Function at 0x1400349d0
Capabilities:
Access peb ldr_data
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp - 8], r8
mov qword [rbp], rdx
mov eax, dword [0x141dc45c8]
xor eax, dword [0x141dc45cc]
mov qword [rbp + 0x50], rcx
and eax, 0x975f2bce
add eax, 0x1c816ef
cmp eax, 0x6bdabf33
jb 0x140034aae
mov eax, dword [0x141dc45d0]
imul eax, dword [0x141dc45d4]
and eax, 0xd2653b3
imul ecx, eax, 0x6d6f0806
xor ecx, 0x1ce911fd
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rsi, rsp
cmp ecx, 0xdf947f5e
jbe 0x140034b0e
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
jmp 0x140034a18
mov qword [rbp + 0x18], r10
mov qword [rbp + 0x10], r9
mov qword [rbp + 0x30], r8
mov qword [rbp + 0x28], rdx
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rcx, rsp
mov eax, 0xd0
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x1000
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp + 0x38], rsp
lea rax, [0x141dae40d]
mov qword [rcx], rax
mov rcx, qword [rcx]
movabs rax, 0xe7b687eb3d4a0b4
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.140017f70
add rsp, 0x20
mov r14d, dword [rax]
movzx r12d, word [rax + 4]
movzx edi, byte [rax + 6]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 7
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x14003505c
mov rdx, rax
shl edi, 0x10
or r12d, edi
mov eax, r12d
shr eax, 0x10
xor al, 0xf2
movzx eax, al
mov byte [rdx + 6], al
shl rax, 0x30
mov ecx, r12d
shr ecx, 8
xor cl, 0xd8
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor r12b, 0xef
movzx eax, r12b
shl rax, 0x20
or rax, rcx
xor r14d, 0xdfe8bd29
mov dword [rdx], r14d
shr rax, 0x20
mov qword [rbp - 0x40], rdx
mov word [rdx + 4], ax
lea rax, [0x141db3899]
mov qword [rbx], rax
mov rcx, qword [rbx]
movabs rax, 0xdb93516bcf97383e
mov qword [rsi], rax
mov rdx, qword [rsi]
sub rsp, 0x20
call fcn.140018e00
add rsp, 0x20
mov edi, dword [rax]
movzx ebx, byte [rax + 4]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x14003507d
mov rsi, rax
xor bl, 0xe2
nop word [rax + rax]
mov eax, dword [0x141dc45f8]
or eax, dword [str.ezo]
xor eax, 0x13143e3b
imul eax, eax, 0x4e08b4a0
add eax, 0xef1f59bc
cmp eax, 0x267fed28
jb 0x140034cb0
movabs r14, 0xd5623f65b9fcf0a6
mov eax, dword [0x141dc4600]
xor eax, dword [0x141dc4604]
imul eax, eax, 0x50afb53a
imul rax, rax, 0x53eac049
shr rax, 0x39
add eax, 0xefa40538
cmp eax, 0xe43e81e2
jae 0x140034d59
mov eax, edi
xor eax, 0x435cfff3
mov byte [rsi + 4], bl
mov dword [rsi], eax
lea rax, [0x141daa81f]
mov qword [r13], rax
mov rcx, qword [r13]
mov qword [r15], r14
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.140017ba0
add rsp, 0x20
mov ecx, dword [rax]
movzx ecx, byte [rax + 6]
movzx eax, word [rax + 4]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 7
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
xor edi, 0x435cfff3
mov dword [rbp + 0x48], edi
mov qword [rbp - 0x18], rsi
mov byte [rbp + 0x58], bl
nop dword [rax]
mov eax, dword [0x141dc4608]
xor edx, edx
div dword [0x141dc460c]
imul eax, eax, 0x3a2ad41f
and eax, 0xb3cf3071
imul esi, eax, 0xc98d2de4
mov rax, qword [rbp - 0x18]
movzx ecx, byte [rbp + 0x58]
mov byte [rax + 4], cl
mov ecx, dword [rbp + 0x48]
mov dword [rax], ecx
lea rax, [0x141daa81f]
mov qword [r13], rax
mov rcx, qword [r13]
mov qword [r15], r14
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.140017ba0
add rsp, 0x20
mov edi, dword [rax]
movzx r12d, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 7
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp esi, 0x91b7e31f
ja 0x140034d70
mov rdx, rax
shl ebx, 0x10
or r12d, ebx
nop dword [rax + rax]
mov eax, dword [0x141dc4610]
and eax, dword [0x141dc4614]
xor eax, 0x9db33210
imul rax, rax, 0x93f7edd
shr rax, 0x3a
imul eax, eax, 0x7cd563d5
cmp eax, 0x70ca11b9
jb 0x140034e00
test rdx, rdx
je 0x1400350ab
mov eax, r12d
shr eax, 0x10
xor al, 0x53
movzx eax, al
mov byte [rdx + 6], al
shl rax, 0x30
mov ecx, r12d
shr ecx, 8
xor cl, 0xf5
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor r12b, 0x78
movzx eax, r12b
shl rax, 0x20
or rax, rcx
xor edi, 0x5c17ae9a
mov dword [rdx], edi
shr rax, 0x20
mov qword [rbp - 0x38], rdx
mov word [rdx + 4], ax
lea rax, [0x141db08f2]
mov rcx, qword [rbp + 0x18]
mov qword [rcx], rax
mov rcx, qword [rcx]
movabs rax, 0x6241be854d4b5996
mov rdx, qword [rbp + 0x10]
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.140019070
add rsp, 0x20
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 9
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x1400350d3
mov r14, rax
movabs rax, 0x4439d3f2d34a2ef8
mov ecx, dword [0x141dc4630]
xor ecx, dword [0x141dc4634]
cmp ecx, 0x960f4f36
mov r8, qword [rbp + 0x30]
jne 0x140034f18
mov ecx, ebx
xor cl, 0xf1
mov rdx, rsi
xor rdx, rax
mov qword [r14], rdx
mov byte [r14 + 8], cl
lea rcx, [0x141da78fa]
mov qword [r8], rcx
xor bl, 0xf1
xor rsi, rax
lea rax, [0x141da78fa]
mov rdx, qword [rbp + 0x28]
nop dword [rax]
mov ecx, dword [0x141dc4638]
or ecx, dword [0x141dc463c]
imul ecx, ecx, 0x3e28d9f6
or ecx, 0xdd02a524
mov qword [r14], rsi
mov byte [r14 + 8], bl
mov qword [r8], rax
cmp ecx, 0x9adad379
je 0x140034f30
mov rcx, qword [r8]
movabs rax, 0x75fbc74275712cdc
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.140019850
add rsp, 0x20
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 7
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x1400350fe
shl ebx, 0x10
or edi, ebx
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x10], r14
mov edx, 0xe70249ab
mov ecx, edi
shr ecx, 0x10
mov eax, edi
shr eax, 8
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4650]
sub r8d, dword [0x141dc4654]
or r8d, 0xe4b3f49d
imul r8, rdx
shr r8, 0x3c
or r8d, 0x863487f7
cmp r8d, 0x553df5b0
je 0x140034fd0
xor cl, 0xf7
movzx ecx, cl
shl rcx, 0x30
xor al, 0xd6
movzx eax, al
shl rax, 0x28
or rax, rcx
xor dil, 0x26
movzx edi, dil
shl rdi, 0x20
or rdi, rax
movabs r14, 0xd354b8817c4eaefa
