Function at 0x140009050
Capabilities:
Allocate or change rwx memory
Encode data using xor
Parse pe header

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x528
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x490], xmm15
movaps xmmword [rbp + 0x480], xmm14
movaps xmmword [rbp + 0x470], xmm13
movaps xmmword [rbp + 0x460], xmm12
movaps xmmword [rbp + 0x450], xmm11
movaps xmmword [rbp + 0x440], xmm10
movaps xmmword [rbp + 0x430], xmm9
movaps xmmword [rbp + 0x420], xmm8
movaps xmmword [rbp + 0x410], xmm7
movaps xmmword [rbp + 0x400], xmm6
mov qword [rbp - 0x78], rcx
sub rsp, 0x20
lea rcx, [rbp + 0x180]
mov r8d, 0x1c0
xor edx, edx
call sub.ntdll.dll_memset
add rsp, 0x20
mov eax, dword [0x140027570]
cmp dword [0x140027574], 9
setg cl
mov edx, eax
not edx
add edx, 0x884f731c
imul edx, eax
and dl, cl
mov byte [rbp + 0x3e4], dl
mov al, byte [rbp + 0x3e4]
mov eax, 2
lea rcx, [0x1400213e0]
movsxd rdx, dword [rcx + rax*4 - 8]
xor dword [rbp + rdx*4 + 0x180], 0x1e27
movsxd rdx, dword [rcx + rax*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x1e27
movsxd rdx, dword [rcx + rax*4]
xor dword [rbp + rdx*4 + 0x180], 0x1e27
add rax, 3
cmp rax, 0x71
jne 0x140009110
xor eax, eax
mov qword [rbp - 0x70], rax
lea r15, [0x1400215a0]
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
movaps xmm14, xmmword [0x14001f590]
movaps xmm13, xmmword [0x14001f570]
movaps xmm7, xmmword [0x14001f5d0]
movaps xmm15, xmmword [0x14001f5a0]
movaps xmm6, xmmword [0x14001f5c0]
movaps xmm8, xmmword [0x14001f5b0]
lea r13, [0x140022b40]
lea r9, [0x140022460]
lea r14, str._______._0123456789:_____ABCDEFG___abcdefghijkl
lea r12, str.____._0123456789:_____ABCDEFG__abcdefghijkl
lea r10, [0x140021900]
lea rsi, str._t_n_v_f_r
lea r11, [0x140021750]
lea rdi, [0x1400227b0]
mov eax, 0
mov qword [rbp - 0x30], rax
mov eax, 0
mov qword [rbp - 0x28], rax
mov eax, 0
mov qword [rbp - 0x68], rax
mov eax, 0
mov qword [rbp - 0x18], rax
mov eax, 0
mov qword [rbp - 8], rax
mov eax, 0
mov qword [rbp], rax
mov eax, 0
mov qword [rbp - 0x60], rax
mov eax, 0
mov qword [rbp + 0x28], rax
mov eax, 0
mov qword [rbp + 0x38], rax
mov eax, 0
mov qword [rbp + 8], rax
mov eax, 0
mov qword [rbp - 0x58], rax
mov eax, 0
mov qword [rbp + 0x30], rax
mov eax, 0
mov qword [rbp + 0x40], rax
mov eax, 0
mov qword [rbp + 0x50], rax
mov eax, 0
mov qword [rbp + 0x18], rax
mov eax, 0
mov qword [rbp - 0x10], rax
mov eax, 0
mov qword [rbp - 0x20], rax
mov eax, 0
mov qword [rbp - 0x50], rax
mov eax, 0
mov qword [rbp - 0x48], rax
mov eax, 0
mov qword [rbp - 0x40], rax
mov eax, 0
mov qword [rbp + 0x68], rax
mov eax, 0
mov qword [rbp + 0x78], rax
mov eax, 0
mov qword [rbp + 0x58], rax
mov eax, 0
mov qword [rbp - 0x38], rax
mov eax, 0
mov qword [rbp + 0xa0], rax
mov eax, 0
mov qword [rbp + 0xa8], rax
mov eax, 0
mov qword [rbp + 0x88], rax
mov eax, 0
mov qword [rbp + 0x98], rax
mov eax, 0
mov qword [rbp + 0xc0], rax
mov eax, 0
mov qword [rbp + 0x170], rax
mov eax, 0
mov qword [rbp + 0x160], rax
mov eax, 0
mov qword [rbp + 0x48], rax
mov eax, 0
mov qword [rbp + 0x20], rax
mov eax, 0
mov qword [rbp + 0x10], rax
mov eax, 0
mov qword [rbp + 0x168], rax
mov eax, 0
mov qword [rbp + 0x158], rax
mov eax, 0
mov qword [rbp + 0x150], rax
mov eax, 0
mov qword [rbp + 0x148], rax
mov eax, 0
mov qword [rbp + 0x140], rax
mov eax, 0
mov qword [rbp + 0x138], rax
mov eax, 0
mov qword [rbp + 0x130], rax
mov eax, 0
mov qword [rbp + 0x128], rax
mov eax, 0
mov qword [rbp + 0x120], rax
mov eax, 0
mov qword [rbp + 0x118], rax
mov eax, 0
mov qword [rbp + 0x108], rax
mov eax, 0
mov qword [rbp + 0xe8], rax
mov eax, 0
mov qword [rbp + 0xd8], rax
mov eax, 0
mov qword [rbp + 0x60], rax
mov eax, 0
mov qword [rbp + 0x70], rax
mov eax, 0
mov qword [rbp + 0x80], rax
xor eax, eax
mov qword [rbp + 0x90], rax
xor eax, eax
mov qword [rbp + 0x110], rax
xor eax, eax
mov qword [rbp + 0xf8], rax
xor eax, eax
mov qword [rbp + 0xf0], rax
xor eax, eax
mov qword [rbp + 0xb0], rax
xor eax, eax
mov qword [rbp + 0xb8], rax
xor eax, eax
mov qword [rbp + 0xc8], rax
xor eax, eax
mov qword [rbp + 0xd0], rax
xor eax, eax
mov qword [rbp + 0x100], rax
xor eax, eax
mov qword [rbp + 0xe0], rax
mov eax, 0xded
movaps xmm9, xmmword [0x14001f550]
movaps xmm11, xmmword [0x14001f540]
movaps xmm12, xmmword [0x14001f560]
movaps xmm10, xmmword [0x14001f580]
jmp 0x140009500
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x388]
cmp dword [rax + 0x20], 0x10000
setne byte [rbp + 0x3ec]
mov eax, dword [0x140027578]
mov ecx, dword [0x14002757c]
cmp ecx, 9
setg r8b
cmp ecx, 0xa
setl dl
mov ebx, 1
sub ebx, eax
imul ebx, eax
test bl, 1
sete al
mov ebx, edx
and bl, al
and r8b, al
mov ecx, edx
xor cl, al
xor cl, r8b
or al, dl
xor al, dl
xor al, cl
or al, bl
cmp byte [rbp + 0x40], 0
lea rbx, [0x140022320]
je 0x14000d7d4
test al, al
mov eax, 0x7e4d
mov ecx, 0x54d9
cmovne eax, ecx
xor eax, dword [rbp + 0x1c4]
mov cl, 1
mov qword [rbp + 0x40], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
lea r9, [0x140022460]
lea r10, [0x140021900]
lea r11, [0x140021750]
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x3fcd
jle 0x140009560
cmp eax, 0x65c1
jg 0x140009610
cmp eax, 0x4f87
jg 0x140009742
cmp eax, 0x493a
jg 0x1400099a6
cmp eax, 0x41fa
jle 0x140009f61
cmp eax, 0x4473
jg 0x14000ab8c
cmp eax, 0x41fb
je 0x14000b499
cmp eax, 0x4276
jne 0x140009500
mov eax, dword [rbp + 0x2d0]
mov ecx, 0x7604
xor eax, ecx
jmp 0x140009500
cmp eax, 0x2295
jle 0x1400096d0
cmp eax, 0x2e40
jg 0x14000980e
cmp eax, 0x2780
jg 0x140009a39
cmp eax, 0x237a
jle 0x140009fda
cmp eax, 0x241b
jg 0x14000abc9
cmp eax, 0x237b
je 0x14000b5c4
cmp eax, 0x23a2
jne 0x140009500
mov rax, qword [rbp + 0x340]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x28]
add rcx, qword [rax]
mov rax, qword [rbp + 0x340]
mov qword [rax], rcx
mov rax, qword [rbp + 0x340]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3c0]
mov rcx, qword [rcx]
mov qword [rcx + 8], rax
mov rax, qword [rbp + 0x340]
mov eax, dword [rbp + 0x32c]
mov ecx, 0x66e1
xor eax, ecx
jmp 0x140009500
cmp eax, 0x71f8
jg 0x14000988d
cmp eax, 0x6947
jg 0x140009abd
cmp eax, 0x67bb
jle 0x14000a09d
cmp eax, 0x6865
jg 0x14000ac52
cmp eax, 0x67bc
je 0x14000b5f1
cmp eax, 0x6829
jne 0x140009500
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x358]
mov rax, qword [rbp + 0x388]
mov rcx, qword [rax + 8]
sub rsp, 0x20
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x358]
mov dword [rcx], eax
mov rax, qword [rbp + 0x358]
cmp dword [rax], 0
setne byte [rbp + 0x3eb]
mov eax, dword [rbp + 0x2d8]
mov ecx, 0x45b4
xor eax, ecx
jmp 0x140009500
cmp eax, 0xdec
jle 0x14000993b
cmp eax, 0x1816
jg 0x140009b10
cmp eax, 0x166e
jle 0x14000a116
cmp eax, 0x1726
jg 0x14000ad4c
cmp eax, 0x166f
je 0x14000b629
cmp eax, 0x16da
jne 0x140009500
mov rax, qword [rbp + 0x3d0]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
movzx ecx, word [rcx + 6]
cmp dword [rax], ecx
setl byte [rbp + 0x3e9]
mov eax, dword [rbp + 0x2f4]
mov ecx, 0x3d05
xor eax, ecx
jmp 0x140009500
cmp eax, 0x5c57
jg 0x140009c51
cmp eax, 0x5265
jle 0x14000a193
cmp eax, 0x567c
jg 0x14000ae22
cmp eax, 0x5266
je 0x14000b6b2
cmp eax, 0x5307
jne 0x140009500
mov eax, dword [0x140027580]
cmp dword [0x140027584], 0xa
setl cl
mov edx, 1
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x110], 0
jne 0x1400097eb
movups xmm0, xmmword [rbp + 0x288]
xorps xmm0, xmmword [0x14001f4e0]
movups xmmword [rbp + 0x288], xmm0
xor dword [rbp + 0x298], 0x20d4
xor dword [rbp + 0x29c], 0x20d4
xor dword [rbp + 0x328], 0x20d4
xor dword [rbp + 0x32c], 0x20d4
xor dword [rbp + 0x330], 0x20d4
test al, al
mov eax, 0x399f
mov ecx, 0x2d30
cmovne eax, ecx
xor eax, dword [rbp + 0x284]
mov cl, 1
mov qword [rbp + 0x110], rcx
jmp 0x140009500
cmp eax, 0x3879
jg 0x140009ceb
cmp eax, 0x34a2
jle 0x14000a2b4
cmp eax, 0x36c4
jg 0x14000ae8a
cmp eax, 0x34a3
je 0x14000b70c
cmp eax, 0x3600
jne 0x140009500
cmp dword [0x140027588], 0xa
mov eax, dword [0x14002758c]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x68], 0
je 0x14000d80e
test al, al
mov eax, 0x2a51
mov ecx, 0x2297
cmovne eax, ecx
xor eax, dword [rbp + 0x1f0]
mov cl, 1
mov qword [rbp + 0x68], rcx
jmp 0x140009500
cmp eax, 0x7bb9
jle 0x140009e4c
cmp eax, 0x7d9b
jle 0x14000a31b
cmp eax, 0x7f44
jg 0x14000aeee
cmp eax, 0x7d9c
je 0x14000b786
cmp eax, 0x7f0f
jne 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov eax, dword [0x140027590]
mov ecx, dword [0x140027594]
cmp ecx, 0xa
setl dl
cmp ecx, 9
setg cl
lea ebx, [rax + 1]
imul ebx, eax
test bl, 1
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
sete al
or cl, al
xor cl, dl
xor dl, al
test cl, cl
mov eax, 0x5216
mov ecx, 0x684f
cmovne eax, ecx
test dl, dl
mov ecx, 0x5216
cmovne eax, ecx
xor eax, dword [rbp + 0x1dc]
jmp 0x140009500
cmp eax, 0x6c4
jle 0x140009ed9
cmp eax, 0x775
jle 0x14000a36d
cmp eax, 0xbca
jg 0x14000af2b
cmp eax, 0x776
je 0x14000b7de
cmp eax, 0xa00
jne 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov eax, dword [rbp + 0x2e0]
mov ecx, 0x1a16
xor eax, ecx
jmp 0x140009500
cmp eax, 0x4bfe
jle 0x14000a3d7
cmp eax, 0x4dc6
jg 0x14000b060
cmp eax, 0x4bff
je 0x14000b857
cmp eax, 0x4ca4
jne 0x140009500
mov rax, qword [rbp + 0x3a8]
mov qword [rax], 0
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov eax, dword [0x140027598]
mov ecx, dword [0x14002759c]
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl cl
lea ebx, [rax + 1]
imul ebx, eax
and bl, 1
mov eax, ebx
and al, cl
or dl, bl
xor dl, al
or bl, cl
xor bl, dl
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
mov eax, 0x449e
mov ecx, 0x1ae4
cmovne eax, ecx
xor eax, dword [rbp + 0x194]
jmp 0x140009500
cmp eax, 0x29fa
jle 0x14000a4cc
cmp eax, 0x2ce5
jg 0x14000b0e9
cmp eax, 0x29fb
je 0x14000b8a1
cmp eax, 0x2cbc
jne 0x140009500
cmp dword [0x1400275a0], 0xa
mov eax, dword [0x1400275a4]
setl cl
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x60], 0
jne 0x140009a9d
xor dword [rbp + 0x268], 0x1c08
xor dword [rbp + 0x318], 0x1c08
test al, al
mov eax, 0x76ca
mov ecx, 0x220e
cmovne eax, ecx
xor eax, dword [rbp + 0x264]
mov cl, 1
mov qword [rbp + 0x60], rcx
jmp 0x140009500
cmp eax, 0x6fea
jle 0x14000a506
cmp eax, 0x71cc
jg 0x14000b12f
cmp eax, 0x6feb
je 0x14000b9ad
cmp eax, 0x7067
jne 0x140009500
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
cmp qword [rax], 0
setne byte [rbp + 0x3e7]
mov eax, dword [rbp + 0x310]
mov ecx, 0x637
xor eax, ecx
jmp 0x140009500
cmp eax, 0x19d7
jle 0x14000a5db
cmp eax, 0x217b
jg 0x14000b1c3
cmp eax, 0x19d8
je 0x14000ba7f
cmp eax, 0x1cc1
jne 0x140009500
mov eax, dword [0x1400275a8]
cmp dword [0x1400275ac], 0xa
setl cl
lea edx, [rax - 0x4b63d266]
not edx
add edx, eax
add edx, eax
add edx, 0xb49c2d9a
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x150], 0
jne 0x140009c2e
movups xmm0, xmmword [rbp + 0x23c]
movups xmm1, xmmword [rbp + 0x24c]
movups xmm2, xmmword [rbp + 0x25c]
movups xmm3, xmmword [rbp + 0x26c]
xorps xmm0, xmm14
movups xmmword [rbp + 0x23c], xmm0
xorps xmm1, xmm14
movups xmmword [rbp + 0x24c], xmm1
xorps xmm2, xmm14
movups xmmword [rbp + 0x25c], xmm2
xorps xmm3, xmm14
movups xmmword [rbp + 0x26c], xmm3
movups xmm0, xmmword [rbp + 0x27c]
xorps xmm0, xmm14
movups xmmword [rbp + 0x27c], xmm0
movups xmm0, xmmword [rbp + 0x28c]
xorps xmm0, xmm14
movups xmmword [rbp + 0x28c], xmm0
xor dword [rbp + 0x29c], 0x2fb4
movups xmm0, xmmword [rbp + 0x308]
xorps xmm0, xmm14
movups xmmword [rbp + 0x308], xmm0
movups xmm0, xmmword [rbp + 0x318]
xorps xmm0, xmm14
movups xmmword [rbp + 0x318], xmm0
xor dword [rbp + 0x328], 0x2fb4
xor dword [rbp + 0x32c], 0x2fb4
xor dword [rbp + 0x330], 0x2fb4
test al, al
mov eax, 0x892
mov ecx, 0x1a23
cmovne eax, ecx
xor eax, dword [rbp + 0x238]
mov cl, 1
mov qword [rbp + 0x150], rcx
jmp 0x140009500
cmp eax, 0x60ef
jle 0x14000a6a4
cmp eax, 0x637b
jg 0x14000b25d
cmp eax, 0x60f0
je 0x14000bb41
cmp eax, 0x610e
jne 0x140009500
mov rax, qword [rbp + 0x388]
mov rax, qword [rbp + 0x360]
mov rdx, qword [rbp + 0x388]
sub rsp, 0x20
mov r8d, 0x30
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x360]
mov qword [rcx], rax
mov rax, qword [rbp + 0x360]
cmp qword [rax], 0
sete byte [rbp + 0x3ed]
mov eax, dword [rbp + 0x2cc]
mov ecx, 0x66ae
xor eax, ecx
jmp 0x140009500
cmp eax, 0x3ae7
jle 0x14000a92a
cmp eax, 0x3cb0
jg 0x14000b2df
cmp eax, 0x3ae8
je 0x14000bb9f
cmp eax, 0x3be0
jne 0x140009500
mov rax, qword [rbp + 0x390]
mov dword [rax], 2
mov rax, qword [rbp + 0x3d0]
mov ecx, dword [0x1400275b0]
mov edx, dword [0x1400275b4]
cmp edx, 0xa
setl r8b
cmp edx, 9
setg dl
mov ebx, 1
sub ebx, ecx
imul ebx, ecx
test bl, 1
sete cl
or dl, cl
mov eax, r8d
xor al, dl
xor r8b, cl
xor dl, cl
xor r8b, 1
or r8b, al
xor r8b, dl
cmp byte [rbp + 0x160], 0
jne 0x140009e21
movups xmm0, xmmword [rbp + 0x230]
movups xmm1, xmmword [rbp + 0x240]
movups xmm2, xmmword [rbp + 0x250]
movups xmm3, xmmword [rbp + 0x260]
xorps xmm0, xmm6
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm6
movups xmmword [rbp + 0x240], xmm1
xorps xmm2, xmm6
movups xmmword [rbp + 0x250], xmm2
xorps xmm3, xmm6
movups xmmword [rbp + 0x260], xmm3
movups xmm0, xmmword [rbp + 0x270]
xorps xmm0, xmm6
movups xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [rbp + 0x280]
xorps xmm0, xmm6
movups xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmm6
movups xmmword [rbp + 0x290], xmm0
movups xmm0, xmmword [rbp + 0x304]
xorps xmm0, xmm6
movups xmmword [rbp + 0x304], xmm0
movups xmm0, xmmword [rbp + 0x314]
xorps xmm0, xmm6
movups xmmword [rbp + 0x314], xmm0
movups xmm0, xmmword [rbp + 0x324]
xorps xmm0, xmm6
movups xmmword [rbp + 0x324], xmm0
test r8b, r8b
mov eax, 0x13a2
mov ecx, 0x273
cmovne eax, ecx
xor eax, dword [rbp + 0x21c]
mov cl, 1
mov qword [rbp + 0x160], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
cmp eax, 0x7585
jle 0x14000a9c6
cmp eax, 0x7627
jle 0x14000b368
cmp eax, 0x7628
je 0x14000bbd5
cmp eax, 0x7857
jne 0x140009500
mov al, byte [rbp + 0x3ea]
cmp byte [rbp + 0x58], 0
jne 0x140009eb9
mov ecx, 1
nop dword [rax]
movsxd rdx, dword [rdi + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x98e
movsxd rdx, dword [rdi + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x98e
add rcx, 2
cmp rcx, 0x3f
jne 0x140009e90
test al, 1
mov eax, 0x780e
mov ecx, 0x3dc9
cmovne eax, ecx
xor eax, dword [rbp + 0x1f8]
mov cl, 1
mov qword [rbp + 0x58], rcx
jmp 0x140009500
cmp eax, 0x3cf
jg 0x14000aa46
cmp eax, 0x77
je 0x14000bc65
cmp eax, 0x1b3
je 0x140009448
cmp eax, 0x2cf
jne 0x140009500
cmp dword [0x1400275b8], 0xa
mov eax, dword [0x1400275bc]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x90], 0
jne 0x140009f3e
xor dword [rbp + 0x280], 0x44e
xor dword [rbp + 0x324], 0x44e
test al, al
mov eax, 0x3ee3
mov ecx, 0xe3e
cmovne eax, ecx
xor eax, dword [rbp + 0x27c]
mov cl, 1
mov qword [rbp + 0x90], rcx
jmp 0x140009500
cmp eax, 0x3fce
je 0x14000bf49
cmp eax, 0x406d
je 0x14000bfd9
cmp eax, 0x4177
jne 0x140009500
cmp dword [0x1400275c0], 0xa
mov eax, dword [0x1400275c4]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x10], 0
jne 0x140009fba
xor dword [rbp + 0x22c], 0x6e3f
xor dword [rbp + 0x300], 0x6e3f
test al, al
mov eax, 0x515c
mov ecx, 0x2b64
cmovne eax, ecx
xor eax, dword [rbp + 0x228]
mov cl, 1
mov qword [rbp + 0x10], rcx
jmp 0x140009500
cmp eax, 0x2296
je 0x14000c057
cmp eax, 0x22ec
je 0x14000c0cc
cmp eax, 0x2357
jne 0x140009500
mov rax, qword [rbp + 0x3d0]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
movzx ecx, word [rcx + 6]
cmp dword [rax], ecx
setl byte [rbp + 0x3e9]
cmp dword [0x1400275c8], 0xa
mov eax, dword [0x1400275cc]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x98], 0
jne 0x14000a07a
mov ecx, 1
nop word cs:[rax + rax]
nop
movsxd rdx, dword [r13 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x5c3b
movsxd rdx, dword [r13 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x5c3b
add rcx, 2
cmp rcx, 0x33
jne 0x14000a050
test al, al
mov eax, 0x888
mov ecx, 0x24ba
cmovne eax, ecx
xor eax, dword [rbp + 0x210]
mov cl, 1
mov qword [rbp + 0x98], rcx
jmp 0x140009500
cmp eax, 0x65c2
je 0x14000c161
cmp eax, 0x665c
je 0x14000c1b9
cmp eax, 0x67a2
jne 0x140009500
cmp dword [0x1400275d0], 0xa
mov eax, dword [0x1400275d4]
setl cl
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x58], 0
jne 0x14000a0f6
xor dword [rbp + 0x1bc], 0x5039
xor dword [rbp + 0x2d0], 0x5039
test al, al
mov eax, 0x19cd
mov ecx, 0x263d
cmovne eax, ecx
xor eax, dword [rbp + 0x1b8]
mov cl, 1
mov qword [rbp - 0x58], rcx
jmp 0x140009500
cmp eax, 0xded
je 0x14000c217
cmp eax, 0xdf9
je 0x14000c27a
cmp eax, 0xeef
jne 0x140009500
mov eax, dword [0x1400275d8]
cmp dword [0x1400275dc], 0xa
setl cl
mov edx, 1
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x48], 0
jne 0x14000a173
xor dword [rbp + 0x1e4], 0x4819
xor dword [rbp + 0x2e0], 0x4819
test al, al
mov eax, 0xa69
mov ecx, 0x520f
cmovne eax, ecx
xor eax, dword [rbp + 0x1e0]
mov cl, 1
mov qword [rbp - 0x48], rcx
jmp 0x140009500
cmp eax, 0x4f88
je 0x14000c2d2
cmp eax, 0x502a
je 0x14000c321
cmp eax, 0x5156
jne 0x140009500
mov rax, qword [rbp + 0x378]
mov rax, qword [rbp + 0x370]
mov rax, qword [rbp + 0x370]
mov qword [rax], 0
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
mov rax, qword [rax]
mov rcx, rax
not rcx
movabs rbx, 0x8000000000000000
lea rdx, [rbx - 1]
or rdx, rcx
and rcx, rbx
add rdx, rax
or rax, rbx
add rcx, rdx
add rcx, 1
cmp rax, rcx
setne byte [rbp + 0x3e6]
mov eax, dword [0x1400275e0]
cmp dword [0x1400275e4], 0xa
setl cl
mov edx, 0xa343082b
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xe8], 0
jne 0x14000a28a
movups xmm0, xmmword [rbp + 0x260]
xorps xmm0, xmmword [0x14001f500]
movups xmmword [rbp + 0x260], xmm0
xor dword [rbp + 0x270], 0x2d81
xor dword [rbp + 0x274], 0x2d81
xor dword [rbp + 0x278], 0x2d81
xor dword [rbp + 0x318], 0x2d81
xor dword [rbp + 0x31c], 0x2d81
xor dword [rbp + 0x320], 0x2d81
test al, al
mov eax, 0x1ff3
mov ecx, 0x4ef8
cmovne eax, ecx
xor eax, dword [rbp + 0x25c]
mov cl, 1
mov qword [rbp + 0xe8], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
cmp eax, 0x2e41
je 0x14000c347
cmp eax, 0x2f73
je 0x14000c3b2
cmp eax, 0x31c7
jne 0x140009500
mov rax, qword [rbp + 0x3d0]
mov eax, dword [rax]
add eax, 1
mov rcx, qword [rbp + 0x3d0]
mov dword [rcx], eax
mov eax, dword [0x1400275e8]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0x3f63
mov ecx, 0x70ba
cmove eax, ecx
cmp dword [0x1400275ec], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x22c]
jmp 0x140009500
cmp eax, 0x7bba
je 0x14000c3fa
cmp eax, 0x7d01
je 0x14000c427
cmp eax, 0x7d86
jne 0x140009500
mov eax, dword [0x1400275f0]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0x49f4
mov ecx, 0x74c7
cmove eax, ecx
cmp dword [0x1400275f4], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x1bc]
jmp 0x140009500
cmp eax, 0x6c5
je 0x14000c4c4
cmp eax, 0x6e8
je 0x14000c5a5
cmp eax, 0x707
jne 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x388]
cmp dword [rax + 0x20], 0x10000
setne byte [rbp + 0x3ec]
mov eax, dword [rbp + 0x2d4]
mov ecx, 0x78f9
xor eax, ecx
jmp 0x140009500
cmp eax, 0x493b
je 0x14000c5fd
cmp eax, 0x4998
je 0x14000c62d
cmp eax, 0x4a99
jne 0x140009500
mov rax, qword [rbp + 0x348]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3c8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0xc]
add rcx, qword [rax]
mov rax, qword [rbp + 0x348]
mov qword [rax], rcx
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x380]
mov rax, qword [rbp + 0x348]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x380]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3c8]
mov rcx, qword [rcx]
mov ecx, dword [rcx]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3d8]
mov qword [rax], rcx
mov rax, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3c8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x10]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3b0]
mov qword [rax], rcx
mov eax, dword [rbp + 0x30c]
mov ecx, 0xcb3
xor eax, ecx
jmp 0x140009500
cmp eax, 0x2781
je 0x14000c688
cmp eax, 0x2829
je 0x14000c711
cmp eax, 0x2897
jne 0x140009500
mov rax, qword [rbp + 0x3f8]
mov eax, dword [rbp + 0x338]
mov ecx, 0x6f30
xor eax, ecx
jmp 0x140009500
cmp eax, 0x6948
je 0x14000c757
cmp eax, 0x6e5e
je 0x14000c770
cmp eax, 0x6f36
jne 0x140009500
mov eax, dword [0x1400275f8]
cmp dword [0x1400275fc], 0xa
setl cl
mov edx, 1
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x128], 0
jne 0x14000a5b8
movups xmm0, xmmword [rbp + 0x250]
movups xmm1, xmmword [rbp + 0x260]
movups xmm2, xmmword [rbp + 0x270]
movups xmm3, xmmword [rbp + 0x310]
xorps xmm0, xmm11
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm11
movups xmmword [rbp + 0x260], xmm1
xorps xmm2, xmm11
movups xmmword [rbp + 0x270], xmm2
xor dword [rbp + 0x280], 0x72dc
xorps xmm3, xmm11
movups xmmword [rbp + 0x310], xmm3
xor dword [rbp + 0x320], 0x72dc
xor dword [rbp + 0x324], 0x72dc
test al, al
mov eax, 0xf47
mov ecx, 0x74eb
cmovne eax, ecx
xor eax, dword [rbp + 0x24c]
mov cl, 1
mov qword [rbp + 0x128], rcx
jmp 0x140009500
cmp eax, 0x1817
je 0x14000c8d7
cmp eax, 0x18f4
je 0x14000c92d
cmp eax, 0x1924
jne 0x140009500
mov rax, qword [rbp + 0x378]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3b0]
mov rcx, qword [rcx]
mov qword [rcx], rax
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
add rax, 8
mov rcx, qword [rbp + 0x3d8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3b0]
mov rax, qword [rax]
add rax, 8
mov rcx, qword [rbp + 0x3b0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x370]
mov rax, qword [rbp + 0x378]
mov eax, dword [0x140027600]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0x7571
mov ecx, 0xc28
cmove eax, ecx
cmp dword [0x140027604], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x278]
jmp 0x140009500
cmp eax, 0x5c58
je 0x14000c992
cmp eax, 0x5da6
je 0x14000caa3
cmp eax, 0x5fe7
jne 0x140009500
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3a8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3a0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x398], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x390], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3f8], rax
mov eax, 0x30
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x388], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x360], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x358], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3f0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3b8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3d0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x350], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x178], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3c8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x348], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x380], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3d8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3b0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x378], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x370], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x368], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3c0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x340], rax
mov rax, qword [rbp + 0x3a0]
mov rcx, qword [rbp - 0x78]
mov qword [rax], rcx
mov rax, qword [rbp + 0x398]
mov rax, qword [rbp + 0x3a0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x398]
mov qword [rcx], rax
mov rax, qword [rbp + 0x398]
mov rax, qword [rax]
movzx eax, word [rax]
cmp eax, 0x5a4d
setne byte [rbp + 0x3ef]
mov eax, dword [rbp + 0x2bc]
mov ecx, 0x1e76
xor eax, ecx
jmp 0x140009500
cmp eax, 0x387a
je 0x14000cb37
cmp eax, 0x39a3
je 0x14000cc20
cmp eax, 0x3ac6
jne 0x140009500
mov rax, qword [rbp + 0x3a8]
mov qword [rax], 0
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov eax, dword [0x140027608]
mov ecx, dword [0x14002760c]
cmp ecx, 9
setg r8b
cmp ecx, 0xa
setl cl
lea ebx, [rax + 1]
imul ebx, eax
and ebx, 1
sete al
mov edx, ecx
and dl, al
and r8b, al
or bl, cl
xor bl, r8b
xor bl, dl
xor cl, al
test bl, bl
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
mov eax, 0x2474
mov edx, 0x3f3e
cmovne eax, edx
test cl, cl
mov ecx, 0x2474
cmovne eax, ecx
xor eax, dword [rbp + 0x1a8]
jmp 0x140009500
cmp eax, 0x71f9
je 0x14000cc7e
cmp eax, 0x7258
je 0x14000cd1c
cmp eax, 0x7270
jne 0x140009500
mov eax, dword [0x140027610]
cmp dword [0x140027614], 0xa
setl cl
mov edx, eax
not edx
add edx, 0x2e5c4cfc
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x38], 0
jne 0x14000aa26
xor dword [rbp + 0x200], 0x24e
xor dword [rbp + 0x2ec], 0x24e
test al, al
mov eax, 0x9bf
mov ecx, 0x2e51
cmovne eax, ecx
xor eax, dword [rbp + 0x1fc]
mov cl, 1
mov qword [rbp - 0x38], rcx
jmp 0x140009500
cmp eax, 0x3d0
je 0x14000cd87
cmp eax, 0x426
je 0x14000cddf
cmp eax, 0x49f
jne 0x140009500
mov rax, qword [rbp + 0x350]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3b8]
mov rcx, qword [rcx]
mov rdx, qword [rbp + 0x3d0]
movsxd rdx, dword [rdx]
lea rdx, [rdx + rdx*4]
mov ecx, dword [rcx + rdx*8 + 0xc]
add rcx, qword [rax]
mov rax, qword [rbp + 0x350]
mov qword [rax], rcx
mov rax, qword [rbp + 0x350]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3a0]
mov rdx, qword [rbp + 0x3b8]
mov rdx, qword [rdx]
mov rbx, qword [rbp + 0x3d0]
movsxd rbx, dword [rbx]
lea rbx, [rbx + rbx*4]
mov edx, dword [rdx + rbx*8 + 0x14]
add rdx, qword [rax]
mov rax, qword [rbp + 0x3b8]
mov rax, qword [rax]
mov rbx, qword [rbp + 0x3d0]
movsxd rbx, dword [rbx]
lea rbx, [rbx + rbx*4]
mov r8d, dword [rax + rbx*8 + 0x10]
sub rsp, 0x20
call sub.ntdll.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0x178]
mov rax, qword [rbp + 0x178]
mov dword [rax], 0
mov rax, qword [rbp + 0x178]
mov rax, qword [rbp + 0x350]
mov ecx, dword [0x140027618]
mov edx, dword [0x14002761c]
cmp edx, 9
setg al
cmp edx, 0xa
setl dl
lea ebx, [rcx + 1]
imul ebx, ecx
test bl, 1
sete cl
or al, cl
xor al, dl
xor dl, cl
xor al, 1
or al, dl
cmp byte [rbp + 0x20], 0
jne 0x14000ab6c
xor dword [rbp + 0x228], 0x1ade
xor dword [rbp + 0x22c], 0x1ade
xor dword [rbp + 0x300], 0x1ade
test al, al
mov eax, 0x6b8
mov ecx, 0x410a
cmovne eax, ecx
xor eax, dword [rbp + 0x224]
mov cl, 1
mov qword [rbp + 0x20], rcx
jmp 0x1400094d5
cmp eax, 0x4474
je 0x14000ce5c
cmp eax, 0x485b
jne 0x140009500
mov rax, qword [rbp + 0x398]
mov rax, qword [rbp + 0x3a8]
mov rax, qword [rax]
mov qword [rbp - 0x80], rax
mov eax, dword [rbp + 0x33c]
mov ecx, 0x58ee
xor eax, ecx
jmp 0x140009500
cmp eax, 0x241c
je 0x14000cec9
cmp eax, 0x25aa
jne 0x140009500
mov al, byte [rbp + 0x3eb]
cmp byte [rbp - 0x20], 0
jne 0x14000ac32
movups xmm0, xmmword [rbp + 0x1d8]
xorps xmm0, xmmword [0x14001f5e0]
movups xmmword [rbp + 0x1d8], xmm0
xor dword [rbp + 0x1e8], 0x7c93
xor dword [rbp + 0x1ec], 0x7c93
xor dword [rbp + 0x2dc], 0x7c93
xor dword [rbp + 0x2e0], 0x7c93
xor dword [rbp + 0x2e4], 0x7c93
test al, 1
mov eax, 0x7f2a
mov ecx, 0x7215
cmovne eax, ecx
xor eax, dword [rbp + 0x1d4]
mov cl, 1
mov qword [rbp - 0x20], rcx
jmp 0x140009500
cmp eax, 0x6866
je 0x14000cf30
cmp eax, 0x68be
jne 0x140009500
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x358]
mov rax, qword [rbp + 0x388]
mov rcx, qword [rax + 8]
sub rsp, 0x20
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
add rsp, 0x20
mov rcx, qword [rbp + 0x358]
mov dword [rcx], eax
mov rax, qword [rbp + 0x358]
cmp dword [rax], 0
setne byte [rbp + 0x3eb]
cmp dword [0x140027620], 0xa
mov eax, dword [0x140027624]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x10], 0
jne 0x14000ad2c
movups xmm0, xmmword [rbp + 0x1d4]
xorps xmm0, xmmword [0x14001f5f0]
movups xmmword [rbp + 0x1d4], xmm0
xor dword [rbp + 0x1e4], 0x51f0
xor dword [rbp + 0x1e8], 0x51f0
xor dword [rbp + 0x1ec], 0x51f0
xor dword [rbp + 0x2dc], 0x51f0
xor dword [rbp + 0x2e0], 0x51f0
xor dword [rbp + 0x2e4], 0x51f0
test al, al
mov eax, 0x4523
mov ecx, 0x8a0
cmovne eax, ecx
xor eax, dword [rbp + 0x1d0]
mov cl, 1
mov qword [rbp - 0x10], rcx
jmp 0x1400094dc
cmp eax, 0x1727
je 0x14000cfd8
cmp eax, 0x1750
jne 0x140009500
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rbp + 0x3a0]
mov rcx, qword [rbp + 0x398]
mov rcx, qword [rcx]
movsxd rcx, dword [rcx + 0x3c]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3f8]
mov qword [rax], rcx
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
cmp dword [rax], 0x4550
setne byte [rbp + 0x3ee]
mov eax, dword [0x140027628]
cmp dword [0x14002762c], 0xa
setl cl
lea edx, [rax + 1]
imul edx, eax
and edx, 1
sete al
mov r8d, ecx
and r8b, al
and dl, cl
xor dl, cl
xor dl, al
or cl, al
xor cl, dl
xor cl, al
mov eax, r8d
xor al, 1
mov edx, ecx
