Function at 0x1400d0720
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov r15, r9
mov qword [rbp + 0x90], r8
mov qword [rbp + 0x70], rdx
mov rbx, rcx
mov eax, dword [0x141dd8310]
or eax, dword [0x141dd8314]
imul eax, eax, 0x1acdb7a6
xor eax, 0x35400182
and eax, 0x77507da6
cmp eax, 0xa71e5119
ja 0x1400d083d
mov eax, dword [0x141dd8318]
imul eax, dword [0x141dd831c]
xor eax, 0xb52d7627
imul ecx, eax, 0xabacd332
and ecx, 0x901ee484
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
cmp ecx, 0xb14b5f3b
jbe 0x1400d08c4
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
jmp 0x1400d0773
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], rdi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 8], r11
mov qword [rbp - 0x18], r10
mov qword [rbp + 8], r9
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x10], rdx
mov qword [rbp - 0x50], rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x210
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x2b0
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x470
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x410
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x2d0
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0xa0], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbp], rsp
mov rax, qword [rbp + 0x70]
cmp byte [rax], 0
mov qword [rbp + 0xb0], rbx
je 0x1400d0b94
mov qword [rdi], 0
mov qword [rsi], 0
mov qword [rbp + 0xa8], rcx
mov qword [rcx], 0
mov eax, dword [0x141dd8320]
or eax, dword [0x141dd8324]
imul eax, eax, 0x89b33b23
imul rax, rax, 0x3610701
shr rax, 0x39
or eax, 0x5896f092
cmp eax, 0xa205d68f
jbe 0x1400d0b0b
mov qword [r14], 0
mov qword [r13], 0
mov qword [r12], 0
mov ecx, 0xcf60df1b
mov eax, dword [0x141dd8328]
xor edx, edx
div dword [0x141dd832c]
add eax, 0x7b8fc2fd
imul rax, rcx
shr rax, 0x3e
mov qword [r14], 0
mov qword [r13], 0
mov qword [r12], 0
cmp eax, 0xc036a44
ja 0x1400d0b10
mov rax, qword [rbx + 0xf8]
test rax, rax
je 0x1400d1f98
mov qword [rbp - 0x38], r12
mov qword [rbp + 0x38], r15
mov ecx, dword [0x141dd8330]
or ecx, dword [0x141dd8334]
mov r15, qword [rax + 0x10]
xor ecx, 0x7b4b20d1
imul eax, ecx, 0x487b0124
cmp eax, 0x271d610d
mov r12, qword [rbp + 0xa8]
jne 0x1400d1e80
jmp 0x1400d1ebd
mov r12, qword [rbp + 0x70]
cmp byte [r12 + 1], 0
mov r13, qword [rbp + 0x60]
je 0x1400d0bf0
mov rax, qword [rbx + 0xf8]
test rax, rax
je 0x1400d0bf0
mov rsi, qword [rax + 0x10]
mov eax, dword [0x141dd83c0]
or eax, dword [0x141dd83c4]
add eax, 0x895d97e6
and eax, 0xf36eec3f
add eax, 0xee0a7372
cmp eax, 0xc134c150
mov r14, qword [rbp + 0x50]
jbe 0x1400d22fd
jmp 0x1400d2331
mov eax, dword [0x141dd83b0]
mov ecx, dword [0x141dd83b4]
add eax, ecx
add eax, 0x872b0cb8
or eax, 0x82a4539a
xor eax, 0xf50cb62e
cmp eax, 0x1c49c405
jb 0x1400d0bf0
nop word cs:[rax + rax]
mov eax, dword [0x141dd83b8]
or eax, dword [0x141dd83bc]
or eax, 0xc64d3590
imul eax, eax, 0x833e9c31
cmp eax, 0x6e183d96
je 0x1400d0c20
movzx eax, byte [r12 + 2]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400d0c50
test al, al
mov rcx, qword [rbp + 0x120]
je 0x1400d0c7c
mov rax, qword [rbp + 0x128]
mov qword [rbx + 0xe8], rax
xor eax, eax
test al, al
je 0x1400d5eed
jmp 0x1400d5f16
movabs rsi, 0x8000000000000000
mov rcx, qword [rbx + 0xf8]
test rcx, rcx
je 0x1400d13b0
movzx eax, byte [r12 + 3]
mov rcx, qword [rcx + 0x10]
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x1400d0cb0
nop word cs:[rax + rax]
mov edx, dword [0x141dd83f8]
and edx, dword [0x141dd83fc]
add edx, 0x7cacd917
imul rdx, rdx, 0x67dddfc1
shr rdx, 0x3e
cmp edx, 0x1164aed4
ja 0x1400d0cc0
test eax, eax
je 0x1400d13b0
cmp eax, 1
je 0x1400d0d66
nop word cs:[rax + rax]
mov eax, dword [0x141dd8400]
and eax, dword [0x141dd8404]
and eax, 0x1ae10012
or eax, 0x651cdf65
xor eax, 0xbb6bd98d
cmp eax, 0xc0683c70
jb 0x1400d0d00
mov rax, qword [rbx + 0x80]
mov edx, 0x99aca855
nop
mov r8d, dword [0x141dd8408]
or r8d, dword [0x141dd840c]
imul r8d, r8d, 0x664947bf
add r8d, 0x1c980d9
imul r8, rdx
shr r8, 0x3e
cmp r8d, 0x9f42f416
ja 0x1400d0d30
cmp rax, rsi
jne 0x1400d13b0
mov eax, dword [0x141dd8410]
add eax, dword [0x141dd8414]
imul eax, eax, 0x6eab2567
and eax, 0x4dd3e07b
cmp eax, 0x9a8940c
mov rdi, qword [rbp + 0x98]
je 0x1400d0da5
mov eax, dword [0x141dd8418]
add eax, dword [0x141dd841c]
mov qword [rdi], 0
cmp eax, 0x14666ab9
jne 0x1400d0dae
mov qword [rdi], 0
jmp 0x1400d0d8b
sub rsp, 0x20
mov edx, 8
mov r8, rdi
call sub.ADVAPI32.dll_OpenProcessToken
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8420]
xor ecx, dword [0x141dd8424]
or ecx, 0xf7ce33a1
xor ecx, 0x8f0fc253
imul ecx, ecx, 0xee1980e5
cmp ecx, 0x42c33a87
jb 0x1400d0dd0
test eax, eax
je 0x1400d12dd
mov eax, dword [0x141dd8428]
xor edx, edx
div dword [0x141dd842c]
nop dword [rax]
mov eax, dword [0x141dd8430]
add eax, dword [0x141dd8434]
imul rax, rax, 0x28b80683
shr rax, 0x3d
xor eax, 0xed284bb5
imul eax, eax, 0x4fb87a9d
cmp eax, 0xc46606b9
jb 0x1400d0e10
mov rbx, qword [rdi]
lea rax, [rbx + 1]
cmp rax, 2
jb 0x1400d1378
mov rdi, qword [rbp + 0x68]
mov dword [rdi], 0
mov eax, dword [0x141dd8438]
xor edx, edx
div dword [0x141dd843c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8440]
or eax, dword [0x141dd8444]
and eax, 0x29b0122e
xor eax, 0x9bf72f4d
cmp eax, 0x84140b74
jb 0x1400d0e70
mov eax, dword [0x141dd8448]
mov ecx, dword [0x141dd844c]
add eax, ecx
add eax, 0xe8972d6d
and eax, 0xe436b287
cmp eax, 0x8829f38b
ja 0x1400d0ef2
mov esi, dword [0x141dd8450]
xor esi, dword [0x141dd8454]
or esi, 0x336cb6fb
add esi, 0xe27faf4a
or esi, 0xc689598
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
cmp esi, 0xb777126e
jbe 0x1400d0f14
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
jmp 0x1400d0eac
test eax, eax
jne 0x1400d0f40
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
cmp ecx, 0x8007007a
jne 0x1400d11f0
mov r12, r15
mov eax, dword [0x141dd8478]
and eax, dword [0x141dd847c]
mov rcx, qword [rbp + 0x68]
mov esi, dword [rcx]
imul eax, eax, 0x308075b0
add eax, 0x24c4e095
cmp eax, 0x543edf85
jae 0x1400d0f75
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov edi, 0x99464c1b
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop word cs:[rax + rax]
mov r15d, dword [0x141dd8480]
add r15d, dword [0x141dd8484]
shr r15d, 1
imul r15, rdi
shr r15, 0x3e
add r15d, 0x7f811e95
sub rsp, 0x20
call r14
add rsp, 0x20
cmp r15d, 0x9d66a160
ja 0x1400d0f90
lea rcx, [rax + 1]
sub rsp, 0x20
cmp rcx, 1
ja 0x1400d0ff8
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r15, r12
nop
mov eax, dword [0x141dd8488]
or eax, dword [0x141dd848c]
cmp eax, 0xe201e12d
je 0x1400d0fe0
jmp 0x1400d11f0
mov rcx, rax
mov edx, 8
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov rsi, rax
mov r15, r12
nop word cs:[rax + rax]
mov eax, dword [0x141dd8490]
imul eax, dword [0x141dd8494]
and eax, 0x91022207
xor eax, 0x562d345f
cmp eax, 0xbd118bc1
jb 0x1400d1020
test rsi, rsi
je 0x1400d11f0
mov rax, qword [rbp + 0x68]
mov r9d, dword [rax]
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov edx, 1
mov r8, rsi
call sub.ADVAPI32.dll_GetTokenInformation
add rsp, 0x30
nop dword [rax + rax]
mov ecx, dword [0x141dd8498]
xor ecx, dword [0x141dd849c]
or ecx, 0x77fcb507
imul ecx, ecx, 0xfe2dbae8
cmp ecx, 0xc8e5ec4
je 0x1400d1070
mov ecx, dword [0x141dd84a0]
xor ecx, dword [0x141dd84a4]
add ecx, 0x1f0a1624
cmp ecx, 0x649d0ffe
ja 0x1400d1090
test eax, eax
je 0x1400d1109
mov rdx, qword [rsi]
sub rsp, 0x20
mov rdi, qword [rbp + 0x58]
mov rcx, rdi
call fcn.1400d6420
mov rcx, rdi
add rsp, 0x20
mov rdi, qword [rdi]
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x1400d1dd4
mov eax, dword [0x141dd8510]
xor eax, dword [0x141dd8514]
and eax, 0x8c81b2e
add eax, 0xcb986b3d
or eax, 0xf6a2f90d
cmp eax, 0xbe54c68a
jne 0x1400d2556
jmp 0x1400d2595
xor eax, eax
test al, al
je 0x1400d111d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, dword [0x141dd84a8]
and r14d, dword [0x141dd84ac]
add r14d, 0x451336c2
xor r14d, 0xd26fa0d5
add r14d, 0xca21ce24
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp r14d, 0x75130df2
jb 0x1400d1124
mov eax, dword [0x141dd84b0]
xor eax, dword [0x141dd84b4]
imul rcx, rax, 0x46fb555f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x8a92c9a
cmp eax, 0xb62ba0bf
jbe 0x1400d1196
sub rsp, 0x20
mov rcx, rsi
call fcn.1400d6270
add rsp, 0x20
mov eax, dword [0x141dd84b8]
imul eax, dword [0x141dd84bc]
imul edi, eax, 0x9abc194a
add edi, 0xa21a09f0
sub rsp, 0x20
mov rcx, rsi
call fcn.1400d6270
add rsp, 0x20
cmp edi, 0x49e6782c
jb 0x1400d1196
mov eax, dword [0x141dd84c0]
imul eax, dword [0x141dd84c4]
imul rax, rax, 0x2c36a9b3
shr rax, 0x3d
or eax, 0x8e9d774c
cmp eax, 0x3eefcfb5
jb 0x1400d11c7
nop dword [rax + rax]
mov eax, dword [0x141dd8458]
add eax, dword [0x141dd845c]
xor eax, 0xf8c1cc6f
imul rcx, rax, 0x2297f767
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x58a5ed54
ja 0x1400d11f0
mov eax, dword [0x141dd8460]
add eax, dword [0x141dd8464]
imul eax, eax, 0x7c0d3f5e
cmp eax, 0x2f5735ac
mov r12, qword [rbp + 0x70]
jne 0x1400d124a
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov esi, 0xd0aff18d
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8468]
or eax, dword [0x141dd846c]
imul eax, eax, 0x5486e7e9
imul rax, rsi
shr rax, 0x3c
imul r14d, eax, 0x98f8d23b
sub rsp, 0x20
mov rcx, rbx
call rdi
add rsp, 0x20
cmp r14d, 0xd9051039
je 0x1400d1260
movabs rsi, 0x8000000000000000
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8470]
sub ecx, dword [0x141dd8474]
imul ecx, ecx, 0x1f006f36
imul rcx, rcx, 0x39eadc17
shr rcx, 0x3d
cmp ecx, 0xa1f36b21
je 0x1400d12b0
test eax, eax
jne 0x1400d1378
mov rbx, rsi
mov eax, dword [0x141dd84c8]
and eax, dword [0x141dd84cc]
add eax, 0xf69ac8f8
and eax, 0x24209509
cmp eax, 0xddf93f20
jbe 0x1400d130b
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x141dd84d0]
add eax, dword [0x141dd84d4]
xor eax, 0xa6804fd6
imul edi, eax, 0x393c12f1
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x21ae6732
jb 0x1400d1320
mov rsi, rbx
nop dword [rax]
mov eax, dword [0x141dd84d8]
xor eax, dword [0x141dd84dc]
add eax, 0x77e4680b
xor eax, 0x49606b8b
imul rax, rax, 0x23c9e1d1
shr rax, 0x3d
cmp eax, 0x21e01915
je 0x1400d1350
mov rbx, qword [rbp + 0xb0]
nop
mov eax, dword [0x141dd84e0]
xor eax, dword [0x141dd84e4]
add eax, 0x8308872f
or eax, 0xc32ae921
and eax, 0xd7befd37
cmp eax, 0x5d462bf0
jbe 0x1400d1380
nop word cs:[rax + rax]
mov eax, dword [0x141dd8550]
sub eax, dword [0x141dd8554]
xor eax, 0x4420900
and eax, 0x443090c
cmp eax, 0x460e08ab
je 0x1400d13b0
nop dword [rax]
mov eax, dword [0x141dd8558]
mov ecx, dword [0x141dd855c]
add eax, ecx
add eax, 0x53772b1e
or eax, 0x52c2fedf
cmp eax, 0x2ec8f13a
jb 0x1400d13d0
movzx r14d, byte [r12 + 4]
movzx edi, byte [r12 + 5]
movzx r8d, byte [r12 + 6]
movzx r9d, byte [r12 + 7]
test r9d, r9d
je 0x1400d1430
cmp r9d, 1
je 0x1400d14d6
mov rax, qword [rbx + 0x40]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400d1420
test rax, rax
je 0x1400d14d6
nop dword [rax]
mov eax, dword [0x141dd8560]
and eax, dword [0x141dd8564]
add eax, 0xbbd79c25
imul rax, rax, 0x279c8e11
shr rax, 0x3d
cmp eax, 0xa2c28da
ja 0x1400d1430
test r8d, r8d
je 0x1400d1495
cmp r8d, 1
je 0x1400d14d6
cmp r8d, 2
jne 0x1400d1aa6
nop dword [rax + rax]
mov eax, dword [0x141dd8570]
and eax, dword [0x141dd8574]
or eax, 0xa6eaec31
imul eax, eax, 0xa809f502
cmp eax, 0x1104be5c
je 0x1400d1470
cmp qword [rbx + 0x58], 0
je 0x1400d14d6
test r14d, r14d
je 0x1400d14b3
cmp r14d, 1
je 0x1400d14d6
cmp r14d, 2
jne 0x1400d1b94
cmp qword [rbx + 0x98], rsi
je 0x1400d14d6
test edi, edi
je 0x1400d5d6d
cmp edi, 1
je 0x1400d14d6
cmp edi, 2
jne 0x1400d1c68
