Function at 0x1400c1cd0
Capabilities:
Encode data using xor
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x20], xmm6
mov qword [rbp - 8], rcx
mov eax, dword [0x141dd4930]
sub eax, dword [0x141dd4934]
or eax, 0xc14ed04e
shr eax, 1
imul rax, rax, 0x4d4d2949
shr rax, 0x3d
imul eax, eax, 0x2fba484
cmp eax, 0x486db2e9
jbe 0x1400c1d60
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x40
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, dword [0x141dd4938]
or eax, dword [0x141dd493c]
or eax, 0xfa64d4c2
imul rax, rax, 0x43fa14d5
shr rax, 0x3e
imul ecx, eax, 0x8172d650
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r11, rsp
mov eax, 0x40
call fcn.1400eeec0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x75c2bd2a
jb 0x1400c1d60
mov qword [rbp - 0x30], r11
mov qword [rbp - 0x60], r10
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x68], rdx
mov qword [rbp - 0x70], r8
mov qword [rbp + 0x10], rax
mov eax, dword [0x141dd4940]
xor eax, dword [0x141dd4944]
add eax, 0x2d8d626b
or eax, 0x472920e0
cmp eax, 0xd43e1af4
jb 0x1400c1e55
mov eax, 0x160
call fcn.1400eeec0
sub rsp, rax
mov rcx, rsp
mov eax, 0xe0
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
mov eax, 0x70
call fcn.1400eeec0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r8, rsp
xor eax, eax
test al, al
je 0x1400c1e8b
mov eax, 0x160
call fcn.1400eeec0
sub rsp, rax
mov eax, 0xe0
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x70
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
jmp 0x1400c1e0f
mov qword [rbp - 0x40], r8
mov qword [rbp], rdx
mov qword [rbp - 0x38], rcx
mov eax, dword [0x141dd4948]
imul eax, dword [0x141dd494c]
imul eax, eax, 0x3c22f000
cmp eax, 0xc56e942e
je 0x1400c1f5d
mov eax, dword [0x141dd4950]
add eax, dword [0x141dd4954]
and eax, 0xfdeeb142
mov ecx, 0xac870a8b
imul rcx, rax
shr rcx, 0x3f
imul esi, ecx, 0x7099eb3d
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r14, rsp
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
cmp esi, 0x7786a81e
jbe 0x1400c1fcb
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
jmp 0x1400c1eb5
mov qword [rbp + 0x18], r12
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x28], r13
test rax, rax
je 0x1400c2a02
mov qword [r14], 0x80000
mov qword [rbp + 8], rax
mov qword [r14 + 8], rax
mov qword [rbp - 0x18], r14
mov qword [r14 + 0x10], 0
mov eax, 0x80000
xor esi, esi
xor r14d, r14d
mov edi, 0x80000
mov r8, qword [rbp + 0x18]
mov qword [rbp - 0x78], r15
nop word cs:[rax + rax]
mov dword [r8], 0
sub rax, r14
cmp rdi, rax
ja 0x1400c2066
mov eax, dword [0x141dd4970]
imul eax, dword [0x141dd4974]
imul eax, eax, 0x1ae8ebd0
add eax, 0x2b54d898
cmp eax, 0x99095975
mov rbx, qword [rbp + 0x18]
mov r15, qword [rbp + 8]
mov r13, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
jbe 0x1400c2170
jmp 0x1400c2200
mov eax, dword [0x141dd4980]
or eax, dword [0x141dd4984]
cmp eax, 0xc19642b6
mov rbx, qword [rbp - 0x18]
je 0x1400c2144
mov r12d, dword [0x141dd4988]
sub r12d, dword [0x141dd498c]
or r12d, 0x8e28b46d
mov eax, 0xdf8c0451
imul r12, rax
shr r12, 0x3e
or r12d, 0xc8253125
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call fcn.1400fce40
add rsp, 0x30
cmp r12d, 0x2a1b234
jb 0x1400c2144
mov ecx, 0xb600ab79
nop dword [rax]
mov eax, dword [0x141dd4990]
imul eax, dword [0x141dd4994]
imul eax, eax, 0xa607aafe
add eax, 0x33af8453
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xbdfe160d
je 0x1400c20e0
mov rax, qword [rbp - 0x18]
mov rax, qword [rax + 8]
mov qword [rbp + 8], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd4998]
imul eax, dword [0x141dd499c]
and eax, 0x4635f946
imul eax, eax, 0x62f0c1a0
cmp eax, 0xda9cc933
je 0x1400c2120
jmp 0x1400c202f
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call fcn.1400fce40
add rsp, 0x30
jmp 0x1400c2081
mov eax, dword [0x141dd4978]
and eax, dword [0x141dd497c]
and eax, 0x128010d2
imul r14, rax, 0x2caf8295
shr r14, 0x39
sub rsp, 0x20
mov ecx, 5
mov rdx, r15
mov r8d, edi
mov r9, rbx
call r13
add rsp, 0x20
cmp r14d, 0xcefdd4cc
ja 0x1400c2200
mov r12d, eax
mov rbx, rdi
test eax, eax
mov rdi, qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov r13, qword [rbp - 0x30]
jns 0x1400c241b
mov eax, dword [0x141dd49c0]
sub eax, dword [0x141dd49c4]
add eax, 0x2e9699a
imul rax, rax, 0x2ffedb73
shr rax, 0x3c
or eax, 0xf1a14dd4
cmp eax, 0x3bbe6cb1
jae 0x1400c2220
jmp 0x1400c2265
sub rsp, 0x20
mov ecx, 5
mov rdx, r15
mov r8d, edi
mov r9, rbx
call r13
add rsp, 0x20
jmp 0x1400c2170
mov eax, dword [0x141dd49c8]
xor edx, edx
div dword [0x141dd49cc]
xor eax, 0xf5b0aeab
imul rax, rax, 0x35671fa3
shr rax, 0x3d
imul r14d, eax, 0x44c0dd4b
mov qword [r13], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call rdi
add rsp, 0x20
cmp r14d, 0x9d4847e9
jbe 0x1400c2280
mov qword [r13], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call rdi
add rsp, 0x20
jmp 0x1400c2220
mov r14, qword [r13]
and r12d, 0xefffffff
cmp r12d, 0xc0000004