mov eax, dword [0x141dc4658]
and eax, dword [0x141dc465c]
xor eax, 0x89405abc
imul eax, eax, 0x122f8ac1
add eax, 0x1dbbac6c
cmp eax, 0xa663874
mov rbx, qword [rbp + 0x28]
jbe 0x1400351f3
jmp 0x140035283
mov eax, dword [0x141dc45d8]
add eax, dword [0x141dc45dc]
and eax, 0x314204
cmp eax, 0x42e339e9
jne 0x14003512f
jmp 0x140035154
mov eax, dword [0x141dc45f0]
sub eax, dword [0x141dc45f4]
imul eax, eax, 0xa4848c1d
cmp eax, 0x1477eca2
jne 0x140035098
ud2
xor eax, eax
nop word [rax + rax]
ud2
mov eax, dword [0x141dc4618]
xor edx, edx
div dword [0x141dc461c]
or eax, 0xf1dc5cc6
add eax, 0x4e86ecdf
cmp eax, 0xbd1d606c
jbe 0x140035184
jmp 0x1400351b1
mov eax, dword [0x141dc4628]
add eax, dword [0x141dc462c]
or eax, 0x594ebc1
add eax, 0x7cda63f3
and eax, 0x325e2adc
cmp eax, 0x5b6b076e
jbe 0x1400351b5
jmp 0x1400351bd
mov eax, dword [0x141dc4640]
add eax, dword [0x141dc4644]
imul rax, rax, 0x2ee253ff
shr rax, 0x3d
add eax, 0x99d66f77
or eax, 0x3610cc15
cmp eax, 0xc365ee8a
jne 0x1400351c1
jmp 0x1400351ef
mov eax, dword [0x141dc45e0]
or eax, dword [0x141dc45e4]
and eax, 0x723002a2
or eax, 0x94ff159
imul eax, eax, 0xfe9b2e02
ud2
ud2
ud2
mov eax, dword [0x141dc4620]
and eax, dword [0x141dc4624]
add eax, 0x7c9076c2
mov ecx, 0xca880d49
imul rcx, rax
shr rcx, 0x3d
imul eax, ecx, 0x1d488172
ud2
ud2
ud2
ud2
mov eax, dword [0x141dc4648]
add eax, dword [0x141dc464c]
xor eax, 0xb5efd3c6
imul rcx, rax, 0x9845b81
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
ud2
ud2
mov r12d, dword [0x141dc4660]
xor r12d, dword [0x141dc4664]
or r12d, 0x18d5d7b9
and r12d, 0x5cd5d7f9
mov eax, esi
xor eax, 0x69d81ff5
or eax, edi
mov rcx, rdi
shr rcx, 0x30
mov byte [rbx + 6], cl
mov rcx, rdi
shr rcx, 0x20
mov word [rbx + 4], cx
mov dword [rbx], eax
lea rax, [0x141db34fd]
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0x60]
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], r14
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140019fb0
add rsp, 0x20
mov r15d, dword [rax]
movzx r13d, byte [rax + 4]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp r12d, 0x557f59b4
jbe 0x1400352f1
mov eax, esi
xor eax, 0x69d81ff5
or eax, edi
mov rcx, rdi
shr rcx, 0x30
mov byte [rbx + 6], cl
mov rcx, rdi
shr rcx, 0x20
mov word [rbx + 4], cx
mov dword [rbx], eax
lea rax, [0x141db34fd]
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0x60]
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], r14
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140019fb0
add rsp, 0x20
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
jmp 0x1400351f3
mov r8, rax
test rax, rax
je 0x140035993
mov eax, dword [0x141dc4670]
xor edx, edx
div dword [0x141dc4674]
mov r12, qword [rbp - 0x18]
xor r13b, 0x17
movzx eax, r13b
shl rax, 0x20
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x140035320
xor r15d, 0x66b1c287
or r15, rax
shr rax, 0x20
mov byte [r8 + 4], al
mov qword [rbp + 0x18], r8
mov dword [r8], r15d
lea rax, [0x141da9f68]
mov qword [rbp + 0x60], rax
lea r13, [rbp + 0x60]
mov rcx, qword [rbp + 0x60]
movabs rax, 0x3cc1a3d859623c22
mov qword [rbp + 0x60], rax
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140019ba0
add rsp, 0x20
mov ecx, dword [0x141dc4678]
xor ecx, dword [0x141dc467c]
mov rsi, rax
or ecx, 0xf2df7ddd
xor ecx, 0xd43fe13d
cmp ecx, 0x258d0e0c
jae 0x1400353b0
mov rax, qword [rsi]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 8
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
xor r14d, r14d
nop word cs:[rax + rax]
mov rdi, qword [rsi]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 8
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test r14b, r14b
jne 0x1400353c0
mov rbx, rax
test rax, rax
je 0x1400359a2
mov ecx, dword [0x141dc4690]
xor ecx, dword [0x141dc4694]
movabs rax, 0xd41eccec31ab6f4d
xor ecx, 0x88262a38
or ecx, 0x7558d141
cmp ecx, 0xd9a94f06
jne 0x140035431
mov rcx, rdi
xor rcx, rax
mov qword [rbx], rcx
lea rcx, [0x141dadf75]
mov qword [rbp - 0x28], rcx
lea rcx, [rbp - 0x28]
xor rdi, rax
lea rax, [0x141dadf75]
lea rcx, [rbp - 0x28]
nop
mov edx, dword [0x141dc4698]
imul edx, dword [0x141dc469c]
imul rdx, rdx, 0xfca46c7
shr rdx, 0x3a
or edx, 0x82e80a80
mov qword [rbx], rdi
mov qword [rbp - 0x28], rax
cmp edx, 0x31a22a11
jb 0x140035440
mov rcx, qword [rbp - 0x28]
movabs rax, 0x4a92b419fe709089
mov qword [rbp + 0x60], rax
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140019e30
add rsp, 0x20
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 6
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x1400359f9
mov r14, rax
mov eax, edi
shr eax, 8
xor al, 0xcd
mov ecx, dword [0x141dc46b0]
sub ecx, dword [0x141dc46b4]
add ecx, 0xe86112bd
or ecx, 0x8dd18c73
imul ecx, ecx, 0x2bcfdd03
movzx eax, al
cmp ecx, 0x37ad9452
jae 0x14003551e
mov rcx, rax
shl rcx, 0x28
mov edx, edi
xor dl, 0x4d
movzx edx, dl
shl rdx, 0x20
or rdx, rcx
mov ecx, esi
xor ecx, 0x243cce12
mov dword [r14], ecx
shr rdx, 0x20
mov word [r14 + 4], dx
movzx ecx, byte [0x141ddb278]
shl rax, 0x28
xor esi, 0x243cce12
nop dword [rax + rax]
mov ecx, dword [0x141dc46b8]
and ecx, dword [0x141dc46bc]
or ecx, 0x10070000
and ecx, 0x92078a00
mov edx, edi
xor dl, 0x4d
movzx edx, dl
shl rdx, 0x20
or rdx, rax
shr rdx, 0x20
mov dword [r14], esi
mov word [r14 + 4], dx
movzx edx, byte [0x141ddb278]
cmp ecx, 0x6592635e
je 0x140035530
mov eax, dword [0x141dc46c0]
or eax, dword [0x141dc46c4]
xor eax, 0xd432a44a
add eax, 0x23ab936a
mov ecx, 0xab0715b9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x99099d07
jne 0x1400355c0
sub rsp, 0x20
mov edx, 0x80
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
nop word cs:[rax + rax]
mov esi, dword [0x141dc46c8]
imul esi, dword [0x141dc46cc]
or esi, 0x2e00f3c3
add esi, 0x3593d93d
or esi, 0xad60ea2b
sub rsp, 0x20
mov edx, 0x80
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp esi, 0xe38d330f
je 0x1400355c0
mov rdi, rax
test rax, rax
je 0x140035a25
mov rax, qword [rbp - 0x40]