cmp qword [rbx + 0xb8], rsi
jne 0x1400d5d6d
mov rcx, qword [rbx + 0xf8]
nop dword [rax]
mov eax, dword [0x141dd8588]
xor edx, edx
div dword [0x141dd858c]
xor eax, 0x901205cc
or eax, 0x268d6202
cmp eax, 0xa250d502
jb 0x1400d14e0
test rcx, rcx
je 0x1400d5d6d
mov dword [rbp + 0x50], r9d
mov dword [rbp + 0x90], r8d
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d1520
mov rcx, qword [rcx + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov qword [rbp + 0xa8], rcx
mov edx, 0x1a
mov r8, qword [rbp + 0xa0]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1400d5d6d
mov eax, dword [0x141dd8590]
xor edx, edx
div dword [0x141dd8594]
nop dword [rax]
mov eax, dword [0x141dd8598]
sub eax, dword [0x141dd859c]
or eax, 0x1806b046
and eax, 0x1816b04e
cmp eax, 0x205cb38a
je 0x1400d1570
mov rax, qword [rbp + 0xa0]
mov r8, qword [rax]
test r8, r8
je 0x1400d1ad4
mov eax, dword [0x141dd89b8]
add eax, dword [0x141dd89bc]
or eax, 0x90840b42
xor eax, 0x10b40
or eax, 0x4e6a74bd
cmp eax, 0x65ae08ae
je 0x1400d15a0
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, qword [rbp + 0xa8]
mov rdx, r8
mov r8, qword [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov ecx, dword [0x141dd89c0]
xor ecx, dword [0x141dd89c4]
imul ecx, ecx, 0x53470e09
add ecx, 0x89cf4320
xor ecx, 0x34aa7a56
cmp ecx, 0x37bb24b6
ja 0x1400d15f0
test eax, eax
je 0x1400d1bbb
mov eax, 0xdf0165c3
nop word cs:[rax + rax]
mov ecx, dword [0x141dd89d0]
xor ecx, dword [0x141dd89d4]
add ecx, 0x12f6fba0
imul rcx, rax
shr rcx, 0x3c
and ecx, 7
cmp ecx, 0x86ae3ead
ja 0x1400d1630
mov rax, qword [rbp + 0x80]
mov edx, dword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400d1bf4
nop
mov eax, dword [0x141dd89e8]
or eax, dword [0x141dd89ec]
add eax, 0xfc878947
and eax, 0xdc5292a3
cmp eax, 0x5e82ef09
je 0x1400d1690
mov r13, qword [rbp - 0x50]
mov rcx, qword [rbp + 0x28]
mov r8d, dword [rbp + 0x90]
mov edx, dword [rbp + 0x50]
nop
mov eax, dword [0x141dd89f0]
imul eax, dword [0x141dd89f4]
imul eax, eax, 0xfcd53b4a
cmp eax, 0xa89605f2
je 0x1400d16c0
movzx eax, word [rcx + 0x24]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x38], r15
lea r9, [rbx + 0x30]
nop dword [rax]
mov eax, dword [0x141dd89f8]
imul eax, dword [0x141dd89fc]
add eax, 0x75dc106b
or eax, 0xa47c45fd
imul rax, rax, 0x2970e439
shr rax, 0x3d
cmp eax, 0xfe8823a0
je 0x1400d16f0
mov eax, dword [rcx + 0x28]
mov qword [rbp + 0x30], rax
mov eax, dword [rcx + 0x48]
mov qword [rbp + 0x78], rax
test edx, edx
mov dword [rbp + 0x98], edi
mov dword [rbp + 0x68], r14d
je 0x1400d48ae
mov r15d, dword [rcx + 0x44]
movzx r12d, word [rcx + 0x40]
cmp edx, 1
je 0x1400d17e5
nop dword [rax + rax]
mov eax, dword [0x141dd8a00]
or eax, dword [0x141dd8a04]
and eax, 0xe60caaf8
add eax, 0x9c8e61d7
xor eax, 0xfa42b2b6
cmp eax, 0x173b60f4
jb 0x1400d1750
mov eax, dword [0x141dd8a08]
xor edx, edx
div dword [0x141dd8a0c]
mov eax, dword [0x141dd8a10]
xor eax, dword [0x141dd8a14]
or eax, 0xa797dc64
imul eax, eax, 0x459dfbb8
cmp eax, 0x3f7e8993
jb 0x1400d1780
mov rax, qword [rbx + 0x40]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8a18]
imul ecx, dword [0x141dd8a1c]
and ecx, 0xb878ba1e
xor ecx, 0xe2f3c80
imul rcx, rcx, 0x31a3b36d
shr rcx, 0x3a
cmp ecx, 0x3d2a3a3f
je 0x1400d17b0
test rax, rax
jne 0x1400d48ae
mov eax, dword [0x141ddc4f0]
nop dword [rax + rax]
mov ecx, dword [0x141dd8a20]
and ecx, dword [0x141dd8a24]
and ecx, 0x4b067947
cmp ecx, 0xd3bc19ac
je 0x1400d17f0
cmp eax, 3
mov qword [rbp + 0x80], r9
jne 0x1400d1e4b
nop word [rax + rax]
mov eax, dword [0x141dd8a30]
sub eax, dword [0x141dd8a34]
add eax, 0xba92a1b0
and eax, 0x403e9c94
imul eax, eax, 0x400408b8
cmp eax, 0xa88d4389
ja 0x1400d1820
movzx ecx, byte [0x141ddc4f4]
mov eax, dword [0x141dd8a38]
xor edx, edx
div dword [0x141dd8a3c]
nop dword [rax + rax]
mov eax, dword [0x141dd8a40]
or eax, dword [0x141dd8a44]
or eax, 0x7ffd6bfe
and eax, 0x7ffd6ffe
cmp eax, 0xf7bf4373
ja 0x1400d1860
test cl, cl
je 0x1400d1c8a
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp + 0xa8]
call fcn.1400d71f0
add rsp, 0x20
mov r15, qword [rbx + 0x38]
nop word cs:[rax + rax]
mov eax, dword [str.r__a]
mov ecx, dword [0x141dd8acc]
add eax, ecx
add eax, 0x6ffe4ea5
xor eax, 0x9c75e2ad
add eax, 0x485fa02c
cmp eax, 0xfdf97585
ja 0x1400d18b0
mov rax, qword [rbx + 0x40]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x1400d1a20
xor r13d, r13d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r14d, r14d
nop word cs:[rax + rax]
mov rax, r14
shl rax, 5
cmp qword [r15 + rax], 0
je 0x1400d19e3
add rax, r15
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8ad0]
imul ecx, dword [0x141dd8ad4]
and ecx, 0x1eebe07d
imul ecx, ecx, 0x571ed0c3
cmp ecx, 0x96f4fa54
je 0x1400d1920
mov rdi, qword [rax + 8]
mov eax, dword [0x141dd8ad8]
or eax, dword [0x141dd8adc]
and eax, 0x612abde1
add eax, 0x717cf6ab
xor eax, 0x7f543c9d
cmp eax, 0x114ded90
jae 0x1400d1970
mov rax, qword [0x141ddc4e0]
nop
mov r12, qword [0x141ddc4e0]
test r13b, r13b
jne 0x1400d1970
mov eax, dword [0x141dd8ae0]
imul eax, dword [0x141dd8ae4]
cmp eax, 0x83b97b83
jne 0x1400d19b0
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
nop word cs:[rax + rax]
mov ebx, dword [0x141dd8ae8]
imul ebx, dword [0x141dd8aec]
and ebx, 0x46533080
xor ebx, 0x430232e8
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
cmp ebx, 0xb497386a
ja 0x1400d19b0
inc r14
nop word cs:[rax + rax]
mov eax, dword [0x141dd8af0]
xor eax, dword [0x141dd8af4]
add eax, 0xc2323df9
and eax, 0x6bbe1f4
imul eax, eax, 0x111acb98
cmp eax, 0x4e9f468a
jb 0x1400d19f0
cmp r14, qword [rbp + 0xa0]
jne 0x1400d1900
mov rdx, qword [rbp + 0x80]
mov rax, qword [rdx]
nop word [rax + rax]
mov ecx, dword [0x141dd8af8]
imul ecx, dword [0x141dd8afc]
or ecx, 0xd1e2e254
cmp ecx, 0x4f28fa72
je 0x1400d1a30
test rax, rax
mov rbx, qword [rbp + 0xb0]
movabs rsi, 0x8000000000000000
mov edi, dword [rbp + 0x98]
je 0x1400d1a88
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, qword [rbp + 0x80]
add rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov r8d, dword [rbp + 0x90]
jmp 0x1400d48ae
mov eax, dword [0x141dd8568]
imul eax, dword [0x141dd856c]
xor eax, 0xe87ed87c
imul rax, rax, 0x586a3d8d
shr rax, 0x3e
or eax, 0x2e6dd99c
cmp eax, 0x25f724b5
jb 0x1400d1aa6
jmp 0x1400d26d5
mov qword [rbp + 0x58], r8
nop dword [rax + rax]
mov eax, dword [0x141dd85a0]
and eax, dword [0x141dd85a4]
add eax, 0xd31ae7d0
and eax, 0xf21fd2d2
cmp eax, 0xd738b1dc
ja 0x1400d1ae0
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xa8]
xor edx, edx
mov r8, qword [rbp + 0x78]
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov ecx, eax
mov r8d, 0x8fe60743
nop
mov eax, dword [0x141dd85a8]
xor edx, edx
div dword [0x141dd85ac]
or eax, 0x8f88a617
imul rax, r8
shr rax, 0x3e
add eax, 0x30ee8702
cmp eax, 0xb860c8dc
ja 0x1400d1b30
test ecx, ecx
js 0x1400d5d6d
mov dword [rbp + 0x98], edi
mov dword [rbp + 0x68], r14d
mov eax, dword [0x141dd85b0]
and eax, dword [0x141dd85b4]
imul eax, eax, 0x29da3645
or eax, 0x6fdfcfbf
cmp eax, 0x334c8049
mov r9, qword [rbp + 0x78]
jae 0x1400d26d7
jmp 0x1400d2718
mov eax, dword [0x141dd8578]
add eax, dword [0x141dd857c]
or eax, 0xeebd9cdc
add eax, 0xfe63206f
xor eax, 0xa9770bcb
cmp eax, 0x4543c4a1
ja 0x1400d1b94
jmp 0x1400d26d5
mov rdi, rsi
mov eax, dword [0x141dd89d8]
imul eax, dword [0x141dd89dc]
imul rcx, rax, 0x5b6e7995
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
add eax, 0x9d748a39
cmp eax, 0xa3190fdb
jbe 0x1400d5248
jmp 0x1400d5282
mov rdi, rsi
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd8da8]
imul eax, dword [0x141dd8dac]
imul rax, rax, 0x136419f
shr rax, 0x38
xor eax, 0x9f68bd8f
imul eax, eax, 0x1868d326
cmp eax, 0x7c63a616
je 0x1400d1c10
nop word [rax + rax]
mov eax, dword [0x141dd8db0]
imul eax, dword [0x141dd8db4]
add eax, 0x83d46a01
xor eax, 0x4501001
or eax, 0xaa26ed7c
cmp eax, 0x871a1440
jb 0x1400d1c40
jmp 0x1400d5292
mov eax, dword [0x141dd8580]
add eax, dword [0x141dd8584]
xor eax, 0x15000000
and eax, 0x15000008
cmp eax, 0xa0e69f0a
ja 0x1400d1c68
jmp 0x1400d26d5
mov eax, 0xe4b02725
nop
mov ecx, dword [str.8_a]
add ecx, dword [0x141dd8a4c]
xor ecx, 0x6e696ed5
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xa1a2edf8
cmp ecx, 0x55719bc5
jb 0x1400d1c90
mov eax, dword [0x141dd8a50]
xor eax, dword [0x141dd8a54]
add eax, 0xd998c30
or eax, 0xe1baf6dd
imul eax, eax, 0x95f3d9ff
cmp eax, 0xbcaa6178
jbe 0x1400d1cf9
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp + 0xa8]
mov r8, r15
mov r9, r12
call fcn.1400d6a40
add rsp, 0x20
mov rdi, qword [rbp - 0x10]
mov r14, qword [rbp + 0xa8]
nop word cs:[rax + rax]
mov esi, dword [0x141dd8a58]
sub esi, dword [0x141dd8a5c]
and esi, 0x2a8a1076
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
mov r8, r15
mov r9, r12
call fcn.1400d6a40
add rsp, 0x20
cmp esi, 0x80a692b0
je 0x1400d1d10
mov rsi, qword [rdi]
movabs rax, 0x8000000000000000
cmp rsi, rax
jne 0x1400d1d80
mov qword [r13], 0
mov qword [r13 + 8], 8
mov qword [r13 + 0x10], 0
jmp 0x1400d4677
mov eax, dword [0x141dd8a60]
xor edx, edx
div dword [0x141dd8a64]
add eax, 0x6a66b083
and eax, 0x8108a918
cmp eax, 0xc1f7ffdb
je 0x1400d1d80
mov rdi, qword [rdi + 8]
mov eax, dword [0x141dd8a68]
sub eax, dword [0x141dd8a6c]
add eax, 0x506a847f
imul rax, rax, 0xbbe5e2f
shr rax, 0x3b
add eax, 0xf19d6753
cmp eax, 0x9b0e17de
jae 0x1400d45bc
jmp 0x1400d45f0
mov r14, qword [rcx + 8]
mov r15, qword [rcx + 0x10]
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0x80]
mov ecx, dword [0x141dd84e8]
xor ecx, dword [0x141dd84ec]
and ecx, 0x9a3df632
add ecx, 0xc9f562d2
cmp ecx, 0x36cec5d7
jb 0x1400d1dea
mov ecx, dword [0x141dd84f0]
sub ecx, dword [0x141dd84f4]
add ecx, 0xf030081e
xor ecx, 0x247010
and ecx, 0x974f216
cmp ecx, 0xedcc9038
ja 0x1400d1e0a
shl rax, 1
test rax, rax
je 0x1400d24bd
xor eax, eax
test al, al
je 0x1400d2453
jmp 0x1400d2486
sub rsp, 0x20
call fcn.140100b6f
add rsp, 0x20
mov eax, dword [0x141dd8a28]
or eax, dword [0x141dd8a2c]
xor eax, 0x6485d010
and eax, 0x66c5d318
imul eax, eax, 0x44b30691
cmp eax, 0x878d0479
jb 0x1400d1e58
jmp 0x1400d1820
mov eax, dword [0x141dd8338]
xor edx, edx
div dword [0x141dd833c]
mov ebx, eax
or ebx, 0xd0ddec9f
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r15
mov rdx, rdi
mov r8, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
cmp ebx, 0x83e3aa2b
jne 0x1400d1ede
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r15
mov rdx, rdi
mov r8, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
jmp 0x1400d1e80
mov ecx, eax
mov eax, dword [0x141dd8340]
xor edx, edx
div dword [0x141dd8344]
cmp eax, 0xa5f2cc6b
je 0x1400d1ee0
test ecx, ecx
mov r15, qword [rbp + 0x38]
mov r12, qword [rbp - 0x38]
jne 0x1400d1f98
mov eax, dword [0x141dd8348]
xor eax, dword [0x141dd834c]
and eax, 0x360be62
add eax, 0x6a69d91e
cmp eax, 0xc7527df9
ja 0x1400d1f56
mov edi, dword [0x141dd8350]
and edi, dword [0x141dd8354]
or edi, 0x2a10268c
and edi, 0xaebfb69f
add edi, 0xb9ece2f4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0x484b4f68
jae 0x1400d1f70
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d1f22
mov eax, dword [0x141dd8358]
and eax, dword [0x141dd835c]
add eax, 0xfe9693a7
imul rax, rax, 0x2a13b235
shr rax, 0x3c
xor eax, 0xde25ee6b
cmp eax, 0x48a17f62
jb 0x1400d1f70
mov eax, dword [0x141dd8360]
sub eax, dword [0x141dd8364]
xor eax, 0x69acf756
add eax, 0x7ae7b977
mov ecx, 0xaf35f923
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xdbdb897f
jbe 0x1400d1fda
sub rsp, 0x20
mov rcx, r14
mov rdx, r13
mov r8, r12
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetSystemTimes]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8368]