jne 0x1400c25db
mov r8, qword [rbp + 0x18]
mov eax, dword [r8]
mov rdi, rbx
add rdi, rbx
lea ecx, [rax + 0x2800]
mov edx, dword [0x141dd4cc8]
add edx, dword [0x141dd4ccc]
mov r9d, 0xde9b330f
imul rdx, r9
shr rdx, 0x3e
imul edx, edx, 0xed31001f
xor edx, 0xf4857dc9
cmp edx, 0x1c0d4bc8
jb 0x1400c22ab
mov ecx, ecx
test eax, eax
cmovne rdi, rcx
test r14, r14
je 0x1400c23e0
nop word [rax + rax]
mov eax, dword [0x141dd4cd0]
or eax, dword [0x141dd4cd4]
and eax, 0xab6b952e
imul rcx, rax, 0x247848d3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul eax, eax, 0x5c270e55
cmp eax, 0x2d451ea6
ja 0x1400c22f0
mov eax, dword [0x141dd4cd8]
imul eax, dword [0x141dd4cdc]
mov r12, qword [r14]
xor eax, 0x40054fd6
and eax, 0x59254fdf
cmp eax, 0x1c8dc497
je 0x1400c2381
nop word cs:[rax + rax]
mov ebx, dword [0x141dd4ce0]
imul ebx, dword [0x141dd4ce4]
or ebx, 0x8304bc72
xor ebx, 0xf37905a9
sub rsp, 0x20
mov rcx, r14
call qword [r12 + 0x10]
add rsp, 0x20
cmp ebx, 0xaae17502
jbe 0x1400c23a0
sub rsp, 0x20
mov rcx, r14
call qword [r12 + 0x10]
add rsp, 0x20
jmp 0x1400c2350
mov r8, qword [rbp + 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4ce8]
xor eax, dword [0x141dd4cec]
imul rax, rax, 0x6ccb720f
shr rax, 0x3c
or eax, 0x17cce51e
cmp eax, 0x66d122d8
je 0x1400c23b0
nop word cs:[rax + rax]
test sil, sil
jne 0x1400c23e0
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
mov r14, qword [rcx + 0x10]
mov ecx, dword [0x141dd4cf0]
add ecx, dword [0x141dd4cf4]
and ecx, 0x4964b350
xor ecx, 0x468977fd
imul ecx, ecx, 0x290608f9
cmp ecx, 0xa8426e27
je 0x1400c23f0
jmp 0x1400c2020
mov rax, qword [rbp - 0x18]
mov qword [rax + 0x10], rbx
mov rax, qword [rbp - 0x20]
mov qword [rax], 0
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
test rax, rax
mov r15, qword [rbp - 0x78]
je 0x1400c29d7
mov ecx, dword [0x141dd49a8]
and ecx, dword [0x141dd49ac]
imul ecx, ecx, 0xbcd00c9a
cmp ecx, 0x39939b7c
mov r12, qword [rbp - 0x58]
jne 0x1400c2490
mov qword [r12], 0x1f4
mov qword [r12 + 8], rax
nop word cs:[rax + rax]
mov ecx, dword [0x141dd49b0]
xor ecx, dword [0x141dd49b4]
xor ecx, 0x51935095
imul ecx, ecx, 0x9704bf9a
add ecx, 0x723aa3cb
mov qword [r12], 0x1f4
mov qword [r12 + 8], rax
cmp ecx, 0x24c8e734
jb 0x1400c2490
mov r13, qword [rbp + 8]
mov qword [r12 + 0x10], 0
mov ecx, dword [0x141dd49b8]
and ecx, dword [0x141dd49bc]
imul ecx, ecx, 0x7ddf12bc
add ecx, 0xd956ff68
or ecx, 0x69b2394c
cmp ecx, 0xe349a8dc
jb 0x1400c24d0
xor esi, esi
xor edi, edi
xor ebx, ebx
jmp 0x1400c2520
lea rcx, [rbx + r13]
mov qword [rax + rdi*8], rcx
inc rdi
mov qword [r12 + 0x10], rdi
add rbx, r14
test r14, r14
je 0x1400c2759
nop word [rax + rax]
mov ecx, dword [0x141dd49d0]
xor ecx, dword [0x141dd49d4]
imul ecx, ecx, 0xe3bf22f5
add ecx, 0x323e66bb
or ecx, 0xaa0b5151
cmp ecx, 0x6a7eb37
je 0x1400c2520
mov r14d, dword [r13 + rbx]
cmp rdi, qword [r12]
jne 0x1400c24fe
mov eax, dword [0x141dd49d8]
imul eax, dword [0x141dd49dc]
imul eax, eax, 0x1410c593
add eax, 0x43f039de
imul rax, rax, 0x2dc0fe39
shr rax, 0x3d
cmp eax, 0x3646ac6f
je 0x1400c2590
sub rsp, 0x20
mov rcx, r12
call fcn.1400c4300
add rsp, 0x20
test sil, sil
je 0x1400c25a2
sub rsp, 0x20
mov rcx, r12
call fcn.1400c4300
add rsp, 0x20
jmp 0x1400c257b
mov rax, qword [r12 + 8]
nop word [rax + rax]
mov ecx, dword [0x141dd49e0]
sub ecx, dword [0x141dd49e4]
xor ecx, 0x4616370f
add ecx, 0x547ca493
and ecx, 0xba928c55
cmp ecx, 0xc2464685
ja 0x1400c25b0
jmp 0x1400c24fe
mov rsi, qword [rbp - 0x18]
nop
mov eax, dword [0x141dd4c90]
or eax, dword [0x141dd4c94]
imul eax, eax, 0x84122f3f
add eax, 0x967a5b96
and eax, 0x177a1354
cmp eax, 0x7cc0c11d
ja 0x1400c25e0
test r14, r14
je 0x1400c2640
mov rax, qword [r14]
sub rsp, 0x20
mov rcx, r14
call qword [rax + 0x10]
add rsp, 0x20
nop dword [rax]
mov eax, dword [str._e.xgzl]
sub eax, dword [0x141dd4c9c]
imul eax, eax, 0x55b995dd
cmp eax, 0x2a30856a
je 0x1400c2620
nop dword [rax]
mov eax, dword [0x141dd4ca0]
or eax, dword [0x141dd4ca4]
add eax, 0x991ea26f
shr eax, 2
imul rax, rax, 0x29a8b35b
shr rax, 0x37
add eax, 0xe038a2b2
cmp eax, 0xab86cc5b
jb 0x1400c2640
mov rax, qword [rsi]
nop
mov ecx, dword [0x141dd4ca8]
and ecx, dword [0x141dd4cac]
or ecx, 0x681800
and ecx, 0x2a793d32
cmp ecx, 0x77aadb40
je 0x1400c2670
test rax, rax
je 0x1400c2720
mov eax, dword [0x141dd4cb0]
xor edx, edx
div dword [0x141dd4cb4]
imul rax, rax, 0x4b6153ab
shr rax, 0x3b
add eax, 0x421ad0b5
or eax, 0x4927b185
cmp eax, 0x2051fec9
jae 0x1400c26ca
mov rax, qword [0x141dda6a0]
mov eax, 0xb165b22b
nop
mov ecx, dword [0x141dd4cb8]
add ecx, dword [0x141dd4cbc]
imul rcx, rax
shr rcx, 0x3f
imul edx, ecx, 0x7ff8509
add edx, 0xfc30f449
mov rcx, qword [0x141dda6a0]
cmp edx, 0x573cb38b
jb 0x1400c26d0
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd4cc0]
xor eax, dword [0x141dd4cc4]
or eax, 0x2447a283
add eax, 0xa3e450ad
and eax, 0x79e797ac
cmp eax, 0xd31f2454
ja 0x1400c2720
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c2750
jmp 0x1400c4280
mov r13, qword [rbp - 8]
lea rcx, [r13 + 0x40]
mov eax, dword [0x141dd49e8]
xor eax, dword [0x141dd49ec]
or eax, 0xebc261dc
add eax, 0xf5ed2d2b
imul rax, rax, 0x449c6e0f
shr rax, 0x3e
cmp eax, 0x97ee93e5
jne 0x1400c2790
mov rax, qword [rbp - 0x28]
mov qword [rax], rcx
mov rsi, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x28]
nop dword [rax + rax]
mov eax, dword [0x141dd49f0]
add eax, dword [0x141dd49f4]
and eax, 0x289f072d
xor eax, 0x9764cea5
add eax, 0x4885348e
mov qword [rdx], rcx
cmp eax, 0x540d3bac
ja 0x1400c27a0
mov qword [rbp - 0x50], rcx
cmp byte [rsi], 0
je 0x1400c281a
sub rsp, 0x20
mov rcx, r13
xor edx, edx
call fcn.1400c46a0
add rsp, 0x20
mov rax, qword [r13 + 0x10]
nop word cs:[rax + rax]
mov ecx, dword [str.OWH]
and ecx, dword [0x141dd49fc]
imul ecx, ecx, 0x5e2f279
shr ecx, 3
imul rcx, rcx, 0x1440114b
shr rcx, 0x38
cmp ecx, 0xf1207141
je 0x1400c27f0
jmp 0x1400c281c
xor eax, eax
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rax
mov rdi, qword [rbp - 0x60]
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
mov rcx, qword [rdi]
movabs rax, 0x19db1ded53e8000
cmp rcx, rax
jge 0x1400c2861
xor edx, edx
mov r10, qword [rbp - 0x48]
mov r11, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x20]
jmp 0x1400c28bd
movabs rax, 0xfe624e212ac18000
add rcx, rax
mov r10, qword [rbp - 0x48]
mov r11, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x20]
movabs r8, 0xd6bf94d5e57a42bd
nop word cs:[rax + rax]
mov eax, dword [0x141dd4a00]
or eax, dword [0x141dd4a04]
imul r9d, eax, 0x6c4ef558
add r9d, 0x41b16626
mov rax, rcx
mul r8
cmp r9d, 0x32d252f4
jb 0x1400c2890
shr rdx, 0x17
mov qword [r11], rdx
mov rax, qword [r12 + 0x10]
mov qword [r10 + 0x10], rax
movdqu xmm0, xmmword [r12]
movdqu xmmword [r10], xmm0
mov rax, qword [rbp + 0x10]
mov qword [rax], 0
mov qword [rax + 8], 8
mov qword [rax + 0x10], 0
mov qword [r10 + 0x18], rdi
mov rax, qword [rbp - 0x28]
mov qword [r10 + 0x20], rax
mov qword [r10 + 0x28], rsi
mov rax, qword [rbp - 0x10]
mov qword [r10 + 0x30], rax
mov qword [r10 + 0x38], r11
mov rbx, qword [r10]
mov rdi, qword [r10 + 0x10]
cmp rbx, rdi
jb 0x1400c2a70
mov r14, r10
add r14, 0x18
mov rsi, qword [r10 + 8]
mov eax, dword [str.H5_3zu]
xor edx, edx
div dword [0x141dd4a24]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4a28]
or eax, dword [0x141dd4a2c]
add eax, 0xc69d7b00
or eax, 0xd8642576
and eax, 0xfcf76f77
cmp eax, 0x62e55e60
jb 0x1400c2940
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x38]
test rax, rax
je 0x1400c29b0
add rax, 0x110
nop word [rax + rax]
mov ecx, dword [0x141dd4a48]
imul ecx, dword [str.iSYc]
and ecx, 0xdb618639
cmp ecx, 0x2d9d2fd3
je 0x1400c2990
jmp 0x1400c2b72
mov eax, dword [0x141dd4a30]
xor eax, dword [0x141dd4a34]
xor eax, 0x76157766
imul eax, eax, 0xbe4bc8c0
cmp eax, 0xc57308c2
jne 0x1400c2af0
jmp 0x1400c2b37
ud2
mov eax, dword [0x141dd4958]
sub eax, dword [0x141dd495c]
imul eax, eax, 0x318202b2
cmp eax, 0xff46ba76
jne 0x1400c2a20
ud2
mov eax, dword [0x141dd4960]
xor edx, edx
div dword [0x141dd4964]
imul rax, rax, 0x4fe29c05
shr rax, 0x3e
ud2
mov eax, dword [0x141dd4a08]
add eax, dword [0x141dd4a0c]
xor eax, 0x1000000
or eax, 0xcc8c0304
and eax, 0xcded033c
cmp eax, 0xa89248f3
jne 0x1400c2aa0
ud2
mov eax, dword [0x141dd4a10]
or eax, dword [0x141dd4a14]
add eax, 0xc9a306e2
or eax, 0xb4eed25c
add eax, 0xd17b0057
ud2
mov r12d, dword [0x141dd4a38]
xor r12d, dword [0x141dd4a3c]
add r12d, 0x4a292d78
imul rax, r12, 0x25043949
shr rax, 0x20
sub r12d, eax
shr r12d, 1
add r12d, eax
shr r12d, 0x1b
and r12d, 6
sub rsp, 0x20
call fcn.140078280
add rsp, 0x20
cmp r12d, 0x18791bb0
jbe 0x1400c2b46
sub rsp, 0x20
call fcn.140078280
add rsp, 0x20
jmp 0x1400c2af0
mov ecx, 0xb765303d
nop dword [rax + rax]
mov edx, dword [0x141dd4a40]
or edx, dword [0x141dd4a44]
imul rdx, rcx
shr rdx, 0x3f
or edx, 0x3892fbc4
cmp edx, 0x1e3f5f8f
je 0x1400c2b50
mov rax, qword [rax]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rdi, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 1
mov r14, qword [rbp - 0x70]
mov rcx, r14
mov rdx, rdi
xor r8d, r8d
call fcn.1400c6c60
add rsp, 0x40
test rbx, rbx
je 0x1400c2ca0
mov eax, dword [0x141dd4a50]
and eax, dword [0x141dd4a54]
add eax, 0x7046f69b
xor eax, 0x40081098
or eax, 0x9bf72303
cmp eax, 0x2f9b770e
jne 0x1400c2bf0
mov rax, qword [0x141dda6a0]
mov eax, dword [0x141dd4a58]
imul eax, dword [0x141dd4a5c]
or eax, 0xcdc565d0
and eax, 0xcfc567dc
mov rdi, qword [0x141dda6a0]
cmp eax, 0x2ad859bf
je 0x1400c2bf0
mov eax, dword [0x141dd4a60]
xor eax, dword [0x141dd4a64]
add eax, 0x97570b90
and eax, 0x2e094ab4
xor eax, 0xa1ff53b0
cmp eax, 0x599d3491
jb 0x1400c2c53
sub rsp, 0x20
xor ebx, ebx
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test bl, bl
je 0x1400c2c70
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c2c37
mov eax, dword [0x141dd4a68]
imul eax, dword [0x141dd4a6c]
imul eax, eax, 0x76910451
imul rax, rax, 0x1d5b72f
shr rax, 0x36
or eax, 0x9b78f220
cmp eax, 0x6fb8ec16
jb 0x1400c2c70
nop word [rax + rax]
mov eax, dword [0x141dd4a70]
and eax, dword [0x141dd4a74]
add eax, 0x12dd35ec
and eax, 0xd7c15ee9
imul rax, rax, 0x1d362f5
shr rax, 0x35
cmp eax, 0x30aa435
ja 0x1400c2ca0
mov rdi, qword [r14]
mov rax, qword [r14 + 0x10]
test rax, rax
sete dl
test rdi, rdi
sete cl
or cl, dl
mov edx, 0x8ed6cf85
nop word cs:[rax + rax]
mov r8d, dword [0x141dd4a78]
add r8d, dword [0x141dd4a7c]
imul r8, rdx
shr r8, 0x3f
or r8d, 0x415715dc
cmp r8d, 0xf997325d
je 0x1400c2cf0
test cl, cl
jne 0x1400c2d4c
dec rax
xor r8d, r8d
mov rcx, rdi
nop word cs:[rax + rax]
add r8, qword [rcx + 0x10]
sub rax, 1
jb 0x1400c2d43
mov rcx, qword [rcx + 0x18]
test rcx, rcx
jne 0x1400c2d30
test r8, r8
jne 0x1400c42b2
mov eax, 0x88bf9979
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4a80]
add ecx, dword [0x141dd4a84]
imul ecx, ecx, 0x84dc5532
add ecx, 0xdc3f7eb6
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xb8526e9
ja 0x1400c2d60
test rdi, rdi
je 0x1400c3381
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rdi + 0x18]
test rsi, rsi
je 0x1400c2e24
nop dword [rax]
mov eax, dword [0x141dd4a90]
and eax, dword [0x141dd4a94]
imul eax, eax, 0x1bd8f6e0
cmp eax, 0x1c359eb0
ja 0x1400c2db0
mov eax, dword [0x141dd4a98]
or eax, dword [0x141dd4a9c]
imul eax, eax, 0x53883b12
cmp eax, 0x2c27c048
mov eax, 0
je 0x1400c2dfc
nop word [rax + rax]
mov qword [rsi + 0x20], 0
test al, al
je 0x1400c2e10
mov qword [rsi + 0x20], 0
jmp 0x1400c2df0
mov eax, dword [0x141dd4aa0]
imul eax, dword [0x141dd4aa4]
cmp eax, 0x4e4df997
je 0x1400c2e10
mov rax, qword [rdi]
mov qword [rbp + 0x18], rax
mov eax, dword [0x141dd4aa8]
xor eax, dword [0x141dd4aac]
add eax, 0xe0a42bb2
mov ecx, 0xda068867
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x365b1018
ja 0x1400c2e94
mov r12d, dword [0x141dd4ab0]
sub r12d, dword [0x141dd4ab4]
and r12d, 0xed7445f6
xor r12d, 0x7c168e7b
mov rbx, qword [rdi + 8]
mov r13, qword [rdi + 0x10]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r14
add rsp, 0x20
cmp r12d, 0x659ff64f
jae 0x1400c2eb0
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r14
add rsp, 0x20
jmp 0x1400c2e50
mov eax, dword [0x141dd4ab8]
xor eax, dword [0x141dd4abc]
imul eax, eax, 0x53504ab7
add eax, 0xfde9641f
and eax, 0xdcc3d8e2
cmp eax, 0xb18b647c
jb 0x1400c2eb0
movabs rax, 0x8000000000000000
mov r14, qword [rbp + 0x18]
cmp r14, rax
je 0x1400c3060
mov eax, dword [0x141dd4b28]
or eax, dword [0x141dd4b2c]
and eax, 0x214fc159
xor eax, 0xc12440e3
add eax, 0xfeed94ff
cmp eax, 0xa12ce9d5
jb 0x1400c2eea
mov rax, qword [rbp + 0x10]
mov rdi, qword [rax + 0x10]
mov eax, dword [0x141dd4b30]
xor eax, dword [0x141dd4b34]
add eax, 0xf10d7025
or eax, 0xdec92f11
add eax, 0x541702f3
cmp eax, 0x4d472791
ja 0x1400c2f14
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
sub rax, rdi
cmp rax, r13
jb 0x1400c2ffa
imul rcx, rdi, 0x158
mov r12, qword [rbp + 0x10]
add rcx, qword [r12 + 8]
imul r8, r13, 0x158
sub rsp, 0x20
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
add rdi, r13
mov qword [r12 + 0x10], rdi
test r14, r14
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
je 0x1400c2fc4
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r14
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd4b40]
imul eax, dword [0x141dd4b44]
imul rax, rax, 0x7855c95b
shr rax, 0x3e
add eax, 0xea7fb57d
cmp eax, 0x512d1f02
jb 0x1400c2fa0
mov r13, qword [rbp - 8]
nop dword [rax + rax]
mov eax, dword [0x141dd4b48]
or eax, dword [0x141dd4b4c]
imul eax, eax, 0x6e1c95b9
cmp eax, 0xa40e4096
je 0x1400c2fd0
mov rdi, rsi
test rsi, rsi
jne 0x1400c2da0
jmp 0x1400c3381
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov r12, qword [rbp + 0x10]
mov rcx, r12
mov rdx, rdi
mov r8, r13
call fcn.1400fce40
add rsp, 0x30
mov rdi, qword [r12 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dd4b38]
sub eax, dword [0x141dd4b3c]
and eax, 0xc0dc9d57
add eax, 0xb76c9e24
or eax, 0x2a344526
cmp eax, 0x5cd4298d
jb 0x1400c3030
jmp 0x1400c2f49
mov eax, dword [0x141dd4ac0]
xor edx, edx
div dword [0x141dd4ac4]
add eax, 0xa00c5cdd
xor eax, 0xf25d7ac4
imul eax, eax, 0x16ced2a8
cmp eax, 0x7c1a5c73
ja 0x1400c3060
test rsi, rsi
mov r13, qword [rbp - 8]
je 0x1400c3381
xor r14d, r14d
nop word cs:[rax + rax]
mov r13, qword [rsi + 0x18]
test r13, r13
je 0x1400c311d
mov eax, dword [0x141dd4ac8]
xor eax, dword [0x141dd4acc]
xor eax, 0xa0226288
and eax, 0xa862e38a
imul eax, eax, 0x8f429a6
cmp eax, 0xf080bd
jb 0x1400c30a9
mov eax, dword [0x141dd4ad0]
sub eax, dword [0x141dd4ad4]
xor eax, 0x448a7734
add eax, 0xbbf51757
mov ecx, 0xa37e5829
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x41fb50a5
jbe 0x1400c3100
mov qword [r13 + 0x20], 0
nop
mov eax, dword [0x141dd4ad8]
xor edx, edx
div dword [0x141dd4adc]
mov qword [r13 + 0x20], 0
cmp eax, 0x6095b77
je 0x1400c3100
mov rdi, qword [rsi + 8]
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400c3130
mov r12, qword [rsi + 0x10]
test r12, r12
je 0x1400c316c
mov rbx, rdi
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c91b0
add rsp, 0x20
add rbx, 0x158
dec r12
jne 0x1400c3150
mov rcx, qword [rsi]
mov eax, dword [0x141dd4ae0]
xor edx, edx
div dword [0x141dd4ae4]
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4ae8]
add eax, dword [0x141dd4aec]
or eax, 0xe71ced13
and eax, 0xf73eff33
cmp eax, 0x6448e07f
jb 0x1400c3190
test rcx, rcx
je 0x1400c32b5
mov eax, dword [0x141dd4af0]
or eax, dword [0x141dd4af4]
add eax, 0x1592de87
or eax, 0xb5ab0096
and eax, 0xb7afc597
cmp eax, 0xba73cea9
ja 0x1400c3206
nop dword [rax + rax]
mov eax, dword [0x141dd4af8]
xor edx, edx
div dword [0x141dd4afc]
xor eax, 0xac0c40
and eax, 0x62fc9c48
mov rbx, qword [0x141dda6a0]
cmp eax, 0x5a00d4e8
jne 0x1400c3210
mov rax, qword [0x141dda6a0]
jmp 0x1400c31e0
mov qword [rbp + 0x18], r13
mov eax, dword [0x141dd4b00]
imul eax, dword [0x141dd4b04]
add eax, 0x24d619d7
mov ecx, 0xd066f193
imul rax, rcx
shr rax, 0x3f
or eax, 0xbef8588a
cmp eax, 0x730e2bb3
jae 0x1400c3252
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
mov r13, r12
nop word cs:[rax + rax]
mov eax, dword [0x141dd4b08]
sub eax, dword [0x141dd4b0c]
or eax, 0xf86d5b1b
imul r12, rax, 0x39e2b469
shr r12, 0x3d
or r12d, 0xde198034
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r13
add rsp, 0x20
cmp r12d, 0xd4ae6636
je 0x1400c3260
mov r12, r13
mov r13, qword [rbp + 0x18]
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400c32b0
test r14b, r14b
jne 0x1400c32e4
nop word [rax + rax]
mov eax, dword [0x141dd4b10]
or eax, dword [0x141dd4b14]
xor eax, 0x8299c9ee
add eax, 0xd5d13fa6
mov rdi, qword [0x141dda6a0]
cmp eax, 0xbbef39d4
jbe 0x1400c32f0
mov rax, qword [0x141dda6a0]
jmp 0x1400c32c0
mov eax, dword [0x141dd4b18]
xor edx, edx
div dword [0x141dd4b1c]
add eax, 0xd95ebe40
or eax, 0x532d82cd
imul eax, eax, 0xedef3ab5
cmp eax, 0xbcd4148b
jbe 0x1400c3330
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
nop dword [rax + rax]
mov ebx, dword [0x141dd4b20]
and ebx, dword [0x141dd4b24]
or ebx, 0x7bcfe733
imul rax, rbx, 0x76b79c1
shr rax, 0x20
sub ebx, eax
shr ebx, 1
add ebx, eax
shr ebx, 0x1f
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
cmp ebx, 0xbc00f833
ja 0x1400c3330
mov rsi, r13
test r13, r13
mov r13, qword [rbp - 8]
jne 0x1400c30a0
mov r14, qword [rbp]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4b50]
and eax, dword [0x141dd4b54]
imul eax, eax, 0x70e09cc3
or eax, 0xd7cdecef
cmp eax, 0xd5cc457d
jb 0x1400c3390
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
mov qword [rbp - 0x28], rcx
mov rdi, qword [rax + 8]
mov rax, qword [rax + 0x10]
imul rcx, rax, 0x158
add rcx, rdi
mov qword [rbp + 0x10], rcx
nop
mov ecx, dword [0x141dd4b58]
add ecx, dword [0x141dd4b5c]
or ecx, 0x8d43406
and ecx, 0x8d63486
cmp ecx, 0xbbfa639e
ja 0x1400c33d0
mov r12, rdi
test rax, rax
mov qword [rbp - 0x20], rdi
je 0x1400c3c72
mov eax, dword [0x141dd4b60]
or eax, dword [0x141dd4b64]
add eax, 0x66b9f14
imul rcx, rax, 0x3611678d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
and eax, 1
cmp eax, 0xfbade3c2
je 0x1400c3400
nop
mov eax, dword [0x141dd4b68]
or eax, dword [0x141dd4b6c]
or eax, 0xde1c10b6
imul eax, eax, 0x5ad70fc
and eax, 0x89743684
cmp eax, 0xa448abe6
ja 0x1400c3430
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c3460
mov ecx, 0x87d13119
pcmpeqd xmm6, xmm6
nop dword [rax]
mov eax, dword [0x141dd4b70]
xor edx, edx
div dword [0x141dd4b74]
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xe4944ca4
je 0x1400c3470
lea r12, [rdi + 0x158]
mov rax, qword [rdi]
cmp rax, 2
je 0x1400c3c72
mov qword [rbp + 0x18], rax
mov rsi, qword [rdi + 0xe0]
mov eax, dword [0x141dd4bb0]
xor edx, edx
div dword [0x141dd4bb4]
or eax, 0xaa2008a4
add eax, 0x78172168
imul rax, rax, 0x254a2809
shr rax, 0x3c
cmp eax, 0xc2feb115
jbe 0x1400c3550
lea rdx, [rdi + 8]
sub rsp, 0x20
mov r8d, 0xd8
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movups xmm0, xmmword [rdi + 0xe8]
movups xmm1, xmmword [rdi + 0xf8]
movups xmm2, xmmword [rdi + 0x108]
movups xmm3, xmmword [rdi + 0x118]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15 + 0x20], xmm2
movups xmmword [r15 + 0x30], xmm3
movups xmm0, xmmword [rdi + 0x128]
movups xmmword [r15 + 0x40], xmm0
movups xmm0, xmmword [rdi + 0x138]
movups xmmword [r15 + 0x50], xmm0
movdqu xmm0, xmmword [rdi + 0x148]
movdqu xmmword [r15 + 0x60], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4bb8]
sub eax, dword [0x141dd4bbc]
or eax, 0xd7fef4c9
add eax, 0x9d0f311d
imul rbx, rax, 0x205b83cb
shr rbx, 0x3c
lea rdx, [rdi + 8]
sub rsp, 0x20
mov r8d, 0xd8
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movups xmm0, xmmword [rdi + 0xe8]
movdqu xmm1, xmmword [rdi + 0xf8]
movdqu xmm2, xmmword [rdi + 0x108]
movups xmm3, xmmword [rdi + 0x118]
movups xmmword [r15], xmm0
movdqu xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15 + 0x20], xmm2
movups xmmword [r15 + 0x30], xmm3
movups xmm0, xmmword [rdi + 0x128]
movups xmmword [r15 + 0x40], xmm0
movups xmm0, xmmword [rdi + 0x138]
movups xmmword [r15 + 0x50], xmm0
movdqu xmm0, xmmword [rdi + 0x148]
movdqu xmmword [r15 + 0x60], xmm0
cmp ebx, 0xf9766745
ja 0x1400c3550
mov rbx, qword [r13 + 0x60]
mov r14, qword [r13 + 0x68]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, rsi
call fcn.1400c9a90
add rsp, 0x20
mov rdi, rax
cmp qword [r13 + 0x50], 0
je 0x1400c3a87
mov rax, qword [rbp - 0x50]
mov rbx, qword [rax]
mov eax, dword [0x141dd4bc0]
add eax, dword [0x141dd4bc4]
mov ecx, 0x8c1d79ed
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x823fd124
imul rax, rax, 0x564938d9
shr rax, 0x3e
cmp eax, 0xa59c8ea7
je 0x1400c3623
mov r11, qword [r13 + 0x48]
mov r9, rdi
shr r9, 0x39
movd xmm0, r9d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x30], r12
and rdi, r11
movdqu xmm1, xmmword [rbx + rdi]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb edx, xmm2
test edx, edx
je 0x1400c3710
nop word cs:[rax + rax]
tzcnt r8d, edx
add r8, rdi
and r8, r11
neg r8
imul r8, r8, 0x160
cmp qword [rbx + r8 - 0x160], rsi
je 0x1400c3a50
nop word cs:[rax + rax]
mov r8d, dword [0x141dd4bd0]
and r8d, dword [0x141dd4bd4]
and r8d, 0x2440b378
add r8d, 0xdb723c0c
or r8d, 0xb0c9e30f
cmp r8d, 0x9b43b0b5
jb 0x1400c36d0
lea r8d, [rdx - 1]
and r8w, dx
mov edx, r8d
jne 0x1400c36a0
nop dword [rax]
mov edx, dword [0x141dd4bc8]
imul edx, dword [0x141dd4bcc]
shr edx, 5
imul rdx, rdx, 0x4db9c07
shr rdx, 0x32
imul edx, edx, 0xa17e4f47
cmp edx, 0x7d4564c9
je 0x1400c3710
cmp rax, 1
mov eax, 1
je 0x1400c37bf
mov eax, dword [0x141dd4bd8]
xor edx, edx
div dword [0x141dd4bdc]
mov eax, dword [0x141dd4be0]
xor eax, dword [0x141dd4be4]
imul eax, eax, 0xae974466
imul rdx, rax, 0xec26831
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
imul eax, eax, 0xafdcaba9
cmp eax, 0xc17290d7
ja 0x1400c3752
mov eax, dword [0x141dd4be8]
or eax, dword [0x141dd4bec]
imul eax, eax, 0x554bf92e
and eax, 0xee882c94
xor eax, 0x6327a0c0
cmp eax, 0x5bdc466e
ja 0x1400c3785
pmovmskb edx, xmm1
xor eax, eax
test dx, dx
setne al
tzcnt r14d, edx
add r14, rdi
and r14, r11
pcmpeqb xmm1, xmm6
pmovmskb edx, xmm1
test edx, edx
jne 0x1400c37f0
add rdi, rcx
add rdi, 0x10
add rcx, 0x10
mov dl, 1
nop dword [rax + rax]
test dl, dl
je 0x1400c37e0
jmp 0x1400c367a
mov eax, dword [0x141dd4bf0]
add eax, dword [0x141dd4bf4]
imul eax, eax, 0x416491f
imul rax, rax, 0x76bd9053
shr rax, 0x3d
add eax, 0x5344a5af
cmp eax, 0xa12ebd47
ja 0x1400c37f0
movzx edx, byte [rbx + r14]
test dl, dl
js 0x1400c3834
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
tzcnt r14d, eax
movzx edx, byte [rbx + r14]
mov eax, dword [0x141dd4bf8]
sub eax, dword [0x141dd4bfc]
imul eax, eax, 0x2961b224
add eax, 0x7fc2b26a
cmp eax, 0x1fcde5a8
mov qword [rbp - 0x10], rsi
mov byte [rbp + 8], dl
jae 0x1400c3930
mov eax, edx
and al, 1
movzx eax, al
sub qword [r13 + 0x50], rax
mov rax, r14
neg rax
lea rcx, [r14 - 0x10]
and rcx, r11
mov byte [rbx + r14], r9b
mov byte [rcx + rbx + 0x10], r9b
inc qword [r13 + 0x58]
imul rdi, rax, 0x160
mov qword [rbx + rdi - 0x160], rsi
mov rax, qword [rbp + 0x18]
mov qword [rbx + rdi - 0x158], rax
lea rcx, [rbx + rdi]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp]
mov rsi, r9
mov r12, r15
mov r15, r11
call sub.VCRUNTIME140.dll_memcpy
movzx edx, byte [rbp + 8]
mov r11, r15
mov r15, r12
mov r9, rsi
mov rsi, qword [rbp - 0x10]
add rsp, 0x20
mov qword [rbx + rdi - 0x78], rsi
movups xmm0, xmmword [r12]
movdqu xmm1, xmmword [r12 + 0x10]
movdqu xmm2, xmmword [r12 + 0x20]
movups xmm3, xmmword [r12 + 0x30]
movups xmmword [rbx + rdi - 0x70], xmm0
movdqu xmmword [rbx + rdi - 0x60], xmm1
movdqu xmmword [rbx + rdi - 0x50], xmm2
movups xmmword [rbx + rdi - 0x40], xmm3
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rbx + rdi - 0x30], xmm0
movups xmm0, xmmword [r12 + 0x50]
movups xmmword [rbx + rdi - 0x20], xmm0
movdqu xmm0, xmmword [r12 + 0x60]
movdqu xmmword [rbx + rdi - 0x10], xmm0
mov eax, dword [0x141dd4c00]
imul eax, dword [0x141dd4c04]
mov ecx, 0xf329d29d
imul rax, rcx
mov ecx, edx
and cl, 1
movzx ecx, cl
sub qword [r13 + 0x50], rcx
shr rax, 0x3f
lea rcx, [r14 - 0x10]
and rcx, r11
mov byte [rbx + r14], r9b
mov byte [rcx + rbx + 0x10], r9b
inc qword [r13 + 0x58]
imul edi, eax, 0x4e8a57b3
and edi, 0x41a27f48
mov rax, r14
neg rax
imul r13, rax, 0x160
mov qword [rbx + r13 - 0x160], rsi
mov rax, qword [rbp + 0x18]
mov qword [rbx + r13 - 0x158], rax
lea rcx, [rbx + r13]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp]
mov rsi, r9
mov r12, r15
mov r15, r11
call sub.VCRUNTIME140.dll_memcpy
movzx edx, byte [rbp + 8]
mov r11, r15
mov r15, r12
mov r9, rsi
mov rsi, qword [rbp - 0x10]
add rsp, 0x20
mov qword [rbx + r13 - 0x78], rsi
movups xmm0, xmmword [r12]
movdqu xmm1, xmmword [r12 + 0x10]
movdqu xmm2, xmmword [r12 + 0x20]
movups xmm3, xmmword [r12 + 0x30]
movups xmmword [rbx + r13 - 0x70], xmm0
movdqu xmmword [rbx + r13 - 0x60], xmm1
movdqu xmmword [rbx + r13 - 0x50], xmm2
movups xmmword [rbx + r13 - 0x40], xmm3
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rbx + r13 - 0x30], xmm0
movups xmm0, xmmword [r12 + 0x50]
movups xmmword [rbx + r13 - 0x20], xmm0
movdqu xmm0, xmmword [r12 + 0x60]
movdqu xmmword [rbx + r13 - 0x10], xmm0
mov r13, qword [rbp - 8]
cmp edi, 0x2c659a86
ja 0x1400c3930
jmp 0x1400c3c30
add rbx, r8
mov eax, dword [0x141dd4c08]
sub eax, dword [0x141dd4c0c]
xor eax, 0x53d75cac
imul eax, eax, 0xf05f44d1
add eax, 0x141900b7
cmp eax, 0xdf1563f4
mov rdi, qword [rbp - 0x38]
mov r14, qword [rbp]
mov r13, qword [rbp + 0x18]
jbe 0x1400c3ab0
jmp 0x1400c3b43
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
mov rdx, rbx
mov r8, r14
call fcn.1400fd0b0
add rsp, 0x20
jmp 0x1400c361c
lea rdx, [rbx - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx - 0x158], r13
lea rcx, [rbx - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx - 0x78], rsi
movups xmm0, xmmword [r15 + 0x60]
movups xmmword [rbx - 0x10], xmm0
movups xmm0, xmmword [r15 + 0x50]
movups xmmword [rbx - 0x20], xmm0
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rbx - 0x30], xmm0
movdqu xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqu xmm2, xmmword [r15 + 0x20]
movups xmm3, xmmword [r15 + 0x30]
movups xmmword [rbx - 0x40], xmm3
movdqu xmmword [rbx - 0x50], xmm2
movdqu xmmword [rbx - 0x60], xmm1
movdqu xmmword [rbx - 0x70], xmm0
xor eax, eax
test al, al
je 0x1400c3be0
lea rdx, [rbx - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx - 0x158], r13
lea rcx, [rbx - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx - 0x78], rsi
movups xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqu xmm2, xmmword [r15 + 0x20]
movups xmm3, xmmword [r15 + 0x30]
movups xmmword [rbx - 0x70], xmm0
movdqu xmmword [rbx - 0x60], xmm1
movdqu xmmword [rbx - 0x50], xmm2
movups xmmword [rbx - 0x40], xmm3
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rbx - 0x30], xmm0
movups xmm0, xmmword [r15 + 0x50]
movups xmmword [rbx - 0x20], xmm0
movdqu xmm0, xmmword [r15 + 0x60]
movdqu xmmword [rbx - 0x10], xmm0
jmp 0x1400c3ab0
cmp qword [rdi], 2
mov esi, 0x98cba191
mov r13, qword [rbp - 8]
je 0x1400c3c30
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
call fcn.1400c91b0
add rsp, 0x20
mov eax, dword [0x141dd4c10]
and eax, dword [0x141dd4c14]
imul rax, rsi
shr rax, 0x3f
xor eax, 0xd78fd451
add eax, 0xa23c40c6
cmp eax, 0x29adec70
jb 0x1400c3c00
nop word cs:[rax + rax]
mov eax, dword [0x141dd4c18]
imul eax, dword [0x141dd4c1c]
or eax, 0x95cdc5c
add eax, 0xdc2c53af
and eax, 0x5f2b32ac
cmp eax, 0x11502835
jb 0x1400c3c30
mov rax, qword [rbp - 0x30]
mov rdi, rax
cmp rax, qword [rbp + 0x10]
mov r14, qword [rbp]
mov ecx, 0x87d13119
jne 0x1400c3470
jmp 0x1400c3d50
mov rcx, qword [rbp + 0x10]
sub rcx, r12
movabs r8, 0xbe82fa0be82fa0bf
nop word cs:[rax + rax]
mov eax, dword [0x141dd4b78]
sub eax, dword [0x141dd4b7c]
add eax, 0x2cbe6451
shr eax, 4
imul rax, rax, 0x7073031
shr rax, 0x31
imul r9d, eax, 0xb1f08b5
mov rax, rcx
mul r8
cmp r9d, 0x544e0c9f
je 0x1400c3c90
cmp qword [rbp + 0x10], r12
je 0x1400c3d50
mov rsi, rdx
shr rsi, 8
xor edi, edi
nop dword [rax + rax]
mov eax, dword [0x141dd4b80]
add eax, dword [0x141dd4b84]
imul eax, eax, 0x5ab7db87
cmp eax, 0x4d4a6be5
jne 0x1400c3d10
imul rcx, rdi, 0x158
add rcx, r12
sub rsp, 0x20
call fcn.1400c91b0
add rsp, 0x20
mov ebx, dword [0x141dd4b88]
add ebx, dword [0x141dd4b8c]
or ebx, 0xfe7705ff
and ebx, 0xfe77c5ff
imul rcx, rdi, 0x158
add rcx, r12
sub rsp, 0x20
call fcn.1400c91b0
add rsp, 0x20
cmp ebx, 0x1069e667
jb 0x1400c3d10
inc rdi
cmp rdi, rsi
jne 0x1400c3ce0
nop
mov eax, dword [0x141dd4b90]
xor edx, edx
div dword [0x141dd4b94]
or eax, 0x6eb58dfb
add eax, 0x4b588634
cmp eax, 0xe6097b83
ja 0x1400c3d50
cmp qword [rbp - 0x28], 0
je 0x1400c3e20
mov eax, dword [0x141dd4b98]
and eax, dword [0x141dd4b9c]
xor eax, 0x64c53ba7
add eax, 0x4f0e06c6
or eax, 0x6b0c8199
cmp eax, 0xed8ec92d
jne 0x1400c3db0
mov rax, qword [0x141dda6a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4ba0]
sub eax, dword [0x141dd4ba4]
and eax, 0x229723bf
imul eax, eax, 0x3121ec5a
add eax, 0x40d8e52e
mov rcx, qword [0x141dda6a0]
cmp eax, 0x921a04f8
jb 0x1400c3db0
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov eax, dword [0x141dd4ba8]
or eax, dword [0x141dd4bac]
add eax, 0x34787fa3
and eax, 0x1988f14b
add eax, 0xb6d7454
cmp eax, 0x6d147679
jae 0x1400c3df0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4c40]
sub eax, dword [0x141dd4c44]
imul eax, eax, 0x797f3ebc
add eax, 0x63f2c746
cmp eax, 0x29eca775
jb 0x1400c3e20
mov rax, qword [r13 + 0x58]
mov qword [rbp + 0x18], rax
test rax, rax
je 0x1400c418b
nop
mov eax, dword [0x141dd4c48]
sub eax, dword [0x141dd4c4c]
or eax, 0xc6c22e91
imul eax, eax, 0xf7bbc2c1
imul rcx, rax, 0x5283b933
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
cmp eax, 0xf3ed04b2
je 0x1400c3e50
mov r8, qword [r13 + 0x40]
lea r9, [r8 + 0x10]
movdqa xmm0, xmmword [r8]
pmovmskb r12d, xmm0
not r12d
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400c3ea0
mov rax, qword [r13 + 0x50]
mov qword [rbp + 0x10], rax
mov rax, qword [r13 + 0x48]
mov qword [rbp - 0x38], rax
xor r10d, r10d
pcmpeqd xmm6, xmm6
mov rbx, r8
mov r11, qword [rbp + 0x18]
mov qword [rbp], r8
jmp 0x1400c3ee4
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
dec r11
je 0x1400c418b
mov eax, dword [0x141dd4c50]
xor edx, edx
div dword [0x141dd4c54]
nop word cs:[rax + rax]
test r10b, r10b
jne 0x1400c3f00
test r12w, r12w
jne 0x1400c3f31
nop dword [rax + rax]
movdqa xmm0, xmmword [r9]
pmovmskb r12d, xmm0
add rbx, 0xffffffffffffea00
add r9, 0x10
cmp r12d, 0xffff
je 0x1400c3f10
not r12d
mov eax, dword [0x141dd4c58]
add eax, dword [0x141dd4c5c]
and eax, 0x33501aa
add eax, 0x694fd7d9
or eax, 0xcec86599
cmp eax, 0x4b8a1c9e
jae 0x1400c3f70
tzcnt eax, r12d
neg rax
imul rax, rax, 0x160
mov byte [rbx + rax - 4], 0
nop word [rax + rax]
mov edx, dword [0x141dd4c60]
or edx, dword [0x141dd4c64]
tzcnt eax, r12d
neg rax
imul rax, rax, 0x160
movzx ecx, byte [rbx + rax - 4]
mov byte [rbx + rax - 4], 0
cmp edx, 0x35d18757
je 0x1400c3f70
test cl, cl
jne 0x1400c3ed0
lea rcx, [rbx + rax]
lea rdi, [rbx + rax]
add rdi, 0xfffffffffffffea8
mov eax, dword [0x141dd4c68]
xor edx, edx
div dword [0x141dd4c6c]
imul eax, eax, 0x8a0e3e2a
or eax, 0x48955770
and eax, 0x5dbdd7fa
cmp eax, 0x11e968b9
jb 0x1400c3fb4
nop dword [rax]
mov eax, dword [0x141dd4c70]
or eax, dword [0x141dd4c74]
xor eax, 0xa27ab9b9
add eax, 0xc35974cc
cmp eax, 0x2ecbe5f9
ja 0x1400c3fe0
mov r15, r8
sub r15, rcx
sar r15, 5
movabs rax, 0x2e8ba2e8ba2e8ba3
imul r15, rax
lea r14, [r15 - 0x10]
and r14, qword [rbp - 0x38]
movdqu xmm0, xmmword [r8 + r14]
pcmpeqb xmm0, xmm6
pmovmskb eax, xmm0
mov ecx, dword [0x141dd4c78]
and ecx, dword [0x141dd4c7c]
imul rdx, rcx, 0x2fb58139
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
imul ecx, ecx, 0x93094b78
and ecx, 0x8461ec80
cmp ecx, 0x98bbeef1
jne 0x1400c4062
test ax, ax
movdqu xmm0, xmmword [r8 + r15]
jmp 0x1400c409f
bsr cx, ax
xor ecx, 0xf
mov edx, dword [0x141dd4c80]
sub edx, dword [0x141dd4c84]
imul edx, edx, 0x7274a1d9
shr edx, 2
imul rdx, rdx, 0xa34d709
shr rdx, 0x39
cmp edx, 0x1e396672
jne 0x1400c40b0
test ax, ax
jne 0x1400c4070
mov cx, 0x10
jmp 0x1400c4077
pcmpeqb xmm0, xmm6
pmovmskb eax, xmm0
or eax, 0x10000
tzcnt eax, eax
add ecx, eax
mov sil, 0x80
cmp cx, 0xf
mov qword [rbp + 8], r9
mov qword [rbp - 0x30], r11
ja 0x1400c40e6
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov qword [r13 + 0x50], rax
mov sil, 0xff
test r10b, r10b
je 0x1400c4113
mov byte [r8 + r15], sil
mov byte [r14 + r8 + 0x10], sil
mov rax, qword [rbp + 0x18]
dec rax
mov qword [r13 + 0x58], rax
sub rsp, 0x20
mov rcx, rdi
call fcn.1400c91b0
mov r8, qword [rbp]
add rsp, 0x20
mov qword [rbp - 0x10], rdi
nop word [rax + rax]
mov eax, dword [0x141dd4c88]
or eax, dword [0x141dd4c8c]
add eax, 0xe5af6244
imul r13, rax, 0x48deb2e3
shr r13, 0x3b
mov byte [r8 + r15], sil
mov byte [r14 + r8 + 0x10], sil
mov rax, qword [rbp + 0x18]
lea rdi, [rax - 1]
mov rax, qword [rbp - 8]
mov qword [rax + 0x58], rdi
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
call fcn.1400c91b0
mov r8, qword [rbp]
add rsp, 0x20
cmp r13d, 0xcdc6c932
ja 0x1400c4120
mov qword [rbp + 0x18], rdi
mov r13, qword [rbp - 8]
mov r9, qword [rbp + 8]
xor r10d, r10d
mov r11, qword [rbp - 0x30]
jmp 0x1400c3ed0
mov rdx, qword [rbp - 0x18]
nop
mov eax, dword [0x141dd4c20]
or eax, dword [0x141dd4c24]
or eax, 0xbf21c670
imul eax, eax, 0xdbc3ad3
cmp eax, 0xef145ebd
je 0x1400c4190
mov rax, qword [rdx]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400c41c0
test rax, rax
je 0x1400c4280
xor eax, eax
nop
test al, al
jne 0x1400c41d0
mov rsi, qword [rdx + 8]
mov eax, dword [0x141dd4c28]
imul eax, dword [0x141dd4c2c]
shr eax, 1
mov ecx, 0x97362bc3
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x56620329
jne 0x1400c4216
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov ebx, dword [0x141dd4c30]
add ebx, dword [0x141dd4c34]
xor ebx, 0x4290306
or ebx, 0xbbc2dce8
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rdi
add rsp, 0x20
cmp ebx, 0xee74bf11
je 0x1400c4220
nop word cs:[rax + rax]
mov eax, dword [0x141dd4c38]
and eax, dword [0x141dd4c3c]
and eax, 0x42169980
cmp eax, 0xb29d7cf5
je 0x1400c4260
nop dword [rax + rax]
mov eax, dword [0x141dd4cf8]
add eax, dword [0x141dd4cfc]
or eax, 0xbbdb3d7e
add eax, 0xfe96e516
cmp eax, 0x2d43ec20
jb 0x1400c4280
movaps xmm6, xmmword [rbp + 0x20]
lea rsp, [rbp + 0x38]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, qword [rbp + 0x10]
xor edx, edx
call fcn.1400fce40
add rsp, 0x30
nop word cs:[rax + rax]
mov eax, dword [0x141dd4a88]
imul eax, dword [0x141dd4a8c]
and eax, 0x410308
cmp eax, 0xae661449
jae 0x1400c42e0
jmp 0x1400c2d4c