mov qword [rdi], rax
mov qword [rdi + 8], 7
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 5
mov rax, qword [rbp - 0x38]
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], 7
mov rax, qword [rbp + 0x10]
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x38], 9
mov rax, qword [rbp + 0x28]
mov qword [rdi + 0x40], rax
mov qword [rdi + 0x48], 7
mov rax, qword [rbp + 0x18]
mov qword [rdi + 0x50], rax
mov qword [rdi + 0x58], 5
mov qword [rdi + 0x60], rbx
mov qword [rdi + 0x68], 8
mov qword [rdi + 0x70], r14
mov qword [rdi + 0x78], 6
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x1400356fd
mov eax, dword [0x141dc46d8]
imul eax, dword [0x141dc46dc]
xor eax, 0x2cce6e4
imul rcx, rax, 0x32967393
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xbd302562
cmp eax, 0xb5ec3899
ja 0x140035981
mov eax, dword [0x141dc46e0]
xor edx, edx
div dword [0x141dc46e4]
mov esi, eax
and esi, 0x5ea87bc7
sub rsp, 0x20
call fcn.1400f5480
add rsp, 0x20
cmp esi, 0x1da40ea1
je 0x1400356d0
jmp 0x140035706
cmp eax, 1
jne 0x140035aa9
mov qword [rbp - 0x70], r14
nop word [rax + rax]
mov eax, dword [0x141dc46e8]
add eax, dword [0x141dc46ec]
imul eax, eax, 0x831e2c98
add eax, 0xbbd33b07
cmp eax, 0xaad1ecb
jb 0x140035710
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r14, qword [rax + 0x20]
mov rax, qword [r14]
nop dword [rax + rax]
mov ecx, dword [0x141dc46f0]
add ecx, dword [0x141dc46f4]
imul rcx, rcx, 0xaea10d9
shr rcx, 0x3b
add ecx, 0x79e4ae17
or ecx, 0xdb9007cd
cmp ecx, 0x56a4250e
jb 0x140035750
inc rax
mov qword [r14], rax
je 0x140035182
lea rsi, [r14 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dc4708]
or eax, dword [0x141dc470c]
imul rax, rax, 0x5cfd0b7b
shr rax, 0x3c
add eax, 0xded6834b
and eax, 0x40d6834c
cmp eax, 0xefeac783
ja 0x140035790
nop dword [rax + rax]
mov eax, dword [0x141dc4710]
sub eax, dword [0x141dc4714]
or eax, 0xd6537ea
add eax, 0xbb28b76a
or eax, 0xc03f0456
cmp eax, 0x5571ef03
je 0x1400357c0
nop word cs:[rax + rax]
mov eax, dword [0x141dc4718]
and eax, dword [0x141dc471c]
imul rax, rax, 0x1bdee737
shr rax, 0x3a
or eax, 0xb289e6cb
add eax, 0x172c8e4c
cmp eax, 0x3280c221
jb 0x1400357f0
mov r12, qword [r14 + 0x110]
cmp r12, 0x3f
mov qword [rbp + 0x30], rdi
jbe 0x140035954
lea rdi, [r14 + 0x120]
mov r15, qword [r14 + 0x158]
nop dword [rax + rax]
test r15, r15
setle al
mov edx, dword [0x141dc4738]
sub edx, dword [0x141dc473c]
or edx, 0x3783bea7
add edx, 0xeb1fafc2
and edx, 0x232ea090
cmp qword [r14 + 0x160], 0
sets cl
cmp edx, 0x8524fbdd
ja 0x140035840
or al, cl
je 0x140035896
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.140011410
add rsp, 0x20
xor r12d, r12d
jmp 0x140035954
add r15, 0xffffffffffffff00
nop dword [rax]
mov eax, dword [0x141dc4740]
sub eax, dword [0x141dc4744]
imul eax, eax, 0xe26c6ca3
add eax, 0x92074a3
or eax, 0x9cb8aaa9
cmp eax, 0x3d765664
jb 0x1400358a0
mov eax, dword [0x141dc4748]
imul eax, dword [0x141dc474c]
imul eax, eax, 0x9b69acd1
add eax, 0xe940d31b
mov ecx, 0xc9bd43d9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x3c103156
jbe 0x14003590a
mov qword [r14 + 0x158], r15
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.140070b90
add rsp, 0x20
xor r12d, r12d
nop dword [rax]
mov r13d, dword [0x141dc4750]
imul r13d, dword [0x141dc4754]
xor r13d, 0xa25a76d2
add r13d, 0x8434d088
mov qword [r14 + 0x158], r15
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.140070b90
add rsp, 0x20
cmp r13d, 0x923c5eea
jb 0x140035910
lea r13, [rbp + 0x60]
mov eax, dword [0x141dc4758]
xor edx, edx
div dword [0x141dc475c]
or eax, 0x22d49f84
add eax, 0x809b8889
and eax, 0xe3a1a824
cmp eax, 0x8ea89194
jne 0x140035b9d
jmp 0x140035bce
sub rsp, 0x20
call fcn.1400f5480
add rsp, 0x20
jmp 0x1400356d0
xor eax, eax
test al, al
je 0x140035b0f
jmp 0x140035b38
mov eax, dword [0x141dc4680]
and eax, dword [0x141dc4684]
cmp eax, 0x9b99a27e
jne 0x1400359c0
ud2
mov eax, dword [0x141dc4688]
xor eax, dword [0x141dc468c]
imul rcx, rax, 0xd035b35
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
or eax, 0x719cb608
imul eax, eax, 0x5d38e804
ud2
mov eax, dword [0x141dc46a0]
and eax, dword [0x141dc46a4]
or eax, 0x13be8c18
imul eax, eax, 0x5fe345cc
add eax, 0xf665e7a5
cmp eax, 0x82388b92
jae 0x140035b3c
jmp 0x140035b6a
mov eax, dword [0x141dc4720]
xor edx, edx
div dword [0x141dc4724]
xor eax, 0x28100008
or eax, 0x4320d823
and eax, 0x6f3ad82b
cmp eax, 0x7abbdd26
jbe 0x140035a50
ud2
mov eax, dword [0x141dc4728]
add eax, dword [0x141dc472c]
imul eax, eax, 0x37650668
add eax, 0x93b9a2e8
imul rax, rax, 0x310a9293
shr rax, 0x3d
ud2
cmp eax, 2
jne 0x140035ae0
mov eax, dword [0x141dc46f8]
xor eax, dword [0x141dc46fc]
xor eax, 0xcf15619
imul eax, eax, 0xf47dc68d
and eax, 0xf401638
cmp eax, 0x24332322
jne 0x140035b6e
jmp 0x140035b99
mov eax, dword [0x141dc46d0]
imul eax, dword [0x141dc46d4]
imul eax, eax, 0x52b4ac45
imul rax, rax, 0x27774143
shr rax, 0x3d
xor eax, 0xe28cec71
cmp eax, 0xb2ba36b8
jb 0x140035ae0
jmp 0x140035182
mov eax, dword [0x141dc4668]
xor eax, dword [0x141dc466c]
imul eax, eax, 0xbee94090
xor eax, 0x8a1b4307
add eax, 0x95c9d4bd
ud2
ud2
mov eax, dword [0x141dc46a8]
and eax, dword [0x141dc46ac]
add eax, 0xb8e6791e
imul rax, rax, 0x51e5eb23
shr rax, 0x3e
or eax, 0xc570ff72
ud2
ud2
mov eax, dword [0x141dc4700]
xor edx, edx
div dword [0x141dc4704]
imul eax, eax, 0xfcbfbb83
add eax, 0xc742ce6d
xor eax, 0x89a836ce
ud2
ud2
mov ecx, dword [0x141dc4760]
add ecx, dword [str.PRPy]
lea rdx, [r12 + 1]
mov eax, dword [r14 + r12*4 + 0x10]
mov qword [r14 + 0x110], rdx
or ecx, 0x80504004
and ecx, 0x91d2c084
cmp ecx, 0x959bddfa
jbe 0x140035bdc
lea rax, [r12 + 1]
mov qword [r14 + 0x110], rax
jmp 0x140035b9d
test eax, eax
mov qword [rbp - 0x68], rbx
js 0x140035d01
lea rax, [0x141db20fa]
mov qword [rbp + 0x60], rax
mov rsi, qword [rbp + 0x60]
movabs rax, 0x6f3ee2dcef0f86a1
mov ecx, dword [0x141dc4768]
or ecx, dword [0x141dc476c]
mov qword [rbp + 0x60], rax
xor ecx, 0x141
or ecx, 0xff7afa9c
cmp ecx, 0x20918728
jae 0x140035c5b
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
mov rcx, rsi
call fcn.140019ea0
add rsp, 0x20
mov rcx, qword [rax]
mov rax, qword [rax + 8]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x10
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
xor r12d, r12d
nop
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
mov rcx, rsi
call fcn.140019ea0
add rsp, 0x20
mov r15, qword [rax]
mov rdi, qword [rax + 8]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x10
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test r12b, r12b
jne 0x140035c60
test rax, rax
je 0x140035df7
movabs rcx, 0x9006c4fc3afb2445
xor rdi, rcx
movabs rcx, 0x7737125b44d69ebb
xor r15, rcx
mov qword [rbp + 0x58], rax
mov qword [rax], r15
nop word cs:[rax + rax]
mov eax, dword [str._Y_P_]
xor edx, edx
div dword [0x141dc4784]
add eax, 0x25c65c92
and eax, 0x49401
cmp eax, 0x6d824904
ja 0x140035cd0
mov rax, qword [rbp + 0x58]
mov qword [rax + 8], rdi
mov eax, 0x10
jmp 0x140035f45
mov eax, dword [0x141dc4788]
or eax, dword [0x141dc478c]
movabs rdx, 0xd1327b58c150b39f
and eax, 0x6eb1fb97
add eax, 0x46e0dea4
cmp eax, 0x1bf3178b
jae 0x140035d60
lea rax, [0x141db3610]
mov qword [rbp + 0x60], rax
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], rdx
mov rsi, rdx
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.14001a3f0
mov rdx, rsi
add rsp, 0x20
mov rcx, qword [rax]
mov ecx, dword [rax + 8]
movzx ecx, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov rbx, r13
lea r13, [0x141db3610]
nop word [rax + rax]
mov eax, dword [0x141dc4790]
and eax, dword [0x141dc4794]
imul r12, rax, 0x1be20f81
shr r12, 0x3c
add r12d, 0x5a479b47
mov qword [rbp + 0x60], r13
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], rdx
mov rsi, rdx
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.14001a3f0
mov rdx, rsi
add rsp, 0x20
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx r15d, word [rax + 0xc]
movzx eax, byte [rax + 0xe]
cmp r12d, 0xf4682a4
jb 0x140035d70
shl eax, 0x10
or r15d, eax
mov eax, dword [0x141dc4798]
or eax, dword [0x141dc479c]
add eax, 0x873e24f5
imul rax, rax, 0x264cc853
shr rax, 0x3d
cmp eax, 0xe5d974fd
jbe 0x140035e53
jmp 0x140035e93
mov eax, dword [0x141dc4770]
xor edx, edx
div dword [0x141dc4774]
and eax, 0x591b5829
add eax, 0x61ad84b8
shr eax, 1
mov ecx, 0x8aaf1af7
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x11bb84cd
je 0x140035e4f
mov eax, dword [0x141dc4778]
or eax, dword [0x141dc477c]
or eax, 0x92002248
and eax, 0x9b01a6de
imul eax, eax, 0x56d4bc44
ud2
ud2
mov eax, dword [0x141dc47a0]
and eax, dword [0x141dc47a4]
and eax, 0xff6bd716
imul ebx, eax, 0xa8358053
and ebx, 0xc94d2494
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0xf
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp ebx, 0x6a26ae12
jne 0x140035eb0
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0xf
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
jmp 0x140035e53
mov qword [rbp + 0x58], rax
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140035ec0
cmp qword [rbp + 0x58], 0
je 0x140035182
mov eax, r15d
shr eax, 0x10
mov ecx, r15d
shr ecx, 8
xor edi, 0xb82e1c8
nop word cs:[rax + rax]
mov edx, dword [0x141dc47a8]
and edx, dword [0x141dc47ac]
and edx, 0x44bd3d90
add edx, 0x3c43a845
or edx, 0x1f35efce
cmp edx, 0xccd2a9e0
je 0x140035ef0
xor al, 0xc2
xor cl, 0x88
xor r15b, 0xb5
movabs rdx, 0x63e77ed644b5c26a
xor rsi, rdx
mov rdx, qword [rbp + 0x58]
mov qword [rdx], rsi
mov dword [rdx + 8], edi
mov byte [rdx + 0xc], r15b
mov byte [rdx + 0xd], cl
mov byte [rdx + 0xe], al
mov eax, 0xf
mov rdi, qword [rbp + 0x38]
mov qword [rbp + 0x48], rax
mov eax, dword [0x141dc47b0]
or eax, dword [0x141dc47b4]
xor eax, 0x7321faac
add eax, 0xfcb580ff
or eax, 0x5a68180f
cmp eax, 0x8f1d20f9
jne 0x140035fb2
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
mov rsi, qword [rbp + 0x30]
mov r8, rsi
call fcn.1400327f0
mov rcx, qword [rbp + 0x40]
mov rdx, r14
mov r8, rsi
call fcn.1400327f0
add rsp, 0x20
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, qword [rbp + 0x48]
call fcn.1400c0180
add rsp, 0x20
mov rsi, qword [rbp + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dc47b8]
mov ecx, dword [0x141dc47bc]
lea r12d, [rax + rcx]
add r12d, 0x125ee6e0
xor r12d, 0x18073bbf
add r12d, 0x482e549b
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.1400327f0
mov rcx, qword [rbp + 0x40]
mov rdx, r14
mov r8, rsi
call fcn.1400327f0
add rsp, 0x20
mov rbx, qword [rdi + 8]
mov r13, qword [rdi + 0x10]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, qword [rbp + 0x48]
call fcn.1400c0180
add rsp, 0x20
cmp r12d, 0x8acd5683
jb 0x140035fc0
mov r15, rax
mov qword [rbp - 0x78], r14
test rax, rax
je 0x140035182
mov eax, dword [0x141dc47c0]
or eax, dword [0x141dc47c4]
add eax, 0x55aebedb
and eax, 0x69c30025
imul eax, eax, 0x3c2f53d8
cmp eax, 0xc61ab6a1
mov rdi, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x48]
jbe 0x140036090
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], r15
nop
mov r12d, dword [0x141dc47c8]
xor r12d, dword [0x141dc47cc]
xor r12d, 0xc5f9b763
add r12d, 0xdf8ff516
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], r15
cmp r12d, 0x55e55e42
ja 0x140036090
mov qword [rbp + 0x70], rsi
mov byte [rbp + 0x78], 0
mov eax, dword [0x141dc47d0]
and eax, dword [0x141dc47d4]
imul rax, rax, 0x1151ffc5
shr rax, 0x3c
or eax, 0x6639bf0e
cmp eax, 0x59c6d977
jne 0x140036115
sub rsp, 0x20
lea rcx, [rbp + 0x60]
mov rdx, rbx
mov r8, r13
call fcn.1400948e0
add rsp, 0x20
lea rsi, [rbp + 0x60]
nop dword [rax]
mov eax, dword [0x141dc47d8]
xor eax, dword [0x141dc47dc]
and eax, 0x7b511b42
imul r15, rax, 0x4a012953
shr r15, 0x39
and r15d, 0xfffffff1
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, r13
call fcn.1400948e0
add rsp, 0x20
cmp r15d, 0x4c8ff900
ja 0x140036120
mov r14, qword [rbp + 0x60]