and eax, dword [0x141dd836c]
or eax, 0xcc2cde1e
add eax, 0x660fefc9
imul rbx, rax, 0x4e626765
shr rbx, 0x3d
sub rsp, 0x20
mov rcx, r14
mov rdx, r13
mov r8, r12
call rdi
add rsp, 0x20
cmp ebx, 0xf9e0b455
je 0x1400d1ff0
nop dword [rax]
mov ecx, dword [0x141dd8370]
and ecx, dword [0x141dd8374]
xor ecx, 0xc52df198
imul rcx, rcx, 0x63895baf
shr rcx, 0x3a
and ecx, 0xfffffff1
cmp ecx, 0xfa6f79ec
ja 0x1400d2030
test eax, eax
mov rbx, qword [rbp + 0xb0]
jne 0x1400d20ba
mov eax, dword [0x141dd8378]
or eax, dword [0x141dd837c]
cmp eax, 0x99b0799f
je 0x1400d20aa
mov edi, dword [0x141dd8380]
sub edi, dword [0x141dd8384]
add edi, 0xbb973695
xor edi, 0xab1156e8
add edi, 0x15e8fe3c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0xfddbcd2d
jbe 0x1400d20ba
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d2076
mov rcx, qword [rsi]
mov rax, qword [rbp + 0xa8]
mov edx, dword [rax]
mov eax, dword [rax + 4]
shl rax, 0x20
or rax, rdx
xor r8d, r8d
nop word cs:[rax + rax]
mov r10d, dword [0x141dd8388]
add r10d, dword [0x141dd838c]
or r10d, 0x440302
xor r10d, 0x1000000
and r10d, 0x1660703
mov rdx, qword [r13]
mov r9, qword [rbx + 0x110]
cmp rdx, r9
cmovb r9, r8
cmp r10d, 0x1b9dcbf2
ja 0x1400d20e0
mov r10, qword [r12]
mov r11, rdx
sub r11, r9
mov r8, qword [rbx + 0x118]
xor esi, esi
cmp r10, r8
cmovae rsi, r8
mov r9, qword [rbx + 0x100]
mov r8, qword [rbx + 0x108]
mov qword [rbx + 0x108], rax
mov qword [rbx + 0x100], rcx
mov qword [rbx + 0x118], r10
sub r10, rsi
mov qword [rbx + 0x110], rdx
add r10, r11
mov rdx, 0xffffffffffffffff
cmovae rdx, r10
test rdx, rdx
je 0x1400d21a2
xor r10d, r10d
cmp rcx, r9
cmovb r9, r10
sub rcx, r9
cmp rax, r8
cmovb r8, r10
sub rax, r8
test rdx, rdx
js 0x1400d222e
cvtsi2ss xmm0, rdx
jmp 0x1400d2243
mov eax, dword [0x141dd8398]
and eax, dword [0x141dd839c]
imul eax, eax, 0x307546e
cmp eax, 0x2f2b043d
jne 0x1400d21c5
mov dword [rbx + 0x150], 0
mov eax, 0xe16fc2a9
nop word [rax + rax]
mov ecx, dword [0x141dd83a0]
or ecx, dword [0x141dd83a4]
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xb9693245
imul ecx, ecx, 0x8b766a4b
mov dword [rbx + 0x150], 0
cmp ecx, 0xb3bb691d
jb 0x1400d21d0
nop word cs:[rax + rax]
mov eax, dword [0x141dd83a8]
xor eax, dword [0x141dd83ac]
imul eax, eax, 0x6ed34715
cmp eax, 0x91552d8f
je 0x1400d2210
jmp 0x1400d0b94
mov r8, rdx
shr r8, 1
and edx, 1
or rdx, r8
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
mov rdx, qword [rbp + 0x90]
add rax, rcx
mov rcx, 0xffffffffffffffff
cmovae rcx, rax
test rcx, rcx
js 0x1400d228d
cvtsi2ss xmm1, rcx
divss xmm1, xmm0
mulss xmm1, dword [0x140103db0]
test rdx, rdx
jns 0x1400d22b3
mov rax, rdx
shr rax, 1
and edx, 1
or rdx, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
jmp 0x1400d22bb
mov rax, rcx
shr rax, 1
and ecx, 1
or rcx, rax
cvtsi2ss xmm1, rcx
addss xmm1, xmm1
divss xmm1, xmm0
mulss xmm1, dword [0x140103db0]
test rdx, rdx
js 0x1400d2273
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
mulss xmm1, xmm0
movss dword [rbx + 0x150], xmm1
mov eax, 0xd12184e3
nop dword [rax]
mov ecx, dword [0x141dd8390]
and ecx, dword [0x141dd8394]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xa84a723c
xor ecx, 0x87f8d742
cmp ecx, 0xbb35a104
ja 0x1400d22d0
jmp 0x1400d0b94
mov eax, dword [0x141dd83c8]
or eax, dword [0x141dd83cc]
imul edi, eax, 0x18508215
and edi, 0x452124
sub rsp, 0x20
mov rcx, rsi
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
cmp edi, 0xb209cb0
jne 0x1400d2350
sub rsp, 0x20
mov rcx, rsi
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
jmp 0x1400d22fd
mov ecx, dword [0x141dd83d0]
imul ecx, dword [0x141dd83d4]
cmp ecx, 0xbb148ca5
je 0x1400d2350
test eax, eax
je 0x1400d23b7
movups xmm0, xmmword [rbx + 0x140]
movups xmmword [rbx + 0x130], xmm0
movups xmm0, xmmword [r14 + 0x18]
movups xmmword [rbx + 0x140], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd83d8]
xor eax, dword [0x141dd83dc]
xor eax, 0x526b0896
add eax, 0xb9adc400
and eax, 0x4e4b47fd
cmp eax, 0x786b2376
jae 0x1400d2390
jmp 0x1400d0bf0
mov eax, dword [str.__DA_]
add eax, dword [0x141dd83e4]
imul rax, rax, 0x187eea33
shr rax, 0x3c
add eax, 0x87fc9601
mov ecx, 0x94247bdd
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xbce83bb0
je 0x1400d241d
mov esi, dword [0x141dd83e8]
imul esi, dword [0x141dd83ec]
and esi, 0x3c559609
xor esi, 0xfb148289
or esi, 0xaa4876
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x6f685153
jae 0x1400d2430
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d23e8
mov eax, dword [0x141dd83f0]
imul eax, dword [0x141dd83f4]
and eax, 0x84008400
add eax, 0x59ca576f
cmp eax, 0xe63f72fd
ja 0x1400d2430
jmp 0x1400d0bf0
mov eax, dword [0x141dd84f8]
xor eax, dword [0x141dd84fc]
imul eax, eax, 0x2f132124
and eax, 0x14d47170
mov rcx, qword [rbp + 0xb0]
mov r8, qword [rcx + 0x88]
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x8a9c2047
jne 0x1400d248f
mov rax, qword [0x141ddc4e0]
jmp 0x1400d2453
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd8500]
add eax, dword [0x141dd8504]
imul eax, eax, 0xca10c591
add eax, 0x50888216
cmp eax, 0xf48445f6
ja 0x1400d249f
mov rax, qword [rbp + 0xb0]
mov qword [rax + 0x80], rdi
mov qword [rax + 0x88], r14
mov qword [rax + 0x90], r15
sub rsp, 0x20
mov rcx, rsi
call fcn.1400d6270
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test eax, eax
jne 0x1400d2504
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r15, r12
movabs rsi, 0x8000000000000000
mov eax, dword [0x141dd8508]
and eax, dword [0x141dd850c]
imul rax, rax, 0x41336c15
shr rax, 0x3e
imul eax, eax, 0xc147762a
imul rax, rax, 0x23673ed1
shr rax, 0x3c
cmp eax, 0xa6d3edd3
ja 0x1400d2511
xor eax, eax
mov rbx, qword [rbp + 0xb0]
mov r12, qword [rbp + 0x70]
test al, al
jne 0x1400d254d
jmp 0x1400d13b0
mov eax, dword [0x141dd8518]
xor eax, dword [0x141dd851c]
imul edi, eax, 0x9450786c
or edi, 0x60640e01
and edi, 0x6def0f09
sub rsp, 0x20
mov rcx, rsi
call fcn.1400d6270
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp edi, 0xc369ec46
jne 0x1400d25b0
sub rsp, 0x20
mov rcx, rsi
call fcn.1400d6270
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400d2556
mov r12, qword [rbp + 0x70]
mov rbx, qword [rbp + 0xb0]
movabs rsi, 0x8000000000000000
mov ecx, dword [0x141dd8520]
sub ecx, dword [0x141dd8524]
or ecx, 0xff1fffe6
imul rcx, rcx, 0x10b78f89
shr rcx, 0x3b
cmp ecx, 0xbab41779
ja 0x1400d25c5
mov ecx, dword [0x141dd8528]
and ecx, dword [0x141dd852c]
imul ecx, ecx, 0x734a0f9e
add ecx, 0x5bb7898c
xor ecx, 0xe06c4c5e
cmp ecx, 0x55999f4d
ja 0x1400d25ea
test eax, eax
jne 0x1400d2683
xor eax, eax
test al, al
jne 0x1400d2651
mov eax, dword [0x141dd8530]
sub eax, dword [0x141dd8534]
add eax, 0xedd1e168
xor eax, 0x202257aa
imul rsi, rax, 0x4ce34549
shr rsi, 0x3e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x979e4ab9
jbe 0x1400d2661
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d261a
movabs rsi, 0x8000000000000000
mov eax, dword [0x141dd8538]
or eax, dword [0x141dd853c]
and eax, 0x493081a1
cmp eax, 0x26df3ce4
je 0x1400d266b
mov eax, dword [0x141dd8540]
imul eax, dword [str.e_ugF_]
or eax, 0x1b754d49
imul eax, eax, 0x2e8e4ff3
add eax, 0x3e7fc4f3
cmp eax, 0x6e159718
ja 0x1400d2683
mov eax, dword [0x141dd8548]
imul eax, dword [0x141dd854c]
add eax, 0xd06d2121
and eax, 0x8a945bc6
imul rax, rax, 0x764e5e89
shr rax, 0x3e
cmp eax, 0xcbf8866
ja 0x1400d26a7
jmp 0x1400d13b0
ud2
mov eax, dword [0x141dd85b8]
add eax, dword [0x141dd85bc]
xor eax, 0xcc192b94
imul rax, rax, 0x40c27b85
shr rax, 0x3b
or eax, 0xb1e5a550
mov rdx, qword [r9 + 8]
mov rcx, qword [r9 + 0x28]
xor r8d, r8d
test rcx, rcx
setne r8b
mov qword [rbx], r8
mov qword [rbx + 8], rcx
cmp eax, 0xe18b6013
jbe 0x1400d272d
mov rax, qword [r9 + 0x28]
xor ecx, ecx
test rax, rax
setne cl
mov qword [rbx], rcx
mov qword [rbx + 8], rax
jmp 0x1400d26d7
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov r14, qword [rbp + 0xa8]
mov rcx, r14
mov rdi, qword [rbp + 0x30]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1400d295d
mov rdx, qword [rdi + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r14
mov r8, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov ecx, eax
mov eax, dword [0x141dd85c0]
xor edx, edx
div dword [0x141dd85c4]
nop
mov eax, dword [0x141dd85c8]
or eax, dword [0x141dd85cc]
cmp eax, 0x25c39752
je 0x1400d27a0
mov r8d, dword [rbp + 0x90]
mov r9d, dword [rbp + 0x50]
mov edi, dword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141dd85d0]
sub eax, dword [0x141dd85d4]
xor eax, 0x20000184
or eax, 0x45f67e68
cmp eax, 0xd3626444
je 0x1400d27d0
test ecx, ecx
je 0x1400d298b
nop word cs:[rax + rax]
mov eax, dword [0x141dd85f0]
imul eax, dword [0x141dd85f4]
add eax, 0x485d6a26
or eax, 0x2a25048b
and eax, 0x3faf95af
cmp eax, 0xf35b8449
ja 0x1400d2800
mov rcx, qword [rbp + 0x88]
movzx eax, word [rcx + 0x38]
mov qword [rbp + 0x78], rax
mov rax, qword [rcx + 0x40]
mov qword [rbp + 0x30], rax
movzx esi, word [rcx + 0x70]
lea r14, [rbx + 0x30]
mov r12, qword [rbp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dd85f8]
xor edx, edx
div dword [0x141dd85fc]
xor eax, 0xa1a8429
or eax, 0x94c17b42
add eax, 0x8394fee2
cmp eax, 0xa2397eaa
ja 0x1400d2850
mov rax, qword [rcx + 0x80]
mov qword [rbp + 0xa0], rax
test r9d, r9d
mov qword [rbp + 0x38], r15
je 0x1400d329e
mov rbx, qword [rcx + 0x78]
cmp r9d, 1
je 0x1400d292f
nop dword [rax]
mov eax, dword [0x141dd8600]
sub eax, dword [0x141dd8604]
imul eax, eax, 0x81d17736
imul rax, rax, 0x141abb71
shr rax, 0x3c
or eax, 0xe3291e4
cmp eax, 0x524505e3
je 0x1400d28a0
nop dword [rax]
mov eax, dword [0x141dd8608]
or eax, dword [0x141dd860c]
xor eax, 0x34290013
and eax, 0xf63f1a17
cmp eax, 0x6a84d28f
je 0x1400d28d0
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0x40]
nop dword [rax + rax]
mov ecx, dword [0x141dd8610]
and ecx, dword [0x141dd8614]
or ecx, 0xa2e90a96
imul ecx, ecx, 0xef63a8da
and ecx, 0x9c1e8404
cmp ecx, 0x529cb04
jb 0x1400d2900
test rax, rax
jne 0x1400d329e
mov eax, dword [0x141ddc4f0]
cmp eax, 3
je 0x1400d2a20
mov eax, dword [0x141dd8618]
sub eax, dword [0x141dd861c]
and eax, 0x18a6201e
add eax, 0x23798110
cmp eax, 0xa6ddae74
jbe 0x1400d299e
jmp 0x1400d29cb
mov rdi, rsi
mov eax, dword [0x141dd85d8]
add eax, dword [0x141dd85dc]
or eax, 0x2515bf1b
add eax, 0x4c9d0b9a
and eax, 0x79aec2c8
cmp eax, 0x4a181ee9
jne 0x1400d2bf6
jmp 0x1400d2c2a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d2c72
mov eax, dword [0x141dd8620]
xor eax, dword [0x141dd8624]
imul edi, eax, 0x438cef11
add edi, 0x83997011
sub rsp, 0x20
call fcn.140100b6f
add rsp, 0x20
cmp edi, 0x7fd001a0
jae 0x1400d29da
sub rsp, 0x20
call fcn.140100b6f
add rsp, 0x20
jmp 0x1400d299e
mov eax, 0xae461f4f
mov r12, qword [rbp + 0x40]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8628]
and ecx, dword [0x141dd862c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x4afbbd76
xor ecx, 0xa916802c
cmp ecx, 0xe246f90d
jb 0x1400d29f0
nop dword [rax + rax]
mov eax, dword [0x141dd8630]
xor edx, edx
div dword [0x141dd8634]
and eax, 0x4a979084
imul rax, rax, 0x58f7404d
shr rax, 0x3a
add eax, 0xa9215de6
cmp eax, 0x1a2b13bb
jb 0x1400d2a20
movzx eax, byte [0x141ddc4f4]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8638]
sub ecx, dword [0x141dd863c]
xor ecx, 0x834cf6ec
imul rcx, rcx, 0x1554abdd
shr rcx, 0x3c
or ecx, 0xaae11f6
cmp ecx, 0x6a105244
ja 0x1400d2a60
test al, al
je 0x1400d2ac6
mov eax, dword [0x141dd86f0]
xor eax, dword [0x141dd86f4]
or eax, 0x2d45eb7
imul rax, rax, 0x395db96f
shr rax, 0x3d
cmp eax, 0xe4b0b6a9
mov rdi, qword [rbp + 0xa8]
mov rbx, qword [rbp + 0x20]
jbe 0x1400d304c
jmp 0x1400d3084
sub rsp, 0x20
lea rcx, [rbp - 0x78]
mov rdx, qword [rbp + 0xa8]
mov r8, rbx
mov r9, rsi
call fcn.1400d6a40
add rsp, 0x20
mov rdi, qword [rbp - 0x78]
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x1400d2b29
mov eax, dword [0x141dd8658]
add eax, dword [0x141dd865c]
or eax, 0x978a6501
imul eax, eax, 0xa4b2737c
imul rax, rax, 0x24cc97f
shr rax, 0x39
cmp eax, 0xbc388267
jne 0x1400d2cb3
jmp 0x1400d2cd9
mov eax, dword [0x141dd8640]
xor eax, dword [0x141dd8644]
imul eax, eax, 0xf2e126c4
cmp eax, 0xd33f0af1
je 0x1400d2b29
mov rsi, qword [rbp - 0x70]
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
call fcn.1400d6e90
add rsp, 0x20
test rdi, rdi
mov rcx, qword [rbp + 0xb0]
je 0x1400d2cfc
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dd8648]
or eax, dword [0x141dd864c]
imul rax, rax, 0x651a8d97
shr rax, 0x3e
imul eax, eax, 0x92b5df7
cmp eax, 0xcfc7e94c
je 0x1400d2bb0
sub rsp, 0x20
xor ebx, ebx
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test bl, bl
je 0x1400d2bc8
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d2b94
mov rcx, qword [rbp + 0xb0]
mov eax, dword [0x141dd8650]
and eax, dword [0x141dd8654]
or eax, 0x22180508
xor eax, 0x2508058c
or eax, 0xc8e3aa62
cmp eax, 0xda19d9f3
jae 0x1400d2bcf
jmp 0x1400d2cfc
mov eax, dword [0x141dd85e0]
or eax, dword [0x141dd85e4]
imul esi, eax, 0x3d0a1553
and esi, 0x1ad06a9d
add esi, 0xda8b777c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x5d5a646d
jae 0x1400d2c3a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d2bf6
mov eax, 0x800dd5bf
mov rsi, rdi
nop word cs:[rax + rax]
mov ecx, dword [0x141dd85e8]
or ecx, dword [0x141dd85ec]
or ecx, 0x7defddff
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xa58489e1
je 0x1400d2c50
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d2c80
nop word cs:[rax + rax]
mov eax, dword [0x141dd89c8]
imul eax, dword [0x141dd89cc]
and eax, 0x24c3c044
xor eax, 0x40905441
cmp eax, 0x5edee182
jae 0x1400d2c90
jmp 0x1400d5d6d
mov eax, dword [0x141dd8660]
add eax, dword [0x141dd8664]
imul eax, eax, 0x51bcec94
add eax, 0xa339ff56
mov qword [r12], 0
cmp eax, 0xecd0e03d
jbe 0x1400d2ce3
mov qword [r12], 0
jmp 0x1400d2cb3
mov qword [r12 + 8], 8
mov qword [r12 + 0x10], 0
mov rcx, qword [rbp + 0xb0]
mov edi, dword [rbp + 0x98]
mov r8d, dword [rbp + 0x90]
mov eax, dword [0x141dd8668]
xor eax, dword [0x141dd866c]
xor eax, 0xe8e9583c
imul eax, eax, 0x34dc9213
cmp eax, 0xeb73d46c
ja 0x1400d2d09
mov rax, qword [rcx + 0x38]
mov qword [rbp + 0x88], rax
mov r15, qword [rcx + 0x40]
test r15, r15
je 0x1400d2ec1
mov rax, qword [rbp + 0x88]
lea r12, [rax + 8]
xor esi, esi
nop dword [rax]
mov eax, dword [0x141dd8670]
add eax, dword [0x141dd8674]
xor eax, 0x3afbe4c6
add eax, 0xfc728777
cmp eax, 0x3e904d83
jb 0x1400d2d50
cmp qword [r12 - 8], 0
je 0x1400d2e3f
mov eax, dword [0x141dd8678]
xor edx, edx
div dword [0x141dd867c]
or eax, 0x83428688
imul eax, eax, 0x8c3583e9
or eax, 0x31e75f83
cmp eax, 0x50198e21
mov ecx, 0xc83bfca1
je 0x1400d2df5
mov eax, dword [0x141dd8680]
and eax, dword [0x141dd8684]
add eax, 0xd7e48d2c
imul rax, rcx
shr rax, 0x3d
mov rdi, qword [r12]
mov rbx, qword [0x141ddc4e0]
cmp eax, 0xc952e510
ja 0x1400d2df5
mov eax, dword [0x141dd8688]
xor eax, dword [0x141dd868c]
add eax, 0x2920f1d
or eax, 0x38074168
and eax, 0xbd1f45ea
cmp eax, 0xa49d374a
jae 0x1400d2dfe
jmp 0x1400d2ea6
mov rax, qword [0x141ddc4e0]
jmp 0x1400d2da3
mov r13d, dword [0x141dd8690]
add r13d, dword [0x141dd8694]
mov eax, 0xf711cc47
imul r13, rax
shr r13, 0x3e
add r13d, 0xf1463537
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r13d, 0x672e0ff0
jb 0x1400d2ea6
mov eax, dword [0x141dd8698]
imul eax, dword [0x141dd869c]
imul eax, eax, 0x201b2f65
cmp eax, 0xc214e6c7
je 0x1400d2e3f
mov r13, qword [rbp + 0x60]
mov edi, dword [rbp + 0x98]
mov r8d, dword [rbp + 0x90]
nop word [rax + rax]
mov eax, dword [0x141dd86a0]
imul eax, dword [0x141dd86a4]
imul eax, eax, 0x39de4997
or eax, 0x642440d0
and eax, 0x6db666fc
cmp eax, 0x1fb11b81
jb 0x1400d2e70
add r12, 0x20
inc rsi
dec r15
jne 0x1400d2d50
jmp 0x1400d2ec1
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d2dfe
mov eax, dword [0x141dd86a8]
and eax, dword [0x141dd86ac]
cmp eax, 0xd86b8b90
je 0x1400d2ec1
mov rax, qword [r14]
mov rsi, qword [rbp + 0x40]
mov ecx, dword [0x141dd86b0]
add ecx, dword [0x141dd86b4]
and ecx, 0xe65e3c37
imul ecx, ecx, 0xc3c9ebb0
cmp ecx, 0x547279f8
jb 0x1400d2edb
test rax, rax
je 0x1400d2fa1
mov eax, dword [0x141dd86b8]
and eax, dword [0x141dd86bc]
imul eax, eax, 0xbfbdb67c
cmp eax, 0xfd5d024c
jne 0x1400d2f24
mov rax, qword [0x141ddc4e0]
mov eax, dword [0x141dd86c0]
and eax, dword [0x141dd86c4]
add eax, 0x4b7c55c7
shr eax, 2
imul rax, rax, 0x21ebe4e9
shr rax, 0x3a
xor eax, 0x418dc683
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x40589448
jb 0x1400d2f24
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r8d, dword [rbp + 0x90]
mov eax, dword [0x141dd86c8]
add eax, dword [0x141dd86cc]
imul eax, eax, 0x608236e4
imul rcx, rax, 0x4ccc7867
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x51c73ae3
ja 0x1400d2f74
mov eax, dword [0x141dd86d0]
imul eax, dword [0x141dd86d4]
or eax, 0x7529ab7e
xor eax, 0xa89f230f
imul eax, eax, 0x905469a6
cmp eax, 0xe06527f7
jne 0x1400d2fd4
mov rax, qword [rsi + 0x10]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rsi]
movups xmmword [r14], xmm0
mov eax, dword [0x141dd86d8]
imul eax, dword [0x141dd86dc]
mov rcx, qword [rsi + 0x10]
mov qword [r14 + 0x10], rcx
imul rax, rax, 0x56776139
shr rax, 0x39
imul eax, eax, 0x745781a5
add eax, 0x54d26ea5
movups xmm0, xmmword [rsi]
movups xmmword [r14], xmm0
cmp eax, 0x2e67f802
jb 0x1400d2fd4
mov eax, dword [0x141dd86e0]
and eax, dword [0x141dd86e4]
add eax, 0x2b4c8de3
or eax, 0xeb080d8
and eax, 0x8ef2a8df
cmp eax, 0x3870020c
je 0x1400d300d
mov eax, dword [0x141dd86e8]
add eax, dword [0x141dd86ec]
or eax, 0x35601dd2
cmp eax, 0x44ec1b09
je 0x1400d302f
jmp 0x1400d329e
mov eax, dword [0x141dd86f8]
imul eax, dword [0x141dd86fc]
add eax, 0x3c3deb8
and eax, 0xb4a954a2
imul esi, eax, 0x708aba0e
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
call fcn.1400d71f0
add rsp, 0x20
cmp esi, 0xd95fe128
jbe 0x1400d3099
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
call fcn.1400d71f0
add rsp, 0x20
jmp 0x1400d304c
mov rax, qword [rbp + 0xb0]
mov rsi, qword [rax + 0x38]
mov rdi, qword [rax + 0x40]
nop dword [rax + rax]
mov eax, dword [0x141dd8700]
add eax, dword [0x141dd8704]
or eax, 0x10d08836
and eax, 0x16faef3e
imul eax, eax, 0xfa16fd48
cmp eax, 0x21df4f5
jb 0x1400d30b0
test rdi, rdi
je 0x1400d317b
xor ebx, ebx
mov r15d, 0x8db1221d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dd8708]
imul eax, dword [0x141dd870c]
xor eax, 0xd648c89
add eax, 0xa671d1d8
imul rax, r15
shr rax, 0x3c
cmp eax, 0xeb5c3fd0
ja 0x1400d30f0
mov rax, rbx
shl rax, 5
cmp qword [rsi + rax], 0
je 0x1400d313f
add rax, rsi
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
inc rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dd8710]
sub eax, dword [0x141dd8714]
and eax, 0x14ef89ea
add eax, 0xca0c3bea
and eax, 0xd27766a6
cmp eax, 0xd22155cd
ja 0x1400d3150
cmp rbx, rdi
jne 0x1400d30f0
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d3180
mov rcx, qword [r14]
mov edi, dword [rbp + 0x98]
mov rbx, qword [rbp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8718]
xor edx, edx
div dword [0x141dd871c]
xor eax, 0x1383f1df
add eax, 0x8a1efe30
and eax, 0x1a71cfef
cmp eax, 0x6641f742
ja 0x1400d31a0
test rcx, rcx
mov r13, qword [rbp + 0x60]
je 0x1400d320a
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd8720]
sub eax, dword [0x141dd8724]
imul eax, eax, 0xdd093dac
or eax, 0xf5dc6f6b
and eax, 0xffffeffb
cmp eax, 0xd1b37094
je 0x1400d31e7
mov eax, dword [0x141dd8728]
imul eax, dword [0x141dd872c]
or eax, 0x2d08a18b
add eax, 0x123c5aef
or eax, 0x9c580fe7
cmp eax, 0xd4fe4558
jb 0x1400d325f
mov rax, qword [rbx + 0x10]
mov qword [r14 + 0x10], rax
mov eax, dword [0x141dd8730]
and eax, dword [0x141dd8734]
xor eax, 0x11472f35
imul eax, eax, 0xae4489e6
or eax, 0xd869173c
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
cmp eax, 0x843d758
jae 0x1400d3270
mov rax, qword [rbx + 0x10]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
jmp 0x1400d322d
mov r8d, dword [rbp + 0x90]
nop word [rax + rax]
mov eax, dword [0x141dd8738]
imul eax, dword [0x141dd873c]
and eax, 0xbd7dce1c
xor eax, 0x5aafca17
cmp eax, 0x939e2dd1
jb 0x1400d3280
test r8d, r8d
mov rsi, qword [rbp + 0xb0]
mov r14d, dword [rbp + 0x68]
je 0x1400d3d04
cmp r8d, 1
je 0x1400d32ef
nop dword [rax + rax]
mov eax, dword [str.ob__1_v]
imul eax, dword [0x141dd8744]
imul eax, eax, 0xa9944d56
add eax, 0x4ee3f6
and eax, 0x3b9970b2
cmp eax, 0x667bf7fc
ja 0x1400d32c0
cmp qword [rsi + 0x58], 0
jne 0x1400d3d04
lea rcx, [rsi + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8748]
xor edx, edx
div dword [0x141dd874c]
add eax, 0x34035498
and eax, 0x5f13bbb
imul eax, eax, 0x5d53bab7
cmp eax, 0x27e2f820
jb 0x1400d3300
mov qword [rbp + 0x88], rcx
mov eax, dword [0x141dd8750]
or eax, dword [0x141dd8754]
add eax, 0xf75137cb
shr eax, 1
imul rax, rax, 0x422a0339
shr rax, 0x3d
cmp eax, 0x6c2f8239
mov r8, qword [rbp + 0xa0]
jbe 0x1400d3381
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0xa8]
mov rdx, r8
mov r8, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov r8, qword [rbp + 0xa0]
add rsp, 0x20
mov esi, 0xb46f3351
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov r12, qword [rbp + 0xa8]
mov r14, qword [rbp + 0x48]
nop dword [rax + rax]
mov eax, dword [0x141dd8758]
add eax, dword [0x141dd875c]
imul rax, rsi
shr rax, 0x3d
add eax, 0xdb7133ab
imul rbx, rax, 0x27e5dc79
shr rbx, 0x3d
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r12
mov rdx, r8
mov r8, r14
call rdi
mov r8, qword [rbp + 0xa0]
add rsp, 0x20
cmp ebx, 0x5842dd40
ja 0x1400d33a0
mov rsi, qword [rbp + 0xb0]
mov rdi, qword [rbp - 0x48]
nop word [rax + rax]
mov ecx, dword [0x141dd8760]
xor ecx, dword [0x141dd8764]
or ecx, 0x8615185
add ecx, 0x9034875e
imul rcx, rcx, 0x4d2869cf
shr rcx, 0x3e
cmp ecx, 0xfcccd596
ja 0x1400d3400
test rax, rax
je 0x1400d3470
mov rax, qword [rbp + 0x48]
mov r9, qword [rax]
sub r9, r8
add r9, qword [rax + 0x18]
sub rsp, 0x20
mov rcx, rdi
mov rdx, qword [rbp + 0xa8]
call fcn.1400d6a40
add rsp, 0x20
mov rcx, qword [rdi]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1400d35f1
nop dword [rax + rax]
mov eax, dword [0x141dd8768]
or eax, dword [str.2_1b]
or eax, 0xc0640020
and eax, 0xd07f8ca4
imul rax, rax, 0x67636531
shr rax, 0x3e
cmp eax, 0xfa9e1ec4
ja 0x1400d3470
mov r14, qword [rsi + 0x50]
mov r15, qword [rsi + 0x58]
mov eax, dword [0x141dd8770]
imul eax, dword [0x141dd8774]
and eax, 0x3e8abdb3
add eax, 0x64e72532
cmp eax, 0x6b3800b3
jb 0x1400d34a0
test r15, r15
je 0x1400d356f
lea r12, [r14 + 8]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d34ed
add r12, 0x20
dec r15
je 0x1400d356f
cmp qword [r12 - 8], 0
je 0x1400d34e0
mov rdi, qword [r12]
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dd8778]
and eax, dword [0x141dd877c]
imul eax, eax, 0xdc7daa3e
or eax, 0xd6d4f77f
cmp eax, 0x3219ab18
je 0x1400d355b
nop
mov eax, dword [0x141dd8780]
xor edx, edx
div dword [0x141dd8784]
imul r13, rax, 0x37e94bbf
shr r13, 0x3b
or r13d, 0x975d4ac0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
cmp r13d, 0x1ab461b1
jne 0x1400d34e0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
jmp 0x1400d3520
mov rbx, qword [rbp + 0x88]
mov rcx, qword [rbx]
mov eax, dword [0x141dd8788]
xor edx, edx
div dword [0x141dd878c]
nop word [rax + rax]
mov eax, dword [0x141dd8790]
or eax, dword [0x141dd8794]
cmp eax, 0xf612184d
je 0x1400d3590
mov rsi, qword [rbp + 0xb0]
mov r13, qword [rbp + 0x60]
mov edi, dword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8798]
xor eax, dword [0x141dd879c]
add eax, 0x6354d879
xor eax, 0xf2b413bd
cmp eax, 0x175445b
jb 0x1400d35c0
test rcx, rcx
je 0x1400d36a0
xor eax, eax
test al, al
je 0x1400d365a
jmp 0x1400d3684
mov eax, dword [0x141dd87c8]
xor edx, edx
div dword [0x141dd87cc]
mov qword [rbp + 0x40], rcx
mov eax, dword [0x141dd87d0]
imul eax, dword [0x141dd87d4]
and eax, 0x8200000
cmp eax, 0x2d18f4de
ja 0x1400d3603
mov r14, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0xa0], rax
mov eax, dword [0x141dd87d8]
xor edx, edx
div dword [0x141dd87dc]
add eax, 0x17efaafa
xor eax, 0x48f61fc6
cmp eax, 0x8575cd8a
mov rcx, qword [rbp + 0xb0]
jbe 0x1400d376e
jmp 0x1400d37a7
mov eax, dword [0x141dd87a0]
sub eax, dword [0x141dd87a4]
and eax, 0x1cf761a7
imul eax, eax, 0xab21ae9a
and eax, 0x2b59492c
mov rcx, qword [0x141ddc4e0]
cmp eax, 0xe02aae57
jbe 0x1400d368d
mov rax, qword [0x141ddc4e0]
jmp 0x1400d365a
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd87a8]
or eax, dword [0x141dd87ac]
and eax, 0xfcdefae1
imul eax, eax, 0xa1847fe7
imul rax, rax, 0x7a56c8e7
shr rax, 0x3e
cmp eax, 0x3ee19b49
ja 0x1400d36e8
mov eax, dword [0x141dd87b0]
xor eax, dword [0x141dd87b4]
and eax, 0xe0184060
mov qword [rbx], 0
cmp eax, 0xae95bb15
jne 0x1400d36f1
mov qword [rbx], 0
jmp 0x1400d36c9
xor eax, eax
test al, al
je 0x1400d3707
mov qword [rsi + 0x50], 8
mov qword [rsi + 0x58], 0
mov r14d, dword [rbp + 0x68]
nop dword [rax + rax]
mov eax, dword [0x141dd87b8]
imul eax, dword [0x141dd87bc]
add eax, 0xf382ec92
and eax, 0x6791309f
mov qword [rsi + 0x50], 8
mov qword [rsi + 0x58], 0
cmp eax, 0xd7efa785
je 0x1400d3710
nop
mov eax, dword [0x141dd87c0]
or eax, dword [0x141dd87c4]
imul eax, eax, 0x516ec94b
add eax, 0x326a1572
imul rax, rax, 0x4bd4129b
shr rax, 0x3e
cmp eax, 0xe651dc37
jae 0x1400d3740
jmp 0x1400d3cfc
mov eax, dword [0x141dd87e0]
imul eax, dword [0x141dd87e4]
imul rax, rax, 0x67ba72c5
shr rax, 0x3e
add eax, 0xcee80b17
and eax, 0xc8680218
mov rbx, qword [rcx + 0x50]
mov rsi, qword [rcx + 0x58]
mov qword [rcx + 0x58], 0
cmp eax, 0x10d1c848
jae 0x1400d37b1
mov qword [rcx + 0x58], 0
jmp 0x1400d376e
test rsi, rsi
je 0x1400d3877
xor edi, edi
mov r15d, 0xa71041b5
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd87f8]
or eax, dword [0x141dd87fc]
xor eax, 0x30244c40
or eax, 0xcfdb92ad
cmp eax, 0x9197eb58
jb 0x1400d37d0
mov rax, rdi
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1400d383e
add rax, rbx
mov ecx, dword [0x141dd8800]
or ecx, dword [0x141dd8804]
xor ecx, 0x20101480
or ecx, 0xdd6aca7f
imul rcx, r15
shr rcx, 0x3e
cmp ecx, 0xbad83938
ja 0x1400d37fe
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
inc rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd8808]
or eax, dword [0x141dd880c]
imul eax, eax, 0xf68c8d4c
add eax, 0xdde89bb8
cmp eax, 0x198ff94
jb 0x1400d3850
cmp rdi, rsi
jne 0x1400d37d0
mov rsi, qword [rbp + 0xa0]
lea r12, [r14 + rsi*2]
mov eax, dword [0x141dd87e8]
xor edx, edx
div dword [0x141dd87ec]
xor eax, 0x6acdc84c
imul eax, eax, 0xbdd140f0
add eax, 0xeb5d1e7a
cmp eax, 0xc085cfdc
ja 0x1400d3882
mov eax, dword [0x141dd87f0]
add eax, dword [0x141dd87f4]
xor eax, 0x6f9b4e91
add eax, 0x2e42c14f
or eax, 0x4419b861
cmp eax, 0xb06a6132
jb 0x1400d38a7
xor eax, eax
xor edi, edi
mov qword [rbp + 0x48], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd8810]
xor eax, dword [0x141dd8814]
xor eax, 0x8b655976
add eax, 0x35da20b1
imul rax, rax, 0x1a10e29b
shr rax, 0x3a
cmp eax, 0x1c4accc8
ja 0x1400d38e0
cmp rdi, rsi
je 0x1400d3b94
lea r9, [r14 + rdi*2]
xor ecx, ecx
xor r15d, r15d
mov r8, r9
mov eax, dword [0x141dd8818]
xor edx, edx
div dword [0x141dd881c]
mov eax, dword [0x141dd8820]
or eax, dword [0x141dd8824]
imul rax, rax, 0x5a2d460f
shr rax, 0x3e
add eax, 0x53dae619
cmp eax, 0xeaa106ec
ja 0x1400d392b
cmp word [r8], 0
je 0x1400d398b
add r8, 2
inc r15
nop dword [rax]
mov eax, dword [0x141dd8828]
or eax, dword [0x141dd882c]
add eax, 0xca589fc6
or eax, 0x8006e612
cmp eax, 0xf685253c
je 0x1400d3960
add rcx, 2
cmp r8, r12
jne 0x1400d391d
jmp 0x1400d3b94
add rdi, r15
jb 0x1400d3c28
mov eax, dword [0x141dd8860]
imul eax, dword [0x141dd8864]
imul eax, eax, 0x55693ce7
add eax, 0x2425ac88
and eax, 0x9b0cb695
cmp eax, 0x6cfff388
je 0x1400d3994
mov eax, dword [0x141dd8868]
imul eax, dword [0x141dd886c]
or eax, 0xb66e191f
imul rax, rax, 0x1c0b921b
shr rax, 0x3b
add eax, 0x12f4a479
cmp eax, 0x8e6eb6cf
ja 0x1400d39b8
cmp rdi, rsi
ja 0x1400d3c4f
mov eax, dword [str._nHWJ]
xor edx, edx
div dword [0x141dd887c]
mov eax, dword [0x141dd8880]
sub eax, dword [0x141dd8884]
imul eax, eax, 0xf87fe04f
cmp eax, 0xb9765fcc
je 0x1400d39f8
mov rax, r9
test rcx, rcx
je 0x1400d3b94
add rcx, 0xfffffffffffffffe
cmp word [rax], 0x3d
lea rax, [rax + 2]
jne 0x1400d3a14
mov qword [rbp + 0x20], r14
mov eax, dword [0x141dd8890]
imul eax, dword [0x141dd8894]
imul eax, eax, 0x5d7f6c96
or eax, 0xc1c106f6
xor eax, 0x7f832448
cmp eax, 0xc9c8d392
mov rsi, qword [rbp - 8]
mov r14, r9
ja 0x1400d3a94
mov eax, dword [0x141dd8898]
add eax, dword [0x141dd889c]
xor eax, 0x68566e9e
imul r13d, eax, 0x2ff90b14
sub rsp, 0x20
mov rcx, rsi
mov rdx, r9
mov r8, r15
call fcn.14008ced0
mov r9, r14
add rsp, 0x20
cmp r13d, 0xbb2a06a4
jbe 0x1400d3aaf
sub rsp, 0x20
mov rcx, rsi
mov rdx, r9
mov r8, r15
call fcn.14008ced0
mov r9, r14
add rsp, 0x20
jmp 0x1400d3a5a
mov rax, qword [rbp + 0x88]
mov r15, qword [rbp + 0x48]
cmp r15, qword [rax]
mov rsi, qword [rbp + 0xa0]
jne 0x1400d3ae5
sub rsp, 0x20
mov rcx, qword [rbp + 0x88]
call fcn.140016770
add rsp, 0x20
mov rax, qword [rbp + 0xb0]
mov rbx, qword [rax + 0x50]
mov eax, dword [0x141dd88a0]
imul eax, dword [0x141dd88a4]
mov ecx, 0x9682074d
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x938efb2a
mov r8, qword [rbp + 0xb0]
mov r9, qword [rbp - 8]
mov r14, qword [rbp + 0x20]
je 0x1400d3b71
mov ecx, dword [0x141dd88a8]
or ecx, dword [0x141dd88ac]
or ecx, 0xa15011ee
xor ecx, 0x39e78419
add ecx, 0x9ec20cf7
mov rdx, r15
shl rdx, 5
lea rax, [r15 + 1]
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [rbx + rdx + 0x10], xmm1
movups xmmword [rbx + rdx], xmm0
mov qword [r8 + 0x58], rax
cmp ecx, 0x6c09ded2
ja 0x1400d3b71
inc rdi
cmp rdi, rsi
mov r13, qword [rbp + 0x60]
jbe 0x1400d38cd
jmp 0x1400d3c88
mov rax, r15
shl rax, 5
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [rbx + rax + 0x10], xmm1
movups xmmword [rbx + rax], xmm0
lea rax, [r15 + 1]
mov qword [r8 + 0x58], rax
jmp 0x1400d3b15
mov r8, r14
mov eax, 0x8bad09c7
mov rsi, qword [rbp + 0xb0]
mov edi, dword [rbp + 0x98]
mov r14d, dword [rbp + 0x68]
mov ecx, dword [0x141dd8840]
imul ecx, dword [0x141dd8844]
imul ecx, ecx, 0x2d5b619d
xor ecx, 0xef92e29a
shr ecx, 1
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x9db2ac60
ja 0x1400d3bad
mov eax, dword [0x141dd8848]
imul eax, dword [0x141dd884c]
imul eax, eax, 0x6747cd10
cmp eax, 0xb73dd60
je 0x1400d3bd8
cmp qword [rbp + 0x40], 0
je 0x1400d3cfc
mov eax, dword [0x141dd8850]
or eax, dword [0x141dd8854]
and eax, 0x14384907
xor eax, 0x110a1802
or eax, 0xe885a6d8
cmp eax, 0x7d07fc19
jae 0x1400d3cb1
jmp 0x1400d3ce3
ud2
ud2
mov eax, dword [0x141dd8830]
xor edx, edx
div dword [0x141dd8834]
or eax, 0x3d33b3a1
imul eax, eax, 0xd3d680be
cmp eax, 0xe02e47b3
jne 0x1400d4093
jmp 0x1400d40c4
mov eax, dword [0x141dd8858]
xor eax, dword [0x141dd885c]
and eax, 0xb799d8c0
xor eax, 0xb846478
mov edx, 0xbf0e0b6d
imul rdx, rax
shr rdx, 0x3d
mov rcx, qword [0x141ddc4e0]
cmp edx, 0x6a649c53
jbe 0x1400d3cec
mov rax, qword [0x141ddc4e0]
jmp 0x1400d3cb1
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor eax, eax
nop
test al, al
jne 0x1400d3d00
lea r9, [rsi + 0x98]
lea rbx, [rsi + 0xb8]
xor eax, eax
mov r8, qword [rbp + 0x58]
nop dword [rax + rax]
test al, al
jne 0x1400d3d20
movabs rsi, 0x8000000000000000
mov ecx, 0xd1f605e9
nop word cs:[rax + rax]
mov eax, dword [0x141dd88b0]
xor edx, edx
div dword [0x141dd88b4]
imul rax, rcx
shr rax, 0x3a
add eax, 0xd5781810
xor eax, 0x892299eb
cmp eax, 0x5867bb41
jb 0x1400d3d40
test r14d, r14d
je 0x1400d3dd6
cmp r14d, 1
jne 0x1400d3db0
nop word cs:[rax + rax]
mov eax, dword [0x141dd88b8]
xor eax, dword [0x141dd88bc]
imul eax, eax, 0x96834f4c
xor eax, 0x2c2673f9
imul eax, eax, 0xc4bf2981
cmp eax, 0xe3d42c0c
je 0x1400d3d80
mov r12b, 1
jmp 0x1400d3dd9
mov eax, dword [0x141dd88c0]
or eax, dword [0x141dd88c4]
or eax, 0xadf765fa
and eax, 0xadf76dff
cmp eax, 0x72ab039e
je 0x1400d3db0
cmp qword [r9], rsi
sete r12b
jmp 0x1400d3dd9
xor r12d, r12d
test edi, edi
je 0x1400d3edf
cmp edi, 1
je 0x1400d3eec
cmp edi, 2
jne 0x1400d3ebd
nop word cs:[rax + rax]
mov eax, dword [0x141dd88d0]
xor edx, edx
div dword [0x141dd88d4]
imul rcx, rax, 0x48c1b741
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
add eax, 0x71c1275d
or eax, 0x3baddfa7
cmp eax, 0x8cfb1e2f
je 0x1400d3e00
mov rcx, qword [rbx]
mov eax, dword [0x141dd88d8]
xor edx, edx
div dword [0x141dd88dc]
nop word cs:[rax + rax]
mov eax, dword [0x141dd88e0]
or eax, dword [0x141dd88e4]
add eax, 0x66186adb
shr eax, 1
imul rdx, rax, 0x4129d08b
shr rdx, 0x3b
xor edx, 0x61ed8012
cmp rcx, rsi
sete al
cmp edx, 0x48982afe
jb 0x1400d3e50
nop word cs:[rax + rax]
mov ecx, dword [0x141dd88e8]
sub ecx, dword [0x141dd88ec]
imul rcx, rcx, 0x58676f79
shr rcx, 0x38
add ecx, 0xce01f805
and ecx, 0x8a008892
cmp ecx, 0xacd2769
jb 0x1400d3e90
jmp 0x1400d3ee1
mov eax, dword [0x141dd88c8]
xor eax, dword [0x141dd88cc]
and eax, 0xc220902
add eax, 0x602b1508
cmp eax, 0x3298a7a9
jb 0x1400d3ebd
jmp 0x1400d26d5
xor eax, eax
or al, r12b
cmp al, 1
jne 0x1400d4563
mov qword [rbp + 0xa0], r9
sub rsp, 0x20
mov r15, qword [rbp - 0x18]
mov rcx, r15
mov rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x30]
mov r9, qword [rbp + 0x78]
call fcn.1400d6a40
add rsp, 0x20
mov rdx, qword [r15]
cmp rdx, rsi
jne 0x1400d3fd0
mov rbx, qword [rbp + 0xa0]
mov rax, qword [rbx]
xor ecx, ecx
nop
test cl, cl
jne 0x1400d3f30
shl rax, 1
test rax, rax
mov r9, qword [rbp + 0xb0]
mov r8, qword [rbp + 0x58]
je 0x1400d3fbf
mov eax, dword [0x141dd8910]
xor edx, edx
div dword [0x141dd8914]
imul eax, eax, 0xd7b6cc29
add eax, 0xf70d039b
imul rax, rax, 0x7efd48cd
shr rax, 0x3b
cmp eax, 0x23c646a
jbe 0x1400d3f79
mov rax, qword [0x141ddc4e0]
mov eax, dword [0x141dd8918]
mov ecx, dword [0x141dd891c]
add eax, ecx
add eax, 0xe8afb278
and eax, 0x57e93d34
xor eax, 0xcb942695
mov r8, qword [r9 + 0xa0]
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x94ce5505
jb 0x1400d3f79
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r8, qword [rbp + 0x58]
mov qword [rbx], rsi
jmp 0x1400d4510
mov eax, dword [0x141dd88f0]
add eax, dword [0x141dd88f4]
imul rcx, rax, 0xc91b7e7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0xaa9c6e36
imul eax, eax, 0xa4a91998
cmp eax, 0xe622691c
jb 0x1400d3fd0
mov rax, qword [rbp - 0x18]
mov rsi, qword [rax + 8]
mov rax, qword [rax + 0x10]
nop
mov ecx, dword [0x141dd88f8]
or ecx, dword [0x141dd88fc]
add ecx, 0xae13945c
or ecx, 0x2a2aa4e6
cmp ecx, 0xecd747bf
ja 0x1400d4010
test rax, rax
mov qword [rbp + 0x78], rdx
mov dword [rbp + 0x88], r12d
je 0x1400d4060
lea rcx, [rax + rax]
xor r14d, r14d
cmp word [rsi + r14*2], 0
je 0x1400d4068
inc r14
add rcx, 0xfffffffffffffffe
jne 0x1400d4047
mov r12d, edi
mov r14, rax
jmp 0x1400d406b
mov r12d, edi
xor r14d, r14d
jmp 0x1400d406b
mov r12d, edi
mov eax, dword [0x141dd8900]
xor edx, edx
div dword [0x141dd8904]
add eax, 0xeb958f60
or eax, 0xf7cbeeff
cmp eax, 0x8f685ca4
mov r15, qword [rbp + 8]
jne 0x1400d40c8
jmp 0x1400d4122
mov eax, dword [0x141dd8838]
and eax, dword [0x141dd883c]
xor eax, 0x90902800
and eax, 0xd4b13a18
mov ecx, 0xfb6b1fe5
imul rcx, rax
shr rcx, 0x3e
ud2
ud2
mov eax, dword [0x141dd8908]
and eax, dword [0x141dd890c]
imul eax, eax, 0x8dc4e448
imul r13, rax, 0x207b32ad
shr r13, 0x3a
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, r14
call fcn.14008ced0
add rsp, 0x20
mov rdi, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, r12d
mov rdx, rdi
mov r9, rbx
call fcn.1400d7920
add rsp, 0x20
cmp r13d, 0x144b8476
jne 0x1400d4158
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, r14
call fcn.14008ced0
add rsp, 0x20
mov rdx, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, r12d
mov r9, rbx
call fcn.1400d7920
add rsp, 0x20
jmp 0x1400d40c8
cmp byte [rbp + 0x88], 0
je 0x1400d4224
mov rax, qword [rbp + 8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rdi, qword [rbp - 0x40]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rbx, qword [rbp + 0xa0]
mov rax, qword [rbx]
mov r8, qword [rbp + 0xb0]
mov ecx, dword [0x141dd8920]
and ecx, dword [0x141dd8924]
imul ecx, ecx, 0x7557c4c3
add ecx, 0xfa9872eb
cmp ecx, 0xa6a5bcb4
jb 0x1400d418c
shl rax, 1
test rax, rax
mov r13, qword [rbp + 0x60]
je 0x1400d42f7
mov ecx, 0x95b18a1b
mov eax, dword [0x141dd8928]
xor edx, edx
div dword [0x141dd892c]
and eax, 0x6c475273
xor eax, 0xce31140e
imul rax, rcx
shr rax, 0x3c
cmp eax, 0x2649f292
ja 0x1400d41c1
mov r8, qword [r8 + 0xa0]
mov eax, dword [0x141dd8930]
sub eax, dword [0x141dd8934]
mov ecx, 0x9bdc4945
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x9cc22bc6
imul eax, ecx, 0x1493aa0b
cmp eax, 0x67691c82
jbe 0x1400d42ba
jmp 0x1400d42de
mov eax, dword [0x141dd8958]
add eax, dword [0x141dd895c]
imul rax, rax, 0x58066563
shr rax, 0x3d
xor eax, 0xb231c0ee
imul rax, rax, 0xed19baf
shr rax, 0x3a
cmp eax, 0xf268a082
je 0x1400d4224
mov rax, qword [rbp + 8]
mov rax, qword [rax]
mov r13, qword [rbp + 0x60]
mov ecx, dword [0x141dd8960]
add ecx, dword [0x141dd8964]
or ecx, 0x14898611
and ecx, 0x558beed1
imul ecx, ecx, 0x54059f65
cmp ecx, 0x67ce1a12
ja 0x1400d425d
test rax, rax
je 0x1400d43e0
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dd8968]
xor eax, dword [0x141dd896c]
imul eax, eax, 0xc4c15c66
add eax, 0x3383fd84
cmp eax, 0x30366d0b
jbe 0x1400d4384
jmp 0x1400d43c4
mov eax, dword [0x141dd8938]
xor eax, dword [0x141dd893c]
and eax, 0x1329e00
add eax, 0x3c3c6245
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x6e0abd66
jbe 0x1400d42e7
mov rax, qword [0x141ddc4e0]
jmp 0x1400d42ba
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd8940]
imul eax, dword [0x141dd8944]
add eax, 0xf27c955
xor eax, 0x7ab454ce
add eax, 0x51a4a8c0
cmp eax, 0x267a4586
jb 0x1400d4345
mov eax, dword [0x141dd8948]
sub eax, dword [0x141dd894c]
add eax, 0xcdc3fe78
or eax, 0xbe38378
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
cmp eax, 0xe5c9575b
jne 0x1400d4355
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
jmp 0x1400d431a
mov eax, 0x8a416ef1
mov ecx, dword [0x141dd8950]
or ecx, dword [0x141dd8954]
add ecx, 0x58590c40
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xd7cac24e
cmp ecx, 0xd2da013b
je 0x1400d435a
jmp 0x1400d43e0
mov eax, dword [0x141dd8970]
add eax, dword [0x141dd8974]
imul r14d, eax, 0xcd7c2e3c
and r14d, 0xccc431e4
add r14d, 0x5a761da0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x3cb93e57
jae 0x1400d43e0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d4384
mov eax, dword [0x141dd8978]
xor edx, edx
div dword [0x141dd897c]
and eax, 0x6b0e452b
imul eax, eax, 0xb19260f
or eax, 0xb574eb94
cmp eax, 0x1719ed33
jb 0x1400d43e0
mov r14d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x58]
mov edi, r12d
mov rcx, qword [rbp + 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8980]
and eax, dword [0x141dd8984]
add eax, 0x247c8d91
and eax, 0xf1aa56c7
imul eax, eax, 0xc69a7475
cmp eax, 0xc793a3e6
je 0x1400d4420
test rcx, rcx
je 0x1400d4510
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dd8988]
xor eax, dword [0x141dd898c]
or eax, 0x21c3a009
and eax, 0xf9c7b52f
xor eax, 0x6a4cf0d1
cmp eax, 0x1f452a13
ja 0x1400d44b2
mov eax, dword [0x141dd8990]
imul eax, dword [0x141dd8994]
imul ebx, eax, 0xdb23c46d
add ebx, 0x674b9a88
and ebx, 0x86cbc091
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x54dedc5
jne 0x1400d44ca
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d4475
mov edi, r12d
mov r8, qword [rbp + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8998]
xor eax, dword [0x141dd899c]
add eax, 0xa7dcff2f
and eax, 0xdf63276c
xor eax, 0xe55d10e2
cmp eax, 0x65387b6
jb 0x1400d44e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd89a0]
sub eax, dword [0x141dd89a4]
and eax, 0x4154cb3a
add eax, 0xc242749b
or eax, 0x6aff9852
cmp eax, 0x33ef4a4a
je 0x1400d4510
movabs rsi, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x141dd89a8]
sub eax, dword [0x141dd89ac]
xor eax, 0x61d44c6
imul eax, eax, 0x9939752f
add eax, 0x7310fbdf
cmp eax, 0x48ff102c
jb 0x1400d4540
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d4570
mov r15, qword [rbp + 0x38]
mov rbx, qword [rbp + 0xb0]
mov r12, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dd89b0]
imul eax, dword [0x141dd89b4]
add eax, 0xd6f31385
shr eax, 4
imul rax, rax, 0x1341f87b
shr rax, 0x34
cmp eax, 0x8691f6c2
je 0x1400d4590
jmp 0x1400d15a0
mov ebx, dword [0x141dd8a70]
imul ebx, dword [0x141dd8a74]
or ebx, 0x80ba5624
add ebx, 0xc3ae1ab8
sub rsp, 0x20
mov rcx, r13
mov rdx, rdi
call fcn.1400d6e90
add rsp, 0x20
cmp ebx, 0x2f6333c2
jae 0x1400d4610
sub rsp, 0x20
mov rcx, r13
mov rdx, rdi
call fcn.1400d6e90
add rsp, 0x20
jmp 0x1400d45bc
mov eax, dword [0x141dd8a78]
and eax, dword [0x141dd8a7c]
imul eax, eax, 0xe71126a7
xor eax, 0x215bee80
imul eax, eax, 0x84bdaca4
cmp eax, 0xa84cc393
ja 0x1400d4610
test rsi, rsi
mov rbx, qword [rbp + 0xb0]
je 0x1400d4677
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd8a80]
sub eax, dword [0x141dd8a84]
add eax, 0xf6aa2014
and eax, 0xa117e4f4
cmp eax, 0xd80260d5
je 0x1400d465a
mov r9, qword [rbp + 0x80]
nop
mov eax, dword [0x141dd8a88]
and eax, dword [0x141dd8a8c]
or eax, 0xe4d5fb48
imul eax, eax, 0xee009e7
xor eax, 0xcb53d9b
cmp eax, 0x151d94ee
jb 0x1400d4680
mov r15, qword [rbx + 0x38]
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d46b0
mov rsi, qword [rbx + 0x40]
test rsi, rsi
je 0x1400d4766
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov rax, rdi
shl rax, 5
cmp qword [r15 + rax], 0
je 0x1400d4734
add rax, r15
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8a90]
add ecx, dword [0x141dd8a94]
or ecx, 0x135d2996
add ecx, 0x8bf99340
or ecx, 0xb1a91635
cmp ecx, 0x44c5243b
jb 0x1400d46f0
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
mov r9, qword [rbp + 0x80]
inc rdi
nop word [rax + rax]
mov eax, dword [0x141dd8a98]
sub eax, dword [0x141dd8a9c]
or eax, 0x13000008
and eax, 0x13101008
cmp eax, 0xe53eda09
ja 0x1400d4740
cmp rdi, rsi
jne 0x1400d46d0
movabs rsi, 0x8000000000000000
mov edi, dword [rbp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8aa0]
xor edx, edx
div dword [0x141dd8aa4]
imul eax, eax, 0xe44e8ef1
or eax, 0xffebffda
cmp eax, 0x8e004026
jb 0x1400d4780
mov rcx, qword [r9]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8aa8]
xor edx, edx
div dword [0x141dd8aac]
shr eax, 4
imul rax, rax, 0x40ed299
shr rax, 0x32
or eax, 0xeb3caea0
imul rdx, rax, 0x127f474d
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
cmp eax, 0x891cc5f5
ja 0x1400d47b0
test rcx, rcx
mov rbx, qword [rbp + 0xb0]
je 0x1400d4842
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9, qword [rbp + 0x80]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd8ab0]
add eax, dword [0x141dd8ab4]
or eax, 0xbefff8ae
xor eax, 0x59234bf4
add eax, 0x41e7fd8c
cmp eax, 0xed2a32bb
ja 0x1400d4820
mov eax, dword [0x141dd8ab8]
and eax, dword [0x141dd8abc]
imul eax, eax, 0xb27596e1
add eax, 0x6fb475d0
cmp eax, 0xe707fd34
jae 0x1400d4871
mov rax, qword [r13 + 0x10]
mov qword [r9 + 0x10], rax
movups xmm0, xmmword [r13]
movups xmmword [r9], xmm0
mov r8d, dword [rbp + 0x90]
nop dword [rax + rax]
mov rax, qword [r13 + 0x10]
mov qword [r9 + 0x10], rax
mov eax, dword [0x141dd8ac0]
or eax, dword [0x141dd8ac4]
add eax, 0x10e518d3
and eax, 0xb312191e
movups xmm0, xmmword [r13]
movups xmmword [r9], xmm0
cmp eax, 0x62c7422b
jb 0x1400d4880
lea rax, [rbx + 0x48]
mov qword [rbp + 0xa0], rax
mov r12, qword [rbp + 0x70]
mov r14, qword [rbp - 0x60]
mov r15, qword [rbp - 0x58]
mov r13, qword [rbp + 0xa8]
nop dword [rax]
mov eax, dword [0x141dd8b00]
add eax, dword [0x141dd8b04]
imul eax, eax, 0xa2cc0d1b
imul rax, rax, 0xcce7de3
shr rax, 0x3a
imul eax, eax, 0x554573c
cmp eax, 0x7ddb8cb2
ja 0x1400d48d0
nop word [rax + rax]
mov eax, dword [0x141dd8b08]
xor eax, dword [0x141dd8b0c]
imul eax, eax, 0x82409fe7
or eax, 0xf7cdf7f7
cmp eax, 0x8527a35
jb 0x1400d4900
test r8d, r8d
je 0x1400d53d0
cmp r8d, 1
je 0x1400d496c
mov rcx, qword [rbx + 0x58]
mov eax, dword [0x141dd8b10]
xor edx, edx
div dword [0x141dd8b14]
nop
mov eax, dword [str.in_]
add eax, dword [0x141dd8b1c]
imul eax, eax, 0xb2ebf0b
and eax, 0x1ea81b82
xor eax, 0xb73108c2
cmp eax, 0x538b080b
jb 0x1400d4940
test rcx, rcx
jne 0x1400d53d0
xor eax, eax
test al, al
je 0x1400d4990
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r13
mov rdx, qword [rbp + 0x78]
mov r8, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov r12, qword [rbp + 0x78]
nop dword [rax + rax]
mov eax, dword [0x141dd8b20]
add eax, dword [0x141dd8b24]
imul rdi, rax, 0x17e0e995
shr rdi, 0x3c
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r13
mov rdx, r12
mov r8, r15
call rsi
add rsp, 0x20
cmp edi, 0x2b5566a3
je 0x1400d49a0
test rax, rax
je 0x1400d4fe3
mov rdi, qword [r15]
mov rax, qword [rbp + 0x78]
sub rdi, rax
add rdi, qword [r15 + 0x18]
mov r15, rax
mov eax, dword [0x141dd8b38]
imul eax, dword [0x141dd8b3c]
imul rax, rax, 0x3b27a839
shr rax, 0x3d
xor eax, 0x6f3b6a21
add eax, 0x38041f14
cmp eax, 0x6a55adf8
mov r12, qword [rbp + 0x70]
jae 0x1400d4a40
sub rsp, 0x20
mov rcx, r14
mov rdx, r13
mov r8, r15
mov r9, rdi
call fcn.1400d6a40
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd8b40]
xor edx, edx
div dword [0x141dd8b44]
or eax, 0xe1401c8e
imul esi, eax, 0x655476f4
sub rsp, 0x20
mov rcx, r14
mov rdx, r13
mov r8, r15
mov r9, rdi
call fcn.1400d6a40
add rsp, 0x20
cmp esi, 0xa7387f12
je 0x1400d4a40
mov rcx, qword [r14]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1400d5050
mov qword [rbp + 0x50], rcx
mov rax, qword [r14 + 8]
mov qword [rbp + 0x80], rax
mov rax, qword [r14 + 0x10]
mov qword [rbp + 0x90], rax
mov rax, rbx
mov rbx, qword [rbx + 0x50]
mov rsi, qword [rax + 0x58]
mov qword [rax + 0x58], 0
test rsi, rsi
je 0x1400d4bc0
xor r15d, r15d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r13d, r13d
nop word cs:[rax + rax]
mov rcx, r13
shl rcx, 5
cmp qword [rbx + rcx], 0
je 0x1400d4ba0
add rcx, rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dd8bc8]
xor edx, edx
div dword [0x141dd8bcc]
add eax, 0x7bb86d20
and eax, 0xd739c21e
cmp eax, 0x13b4db0b
je 0x1400d4b00
mov eax, dword [0x141dd8bd0]
or eax, dword [str._KX]
mov rdi, qword [rcx + 8]
add eax, 0x85ea2eff
and eax, 0x33b998bd
cmp eax, 0x15ba073a
ja 0x1400d4b7d
mov eax, dword [0x141dd8bd8]
xor eax, dword [0x141dd8bdc]
add eax, 0x1182bd85
xor eax, 0x6d28b508
imul r14d, eax, 0xa72e5d3d
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r14d, 0x89dc7c4b
jne 0x1400d4ba0
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
jmp 0x1400d4b40
inc r13
nop word cs:[rax + rax]
test r15b, r15b
jne 0x1400d4bb0
cmp r13, rsi
jne 0x1400d4ae0
nop
mov eax, dword [0x141dd8bb8]
xor edx, edx
div dword [0x141dd8bbc]
or eax, 0x3e768a7c
add eax, 0x96bdd5fa
xor eax, 0x64d64a4b
cmp eax, 0xc089a421
ja 0x1400d4bc0
mov r14, qword [rbp + 0x80]
mov r9, qword [rbp + 0x90]
lea rdi, [r14 + r9*2]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8bc0]
mov ecx, dword [0x141dd8bc4]
add eax, ecx
add eax, 0x17479c1
or eax, 0xb074cb51
cmp eax, 0xa17b3bd5
je 0x1400d4c00
xor esi, esi
mov r15d, 0x9c4b8223
xor r10d, r10d
xor r11d, r11d
mov eax, dword [0x141dd8be0]
or eax, dword [0x141dd8be4]
imul rax, rax, 0x1d895e53
shr rax, 0x3c
or eax, 0x6d24f91c
cmp eax, 0xa06d5cbf
ja 0x1400d4c2d
cmp r11, r9
je 0x1400d4ed0
lea r12, [r14 + r11*2]
xor ecx, ecx
xor r13d, r13d
mov r8, r12
nop word cs:[rax + rax]
cmp word [r8], 0
je 0x1400d4ceb
nop word [rax + rax]
mov eax, dword [0x141dd8be8]
sub eax, dword [0x141dd8bec]
imul eax, eax, 0x711ddc08
xor eax, 0xf064f868
add eax, 0xe7eb866a
cmp eax, 0xb277b09d
jb 0x1400d4c80
add r8, 2
test sil, sil
jne 0x1400d4ca7
inc r13
mov eax, dword [0x141dd8bf0]
xor edx, edx
div dword [0x141dd8bf4]
mov eax, dword [0x141dd8bf8]
add eax, dword [0x141dd8bfc]
or eax, 0xbfece75f
imul rax, r15
shr rax, 0x3c
cmp eax, 0x421fe930
ja 0x1400d4cbd
add rcx, 2
cmp r8, rdi
jne 0x1400d4c70
jmp 0x1400d4ed0
add r11, r13
jb 0x1400d522d
cmp r11, r9
ja 0x1400d26d5
nop dword [rax]
mov eax, dword [0x141dd8c40]
add eax, dword [0x141dd8c44]
cmp eax, 0x95c102af
je 0x1400d4d00
mov r8, r12
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c48]
xor edx, edx
div dword [0x141dd8c4c]
add eax, 0xdc886e10
or eax, 0x6bcd0742
add eax, 0x608696f
cmp eax, 0x3a625426
ja 0x1400d4d20
test rcx, rcx
je 0x1400d4ed0
mov eax, dword [0x141dd8c50]
add eax, dword [0x141dd8c54]
and eax, 0xed6b54b5
xor eax, 0x6ca2f9ec
add eax, 0x75fec11e
cmp eax, 0x6722c2ee
jb 0x1400d4d4d
add rcx, 0xfffffffffffffffe
cmp word [r8], 0x3d
lea r8, [r8 + 2]
jne 0x1400d4d20
mov qword [rbp + 0x78], r11
mov qword [rbp + 0x28], r10
mov eax, dword [0x141dd8c58]
imul eax, dword [0x141dd8c5c]
or eax, 0xb406ec83
add eax, 0xac2a30b7
or eax, 0x5f5c64b7
cmp eax, 0x8771b94f
jne 0x1400d4dc0
sub rsp, 0x20
mov rcx, qword [rbp + 0x10]
mov rdx, r12
mov r8, r13
call fcn.14008ced0
add rsp, 0x20
mov eax, dword [0x141dd8c60]
imul eax, dword [0x141dd8c64]
xor eax, 0x6983565
imul r14d, eax, 0x49f3925a
and r14d, 0xb9f5c16
sub rsp, 0x20
mov rcx, qword [rbp + 0x10]
mov rdx, r12
mov r8, r13
call fcn.14008ced0
mov rcx, qword [rbp + 0x10]
add rsp, 0x20
cmp r14d, 0x98c001db
je 0x1400d4dc0
mov rax, qword [rbp + 0xa0]
mov r10, qword [rbp + 0x28]
cmp r10, qword [rax]
mov r14, qword [rbp + 0x80]
jne 0x1400d4e68
sub rsp, 0x20
mov rcx, qword [rbp + 0xa0]
call fcn.140016770
add rsp, 0x20
mov rax, qword [rbp + 0xb0]
mov rbx, qword [rax + 0x50]
mov ecx, 0x9225e383
mov eax, dword [0x141dd8c68]
imul eax, dword [0x141dd8c6c]
xor eax, 0x8d98f4e7
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x77b21b6
ja 0x1400d4e3f
mov rcx, qword [rbp + 0x10]
mov r10, qword [rbp + 0x28]
mov rax, r10
shl rax, 5
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbx + rax + 0x10], xmm1
movups xmmword [rbx + rax], xmm0
inc r10
mov rax, qword [rbp + 0xb0]
mov qword [rax + 0x58], r10
mov r11, qword [rbp + 0x78]
inc r11
mov r9, qword [rbp + 0x90]
cmp r11, r9
jbe 0x1400d4c2d
ud2
mov eax, dword [0x141dd8c08]
imul eax, dword [0x141dd8c0c]
or eax, 0x1c4f7588
add eax, 0x649a1c
or eax, 0xa92afed0
cmp eax, 0x41f5a165
jb 0x1400d4ed0
mov rbx, qword [rbp + 0xb0]
mov r12, qword [rbp + 0x70]
movabs rsi, 0x8000000000000000
mov edi, dword [rbp + 0x98]
mov rcx, qword [rbp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [str.Qo80]
sub eax, dword [0x141dd8c14]
add eax, 0x10595284
xor eax, 0x20122968
shr eax, 2
imul rax, rax, 0x23023cc7
shr rax, 0x3b
cmp eax, 0xf4a83d0f
ja 0x1400d4f20
test rcx, rcx
je 0x1400d53a0
mov eax, dword [0x141dd8c18]
xor eax, dword [0x141dd8c1c]
add eax, 0x41db08c1
xor eax, 0x70f227e5
imul rax, rax, 0x7017c597
shr rax, 0x3e
cmp eax, 0xbe76872
jne 0x1400d4f90
mov rax, qword [0x141ddc4e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c20]
or eax, dword [0x141dd8c24]
imul eax, eax, 0x4f4d07fd
mov rdi, qword [0x141ddc4e0]
cmp eax, 0x44152573
je 0x1400d4f90
mov eax, dword [0x141dd8c28]
xor edx, edx
div dword [0x141dd8c2c]
add eax, 0xc7289ee7
imul rax, rax, 0xc14287f
shr rax, 0x3b
add eax, 0xe09e2911
cmp eax, 0x11f5a72f
jae 0x1400d5a8b
jmp 0x1400d5aa8
mov r12, qword [rbp + 0x70]
nop word [rax + rax]
mov eax, dword [0x141dd8b28]
xor edx, edx
div dword [0x141dd8b2c]
or eax, 0x64504ee7
add eax, 0xb75a57
xor eax, 0xa0f8f9e
cmp eax, 0x25db631b
jb 0x1400d4ff0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8b30]
xor edx, edx
div dword [0x141dd8b34]
xor eax, 0x4595ce1f
imul eax, eax, 0x5f0308f3
xor eax, 0x9c1c1376
cmp eax, 0x61721593
jbe 0x1400d5020
nop word cs:[rax + rax]
mov eax, dword [0x141dd8b48]
or eax, dword [0x141dd8b4c]
and eax, 0x431f31fe
imul eax, eax, 0x115d489c
cmp eax, 0x57904274
je 0x1400d5050
mov r14, qword [rbx + 0x50]
mov rsi, qword [rbx + 0x58]
test rsi, rsi
je 0x1400d517e
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r15d, r15d
nop dword [rax + rax]
mov eax, dword [0x141dd8b50]
or eax, dword [0x141dd8b54]
imul rax, rax, 0x7654f271
shr rax, 0x3e
imul eax, eax, 0x44c51c82
add eax, 0xc5cf04bd
cmp eax, 0x6137a805
ja 0x1400d5090
mov rax, r15
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1400d5157
add rax, r14
nop
mov ecx, dword [0x141dd8b58]
and ecx, dword [0x141dd8b5c]
and ecx, 0x9e6e260d
imul ecx, ecx, 0xc5eb45dc
cmp ecx, 0xc553b922
ja 0x1400d50d0
mov ecx, dword [0x141dd8b60]
or ecx, dword [0x141dd8b64]
or ecx, 0x52157cc1
add ecx, 0x22c49463
xor ecx, 0xc2d55d2d
cmp ecx, 0x50202de6
jae 0x1400d5120
mov rcx, qword [0x141ddc4e0]
nop dword [rax]
mov ecx, dword [0x141dd8b68]
xor ecx, dword [0x141dd8b6c]
xor ecx, 0x2dde9e46
imul edx, ecx, 0xed6d3ff
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddc4e0]
cmp edx, 0x9192662d
jb 0x1400d5120
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
inc r15
mov eax, dword [0x141dd8b70]
xor edx, edx
div dword [0x141dd8b74]
nop dword [rax + rax]
test dil, dil
jne 0x1400d5170
cmp r15, rsi
jne 0x1400d5090
movabs rsi, 0x8000000000000000
mov edi, dword [rbp + 0x98]
mov r15, qword [rbp + 0xa0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8b78]
and eax, dword [0x141dd8b7c]
xor eax, 0x10540036
or eax, 0xcfaaa189
xor eax, 0x7666b90e
cmp eax, 0x76768e07
jb 0x1400d51a0
mov rax, qword [r15]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8b80]
add ecx, dword [0x141dd8b84]
xor ecx, 0x5cbab90
add ecx, 0xe1bc4182
imul rcx, rcx, 0x4bc59bbb
shr rcx, 0x3e
cmp ecx, 0x133abecf
ja 0x1400d51d0
test rax, rax
mov rbx, qword [rbp + 0xb0]
je 0x1400d5300
mov eax, dword [0x141dd8b88]
and eax, dword [0x141dd8b8c]
and eax, 0x93416000
add eax, 0x8fd7df7d
cmp eax, 0xeb5d1daa
jbe 0x1400d529a
jmp 0x1400d52bf
ud2
mov eax, dword [0x141dd89e0]
and eax, dword [0x141dd89e4]
xor eax, 0x27f105aa
imul eax, eax, 0x198a5678
mov esi, 0xda6c7927
imul rsi, rax
shr rsi, 0x3e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0x853aee4c
jb 0x1400d5292
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d5248
mov rsi, rdi
jmp 0x1400d5d6d
mov eax, dword [0x141dd8b90]
xor eax, dword [0x141dd8b94]
or eax, 0x70c30e51
imul eax, eax, 0x5bfa13e9
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x46185613
jbe 0x1400d52c8
mov rax, qword [0x141ddc4e0]
jmp 0x1400d529a
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd8b98]
xor edx, edx
div dword [0x141dd8b9c]
imul eax, eax, 0x16632a6a
add eax, 0x63970b5d
cmp eax, 0xbed3498f
ja 0x1400d52e0
mov qword [r15], 0
mov eax, dword [0x141dd8ba0]
sub eax, dword [0x141dd8ba4]
imul eax, eax, 0xc97f2619
or eax, 0xb57bc6e5
add eax, 0x4b770ee0
cmp eax, 0xebf3c40b
ja 0x1400d5357
mov eax, dword [0x141dd8ba8]
add eax, dword [0x141dd8bac]
xor eax, 0xdc353ac8
add eax, 0x692e7874
mov qword [rbx + 0x50], 8
mov qword [rbx + 0x58], 0
cmp eax, 0xc75ea0f6
jbe 0x1400d5370
mov qword [rbx + 0x50], 8
mov qword [rbx + 0x58], 0
jmp 0x1400d532a
mov eax, dword [0x141dd8bb0]
add eax, dword [0x141dd8bb4]
or eax, 0xf5ff77f7
imul rcx, rax, 0x1594e2d9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x3a6cfe71
ja 0x1400d5370
nop dword [rax]
mov eax, dword [0x141dd8c70]
and eax, dword [0x141dd8c74]
and eax, 0xd062a12
or eax, 0x12f8d5cd
imul eax, eax, 0x403f284b
cmp eax, 0xf970f0f8
ja 0x1400d53a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c78]
add eax, dword [0x141dd8c7c]
imul eax, eax, 0x24227de6
add eax, 0xe450d1fe
cmp eax, 0x96263b23
jb 0x1400d53d0
lea r14, [rbx + 0x98]
mov eax, dword [rbp + 0x68]
test eax, eax
je 0x1400d554e
cmp eax, 1
jne 0x1400d5450
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c80]
imul eax, dword [0x141dd8c84]
and eax, 0xadd3cedf
xor eax, 0x209197b7
add eax, 0xb2dd3264
cmp eax, 0x6df891af
ja 0x1400d5410
mov r13b, 1
lea r15, [rbx + 0xb8]
test edi, edi
jne 0x1400d54ed
jmp 0x1400d555c
mov eax, dword [0x141dd8c88]
imul eax, dword [0x141dd8c8c]
and eax, 0x9dd30ebe
xor eax, 0x62895010
imul eax, eax, 0xc318d4dc
cmp eax, 0x5c02dda9
je 0x1400d5450
mov rax, qword [r14]
nop word [rax + rax]
mov ecx, dword [0x141dd8c90]
add ecx, dword [0x141dd8c94]
and ecx, 0xb01327c9
imul rcx, rcx, 0x70d399d3
shr rcx, 0x3e
imul ecx, ecx, 0x3722f9a3
cmp rax, rsi
sete r13b
cmp ecx, 0xdaf2e300
ja 0x1400d5480
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c98]
and eax, dword [0x141dd8c9c]
add eax, 0xcb956183
or eax, 0x60910100
and eax, 0xf09d03f1
cmp eax, 0x2dcebe18
jb 0x1400d54c0
lea r15, [rbx + 0xb8]
test edi, edi
je 0x1400d555c
cmp edi, 1
je 0x1400d55a0
mov eax, dword [0x141dd8ca0]
xor edx, edx
div dword [0x141dd8ca4]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d5510
mov rcx, qword [r15]
nop word [rax + rax]
mov edx, dword [0x141dd8ca8]
sub edx, dword [0x141dd8cac]
add edx, 0xb89172af
and edx, 0xc2474f58
add edx, 0x137092b5
cmp rcx, rsi
sete al
cmp edx, 0xf6452430
ja 0x1400d5520
jmp 0x1400d555e
xor r13d, r13d
lea r15, [rbx + 0xb8]
test edi, edi
jne 0x1400d54ed
xor eax, eax
or al, r13b
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8cb0]
mov edx, dword [0x141dd8cb4]
add ecx, edx
add ecx, 0x4b889e11
or ecx, 0x1a2431d1
imul ecx, ecx, 0xf78a18d3
cmp ecx, 0x4a1d86ec
ja 0x1400d5570
test al, al
je 0x1400d5d20
sub rsp, 0x20
mov rdi, qword [rbp - 0x30]
mov rcx, rdi
mov rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0x30]
mov r9, qword [rbp + 0x88]
call fcn.1400d6a40
add rsp, 0x20
mov rcx, qword [rdi]
nop dword [rax]
mov eax, dword [0x141dd8cb8]
or eax, dword [0x141dd8cbc]
imul eax, eax, 0x5b15ea0a
xor eax, 0x8002808
and eax, 0x2c573f0e
cmp eax, 0xe8325961
ja 0x1400d55d0
cmp rcx, rsi
jne 0x1400d5653
nop dword [rax + rax]
mov eax, dword [str._kCb]
xor eax, dword [0x141dd8cf4]
xor eax, 0x45f76191
imul eax, eax, 0xb46af418
cmp eax, 0x1618ff84
je 0x1400d5600
mov rax, qword [r14]
shl rax, 1
test rax, rax
je 0x1400d5b3e
mov eax, dword [0x141dd8cf8]
add eax, dword [0x141dd8cfc]
and eax, 0x484400
add eax, 0xaf93de1b
cmp eax, 0xf1e4f17d
jbe 0x1400d5af4
jmp 0x1400d5b25
mov qword [rbp + 0xa0], rcx
nop word [rax + rax]
mov eax, dword [0x141dd8cc0]
imul eax, dword [0x141dd8cc4]
imul eax, eax, 0x28e48e1f
and eax, 0x7ca7d3b7
imul rax, rax, 0x986181f
shr rax, 0x38
cmp eax, 0xc72a6872
je 0x1400d5660
mov rax, qword [rbp - 0x30]
mov rsi, qword [rax + 8]
mov r8, qword [rax + 0x10]
lea rax, [rsi + r8*2]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400d56a0
test r8, r8
mov dword [rbp + 0x80], r13d
je 0x1400d5779
xor ecx, ecx
mov edx, 0xca103b03
mov r11, rsi
nop
cmp word [r11], 0
je 0x1400d5750
nop dword [rax + rax]
mov r9d, dword [0x141dd8cc8]
mov r10d, dword [0x141dd8ccc]
add r9d, r10d
add r9d, 0x44827f8b
shr r9d, 1
imul r9, r9, 0x121f450b
shr r9, 0x3b
or r9d, 0x34c82b4c
cmp r9d, 0x75d0af89
ja 0x1400d56d0
add r11, 2
nop word [rax + rax]
mov r9d, dword [0x141dd8cd0]
or r9d, dword [0x141dd8cd4]
or r9d, 0xc175979c
imul r9, rdx
shr r9, 0x3a
xor r9d, 0x8dc18522
cmp r9d, 0xbf12010a
ja 0x1400d5710
inc rcx
cmp r11, rax
jne 0x1400d56c0
jmp 0x1400d577c
mov eax, dword [0x141dd8cd8]
xor edx, edx
div dword [0x141dd8cdc]
xor eax, 0xbf897d
add eax, 0xac2cb1ae
or eax, 0xf42c555e
cmp eax, 0x72c878ae
jb 0x1400d5750
mov r8, rcx
jmp 0x1400d577c
xor r8d, r8d
mov qword [rbp + 0xa8], r14
mov eax, dword [0x141dd8ce0]
imul eax, dword [0x141dd8ce4]
or eax, 0x595fefe4
xor eax, 0xbf2c0524
cmp eax, 0xa741a6e2
jae 0x1400d57dc
sub rsp, 0x20
mov rdi, qword [rbp + 0x18]
mov rcx, rdi
mov rdx, rsi
mov rbx, r8
call fcn.14008ced0
add rsp, 0x20
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x98]
mov r9, r15
call fcn.1400d7920
mov r8, rbx
add rsp, 0x20
mov rbx, r15
mov r15, qword [rbp + 0x18]
mov r14d, dword [rbp + 0x98]
nop word [rax + rax]
mov eax, dword [0x141dd8ce8]
and eax, dword [0x141dd8cec]
or eax, 0x241d57c8
imul r12d, eax, 0xd38cee40
or r12d, 0xcfa852a9
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r13, r8
call fcn.14008ced0
add rsp, 0x20
mov rdi, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, r14d
mov rdx, rdi
mov r9, rbx
call fcn.1400d7920
mov r8, r13
add rsp, 0x20
cmp r12d, 0x843e3dd0
je 0x1400d57f0
cmp byte [rbp + 0x80], 0
je 0x1400d5a2a
mov eax, dword [0x141dd8d20]
xor edx, edx
div dword [0x141dd8d24]
add eax, 0x6eb8fbe2
xor eax, 0x3e600473
imul eax, eax, 0xe9330c9f
cmp eax, 0xb6832190
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp + 0x18]
jbe 0x1400d5897
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov r15, qword [rbp + 0xa8]
nop
mov eax, dword [0x141dd8d28]
and eax, dword [0x141dd8d2c]
add eax, 0x9c6eed28
imul rax, rax, 0x21f48219
shr rax, 0x3c
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
cmp eax, 0xdbb54354
je 0x1400d58a0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400d58e0
mov rax, qword [r15]
nop word [rax + rax]
mov ecx, dword [0x141dd8d30]
xor ecx, dword [0x141dd8d34]
or ecx, 0xcda9a52b
imul ecx, ecx, 0x780e49b8
cmp ecx, 0x98190e0
je 0x1400d58f0
shl rax, 1
test rax, rax
je 0x1400d59da
mov rcx, qword [rbp + 0xb0]
mov eax, dword [0x141dd8d38]
and eax, dword [0x141dd8d3c]
add eax, 0xf74e073f
xor eax, 0x85474691
add eax, 0x43c9d432
cmp eax, 0x994c7577
ja 0x1400d5923
mov rdi, qword [rcx + 0xa0]
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dd8d40]
or eax, dword [0x141dd8d44]
or eax, 0xa3d4c5c5
imul rax, rax, 0x1c156821
shr rax, 0x3c
or eax, 0x7e028b02
cmp eax, 0x6731c8f1
jae 0x1400d5991
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14d, 0xb8ad9d33
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12d, dword [0x141dd8d48]
or r12d, dword [0x141dd8d4c]
imul r12, r14
shr r12, 0x3f
not r12d
and r12d, 0x41108411
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r13
add rsp, 0x20
cmp r12d, 0x7c99b18f
ja 0x1400d599e
mov rax, qword [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
mov r12, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8d50]
xor edx, edx
div dword [0x141dd8d54]
imul eax, eax, 0x6372b7c0
add eax, 0x3b2203b5
and eax, 0x4528b414
cmp eax, 0xc57ab527
ja 0x1400d5a00
jmp 0x1400d5be8
mov rax, qword [rbp + 0x18]
mov rax, qword [rax]
mov r12, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8d58]
imul ecx, dword [0x141dd8d5c]
or ecx, 0x404fbfdf
and ecx, 0xd26fffff
cmp ecx, 0xaa46986d
ja 0x1400d5a40
test rax, rax
je 0x1400d5be8
mov eax, dword [0x141dd8d60]
xor eax, dword [0x141dd8d64]
add eax, 0x7d089685
cmp eax, 0xd3bcfe49
jbe 0x1400d5bb2
jmp 0x1400d5bcc
sub rsp, 0x20
xor esi, esi
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test sil, sil
je 0x1400d5ac0
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d5a8b
movabs rsi, 0x8000000000000000
mov edi, dword [rbp + 0x98]
mov eax, dword [0x141dd8c30]
xor edx, edx
div dword [0x141dd8c34]
add eax, 0x4cf5f304
or eax, 0xc8e3aa27
cmp eax, 0xabafe831
jb 0x1400d5ad0
jmp 0x1400d53a0
mov eax, dword [0x141dd8d00]
and eax, dword [0x141dd8d04]
imul rax, rax, 0x13b5a79d
shr rax, 0x3c
or eax, 0xccb3ba98
mov r8, qword [rbx + 0xa0]
mov rcx, qword [0x141ddc4e0]
cmp eax, 0xf737a4e4
jbe 0x1400d5b2e
mov rax, qword [0x141ddc4e0]
jmp 0x1400d5af4
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd8d08]
imul eax, dword [0x141dd8d0c]
or eax, 0xa1150ccf
add eax, 0x34ae2594
cmp eax, 0x2c5b9e41
jae 0x1400d5b60
mov qword [r14], rsi
nop
mov eax, dword [0x141dd8d10]
xor edx, edx
div dword [0x141dd8d14]
or eax, 0xefb77dcf
add eax, 0xb91cb277
mov qword [r14], rsi
cmp eax, 0xa10504d8
jb 0x1400d5b60
nop word cs:[rax + rax]
mov eax, dword [0x141dd8d18]
or eax, dword [0x141dd8d1c]
and eax, 0x205
xor eax, 0xd6a8fab2
cmp eax, 0x582e970d
jb 0x1400d5b90
jmp 0x1400d5cdd
mov eax, dword [0x141dd8d68]
sub eax, dword [0x141dd8d6c]
mov rcx, qword [0x141ddc4e0]
cmp eax, 0xc6ed0b22
jne 0x1400d5bd5
mov rax, qword [0x141ddc4e0]
jmp 0x1400d5bb2
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xae4f6a03
nop dword [rax]
mov ecx, dword [0x141dd8d70]
and ecx, dword [0x141dd8d74]
xor ecx, 0x1100114
or ecx, 0x9c256c6b
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x46c473b6
ja 0x1400d5bf0
xor eax, eax
mov rbx, qword [rbp + 0xb0]
nop word cs:[rax + rax]
test al, al
jne 0x1400d5c30
cmp qword [rbp + 0xa0], 0
je 0x1400d5cdd
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dd8d78]
sub eax, dword [0x141dd8d7c]
add eax, 0x1b1c8e
or eax, 0x817bb706
imul rax, rax, 0x723f67cd
shr rax, 0x3e
cmp eax, 0x47e6ee1d
ja 0x1400d5ca1
mov eax, dword [0x141dd8d80]
xor eax, dword [0x141dd8d84]
imul ebx, eax, 0x1486c8dd
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x426cb9ce
jne 0x1400d5cb9
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d5c71
mov rbx, qword [rbp + 0xb0]
mov eax, dword [0x141dd8d88]
and eax, dword [0x141dd8d8c]
xor eax, 0x53b9a7b9
add eax, 0xd2f4db93
cmp eax, 0xd9d2657a
ja 0x1400d5cc0
movabs rsi, 0x8000000000000000
nop word [rax + rax]
mov eax, dword [0x141dd8d90]
add eax, dword [0x141dd8d94]
xor eax, 0x453166ec
add eax, 0x93f3638
or eax, 0x5724a852
cmp eax, 0xb9723dd5
jb 0x1400d5cf0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8d98]
xor eax, dword [0x141dd8d9c]
xor eax, 0xc2b4182d
add eax, 0x13242060
imul rax, rax, 0x63896f5d
shr rax, 0x3e
cmp eax, 0x7510301c
ja 0x1400d5d20
mov r15, qword [rbp + 0x38]
mov r13, qword [rbp + 0x60]
mov eax, dword [0x141dd8da0]
or eax, dword [0x141dd8da4]
add eax, 0xa1e3d896
or eax, 0xb858c145
cmp eax, 0x86b13432
jbe 0x1400d5d50
movzx eax, byte [r12 + 8]
test eax, eax
je 0x1400d5f1f
lea rdi, [rbx + 0x60]
cmp eax, 1
je 0x1400d5dc0
mov rax, qword [rdi]
nop word [rax + rax]
mov ecx, dword [0x141dd8db8]
imul ecx, dword [0x141dd8dbc]
or ecx, 0x9b5c5010
imul ecx, ecx, 0x23aed8a
add ecx, 0xa6c037fe
cmp ecx, 0x63416399
ja 0x1400d5d90
cmp rax, rsi
jne 0x1400d5f1f
mov rax, qword [rbx + 0xf8]
nop word [rax + rax]
mov ecx, dword [0x141dd8dc8]
sub ecx, dword [0x141dd8dcc]
xor ecx, 0xe4b58a2a
imul rcx, rcx, 0x6b0abe51
shr rcx, 0x3e
cmp ecx, 0x3b11d267
je 0x1400d5dd0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8dd0]
or ecx, dword [0x141dd8dd4]
add ecx, 0xb0e86c38
imul rcx, rcx, 0x5cf1d23
shr rcx, 0x3a
cmp ecx, 0xf89ae5f7
je 0x1400d5e00
test rax, rax
je 0x1400d5e73
mov rsi, qword [rax + 0x10]
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r13
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
mov eax, dword [0x141dd8e00]
xor edx, edx
div dword [0x141dd8e04]
add eax, 0xcee97d1f
or eax, 0x18450120
and eax, 0x3f45296a
cmp eax, 0x8f5d9edd
jbe 0x1400d5f8b
jmp 0x1400d5fd3
mov eax, dword [0x141dd8de8]
add eax, dword [0x141dd8dec]
imul eax, eax, 0x8ca97fb0
add eax, 0xb0bd8b0
or eax, 0xaf2d6b5c
cmp eax, 0x73e1a523
mov rdx, qword [rbp]
je 0x1400d5ec1
mov eax, dword [0x141dd8df0]
mov ecx, dword [0x141dd8df4]
add eax, ecx
add eax, 0x433c61cd
xor eax, 0xb815120
and eax, 0xdb9151bc
mov qword [rdx], rsi
cmp eax, 0x5d05d2d3
jae 0x1400d5ed0
mov qword [rdx], rsi
jmp 0x1400d5e9a
mov eax, dword [0x141dd8df8]
and eax, dword [0x141dd8dfc]
or eax, 0x2d20a18f
cmp eax, 0x2ce965f6
je 0x1400d5ed0
jmp 0x1400d6160
mov eax, dword [0x141dd8dc0]
or eax, dword [0x141dd8dc4]
xor eax, 0xb702e7b2
imul eax, eax, 0xbafc9fd0
mov qword [rbx + 0xf0], rcx
cmp eax, 0x62eb698b
jne 0x1400d0c7c
mov qword [rbx + 0xf0], rcx
jmp 0x1400d5eed
mov eax, dword [0x141dd8dd8]
xor edx, edx
div dword [0x141dd8ddc]
nop dword [rax]
mov ecx, dword [0x141dd8de0]
add ecx, dword [0x141dd8de4]
or ecx, 0x960ace9d
add ecx, 0x8c82a837
and ecx, 0xaf311426
mov rdx, r15
sub rdx, qword [rbx + 0x120]
mov eax, 0
cmovae rax, rdx
cmp ecx, 0xf06e6cf3
ja 0x1400d5f30
mov qword [rbx + 0x128], rax
mov byte [rbx + 0x154], 1
lea rsp, [rbp + 0xb8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd8e08]
and eax, dword [0x141dd8e0c]
imul r14d, eax, 0x9ef3ad1f
xor r14d, 0x221100a0
or r14d, 0x9c8ad215
sub rsp, 0x20
xor ebx, ebx
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
cmp r14d, 0x64c1d864
jae 0x1400d5ff1
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
jmp 0x1400d5f8b
mov ecx, 0xab5c8e17
nop word cs:[rax + rax]
mov eax, dword [0x141dd8e10]
xor edx, edx
div dword [0x141dd8e14]
imul rax, rcx
shr rax, 0x3e
add eax, 0xbdd06533
and eax, 0x11906032
cmp eax, 0x3c0172c7
ja 0x1400d6000
cmp word [r13 + rbx*2], 0
je 0x1400d6134
nop word cs:[rax + rax]
mov eax, dword [0x141dd8e18]
imul eax, dword [0x141dd8e1c]
xor eax, 0x50c16983
and eax, 0x58f16feb
xor eax, 0x44925906
cmp eax, 0x58051a87
ja 0x1400d6040
lea r8, [rbx + 1]
movzx eax, word [r13 + rbx*2 + 2]
mov edx, dword [0x141dd8e20]
sub edx, dword [0x141dd8e24]
imul edx, edx, 0xa43edcc6
xor edx, 0x4824d017
cmp edx, 0xea56c7f
jb 0x1400d606d
test ax, ax
je 0x1400d6137
lea r8, [rbx + 2]
mov eax, dword [0x141dd8e28]
mov edx, dword [0x141dd8e2c]
add eax, edx
add eax, 0x63188f02
xor eax, 0x419994d1
add eax, 0x7b260503
cmp eax, 0xcac72775
ja 0x1400d609a
movzx eax, word [r13 + rbx*2 + 4]
nop word cs:[rax + rax]
mov edx, dword [0x141dd8e30]
imul edx, dword [0x141dd8e34]
add edx, 0x88647bb0
and edx, 0x6c9f0c01
cmp edx, 0xe31918cc
ja 0x1400d60d0
test ax, ax
je 0x1400d6137
add rbx, 3
nop word [rax + rax]
mov eax, dword [0x141dd8e38]
xor edx, edx
div dword [0x141dd8e3c]
add eax, 0x3ee5b16
and eax, 0x919d8b22
cmp eax, 0x87ad3826
je 0x1400d6100
cmp rbx, 0x105
jne 0x1400d6000
mov r8d, 0x105
jmp 0x1400d6144
mov r8, rbx
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400d6140
mov rbx, qword [rbp + 0xb0]
sub rsp, 0x20
mov rcx, qword [rbp]
mov rdx, r13
call fcn.14008ced0
add rsp, 0x20
nop
mov eax, dword [0x141dd8e40]
or eax, dword [0x141dd8e44]
shr eax, 3
imul rax, rax, 0x28b6d5d
shr rax, 0x34
imul eax, eax, 0x363a8b1a
and eax, 0xc366d95a
cmp eax, 0x42592881
ja 0x1400d6160
mov rax, qword [rdi]
mov rsi, qword [rbp]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8e48]
or ecx, dword [0x141dd8e4c]
xor ecx, 0x23000c00
or ecx, 0x181a11b9
and ecx, 0x7b1a1db9
cmp ecx, 0x440d1712
ja 0x1400d61a0
shl rax, 1
test rax, rax
je 0x1400d620e
nop
mov eax, dword [0x141dd8e50]
xor eax, dword [0x141dd8e54]
imul eax, eax, 0x4dfebf40
and eax, 0x68ec4e80
add eax, 0x4894bbc9
cmp eax, 0x4b306651
jb 0x1400d61d0
mov r8, qword [rbx + 0x68]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
nop dword [rax]
mov eax, dword [str._7F]
or eax, dword [0x141dd8e5c]
imul eax, eax, 0xcb60041b
and eax, 0x4939ed0f
cmp eax, 0x7724d114
je 0x1400d6220
nop
mov eax, dword [0x141dd8e60]
xor eax, dword [0x141dd8e64]
and eax, 0x64288986
imul eax, eax, 0x5c795f8e
cmp eax, 0x4dbb717
je 0x1400d6240
jmp 0x1400d5f1f