Function at 0x1400cf160
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x58], r9
mov qword [rbp + 0x70], r8
mov qword [rbp - 0x60], rcx
mov eax, dword [0x141dd7888]
and eax, dword [0x141dd788c]
and eax, 0xcd359710
shr eax, 4
imul rax, rax, 0x854f24d
shr rax, 0x34
or eax, 0x4297f6ab
cmp eax, 0x28f1dac5
jae 0x1400cf286
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x78], rdx
nop word [rax + rax]
mov eax, dword [0x141dd7890]
xor edx, edx
div dword [0x141dd7894]
or eax, 0x67b3397c
add eax, 0xd902ddf
imul rcx, rax, 0xf10accf
shr rcx, 0x3a
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xa0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x4b974016
ja 0x1400cf290
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x10], r13
mov qword [rbp - 8], r12
mov qword [rbp - 0x38], r15
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x18], r11
mov qword [rbp - 0x48], r10
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x10], r8
mov qword [rbp + 8], rax
mov qword [rbp - 0x18], rdx
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x210
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x2b0
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x470
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x410
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x2d0
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xa8], rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov rax, qword [rbp + 0x78]
cmp byte [rax], 0
mov rsi, qword [rbp - 0x60]
je 0x1400cf735
nop dword [rax + rax]
mov eax, dword [0x141dd78b8]
add eax, dword [0x141dd78bc]
xor eax, 0x9f351d64
imul eax, eax, 0x1aef953a
or eax, 0x196c500f
cmp eax, 0x43e2021b
jb 0x1400cf560
mov dword [rdx], 0
mov eax, dword [0x141dd78c0]
sub eax, dword [0x141dd78c4]
or eax, 0xa48e51a
xor eax, 0x503ff3d0
add eax, 0x5cb7d57a
cmp eax, 0xbfe6ca1d
jbe 0x1400cf5e0
mov dword [rdx + 4], 0
mov qword [r12], 0
mov qword [r13], 0
mov qword [rdi], 0
mov qword [r15], 0
mov qword [rbx], 0
nop word [rax + rax]
mov eax, dword [0x141dd78c8]
xor eax, dword [0x141dd78cc]
add eax, 0x747b9383
mov dword [rdx + 4], 0
mov qword [r12], 0
mov qword [r13], 0
mov qword [rdi], 0
mov qword [r15], 0
mov qword [rbx], 0
cmp eax, 0x1191ae66
ja 0x1400cf5e0
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x1400cf6c4
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov r8, rdx
mov r9, r12
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x141dd78d0]
imul ecx, dword [0x141dd78d4]
or ecx, 0x1757e7fa
and ecx, 0xd777f7fa
cmp ecx, 0x3e2f7f69
je 0x1400cf660
test eax, eax
jne 0x1400cf6c4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd78d8]
xor edx, edx
div dword [0x141dd78dc]
xor eax, 0x7cbdf57a
add eax, 0xcd989be3
and eax, 0x74ea0d79
cmp eax, 0xa1be8637
ja 0x1400cf6a0
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
nop dword [rax + rax]
mov ecx, dword [0x141dd78e0]
or ecx, dword [0x141dd78e4]
or ecx, 0x65353cd1
imul ecx, ecx, 0xb92f19bd
cmp ecx, 0x4760c328
je 0x1400cf6e0
test eax, eax
jne 0x1400d0870
mov eax, dword [0x141dd78e8]
imul eax, dword [0x141dd78ec]
xor eax, 0x94062d2
or eax, 0x86a59c0d
imul eax, eax, 0x7c132102
cmp eax, 0x64027ef6
jne 0x1400d0832
jmp 0x1400d0860
mov qword [rbp + 0x70], r14
nop dword [rax]
mov eax, dword [0x141dd7898]
xor edx, edx
div dword [0x141dd789c]
and eax, 0x10aeeb1d
cmp eax, 0x3038d9c4
je 0x1400cf740
mov r15, qword [rbp + 0x60]
mov r9, qword [rbp + 0x78]
mov r14, qword [rbp + 0x88]
nop dword [rax]
mov eax, dword [0x141dd78a0]
xor edx, edx
div dword [str.qG]
imul eax, eax, 0xb24734d2
or eax, 0x36cdd67d
and eax, 0xb6cff77f
cmp eax, 0xcf079445
ja 0x1400cf770
movzx ecx, byte [r9 + 1]
mov eax, dword [0x141dd78a8]
xor edx, edx
div dword [0x141dd78ac]
nop dword [rax + rax]
mov eax, dword [0x141dd78b0]
sub eax, dword [0x141dd78b4]
xor eax, 0x82078804
and eax, 0xaa27ae06
imul eax, eax, 0x99e2dafe
cmp eax, 0xd54b7a4
je 0x1400cf7b0
test cl, cl
je 0x1400cf994
nop dword [rax + rax]
mov eax, dword [0x141dd7948]
sub eax, dword [0x141dd794c]
imul eax, eax, 0x408cab4a
cmp eax, 0xb367ff86
je 0x1400cf7e0
nop dword [rax]
mov eax, dword [0x141dd7950]
sub eax, dword [0x141dd7954]
or eax, 0xf2eff7ff
and eax, 0xf6ffffff
cmp eax, 0xeaa23e4e
je 0x1400cf800
mov eax, 0xaf3a7325
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7958]
sub ecx, dword [0x141dd795c]
or ecx, 0xc6a7ee7b
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x4492a603
je 0x1400cf830
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x1400cf960
mov r12, r9
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
mov rdx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
mov ecx, eax
mov eax, dword [0x141dd7960]
xor edx, edx
div dword [0x141dd7964]
imul eax, eax, 0xdf070102
imul rax, rax, 0x4822641b
shr rax, 0x3d
cmp eax, 0x77988bd0
je 0x1400cf880
test ecx, ecx
je 0x1400cf8d2
movups xmm0, xmmword [rsi + 0x140]
movups xmmword [rsi + 0x130], xmm0
mov rax, qword [rbp + 0xa8]
movups xmm0, xmmword [rax + 0x18]
movups xmmword [rsi + 0x140], xmm0
mov r9, r12
jmp 0x1400cf960
mov eax, dword [0x141dd7968]
xor edx, edx
div dword [0x141dd796c]
or eax, 0x4006603
and eax, 0x5447663
cmp eax, 0x1fc34693
jne 0x1400cf8ff
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7970]
or eax, dword [0x141dd7974]
and eax, 0xd4b0d444
imul ebx, eax, 0x1d863057
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp ebx, 0x3293d5f9
je 0x1400cf910
mov r9, r12
nop dword [rax]
mov eax, dword [0x141dd7978]
sub eax, dword [0x141dd797c]
imul eax, eax, 0x9b2232de
cmp eax, 0x6045a130
je 0x1400cf940
nop dword [rax]
mov eax, dword [0x141dd7980]
xor eax, dword [0x141dd7984]
imul eax, eax, 0x81117a64
xor eax, 0x9e17e420
imul rax, rax, 0x1d092807
shr rax, 0x3c
cmp eax, 0x7dcf4d05
je 0x1400cf960
mov al, 1
nop dword [rax + rax]
test al, al
je 0x1400cf990
mov eax, dword [0x141dd7930]
xor edx, edx
div dword [0x141dd7934]
mov eax, 0x9ffc4a11
nop word [rax + rax]
mov ecx, dword [0x141dd7938]
imul ecx, dword [0x141dd793c]
or ecx, 0xccf960ee
imul rcx, rax
shr rcx, 0x3d
add ecx, 0xa5a9f7b4
cmp ecx, 0x573f2d3d
jb 0x1400cf9b0
movzx eax, byte [r9 + 2]
nop
mov ecx, dword [str.aJH_]
and ecx, dword [0x141dd7944]
add ecx, 0xdfc273f4
and ecx, 0x4a123ed8
add ecx, 0x85692755
cmp ecx, 0x5adc8e8
jb 0x1400cf9e0
test al, al
je 0x1400cfa7f
mov eax, dword [0x141dd83d8]
xor eax, dword [0x141dd83dc]
and eax, 0x10260802
or eax, 0x2e11e0c0
imul eax, eax, 0x110709df
cmp eax, 0x62da2eda
mov rcx, qword [rbp + 0x128]
jae 0x1400cfa40
mov qword [rsi + 0xe8], rcx
nop dword [rax + rax]
mov eax, dword [0x141dd83e0]
xor edx, edx
div dword [0x141dd83e4]
or eax, 0x4c08a6de
xor eax, 0xb560f2d2
imul rax, rax, 0x188a3a61
shr rax, 0x3c
mov qword [rsi + 0xe8], rcx
cmp eax, 0xd777505a
ja 0x1400cfa40
mov rax, qword [rbp + 0x120]
mov qword [rsi + 0xf0], rax
movzx eax, byte [r9 + 3]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400cfa90
mov rcx, qword [rsi + 0xf8]
nop dword [rax + rax]
mov edx, dword [0x141dd7988]
and edx, dword [0x141dd798c]
and edx, 0x3bd9cb5a
add edx, 0xe3cb224a
cmp edx, 0xc9850cc9
ja 0x1400cfaa0
movabs r13, 0x8000000000000000
test rcx, rcx
je 0x1400cff33
nop word cs:[rax + rax]
mov edx, dword [0x141dd7990]
and edx, dword [0x141dd7994]
or edx, 0x40
and edx, 0x84a08164
xor edx, 0x64cf604c
cmp edx, 0x42e85c02
jb 0x1400cfae0
mov rdi, qword [rcx + 0x10]
nop word [rax + rax]
mov ecx, dword [0x141dd7998]
and ecx, dword [0x141dd799c]
and ecx, 0x906e36ab
cmp ecx, 0x68260160
je 0x1400cfb10
test eax, eax
je 0x1400cff33
cmp eax, 1
je 0x1400cfbc0
mov eax, dword [0x141dd79a0]
xor edx, edx
div dword [0x141dd79a4]
nop dword [rax]
mov eax, dword [0x141dd79a8]
xor eax, dword [0x141dd79ac]
xor eax, 0x44f4f4bc
imul eax, eax, 0x989facda
add eax, 0x5742fcfa
cmp eax, 0x545ff76e
jb 0x1400cfb50
mov rcx, qword [rsi + 0x80]
mov eax, dword [0x141dd79b0]
xor edx, edx
div dword [0x141dd79b4]
nop dword [rax + rax]
mov eax, dword [0x141dd79b8]
imul eax, dword [0x141dd79bc]
add eax, 0x64f9e1f3
xor eax, 0xb28be940
imul eax, eax, 0x4c359611
cmp eax, 0x1679fa0e
jb 0x1400cfb90
cmp rcx, r13
jne 0x1400cff33
nop dword [rax]
mov eax, dword [0x141dd79c0]
sub eax, dword [0x141dd79c4]
imul eax, eax, 0x217ac4
cmp eax, 0x1fb7f2e0
je 0x1400cfbc0
mov r12, r9
mov eax, dword [0x141dd79c8]
xor eax, dword [0x141dd79cc]
imul eax, eax, 0x9808b90b
cmp eax, 0xd3370517
mov rbx, qword [rbp + 0x70]
je 0x1400cfc22
mov eax, dword [0x141dd79d0]
add eax, dword [0x141dd79d4]
xor eax, 0x56265cbd
add eax, 0x4fb81818
and eax, 0xa36d3aac
mov qword [rbx], 0
cmp eax, 0x1fd7c80d
jbe 0x1400cfc2b
mov qword [rbx], 0
jmp 0x1400cfbf9
mov eax, dword [0x141dd79d8]
xor eax, dword [0x141dd79dc]
imul eax, eax, 0x6b181550
or eax, 0x20ef6bcc
cmp eax, 0x7b13cf1d
je 0x1400cfc67
sub rsp, 0x20
mov rcx, rdi
mov edx, 8
mov r8, rbx
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
xor ecx, ecx
test cl, cl
je 0x1400cfc81
sub rsp, 0x20
mov rcx, rdi
mov edx, 8
mov r8, rbx
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
jmp 0x1400cfc49
test eax, eax
je 0x1400cfef7
mov r9, r12
nop dword [rax]
mov eax, dword [0x141dd79e0]
xor eax, dword [0x141dd79e4]
and eax, 0x48031a4c
or eax, 0xb76c60b3
imul eax, eax, 0x561a1fcf
cmp eax, 0xe6705918
ja 0x1400cfc90
mov r14, qword [rbx]
lea rax, [r14 + 1]
cmp rax, 2
jb 0x1400cff08
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400cfcd0
mov eax, dword [0x141dd79e8]
xor eax, dword [0x141dd79ec]
imul eax, eax, 0xda3f1598
add eax, 0xe2255560
cmp eax, 0x81f2edcb
mov rcx, qword [rbp + 0x90]
jb 0x1400cfd21
mov eax, dword [0x141dd79f0]
and eax, dword [0x141dd79f4]
or eax, 0x761c2e2b
add eax, 0x324cb708
xor eax, 0xf01113bd
mov dword [rcx], 0
cmp eax, 0x912a7345
jbe 0x1400cfd29
mov dword [rcx], 0
jmp 0x1400cfcf9
sub rsp, 0x30
mov qword [rsp + 0x20], rcx
mov rcx, r14
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
test eax, eax
jne 0x1400cfd75
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
cmp ecx, 0x8007007a
jne 0x1400cfe2b
mov rax, qword [rbp + 0x90]
mov edi, dword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rbx, rax
inc rax
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7a18]
xor ecx, dword [0x141dd7a1c]
imul ecx, ecx, 0x821f946f
or ecx, 0x365c384c
and ecx, 0xbe5efdff
cmp ecx, 0xa6bb49ae
je 0x1400cfda0
cmp rax, 1
ja 0x1400cfe05
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd7a20]
xor eax, dword [0x141dd7a24]
add eax, 0xaec51d5e
imul rax, rax, 0x6f2136f3
shr rax, 0x3e
cmp eax, 0x36fa87f
je 0x1400cfde0
jmp 0x1400cfe2b
mov eax, dword [0x141dd7a28]
or eax, dword [0x141dd7a2c]
and eax, 0xecbe8b57
add eax, 0x8aa51f05
cmp eax, 0x213572d8
jbe 0x1400d0b5f
jmp 0x1400d0b94
mov eax, 0xf80475c1
mov ecx, dword [0x141dd79f8]
imul ecx, dword [0x141dd79fc]
xor ecx, 0xa4bafbb
imul ecx, ecx, 0x3a9cf154
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x8038c2f
ja 0x1400cfe30
mov eax, dword [0x141dd7a00]
xor eax, dword [0x141dd7a04]
imul rax, rax, 0x62f318af
shr rax, 0x3d
or eax, 0xffefbd74
cmp eax, 0xa3c7d822
movabs r13, 0x8000000000000000
jne 0x1400cfe97
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov ebx, dword [0x141dd7a08]
or ebx, dword [0x141dd7a0c]
sub rsp, 0x20
mov rcx, r14
call rdi
add rsp, 0x20
cmp ebx, 0x297dc2bb
je 0x1400cfea0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7a10]
add ecx, dword [0x141dd7a14]
and ecx, 0xa0042284
imul ecx, ecx, 0xc2b5aa0a
cmp ecx, 0x3bd398a2
je 0x1400cfed0
test eax, eax
mov r9, r12
jne 0x1400cff08
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, r12
add rsp, 0x20
mov r14, qword [rbp + 0x88]
nop
mov eax, dword [0x141dd7aa0]
imul eax, dword [0x141dd7aa4]
add eax, 0x84f53b4b
xor eax, 0xa312e1a0
and eax, 0xf712e1ac
cmp eax, 0x5b48e24d
jbe 0x1400cff10
movzx ebx, byte [r9 + 4]
movzx edi, byte [r9 + 5]
movzx r12d, byte [r9 + 6]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400cff50
movzx r8d, byte [r9 + 7]
test r8d, r8d
je 0x1400cfff2
cmp r8d, 1
je 0x1400d01b0
cmp r8d, 2
jne 0x1400d05c0
mov eax, 0x95b7ed71
nop dword [rax + rax]
mov ecx, dword [str.7T7k]
or ecx, dword [0x141dd7b34]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xd45b0a32
imul ecx, ecx, 0xcf59670c
cmp ecx, 0x8e111748
je 0x1400cff80
mov rcx, qword [rsi + 0x40]
mov eax, dword [0x141dd7b38]
xor edx, edx
div dword [0x141dd7b3c]
nop word [rax + rax]
mov eax, dword [0x141dd7b40]
sub eax, dword [0x141dd7b44]
add eax, 0x2e35441
imul rax, rax, 0x2c43db6b
shr rax, 0x3b
imul eax, eax, 0xa8b3a0d9
cmp eax, 0x7360e5fe
je 0x1400cffc0
test rcx, rcx
je 0x1400d01b0
test r12d, r12d
je 0x1400d0098
cmp r12d, 1
je 0x1400d01b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b48]
and eax, dword [0x141dd7b4c]
or eax, 0x7dd4b136
imul eax, eax, 0xa9062f10
add eax, 0x36b8911c
cmp eax, 0x4086d123
jb 0x1400d0010
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b50]
and eax, dword [0x141dd7b54]
add eax, 0x787a330d
xor eax, 0x5108080
or eax, 0xd8e73f5c
cmp eax, 0x664d80f1
je 0x1400d0040
mov rcx, qword [rsi + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b58]
xor edx, edx
div dword [0x141dd7b5c]
or eax, 0xeb77ffe6
xor eax, 0x9760c2c0
cmp eax, 0x538a329d
jb 0x1400d0070
test rcx, rcx
je 0x1400d01b0
test ebx, ebx
je 0x1400d0145
cmp ebx, 1
je 0x1400d01b0
cmp ebx, 2
jne 0x1400d06cd
mov eax, dword [0x141dd7b68]
xor edx, edx
div dword [str._Jeq]
mov eax, dword [0x141dd7b70]
xor eax, dword [0x141dd7b74]
add eax, 0x7d54d070
and eax, 0x2d643067
imul eax, eax, 0xeac26a70
cmp eax, 0x5582feb8
ja 0x1400d00c0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b78]
sub eax, dword [0x141dd7b7c]
and eax, 0xd57635f0
imul rax, rax, 0x68ba6fd9
shr rax, 0x3b
cmp eax, 0x90fde4fc
je 0x1400d00f0
mov rax, qword [rsi + 0x98]
nop word [rax + rax]
mov ecx, dword [0x141dd7b80]
sub ecx, dword [0x141dd7b84]
imul ecx, ecx, 0x37e30a66
add ecx, 0x9b7b838
cmp ecx, 0x9199c84c
ja 0x1400d0120
cmp rax, r13
je 0x1400d01b0
test edi, edi
je 0x1400d1630
cmp edi, 1
je 0x1400d01b0
cmp edi, 2
jne 0x1400d07f8
mov ecx, 0x82b5b17b
mov eax, dword [0x141dd7b90]
xor edx, edx
div dword [0x141dd7b94]
or eax, 0x3efdd90c
xor eax, 0x5e1469d3
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xa3338b2e
ja 0x1400d0160
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d0190
cmp qword [rsi + 0xb8], r13
jne 0x1400d1630
nop word cs:[rax + rax]
mov eax, dword [0x141dd7b98]
imul eax, dword [0x141dd7b9c]
add eax, 0xeda6152a
and eax, 0x54804222
cmp eax, 0xd92c4c08
ja 0x1400d01b0
mov rax, qword [rsi + 0xf8]
mov ecx, 0xa02ba26d
nop word [rax + rax]
mov edx, dword [0x141dd7ba0]
add edx, dword [0x141dd7ba4]
shr edx, 1
imul rdx, rcx
shr rdx, 0x3a
add edx, 0x345edca4
xor edx, 0x6e59f3c8
cmp edx, 0x283fe194
jb 0x1400d01e0
test rax, rax
je 0x1400d1630
mov dword [rbp + 0x70], r8d
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov qword [rbp + 0xa8], rcx
mov edx, 0x1a
mov r8, qword [rbp + 0x68]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1400d15e0
nop
mov eax, dword [0x141dd7ba8]
or eax, dword [0x141dd7bac]
imul eax, eax, 0x6f469945
and eax, 0x132f2c2
cmp eax, 0xfe6a400
je 0x1400d0250
mov rax, qword [rbp + 0x68]
mov rdx, qword [rax]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7bb0]
xor eax, dword [0x141dd7bb4]
imul eax, eax, 0xd7e41e4d
and eax, 0x20a2a000
cmp eax, 0xf7506cbd
ja 0x1400d0280
test rdx, rdx
mov dword [rbp + 0x90], edi
mov dword [rbp + 0x68], ebx
mov dword [rbp + 0x58], r12d
je 0x1400d05e4
mov eax, dword [0x141dd7f80]
imul eax, dword [0x141dd7f84]
imul eax, eax, 0xe799eb18
cmp eax, 0xcc237504
jne 0x1400d02fb
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, qword [rbp + 0xa8]
mov rdi, rdx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, rdi
add rsp, 0x30
mov rdi, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13, qword [rbp + 0xa8]
nop dword [rax]
mov ebx, dword [0x141dd7f88]
or ebx, dword [0x141dd7f8c]
add ebx, 0xd2090e30
or ebx, 0xb6ffda73
add ebx, 0xea7be39e
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r13
mov r12, rdx
mov r8, r14
call rdi
mov rdx, r12
add rsp, 0x30
cmp ebx, 0x4b8b5691
jb 0x1400d0310
nop dword [rax + rax]
mov ecx, dword [0x141dd7f90]
mov edx, dword [0x141dd7f94]
add ecx, edx
add ecx, 0xf6b59175
and ecx, 0xc370aaca
cmp ecx, 0xca0f14ec
je 0x1400d0360
test eax, eax
mov rbx, qword [rbp + 0x28]
mov rdi, qword [rbp + 0x40]
movabs r13, 0x8000000000000000
je 0x1400d06f5
mov edx, dword [r14 + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, qword [rbp + 0xa8]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400d0739
nop
mov eax, dword [0x141dd7fa8]
add eax, dword [0x141dd7fac]
and eax, 0xc8c01028
or eax, 0x333ceb57
xor eax, 0xb44376a4
cmp eax, 0xd3d0451a
ja 0x1400d03d0
movzx eax, word [rdi + 0x24]
mov edx, dword [rbp + 0x70]
mov qword [rbp + 0x48], rax
mov eax, 0x803f26e5
lea rcx, [rsi + 0x30]
mov qword [rbp + 0xa0], rcx
nop dword [rax]
mov ecx, dword [0x141dd7fb0]
xor ecx, dword [0x141dd7fb4]
imul rcx, rax
shr rcx, 0x3d
imul ecx, ecx, 0x41d2764d
add ecx, 0xa5c53e77
cmp ecx, 0x11fb4d6f
jb 0x1400d0410
mov r14d, dword [rdi + 0x28]
mov eax, dword [rdi + 0x48]
mov qword [rbp + 0x98], rax
test edx, edx
mov qword [rbp + 0x88], r14
je 0x1400d3b14
mov r15d, dword [rdi + 0x44]
movzx r12d, word [rdi + 0x40]
cmp edx, 1
je 0x1400d0499
mov rax, qword [rsi + 0x40]
nop word [rax + rax]
mov ecx, dword [0x141dd7fb8]
xor ecx, dword [0x141dd7fbc]
imul ecx, ecx, 0x1056677c
add ecx, 0x43e19d08
cmp ecx, 0xfd3f06d
jb 0x1400d0470
test rax, rax
jne 0x1400d3b14
mov eax, dword [0x141ddb9b0]
cmp eax, 3
je 0x1400d0502
xor eax, eax
test al, al
jne 0x1400d0820
mov eax, dword [0x141dd7fc0]
or eax, dword [str._h_5]
imul edi, eax, 0x90ebb39e
add edi, 0x8a3a8cc0
sub rsp, 0x20
call fcn.1400ffc1a
add rsp, 0x20
cmp edi, 0xda16ef50
ja 0x1400d04ae
nop dword [rax + rax]
mov eax, dword [0x141dd7fc8]
sub eax, dword [0x141dd7fcc]
add eax, 0xe31b715e
or eax, 0xc93811b2
xor eax, 0xde603370
cmp eax, 0xc8f5bc5b
ja 0x1400d04e0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d0510
cmp byte [0x141ddb9b4], 0
je 0x1400d0560
mov eax, dword [0x141dd8080]
xor edx, edx
div dword [0x141dd8084]
and eax, 0x20c1080
xor eax, 0x141ac0
or eax, 0xd9e3c52f
cmp eax, 0x34f8a44f
mov r14, qword [rbp + 0xa8]
jae 0x1400d3823
jmp 0x1400d3856
mov eax, dword [0x141dd7fd0]
xor eax, dword [0x141dd7fd4]
add eax, 0xa936ef5e
cmp eax, 0x7e515adb
ja 0x1400d0560
mov eax, dword [0x141dd7fd8]
xor eax, dword [0x141dd7fdc]
xor eax, 0x5d95df37
mov ecx, 0xdc2ddbd3
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xc7640a74
mov rbx, qword [rbp + 0x20]
mov r14, qword [rbp + 0xa8]
jbe 0x1400d3337
jmp 0x1400d337c
mov eax, dword [0x141dd7b28]
xor edx, edx
div dword [0x141dd7b2c]
and eax, 0x247010c0
xor eax, 0x36560841
cmp eax, 0x6c4a57ef
ja 0x1400d05c0
jmp 0x1400d1242
mov qword [rbp - 0x30], rdx
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xa8]
xor edx, edx
mov rbx, qword [rbp + 0x48]
mov r8, rbx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7bb8]
and ecx, dword [0x141dd7bbc]
imul ecx, ecx, 0x13f21dd5
xor ecx, 0x7e24aaf0
and ecx, 0x7f25eaf8
cmp ecx, 0xb4a05d55
je 0x1400d0620
test eax, eax
js 0x1400d0670
mov eax, dword [0x141dd7bd0]
xor eax, dword [0x141dd7bd4]
add eax, 0x8745b940
and eax, 0x800a2040
cmp eax, 0x31a27b68
jbe 0x1400d1244
jmp 0x1400d1284
mov eax, dword [0x141dd7bc0]
or eax, dword [0x141dd7bc4]
and eax, 0xb94ee1e0
imul eax, eax, 0x578b9360
and eax, 0xe25a7c00
cmp eax, 0xbe3c9b07
ja 0x1400d0670
mov eax, 0xc0bf228d
nop dword [rax + rax]
mov ecx, dword [0x141dd7bc8]
or ecx, dword [0x141dd7bcc]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xe8e117e
imul ecx, ecx, 0x43e8c417
cmp ecx, 0xaf328e7
je 0x1400d06a0
jmp 0x1400d15e0
mov eax, dword [0x141dd7b60]
xor eax, dword [0x141dd7b64]
add eax, 0x1befffdd
xor eax, 0x9998a20b
imul eax, eax, 0x6ceb1e6a
cmp eax, 0x64425cac
jb 0x1400d06cd
jmp 0x1400d1242
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd7fa0]
sub eax, dword [0x141dd7fa4]
imul eax, eax, 0x99771edf
xor eax, 0xec279157
imul eax, eax, 0xac0bd5af
cmp eax, 0xcc79e89f
ja 0x1400d0710
jmp 0x1400d07d0
mov eax, dword [0x141dd8368]
xor eax, dword [0x141dd836c]
imul eax, eax, 0x9898db
add eax, 0xea5dc996
cmp eax, 0x72a25e05
jbe 0x1400d0765
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov ebx, dword [0x141dd8370]
add ebx, dword [0x141dd8374]
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp ebx, 0x5406cc16
je 0x1400d0770
mov eax, 0xe1146269
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8378]
imul ecx, dword [str._nP_y]
add ecx, 0x8512e41b
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xf6012255
je 0x1400d07a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8380]
add eax, dword [0x141dd8384]
imul rax, rax, 0x3ab5af65
shr rax, 0x3c
add eax, 0x20059bbf
cmp eax, 0xe87174ae
ja 0x1400d07d0
jmp 0x1400d15e0
mov eax, dword [0x141dd7b88]
imul eax, dword [0x141dd7b8c]
add eax, 0xd5f562f0
or eax, 0xe6cc0e11
and eax, 0xffcd0e31
cmp eax, 0xc2731683
jb 0x1400d07f8
jmp 0x1400d1242
sub rsp, 0x20
call fcn.1400ffc1a
add rsp, 0x20
jmp 0x1400d04ae
mov edi, dword [0x141dd78f0]
xor edi, dword [0x141dd78f4]
and edi, 0x5b36e67
xor edi, 0xc472a1f9
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0x774e8585
jae 0x1400d0870
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d0832
mov rax, qword [r12]
xor ecx, ecx
nop word cs:[rax + rax]
mov edx, dword [0x141dd78f8]
xor edx, dword [0x141dd78fc]
imul r8d, edx, 0x64eb72ec
add r8d, 0xee6cee21
mov r10, qword [r15]
mov r11, qword [rbx]
mov rdx, qword [rsi + 0x110]
mov rdi, qword [rsi + 0x118]
cmp r10, rdx
cmovb rdx, rcx
cmp r11, rdi
cmovb rdi, rcx
cmp r8d, 0x3dcb9021
ja 0x1400d0880
mov rbx, r10
sub rbx, rdx
mov rcx, qword [r13]
xor edx, edx
test dl, dl
jne 0x1400d0931
mov r15d, dword [0x141dd7900]
and r15d, dword [0x141dd7904]
or r15d, 0x1aebb40e
mov r8, r11
sub r8, rdi
add r8, rbx
mov rdx, 0xffffffffffffffff
cmovae rdx, r8
mov r8, qword [rsi + 0x100]
mov r9, qword [rsi + 0x108]
mov qword [rsi + 0x108], rcx
mov qword [rsi + 0x100], rax
mov qword [rsi + 0x118], r11
mov qword [rsi + 0x110], r10
cmp r15d, 0x97aad3ee
jne 0x1400d094f
mov qword [rsi + 0x108], rcx
mov qword [rsi + 0x100], rax
mov qword [rsi + 0x118], r11
mov qword [rsi + 0x110], r10
jmp 0x1400d08d5
test rdx, rdx
je 0x1400d0a53
xor r10d, r10d
cvtsi2ss xmm1, rdx
mov r11, rdx
shr r11, 1
mov rdi, 0xffffffffffffffff
movss xmm2, dword [0x140102db0]
jmp 0x1400d09b0
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
divss xmm0, xmm3
mov ebx, dword [0x141dd7908]
or ebx, dword [0x141dd790c]
or ebx, 0x2836cd08
add ebx, 0xd8928428
mulss xmm0, xmm2
cmp ebx, 0xc92b62f0
jae 0x1400d0a1b
cmp rax, r8
mov rbx, r8
cmovb rbx, r10
cmp rcx, r9
mov r15, r9
cmovb r15, r10
test rdx, rdx
js 0x1400d09d0
movaps xmm3, xmm1
jmp 0x1400d09e6
mov r12d, edx
and r12d, 1
or r12, r11
xorps xmm3, xmm3
cvtsi2ss xmm3, r12
addss xmm3, xmm3
mov r12, rax
sub r12, rbx
mov rbx, rcx
sub rbx, r15
add rbx, r12
cmovb rbx, rdi
test rbx, rbx
jns 0x1400d0980
mov r15, rbx
shr r15, 1
and ebx, 1
or rbx, r15
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
addss xmm0, xmm0
jmp 0x1400d0988
mov eax, dword [0x141dd7910]
xor eax, dword [str.:P]
and eax, 0x7a24e4f5
xor eax, 0x4a18f3e1
mov ecx, 0xb715599f
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xa914080b
mov rdx, qword [rbp + 0x70]
jbe 0x1400d0aed
jmp 0x1400d0b2a
mov eax, dword [0x141dd7918]
add eax, dword [0x141dd791c]
imul eax, eax, 0x4a3d75c2
mov ecx, 0xaac6087d
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xc54a4c1d
cmp ecx, 0x151d1d3a
jae 0x1400d0a90
mov dword [rsi + 0x150], 0
nop word [rax + rax]
mov eax, dword [0x141dd7920]
and eax, dword [0x141dd7924]
add eax, 0xef56b2cd
or eax, 0x46970c2
mov dword [rsi + 0x150], 0
cmp eax, 0x65a1a89a
jb 0x1400d0a90
mov eax, 0x8ba8a79b
nop dword [rax]
mov ecx, dword [0x141dd7928]
add ecx, dword [0x141dd792c]
imul ecx, ecx, 0xf582d584
imul rcx, rax
shr rcx, 0x3d
xor ecx, 0x51aa2035
cmp ecx, 0x2eb7f48
jb 0x1400d0ac0
jmp 0x1400cf735
mov rax, rdx
shr rax, 1
mov ecx, edx
and ecx, 1
or rcx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
addss xmm1, xmm1
test rdx, rdx
js 0x1400d0b14
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
mulss xmm1, xmm0
movss dword [rsi + 0x150], xmm1
xor eax, eax
test al, al
je 0x1400cf735
mov rax, rdx
shr rax, 1
mov ecx, edx
and ecx, 1
or rcx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
addss xmm1, xmm1
test rdx, rdx
js 0x1400d0b51
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
mulss xmm1, xmm0
movss dword [rsi + 0x150], xmm1
jmp 0x1400d0aed
mov eax, dword [0x141dd7a30]
or eax, dword [0x141dd7a34]
imul r15d, eax, 0x7667f380
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
cmp r15d, 0xd9f1ce19
jne 0x1400d0baf
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
jmp 0x1400d0b5f
mov r13, rax
mov r15, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7a38]
and eax, dword [0x141dd7a3c]
add eax, 0xfcda3316
or eax, 0x5f404bd5
xor eax, 0x60de7af
cmp eax, 0x9b73a5f
jb 0x1400d0bc0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7a40]
add eax, dword [0x141dd7a44]
or eax, 0x3742f2ac
imul eax, eax, 0x1aa7c234
imul rax, rax, 0xe514b25
shr rax, 0x3b
cmp eax, 0x829225fc
ja 0x1400d0bf0
test r13, r13
je 0x1400cfe2b
mov r15, qword [rbp + 0x90]
mov edi, dword [r15]
mov eax, dword [0x141dd7a48]
imul eax, dword [0x141dd7a4c]
or eax, 0x81e8c329
mov ecx, 0x989efee3
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xfd6658f5
ja 0x1400d0c8d
mov ebx, dword [0x141dd7a50]
add ebx, dword [0x141dd7a54]
and ebx, 0x10500004
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rcx, r14
mov edx, 1
mov r8, r13
mov r9d, edi
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
cmp ebx, 0xba8fe6e8
jbe 0x1400d0cb0
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rcx, r14
mov edx, 1
mov r8, r13
mov r9d, edi
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
jmp 0x1400d0c53
mov ecx, dword [0x141dd7a58]
sub ecx, dword [0x141dd7a5c]
xor ecx, 0x81989200
and ecx, 0x81b99209
cmp ecx, 0x142c3835
je 0x1400d0cb0
test eax, eax
mov rbx, qword [rbp + 0x58]
je 0x1400d0d33
mov eax, 0x9df20bcf
nop dword [rax]
mov ecx, dword [0x141dd7a88]
add ecx, dword [0x141dd7a8c]
imul ecx, ecx, 0xf034dd06
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x2f71e96d
cmp ecx, 0x889a0a88
ja 0x1400d0ce0
mov eax, dword [0x141dd7a90]
sub eax, dword [0x141dd7a94]
add eax, 0x33a3fa3c
or eax, 0x54e78960
add eax, 0x296ca58
cmp eax, 0xe012e8aa
jbe 0x1400d0e3e
jmp 0x1400d0e79
mov eax, dword [0x141dd7a60]
sub eax, dword [0x141dd7a64]
imul rax, rax, 0x7db6b55f
shr rax, 0x3d
imul eax, eax, 0x5b092212
cmp eax, 0xbf32bb2b
jne 0x1400d0d65
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov edi, 0x8abb7cc1
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141dd7a68]
sub eax, dword [0x141dd7a6c]
shr eax, 1
imul rax, rdi
shr rax, 0x3c
imul r15d, eax, 0xedd9c2d8
or r15d, 0x126cc871
sub rsp, 0x20
call rbx
add rsp, 0x20
cmp r15d, 0xe88cf708
ja 0x1400d0d71
mov eax, dword [0x141dd7a70]
and eax, dword [0x141dd7a74]
add eax, 0x9a9dcc9c
xor eax, 0xc4e1eb79
imul eax, eax, 0xcd99bd4c
cmp eax, 0x76f88746
ja 0x1400d0e01
mov edi, dword [0x141dd7a78]
sub edi, dword [0x141dd7a7c]
xor edi, 0x8300
or edi, 0x718f446e
and edi, 0xf39fe76e
sub rsp, 0x20
mov rcx, r13
call fcn.1400d4e90
add rsp, 0x20
cmp edi, 0x4c083109
jae 0x1400d0e13
sub rsp, 0x20
mov rcx, r13
call fcn.1400d4e90
add rsp, 0x20
jmp 0x1400d0dcb
mov r15, qword [rbp + 0x60]
mov eax, dword [0x141dd7a80]
add eax, dword [0x141dd7a84]
or eax, 0xbadb30f1
xor eax, 0x3761d8ad
add eax, 0xcfa4de30
cmp eax, 0x75f0fa49
jbe 0x1400d0e17
jmp 0x1400cfe2b
mov eax, dword [0x141dd7a98]
imul eax, dword [0x141dd7a9c]
imul edi, eax, 0xd8d32aef
xor edi, 0xa48384b3
add edi, 0x6eb0723
mov rdx, qword [r13]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d4f90
add rsp, 0x20
cmp edi, 0x7b59876f
jbe 0x1400d0e8f
mov rdx, qword [r13]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d4f90
add rsp, 0x20
jmp 0x1400d0e3e
mov r15, qword [rbx]
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x1400d0f88
sub rsp, 0x20
mov rcx, r13
call fcn.1400d4e90
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov r15, qword [rbp + 0x60]
movabs r13, 0x8000000000000000
mov r14, qword [rbp + 0x88]
mov ecx, dword [0x141dd7b08]
and ecx, dword [0x141dd7b0c]
add ecx, 0xe7fc9c8c
and ecx, 0x2fa5a135
cmp ecx, 0xada70745
ja 0x1400d0ed3
test eax, eax
jne 0x1400d0f5c
mov eax, dword [0x141dd7b10]
sub eax, dword [0x141dd7b14]
add eax, 0x70145941
and eax, 0xf5de16f8
add eax, 0xa693a2b7
cmp eax, 0xfb4ed47f
jbe 0x1400d0f27
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141dd7b18]
xor edx, edx
div dword [0x141dd7b1c]
mov edi, eax
or edi, 0xcbff6eb1
xor edi, 0x87f64593
sub rsp, 0x20
call rbx
add rsp, 0x20
cmp edi, 0x4a6f035f
jb 0x1400d0f2e
mov r9, r12
mov eax, dword [0x141dd7b20]
imul eax, dword [0x141dd7b24]
add eax, 0xef89a056
imul rax, rax, 0x2d018023
shr rax, 0x3d
cmp eax, 0x350548e0
je 0x1400d0f5f
jmp 0x1400cff33
mov eax, dword [0x141dd7aa8]
imul eax, dword [0x141dd7aac]
xor eax, 0xd78acd8b
cmp eax, 0x531c6477
jb 0x1400d0f88
mov eax, dword [0x141dd7ab0]
and eax, dword [0x141dd7ab4]
imul eax, eax, 0xa5386fc8
xor eax, 0x6194eae4
imul rcx, rax, 0x4e3785a1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x77b392
ja 0x1400d0fa1
mov r12, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0xa8], rax
mov rax, qword [rsi + 0x80]
shl rax, 1
test rax, rax
je 0x1400d109a
mov eax, dword [0x141dd7ab8]
xor eax, dword [0x141dd7abc]
or eax, 0x82769c7e
imul eax, eax, 0xa714590
add eax, 0x2b370da4
cmp eax, 0x8e8b6f07
ja 0x1400d0ff5
mov rdi, qword [rsi + 0x88]
mov eax, dword [0x141dd7ac0]
xor eax, dword [0x141dd7ac4]
or eax, 0x82e7b258
cmp eax, 0xe925b449
je 0x1400d107e
mov eax, dword [0x141dd7ac8]
add eax, dword [0x141dd7acc]
mov ecx, 0xd1b2df41
imul rcx, rax
shr rcx, 0x3d
imul ebx, ecx, 0x78324d18
and ebx, 0xd04c7ba8
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x74cbca08
jne 0x1400d109a
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d1037
mov eax, dword [0x141dd7ad0]
add eax, dword [0x141dd7ad4]
imul eax, eax, 0xedbd9a60
add eax, 0x9da2100
cmp eax, 0x6b31fa5d
ja 0x1400d10e9
mov eax, dword [0x141dd7ad8]
sub eax, dword [0x141dd7adc]
or eax, 0x781b9a5
xor eax, 0xb722e02
imul eax, eax, 0x6a434958
mov qword [rsi + 0x80], r15
mov qword [rsi + 0x88], r12
cmp eax, 0x98eb14b1
jbe 0x1400d10f9
mov qword [rsi + 0x80], r15
mov qword [rsi + 0x88], r12
jmp 0x1400d10b8
xor eax, eax
test al, al
je 0x1400d1126
mov rax, qword [rbp + 0xa8]
mov qword [rsi + 0x90], rax
sub rsp, 0x20
mov rcx, r13
call fcn.1400d4e90
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rbp + 0x60]
mov r12, qword [rbp + 0xa8]
mov eax, dword [0x141dd7ae0]
add eax, dword [0x141dd7ae4]
and eax, 0xf250a6f8
imul rbx, rax, 0x3fb75f77
shr rbx, 0x3c
add ebx, 0x4a3e4b5d
mov qword [rsi + 0x90], r12
sub rsp, 0x20
mov rcx, r13
call fcn.1400d4e90
mov rcx, r14
call rdi
add rsp, 0x20
cmp ebx, 0x1bc232c5
jb 0x1400d1138
movabs r13, 0x8000000000000000
mov r14, qword [rbp + 0x88]
mov ecx, dword [0x141dd7ae8]
sub ecx, dword [0x141dd7aec]
imul ecx, ecx, 0xfd0656ae
xor ecx, 0xd10736b5
cmp ecx, 0x60ce3c19
jb 0x1400d118f
test eax, eax
mov r9, qword [rbp + 0x78]
jne 0x1400cff33
mov eax, dword [0x141dd7af0]
imul eax, dword [0x141dd7af4]
and eax, 0x8301b587
add eax, 0xba48a76f
xor eax, 0xc9d67f1f
cmp eax, 0xabee31a3
ja 0x1400d120c
mov eax, dword [0x141dd7af8]
sub eax, dword [0x141dd7afc]
imul edi, eax, 0x1166a2ac
add edi, 0x27ba8437
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0xf3953e41
jbe 0x1400d121c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d11de
mov r9, qword [rbp + 0x78]
mov eax, dword [0x141dd7b00]
sub eax, dword [0x141dd7b04]
and eax, 0x4098df04
add eax, 0xbf584ec7
cmp eax, 0x33ef0ab2
jb 0x1400d1220
jmp 0x1400cff33
ud2
mov eax, dword [0x141dd7bd8]
sub eax, dword [0x141dd7bdc]
imul rax, rax, 0x69922a9d
shr rax, 0x3d
imul eax, eax, 0x96360219
and eax, 0xe526061d
mov rdi, qword [rbx + 8]
mov rcx, qword [rbx + 0x28]
xor edx, edx
test rcx, rcx
setne dl
mov qword [rsi], rdx
mov qword [rsi + 8], rcx
cmp eax, 0x7269c6a9
jbe 0x1400d1299
mov rax, qword [rbx + 0x28]
xor ecx, ecx
test rax, rax
setne cl
mov qword [rsi], rcx
mov qword [rsi + 8], rax
jmp 0x1400d1244
mov r14, qword [rbp + 0x98]
mov eax, dword [0x141dd7be0]
or eax, dword [0x141dd7be4]
add eax, 0x8cc5931d
or eax, 0xbb7a4bd8
cmp eax, 0xcbbe060f
ja 0x1400d12a0
xor eax, eax
test al, al
je 0x1400d12ed
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, qword [rbp + 0xa8]
mov rdx, rdi
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov rbx, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, r14
mov r13, qword [rbp + 0xa8]
nop
mov eax, dword [0x141dd7be8]
or eax, dword [0x141dd7bec]
add eax, 0x5ee38d87
and eax, 0xf8415c5e
imul r14, rax, 0x702e837d
shr r14, 0x3a
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r13
mov rdx, rdi
mov r8, r12
call rbx
add rsp, 0x30
cmp r14d, 0xd2d264d8
ja 0x1400d1300
test eax, eax
je 0x1400d14be
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, qword [rbp + 0xa8]
mov rdi, qword [rbp + 0x50]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
movabs r13, 0x8000000000000000
je 0x1400d156c
movzx eax, word [rdi + 0x38]
mov qword [rbp + 0x48], rax
mov rax, qword [rdi + 0x40]
mov qword [rbp - 0x28], rax
mov r14, qword [rdi + 0x78]
movzx ebx, word [rdi + 0x70]
mov rax, qword [rdi + 0x80]
mov qword [rbp + 0x50], rax
lea rax, [rsi + 0x30]
mov qword [rbp + 0x98], rax
nop word [rax + rax]
mov eax, dword [0x141dd7c08]
xor edx, edx
div dword [0x141dd7c0c]
add eax, 0x3921f83b
and eax, 0x76091b45
cmp eax, 0x2afbaf0c
je 0x1400d13d0
mov eax, dword [rbp + 0x70]
test eax, eax
mov edi, dword [rbp + 0x90]
mov r15, qword [rbp + 0xa8]
mov r12d, dword [rbp + 0x58]
je 0x1400d22ea
cmp eax, 1
je 0x1400d148a
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d1420
nop word cs:[rax + rax]
mov eax, dword [0x141dd7c10]
sub eax, dword [0x141dd7c14]
xor eax, 0x4a01
or eax, 0xfff7b5ee
cmp eax, 0x1796b238
je 0x1400d1430
mov rax, qword [rsi + 0x40]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7c18]
imul ecx, dword [0x141dd7c1c]
imul ecx, ecx, 0x321910fd
add ecx, 0xd68913bc
cmp ecx, 0xca986dd1
ja 0x1400d1460
test rax, rax
jne 0x1400d22ea
mov eax, dword [0x141dd7c20]
and eax, dword [0x141dd7c24]
or eax, 0x45420181
add eax, 0xbe74a86b
mov ecx, 0xb69965fb
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x659471e3
jbe 0x1400d1b1d
jmp 0x1400d1b4d
mov eax, dword [0x141dd7bf0]
or eax, dword [0x141dd7bf4]
add eax, 0xc3e61218
xor eax, 0x18ef542e
cmp eax, 0x20012d11
movabs r13, 0x8000000000000000
jae 0x1400d14f3
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word [rax + rax]
mov eax, dword [0x141dd7bf8]
imul eax, dword [0x141dd7bfc]
imul ebx, eax, 0x9774fa20
xor ebx, 0xe4097609
or ebx, 0xa960976
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp ebx, 0x3b40dcb7
ja 0x1400d1500
nop word cs:[rax + rax]
mov eax, dword [0x141dd7c00]
imul eax, dword [0x141dd7c04]
add eax, 0x226e9aaf
imul rax, rax, 0x547d1f11
shr rax, 0x3e
imul eax, eax, 0x5c5e29a7
cmp eax, 0x21ef8a74
jbe 0x1400d1540
jmp 0x1400d15b0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd7f78]
add eax, dword [0x141dd7f7c]
or eax, 0x8f8572c
imul eax, eax, 0x2799797
xor eax, 0xf86322f4
cmp eax, 0xd001d2f9
jae 0x1400d1580
nop word cs:[rax + rax]
mov eax, dword [0x141dd7f98]
add eax, dword [0x141dd7f9c]
or eax, 0x99d4a5f8
xor eax, 0xdbf92642
add eax, 0x5bde05d2
cmp eax, 0xe2b93137
jae 0x1400d15b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8388]
add eax, dword [0x141dd838c]
imul eax, eax, 0x2268e7c4
cmp eax, 0x6b466dfc
je 0x1400d15e0
mov r9, qword [rbp + 0x78]
nop dword [rax]
mov eax, dword [0x141dd8390]
or eax, dword [0x141dd8394]
imul rcx, rax, 0x3671f76b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x2cc7984e
cmp eax, 0x41e1d220
ja 0x1400d1600
nop dword [rax]
mov eax, dword [0x141dd8398]
sub eax, dword [0x141dd839c]
add eax, 0xad89dbd1
or eax, 0xc46df617
add eax, 0x463989c2
cmp eax, 0xf54feca1
ja 0x1400d1630
movzx eax, byte [r9 + 8]
lea rbx, [rsi + 0x60]
nop dword [rax + rax]
mov ecx, dword [0x141dd83a0]
sub ecx, dword [0x141dd83a4]
imul ecx, ecx, 0x4cffae12
add ecx, 0x7c9d72e6
and ecx, 0x1c5c147e
cmp ecx, 0xc1767cdc
je 0x1400d1660
mov r12, qword [rbp - 0x50]
nop word [rax + rax]
mov ecx, dword [0x141dd83a8]
sub ecx, dword [0x141dd83ac]
xor ecx, 0x34208104
or ecx, 0xc04f0c32
cmp ecx, 0xf33b1433
je 0x1400d1690
test eax, eax
je 0x1400d1a8d
cmp eax, 1
je 0x1400d1780
cmp eax, 2
jne 0x1400d1910
mov eax, 0xbb2835cb
nop
mov ecx, dword [0x141dd83b8]
sub ecx, dword [0x141dd83bc]
add ecx, 0xeb1f1952
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xaa9a7dca
cmp ecx, 0x1e657cc0
je 0x1400d16d0
mov rcx, qword [rbx]
mov eax, dword [0x141dd83c0]
xor edx, edx
div dword [0x141dd83c4]
nop dword [rax]
mov eax, dword [0x141dd83c8]
xor eax, dword [0x141dd83cc]
xor eax, 0x62800020
or eax, 0x1002045
and eax, 0x63812c6d
cmp eax, 0x8b15754f
je 0x1400d1710
nop word cs:[rax + rax]
mov eax, dword [0x141dd83d0]
imul eax, dword [0x141dd83d4]
imul rax, rax, 0xbc7e467
shr rax, 0x39
add eax, 0x11cf2169
xor eax, 0x57a68e2c
cmp eax, 0x45c924d3
jb 0x1400d1740
cmp rcx, r13
jne 0x1400d1a8d
nop word cs:[rax + rax]
mov eax, dword [0x141dd83e8]
imul eax, dword [0x141dd83ec]
imul eax, eax, 0x21d3e384
xor eax, 0xf8d34fa7
add eax, 0xb726f8df
cmp eax, 0x8e05b189
ja 0x1400d1780
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x1400d1937
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8408]
and ecx, dword [0x141dd840c]
add ecx, 0x1f996fc6
xor ecx, 0xc936b653
add ecx, 0x47d34352
cmp ecx, 0x4f390ea4
ja 0x1400d17c0
mov rdi, qword [rax + 0x10]
sub rsp, 0x20
xor r14d, r14d
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
xor edx, edx
mov r8, r15
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
nop dword [rax]
cmp word [r15 + r14*2], 0
je 0x1400d196f
lea rdi, [r14 + 1]
mov eax, dword [0x141dd8410]
add eax, dword [0x141dd8414]
imul eax, eax, 0x130bc31f
cmp eax, 0x4c846b0c
je 0x1400d1830
cmp word [r15 + r14*2 + 2], 0
je 0x1400d1972
lea rdi, [r14 + 2]
movzx ecx, word [r15 + r14*2 + 4]
mov eax, dword [0x141dd8418]
xor edx, edx
div dword [0x141dd841c]
xor eax, 0x27af646a
add eax, 0x7c34a3ac
xor eax, 0xad0fb1f6
cmp eax, 0xa4a9dcf3
ja 0x1400d1860
test cx, cx
je 0x1400d1972
nop dword [rax]
mov eax, dword [str.gAtiQ]
add eax, dword [0x141dd8424]
xor eax, 0x613871b4
imul eax, eax, 0x54120a49
or eax, 0x9921ed78
cmp eax, 0x2913d4c9
jb 0x1400d1890
add r14, 3
mov eax, dword [0x141dd8428]
xor edx, edx
div dword [0x141dd842c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8430]
or eax, dword [0x141dd8434]
add eax, 0x15d27088
or eax, 0xfd521f44
add eax, 0x234e9326
cmp eax, 0x91461b33
ja 0x1400d18d0
cmp r14, 0x105
jne 0x1400d1820
mov edi, 0x105
jmp 0x1400d1972
mov eax, dword [0x141dd83b0]
xor eax, dword [0x141dd83b4]
add eax, 0xbbaf4769
or eax, 0x60e209c
add eax, 0x5c954e12
cmp eax, 0x8897d0e9
ja 0x1400d1910
jmp 0x1400d1242
mov qword [r12], r13
nop dword [rax + rax]
mov eax, dword [0x141dd8400]
sub eax, dword [0x141dd8404]
imul eax, eax, 0xb904490f
shr eax, 8
imul rax, rax, 0x1306ca3
shr rax, 0x2d
and eax, 0xfffffff9
cmp eax, 0xe70a1fa5
je 0x1400d1940
jmp 0x1400d19f2
mov rdi, r14
mov eax, dword [0x141dd8438]
and eax, dword [0x141dd843c]
imul eax, eax, 0x92b553d8
xor eax, 0x5e1ba483
add eax, 0xe4b0987f
cmp eax, 0x996dedbc
jae 0x1400d19b0
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r8, rdi
call fcn.14008ba90
add rsp, 0x20
nop dword [rax + rax]
mov r14d, dword [0x141dd8440]
and r14d, dword [0x141dd8444]
add r14d, 0x41b823b7
or r14d, 0x5c1397c7
add r14d, 0x9b8808da
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r8, rdi
call fcn.14008ba90
add rsp, 0x20
cmp r14d, 0x5ddbaba0
jb 0x1400d19b0
mov rax, qword [rbx]
shl rax, 1
test rax, rax
je 0x1400d1a18
mov r8, qword [rsi + 0x68]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd8448]
or eax, dword [0x141dd844c]
add eax, 0x6dfe0a7b
or eax, 0x4a629b4e
cmp eax, 0x1c63ebed
jne 0x1400d1a47
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
xor eax, eax
nop dword [rax]
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
test al, al
jne 0x1400d1a50
nop word cs:[rax + rax]
mov eax, dword [0x141dd8450]
xor eax, dword [0x141dd8454]
or eax, 0xcf70e5ab
and eax, 0xcf7ae5eb
cmp eax, 0x45a44ea9
jb 0x1400d1a70
xor eax, eax
mov rcx, qword [rbp - 0x58]
sub rcx, qword [rsi + 0x120]
cmovae rax, rcx
mov qword [rsi + 0x128], rax
mov eax, dword [0x141dd83f0]
xor eax, dword [0x141dd83f4]
imul rax, rax, 0x572e6d3f
shr rax, 0x3e
or eax, 0x39fed856
imul eax, eax, 0x721b7d63
cmp eax, 0x8c2df5d3
jne 0x1400d1ae0
mov byte [rsi + 0x154], 1
nop word cs:[rax + rax]
mov eax, dword [0x141dd83f8]
and eax, dword [0x141dd83fc]
and eax, 0x45a6f3fe
add eax, 0xf2769b47
and eax, 0x43b00af4
mov byte [rsi + 0x154], 1
cmp eax, 0x8b01c48e
ja 0x1400d1ae0
lea rsp, [rbp + 0xb8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd7c28]
and eax, dword [0x141dd7c2c]
add eax, 0x9c22c554
imul rcx, rax, 0x45311da5
shr rcx, 0x3d
or ecx, 0x5f1c076
mov eax, dword [0x141ddb9b0]
cmp ecx, 0x874b9363
jne 0x1400d1b60
mov eax, dword [0x141ddb9b0]
jmp 0x1400d1b1d
mov ecx, dword [0x141dd7c30]
sub ecx, dword [0x141dd7c34]
add ecx, 0x586b9539
xor ecx, 0x1c8ba7f6
add ecx, 0x7765b148
cmp ecx, 0x9bf0f480
jb 0x1400d1b60
cmp eax, 3
jne 0x1400d2201
nop
mov eax, dword [0x141dd7c40]
and eax, dword [0x141dd7c44]
imul eax, eax, 0x34459a53
add eax, 0x300264be
cmp eax, 0xdec2e1cb
ja 0x1400d1b90
movzx eax, byte [0x141ddb9b4]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7c48]
xor ecx, dword [0x141dd7c4c]
xor ecx, 0x70d32e53
cmp ecx, 0xf9e0fee6
ja 0x1400d1bc0
test al, al
je 0x1400d1ea8
mov eax, dword [0x141dd7cd8]
xor edx, edx
div dword [0x141dd7cdc]
imul eax, eax, 0xa1a7bb23
add eax, 0xb1bfa5d9
cmp eax, 0x3f78e3d4
mov rbx, qword [rbp + 0xb0]
jae 0x1400d1c20
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
call fcn.1400d5e20
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd7ce0]
xor edx, edx
div dword [0x141dd7ce4]
imul edi, eax, 0xeed1183c
or edi, 0x196aeeb3
xor edi, 0x7c95e8b1
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
call fcn.1400d5e20
add rsp, 0x20
cmp edi, 0xa10bb4db
ja 0x1400d1c20
mov rax, qword [rsi + 0x38]
mov qword [rbp + 0xa0], rax
mov eax, 0xa8c4e7eb
nop dword [rax + rax]
mov ecx, dword [0x141dd7ce8]
add ecx, dword [0x141dd7cec]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x3ab49f72
add ecx, 0x5dba204e
cmp ecx, 0x9cfb36a8
ja 0x1400d1c70
mov rdi, qword [rsi + 0x40]
test rdi, rdi
je 0x1400d1d40
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12d, 0xb7a0b78d
mov rbx, qword [rbp + 0xa0]
jmp 0x1400d1cca
add rbx, 0x20
inc r14
dec rdi
je 0x1400d1d40
mov eax, dword [0x141dd7cf0]
or eax, dword [0x141dd7cf4]
add eax, 0x9a93f3b3
and eax, 0x57e9de70
add eax, 0xf3d73ebf
cmp eax, 0xeceb9182
ja 0x1400d1cca
cmp qword [rbx], 0
je 0x1400d1cbe
mov r8, qword [rbx + 8]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd7cf8]
add eax, dword [0x141dd7cfc]
xor eax, 0xd3cedca3
add eax, 0xa92806e3
imul rax, r12
shr rax, 0x3f
cmp eax, 0x49f45985
ja 0x1400d1d10
jmp 0x1400d1cbe
mov eax, dword [0x141dd7d00]
xor edx, edx
div dword [0x141dd7d04]
xor eax, 0xbf9d12e6
imul eax, eax, 0x2aafb402
imul rax, rax, 0x409aa1b7
shr rax, 0x3e
cmp eax, 0x895e9aba
ja 0x1400d1d40
mov r14, qword [rbp + 0x98]
mov rcx, qword [r14]
mov edi, dword [rbp + 0x90]
mov r12d, dword [rbp + 0x58]
mov rbx, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7d08]
xor edx, edx
div dword [0x141dd7d0c]
or eax, 0x64816260
and eax, 0x6de96260
imul eax, eax, 0x41ba2b3d
cmp eax, 0x53c8f4a5
je 0x1400d1d90
xor eax, eax
mov r15, qword [rbp + 0xa8]
nop
test al, al
jne 0x1400d1dc0
test rcx, rcx
je 0x1400d1e19
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd7d10]
imul eax, dword [0x141dd7d14]
imul rcx, rax, 0xc7c49bd
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
or eax, 0x488341a0
and eax, 0x488341a2
cmp eax, 0x285e629c
jb 0x1400d1de7
mov eax, dword [0x141dd7d18]
xor edx, edx
div dword [0x141dd7d1c]
xor eax, 0x7b3c4196
add eax, 0x4214e36e
xor eax, 0x5679ef6d
cmp eax, 0xf0dd1768
jbe 0x1400d1e50
mov rax, qword [rbx + 0x10]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
nop dword [rax]
mov eax, dword [0x141dd7d20]
sub eax, dword [0x141dd7d24]
mov rcx, qword [rbx + 0x10]
mov qword [r14 + 0x10], rcx
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
cmp eax, 0x4c8a4fc
je 0x1400d1e50
nop word cs:[rax + rax]
mov eax, dword [str.ruLBQ]
or eax, dword [0x141dd7d2c]
or eax, 0x240084c0
and eax, 0x242094c4
imul eax, eax, 0x5541cf19
cmp eax, 0x2b7f4373
je 0x1400d1e80
jmp 0x1400d22ea
mov eax, dword [0x141dd7c50]
and eax, dword [0x141dd7c54]
add eax, 0xa1b52824
and eax, 0x48c8d222
imul eax, eax, 0x405b180a
cmp eax, 0xcb263e2d
mov eax, dword [0x141dd7c58]
and eax, dword [0x141dd7c5c]
imul eax, eax, 0x6fbe7d9a
add eax, 0xdf5bbe28
cmp eax, 0x29cf8286
jb 0x1400d1ec9
sub rsp, 0x20
lea rcx, [rbp - 0x78]
mov rdx, r15
mov r8, r14
mov r9, rbx
call fcn.1400d5580
add rsp, 0x20
mov rbx, qword [rbp - 0x78]
cmp rbx, r13
jne 0x1400d1f57
mov rax, qword [rbp + 0xa0]
mov qword [rax], 0
mov qword [rax + 8], 8
mov qword [rax + 0x10], 0
mov rbx, qword [rbp + 0x98]
mov eax, dword [0x141dd7c78]
xor eax, dword [0x141dd7c7c]
xor eax, 0x6d8d0d29
imul rax, rax, 0x1cba044f
shr rax, 0x3a
cmp eax, 0xd6bb1416
je 0x1400d1f2f
jmp 0x1400d2026
mov rdi, qword [rbp - 0x70]
mov eax, dword [0x141dd7c60]
xor edx, edx
div dword [0x141dd7c64]
and eax, 0xfad177f1
add eax, 0xba7a988a
imul rax, rax, 0x3674fce1
shr rax, 0x3b
cmp eax, 0xdc9dccbf
mov r15, qword [rbp + 0xa0]
jbe 0x1400d1f9f
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
call fcn.1400d59a0
add rsp, 0x20
mov eax, dword [0x141dd7c68]
sub eax, dword [0x141dd7c6c]
imul r14d, eax, 0x8d98a216
xor r14d, 0xc6f2bd81
add r14d, 0xbfcc4e0c
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
call fcn.1400d59a0
add rsp, 0x20
cmp r14d, 0xb0775fbe
ja 0x1400d1f9f
mov eax, dword [0x141dd7c70]
imul eax, dword [0x141dd7c74]
or eax, 0x79080414
and eax, 0x7b9b471d
imul eax, eax, 0x993f4e98
cmp eax, 0xaff2cc1
je 0x1400d1fdc
test rbx, rbx
mov rbx, qword [rbp + 0x98]
je 0x1400d2026
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd7c80]
xor edx, edx
div dword [0x141dd7c84]
cmp eax, 0x900f1d16
je 0x1400d2026
mov rdi, qword [rsi + 0x38]
mov eax, dword [0x141dd7c88]
add eax, dword [0x141dd7c8c]
or eax, 0x8302047c
imul eax, eax, 0x7fa2aef7
shr eax, 2
imul rax, rax, 0x1780c1df
shr rax, 0x37
cmp eax, 0x39d57160
ja 0x1400d203f
mov rax, qword [rsi + 0x40]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x1400d217e
xor r12d, r12d
jmp 0x1400d209e
inc r12
cmp r12, qword [rbp + 0xb0]
mov r13, r15
mov rbx, qword [rbp + 0x98]
je 0x1400d217e
mov r15, r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd7c90]
sub eax, dword [0x141dd7c94]
and eax, 0x8df1afb0
imul eax, eax, 0xcd67dc41
or eax, 0x4c6b43da
cmp eax, 0xc7ee37d1
je 0x1400d20b0
mov rax, r12
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1400d2084
add rax, rdi
mov rbx, qword [rax + 8]
mov r14, qword [0x141ddb9a0]
mov eax, dword [0x141dd7c98]
and eax, dword [0x141dd7c9c]
and eax, 0xa009a18
or eax, 0xb0ab2506
imul eax, eax, 0xfce1415b
cmp eax, 0x953aabe8
je 0x1400d2166
mov eax, dword [0x141dd7ca0]
and eax, dword [0x141dd7ca4]
add eax, 0x6f9f6292
mov rcx, rax
mov edx, 0x91531737
imul rcx, rdx
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul r13d, eax, 0x9a966277
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r13d, 0xc9c5def1
jbe 0x1400d2084
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d2112
cmp qword [rbx], 0
mov r12d, dword [rbp + 0x58]
mov r15, qword [rbp + 0xa0]
je 0x1400d22b6
mov eax, dword [0x141dd7ca8]
add eax, dword [0x141dd7cac]
or eax, 0x140008
and eax, 0x14640a
cmp eax, 0x5bd81705
jbe 0x1400d21b7
mov rax, qword [0x141ddb9a0]
mov eax, dword [0x141dd7cb0]
sub eax, dword [0x141dd7cb4]
and eax, 0x8010100
mov rbx, qword [0x141ddb9a0]
cmp eax, 0x49fbab26
ja 0x1400d21b7
mov eax, dword [0x141dd7cb8]
or eax, dword [0x141dd7cbc]
add eax, 0x12ddb87
imul rax, rax, 0x354a32dd
shr rax, 0x3a
imul eax, eax, 0xd9ba8532
cmp eax, 0x42537bdd
jne 0x1400d2240
jmp 0x1400d2279
sub rsp, 0x20
call fcn.1400ffc1a
add rsp, 0x20
mov eax, 0xc27e59a1
mov ecx, dword [0x141dd7c38]
xor ecx, dword [0x141dd7c3c]
add ecx, 0x28cad095
imul rcx, rax
shr rcx, 0x3e
add ecx, 0xd7e905c6
cmp ecx, 0xed2fb06f
ja 0x1400d2213
jmp 0x1400d1b90
mov eax, dword [0x141dd7cc0]
sub eax, dword [0x141dd7cc4]
imul r14d, eax, 0xaa511422
add r14d, 0x16e83f7a
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0xcc0e4076
jbe 0x1400d2291
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d2240
mov rbx, qword [rbp + 0x98]
mov eax, dword [0x141dd7cc8]
and eax, dword [0x141dd7ccc]
or eax, 0x346fcd40
imul eax, eax, 0x9706ff84
cmp eax, 0xf2f45ff5
je 0x1400d2298
mov rax, qword [r15 + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [r15]
movups xmmword [rbx], xmm0
mov edi, dword [rbp + 0x90]
mov r15, qword [rbp + 0xa8]
mov eax, dword [0x141dd7cd0]
and eax, dword [0x141dd7cd4]
and eax, 0x10011ae0
cmp eax, 0xa706d301
je 0x1400d22d2
lea rax, [rsi + 0x48]
mov qword [rbp + 0xa0], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd7d30]
imul eax, dword [0x141dd7d34]
xor eax, 0xfc0fce94
imul rcx, rax, 0x2149f185
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xf172b7f2
je 0x1400d2300
mov r14, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7d38]
xor edx, edx
div dword [0x141dd7d3c]
or eax, 0xa8a1d05e
add eax, 0x66635f0f
cmp eax, 0xe10167c7
ja 0x1400d2340
test r12d, r12d
je 0x1400d2c10
cmp r12d, 1
je 0x1400d2396
nop
mov eax, dword [0x141dd7d40]
xor edx, edx
div dword [0x141dd7d44]
imul eax, eax, 0x2a584880
cmp eax, 0x25bd920f
je 0x1400d2370
cmp qword [rsi + 0x58], 0
jne 0x1400d2c10
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r15
mov rbx, qword [rbp + 0x50]
mov rdx, rbx
mov rdi, qword [rbp + 0x80]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
je 0x1400d24a6
nop word [rax + rax]
mov eax, dword [0x141dd7d58]
imul eax, dword [0x141dd7d5c]
add eax, 0x90d9264c
xor eax, 0xc71e2ae5
add eax, 0x8618a013
cmp eax, 0xdb202d58
ja 0x1400d23d0
mov r9, qword [rdi]
sub r9, rbx
add r9, qword [rdi + 0x18]
sub rsp, 0x20
mov rdi, qword [rbp + 0x38]
mov rcx, rdi
mov rdx, r15
mov r8, rbx
call fcn.1400d5580
add rsp, 0x20
mov rax, qword [rdi]
cmp rax, r13
je 0x1400d24eb
mov qword [rbp + 0x50], rax
mov eax, dword [0x141dd7db0]
sub eax, dword [0x141dd7db4]
add eax, 0x8564863b
or eax, 0x1102210
and eax, 0x41142230
cmp eax, 0x49fdf0f6
je 0x1400d2427
mov rax, qword [rdi + 8]
mov qword [rbp + 0x80], rax
mov eax, dword [0x141dd7db8]
sub eax, dword [str.E]
or eax, 0x82a7a6ba
cmp eax, 0x8096d1b
je 0x1400d2454
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x98], rax
mov rax, qword [rsi + 0x50]
mov qword [rbp + 0xb0], rax
mov r12, qword [rsi + 0x58]
mov qword [rsi + 0x58], 0
test r12, r12
je 0x1400d26c6
xor r14d, r14d
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d2576
mov eax, dword [0x141dd7d48]
sub eax, dword [0x141dd7d4c]
xor eax, 0x33762d41
add eax, 0x86ead5fc
or eax, 0x98561e62
cmp eax, 0x1a651022
jb 0x1400d24a6
mov eax, dword [0x141dd7d50]
sub eax, dword [0x141dd7d54]
imul rax, rax, 0x4a0ddc97
shr rax, 0x3b
add eax, 0xf2208a93
cmp eax, 0x57109ea3
jbe 0x1400d24c8
mov rbx, qword [rsi + 0x50]
nop
mov eax, dword [0x141dd7d60]
sub eax, dword [0x141dd7d64]
xor eax, 0x3adb1570
add eax, 0x8775ce07
cmp eax, 0x6270c67c
ja 0x1400d24f0
mov rdi, qword [rsi + 0x58]
test rdi, rdi
je 0x1400d2637
xor r14d, r14d
mov r12, rbx
xor r15d, r15d
jmp 0x1400d2540
add r12, 0x20
inc r15
dec rdi
je 0x1400d2637
test r14b, r14b
jne 0x1400d2540
cmp qword [r12], 0
je 0x1400d2530
mov r8, qword [r12 + 8]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d2530
inc r14
cmp r14, r12
je 0x1400d26c6
mov rax, r14
shl rax, 5
mov rcx, qword [rbp + 0xb0]
cmp qword [rcx + rax], 0
je 0x1400d256a
add rax, qword [rbp + 0xb0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7dd0]
mov edx, dword [0x141dd7dd4]
add ecx, edx
add ecx, 0x29def35e
and ecx, 0xe2fde3ab
add ecx, 0x788de1a6
cmp ecx, 0x984309f4
ja 0x1400d25a0
mov rbx, qword [rax + 8]
mov r15, qword [0x141ddb9a0]
mov eax, dword [0x141dd7dd8]
xor edx, edx
div dword [0x141dd7ddc]
cmp eax, 0xb7ab763a
je 0x1400d2623
mov r13d, dword [0x141dd7de0]
add r13d, dword [0x141dd7de4]
xor r13d, 0x8a6f0e2
add r13d, 0x83c531d
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call rdi
add rsp, 0x20
cmp r13d, 0x1dd7f254
jae 0x1400d256a
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call rdi
add rsp, 0x20
jmp 0x1400d25e8
mov eax, dword [0x141dd7d68]
xor edx, edx
div dword [0x141dd7d6c]
mov eax, 0xae08726f
mov edi, dword [rbp + 0x90]
mov r15, qword [rbp + 0xa0]
nop word [rax + rax]
mov ecx, dword [0x141dd7d70]
sub ecx, dword [0x141dd7d74]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x183bab90
add ecx, 0xc987f77e
cmp ecx, 0x7922376b
jb 0x1400d2660
cmp qword [r15], 0
je 0x1400d2ad2
mov r14, qword [0x141ddb9a0]
mov eax, dword [0x141dd7d78]
mov ecx, dword [0x141dd7d7c]
add eax, ecx
add eax, 0x3ee9b7c8
and eax, 0x20f4990f
add eax, 0xd9fffe5f
cmp eax, 0xf7f84475
jae 0x1400d2a55
jmp 0x1400d2a8b
movabs r13, 0x8000000000000000
mov edi, dword [rbp + 0x90]
mov r14, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x98]
mov eax, dword [0x141dd7dc0]
or eax, dword [0x141dd7dc4]
xor eax, 0x98e210d2
or eax, 0x6309ef2c
cmp eax, 0x67047ebe
je 0x1400d26e8
mov eax, dword [0x141dd7dc8]
and eax, dword [0x141dd7dcc]
or eax, 0xff1f8eee
add eax, 0xb496e888
or eax, 0x5d980327
cmp eax, 0xd8c4f50b
je 0x1400d2705
lea r10, [r8 + r8]
mov r9d, 0x9344bb99
xor r11d, r11d
xor r12d, r12d
cmp r12, r8
je 0x1400d29a8
mov rax, qword [rbp + 0x80]
lea rbx, [rax + r12*2]
mov rax, r10
sub rax, r12
sub rax, r12
xor r15d, r15d
cmp word [rbx + r15*2], 0
je 0x1400d276d
inc r15
add rax, 0xfffffffffffffffe
jne 0x1400d2757
jmp 0x1400d29a8
add r12, r15
jb 0x1400d29fe
cmp r12, r8
ja 0x1400d2a24
mov eax, dword [0x141dd7e18]
and eax, dword [0x141dd7e1c]
imul eax, eax, 0xc69134f7
imul rax, r9
shr rax, 0x3d
xor eax, 0x88db948f
cmp eax, 0x46028b0a
jb 0x1400d277f
lea r9, [rbx + r15*2]
mov r8, rbx
mov eax, dword [0x141dd7e28]
xor edx, edx
div dword [0x141dd7e2c]
nop word [rax + rax]
mov eax, dword [0x141dd7e30]
xor eax, dword [0x141dd7e34]
imul eax, eax, 0x83129b1d
and eax, 0x80e280c7
imul eax, eax, 0xbada6c2f
cmp eax, 0x8e64256
je 0x1400d27c0
cmp r8, r9
je 0x1400d29a8
mov eax, dword [0x141dd7e38]
xor edx, edx
div dword [0x141dd7e3c]
mov eax, dword [0x141dd7e40]
xor eax, dword [0x141dd7e44]
imul eax, eax, 0x31428fa4
cmp eax, 0x5f718b74
je 0x1400d27fb
movzx eax, word [r8]
add r8, 2
nop dword [rax]
mov edx, dword [0x141dd7e48]
imul edx, dword [0x141dd7e4c]
add edx, 0x7537eb2d
xor edx, 0x7baf5743
add edx, 0xefc9381
cmp edx, 0xb34b94cf
ja 0x1400d2820
cmp ax, 0x3d
jne 0x1400d27ac
mov qword [rbp], r11
mov qword [rbp + 0x38], r10
mov eax, dword [0x141dd7e50]
and eax, dword [0x141dd7e54]
imul eax, eax, 0x3d5c1578
and eax, 0x20a16140
cmp eax, 0x8fc16eed
jne 0x1400d288e
sub rsp, 0x20
mov rdx, rbx
mov r8, r15
call fcn.14008ba90
mov rcx, qword [rbp + 0x30]
add rsp, 0x20
sub rsp, 0x20
mov rdx, rbx
mov r8, r15
call fcn.14008ba90
xor r8d, r8d
mov rcx, qword [rbp + 0x30]
add rsp, 0x20
test r8b, r8b
jne 0x1400d288e
mov eax, dword [0x141dd7e58]
xor edx, edx
div dword [0x141dd7e5c]
test r8b, r8b
jne 0x1400d28bb
mov rax, qword [rbp + 0xa0]
mov r11, qword [rbp]
cmp r11, qword [rax]
mov r8, qword [rbp + 0x98]
mov r10, qword [rbp + 0x38]
mov r9d, 0x9344bb99
jne 0x1400d294b
sub rsp, 0x20
mov rcx, rax
call fcn.1400d6370
add rsp, 0x20
mov eax, dword [0x141dd7e60]
or eax, dword [0x141dd7e64]
imul eax, eax, 0xbbb1e3fa
add eax, 0xc376a960
and eax, 0x37246b58
cmp eax, 0x6a956584
ja 0x1400d28f1
mov rax, qword [rsi + 0x50]
mov qword [rbp + 0xb0], rax
mov eax, dword [0x141dd7e68]
add eax, dword [0x141dd7e6c]
cmp eax, 0x4a5d3cec
je 0x1400d291f
mov rcx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x98]
mov r10, qword [rbp + 0x38]
mov r9d, 0x9344bb99
mov r11, qword [rbp]
mov rax, r11
shl rax, 5
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
mov rdx, qword [rbp + 0xb0]
movups xmmword [rdx + rax + 0x10], xmm1
movups xmmword [rdx + rax], xmm0
inc r11
mov qword [rsi + 0x58], r11
inc r12
cmp r12, r8
jbe 0x1400d2737
mov eax, dword [0x141dd7de8]
and eax, dword [0x141dd7dec]
or eax, 0x19f2971c
imul eax, eax, 0x34fc7f8d
and eax, 0x396c8ebc
cmp eax, 0x8948762b
jbe 0x1400d3144
jmp 0x1400d314c
mov eax, dword [0x141dd7df0]
imul eax, dword [0x141dd7df4]
imul eax, eax, 0x67a16668
or eax, 0x4ba73770
cmp eax, 0x5298b393
je 0x1400d29a8
cmp qword [rbp + 0x50], 0
je 0x1400d2c10
mov eax, dword [0x141dd7df8]
and eax, dword [0x141dd7dfc]
or eax, 0x4000402
and eax, 0xd6028c32
imul eax, eax, 0xbbdf035
cmp eax, 0xfcaa7bda
jne 0x1400d2ba2
jmp 0x1400d2bcc
ud2
ud2
mov eax, dword [0x141dd7d80]
imul eax, dword [0x141dd7d84]
or eax, 0xffefeef3
imul edi, eax, 0x360f299a
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xaf91d2b9
jbe 0x1400d2aa3
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d2a55
mov edi, dword [rbp + 0x90]
nop dword [rax]
mov eax, dword [0x141dd7d88]
and eax, dword [0x141dd7d8c]
xor eax, 0x86004b80
or eax, 0x29fa1077
xor eax, 0xbbe8eb53
cmp eax, 0xed78fcde
ja 0x1400d2ab0
mov eax, dword [0x141dd7d90]
xor edx, edx
div dword [0x141dd7d94]
imul eax, eax, 0x83970814
add eax, 0xc1c97328
or eax, 0xc28da362
cmp eax, 0x889da4b5
jne 0x1400d2afe
mov qword [r15], 0
mov r14, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7d98]
xor eax, dword [0x141dd7d9c]
add eax, 0xdefe6d92
xor eax, 0x5000216
and eax, 0xcdb1529f
mov qword [r15], 0
cmp eax, 0xd275b430
ja 0x1400d2b10
mov eax, dword [0x141dd7da0]
and eax, dword [0x141dd7da4]
mov qword [rsi + 0x50], 8
add eax, 0xc9752080
and eax, 0x406c7508
cmp eax, 0xc759c370
jne 0x1400d2b66
mov qword [rsi + 0x58], 0
mov eax, 0xd9d254e3
nop dword [rax + rax]
mov ecx, dword [0x141dd7da8]
or ecx, dword [0x141dd7dac]
or ecx, 0x72204a36
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x67116d04
mov qword [rsi + 0x58], 0
cmp ecx, 0x3cbe24fc
jbe 0x1400d2b70
jmp 0x1400d2c10
mov eax, dword [0x141dd7e00]
and eax, dword [0x141dd7e04]
imul eax, eax, 0xc9315990
add eax, 0xb9288900
and eax, 0x984be070
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xb9787191
jbe 0x1400d2bd5
mov rax, qword [0x141ddb9a0]
jmp 0x1400d2ba2
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd7e08]
imul eax, dword [str.FQco]
add eax, 0xa16d9e74
and eax, 0xfdd75dac
imul eax, eax, 0xc555d2ee
cmp eax, 0xf1a66027
jae 0x1400d2bec
mov eax, dword [0x141dd7e70]
and eax, dword [0x141dd7e74]
add eax, 0xd02af1a7
cmp eax, 0x1fa019a
jb 0x1400d2c10
mov eax, 0xc3301791
lea r15, [rsi + 0x98]
lea rbx, [rsi + 0xb8]
nop dword [rax + rax]
mov ecx, dword [0x141dd7e78]
or ecx, dword [0x141dd7e7c]
add ecx, 0x7304d7a3
imul rcx, rax
shr rcx, 0x3d
xor ecx, 0xb31d9254
cmp ecx, 0x7e57964
jb 0x1400d2c40
mov eax, dword [rbp + 0x68]
test eax, eax
je 0x1400d2c79
cmp eax, 1
jne 0x1400d2c7e
mov r12b, 1
jmp 0x1400d2cf7
xor r12d, r12d
jmp 0x1400d2cf7
cmp eax, 2
jne 0x1400d2d68
mov rax, qword [r15]
nop word [rax + rax]
mov ecx, dword [0x141dd7e88]
or ecx, dword [0x141dd7e8c]
add ecx, 0xab2a029a
or ecx, 0xf139e7e3
imul rdx, rcx, 0x1d89a327
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1c
cmp rax, r13
sete r12b
cmp ecx, 0x2f2df3a7
ja 0x1400d2c90
nop dword [rax + rax]
mov eax, dword [0x141dd7e90]
xor eax, dword [0x141dd7e94]
shr eax, 2
imul rax, rax, 0x214533a7
shr rax, 0x3a
imul eax, eax, 0x7384ce26
cmp eax, 0x525baedb
je 0x1400d2cd0
test edi, edi
je 0x1400d2d8b
cmp edi, 1
je 0x1400d2d98
mov rcx, qword [rbx]
nop dword [rax + rax]
mov eax, dword [0x141dd7e98]
xor edx, edx
div dword [0x141dd7e9c]
imul edx, eax, 0xc68c3e60
cmp rcx, r13
sete al
cmp edx, 0x4febe1c6
je 0x1400d2d10
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7ea0]
xor ecx, dword [0x141dd7ea4]
xor ecx, 0x4639d59e
imul ecx, ecx, 0xa33ad7d1
and ecx, 0x91405b1e
cmp ecx, 0x465cc0c5
ja 0x1400d2d40
jmp 0x1400d2d8d
mov eax, dword [0x141dd7e80]
xor eax, dword [0x141dd7e84]
imul eax, eax, 0xd27433cc
add eax, 0x43b64489
cmp eax, 0xf2b7f706
jb 0x1400d2d68
jmp 0x1400d1242
xor eax, eax
or al, r12b
cmp al, 1
jne 0x1400d32b0
sub rsp, 0x20
mov rdi, qword [rbp + 0x10]
mov rcx, rdi
mov rdx, qword [rbp + 0xa8]
mov r8, qword [rbp - 0x28]
mov r9, qword [rbp + 0x48]
call fcn.1400d5580
add rsp, 0x20
mov r10, qword [rdi]
nop
mov eax, dword [0x141dd7ea8]
or eax, dword [0x141dd7eac]
cmp eax, 0xabbd09f8
je 0x1400d2dc0
cmp r10, r13
jne 0x1400d2ef3
nop dword [rax]
mov eax, dword [0x141dd7ed8]
add eax, dword [0x141dd7edc]
imul rax, rax, 0x6a115923
shr rax, 0x3d
or eax, 0xb3b33e40
cmp eax, 0x19c2af00
je 0x1400d2de0
mov rax, qword [r15]
shl rax, 1
test rax, rax
je 0x1400d2ecd
mov eax, dword [0x141dd7ee0]
and eax, dword [0x141dd7ee4]
imul eax, eax, 0xdbcd75e6
add eax, 0x406b3582
cmp eax, 0x1cacffdd
jb 0x1400d2e12
mov eax, dword [0x141dd7ee8]
or eax, dword [0x141dd7eec]
or eax, 0xe52430ae
and eax, 0xfd3538ae
cmp eax, 0xf480073a
je 0x1400d2e30
mov rdi, qword [rsi + 0xa0]
mov eax, dword [0x141dd7ef0]
mov ecx, dword [0x141dd7ef4]
add eax, ecx
add eax, 0xa2b52347
or eax, 0xac172244
add eax, 0x6f56371
cmp eax, 0x2f70591a
jbe 0x1400d2e92
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14d, dword [0x141dd7ef8]
sub r14d, dword [0x141dd7efc]
or r14d, 0xc25efbbd
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r14d, 0xe25a560a
je 0x1400d2e99
mov qword [r15], r13
mov eax, dword [0x141dd7f00]
add eax, dword [0x141dd7f04]
and eax, 0xdf842824
imul eax, eax, 0xc146197b
cmp eax, 0x7d2b1cf5
je 0x1400d2ed0
jmp 0x1400d3286
mov rax, qword [rbp + 0x10]
mov rdi, qword [rax + 8]
nop dword [rax + rax]
mov eax, dword [0x141dd7eb0]
xor eax, dword [0x141dd7eb4]
add eax, 0x59fd2f26
imul rax, rax, 0x7f025c07
shr rax, 0x3c
cmp eax, 0x71923756
je 0x1400d2f00
mov rax, qword [rbp + 0x10]
mov r8, qword [rax + 0x10]
lea rcx, [rdi + r8*2]
nop
mov eax, dword [0x141dd7eb8]
and eax, dword [0x141dd7ebc]
or eax, 0x102e6040
and eax, 0x512ee040
cmp eax, 0xfbbd280f
je 0x1400d2f30
test r8, r8
mov qword [rbp + 0xb0], r10
je 0x1400d2fca
xor eax, eax
mov rdx, rdi
nop
mov r9d, dword [0x141dd7ec0]
imul r9d, dword [str._trgZO]
or r9d, 0x1c7288d2
and r9d, 0x5e779ef6
cmp r9d, 0xcfc6686a
ja 0x1400d2f60
cmp word [rdx], 0
je 0x1400d2fd2
nop dword [rax]
mov r9d, dword [0x141dd7ec8]
sub r9d, dword [0x141dd7ecc]
imul r9d, r9d, 0xda962230
imul r9, r9, 0x5bf2cecd
shr r9, 0x3e
cmp r9d, 0xb5168eec
je 0x1400d2f90
add rdx, 2
inc rax
cmp rdx, rcx
jne 0x1400d2f60
mov r13, r15
jmp 0x1400d2fff
mov r13, r15
xor r8d, r8d
jmp 0x1400d2fff
mov ecx, 0xd7885ee7
mov edx, dword [0x141dd7ed0]
or edx, dword [0x141dd7ed4]
imul edx, edx, 0x546d6cd4
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0x4f9bad8e
je 0x1400d2fd7
mov r13, r15
mov r8, rax
sub rsp, 0x20
mov r15, qword [rbp - 8]
mov rcx, r15
mov rdx, rdi
call fcn.14008ba90
add rsp, 0x20
mov r14, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x90]
mov rdx, r14
mov r9, rbx
call fcn.1400d65f0
add rsp, 0x20
test r12b, r12b
je 0x1400d30f7
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
mov rbx, qword [rbp - 0x38]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov r14, r13
mov eax, dword [0x141dd7f08]
and eax, dword [0x141dd7f0c]
or eax, 0xdd360064
add eax, 0x90960eef
xor eax, 0x707dbd18
cmp eax, 0x7ca50ef5
ja 0x1400d3057
mov rax, qword [r14]
shl rax, 1
test rax, rax
je 0x1400d30c5
mov eax, 0x89c5018d
mov ecx, dword [0x141dd7f10]
and ecx, dword [0x141dd7f14]
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x1e45147d
ja 0x1400d3089
mov r8, qword [rsi + 0xa0]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
mov eax, dword [0x141dd7f18]
and eax, dword [0x141dd7f1c]
xor eax, 0x4d415393
add eax, 0x6d37a162
cmp eax, 0xf2645182
jae 0x1400d30d5
jmp 0x1400d31c6
mov eax, dword [0x141dd7f20]
imul eax, dword [0x141dd7f24]
or eax, 0x64ac3850
imul rcx, rax, 0x12ba5e5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x19
and eax, 0xffffffce
cmp eax, 0x21a5b30
je 0x1400d30f7
mov rax, qword [rbp - 8]
cmp qword [rax], 0
je 0x1400d31c6
mov rbx, qword [0x141ddb9a0]
xor eax, eax
test al, al
je 0x1400d315b
jmp 0x1400d3194
ud2
ud2
mov eax, dword [0x141dd7f28]
sub eax, dword [0x141dd7f2c]
imul r15d, eax, 0x231f0601
add r15d, 0x968a7fa3
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r15d, 0xb8c673f9
jbe 0x1400d31ac
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d315b
mov eax, dword [0x141dd7f30]
xor edx, edx
div dword [0x141dd7f34]
or eax, 0x7dbf9eef
cmp eax, 0xc26a1f8d
je 0x1400d31ac
mov eax, dword [0x141dd7f38]
xor edx, edx
div dword [0x141dd7f3c]
mov rcx, qword [rbp + 0xb0]
nop dword [rax + rax]
mov eax, dword [0x141dd7f40]
xor edx, edx
div dword [0x141dd7f44]
or eax, 0xcd30d4ee
and eax, 0xefbcd4ee
cmp eax, 0xd9b962f1
ja 0x1400d31e0
test rcx, rcx
je 0x1400d3286
mov rbx, qword [0x141ddb9a0]
mov eax, dword [0x141dd7f48]
or eax, dword [0x141dd7f4c]
add eax, 0x8bbe1204
xor eax, 0xa7af0840
cmp eax, 0xc341d950
jbe 0x1400d3242
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd7f50]
xor eax, dword [str.vSWBo]
imul r15d, eax, 0x981c8de2
or r15d, 0xcd23d134
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r14
add rsp, 0x20
cmp r15d, 0xcb445ca7
je 0x1400d3250
mov r14, qword [rbp + 0x88]
nop dword [rax]
mov eax, dword [0x141dd7f58]
sub eax, dword [0x141dd7f5c]
or eax, 0x4b204044
and eax, 0xfb2c43e4
cmp eax, 0x7dffe0d5
je 0x1400d3290
nop dword [rax]
mov eax, dword [0x141dd7f60]
xor edx, edx
div dword [0x141dd7f64]
or eax, 0xe7ffbf7b
and eax, 0xfffffffb
cmp eax, 0x6f8288a0
je 0x1400d32b0
mov eax, 0xac8e9fa5
mov r15, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7f68]
xor ecx, dword [0x141dd7f6c]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xaf64acc0
xor ecx, 0x6352c8cd
cmp ecx, 0x9c89061c
ja 0x1400d32e0
mov rdx, qword [rbp - 0x30]
nop dword [rax]
mov eax, dword [0x141dd7f70]
xor eax, dword [0x141dd7f74]
or eax, 0xe04006
and eax, 0x1ce05dae
add eax, 0x1b27996b
cmp eax, 0xb1f95037
jae 0x1400d3310
jmp 0x1400d02b4
mov eax, dword [0x141dd7fe0]
imul eax, dword [0x141dd7fe4]
or eax, 0xd8981401
and eax, 0xfade9599
mov edi, 0xaa5ae3e9
imul rdi, rax
shr rdi, 0x3f
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, r15
mov r9, r12
call fcn.1400d5580
add rsp, 0x20
cmp edi, 0xa1ac1b64
jbe 0x1400d3397
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, r15
mov r9, r12
call fcn.1400d5580
add rsp, 0x20
jmp 0x1400d3337
mov rdi, qword [rbx]
cmp rdi, r13
jne 0x1400d33e2
mov rax, qword [rbp + 0x18]
mov qword [rax], 0
mov qword [rax + 8], 8
mov qword [rax + 0x10], 0
nop word [rax + rax]
mov eax, dword [0x141dd8010]
or eax, dword [0x141dd8014]
add eax, 0x3a8f6cf0
and eax, 0x3a0ecb28
cmp eax, 0x931377fe
ja 0x1400d33c0
jmp 0x1400d3510
mov eax, dword [0x141dd7fe8]
sub eax, dword [0x141dd7fec]
or eax, 0x47ccc224
add eax, 0x1f40cef2
or eax, 0xb86979b6
cmp eax, 0x5505d674
mov rbx, qword [rbp + 0x18]
jne 0x1400d3420
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + 8]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d59a0
add rsp, 0x20
mov r14, qword [rbp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7ff0]
xor edx, edx
div dword [0x141dd7ff4]
mov r12d, eax
xor r12d, 0xa0020824
and r12d, 0xe48e19a6
mov r15, qword [r14 + 8]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
call fcn.1400d59a0
add rsp, 0x20
cmp r12d, 0xe7f9e219
ja 0x1400d3430
nop
mov eax, dword [0x141dd7ff8]
add eax, dword [0x141dd7ffc]
and eax, 0x7c92c68b
add eax, 0xc3a8ddf9
cmp eax, 0xa6810fe9
jb 0x1400d3470
test rdi, rdi
je 0x1400d3510
mov r12, qword [0x141ddb9a0]
mov eax, dword [0x141dd8000]
xor eax, dword [0x141dd8004]
add eax, 0x2e3769eb
or eax, 0x6f080529
cmp eax, 0x8135df85
je 0x1400d34f8
mov eax, dword [0x141dd8008]
add eax, dword [0x141dd800c]
imul eax, eax, 0x3e881dc2
and eax, 0x9afb535e
mov edi, 0xbb4b38e5
imul rdi, rax
shr rdi, 0x39
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xee87d357
jb 0x1400d3510
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d34b6
mov eax, dword [0x141dd8018]
xor eax, dword [0x141dd801c]
add eax, 0xc3a3d7d0
xor eax, 0xd4d8caae
add eax, 0xf1b1a9dd
cmp eax, 0xc6c89057
ja 0x1400d3510
mov r15, qword [rsi + 0x38]
mov rax, qword [rsi + 0x40]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x1400d36c2
xor r14d, r14d
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor edi, edi
nop word cs:[rax + rax]
mov eax, dword [0x141dd8020]
mov ecx, dword [0x141dd8024]
add eax, ecx
add eax, 0xc8fed744
and eax, 0x6e2abb0e
add eax, 0x9a326824
cmp eax, 0xfc201d31
ja 0x1400d3560
mov rax, rdi
shl rax, 5
cmp qword [r15 + rax], 0
je 0x1400d3678
add rax, r15
mov ecx, dword [0x141dd8028]
sub ecx, dword [0x141dd802c]
or ecx, 0x300c0414
and ecx, 0x305e1594
add ecx, 0xc7dbe4cb
cmp ecx, 0x8d57fb36
jb 0x1400d3599
mov r12, qword [rax + 8]
mov eax, dword [0x141dd8030]
and eax, dword [0x141dd8034]
imul rax, rax, 0x27efbac9
shr rax, 0x3b
and eax, 2
cmp eax, 0xb49f955f
jbe 0x1400d3600
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call r13
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd8038]
and eax, dword [0x141dd803c]
add eax, 0xeaa7ae1d
imul rbx, rax, 0x2df69755
shr rbx, 0x3d
add ebx, 0x32363c0b
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call r13
add rsp, 0x20
cmp ebx, 0xf5516510
ja 0x1400d3600
nop word cs:[rax + rax]
mov eax, dword [0x141dd8040]
and eax, dword [0x141dd8044]
or eax, 0xe4ea20ca
imul rax, rax, 0x3f0573d7
shr rax, 0x3d
or eax, 0x20a4ac34
cmp eax, 0xf0c30647
je 0x1400d3650
inc rdi
nop dword [rax + rax]
mov eax, dword [0x141dd8048]
add eax, dword [0x141dd804c]
xor eax, 0x8849a48
or eax, 0xf77b4036
xor eax, 0x4a563604
cmp eax, 0xce3ec86a
ja 0x1400d3680
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400d36b0
cmp rdi, qword [rbp + 0xb0]
jne 0x1400d3560
mov eax, dword [0x141dd8050]
xor edx, edx
div dword [0x141dd8054]
mov eax, dword [str.Z7Q_]
sub eax, dword [0x141dd805c]
xor eax, 0xec205a06
imul rcx, rax, 0x2e508373
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x706867c6
je 0x1400d36d0
mov rax, qword [rbp + 0xa0]
mov rax, qword [rax]
mov r14, qword [rbp + 0x88]
nop dword [rax]
mov ecx, dword [0x141dd8060]
sub ecx, dword [0x141dd8064]
imul ecx, ecx, 0xed2d5f64
imul rcx, rcx, 0x22325bd9
shr rcx, 0x3c
or ecx, 0x97a711a0
cmp ecx, 0x7f481623
je 0x1400d3710
mov ecx, 0x8a61abd9
movabs r13, 0x8000000000000000
nop word [rax + rax]
mov edx, dword [0x141dd8068]
add edx, dword [0x141dd806c]
imul edx, edx, 0x588898c0
or edx, 0x9186feb3
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xa5320a4
je 0x1400d3750
test rax, rax
je 0x1400d37de
mov r12, qword [0x141ddb9a0]
xor eax, eax
test al, al
jne 0x1400d37c6
mov edi, dword [0x141dd8070]
xor edi, dword [0x141dd8074]
xor edi, 0x1ba2d944
add edi, 0x24214a26
xor edi, 0xd96b64f2
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xe1d991e5
jbe 0x1400d37de
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d378a
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx + 0x10]
mov rdx, qword [rbp + 0xa0]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
nop word [rax + rax]
mov eax, dword [0x141dd8078]
add eax, dword [0x141dd807c]
imul eax, eax, 0x2e3356e5
add eax, 0x197639f2
cmp eax, 0x401b73dc
jb 0x1400d3800
jmp 0x1400d3b14
mov edi, dword [0x141dd8088]
and edi, dword [0x141dd808c]
or edi, 0x79e8f7eb
and edi, 0xfbe8ffff
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
call fcn.1400d5e20
add rsp, 0x20
cmp edi, 0xa5366b97
jbe 0x1400d386b
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
call fcn.1400d5e20
add rsp, 0x20
jmp 0x1400d3823
mov rax, qword [rsi + 0x38]
mov qword [rbp + 0xb0], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd8090]
or eax, dword [0x141dd8094]
or eax, 0xf574836d
and eax, 0xf7ff8fed
cmp eax, 0xa5c783d7
je 0x1400d3880
mov rax, qword [rsi + 0x40]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x1400d39c8
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
xor ebx, ebx
nop word [rax + rax]
mov rdi, r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd8098]
and eax, dword [0x141dd809c]
add eax, 0x7ab33c03
xor eax, 0x14c420
and eax, 0x6974dded
cmp eax, 0x7de5073e
je 0x1400d38d0
mov rax, rbx
shl rax, 5
mov rcx, qword [rbp + 0xb0]
cmp qword [rcx + rax], 0
je 0x1400d396f
add rax, qword [rbp + 0xb0]
mov r12, qword [rax + 8]
mov r13, qword [0x141ddb9a0]
xor eax, eax
test al, al
jne 0x1400d39b0
nop word cs:[rax + rax]
mov r15d, dword [0x141dd80a0]
sub r15d, dword [0x141dd80a4]
or r15d, 0x206839ae
add r15d, 0x333ec52f
or r15d, 0x6cabe5c7
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call r14
add rsp, 0x20
cmp r15d, 0xcc6681e4
ja 0x1400d39b0
inc rbx
mov r13, rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd80a8]
sub eax, dword [0x141dd80ac]
imul eax, eax, 0xa5660ed4
add eax, 0xcb8393d9
cmp eax, 0x81920303
jb 0x1400d3980
cmp rbx, qword [rbp + 0x80]
jne 0x1400d38c0
jmp 0x1400d39c8
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, r12
call r14
add rsp, 0x20
jmp 0x1400d3930
mov eax, dword [0x141dd80b0]
xor edx, edx
div dword [0x141dd80b4]
mov rdi, qword [rbp + 0x28]
mov r14, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd80b8]
xor edx, edx
div dword [0x141dd80bc]
imul eax, eax, 0x73c26166
and eax, 0x8ac1b8a6
imul eax, eax, 0xb1454ef9
cmp eax, 0xc0ba0b1f
je 0x1400d39f0
mov rax, qword [rbp + 0xa0]
mov rax, qword [rax]
mov ecx, dword [0x141dd80c0]
xor ecx, dword [0x141dd80c4]
and ecx, 0x51ff8564
imul ecx, ecx, 0x6492a779
cmp ecx, 0x475f7418
je 0x1400d3a20
test rax, rax
je 0x1400d3ace
mov eax, dword [0x141dd80c8]
add eax, dword [0x141dd80cc]
imul eax, eax, 0xff7c8047
cmp eax, 0xbff7e225
je 0x1400d3a8d
mov eax, dword [str._tlmV]
xor edx, edx
div dword [0x141dd80d4]
and eax, 0x5a2e4804
xor eax, 0xd20a4e10
or eax, 0x2581b1a3
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xfc2f15d9
jbe 0x1400d3a96
mov rax, qword [0x141ddb9a0]
jmp 0x1400d3a62
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd80d8]
add eax, dword [0x141dd80dc]
xor eax, 0x7417d936
imul eax, eax, 0x89d8a217
cmp eax, 0xbb02ac41
je 0x1400d3ab0
mov rax, qword [rdi + 0x10]
mov rcx, qword [rbp + 0xa0]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rdi]
movups xmmword [rcx], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd80e0]
imul eax, dword [0x141dd80e4]
add eax, 0x864df087
or eax, 0xacc41a6b
imul eax, eax, 0xe42b123a
cmp eax, 0x4f23ec0
jb 0x1400d3af0
lea r12, [rsi + 0x48]
mov rdi, qword [rbp - 0x48]
mov ebx, dword [rbp + 0x68]
mov ecx, dword [rbp + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dd80e8]
xor eax, dword [0x141dd80ec]
xor eax, 0xd0d26a9a
imul rax, rax, 0x4b6e0e2d
shr rax, 0x3e
or eax, 0xec8e7072
cmp eax, 0xba250cfc
jb 0x1400d3b30
mov r9, qword [rbp + 0x78]
nop dword [rax]
mov eax, dword [0x141dd80f0]
and eax, dword [0x141dd80f4]
imul eax, eax, 0x31285396
and eax, 0x8b59e59a
imul eax, eax, 0x7a6bf3ba
cmp eax, 0xba49cdd5
ja 0x1400d3b60
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d3b90
test ecx, ecx
je 0x1400d4624
cmp ecx, 1
je 0x1400d3c30
cmp ecx, 2
jne 0x1400d4444
mov eax, 0xf3ea99f1
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8100]
and ecx, dword [0x141dd8104]
imul ecx, ecx, 0xbae9d23e
or ecx, 0x7dcfa004
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xd18cefc5
je 0x1400d3bc0
mov rcx, qword [rsi + 0x58]
mov eax, dword [str.Ge]
xor edx, edx
div dword [0x141dd810c]
nop word [rax + rax]
mov eax, dword [0x141dd8110]
or eax, dword [0x141dd8114]
add eax, 0x9cd343ed
or eax, 0x936f43bf
add eax, 0x7c24d77e
cmp eax, 0x63bf51c9
jb 0x1400d3c00
test rcx, rcx
jne 0x1400d4624
nop dword [rax + rax]
mov eax, dword [0x141dd8118]
or eax, dword [0x141dd811c]
imul eax, eax, 0x8b88def5
cmp eax, 0x92e0a8b5
je 0x1400d3c30
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0x98]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
je 0x1400d4260
mov eax, dword [0x141dd8128]
xor edx, edx
div dword [0x141dd812c]
mov eax, 0x8e308fc7
nop word [rax + rax]
mov ecx, dword [0x141dd8130]
or ecx, dword [0x141dd8134]
xor ecx, 0xd51aa220
or ecx, 0xae45d05
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xf9946eb9
je 0x1400d3c90
mov r9, qword [rdi]
mov r8, qword [rbp + 0x98]
sub r9, r8
add r9, qword [rdi + 0x18]
sub rsp, 0x20
mov rdi, qword [rbp - 0x20]
mov rcx, rdi
mov rdx, qword [rbp + 0xa8]
call fcn.1400d5580
add rsp, 0x20
mov rcx, qword [rdi]
nop word [rax + rax]
mov eax, dword [0x141dd8138]
and eax, dword [0x141dd813c]
add eax, 0xc500456b
and eax, 0x488e20b6
cmp eax, 0x8eca44bc
je 0x1400d3cf0
cmp rcx, r13
je 0x1400d4288
mov qword [rbp + 0x28], rcx
mov ecx, 0xca26b655
mov r8, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8190]
xor edx, edx
div dword [0x141dd8194]
add eax, 0x42f9eaf0
xor eax, 0x2040138a
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xf49f7a48
je 0x1400d3d30
mov eax, dword [0x141dd8198]
imul eax, dword [0x141dd819c]
or eax, 0x55fff1ff
add eax, 0x3a20129d
cmp eax, 0x3ef707
jae 0x1400d3d7d
mov qword [rsi + 0x58], 0
mov qword [rbp + 0x40], r12
mov rax, qword [r8 + 8]
mov qword [rbp + 0x70], rax
mov rax, qword [r8 + 0x10]
mov qword [rbp + 0xa0], rax
mov rcx, qword [rsi + 0x50]
xor eax, eax
nop word [rax + rax]
mov rdi, qword [rsi + 0x58]
mov qword [rsi + 0x58], 0
test al, al
jne 0x1400d3da0
test rdi, rdi
mov qword [rbp + 0x80], rcx
je 0x1400d3f1c
xor r14d, r14d
mov r15d, 0xdf33cb71
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
nop word cs:[rax + rax]
mov eax, dword [0x141dd81a8]
sub eax, dword [0x141dd81ac]
imul eax, eax, 0x3835905
xor eax, 0x480002
or eax, 0x66a7640d
cmp eax, 0x9747909a
ja 0x1400d3de0
mov rbx, rdx
shl rbx, 5
cmp qword [rcx + rbx], 0
je 0x1400d3eb5
mov qword [rbp + 0xb0], rdx
add rbx, rcx
mov eax, dword [0x141dd81b0]
and eax, dword [0x141dd81b4]
and eax, 0x734087dc
imul eax, eax, 0x1340818
add eax, 0x7ef1934f
cmp eax, 0x4fcde2c0
jbe 0x1400d3e60
mov r8, qword [rbx + 8]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call r13
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd81b8]
xor edx, edx
div dword [0x141dd81bc]
mov r12d, eax
and r12d, 0xc0267c2c
add r12d, 0x73a262d7
mov r8, qword [rbx + 8]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call r13
add rsp, 0x20
cmp r12d, 0xf3923d7b
ja 0x1400d3e60
mov rcx, qword [rbp + 0x80]
mov rdx, qword [rbp + 0xb0]
nop
test r14b, r14b
jne 0x1400d3eb0
inc rdx
mov ebx, dword [rbp + 0x68]
nop dword [rax + rax]
mov eax, dword [0x141dd81c0]
add eax, dword [0x141dd81c4]
or eax, 0xa93790b2
imul rax, r15
shr rax, 0x3d
imul eax, eax, 0xc71003ef
cmp eax, 0xb4047dde
ja 0x1400d3ec0
nop word cs:[rax + rax]
mov eax, dword [0x141dd81c8]
or eax, dword [0x141dd81cc]
xor eax, 0x49561155
or eax, 0xb2894c82
imul eax, eax, 0x535abea9
cmp eax, 0x246f6776
jb 0x1400d3ef0
cmp rdx, rdi
jne 0x1400d3de0
mov r15, qword [rbp + 0x70]
mov rax, qword [rbp + 0xa0]
lea r12, [r15 + rax*2]
nop dword [rax + rax]
mov eax, dword [0x141dd81a0]
xor edx, edx
div dword [0x141dd81a4]
xor eax, 0x38520ad0
and eax, 0xbe521ad8
cmp eax, 0xf6831769
je 0x1400d3f30
xor eax, eax
mov rdi, qword [rbp - 0x10]
nop word cs:[rax + rax]
test al, al
jne 0x1400d3f60
xor r14d, r14d
xor eax, eax
mov qword [rbp + 0xb0], rax
xor ecx, ecx
movabs r13, 0x8000000000000000
cmp rcx, qword [rbp + 0xa0]
je 0x1400d4370
mov rdx, rcx
lea r9, [r15 + rcx*2]
xor r8d, r8d
mov rax, r9
nop word cs:[rax + rax]
cmp word [rax], 0
je 0x1400d3fd2
mov ecx, dword [0x141dd81d0]
add ecx, dword [0x141dd81d4]
cmp ecx, 0x28f2d4f6
je 0x1400d3fa6
add rax, 2
nop
test r14b, r14b
jne 0x1400d3fc0
inc r8
cmp rax, r12
jne 0x1400d3fa0
jmp 0x1400d4370
add rdx, r8
jb 0x1400d1242
nop dword [rax + rax]
test r14b, r14b
jne 0x1400d3fe0
cmp rdx, qword [rbp + 0xa0]
ja 0x1400d4553
mov qword [rbp + 0x68], rdx
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400d4000
lea rcx, [r9 + r8*2]
mov r10, r9
nop dword [rax]
test r14b, r14b
jne 0x1400d4010
cmp r10, rcx
je 0x1400d4370
mov eax, dword [0x141dd8228]
add eax, dword [0x141dd822c]
and eax, 0x144010
cmp eax, 0xb95b384e
ja 0x1400d401e
movzx r11d, word [r10]
add r10, 2
mov eax, dword [0x141dd8230]
xor edx, edx
div dword [0x141dd8234]
nop dword [rax]
mov eax, dword [0x141dd8238]
sub eax, dword [0x141dd823c]
add eax, 0x2d3fa550
xor eax, 0x9d535454
cmp eax, 0xb4cd0002
ja 0x1400d4050
cmp r11w, 0x3d
jne 0x1400d4010
sub rsp, 0x20
mov rcx, rdi
mov rdx, r9
call fcn.14008ba90
add rsp, 0x20
mov eax, dword [0x141dd8240]
add eax, dword [0x141dd8244]
imul eax, eax, 0x7893d7e5
or eax, 0x50a10908
and eax, 0x52a50d7d
cmp eax, 0xee650670
ja 0x1400d4087
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0xb0]
mov ecx, dword [0x141dd8248]
and ecx, dword [0x141dd824c]
add ecx, 0xeed08434
and ecx, 0x7258c014
imul ecx, ecx, 0xc9375c6b
cmp ecx, 0x203ab647
ja 0x1400d40bf
cmp r8, rax
jne 0x1400d41a5
test r14b, r14b
je 0x1400d4104
sub rsp, 0x20
mov rcx, qword [rbp + 0x40]
call fcn.1400d6370
add rsp, 0x20
mov r15, qword [rbp + 0x40]
mov edi, dword [0x141dd8250]
imul edi, dword [0x141dd8254]
xor edi, 0x41281000
or edi, 0x2200c268
and edi, 0x6328d269
sub rsp, 0x20
mov rcx, r15
call fcn.1400d6370
add rsp, 0x20
cmp edi, 0x6fc6fe7a
ja 0x1400d4108
mov eax, dword [0x141dd8258]
xor edx, edx
div dword [0x141dd825c]
mov rdi, qword [rbp - 0x10]
mov r15, qword [rbp + 0x70]
mov r8d, 0x9004757b
mov eax, dword [0x141dd8260]
and eax, dword [0x141dd8264]
or eax, 0x6ee958db
xor eax, 0xcedfbd4
cmp eax, 0xc2226a4e
ja 0x1400d415b
mov rdx, qword [rsi + 0x50]
mov eax, dword [0x141dd8268]
mov ecx, dword [0x141dd826c]
add eax, ecx
add eax, 0x4ab5bdb5
imul rax, r8
shr rax, 0x3f
cmp eax, 0xf674d4cc
ja 0x1400d417c
mov r8, qword [rbp + 0xb0]
mov eax, dword [0x141dd8270]
mov ecx, dword [0x141dd8274]
add eax, ecx
add eax, 0xc20460a0
or eax, 0x232e55c
add eax, 0x2d5cf0c3
cmp eax, 0xab730099
ja 0x1400d41ed
mov rax, r8
shl rax, 5
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
movups xmmword [rdx + rax], xmm0
lea rax, [r8 + 1]
mov qword [rsi + 0x58], rax
test r14b, r14b
je 0x1400d420e
mov rax, r8
shl rax, 5
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
movups xmmword [rdx + rax], xmm0
lea rax, [r8 + 1]
mov qword [rsi + 0x58], rax
jmp 0x1400d41c9
mov qword [rbp + 0x80], rdx
mov rcx, qword [rbp + 0x68]
inc rcx
mov qword [rbp + 0xb0], rax
cmp rcx, qword [rbp + 0xa0]
jbe 0x1400d3f7c
mov eax, dword [0x141dd81d8]
and eax, dword [0x141dd81dc]
imul rax, rax, 0x6496be77
shr rax, 0x3d
and eax, 1
or eax, 0x64b08228
cmp eax, 0x39dc5096
jae 0x1400d4747
jmp 0x1400d4774
mov eax, dword [0x141dd8120]
or eax, dword [0x141dd8124]
add eax, 0x88a5db7f
imul rax, rax, 0x130527c5
shr rax, 0x3c
or eax, 0x8da9e6d4
cmp eax, 0x1aa392a5
jb 0x1400d4260
mov eax, dword [0x141dd8140]
xor edx, edx
div dword [0x141dd8144]
mov eax, 0xf3729abb
nop dword [rax + rax]
mov ecx, dword [0x141dd8148]
add ecx, dword [0x141dd814c]
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x1465289c
cmp ecx, 0x65b82de6
ja 0x1400d42a0
mov r14, qword [rsi + 0x50]
mov rdi, qword [rsi + 0x58]
nop word [rax + rax]
mov eax, dword [0x141dd8150]
xor eax, dword [0x141dd8154]
or eax, 0x2d9acb24
add eax, 0x1173e487
and eax, 0xeb420958
cmp eax, 0x97ee6b5a
ja 0x1400d42d0
test rdi, rdi
je 0x1400d446d
xor ebx, ebx
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d431c
inc rbx
cmp rbx, rdi
je 0x1400d446d
mov rax, rbx
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400d4310
add rax, r14
nop dword [rax]
mov ecx, dword [0x141dd8158]
add ecx, dword [0x141dd815c]
imul ecx, ecx, 0xee38332f
cmp ecx, 0x7be23d13
je 0x1400d4330
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
jmp 0x1400d4310
mov eax, dword [0x141dd81f0]
add eax, dword [0x141dd81f4]
xor eax, 0x3aa609c9
add eax, 0xcd5a663d
cmp eax, 0x366a31ae
jb 0x1400d4370
mov eax, 0x932790c3
mov r9, qword [rbp + 0x78]
mov r14, qword [rbp + 0x88]
nop dword [rax]
mov ecx, dword [0x141dd81f8]
sub ecx, dword [0x141dd81fc]
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0xb28278bb
add ecx, 0x18787505
cmp ecx, 0xdae8ad59
ja 0x1400d43a0
cmp qword [rbp + 0x28], 0
je 0x1400d4624
mov eax, dword [0x141dd8200]
and eax, dword [0x141dd8204]
add eax, 0xbdd25570
and eax, 0xb4b01484
imul eax, eax, 0xae20d2b3
cmp eax, 0xda7cdeaa
jne 0x1400d43fd
mov rax, qword [0x141ddb9a0]
mov rdi, r9
mov eax, dword [0x141dd8208]
sub eax, dword [0x141dd820c]
or eax, 0x1049144a
and eax, 0x3c6f747b
add eax, 0x2069812e
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xf554f1bf
ja 0x1400d4400
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r9, rdi
jmp 0x1400d4624
mov eax, dword [0x141dd80f8]
imul eax, dword [0x141dd80fc]
imul eax, eax, 0x4215c383
add eax, 0xc44a8476
or eax, 0x4bd34dcc
cmp eax, 0xcc29206
jb 0x1400d4444
jmp 0x1400d1242
mov rax, qword [r12]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8160]
xor ecx, dword [0x141dd8164]
imul ecx, ecx, 0x8777e957
add ecx, 0xeb763293
cmp ecx, 0x1d74cd16
jb 0x1400d4480
test rax, rax
je 0x1400d4539
mov r15, qword [0x141ddb9a0]
mov eax, dword [0x141dd8168]
xor edx, edx
div dword [0x141dd816c]
and eax, 0x4378182e
add eax, 0x257b4c8c
imul rax, rax, 0x12d8b009
shr rax, 0x38
cmp eax, 0x554d60d6
jbe 0x1400d44f0
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov ebx, dword [0x141dd8170]
imul ebx, dword [0x141dd8174]
xor ebx, 0x40103140
and ebx, 0x5a97b942
add ebx, 0xa8300c8e
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0x93907340
ja 0x1400d4500
mov eax, dword [str.J_ayF]
sub eax, dword [0x141dd817c]
and eax, 0x38004224
cmp eax, 0x88e6e196
jne 0x1400d4587
jmp 0x1400d45c9
mov eax, dword [0x141dd8210]
or eax, dword [0x141dd8214]
and eax, 0xf8b8f0e
xor eax, 0xb6005216
mov ecx, 0x9cc538af
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x84eee17d
jbe 0x1400d4796
jmp 0x1400d47ba
mov eax, dword [0x141dd8180]
imul eax, dword [0x141dd8184]
and eax, 0x1fe1402f
add eax, 0xcf6ff17f
imul rcx, rax, 0x25201abd
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
mov qword [rsi + 0x48], 0
mov qword [rsi + 0x50], 8
cmp eax, 0x6ba43aa1
jne 0x1400d45db
mov qword [rsi + 0x48], 0
mov qword [rsi + 0x50], 8
jmp 0x1400d4587
mov qword [rsi + 0x58], 0
mov ebx, dword [rbp + 0x68]
mov r9, qword [rbp + 0x78]
mov r14, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8188]
imul eax, dword [0x141dd818c]
imul eax, eax, 0x47ba623
add eax, 0x1ad336f3
and eax, 0xb6a33137
cmp eax, 0x70a3bca1
jb 0x1400d4600
lea r15, [rsi + 0x98]
lea rdx, [rsi + 0xb8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8278]
add eax, dword [0x141dd827c]
or eax, 0xa77ba089
imul eax, eax, 0x9f4a5fea
cmp eax, 0x34816c12
jb 0x1400d4640
test ebx, ebx
mov ecx, dword [rbp + 0x90]
je 0x1400d4676
cmp ebx, 1
jne 0x1400d46c2
mov r8b, 1
test ecx, ecx
jne 0x1400d467d
jmp 0x1400d46df
xor r8d, r8d
test ecx, ecx
je 0x1400d46df
cmp ecx, 1
je 0x1400d46ec
cmp ecx, 2
jne 0x1400d4699
movabs rax, 0x8000000000000000
cmp qword [rdx], rax
sete al
jmp 0x1400d46e1
mov eax, dword [0x141dd8280]
xor edx, edx
div dword [0x141dd8284]
add eax, 0xa1b78112
or eax, 0xf2ba868a
and eax, 0xfafff79b
cmp eax, 0x7b65893c
jb 0x1400d4699
jmp 0x1400d1242
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d46d0
cmp qword [r15], r13
sete r8b
test ecx, ecx
jne 0x1400d467d
xor eax, eax
or al, r8b
cmp al, 1
jne 0x1400d4e48
mov dword [rbp + 0x80], r8d
mov qword [rbp + 0xb0], rdx
mov eax, dword [0x141dd8288]
imul eax, dword [0x141dd828c]
or eax, 0x66bceb98
xor eax, 0x1413a71c
imul rcx, rax, 0x70370eb
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x160f8dc9
mov rbx, qword [rbp - 0x40]
mov r12, qword [rbp + 0xa8]
mov r13, r14
mov r14, qword [rbp + 0x48]
jbe 0x1400d47e7
jmp 0x1400d4825
mov eax, dword [0x141dd81e0]
or eax, dword [0x141dd81e4]
and eax, 0xe82eb85b
add eax, 0x54abe46e
mov ecx, 0xb9e9283f
imul rcx, rax
shr rcx, 0x3c
ud2
ud2
mov eax, dword [0x141dd8218]
xor eax, dword [0x141dd821c]
or eax, 0x510b69b4
add eax, 0xc01509cd
xor eax, 0x8376080
ud2
ud2
mov eax, dword [0x141dd8290]
sub eax, dword [0x141dd8294]
or eax, 0xbd01e3bb
imul edi, eax, 0xd6d7ce56
xor edi, 0x7d01e6fa
sub rsp, 0x20
mov rcx, rbx
mov rdx, r12
mov r8, r13
mov r9, r14
call fcn.1400d5580
add rsp, 0x20
cmp edi, 0xc20a956c
jbe 0x1400d4840
sub rsp, 0x20
mov rcx, rbx
mov rdx, r12
mov r8, r13
mov r9, r14
call fcn.1400d5580
add rsp, 0x20
jmp 0x1400d47e7
mov r14, qword [rbx]
mov eax, 0x9f4174c5
nop dword [rax + rax]
mov ecx, dword [0x141dd8298]
sub ecx, dword [0x141dd829c]
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x2190840c
cmp ecx, 0xfbbf8bd8
ja 0x1400d4850
nop word cs:[rax + rax]
mov eax, dword [0x141dd82a0]
sub eax, dword [0x141dd82a4]
imul rax, rax, 0x6b8d7e29
shr rax, 0x3e
or eax, 0x730cd7ac
cmp eax, 0x79ea09da
je 0x1400d4880
movabs rax, 0x8000000000000000
cmp r14, rax
jne 0x1400d4960
mov rax, qword [r15]
shl rax, 1
test rax, rax
mov r12, qword [rbp + 0x78]
movabs rdi, 0x8000000000000000
je 0x1400d4932
mov eax, dword [0x141dd82b8]
xor eax, dword [0x141dd82bc]
mov r8, qword [rsi + 0xa0]
imul eax, eax, 0x7473a8b5
add eax, 0x95011830
cmp eax, 0xe2dc6ce4
jbe 0x1400d4900
mov rax, qword [0x141ddb9a0]
nop dword [rax + rax]
mov eax, dword [0x141dd82c0]
xor edx, edx
div dword [0x141dd82c4]
imul eax, eax, 0x43ae4627
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xb64fddcf
je 0x1400d4900
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd82c8]
xor edx, edx
div dword [0x141dd82cc]
xor eax, 0x4298001
or eax, 0xb9c43dfe
imul eax, eax, 0x3fdb3e64
cmp eax, 0x7f9b4e3
jae 0x1400d4da4
jmp 0x1400d4dbf
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d4970
mov rdi, qword [rbx + 8]
nop dword [rax + rax]
mov eax, dword [0x141dd82a8]
xor eax, dword [0x141dd82ac]
xor eax, 0x343a2037
imul eax, eax, 0xb30893c
cmp eax, 0xf0814629
jb 0x1400d4980
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400d4a12
lea r9, [rdi + rcx*2]
xor r10d, r10d
xor r8d, r8d
mov r11, rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd82b0]
xor edx, edx
div dword [0x141dd82b4]
or eax, 0xbf659480
shr eax, 6
imul rax, rax, 0x12277a1
shr rax, 0x32
or eax, 0x781b6e44
cmp eax, 0x4d53b42f
jb 0x1400d49c0
cmp word [r11], 0
je 0x1400d4a15
add r11, 2
nop dword [rax + rax]
test r10b, r10b
jne 0x1400d4a00
inc r8
cmp r11, r9
jne 0x1400d49c0
mov r8, rcx
jmp 0x1400d4a15
xor r8d, r8d
sub rsp, 0x20
mov r12, qword [rbp + 8]
mov rcx, r12
mov rdx, rdi
call fcn.14008ba90
add rsp, 0x20
mov rbx, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x90]
mov rdx, rbx
mov r9, qword [rbp + 0xb0]
call fcn.1400d65f0
add rsp, 0x20
cmp byte [rbp + 0x80], 0
je 0x1400d4b97
mov eax, dword [0x141dd82d8]
sub eax, dword [0x141dd82dc]
imul rcx, rax, 0x2209ca2f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x3e0198aa
cmp eax, 0xa6b1bc98
je 0x1400d4a60
mov eax, dword [0x141dd82e0]
imul eax, dword [0x141dd82e4]
and eax, 0x84402080
add eax, 0x428f51b7
cmp eax, 0x20ab83bc
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp + 8]
jae 0x1400d4ac0
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov r12, r14
nop word cs:[rax + rax]
mov eax, dword [0x141dd82e8]
xor eax, dword [0x141dd82ec]
xor eax, 0xadee898c
shr eax, 2
imul rax, rax, 0x204a603d
shr rax, 0x3b
or eax, 0xb33988a2
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
cmp eax, 0x10633672
jb 0x1400d4ad0
mov rax, qword [r15]
shl rax, 1
test rax, rax
je 0x1400d4cce
xor eax, eax
test al, al
jne 0x1400d4b1a
mov rbx, qword [rsi + 0xa0]
mov eax, dword [0x141dd82f0]
and eax, dword [0x141dd82f4]
imul eax, eax, 0xb9e9d560
cmp eax, 0x5a3181ac
jne 0x1400d4b45
mov rax, qword [0x141ddb9a0]
mov eax, dword [0x141dd82f8]
xor edx, edx
div dword [0x141dd82fc]
add eax, 0x58b36c3c
xor eax, 0xada9ff7c
imul rax, rax, 0x14d3b803
shr rax, 0x3c
mov r14, qword [0x141ddb9a0]
cmp eax, 0xd56b2654
ja 0x1400d4b45
mov eax, dword [0x141dd8300]
add eax, dword [0x141dd8304]
and eax, 0x524ff4c0
cmp eax, 0x2cd075db
jne 0x1400d4c78
jmp 0x1400d4cb6
mov eax, 0x934b0a89
nop dword [rax]
mov ecx, dword [0x141dd8310]
sub ecx, dword [0x141dd8314]
add ecx, 0xcd6927dd
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x5bd7717c
cmp ecx, 0xb92df24
je 0x1400d4ba0
mov rax, qword [rbp + 8]
mov rax, qword [rax]
nop
mov ecx, dword [0x141dd8318]
imul ecx, dword [0x141dd831c]
and ecx, 0xb4afab21
imul ecx, ecx, 0x89182e92
cmp ecx, 0x61f24f27
je 0x1400d4bd0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8320]
and ecx, dword [0x141dd8324]
or ecx, 0x822e8014
xor ecx, 0xa4d0296a
cmp ecx, 0x2e0e296b
ja 0x1400d4c00
test rax, rax
je 0x1400d4d00
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd8328]
imul eax, dword [0x141dd832c]
xor eax, 0x1d25b6de
add eax, 0x5700618a
and eax, 0x8123a3cf
cmp eax, 0x9280765a
je 0x1400d4c50
jmp 0x1400d4d00
mov eax, dword [0x141dd8308]
sub eax, dword [0x141dd830c]
and eax, 0x2084274a
imul r13d, eax, 0x32db5b3e
and r13d, 0x33244d9c
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r13d, 0x5871b1be
jbe 0x1400d4cce
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d4c78
mov rax, qword [rbp - 0x18]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
xor eax, eax
mov r14, r12
nop word [rax + rax]
test al, al
jne 0x1400d4cf0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8330]
and eax, dword [0x141dd8334]
or eax, 0x806446d2
imul eax, eax, 0xf9fad4f0
cmp eax, 0x9ebd6799
ja 0x1400d4d00
nop
mov eax, dword [0x141dd8338]
and eax, dword [0x141dd833c]
xor eax, 0x89090288
and eax, 0xa98902fd
add eax, 0xdd5fe8ec
cmp eax, 0xd0b57a73
ja 0x1400d4d20
nop word cs:[rax + rax]
mov eax, dword [0x141dd8340]
imul eax, dword [0x141dd8344]
xor eax, 0xa
or eax, 0x593396e5
and eax, 0x593f9eff
cmp eax, 0x75751a5e
ja 0x1400d4d50
test r14, r14
mov r12, qword [rbp + 0x78]
je 0x1400d4e18
mov rbx, qword [0x141ddb9a0]
mov eax, dword [0x141dd8348]
and eax, dword [0x141dd834c]
and eax, 0xc4120200
add eax, 0xa2817a5
cmp eax, 0xb9f0d5dd
jbe 0x1400d4dc4
jmp 0x1400d4e00
mov eax, dword [0x141dd82d0]
and eax, dword [0x141dd82d4]
and eax, 0x8cac58f6
mov qword [r15], rdi
cmp eax, 0x996f29f0
jne 0x1400d4e18
mov qword [r15], rdi
jmp 0x1400d4da4
mov eax, dword [0x141dd8350]
sub eax, dword [0x141dd8354]
and eax, 0x886dbed5
xor eax, 0x3469548f
imul r14d, eax, 0xb63e6625
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x715cdee1
jae 0x1400d4e18
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d4dc4
mov r9, r12
nop dword [rax + rax]
mov eax, dword [0x141dd8358]
add eax, dword [0x141dd835c]
or eax, 0x8aa7aa0a
imul rax, rax, 0x5f26f1f3
shr rax, 0x3e
or eax, 0x87ee2b64
cmp eax, 0x64317b02
jb 0x1400d4e20
mov r15, qword [rbp + 0x60]
movabs r13, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141dd8360]
xor eax, dword [0x141dd8364]
and eax, 0xa81d31a1
add eax, 0x3cb60b5b
cmp eax, 0x52a61090
ja 0x1400d4e60
jmp 0x1400d1630