
imul eax, eax, 0x7ffb3148
add eax, 0x5e127f96
xor eax, 0xdb1a212
cmp eax, 0x1f90895d
jbe 0x1400dad20
lea rax, [r9 + r8*2]
mov rcx, r9
cmp rcx, rax
je 0x1400db000
nop word cs:[rax + rax]
mov edx, dword [0x141f45a00]
xor edx, dword [0x141f45a04]
imul edx, edx, 0xa2e85a34
xor edx, 0xd187e59a
imul rdx, rdx, 0x6b56876b
shr rdx, 0x3e
cmp edx, 0x5221e4ea
ja 0x1400dad60
cmp word [rcx], 0x3d
lea rcx, [rcx + 2]
jne 0x1400dad4a
sub rsp, 0x20
mov rcx, qword [rbp + 0x28]
mov rdx, r9
call fcn.1400918d0
mov ecx, 0xb42c2803
add rsp, 0x20
mov eax, dword [0x141f45a08]
and eax, dword [0x141f45a0c]
or eax, 0x181a046d
imul eax, eax, 0xba0f4b7e
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x3e555df2
je 0x1400dadae
cmp rdi, qword [r14]
jne 0x1400dae1e
sub rsp, 0x20
mov rcx, r14
call fcn.140016ab0
add rsp, 0x20
test r15b, r15b
jne 0x1400dade9
mov rax, qword [rbp + 0x70]
mov r12, qword [rax + 0x50]
mov eax, dword [0x141f45a10]
or eax, dword [0x141f45a14]
add eax, 0x60d63e1d
and eax, 0x8d387bf8
imul rax, rax, 0x439de23b
shr rax, 0x3d
cmp eax, 0x6cce96ef
ja 0x1400dadf6
test r15b, r15b
je 0x1400dae4c
mov rax, rdi
shl rax, 5
mov rcx, qword [rbp + 0x28]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r12 + rax + 0x10], xmm1
movups xmmword [r12 + rax], xmm0
lea rax, [rdi + 1]
mov rcx, qword [rbp + 0x70]
mov qword [rcx + 0x58], rax
mov r8, qword [rbp + 0x70]
mov r9, qword [rbp + 0x28]
mov eax, dword [0x141f45a18]
mov ecx, dword [0x141f45a1c]
add eax, ecx
add eax, 0x48547257
imul rcx, rax, 0x686d6e35
shr rcx, 0x3d
add ecx, 0xc58ca7c3
mov rdx, rdi
shl rdx, 5
lea rax, [rdi + 1]
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [r12 + rdx + 0x10], xmm1
movups xmmword [r12 + rdx], xmm0
mov qword [r8 + 0x58], rax
cmp ecx, 0x4db48850
jb 0x1400dae54
inc rsi
mov rdi, rax
mov rcx, rsi
cmp rsi, qword [rbp + 0x78]
jbe 0x1400dac80
mov eax, dword [0x141f459c8]
xor eax, dword [0x141f459cc]
imul eax, eax, 0x25039479
add eax, 0x71358c80
cmp eax, 0x8f5522fe
jbe 0x1400daed6
ud2
mov eax, dword [0x141f459d0]
sub eax, dword [0x141f459d4]
and eax, 0x61866ac6
imul eax, eax, 0x338b569b
imul rax, rax, 0x4717dfd3
shr rax, 0x3e
ud2
mov eax, dword [0x141f45908]
and eax, dword [0x141f4590c]
and eax, 0xae6a5f38
imul rax, rax, 0xc6ab8f
shr rax, 0x37
cmp eax, 0xf2385a77
je 0x1400daf10
nop word cs:[rax + rax]
mov eax, dword [0x141f45910]
or eax, dword [0x141f45914]
imul eax, eax, 0xa67eb882
add eax, 0x651c5ac
xor eax, 0x488eb638
cmp eax, 0xb0f5848d
ja 0x1400daf40
nop word cs:[rax + rax]
mov eax, dword [0x141f45928]
and eax, dword [str.Ln]
or eax, 0xe0cc8408
and eax, 0xe1dfd4d8
add eax, 0xf822a9c8
cmp eax, 0x685780d5
jb 0x1400daf70
mov rbx, qword [r13 + 0x50]
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400dafa0
mov rsi, qword [r13 + 0x58]
nop dword [rax + rax]
mov eax, dword [0x141f45930]
xor eax, dword [0x141f45934]
xor eax, 0x78ba345b
imul rax, rax, 0x568ef8bb
shr rax, 0x3e
or eax, 0x9897f018
cmp eax, 0x2d9c0e50
jb 0x1400dafb0
test rsi, rsi
je 0x1400db120
xor edi, edi
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r12d, r12d
jmp 0x1400db090
mov eax, dword [0x141f459e0]
or eax, dword [0x141f459e4]
imul eax, eax, 0xcbcc5c4f
add eax, 0xfc1676d
cmp eax, 0x19da97a0
ja 0x1400db000
cmp qword [rbp + 0x60], 0
mov r13, qword [rbp + 0x70]
movabs rdi, 0x8000000000000000
je 0x1400db337
mov r14, qword [0x141f49060]
mov eax, dword [0x141f459e8]
or eax, dword [0x141f459ec]
xor eax, 0xa54a8ed0
add eax, 0x50fc3304
xor eax, 0x5ccfc20a
cmp eax, 0x58615411
jae 0x1400db2da
jmp 0x1400db31f
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
inc r12
cmp r12, rsi
je 0x1400db120
nop word cs:[rax + rax]
mov eax, dword [0x141f45938]
xor eax, dword [0x141f4593c]
imul eax, eax, 0x869eb274
cmp eax, 0x14ecda3
je 0x1400db090
mov rax, r12
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1400db076
add rax, rbx
mov ecx, dword [0x141f45940]
sub ecx, dword [0x141f45944]
and ecx, 0x4c7258c
add ecx, 0x25d86a20
and ecx, 0x8842d20
cmp ecx, 0x24f69940
ja 0x1400db0ba
test dil, dil
jne 0x1400db114
mov ecx, dword [0x141f45948]
xor ecx, dword [0x141f4594c]
xor ecx, 0x6a706f6a
imul edx, ecx, 0x7430c86e
mov r8, qword [rax + 8]
mov rcx, qword [0x141f49060]
cmp edx, 0x4d7286a2
jae 0x1400db069
mov rcx, qword [0x141f49060]
jmp 0x1400db0e5
mov eax, dword [str.WZsT:]
xor edx, edx
div dword [0x141f45954]
or eax, 0x9422ec9d
imul rcx, rax, 0x17b8a97
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1a
cmp eax, 0x930606d6
je 0x1400db120
mov rax, qword [r14]
mov ecx, 0xa997a7bf
nop word cs:[rax + rax]
mov edx, dword [0x141f45958]
or edx, dword [0x141f4595c]
add edx, 0x63162f94
imul rdx, rcx
shr rdx, 0x3e
xor edx, 0x8775d63e
cmp edx, 0xe28f0665
ja 0x1400db160
test rax, rax
je 0x1400db1fe
mov r15, qword [0x141f49060]
mov eax, dword [0x141f45960]
xor edx, edx
div dword [0x141f45964]
imul eax, eax, 0x29d99d80
cmp eax, 0x906beac5
je 0x1400db1e6
mov eax, dword [0x141f45968]
imul eax, dword [0x141f4596c]
imul esi, eax, 0x2862833c
add esi, 0x54e68346
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x57ab1adf
jbe 0x1400db1fe
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400db1af
xor eax, eax
test al, al
movabs rdi, 0x8000000000000000
jne 0x1400db232
mov eax, dword [0x141f45970]
xor eax, dword [0x141f45974]
or eax, 0x1cebb7ae
add eax, 0x40592d27
mov qword [r14], 0
cmp eax, 0x5fedc4a4
jbe 0x1400db23b
mov qword [r14], 0
jmp 0x1400db20e
mov eax, dword [0x141f45978]
xor eax, dword [0x141f4597c]
xor eax, 0x72165dda
add eax, 0xa2f690be
mov ecx, 0xd69084f5
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xde4852b2
ja 0x1400db281
mov eax, dword [0x141f45980]
or eax, dword [0x141f45984]
mov qword [r13 + 0x50], 8
cmp eax, 0xc55082a0
jne 0x1400db28b
mov qword [r13 + 0x50], 8
jmp 0x1400db266
mov eax, dword [0x141f45988]
and eax, dword [0x141f4598c]
imul eax, eax, 0x7f6c5c33
or eax, 0x69149d85
xor eax, 0x5d8fe15a
cmp eax, 0x353c05c0
ja 0x1400db2d0
mov eax, dword [0x141f45990]
imul eax, dword [0x141f45994]
imul eax, eax, 0x43f349fa
mov qword [r13 + 0x58], 0
cmp eax, 0xc6001f88
jne 0x1400db337
mov qword [r13 + 0x58], 0
jmp 0x1400db2ae
mov eax, dword [0x141f459f0]
xor edx, edx
div dword [0x141f459f4]
mov r15d, eax
add r15d, 0xde69d471
and r15d, 0xd70b9f36
add r15d, 0x774ebabd
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r15d, 0xea0cd915
jb 0x1400db337
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400db2da
xor eax, eax
mov r15, qword [rbp + 0x98]
mov r8d, dword [rbp + 0x88]
nop word [rax + rax]
test al, al
jne 0x1400db350
lea r14, [r13 + 0x98]
lea rbx, [r13 + 0xb8]
mov ecx, 0x8e820d13
nop word [rax + rax]
mov eax, dword [0x141f45a20]
xor edx, edx
div dword [0x141f45a24]
imul eax, eax, 0x6218893
xor eax, 0x7a02efa6
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xedd5af11
ja 0x1400db370
mov eax, dword [rbp + 0x48]
test eax, eax
je 0x1400db4f3
cmp eax, 1
jne 0x1400db3c0
mov r12b, 1
test r8d, r8d
jne 0x1400db448
jmp 0x1400db4ff
mov eax, dword [0x141f45a28]
add eax, dword [0x141f45a2c]
and eax, 0x4687dd62
xor eax, 0x9a520516
imul eax, eax, 0xb2a8ecf8
cmp eax, 0x37951b7e
je 0x1400db3c0
mov rax, qword [r14]
nop word cs:[rax + rax]
mov ecx, dword [0x141f45a30]
and ecx, dword [0x141f45a34]
or ecx, 0x502a8801
and ecx, 0x507ac8df
cmp rax, rdi
sete r12b
cmp ecx, 0x32a597a3
je 0x1400db3f0
nop word [rax + rax]
mov eax, dword [0x141f45a38]
xor edx, edx
div dword [str.uq:y]
or eax, 0x41d4ba27
and eax, 0x45d7fea7
cmp eax, 0x9563656
jb 0x1400db420
test r8d, r8d
je 0x1400db4ff
cmp r8d, 1
je 0x1400db53e
cmp r8d, 2
jne 0x1400db4c6
nop dword [rax + rax]
mov eax, dword [0x141f45a48]
xor eax, dword [0x141f45a4c]
imul eax, eax, 0x231fc76e
cmp eax, 0xcf41d490
je 0x1400db460
mov rcx, qword [rbx]
mov eax, dword [0x141f45a50]
xor edx, edx
div dword [0x141f45a54]
nop word [rax + rax]
mov eax, dword [0x141f45a58]
xor edx, edx
div dword [0x141f45a5c]
xor eax, 0x7eb33f7e
imul edx, eax, 0x827146f0
cmp rcx, rdi
sete al
cmp edx, 0x24a52521
jb 0x1400db490
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400db4c0
jmp 0x1400db501
mov eax, dword [0x141f45a40]
xor eax, dword [0x141f45a44]
add eax, 0x61506b0
xor eax, 0x6b99a6c1
imul rax, rax, 0x86645a9
shr rax, 0x38
cmp eax, 0x29835d28
ja 0x1400db4c6
jmp 0x1400d7ed1
xor r12d, r12d
test r8d, r8d
jne 0x1400db448
xor eax, eax
or al, r12b
nop word cs:[rax + rax]
mov ecx, dword [0x141f45a60]
and ecx, dword [0x141f45a64]
and ecx, 0x4c92be5
add ecx, 0x5b463d3b
and ecx, 0x3d8b0b61
cmp ecx, 0x5598ff59
je 0x1400db510
test al, al
je 0x1400dbbad
sub rsp, 0x20
mov rsi, qword [rbp - 0x28]
mov rcx, rsi
mov rdx, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x40]
mov r9, qword [rbp + 0xb0]
call fcn.1400dc790
add rsp, 0x20
mov r11, qword [rsi]
cmp r11, rdi
jne 0x1400db620
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400db580
mov rcx, qword [r14]
mov r8d, 0x86461df1
mov r15, qword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [str.rLh]
xor edx, edx
div dword [0x141f45a94]
add eax, 0x4f291a89
imul rax, r8
shr rax, 0x3d
imul eax, eax, 0xadfd3669
cmp eax, 0x47d39586
jb 0x1400db5a0
shl rcx, 1
test rcx, rcx
je 0x1400dbb38
nop word cs:[rax + rax]
mov eax, dword [0x141f45a98]
imul eax, dword [0x141f45a9c]
or eax, 0x4edc56cf
and eax, 0xefdc5fef
cmp eax, 0xb26a0f8f
ja 0x1400db5e0
mov rsi, qword [r13 + 0xa0]
xor eax, eax
test al, al
je 0x1400dbaa2
jmp 0x1400dbadd
mov eax, dword [0x141f45a68]
xor eax, dword [0x141f45a6c]
or eax, 0x1780800c
and eax, 0x17b0acac
add eax, 0x8d7315c0
cmp eax, 0xb736c282
ja 0x1400db620
mov rax, qword [rbp - 0x28]
mov rsi, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x1400db706
lea r9, [rsi + rcx*2]
xor r8d, r8d
mov r10, rsi
nop word cs:[rax + rax]
mov eax, dword [0x141f45a70]
and eax, dword [0x141f45a74]
xor eax, 0x2000
and eax, 0x2020
cmp eax, 0xade7bc4f
je 0x1400db670
cmp word [r10], 0
je 0x1400db711
mov eax, dword [0x141f45a78]
xor edx, edx
div dword [0x141f45a7c]
nop word cs:[rax + rax]
mov eax, dword [0x141f45a80]
and eax, dword [0x141f45a84]
and eax, 0x3269a4ad
cmp eax, 0xa6d757b5
je 0x1400db6b0
add r10, 2
inc r8
mov eax, dword [0x141f45a88]
imul eax, dword [0x141f45a8c]
and eax, 0x4b82fa41
xor eax, 0x266c4006
add eax, 0x3116150e
cmp eax, 0x14e447c2
jb 0x1400db6cf
cmp r10, r9
jne 0x1400db670
mov rdi, rbx
mov rbx, r11
mov r8, rcx
jmp 0x1400db717
mov rdi, rbx
mov rbx, r11
xor r8d, r8d
jmp 0x1400db717
mov rdi, rbx
mov rbx, r11
sub rsp, 0x20
mov r15, qword [rbp + 8]
mov rcx, r15
mov rdx, rsi
call fcn.1400918d0
add rsp, 0x20
mov rdx, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x88]
mov r15, rdx
mov r9, rdi
call fcn.1400dd4a0
add rsp, 0x20
test r12b, r12b
je 0x1400db908
mov eax, dword [0x141f45ac0]
xor edx, edx
div dword [str.a_vr]
or eax, 0xc7347b9f
and eax, 0xe7b4fb9f
cmp eax, 0x9043533d
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp + 8]
jne 0x1400db790
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
nop dword [rax]
mov eax, dword [0x141f45ac8]
sub eax, dword [0x141f45acc]
add eax, 0xd8615f4c
xor eax, 0xf67cfd30
add eax, 0x6078b3de
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
cmp eax, 0x18c5397e
jb 0x1400db790
mov eax, dword [0x141f45ad0]
mov ecx, dword [0x141f45ad4]
add eax, ecx
add eax, 0x64dd53cf
cmp eax, 0xc4eb57d2
jb 0x1400db7c0
mov rax, qword [r14]
nop dword [rax]
mov ecx, dword [0x141f45ad8]
and ecx, dword [0x141f45adc]
xor ecx, 0x20916c29
add ecx, 0x231b4ad5
and ecx, 0x48b138f0
cmp ecx, 0x4f631378
je 0x1400db7e0
shl rax, 1
test rax, rax
je 0x1400db8c6
mov r15, rbx
mov rdi, qword [r13 + 0xa0]
mov rbx, qword [0x141f49060]
mov eax, dword [0x141f45ae0]
or eax, dword [0x141f45ae4]
or eax, 0x2d7d1e8b
add eax, 0x29f9804c
or eax, 0xd448cc11
cmp eax, 0x3d92b5b1
jae 0x1400db85b
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141f45ae8]
or eax, dword [0x141f45aec]
xor eax, 0x958c969b
imul eax, eax, 0x40d323f3
shr eax, 3
imul r13, rax, 0x243959c9
shr r13, 0x3a
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r13d, 0xcb7d1958
ja 0x1400db862
mov r13, qword [rbp + 0x70]
mov rdx, qword [rbp - 0x20]
mov rbx, r15
mov eax, dword [0x141f45af0]
add eax, dword [0x141f45af4]
and eax, 0xfdd67cd9
cmp eax, 0x90f9cf7a
je 0x1400db8ae
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141f45af8]
or eax, dword [0x141f45afc]
or eax, 0x7d5f9b67
imul eax, eax, 0x5cf84f00
add eax, 0x4194d463
cmp eax, 0xd3a698bb
jae 0x1400db8e0
jmp 0x1400db9ed
mov rcx, qword [rbp + 8]
nop dword [rax]
mov eax, dword [0x141f45b00]
and eax, dword [0x141f45b04]
imul eax, eax, 0x36bc364
add eax, 0x8046e8d7
or eax, 0xaaf7c770
cmp eax, 0x3ed8400b
jb 0x1400db910
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov ecx, dword [0x141f45b08]
mov edx, dword [0x141f45b0c]
add ecx, edx
add ecx, 0xcfece5f5
imul rcx, rcx, 0x64e4098b
shr rcx, 0x3b
add ecx, 0x4f3fd58d
cmp ecx, 0xb9e7d65a
ja 0x1400db940
test rax, rax
je 0x1400db9ed
mov eax, dword [0x141f45b10]
imul eax, dword [0x141f45b14]
mov ecx, 0xb4ecad67
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x33fb69c7
imul rax, rax, 0x4f8018f
shr rax, 0x38
cmp eax, 0xb59c322e
jbe 0x1400db9b0
mov rax, qword [0x141f49060]
nop dword [rax + rax]
mov eax, dword [0x141f45b18]
or eax, dword [0x141f45b1c]
or eax, 0x5619672f
imul rax, rax, 0x21d0ed85
shr rax, 0x3c
mov rcx, qword [0x141f49060]
cmp eax, 0xbfe1308e
je 0x1400db9b0
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test rbx, rbx
mov r15, qword [rbp + 0x98]
je 0x1400dbb90
mov rdi, qword [0x141f49060]
mov eax, dword [0x141f45b20]
add eax, dword [0x141f45b24]
imul eax, eax, 0xd478250
add eax, 0xe847b312
cmp eax, 0x775468e5
jae 0x1400dba38
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov r14d, dword [0x141f45b28]
and r14d, dword [0x141f45b2c]
add r14d, 0xd5dfb4b
or r14d, 0x83f5b044
and r14d, 0x83fdbade
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp r14d, 0x250e4790
jb 0x1400dba40
nop
mov eax, dword [0x141f45b30]
or eax, dword [0x141f45b34]
or eax, 0x66ef2ff5
and eax, 0x77ef2ff5
cmp eax, 0x96a06e3d
ja 0x1400dba80
jmp 0x1400dbb90
mov eax, dword [0x141f45aa0]
xor eax, dword [0x141f45aa4]
mov edi, 0xa0454c37
imul rdi, rax
shr rdi, 0x3f
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x447672df
jne 0x1400dbaf9
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400dbaa2
mov eax, 0x8cdd060b
movabs rdi, 0x8000000000000000
nop dword [rax + rax]
mov ecx, dword [0x141f45aa8]
xor ecx, dword [0x141f45aac]
xor ecx, 0xcd82229
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x747dfa2c
cmp ecx, 0xf53a7b3e
ja 0x1400dbb10
mov eax, dword [0x141f45ab0]
or eax, dword [0x141f45ab4]
xor eax, 0x8048d552
and eax, 0xade9fd72
add eax, 0xa6904619
cmp eax, 0xd88ec167
jbe 0x1400dbb60
mov qword [r14], rdi
nop dword [rax]
mov eax, dword [0x141f45ab8]
sub eax, dword [0x141f45abc]
and eax, 0x64921288
xor eax, 0x2c223c47
imul eax, eax, 0xda85ded5
mov qword [r14], rdi
cmp eax, 0x7ad3b571
jae 0x1400dbb60
nop word cs:[rax + rax]
mov eax, dword [0x141f45b38]
and eax, dword [0x141f45b3c]
add eax, 0xabae7699
or eax, 0xb6976212
cmp eax, 0x9f411a6e
je 0x1400dbb90
mov eax, 0xb73d1a81
mov r12, qword [rbp + 0x30]
nop word cs:[rax + rax]
mov ecx, dword [0x141f45b40]
or ecx, dword [0x141f45b44]
add ecx, 0x6b7d3a78
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x548c56a6
je 0x1400dbbc0
jmp 0x1400dbc80
mov esi, dword [0x141f45b50]
and esi, dword [0x141f45b54]
xor esi, 0x181e00a
or esi, 0xbe7e1514
add esi, 0x17662ae6
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x8fb07f18
jae 0x1400dbc30
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400dbbe7
mov eax, dword [0x141f45b58]
and eax, dword [0x141f45b5c]
xor eax, 0x1dde0cba
imul eax, eax, 0x17c42711
cmp eax, 0x42814530
je 0x1400dbc30
nop
mov eax, dword [0x141f45b60]
xor eax, dword [0x141f45b64]
imul rax, rax, 0x44bf36f7
shr rax, 0x3d
add eax, 0x59672433
and eax, 0x9450015
cmp eax, 0x98cd1063
ja 0x1400dbc50
nop dword [rax + rax]
mov eax, dword [0x141f45b68]
imul eax, dword [0x141f45b6c]
add eax, 0xfc0db4aa
and eax, 0x8ed3aede
cmp eax, 0x34f6c508
ja 0x1400dbc80
movzx eax, byte [r15 + 8]
lea rdi, [r13 + 0x60]
nop word [rax + rax]
mov ecx, dword [0x141f45b70]
imul ecx, dword [0x141f45b74]
or ecx, 0x2ba9e53f
add ecx, 0xf5fb04a
and ecx, 0x7b4da3c0
cmp ecx, 0x46b7ad42
jb 0x1400dbcb0
test eax, eax
mov r15, qword [rbp - 0x60]
je 0x1400dc0f2
cmp eax, 1
je 0x1400dbd7f
cmp eax, 2
jne 0x1400dbfe0
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400dbd00
mov rcx, qword [rdi]
mov eax, dword [0x141f45b80]
xor edx, edx
div dword [0x141f45b84]
mov eax, 0xa00f0b55
nop word [rax + rax]
mov edx, dword [0x141f45b88]
xor edx, dword [0x141f45b8c]
imul rdx, rax
shr rdx, 0x3d
cmp edx, 0xa6a6eb14
je 0x1400dbd20
nop dword [rax]
mov eax, dword [0x141f45b90]
and eax, dword [0x141f45b94]
or eax, 0x8ee5674a
imul rdx, rax, 0x509926a7
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
cmp eax, 0x216ef7a9
je 0x1400dbd40
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1400dc0f2
mov eax, 0x9e5645e9
nop word cs:[rax + rax]
mov ecx, dword [0x141f45ba8]
sub ecx, dword [0x141f45bac]
xor ecx, 0x6bc5b1ae
imul rcx, rax
shr rcx, 0x3d
xor ecx, 0x809b4bf9
cmp ecx, 0x9188b20d
ja 0x1400dbd90
mov rax, qword [r13 + 0xf8]
nop
mov ecx, dword [0x141f45bb0]
xor ecx, dword [0x141f45bb4]
imul ecx, ecx, 0x5115cb41
add ecx, 0xb09b4567
xor ecx, 0x1dc13038
cmp ecx, 0xc847570a
jb 0x1400dbdc0
test rax, rax
je 0x1400dc008
mov rsi, qword [rax + 0x10]
mov eax, dword [0x141f45bc8]
and eax, dword [0x141f45bcc]
imul eax, eax, 0x5bfb9922
mov ecx, 0x87dedf73
imul rcx, rax
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
xor eax, 0x688a515f
cmp eax, 0xcae776a2
jbe 0x1400dbe53
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r12
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
mov rbx, qword [sym.imp.psapi.dll_GetModuleFileNameExW]
nop word [rax + rax]
mov r14d, dword [0x141f45bd0]
or r14d, dword [0x141f45bd4]
add r14d, 0x57588de5
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r12
mov r9d, 0x105
call rbx
add rsp, 0x20
cmp r14d, 0xec859708
ja 0x1400dbe60
xor ecx, ecx
mov r9d, 0x808edec7
mov r10d, 0xce3ab0f1
nop word cs:[rax + rax]
mov eax, dword [0x141f45bd8]
add eax, dword [0x141f45bdc]
imul rax, r9
shr rax, 0x33
xor eax, 0xa125391e
add eax, 0xb98107d7
cmp eax, 0xfe6578db
ja 0x1400dbec0
cmp word [r12 + rcx*2], 0
je 0x1400dc017
lea r8, [rcx + 1]
mov eax, dword [0x141f45be0]
xor edx, edx
div dword [0x141f45be4]
xor eax, 0x9803b660
imul eax, eax, 0x64b36a42
cmp eax, 0x7b48d978
je 0x1400dbef5
cmp word [r12 + rcx*2 + 2], 0
je 0x1400dc01a
mov eax, dword [0x141f45be8]
imul eax, dword [0x141f45bec]
add eax, 0xd42e61f0
imul rax, rax, 0x5571a131
shr rax, 0x3c
or eax, 0xcc75f90a
cmp eax, 0xeca0e234
ja 0x1400dbf22
lea r8, [rcx + 2]
nop
mov eax, dword [0x141f45bf0]
add eax, dword [0x141f45bf4]
or eax, 0x2654c399
add eax, 0x928101cf
and eax, 0xda1251e8
cmp eax, 0x38961a5a
jb 0x1400dbf50
movzx r11d, word [r12 + rcx*2 + 4]
mov eax, dword [0x141f45bf8]
xor edx, edx
div dword [0x141f45bfc]
nop word cs:[rax + rax]
mov eax, dword [0x141f45c00]
xor eax, dword [str.D_I_vn]
or eax, 0xfb718b5c
imul rax, r10
shr rax, 0x3f
xor eax, 0x46aaf5d5
cmp eax, 0x81d35560
ja 0x1400dbf90
test r11w, r11w
je 0x1400dc01a
add rcx, 3
cmp rcx, 0x105
jne 0x1400dbec0
mov r8d, 0x105
jmp 0x1400dc01a
mov eax, dword [0x141f45b78]
xor eax, dword [0x141f45b7c]
add eax, 0x1dbab822
or eax, 0xcec55765
imul eax, eax, 0x85abfb77
cmp eax, 0xf3415524
je 0x1400dbfe0
jmp 0x1400d7ed1
movabs rax, 0x8000000000000000
mov qword [r15], rax
jmp 0x1400dc030
mov r8, rcx
sub rsp, 0x20
mov rcx, r15
mov rdx, r12
call fcn.1400918d0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141f45c08]
or eax, dword [0x141f45c0c]
and eax, 0xe2c5fff3
imul eax, eax, 0x85cf0021
cmp eax, 0x88ff6015
je 0x1400dc030
mov rax, qword [rdi]
shl rax, 1
test rax, rax
je 0x1400dc074
mov r8, qword [r13 + 0x68]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [str._JMO]
add eax, dword [0x141f45c14]
or eax, 0x939dffb7
add eax, 0xd6a60500
cmp eax, 0x267e33ce
jae 0x1400dc0a1
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
xor eax, eax
nop word cs:[rax + rax]
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
test al, al
jne 0x1400dc0b0
mov eax, 0x9f5f3287
nop dword [rax]
mov ecx, dword [0x141f45c18]
xor ecx, dword [0x141f45c1c]
or ecx, 0x7c647cb7
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x3eabca4b
je 0x1400dc0d0
xor eax, eax
mov rcx, qword [rbp - 0x68]
sub rcx, qword [r13 + 0x120]
cmovae rax, rcx
mov ecx, dword [0x141f45bb8]
imul ecx, dword [0x141f45bbc]
add ecx, 0xce102111
and ecx, 0x2679faad
xor ecx, 0x413b34f5
cmp ecx, 0xa3fb28f9
jbe 0x1400dc140
mov qword [r13 + 0x128], rax
mov byte [r13 + 0x154], 1
nop dword [rax]
mov ecx, dword [str.f__]
mov edx, dword [0x141f45bc4]
add ecx, edx
add ecx, 0x3e51b5d3
or ecx, 0xe83b2533
mov qword [r13 + 0x128], rax
mov byte [r13 + 0x154], 1
cmp ecx, 0xf30dc694
ja 0x1400dc140
lea rsp, [rbp + 0xb8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret