Function at 0x1402e3b90
Capabilities:
Parse pe header

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x308
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x270], xmm6
mov qword [rbp + 0x268], 0xfffffffffffffffe
mov qword [rbp + 0x148], r8
mov r13, rdx
mov qword [rbp + 0x1f8], rcx
test rdx, rdx
mov eax, 0xfb70c072
mov r14d, 0x2050d910
cmove r14d, eax
lea r15, [rbp + 0xb0]
xorps xmm6, xmm6
mov edi, 0x199aaf38
mov eax, 0xc4825ab3
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3d8b7e29
mov ecx, 0x92000978
nop
cmove eax, ecx
cmp dword [0x140ae0bd4], 0xa
cmovl eax, ecx
mov ecx, eax
cmp eax, 0x6127615
jle 0x1402e3ca0
cmp ecx, 0x33718bcb
jle 0x1402e3d10
cmp ecx, 0x49bdd1ec
jg 0x1402e3e04
cmp ecx, 0x3a64c7f1
jle 0x1402e4071
cmp ecx, 0x40b49485
jg 0x1402e42de
cmp ecx, 0x3a64c7f2
je 0x1402e47a9
cmp ecx, 0x3c171c10
je 0x1402e47c1
mov eax, ecx
cmp ecx, 0x3d8b7e29
jne 0x1402e3c1d
movaps xmmword [rbp + 0xe0], xmm6
movaps xmmword [rbp + 0xd0], xmm6
movaps xmmword [rbp + 0xc0], xmm6
movaps xmmword [rbp + 0xb0], xmm6
mov eax, 0x92000978
jmp 0x1402e3c1d
cmp ecx, 0xcbc12f46
jle 0x1402e3db0
cmp ecx, 0xefe3ede5
jle 0x1402e3e5c
cmp ecx, 0xfb519ec9
jle 0x1402e4224
cmp ecx, 0xfff19b93
jg 0x1402e4350
cmp ecx, 0xfb519eca
je 0x1402e47cb
cmp ecx, 0xfb70c072
je 0x1402e47d5
mov eax, ecx
cmp ecx, 0xfcc13fbd
jne 0x1402e3c1d
xor eax, eax
mov qword [rbp + 0x198], rax
mov eax, 0x963f54a6
jmp 0x1402e3c1d
cmp ecx, 0x22c7f55c
jle 0x1402e3f80
cmp ecx, 0x2c1d2e6f
jle 0x1402e40bb
cmp ecx, 0x3240f296
jg 0x1402e438e
cmp ecx, 0x2c1d2e70
je 0x1402e47e8
cmp ecx, 0x2dfa77b1
je 0x1402e4805
mov eax, ecx
cmp ecx, 0x2e4c4258
jne 0x1402e3c1d
mov rbx, qword [rbp + 0x208]
mov rsi, qword [rbp + 0x130]
mov ecx, 0x9d83bdcc
nop dword [rax]
cmp ecx, 0x211f0966
je 0x1402e4843
cmp ecx, 0x9d83bdcc
jne 0x1402e3d70
mov r9d, 0x108
mov rcx, qword [rbp + 0x1f8]
mov rdx, rbx
mov r8, rsi
call fcn.1402ce4c0
mov ecx, 0x211f0966
jmp 0x1402e3d70
cmp ecx, 0xabb36b48
jle 0x1402e3fd9
cmp ecx, 0xbddcc08b
jle 0x1402e410b
cmp ecx, 0xc5652726
jg 0x1402e43d3
cmp ecx, 0xbddcc08c
je 0x1402e4864
cmp ecx, 0xbe8242c0
je 0x1402e486e
mov eax, ecx
cmp ecx, 0xc4825ab3
jne 0x1402e3c1d
mov eax, 0x9c10c58b
jmp 0x1402e3c1d
cmp ecx, 0x65618c78
jle 0x1402e415b
cmp ecx, 0x72dcc0d7
jg 0x1402e4454
cmp ecx, 0x65618c79
je 0x1402e488c
cmp ecx, 0x691fc9e5
je 0x1402e489f
mov eax, ecx
cmp ecx, 0x6d155705
jne 0x1402e3c1d
mov eax, dword [rbp + 0x21c]
add rax, r13
mov qword [rbp + 0x1d8], rax
mov eax, 0xc6640396
jmp 0x1402e3c1d
cmp ecx, 0xd4b49d0b
jle 0x1402e4269
cmp ecx, 0xe9589347
jle 0x1402e4498
cmp ecx, 0xe9589348
je 0x1402e48c8