mov r13, qword [rbp + 0x68]
mov rsi, qword [rbp + 0x70]
mov rax, qword [rbp + 0x38]
cmp qword [rax], 0
je 0x1400361f0
mov eax, dword [0x141dc47e0]
or eax, dword [0x141dc47e4]
add eax, 0xe7393007
imul rcx, rax, 0x339b0dd5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x36581b8
cmp eax, 0xbfb11500
jne 0x1400361b0
mov rax, qword [0x141ddb260]
nop
mov eax, dword [0x141dc47e8]
xor edx, edx
div dword [0x141dc47ec]
or eax, 0xfbfbd9f6
add eax, 0x841e8032
mov rcx, qword [0x141ddb260]
cmp eax, 0x9702fe85
ja 0x1400361b0
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dc47f0]
or eax, dword [0x141dc47f4]
add eax, 0xc5f90b63
or eax, 0xbf12206c
cmp eax, 0xe57bab54
ja 0x1400361f0
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
call fcn.1400981b0
add rsp, 0x20
mov rcx, rax
mov r8d, 0xbef08545
nop dword [rax]
mov eax, dword [0x141dc47f8]
xor edx, edx
div dword [0x141dc47fc]
xor eax, 0x744c49bf
imul rax, r8
shr rax, 0x3f
cmp eax, 0x717e2814
je 0x140036230
test rcx, rcx
jne 0x14003633b
mov r8, qword [rbp + 0x40]
mov rbx, qword [r8 + 8]
mov eax, dword [0x141dc4800]
xor edx, edx
div dword [0x141dc4804]
xor eax, 0xf9fc9a9b
mov ecx, 0xacafc6a1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x6c3156fc
cmp ecx, 0x2741aad0
nop
mov eax, dword [0x141dc4808]
or eax, dword [0x141dc480c]
imul eax, eax, 0x1f515aa
or eax, 0x4b080334
and eax, 0x5f081334
cmp eax, 0xeb3cbb2f
ja 0x140036290
test rsi, rsi
js 0x140036361
mov rdi, qword [r8 + 0x10]
mov eax, 0x871cb67b
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4820]
xor ecx, dword [0x141dc4824]
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xf2f279c7
or ecx, 0x62814a62
cmp ecx, 0xd3ef2cc3
jb 0x1400362d0
test rsi, rsi
je 0x140036333
movzx eax, byte [0x141ddb278]
mov eax, dword [0x141dc4828]
add eax, dword [0x141dc482c]
mov ecx, 0xe79297ff
imul rcx, rax
shr rcx, 0x3a
imul eax, ecx, 0x3b220eb3
cmp eax, 0x9e94c750
jbe 0x140036779
jmp 0x1400367ba
mov r15d, 1
jmp 0x1400363af
mov eax, dword [0x141dc4878]
xor eax, dword [0x141dc487c]
add eax, 0xaf935040
and eax, 0xee5f6813
cmp eax, 0xe51bc5ca
jne 0x14003680d
jmp 0x140036836
mov eax, dword [0x141dc4810]
xor edx, edx
div dword [0x141dc4814]
imul eax, eax, 0x5ff68e50
add eax, 0x927ae760
cmp eax, 0xfba51c45
jbe 0x140036390
ud2
mov eax, dword [0x141dc4818]
and eax, dword [0x141dc481c]
and eax, 0x596dad9a
ud2
mov qword [rbp + 0x48], r14
mov eax, dword [0x141dc4840]
sub eax, dword [0x141dc4844]
and eax, 0x2ade35a8
cmp eax, 0xa3697049
jne 0x140036408
sub rsp, 0x20
mov rcx, r15
mov rdx, r13
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rsi
mov byte [rbp + 0x78], 0
sub rsp, 0x20
lea rcx, [rbp + 0x60]
mov rdx, rbx
mov r8, rdi
call fcn.1400948e0
add rsp, 0x20
lea r14, [rbp + 0x60]
nop dword [rax]
mov eax, dword [0x141dc4848]
and eax, dword [0x141dc484c]
and eax, 0x6e89f028
imul r12d, eax, 0x9f7fe434
add r12d, 0xe7510b77
sub rsp, 0x20
mov rcx, r15
mov rdx, r13
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rsi
mov byte [rbp + 0x78], 0
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400948e0
add rsp, 0x20
cmp r12d, 0x6b8c4d5b
ja 0x140036410
mov qword [rbp - 0x60], r13
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x38], rax
mov r13, qword [rbp + 0x68]
mov rsi, qword [rbp + 0x70]
mov rax, qword [rbp + 0x40]
cmp qword [rax], 0
mov r12, qword [rbp + 0x20]
je 0x14003656a
mov eax, dword [0x141dc4850]
xor eax, dword [0x141dc4854]
or eax, 0xb76840e4
add eax, 0x37afb5c8
cmp eax, 0x5840a696
ja 0x1400364f2
mov eax, dword [0x141dc4858]
xor edx, edx
div dword [0x141dc485c]
and eax, 0x954220fc
imul rcx, rax, 0x134ab60f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul eax, eax, 0xa9f8bb15
mov rdi, qword [0x141ddb260]
cmp eax, 0x7f1aca56
jne 0x1400364fb
mov rax, qword [0x141ddb260]
jmp 0x1400364b7
xor eax, eax
test al, al
jne 0x140036552
mov eax, dword [0x141dc4860]
xor eax, dword [0x141dc4864]
imul r15d, eax, 0x885f1513
and r15d, 0xe2ee27cf
imul rax, r15, 0x53746cd3
shr rax, 0x20
sub r15d, eax
shr r15d, 1
add r15d, eax
shr r15d, 0x1e
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r15d, 0x3ef8744a
jbe 0x14003656a
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140036501
mov r15, qword [rbp - 0x10]
nop
mov eax, dword [0x141dc4868]
add eax, dword [0x141dc486c]
or eax, 0x129f2041
add eax, 0xd051a945
imul rax, rax, 0x4678a581
shr rax, 0x3a
cmp eax, 0xa66bf183
ja 0x140036570
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
call fcn.1400981b0
add rsp, 0x20
nop dword [rax + rax]
mov ecx, dword [0x141dc4870]
xor ecx, dword [0x141dc4874]
imul ecx, ecx, 0x9e00cf93
or ecx, 0x1cdd5c4e
and ecx, 0x3cdfff6e
cmp ecx, 0xdcd233c8
je 0x1400365b0
test rax, rax
jne 0x140035182
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400365f0
nop word cs:[rax + rax]
mov eax, dword [str._O9ne]
imul eax, dword [0x141dc488c]
or eax, 0xd204342
and eax, 0xd2167d3
imul eax, eax, 0x1827abfe
cmp eax, 0x374c3ad4
jb 0x140036600
test rsi, rsi
js 0x140036736
je 0x140036655
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
mov rdi, rax
test rax, rax
jne 0x14003665a
jmp 0x140035182
mov edi, 1
sub rsp, 0x20
mov rcx, rdi
mov rdx, r13
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], rsi
mov byte [rbp + 0x78], 0
sub rsp, 0x20
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp]
mov r8, qword [rbp - 8]
call fcn.1400948e0
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov qword [rbp - 8], rax
mov rcx, qword [rbp + 0x68]
mov rsi, qword [rbp + 0x70]
mov dword [rbp + 0x60], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov dword [rbp + 0x78], 7
mov qword [rbp + 0x7c], 0
mov word [rbp + 0x84], 0
mov byte [rbp + 0x81], 1
mov byte [rbp + 0x84], 1
mov byte [rbp + 0x83], 1
sub rsp, 0x20
lea rdi, [rbp + 0x60]
mov qword [rbp + 0x40], rcx
mov rdx, rsi
mov r8, rdi
call fcn.140092180
add rsp, 0x20
test rax, rax
jne 0x140036767
mov rbx, rdx
mov eax, dword [0x141dc4898]
xor eax, dword [0x141dc489c]
or eax, 0x882501ee
imul rax, rax, 0x2c46c345
shr rax, 0x3b
and eax, 0xfffffffc
cmp eax, 0xed71b79b
jne 0x14003683a
jmp 0x140036860
ud2
ud2
mov eax, dword [0x141dc4830]
xor eax, dword [0x141dc4834]
shr eax, 2
imul rax, rax, 0x24b50b5f
shr rax, 0x3b
or eax, 0x3a7ce42e
imul r12d, eax, 0xa647c2b8
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
cmp r12d, 0xe34e94de
jbe 0x1400367ce
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
jmp 0x140036779
mov r15, rax
test rax, rax
jne 0x1400363af
xor eax, eax
test al, al
jne 0x140036809
mov eax, dword [0x141dc4838]
and eax, dword [0x141dc483c]
or eax, 0x7d303882
imul rax, rax, 0x79447735
shr rax, 0x3e
ud2
ud2
mov eax, dword [0x141dc4880]
sub eax, dword [0x141dc4884]
imul eax, eax, 0x869e4054
xor eax, 0xe9c0ca76
add eax, 0xe3a73748
ud2
ud2
mov eax, dword [0x141dc48a0]
sub eax, dword [0x141dc48a4]
or eax, 0x101010
xor eax, 0x40c2
and eax, 0x1050f2
mov qword [r12], rbx
cmp eax, 0x624cbe06
jne 0x140036866
mov qword [r12], rbx
jmp 0x14003683a
movabs r10, 0x8000000000000000
mov r8, qword [rbp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [0x141dc48a8]
or eax, dword [0x141dc48ac]
add eax, 0xb711200
xor eax, 0x3900360
and eax, 0x2bf29b60
cmp eax, 0xf1ff71b3
je 0x140036880
mov r9, qword [r8]
mov ecx, 0x93099601
nop word [rax + rax]
mov eax, dword [0x141dc48b0]
xor edx, edx
div dword [0x141dc48b4]
add eax, 0xdea6e0a5
or eax, 0xfa4bd40
imul rax, rcx
shr rax, 0x3d
cmp eax, 0x59107545
je 0x1400368b0
cmp r9, r10
je 0x140036b6c
mov qword [rbp], r9
nop word cs:[rax + rax]
mov eax, dword [0x141dc48b8]
mov ecx, dword [0x141dc48bc]
add eax, ecx
add eax, 0xaeda16d5
or eax, 0xfe431956
cmp eax, 0xd2b48873
jb 0x1400368f0
mov qword [rbp - 0x30], r13
mov eax, dword [0x141dc48c0]
xor eax, dword [0x141dc48c4]
and eax, 0x60244000
cmp eax, 0xb8deb576
jne 0x140036950
mov rdx, qword [r8 + 8]
mov rax, qword [rbp + 0x50]
mov r8, qword [rax + 0x10]
sub rsp, 0x20
mov rcx, r12
call fcn.140002970
mov r8, qword [rbp + 0x50]
add rsp, 0x20
nop dword [rax + rax]
mov edi, dword [0x141dc48c8]
or edi, dword [0x141dc48cc]
add edi, 0x3b31a803
or edi, 0xcd786a3a
mov r13, qword [r8 + 8]
mov rax, qword [rbp + 0x50]
mov r8, qword [rax + 0x10]
sub rsp, 0x20
mov rcx, r12
mov rdx, r13
call fcn.140002970
mov r8, qword [rbp + 0x50]
add rsp, 0x20
cmp edi, 0xc5cd93ff
jb 0x140036950
test rax, rax
jne 0x140035182
xor eax, eax
nop
test al, al
jne 0x1400369a0
mov eax, dword [0x141dc4990]
mov ecx, dword [0x141dc4994]
add eax, ecx
add eax, 0x3a1f3523
xor eax, 0x1e6422e8
cmp eax, 0x7c356217
jbe 0x1400369d7
sub rsp, 0x20
lea rcx, [rbp + 0x60]
mov rdx, rbx
call fcn.140092ca0
add rsp, 0x20
lea rdi, [rbp + 0x60]
nop dword [rax + rax]
mov r12d, dword [0x141dc4998]
and r12d, dword [0x141dc499c]
and r12d, 0x41858125
xor r12d, 0x4983002c
or r12d, 0xb67876d2
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
call fcn.140092ca0
add rsp, 0x20
cmp r12d, 0x2dd5686a
jb 0x1400369e0
mov rax, qword [rbp + 0x60]
cmp eax, 2
je 0x140036af0
mov rdi, qword [rbp + 0x98]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140036a40
cmp rdi, 0x2a1fffff
ja 0x140036c5b
mov eax, dword [0x141dc49b8]
xor edx, edx
div dword [0x141dc49bc]
or eax, 0x28040420
xor eax, 0x10409108
and eax, 0x7844952c
cmp eax, 0xe061060a
jne 0x140036a80
mov qword [rbp + 0x60], 0
nop dword [rax]
mov eax, dword [0x141dc49c0]
imul eax, dword [0x141dc49c4]
or eax, 0x83633b97
add eax, 0xe0da9977
imul rax, rax, 0x4a072e45
shr rax, 0x3d
mov qword [rbp + 0x60], 0
cmp eax, 0x1806589e
ja 0x140036a80
sub rsp, 0x20
lea r8, [rbp + 0x60]
mov rcx, rbx
xor edx, edx
mov r9d, 2
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
add rsp, 0x20
test eax, eax
je 0x140036bd2
xor eax, eax
test al, al
je 0x140037c47
jmp 0x140037c7d
mov eax, dword [0x141dc49a0]
or eax, dword [0x141dc49a4]
add eax, 0xc3238f4f
cmp eax, 0x87d0fa3d
ja 0x140036af0
mov eax, dword [0x141dc49a8]
add eax, dword [0x141dc49ac]
or eax, 0x48953cfd
xor eax, 0x3a8eb33e
mov ecx, 0xe13de6f7
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x2046cc96
jbe 0x140036b40
ud2
mov eax, dword [0x141dc49b0]
xor edx, edx
div dword [0x141dc49b4]
imul eax, eax, 0x1027f488
or eax, 0x3124a262
add eax, 0xf7f48354
ud2
lea rax, [0x141dafcec]
mov qword [rbp + 0x60], rax
mov rcx, qword [rbp + 0x60]
movabs rax, 0x52aa7c819077586b
mov qword [rbp + 0x60], rax
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140017b10
add rsp, 0x20
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
xor ecx, ecx
test cl, cl
je 0x140036bb8
mov ecx, dword [rax + 0x20]
movzx ecx, word [rax + 0x24]
ud2
xor ecx, ecx
nop word [rax + rax]
mov edx, dword [rax + 0x20]
movzx edx, word [rax + 0x24]
ud2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140036bf0
mov eax, dword [0x141dc49d0]
or eax, dword [0x141dc49d4]
xor eax, 0xc758fdf7
add eax, 0x6c03d19c
mov ecx, 0xaecf69bb
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xc4d0cd7f
jbe 0x140036c30
ud2
mov eax, dword [0x141dc49d8]
mov ecx, dword [0x141dc49dc]
add eax, ecx
add eax, 0x7bdf8647
and eax, 0x96d8890
add eax, 0x752b31b9
ud2
mov eax, dword [0x141dc48d0]
and eax, dword [0x141dc48d4]
imul eax, eax, 0xa723a700
cmp eax, 0x1a8b7da0
jae 0x140036c85
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov r15, qword [rbp + 0x40]
nop dword [rax]
mov edi, dword [0x141dc48d8]
sub edi, dword [0x141dc48dc]
xor edi, 0xd020040
or edi, 0x62e9f9ac
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp edi, 0xdb4abb98
je 0x140036c90
test rsi, rsi
js 0x14003708a
je 0x140036e0b
mov eax, dword [0x141dc4908]
or eax, dword [0x141dc490c]
add eax, 0xb43a83e2
or eax, 0x33857e55
cmp eax, 0xc74a686e
jne 0x140036d00
movzx eax, byte [0x141ddb278]
nop word cs:[rax + rax]
mov eax, dword [0x141dc4910]
xor eax, dword [0x141dc4914]
or eax, 0xfe5e77df
add eax, 0xb68c928b
movzx ecx, byte [0x141ddb278]
cmp eax, 0x921a2a65
jb 0x140036d00
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x140035182
mov rbx, rax
mov eax, dword [0x141dc4918]
imul eax, dword [0x141dc491c]
imul eax, eax, 0x127d11a5
add eax, 0x24fbfbeb
and eax, 0x3b08ea1b
cmp eax, 0xa92d004a
jbe 0x140036da0
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dc4920]
imul eax, dword [0x141dc4924]
imul r12d, eax, 0x6bf93f2d
add r12d, 0x67b977e5
and r12d, 0xf64cb10
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
cmp r12d, 0x417ec6fd
ja 0x140036da0
mov rdi, rax
test rax, rax
jne 0x140036e99
jmp 0x140035182
xor eax, eax
test al, al
je 0x140036e30
sub rsp, 0x20
mov ecx, 1
mov rdx, r15
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dc48f8]
and eax, dword [0x141dc48fc]
imul edi, eax, 0x85fe703
add edi, 0xf15ac43b
sub rsp, 0x20
mov ecx, 1
mov rdx, r15
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp edi, 0x3472ef80
jb 0x140036e30
nop dword [rax + rax]
mov eax, dword [0x141dc4900]
mov ecx, dword [0x141dc4904]
add eax, ecx
add eax, 0xd2387df1
or eax, 0x14489edf
cmp eax, 0x611e4402
ja 0x140036e70
mov ebx, 1
mov edi, 1
mov eax, dword [0x141dc4928]
or eax, dword [0x141dc492c]
xor eax, 0x2ad08045
and eax, 0xfaf8aa4d
cmp eax, 0x6bd4de61
jae 0x140036f6f
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 8]
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rsi
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], 0
mov qword [rax + 0x28], 8
mov qword [rax + 0x30], 0
mov qword [rax + 0x88], 0
mov qword [rax + 0x98], 0
mov word [rax + 0xa0], 0
movabs rcx, 0x8000000000000000
mov qword [rax + 0x38], rcx
mov dword [rax + 0xc4], 0
mov word [rax + 0xc0], 0
mov word [rax + 0xc8], 0
mov dword [rax + 0x58], 6
mov dword [rax + 0x68], 6
mov dword [rax + 0x78], 6
mov qword [rax + 0xa8], 0
mov qword [rax + 0xb8], 0
mov r15, qword [rbp + 8]
movabs r14, 0x8000000000000000
nop dword [rax]
mov r12d, dword [0x141dc4930]
imul r12d, dword [0x141dc4934]
or r12d, 0xfabfffab
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r15], rsi
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], rsi
mov byte [r15 + 0x18], 0
mov qword [r15 + 0x20], 0
mov qword [r15 + 0x28], 8
mov qword [r15 + 0x30], 0
mov qword [r15 + 0x88], 0
mov qword [r15 + 0x98], 0
mov word [r15 + 0xa0], 0
mov qword [r15 + 0x38], r14
mov dword [r15 + 0xc4], 0
mov word [r15 + 0xc0], 0
mov word [r15 + 0xc8], 0
mov dword [r15 + 0x58], 6
mov dword [r15 + 0x68], 6
mov dword [r15 + 0x78], 6
mov qword [r15 + 0xa8], 0
mov qword [r15 + 0xb8], 0
cmp r12d, 0xcf628f3a
je 0x140036f80
test rsi, rsi
mov r14, qword [rbp - 0x78]
je 0x1400371c0
mov eax, dword [0x141dc4938]
or eax, dword [0x141dc493c]
xor eax, 0x401080
and eax, 0x81e0bc98
add eax, 0x9e8bacf5
cmp eax, 0xaf3ea7a8
jbe 0x140037114
jmp 0x140037136
mov eax, dword [0x141dc48e0]
xor eax, dword [0x141dc48e4]
add eax, 0xd95730d7
xor eax, 0x632a6e80
mov ecx, 0xe3b33331
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x3032d6da
ja 0x1400370d6
mov eax, dword [0x141dc48e8]
xor edx, edx
div dword [str._r6W]
add eax, 0x360a7921
xor eax, 0x16ade804
ud2
ud2
mov eax, dword [0x141dc4940]
xor edx, edx
div dword [0x141dc4944]
imul eax, eax, 0xf834f9c0
mov rsi, qword [0x141ddb260]
cmp eax, 0xee4f83a7
jne 0x14003713f
mov rax, qword [0x141ddb260]
jmp 0x140037114
mov eax, dword [0x141dc4948]
sub eax, dword [0x141dc494c]
add eax, 0x1e7072fa
cmp eax, 0x845ed476
jae 0x14003716d
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov edi, 0xe788dc43
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov r12d, dword [0x141dc4950]
and r12d, dword [0x141dc4954]
and r12d, 0xf34e6c7c
add r12d, 0xe3025219
imul r12, rdi
shr r12, 0x3f
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call r15
add rsp, 0x20
cmp r12d, 0x82894df2
ja 0x140037180
mov eax, dword [0x141dc4958]
and eax, dword [0x141dc495c]
and eax, 0xe4f0e272
xor eax, 0x125954e3
mov ecx, 0x95780703
imul rcx, rax
shr rcx, 0x3b
cmp ecx, 0x6a0fc013
mov rdx, qword [rbp + 8]
ja 0x140037223
mov eax, dword [0x141dc4960]
or eax, dword [0x141dc4964]
imul eax, eax, 0x9f44f617
xor eax, 0xf379808e
add eax, 0xd93c7218
mov dword [rdx + 0xc4], 0x8000000
mov dword [rbp - 0x28], 0
cmp eax, 0xeb420160
jbe 0x140037236
mov dword [rdx + 0xc4], 0x8000000
mov dword [rbp - 0x28], 0
jmp 0x1400371ef
sub rsp, 0x20
lea rdi, [rbp + 0x60]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.1400a1750
add rsp, 0x20
mov rcx, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dc4968]
xor eax, dword [0x141dc496c]
imul rax, rax, 0x4e831bb9
shr rax, 0x3c
or eax, 0xc7750546
add eax, 0x18537023
cmp eax, 0x4e38e1e4
jb 0x140037260
mov rbx, qword [rbp + 0x60]
cmp ecx, 2
mov qword [rbp + 0x50], rcx
jne 0x1400372a0
mov qword [rbp + 0x20], rbx
jmp 0x14003731a
mov eax, dword [0x141dc4970]
or eax, dword [0x141dc4974]
imul eax, eax, 0x2d3e5316
add eax, 0x3a137e86
cmp eax, 0x85001aa1
ja 0x1400372a0
mov r15, qword [rbp + 0x68]
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp - 0x58], rax
nop dword [rax + rax]
mov eax, dword [0x141dc4978]
imul eax, dword [0x141dc497c]
imul eax, eax, 0x9fc77fb4
add eax, 0xbf7066a
cmp eax, 0xa4584cb9
ja 0x1400372f0
mov rax, qword [rbp + 0x98]
mov qword [rbp - 0x10], rax
movabs r12, 0x933d6df2dbf99718
mov eax, dword [0x141dc4980]
xor eax, dword [0x141dc4984]
cmp eax, 0xa65c0583
je 0x140037397
mov eax, dword [0x141dc4988]
imul eax, dword [0x141dc498c]
shr eax, 3
imul rsi, rax, 0x5379eff
shr rsi, 0x34
add esi, 0x4f148d1a
lea rax, [0x141daf161]
mov qword [rbp + 0x60], rax
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], r12
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140019c90
add rsp, 0x20
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
cmp esi, 0x4a80ce22
jae 0x1400373d3
lea rax, [0x141daf161]
mov qword [rbp + 0x60], rax
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], r12
mov rdx, qword [rbp + 0x60]
sub rsp, 0x20
call fcn.140019c90
add rsp, 0x20
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
