Function at 0x1400c7a10
Capabilities:
Encode data using base64
Encode data using xor
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov r8d, edx
mov eax, dword [0x141dd9118]
and eax, dword [0x141dd911c]
and eax, 0x58b3c445
add eax, 0xdc3650b9
cmp eax, 0xb32032f1
jae 0x1400c7a72
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
xor edx, edx
nop word cs:[rax + rax]
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rax, rsp
test dl, dl
jne 0x1400c7a80
mov qword [rbp + 8], rax
mov qword [rbp - 0x20], r9
mov eax, dword [0x141dd9120]
imul eax, dword [0x141dd9124]
add eax, 0xd741689
imul rax, rax, 0x70edc43d
shr rax, 0x3e
xor eax, 0x7e8b2125
cmp eax, 0x59647d91
jb 0x1400c7b50
mov edx, dword [0x141dd9128]
imul edx, dword [0x141dd912c]
or edx, 0x8958deaa
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rbx, rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov r10, rsp
cmp edx, 0x88548e36
jne 0x1400c7b96
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
jmp 0x1400c7ae5
mov qword [rbp + 0x18], r9
mov qword [rbp - 0x50], r11
mov eax, dword [0x141dd9130]
xor edx, edx
div dword [0x141dd9134]
cmp eax, 0xfecf060d
jne 0x1400c7c10
mov eax, 0x50
call fcn.1400f1350
sub rsp, rax
mov eax, 0x50
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd9138]
add eax, dword [0x141dd913c]
and eax, 0x29eed3ec
imul edx, eax, 0x27a78f96
or edx, 0xc762852a
mov eax, 0x50
call fcn.1400f1350
sub rsp, rax
mov r11, rsp
mov eax, 0x50
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r9, rsp
cmp edx, 0xcfb31d53
jb 0x1400c7c10
cmp qword [rcx + 0x10], 0
jne 0x1400ca0ac
mov eax, dword [0x141dd9140]
imul eax, dword [0x141dd9144]
add eax, 0x9f44b0f4
cmp eax, 0xbbfbd696
jbe 0x1400c7cce
xorps xmm0, xmm0
movups xmmword [r14 + 0x20], xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x78], r10
xorps xmm0, xmm0
nop dword [rax]
mov eax, dword [0x141dd9148]
sub eax, dword [0x141dd914c]
imul eax, eax, 0x66333dd1
add eax, 0x72777b07
movups xmmword [r14 + 0x20], xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14], xmm0
cmp eax, 0xdfdb468f
ja 0x1400c7ce0
mov qword [rbp - 0x18], r11
mov qword [rbp - 0x60], r9
mov qword [rbp - 0x68], rcx
mov byte [rbp + 0x27], r8b
mov eax, dword [0x141dd9150]
sub eax, dword [0x141dd9154]
imul eax, eax, 0x88b8d366
and eax, 0x5ceebc92
imul eax, eax, 0xd3a82939
cmp eax, 0xfe3235de
ja 0x1400c7d71
mov eax, dword [0x141dd9158]
or eax, dword [0x141dd915c]
imul esi, eax, 0xcfba2b5
or esi, 0xec8fe78c
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
cmp esi, 0x17917f02
jae 0x1400c7d84
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
jmp 0x1400c7d40
movsx rax, word [r14]
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [rbp + 0x10], rax
xor ecx, ecx
mov eax, 0x80000000
mov r8, rbx
cpuid
xchg rbx, r8
cmp eax, 0x80000004
mov qword [rbp - 0x80], rdi
mov qword [rbp], rbx
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x40], r14
jb 0x1400c7fa9
mov dword [rbp - 0x30], eax
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x50
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x1400c86c6
mov rcx, qword [rbp + 0x18]
mov qword [rcx], 5
mov r8, rax
mov r10d, dword [rbp - 0x30]
nop dword [rax]
mov eax, dword [0x141dd9168]
sub eax, dword [0x141dd916c]
or eax, 0x40088242
and eax, 0xc0688b43
cmp eax, 0xea360c1c
ja 0x1400c7e00
xor eax, eax
test al, al
je 0x1400c7e2f
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], 0
xor eax, eax
nop word cs:[rax + rax]
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], 0
test al, al
jne 0x1400c7e40
mov r13d, 0x80000000
mov r9d, 1
mov ebx, 0xc
xor ecx, ecx
mov edx, 0x80000000
jmp 0x1400c7e90
or al, r9b
lea r9, [r11 + 1]
add rbx, 0x10
mov rcx, qword [rbp + 0x10]
inc rcx
mov edx, dword [rbp - 8]
mov r13d, edx
test al, al
jne 0x1400c7fb7
mov qword [rbp + 0x10], rcx
cmp r13d, r10d
adc edx, 0
mov dword [rbp - 8], edx
xor ecx, ecx
mov eax, r13d
mov r14, rbx
cpuid
xchg rbx, r14
mov edi, eax
mov esi, ecx
mov r15d, edx
mov r11, r9
lea rax, [r9 - 1]
mov rcx, qword [rbp + 0x18]
cmp rax, qword [rcx]
jne 0x1400c7f06
sub rsp, 0x20
mov qword [rbp - 0x58], r11
call fcn.1400da2c0
mov r11, qword [rbp - 0x58]
mov r10d, dword [rbp - 0x30]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov eax, dword [0x141dd9358]
sub eax, dword [0x141dd935c]
imul eax, eax, 0x2f533b02
xor eax, 0x180b9739
imul eax, eax, 0x24298e58
mov r8, qword [rcx + 8]
cmp eax, 0x5c29055f
je 0x1400c7ede
mov eax, dword [0x141dd9360]
and eax, dword [0x141dd9364]
imul rdx, rax, 0x621972e9
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
and eax, 0xfffffffc
cmp eax, 0x4c1032e3
ja 0x1400c7f90
cmp r13d, r10d
setae al
mov edx, dword [0x141dd9368]
imul edx, dword [0x141dd936c]
and edx, 0x5f086845
imul edx, edx, 0xd930882c
imul r9, rdx, 0xcfb18c5
shr r9, 0x20
sub edx, r9d
shr edx, 1
add edx, r9d
shr edx, 0x1f
cmp dword [rbp - 8], r10d
seta r9b
mov dword [r8 + rbx - 0xc], edi
mov dword [r8 + rbx - 8], r14d
mov dword [r8 + rbx - 4], esi
mov dword [r8 + rbx], r15d
mov qword [rcx + 0x10], r11
cmp edx, 0x310845ff
jbe 0x1400c7e70
mov dword [r8 + rbx - 0xc], edi
mov dword [r8 + rbx - 8], r14d
mov dword [r8 + rbx - 4], esi
mov dword [r8 + rbx], r15d
mov qword [rcx + 0x10], r11
jmp 0x1400c7f30
mov ecx, 1
mov r12, qword [rbp - 0x20]
jmp 0x1400c879c
mov rbx, r11
mov eax, dword [0x141dd9190]
mov ecx, dword [0x141dd9194]
add eax, ecx
add eax, 0xdf44fad4
cmp eax, 0x8dfb37ba
jae 0x1400c7fef
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x30
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
mov r13, qword [rbp - 0x48]
mov r15, qword [rbp - 0x28]
mov rdi, qword [rbp + 8]
nop dword [rax + rax]
mov eax, dword [0x141dd9198]
xor edx, edx
div dword [0x141dd919c]
mov esi, eax
and esi, 0x204020a9
add esi, 0x919068b
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x30
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp esi, 0x1e537f13
ja 0x1400c8000
mov r9, rax
test rax, rax
je 0x1400c86fa
mov qword [r12], 0x30
mov qword [r12 + 8], r9
mov qword [r12 + 0x10], 0
mov rax, qword [rbp + 0x18]
mov r14, qword [rax + 8]
mov rcx, rbx
mov rsi, rbx
shl rsi, 4
add rsi, r14
nop word cs:[rax + rax]
mov eax, dword [0x141dd91a8]
sub eax, dword [0x141dd91ac]
xor eax, 0x1e0403eb
add eax, 0x9d7725a5
and eax, 0xc76dfe94
cmp eax, 0x8506e1b3
je 0x1400c8080
cmp rcx, 3
mov qword [rbp - 8], r14
jb 0x1400c8407
mov eax, dword [0x141dd91b0]
add eax, dword [0x141dd91b4]
and eax, 0xfbd9d78
xor eax, 0x59eaa983
cmp eax, 0xbbba92f0
jbe 0x1400c80e1
mov edx, dword [r14 + 0x20]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
lea rdi, [r14 + 0x30]
nop word cs:[rax + rax]
mov ebx, dword [0x141dd91b8]
imul ebx, dword [0x141dd91bc]
add ebx, 0x2ef9a4fe
or ebx, 0x7ff7fd8e
mov edx, dword [r14 + 0x20]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
cmp ebx, 0x6b0c00f5
jb 0x1400c80f0
mov eax, dword [0x141dd91c0]
add eax, dword [0x141dd91c4]
xor eax, 0xc6c3d045
imul rax, rax, 0xba4aff7
shr rax, 0x3b
cmp eax, 0xee0a101d
jne 0x1400c815c
mov edx, dword [r14 + 0x24]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
xor ebx, ebx
nop
mov edx, dword [r14 + 0x24]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
test bl, bl
jne 0x1400c8160
mov edx, dword [r14 + 0x28]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
lea r15, [r14 + 0x2c]
mov ebx, 2
xor r14d, r14d
nop dword [rax + rax]
mov eax, dword [0x141dd91c8]
xor eax, dword [0x141dd91cc]
xor eax, 0x2810181
or eax, 0x20022006
and eax, 0x669b2dc7
cmp eax, 0x9059e631
je 0x1400c81f4
nop word cs:[rax + rax]
mov edx, dword [r15]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
test rbx, rbx
sete al
cmp rdi, rsi
sete cl
test r14b, r14b
je 0x1400c8210
mov edx, dword [r15]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
jmp 0x1400c81d0
or al, cl
jne 0x1400c830c
mov eax, dword [0x141dd91e0]
xor edx, edx
div dword [0x141dd91e4]
add eax, 0xf9ac3d71
xor eax, 0xc3b5f780
cmp eax, 0x7ac58b61
jbe 0x1400c8260
mov edx, dword [rdi]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
mov edx, dword [rdi + 4]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd91e8]
and eax, dword [0x141dd91ec]
imul r15d, eax, 0x7d329a6b
add r15d, 0x7bcb1e6d
xor r15d, 0xb8a6d33e
mov edx, dword [rdi]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
mov edx, dword [rdi + 4]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
cmp r15d, 0x4d0e7481
jb 0x1400c8260
dec rbx
lea r13, [rdi + 0x10]
mov edx, dword [rdi + 8]
sub rsp, 0x20
mov rcx, r12
call fcn.1400d9fa0
add rsp, 0x20
mov eax, dword [0x141dd91f0]
xor edx, edx
div dword [0x141dd91f4]
mov eax, dword [0x141dd91f8]
and eax, dword [0x141dd91fc]
and eax, 0xec6268b7
add eax, 0x849f87e6
and eax, 0xb92e2815
cmp eax, 0xf39a880e
ja 0x1400c82d7
add rdi, 0xc
mov r15, rdi
mov rdi, r13
mov r13, qword [rbp - 0x48]
jmp 0x1400c81a0
mov r15, qword [rbp - 0x28]
mov rdi, qword [rbp + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd91d0]
mov ecx, dword [0x141dd91d4]
add eax, ecx
add eax, 0xcfa80c16
and eax, 0xa006aea7
cmp eax, 0x661a036
ja 0x1400c8320
mov r9, qword [r12 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd91d8]
xor eax, dword [0x141dd91dc]
cmp eax, 0x70525914
je 0x1400c8350
mov rcx, qword [r12 + 0x10]
test rcx, rcx
je 0x1400c8407
lea rax, [r9 + rcx]
xor ebx, ebx
mov rdx, r9
nop word [rax + rax]
cmp byte [rdx], 0
je 0x1400c8676
nop dword [rax]
mov r8d, dword [0x141dd9208]
sub r8d, dword [str.USO]
imul r8d, r8d, 0x4a51cfc1
xor r8d, 0x89009009
or r8d, 0x56fd6576
cmp r8d, 0xaddbda53
ja 0x1400c8390
inc rdx
inc rbx
nop word cs:[rax + rax]
mov r8d, dword [0x141dd9210]
xor r8d, dword [0x141dd9214]
or r8d, 0x2a0f34ff
imul r8d, r8d, 0xbde8ef7
xor r8d, 0xbefa754
cmp r8d, 0xafb61bad
ja 0x1400c83d0
cmp rdx, rax
jne 0x1400c8380
jmp 0x1400c8410
xor ecx, ecx
nop dword [rax]