cmp ecx, 0xea4c1c38
je 0x1402e4908
mov eax, ecx
cmp ecx, 0xeed92c43
jne 0x1402e3c1d
mov ebx, dword [rbp + 0x1c4]
add rbx, qword [rbp + 0x200]
lea rcx, [rbp + 0xf0]
call fcn.1402a0f10
mov eax, dword [0x140ae1224]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x25f]
mov eax, dword [0x140ae1220]
mov esi, 0x79854e76
mov ecx, 0x14d8ca78
cmove esi, ecx
cmp eax, 0xa
setl byte [rbp + 0x230]
cmovl esi, ecx
mov ecx, 0x23b6cdb9
nop
cmp ecx, 0x2a067b80
jg 0x1402e3f40
cmp ecx, 0xc443e1b1
je 0x1402e3f63
cmp ecx, 0x14d8ca78
je 0x1402e3f67
cmp ecx, 0x23b6cdb9
jne 0x1402e3ef0
movzx edx, byte [rbp + 0x25f]
cmp byte [rbp + 0x230], 0
mov ecx, 0x79854e76
mov edi, 0xc443e1b1
cmovne ecx, edi
test dl, dl
cmovne ecx, edi
mov edi, 0x199aaf38
jmp 0x1402e3ef0
cmp ecx, 0x2a067b81
je 0x1402e4926
cmp ecx, 0x71f14832
je 0x1402e3f6e
cmp ecx, 0x79854e76
jne 0x1402e3ef0
mov ecx, 0xc443e1b1
jmp 0x1402e3ef0
mov ecx, esi
jmp 0x1402e3ef0
mov ecx, 0x71f14832
jmp 0x1402e3ef0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, 0x2a067b81
jmp 0x1402e3ef0
cmp ecx, 0x1227d9f2
jg 0x1402e4197
cmp ecx, 0xa87198f
jle 0x1402e44cf
cmp ecx, 0xa871990
je 0x1402e4987
cmp ecx, 0xce6894b
je 0x1402e49a5
mov eax, ecx
cmp ecx, 0xf5a179b
jne 0x1402e3c1d
mov rax, qword [rbp + 0x1d8]
cmp rax, qword [rbp + 0x118]
mov eax, 0x207a1087
cmova eax, edi
jmp 0x1402e3c1d
cmp ecx, 0xa0a0369a
jg 0x1402e41e8
cmp ecx, 0x963f54a5
jle 0x1402e4590
cmp ecx, 0x963f54a6
je 0x1402e49b6
mov eax, r14d
cmp ecx, 0x9c10c58b
je 0x1402e3c1d
mov eax, ecx
cmp ecx, 0x9f917549
jne 0x1402e3c1d
mov rax, qword [rbp + 0x240]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x248]
mov rax, qword [rbp + 0x240]
mov rax, qword [rbp + 0x240]
mov eax, 0xc957d88e
jmp 0x1402e3c1d
cmp ecx, 0x38039c95
jle 0x1402e45f7
cmp ecx, 0x38039c96
je 0x1402e49ce
cmp ecx, 0x39e71867
je 0x1402e49e7
mov eax, ecx
cmp ecx, 0x3a5ea0b3
jne 0x1402e3c1d
mov eax, 0xf5297835
mov rcx, qword [rbp + 0x1a8]
mov qword [rbp + 0x1b0], rcx
jmp 0x1402e3c1d
cmp ecx, 0x2823bcd2
jle 0x1402e4622
cmp ecx, 0x2823bcd3
je 0x1402e49f1
cmp ecx, 0x298cf088
je 0x1402e49fb
mov eax, ecx
cmp ecx, 0x2b24fb78
jne 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1227d9f3
mov ecx, 0xd4b49d0c
jmp 0x1402e3c10
cmp ecx, 0xb32736a7
jle 0x1402e465e
cmp ecx, 0xb32736a8
je 0x1402e4a19
cmp ecx, 0xb96b7337
je 0x1402e4a46
mov eax, ecx
cmp ecx, 0xbc7c8f64
jne 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x60b06640
mov ecx, 0xf8102678
jmp 0x1402e3c10
cmp ecx, 0x4f4b89d0
jle 0x1402e4692
cmp ecx, 0x4f4b89d1
je 0x1402e4a64
cmp ecx, 0x60b06640
je 0x1402e4a82
mov eax, ecx
cmp ecx, 0x6137fa3b
jne 0x1402e3c1d
mov eax, 0x4630d18d
jmp 0x1402e3c1d
cmp ecx, 0x199aaf37
jle 0x1402e46bf
cmp ecx, 0x199aaf38
je 0x1402e4aa1
cmp ecx, 0x2050d910
je 0x1402e3bf6
mov eax, ecx
cmp ecx, 0x207a1087
jne 0x1402e3c1d
mov rcx, qword [rbp + 0x238]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, 0xa0a0369b
jmp 0x1402e3c1d
cmp ecx, 0xa36bad75
jle 0x1402e46ff
cmp ecx, 0xa36bad76
je 0x1402e4ac0
cmp ecx, 0xa93086bf
je 0x1402e4ad7
mov eax, ecx
cmp ecx, 0xa9d286fd
jne 0x1402e3c1d
mov eax, 0xbe8242c0
jmp 0x1402e3c1d
cmp ecx, 0xf5297834
jle 0x1402e472c
cmp ecx, 0xf5297835
je 0x1402e4aef
cmp ecx, 0xf8102678
je 0x1402e4b0d
mov eax, ecx
cmp ecx, 0xf96a3f89
jne 0x1402e3c1d
mov eax, dword [rbp - 0x58]
mov dword [rbp + 0x1cc], eax
mov eax, 0x3240f297
jmp 0x1402e3c1d
cmp ecx, 0xcd713b91
jle 0x1402e4763
cmp ecx, 0xcd713b92
je 0x1402e4b4d
cmp ecx, 0xcd803457
je 0x1402e4b66
mov eax, ecx
cmp ecx, 0xd30842aa
jne 0x1402e3c1d
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x160], rax
mov rax, qword [rbp + 0x160]
mov eax, dword [rbp + 0x264]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rbp + 0x1e0]
mov eax, dword [rax + rcx*4]
mov dword [rbp + 0x1c4], eax
mov eax, 0xeed92c43
jmp 0x1402e3c1d
cmp ecx, 0x40b49486
je 0x1402e4b85
cmp ecx, 0x4630d18d
je 0x1402e4baf
mov eax, ecx
cmp ecx, 0x490cedbf
jne 0x1402e3c1d
mov rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x150], rax
mov eax, 0xd8d77fd0
nop word [rax + rax]
cmp eax, 0xf42ce43
je 0x1402e4bcd
cmp eax, 0xd8d77fd0
jne 0x1402e4320
lea rsi, [rbp + 0xf0]
mov rcx, rsi
call fcn.14029ffd0
mov rcx, rsi
call fcn.140326e10
mov eax, 0xf42ce43
jmp 0x1402e4320
cmp ecx, 0xfff19b94
je 0x1402e4bfe
cmp ecx, 0xeaed1
je 0x1402e4c13
mov eax, ecx
cmp ecx, 0x3c6e5ae
jne 0x1402e3c1d
mov rax, qword [rbp + 0x190]
mov qword [rbp + 0x188], rax
mov eax, 0x3a64c7f2
jmp 0x1402e3c1d
cmp ecx, 0x3240f297
je 0x1402e4c31
cmp ecx, 0x32a6846c
je 0x1402e4c4d
mov eax, ecx
cmp ecx, 0x32f34745
jne 0x1402e3c1d
mov rcx, qword [rbp + 0x238]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, 0x7c16b4d0
jmp 0x1402e3c1d
cmp ecx, 0xc5652727
je 0x1402e4c6b
cmp ecx, 0xc6640396
je 0x1402e4c7e
mov eax, ecx
cmp ecx, 0xc957d88e
jne 0x1402e3c1d
mov rax, qword [rbp + 0x240]
sub rax, qword [rbp + 0x248]
mov qword [rbp + 0x200], rax
mov rax, qword [rbp + 0x240]
mov eax, dword [rax + 0x20]
add rax, qword [rbp + 0x200]
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x240]
mov eax, dword [rax + 0x24]
mov dword [rbp + 0x1c8], eax
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9f917549
mov ecx, 0x39e71867
jmp 0x1402e3c10
cmp ecx, 0x72dcc0d8
je 0x1402e4c9c
cmp ecx, 0x7b66db21
je 0x1402e4cc3
mov eax, ecx
cmp ecx, 0x7c16b4d0
jne 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3c171c10
mov ecx, 0xeaed1
jmp 0x1402e3c10
cmp ecx, 0xdcf12bf7
je 0x1402e4ce7
cmp ecx, 0xe09dfca6
jne 0x1402e4efe
mov rax, qword [rbp + 0x1f0]
add rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x118], rax
mov eax, 0xf5a179b
jmp 0x1402e3c1d
cmp ecx, 0x6127616
je 0x1402e4d02
mov eax, ecx
cmp ecx, 0x90dbb4a
jne 0x1402e3c1d
mov rdx, qword [rbp + 0x1f0]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 0x238], rax
mov rax, qword [rbp + 0x238]
mov qword [rbp + 0x240], rax
mov eax, dword [rbp + 0x224]
mov qword [rbp + 0x248], rax
mov rax, qword [rbp + 0x248]
add rax, r13
mov qword [rbp + 0x1e8], rax
mov rbx, qword [rbp + 0x1f0]
mov rsi, qword [rbp + 0x238]
mov rdi, qword [rbp + 0x1e8]
mov ecx, 0x9d83bdcc
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x211f0966
je 0x1402e4d0c
cmp ecx, 0x9d83bdcc
jne 0x1402e4560
mov rcx, qword [rbp + 0x1f8]
mov rdx, rsi
mov r8, rdi
mov r9, rbx
call fcn.1402ce4c0
mov ecx, 0x211f0966
jmp 0x1402e4560
cmp ecx, 0x8cfa86ba
je 0x1402e4d2f
mov eax, ecx
cmp ecx, 0x92000978
jne 0x1402e3c1d
mov qword [rbp + 0x210], r15
mov rax, qword [rbp + 0x210]
mov rax, qword [rbp + 0x210]
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
lea rax, [rbp - 0x58]
mov qword [rbp + 0x208], rax
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3d8b7e29
mov ecx, 0xfb519eca
jmp 0x1402e3c10
cmp ecx, 0x33718bcc
je 0x1402e4d39
mov eax, ecx
cmp ecx, 0x35948a08
jne 0x1402e3c1d
mov rax, qword [rbp + 0x208]
mov eax, 0xcbc12f47
jmp 0x1402e3c1d
cmp ecx, 0x22c7f55d
je 0x1402e4d73
mov eax, ecx
cmp ecx, 0x24d24b26
jne 0x1402e3c1d
mov eax, 0x72dcc0d8
mov dword [rbp + 0x22c], 2
mov rcx, qword [rbp + 0x158]
mov qword [rbp + 0x1b8], rcx
jmp 0x1402e3c1d
cmp ecx, 0xabb36b49
je 0x1402e4daf
mov eax, ecx
cmp ecx, 0xb0f2a984
jne 0x1402e3c1d
mov rax, qword [rbp + 0x138]
movzx eax, word [rax]
mov dword [rbp + 0x1d4], eax
mov eax, 0xf40efedb
jmp 0x1402e3c1d
cmp ecx, 0x49bdd1ed
je 0x1402e4dc2
mov eax, ecx
cmp ecx, 0x4e72e4dc
jne 0x1402e3c1d
mov eax, 0xf5297835
xor ecx, ecx
mov qword [rbp + 0x1b0], rcx
jmp 0x1402e3c1d
cmp ecx, 0x1227d9f3
je 0x1402e4ddd
mov eax, ecx
cmp ecx, 0x18f6dc5b
jne 0x1402e3c1d
mov rax, qword [rbp + 0x208]
mov rax, qword [rbp + 0x210]
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x178], rax
mov eax, 0xcc2144d6
jmp 0x1402e3c1d
cmp ecx, 0xa0a0369b
je 0x1402e4de7
mov eax, ecx
cmp ecx, 0xa18f7936
jne 0x1402e3c1d
mov eax, 0x3c6e5ae
xor ecx, ecx
mov qword [rbp + 0x190], rcx
jmp 0x1402e3c1d
cmp ecx, 0xefe3ede6
je 0x1402e4e05
mov eax, ecx
cmp ecx, 0xf40efedb
jne 0x1402e3c1d
mov eax, dword [rbp + 0x1d4]
cmp eax, 0x5a4d
mov eax, 0xb96b7337
mov ecx, 0x32a6846c
cmove eax, ecx
jmp 0x1402e3c1d
cmp ecx, 0xcbc12f47
je 0x1402e4e0f
mov eax, ecx
cmp ecx, 0xcc2144d6
jne 0x1402e3c1d
mov rax, qword [rbp + 0x178]
mov qword [rbp + 0x110], rax
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1227d9f3
mov ecx, 0x2b24fb78
jmp 0x1402e3c10
mov rax, qword [rbp + 0x188]
mov qword [rbp + 0x180], rax
mov eax, 0x18f6dc5b
jmp 0x1402e3c1d
mov eax, 0xeaed1
jmp 0x1402e3c1d
mov eax, 0x35948a08
jmp 0x1402e3c1d
mov eax, 0xcc2144d6
xor ecx, ecx
mov qword [rbp + 0x178], rcx
jmp 0x1402e3c1d
mov eax, dword [rbp + 0x21c]
cmp eax, 0x1001
mov eax, 0x6d155705
mov ecx, 0x4e72e4dc
cmovb eax, ecx
jmp 0x1402e3c1d
mov rax, qword [rbp + 0x128]
mov ecx, dword [rax]
mov dword [rbp + 0x224], ecx
mov eax, dword [rax + 4]
mov dword [rbp + 0x220], eax
cmp dword [rbp + 0x224], 0
setne byte [rbp + 0x262]
cmp dword [rbp + 0x220], 0
setne byte [rbp + 0x261]
mov eax, 0x691fc9e5
jmp 0x1402e3c1d
and al, 1
mov byte [rbp + 0x250], al
cmp byte [rbp + 0x250], 0
mov eax, 0xb96b7337
mov ecx, 0xf96a3f89
cmovne eax, ecx
jmp 0x1402e3c1d
mov eax, 0x49bdd1ed
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2823bcd3
mov ecx, 0x298cf088
jmp 0x1402e3c10
mov eax, 0x3a5ea0b3
xor ecx, ecx
mov qword [rbp + 0x1a8], rcx
jmp 0x1402e3c1d
mov cl, byte [rbp + 0x262]
cmp byte [rbp + 0x261], 0
mov eax, 0xabb36b49
mov edx, 0xa36bad76
cmovne eax, edx
test cl, cl
mov ecx, 0xabb36b49
cmove eax, ecx
jmp 0x1402e3c1d
mov eax, dword [rbp + 0x1c8]
add rax, qword [rbp + 0x200]
mov qword [rbp + 0x170], rax
mov rax, qword [rbp + 0x240]
mov eax, dword [rax + 0x1c]
add rax, qword [rbp + 0x200]
mov qword [rbp + 0x168], rax
mov eax, 0x22c7f55d
mov dword [rbp + 0x228], 0
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x33718bcc
mov ecx, 0xb32736a8
jmp 0x1402e3c10
mov qword [rbp + 0x250], rax
mov r8, qword [rbp + 0x250]
lea rcx, [rbp + 0xf0]
mov rdx, rbx
call fcn.1402a1150
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x230], rax
mov ecx, 0x53d0aa19
nop word cs:[rax + rax]
cmp ecx, 0xa1ee2dba
je 0x1402e4e80
cmp ecx, 0x53d0aa19
jne 0x1402e4960
mov rcx, qword [rbp + 0x230]
call fcn.140326fe0
mov ecx, 0xa1ee2dba
jmp 0x1402e4960
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9f917549
mov ecx, 0xc957d88e
jmp 0x1402e3c10
mov qword [rbp + 0x138], r15
mov eax, 0xb0f2a984
jmp 0x1402e3c1d
mov rax, qword [rbp + 0x198]
mov qword [rbp + 0x190], rax
mov eax, 0x3c6e5ae
jmp 0x1402e3c1d
cmp byte [rbp + 0x263], 0
mov eax, 0xfff19b94
mov ecx, 0xb96b7337
cmovne eax, ecx
jmp 0x1402e3c1d
mov eax, 0xe9589348
jmp 0x1402e3c1d
mov eax, 0x298cf088
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2823bcd3
mov ecx, 0x7b66db21
jmp 0x1402e3c10
mov eax, dword [rbp + 0x264]
add eax, 1
mov dword [rbp + 0x1c0], eax
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x33718bcc
mov ecx, 0xa9d286fd
jmp 0x1402e3c10
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6137fa3b
mov ecx, 0x4630d18d
jmp 0x1402e3c10
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xefe3ede6
mov ecx, 0x65618c79
jmp 0x1402e3c10
mov rax, qword [rbp + 0x170]
mov rax, qword [rbp + 0x1e0]
mov rax, qword [rbp + 0x168]
mov eax, 0xf8102678
jmp 0x1402e3c1d
mov rcx, qword [rbp + 0x238]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, 0xa93086bf
jmp 0x1402e3c1d
mov eax, dword [rbp + 0x220]
mov qword [rbp + 0x1f0], rax
mov eax, 0x90dbb4a
jmp 0x1402e3c1d
mov eax, 0x3a5ea0b3
mov rcx, qword [rbp + 0x1d8]
mov qword [rbp + 0x1a8], rcx
jmp 0x1402e3c1d
mov eax, 0x490cedbf
mov r12d, 1
mov rcx, qword [rbp + 0x1b0]
mov qword [rbp + 0x1a0], rcx
jmp 0x1402e3c1d
mov rax, qword [rbp + 0x170]
mov rcx, qword [rbp + 0x1e0]
movzx eax, word [rax + rcx*2]
mov rcx, qword [rbp + 0x168]
mov eax, dword [rcx + rax*4]
mov dword [rbp + 0x21c], eax
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x60b06640
mov ecx, 0x8cfa86ba
jmp 0x1402e3c10
cmp byte [rbp + 0x260], 0
mov eax, 0xcd803457
mov ecx, 0xa871990
cmovne eax, ecx
jmp 0x1402e3c1d
mov rcx, qword [rbp + 0x238]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, 0xa18f7936
jmp 0x1402e3c1d
mov eax, dword [rbp + 0xec]
mov dword [rbp + 0x1d0], eax
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6127616
mov ecx, 0xbddcc08c
jmp 0x1402e3c10
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6137fa3b
mov ecx, 0xc5652727
jmp 0x1402e3c10
mov rax, qword [rbp + 0x160]
test r12d, r12d
mov eax, 0x72dcc0d8
mov ecx, 0xea4c1c38
cmove eax, ecx
mov rcx, qword [rbp + 0x150]
mov qword [rbp + 0x1b8], rcx
mov dword [rbp + 0x22c], r12d
jmp 0x1402e3c1d
lea rax, [rbp + 0x30]
mov qword [rbp + 0x128], rax
mov eax, 0x2dfa77b1
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3c171c10
mov ecx, 0xfcc13fbd
jmp 0x1402e3c10
mov eax, dword [rbp + 0x1cc]
cmp eax, 0x4550
setne byte [rbp + 0x263]
mov eax, 0x38039c96
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6127616
mov ecx, 0x40b49486
jmp 0x1402e3c10
mov eax, 0x18f6dc5b
xor ecx, ecx
mov qword [rbp + 0x180], rcx
jmp 0x1402e3c1d
mov rax, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x1d8]
cmp rcx, rax
mov eax, 0xe09dfca6
cmovb eax, edi
jmp 0x1402e3c1d
cmp dword [rbp + 0x22c], 2
mov eax, 0x963f54a6
mov ecx, 0x32f34745
cmove eax, ecx
mov rcx, qword [rbp + 0x1b8]
mov qword [rbp + 0x198], rcx
jmp 0x1402e3c1d
mov eax, dword [rbp + 0x1c0]
mov dword [rbp + 0x228], eax
mov eax, 0x22c7f55d
mov rcx, qword [rbp + 0x150]
mov qword [rbp + 0x140], rcx
jmp 0x1402e3c1d
mov eax, 0x490cedbf
xor r12d, r12d
mov rcx, qword [rbp + 0x158]
mov qword [rbp + 0x1a0], rcx
jmp 0x1402e3c1d
mov eax, 0x40b49486
jmp 0x1402e3c1d
and al, 1
mov byte [rbp + 0x250], al
mov al, byte [rbp + 0x250]
mov byte [rbp + 0x260], al
mov eax, 0xcd713b92
mov edi, 0x199aaf38
jmp 0x1402e3c1d
mov eax, 0x2c1d2e70
jmp 0x1402e3c1d
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, dword [rbp + 0x264]
mov eax, 0xb32736a8
jmp 0x1402e3c1d
mov rax, qword [rbp + 0x140]
mov qword [rbp + 0x158], rax
mov eax, dword [rbp + 0x228]
mov dword [rbp + 0x264], eax
mov rax, qword [rbp + 0x240]
mov ecx, dword [rbp + 0x264]
cmp ecx, dword [rax + 0x18]
mov eax, 0x24d24b26
mov ecx, 0xd30842aa
cmovb eax, ecx
jmp 0x1402e3c1d
mov eax, 0x3a64c7f2
xor ecx, ecx
mov qword [rbp + 0x188], rcx
jmp 0x1402e3c1d
movsxd rax, dword [rbp + 0x1d0]
add rax, r13
mov qword [rbp + 0x130], rax
mov eax, 0x2e4c4258
jmp 0x1402e3c1d
mov eax, 0x2b24fb78
jmp 0x1402e3c1d
mov eax, dword [0x140ae0bd0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xefe3ede6
mov ecx, 0x4f4b89d1
jmp 0x1402e3c10
mov eax, 0x4f4b89d1
jmp 0x1402e3c1d
mov rcx, qword [rbp + 0x208]
mov r8d, 0x108
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rbp + 0x210]
mov ecx, 0x9d83bdcc
nop
cmp ecx, 0x211f0966
je 0x1402e4e5f
cmp ecx, 0x9d83bdcc
jne 0x1402e4e30
mov r9d, 0x40
mov rcx, qword [rbp + 0x1f8]
mov rdx, rsi
mov r8, r13
call fcn.1402ce4c0
mov ecx, 0x211f0966
jmp 0x1402e4e30
and al, 1
mov byte [rbp + 0x250], al
cmp byte [rbp + 0x250], 0
mov eax, 0xb96b7337
mov ecx, 0xce6894b
cmovne eax, ecx
jmp 0x1402e3c1d
mov qword [rbp + 0x250], rax
mov rbx, qword [rbp + 0x250]
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x230], rax
mov ecx, 0x53d0aa19
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0xa1ee2dba
je 0x1402e4ed3
cmp ecx, 0x53d0aa19
jne 0x1402e4eb0
mov rcx, qword [rbp + 0x230]
call fcn.140326fe0
mov ecx, 0xa1ee2dba
jmp 0x1402e4eb0
mov qword [rbp + 0x250], rax
mov rcx, qword [rbp + 0x250]
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
mov eax, 0xdcf12bf7
mov ecx, 0xbc7c8f64
cmove eax, ecx
jmp 0x1402e3c1d
mov eax, ecx
cmp ecx, 0xd4b49d0c
jne 0x1402e3c1d
mov rax, qword [rbp + 0x110]
movaps xmm6, xmmword [rbp + 0x270]
add rsp, 0x308
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret