Function at 0x140036580
Capabilities:
Access peb ldr_data
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1158
call fcn.1400f07c0
sub rsp, rax
mov r15, r8
mov r12, rdx
mov r14, rcx
lea rax, [0x141daf82d]
mov qword [rsp + 0x158], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x158]
movabs rax, 0xe7b687eb3d4a0b4
mov qword [rsp + 0x158], rax
mov rdx, qword [rsp + 0x158]
call fcn.140018e50
mov r13d, dword [rax]
movzx ebp, word [rax + 4]
movzx esi, byte [rax + 6]
movzx eax, byte [0x141ddc4f8]
mov edx, 7
xor ecx, ecx
call fcn.1400c0a10
test rax, rax
je 0x140036832
mov rbx, rax
shl esi, 0x10
or ebp, esi
mov eax, ebp
shr eax, 0x10
xor al, 0xf2
movzx eax, al
shl rax, 0x30
mov ecx, ebp
shr ecx, 8
xor cl, 0xd8
movzx edi, cl
shl rdi, 0x28
or rdi, rax
nop
mov eax, dword [0x141dc58d8]
or eax, dword [0x141dc58dc]
add eax, 0xa3b6a35c
or eax, 0x4c8a764f
cmp eax, 0xed37958
jb 0x140036630
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x30], r14
mov eax, dword [0x141dc58e0]
imul eax, dword [0x141dc58e4]
movabs r9, 0xdb93516bcf97383e
or eax, 0xfeb7dafb
imul eax, eax, 0x1e1f21d5
cmp eax, 0x737fbab
lea r8, [rsp + 0x158]
jne 0x140036711
mov eax, ebp
xor al, 0xef
movzx eax, al
shl rax, 0x20
or rax, rdi
mov ecx, r13d
xor ecx, 0xdfe8bd29
or ecx, edi
mov rdx, rdi
shr rdx, 0x30
mov byte [rbx + 6], dl
mov dword [rbx], ecx
shr rax, 0x20
mov word [rbx + 4], ax
lea rax, [0x141db4cb9]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], r9
mov rdx, qword [rsp + 0x158]
mov rsi, r9
call fcn.14001a820
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
movzx eax, byte [0x141ddc4f8]
mov edx, 5
xor ecx, ecx
call fcn.1400c0a10
mov r9, rsi
lea r8, [rsp + 0x158]
xor bpl, 0xef
movzx eax, bpl
shl rax, 0x20
or rax, rdi
xor r13d, 0xdfe8bd29
mov r15, rbx
mov r12, rdi
shr r12, 0x30
shr rax, 0x20
mov qword [rsp + 0x20], rax
nop word [rax + rax]
mov eax, dword [0x141dc58e8]
xor edx, edx
div dword [0x141dc58ec]
or eax, 0xbb310ec1
imul ebp, eax, 0x2e8c7f98
or ebp, 0x25755ab7
mov eax, edi
or eax, r13d
mov byte [r15 + 6], r12b
mov dword [r15], eax
mov rax, qword [rsp + 0x20]
mov word [r15 + 4], ax
lea rax, [0x141db4cb9]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], r9
mov rdx, qword [rsp + 0x158]
mov r14, rdi
mov rdi, r9
call fcn.14001a820
mov ebx, dword [rax]
movzx esi, byte [rax + 4]
movzx eax, byte [0x141ddc4f8]
mov edx, 5
xor ecx, ecx
call fcn.1400c0a10
mov r9, rdi
mov rdi, r14
lea r8, [rsp + 0x158]
cmp ebp, 0xf363f8f
jb 0x140036740
mov qword [rsp + 0x60], r15
test rax, rax
je 0x1400368a4
xor sil, 0xe2
xor ebx, 0x435cfff3
mov byte [rax + 4], sil
mov qword [rsp + 0x58], rax
mov dword [rax], ebx
lea rax, [0x141dabc3f]
mov qword [rsp + 0x158], rax
movabs rbx, 0xd5623f65b9fcf0a6
mov eax, dword [0x141dc5908]
add eax, dword [0x141dc590c]
cmp eax, 0xca5b5115
jne 0x140036936
jmp 0x1400369a3
mov eax, dword [0x141dc58c0]
imul eax, dword [0x141dc58c4]
imul eax, eax, 0x9cc68604
or eax, 0xb04659b3
imul eax, eax, 0x9607ff64
cmp eax, 0x2a6f3fbe
jne 0x140036860
ud2
mov eax, dword [0x141dc58c8]
and eax, dword [0x141dc58cc]
ud2
mov eax, dword [0x141dc58f0]
sub eax, dword [0x141dc58f4]
or eax, 0x788a071
and eax, 0x47caa0f5
cmp eax, 0x5667263
jne 0x1400368c5
jmp 0x1400368fa
ud2
mov eax, dword [0x141dc58f8]
imul eax, dword [0x141dc58fc]
imul eax, eax, 0xda5d3848
add eax, 0xc652c86d
imul rcx, rax, 0x31e21a7d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
ud2
ud2
mov eax, dword [0x141dc5910]
xor edx, edx
div dword [0x141dc5914]
mov esi, eax
xor esi, 0x30970897
add esi, 0xaa4c43e6
and esi, 0x69416da2
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], rbx
mov rdx, qword [rsp + 0x158]
call fcn.140017c70
mov edi, dword [rax]
movzx ebp, word [rax + 4]
movzx r14d, byte [rax + 6]
movzx eax, byte [0x141ddc4f8]
mov edx, 7
xor ecx, ecx
call fcn.1400c0a10
lea r8, [rsp + 0x158]
cmp esi, 0x481d5335
jae 0x1400369ea
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], rbx
mov rdx, qword [rsp + 0x158]
call fcn.140017c70
mov ecx, dword [rax]
movzx ecx, byte [rax + 6]
movzx eax, word [rax + 4]
movzx eax, byte [0x141ddc4f8]
mov edx, 7
xor ecx, ecx
call fcn.1400c0a10
lea r8, [rsp + 0x158]
jmp 0x140036936
mov r15, rax
test rax, rax
je 0x140036a71
shl r14d, 0x10
or ebp, r14d
mov ecx, ebp
shr ecx, 0x10
mov eax, ebp
shr eax, 8
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x140036a10
xor cl, 0x53
movzx ecx, cl
shl rcx, 0x30
xor al, 0xf5
movzx eax, al
shl rax, 0x28
or rax, rcx
xor bpl, 0x78
movzx esi, bpl
shl rsi, 0x20
or rsi, rax
xor edi, 0x5c17ae9a
movabs r14, 0x6241be854d4b5996
mov eax, dword [0x141dc5920]
xor eax, dword [0x141dc5924]
imul rax, rax, 0x7f04f1e9
shr rax, 0x3e
add eax, 0x82b5b8e3
cmp eax, 0x8600310d
jbe 0x140036aa7
jmp 0x140036b3e
ud2
mov eax, dword [0x141dc5928]
and eax, dword [0x141dc592c]
imul rax, rax, 0x5e386161
shr rax, 0x3d
imul ebx, eax, 0xeeda096b
and ebx, 0xae9b1e4e
mov eax, esi
or eax, edi
mov rcx, rsi
shr rcx, 0x30
mov byte [r15 + 6], cl
mov rcx, rsi
shr rcx, 0x20
mov word [r15 + 4], cx
mov dword [r15], eax
lea rax, [0x141db1d12]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], r14
mov rdx, qword [rsp + 0x158]
call fcn.140017a10
mov r12, qword [rax]
movzx ebp, byte [rax + 8]
movzx eax, byte [0x141ddc4f8]
mov edx, 9
xor ecx, ecx
call fcn.1400c0a10
lea r8, [rsp + 0x158]
cmp ebx, 0x23383dd3
jne 0x140036baf
mov eax, esi
or eax, edi
mov rcx, rsi
shr rcx, 0x30
mov byte [r15 + 6], cl
mov rcx, rsi
shr rcx, 0x20
mov word [r15 + 4], cx
mov dword [r15], eax
lea rax, [0x141db1d12]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], r14
mov rdx, qword [rsp + 0x158]
call fcn.140017a10
mov rcx, qword [rax]
movzx eax, byte [rax + 8]
movzx eax, byte [0x141ddc4f8]
mov edx, 9
xor ecx, ecx
call fcn.1400c0a10
lea r8, [rsp + 0x158]
jmp 0x140036aa7
mov r13, rax
test rax, rax
je 0x140036ce6
xor bpl, 0xf1
movabs rax, 0x4439d3f2d34a2ef8
xor r12, rax
mov qword [r13], r12
mov byte [r13 + 8], bpl
lea rax, [0x141da8d1a]
mov qword [rsp + 0x158], rax
mov rsi, qword [rsp + 0x158]
movabs rax, 0x75fbc74275712cdc
mov qword [rsp + 0x158], rax
mov rdi, qword [rsp + 0x158]
mov eax, dword [0x141dc5938]
sub eax, dword [0x141dc593c]
or eax, 0x1d0bcfdc
add eax, 0x2d7395fe
and eax, 0x68acf45b
cmp eax, 0xb2b5f7ab
jbe 0x140036c50
mov rcx, rsi
mov rdx, rdi
call fcn.140019000
mov ecx, dword [rax]
movzx ecx, byte [rax + 6]
movzx eax, word [rax + 4]
movzx eax, byte [0x141ddc4f8]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5940]
or eax, dword [0x141dc5944]
imul r12d, eax, 0x3801e106
add r12d, 0x4099e9d2
or r12d, 0xe73352e7
mov rcx, rsi
mov rdx, rdi
call fcn.140019000
mov ebp, dword [rax]
movzx r14d, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141ddc4f8]
cmp r12d, 0xcd24d71f
jb 0x140036c50
mov edx, 7
xor ecx, ecx
call fcn.1400c0a10
test rax, rax
je 0x140036d12
mov r8, rax
shl ebx, 0x10
or r14d, ebx
mov eax, dword [0x141dc5950]
add eax, dword [0x141dc5954]
imul rax, rax, 0xd3e14e5
shr rax, 0x39
add eax, 0xab95333b
xor eax, 0x14f5f38e
cmp eax, 0x834531ec
lea r9, [rsp + 0x158]
jae 0x140036d4b
jmp 0x140036dbd
ud2
mov eax, dword [0x141dc5948]
xor edx, edx
div dword [0x141dc594c]
and eax, 0x62681c88
xor eax, 0xc21903c2
or eax, 0xd82e034
cmp eax, 0x74bf8ae9
jne 0x140036d38
ud2
xor eax, eax
nop word [rax + rax]
ud2
mov eax, dword [0x141dc5958]
xor eax, dword [0x141dc595c]
or eax, 0x5ebcbaf2
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xf7
movzx ecx, cl
mov byte [r8 + 6], cl
shl rcx, 0x30
mov edx, r14d
shr edx, 8
xor dl, 0xd6
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
mov ecx, r14d
xor cl, 0x26
movzx ecx, cl
shl rcx, 0x20
or rcx, rdx
mov edx, ebp
xor edx, 0x69d81ff5
shr rcx, 0x20
mov dword [r8], edx
mov word [r8 + 4], cx
lea rcx, [0x141db491d]
mov qword [rsp + 0x158], rcx
cmp eax, 0xfde71704
jne 0x140036e1a
mov eax, r14d
shr eax, 0x10
xor al, 0xf7
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, r14d
shr ecx, 8
xor cl, 0xd6
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
mov eax, r14d
xor al, 0x26
movzx eax, al
shl rax, 0x20
or rax, rcx
mov ecx, ebp
xor ecx, 0x69d81ff5
mov dword [r8], ecx
shr rax, 0x20
mov word [r8 + 4], ax
lea rax, [0x141db491d]
mov qword [rsp + 0x158], rax
jmp 0x140036d4b
mov qword [rsp + 0x50], r8
movabs rax, 0xd354b8817c4eaefa
xor ecx, ecx
test cl, cl
jne 0x140036e65
mov ecx, dword [0x141dc5960]
and ecx, dword [0x141dc5964]
or ecx, 0x80801578
imul edx, ecx, 0xf43e76ab
add edx, 0x4bab6f33
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], rax
cmp edx, 0x95c4d334
jbe 0x140036e6f
mov qword [rsp + 0x158], rax
jmp 0x140036e2f
mov rdx, qword [rsp + 0x158]
call fcn.140019860
mov esi, dword [rax]
movzx ebx, byte [rax + 4]
movzx eax, byte [0x141ddc4f8]
mov edx, 5
xor ecx, ecx
call fcn.1400c0a10
test rax, rax
je 0x140036ef0
mov r14, rax
xor bl, 0x17
movzx eax, bl
shl rax, 0x20
xor esi, 0x66b1c287
or rsi, rax
movabs rdi, 0x3cc1a3d859623c22
mov eax, dword [0x141dc5978]
or eax, dword [0x141dc597c]
imul eax, eax, 0x71c86820
or eax, 0x5555dff1
imul rax, rax, 0x6704199
shr rax, 0x39
cmp eax, 0xc862c01d
lea r12, [rsp + 0x158]
jbe 0x140036f50
jmp 0x140036fad
mov eax, dword [0x141dc5968]
imul eax, dword [0x141dc596c]
imul eax, eax, 0xb47a5fae
add eax, 0x5c91bf8a
xor eax, 0x69eaa241
cmp eax, 0x84bc1cbe
jbe 0x140036f20
ud2
mov eax, dword [0x141dc5970]
imul eax, dword [str.qOy]
xor eax, 0x6f9b2415
add eax, 0xdecdcbbe
imul rax, rax, 0x4248f9b9
shr rax, 0x3c
ud2
mov ebp, dword [0x141dc5980]
sub ebp, dword [0x141dc5984]
add ebp, 0xf9f76126
or ebp, 0x91315db1
mov dword [r14], esi
mov rax, rsi
shr rax, 0x20
mov byte [r14 + 4], al
lea rax, [0x141dab388]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], rdi
mov rdx, qword [rsp + 0x158]
call fcn.14001a880
mov rbx, qword [rax]
cmp ebp, 0x38a46e5a
jae 0x140036fef
mov dword [r14], esi
mov rax, rsi
shr rax, 0x20
mov byte [r14 + 4], al
lea rax, [0x141dab388]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 0x158], rdi
mov rdx, qword [rsp + 0x158]
call fcn.14001a880
mov rax, qword [rax]
jmp 0x140036f50
movzx eax, byte [0x141ddc4f8]
mov edx, 8
xor ecx, ecx
call fcn.1400c0a10
test rax, rax
je 0x1400370cf
mov rbp, rax
movabs rax, 0xd41eccec31ab6f4d
xor rbx, rax
mov qword [rbp], rbx
lea rax, [0x141daf395]
mov qword [rsp + 0x158], rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x158]
movabs rax, 0x4a92b419fe709089
mov qword [rsp + 0x158], rax
mov rdx, qword [rsp + 0x158]
call fcn.140017da0
mov edi, dword [rax]
movzx esi, word [rax + 4]
movzx eax, byte [0x141ddc4f8]
mov edx, 6
xor ecx, ecx
call fcn.1400c0a10
test rax, rax
je 0x1400368c3
mov rbx, rax
mov eax, esi
shr eax, 8
xor al, 0xcd
movzx eax, al
shl rax, 0x28
xor sil, 0x4d
movzx ecx, sil
shl rcx, 0x20
or rcx, rax
xor edi, 0x243cce12
or rdi, rcx
mov eax, dword [0x141dc5998]
and eax, dword [0x141dc599c]
or eax, 0x4097c63e
add eax, 0xaeee55c4
xor eax, 0x89da110b
cmp eax, 0x61330009
jae 0x140037139
jmp 0x140037183
mov eax, dword [0x141dc5988]
and eax, dword [0x141dc598c]
and eax, 0x3773c2
imul eax, eax, 0xd32ffd85
and eax, 0x1aa0c26a
cmp eax, 0x8f124d46
jne 0x140037100
ud2
mov eax, dword [0x141dc5990]
xor eax, dword [str.e_v_88]
add eax, 0xfb5cd10d
and eax, 0xd1aee668
ud2
mov eax, dword [0x141dc59a0]
xor edx, edx
div dword [0x141dc59a4]
mov esi, eax
or esi, 0x1704000
xor esi, 0x800ae10
and esi, 0xff0ee18
mov dword [rbx], edi
mov rax, rdi
shr rax, 0x20
mov word [rbx + 4], ax
movzx eax, byte [0x141ddc4f8]
mov edx, 0x80
xor ecx, ecx
call fcn.1400c0a10
cmp esi, 0xf8250233
jbe 0x1400371a5
mov dword [rbx], edi
mov rax, rdi
shr rax, 0x20
mov word [rbx + 4], ax
movzx eax, byte [0x141ddc4f8]
mov edx, 0x80
xor ecx, ecx
call fcn.1400c0a10
jmp 0x140037139
mov rcx, rax
test rax, rax
je 0x1400372c4
mov rax, qword [rsp + 0x60]
mov qword [rcx], rax
mov qword [rcx + 8], 7
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 5
mov qword [rcx + 0x20], r15
mov qword [rcx + 0x28], 7
mov qword [rcx + 0x30], r13
mov qword [rcx + 0x38], 9
mov rax, qword [rsp + 0x50]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 7
mov qword [rcx + 0x50], r14
mov qword [rcx + 0x58], 5
mov qword [rcx + 0x60], rbp
mov qword [rcx + 0x68], 8
mov qword [rcx + 0x70], rbx
mov qword [rsp + 0x48], rcx
mov qword [rcx + 0x78], 6
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x18]
cmp rax, 1
jne 0x1400372b4
nop word cs:[rax + rax]
mov eax, dword [0x141dc59b0]
or eax, dword [0x141dc59b4]
cmp eax, 0xf52b75ac
je 0x140037250
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r9, qword [rax + 0x20]
mov rax, qword [r9]
mov ecx, dword [0x141dc59b8]
sub ecx, dword [0x141dc59bc]
or ecx, 0x20702201
and ecx, 0x22f0fa4b
imul rcx, rcx, 0x234c794f
shr rcx, 0x39
cmp ecx, 0xe904a85b
jbe 0x1400373a2
jmp 0x1400373cf
test rax, rax
jne 0x140037349
call fcn.1400f6880
jmp 0x140037250
mov eax, dword [0x141dc59f8]
sub eax, dword [0x141dc59fc]
imul eax, eax, 0x422fda76
add eax, 0x87925540
and eax, 0x7a7cb664
cmp eax, 0xb41fa58a
jbe 0x1400372f0
ud2
mov eax, dword [0x141dc5a00]
xor edx, edx
div dword [0x141dc5a04]
xor eax, 0xaf812505
and eax, 0xbfd72f05
ud2
cmp eax, 2
jne 0x140037380
mov eax, dword [0x141dc59d0]
xor eax, dword [0x141dc59d4]
imul rax, rax, 0x139dd8b
shr rax, 0x35
imul eax, eax, 0xfb754469
or eax, 0x5bfbd1d7
cmp eax, 0x552b7208
jae 0x14003753c
jmp 0x140037562
mov eax, dword [0x141dc59a8]
and eax, dword [0x141dc59ac]
or eax, 0x9d160b1c
and eax, 0x9f162f1c
cmp eax, 0x150e5029
jb 0x140037380
jmp 0x1400368c3
mov edx, dword [0x141dc59c0]
or edx, dword [0x141dc59c4]
add edx, 0xa23f4c6e
xor edx, 0x7e901021
or edx, 0x812f6f88
lea rcx, [rax + 1]
mov qword [r9], rcx
cmp edx, 0xa8319771
jae 0x1400373e0
lea rcx, [rax + 1]
mov qword [r9], rcx
jmp 0x1400373a2
mov eax, dword [0x141dc59c8]
imul eax, dword [0x141dc59cc]
imul rax, rax, 0x7e2d9635
shr rax, 0x3a
imul eax, eax, 0x1be524f
imul rax, rax, 0x12ad0343
shr rax, 0x3a
cmp eax, 0x21f74c1e
ja 0x1400373e0
test rcx, rcx
je 0x1400368c3
lea rsi, [r9 + 0x10]
nop dword [rax]
mov eax, dword [0x141dc59e8]
sub eax, dword [0x141dc59ec]
add eax, 0xbce78e08
xor eax, 0x876f6625
imul eax, eax, 0x972101cd
cmp eax, 0xb17ee1d2
ja 0x140037420
mov rax, qword [r9 + 0x110]
nop word [rax + rax]
mov ecx, dword [0x141dc59f0]
and ecx, dword [0x141dc59f4]
xor ecx, 0xa4015000
or ecx, 0x4a8a2cc9
imul ecx, ecx, 0xcd83541f
cmp ecx, 0x93cbc255
ja 0x140037450
cmp rax, 0x3f
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0x20], r9
jbe 0x1400375fb
lea rdi, [r9 + 0x120]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5a10]
sub eax, dword [0x141dc5a14]
or eax, 0xf5e612e6
xor eax, 0x21b00aaf
imul rax, rax, 0x4c5c0a7d
shr rax, 0x3a
cmp eax, 0x66b285e1
ja 0x1400374a0
mov rax, qword [r9 + 0x158]
test rax, rax
jle 0x140037509
cmp qword [r9 + 0x160], 0
js 0x140037509
add rax, 0xffffffffffffff00
mov qword [r9 + 0x158], rax
mov rcx, rdi
mov rdx, rsi
call fcn.140072a00
xor eax, eax
mov cl, 1
nop word [rax + rax]
test cl, cl
je 0x140037500
jmp 0x1400375f6
mov eax, dword [0x141dc5a18]
or eax, dword [0x141dc5a1c]
mov ecx, 0x9e5868a1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xe4fcbd78
imul rax, rcx, 0x63c05175
shr rax, 0x3a
cmp eax, 0xdbda8244
jne 0x140037590
jmp 0x1400375bb
mov eax, dword [0x141dc59d8]
imul eax, dword [0x141dc59dc]
imul eax, eax, 0x373005c
add eax, 0x4cd6e144
and eax, 0x1bd3adb0
ud2
ud2
mov ebx, dword [0x141dc5a20]
xor ebx, dword [0x141dc5a24]
add ebx, 0x36c715be
or ebx, 0x3efda392
mov rcx, rdi
mov rdx, rsi
call fcn.140010c60
cmp ebx, 0x696e11d8
jne 0x1400375c8
mov rcx, rdi
mov rdx, rsi
call fcn.140010c60
jmp 0x140037590
xor eax, eax
nop word [rax + rax]
mov ecx, dword [0x141dc5a28]
sub ecx, dword [0x141dc5a2c]
or ecx, 0x480a4626
and ecx, 0x6b2aee2e
xor ecx, 0x12deff98
cmp ecx, 0x287c0442
jb 0x1400375d0
mov r9, qword [rsp + 0x20]
mov ecx, dword [0x141dc5a30]
sub ecx, dword [0x141dc5a34]
add ecx, 0x9cb2ac09
imul rcx, rcx, 0x23e98f3d
shr rcx, 0x3c
cmp ecx, 0x5ad0fe2e
jne 0x14003762b
lea rcx, [rax + 1]
mov qword [r9 + 0x110], rcx
lea rcx, [rax + 1]
xor edx, edx
nop word cs:[rax + rax]
mov r8d, dword [r9 + rax*4 + 0x10]
mov qword [r9 + 0x110], rcx
test dl, dl
jne 0x140037640
test r8d, r8d
mov qword [rsp + 0x110], r15
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x100], r14
mov qword [rsp + 0xf8], rbp
js 0x1400377f9
lea rax, [0x141db351a]
mov qword [rsp + 0x158], rax
lea rcx, [rsp + 0x158]
mov rdi, qword [rsp + 0x158]
movabs rax, 0x6f3ee2dcef0f86a1
mov qword [rsp + 0x158], rax
mov r15, qword [rsp + 0x158]
mov eax, dword [0x141dc5a38]
or eax, dword [0x141dc5a3c]
add eax, 0xe7cc0ba9
xor eax, 0x6893b3cd
imul eax, eax, 0xc5c2aa4b
cmp eax, 0xc1287522
jbe 0x1400376f0
mov rcx, rdi
mov rdx, r15
call fcn.140018b30
mov rax, qword [rax]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5a40]
add eax, dword [0x141dc5a44]
imul eax, eax, 0x6053bfbb
shr eax, 4
imul rax, rax, 0x10ac9cd7
shr rax, 0x37
imul ebp, eax, 0x83202aa
mov rcx, rdi
mov rdx, r15
call fcn.140018b30
mov rbx, qword [rax]
cmp ebp, 0x87e63354
je 0x1400376f0
mov rsi, rax
xor eax, eax
test al, al
je 0x140037750
mov rax, qword [rsi + 8]
movzx eax, byte [0x141ddc4f8]
mov edx, 0x10
xor ecx, ecx
call fcn.1400c0a10
nop dword [rax]
mov eax, dword [0x141dc5a48]
and eax, dword [0x141dc5a4c]
xor eax, 0xd13adc60
imul r14, rax, 0x2c822301
shr r14, 0x3c
or r14d, 0xa18e1074
mov rdi, qword [rsi + 8]
movzx eax, byte [0x141ddc4f8]
mov edx, 0x10
xor ecx, ecx
call fcn.1400c0a10
cmp r14d, 0x2276f535
jb 0x140037750
mov r13, rax
test rax, rax
je 0x140037a7d
movabs rax, 0x9006c4fc3afb2445
xor rdi, rax
movabs rax, 0x7737125b44d69ebb
xor rbx, rax
mov qword [r13], rbx
mov eax, dword [0x141dc5a58]
or eax, dword [0x141dc5a5c]
mov ecx, 0x9cb822d3
imul rcx, rax
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
add eax, 0x61f38cab
or eax, 0xf521d26f
cmp eax, 0x5daf698a
jne 0x140037b28
jmp 0x140037b4a
mov eax, dword [0x141dc5a68]
add eax, dword [0x141dc5a6c]
imul ecx, eax, 0x6ea59e46
add ecx, 0xa341f4b8
lea rax, [0x141db4a30]
cmp ecx, 0xea5ee3e3
lea r8, [rsp + 0x158]
jbe 0x140037830
mov qword [rsp + 0x158], rax
mov ecx, 0xcc9998d5
nop word cs:[rax + rax]
mov edx, dword [0x141dc5a70]
and edx, dword [0x141dc5a74]
xor edx, 0x3e0041c
imul edx, edx, 0xc0f2a231
imul rdx, rcx
shr rdx, 0x3f
mov qword [rsp + 0x158], rax
cmp edx, 0x2917dd4
je 0x140037840
mov rcx, qword [rsp + 0x158]
movabs rax, 0xd1327b58c150b39f
mov qword [rsp + 0x158], rax
mov rdx, qword [rsp + 0x158]
call fcn.140017bf0
mov rsi, rax
mov r15, qword [rax]
mov r12d, dword [rax + 8]
xor eax, eax
test al, al
je 0x1400378c2
movzx eax, byte [rsi + 0xe]
movzx eax, word [rsi + 0xc]
movzx eax, byte [0x141ddc4f8]
mov edx, 0xf
xor ecx, ecx
call fcn.1400c0a10
mov ebx, 0x810bb2e7
nop word [rax + rax]
mov eax, dword [0x141dc5a78]
xor edx, edx
div dword [0x141dc5a7c]
mov edi, eax
xor edi, 0x4244c02
or edi, 0xd39922f5
imul rdi, rbx
shr rdi, 0x3f
movzx ebp, word [rsi + 0xc]
movzx r14d, byte [rsi + 0xe]
movzx eax, byte [0x141ddc4f8]
mov edx, 0xf
xor ecx, ecx
call fcn.1400c0a10
cmp edi, 0xe18afa9e
ja 0x1400378d0
mov r13, rax
test rax, rax
je 0x140037aa4
shl r14d, 0x10
or ebp, r14d
movabs r8, 0x63e77ed644b5c26a
mov eax, dword [0x141dc5a98]
imul eax, dword [0x141dc5a9c]
and eax, 0x6d1ee416
add eax, 0xda358167
mov ecx, 0x8a05b17f
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x40eafb93
mov rbx, qword [rsp + 0x20]
jbe 0x14003797c
mov eax, r12d
xor eax, 0xb82e1c8
mov rcx, r15
xor rcx, r8
mov qword [r13], rcx
mov dword [r13 + 8], eax
mov eax, ebp
shr eax, 0x10
mov ecx, ebp
shr ecx, 8
xor r12d, 0xb82e1c8
xor r15, r8
mov r14, qword [rsp + 0x30]
nop word cs:[rax + rax]
mov r8d, dword [0x141dc5aa0]
imul r8d, dword [0x141dc5aa4]
xor r8d, 0x10002408
and r8d, 0x71fd64ec
imul r8d, r8d, 0xf16a1f1
mov qword [r13], r15
mov dword [r13 + 8], r12d
cmp r8d, 0x19764b77
jb 0x1400379a0
xor al, 0xc2
xor cl, 0x88
mov r8d, dword [0x141dc5aa8]
add r8d, dword [0x141dc5aac]
xor bpl, 0xb5
imul r8d, r8d, 0x531c555a
add r8d, 0x9c0698a2
cmp r8d, 0xadb6b647
jbe 0x140037a10
mov byte [r13 + 0xc], bpl
mov byte [r13 + 0xd], cl
mov byte [r13 + 0xe], al
nop
mov r8d, dword [0x141dc5ab0]
or r8d, dword [0x141dc5ab4]
and r8d, 0x5d5918b4
imul r8, r8, 0x6c33b5a9
shr r8, 0x3d
or r8d, 0x50ed9c0
mov byte [r13 + 0xc], bpl
mov byte [r13 + 0xd], cl
mov byte [r13 + 0xe], al
cmp r8d, 0xbba65b06
ja 0x140037a10
nop dword [rax]
mov eax, dword [0x141dc5ab8]
xor eax, dword [0x141dc5abc]
add eax, 0x70956539
or eax, 0xf9ff5032
imul eax, eax, 0x9ddb624d
cmp eax, 0xaf0c299f
ja 0x140037a50
mov esi, 0xf
jmp 0x140037b5f
ud2
mov eax, dword [0x141dc5a80]
sub eax, dword [0x141dc5a84]
and eax, 0xacb0349c
imul eax, eax, 0xbfd166b5
cmp eax, 0xcdb2468d
jne 0x140037ad0
ud2
mov eax, dword [0x141dc5a88]
or eax, dword [0x141dc5a8c]
imul rax, rax, 0xd410727
shr rax, 0x3b
or eax, 0x828000
ud2
mov eax, dword [0x141dc5a60]
add eax, dword [0x141dc5a64]
and eax, 0x81219422
imul eax, eax, 0xa959265d
mov qword [r13 + 8], rdi
cmp eax, 0xcbfe18ef
jbe 0x140037b50
mov qword [r13 + 8], rdi
jmp 0x140037b28
mov esi, 0x10
mov rbx, qword [rsp + 0x20]
mov r14, qword [rsp + 0x30]
lea rcx, [rsp + 0x128]
mov rdx, rbx
mov rdi, qword [rsp + 0x48]
mov r8, rdi
call fcn.140034410
lea rcx, [rsp + 0x140]
mov rdx, rbx
mov r8, rdi
call fcn.140034410
mov rdi, qword [rsp + 0x130]
mov r12, qword [rsp + 0x138]
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0a10
test rax, rax
je 0x1400368c3
mov rbp, rax
mov rcx, rax
mov rdx, r13
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x141dc5ac0]
and eax, dword [0x141dc5ac4]
xor eax, 0x8d7660b9
add eax, 0x4d1aa007
cmp eax, 0x2d928126
ja 0x140037c35
mov ebx, dword [0x141dc5ac8]
and ebx, dword [0x141dc5acc]
and ebx, 0x8800
or ebx, 0xbff773fe
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rbp
mov qword [rsp + 0x168], rsi
mov byte [rsp + 0x170], 0
lea rcx, [rsp + 0x158]
mov rdx, rdi
mov r8, r12
call fcn.140095e60
cmp ebx, 0x4da4cad6
jne 0x140037c6d
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rbp
mov qword [rsp + 0x168], rsi
mov byte [rsp + 0x170], 0
lea rcx, [rsp + 0x158]
mov rdx, rdi
mov r8, r12
call fcn.140095e60
jmp 0x140037be2
mov r15, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x128]
nop dword [rax]
mov eax, dword [0x141dc5ad0]
xor edx, edx
div dword [0x141dc5ad4]
imul eax, eax, 0xfd950832
add eax, 0xbcd6fdfa
and eax, 0xae05d2be
cmp eax, 0x42e7ea47
je 0x140037c90
test rcx, rcx
je 0x140037d56
mov eax, dword [0x141dc5ad8]
and eax, dword [0x141dc5adc]
imul eax, eax, 0x39abc772
xor eax, 0x71a74c1
add eax, 0x496ac1e7
cmp eax, 0x15192f81
jae 0x140037cf0
mov rax, qword [0x141ddc4e0]
nop dword [rax + rax]
mov eax, dword [0x141dc5ae0]
xor edx, edx
div dword [0x141dc5ae4]
and eax, 0x5c69077
add eax, 0xe03a4984
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x17face83
jb 0x140037cf0
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5ae8]
xor edx, edx
div dword [0x141dc5aec]
imul eax, eax, 0x11960ecb
or eax, 0xedfa1ec1
imul eax, eax, 0xb58670fa
cmp eax, 0x89b885a8
je 0x140037d30
mov eax, dword [0x141dc5af0]
imul eax, dword [0x141dc5af4]
imul eax, eax, 0x6d1249d4
add eax, 0x64ad4a4
shr eax, 1
mov ecx, 0x98aafa8f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x3e70fedd
je 0x140037db2
mov eax, dword [0x141dc5af8]
xor edx, edx
div dword [0x141dc5afc]
imul edi, eax, 0x86317bc4
xor edi, 0xf9ed13cd
mov rcx, rbx
mov rdx, rsi
call fcn.140099810
cmp edi, 0xca626729
jae 0x140037dbf
mov rcx, rbx
mov rdx, rsi
call fcn.140099810
jmp 0x140037d85
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x140037dd0
test rax, rax
jne 0x1400368c3
nop dword [rax]
mov eax, dword [0x141dc5b00]
add eax, dword [0x141dc5b04]
imul rcx, rax, 0x211b793
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
or eax, 0xbf249a33
xor eax, 0x5d85ef4f
cmp eax, 0x2621b293
jb 0x140037de0
mov ecx, 0x9d2f7ad1
nop word cs:[rax + rax]
mov eax, dword [0x141dc5b08]
xor edx, edx
div dword [0x141dc5b0c]
add eax, 0xc983b79a
xor eax, 0x37226185
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x20ef1809
je 0x140037e20
test rsi, rsi
js 0x140037fc6
mov qword [rsp + 0x30], rbx
mov rdi, qword [rsp + 0x148]
mov r12, qword [rsp + 0x150]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5b10]
and eax, dword [0x141dc5b14]
add eax, 0x526d76a4
xor eax, 0xfbacb5
imul eax, eax, 0xf01fcc4f
cmp eax, 0xbcdec9e9
je 0x140037e70
mov qword [rsp + 0xe8], r15
test rsi, rsi
je 0x140037f18
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0a10
mov r15, rax
mov ecx, 0xb6f4e28b
nop dword [rax]
mov eax, dword [0x141dc5b18]
xor edx, edx
div dword [0x141dc5b1c]
xor eax, 0x21a48801
or eax, 0x4c03756e
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xee701a31
je 0x140037ec0
test r15, r15
jne 0x140037f1e
mov eax, dword [0x141dc5b20]
xor eax, dword [0x141dc5b24]
or eax, 0x50359c10
imul eax, eax, 0xe99eb14e
add eax, 0x854588d8
cmp eax, 0xca2f893d
jbe 0x1400386f2
jmp 0x1400386fe
mov r15d, 1
mov rcx, r15
mov rdx, qword [rsp + 0x30]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rsi
mov byte [rsp + 0x170], 0
lea rcx, [rsp + 0x158]
mov rdx, rdi
mov r8, r12
call fcn.140095e60
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xe0], rax
mov r12, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
cmp qword [rsp + 0x140], 0
je 0x1400380a0
mov eax, dword [0x141dc5b28]
xor edx, edx
div dword [0x141dc5b2c]
imul eax, eax, 0x8375e872
imul rcx, rax, 0x1566902f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0xf7422001
cmp eax, 0x537bf11d
jae 0x140037fd9
jmp 0x140037ff9
ud2
mov eax, dword [0x141dc5b30]
imul eax, dword [0x141dc5b34]
add eax, 0xf189c92d
mov r15, qword [0x141ddc4e0]
cmp eax, 0x4b14da79
jae 0x140038002
mov rax, qword [0x141ddc4e0]
jmp 0x140037fd9
mov eax, dword [0x141dc5b38]
sub eax, dword [0x141dc5b3c]
xor eax, 0x747ffdb1
imul rax, rax, 0x2f9fd075
shr rax, 0x3d
or eax, 0x744b0832
cmp eax, 0x98a2cc53
jbe 0x140038038
mov rcx, r15
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov ebp, dword [0x141dc5b40]
and ebp, dword [0x141dc5b44]
and ebp, 0x148c2032
xor ebp, 0x10182021
or ebp, 0xeb63dfc4
mov rcx, r15
xor edx, edx
mov r8, rdi
call rbx
cmp ebp, 0x8137008b
jb 0x140038040
mov eax, dword [0x141dc5b48]
xor eax, dword [0x141dc5b4c]
add eax, 0xc8240f84
and eax, 0x70cf9c70
add eax, 0xfd7a8af4
cmp eax, 0xa3cb0ba3
ja 0x140038070
nop word cs:[rax + rax]
mov eax, dword [0x141dc5b50]
xor edx, edx
div dword [0x141dc5b54]
add eax, 0x41f1e2e6
imul rax, rax, 0x5f52461b
shr rax, 0x3e
imul eax, eax, 0x471a7ac5
cmp eax, 0xd745280a
je 0x1400380a0
mov rcx, r12
mov rdx, rsi
call fcn.140099810
test rax, rax
jne 0x140038609
test rsi, rsi
js 0x1400368c3
nop dword [rax + rax]
mov eax, dword [0x141dc5b58]
and eax, dword [0x141dc5b5c]
xor eax, 0x5c9fe261
imul rax, rax, 0x23fc76d1
shr rax, 0x3c
cmp eax, 0x29d39ba1
je 0x1400380f0
test rsi, rsi
je 0x140038204
mov eax, dword [0x141dc5b60]
and eax, dword [0x141dc5b64]
mov ecx, 0xd97814b5
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xcedbc787
jne 0x140038150
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0a10
nop
mov eax, dword [str.Vkv]
and eax, dword [0x141dc5b6c]
imul rbx, rax, 0x4d3e48f3
shr rbx, 0x3b
xor ebx, 0x5044998
or ebx, 0xf2baa467
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0a10
cmp ebx, 0x9d837036
jb 0x140038150
mov rdi, rax
nop
mov eax, dword [0x141dc5b70]
or eax, dword [0x141dc5b74]
imul eax, eax, 0x86331224
xor eax, 0x8b3137ec
imul eax, eax, 0x299f653b
cmp eax, 0x64a6a061
jb 0x140038190
test rdi, rdi
jne 0x140038209
mov eax, dword [0x141dc5b78]
mov ecx, dword [0x141dc5b7c]
add eax, ecx
add eax, 0xb34233a5
xor eax, 0x10440042
or eax, 0xa79b73a9
cmp eax, 0xf3508d7d
jae 0x1400381e0
ud2
mov eax, dword [0x141dc5b80]
and eax, dword [0x141dc5b84]
and eax, 0x60a803
xor eax, 0x80020f7
ud2
mov edi, 1
mov rcx, rdi
mov qword [rsp + 0xc8], r12
mov rdx, r12
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x168], rsi
mov byte [rsp + 0x170], 0
lea rcx, [rsp + 0x158]
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x28]
call fcn.140095e60
mov rsi, qword [rsp + 0x158]
mov rbp, qword [rsp + 0x160]
mov rbx, qword [rsp + 0x168]
mov dword [rsp + 0x158], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 7
mov qword [rsp + 0x174], 0
mov word [rsp + 0x17c], 0
mov byte [rsp + 0x179], 1
mov byte [rsp + 0x17c], 1
mov byte [rsp + 0x17b], 1
lea rdi, [rsp + 0x158]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.140093790
test rax, rax
jne 0x1400385f8
mov r12, rdx
mov eax, dword [0x141dc5b90]
and eax, dword [0x141dc5b94]
and eax, 0x2f991ac2
add eax, 0xd396049c
cmp eax, 0xbeb73992
jae 0x140038301
mov qword [rsp + 0x40], r12
mov eax, 0x94091147
nop word cs:[rax + rax]
mov ecx, dword [0x141dc5b98]
imul ecx, dword [0x141dc5b9c]
imul ecx, ecx, 0x9c4a218
add ecx, 0x7930bf00
imul rcx, rax
shr rcx, 0x3f
mov qword [rsp + 0x40], r12
cmp ecx, 0xc08160a9
ja 0x140038310
mov rcx, qword [r14]
movabs rdx, 0x8000000000000000
nop dword [rax + rax]
mov eax, dword [0x141dc5ba0]
add eax, dword [0x141dc5ba4]
and eax, 0x20c44000
cmp eax, 0x27d8802d
ja 0x140038350
cmp rcx, rdx
je 0x140038649
mov qword [rsp + 0xd0], rcx
nop dword [rax]
mov eax, dword [0x141dc5ba8]
imul eax, dword [0x141dc5bac]
or eax, 0x280204
and eax, 0x87af7e15
imul eax, eax, 0x6c166624
cmp eax, 0x73cf6078
ja 0x140038380
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0xd8], rsi
xor eax, eax
test al, al
je 0x1400383c9
mov rdx, qword [r14 + 8]
mov r8, qword [r14 + 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002850
mov esi, 0xb297eff9
lea r15, [rsp + 0x40]
nop word cs:[rax + rax]
mov ebx, dword [0x141dc5bb0]
or ebx, dword [0x141dc5bb4]
imul rbx, rsi
shr rbx, 0x3f
mov rdi, qword [r14 + 8]
mov r8, qword [r14 + 0x10]
mov rcx, r15
mov rdx, rdi
call fcn.140002850
cmp ebx, 0x7d314424
je 0x1400383e0
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x140038420
test rax, rax
jne 0x1400368c3
mov eax, dword [0x141dc5c78]
add eax, dword [0x141dc5c7c]
imul rax, rax, 0x3e3e84c3
shr rax, 0x3c
or eax, 0x9d63a221
mov ecx, 0xf74f4161
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x228d39a3
jbe 0x14003846e
lea rcx, [rsp + 0x158]
mov rdx, r12
call fcn.140094360
lea rsi, [rsp + 0x158]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5c80]
add eax, dword [0x141dc5c84]
imul ebx, eax, 0x2ea353ea
add ebx, 0x63c0e9f4
mov rcx, rsi
mov rdx, r12
call fcn.140094360
cmp ebx, 0x5c64920e
jb 0x140038480
mov rax, qword [rsp + 0x158]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc5c88]
add ecx, dword [0x141dc5c8c]
xor ecx, 0xc388f40f
imul rcx, rcx, 0x7c4b45f1
shr rcx, 0x3d
xor ecx, 0x5df6566f
cmp ecx, 0x1badaad4
jb 0x1400384c0
cmp eax, 2
mov rbx, qword [rsp + 0x28]
je 0x1400385d0
nop dword [rax]
mov eax, dword [0x141dc5c98]
xor eax, dword [0x141dc5c9c]
imul eax, eax, 0xe67a3d20
add eax, 0x6810770
cmp eax, 0xe1741f52
ja 0x140038500
mov rsi, qword [rsp + 0x190]
cmp rsi, 0x2a1fffff
mov qword [rsp + 0x38], rbp
ja 0x140038702
mov eax, dword [0x141dc5ca0]
add eax, dword [0x141dc5ca4]
or eax, 0x60281550
add eax, 0x85741b5f
and eax, 0xbee16126
cmp eax, 0xff44d72
jae 0x140038570
mov qword [rsp + 0x158], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dc5ca8]
add eax, dword [0x141dc5cac]
xor eax, 0x28800
or eax, 0x1b1d1693
and eax, 0x9f5fbe97
mov qword [rsp + 0x158], 0
cmp eax, 0xf33255e
jb 0x140038570
mov eax, dword [0x141dc5cb0]
imul eax, dword [0x141dc5cb4]
xor eax, 0x81a5002a
or eax, 0x1c180bd5
cmp eax, 0x6bde0ee3
jne 0x1400395e1
jmp 0x140039620
mov eax, dword [0x141dc5c90]
add eax, dword [0x141dc5c94]
imul eax, eax, 0xe3d2be59
add eax, 0xa09685e2
or eax, 0x78640721
cmp eax, 0x1afd0c3a
je 0x1400385d0
jmp 0x1400368c3
ud2
xor eax, eax
test al, al
je 0x140038620
ud2
mov eax, dword [0x141dc5b88]
xor eax, dword [0x141dc5b8c]
and eax, 0x6481fbbf
xor eax, 0x7bcb8939
add eax, 0x37ce7fac
ud2
lea rax, [0x141db110c]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x158]
movabs rax, 0x52aa7c819077586b
mov qword [rsp + 0x158], rax
mov rdx, qword [rsp + 0x158]
call fcn.140019990
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [0x141dc5bb8]
mov edx, dword [0x141dc5bbc]
add ecx, edx
add ecx, 0x37e3a84d
and ecx, 0x71010c4b
cmp ecx, 0x4c08ad1e
jne 0x1400386c0
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx ecx, word [rax + 0x24]
ud2
mov ecx, dword [0x141dc5bc0]
add ecx, dword [0x141dc5bc4]
or ecx, 0x4000
and ecx, 0x90605000
mov rdx, qword [rax + 0x18]
mov edx, dword [rax + 0x20]
movzx edx, word [rax + 0x24]
ud2
ud2
ud2
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
js 0x1400388ff
nop word cs:[rax + rax]
mov eax, dword [0x141dc5bd8]
or eax, dword [0x141dc5bdc]
xor eax, 0x1184972
and eax, 0x855a59f3
imul rax, rax, 0x67179673
shr rax, 0x3c
cmp eax, 0x47b732f
ja 0x140038720
nop dword [rax + rax]
mov eax, dword [0x141dc5be0]
xor eax, dword [0x141dc5be4]
imul eax, eax, 0x804f38a2
add eax, 0xd52bcb5
or eax, 0x21363b5d
cmp eax, 0xb16de2d8
ja 0x140038750
test rbx, rbx
je 0x1400388a3
movzx eax, byte [0x141ddc4f8]
mov eax, dword [0x141dc5c08]
sub eax, dword [0x141dc5c0c]
or eax, 0x8c62002
and eax, 0x9cf6816
imul eax, eax, 0xe1f5c221
cmp eax, 0x1584f3b6
jae 0x1400387b0
xor ecx, ecx
mov rdx, rbx
call fcn.1400c0a10
mov esi, dword [0x141dc5c10]
add esi, dword [0x141dc5c14]
and esi, 0x719ce631
add esi, 0x86c13aa5
or esi, 0x397a5b42
xor ecx, ecx
mov rdx, rbx
call fcn.1400c0a10
cmp esi, 0x9f25ada9
je 0x1400387b0
mov r12, rax
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400387f0
test r12, r12
je 0x1400388cb
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
mov rdx, rbx
call fcn.1400c0a10
mov r15, rax
test rax, rax
jne 0x140038a00
mov eax, dword [0x141dc5c20]
xor eax, dword [0x141dc5c24]
add eax, 0xb00c4c97
imul rax, rax, 0x3af92a83
shr rax, 0x3b
and eax, 0xfffffffc
cmp eax, 0x6bccde7e
jbe 0x140038850
ud2
mov eax, dword [0x141dc5c28]
xor edx, edx
div dword [0x141dc5c2c]
add eax, 0xe28cb2d
and eax, 0x3e1755dd
add eax, 0x5d1593f5
ud2
mov eax, dword [0x141dc5be8]
xor edx, edx
div dword [0x141dc5bec]
or eax, 0x17f8edaf
add eax, 0x1d87d568
cmp eax, 0xd9de1fea
jbe 0x14003895c
jmp 0x14003898c
ud2
mov eax, dword [0x141dc5bc8]
add eax, dword [0x141dc5bcc]
imul eax, eax, 0x6dc0c24c
add eax, 0x66e5ff87
imul rax, rax, 0x8dee61d
shr rax, 0x3a
cmp eax, 0x96b4f229
jbe 0x14003892a
ud2
mov eax, 0x965eb579
nop
mov ecx, dword [0x141dc5bd0]
sub ecx, dword [0x141dc5bd4]
xor ecx, 0x1e298e70
imul rcx, rax
shr rcx, 0x38
and ecx, 0x4d
ud2
mov esi, dword [0x141dc5bf0]
and esi, dword [0x141dc5bf4]
xor esi, 0x8200
and esi, 0x9038240
mov ecx, 1
mov rdx, rbp
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
cmp esi, 0xbef1befa
jbe 0x1400389a0
mov ecx, 1
mov rdx, rbp
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14003895c
mov eax, dword [0x141dc5bf8]
xor edx, edx
div dword [str.W_azb]
xor eax, 0x5d0842e7
imul eax, eax, 0x7fd06555
and eax, 0xbf30c67d
cmp eax, 0x30117437
je 0x1400389a0
nop word cs:[rax + rax]
mov eax, dword [0x141dc5c00]
xor edx, edx
div dword [0x141dc5c04]
add eax, 0x6b8c2e0c
and eax, 0xa47f0af5
xor eax, 0xaafdd38c
cmp eax, 0x5433e2e4
jb 0x1400389d0
mov r12d, 1
mov r15d, 1
mov rcx, r15
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rbx
mov byte [rsp + 0x170], 0
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], 8
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x1e0], 0
mov qword [rsp + 0x1f0], 0
mov word [rsp + 0x1f8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x21c], 0
mov word [rsp + 0x218], 0
mov word [rsp + 0x220], 0
mov dword [rsp + 0x1b0], 6
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x210], 0
test rbx, rbx
je 0x140038b3f
nop word cs:[rax + rax]
mov eax, dword [0x141dc5c38]
add eax, dword [0x141dc5c3c]
and eax, 0x4205000
cmp eax, 0x95351b25
ja 0x140038af0
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dc5c40]
xor edx, edx
div dword [0x141dc5c44]
or eax, 0xffeefe7f
add eax, 0x4d4573f9
cmp eax, 0xbb1ea2c4
ja 0x140038b20
mov eax, dword [0x141dc5c48]
and eax, dword [0x141dc5c4c]
mov ecx, 0xa1a2c9e3
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x64daf06e
cmp ecx, 0xb795e743
je 0x140038bbf
mov esi, dword [0x141dc5c50]
and esi, dword [0x141dc5c54]
and esi, 0xd419102b
xor esi, 0x732d1262
add esi, 0xbb3bcf73
mov dword [rsp + 0x21c], 0x8000000
mov dword [rsp + 0x118], 0
lea rbp, [rsp + 0x68]
lea rdx, [rsp + 0x158]
lea r8, [rsp + 0x118]
mov rcx, rbp
call fcn.1400a2ec0
cmp esi, 0xb9cf7a78
jbe 0x140038bf4
mov dword [rsp + 0x21c], 0x8000000
mov dword [rsp + 0x118], 0
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0x158]
lea r8, [rsp + 0x118]
call fcn.1400a2ec0
jmp 0x140038b66
mov r14, qword [rsp + 0x78]
nop dword [rax]
mov eax, dword [0x141dc5c58]
or eax, dword [0x141dc5c5c]
add eax, 0x33a56d9e
xor eax, 0x3da44718
imul eax, eax, 0x4fe1a420
cmp eax, 0xeff36856
je 0x140038c00
mov r12, qword [rsp + 0x68]
cmp r14d, 2
jne 0x140038c38
mov qword [rsp + 0x28], r12
jmp 0x140038cd4
mov rsi, qword [rsp + 0x70]
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov r8, qword [rsp + 0x88]
mov eax, 0xf0da45d1
nop word [rax + rax]
mov ecx, dword [0x141dc5c60]
sub ecx, dword [0x141dc5c64]
imul rdx, rcx, 0xbb670f
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
imul ecx, ecx, 0xac345fbd
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x9e8d86d5
ja 0x140038c60
mov qword [rsp + 0xb8], r8
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xa8], rax
xor eax, eax
test al, al
jne 0x140038cb0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xc0], rax
movabs rbx, 0x933d6df2dbf99718
mov eax, dword [0x141dc5c68]
xor edx, edx
div dword [0x141dc5c6c]
and eax, 0x37750997
imul eax, eax, 0x7bf0eef4
add eax, 0xd67d9360
cmp eax, 0x511c1b0
jb 0x140038d5e
mov eax, dword [0x141dc5c70]
xor edx, edx
div dword [0x141dc5c74]
mov r15d, eax
add r15d, 0x9d276841
and r15d, 0x621ca3d9
lea rax, [0x141db0581]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], rbx
mov rdx, qword [rsp + 0x68]
call fcn.14001a110
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
cmp r15d, 0x2cb1d249
jbe 0x140038d96
lea rax, [0x141db0581]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], rbx
mov rdx, qword [rsp + 0x68]
call fcn.14001a110
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
jmp 0x140038d03
cmp r14d, 2
je 0x140038dd7
mov eax, dword [0x141dc5d00]
sub eax, dword [0x141dc5d04]
or eax, 0x78ead504
shr eax, 1
mov ecx, 0xaa68e96b
imul rcx, rax
shr rcx, 0x3d
or ecx, 0xd2ee69d1
cmp ecx, 0x96e7b585
mov rbp, qword [rsp + 0xf8]
jae 0x140038e30
jmp 0x140038e66
mov eax, dword [0x141dc5e10]
or eax, dword [0x141dc5e14]
and eax, 0xc020
cmp eax, 0xdc1e44f6
jne 0x140038df1
ud2
mov eax, 0xb8aaf603
nop word cs:[rax + rax]
mov ecx, dword [0x141dc5e18]
imul ecx, dword [0x141dc5e1c]
xor ecx, 0x7b511193
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x8d5922f
ud2
mov eax, dword [0x141dc5d08]
sub eax, dword [0x141dc5d0c]
mov ebx, 0xbca65aad
imul rbx, rax
shr rbx, 0x3b
xor ebx, 0x20c04403
or ebx, 0x5b278b9c
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, 0xa1c90256
jbe 0x140038e71
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140038e30
mov r12, r14
mov eax, dword [0x141dc5d10]
and eax, dword [0x141dc5d14]
xor eax, 0xf9009780
and eax, 0xfb22bfb0
xor eax, 0x284ba5db
cmp eax, 0x6e46c66f
jae 0x140038e9f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0xb9586461
mov r14, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov r15d, dword [0x141dc5d18]
or r15d, dword [0x141dc5d1c]
add r15d, 0xf38050f
imul r15, rbx
shr r15, 0x3f
mov rcx, rsi
call r14
cmp r15d, 0x15cd08de
je 0x140038eb0
test r12, r12
je 0x140038eec
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, qword [rsp + 0x110]
mov rbx, qword [rsp + 0xe8]
nop dword [rax]
mov eax, dword [0x141dc5d20]
xor eax, dword [0x141dc5d24]
xor eax, 0x18062801
and eax, 0x182e6a47
cmp eax, 0x2e6e5c8b
je 0x140038f00
cmp qword [rsp + 0xb8], 0
mov rcx, qword [rsp + 0xa8]
je 0x140038f36
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x141dc5d28]
xor edx, edx
div dword [0x141dc5d2c]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5d30]
and eax, dword [0x141dc5d34]
xor eax, 0xf93f4b
imul eax, eax, 0x8bc7086f
add eax, 0x988043fa
cmp eax, 0xff89f54f
ja 0x140038f50
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xb0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5d38]
and eax, dword [0x141dc5d3c]
add eax, 0x9920f4
or eax, 0x41163a00
cmp eax, 0xf827a22c
je 0x140038f90
test rdx, rdx
je 0x140038fb8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x141dc5d40]
and eax, dword [0x141dc5d44]
mov ecx, 0x80ae8fe1
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0x2b29fa0b
add eax, 0x3c11187b
cmp eax, 0xc93e3076
ja 0x14003901a
mov eax, dword [0x141dc5d48]
xor edx, edx
div dword [0x141dc5d4c]
mov esi, eax
add esi, 0xdcd04191
xor esi, 0xbfe4232a
add esi, 0x3623a841
lea rcx, [rsp + 0x158]
call fcn.14000d600
cmp esi, 0xd5c000bf
jbe 0x140039030
lea rcx, [rsp + 0x158]
call fcn.14000d600
jmp 0x140038fe3
mov eax, dword [0x141dc5d50]
sub eax, dword [0x141dc5d54]
and eax, 0x5d7de8ca
imul eax, eax, 0x883d5f58
or eax, 0x8de0b643
cmp eax, 0xda1911e3
jb 0x140039030
cmp qword [rsp + 0xd0], 0
mov rsi, qword [rsp + 0xd8]
je 0x1400390c4
mov eax, dword [0x141dc5d58]
and eax, dword [0x141dc5d5c]
add eax, 0xc7987004
cmp eax, 0x6cf37449
jae 0x140039090
mov rax, qword [0x141ddc4e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc5d60]
sub eax, dword [0x141dc5d64]
add eax, 0xb34c24cd
or eax, 0xdba5c6ab
add eax, 0xd1574de9
mov rcx, qword [0x141ddc4e0]
cmp eax, 0xb3af3fcf
jb 0x140039090
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rsi, rsi
je 0x140039170
mov eax, dword [0x141dc5d68]
xor edx, edx
div dword [0x141dc5d6c]
mov ecx, 0xa7a34219
imul rcx, rax
shr rcx, 0x3b
imul eax, ecx, 0x4ef83867
imul rax, rax, 0x4fe5437b
shr rax, 0x3e
cmp eax, 0x93922c68
jne 0x140039110
mov rax, qword [0x141ddc4e0]
nop word [rax + rax]
mov eax, dword [0x141dc5d70]
sub eax, dword [0x141dc5d74]
imul eax, eax, 0x67e5b65c
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x5cb90be9
je 0x140039110
mov eax, dword [0x141dc5d80]
xor eax, dword [0x141dc5d84]
add eax, 0x50c472a2
cmp eax, 0x8a60bf3c
jb 0x140039170
cmp qword [rsp + 0xe0], 0
je 0x140039200
mov ebx, dword [0x141dc5cb8]
add ebx, dword [0x141dc5cbc]
or ebx, 0x50d6f609
xor ebx, 0xbd1a110a
add ebx, 0xfaa26ea4
lea r8, [rsp + 0x158]
mov rcx, r12
xor edx, edx
mov r9d, 2
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
cmp ebx, 0x264a526d
jae 0x14003963b
lea r8, [rsp + 0x158]
mov rcx, r12
xor edx, edx
mov r9d, 2
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
jmp 0x1400395e1
test eax, eax
je 0x1400397e3
mov eax, dword [0x141dc5cc0]
or eax, dword [0x141dc5cc4]
add eax, 0x7dcfd081
or eax, 0xa602a828
and eax, 0xbed3a828
cmp eax, 0x73b7c8bd
jae 0x14003967a
lea rcx, [rsp + 0x158]
mov r8d, 0x1000
xor edx, edx
call sub.VCRUNTIME140.dll_memset
lea r15, [rsp + 0x158]
mov ebx, 0x2a200000
sub rbx, rsi
nop word [rax + rax]
mov eax, dword [0x141dc5cc8]
xor edx, edx
div dword [0x141dc5ccc]
mov esi, eax
add esi, 0x55dd59a6
or esi, 0x4aea3e7e
add esi, 0xa4ff5fe2
mov r8d, 0x1000
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
cmp esi, 0x52ff903
ja 0x140039690
nop word [rax + rax]
mov eax, dword [0x141dc5cd0]
and eax, dword [0x141dc5cd4]
and eax, 0x191328b5
imul eax, eax, 0x37ec021c
or eax, 0x776b04b6
cmp eax, 0xf13cb21
je 0x1400396d0
lea rbp, [rsp + 0x40]
lea r15, [rsp + 0x158]
xor r14d, r14d
nop word cs:[rax + rax]
mov eax, dword [0x141dc5cf8]
xor eax, dword [0x141dc5cfc]
add eax, 0x9f387533
and eax, 0x98840842
cmp eax, 0xd7f92784
jbe 0x140039750
cmp rbx, 0x1000
mov r8d, 0x1000
cmovb r8, rbx
mov rcx, rbp
mov rdx, r15
call fcn.140002850
nop dword [rax]
cmp rbx, 0x1000
mov esi, 0x1000
cmovb rsi, rbx
mov rcx, rbp
mov rdx, r15
mov r8, rsi
call fcn.140002850
test r14b, r14b
jne 0x140039750
test rax, rax
jne 0x1400397b3
sub rbx, rsi
jne 0x140039710
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x28]
nop word [rax + rax]
mov eax, dword [0x141dc5cf0]
xor eax, dword [0x141dc5cf4]
imul eax, eax, 0x7ffb4329
add eax, 0x376a40e6
cmp eax, 0x2126f0b7
jbe 0x140039790
jmp 0x140038702
ud2
mov eax, dword [0x141dc5cd8]
and eax, dword [0x141dc5cdc]
or eax, 0x8bbc7cbe
add eax, 0x35f4afd3
cmp eax, 0xebc0b5ea
jbe 0x140039806
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141dc5ce0]
add eax, dword [0x141dc5ce4]
or eax, 0xc23d4193
and eax, 0xce7f459b
imul edi, eax, 0x8ba3a3ef
call rsi
cmp edi, 0x84681d34
jb 0x140039810
nop word cs:[rax + rax]
mov eax, dword [0x141dc5ce8]
or eax, dword [0x141dc5cec]
or eax, 0x7affc7ab
imul eax, eax, 0x97ac51f9
cmp eax, 0xd9042af7
ja 0x140039840
jmp 0x1400368c3