mov eax, dword [0x141dd9200]
xor edx, edx
div dword [0x141dd9204]
imul eax, eax, 0x99cc1f84
add eax, 0xafbc47f0
cmp eax, 0x63b2a644
jbe 0x1400c8410
mov rbx, rcx
mov eax, dword [0x141dd9218]
xor eax, dword [0x141dd921c]
imul eax, eax, 0x6d0d9d30
cmp eax, 0x797db1e
jae 0x1400c8470
sub rsp, 0x20
mov rcx, rdi
mov rdx, r9
mov r8, rbx
mov rsi, r9
call fcn.140055780
mov r9, rsi
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd9220]
or eax, dword [0x141dd9224]
imul esi, eax, 0xf44273ef
and esi, 0x1e049674
add esi, 0xf5fe826c
sub rsp, 0x20
mov rcx, rdi
mov rdx, r9
mov r8, rbx
mov r14, r9
call fcn.140055780
mov r9, r14
add rsp, 0x20
cmp esi, 0xf49b8186
ja 0x1400c8470
cmp qword [rdi], 0
je 0x1400c854a
mov eax, 1
mov qword [rbp + 8], rax
xor eax, eax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x18]
cmp qword [r12], 0
je 0x1400c84f4
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, r9
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rax]
mov r12, qword [rbp - 0x20]
nop dword [rax + rax]
mov ecx, dword [0x141dd9288]
xor ecx, dword [0x141dd928c]
xor ecx, 0xa2301673
imul ecx, ecx, 0x61609bcc
cmp ecx, 0xbd896287
je 0x1400c8500
test rax, rax
je 0x1400c8d9d
mov eax, dword [0x141dd9290]
add eax, dword [0x141dd9294]
xor eax, 0x1fe3ef1a
cmp eax, 0x3ab08369
jae 0x1400c8d5c
jmp 0x1400c8d80
mov rbx, qword [rdi + 8]
nop
mov eax, dword [str.V_n_i]
xor edx, edx
div dword [0x141dd922c]
and eax, 0xf0c0a560
or eax, 0xf3c1895
imul eax, eax, 0xf3c052f2
cmp eax, 0xe6582ebf
ja 0x1400c8550
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x10], rax
mov eax, dword [0x141dd9230]
xor edx, edx
div dword [0x141dd9234]
nop dword [rax + rax]
mov eax, dword [0x141dd9238]
and eax, dword [0x141dd923c]
add eax, 0x5b18f150
imul rax, rax, 0x14b7d2a5
shr rax, 0x3c
or eax, 0xe23484e0
cmp eax, 0x748669ec
jb 0x1400c8590
cmp qword [rbp + 0x10], 0
js 0x1400c872c
je 0x1400c8684
movzx eax, byte [0x141dde6f8]
mov eax, dword [0x141dd9258]
xor eax, dword [0x141dd925c]
and eax, 0x96dffa9c
imul eax, eax, 0x49000e78
cmp eax, 0x8825ed9e
jne 0x1400c8601
sub rsp, 0x20
xor ecx, ecx
mov rdx, qword [rbp + 0x10]
call fcn.1400c29b0
add rsp, 0x20
mov rdi, qword [rbp + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd9260]
imul eax, dword [0x141dd9264]
xor eax, 0xd52c5b61
add eax, 0xcd6e0eb5
imul rsi, rax, 0x4058951f
shr rsi, 0x3e
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.1400c29b0
add rsp, 0x20
cmp esi, 0x3faaefbb
ja 0x1400c8610
mov qword [rbp + 8], rax
test rax, rax
jne 0x1400c868d
mov eax, dword [0x141dd9268]
sub eax, dword [0x141dd926c]
and eax, 0xc440080
cmp eax, 0x53b40d48
jbe 0x1400c8e76
jmp 0x1400c8e9b
cmp rbx, rcx
jbe 0x1400c8433
jmp 0x1400c8d5a
mov eax, 1
mov qword [rbp + 8], rax
mov eax, dword [0x141dd9278]
sub eax, dword [0x141dd927c]
mov ecx, 0xa36f92c5
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xc17d4030
imul eax, ecx, 0x8905ecbe
cmp eax, 0x629674dd
mov rdi, qword [rbp + 8]
jne 0x1400c8e0f
jmp 0x1400c8e46
mov eax, dword [0x141dd9160]
xor edx, edx
div dword [0x141dd9164]
imul eax, eax, 0xab2b2c14
add eax, 0xca9f5394
xor eax, 0xa9aeb9b9
cmp eax, 0xfa59265f
jbe 0x1400c86ed
ud2
xor eax, eax
ud2
xor eax, eax
test al, al
je 0x1400c8702
ud2
mov eax, dword [0x141dd91a0]
xor eax, dword [0x141dd91a4]
imul eax, eax, 0x7e6713ea
add eax, 0x67ba342
or eax, 0x2cf8ddfe
ud2
mov eax, dword [0x141dd9240]
and eax, dword [0x141dd9244]
or eax, 0xfc9bae3a
and eax, 0xff9bae3a
cmp eax, 0x6f7690a
jae 0x1400c874b
ud2
mov eax, 0xb529ee07
mov ecx, dword [0x141dd9248]
imul ecx, dword [0x141dd924c]
add ecx, 0x63dee575
imul rcx, rax
shr rcx, 0x3f
ud2
mov qword [rbp + 8], rcx
mov eax, dword [0x141dd9170]
imul eax, dword [0x141dd9174]
imul eax, eax, 0xe6eb4450
add eax, 0x43a9ea30
shr eax, 1
mov ecx, 0xa2012aa5
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x2d9caeef
jbe 0x1400c8800
xor ecx, ecx
xor eax, eax
mov r8, rbx
cpuid
xchg rbx, r8
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xc
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd9178]
or eax, dword [0x141dd917c]
imul r14d, eax, 0xde2a5cc7
add r14d, 0x98813436
and r14d, 0x77d72ebd
xor eax, eax
xor ecx, ecx
mov rbx, rbx
cpuid
xchg rbx, rbx
mov esi, ecx
mov edi, edx
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xc
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp r14d, 0x76a4e547
je 0x1400c8800
test rax, rax
je 0x1400c8c1c
mov qword [r12], 0xc
mov qword [r12 + 8], rax
mov qword [r12 + 0x10], 0
sub rsp, 0x20
mov rcx, r12
mov edx, ebx
call fcn.1400d9fa0
mov rcx, r12
mov edx, edi
call fcn.1400d9fa0
mov rcx, r12
mov edx, esi
call fcn.1400d9fa0
add rsp, 0x20
mov rdi, qword [r12 + 8]
mov rax, qword [r12 + 0x10]
lea rcx, [rdi + rax]
xor edx, edx
nop word [rax + rax]
test dl, dl
jne 0x1400c88b0
test rax, rax
mov r14, qword [rbp]
mov rsi, qword [rbp - 0x50]
je 0x1400c8920
xor edx, edx
xor r8d, r8d
mov r9, rdi
nop dword [rax]
test dl, dl
jne 0x1400c88d0
cmp byte [r9], 0
je 0x1400c894b
nop word [rax + rax]
mov r10d, dword [0x141dd92b8]
sub r10d, dword [str.62e_Hb]
add r10d, 0x846e2754
or r10d, 0xc82c0114
and r10d, 0xc83f67f4
cmp r10d, 0x5aade635
je 0x1400c88e0
inc r9
inc r8
cmp r9, rcx
jne 0x1400c88d0
nop word [rax + rax]
mov ecx, dword [0x141dd92b0]
xor ecx, dword [0x141dd92b4]
and ecx, 0x3f57d05c
add ecx, 0x88ed42fd
or ecx, 0xb336cfc3
cmp ecx, 0x32bc8996
je 0x1400c8920
mov r8, rax
jmp 0x1400c895d
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400c8950
cmp r8, rax
ja 0x1400c8ceb
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.140055780
add rsp, 0x20
cmp qword [rsi], 0
je 0x1400c89d0
nop word cs:[rax + rax]
mov eax, dword [0x141dd9320]
or eax, dword [0x141dd9324]
add eax, 0xd512f18a
or eax, 0x101d6440
cmp eax, 0x4604f61a
je 0x1400c8980
mov rcx, qword [rbp - 0x10]
cmp cx, 0xe
ja 0x1400c8abf
lea rax, [0x141dbc060]
mov rbx, qword [rax + rcx*8]
lea rax, [0x141dbc0d8]
mov rsi, qword [rax + rcx*8]
jmp 0x1400c8acb
mov eax, dword [0x141dd92d8]
and eax, dword [0x141dd92dc]
add eax, 0x9848397a
cmp eax, 0xd1a5f737
jb 0x1400c89d0
mov rax, qword [rsi + 0x10]
mov qword [rbp + 0x18], rax
test rax, rax
js 0x1400c8c7b
mov rsi, qword [rsi + 8]
mov eax, 0x9af6db7d
nop word cs:[rax + rax]
mov ecx, dword [0x141dd92f8]
or ecx, dword [0x141dd92fc]
add ecx, 0x3c5fd268
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0x9778b0a5
cmp ecx, 0x2b63e54
jb 0x1400c8a10
nop dword [rax + rax]
mov eax, dword [0x141dd9300]
xor edx, edx
div dword [0x141dd9304]
or eax, 0x80200001
and eax, 0xd1684a17
xor eax, 0x7cfa4b92
cmp eax, 0xca5b762d
jb 0x1400c8a40
mov rbx, qword [rbp + 0x18]
test rbx, rbx
je 0x1400c8bc0
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400c29b0
add rsp, 0x20
mov rcx, rax
test rax, rax
jne 0x1400c8bc5
mov eax, dword [0x141dd9308]
xor edx, edx
div dword [0x141dd930c]
imul rax, rax, 0x64f3e6ad
shr rax, 0x3d
cmp eax, 0xc4e60ca6
jne 0x1400c8eaa
jmp 0x1400c8ed6
lea rsi, [0x141dbbdf7]
mov ebx, 7
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400c29b0
add rsp, 0x20
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1400c8d5a
mov eax, dword [0x141dd9328]
or eax, dword [0x141dd932c]
add eax, 0xcb0facc2
or eax, 0x9e15d325
cmp eax, 0x72cad56e
jae 0x1400c8b25
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov r14d, 0xd212974f
mov r12, qword [rbp - 0x10]
nop
mov eax, dword [0x141dd9330]
xor edx, edx
div dword [0x141dd9334]
mov r15d, eax
and r15d, 0xdb2396e4
imul r15, r14
shr r15, 0x3d
or r15d, 0x3c39bf28
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp r15d, 0x6c50ca3a
ja 0x1400c8b30
mov qword [rbp + 0x18], rbx
nop word [rax + rax]
mov eax, dword [0x141dd9338]
sub eax, dword [0x141dd933c]
add eax, 0x348eaf6
and eax, 0xad873a5a
imul rax, rax, 0x6a870d97
shr rax, 0x3e
cmp eax, 0x922aae82
ja 0x1400c8b80
mov rbx, qword [rbp]
mov r15, qword [rbp - 0x28]
mov r12, qword [rbp - 0x20]
cmp qword [r12], 0
jne 0x1400c8bea
jmp 0x1400c8f82
mov ecx, 1
sub rsp, 0x20
mov qword [rbp - 0x10], rcx
mov rdx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rbx, r14
cmp qword [r12], 0
je 0x1400c8f82
mov rsi, qword [0x141dde6e0]
mov eax, dword [0x141dd9340]
sub eax, dword [0x141dd9344]
add eax, 0x6db7931b
and eax, 0x8daaec98
add eax, 0x16201403
cmp eax, 0x955f1bba
jae 0x1400c8f01
jmp 0x1400c8f43
mov eax, dword [0x141dd9180]
imul eax, dword [0x141dd9184]
xor eax, 0x2225e071
or eax, 0x4920c80
imul eax, eax, 0x59fbf476
cmp eax, 0xceb94d1d
jbe 0x1400c8c50
ud2
mov eax, dword [0x141dd9188]
xor edx, edx
div dword [0x141dd918c]
add eax, 0x52e39e26
or eax, 0x3082a08
and eax, 0x87be6aaf
ud2
mov eax, dword [0x141dd92e0]
xor eax, dword [0x141dd92e4]
and eax, 0xc8a06921
mov ecx, 0xab9c96fd
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xe3c7c79f
jne 0x1400c8ca3
ud2
mov eax, dword [0x141dd92e8]
xor edx, edx
div dword [0x141dd92ec]
and eax, 0xb0a00020
or eax, 0x411f8104
imul rax, rax, 0x30b33127
shr rax, 0x3d
ud2
mov eax, dword [0x141dd92c0]
and eax, dword [0x141dd92c4]
add eax, 0x5649c02
imul rcx, rax, 0x4518c8db
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
imul eax, eax, 0x6254bb39
cmp eax, 0xb4fbb56b
jne 0x1400c8d1f
ud2
mov eax, dword [0x141dd92c8]
or eax, dword [0x141dd92cc]
xor eax, 0x67f24d78
imul eax, eax, 0x574a7d3
ud2
ud2
mov eax, dword [0x141dd9298]
and eax, dword [0x141dd929c]
or eax, 0x1240c205
and eax, 0x1348d207
mov rcx, qword [0x141dde6e0]
cmp eax, 0x8116fc2c
jne 0x1400c8d89
mov rax, qword [0x141dde6e0]
jmp 0x1400c8d5c
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rcx, qword [rbp + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd92a0]
or eax, dword [0x141dd92a4]
and eax, 0x1e20b0a4
add eax, 0x638ab5d3
or eax, 0xa84c258d
cmp eax, 0xb816c8a8
jb 0x1400c8db0
nop word cs:[rax + rax]
mov eax, dword [0x141dd92a8]
imul eax, dword [0x141dd92ac]
imul rax, rax, 0x3b43c167
shr rax, 0x3d
imul eax, eax, 0x7911f5a8
xor eax, 0x5e12166
cmp eax, 0x8a171676
ja 0x1400c8de0
jmp 0x1400c879c
mov eax, dword [0x141dd9280]
xor eax, dword [0x141dd9284]
imul esi, eax, 0xeaacb662
and esi, 0x9f9be3c2
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, qword [rbp + 0x10]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp esi, 0x64b0c9bd
jne 0x1400c8e5f
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, qword [rbp + 0x10]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
jmp 0x1400c8e0f
mov rax, qword [rbp + 0x18]
mov r9, r14
cmp qword [r12], 0
jne 0x1400c84d6
jmp 0x1400c84f4
mov eax, dword [0x141dd9270]
imul eax, dword [0x141dd9274]
xor eax, 0x204880
and eax, 0x824cbfd
xor eax, 0xad2b005e
ud2
ud2
mov eax, dword [0x141dd9310]
mov ecx, dword [0x141dd9314]
add eax, ecx
add eax, 0xc5dcd6a9
and eax, 0xa63382a7
imul rax, rax, 0x3aedb887
shr rax, 0x3b
ud2
ud2
mov eax, dword [0x141dd9348]
or eax, dword [0x141dd934c]
add eax, 0x3fbddd4a
imul rax, rax, 0xdbec0bf
shr rax, 0x3a
imul r14d, eax, 0x8a833404
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x445ced0b
jbe 0x1400c8f5b
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c8f01
mov rbx, qword [rbp]
nop
mov eax, dword [0x141dd9350]
sub eax, dword [0x141dd9354]
xor eax, 0x2e636cd6
add eax, 0x1c0d8a87
and eax, 0x6b0cbe59
cmp eax, 0xb8f82a00
jae 0x1400c8f60
mov rax, qword [rbp - 0x40]
mov esi, dword [rax + 0x20]
nop dword [rax]
mov eax, dword [0x141dd9370]
imul eax, dword [0x141dd9374]
imul rax, rax, 0x16749e97
shr rax, 0x3c
add eax, 0x80ccd339
xor eax, 0xe3b98589
cmp eax, 0xa4d1396b
ja 0x1400c8f90
nop dword [rax]
mov eax, dword [0x141dd9378]
imul eax, dword [0x141dd937c]
add eax, 0x52896dc8
xor eax, 0xdc071e1b
cmp eax, 0x22112702
jb 0x1400c8fc0
cmp byte [rbp + 0x27], 0
je 0x1400c90a0
mov eax, dword [0x141dd93c8]
xor eax, dword [0x141dd93cc]
or eax, 0xbeffebbf
imul eax, eax, 0xd621e0f3
cmp eax, 0x588affb1
jbe 0x1400c9020
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
call fcn.1400da5b0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd93d0]
sub eax, dword [0x141dd93d4]
and eax, 0xa5e54dec
imul rcx, rax, 0x1ddc1e1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
imul edi, eax, 0x7366d66b
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
call fcn.1400da5b0
add rsp, 0x20
cmp edi, 0x9f808a3e
je 0x1400c9020
nop word cs:[rax + rax]
mov eax, dword [0x141dd93d8]
xor edx, edx
div dword [0x141dd93dc]
add eax, 0x5c33d8ab
or eax, 0xc96b1c51
add eax, 0x4cb19d87
cmp eax, 0xad07b428
ja 0x1400c9070
jmp 0x1400c91a3
mov eax, dword [0x141dd9380]
or eax, dword [0x141dd9384]
add eax, 0x27530595
imul rax, rax, 0x16ec7457
shr rax, 0x3b
cmp eax, 0x9cd3289f
je 0x1400c90a0
mov eax, 0x8d4efe17
nop dword [rax + rax]
mov ecx, dword [0x141dd9388]
add ecx, dword [0x141dd938c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x758cfd2a
cmp ecx, 0x2c644ef9
jb 0x1400c90d0
test rsi, rsi
je 0x1400c9153
lea rdi, [rsi*8]
nop
mov eax, dword [0x141dd9390]
imul eax, dword [0x141dd9394]
imul eax, eax, 0xdec8d5b8
add eax, 0x19b1646e
cmp eax, 0xd893f5a8
jb 0x1400c9100
mov eax, dword [0x141dd9398]
imul eax, dword [0x141dd939c]
add eax, 0x81262967
shr eax, 1
imul rax, rax, 0x42b0f189
shr rax, 0x3c
xor eax, 0x974acaf3
cmp eax, 0x268e4ef2
jae 0x1400c924f
jmp 0x1400c928e
mov eax, 8
mov ecx, dword [0x141dd93c0]
xor ecx, dword [0x141dd93c4]
mov edx, 0xcc8de795
imul rdx, rcx
shr rdx, 0x3d
xor edx, 0xeaa08fd6
add edx, 0x287aaedb
cmp edx, 0x3e013cfd
ja 0x1400c9196
mov qword [r15], rsi
mov qword [r15 + 8], rax
mov qword [r15 + 0x10], rsi
mov cl, 1
test cl, cl
jne 0x1400c91a3
mov qword [r15], rsi
mov qword [r15 + 8], rax
mov qword [r15 + 0x10], rsi
jmp 0x1400c9185
inc rsi
imul rdx, rsi, 0x70
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x1400c91f1
mov rdi, rax
mov eax, dword [0x141dd93f0]
or eax, dword [0x141dd93f4]
or eax, 0x80b7831
add eax, 0x8615038f
cmp eax, 0xd7a08bfd
mov r8, rbx
jbe 0x1400c9337
jmp 0x1400c935f
mov eax, dword [0x141dd93e0]
or eax, dword [0x141dd93e4]
and eax, 0x20190400
or eax, 0xce62786a
imul eax, eax, 0x49d59bbd
cmp eax, 0x2922eade
jne 0x1400c9220
ud2
mov eax, dword [0x141dd93e8]
sub eax, dword [0x141dd93ec]
or eax, 0xf3437e1e
add eax, 0x305a0dda
imul rax, rax, 0x1a4d4b77
shr rax, 0x39
ud2
mov eax, dword [0x141dd93a0]
add eax, dword [str.__6_]
imul r14d, eax, 0xbb2aaca3
add r14d, 0x50e1b7d9
xor r14d, 0x7fa0b1b8
sub rsp, 0x20
mov ecx, 8
mov rdx, rdi
call fcn.1400c29b0
add rsp, 0x20
cmp r14d, 0x4c23e8ec
jae 0x1400c92a5
sub rsp, 0x20
mov ecx, 8
mov rdx, rdi
call fcn.1400c29b0
add rsp, 0x20
jmp 0x1400c924f
test rax, rax
je 0x1400c930b
nop word [rax + rax]
mov ecx, dword [0x141dd93a8]
and ecx, dword [0x141dd93ac]
xor ecx, 0x3ca10cb1
imul ecx, ecx, 0x36825267
cmp ecx, 0x440dfe8f
je 0x1400c92b0
mov rbx, qword [rbp]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd93b0]
and ecx, dword [0x141dd93b4]
imul ecx, ecx, 0xa7263712
and ecx, 0x37d89fde
xor ecx, 0xb78ade1f
cmp ecx, 0x4b0d28b9
jbe 0x1400c92e0
jmp 0x1400c9158
ud2
mov eax, dword [0x141dd93f8]
add eax, dword [0x141dd93fc]
imul eax, eax, 0x30be5153
imul rax, rax, 0xfb972e1
shr rax, 0x3a
mov qword [r13], rsi
cmp eax, 0xda38bd39
jbe 0x1400c9365
mov qword [r13], rsi
jmp 0x1400c9337
mov qword [r13 + 8], rdi
mov qword [r13 + 0x10], 0
mov rax, qword [r15 + 8]
mov qword [rbp - 0x38], rax
nop dword [rax]
mov eax, dword [0x141dd9400]
sub eax, dword [0x141dd9404]
or eax, 0x116a6cee
add eax, 0x68d15226
or eax, 0xc31c5964
cmp eax, 0x8f4e265e
jb 0x1400c9380
mov rax, qword [r15 + 0x10]
test rax, rax
mov rsi, qword [rbp + 0x18]
je 0x1400c9aea
mov rcx, qword [rbp - 0x38]
lea rax, [rcx + rax*8]
mov qword [rbp - 0x40], rax
mov eax, dword [str.KH__vH0]
xor edx, edx
div dword [0x141dd940c]
nop dword [rax]
mov eax, dword [0x141dd9410]
imul eax, dword [0x141dd9414]
imul eax, eax, 0xdf6ec9e1
or eax, 0x9e0af29a
add eax, 0x9088599b
cmp eax, 0x5bbb863
jb 0x1400c93d0
mov eax, 0xfc334e83
nop dword [rax]
mov ecx, dword [0x141dd9418]
sub ecx, dword [0x141dd941c]
imul ecx, ecx, 0xe5a70ea8
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x9640f629
ja 0x1400c9400
nop word cs:[rax + rax]
mov eax, dword [0x141dd9420]
mov ecx, dword [0x141dd9424]
add eax, ecx
add eax, 0x7906e3b5
cmp eax, 0xe546f2c4
ja 0x1400c9430
lea r10, [0x140055540]
lea r11, [0x141dbbe10]
xor r12d, r12d
mov rax, qword [rbp - 0x38]
mov qword [rbp - 8], rax
mov qword [rbp + 0x18], rsi
jmp 0x1400c9482
mov qword [rbp - 8], r15
cmp r15, qword [rbp - 0x40]
mov r8, qword [rbp]
je 0x1400c9aea
mov qword [rbp - 0x58], rdi
mov eax, dword [0x141dd9458]
and eax, dword [0x141dd945c]
add eax, 0xaa0a934f
or eax, 0xd98c0046
imul eax, eax, 0xfc2768e7
cmp eax, 0xeb1a79b7
mov rbx, qword [rbp - 0x78]
mov r13, qword [rbp - 0x80]
mov r14, r10
mov rdi, r11
je 0x1400c952b
nop word [rax + rax]
mov eax, dword [0x141dd9460]
xor edx, edx
div dword [0x141dd9464]
mov esi, eax
or esi, 0xb5dd3716
and esi, 0xb5ddb796
lea r15, [r12 + 1]
mov qword [r13], r15
mov qword [r8], r13
mov qword [r8 + 8], r14
mov qword [rbx], rdi
mov qword [rbx + 8], 1
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, rbx
call fcn.140039290
mov r8, qword [rbp]
add rsp, 0x20
cmp esi, 0x7309a8d8
jae 0x1400c9580
lea rax, [r12 + 1]
mov qword [r13], rax
mov qword [r8], r13
mov qword [r8 + 8], r14
mov qword [rbx], rdi
mov qword [rbx + 8], 1
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, rbx
call fcn.140039290
mov r8, qword [rbp]
add rsp, 0x20
jmp 0x1400c94c0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x30], r12
mov rax, qword [rbp - 8]
lea r15, [rax + 8]
mov rdi, qword [rbp + 0x18]
test rdi, rdi
mov rbx, qword [rbp + 0x10]
js 0x1400ca0bd
je 0x1400c96c0
movzx eax, byte [0x141dde6f8]
mov eax, dword [0x141dd9468]
sub eax, dword [0x141dd946c]
add eax, 0xb32bd43e
and eax, 0x626709a0
cmp eax, 0xb476321a
jbe 0x1400c95e0
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.1400c29b0
add rsp, 0x20
nop dword [rax]
mov r14d, dword [0x141dd9470]
imul r14d, dword [0x141dd9474]
add r14d, 0x66507a1c
xor r14d, 0x2422c132
and r14d, 0x2d22c333
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.1400c29b0
add rsp, 0x20
cmp r14d, 0xfed0d83b
ja 0x1400c95e0
mov rsi, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd9478]
and eax, dword [0x141dd947c]
add eax, 0x33a2f4de
and eax, 0x20eaca82
add eax, 0xb8616af5
cmp eax, 0x1f4490f7
jb 0x1400c9630
test rsi, rsi
je 0x1400ca0bd
mov eax, dword [0x141dd9480]
or eax, dword [0x141dd9484]
xor eax, 0xe13684e9
add eax, 0x5db4ee47
mov ecx, 0x977ec04f
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x7c368f73
ja 0x1400c965b
nop word cs:[rax + rax]
mov eax, dword [0x141dd9488]
xor eax, dword [0x141dd948c]
xor eax, 0x233ea41c
imul eax, eax, 0x567be047
and eax, 0xc559c47a
cmp eax, 0xea5dbfd3
ja 0x1400c9690
jmp 0x1400c96c5
mov esi, 1
sub rsp, 0x20
mov rcx, rsi
mov rdx, qword [rbp - 0x10]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], rsi
mov qword [rax + 0x28], rdi
test rbx, rbx
mov rdi, qword [rbp - 8]
js 0x1400ca0e4
mov qword [rbp - 0x50], r15
je 0x1400c97d0
movzx eax, byte [0x141dde6f8]
mov eax, dword [0x141dd9498]
or eax, dword [0x141dd949c]
imul eax, eax, 0xd74af3d4
or eax, 0xc5f03c0
cmp eax, 0xeff1242b
jbe 0x1400c9740
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400c29b0
add rsp, 0x20
nop word [rax + rax]
mov r14d, dword [0x141dd94a0]
xor r14d, dword [0x141dd94a4]
and r14d, 0x22782884
xor r14d, 0x30101a06
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400c29b0
add rsp, 0x20
cmp r14d, 0x542b7e44
ja 0x1400c9740
mov rsi, rax
xor eax, eax
test al, al
jne 0x1400c977a
test rsi, rsi
je 0x1400ca0e4
nop dword [rax]
mov eax, dword [0x141dd94a8]
and eax, dword [0x141dd94ac]
cmp eax, 0x9e600313
je 0x1400c9790
nop word cs:[rax + rax]
mov eax, dword [0x141dd94b0]
and eax, dword [0x141dd94b4]
add eax, 0x1113cd69
cmp eax, 0xd6cf136b
ja 0x1400c97b0
jmp 0x1400c97d5
mov esi, 1
mov eax, dword [0x141dd94c0]
and eax, dword [0x141dd94c4]
imul eax, eax, 0x24fc53b1
mov ecx, 0xb3692bc7
imul rax, rcx
shr rax, 0x3f
or eax, 0x2e5c1b00
cmp eax, 0x3a221b1e
mov r12, qword [rbp - 0x18]
mov r13, qword [rbp - 0x70]
mov r15, qword [rbp + 0x10]
mov r14, qword [rbp + 8]
ja 0x1400c98aa
nop word cs:[rax + rax]
mov eax, dword [0x141dd94c8]
xor edx, edx
div dword [0x141dd94cc]
imul eax, eax, 0x74d442ca
and eax, 0x4e3204bc
imul rbx, rax, 0x6e7839d3
shr rbx, 0x3d
sub rsp, 0x20
mov rcx, rsi
mov rdx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r12 + 0x30], r15
mov qword [r12 + 0x38], rsi
mov qword [r12 + 0x40], r15
mov rcx, qword [rdi]
mov rax, qword [r12 + 0x30]
mov qword [r13 + 0x30], rax
mov rax, qword [r12 + 0x38]
mov qword [r13 + 0x38], rax
mov qword [r13 + 0x40], r15
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [r13 + 0x20], xmm2
movups xmmword [r13 + 0x10], xmm1
movups xmmword [r13], xmm0
cmp ebx, 0x587d942
jbe 0x1400c9910
sub rsp, 0x20
mov rcx, rsi
mov rdx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r12 + 0x30], r15
mov qword [r12 + 0x38], rsi
mov qword [r12 + 0x40], r15
mov qword [r13 + 0x40], r15
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [r13 + 0x20], xmm2
movups xmmword [r13 + 0x10], xmm1
movups xmmword [r13], xmm0
mov rax, qword [r12 + 0x30]
mov qword [r13 + 0x30], rax
mov rax, qword [r12 + 0x38]
mov qword [r13 + 0x38], rax
jmp 0x1400c9820
mov rbx, rcx
mov r13, qword [rbp - 0x48]
mov r14, qword [rbp - 0x30]
cmp r14, qword [r13]
mov rsi, qword [rbp + 0x18]
mov rdi, qword [rbp - 0x58]
mov r15, qword [rbp - 0x50]
jne 0x1400c99e5
mov r12, rsi
mov eax, dword [0x141dd94d0]
and eax, dword [0x141dd94d4]
xor eax, 0x75996003
imul eax, eax, 0xa4c3625
add eax, 0x8a164d8c
cmp eax, 0xcf4d5ee5
jbe 0x1400c9970
sub rsp, 0x20
mov rcx, r13
call fcn.1400dad70
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd94d8]
xor edx, edx
div dword [0x141dd94dc]
mov esi, eax
add esi, 0x68990db9
xor esi, 0x4c03245c
and esi, 0xecd7b75d
sub rsp, 0x20
mov rcx, r13
call fcn.1400dad70
add rsp, 0x20
cmp esi, 0x7a1fa845
ja 0x1400c9970
mov rdi, qword [r13 + 8]
mov ecx, 0x855c9c5b
nop word cs:[rax + rax]
mov eax, dword [0x141dd94e0]
xor edx, edx
div dword [0x141dd94e4]
add eax, 0x53b4384a
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x746a525e
ja 0x1400c99c0
mov rsi, r12
mov eax, dword [0x141dd94e8]
sub eax, dword [0x141dd94ec]
imul eax, eax, 0xe65816a9
add eax, 0x96083c65
imul rax, rax, 0x7542fc97
shr rax, 0x3e
cmp eax, 0xb41122f4
mov r8, qword [rbp - 0x70]
movabs r9, 0x8000000000000000
lea r10, [0x140055540]
lea r11, [0x141dbbe10]
mov r12, qword [rbp - 0x20]
ja 0x1400c9a9c
nop
mov eax, dword [0x141dd94f0]
xor edx, edx
div dword [0x141dd94f4]
imul rcx, r14, 0x70
mov rdx, qword [r8 + 0x40]
mov qword [rdi + rcx + 0x40], rdx
xor eax, 0x21808404
or eax, 0x9e7f7bfb
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmm2, xmmword [r8 + 0x20]
movups xmm3, xmmword [r8 + 0x30]
movups xmmword [rdi + rcx + 0x30], xmm3
movups xmmword [rdi + rcx + 0x20], xmm2
movups xmmword [rdi + rcx + 0x10], xmm1
movups xmmword [rdi + rcx], xmm0
mov qword [rdi + rcx + 0x48], r9
mov dword [rdi + rcx + 0x60], 0
mov qword [rdi + rcx + 0x68], rbx
mov qword [r13 + 0x10], r12
cmp eax, 0x2512acf5
jne 0x1400c9470
imul rax, r14, 0x70
mov rcx, qword [r8 + 0x40]
mov qword [rdi + rax + 0x40], rcx
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmm2, xmmword [r8 + 0x20]
movups xmm3, xmmword [r8 + 0x30]
movups xmmword [rdi + rax + 0x30], xmm3
movups xmmword [rdi + rax + 0x20], xmm2
movups xmmword [rdi + rax + 0x10], xmm1
movups xmmword [rdi + rax], xmm0
mov qword [rdi + rax + 0x48], r9
mov dword [rdi + rax + 0x60], 0
mov qword [rdi + rax + 0x68], rbx
mov qword [r13 + 0x10], r12
jmp 0x1400c9a30
mov rbx, rsi
mov rax, qword [r13 + 0x10]
mov rcx, qword [rbp - 0x60]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r13]
movups xmmword [rcx], xmm0
mov rax, qword [rbp - 0x28]
mov rax, qword [rax]
nop dword [rax + rax]
mov ecx, dword [0x141dd9428]
sub ecx, dword [0x141dd942c]
xor ecx, 0x2b71bf8c
add ecx, 0x2c205d4
xor ecx, 0xaf9b5fba
cmp ecx, 0xe883452c
ja 0x1400c9b10
test rax, rax
mov rsi, qword [rbp + 0x10]
mov rdi, qword [rbp + 8]
je 0x1400c9b5e
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test rsi, rsi
mov rsi, qword [rbp - 0x68]
je 0x1400c9bf0
mov eax, dword [0x141dd9430]
xor edx, edx
div dword [0x141dd9434]
nop dword [rax]
mov eax, dword [0x141dd9438]
sub eax, dword [0x141dd943c]
add eax, 0x52c8b4b1
shr eax, 1
imul rax, rax, 0x48659db7
shr rax, 0x3c
cmp eax, 0xf57b26d
ja 0x1400c9b80
nop word cs:[rax + rax]
mov eax, dword [0x141dd9440]
xor edx, edx
div dword [0x141dd9444]
add eax, 0x75299e18
or eax, 0xfe0499c9
imul eax, eax, 0x821478f4
cmp eax, 0xd5ff0d5d
ja 0x1400c9bb0
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov eax, dword [0x141dd9448]
xor edx, edx
div dword [0x141dd944c]
xor eax, 0xc408d482
add eax, 0x5604a839
cmp eax, 0x663cf3f8
ja 0x1400c9bf0
test rbx, rbx
je 0x1400c9c5e
mov eax, 0xb7083f09
nop dword [rax]
mov ecx, dword [0x141dd9450]
imul ecx, dword [0x141dd9454]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xb54fe88a
cmp ecx, 0x4923df4a
jb 0x1400c9c20
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dd94f8]
xor edx, edx
div dword [0x141dd94fc]
mov eax, 0xbb68e375
nop word cs:[rax + rax]
mov ecx, dword [0x141dd9500]
or ecx, dword [0x141dd9504]
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x8100f521
je 0x1400c9c80
mov rax, qword [rsi + 8]
mov qword [rbp], rax
mov rax, qword [rsi + 0x10]
mov qword [rbp - 0x18], rax
nop dword [rax]
mov eax, dword [0x141dd9508]
sub eax, dword [0x141dd950c]
xor eax, 0x27c17e
imul eax, eax, 0x9e142b35
and eax, 0x687c3711
cmp eax, 0x42c5b214
ja 0x1400c9cb0
cmp qword [rbp - 0x18], 0
je 0x1400ca00d
xor r14d, r14d
mov r15d, 0x89fa06d3
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13d, 0xa79c2aab
xor ebx, ebx
nop word cs:[rax + rax]
imul rax, rbx, 0x70
mov rcx, qword [rbp]
lea rsi, [rcx + rax]
cmp qword [rcx + rax], 0
je 0x1400c9dd8
nop word [rax + rax]
mov eax, dword [0x141dd9510]
or eax, dword [0x141dd9514]
imul eax, eax, 0xe478db09
add eax, 0xf17610d3
and eax, 0x60f76351
cmp eax, 0x83d6e811
ja 0x1400c9d20
mov eax, dword [0x141dd9518]
and eax, dword [0x141dd951c]
and eax, 0x9b0ac004
xor eax, 0x12198240
or eax, 0x64c43d8b
cmp eax, 0x2baab5a5
jae 0x1400c9d80
mov r8, qword [rsi + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd9520]
xor edx, edx
div dword [0x141dd9524]
mov edi, eax
xor edi, 0x9640105
or edi, 0xb08a725a
mov r8, qword [rsi + 8]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
cmp edi, 0x8a373784
je 0x1400c9d80
nop dword [rax]
mov eax, dword [0x141dd9528]
add eax, dword [0x141dd952c]
xor eax, 0x6797b13c
cmp eax, 0x5cd0fe5d
ja 0x1400c9dc0
inc rbx
mov rax, qword [rsi + 0x18]
nop
mov ecx, dword [0x141dd9530]
xor ecx, dword [0x141dd9534]
and ecx, 0x3ba40c39
add ecx, 0xf63f6b5
xor ecx, 0x68088775
cmp ecx, 0x66aac3ad
jb 0x1400c9de0
test rax, rax
je 0x1400c9e83
mov eax, dword [0x141dd9538]
xor eax, dword [0x141dd953c]
imul eax, eax, 0x38e4a449
add eax, 0xa3c40554
cmp eax, 0xafe44e38
ja 0x1400c9ff0
nop dword [rax]
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
test r14b, r14b
jne 0x1400c9ff0
nop word cs:[rax + rax]
mov eax, dword [0x141dd9540]
add eax, dword [0x141dd9544]
and eax, 0x4411f109
imul eax, eax, 0x9dbccfb4
and eax, 0x82cb7c28
cmp eax, 0xbff237c
je 0x1400c9e60
mov rax, qword [rsi + 0x48]
nop word [rax + rax]
mov ecx, dword [0x141dd9548]
or ecx, dword [0x141dd954c]
imul ecx, ecx, 0x507b5525
add ecx, 0x1058f482
or ecx, 0x99d2822e
cmp ecx, 0x58157744
jb 0x1400c9e90
shl rax, 1
test rax, rax
je 0x1400c9f10
mov r8, qword [rsi + 0x50]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd9550]
add eax, dword [0x141dd9554]
xor eax, 0x8ebab4e0
imul rax, r13
shr rax, 0x3f
add eax, 0x36c21e2b
cmp eax, 0xe559975d
ja 0x1400c9ee0
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400c9f10
nop word cs:[rax + rax]
mov eax, dword [0x141dd9558]
and eax, dword [0x141dd955c]
imul rax, r15
shr rax, 0x3e
imul eax, eax, 0x55f22a50
or eax, 0x17e06747
cmp eax, 0xac768a32
je 0x1400c9f20
cmp qword [rsi + 0x30], 0
je 0x1400c9f90
mov eax, dword [0x141dd9560]
xor edx, edx
div dword [0x141dd9564]
mov eax, dword [0x141dd9568]
or eax, dword [0x141dd956c]
or eax, 0xa6000500
and eax, 0xb692473c
cmp eax, 0x3b861f9b
je 0x1400c9f5b
mov r8, qword [rsi + 0x38]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
mov eax, dword [0x141dd9570]
sub eax, dword [0x141dd9574]
add eax, 0xc029030a
and eax, 0xfdf189c2
imul eax, eax, 0x6cfd9569
cmp eax, 0x710a9310
ja 0x1400c9f90
nop word cs:[rax + rax]
mov eax, dword [0x141dd9578]
imul eax, dword [0x141dd957c]
xor eax, 0xb7d2d00d
add eax, 0x64e0c82
xor eax, 0x4d73f1b9
cmp eax, 0xf829201d
ja 0x1400c9fc0
cmp rbx, qword [rbp - 0x18]
jne 0x1400c9d00
jmp 0x1400ca00d
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
jmp 0x1400c9e30
mov rsi, qword [rbp - 0x68]
mov rax, qword [rsi]
movzx ebx, byte [rbp + 0x27]
mov rdi, qword [rbp - 0x60]
nop dword [rax]
mov ecx, dword [0x141dd9580]
or ecx, dword [0x141dd9584]
and ecx, 0x1117a6b4
imul ecx, ecx, 0xbbae0228
add ecx, 0x8cccf448
cmp ecx, 0xb7aef9af
jb 0x1400ca020
test rax, rax
je 0x1400ca066
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rdi + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd9588]
sub eax, dword [0x141dd958c]
imul eax, eax, 0x9d85de87
add eax, 0xfbbb00a2
imul rax, rax, 0x7c009f77
shr rax, 0x3d
cmp eax, 0x1430d48c
ja 0x1400ca080
mov byte [rsi + 0x38], bl
lea rsp, [rbp + 0x28]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2
ud2