jmp 0x140037337
cmp dword [rbp + 0x50], 2
je 0x1400375e1
mov eax, dword [0x141dc49f0]
and eax, dword [0x141dc49f4]
imul rax, rax, 0x131dbbd1
shr rax, 0x3c
or eax, 0x6c6f69f8
cmp eax, 0x1e6c12ec
jae 0x140037411
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov edi, 0xd1e94e09
mov r12, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
mov esi, dword [0x141dc49f8]
xor esi, dword [0x141dc49fc]
imul rsi, rdi
shr rsi, 0x3e
add esi, 0x417f7b9e
sub rsp, 0x20
mov rcx, rbx
call r12
add rsp, 0x20
cmp esi, 0xcdc76ab6
ja 0x140037420
mov eax, dword [0x141dc4a00]
or eax, dword [0x141dc4a04]
xor eax, 0x1a014974
imul rax, rax, 0x75e13905
shr rax, 0x3e
cmp eax, 0x37ebcb1a
jne 0x140037484
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rdi, qword [rbp + 8]
nop dword [rax + rax]
mov esi, dword [0x141dc4a08]
add esi, dword [0x141dc4a0c]
or esi, 0xffecffde
add esi, 0x6283ef27
sub rsp, 0x20
mov rcx, r15
call r12
add rsp, 0x20
cmp esi, 0x3c44488e
jb 0x140037490
cmp qword [rbp + 0x50], 0
je 0x140037569
mov eax, dword [0x141dc4a10]
imul eax, dword [0x141dc4a14]
or eax, 0x3f44ecfd
add eax, 0x2641df42
mov ecx, 0xc5d3887d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x82499d69
mov rbx, qword [rbp + 0x20]
jne 0x140037510
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dc4a18]
sub eax, dword [0x141dc4a1c]
imul esi, eax, 0x2f8a3882
add esi, 0xe8666944
sub rsp, 0x20
mov rcx, rbx
call r12
add rsp, 0x20
cmp esi, 0x375dd2ea
jb 0x140037510
nop
mov eax, dword [0x141dc4a20]
or eax, dword [0x141dc4a24]
and eax, 0xf8155895
imul eax, eax, 0xb5a937ef
imul rax, rax, 0x189297cd
shr rax, 0x3b
cmp eax, 0x878a236e
je 0x140037540
mov eax, 0xbe6f5e0d
nop
mov ecx, dword [0x141dc4a28]
xor ecx, dword [0x141dc4a2c]
add ecx, 0x2a59c364
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x8bf37846
je 0x140037570
cmp qword [rbp - 0x48], 0
mov rbx, qword [rbp - 0x10]
mov rsi, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x50]
je 0x1400375b3
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test rsi, rsi
je 0x140037644
mov eax, dword [0x141dc4a30]
xor eax, dword [0x141dc4a34]
and eax, 0x10dc0740
imul eax, eax, 0x3a005a9a
or eax, 0x68cabdff
cmp eax, 0x2a740027
jae 0x1400375f9
jmp 0x140037624
ud2
mov eax, dword [0x141dc4a38]
sub eax, dword [0x141dc4a3c]
imul esi, eax, 0x330ae443
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp esi, 0xa650e9fd
jne 0x140037637
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400375f9
xor eax, eax
nop dword [rax]
test al, al
jne 0x140037640
mov eax, dword [0x141dc4a40]
and eax, dword [0x141dc4a44]
mov ecx, 0xb833bc13
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xcc3eff79
cmp ecx, 0xc1604cb8
jae 0x140037680
sub rsp, 0x20
mov rcx, rdi
call fcn.14000dbf0
add rsp, 0x20
nop dword [rax + rax]
mov esi, dword [0x141dc4a48]
add esi, dword [0x141dc4a4c]
and esi, 0xdf381315
add esi, 0x60d00641
xor esi, 0x585fc66c
sub rsp, 0x20
mov rcx, rdi
call fcn.14000dbf0
add rsp, 0x20
cmp esi, 0xd804d427
jb 0x140037680
nop word cs:[rax + rax]
mov eax, dword [0x141dc4a50]
imul eax, dword [0x141dc4a54]
imul eax, eax, 0xa4727177
add eax, 0x834adf0
or eax, 0xf43a4ab0
cmp eax, 0xebb8af81
je 0x1400376c0
mov rcx, qword [rbp]
nop dword [rax + rax]
mov eax, dword [0x141dc4a58]
xor eax, dword [0x141dc4a5c]
add eax, 0xcc9c275d
imul rax, rax, 0x1a98136f
shr rax, 0x3b
cmp eax, 0xa0f8901a
ja 0x1400376f0
test rcx, rcx
je 0x1400377b0
mov rsi, qword [0x141ddb260]
mov eax, dword [0x141dc4a60]
imul eax, dword [0x141dc4a64]
add eax, 0x7078cb9b
cmp eax, 0xf470159d
ja 0x140037771
mov eax, dword [0x141dc4a68]
sub eax, dword [0x141dc4a6c]
and eax, 0x5200023
imul edi, eax, 0x95903cec
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x43c8e8fc
jne 0x140037790
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14003773c
mov eax, dword [0x141dc4a70]
or eax, dword [0x141dc4a74]
and eax, 0x8749320
add eax, 0x782e94bf
cmp eax, 0x9b95c15d
ja 0x140037790
mov eax, dword [0x141dc4a78]
xor eax, dword [0x141dc4a7c]
add eax, 0x398a79e9
and eax, 0xa28a05a
cmp eax, 0x16ec47ea
ja 0x1400377b0
cmp qword [rbp - 8], 0
mov r15, qword [rbp + 0x30]
mov r13, qword [rbp + 0x58]
je 0x140037854
mov eax, dword [0x141dc4a80]
imul eax, dword [0x141dc4a84]
imul eax, eax, 0x3cc1a3f
xor eax, 0x5d07e019
add eax, 0xb7e9ee05
cmp eax, 0xe696602d
ja 0x14003780d
mov rcx, qword [0x141ddb260]
xor eax, eax
test al, al
je 0x140037816
mov rax, qword [0x141ddb260]
jmp 0x140037800
mov eax, dword [0x141dc4a90]
xor edx, edx
div dword [0x141dc4a94]
nop word cs:[rax + rax]
mov eax, dword [str.c8_f]
and eax, dword [0x141dc4a9c]
imul eax, eax, 0xcf8190e8
add eax, 0xf4a7e568
cmp eax, 0xd645a109
jb 0x140037870
nop
mov eax, dword [0x141dc4aa0]
and eax, dword [0x141dc4aa4]
imul eax, eax, 0x5282b5e
add eax, 0x47d5e084
imul rax, rax, 0x4e149a9f
shr rax, 0x3b
cmp eax, 0xb3f27eb5
ja 0x140037890
mov r12d, dword [0x141dc49c8]
and r12d, dword [0x141dc49cc]
and r12d, 0x85148346
sub rsp, 0x20
mov r8d, 0x1000
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
cmp r12d, 0xa776f7f2
jne 0x140037c97
sub rsp, 0x20
mov r8d, 0x1000
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
jmp 0x140037c47
mov r12d, 0x2a200000
sub r12, rdi
cmp r12, 0x1000
mov edi, 0x1000
cmovb rdi, r12
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
mov rdx, r15
mov r8, rdi
call fcn.140002970
add rsp, 0x20
test rax, rax
jne 0x140037d27
mov eax, dword [0x141dc49e0]
add eax, dword [0x141dc49e4]
and eax, 0xc246e715
imul eax, eax, 0xbe57b635
add eax, 0xb914d6ae
cmp eax, 0x511dd593
jb 0x140037ccc
sub r12, rdi
jne 0x140037ca0
nop word cs:[rax + rax]
mov eax, dword [0x141dc49e8]
sub eax, dword [0x141dc49ec]
add eax, 0x9aee3313
and eax, 0xfdf99138
add eax, 0x99bcd7f6
cmp eax, 0xd1005f4
jb 0x140037d00
jmp 0x140036c5b
mov eax, dword [0x141dc4b08]
sub eax, dword [0x141dc4b0c]
add eax, 0xcdc5ca04
or eax, 0x5827f47c
cmp eax, 0xf85163a5
jb 0x140037d4c
ud2
ud2