and dl, al
mov ebx, r8d
or bl, cl
xor bl, dl
xor r8b, cl
or al, cl
xor al, r8b
xor al, bl
cmp byte [rbp - 8], 0
lea rbx, str._b_t_n_v_f_r
je 0x14000d84d
test al, 1
mov eax, 0x21ab
mov ecx, 0x32d8
cmovne eax, ecx
xor eax, dword [rbp + 0x19c]
mov cl, 1
mov qword [rbp - 8], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
cmp eax, 0x567d
je 0x14000d045
cmp eax, 0x5707
jne 0x140009500
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rbp + 0x3a0]
mov rcx, qword [rbp + 0x398]
mov rcx, qword [rcx]
movsxd rcx, dword [rcx + 0x3c]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3f8]
mov qword [rax], rcx
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
cmp dword [rax], 0x4550
setne byte [rbp + 0x3ee]
mov eax, dword [rbp + 0x2c4]
mov ecx, 0x728f
xor eax, ecx
jmp 0x140009500
cmp eax, 0x36c5
je 0x14000d088
cmp eax, 0x37b7
jne 0x140009500
cmp dword [0x140027630], 0xa
mov eax, dword [0x140027634]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xa0], 0
je 0x14000d89e
test al, al
mov eax, 0x33b1
mov ecx, 0x1a6f
cmovne eax, ecx
xor eax, dword [rbp + 0x204]
mov cl, 1
mov qword [rbp + 0xa0], rcx
jmp 0x140009500
cmp eax, 0x7f45
je 0x14000d193
cmp eax, 0x7f64
jne 0x140009500
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x360]
mov rax, qword [rbp + 0x388]
mov eax, dword [rbp + 0x334]
mov ecx, 0x4c6b
xor eax, ecx
jmp 0x140009500
cmp eax, 0xbcb
je 0x14000d24c
cmp eax, 0xd77
jne 0x140009500
mov rax, qword [rbp + 0x3c0]
sub rsp, 0x20
mov ecx, 0x18
call sub.msvcrt.dll_malloc
add rsp, 0x20
mov rcx, qword [rbp + 0x3c0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3c0]
mov rcx, qword [rcx]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov eax, dword [rax + 0x50]
mov rcx, qword [rbp + 0x3c0]
mov rcx, qword [rcx]
mov dword [rcx + 0x10], eax
mov rax, qword [rbp + 0x3c0]
mov rax, qword [rax]
mov qword [rax + 8], 0
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
movzx eax, word [rax + 0x16]
mov ecx, eax
not ecx
add ecx, ecx
or ecx, 0xfffa
add ecx, eax
mov edx, 0xfffb
sub edx, ecx
test edx, eax
setne byte [rbp + 0x3e5]
mov eax, dword [0x140027638]
cmp dword [0x14002763c], 0xa
setl cl
lea edx, [rax - 0x52fb43f8]
not edx
lea ebx, [rax + rax]
add edx, ebx
add edx, 0xad04bc08
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xf8], 0
jne 0x14000b03d
movups xmm0, xmmword [rbp + 0x28c]
xorps xmm0, xmmword [0x14001f4d0]
movups xmmword [rbp + 0x28c], xmm0
xor dword [rbp + 0x29c], 0x5f11
xor dword [rbp + 0x32c], 0x5f11
xor dword [rbp + 0x330], 0x5f11
test al, al
mov eax, 0x194b
mov ecx, 0x490b
cmovne eax, ecx
xor eax, dword [rbp + 0x288]
mov cl, 1
mov qword [rbp + 0xf8], rcx
jmp 0x1400094d5
cmp eax, 0x4dc7
je 0x14000d30e
cmp eax, 0x4f21
jne 0x140009500
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3f8]
mov rdx, qword [rax]
sub rsp, 0x20
call sym.PerformRelocations64
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x90]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3c8]
mov qword [rax], rcx
mov eax, dword [rbp + 0x304]
mov ecx, 0x1760
xor eax, ecx
jmp 0x140009500
cmp eax, 0x2ce6
je 0x14000d3f7
cmp eax, 0x2d93
jne 0x140009500
mov al, byte [rbp + 0x3ec]
cmp byte [rbp + 0x50], 0
je 0x14000d8ee
test al, 1
mov eax, 0x29e7
mov ecx, 0x6e0f
cmovne eax, ecx
xor eax, dword [rbp + 0x1c8]
mov cl, 1
mov qword [rbp + 0x50], rcx
jmp 0x140009500
cmp eax, 0x71cd
je 0x14000d588
cmp eax, 0x71e8
jne 0x140009500
cmp dword [0x140027640], 0xa
mov eax, dword [0x140027644]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x18], 0
jne 0x14000b1a3
movups xmm0, xmmword [rbp + 0x1d0]
movups xmm1, xmmword [rbp + 0x1e0]
movups xmm2, xmmword [rbp + 0x2d8]
movaps xmm3, xmmword [0x14001f600]
xorps xmm0, xmm3
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm3
movups xmmword [rbp + 0x1e0], xmm1
xorps xmm2, xmm3
movups xmmword [rbp + 0x2d8], xmm2
test al, al
mov eax, 0x7c7b
mov ecx, 0x7cec
cmovne eax, ecx
xor eax, dword [rbp + 0x1cc]
mov cl, 1
mov qword [rbp + 0x18], rcx
jmp 0x140009500
cmp eax, 0x217c
je 0x14000d693
cmp eax, 0x2275
jne 0x140009500
cmp dword [0x140027648], 0xa
mov eax, dword [0x14002764c]
setl cl
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x108], 0
jne 0x14000b23a
movups xmm0, xmmword [rbp + 0x25c]
movups xmm1, xmmword [rbp + 0x26c]
movups xmm2, xmmword [rbp + 0x314]
movaps xmm3, xmmword [0x14001f510]
xorps xmm0, xmm3
movups xmmword [rbp + 0x25c], xmm0
xorps xmm1, xmm3
movups xmmword [rbp + 0x26c], xmm1
xorps xmm2, xmm3
movups xmmword [rbp + 0x314], xmm2
test al, al
mov eax, 0x40b7
mov ecx, 0x479c
cmovne eax, ecx
xor eax, dword [rbp + 0x258]
mov cl, 1
mov qword [rbp + 0x108], rcx
jmp 0x140009500
cmp eax, 0x637c
je 0x14000d779
cmp eax, 0x63bb
jne 0x140009500
mov ecx, dword [0x140027650]
cmp dword [0x140027654], 0xa
setl al
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
sete r8b
mov ebx, eax
and bl, dl
mov ecx, eax
or cl, r8b
or dl, al
xor dl, bl
xor dl, cl
xor dl, 1
xor al, r8b
or al, dl
cmp byte [rbp + 0x28], 0
lea rbx, [0x140021da0]
je 0x14000d93e
test al, al
mov eax, 0x521e
mov ecx, 0xb6a
cmovne eax, ecx
xor eax, dword [rbp + 0x1ac]
mov cl, 1
mov qword [rbp + 0x28], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
cmp eax, 0x3cb1
je 0x14000d7a0
cmp eax, 0x3e03
jne 0x140009500
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov edx, dword [rax + 0x50]
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x3f0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3f0]
cmp qword [rax], 0
sete byte [rbp + 0x3ea]
mov eax, dword [rbp + 0x2e8]
mov ecx, 0x76a
xor eax, ecx
jmp 0x140009500
cmp eax, 0x7586
jne 0x14000da7e
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3a0]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov r8d, dword [rax + 0x54]
sub rsp, 0x20
call sub.ntdll.dll_memcpy
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3b8]
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov edi, 0x89eb521e
lea rcx, [rax + rdi]
add rcx, 0x37b26d99
movabs rsi, 0xffffffff3e624048
lea rdx, [rsi + 0x18]
and rdx, rcx
mov rcx, rsi
sub rcx, rax
lea rbx, [rdi + 0x37b26d81]
or rbx, rcx
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
movzx ecx, word [rcx + 0x14]
add rax, rdi
lea rdi, [0x1400227b0]
add rax, rdx
add rax, rbx
mov edx, ecx
and edx, eax
mov rbx, rax
xor rbx, rcx
not rcx
and rcx, rax
add rax, rsi
lea r13, [0x140022b40]
lea r14, str._______._0123456789:_____ABCDEFG___abcdefghijkl
lea r12, str.____._0123456789:_____ABCDEFG__abcdefghijkl
lea rsi, str._t_n_v_f_r
sub rax, rcx
add rax, rdx
add rax, rbx
add rax, 0x37b26db3
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
mov rcx, qword [rbp + 0x3b8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d0]
mov rax, qword [rbp + 0x3d0]
mov dword [rax], 0
mov eax, dword [rbp + 0x2f0]
mov ecx, 0x52f4
xor eax, ecx
jmp 0x140009500
mov eax, dword [0x140027658]
cmp dword [0x14002765c], 0xa
setl cl
mov edx, 0xc04d42e1
sub edx, eax
mov ebx, edx
and ebx, 1
mov esi, edx
xor esi, 1
add ebx, esi
add ebx, 2
add ebx, edx
not ebx
add ebx, 0x3fb2bd20
imul ebx, eax
test bl, 1
sete al
or al, cl
cmp byte [rbp + 0x168], 0
jne 0x14000b5a1
movups xmm0, xmmword [rbp + 0x234]
movups xmm1, xmmword [rbp + 0x244]
movups xmm2, xmmword [rbp + 0x254]
movups xmm3, xmmword [rbp + 0x264]
xorps xmm0, xmm8
movups xmmword [rbp + 0x234], xmm0
xorps xmm1, xmm8
movups xmmword [rbp + 0x244], xmm1
xorps xmm2, xmm8
movups xmmword [rbp + 0x254], xmm2
xorps xmm3, xmm8
movups xmmword [rbp + 0x264], xmm3
movups xmm0, xmmword [rbp + 0x274]
xorps xmm0, xmm8
movups xmmword [rbp + 0x274], xmm0
movups xmm0, xmmword [rbp + 0x284]
xorps xmm0, xmm8
movups xmmword [rbp + 0x284], xmm0
xor dword [rbp + 0x294], 0x7b6d
xor dword [rbp + 0x298], 0x7b6d
xor dword [rbp + 0x29c], 0x7b6d
movups xmm0, xmmword [rbp + 0x304]
xorps xmm0, xmm8
movups xmmword [rbp + 0x304], xmm0
movups xmm0, xmmword [rbp + 0x314]
xorps xmm0, xmm8
movups xmmword [rbp + 0x314], xmm0
movups xmm0, xmmword [rbp + 0x324]
xorps xmm0, xmm8
movups xmmword [rbp + 0x324], xmm0
test al, al
mov eax, 0xfca
mov ecx, 0x6c0d
cmovne eax, ecx
xor eax, dword [rbp + 0x230]
mov cl, 1
mov qword [rbp + 0x168], rcx
jmp 0x14000d224
mov rax, qword [rbp + 0x3a8]
mov qword [rax], 0
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov eax, dword [rbp + 0x2c0]
mov ecx, 0x2b41
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x3f8]
mov eax, dword [0x140027660]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x201b
mov ecx, 0x758d
cmove eax, ecx
cmp dword [0x140027664], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x2ac]
jmp 0x140009500
mov rax, qword [rbp + 0x378]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3b0]
mov rcx, qword [rcx]
mov qword [rcx], rax
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
add rax, 8
mov rcx, qword [rbp + 0x3d8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3b0]
mov rax, qword [rax]
add rax, 8
mov rcx, qword [rbp + 0x3b0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x370]
mov rax, qword [rbp + 0x378]
mov eax, dword [rbp + 0x320]
mov ecx, 0x7a3a
xor eax, ecx
jmp 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov eax, dword [0x140027668]
cmp dword [0x14002766c], 9
setg cl
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete al
or al, cl
xor al, dl
mov eax, 0x4270
mov ecx, 0x4e98
cmovne eax, ecx
xor eax, dword [rbp + 0x1e4]
jmp 0x140009500
mov ecx, dword [0x140027670]
cmp dword [0x140027674], 0xa
setl dl
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
sete r8b
mov ebx, edx
and bl, al
mov ecx, edx
or cl, r8b
or al, dl
xor al, bl
xor al, cl
xor dl, r8b
xor al, 1
or al, dl
cmp byte [rbp + 0x80], 0
jne 0x14000b75c
xor dword [rbp + 0x278], 0x3738
xor dword [rbp + 0x320], 0x3738
test al, al
mov eax, 0x4249
mov ecx, 0x4d02
cmovne eax, ecx
xor eax, dword [rbp + 0x274]
mov cl, 1
mov qword [rbp + 0x80], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
cmp dword [0x140027678], 0xa
mov eax, dword [0x14002767c]
setl cl
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x70], 0
jne 0x14000b7be
xor dword [rbp + 0x270], 0x4b40
xor dword [rbp + 0x31c], 0x4b40
test al, al
mov eax, 0x25df
mov ecx, 0x19e1
cmovne eax, ecx
xor eax, dword [rbp + 0x26c]
mov cl, 1
mov qword [rbp + 0x70], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3e6]
cmp byte [rbp + 0xd8], 0
jne 0x14000b834
movups xmm0, xmmword [rbp + 0x264]
xorps xmm0, xmmword [0x14001f4f0]
movups xmmword [rbp + 0x264], xmm0
xor dword [rbp + 0x274], 0x3029
xor dword [rbp + 0x278], 0x3029
xor dword [rbp + 0x318], 0x3029
xor dword [rbp + 0x31c], 0x3029
xor dword [rbp + 0x320], 0x3029
test al, 1
mov eax, 0x1993
mov ecx, 0x48b3
cmovne eax, ecx
xor eax, dword [rbp + 0x260]
mov cl, 1
mov qword [rbp + 0xd8], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x3d0]
mov eax, dword [rax]
lea ecx, [rax + rax]
sub ecx, eax
add ecx, 0xbbcb9a96
mov eax, ecx
not eax
lea edx, [rcx + rcx]
and eax, 0xbbcb9a95
or ecx, 0xbbcb9a95
sub edx, ecx
add eax, edx
add eax, 0x4434656b
mov rcx, qword [rbp + 0x3d0]
mov dword [rcx], eax
mov eax, dword [rbp + 0x300]
mov ecx, 0x455b
xor eax, ecx
jmp 0x140009500
cmp dword [0x140027680], 0xa
mov eax, dword [0x140027684]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x170], 0
jne 0x14000b98a
xor dword [rbp + 0x21c], 0x30a8
movups xmm0, xmmword [rbp + 0x230]
movups xmm1, xmmword [rbp + 0x240]
movups xmm2, xmmword [rbp + 0x250]
movups xmm3, xmmword [rbp + 0x260]
xorps xmm0, xmm7
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm7
movups xmmword [rbp + 0x240], xmm1
xorps xmm2, xmm7
movups xmmword [rbp + 0x250], xmm2
xorps xmm3, xmm7
movups xmmword [rbp + 0x260], xmm3
movups xmm0, xmmword [rbp + 0x270]
xorps xmm0, xmm7
movups xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [rbp + 0x280]
xorps xmm0, xmm7
movups xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmm7
movups xmmword [rbp + 0x290], xmm0
xor dword [rbp + 0x2f8], 0x30a8
movups xmm0, xmmword [rbp + 0x304]
xorps xmm0, xmm7
movups xmmword [rbp + 0x304], xmm0
movups xmm0, xmmword [rbp + 0x314]
xorps xmm0, xmm7
movups xmmword [rbp + 0x314], xmm0
movups xmm0, xmmword [rbp + 0x324]
xorps xmm0, xmm7
movups xmmword [rbp + 0x324], xmm0
test al, al
mov eax, 0x230a
mov ecx, 0x48c0
cmovne eax, ecx
xor eax, dword [rbp + 0x218]
mov cl, 1
mov qword [rbp + 0x170], rcx
jmp 0x140009500
cmp dword [0x140027688], 0xa
mov eax, dword [0x14002768c]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x138], 0
jne 0x14000ba5c
movups xmm0, xmmword [rbp + 0x248]
movups xmm1, xmmword [rbp + 0x258]
movups xmm2, xmmword [rbp + 0x268]
movups xmm3, xmmword [rbp + 0x30c]
xorps xmm0, xmm12
movups xmmword [rbp + 0x248], xmm0
xorps xmm1, xmm12
movups xmmword [rbp + 0x258], xmm1
xorps xmm2, xmm12
movups xmmword [rbp + 0x268], xmm2
xor dword [rbp + 0x278], 0x42aa
xor dword [rbp + 0x27c], 0x42aa
xor dword [rbp + 0x280], 0x42aa
xorps xmm3, xmm12
movups xmmword [rbp + 0x30c], xmm3
xor dword [rbp + 0x31c], 0x42aa
xor dword [rbp + 0x320], 0x42aa
xor dword [rbp + 0x324], 0x42aa
test al, al
mov eax, 0x6ade
mov ecx, 0x4e19
cmovne eax, ecx
xor eax, dword [rbp + 0x244]
mov cl, 1
mov qword [rbp + 0x138], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x3c0]
sub rsp, 0x20
mov ecx, 0x18
call sub.msvcrt.dll_malloc
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x3c0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3c0]
mov rcx, qword [rcx]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov eax, dword [rax + 0x50]
mov rcx, qword [rbp + 0x3c0]
mov rcx, qword [rcx]
mov dword [rcx + 0x10], eax
mov rax, qword [rbp + 0x3c0]
mov rax, qword [rax]
mov qword [rax + 8], 0
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
movzx eax, word [rax + 0x16]
mov ecx, eax
xor ecx, 0xfffffffd
mov edx, ecx
and edx, eax
mov ebx, eax
and ebx, 0xfffffffd
add ebx, edx
not eax
or eax, ecx
add eax, ebx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
cmp eax, 0xffffffff
setne byte [rbp + 0x3e5]
mov eax, dword [rbp + 0x328]
mov ecx, 0xde4
xor eax, ecx
jmp 0x140009500
cmp dword [0x140027690], 0xa
mov eax, dword [0x140027694]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xd0], 0
jne 0x14000bb7c
xor dword [rbp + 0x2ac], 0x3b9c
xor dword [rbp + 0x338], 0x3b9c
test al, al
mov eax, 0x1b87
mov ecx, 0x54ac
cmovne eax, ecx
xor eax, dword [rbp + 0x2a8]
mov cl, 1
mov qword [rbp + 0xd0], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3e9]
cmp byte [rbp + 0xc0], 0
je 0x14000d98e
test al, 1
mov eax, 0x6b92
mov ecx, 0x65e8
cmovne eax, ecx
xor eax, dword [rbp + 0x214]
mov cl, 1
mov qword [rbp + 0xc0], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x380]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
movzx edx, word [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x378]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
movzx eax, word [rax]
mov rcx, qword [rbp + 0x370]
mov qword [rcx], rax
mov eax, dword [0x140027698]
mov ecx, 1
sub ecx, eax
imul ecx, eax
test cl, 1
mov eax, 0x6ac2
mov ecx, 0x7c8d
cmove eax, ecx
cmp dword [0x14002769c], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x268]
jmp 0x140009500
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3a8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3a0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x398], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x390], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3f8], rax
mov eax, 0x30
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x388], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x360], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x358], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3f0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3b8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3d0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x350], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x178], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3c8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x348], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x380], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3d8], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3b0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x378], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x370], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x368], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x3c0], rax
mov eax, 0x10
call fcn.14001cf30
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x340], rax
mov rax, qword [rbp + 0x3a0]
mov rcx, qword [rbp - 0x78]
mov qword [rax], rcx
mov rax, qword [rbp + 0x398]
mov rax, qword [rbp + 0x3a0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x398]
mov qword [rcx], rax
mov rax, qword [rbp + 0x398]
mov rax, qword [rax]
movzx eax, word [rax]
cmp eax, 0x5a4d
setne byte [rbp + 0x3ef]
cmp dword [0x1400276a0], 0xa
mov eax, dword [0x1400276a4]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x30], 0
jne 0x14000bf29
mov ecx, 2
nop word cs:[rax + rax]
nop dword [rax + rax]
movsxd rdx, dword [r15 + rcx*4 - 8]
xor dword [rbp + rdx*4 + 0x180], 0x52f6
movsxd rdx, dword [r15 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x52f6
movsxd rdx, dword [r15 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x52f6
add rcx, 3
cmp rcx, 0x6e
jne 0x14000bef0
test al, al
mov eax, 0x41e6
mov ecx, 0x573a
cmovne eax, ecx
xor eax, dword [rbp + 0x188]
mov cl, 1
mov qword [rbp - 0x30], rcx
jmp 0x140009500
cmp dword [0x1400276a8], 0xa
mov eax, dword [0x1400276ac]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x18], 0
jne 0x14000bfb9
mov ecx, 2
nop word cs:[rax + rax]
nop dword [rax]
movsxd rdx, dword [r10 + rcx*4 - 8]
xor dword [rbp + rdx*4 + 0x180], 0x20ad
movsxd rdx, dword [r10 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x20ad
movsxd rdx, dword [r10 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x20ad
add rcx, 3
cmp rcx, 0x65
jne 0x14000bf80
test al, al
mov eax, 0x1275
mov ecx, 0x5222
cmovne eax, ecx
xor eax, dword [rbp + 0x198]
mov cl, 1
mov qword [rbp - 0x18], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x340]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x28]
add rcx, qword [rax]
mov rax, qword [rbp + 0x340]
mov qword [rax], rcx
mov rax, qword [rbp + 0x340]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3c0]
mov rcx, qword [rcx]
mov qword [rcx + 8], rax
mov rax, qword [rbp + 0x340]
mov eax, dword [0x1400276b0]
mov ecx, eax
not ecx
lea edx, [rax + rax]
add edx, ecx
imul edx, eax
test dl, 1
mov eax, 0x52e
mov ecx, 0x1f2f
cmove eax, ecx
cmp dword [0x1400276b4], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x294]
jmp 0x140009500
mov eax, dword [0x1400276b8]
cmp dword [0x1400276bc], 0xa
setl cl
lea edx, [rax + 0x5de55fad]
not edx
lea ebx, [rax + rax]
add ebx, 0x5de55fad
add ebx, edx
imul ebx, eax
test bl, 1
sete al
or al, cl
cmp byte [rbp + 0xb0], 0
jne 0x14000c0a2
xor dword [rbp + 0x294], 0x15de
xor dword [rbp + 0x32c], 0x15de
test al, al
mov eax, 0x10f0
mov ecx, 0x733f
cmovne eax, ecx
xor eax, dword [rbp + 0x290]
mov cl, 1
mov qword [rbp + 0xb0], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
mov rax, qword [rbp + 0x380]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
mov rax, qword [rax]
mov rdx, rax
not rdx
mov rbx, rax
xor rbx, 0xffffffffffff0000
and rax, rbx
and rdx, 0xffffffffffff0000
sub rdx, rbx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
lea rdx, [rdx + rax*2]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x378]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
movzx eax, word [rax]
mov rcx, qword [rbp + 0x370]
mov qword [rcx], rax
mov eax, dword [rbp + 0x318]
mov ecx, 0x3e06
xor eax, ecx
jmp 0x140009500
cmp dword [0x1400276c0], 0xa
mov eax, dword [0x1400276c4]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x68], 0
jne 0x14000c199
xor dword [rbp + 0x194], 0x2297
xor dword [rbp + 0x2c0], 0x2297
test al, al
mov eax, 0x6609
mov ecx, 0x9d6
cmovne eax, ecx
xor eax, dword [rbp + 0x190]
mov cl, 1
mov qword [rbp - 0x68], rcx
jmp 0x140009500
cmp dword [0x1400276c8], 0xa
mov eax, dword [0x1400276cc]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xc8], 0
jne 0x14000c1f4
xor dword [rbp + 0x2a4], 0x124b
xor dword [rbp + 0x334], 0x124b
test al, al
mov eax, 0x3953
mov ecx, 0x5e20
cmovne eax, ecx
xor eax, dword [rbp + 0x2a0]
mov cl, 1
mov qword [rbp + 0xc8], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3e4]
cmp byte [rbp - 0x70], 0
jne 0x14000c25a
mov ecx, 1
nop dword [rax + rax]
lea rsi, [0x140021220]
movsxd rdx, dword [rsi + rcx*4 - 4]
xor byte [rbp + rdx*4 + 0x180], 0x26
movsxd rdx, dword [rsi + rcx*4]
xor byte [rbp + rdx*4 + 0x180], 0x26
add rcx, 2
cmp rcx, 0x6f
jne 0x14000c230
test al, 1
mov eax, 0x1e50
mov ecx, 0x41c0
cmovne eax, ecx
xor eax, dword [rbp + 0x180]
mov cl, 1
mov qword [rbp - 0x70], rcx
jmp 0x14000d22b
cmp dword [0x1400276d0], 0xa
mov eax, dword [0x1400276d4]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x60], 0
jne 0x14000c2b2
xor dword [rbp + 0x1a8], 0x7794
xor dword [rbp + 0x2c8], 0x7794
test al, al
mov eax, 0x48aa
mov ecx, 0x9d6
cmovne eax, ecx
xor eax, dword [rbp + 0x1a4]
mov cl, 1
mov qword [rbp - 0x60], rcx
jmp 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3a8]
mov qword [rax], 0
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov eax, dword [rbp + 0x2ec]
mov ecx, 0x2c1f
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x390]
mov dword [rax], 2
mov rax, qword [rbp + 0x3d0]
mov eax, dword [rbp + 0x2f8]
mov ecx, 0x7868
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3a8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov rax, qword [rbp + 0x3c0]
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rbp + 0x3b8]
mov eax, dword [0x1400276d8]
mov ecx, 0xa2afce3d
sub ecx, eax
imul ecx, eax
test cl, 1
mov eax, 0x2b30
mov ecx, 0x621f
cmove eax, ecx
cmp dword [0x1400276dc], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x29c]
jmp 0x140009500
mov rax, qword [rbp + 0x3c0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3a8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov rax, qword [rbp + 0x3c0]
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rbp + 0x3b8]
mov eax, dword [rbp + 0x330]
mov ecx, 0x2a02
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x3a8]
mov qword [rax], 0
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
mov eax, dword [rbp + 0x2c8]
mov ecx, 0x7e42
xor eax, ecx
jmp 0x140009500
mov ecx, dword [0x1400276e0]
mov eax, dword [0x1400276e4]
cmp eax, 9
setg dl
cmp eax, 0xa
setl r8b
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
sete cl
mov ebx, r8d
or al, r8b
and r8b, cl
xor bl, cl
and dl, cl
xor dl, bl
xor al, dl
mov ecx, eax
xor cl, 1
mov edx, r8d
not dl
and dl, cl
or cl, r8b
xor cl, dl
or al, r8b
xor al, cl
cmp byte [rbp + 0x100], 0
jne 0x14000c49a
xor dword [rbp + 0x2b4], 0xabb
xor dword [rbp + 0x2b8], 0xabb
xor dword [rbp + 0x33c], 0xabb
test al, 1
mov eax, 0x5255
mov ecx, 0xd29
cmovne eax, ecx
xor eax, dword [rbp + 0x2b0]
mov cl, 1
mov qword [rbp + 0x100], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
mov rax, qword [rbp + 0x350]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3b8]
mov rcx, qword [rcx]
mov rdx, qword [rbp + 0x3d0]
movsxd rdx, dword [rdx]
lea rdx, [rdx + rdx*4]
mov ecx, dword [rcx + rdx*8 + 0xc]
add rcx, qword [rax]
mov rax, qword [rbp + 0x350]
mov qword [rax], rcx
mov rax, qword [rbp + 0x350]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3a0]
mov rdx, qword [rbp + 0x3b8]
mov rdx, qword [rdx]
mov rbx, qword [rbp + 0x3d0]
movsxd rbx, dword [rbx]
lea rbx, [rbx + rbx*4]
mov edx, dword [rdx + rbx*8 + 0x14]
add rdx, qword [rax]
mov rax, qword [rbp + 0x3b8]
mov rax, qword [rax]
mov rbx, qword [rbp + 0x3d0]
movsxd rbx, dword [rbx]
lea rbx, [rbx + rbx*4]
mov r8d, dword [rax + rbx*8 + 0x10]
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
sub rsp, 0x20
call sub.ntdll.dll_memcpy
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x178]
mov rax, qword [rbp + 0x178]
mov dword [rax], 0
mov rax, qword [rbp + 0x178]
mov rax, qword [rbp + 0x350]
mov eax, dword [rbp + 0x2fc]
mov ecx, 0x4e2
xor eax, ecx
jmp 0x140009500
cmp dword [0x1400276e8], 0xa
mov eax, dword [0x1400276ec]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x40], 0
jne 0x14000c5dd
xor dword [rbp + 0x1ec], 0x70d1
xor dword [rbp + 0x2e4], 0x70d1
test al, al
mov eax, 0x6921
mov ecx, 0x2475
cmovne eax, ecx
xor eax, dword [rbp + 0x1e8]
mov cl, 1
mov qword [rbp - 0x40], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3ef]
cmp byte [rbp - 0x28], 0
je 0x14000d9de
test al, 1
mov eax, 0x7339
mov ecx, 0x2935
cmovne eax, ecx
xor eax, dword [rbp + 0x18c]
mov cl, 1
mov qword [rbp - 0x28], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3e5]
cmp byte [rbp + 0xf0], 0
jne 0x14000c665
movups xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmmword [0x14001f4c0]
movups xmmword [rbp + 0x290], xmm0
xor dword [rbp + 0x32c], 0x6cd0
xor dword [rbp + 0x330], 0x6cd0
test al, 1
mov eax, 0x6621
mov ecx, 0x7d14
cmovne eax, ecx
xor eax, dword [rbp + 0x28c]
mov cl, 1
mov qword [rbp + 0xf0], rcx
jmp 0x140009500
mov ecx, dword [0x1400276f0]
cmp dword [0x1400276f4], 9
setg dl
mov ebx, 0x6643c1ea
sub ebx, ecx
mov eax, ebx
xor eax, 0x17
add eax, ecx
add eax, ebx
add eax, 0x6643c1e6
imul eax, ecx
and al, dl
cmp byte [rbp + 0x48], 0
jne 0x14000c6ea
xor dword [rbp + 0x224], 0x735d
xor dword [rbp + 0x228], 0x735d
xor dword [rbp + 0x22c], 0x735d
xor dword [rbp + 0x2fc], 0x735d
xor dword [rbp + 0x300], 0x735d
test al, al
mov eax, 0x77bf
mov ecx, 0x75e5
cmovne eax, ecx
xor eax, dword [rbp + 0x220]
mov cl, 1
mov qword [rbp + 0x48], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
jmp 0x140009500
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rax]
add rax, 0x14
mov rcx, qword [rbp + 0x3c8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rbp + 0x380]
mov rax, qword [rbp + 0x348]
mov eax, dword [rbp + 0x324]
mov ecx, 0xa70
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x358]
mov eax, dword [rbp + 0x2e4]
mov ecx, 0x54a4
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x348]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3c8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0xc]
add rcx, qword [rax]
mov rax, qword [rbp + 0x348]
mov qword [rax], rcx
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x380]
mov rax, qword [rbp + 0x348]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
add rsp, 0x20
mov rcx, qword [rbp + 0x380]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3c8]
mov rcx, qword [rcx]
mov ecx, dword [rcx]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3d8]
mov qword [rax], rcx
mov rax, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3c8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x10]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3b0]
mov qword [rax], rcx
cmp dword [0x1400276f8], 0xa
mov eax, dword [0x1400276fc]
setl cl
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x130], 0
jne 0x14000c8b4
movups xmm0, xmmword [rbp + 0x24c]
movups xmm1, xmmword [rbp + 0x25c]
movups xmm2, xmmword [rbp + 0x26c]
movups xmm3, xmmword [rbp + 0x310]
xorps xmm0, xmm9
movups xmmword [rbp + 0x24c], xmm0
xorps xmm1, xmm9
movups xmmword [rbp + 0x25c], xmm1
xorps xmm2, xmm9
movups xmmword [rbp + 0x26c], xmm2
xor dword [rbp + 0x27c], 0x1dcd
xor dword [rbp + 0x280], 0x1dcd
xorps xmm3, xmm9
movups xmmword [rbp + 0x310], xmm3
xor dword [rbp + 0x320], 0x1dcd
xor dword [rbp + 0x324], 0x1dcd
test al, al
mov eax, 0x2874
mov ecx, 0xddb
cmovne eax, ecx
xor eax, dword [rbp + 0x248]
mov cl, 1
mov qword [rbp + 0x130], rcx
jmp 0x1400094dc
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x360]
mov rax, qword [rbp + 0x388]
mov eax, dword [0x140027700]
lea ecx, [rax - 0x72d63f5]
not ecx
lea edx, [rax + rax]
add edx, 0xf8d29c0b
add edx, ecx
imul edx, eax
test dl, 1
mov eax, 0x2b18
mov ecx, 0x348c
cmove eax, ecx
cmp dword [0x140027704], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x2a4]
jmp 0x140009500
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rax]
add rax, 0x14
mov rcx, qword [rbp + 0x3c8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3b0]
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rbp + 0x380]
mov rax, qword [rbp + 0x348]
mov eax, dword [0x140027708]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0x3aad
mov ecx, 0xe45
cmove eax, ecx
cmp dword [0x14002770c], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x280]
jmp 0x140009500
sub rsp, 0x20
call sym.anti_debug
add rsp, 0x20
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3a0]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov r8d, dword [rax + 0x54]
sub rsp, 0x20
call sub.ntdll.dll_memcpy
lea rsi, str.______._0123456789:_____ABCDEFG___abcdefghijkl
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3b8]
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
movzx ecx, word [rcx + 0x14]
lea rdx, [rax + rax]
sub rdx, rax
lea rax, [rdx + rcx]
add rax, 0x18
mov rcx, qword [rbp + 0x3b8]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3d0]
mov rax, qword [rbp + 0x3d0]
mov dword [rax], 0
mov ecx, dword [0x140027710]
mov edx, dword [0x140027714]
cmp edx, 0xa
setl al
cmp edx, 9
setg dl
lea ebx, [rcx + 1]
imul ebx, ecx
test bl, 1
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
sete cl
or dl, cl
xor dl, al
xor dl, 1
xor al, cl
or al, dl
cmp byte [rbp + 0xa8], 0
je 0x14000da2e
test al, al
mov eax, 0x7b2a
mov ecx, 0xa8a
cmovne eax, ecx
xor eax, dword [rbp + 0x208]
mov cl, 1
mov qword [rbp + 0xa8], rcx
lea rsi, str._t_n_v_f_r
jmp 0x140009500
mov al, byte [rbp + 0x3e7]
cmp byte [rbp + 0x118], 0
jne 0x14000cb14
movups xmm0, xmmword [rbp + 0x258]
movups xmm1, xmmword [rbp + 0x268]
movups xmm2, xmmword [rbp + 0x314]
movaps xmm3, xmmword [0x14001f520]
xorps xmm0, xmm3
movups xmmword [rbp + 0x258], xmm0
xorps xmm1, xmm3
movups xmmword [rbp + 0x268], xmm1
xor dword [rbp + 0x278], 0x34c1
xor dword [rbp + 0x27c], 0x34c1
xor dword [rbp + 0x280], 0x34c1
xorps xmm2, xmm3
movups xmmword [rbp + 0x314], xmm2
xor dword [rbp + 0x324], 0x34c1
test al, 1
mov eax, 0x20c4
mov ecx, 0x7e
cmovne eax, ecx
xor eax, dword [rbp + 0x254]
mov cl, 1
mov qword [rbp + 0x118], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x388]
mov rax, qword [rbp + 0x360]
mov rdx, qword [rbp + 0x388]
sub rsp, 0x20
mov r8d, 0x30
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
add rsp, 0x20
mov rcx, qword [rbp + 0x360]
mov qword [rcx], rax
mov rax, qword [rbp + 0x360]
cmp qword [rax], 0
sete byte [rbp + 0x3ed]
mov eax, dword [0x140027718]
cmp dword [0x14002771c], 0xa
setl cl
mov edx, 0xcfbf4c4b
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x38], 0
lea rsi, [0x140021f10]
jne 0x14000cbf9
mov ecx, 2
nop word cs:[rax + rax]
nop dword [rax]
movsxd rdx, dword [rsi + rcx*4 - 8]
xor dword [rbp + rdx*4 + 0x180], 0x476
movsxd rdx, dword [rsi + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x476
movsxd rdx, dword [rsi + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x476
add rcx, 3
cmp rcx, 0x59
jne 0x14000cbc0
test al, al
mov eax, 0x3fda
mov ecx, 0x2c8c
cmovne eax, ecx
xor eax, dword [rbp + 0x1b0]
mov cl, 1
mov qword [rbp + 0x38], rcx
lea r9, [0x140022460]
jmp 0x14000d172
cmp dword [0x140027720], 0xa
mov eax, dword [0x140027724]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xb8], 0
jne 0x14000cc5b
xor dword [rbp + 0x29c], 0x3711
xor dword [rbp + 0x330], 0x3711
test al, al
mov eax, 0x1c21
mov ecx, 0x1d13
cmovne eax, ecx
xor eax, dword [rbp + 0x298]
mov cl, 1
mov qword [rbp + 0xb8], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x368]
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3d8]
mov rcx, qword [rcx]
add rax, qword [rcx]
mov rcx, qword [rbp + 0x368]
mov qword [rcx], rax
mov rax, qword [rbp + 0x380]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x368]
mov rdx, qword [rax]
add rdx, 2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x378]
mov qword [rcx], rax
mov rax, qword [rbp + 0x368]
mov rax, qword [rax]
add rax, 2
mov rcx, qword [rbp + 0x370]
mov qword [rcx], rax
mov rax, qword [rbp + 0x368]
mov eax, dword [rbp + 0x31c]
mov ecx, 0x52a1
xor eax, ecx
jmp 0x140009500
mov al, byte [rbp + 0x3ed]
cmp byte [rbp + 8], 0
jne 0x14000cd60
mov ecx, 1
nop dword [rax]
lea rdi, [0x140022070]
movsxd rdx, dword [rdi + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x119
movsxd rdx, dword [rdi + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x119
add rcx, 2
cmp rcx, 0x57
jne 0x14000cd30
test al, 1
mov eax, 0x25e7
mov ecx, 0x3d00
cmovne eax, ecx
xor eax, dword [rbp + 0x1b4]
mov cl, 1
mov qword [rbp + 8], rcx
lea rdi, [0x1400227b0]
jmp 0x140009500
cmp dword [0x140027728], 0xa
mov eax, dword [0x14002772c]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp - 0x50], 0
jne 0x14000cdbf
xor dword [rbp + 0x1dc], 0x5497
xor dword [rbp + 0x2dc], 0x5497
test al, al
mov eax, 0x3cd8
mov ecx, 0x7f66
cmovne eax, ecx
xor eax, dword [rbp + 0x1d8]
mov cl, 1
mov qword [rbp - 0x50], rcx
jmp 0x140009500
cmp dword [0x140027730], 0xa
mov eax, dword [0x140027734]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x88], 0
jne 0x14000ce39
mov ecx, 1
nop dword [rax + rax]
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x52f5
movsxd rdx, dword [rbx + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x52f5
add rcx, 2
cmp rcx, 0x35
jne 0x14000ce10
test al, al
mov eax, 0x5a7d
mov ecx, 0x6ff0
cmovne eax, ecx
xor eax, dword [rbp + 0x20c]
mov cl, 1
mov qword [rbp + 0x88], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3ee]
cmp byte [rbp], 0
jne 0x14000cea9
mov ecx, 2
nop dword [rax]
movsxd rdx, dword [rsi + rcx*4 - 8]
xor dword [rbp + rdx*4 + 0x180], 0x28d2
movsxd rdx, dword [rsi + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x28d2
movsxd rdx, dword [rsi + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x28d2
add rcx, 3
cmp rcx, 0x62
jne 0x14000ce70
test al, 1
mov eax, 0x7879
mov ecx, 0x163b
cmovne eax, ecx
xor eax, dword [rbp + 0x1a0]
mov cl, 1
mov qword [rbp], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x358]
mov eax, dword [0x140027738]
cmp dword [0x14002773c], 0xa
setl cl
mov edx, eax
not edx
lea ebx, [rax + rax]
add ebx, edx
imul ebx, eax
and ebx, 1
sete r8b
mov edx, ecx
and dl, bl
mov eax, ecx
or al, r8b
or bl, cl
xor bl, dl
xor bl, al
xor cl, r8b
test bl, bl
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
mov eax, 0x46b8
mov edx, 0x19f0
cmovne eax, edx
test cl, cl
mov ecx, 0x46b8
cmovne eax, ecx
xor eax, dword [rbp + 0x1ec]
jmp 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rax, qword [rbp + 0x3a8]
mov qword [rax], 0
mov rax, qword [rbp + 0x390]
mov dword [rax], 1
cmp dword [0x140027740], 0xa
mov ecx, dword [0x140027744]
setl dl
mov eax, 1
sub eax, ecx
imul eax, ecx
and eax, 1
sete cl
mov ebx, edx
and bl, al
or al, dl
xor al, cl
mov r8d, eax
xor r8b, 1
xor bl, dl
xor bl, cl
or dl, cl
xor dl, bl
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
xor dl, cl
mov ecx, edx
not cl
or al, dl
and dl, r8b
or cl, r8b
xor dl, al
xor dl, cl
test dl, 1
mov eax, 0xbf1
mov ecx, 0x2225
cmovne eax, ecx
xor eax, dword [rbp + 0x200]
jmp 0x140009500
mov rax, qword [rbp + 0x398]
mov rax, qword [rbp + 0x3a8]
mov rax, qword [rax]
mov qword [rbp - 0x80], rax
mov eax, dword [0x140027748]
cmp dword [0x14002774c], 0xa
setl cl
mov edx, 1
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0xe0], 0
jne 0x14000d022
xor dword [rbp + 0x2b8], 0x6aef
test al, al
mov eax, 0x792
mov ecx, 0x39cf
cmovne eax, ecx
xor eax, dword [rbp + 0x2b4]
mov cl, 1
mov qword [rbp + 0xe0], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x378]
mov rax, qword [rbp + 0x370]
mov rax, qword [rbp + 0x370]
mov qword [rax], 0
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
cmp qword [rax], 0
sets byte [rbp + 0x3e6]
mov eax, dword [rbp + 0x314]
mov ecx, 0x18d8
xor eax, ecx
jmp 0x140009500
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rbp + 0x3f8]
mov rax, qword [rax]
mov edx, dword [rax + 0x50]
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rsp, 0x20
mov rcx, qword [rbp + 0x3f0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x3f0]
cmp qword [rax], 0
sete byte [rbp + 0x3ea]
cmp dword [0x140027750], 0xa
mov eax, dword [0x140027754]
setl cl
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x78], 0
lea rsi, [0x1400226b0]
jne 0x14000d149
xor ecx, ecx
nop word cs:[rax + rax]
nop dword [rax + rax]
movsxd rdx, dword [rsi + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x7e16
movsxd rdx, dword [rsi + rcx*4 + 4]
xor dword [rbp + rdx*4 + 0x180], 0x7e16
movsxd rdx, dword [rsi + rcx*4 + 8]
xor dword [rbp + rdx*4 + 0x180], 0x7e16
add rcx, 3
cmp rcx, 0x3f
jne 0x14000d110
test al, al
mov eax, 0xfac
mov ecx, 0x49f8
cmovne eax, ecx
xor eax, dword [rbp + 0x1f4]
mov cl, 1
mov qword [rbp + 0x78], rcx
lea r9, [0x140022460]
lea r14, str._______._0123456789:_____ABCDEFG___abcdefghijkl
lea r12, str.____._0123456789:_____ABCDEFG__abcdefghijkl
lea r10, [0x140021900]
lea r11, [0x140021750]
lea rsi, str._t_n_v_f_r
jmp 0x140009500
mov ecx, dword [0x140027758]
mov eax, dword [0x14002775c]
cmp eax, 9
setg dl
cmp eax, 0xa
setl bl
lea eax, [rcx + 0x7a855eb8]
xor eax, 0xfffffffe
lea esi, [rax + 3]
not esi
add eax, ecx
add eax, 3
add eax, esi
add eax, 4
imul eax, ecx
and al, 1
or al, bl
xor al, dl
cmp byte [rbp + 0x30], 0
lea rbx, [0x1400221d0]
jne 0x14000d209
mov ecx, 1
nop
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x22f1
movsxd rdx, dword [rbx + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x22f1
add rcx, 2
cmp rcx, 0x53
jne 0x14000d1e0
test al, al
mov eax, 0x5cbc
mov ecx, 0x5a08
cmovne eax, ecx
xor eax, dword [rbp + 0x1c0]
mov cl, 1
mov qword [rbp + 0x30], rcx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
lea r13, [0x140022b40]
lea r14, str._______._0123456789:_____ABCDEFG___abcdefghijkl
lea r12, str.____._0123456789:_____ABCDEFG__abcdefghijkl
lea rsi, str._t_n_v_f_r
jmp 0x140009500
mov rax, qword [rbp + 0x3d8]
mov rax, qword [rax]
cmp qword [rax], 0
setne byte [rbp + 0x3e7]
mov eax, dword [0x140027760]
cmp dword [0x140027764], 0xa
setl cl
lea edx, [rax + rax]
add edx, 0x761f056d
add edx, eax
add edx, 0x761f056c
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x120], 0
jne 0x14000d2eb
movups xmm0, xmmword [rbp + 0x254]
movups xmm1, xmmword [rbp + 0x264]
movups xmm2, xmmword [rbp + 0x274]
movups xmm3, xmmword [rbp + 0x314]
movaps xmm4, xmmword [0x14001f530]
xorps xmm0, xmm4
movups xmmword [rbp + 0x254], xmm0
xorps xmm1, xmm4
movups xmmword [rbp + 0x264], xmm1
xorps xmm2, xmm4
movups xmmword [rbp + 0x274], xmm2
xorps xmm3, xmm4
movups xmmword [rbp + 0x314], xmm3
xor dword [rbp + 0x324], 0x2ff7
test al, al
mov eax, 0x7d9b
mov ecx, 0x505a
cmovne eax, ecx
xor eax, dword [rbp + 0x250]
mov cl, 1
mov qword [rbp + 0x120], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x368]
mov rax, qword [rbp + 0x3f0]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x3d8]
mov rcx, qword [rcx]
add rax, qword [rcx]
mov rcx, qword [rbp + 0x368]
mov qword [rcx], rax
mov rax, qword [rbp + 0x380]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x368]
mov rdx, qword [rax]
add rdx, 2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov rcx, qword [rbp + 0x378]
mov qword [rcx], rax
mov rax, qword [rbp + 0x368]
mov rax, qword [rax]
add rax, 2
mov rcx, qword [rbp + 0x370]
mov qword [rcx], rax
mov rax, qword [rbp + 0x368]
mov eax, dword [0x140027768]
lea ecx, [rax - 0x2a5aac6d]
mov edx, ecx
and edx, 1
mov ebx, ecx
not ebx
xor ecx, 1
add edx, eax
add edx, ecx
lea ecx, [rax + rdx]
add ecx, 0xd5a55393
add ecx, ebx
lea rbx, str.______._0123456789:_____ABCDEFG___abcdefghijkl_____._0123456789:_____ABCDEFG__abcdefghijkl
mov edx, 0xe9e2af0f
sub edx, ecx
imul edx, eax
test dl, 1
mov eax, 0x6e9f
mov ecx, 0x2bc5
cmove eax, ecx
cmp dword [0x14002776c], 0xa
cmovl eax, ecx
xor eax, dword [rbp + 0x270]
jmp 0x140009500
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x3f8]
mov rdx, qword [rax]
sub rsp, 0x20
call sym.PerformRelocations64
add rsp, 0x20
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rbp + 0x3f0]
mov rcx, qword [rbp + 0x3f8]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x90]
add rcx, qword [rax]
mov rax, qword [rbp + 0x3c8]
mov qword [rax], rcx
mov edx, dword [0x140027770]
mov ecx, dword [0x140027774]
cmp ecx, 9
setg al
cmp ecx, 0xa
setl bl
mov ecx, edx
not ecx
add ecx, 0x5551164c
imul ecx, edx
and ecx, 1
sete r8b
and cl, bl
and bl, r8b
or al, r8b
xor cl, al
mov edx, ebx
xor dl, 1
mov r9d, ecx
xor r9b, dl
xor al, r8b
xor al, dl
xor bl, cl
and cl, al
or bl, al
xor bl, cl
and al, r9b
xor al, bl
cmp byte [rbp + 0x158], 0
jne 0x14000d565
movups xmm0, xmmword [rbp + 0x238]
movups xmm1, xmmword [rbp + 0x248]
movups xmm2, xmmword [rbp + 0x258]
movups xmm3, xmmword [rbp + 0x268]
xorps xmm0, xmm15
movups xmmword [rbp + 0x238], xmm0
xorps xmm1, xmm15
movups xmmword [rbp + 0x248], xmm1
xorps xmm2, xmm15
movups xmmword [rbp + 0x258], xmm2
xorps xmm3, xmm15
movups xmmword [rbp + 0x268], xmm3
movups xmm0, xmmword [rbp + 0x278]
xorps xmm0, xmm15
movups xmmword [rbp + 0x278], xmm0
movups xmm0, xmmword [rbp + 0x288]
xorps xmm0, xmm15
movups xmmword [rbp + 0x288], xmm0
xor dword [rbp + 0x298], 0x5068
xor dword [rbp + 0x29c], 0x5068
movups xmm0, xmmword [rbp + 0x308]
xorps xmm0, xmm15
movups xmmword [rbp + 0x308], xmm0
movups xmm0, xmmword [rbp + 0x318]
xorps xmm0, xmm15
movups xmmword [rbp + 0x318], xmm0
xor dword [rbp + 0x328], 0x5068
xor dword [rbp + 0x32c], 0x5068
xor dword [rbp + 0x330], 0x5068
test al, 1
mov eax, 0x2747
mov ecx, 0x74a7
cmovne eax, ecx
xor eax, dword [rbp + 0x234]
mov cl, 1
mov qword [rbp + 0x158], rcx
jmp 0x1400094d5
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rax]
cmp dword [rax + 0xc], 0
setne byte [rbp + 0x3e8]
mov eax, dword [0x140027778]
cmp dword [0x14002777c], 0xa
setl cl
mov edx, 0x1cfe9509
sub edx, eax
imul edx, eax
test dl, 1
sete al
or al, cl
cmp byte [rbp + 0x148], 0
jne 0x14000d670
movups xmm0, xmmword [rbp + 0x240]
movups xmm1, xmmword [rbp + 0x250]
movups xmm2, xmmword [rbp + 0x260]
movups xmm3, xmmword [rbp + 0x270]
xorps xmm0, xmm10
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm10
movups xmmword [rbp + 0x250], xmm1
xorps xmm2, xmm10
movups xmmword [rbp + 0x260], xmm2
xorps xmm3, xmm10
movups xmmword [rbp + 0x270], xmm3
movups xmm0, xmmword [rbp + 0x280]
xorps xmm0, xmm10
movups xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmm10
movups xmmword [rbp + 0x290], xmm0
movups xmm0, xmmword [rbp + 0x30c]
xorps xmm0, xmm10
movups xmmword [rbp + 0x30c], xmm0
movups xmm0, xmmword [rbp + 0x31c]
xorps xmm0, xmm10
movups xmmword [rbp + 0x31c], xmm0
xor dword [rbp + 0x32c], 0x7987
xor dword [rbp + 0x330], 0x7987
test al, al
mov eax, 0x2726
mov ecx, 0x6526
cmovne eax, ecx
xor eax, dword [rbp + 0x23c]
mov cl, 1
mov qword [rbp + 0x148], rcx
jmp 0x140009500
mov al, byte [rbp + 0x3e8]
cmp byte [rbp + 0x140], 0
jne 0x14000d756
movups xmm0, xmmword [rbp + 0x244]
movups xmm1, xmmword [rbp + 0x254]
movups xmm2, xmmword [rbp + 0x264]
movups xmm3, xmmword [rbp + 0x274]
xorps xmm0, xmm13
movups xmmword [rbp + 0x244], xmm0
xorps xmm1, xmm13
movups xmmword [rbp + 0x254], xmm1
xorps xmm2, xmm13
movups xmmword [rbp + 0x264], xmm2
xorps xmm3, xmm13
movups xmmword [rbp + 0x274], xmm3
movups xmm0, xmmword [rbp + 0x284]
xorps xmm0, xmm13
movups xmmword [rbp + 0x284], xmm0
xor dword [rbp + 0x294], 0x1d9a
xor dword [rbp + 0x298], 0x1d9a
xor dword [rbp + 0x29c], 0x1d9a
movups xmm0, xmmword [rbp + 0x30c]
xorps xmm0, xmm13
movups xmmword [rbp + 0x30c], xmm0
movups xmm0, xmmword [rbp + 0x31c]
xorps xmm0, xmm13
movups xmmword [rbp + 0x31c], xmm0
xor dword [rbp + 0x32c], 0x1d9a
xor dword [rbp + 0x330], 0x1d9a
test al, 1
mov eax, 0x6eda
mov ecx, 0x5236
cmovne eax, ecx
xor eax, dword [rbp + 0x240]
mov cl, 1
mov qword [rbp + 0x140], rcx
jmp 0x140009500
mov rax, qword [rbp + 0x3c8]
mov rax, qword [rax]
cmp dword [rax + 0xc], 0
setne byte [rbp + 0x3e8]
mov eax, dword [rbp + 0x308]
mov ecx, 0x3597
xor eax, ecx
jmp 0x140009500
sub rsp, 0x20
call sym.anti_debug
lea r11, [0x140021750]
lea r10, [0x140021900]
lea r9, [0x140022460]
add rsp, 0x20
mov eax, dword [rbp + 0x2dc]
mov ecx, 0x2bf1
xor eax, ecx
jmp 0x140009500
mov ecx, 1
nop dword [rax]
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x66ad
movsxd rdx, dword [rbx + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x66ad
add rcx, 2
cmp rcx, 0x51
jne 0x14000d7e0
jmp 0x1400094ba
xor ecx, ecx
lea rdx, [0x1400225a0]
movsxd rdx, dword [rdx + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x25fd
cmp rcx, 0x40
je 0x14000986d
lea rdx, [0x1400225a0]
movsxd rdx, dword [rdx + rcx*4 + 4]
xor dword [rbp + rdx*4 + 0x180], 0x25fd
add rcx, 2
jmp 0x14000d810
mov ecx, 1
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x7e1d
cmp rcx, 0x61
je 0x14000adfb
nop dword [rax]
movsxd rdx, dword [rbx + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x7e1d
add rcx, 2
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x7e1d
cmp rcx, 0x61
jne 0x14000d870
jmp 0x14000adfb
mov ecx, 1
movsxd rdx, dword [r14 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x489b
cmp rcx, 0x37
je 0x14000aecb
nop dword [rax]
movsxd rdx, dword [r14 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x489b
add rcx, 2
movsxd rdx, dword [r14 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x489b
cmp rcx, 0x37
jne 0x14000d8c0
jmp 0x14000aecb
mov ecx, 1
movsxd rdx, dword [r9 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0xbb5
cmp rcx, 0x4f
je 0x14000b10f
nop dword [rax]
movsxd rdx, dword [r9 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0xbb5
add rcx, 2
movsxd rdx, dword [r9 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0xbb5
cmp rcx, 0x4f
jne 0x14000d910
jmp 0x14000b10f
mov ecx, 1
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x6dc4
cmp rcx, 0x59
je 0x14000b2b8
nop dword [rax]
movsxd rdx, dword [rbx + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x6dc4
add rcx, 2
movsxd rdx, dword [rbx + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x6dc4
cmp rcx, 0x59
jne 0x14000d960
jmp 0x14000b2b8
mov ecx, 1
movsxd rdx, dword [r12 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x3149
cmp rcx, 0x31
je 0x14000bbb2
nop dword [rax]
movsxd rdx, dword [r12 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x3149
add rcx, 2
movsxd rdx, dword [r12 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x3149
cmp rcx, 0x31
jne 0x14000d9b0
jmp 0x14000bbb2
mov ecx, 1
movsxd rdx, dword [r11 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x985
cmp rcx, 0x6b
je 0x14000c60d
nop dword [rax]
movsxd rdx, dword [r11 + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x985
add rcx, 2
movsxd rdx, dword [r11 + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x985
cmp rcx, 0x6b
jne 0x14000da00
jmp 0x14000c60d
mov ecx, 1
movsxd rdx, dword [rsi + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x420b
cmp rcx, 0x35
je 0x14000ca79
nop dword [rax]
movsxd rdx, dword [rsi + rcx*4]
xor dword [rbp + rdx*4 + 0x180], 0x420b
add rcx, 2
movsxd rdx, dword [rsi + rcx*4 - 4]
xor dword [rbp + rdx*4 + 0x180], 0x420b
cmp rcx, 0x35
jne 0x14000da50
jmp 0x14000ca79
cmp eax, 0x7606
jne 0x140009500
mov rax, qword [rbp - 0x80]
movaps xmm6, xmmword [rbp + 0x400]
movaps xmm7, xmmword [rbp + 0x410]
movaps xmm8, xmmword [rbp + 0x420]
movaps xmm9, xmmword [rbp + 0x430]
movaps xmm10, xmmword [rbp + 0x440]
movaps xmm11, xmmword [rbp + 0x450]
movaps xmm12, xmmword [rbp + 0x460]
movaps xmm13, xmmword [rbp + 0x470]
movaps xmm14, xmmword [rbp + 0x480]
movaps xmm15, xmmword [rbp + 0x490]
lea rsp, [rbp + 0x4a8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret