Function at 0x1400d2480
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
mov r13, r9
mov qword [rbp + 0x68], r8
xor eax, eax
test al, al
je 0x1400d24f0
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
nop dword [rax]
mov eax, dword [0x141dda818]
imul eax, dword [0x141dda81c]
add eax, 0x5fd8cf1a
or eax, 0x2a8788c4
imul r8d, eax, 0x523f6394
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r11, rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rax, rsp
cmp r8d, 0x2e526e90
je 0x1400d24f0
mov qword [rbp + 0x38], rsi
mov qword [rbp - 0x68], r11
mov qword [rbp - 0x60], r10
mov qword [rbp - 8], r9
mov qword [rbp - 0x50], rax
mov qword [rbp + 0x40], rdx
mov qword [rbp + 0x80], rcx
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x210
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x2b0
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x470
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x410
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x2d0
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, dword [0x141dda820]
xor edx, edx
div dword [0x141dda824]
imul eax, eax, 0x850197b4
add eax, 0xca3b442b
cmp eax, 0x93996210
jae 0x1400d27a0
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
nop dword [rax]
mov eax, dword [str.3ri]
mov ecx, dword [0x141dda82c]
add eax, ecx
add eax, 0x969dd8d5
or eax, 0x604aeeb0
imul ecx, eax, 0x1f43b8a6
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rax, rsp
cmp ecx, 0xe879132f
jb 0x1400d27a0
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0x40]
cmp byte [rax], 0
mov qword [rbp], r8
je 0x1400d2930
mov qword [rdx], 0
mov qword [rdi], 0
mov qword [rsi], 0
mov qword [rbx], 0
mov dword [r12], 0
mov eax, dword [0x141dda840]
mov ecx, dword [str._1_f_]
add eax, ecx
add eax, 0x79539118
cmp eax, 0x80e2fec6
jbe 0x1400d28a0
mov dword [r12 + 4], 0
mov qword [r14], 0
nop dword [rax]
mov eax, dword [0x141dda848]
imul eax, dword [0x141dda84c]
mov dword [r12 + 4], 0
mov qword [r14], 0
cmp eax, 0x8ac6813a
je 0x1400d28a0
mov rax, qword [rbp + 0x80]
mov rax, qword [rax + 0xf8]
test rax, rax
je 0x1400d3eed
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov r8, rdx
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
test eax, eax
jne 0x1400d3eed
mov qword [rbp + 0x30], r13
mov eax, dword [0x141dda850]
add eax, dword [0x141dda854]
or eax, 0x40000044
and eax, 0x4400e065
cmp eax, 0x8dc2b714
jbe 0x1400d3e8d
jmp 0x1400d3eb2
mov eax, dword [0x141dda830]
xor edx, edx
div dword [0x141dda834]
or eax, 0x24343dbf
imul rax, rax, 0x4325c4a5
shr rax, 0x3c
add eax, 0x1c5d2fe6
cmp eax, 0x22870d2b
ja 0x1400d2930
mov eax, 0xaf5de00f
mov r14, qword [rbp + 0x40]
nop word cs:[rax + rax]
mov ecx, dword [0x141dda838]
or ecx, dword [0x141dda83c]
add ecx, 0x18414a4f
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xf02c2ba3
ja 0x1400d2970
cmp byte [r14 + 1], 0
mov r12, qword [rbp + 0x80]
je 0x1400d2a85
mov rax, qword [r12 + 0xf8]
test rax, rax
je 0x1400d4220
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
mov rdx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
test eax, eax
je 0x1400d29fd
mov eax, dword [str._SsY]
imul eax, dword [0x141dda8ac]
mov ecx, 0x9822e8bf
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x8b4cbba0
jne 0x1400d41ad
jmp 0x1400d41f0
mov eax, dword [0x141dda8b8]
imul eax, dword [0x141dda8bc]
xor eax, 0x5683d84a
shr eax, 1
mov ecx, 0xa80d287b
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xbd3d55f4
cmp ecx, 0x3b37f6c9
jae 0x1400d2a3a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x141dda8c0]
xor edx, edx
div dword [0x141dda8c4]
add eax, 0x4c3d9536
imul rdi, rax, 0x4d6af031
shr rdi, 0x3e
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xd58041c
ja 0x1400d2a50
jmp 0x1400d4220
movzx eax, byte [r14 + 2]
nop word [rax + rax]
mov ecx, dword [0x141dda8a0]
imul ecx, dword [0x141dda8a4]
imul rcx, rcx, 0x607fff
shr rcx, 0x36
cmp ecx, 0x9da34be8
je 0x1400d2a90
test al, al
mov rcx, qword [rbp + 0x100]
je 0x1400d2b15
mov eax, dword [0x141ddb2a0]
and eax, dword [0x141ddb2a4]
mov rdx, qword [rbp + 0x108]
mov qword [r12 + 0xe8], rdx
add eax, 0x364c502b
or eax, 0x39797d61
cmp eax, 0x67292cc7
jne 0x1400d2af0
mov qword [r12 + 0xf0], rcx
nop
mov eax, dword [0x141ddb2a8]
sub eax, dword [0x141ddb2ac]
or eax, 0xe0081442
and eax, 0xe0483742
mov qword [r12 + 0xf0], rcx
cmp eax, 0xbf6137c4
je 0x1400d2af0
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d2b20
movzx ecx, byte [r14 + 3]
nop dword [rax]
mov eax, dword [0x141dda8d0]
sub eax, dword [0x141dda8d4]
imul eax, eax, 0xc18a57a0
add eax, 0xc21a3632
cmp eax, 0xe6033e22
ja 0x1400d2b30
nop
mov eax, dword [0x141dda8d8]
imul eax, dword [0x141dda8dc]
cmp eax, 0xd4f6436a
je 0x1400d2b50
mov r8, qword [r12 + 0xf8]
movabs rbx, 0x8000000000000000
test r8, r8
je 0x1400d31d9
nop
mov eax, dword [str.zm_r3]
or eax, dword [0x141dda8e4]
add eax, 0xf00088d0
or eax, 0x1cb33601
imul eax, eax, 0x2b739b4b
cmp eax, 0xa77f3231
je 0x1400d2b80
mov eax, dword [0x141dda8e8]
xor edx, edx
div dword [0x141dda8ec]
nop word cs:[rax + rax]
mov eax, dword [0x141dda8f0]
xor eax, dword [0x141dda8f4]
xor eax, 0x28002074
or eax, 0xd7efdf08
cmp eax, 0x50656c0d
je 0x1400d2bc0
mov rdi, qword [r8 + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dda8f8]
or eax, dword [0x141dda8fc]
imul eax, eax, 0x426f34cc
or eax, 0xfd5a3aa3
and eax, 0xff5bbeff
cmp eax, 0x171884b4
jb 0x1400d2bf0
test ecx, ecx
je 0x1400d31d9
cmp ecx, 1
je 0x1400d2c62
mov rcx, qword [r12 + 0x80]
mov eax, dword [0x141dda900]
xor edx, edx
div dword [str.Cyz.B]
nop word cs:[rax + rax]
mov eax, dword [0x141dda908]
and eax, dword [0x141dda90c]
imul eax, eax, 0x6f28500a
cmp eax, 0x3b6f3e4c
je 0x1400d2c40
cmp rcx, rbx
jne 0x1400d31d9
mov eax, dword [0x141dda910]
imul eax, dword [0x141dda914]
imul eax, eax, 0xb4e228b1
cmp eax, 0x53362b84
je 0x1400d2c89
mov qword [r15], 0
xor eax, eax
test al, al
je 0x1400d2c92
mov qword [r15], 0
jmp 0x1400d2c7c
mov eax, dword [0x141dda918]
xor eax, dword [0x141dda91c]
add eax, 0x775bc0f7
imul rax, rax, 0x6fec6285
shr rax, 0x3e
cmp eax, 0xb863ab57
je 0x1400d2cf3
mov esi, dword [0x141dda920]
add esi, dword [0x141dda924]
and esi, 0x3da04db7
add esi, 0x36414a55
xor esi, 0x1770a9ae
sub rsp, 0x20
mov rcx, rdi
mov edx, 8
mov r8, r15
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
cmp esi, 0x9e4ff5
jae 0x1400d2d0d
sub rsp, 0x20
mov rcx, rdi
mov edx, 8
mov r8, r15
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
jmp 0x1400d2cb5
test eax, eax
mov rdi, qword [rbp + 0x90]
je 0x1400d3117
mov eax, 0xa5f65b33
nop word cs:[rax + rax]
mov ecx, dword [0x141dda928]
and ecx, dword [0x141dda92c]
imul rcx, rax
shr rcx, 0x3c
add ecx, 0xcb616669
cmp ecx, 0x53c77a9a
jb 0x1400d2d30
mov r15, qword [r15]
nop word cs:[rax + rax]
mov eax, dword [0x141dda930]
and eax, dword [0x141dda934]
imul eax, eax, 0xeccab70c
xor eax, 0xbe0c958f
cmp eax, 0xf968d425
ja 0x1400d2d60
lea rax, [r15 + 1]
cmp rax, 2
jb 0x1400d31b0
mov dword [rdi], 0
mov eax, dword [0x141dda938]
and eax, dword [0x141dda93c]
or eax, 0x81b8f053
imul rax, rax, 0x2dff0989
shr rax, 0x3c
imul eax, eax, 0x33ef39bc
cmp eax, 0x662ce8a9
ja 0x1400d2e01
mov eax, dword [0x141dda940]
xor edx, edx
div dword [0x141dda944]
or eax, 0x66189ebd
xor eax, 0x58397a6
imul esi, eax, 0xa6eb0f4f
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r15
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
cmp esi, 0xee391593
jbe 0x1400d2e23
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r15
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
jmp 0x1400d2dbb
mov ecx, 0xeca44567
nop dword [rax + rax]
mov edx, dword [0x141dda948]
add edx, dword [0x141dda94c]
imul edx, edx, 0x40570a80
xor edx, 0xfb90b6e
imul rdx, rcx
shr rdx, 0x3d
cmp edx, 0xd2c62dcf
je 0x1400d2e30
test eax, eax
jne 0x1400d2ee9
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movzx ecx, ax
or ecx, 0x80070000
nop word [rax + rax]
mov r8d, dword [0x141dda950]
imul r8d, dword [0x141dda954]
xor r8d, 0xa0200e30
and r8d, 0xab255e3b
add r8d, 0x7afd9457
test eax, eax
mov edx, ecx
cmovle edx, eax
cmp r8d, 0xd453c604
ja 0x1400d2e80
nop word cs:[rax + rax]
mov eax, dword [0x141dda958]
or eax, dword [0x141dda95c]
add eax, 0x41ed99f6
and eax, 0x283bc429
cmp eax, 0x3761cdf6
ja 0x1400d2ec0
cmp edx, 0x8007007a
jne 0x1400d309b
mov qword [rbp + 0x88], r15
mov eax, dword [0x141dda970]
or eax, dword [0x141dda974]
mov ecx, 0xaf742f07
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0x179e3594
and eax, 0x3337eb48
cmp eax, 0x1bb36b81
jae 0x1400d2f29
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r15, qword [rbp + 0x90]
nop word [rax + rax]
mov eax, dword [0x141dda978]
mov ecx, dword [0x141dda97c]
lea edi, [rax + rcx]
add edi, 0xd2fa90f7
or edi, 0xc5827c45
add edi, 0x685d9b79
mov ebx, dword [r15]
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x15eae2de
jb 0x1400d2f40
mov r14, rax
inc rax
mov ecx, 0xbed57375
nop word cs:[rax + rax]
mov edx, dword [0x141dda980]
xor edx, dword [0x141dda984]
add edx, 0x6cdb6747
xor edx, 0xa15c193
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xcbd8d737
ja 0x1400d2f90
cmp rax, 1
mov rdi, qword [rbp + 0x90]
mov r15, qword [rbp + 0x88]
ja 0x1400d3070
mov eax, dword [0x141dda988]
xor eax, dword [0x141dda98c]
or eax, 0x46b63b52
mov ecx, 0x959564c1
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x29dc9c21
mov r14, qword [rbp + 0x40]
movabs rbx, 0x8000000000000000
jne 0x1400d3012
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov edi, dword [0x141dda990]
sub edi, dword [0x141dda994]
and edi, 0x31413cc
add edi, 0x75f6ef20
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x1460e4bb
jb 0x1400d3020
nop word [rax + rax]
mov eax, dword [0x141dda998]
or eax, dword [0x141dda99c]
xor eax, 0xb7276bc2
imul eax, eax, 0xf66f689c
cmp eax, 0x9d414d6d
je 0x1400d3050
jmp 0x1400d309b
mov eax, dword [0x141dda9a0]
and eax, dword [0x141dda9a4]
or eax, 0x71e6a622
add eax, 0x8591a4ec
or eax, 0xf840a6b
cmp eax, 0x5741df70
jae 0x1400d4251
jmp 0x1400d4290
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d30a0
mov eax, dword [0x141dda960]
or eax, dword [0x141dda964]
imul eax, eax, 0x98058c6c
add eax, 0x37a8c456
or eax, 0x9497bfe6
cmp eax, 0x72197259
jb 0x1400d30fc
mov eax, dword [0x141dda968]
and eax, dword [0x141dda96c]
and eax, 0x26080600
or eax, 0x58f7f84a
imul esi, eax, 0x72803148
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp esi, 0x207d2a5f
jae 0x1400d310f
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400d30c7
test eax, eax
jne 0x1400d31b0
mov eax, dword [0x141dda9e8]
xor edx, edx
div dword [0x141dda9ec]
imul rax, rax, 0x2f6cc447
shr rax, 0x3c
or eax, 0xb3095af8
cmp eax, 0x874c1885
jne 0x1400d314a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov edi, dword [0x141dda9f0]
or edi, dword [0x141dda9f4]
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xc96374bd
je 0x1400d3160
nop
mov eax, dword [0x141dda9f8]
or eax, dword [0x141dda9fc]
add eax, 0x1dd37b7c
imul rax, rax, 0x59a3cfab
shr rax, 0x3e
or eax, 0xbb2a9a24
cmp eax, 0x10f0b774
jb 0x1400d3180
nop dword [rax + rax]
mov eax, dword [0x141ddaa00]
imul eax, dword [0x141ddaa04]
and eax, 0x1b17c7a1
add eax, 0x4a3e15c9
imul rax, rax, 0x1f2d6487
shr rax, 0x3b
cmp eax, 0xaf414ba
je 0x1400d31b0
movzx r9d, byte [r14 + 4]
movzx r8d, byte [r14 + 5]
movzx r10d, byte [r14 + 6]
movzx r11d, byte [r14 + 7]
nop dword [rax]
mov eax, dword [0x141ddaa30]
xor eax, dword [0x141ddaa34]
imul rax, rax, 0x40f35477
shr rax, 0x3d
imul eax, eax, 0xeda6d6ce
or eax, 0x1f6895c
cmp eax, 0xbd46f8d8
je 0x1400d31f0
test r11d, r11d
mov r15, qword [rbp + 0x20]
je 0x1400d326f
cmp r11d, 1
je 0x1400d3410
cmp r11d, 2
jne 0x1400d3cd0
mov rax, qword [r12 + 0x40]
nop dword [rax + rax]
mov ecx, dword [0x141ddaa40]
or ecx, dword [0x141ddaa44]
imul ecx, ecx, 0x8a745eb8
add ecx, 0x4b6b0450
and ecx, 0x8b8f57e8
cmp ecx, 0x973a629f
ja 0x1400d3240
test rax, rax
je 0x1400d3410
test r10d, r10d
je 0x1400d32e0
cmp r10d, 1
je 0x1400d3410
nop
mov eax, dword [0x141ddaa48]
xor edx, edx
div dword [0x141ddaa4c]
and eax, 0x14d0904
or eax, 0xf4b2f489
imul eax, eax, 0x4a563e37
cmp eax, 0xbdbc3810
je 0x1400d3280
mov rax, qword [r12 + 0x58]
nop word [rax + rax]
mov ecx, dword [0x141ddaa50]
add ecx, dword [0x141ddaa54]
and ecx, 0xe8916822
imul ecx, ecx, 0xad833c05
add ecx, 0xa434bafe
cmp ecx, 0x4006fd33
jb 0x1400d32b0
test rax, rax
je 0x1400d3410
nop
mov eax, dword [0x141ddaa58]
xor edx, edx
div dword [0x141ddaa5c]
imul eax, eax, 0x908e9a16
cmp eax, 0xd32b0117
je 0x1400d32e0
test r9d, r9d
je 0x1400d337f
cmp r9d, 1
je 0x1400d3410
cmp r9d, 2
jne 0x1400d3d25
nop word cs:[rax + rax]
mov eax, dword [0x141ddaa68]
sub eax, dword [0x141ddaa6c]
and eax, 0x57c52e6
xor eax, 0x9e17ea56
imul eax, eax, 0x8ae167b1
cmp eax, 0xb8bc58dc
ja 0x1400d3320
mov rax, qword [r12 + 0x98]
nop dword [rax + rax]
mov ecx, dword [0x141ddaa70]
imul ecx, dword [0x141ddaa74]
add ecx, 0x60c19cec
imul rcx, rcx, 0x538dc8cf
shr rcx, 0x3e
cmp ecx, 0xec49995e
ja 0x1400d3350
cmp rax, rbx
je 0x1400d3410
test r8d, r8d
je 0x1400d6484
cmp r8d, 1
je 0x1400d3410
cmp r8d, 2
jne 0x1400d3dd4
nop dword [rax]
mov eax, dword [0x141ddaa80]
add eax, dword [0x141ddaa84]
imul eax, eax, 0xe25977f5
imul rcx, rax, 0x7022e9b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
or eax, 0x8525eaa4
cmp eax, 0xf1fdd23c
ja 0x1400d33a0
mov rax, qword [r12 + 0xb8]
nop word [rax + rax]
mov ecx, dword [0x141ddaa88]
xor ecx, dword [0x141ddaa8c]
and ecx, 0xc0624860
cmp ecx, 0x5be23353
je 0x1400d33e0
cmp rax, rbx
jne 0x1400d6484
nop word cs:[rax + rax]
mov eax, dword [0x141ddaa90]
xor eax, dword [0x141ddaa94]
xor eax, 0x4da9e8fc
add eax, 0x6bb55026
cmp eax, 0x6e1f72e0
ja 0x1400d3410
mov rax, qword [r12 + 0xf8]
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x1400d3440
test rax, rax
je 0x1400d6484
nop dword [rax]
mov ecx, dword [0x141ddaa98]
add ecx, dword [0x141ddaa9c]
imul ecx, ecx, 0x2f437031
or ecx, 0x412990b0
cmp ecx, 0x38df85c1
je 0x1400d3450
mov dword [rbp + 0x68], r9d
mov dword [rbp + 0x90], r8d
nop dword [rax + rax]
mov ecx, dword [0x141ddaaa0]
add ecx, dword [0x141ddaaa4]
imul ecx, ecx, 0x868875d1
or ecx, 0xe06d06b1
add ecx, 0x6aeead87
cmp ecx, 0xa840d5f8
ja 0x1400d3480
mov dword [rbp + 0x1c], r11d
mov dword [rbp + 0x58], r10d
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x88], rax
mov eax, dword [0x141ddaaa8]
add eax, dword [0x141ddaaac]
xor eax, 0x2b3a9f75
imul eax, eax, 0x6ea544d3
mov ecx, 0xa2455ecf
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x44d6cd3
jbe 0x1400d3511
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0x88]
mov edx, 0x1a
mov r8, qword [rbp + 0x78]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov esi, 0xabaa034f
mov r14, qword [rbp + 0x88]
nop dword [rax]
mov edi, dword [0x141ddaab0]
or edi, dword [0x141ddaab4]
add edi, 0x8c099d9e
imul rdi, rsi
shr rdi, 0x3d
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r14
mov edx, 0x1a
mov r8, qword [rbp + 0x78]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
mov rcx, qword [rbp + 0x78]
add rsp, 0x30
cmp edi, 0xc74da205
je 0x1400d3520
test eax, eax
js 0x1400d646c
mov qword [rbp + 0x30], r13
mov r14, qword [rcx]
mov eax, dword [0x141ddaab8]
xor edx, edx
div dword [0x141ddaabc]
nop dword [rax + rax]
mov eax, dword [0x141ddaac0]
sub eax, dword [0x141ddaac4]
imul rax, rax, 0x3b0e221f
shr rax, 0x3c
xor eax, 0x43d23bdb
add eax, 0xec75bce8
cmp eax, 0x518e8a5a
ja 0x1400d3590
test r14, r14
mov rbx, qword [rbp + 0x70]
je 0x1400d3cf7
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, qword [rbp + 0x88]
mov rdx, r14
mov rsi, qword [rbp - 0x30]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov ecx, eax
mov eax, dword [0x141ddae28]
xor edx, edx
div dword [0x141ddae2c]
mov eax, 0x9282feab
nop dword [rax + rax]
mov edx, dword [0x141ddae30]
and edx, dword [0x141ddae34]
imul rdx, rax
shr rdx, 0x3f
imul edx, edx, 0x2a8b5ae6
and edx, 0x2703ba42
cmp edx, 0xbc326e30
ja 0x1400d3610
test ecx, ecx
mov r13, qword [rbp + 0x30]
mov r15, qword [rbp + 0x20]
je 0x1400d3d47
mov edx, dword [rsi + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
movabs rbx, 0x8000000000000000
nop dword [rax]
mov ecx, dword [0x141ddae48]
or ecx, dword [0x141ddae4c]
imul ecx, ecx, 0xc3ec89c0
add ecx, 0xa17b9840
imul rdx, rcx, 0x55f80c9f
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1d
cmp ecx, 0x31e69cb
je 0x1400d3680
test eax, eax
mov r8d, dword [rbp + 0x90]
mov r9d, dword [rbp + 0x68]
mov r10d, dword [rbp + 0x58]
mov r11d, dword [rbp + 0x1c]
je 0x1400d3d61
mov rcx, qword [rbp + 0x28]
movzx eax, word [rcx + 0x24]
mov qword [rbp + 0x78], rax
mov eax, dword [rcx + 0x28]
mov qword [rbp + 0x60], rax
movzx r15d, word [rcx + 0x40]
lea r13, [r12 + 0x30]
nop dword [rax]
mov eax, dword [0x141ddae50]
xor edx, edx
div dword [0x141ddae54]
imul rax, rax, 0x1de7dda3
shr rax, 0x3b
or eax, 0x76733845
imul eax, eax, 0x7565663e
cmp eax, 0xe000bf36
ja 0x1400d36f0
mov r14d, dword [rcx + 0x48]
test r11d, r11d
je 0x1400d68ba
mov r12d, dword [rcx + 0x44]
cmp r11d, 1
je 0x1400d37cf
nop word cs:[rax + rax]
mov eax, dword [0x141ddae58]
and eax, dword [0x141ddae5c]
add eax, 0x3eb0c017
xor eax, 0x84e0db67
add eax, 0xe7022672
cmp eax, 0xfd2a3955
ja 0x1400d3740
nop word cs:[rax + rax]
mov eax, dword [0x141ddae60]
imul eax, dword [0x141ddae64]
add eax, 0x7e851a60
and eax, 0x80108002
cmp eax, 0x74e636eb
je 0x1400d3770
mov rax, qword [rbp + 0x80]
mov rax, qword [rax + 0x40]
nop dword [rax]
mov ecx, dword [0x141ddae68]
and ecx, dword [0x141ddae6c]
add ecx, 0xc2008baa
or ecx, 0xbff84684
imul ecx, ecx, 0x1c833f33
cmp ecx, 0x28c2797b
jb 0x1400d37a0
test rax, rax
jne 0x1400d68ba
mov eax, dword [0x141ddae70]
or eax, dword [0x141ddae74]
xor eax, 0x1d753c72
add eax, 0x321b6ebf
and eax, 0x73d77e53
cmp eax, 0x63d168df
jbe 0x1400d37f7
mov eax, dword [0x141dde6f0]
mov rdi, qword [rbp - 0x40]
nop dword [rax + rax]
mov eax, dword [0x141ddae78]
xor edx, edx
div dword [0x141ddae7c]
imul ecx, eax, 0x7b78ab74
xor ecx, 0x448d30ba
mov eax, dword [0x141dde6f0]
cmp ecx, 0x30faeb0c
jb 0x1400d3800
nop dword [rax + rax]
mov ecx, dword [0x141ddae80]
sub ecx, dword [0x141ddae84]
xor ecx, 0xfaa528a
add ecx, 0xe4fbf82b
or ecx, 0xbdc36c43
cmp ecx, 0x34bb75
jb 0x1400d3830
cmp eax, 3
je 0x1400d38d0
xor eax, eax
test al, al
jne 0x1400d3e7b
mov esi, dword [0x141ddae88]
add esi, dword [0x141ddae8c]
or esi, 0x3100180
and esi, 0x939c0183
sub rsp, 0x20
call fcn.140101b49
add rsp, 0x20
cmp esi, 0x6290d65f
je 0x1400d3865
nop word cs:[rax + rax]
mov eax, dword [0x141ddae90]
imul eax, dword [0x141ddae94]
xor eax, 0x2fedb56b
imul eax, eax, 0x9adb27d6
or eax, 0xb0edfd57
cmp eax, 0xb495be3c
jb 0x1400d38a0
nop word cs:[rax + rax]
mov eax, dword [0x141ddae98]
sub eax, dword [0x141ddae9c]
imul eax, eax, 0x54ae9ed9
xor eax, 0x37a62d2b
add eax, 0x1e25d3ee
cmp eax, 0x59d58c15
jb 0x1400d38d0
movzx eax, byte [0x141dde6f4]
nop word [rax + rax]
mov ecx, dword [0x141ddaea0]
xor ecx, dword [0x141ddaea4]
and ecx, 0x7fab3c91
cmp ecx, 0x642617a2
je 0x1400d3900
test al, al
je 0x1400d3b80
mov eax, dword [0x141ddaf58]
imul eax, dword [0x141ddaf5c]
add eax, 0x5754048d
or eax, 0xcb7430a7
cmp eax, 0x2a377628
mov r12, qword [rbp - 0x78]
mov rbx, qword [rbp + 0x88]
jae 0x1400d395e
sub rsp, 0x20
mov rcx, r12
mov rdx, rbx
call fcn.1400d8a90
add rsp, 0x20
mov rdi, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141ddaf60]
xor eax, dword [0x141ddaf64]
imul esi, eax, 0x60bfe800
add esi, 0x5262d0cf
sub rsp, 0x20
mov rcx, r12
mov rdx, rbx
call fcn.1400d8a90
add rsp, 0x20
cmp esi, 0x96e050e0
ja 0x1400d3970
mov r15, qword [rdi + 0x38]
mov rsi, qword [rdi + 0x40]
nop dword [rax + rax]
mov eax, dword [0x141ddaf68]
add eax, dword [0x141ddaf6c]
or eax, 0xda3fed80
shr eax, 5
imul rax, rax, 0x122c155
shr rax, 0x32
and eax, 0xfffffffe
cmp eax, 0x1a7b2d0b
ja 0x1400d39b0
test rsi, rsi
je 0x1400d3ad1
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141ddaf70]
xor edx, edx
div dword [0x141ddaf74]
nop
mov eax, dword [0x141ddaf78]
sub eax, dword [0x141ddaf7c]
cmp eax, 0xed6728a1
je 0x1400d3a00
mov rcx, rdi
shl rcx, 5
cmp qword [r15 + rcx], 0
je 0x1400d3a8c
add rcx, r15
mov eax, dword [0x141ddaf80]
xor edx, edx
div dword [0x141ddaf84]
add eax, 0x81b3e671
or eax, 0xca87d8fc
add eax, 0x96c6fab5
cmp eax, 0xd4b678db
ja 0x1400d3a24
nop dword [rax + rax]
mov eax, dword [0x141ddaf88]
mov edx, dword [0x141ddaf8c]
add eax, edx
add eax, 0x62ba31ef
xor eax, 0x5e131a8f
imul eax, eax, 0x1ffbd044
cmp eax, 0x6459aa2
jb 0x1400d3a50
mov r8, qword [rcx + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
inc rdi
nop
mov eax, dword [str.__j]
and eax, dword [0x141ddaf94]
and eax, 0x1bbee9c2
cmp eax, 0x8dd4d2ef
je 0x1400d3a90
nop dword [rax + rax]
mov eax, dword [0x141ddaf98]
xor eax, dword [0x141ddaf9c]
or eax, 0xafffbfbb
cmp eax, 0xe773a854
je 0x1400d3ab0
cmp rdi, rsi
jne 0x1400d39f0
mov rcx, qword [r13]
mov eax, 0x9c50fc4f
movabs rbx, 0x8000000000000000
nop word cs:[rax + rax]
mov edx, dword [0x141ddafa0]
mov r8d, dword [0x141ddafa4]
add edx, r8d
add edx, 0xfcc7375d
or edx, 0x5fbcdcf1
imul rdx, rax
shr rdx, 0x3c
cmp edx, 0x3ced3e17
ja 0x1400d3af0
nop dword [rax]
mov eax, dword [0x141ddafa8]
xor edx, edx
div dword [0x141ddafac]
imul rax, rax, 0x8633f9
shr rax, 0x37
or eax, 0x74dc3a22
cmp eax, 0x7260593b
je 0x1400d3b20
test rcx, rcx
je 0x1400d6873
mov eax, dword [0x141ddafb0]
or eax, dword [0x141ddafb4]
and eax, 0xfabaca91
add eax, 0x41085612
xor eax, 0x1807e378
cmp eax, 0x23115fe4
jae 0x1400d67ce
jmp 0x1400d67fd
mov eax, dword [0x141ddaea8]
add eax, dword [0x141ddaeac]
imul eax, eax, 0x94bc3a29
xor eax, 0x6b46231
imul rcx, rax, 0xde163d3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0xeb26deb2
ja 0x1400d3b80
mov eax, dword [0x141ddaeb0]
xor eax, dword [0x141ddaeb4]
and eax, 0xfd6fb040
xor eax, 0x6ff57ee
imul rax, rax, 0x977aa9
shr rax, 0x33
cmp eax, 0x26773fb1
jbe 0x1400d3bf7
sub rsp, 0x20
mov rcx, rdi
mov rdx, qword [rbp + 0x88]
mov r8, r12
mov r9, r15
call fcn.1400d83d0
add rsp, 0x20
mov rbx, qword [rbp + 0x88]
nop
mov eax, dword [0x141ddaeb8]
sub eax, dword [0x141ddaebc]
imul esi, eax, 0x46f1790c
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r12
mov r9, r15
call fcn.1400d83d0
add rsp, 0x20
cmp esi, 0x70825fd8
je 0x1400d3c00
mov rbx, qword [rbp + 0x80]
nop word [rax + rax]
mov eax, dword [0x141ddaec0]
sub eax, dword [0x141ddaec4]
add eax, 0x7bb3892f
and eax, 0xdfb1b161
xor eax, 0xe460b67
cmp eax, 0xe3c957cf
ja 0x1400d3c40
mov rcx, qword [rbp - 0x40]
mov rsi, qword [rcx]
movabs rax, 0x8000000000000000
cmp rsi, rax
jne 0x1400d3e01
mov rax, qword [rbp - 0x18]
mov qword [rax], 0
mov qword [rax + 8], 8
mov qword [rax + 0x10], 0
nop word [rax + rax]
mov eax, dword [0x141ddaef8]
xor edx, edx
div dword [0x141ddaefc]
add eax, 0x2555ffe4
and eax, 0x4e126200
cmp eax, 0x2a852b98
je 0x1400d3ca0
jmp 0x1400d6190
mov eax, dword [0x141ddaa38]
and eax, dword [0x141ddaa3c]
xor eax, 0x42659d9
add eax, 0x897ee0d9
and eax, 0xea44a32
cmp eax, 0xa1a35d83
ja 0x1400d3cd0
jmp 0x1400d45ee
mov eax, dword [0x141ddaac8]
add eax, dword [0x141ddaacc]
imul eax, eax, 0x9f312182
add eax, 0x6c937552
cmp eax, 0x16be7458
mov rdi, qword [rbp + 0x88]
jae 0x1400d45f0
jmp 0x1400d4636
mov eax, dword [0x141ddaa60]
sub eax, dword [0x141ddaa64]
xor eax, 0x1008b822
or eax, 0x2b2703d8
cmp eax, 0x1152b313
je 0x1400d3d25
jmp 0x1400d45ee
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movabs rbx, 0x8000000000000000
jmp 0x1400d3db0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r15, qword [rbp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb280]
imul eax, dword [0x141ddb284]
imul eax, eax, 0xc7c75313
and eax, 0x2ac65102
imul eax, eax, 0xfa4658a8
cmp eax, 0xa1fed38c
jb 0x1400d3d80
nop word cs:[rax + rax]
mov eax, dword [0x141ddb288]
xor edx, edx
div dword [0x141ddb28c]
xor eax, 0xa946b2ab
add eax, 0xb73deeab
cmp eax, 0x82222b0e
ja 0x1400d3db0
jmp 0x1400d646c
mov eax, dword [0x141ddaa78]
or eax, dword [0x141ddaa7c]
add eax, 0x84e5596
imul rax, rax, 0x3b22689f
shr rax, 0x3d
or eax, 0x85e538b0
cmp eax, 0xdd5c2e47
ja 0x1400d3dd4
jmp 0x1400d45ee
mov rdi, qword [rcx + 8]
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, rdi
call fcn.1400d87b0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141ddaec8]
xor eax, dword [0x141ddaecc]
or eax, 0x3bf9d1cc
shr eax, 2
imul rax, rax, 0x8666435
shr rax, 0x39
add eax, 0x603ffbf3
cmp eax, 0x83cd4191
ja 0x1400d3e20
test rsi, rsi
je 0x1400d6190
mov eax, dword [0x141ddaed0]
and eax, dword [0x141ddaed4]
imul eax, eax, 0xb2b8ec8e
add eax, 0x479cdcb
cmp eax, 0x8802374c
jae 0x1400d60d9
jmp 0x1400d610d
sub rsp, 0x20
call fcn.140101b49
add rsp, 0x20
jmp 0x1400d3865
mov r13d, dword [str.DCQI]
sub r13d, dword [0x141dda85c]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp r13d, 0xdf7d283d
jne 0x1400d3ec2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d3e8d
mov r13, qword [rbp + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dda860]
and eax, dword [0x141dda864]
add eax, 0xefb8536e
and eax, 0x715e6475
cmp eax, 0xf312eebe
je 0x1400d3ed0
sub rsp, 0x20
mov rcx, rbx
mov rdx, r12
mov r8, r14
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
test eax, eax
jne 0x1400d3f52
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dda868]
sub eax, dword [0x141dda86c]
and eax, 0x8e33ec42
imul eax, eax, 0x28e96c8c
imul rcx, rax, 0x3072c52f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x730a243d
je 0x1400d3f20
mov rax, qword [rsi]
mov r9d, dword [r14]
mov edx, dword [r14 + 4]
mov ecx, dword [0x141dda870]
or ecx, dword [0x141dda874]
shl rdx, 0x20
add ecx, 0x205400f3
or ecx, 0x5292ef0a
cmp ecx, 0x524dc33a
jae 0x1400d3f8e
mov rcx, qword [rbp + 0x80]
mov qword [rcx + 0x108], rax
mov rcx, qword [rdi]
mov r8, qword [r12]
or rdx, r9
xor r11d, r11d
mov r14, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov r9d, dword [0x141dda878]
add r9d, dword [0x141dda87c]
imul r9, r9, 0x5202ee47
shr r9, 0x3d
imul ebx, r9d, 0x23bac076
add ebx, 0x9ee45704
mov rsi, qword [r14 + 0x110]
cmp r8, rsi
cmovb rsi, r11
mov rdi, qword [r14 + 0x118]
cmp rdx, rdi
cmovb rdi, r11
mov r10, qword [r14 + 0x100]
mov r9, qword [r14 + 0x108]
mov qword [r14 + 0x108], rax
cmp ebx, 0xe22740a7
ja 0x1400d3fb0
mov qword [r14 + 0x100], rcx
mov qword [r14 + 0x118], rdx
sub rdx, rdi
mov qword [r14 + 0x110], r8
sub r8, rsi
add r8, rdx
mov rdx, 0xffffffffffffffff
cmovae rdx, r8
test rdx, rdx
je 0x1400d4060
xor r8d, r8d
cmp rcx, r10
cmovb r10, r8
sub rcx, r10
cmp rax, r9
cmovb r9, r8
sub rax, r9
test rdx, rdx
js 0x1400d408b
cvtsi2ss xmm1, rdx
jmp 0x1400d40a0
mov eax, dword [0x141dda888]
or eax, dword [0x141dda88c]
add eax, 0xa24c1b37
xor eax, 0xa52c6c0a
add eax, 0xbb1683a4
cmp eax, 0x2308c98b
jae 0x1400d413b
jmp 0x1400d4168
mov r8, rdx
shr r8, 1
and edx, 1
or rdx, r8
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
mov rdx, qword [rbp + 0x68]
add rax, rcx
mov rcx, 0xffffffffffffffff
cmovae rcx, rax
test rcx, rcx
js 0x1400d40be
cvtsi2ss xmm0, rcx
jmp 0x1400d40d3
mov rax, rcx
shr rax, 1
and ecx, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
divss xmm0, xmm1
mulss xmm0, dword [0x140104db0]
nop
mov eax, dword [0x141dda880]
add eax, dword [0x141dda884]
and eax, 0x1c988ca5
add eax, 0x9a509aee
and eax, 0x26890444
cmp eax, 0x47b70e82
je 0x1400d40e0
test rdx, rdx
js 0x1400d4111
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
jmp 0x1400d4129
mov rax, rdx
shr rax, 1
and edx, 1
or rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
mulss xmm0, xmm1
movss dword [r14 + 0x150], xmm0
jmp 0x1400d2930
mov eax, dword [0x141dda890]
or eax, dword [0x141dda894]
add eax, 0xdc3e7269
xor eax, 0x13f4affe
add eax, 0x24bea17
mov dword [r14 + 0x150], 0
cmp eax, 0xb9623c24
jbe 0x1400d4175
mov dword [r14 + 0x150], 0
jmp 0x1400d413b
mov eax, 0x9409e675
nop word [rax + rax]
mov ecx, dword [0x141dda898]
or ecx, dword [0x141dda89c]
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xa932ca6b
add ecx, 0xf00f9ed8
cmp ecx, 0xb315141b
ja 0x1400d4180
jmp 0x1400d2930
mov eax, dword [0x141dda8b0]
and eax, dword [0x141dda8b4]
imul rax, rax, 0x3981afbf
shr rax, 0x3d
or eax, 0x9f9d5d26
mov ecx, 0x8a3e845d
imul rcx, rax
shr rcx, 0x38
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
cmp ecx, 0x24ee8e0f
jbe 0x1400d4204
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
jmp 0x1400d41ad
mov rax, qword [rbp + 0x88]
movups xmm0, xmmword [rax + 0x18]
movups xmmword [r12 + 0x140], xmm0
nop dword [rax + rax]
mov eax, dword [0x141dda8c8]
xor eax, dword [0x141dda8cc]
add eax, 0x2f12db28
imul rcx, rax, 0x36b2cd0f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x128d5a1b
ja 0x1400d4220
jmp 0x1400d2a85
mov esi, dword [0x141dda9a8]
sub esi, dword [0x141dda9ac]
or esi, 0x8bfe3340
xor esi, 0x2b940bf0
add esi, 0x32500182
sub rsp, 0x20
mov rcx, r14
mov edx, 8
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
cmp esi, 0x74d44e35
jbe 0x1400d42b0
sub rsp, 0x20
mov rcx, r14
mov edx, 8
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
jmp 0x1400d4251
mov ecx, dword [0x141dda9b0]
xor ecx, dword [0x141dda9b4]
and ecx, 0xd90cb4c5
xor ecx, 0x3c771f0e
imul ecx, ecx, 0xbbcd1975
cmp ecx, 0xd3f4b0ee
ja 0x1400d42b0
test rax, rax
mov r14, qword [rbp + 0x40]
movabs rbx, 0x8000000000000000
je 0x1400d309b
nop dword [rax]
mov ecx, dword [0x141dda9b8]
xor ecx, dword [0x141dda9bc]
xor ecx, 0x8488022f
or ecx, 0x7a335c90
imul ecx, ecx, 0xc66acf96
cmp ecx, 0xf3e29839
ja 0x1400d42f0
mov r9d, dword [rdi]
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r15
mov edx, 1
mov qword [rbp + 0x90], rax
mov r8, rax
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
nop dword [rax]
mov ecx, dword [0x141dda9c0]
xor ecx, dword [0x141dda9c4]
or ecx, 0xffddfbfb
add ecx, 0x9b270a60
cmp ecx, 0xe7647961
ja 0x1400d4340
test eax, eax
je 0x1400d438c
mov rax, qword [rbp + 0x90]
mov rbx, qword [rax]
mov eax, dword [0x141dda9c8]
xor eax, dword [0x141dda9cc]
or eax, 0x2b708fb4
cmp eax, 0xf1d9256e
mov rdi, qword [rbp + 0x58]
jne 0x1400d43ab
jmp 0x1400d43ea
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x90]
call fcn.1400d7e00
add rsp, 0x20
jmp 0x1400d309b
mov eax, dword [0x141dda9d0]
add eax, dword [0x141dda9d4]
xor eax, 0x79158c07
mov esi, 0x879ed995
imul rsi, rax
shr rsi, 0x3e
or esi, 0x821b920c
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
call fcn.1400d7e70
add rsp, 0x20
cmp esi, 0xb02f269a
jbe 0x1400d43ff
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
call fcn.1400d7e70
add rsp, 0x20
jmp 0x1400d43ab
mov eax, dword [0x141dda9d8]
xor edx, edx
div dword [0x141dda9dc]
mov eax, 0x8b256991
nop word cs:[rax + rax]
mov ecx, dword [0x141dda9e0]
add ecx, dword [0x141dda9e4]
imul ecx, ecx, 0x9ccfdb44
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xbd4c5af0
cmp ecx, 0xeb02307d
ja 0x1400d4420
mov rax, qword [rbp + 0x58]
mov rsi, qword [rax]
movabs rbx, 0x8000000000000000
cmp rsi, rbx
mov rcx, qword [rbp + 0x90]
jne 0x1400d4498
sub rsp, 0x20
call fcn.1400d7e00
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test eax, eax
jne 0x1400d448d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
test al, al
jne 0x1400d448f
jmp 0x1400d31d9
mov rbx, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rax, qword [r12 + 0x80]
shl rax, 1
test rax, rax
je 0x1400d44d6
mov r8, qword [r12 + 0x88]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0x90]
add rsp, 0x20
mov qword [r12 + 0x80], rsi
mov qword [r12 + 0x88], rbx
mov qword [r12 + 0x90], r14
sub rsp, 0x20
call fcn.1400d7e00
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test eax, eax
mov r14, qword [rbp + 0x40]
movabs rbx, 0x8000000000000000
jne 0x1400d45a4
mov eax, dword [0x141ddaa08]
and eax, dword [0x141ddaa0c]
imul eax, eax, 0xc4507783
add eax, 0x88e140fc
and eax, 0xd8a48713
cmp eax, 0x60b93a25
ja 0x1400d4571
mov esi, dword [0x141ddaa10]
or esi, dword [0x141ddaa14]
add esi, 0xea2619cc
or esi, 0xce923cb2
and esi, 0xded23cb3
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0xbd7405b2
jne 0x1400d4581
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d453d
mov eax, dword [0x141ddaa18]
and eax, dword [0x141ddaa1c]
imul eax, eax, 0xc98091e0
add eax, 0x73f92100
and eax, 0xec6994a0
cmp eax, 0xe7456a8d
ja 0x1400d4581
mov eax, dword [0x141ddaa20]
and eax, dword [0x141ddaa24]
or eax, 0x210dc888
and eax, 0xe98df98c
add eax, 0x42325ff7
cmp eax, 0x6f43553c
jb 0x1400d45a4
mov eax, dword [0x141ddaa28]
or eax, dword [0x141ddaa2c]
or eax, 0x2b905589
imul eax, eax, 0xb461e24
or eax, 0xbe4bbba5
cmp eax, 0x9f71212f
jbe 0x1400d45c6
jmp 0x1400d31d9
ud2
mov eax, dword [0x141ddaad0]
xor edx, edx
div dword [0x141ddaad4]
imul esi, eax, 0x9d51bfd0
or esi, 0x54905844
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rdi
xor edx, edx
mov r8, rbx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
cmp esi, 0xabad7265
jbe 0x1400d465c
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rdi
xor edx, edx
mov r8, rbx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
jmp 0x1400d45f0
test eax, eax
mov r13, qword [rbp + 0x30]
mov r15, qword [rbp + 0x20]
movabs rbx, 0x8000000000000000
js 0x1400d646c
nop word cs:[rax + rax]
mov eax, dword [0x141ddaad8]
or eax, dword [0x141ddaadc]
imul rax, rax, 0x201b990f
shr rax, 0x3d
xor eax, 0x3f83f389
add eax, 0x30b5a8eb
cmp eax, 0xcbbe5e9
jb 0x1400d4680
mov eax, dword [0x141ddaae0]
sub eax, dword [0x141ddaae4]
add eax, 0x10710862
cmp eax, 0x6d46bcff
jbe 0x1400d46d9
mov rax, qword [rbp + 0x70]
mov rax, qword [rax + 0x28]
xor ecx, ecx
test rax, rax
setne cl
mov qword [r12], rcx
mov qword [r12 + 8], rax
mov r8, qword [rbp + 0x70]
mov rdi, qword [r8 + 8]
xor eax, eax
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x28]
xor edx, edx
test rcx, rcx
setne dl
mov qword [r12], rdx
mov qword [r12 + 8], rcx
test al, al
jne 0x1400d46f0
mov eax, dword [0x141ddaae8]
imul eax, dword [0x141ddaaec]
add eax, 0x284d747c
xor eax, 0x84208610
or eax, 0x8db79ae
cmp eax, 0xda7cb6a
mov rsi, qword [rbp + 0x88]
jb 0x1400d4764
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, rsi
mov rdx, rdi
mov r8, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
add rsp, 0x30
xor ecx, ecx
test cl, cl
je 0x1400d478d
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, rsi
mov rdx, rdi
mov r8, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1400d4733
test eax, eax
je 0x1400d49ee
mov rdx, qword [rdx + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, qword [rbp + 0x88]
mov rsi, qword [rbp + 0x50]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400d4a79
movzx eax, word [rsi + 0x38]
mov qword [rbp + 0x70], rax
nop word cs:[rax + rax]
mov eax, dword [0x141ddab00]
sub eax, dword [0x141ddab04]
cmp eax, 0x81d08af8
je 0x1400d47e0
mov rax, qword [rsi + 0x40]
mov qword [rbp - 0x48], rax
movzx r15d, word [rsi + 0x70]
mov eax, 0xe5f8dec5
lea rbx, [r12 + 0x30]
mov r9d, dword [rbp + 0x90]
mov edx, dword [rbp + 0x58]
mov r13, qword [rbp - 0x10]
mov r8d, dword [rbp + 0x1c]
nop dword [rax]
mov ecx, dword [0x141ddab08]
and ecx, dword [0x141ddab0c]
imul ecx, ecx, 0x3b32b026
xor ecx, 0xe2c6313f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xc9c992be
ja 0x1400d4820
mov rax, qword [rsi + 0x80]
mov qword [rbp + 0x78], rax
test r8d, r8d
mov qword [rbp + 0x60], r14
je 0x1400d5053
mov r12, qword [rsi + 0x78]
cmp r8d, 1
je 0x1400d48da
cmp r8d, 2
jne 0x1400d4a9f
nop word cs:[rax + rax]
mov eax, dword [0x141ddab18]
or eax, dword [0x141ddab1c]
xor eax, 0x667edbf0
imul eax, eax, 0x22df4419
cmp eax, 0x741ed978
je 0x1400d4880
mov rax, qword [rbp + 0x80]
mov rax, qword [rax + 0x40]
nop dword [rax]
mov ecx, dword [0x141ddab20]
imul ecx, dword [0x141ddab24]
or ecx, 0x3143020
and ecx, 0x3143620
cmp ecx, 0xceaed16b
ja 0x1400d48b0
test rax, rax
jne 0x1400d5053
mov eax, dword [0x141ddab28]
imul eax, dword [0x141ddab2c]
imul rax, rax, 0x444eab19
shr rax, 0x3e
add eax, 0x4ff6f871
or eax, 0xe38d2e4c
cmp eax, 0xfd7f4131
jbe 0x1400d4910
mov eax, dword [0x141dde6f0]
nop dword [rax]
mov eax, dword [0x141ddab30]
and eax, dword [0x141ddab34]
xor eax, 0xfbbf6355
imul ecx, eax, 0x729d95c5
mov eax, dword [0x141dde6f0]
cmp ecx, 0x21b8a453
je 0x1400d4910
cmp eax, 3
je 0x1400d4998
mov eax, dword [0x141ddab38]
sub eax, dword [0x141ddab3c]
xor eax, 0x8b9fcb63
add eax, 0x9043980f
cmp eax, 0xaddc74f
jb 0x1400d4bfb
mov esi, dword [0x141ddab40]
xor esi, dword [0x141ddab44]
imul rax, rsi, 0x3380ad9
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1f
not esi
and esi, 0x810590d
sub rsp, 0x20
call fcn.140101b49
add rsp, 0x20
cmp esi, 0xb065d76c
je 0x1400d495b
movzx eax, byte [0x141dde6f4]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400d49b0
test al, al
je 0x1400d4ac8
mov eax, dword [0x141ddabc0]
add eax, dword [0x141ddabc4]
and eax, 0x2b25242a
imul eax, eax, 0xc3a49417
cmp eax, 0x2b885f08
mov rdi, qword [rbp + 0x88]
mov r12, qword [rbp - 0x68]
jne 0x1400d4ec8
jmp 0x1400d4ef5
mov eax, dword [0x141ddaaf0]
sub eax, dword [0x141ddaaf4]
imul eax, eax, 0x8ad8cd2d
xor eax, 0xd4110092
and eax, 0xdcb1adde
cmp eax, 0x674a0388
jbe 0x1400d4a1f
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x141ddaaf8]
xor edx, edx
div dword [0x141ddaafc]
imul edi, eax, 0x697ab58f
add edi, 0xcb9ccc45
or edi, 0x78835822
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x61eb7714
je 0x1400d4a30
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d4a70
jmp 0x1400d6410
mov eax, dword [0x141ddae08]
xor eax, dword [0x141ddae0c]
or eax, 0x6fbbd77d
xor eax, 0xffcc271f
cmp eax, 0x6cd6863a
jae 0x1400d635c
jmp 0x1400d6391
mov eax, dword [0x141ddab10]
xor edx, edx
div dword [0x141ddab14]
or eax, 0x18897e2b
xor eax, 0x9df817e
add eax, 0x849ec1ac
cmp eax, 0x35955cd4
jb 0x1400d4a9f
jmp 0x1400d45ee
mov qword [rbp + 0x50], rbx
mov eax, dword [0x141ddab48]
or eax, dword [0x141ddab4c]
imul eax, eax, 0xc8037acf
shr eax, 1
mov ecx, 0xc67fd16d
imul rcx, rax
shr rcx, 0x3c
and ecx, 2
cmp ecx, 0xbd459b78
jbe 0x1400d4b16
sub rsp, 0x20
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x88]
mov r8, r12
mov r9, r15
call fcn.1400d83d0
add rsp, 0x20
mov esi, 0xd6233e51
mov r14, qword [rbp + 0x88]
mov rbx, qword [rbp + 0x38]
mov eax, dword [0x141ddab50]
mov ecx, dword [0x141ddab54]
lea edi, [rax + rcx]
add edi, 0xe5769d66
imul rdi, rsi
shr rdi, 0x3c
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, r12
mov r9, r15
call fcn.1400d83d0
add rsp, 0x20
cmp edi, 0xd8b6df02
ja 0x1400d4b26
mov rdi, qword [rbx]
mov eax, dword [0x141ddab58]
xor eax, dword [0x141ddab5c]
or eax, 0x62f3b874
xor eax, 0x18d4a837
imul rax, rax, 0x68cc9a23
shr rax, 0x3e
cmp eax, 0xea09cded
ja 0x1400d4b67
movabs rax, 0x8000000000000000
cmp rdi, rax
mov r15, qword [rbp + 0x80]
mov r12, qword [rbp - 0x60]
mov rbx, qword [rbp + 0x50]
jne 0x1400d4bcc
mov qword [r12], 0
mov qword [r12 + 8], 8
mov qword [r12 + 0x10], 0
jmp 0x1400d4c65
mov rax, qword [rbp + 0x38]
mov rsi, qword [rax + 8]
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
call fcn.1400d87b0
add rsp, 0x20
test rdi, rdi
je 0x1400d4c65
mov rdi, qword [0x141dde6e0]
xor eax, eax
test al, al
je 0x1400d4c0d
jmp 0x1400d4c2b
sub rsp, 0x20
call fcn.140101b49
add rsp, 0x20
jmp 0x1400d495b
sub rsp, 0x20
xor r14d, r14d
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test r14b, r14b
je 0x1400d4c43
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d4c0d
mov eax, dword [0x141ddab60]
or eax, dword [0x141ddab64]
xor eax, 0x8356b1c8
and eax, 0xcf76f5fe
xor eax, 0xf950cd8b
cmp eax, 0x1e871238
jb 0x1400d4c43
mov rsi, qword [r15 + 0x38]
mov rdi, qword [r15 + 0x40]
mov eax, dword [0x141ddab68]
imul eax, dword [0x141ddab6c]
or eax, 0xdfcbf05e
xor eax, 0x8415664e
cmp eax, 0x500ab37e
jb 0x1400d4c6d
test rdi, rdi
mov r9d, dword [rbp + 0x90]
je 0x1400d4d82
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, r14
shl rax, 5
cmp qword [rsi + rax], 0
je 0x1400d4d04
add rax, rsi
mov r8, qword [rax + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
nop
mov eax, dword [0x141ddab70]
xor edx, edx
div dword [0x141ddab74]
imul eax, eax, 0xf5bdec33
add eax, 0xf2fd6fc3
imul rcx, rax, 0xb63df07
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0xe8215bc9
je 0x1400d4cd0
inc r14
mov eax, dword [0x141ddab78]
xor edx, edx
div dword [0x141ddab7c]
mov eax, dword [0x141ddab80]
imul eax, dword [0x141ddab84]
add eax, 0x9e12c0d7
imul rax, rax, 0x15c6d5e7
shr rax, 0x3a
xor eax, 0x62dedd84
cmp eax, 0xd1b5c419
ja 0x1400d4d15
mov r9d, dword [rbp + 0x90]
nop word cs:[rax + rax]
mov eax, dword [0x141ddab88]
or eax, dword [0x141ddab8c]
imul rax, rax, 0x6713730b
shr rax, 0x3e
imul eax, eax, 0xd83fbe75
add eax, 0xef553431
cmp eax, 0x4d8dd333
jb 0x1400d4d50
cmp r14, rdi
jne 0x1400d4ca5
mov rax, qword [rbx]
mov ecx, dword [0x141ddab90]
add ecx, dword [0x141ddab94]
cmp ecx, 0x42dc52c7
je 0x1400d4d85
test rax, rax
mov r14, qword [rbp + 0x60]
je 0x1400d4e5f
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141ddab98]
or eax, dword [0x141ddab9c]
xor eax, 0x6df52cda
imul eax, eax, 0x76a3ef68
xor eax, 0xa572e792
cmp eax, 0x50157601
jae 0x1400d4de6
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141ddaba0]
add eax, dword [0x141ddaba4]
imul rcx, rax, 0x26183b7f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul r15d, eax, 0x9b4e4698
add r15d, 0x857aade8
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
cmp r15d, 0x5ccf5838
ja 0x1400d4ded
mov r9d, dword [rbp + 0x90]
mov r14, qword [rbp + 0x60]
mov eax, dword [0x141ddaba8]
xor eax, dword [0x141ddabac]
add eax, 0x69d8910a
and eax, 0x8d07ae7a
cmp eax, 0xede2943e
ja 0x1400d4e42
mov rax, qword [r12 + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [r12]
movups xmmword [rbx], xmm0
mov eax, dword [0x141ddabb0]
and eax, dword [0x141ddabb4]
or eax, 0xcc6907e1
add eax, 0xa06e40ef
imul rax, rax, 0x53025059
shr rax, 0x3d
cmp eax, 0xbb9cd7ea
ja 0x1400d4e70
mov edx, dword [rbp + 0x58]
mov eax, dword [str.sGa_]
add eax, dword [0x141ddabbc]
xor eax, 0xd25be50b
imul rax, rax, 0x242e4677
shr rax, 0x3d
or eax, 0x43740aae
cmp eax, 0x63c2ebe5
je 0x1400d4e9b
jmp 0x1400d5053
mov esi, dword [0x141ddabc8]
or esi, dword [0x141ddabcc]
or esi, 0x78cfc028
sub rsp, 0x20
mov rcx, r12
mov rdx, rdi
call fcn.1400d8a90
add rsp, 0x20
cmp esi, 0xeb7b33a7
jne 0x1400d4f0a
sub rsp, 0x20
mov rcx, r12
mov rdx, rdi
call fcn.1400d8a90
add rsp, 0x20
jmp 0x1400d4ec8
xor eax, eax
mov rcx, qword [rbp + 0x80]
nop word cs:[rax + rax]
test al, al
jne 0x1400d4f20
mov rdi, qword [rcx + 0x38]
nop dword [rax + rax]
mov eax, dword [0x141ddabd0]
and eax, dword [0x141ddabd4]
xor eax, 0xb690e808
add eax, 0x15b67ea5
cmp eax, 0xddd1528
jb 0x1400d4f30
mov rsi, qword [rcx + 0x40]
test rsi, rsi
je 0x1400d4fba
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d4f6a
inc r14
cmp r14, rsi
je 0x1400d4fba
mov rax, r14
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1400d4f62
add rax, rdi
nop dword [rax + rax]
mov ecx, dword [0x141ddabd8]
and ecx, dword [0x141ddabdc]
add ecx, 0xab4381b9
and ecx, 0x3fc6e786
cmp ecx, 0x99642ddd
je 0x1400d4f80
mov r8, qword [rax + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
jmp 0x1400d4f62
cmp qword [rbx], 0
je 0x1400d5003
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141ddabe0]
xor eax, dword [0x141ddabe4]
imul rax, rax, 0x63c77423
shr rax, 0x3d
imul eax, eax, 0x34fa7dd2
add eax, 0x4a38c454
cmp eax, 0x2bafed3a
jb 0x1400d4fda
mov rax, qword [r12 + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [r12]
movups xmmword [rbx], xmm0
mov r9d, dword [rbp + 0x90]
mov edx, dword [rbp + 0x58]
mov r14, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x141ddabe8]
imul eax, dword [0x141ddabec]
xor eax, 0x14000
or eax, 0x28da8357
and eax, 0x6cffc757
cmp eax, 0xa71f91a8
ja 0x1400d5030
mov r12, qword [rbp + 0x80]
lea r10, [r12 + 0x48]
movabs rbx, 0x8000000000000000
mov r15, qword [rbp + 0x88]
mov eax, dword [0x141ddabf0]
mov ecx, dword [0x141ddabf4]
add eax, ecx
add eax, 0x9afdf874
xor eax, 0x4c210221
and eax, 0xcd39c2a5
cmp eax, 0x441b1d66
je 0x1400d5070
test edx, edx
je 0x1400d5a10
cmp edx, 1
je 0x1400d50f0
cmp edx, 2
jne 0x1400d560d
mov rcx, qword [r12 + 0x58]
mov r8d, 0xe1536293
nop word cs:[rax + rax]
mov eax, dword [0x141ddac00]
xor edx, edx
div dword [str.u_g_]
and eax, 0xd2cd2ce2
imul rax, r8
shr rax, 0x3f
or eax, 0x36168b0a
cmp eax, 0xed57697d
ja 0x1400d50c0
test rcx, rcx
jne 0x1400d5a10
mov qword [rbp + 0x50], r10
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r15
mov r14, qword [rbp + 0x78]
mov rdx, r14
mov rsi, qword [rbp - 8]
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
je 0x1400d5636
mov rdi, qword [rsi]
mov rax, qword [rsi + 0x18]
sub rdi, r14
add rdi, rax
nop
mov eax, dword [0x141ddac18]
imul eax, dword [0x141ddac1c]
add eax, 0x1fdb8f77
or eax, 0xdffd7ee3
cmp eax, 0x3b6748d4
jb 0x1400d5130
mov eax, dword [0x141ddac20]
add eax, dword [0x141ddac24]
cmp eax, 0x7ea88bf0
jne 0x1400d517a
sub rsp, 0x20
mov rcx, r13
mov rdx, r15
mov r8, r14
mov r9, rdi
call fcn.1400d83d0
add rsp, 0x20
xor esi, esi
nop dword [rax]
sub rsp, 0x20
mov rcx, r13
mov rdx, r15
mov r8, r14
mov r9, rdi
call fcn.1400d83d0
add rsp, 0x20
test sil, sil
jne 0x1400d5180
mov rax, qword [r13]
cmp rax, rbx
je 0x1400d5685
mov qword [rbp + 0x38], rax
mov rcx, qword [r13 + 8]
mov r8, qword [r13 + 0x10]
mov eax, dword [0x141ddac68]
xor edx, edx
div dword [0x141ddac6c]
mov qword [rbp - 8], r8
mov qword [rbp - 0x10], rcx
mov eax, dword [0x141ddac70]
sub eax, dword [0x141ddac74]
and eax, 0x28106a00
xor eax, 0x7024eaa9
cmp eax, 0x43b54a88
jb 0x1400d51cd
mov rcx, qword [r12 + 0x50]
mov rax, r12
mov r12, qword [r12 + 0x58]
mov qword [rax + 0x58], 0
test r12, r12
mov qword [rbp + 0x78], rcx
je 0x1400d5359
xor r15d, r15d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r13d, r13d
mov rax, r13
shl rax, 5
cmp qword [rcx + rax], 0
je 0x1400d5326
add rax, qword [rbp + 0x78]
mov ecx, dword [0x141ddac88]
imul ecx, dword [0x141ddac8c]
xor ecx, 0x5db846b5
add ecx, 0xa95a6493
imul rcx, rcx, 0x4db9742f
shr rcx, 0x3d
cmp ecx, 0x586fc1ae
ja 0x1400d522f
mov rdi, qword [rax + 8]
mov eax, dword [0x141ddac90]
or eax, dword [0x141ddac94]
and eax, 0x1cb7c5c4
xor eax, 0xbcd074f5
add eax, 0x990e1ad8
cmp eax, 0xd94b24d2
jbe 0x1400d5290
mov rax, qword [0x141dde6e0]
nop dword [rax + rax]
mov r14, qword [0x141dde6e0]
test r15b, r15b
jne 0x1400d5290
mov eax, dword [0x141ddac98]
imul eax, dword [0x141ddac9c]
and eax, 0x1c02e408
or eax, 0xe2d518d2
mov ecx, 0x9f17901f
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x2cd2e05f
jbe 0x1400d52e0
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
nop dword [rax]
mov ebx, dword [0x141ddaca0]
or ebx, dword [0x141ddaca4]
xor ebx, 0xbb31e7e2
add ebx, 0xcc0eecf
imul rax, rbx, 0x15f11be9
shr rax, 0x20
sub ebx, eax
shr ebx, 1
add ebx, eax
shr ebx, 0x1b
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
cmp ebx, 0x7bcfabf1
ja 0x1400d52e0
inc r13
mov eax, dword [0x141ddaca8]
add eax, dword [0x141ddacac]
or eax, 0xa7cd6a0
imul eax, eax, 0x163da0be
add eax, 0x76694dd
cmp eax, 0xb7ea1dca
jb 0x1400d5329
cmp r13, r12
mov rcx, qword [rbp + 0x78]
jne 0x1400d5219
mov r15, qword [rbp - 0x10]
mov r13, qword [rbp - 8]
lea rdi, [r15 + r13*2]
movabs rbx, 0x8000000000000000
mov rsi, qword [rbp - 0x50]
mov eax, dword [0x141ddac78]
and eax, dword [0x141ddac7c]
imul eax, eax, 0x6980af93
cmp eax, 0xca2a39b
je 0x1400d5373
mov eax, 0xbd1e098b
mov ecx, dword [0x141ddac80]
or ecx, dword [0x141ddac84]
add ecx, 0xd211f7c2
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xd0223e47
je 0x1400d5391
xor r12d, r12d
xor r14d, r14d
cmp r14, r13
je 0x1400d5848
lea r9, [r15 + r14*2]
xor r8d, r8d
mov rcx, r9
cmp word [rcx], 0
je 0x1400d5418
add rcx, 2
inc r8
mov eax, dword [0x141ddacb0]
xor edx, edx
div dword [0x141ddacb4]
nop word [rax + rax]
mov eax, dword [0x141ddacb8]
sub eax, dword [0x141ddacbc]
imul eax, eax, 0xede94b81
add eax, 0xb74951eb
cmp eax, 0xc18f663f
ja 0x1400d53f0
cmp rcx, rdi
jne 0x1400d53cc
jmp 0x1400d5848
add r14, r8
jb 0x1400d45ee
mov eax, dword [0x141ddace0]
xor edx, edx
div dword [0x141ddace4]
and eax, 0xac8d97c3
add eax, 0xb1d38438
or eax, 0x6313f12f
cmp eax, 0xb51c52ab
jb 0x1400d5421
cmp r14, r13
ja 0x1400d45ee
lea rcx, [r9 + r8*2]
mov r10, r9
mov eax, dword [0x141ddace8]
imul eax, dword [0x141ddacec]
add eax, 0xb8b0c85e
cmp eax, 0x5a197e25
jb 0x1400d5455
cmp r10, rcx
je 0x1400d5848
nop word [rax + rax]
mov eax, dword [str.tK_e]
or eax, dword [0x141ddacf4]
add eax, 0x5cf8fd0f
and eax, 0x22295e29
cmp eax, 0x4e644e2
je 0x1400d5480
movzx r11d, word [r10]
add r10, 2
nop word cs:[rax + rax]
mov eax, dword [0x141ddacf8]
xor edx, edx
div dword [0x141ddacfc]
xor eax, 0x80c14408
or eax, 0x5c3a8013
cmp eax, 0x731638db
je 0x1400d54b0
cmp r11w, 0x3d
jne 0x1400d5455
sub rsp, 0x20
mov rcx, rsi
mov rdx, r9
call fcn.14008ea20
add rsp, 0x20
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
mov eax, dword [0x141ddad00]
xor edx, edx
div dword [str.S9_a]
mov eax, dword [0x141ddad08]
xor edx, edx
div dword [0x141ddad0c]
xor eax, 0x8a0
and eax, 0xb602f9a0
imul eax, eax, 0x975c4734
cmp eax, 0x82b110d
jb 0x1400d5502
cmp r12, rcx
mov r9, qword [rbp + 0x78]
jne 0x1400d556b
sub rsp, 0x20
mov rcx, qword [rbp + 0x50]
call fcn.1400d8fa0
add rsp, 0x20
mov rax, qword [rbp + 0x80]
mov r9, qword [rax + 0x50]
mov eax, dword [0x141ddad10]
imul eax, dword [0x141ddad14]
imul eax, eax, 0x8fd49fb
add eax, 0xfc37dc74
cmp eax, 0xa94a3f31
ja 0x1400d554c
mov eax, dword [0x141ddad18]
or eax, dword [0x141ddad1c]
or eax, 0x580eba6d
add eax, 0xd61d2680
cmp eax, 0x4a37ae3a
mov r8, qword [rbp + 0x80]
jb 0x1400d55e9
mov ecx, dword [0x141ddad20]
or ecx, dword [0x141ddad24]
xor ecx, 0x840a60
and ecx, 0x861a60
mov rdx, r12
shl rdx, 5
lea rax, [r12 + 1]
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [r9 + rdx + 0x10], xmm1
movups xmmword [r9 + rdx], xmm0
mov qword [r8 + 0x58], rax
cmp ecx, 0x505e152c
je 0x1400d55e9
mov qword [rbp + 0x78], r9
inc r14
mov r12, rax
cmp r14, r13
jbe 0x1400d53b9
jmp 0x1400d5894
mov rax, r12
shl rax, 5
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [r9 + rax + 0x10], xmm1
movups xmmword [r9 + rax], xmm0
lea rax, [r12 + 1]
mov qword [r8 + 0x58], rax
jmp 0x1400d558f
mov eax, dword [0x141ddabf8]
mov ecx, dword [str._E_n]
add eax, ecx
add eax, 0xa063993a
and eax, 0xe89413e5
add eax, 0x229a1bf2
cmp eax, 0xe90b84a0
ja 0x1400d560d
jmp 0x1400d45ee
mov eax, 0xc044b095
mov ecx, dword [0x141ddac08]
imul ecx, dword [0x141ddac0c]
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xde5777e4
je 0x1400d563b
mov eax, 0xe2d30ae3
mov ecx, dword [0x141ddac10]
or ecx, dword [0x141ddac14]
xor ecx, 0x689d61d4
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x64c9391f
cmp ecx, 0xe267773d
jae 0x1400d565d
mov rdi, qword [r12 + 0x50]
nop word [rax + rax]
mov eax, dword [0x141ddac28]
xor edx, edx
div dword [0x141ddac2c]
imul eax, eax, 0xfdfa1ae0
or eax, 0xf50c0dd7
imul rax, rax, 0x22ab805d
shr rax, 0x3d
cmp eax, 0xd083e9cf
ja 0x1400d5690
mov rax, qword [r12 + 0x58]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x1400d5816
xor r15d, r15d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r13d, r13d
nop word [rax + rax]
mov rax, r13
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1400d57e7
add rax, rdi
nop word cs:[rax + rax]
mov ecx, dword [0x141ddac30]
imul ecx, dword [0x141ddac34]
and ecx, 0x746d6bde
imul rcx, rcx, 0x66cee0bd
shr rcx, 0x3d
imul ecx, ecx, 0xbeed2152
cmp ecx, 0x3d67b7da
je 0x1400d5700
mov ecx, dword [0x141ddac38]
xor ecx, dword [0x141ddac3c]
or ecx, 0xb264655e
add ecx, 0xfbda7c5d
cmp ecx, 0xd54b613d
jbe 0x1400d5760
mov rcx, qword [0x141dde6e0]
nop word cs:[rax + rax]
mov ecx, dword [0x141ddac40]
and ecx, dword [0x141ddac44]
xor ecx, 0x1002420
or ecx, 0xeeffdb53
mov rbx, qword [rax + 8]
mov r14, qword [0x141dde6e0]
cmp ecx, 0xc4e6cc08
jb 0x1400d5760
mov eax, dword [0x141ddac48]
imul eax, dword [0x141ddac4c]
add eax, 0xc11b0d22
or eax, 0x88073850
cmp eax, 0x4491bed6
jb 0x1400d5801
nop dword [rax]
mov eax, dword [0x141ddac50]
xor eax, dword [0x141ddac54]
add eax, 0xd2734616
or eax, 0x2cd635ee
imul esi, eax, 0xfddb5a72
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
cmp esi, 0x7766e878
jb 0x1400d5801
inc r13
nop word [rax + rax]
test r15b, r15b
jne 0x1400d57f0
cmp r13, qword [rbp + 0x78]
jne 0x1400d56e0
jmp 0x1400d5816
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
jmp 0x1400d57b0
mov rax, qword [rbp + 0x50]
cmp qword [rax], 0
mov r12, qword [rbp + 0x80]
movabs rbx, 0x8000000000000000
mov r14, qword [rbp + 0x60]
je 0x1400d5935
xor eax, eax
test al, al
je 0x1400d58cd
jmp 0x1400d58f3
cmp qword [rbp + 0x38], 0
mov r12, qword [rbp + 0x80]
mov r14, qword [rbp + 0x60]
je 0x1400d59ce
mov rsi, qword [0x141dde6e0]
mov eax, dword [0x141ddacc8]
xor eax, dword [0x141ddaccc]
add eax, 0x41328abb
mov ecx, 0x98ce266f
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xd253eaa
jne 0x1400d5952
jmp 0x1400d598c
ud2
mov eax, dword [0x141ddac58]
xor edx, edx
div dword [0x141ddac5c]
or eax, 0x88aab273
add eax, 0xaf30a401
mov rcx, qword [0x141dde6e0]
cmp eax, 0xa186d17
jae 0x1400d58fc
mov rax, qword [0x141dde6e0]
jmp 0x1400d58cd
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov eax, dword [0x141ddac60]
xor edx, edx
div dword [0x141ddac64]
and eax, 0xa7fa8821
imul eax, eax, 0x7a6e3e02
add eax, 0x38334bda
cmp eax, 0xdd471ac6
ja 0x1400d5910
mov qword [r12 + 0x48], 0
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
jmp 0x1400d59ce
mov eax, dword [0x141ddacd0]
xor edx, edx
div dword [0x141ddacd4]
mov edi, eax
add edi, 0x56f36937
and edi, 0xfaf23a01
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x2f79ea78
jae 0x1400d59a4
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d5952
mov eax, dword [0x141ddacd8]
mov ecx, dword [0x141ddacdc]
add eax, ecx
add eax, 0xc54dd882
imul rax, rax, 0x1e9dcb05
shr rax, 0x3a
add eax, 0x43925ca9
cmp eax, 0xef9509d0
ja 0x1400d59a4
mov r9d, dword [rbp + 0x90]
nop word cs:[rax + rax]
mov eax, dword [0x141ddad28]
xor eax, dword [0x141ddad2c]
add eax, 0xfdeac5d2
or eax, 0xfb3ec6d2
and eax, 0xff3fe7f6
cmp eax, 0xc0b59d64
je 0x1400d59e0
nop word cs:[rax + rax]
mov eax, dword [0x141ddad30]
and eax, dword [0x141ddad34]
xor eax, 0x105a3488
and eax, 0x547e3dc8
cmp eax, 0x11f2d89a
jb 0x1400d5a10
lea rsi, [r12 + 0x98]
mov eax, dword [rbp + 0x68]
test eax, eax
je 0x1400d5a46
cmp eax, 1
jne 0x1400d5a4a
mov dil, 1
jmp 0x1400d5a87
xor edi, edi
jmp 0x1400d5a87
cmp eax, 2
jne 0x1400d5ab9
mov rax, qword [rsi]
nop word cs:[rax + rax]
mov ecx, dword [0x141ddad40]
add ecx, dword [0x141ddad44]
or ecx, 0xed87839c
imul ecx, ecx, 0xa6e9e7b
cmp rax, rbx
sete dil
cmp ecx, 0x4cf11af5
je 0x1400d5a60
lea rbx, [r12 + 0xb8]
test r9d, r9d
je 0x1400d5ae1
cmp r9d, 1
je 0x1400d5aee
cmp dword [rbp + 0x90], 2
jne 0x1400d5f46
movabs rax, 0x8000000000000000
cmp qword [rbx], rax
sete al
jmp 0x1400d5ae3
mov eax, dword [0x141ddad38]
sub eax, dword [0x141ddad3c]
and eax, 0xe990c903
imul eax, eax, 0x5eabd51a
add eax, 0x10db1290
cmp eax, 0xf7eaedc7
ja 0x1400d5ab9
jmp 0x1400d45ee
xor eax, eax
or al, dil
cmp al, 1
jne 0x1400d35c5
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x88]
mov r8, qword [rbp - 0x48]
mov r9, qword [rbp + 0x70]
call fcn.1400d83d0
add rsp, 0x20
mov eax, dword [0x141ddad48]
xor edx, edx
div dword [0x141ddad4c]
nop dword [rax]
mov eax, dword [0x141ddad50]
imul eax, dword [0x141ddad54]
xor eax, 0x16ada382
imul eax, eax, 0xf9a97f8
cmp eax, 0x63e12148
ja 0x1400d5b20
mov rax, qword [rbp + 0x48]
mov r11, qword [rax]
movabs rax, 0x8000000000000000
cmp r11, rax
jne 0x1400d5bc0
mov rax, qword [rsi]
shl rax, 1
test rax, rax
je 0x1400d5b7f
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141ddad88]
xor edx, edx
div dword [0x141ddad8c]
imul eax, eax, 0x37eb076c
add eax, 0x4ab07389
cmp eax, 0x6bc70dc4
movabs rcx, 0x8000000000000000
jbe 0x1400d5f51
jmp 0x1400d5f72
mov eax, dword [0x141ddad58]
and eax, dword [0x141ddad5c]
shr eax, 5
imul rax, rax, 0x46f7201
shr rax, 0x35
or eax, 0x9cea8744
cmp eax, 0xccb5f30d
je 0x1400d5bc0
mov rax, qword [rbp + 0x48]
mov r15, qword [rax + 8]
nop
mov eax, dword [0x141ddad60]
imul eax, dword [0x141ddad64]
or eax, 0x5171c49d
imul eax, eax, 0xc47fe626
or eax, 0x891ec729
cmp eax, 0xe94538c9
ja 0x1400d5bf0
mov dword [rbp + 0x70], edi
mov rax, qword [rbp + 0x48]
mov rcx, qword [rax + 0x10]
test rcx, rcx
mov qword [rbp + 0x78], r11
je 0x1400d5cdb
lea r8, [r15 + rcx*2]
xor r13d, r13d
mov r9d, 0xb2d9ff83
mov r10, r15
nop dword [rax]
mov eax, dword [0x141ddad68]
imul eax, dword [0x141ddad6c]
xor eax, 0x9b6f4968
add eax, 0xeecc7062
imul rax, rax, 0x5a999f7
shr rax, 0x38
cmp eax, 0x2d873550
ja 0x1400d5c40
cmp word [r10], 0
je 0x1400d5cde
add r10, 2
inc r13
nop word [rax + rax]
mov eax, dword [0x141ddad70]
xor edx, edx
div dword [0x141ddad74]
add eax, 0x733f84bb
imul rax, r9
shr rax, 0x3f
imul eax, eax, 0xa209761e
cmp eax, 0xa82104fd
ja 0x1400d5c80
nop dword [rax + rax]
mov eax, dword [0x141ddad78]
xor eax, dword [0x141ddad7c]
and eax, 0x72332e2f
add eax, 0xbe2a92a8
cmp eax, 0x366cd3e0
jb 0x1400d5cb0
cmp r10, r8
jne 0x1400d5c40
mov r13, rcx
jmp 0x1400d5cde
xor r13d, r13d
mov qword [rbp + 0x50], rsi
xor eax, eax
test al, al
je 0x1400d5d20
sub rsp, 0x20
mov rsi, qword [rbp + 0x10]
mov rcx, rsi
mov rdx, r15
mov r8, r13
call fcn.14008ea20
add rsp, 0x20
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x90]
mov r9, rbx
call fcn.1400d91a0
add rsp, 0x20
mov esi, dword [rbp + 0x90]
mov rdi, rbx
mov rbx, qword [rbp + 0x10]
nop dword [rax]
mov eax, dword [0x141ddad80]
sub eax, dword [0x141ddad84]
imul r12d, eax, 0x20221bd
add r12d, 0x2d6fa503
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r13
call fcn.14008ea20
add rsp, 0x20
mov r14, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
sub rsp, 0x20
mov ecx, esi
mov rdx, r14
mov r9, rdi
call fcn.1400d91a0
add rsp, 0x20
cmp r12d, 0xbb236f22
jb 0x1400d5d30
mov qword [rbp + 0x48], r15
cmp byte [rbp + 0x70], 0
je 0x1400d5ecc
mov rax, qword [rbp + 0x10]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rsi, qword [rbp - 0x58]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov r15, qword [rbp + 0x50]
mov rax, qword [r15]
shl rax, 1
test rax, rax
mov r12, qword [rbp + 0x80]
je 0x1400d5eb1
mov eax, dword [0x141ddada0]
xor edx, edx
div dword [0x141ddada4]
mov ecx, 0xa5450a0b
mov eax, dword [0x141ddada8]
xor edx, edx
div dword [0x141ddadac]
imul rax, rcx
shr rax, 0x3f
or eax, 0x5d7f35d0
cmp eax, 0xdfa4ffd4
ja 0x1400d5dd7
mov rdi, qword [r12 + 0xa0]
mov eax, dword [0x141ddadb0]
and eax, dword [0x141ddadb4]
cmp eax, 0x8ce8f0b5
jne 0x1400d5e2e
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141ddadb8]
add eax, dword [0x141ddadbc]
imul rcx, rax, 0x9b9f59b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
add eax, 0xa7bce2bd
imul r14, rax, 0x31b279a1
shr r14, 0x3d
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r14d, 0x6cdb23b8
je 0x1400d5e35
mov eax, 0xb02a3d3d
mov ecx, dword [0x141ddadc0]
and ecx, dword [0x141ddadc4]
xor ecx, 0xed5f00cf
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xbba21217
cmp ecx, 0x54c213ac
ja 0x1400d5e89
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
mov al, 1
test al, al
je 0x1400d5ec3
jmp 0x1400d6000
mov eax, dword [0x141ddadc8]
xor edx, edx
div dword [0x141ddadcc]
mov r12, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x10]
mov eax, dword [0x141ddadd0]
and eax, dword [0x141ddadd4]
imul rax, rax, 0x1bc051cb
shr rax, 0x3b
imul eax, eax, 0xdf7e4cdb
xor eax, 0x419bde03
cmp eax, 0xcce7f9a5
ja 0x1400d5ee5
cmp qword [rcx], 0
je 0x1400d6000
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141ddadd8]
and eax, dword [0x141ddaddc]
and eax, 0x78440424
or eax, 0x87a1fbcb
xor eax, 0xd706fa31
cmp eax, 0xd31207bc
jbe 0x1400d5fae
jmp 0x1400d5fe4
xor eax, eax
test al, al
jne 0x1400d5f48
jmp 0x1400d45ee
mov eax, dword [0x141ddad90]
imul eax, dword [0x141ddad94]
or eax, 0xdbbd43fe
and eax, 0xfbfffbfe
mov qword [rsi], rcx
cmp eax, 0xdea3fa67
jbe 0x1400d5f80
mov qword [rsi], rcx
jmp 0x1400d5f51
mov eax, dword [0x141ddad98]
imul eax, dword [0x141ddad9c]
add eax, 0x57bbd3c
xor eax, 0x3fda2f47
imul rax, rax, 0x3e95b72b
shr rax, 0x3d
cmp eax, 0xabe1e483
jae 0x1400d5f80
jmp 0x1400d60c8
mov ebx, dword [0x141ddade0]
sub ebx, dword [0x141ddade4]
or ebx, 0xb897b6ad
and ebx, 0xf997b6bf
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x5a46ac44
jne 0x1400d6000
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d5fae
mov eax, dword [0x141ddade8]
add eax, dword [0x141ddadec]
xor eax, 0x81491423
and eax, 0xa1593e3b
cmp eax, 0xad2a0748
ja 0x1400d6000
cmp qword [rbp + 0x78], 0
mov r14, qword [rbp + 0x60]
je 0x1400d60c8
mov eax, dword [0x141ddadf0]
and eax, dword [0x141ddadf4]
cmp eax, 0xf095885a
jne 0x1400d6050
mov rax, qword [0x141dde6e0]
nop word cs:[rax + rax]
mov eax, dword [0x141ddadf8]
xor eax, dword [0x141ddadfc]
xor eax, 0x86131a00
and eax, 0xeedbfa3a
imul eax, eax, 0xeecf97a0
mov rcx, qword [0x141dde6e0]
cmp eax, 0x3548e8fc
jb 0x1400d6050
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xdeccfbed
nop word cs:[rax + rax]
mov ecx, dword [0x141ddae00]
xor ecx, dword [0x141ddae04]
add ecx, 0xd76f42de
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x3eda5a60
cmp ecx, 0xf0e1d2f1
ja 0x1400d60a0
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400d60d0
jmp 0x1400d35c5
mov eax, dword [0x141ddaed8]
imul eax, dword [0x141ddaedc]
add eax, 0xa9eda405
imul rcx, rax, 0x1667111b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
mov r15, qword [0x141dde6e0]
cmp eax, 0x89c56c3c
jbe 0x1400d6116
mov rax, qword [0x141dde6e0]
jmp 0x1400d60d9
mov eax, dword [0x141ddaee0]
or eax, dword [0x141ddaee4]
cmp eax, 0x3fe953d6
je 0x1400d6159
mov esi, dword [0x141ddaee8]
add esi, dword [0x141ddaeec]
or esi, 0xde70a92f
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xc1b66639
jne 0x1400d6171
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d6129
mov eax, dword [0x141ddaef0]
sub eax, dword [0x141ddaef4]
or eax, 0xedc1db5d
and eax, 0xffebffff
cmp eax, 0x1189de65
jbe 0x1400d6171
nop
mov eax, dword [0x141ddaf00]
xor eax, dword [0x141ddaf04]
add eax, 0x7faeed1d
xor eax, 0x782d0012
and eax, 0x782d2313
cmp eax, 0x6f2508f
jb 0x1400d6190
mov r15, qword [rbx + 0x38]
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400d61c0
nop word cs:[rax + rax]
mov eax, dword [0x141ddaf08]
imul eax, dword [0x141ddaf0c]
imul rax, rax, 0x15e9ae31
shr rax, 0x3c
or eax, 0x50026610
cmp eax, 0x90b58254
ja 0x1400d61d0
mov rsi, qword [rbx + 0x40]
test rsi, rsi
je 0x1400d62b9
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r12d, r12d
nop dword [rax]
mov eax, dword [0x141ddaf10]
imul eax, dword [0x141ddaf14]
imul eax, eax, 0xb43c780b
cmp eax, 0xaf89304f
je 0x1400d6210
mov rcx, r12
shl rcx, 5
cmp qword [r15 + rcx], 0
je 0x1400d6285
add rcx, r15
mov eax, dword [0x141ddaf18]
xor edx, edx
div dword [0x141ddaf1c]
mov eax, dword [0x141ddaf20]
add eax, dword [0x141ddaf24]
xor eax, 0xd5abcb28
cmp eax, 0x741c6999
ja 0x1400d6249
mov r8, qword [rcx + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
nop dword [rax + rax]
test dil, dil
jne 0x1400d6280
inc r12
mov eax, dword [0x141ddaf28]
xor eax, dword [0x141ddaf2c]
add eax, 0x4117998b
or eax, 0x15ea8a14
imul rax, rax, 0x47b391d9
shr rax, 0x3e
cmp eax, 0xf665ad39
ja 0x1400d6288
cmp r12, rsi
jne 0x1400d6210
movabs rbx, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141ddaf30]
xor edx, edx
div dword [0x141ddaf34]
cmp eax, 0x66bc83d8
je 0x1400d62d0
mov rax, qword [r13]
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1400d62f0
nop word cs:[rax + rax]
mov ecx, dword [0x141ddaf38]
add ecx, dword [0x141ddaf3c]
and ecx, 0xdc8a34af
imul ecx, ecx, 0x8ce6e133
xor ecx, 0x5e632741
cmp ecx, 0x9605eb6b
ja 0x1400d6300
test rax, rax
je 0x1400d6786
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141ddaf40]
sub eax, dword [0x141ddaf44]
add eax, 0x7824834f
or eax, 0x9cb3c20a
cmp eax, 0x7c3af8f0
jne 0x1400d6732
jmp 0x1400d676e
mov eax, dword [0x141ddae10]
add eax, dword [0x141ddae14]
shr eax, 1
imul rax, rax, 0x42485019
shr rax, 0x3d
imul esi, eax, 0x2133accc
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x814c4c10
jne 0x1400d63b0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d635c
mov eax, dword [0x141ddae18]
add eax, dword [0x141ddae1c]
xor eax, 0x930a4
and eax, 0x3619f0a7
imul eax, eax, 0x37a2e930
cmp eax, 0x3dba4efb
ja 0x1400d63b0
nop word cs:[rax + rax]
mov eax, dword [0x141ddae20]
imul eax, dword [0x141ddae24]
or eax, 0xe3cc7dde
xor eax, 0xcdcb3778
add eax, 0x3d4f5330
cmp eax, 0x2a192c2f
jbe 0x1400d63e0
nop word cs:[rax + rax]
mov eax, dword [0x141ddae38]
and eax, dword [0x141ddae3c]
or eax, 0xee5933
imul eax, eax, 0x7149381a
or eax, 0xa3b241ae
cmp eax, 0x163e1ce5
jb 0x1400d6410
nop word cs:[rax + rax]
mov eax, dword [0x141ddae40]
xor eax, dword [0x141ddae44]
xor eax, 0x35c225f
imul rcx, rax, 0x3cda7297
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x7fa251df
jae 0x1400d6440
xor eax, eax
mov r14, qword [rbp + 0x40]
nop word cs:[rax + rax]
test al, al
jne 0x1400d6480
movzx eax, byte [r14 + 8]
lea rdi, [r12 + 0x60]
nop
mov ecx, dword [0x141ddb290]
xor ecx, dword [0x141ddb294]
add ecx, 0xc1379d1
or ecx, 0xaec249b6
and ecx, 0xaed7e9be
cmp ecx, 0x513f601e
je 0x1400d6490
mov r14, qword [rbp - 0x38]
nop word [rax + rax]
mov ecx, dword [0x141ddb298]
imul ecx, dword [0x141ddb29c]
and ecx, 0x7cfe9aa5
cmp ecx, 0x36b65910
je 0x1400d64c0
test eax, eax
je 0x1400d7c42
cmp eax, 1
je 0x1400d64fd
mov rax, qword [rdi]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400d64f0
cmp rax, rbx
jne 0x1400d7c42
mov rcx, qword [r12 + 0xf8]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb2b0]
xor edx, edx
div dword [0x141ddb2b4]
or eax, 0x655e980e
add eax, 0xf39149fe
cmp eax, 0xb1307bf
jb 0x1400d6510
test rcx, rcx
je 0x1400d6699
mov rsi, qword [rcx + 0x10]
xor eax, eax
test al, al
je 0x1400d656e
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r15
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
mov rbx, qword [sym.imp.psapi.dll_GetModuleFileNameExW]
nop word cs:[rax + rax]
mov r14d, dword [0x141ddb2c8]
imul r14d, dword [0x141ddb2cc]
add r14d, 0xa669789e
xor r14d, 0x82d6536a
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r15
mov r9d, 0x105
call rbx
add rsp, 0x20
cmp r14d, 0x8cf793bc
ja 0x1400d6580
mov esi, 2
xor ecx, ecx
mov r14, qword [rbp - 0x38]
nop dword [rax]
cmp word [r15 + rsi*2 - 4], 0
je 0x1400d66cc
cmp word [r15 + rsi*2 - 2], 0
je 0x1400d66d2
mov eax, dword [0x141ddb2d0]
or eax, dword [0x141ddb2d4]
imul eax, eax, 0x795c195d
add eax, 0xe6a2d1b
cmp eax, 0x667f6353
ja 0x1400d65fa
mov eax, dword [0x141ddb2d8]
or eax, dword [0x141ddb2dc]
and eax, 0x446113ec
add eax, 0x9b6c873d
imul rax, rax, 0x145c8c7d
shr rax, 0x3b
cmp eax, 0x2bc20254
je 0x1400d6618
movzx r8d, word [r15 + rsi*2]
mov eax, dword [0x141ddb2e0]
xor edx, edx
div dword [0x141ddb2e4]
mov eax, dword [0x141ddb2e8]
imul eax, dword [0x141ddb2ec]
xor eax, 0xb0278536
imul eax, eax, 0xfe02b183
or eax, 0x49e9bc5a
cmp eax, 0x9dedaf90
ja 0x1400d6653
test r8w, r8w
je 0x1400d66e0
add rsi, 3
add rcx, 3
cmp rsi, 0x107
jne 0x1400d65e0
mov esi, 0x105
jmp 0x1400d670c
mov eax, dword [0x141ddb2c0]
xor edx, edx
div dword [0x141ddb2c4]
imul eax, eax, 0x37ad8ef4
add eax, 0x2622192a
cmp eax, 0x8193ed0c
jbe 0x1400d66bc
mov qword [r14], rbx
mov al, 1
nop
mov qword [r14], rbx
test al, al
je 0x1400d66c0
jmp 0x1400d7d00
add rsi, 0xfffffffffffffffe
jmp 0x1400d66e0
dec rsi
nop word cs:[rax + rax]
mov eax, dword [0x141ddb2f0]
add eax, dword [0x141ddb2f4]
imul eax, eax, 0xc1028186
shr eax, 3
imul rax, rax, 0x23c21837
shr rax, 0x33
xor eax, 0x968dfef8
cmp eax, 0x73f82a75
jb 0x1400d66e0
mov eax, dword [0x141ddb2f8]
sub eax, dword [0x141ddb2fc]
add eax, 0x4728587a
or eax, 0x744435e2
cmp eax, 0x710e4d0
jne 0x1400d7cbd
jmp 0x1400d7ce7
mov eax, dword [0x141ddaf48]
xor edx, edx
div dword [0x141ddaf4c]
add eax, 0x51db2948
or eax, 0x47aefa36
imul esi, eax, 0x4e422afb
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x7686ea03
jae 0x1400d6786
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d6732
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [r13], xmm0
mov r8d, dword [rbp + 0x90]
mov r9d, dword [rbp + 0x68]
mov r10d, dword [rbp + 0x58]
nop dword [rax]
mov eax, dword [0x141ddaf50]
imul eax, dword [0x141ddaf54]
and eax, 0x62e8020
cmp eax, 0xb6c7a65b
je 0x1400d67b0
jmp 0x1400d68ba
mov eax, dword [str.VX6Oj]
sub eax, dword [0x141ddafbc]
xor eax, 0xa00812f7
add eax, 0xcc0d9c9e
imul rax, rax, 0x2034d57
shr rax, 0x39
mov rdi, qword [0x141dde6e0]
cmp eax, 0x7ae018fc
jbe 0x1400d6806
mov rax, qword [0x141dde6e0]
jmp 0x1400d67ce
mov eax, dword [0x141ddafc0]
xor edx, edx
div dword [0x141ddafc4]
imul eax, eax, 0x3b17343b
xor eax, 0x24080009
and eax, 0x251e2209
cmp eax, 0x5d958646
ja 0x1400d685b
mov eax, dword [0x141ddafc8]
add eax, dword [0x141ddafcc]
imul esi, eax, 0x13e89bd4
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x5ef277ab
jne 0x1400d6873
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d682b
mov rax, qword [r12 + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [r12]
movups xmmword [r13], xmm0
mov r8d, dword [rbp + 0x90]
mov r9d, dword [rbp + 0x68]
mov r10d, dword [rbp + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141ddafd0]
xor edx, edx
div dword [0x141ddafd4]
or eax, 0x79fb1bfb
cmp eax, 0x5b1e7eef
je 0x1400d68a0
mov r12, qword [rbp + 0x80]
lea rcx, [r12 + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141ddafd8]
and eax, dword [0x141ddafdc]
add eax, 0x42cf51bc
and eax, 0xff7f5fc8
shr eax, 3
imul rax, rax, 0x122eb775
shr rax, 0x39
cmp eax, 0x5d0447de
ja 0x1400d68d0
mov r15, qword [rbp - 0x28]
mov r13, qword [rbp + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141ddafe0]
imul eax, dword [0x141ddafe4]
xor eax, 0x1af84d69
add eax, 0x91f72878
xor eax, 0x627b2812
cmp eax, 0x51bacf37
jb 0x1400d6910
test r10d, r10d
je 0x1400d7394
cmp r10d, 1
je 0x1400d699f
nop word cs:[rax + rax]
mov eax, dword [0x141ddafe8]
or eax, dword [0x141ddafec]
imul eax, eax, 0xd2c285c2
and eax, 0x92a0bd76
cmp eax, 0xbb37be10
ja 0x1400d6950
nop
mov eax, dword [0x141ddaff0]
and eax, dword [0x141ddaff4]
xor eax, 0x24bfa34a
imul eax, eax, 0x41754ddf
and eax, 0xbca00c52
cmp eax, 0xff1fe710
je 0x1400d6970
cmp qword [r12 + 0x58], 0
jne 0x1400d7394
mov qword [rbp + 0x70], rcx
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0x88]
mov rdx, r14
mov rdi, qword [rbp - 0x80]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
je 0x1400d6a00
mov rsi, qword [rdi]
mov eax, dword [0x141ddb008]
or eax, dword [0x141ddb00c]
mov rdi, qword [rdi + 0x18]
add eax, 0x596d92fc
and eax, 0x80440208
cmp eax, 0x37cc6df3
mov r15, qword [rbp + 0x88]
jne 0x1400d6a40
jmp 0x1400d6a82
mov eax, dword [0x141ddaff8]
xor eax, dword [0x141ddaffc]
xor eax, 0x4a14faf2
add eax, 0x9310147d
cmp eax, 0x61c96e97
jb 0x1400d6a00
nop dword [rax]
mov eax, dword [0x141ddb000]
add eax, dword [0x141ddb004]
imul eax, eax, 0xfd007d0
add eax, 0xe397f280
cmp eax, 0xea92b505
ja 0x1400d6a20
jmp 0x1400d6abe
mov eax, dword [0x141ddb010]
mov ecx, dword [0x141ddb014]
lea ebx, [rax + rcx]
add ebx, 0xf1b9b21c
and ebx, 0xc9d4b413
mov r9, rsi
sub r9, r14
add r9, rdi
sub rsp, 0x20
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.1400d83d0
add rsp, 0x20
cmp ebx, 0xfbbd75fa
jne 0x1400d6aa3
mov r9, rsi
sub r9, r14
add r9, rdi
sub rsp, 0x20
mov rcx, r13
mov rdx, r15
mov r8, r14
call fcn.1400d83d0
add rsp, 0x20
jmp 0x1400d6a40
mov rcx, qword [r13]
movabs rax, 0x8000000000000000
cmp rcx, rax
mov r15, qword [rbp - 0x28]
jne 0x1400d6c5a
mov eax, dword [0x141ddb018]
xor edx, edx
div dword [0x141ddb01c]
nop dword [rax]
mov eax, dword [0x141ddb020]
or eax, dword [0x141ddb024]
or eax, 0x9e6e5ac1
imul eax, eax, 0x74d1924f
and eax, 0x8e9c3872
cmp eax, 0x555fd242
jb 0x1400d6ad0
mov rdi, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
test rsi, rsi
je 0x1400d6b9b
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rax, rbx
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1400d6b39
add rax, rdi
mov r8, qword [rax + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
inc rbx
mov eax, dword [0x141ddb028]
xor edx, edx
div dword [0x141ddb02c]
nop word [rax + rax]
mov eax, dword [0x141ddb030]
and eax, dword [0x141ddb034]
imul eax, eax, 0x6c663be8
and eax, 0x46380000
cmp eax, 0xdc47758a
je 0x1400d6b50
nop
mov eax, dword [0x141ddb038]
or eax, dword [0x141ddb03c]
or eax, 0x50000000
xor eax, 0x2000010
and eax, 0xd2818010
cmp eax, 0xd43741f4
je 0x1400d6b70
cmp rbx, rsi
jne 0x1400d6b10
mov ecx, 0x8f746e05
mov eax, dword [0x141ddb040]
xor edx, edx
div dword [0x141ddb044]
imul rax, rcx
shr rax, 0x3f
add eax, 0x2c9151af
cmp eax, 0xb14841fc
ja 0x1400d6ba0
mov rdx, qword [rbp + 0x70]
mov rax, qword [rdx]
nop dword [rax]
mov ecx, dword [0x141ddb048]
or ecx, dword [0x141ddb04c]
xor ecx, 0x211fe09d
imul rcx, rcx, 0x5526fded
shr rcx, 0x3d
cmp ecx, 0xca49ad2d
je 0x1400d6bd0
test rax, rax
movabs rbx, 0x8000000000000000
je 0x1400d6c22
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, qword [rbp + 0x70]
add rsp, 0x20
mov eax, dword [0x141ddb050]
and eax, dword [0x141ddb054]
mov qword [rdx], 0
and eax, 0x308a08a9
add eax, 0xd00d033a
cmp eax, 0xd443dd66
mov r8d, dword [rbp + 0x90]
mov r9d, dword [rbp + 0x68]
jbe 0x1400d72fe
jmp 0x1400d732d
mov qword [rbp - 0x30], rcx
mov eax, dword [0x141ddb060]
xor edx, edx
div dword [0x141ddb064]
xor eax, 0x48e0611f
imul eax, eax, 0xbfb5ec
cmp eax, 0x89c20ca5
jne 0x1400d6c87
mov qword [r12 + 0x58], 0
mov rax, qword [r13 + 8]
mov qword [rbp + 0x28], rax
mov rcx, r13
nop word cs:[rax + rax]
mov eax, dword [0x141ddb068]
xor eax, dword [0x141ddb06c]
add eax, 0xcfc37d09
xor eax, 0x88058a51
or eax, 0x76d2008e
mov r13, qword [rcx + 0x10]
mov r14, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
mov qword [r12 + 0x58], 0
cmp eax, 0x5ecaf1f9
jb 0x1400d6ca0
test rsi, rsi
je 0x1400d6e20
xor r8d, r8d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r15d, r15d
nop
mov eax, dword [0x141ddb078]
xor eax, dword [0x141ddb07c]
imul rax, rax, 0x5becb8d
shr rax, 0x3a
or eax, 0xd267f8a8
imul eax, eax, 0xddf82133
cmp eax, 0x4f7ddec0
ja 0x1400d6cf0
mov rax, r15
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400d6dcf
add rax, r14
mov rdi, qword [rax + 8]
mov eax, dword [0x141ddb080]
and eax, dword [0x141ddb084]
imul eax, eax, 0x73f950e1
or eax, 0x699bfef3
xor eax, 0xe34ae038
cmp eax, 0x9d863619
jbe 0x1400d6d70
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141ddb088]
xor edx, edx
div dword [0x141ddb08c]
xor eax, 0xe18644e4
imul ebx, eax, 0xeb46e88c
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp ebx, 0x210567d4
je 0x1400d6d70
xor r8d, r8d
nop dword [rax + rax]
mov eax, dword [0x141ddb090]
mov ecx, dword [0x141ddb094]
add eax, ecx
add eax, 0x96f31e77
and eax, 0x4408d506
cmp eax, 0xe596d414
ja 0x1400d6db0
inc r15
mov eax, dword [0x141ddb098]
xor edx, edx
div dword [0x141ddb09c]
test r8b, r8b
jne 0x1400d6de0
nop word cs:[rax + rax]
mov eax, dword [0x141ddb0a0]
xor edx, edx
div dword [0x141ddb0a4]
xor eax, 0x1f9a8157
imul eax, eax, 0x8cdac8f4
and eax, 0x603f1c64
cmp eax, 0x130360f3
jb 0x1400d6df0
cmp r15, rsi
jne 0x1400d6cf0
nop
mov eax, dword [0x141ddb070]
and eax, dword [0x141ddb074]
or eax, 0xffff7bbf
cmp eax, 0x71994f9e
je 0x1400d6e20
lea rbx, [r13*2]
xor esi, esi
xor r11d, r11d
xor ecx, ecx
mov r12, qword [rbp + 0x80]
mov r15, qword [rbp - 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb0a8]
xor edx, edx
div dword [0x141ddb0ac]
imul eax, eax, 0xf151b8cf
add eax, 0xcd6b50b
and eax, 0x79783888
cmp eax, 0x990965d2
ja 0x1400d6e60
cmp rcx, r13
je 0x1400d71e0
mov rax, qword [rbp + 0x28]
lea r9, [rax + rcx*2]
mov rax, rbx
sub rax, rcx
sub rax, rcx
xor r8d, r8d
mov rdx, r9
nop word cs:[rax + rax]
cmp word [r9 + r8*2], 0
je 0x1400d6ed0
test sil, sil
jne 0x1400d6eb8
add rdx, 2
inc r8
add rax, 0xfffffffffffffffe
jne 0x1400d6eb0
jmp 0x1400d71e0
mov eax, dword [0x141ddb0b0]
and eax, dword [0x141ddb0b4]
imul eax, eax, 0x15035b52
cmp eax, 0x21ee20a1
je 0x1400d6ed0
lea rdi, [r8 + rcx]
cmp rdi, rcx
jb 0x1400d72ad
mov eax, dword [0x141ddb0d0]
xor edx, edx
div dword [0x141ddb0d4]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb0d8]
add eax, dword [0x141ddb0dc]
or eax, 0x528ed0c6
imul eax, eax, 0x4887b062
and eax, 0x76786426
cmp eax, 0xf7629541
je 0x1400d6f10
cmp rdi, r13
ja 0x1400d72ce
lea rax, [r9 + r8*2]
mov rcx, r9
nop word cs:[rax + rax]
mov edx, dword [0x141ddb100]
mov r10d, dword [0x141ddb104]
add edx, r10d
add edx, 0x99c6efbb
shr edx, 2
imul rdx, rdx, 0x12b18be1
shr rdx, 0x39
xor edx, 0x226904b7
cmp edx, 0xc19818b6
ja 0x1400d6f50
cmp rcx, rax
je 0x1400d71e0
nop dword [rax + rax]
mov edx, dword [0x141ddb108]
xor edx, dword [0x141ddb10c]
or edx, 0x3018560
and edx, 0x23619d60
cmp edx, 0x9f6af205
je 0x1400d6f90
lea rdx, [rcx + 2]
mov r10d, dword [0x141ddb110]
sub r10d, dword [0x141ddb114]
imul r10d, r10d, 0x5bafda9d
imul r10, r10, 0x3ea410e3
shr r10, 0x3b
imul r10d, r10d, 0x20a23574
cmp r10d, 0xaf57f7a1
ja 0x1400d6fb4
movzx r10d, word [rcx]
mov ecx, dword [0x141ddb118]
xor ecx, dword [0x141ddb11c]
add ecx, 0x56a880c2
imul rcx, rcx, 0x3c6ec3eb
shr rcx, 0x3b
or ecx, 0xd78fa2dd
cmp ecx, 0x81912a91
jb 0x1400d6fe8
mov rcx, rdx
cmp r10w, 0x3d
jne 0x1400d6f50
mov qword [rbp + 8], r11
sub rsp, 0x20
mov rcx, qword [rbp]
mov rdx, r9
call fcn.14008ea20
add rsp, 0x20
mov rax, qword [rbp + 0x70]
mov rcx, qword [rax]
mov r9d, 0xa007d9d1
mov r10, qword [rbp + 8]
mov eax, dword [0x141ddb120]
xor edx, edx
div dword [0x141ddb124]
cmp eax, 0xda84c816
je 0x1400d704a
mov r8, qword [rbp]
mov eax, dword [0x141ddb128]
or eax, dword [0x141ddb12c]
imul eax, eax, 0xf9a1a320
cmp eax, 0xc99621f3
je 0x1400d7063
cmp r10, rcx
jne 0x1400d7134
mov qword [rbp + 0x48], rbx
mov eax, dword [0x141ddb130]
and eax, dword [0x141ddb134]
imul eax, eax, 0xa28031e8
or eax, 0x56fca4b6
add eax, 0x150cd730
cmp eax, 0x431b8000
mov rbx, qword [rbp + 0x70]
jb 0x1400d70e6
mov eax, dword [0x141ddb138]
imul eax, dword [0x141ddb13c]
or eax, 0xefec5b3f
imul r14, rax, 0x5c86e875
shr r14, 0x3e
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d8fa0
add rsp, 0x20
cmp r14d, 0x9d03bff5
jbe 0x1400d70f8
sub rsp, 0x20
mov rcx, rbx
call fcn.1400d8fa0
add rsp, 0x20
jmp 0x1400d70b0
mov r14, qword [r12 + 0x50]
mov eax, dword [0x141ddb140]
xor edx, edx
div dword [0x141ddb144]
add eax, 0x2ba0d56d
xor eax, 0x47489906
imul eax, eax, 0xed4161c2
cmp eax, 0xbcbda764
ja 0x1400d70fd
mov r8, qword [rbp]
mov rbx, qword [rbp + 0x48]
mov r9d, 0xa007d9d1
mov r10, qword [rbp + 8]
mov eax, dword [0x141ddb148]
mov ecx, dword [0x141ddb14c]
add eax, ecx
add eax, 0x9a73a3ba
imul rax, r9
shr rax, 0x3f
cmp eax, 0xd926ffdc
ja 0x1400d71b7
mov eax, dword [0x141ddb150]
or eax, dword [0x141ddb154]
imul ecx, eax, 0x956f7e16
or ecx, 0xa1160024
and ecx, 0xb77e0126
mov rdx, r10
shl rdx, 5
lea rax, [r10 + 1]
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmmword [r14 + rdx + 0x10], xmm1
movups xmmword [r14 + rdx], xmm0
mov qword [r12 + 0x58], rax
cmp ecx, 0xa016c037
jb 0x1400d71b7
inc rdi
mov r11, rax
mov rcx, rdi
cmp rdi, r13
jbe 0x1400d6e60
jmp 0x1400d45ee
mov rax, r10
shl rax, 5
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmmword [r14 + rax + 0x10], xmm1
movups xmmword [r14 + rax], xmm0
lea rax, [r10 + 1]
mov qword [r12 + 0x58], rax
jmp 0x1400d7156
mov eax, dword [0x141ddb0b8]
add eax, dword [0x141ddb0bc]
or eax, 0x14014008
and eax, 0x761d4108
cmp eax, 0xe0b8656
je 0x1400d71e0
movabs rbx, 0x8000000000000000
mov r8d, dword [rbp + 0x90]
mov r9d, dword [rbp + 0x68]
mov rcx, qword [rbp - 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb0c0]
sub eax, dword [0x141ddb0c4]
xor eax, 0x3584dc3f
add eax, 0x65205c49
or eax, 0xc8cbfd77
cmp eax, 0x27665829
je 0x1400d7220
test rcx, rcx
je 0x1400d7350
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9d, dword [rbp + 0x68]
mov r8d, dword [rbp + 0x90]
add rsp, 0x20
mov eax, 0x88333025
nop word cs:[rax + rax]
mov ecx, dword [0x141ddb0c8]
xor ecx, dword [0x141ddb0cc]
add ecx, 0x35812164
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xf8e2dab4
cmp ecx, 0xc287a0f
jbe 0x1400d7280
jmp 0x1400d7350
ud2
mov eax, dword [0x141ddb0e8]
xor eax, dword [0x141ddb0ec]
mov ecx, 0xd6c8b2c3
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xef2c5a64
cmp ecx, 0x3e2146a0
jne 0x1400d76e9
jmp 0x1400d7703
mov eax, dword [0x141ddb058]
and eax, dword [0x141ddb05c]
and eax, 0x420012c0
add eax, 0x65c06dc7
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
cmp eax, 0x94e844cd
jb 0x1400d7350
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
jmp 0x1400d72fe
mov eax, dword [0x141ddb158]
add eax, dword [0x141ddb15c]
and eax, 0x5c02481
cmp eax, 0xcb383982
je 0x1400d7350
nop dword [rax + rax]
mov eax, dword [0x141ddb160]
xor edx, edx
div dword [0x141ddb164]
add eax, 0xc045ff6f
or eax, 0xd4cfb29
and eax, 0xddccfb3f
cmp eax, 0x183babab
jb 0x1400d7370
lea r13, [r12 + 0x98]
nop dword [rax]
mov eax, dword [0x141ddb168]
or eax, dword [0x141ddb16c]
add eax, 0xf0ba8d73
imul rax, rax, 0x328c1e5
shr rax, 0x38
cmp eax, 0xc9903607
ja 0x1400d73a0
test r9d, r9d
je 0x1400d73d3
cmp r9d, 1
jne 0x1400d73d7
mov dil, 1
jmp 0x1400d7413
xor edi, edi
jmp 0x1400d7413
cmp r9d, 2
jne 0x1400d765a
cmp qword [r13], rbx
sete dil
nop dword [rax]
mov eax, dword [0x141ddb178]
or eax, dword [0x141ddb17c]
imul rax, rax, 0x35866341
shr rax, 0x3c
or eax, 0x84d6cbdc
cmp eax, 0x78a8fb30
jb 0x1400d73f0
lea r14, [r12 + 0xb8]
test r8d, r8d
je 0x1400d7465
cmp r8d, 1
je 0x1400d74b0
cmp r8d, 2
jne 0x1400d76bd
cmp qword [r14], rbx
sete cl
nop word [rax + rax]
mov eax, dword [0x141ddb188]
and eax, dword [0x141ddb18c]
and eax, 0xfdda7787
imul eax, eax, 0xd0d7fe24
add eax, 0xb2f34ac9
cmp eax, 0x7424b63f
jb 0x1400d7440
jmp 0x1400d7467
xor ecx, ecx
mov eax, dword [0x141ddb190]
xor edx, edx
div dword [0x141ddb194]
or cl, dil
nop dword [rax + rax]
mov eax, dword [0x141ddb198]
or eax, dword [0x141ddb19c]
add eax, 0xd4181c41
xor eax, 0xae2b63b
imul rax, rax, 0x76e3e7c1
shr rax, 0x3e
cmp eax, 0x1d62960a
ja 0x1400d7480
test cl, cl
je 0x1400d7be0
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x60]
mov r9, qword [rbp + 0x78]
call fcn.1400d83d0
add rsp, 0x20
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d74e0
mov r9, qword [r15]
cmp r9, rbx
jne 0x1400d75d8
mov eax, 0xca14bbcf
nop word cs:[rax + rax]
mov ecx, dword [0x141ddb1c0]
sub ecx, dword [0x141ddb1c4]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x286314dd
xor ecx, 0x35782bd0
cmp ecx, 0xec09c4ba
ja 0x1400d7500
mov rax, qword [r13]
nop dword [rax]
mov ecx, dword [0x141ddb1c8]
or ecx, dword [0x141ddb1cc]
imul ecx, ecx, 0x32fdf7e
and ecx, 0x40001842
cmp ecx, 0x12b729a2
ja 0x1400d7530
shl rax, 1
test rax, rax
je 0x1400d79c5
mov eax, dword [0x141ddb1d0]
xor edx, edx
div dword [0x141ddb1d4]
nop word [rax + rax]
mov eax, dword [0x141ddb1d8]
xor eax, dword [0x141ddb1dc]
xor eax, 0x508936ec
imul rcx, rax, 0x47711c6b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x477395b1
je 0x1400d7570
mov rsi, qword [r12 + 0xa0]
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141ddb1e0]
xor eax, dword [0x141ddb1e4]
imul eax, eax, 0x661f1814
and eax, 0x22bc63d0
imul eax, eax, 0xa44805de
cmp eax, 0x5de7ed9c
jae 0x1400d7972
jmp 0x1400d79ad
mov rsi, qword [r15 + 8]
mov rcx, qword [r15 + 0x10]
lea r8, [rsi + rcx*2]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb1a0]
xor edx, edx
div dword [0x141ddb1a4]
cmp eax, 0xc485ce4e
je 0x1400d75f0
test rcx, rcx
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x78], r9
mov dword [rbp + 0x70], edi
je 0x1400d7682
xor ebx, ebx
mov rax, rsi
nop word [rax + rax]
cmp word [rax], 0
je 0x1400d7684
add rax, 2
inc rbx
nop dword [rax]
mov edx, dword [0x141ddb1a8]
and edx, dword [0x141ddb1ac]
or edx, 0xcfffdff9
and edx, 0xcfffdffb
cmp edx, 0x97e3f1f1
jb 0x1400d7630
cmp rax, r8
jne 0x1400d7620
mov rbx, rcx
jmp 0x1400d7684
mov eax, dword [0x141ddb170]
and eax, dword [0x141ddb174]
add eax, 0x50062b2c
xor eax, 0x109b8124
imul eax, eax, 0x475558b4
cmp eax, 0x3b05937a
je 0x1400d765a
jmp 0x1400d45ee
xor ebx, ebx
mov eax, dword [0x141ddb1b0]
imul eax, dword [0x141ddb1b4]
imul rax, rax, 0x5e64c50f
shr rax, 0x3e
or eax, 0xa9ee6b82
xor eax, 0x78e60af5
cmp eax, 0x8367cc34
mov r15, qword [rbp - 0x20]
mov r13d, dword [rbp + 0x90]
jae 0x1400d772a
jmp 0x1400d7781
mov eax, 0xeb2ef413
mov ecx, dword [0x141ddb180]
sub ecx, dword [0x141ddb184]
imul rcx, rax
shr rcx, 0x3c
or ecx, 0xdffadfee
cmp ecx, 0x6a13b813
je 0x1400d76c2
jmp 0x1400d45ee
mov eax, dword [0x141ddb0f0]
or eax, dword [0x141ddb0f4]
or eax, 0xfefbffff
ud2
ud2
mov eax, dword [0x141ddb1b8]
and eax, dword [0x141ddb1bc]
imul r12d, eax, 0x868f514e
add r12d, 0xa40a8dc8
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call fcn.14008ea20
add rsp, 0x20
mov rdi, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, r13d
mov rdx, rdi
mov r9, r14
call fcn.1400d91a0
add rsp, 0x20
cmp r12d, 0x5039056
jae 0x1400d77b7
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call fcn.14008ea20
add rsp, 0x20
mov rdx, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, r13d
mov r9, r14
call fcn.1400d91a0
add rsp, 0x20
jmp 0x1400d772a
cmp byte [rbp + 0x70], 0
je 0x1400d7887
mov rax, qword [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rdi, qword [rbp - 0x70]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rbx, qword [rbp + 0x68]
mov rax, qword [rbx]
mov ecx, 0xd91d40c5
mov r12, qword [rbp + 0x80]
nop word [rax + rax]
mov edx, dword [0x141ddb1f8]
imul edx, dword [0x141ddb1fc]
or edx, 0xf8597e80
imul rdx, rcx
shr rdx, 0x3e
xor edx, 0x62d31596
cmp edx, 0x24bec989
jb 0x1400d77f0
shl rax, 1
test rax, rax
je 0x1400d793b
mov eax, dword [0x141ddb200]
and eax, dword [0x141ddb204]
add eax, 0x417c5bbd
or eax, 0x89568eef
and eax, 0xfdf7feff
cmp eax, 0xae330fb9
jb 0x1400d7825
mov r8, qword [r12 + 0xa0]
mov eax, dword [0x141ddb208]
xor edx, edx
div dword [0x141ddb20c]
or eax, 0x50200812
add eax, 0x2278e331
imul rcx, rax, 0x1ee8e273
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
cmp eax, 0xb4142326
jbe 0x1400d78ee
jmp 0x1400d7922
mov eax, dword [0x141ddb220]
xor edx, edx
div dword [0x141ddb224]
mov r12, qword [rbp + 0x80]
mov rcx, qword [rbp - 0x20]
mov eax, dword [0x141ddb228]
sub eax, dword [0x141ddb22c]
or eax, 0xffdbefda
cmp eax, 0x9a836fd0
je 0x1400d78a0
cmp qword [rcx], 0
je 0x1400d7abe
mov eax, dword [str.0__t_a]
or eax, dword [0x141ddb234]
and eax, 0x9a344bcc
imul eax, eax, 0xf05d530
add eax, 0xe0be35f0
cmp eax, 0xe1f669d2
jbe 0x1400d79fe
jmp 0x1400d7a1d
mov eax, dword [0x141ddb210]
imul eax, dword [0x141ddb214]
and eax, 0xe98567ac
imul eax, eax, 0x950b6422
mov edx, 0x8c6e87a3
imul rdx, rax
shr rdx, 0x3d
mov rcx, qword [0x141dde6e0]
cmp edx, 0x8b354d2
jbe 0x1400d792b
mov rax, qword [0x141dde6e0]
jmp 0x1400d78ee
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
nop dword [rax]
mov eax, dword [0x141ddb218]
and eax, dword [str.LpNC]
add eax, 0xe5f7ad45
and eax, 0x1540004
cmp eax, 0xf39817d9
jae 0x1400d7950
jmp 0x1400d7abe
mov eax, dword [0x141ddb1e8]
add eax, dword [0x141ddb1ec]
xor eax, 0xe9679564
imul ebx, eax, 0x41739bb3
or ebx, 0x27a1811
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0xaad50ad6
jbe 0x1400d79c5
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d7972
movabs rbx, 0x8000000000000000
mov qword [r13], rbx
nop word cs:[rax + rax]
mov eax, dword [0x141ddb1f0]
or eax, dword [0x141ddb1f4]
imul eax, eax, 0xb44bda6
cmp eax, 0x53ce145f
je 0x1400d79e0
jmp 0x1400d7bb0
mov eax, dword [0x141ddb238]
xor eax, dword [0x141ddb23c]
add eax, 0x79401f9e
mov rbx, qword [0x141dde6e0]
cmp eax, 0xa0db0915
jae 0x1400d7a26
mov rax, qword [0x141dde6e0]
jmp 0x1400d79fe
mov eax, dword [0x141ddb240]
or eax, dword [0x141ddb244]
imul eax, eax, 0x5c2592ec
add eax, 0x21a00eff
shr eax, 1
mov ecx, 0xa2639e21
imul rcx, rax
shr rcx, 0x38
cmp ecx, 0xf5e530e1
jbe 0x1400d7a6a
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb248]
xor edx, edx
div dword [0x141ddb24c]
shr eax, 1
imul r15, rax, 0x5753bc77
shr r15, 0x3c
or r15d, 0xffd9f9fd
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r14
add rsp, 0x20
cmp r15d, 0xa10ca6ff
jb 0x1400d7a80
xor eax, eax
test al, al
jne 0x1400d7ac0
cmp qword [rbp + 0x78], 0
movabs rbx, 0x8000000000000000
je 0x1400d7bb0
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141ddb250]
xor edx, edx
div dword [0x141ddb254]
add eax, 0xc85c7686
and eax, 0x492e53b5
add eax, 0xccd72b7e
cmp eax, 0x9e760a27
jbe 0x1400d7b1a
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb258]
xor edx, edx
div dword [0x141ddb25c]
imul r14d, eax, 0x62c40e38
or r14d, 0x7be7ce7f
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp r14d, 0xbaa486f1
je 0x1400d7b30
mov ecx, 0x904d4c01
movabs rbx, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141ddb260]
xor edx, edx
div dword [0x141ddb264]
imul eax, eax, 0x12ce39f3
imul rax, rcx
shr rax, 0x3d
cmp eax, 0x8eb122f0
je 0x1400d7b80
nop word cs:[rax + rax]
mov eax, dword [0x141ddb268]
mov ecx, dword [0x141ddb26c]
add eax, ecx
add eax, 0x6e376bc9
or eax, 0x2482440
and eax, 0x426e6542
cmp eax, 0x742a0cf7
je 0x1400d7bb0
nop word cs:[rax + rax]
mov eax, dword [0x141ddb270]
add eax, dword [0x141ddb274]
imul eax, eax, 0xf25a2f84
imul rax, rax, 0x1e2c2337
shr rax, 0x3c
imul eax, eax, 0xaa8d1ec
cmp eax, 0x25195798
ja 0x1400d7be0
mov r13, qword [rbp + 0x30]
mov r15, qword [rbp + 0x20]
mov r14, qword [rbp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb278]
and eax, dword [0x141ddb27c]
add eax, 0xdf300156
xor eax, 0x7e4aca0e
cmp eax, 0xd4bdceca
ja 0x1400d7c20
jmp 0x1400d6484
mov rcx, qword [r12 + 0x120]
xor eax, eax
test al, al
jne 0x1400d7c8a
mov eax, dword [0x141ddb2b8]
xor r8d, r8d
xor edx, edx
div dword [0x141ddb2bc]
imul eax, eax, 0x3f94d359
add eax, 0xa6976201
or eax, 0x81742925
mov rdx, r13
sub rdx, rcx
cmovae r8, rdx
mov qword [r12 + 0x128], r8
cmp eax, 0xe3f54414
jne 0x1400d7ca0
xor eax, eax
mov rdx, r13
sub rdx, rcx
cmovae rax, rdx
mov qword [r12 + 0x128], rax
jmp 0x1400d7c50
mov byte [r12 + 0x154], 1
lea rsp, [rbp + 0x98]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ebx, dword [0x141ddb300]
and ebx, dword [0x141ddb304]
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, rsi
call fcn.14008ea20
add rsp, 0x20
cmp ebx, 0xee69b1b0
jne 0x1400d7d00
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, rsi
call fcn.14008ea20
add rsp, 0x20
jmp 0x1400d7cbd
mov eax, dword [0x141ddb308]
sub eax, dword [0x141ddb30c]
imul eax, eax, 0xbf5ad7b6
cmp eax, 0x89c2ecd6
je 0x1400d7d00
mov rax, qword [rdi]
shl rax, 1
test rax, rax
je 0x1400d7dd3
mov rsi, qword [r12 + 0x68]
xor eax, eax
test al, al
je 0x1400d7d4d
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141ddb310]
add eax, dword [0x141ddb314]
imul rax, rax, 0x242c7d01
shr rax, 0x3c
imul r14d, eax, 0x65451c3f
xor r14d, 0x516d1279
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp r14d, 0xcebe5cc7
ja 0x1400d7d60
mov r14, qword [rbp - 0x38]
nop dword [rax + rax]
mov eax, dword [0x141ddb318]
xor eax, dword [0x141ddb31c]
or eax, 0x3f12e054
imul eax, eax, 0x90870364
and eax, 0x357b682c
cmp eax, 0x2b6c19f9
je 0x1400d7db0
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d7df0
jmp 0x1400d7c42