Function at 0x1400c50a0
Capabilities:
Encode data using base64
Encode data using xor
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1c8
mov ebx, edx
mov r8, qword [rcx + 0x10]
nop dword [rax]
mov eax, dword [0x141dd5a48]
xor edx, edx
div dword [0x141dd5a4c]
cmp eax, 0xefa261d9
je 0x1400c50c0
test r8, r8
jne 0x1400c7380
mov qword [rsp + 0x130], rcx
mov eax, dword [0x141dd5a50]
add eax, dword [0x141dd5a54]
or eax, 0xb7af6b57
and eax, 0xb7ff6b77
cmp eax, 0xb9621585
je 0x1400c516d
mov eax, dword [0x141dd5a58]
imul eax, dword [0x141dd5a5c]
and eax, 0xd8ac8334
imul esi, eax, 0x61e0e86e
add esi, 0x1f9f083a
xorps xmm0, xmm0
movaps xmmword [rsp + 0x190], xmm0
movaps xmmword [rsp + 0x1a0], xmm0
movaps xmmword [rsp + 0x1b0], xmm0
lea rcx, [rsp + 0x190]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx r9, word [rsp + 0x190]
mov eax, 0x80000000
mov ecx, 0
mov r8, rbx
cpuid
xchg rbx, r8
cmp esi, 0x47f488f3
jae 0x1400c51aa
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1a0], xmm0
movaps xmmword [rsp + 0x190], xmm0
lea rcx, [rsp + 0x190]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, 0x80000000
xor ecx, ecx
mov r8, rbx
cpuid
xchg rbx, r8
jmp 0x1400c5103
mov edi, eax
mov eax, 0xcb52f0ff
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5a60]
imul ecx, dword [0x141dd5a64]
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x9b9ffd59
je 0x1400c51c0
cmp edi, 0x80000004
mov byte [rsp + 0x2f], bl
mov qword [rsp + 0x38], r9
jb 0x1400c56c0
xor eax, eax
test al, al
je 0x1400c5210
movzx eax, byte [0x141ddb278]
mov edx, 0x50
xor ecx, ecx
call fcn.1400c0180
nop dword [rax + rax]
mov esi, dword [0x141dd5a68]
sub esi, dword [0x141dd5a6c]
add esi, 0xb117e5a2
or esi, 0x5c1d0a81
movzx eax, byte [0x141ddb278]
mov edx, 0x50
xor ecx, ecx
call fcn.1400c0180
cmp esi, 0x453c3fc0
je 0x1400c5210
mov r8, rax
test rax, rax
je 0x1400c582f
mov qword [rsp + 0xb0], 5
mov qword [rsp + 0xb8], r8
mov qword [rsp + 0xc0], 0
mov ebx, 0x80000000
xor r13d, r13d
mov r10d, 0xabb1bf5b
nop dword [rax]
mov eax, dword [0x141dd5ab0]
xor eax, dword [0x141dd5ab4]
or eax, 0xc1239493
imul rax, r10
shr rax, 0x3f
add eax, 0x46fc35a5
cmp eax, 0x7784e6c6
jbe 0x1400c52c0
mov eax, ebx
xor ecx, ecx
mov r9, rbx
cpuid
xchg rbx, r9
nop word cs:[rax + rax]
mov r9d, dword [0x141dd5ab8]
and r9d, dword [0x141dd5abc]
mov ecx, 0
mov eax, ebx
mov r12, rbx
cpuid
xchg rbx, r12
mov r15d, eax
imul eax, r9d, 0x6c7cbd6b
add eax, 0x4b949eaf
cmp ebx, edi
mov ebp, ebx
adc ebp, 0
cmp eax, 0xf47b7eca
ja 0x1400c52c0
mov r14d, ecx
mov esi, edx
cmp r13, qword [rsp + 0xb0]
jne 0x1400c5343
lea rcx, [rsp + 0xb0]
call fcn.1400d7f30
mov r10d, 0xabb1bf5b
mov eax, dword [0x141dd5cd0]
imul eax, dword [0x141dd5cd4]
imul eax, eax, 0x70b66e24
or eax, 0xec2342be
mov r8, qword [rsp + 0xb8]
cmp eax, 0xe2497d9e
je 0x1400c531c
mov rax, r13
shl rax, 4
inc r13
mov dword [r8 + rax], r15d
mov dword [r8 + rax + 4], r12d
mov dword [r8 + rax + 8], r14d
mov dword [r8 + rax + 0xc], esi
mov qword [rsp + 0xc0], r13
cmp ebx, edi
jae 0x1400c5376
mov ebx, ebp
cmp ebp, edi
jbe 0x1400c5280
movzx eax, byte [0x141ddb278]
mov edx, 0x30
xor ecx, ecx
call fcn.1400c0180
test rax, rax
je 0x1400c5855
mov r12, rax
mov eax, dword [0x141dd5ad8]
or eax, dword [0x141dd5adc]
or eax, 0x881000d4
and eax, 0xbd9c0ad5
imul eax, eax, 0x9fd986ae
cmp eax, 0xef3071be
jne 0x1400c53d0
mov qword [rsp + 0x50], 0x30
mov qword [rsp + 0x58], r12
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ae0]
and eax, dword [0x141dd5ae4]
xor eax, 0x10004104
or eax, 0xebff9cf3
mov qword [rsp + 0x50], 0x30
mov qword [rsp + 0x58], r12
cmp eax, 0xead029c6
jb 0x1400c53d0
xor eax, eax
test al, al
je 0x1400c540a
mov qword [rsp + 0x60], 0
mov rbx, r13
shl rbx, 4
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ae8]
xor eax, dword [0x141dd5aec]
imul eax, eax, 0x4f24251b
and eax, 0xc2e19061
mov r15, qword [rsp + 0xb8]
mov qword [rsp + 0x60], 0
cmp eax, 0x97332965
ja 0x1400c5420
cmp r13, 3
jb 0x1400c5725
mov edx, dword [r15 + 0x20]
lea rcx, [rsp + 0x50]
call fcn.1400d7c10
mov eax, dword [0x141dd5af0]
imul eax, dword [0x141dd5af4]
mov esi, dword [r15 + 0x24]
add eax, 0xf67e9ffe
and eax, 0x14fe9c0d
cmp eax, 0xbab998df
jbe 0x1400c5495
lea rcx, [rsp + 0x50]
mov edx, esi
call fcn.1400d7c10
add rbx, r15
lea r14, [r15 + 0x30]
lea rdi, [rsp + 0x50]
nop word cs:[rax + rax]
mov ebp, dword [0x141dd5af8]
and ebp, dword [0x141dd5afc]
or ebp, 0x1e88826b
mov rcx, rdi
mov edx, esi
call fcn.1400d7c10
cmp ebp, 0x1270ede0
je 0x1400c54b0
mov eax, dword [0x141dd5b00]
xor eax, dword [0x141dd5b04]
add eax, 0x5e1d5cb6
and eax, 0xd6fbf603
cmp eax, 0xc7cf1679
jne 0x1400c54ff
mov edx, dword [r15 + 0x28]
lea rcx, [rsp + 0x50]
call fcn.1400d7c10
mov edi, 0xe907b39f
lea rsi, [rsp + 0x50]
lea rbp, [r15 + 0x2c]
nop dword [rax]
mov eax, dword [0x141dd5b08]
sub eax, dword [0x141dd5b0c]
imul r12d, eax, 0xf7e69ca9
imul r12, rdi
shr r12, 0x3e
mov edx, dword [r15 + 0x28]
mov rcx, rsi
call fcn.1400d7c10
cmp r12d, 0x3138161e
je 0x1400c5510
mov r12d, 2
lea rdi, [rsp + 0x50]
mov r13b, 1
xor eax, eax
test al, al
jne 0x1400c55f0
nop dword [rax + rax]
mov eax, dword [0x141dd5b10]
xor edx, edx
div dword [0x141dd5b14]
mov esi, eax
imul rax, rsi, 0x23cc3bf
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1f
or esi, 0x15640fac
xor esi, 0xd5786800
mov edx, dword [rbp]
mov rcx, rdi
call fcn.1400d7c10
test r12, r12
sete al
cmp r14, rbx
sete cl
cmp esi, 0xe2730edc
ja 0x1400c55f0
or al, cl
jne 0x1400c56ce
mov eax, dword [0x141dd5b20]
or eax, dword [0x141dd5b24]
or eax, 0x1254b3df
xor eax, 0x3101ae08
imul rax, rax, 0x63963e9
shr rax, 0x3a
cmp eax, 0xb4f066f2
jbe 0x1400c5600
jmp 0x1400c56b0
mov edx, dword [rbp]
mov rcx, rdi
call fcn.1400d7c10
jmp 0x1400c5560
mov eax, dword [0x141dd5b28]
and eax, dword [0x141dd5b2c]
shr eax, 4
imul rsi, rax, 0xa3ba81b
shr rsi, 0x37
add esi, 0x9751ddeb
and esi, 0x311c1ee
mov edx, dword [r14]
mov rcx, rdi
call fcn.1400d7c10
cmp esi, 0x9f897993
ja 0x1400c56b0
mov edx, dword [r14 + 4]
mov rcx, rdi
call fcn.1400d7c10
mov eax, dword [0x141dd5b30]
add eax, dword [0x141dd5b34]
or eax, 0x20460100
and eax, 0x216e0d40
imul eax, eax, 0xf90f1f49
cmp eax, 0x593a7cbd
jae 0x1400c5674
mov edx, dword [r14 + 8]
mov rcx, rdi
call fcn.1400d7c10
dec r12
lea rsi, [r14 + 0x10]
nop dword [rax + rax]
mov edx, dword [r14 + 8]
mov rcx, rdi
call fcn.1400d7c10
test r13b, r13b
je 0x1400c5680
add r14, 0xc
mov rbp, r14
mov r14, rsi
xor eax, eax
test al, al
jne 0x1400c55f0
jmp 0x1400c5560
mov edx, dword [r14]
mov rcx, rdi
call fcn.1400d7c10
jmp 0x1400c5600
mov r14d, 1
xor r12d, r12d
jmp 0x1400c58a9
mov r12, qword [rsp + 0x58]
mov rax, qword [rsp + 0x60]
nop dword [rax + rax]
mov ecx, dword [0x141dd5b18]
xor ecx, dword [0x141dd5b1c]
or ecx, 0xa2000220
xor ecx, 0x1000450
and ecx, 0xa3188670
cmp ecx, 0x919047fa
je 0x1400c56e0
test rax, rax
je 0x1400c5725
xor r8d, r8d
nop
cmp byte [r12 + r8], 0
je 0x1400c57f5
inc r8
cmp rax, r8
jne 0x1400c5710
jmp 0x1400c5727
xor eax, eax
mov r8, rax
lea rcx, [rsp + 0xe0]
mov rdx, r12
call fcn.140053dc0
cmp qword [rsp + 0xe0], 0
je 0x1400c5760
mov r14d, 1
xor r13d, r13d
jmp 0x1400c5ff0
mov eax, dword [str.__rK]
xor edx, edx
div dword [0x141dd5b4c]
imul rax, rax, 0x11c127ad
shr rax, 0x3c
imul eax, eax, 0xc9398e38
cmp eax, 0x7d3caab5
je 0x1400c5760
mov rax, qword [rsp + 0xf0]
test rax, rax
js 0x1400c587b
mov r13, rax
mov rbx, qword [rsp + 0xe8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5b60]
xor eax, dword [0x141dd5b64]
xor eax, 0x38ad0005
imul eax, eax, 0x1b6a0a01
cmp eax, 0xe2a94d6e
je 0x1400c57b0
test r13, r13
je 0x1400c5824
mov eax, dword [0x141dd5b68]
sub eax, dword [0x141dd5b6c]
imul eax, eax, 0x3e085cdb
cmp eax, 0xb8175546
jne 0x1400c5ea5
jmp 0x1400c5ecf
cmp r8, rax
jbe 0x1400c572a
mov eax, dword [0x141dd5b38]
xor eax, dword [0x141dd5b3c]
add eax, 0x621dc15d
or eax, 0x351e2a05
cmp eax, 0x19f55adf
jne 0x1400c5e51
jmp 0x1400c5e79
mov r14d, 1
jmp 0x1400c5f76
mov eax, dword [0x141dd5a70]
xor eax, dword [0x141dd5a74]
add eax, 0xf1dc8507
xor eax, 0x5b582a36
cmp eax, 0xb664dadf
jae 0x1400c59aa
jmp 0x1400c59b2
mov eax, dword [0x141dd5ac0]
or eax, dword [0x141dd5ac4]
xor eax, 0x6b7d6c56
add eax, 0x3561a575
cmp eax, 0xd99b3310
jbe 0x1400c5e03
jmp 0x1400c5e25
mov eax, dword [0x141dd5b50]
xor edx, edx
div dword [0x141dd5b54]
add eax, 0x76f805e4
imul rax, rax, 0x5e9205f5
shr rax, 0x3e
cmp eax, 0xec174a06
jbe 0x1400c5e7d
jmp 0x1400c5ea1
xor eax, eax
xor ecx, ecx
mov rbx, rbx
cpuid
xchg rbx, rbx
mov ebp, ecx
mov r15d, edx
movzx eax, byte [0x141ddb278]
mov edx, 0xc
xor ecx, ecx
call fcn.1400c0180
test rax, rax
je 0x1400c5914
mov qword [rsp + 0x50], 0xc
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0
mov eax, dword [0x141dd5a98]
or eax, dword [0x141dd5a9c]
and eax, 0xd855a14
add eax, 0xb7f5cefe
and eax, 0xc698852a
cmp eax, 0x3806c75
jae 0x1400c59d1
jmp 0x1400c5a17
mov eax, dword [0x141dd5a80]
add eax, dword [0x141dd5a84]
imul eax, eax, 0x5a5c2f4
and eax, 0x41042108
cmp eax, 0xf1239774
jbe 0x1400c5940
ud2
mov eax, dword [0x141dd5a88]
or eax, dword [0x141dd5a8c]
imul rcx, rax, 0x4699ad1d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul eax, eax, 0x9691e56e
xor eax, 0x75f1d010
ud2
ud2
ud2
ud2
mov eax, dword [0x141dd5aa0]
xor edx, edx
div dword [0x141dd5aa4]
imul edi, eax, 0x4dc460b6
and edi, 0x80061608
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov edx, ebx
call fcn.1400d7c10
mov rcx, rsi
mov edx, r15d
call fcn.1400d7c10
mov rcx, rsi
mov edx, ebp
call fcn.1400d7c10
cmp edi, 0xb4f202ca
jne 0x1400c5a3d
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov edx, ebx
call fcn.1400d7c10
mov rcx, rsi
mov edx, r15d
call fcn.1400d7c10
mov rcx, rsi
mov edx, ebp
call fcn.1400d7c10
jmp 0x1400c59d1
mov r13, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
lea rax, [rcx + r13]
nop dword [rax + rax]
mov edx, dword [0x141dd5aa8]
and edx, dword [0x141dd5aac]
or edx, 0xbec424e9
add edx, 0xd60f8fe1
and edx, 0x808c2d94
cmp edx, 0x696d74eb
jb 0x1400c5a50
test rcx, rcx
je 0x1400c5af0
xor ebx, ebx
mov rdx, r13
mov r8d, dword [0x141dd5c18]
and r8d, dword [0x141dd5c1c]
or r8d, 0x95ff5ef
add r8d, 0xe832008f
and r8d, 0x1ba01094
cmp r8d, 0xbbd5f237
je 0x1400c5a80
cmp byte [rdx], 0
je 0x1400c5b3a
inc rdx
inc rbx
nop dword [rax + rax]
mov r8d, dword [0x141dd5c20]
or r8d, dword [0x141dd5c24]
add r8d, 0xfa9a1b74
imul r8, r8, 0x576011d7
shr r8, 0x3e
cmp r8d, 0xe8599453
je 0x1400c5ac0
cmp rdx, rax
jne 0x1400c5a80
nop
mov eax, dword [0x141dd5c00]
xor eax, dword [str.zYpS]
and eax, 0x24383400
add eax, 0x65f04db
cmp eax, 0x987a4194
ja 0x1400c5af0
nop dword [rax]
mov eax, dword [0x141dd5c08]
xor edx, edx
div dword [0x141dd5c0c]
imul eax, eax, 0x7ee30c92
or eax, 0xefe01d1b
and eax, 0xfff11f3b
cmp eax, 0xf71c50a5
jb 0x1400c5b10
mov rbx, rcx
jmp 0x1400c5b71
mov eax, 0x88afa223
nop
mov edx, dword [0x141dd5c10]
and edx, dword [0x141dd5c14]
imul rdx, rax
shr rdx, 0x3f
or edx, 0x53dcea64
xor edx, 0xaefaea91
cmp edx, 0x5b8f3b70
jb 0x1400c5b40
cmp rbx, rcx
ja 0x1400c59cf
mov eax, dword [0x141dd5c28]
xor edx, edx
div dword [0x141dd5c2c]
imul eax, eax, 0x508148b4
add eax, 0x2593e776
cmp eax, 0xde1f106c
jbe 0x1400c5ba4
lea rcx, [rsp + 0xe0]
mov rdx, r13
mov r8, rbx
call fcn.140053dc0
lea rsi, [rsp + 0xe0]
nop dword [rax]
mov edi, dword [0x141dd5c30]
add edi, dword [0x141dd5c34]
and edi, 0x30410000
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call fcn.140053dc0
cmp edi, 0xcc10920c
ja 0x1400c5bb0
cmp qword [rsp + 0xe0], 0
je 0x1400c5c8e
nop word [rax + rax]
mov eax, dword [0x141dd5c80]
imul eax, dword [0x141dd5c84]
or eax, 0x241584a
and eax, 0x3241f84a
add eax, 0xf4bbc573
cmp eax, 0x5fc5f38a
ja 0x1400c5bf0
mov r8, qword [rsp + 0x38]
nop dword [rax + rax]
mov eax, dword [0x141dd5c88]
xor edx, edx
div dword [0x141dd5c8c]
imul eax, eax, 0x6c29aad4
add eax, 0xe551669b
cmp eax, 0xdea17556
jb 0x1400c5c20
cmp r8w, 0xe
ja 0x1400c5d69
lea rax, [0x141db9c40]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5c90]
and ecx, dword [0x141dd5c94]
imul ecx, ecx, 0x2f80a77f
cmp ecx, 0xfb29ca55
je 0x1400c5c60
mov r15, qword [rax + r8*8]
lea rax, [0x141db9cb8]
mov rsi, qword [rax + r8*8]
jmp 0x1400c5d76
mov rbx, qword [rsp + 0xe8]
mov eax, dword [0x141dd5c38]
xor edx, edx
div dword [0x141dd5c3c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5c40]
xor edx, edx
div dword [0x141dd5c44]
cmp eax, 0x10e4e6d6
je 0x1400c5cb0
mov r15, qword [rsp + 0xf0]
xor eax, eax
nop
test al, al
jne 0x1400c5cd0
test r15, r15
js 0x1400c59cf
nop dword [rax]
mov eax, dword [str.h7g]
and eax, dword [0x141dd5c4c]
and eax, 0xc1a2a7d0
add eax, 0x47425490
xor eax, 0xd52bba0
cmp eax, 0x7a5dda82
ja 0x1400c5ce0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5c50]
xor eax, dword [0x141dd5c54]
add eax, 0x1428a4d7
cmp eax, 0xb2a0f610
ja 0x1400c5d10
test r15, r15
je 0x1400c5df9
mov eax, dword [0x141dd5c58]
or eax, dword [0x141dd5c5c]
imul rax, rax, 0x2d2fba4f
shr rax, 0x3d
imul eax, eax, 0xc46c8432
imul rax, rax, 0x9d30c9f
shr rax, 0x31
cmp eax, 0xa377c3de
jbe 0x1400c6239
jmp 0x1400c626e
lea rsi, [0x141db99d7]
mov r15d, 7
movzx eax, byte [0x141ddb278]
xor ecx, ecx
mov rdx, r15
call fcn.1400c0180
test rax, rax
je 0x1400c59cf
mov rbx, rax
mov eax, dword [0x141dd5c98]
xor eax, dword [0x141dd5c9c]
cmp eax, 0x53611931
jne 0x1400c5dc0
mov rcx, rbx
mov rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
nop word cs:[rax + rax]
mov edi, dword [0x141dd5ca0]
imul edi, dword [0x141dd5ca4]
add edi, 0xe88b932a
or edi, 0xb3fbeb5f
mov rcx, rbx
mov rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
cmp edi, 0xc6d81f55
jb 0x1400c5dc0
mov qword [rsp + 0x30], rbx
jmp 0x1400c6317
mov edi, 1
jmp 0x1400c62ac
mov eax, dword [0x141dd5ac8]
xor edx, edx
div dword [0x141dd5acc]
imul eax, eax, 0x3327d312
add eax, 0x4d943792
ud2
ud2
mov eax, dword [0x141dd5b40]
xor eax, dword [0x141dd5b44]
xor eax, 0x20000000
or eax, 0x14040c00
and eax, 0x35044e94
ud2
ud2
mov eax, dword [0x141dd5b58]
imul eax, dword [0x141dd5b5c]
add eax, 0xed42ca4d
xor eax, 0xf7f7e46c
ud2
ud2
mov eax, dword [0x141dd5b70]
and eax, dword [0x141dd5b74]
and eax, 0xcee22cab
imul eax, eax, 0x5eaeee0e
add eax, 0x458a0553
movzx ecx, byte [0x141ddb278]
cmp eax, 0x8615cfed
jae 0x1400c5ed8
movzx eax, byte [0x141ddb278]
jmp 0x1400c5ea5
mov eax, dword [0x141dd5b78]
xor edx, edx
div dword [0x141dd5b7c]
or eax, 0x9d46a3c8
imul eax, eax, 0x30217fd4
cmp eax, 0x7a8c64a8
jbe 0x1400c5f02
xor ecx, ecx
mov rdx, r13
call fcn.1400c0180
mov rdi, r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd5b80]
or eax, dword [0x141dd5b84]
imul eax, eax, 0x47ca4da6
or eax, 0xac39e5af
imul esi, eax, 0x738e813c
xor ecx, ecx
mov rdx, rdi
call fcn.1400c0180
cmp esi, 0xf4600124
ja 0x1400c5f10
mov r14, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5b88]
add eax, dword [0x141dd5b8c]
xor eax, 0xa004d1c0
or eax, 0x58e22e1f
cmp eax, 0xd063c70a
ja 0x1400c5f50
test r14, r14
je 0x1400c59cf
mov eax, dword [0x141dd5b90]
sub eax, dword [0x141dd5b94]
xor eax, 0xb7bb31e9
mov ecx, 0xbd77082f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x95b7fd62
mov rdi, r13
je 0x1400c5fd3
mov esi, dword [0x141dd5b98]
or esi, dword [0x141dd5b9c]
xor esi, 0x22300104
or esi, 0x50c27cbb
add esi, 0x60bf8af5
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
cmp esi, 0x5ae2d02f
jbe 0x1400c5ff0
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
jmp 0x1400c5f9f
mov eax, dword [0x141dd5ba0]
and eax, dword [0x141dd5ba4]
or eax, 0x36600180
and eax, 0x36621db5
add eax, 0xda088c20
cmp eax, 0x5ff511b9
ja 0x1400c5ff0
cmp qword [rsp + 0x50], 0
je 0x1400c6084
mov rsi, qword [0x141ddb260]
mov eax, dword [0x141dd5ba8]
imul eax, dword [0x141dd5bac]
imul eax, eax, 0xe31d7742
add eax, 0x2ec00538
and eax, 0x6dc970ba
cmp eax, 0xc618b7df
jbe 0x1400c6053
mov rcx, rsi
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov ebx, dword [0x141dd5bb0]
and ebx, dword [0x141dd5bb4]
or ebx, 0xd7cf293c
mov rcx, rsi
xor edx, edx
mov r8, r12
call rdi
cmp ebx, 0xfb921801
je 0x1400c6060
mov rcx, qword [rsp + 0xb0]
mov eax, dword [0x141dd5bb8]
xor edx, edx
div dword [0x141dd5bbc]
mov eax, 0xbaf74c5d
nop
mov edx, dword [0x141dd5bc0]
xor edx, dword [0x141dd5bc4]
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x59a29345
je 0x1400c60a0
mov r12, r13
nop
mov eax, dword [0x141dd5bc8]
imul eax, dword [0x141dd5bcc]
and eax, 0x9d93534a
cmp eax, 0x7c872aaf
je 0x1400c60c0
test rcx, rcx
je 0x1400c61e3
mov eax, dword [0x141dd5bd0]
sub eax, dword [0x141dd5bd4]
mov ecx, 0x9da880a9
imul rcx, rax
shr rcx, 0x37
or ecx, 0xe1c4261c
add ecx, 0xf78a8a69
cmp ecx, 0x587fc98f
jae 0x1400c6120
mov rax, qword [0x141ddb260]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5bd8]
xor eax, dword [0x141dd5bdc]
add eax, 0x3375f5d
or eax, 0x2f4a7a24
mov rsi, qword [0x141ddb260]
cmp eax, 0x11e7fa7
jb 0x1400c6120
mov eax, dword [0x141dd5be0]
xor edx, edx
div dword [0x141dd5be4]
or eax, 0x70f31fab
imul eax, eax, 0x5ef381d2
cmp eax, 0x858af6ff
je 0x1400c61a6
mov edi, dword [0x141dd5be8]
xor edi, dword [0x141dd5bec]
add edi, 0x99e77194
xor edi, 0xbacf00cd
imul rax, rdi, 0x2d042e4d
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1f
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, 0x3b4476bc
jbe 0x1400c61c0
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c6164
mov eax, dword [0x141dd5bf0]
add eax, dword [0x141dd5bf4]
imul eax, eax, 0x30818992
xor eax, 0x8cfe0b83
add eax, 0x33bd04c0
cmp eax, 0xf8d323c6
ja 0x1400c61c0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c61f0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5bf8]
and eax, dword [0x141dd5bfc]
imul rax, rax, 0x519ecb33
shr rax, 0x3e
or eax, 0xeb467158
cmp eax, 0x9a954b5
je 0x1400c6200
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c6230
jmp 0x1400c58a9
mov eax, dword [0x141dd5c60]
xor edx, edx
div dword [0x141dd5c64]
mov esi, eax
or esi, 0x1dfd47c3
add esi, 0x84136d24
movzx eax, byte [0x141ddb278]
xor ecx, ecx
mov rdx, r15
call fcn.1400c0180
cmp esi, 0xf6fae880
jbe 0x1400c6281
movzx eax, byte [0x141ddb278]
xor ecx, ecx
mov rdx, r15
call fcn.1400c0180
jmp 0x1400c6239
mov rdi, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5c68]
or eax, dword [0x141dd5c6c]
cmp eax, 0xafcd04c7
je 0x1400c6290
test rdi, rdi
je 0x1400c59cf
mov eax, dword [0x141dd5c70]
and eax, dword [0x141dd5c74]
add eax, 0xc75c2556
or eax, 0x3e095985
cmp eax, 0x372341be
jb 0x1400c6302
mov eax, dword [0x141dd5c78]
sub eax, dword [0x141dd5c7c]
imul rax, rax, 0x78463e23
shr rax, 0x3e
imul esi, eax, 0x4354560b
xor esi, 0x8652983
mov rcx, rdi
mov rdx, rbx
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
cmp esi, 0x9ab7691f
jbe 0x1400c6312
mov rcx, rdi
mov rdx, rbx
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x1400c62c9
mov qword [rsp + 0x30], rdi
mov eax, 0xb11d77f1
nop dword [rax]
mov ecx, dword [0x141dd5ca8]
add ecx, dword [0x141dd5cac]
or ecx, 0x90258fb4
imul ecx, ecx, 0xfd6f9563
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x47550f0d
ja 0x1400c6320
cmp qword [rsp + 0x50], 0
je 0x1400c641e
mov eax, dword [0x141dd5cb0]
sub eax, dword [0x141dd5cb4]
xor eax, 0x89893abb
add eax, 0x1f2a8904
or eax, 0x67c57cb1
cmp eax, 0xff72587f
ja 0x1400c63ae
mov eax, dword [0x141dd5cb8]
add eax, dword [0x141dd5cbc]
mov ecx, 0xcfbbcc15
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x9fa2e78a
imul rax, rcx, 0x2dce5a7f
shr rax, 0x3c
mov rsi, qword [0x141ddb260]
cmp eax, 0x5920bc7f
jbe 0x1400c63b7
mov rax, qword [0x141ddb260]
jmp 0x1400c6376
mov eax, dword [0x141dd5cc0]
and eax, dword [0x141dd5cc4]
add eax, 0xe9279e10
and eax, 0xd992e5d0
mov ecx, 0xfee46951
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x4b5fc75a
jne 0x1400c63f0
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov ebx, dword [0x141dd5cc8]
or ebx, dword [0x141dd5ccc]
mov rcx, rsi
xor edx, edx
mov r8, r13
call rdi
cmp ebx, 0x5f0c07d4
je 0x1400c6400
mov ebx, dword [rsp + 0x1b0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5cd8]
or eax, dword [0x141dd5cdc]
add eax, 0x34b4ea2e
xor eax, 0xb4662163
add eax, 0xae9c7b30
cmp eax, 0x367fdb8b
jb 0x1400c6430
cmp byte [rsp + 0x2f], 0
je 0x1400c64a0
lea rcx, [rsp + 0x160]
mov rdx, rbx
call fcn.1400d81b0
mov rdi, qword [rsp + 0x30]
nop
mov eax, dword [0x141dd5d18]
sub eax, dword [0x141dd5d1c]
or eax, 0xe491bfa0
shr eax, 1
imul rax, rax, 0x2551b809
shr rax, 0x3a
cmp eax, 0x920dae64
je 0x1400c6470
jmp 0x1400c653a
mov eax, dword [0x141dd5ce0]
xor eax, dword [0x141dd5ce4]
xor eax, 0xe13981e2
imul rax, rax, 0x59635247
shr rax, 0x3e
cmp eax, 0xcdc1ed56
je 0x1400c64a0
mov rdi, qword [rsp + 0x30]
nop dword [rax + rax]
mov eax, dword [0x141dd5ce8]
add eax, dword [0x141dd5cec]
or eax, 0x925fda33
cmp eax, 0x5afd96b9
je 0x1400c64d0
test rbx, rbx
je 0x1400c651d
mov eax, dword [0x141dd5cf0]
imul eax, dword [0x141dd5cf4]
lea rsi, [rbx*8]
xor eax, 0xd6da5cd2
imul eax, eax, 0x52de4e05
cmp eax, 0xf8dd921a
jne 0x1400c6df8
jmp 0x1400c6e2b
mov eax, 8
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], rbx
inc rbx
imul rdx, rbx, 0x70
movzx eax, byte [0x141ddb278]
xor ecx, ecx
call fcn.1400c0180
test rax, rax
je 0x1400c6d76
mov r8, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0x138], r14
nop word cs:[rax + rax]
mov eax, dword [0x141dd5d38]
or eax, dword [0x141dd5d3c]
xor eax, 0x3432664e
imul eax, eax, 0xd1295976
and eax, 0x5026f06e
cmp eax, 0x2cd2712c
ja 0x1400c6590
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x170]
test rax, rax
je 0x1400c6bb8
mov rcx, qword [rsp + 0x40]
lea rax, [rcx + rax*8]
mov qword [rsp + 0x178], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5d40]
xor edx, edx
div dword [0x141dd5d44]
imul eax, eax, 0x5afd7846
add eax, 0x41ec14e8
cmp eax, 0xb8af6d6b
ja 0x1400c65f0
lea rsi, [0x140053a40]
lea r14, [0x141db99f0]
lea r13, [rsp + 0x148]
lea rbx, [rsp + 0xe0]
lea rbp, [rsp + 0xb0]
xor r15d, r15d
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x140], r12
mov qword [rsp + 0x30], rdi
jmp 0x1400c66fc
imul rax, r15, 0x70
mov rcx, qword [rsp + 0x90]
mov qword [r8 + rax + 0x40], rcx
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movups xmmword [r8 + rax + 0x30], xmm3
movups xmmword [r8 + rax + 0x20], xmm2
movups xmmword [r8 + rax + 0x10], xmm1
movups xmmword [r8 + rax], xmm0
movabs rcx, 0x8000000000000000
mov qword [r8 + rax + 0x48], rcx
mov dword [r8 + rax + 0x60], 0
mov qword [r8 + rax + 0x68], rsi
mov qword [rsp + 0xa8], r14
mov r15, r14
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x48], rax
cmp rax, qword [rsp + 0x178]
lea rsi, [0x140053a40]
mov r14, r13
lea r13, [rsp + 0x148]
lea rbx, [rsp + 0xe0]
je 0x1400c6bb8
mov qword [rsp + 0x188], r8
mov eax, dword [0x141dd5da8]
xor edx, edx
div dword [0x141dd5dac]
add eax, 0xf49ef716
or eax, 0xbc58dc84
add eax, 0x65cabfa2
cmp eax, 0xcce6059a
lea r12, [rsp + 0x158]
jbe 0x1400c678b
lea rax, [r15 + 1]
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], 1
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], 1
mov rcx, rbx
mov rdx, rbp
call fcn.1400384d0
mov rdi, rsi
mov rbp, r15
mov r15, rbx
mov rbx, r13
mov r13, r14
nop word [rax + rax]
mov eax, dword [0x141dd5db0]
xor edx, edx
div dword [0x141dd5db4]
mov esi, eax
or esi, 0x4cfde0ff
add esi, 0x56a62afa
and esi, 0x84021548
lea r14, [rbp + 1]
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], 1
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], 1
mov rcx, r15
lea rdx, [rsp + 0xb0]
call fcn.1400384d0
cmp esi, 0x94fd4d74
ja 0x1400c67a0
cmp qword [rsp + 0x38], 0
mov rdi, qword [rsp + 0x30]
lea r12, [rsp + 0xb0]
js 0x1400c6d2d
mov r15, rbp
mov rax, qword [rsp + 0x48]
lea rbx, [rax + 8]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c6860
mov rdx, qword [rsp + 0x38]
test rdx, rdx
je 0x1400c6890
movzx eax, byte [0x141ddb278]
xor ecx, ecx
call fcn.1400c0180
test rax, rax
je 0x1400c6d2d
mov rsi, rax
jmp 0x1400c6895
mov esi, 1
mov qword [rsp + 0x180], rbx
mov rbx, r12
mov eax, dword [0x141dd5dc8]
and eax, dword [0x141dd5dcc]
mov ecx, 0xb7d95c09
imul rax, rcx
shr rax, 0x3e
or eax, 0x5100d59c
cmp eax, 0xbf44288c
jne 0x1400c68f0
mov rcx, rsi
mov rdx, rdi
mov r12, qword [rsp + 0x38]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xf8], r12
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], r12
mov rbp, qword [rsp + 0x38]
nop word cs:[rax + rax]
mov r12d, dword [0x141dd5dd0]
add r12d, dword [0x141dd5dd4]
xor r12d, 0x1c963d84
add r12d, 0x880647e7
mov rcx, rsi
mov rdx, rdi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xf8], rbp
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rbp
cmp r12d, 0x54821328
jb 0x1400c6900
mov r12, qword [rsp + 0x140]
test r12, r12
js 0x1400c59cf
mov rbp, rbx
nop
mov eax, dword [0x141dd5dd8]
and eax, dword [0x141dd5ddc]
add eax, 0x4c2ab8b7
or eax, 0x2dbc8a8
xor eax, 0x118f4f51
cmp eax, 0xd659c49d
jb 0x1400c6960
test r12, r12
je 0x1400c6a20
mov eax, dword [0x141dd5de0]
imul eax, dword [0x141dd5de4]
or eax, 0x41336ac3
imul eax, eax, 0xf64f4b07
cmp eax, 0xd9024203
jne 0x1400c69c0
movzx eax, byte [0x141ddb278]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5de8]
or eax, dword [0x141dd5dec]
or eax, 0x67fbd7df
and eax, 0x77ffd7df
movzx ecx, byte [0x141ddb278]
cmp eax, 0xb81af465
je 0x1400c69c0
mov eax, dword [0x141dd5df0]
xor eax, dword [0x141dd5df4]
or eax, 0x4a975ae9
imul eax, eax, 0xead6c653
add eax, 0x46611de2
cmp eax, 0x17192d84
mov rdi, qword [rsp + 0x140]
jae 0x1400c6a30
jmp 0x1400c6a72
mov esi, 1
jmp 0x1400c6ab3
mov eax, dword [0x141dd5df8]
imul eax, dword [0x141dd5dfc]
imul rcx, rax, 0x3337b16d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul r12d, eax, 0x7398a07a
add r12d, 0xff5a8ba
xor ecx, ecx
mov rdx, rdi
call fcn.1400c0180
cmp r12d, 0xa8d92e5d
jbe 0x1400c6a80
xor ecx, ecx
mov rdx, rdi
call fcn.1400c0180
jmp 0x1400c6a30
mov rsi, rax
test rax, rax
je 0x1400c59cf
mov r12, rdi
nop
mov eax, dword [0x141dd5e00]
sub eax, dword [0x141dd5e04]
or eax, 0xdd11a882
imul eax, eax, 0x6980d3cb
or eax, 0x2837fdfd
cmp eax, 0x56fffa60
jbe 0x1400c6a90
mov rcx, rsi
mov rdx, qword [rsp + 0x138]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x110], r12
mov qword [rsp + 0x118], rsi
mov qword [rsp + 0x120], r12
mov rax, qword [rsp + 0x48]
mov rsi, qword [rax]
movups xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movups xmm2, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x70], xmm2
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], r12
cmp r15, qword [rsp + 0x98]
mov r8, qword [rsp + 0x188]
jne 0x1400c6660
lea rcx, [rsp + 0x98]
call fcn.1400d89e0
nop dword [rax + rax]
mov eax, dword [str._IP]
add eax, dword [0x141dd5e0c]
and eax, 0x7618e5bc
add eax, 0xa28cf270
cmp eax, 0xb4b3a768
ja 0x1400c6b60
mov r8, qword [rsp + 0xa0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e10]
and eax, dword [0x141dd5e14]
add eax, 0x941ca6ad
imul rax, rax, 0x75c516cb
shr rax, 0x3e
cmp eax, 0xfbe89d14
ja 0x1400c6b90
jmp 0x1400c6660
mov eax, dword [0x141dd5d48]
add eax, dword [0x141dd5d4c]
imul eax, eax, 0xfded2322
add eax, 0x83cbc172
cmp eax, 0x3e69603f
jae 0x1400c6bf6
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0x98]
movaps xmmword [rsp + 0xe0], xmm0
xor eax, eax
mov r14, qword [rsp + 0x138]
mov r15, qword [rsp + 0x38]
nop word cs:[rax + rax]
movups xmm0, xmmword [rsp + 0x98]
movaps xmmword [rsp + 0xe0], xmm0
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xf0], rcx
test al, al
jne 0x1400c6c10
cmp qword [rsp + 0x160], 0
je 0x1400c6cb2
mov eax, dword [0x141dd5d50]
sub eax, dword [0x141dd5d54]
and eax, 0x89020b62
add eax, 0x19fbdd65
and eax, 0x82813da5
cmp eax, 0x37c1f76a
jbe 0x1400c6c68
mov rax, qword [0x141ddb260]
xor eax, eax
nop word [rax + rax]
mov rcx, qword [0x141ddb260]
test al, al
jne 0x1400c6c70
xor edx, edx
mov r8, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dd5d58]
add eax, dword [0x141dd5d5c]
or eax, 0x2894448
and eax, 0x628d45c8
add eax, 0xd1d41807
cmp eax, 0xe120fd84
jb 0x1400c6c90
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c6cc0
test r12, r12
je 0x1400c6f6e
nop dword [rax]
mov eax, dword [0x141dd5d60]
sub eax, dword [0x141dd5d64]
imul eax, eax, 0x30630641
or eax, 0x95e21abe
add eax, 0x8a70caa
cmp eax, 0x76d17123
ja 0x1400c6cd0
mov eax, dword [0x141dd5d68]
add eax, dword [0x141dd5d6c]
and eax, 0x73c5f2f5
xor eax, 0xe6b8c78b
imul rcx, rax, 0x23c43313
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xbbfa647
jbe 0x1400c6ec5
jmp 0x1400c6eef
mov eax, dword [0x141dd5db8]
add eax, dword [0x141dd5dbc]
or eax, 0x101d1420
and eax, 0x131f7420
cmp eax, 0xfa3f3289
jbe 0x1400c6d50
ud2
mov eax, dword [0x141dd5dc0]
add eax, dword [0x141dd5dc4]
not eax
or eax, 0x20982d77
and eax, 0x7a982d77
ud2
mov eax, dword [0x141dd5d20]
add eax, dword [0x141dd5d24]
and eax, 0xe5177981
add eax, 0xb1e71069
and eax, 0xa6e7c100
cmp eax, 0xb8cc71f2
jbe 0x1400c6da0
ud2
mov eax, dword [0x141dd5d28]
add eax, dword [0x141dd5d2c]
xor eax, 0xd65c8eff
add eax, 0xf6253bf8
imul rax, rax, 0x4eca97bf
shr rax, 0x3d
ud2
mov edi, dword [0x141dd5cf8]
and edi, dword [0x141dd5cfc]
and edi, 0x3efa0d75
add edi, 0x1adf62e6
or edi, 0x1b1fde0d
mov ecx, 8
mov rdx, rsi
call fcn.1400c0180
cmp edi, 0xdacde47c
jne 0x1400c6e3a
mov ecx, 8
mov rdx, rsi
call fcn.1400c0180
jmp 0x1400c6df8
test rax, rax
je 0x1400c6e7d
mov rdi, qword [rsp + 0x30]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5d00]
mov edx, dword [0x141dd5d04]
add ecx, edx
add ecx, 0x5c100dbb
or ecx, 0x214f5d0
add ecx, 0x39a7f665
cmp ecx, 0xb938aeb4
jae 0x1400c6e50
jmp 0x1400c6522
mov eax, dword [0x141dd5d08]
or eax, dword [0x141dd5d0c]
xor eax, 0xbfdb74ae
add eax, 0x57cffa2e
or eax, 0x708c0391
cmp eax, 0xce40e6ac
jae 0x1400c6ea1
ud2
mov eax, dword [0x141dd5d10]
and eax, dword [0x141dd5d14]
add eax, 0xabcc53b7
and eax, 0x91700a20
ud2
mov eax, dword [0x141dd5d70]
imul eax, dword [0x141dd5d74]
and eax, 0x35e52b19
add eax, 0xf9b7dd28
or eax, 0xdad31899
mov rsi, qword [0x141ddb260]
cmp eax, 0x342e3fda
jae 0x1400c6ef8
mov rax, qword [0x141ddb260]
jmp 0x1400c6ec5
mov eax, dword [0x141dd5d78]
imul eax, dword [0x141dd5d7c]
imul rax, rax, 0x102c0ae3
shr rax, 0x3b
or eax, 0x206db752
xor eax, 0xc771a2bd
cmp eax, 0xbc424fe4
jae 0x1400c6f2f
mov rcx, rsi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5d80]
xor edx, edx
div dword [0x141dd5d84]
mov ebx, eax
and ebx, 0x3848f64f
add ebx, 0xe94bbe05
mov rcx, rsi
xor edx, edx
mov r8, r14
call rdi
cmp ebx, 0x5487b17d
jb 0x1400c6f40
test r15, r15
mov rdi, qword [rsp + 0x30]
je 0x1400c7010
mov eax, dword [0x141dd5d88]
xor edx, edx
div dword [0x141dd5d8c]
nop word [rax + rax]
mov eax, dword [0x141dd5d90]
xor eax, dword [0x141dd5d94]
imul eax, eax, 0x7574f23c
xor eax, 0x6c08758
and eax, 0x2fc4af58
cmp eax, 0xebade006
je 0x1400c6f90
mov eax, dword [0x141dd5d98]
imul eax, dword [0x141dd5d9c]
add eax, 0x9c510d67
or eax, 0xf2eef1f7
cmp eax, 0x596e272d
jb 0x1400c6ff7
mov esi, dword [0x141dd5da0]
xor esi, dword [0x141dd5da4]
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0xa27e2a9a
jne 0x1400c7010
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c6fd1
mov eax, dword [0x141dd5e18]
or eax, dword [str._v1]
add eax, 0xf88b0218
and eax, 0xf8a6eb8e
xor eax, 0x9831efe0
cmp eax, 0xf2b57c08
ja 0x1400c7010
mov rax, qword [rsp + 0x130]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
test rsi, rsi
je 0x1400c72ec
xor ebx, ebx
mov r14d, 0xe77d6c5b
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12d, 0xa4c6cf33
xor ebp, ebp
nop word cs:[rax + rax]
imul rax, rbp, 0x70
lea r13, [rdi + rax]
cmp qword [rdi + rax], 0
je 0x1400c70f8
mov eax, dword [0x141dd5e20]
xor eax, dword [0x141dd5e24]
add eax, 0x61f89d8
imul rax, rax, 0x620ec04d
shr rax, 0x3e
or eax, 0xef7485fa
cmp eax, 0x1e10ad40
jb 0x1400c707f
mov eax, dword [0x141dd5e28]
and eax, dword [0x141dd5e2c]
add eax, 0x9c96d6dd
mov ecx, 0xb0f658cd
imul rax, rcx
shr rax, 0x3d
and eax, 0xfffffffd
cmp eax, 0x293026a8
ja 0x1400c7240
nop word cs:[rax + rax]
mov r8, qword [r13 + 8]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r15
test bl, bl
jne 0x1400c7240
inc rbp
nop dword [rax + rax]
mov eax, dword [0x141dd5e30]
xor edx, edx
div dword [0x141dd5e34]
or eax, 0x21012000
and eax, 0x21056201
cmp eax, 0xb4dc0f5d
ja 0x1400c7100
cmp qword [r13 + 0x18], 0
je 0x1400c7170
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e38]
add eax, dword [0x141dd5e3c]
imul eax, eax, 0xeb6a5f73
add eax, 0x9015e112
and eax, 0x60415107
cmp eax, 0xd0c1e8a2
ja 0x1400c7130
mov r8, qword [r13 + 0x20]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r15
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e40]
imul eax, dword [0x141dd5e44]
add eax, 0x8224b88a
and eax, 0xace1be34
imul eax, eax, 0xb2c6d082
cmp eax, 0xcbfc87aa
je 0x1400c7170
mov rax, qword [r13 + 0x48]
shl rax, 1
test rax, rax
je 0x1400c71e0
mov eax, dword [0x141dd5e48]
imul eax, dword [0x141dd5e4c]
xor eax, 0x9f4f7d15
imul rax, r12
shr rax, 0x3f
or eax, 0x53b8b6e2
cmp eax, 0x7b40b23c
ja 0x1400c71a0
mov r8, qword [r13 + 0x50]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r15
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e50]
add eax, dword [0x141dd5e54]
or eax, 0x700752ee
imul eax, eax, 0xe2880e85
or eax, 0xa76ab20
cmp eax, 0xb977193
jb 0x1400c71e0
cmp qword [r13 + 0x30], 0
je 0x1400c72b0
mov eax, dword [0x141dd5e58]
and eax, dword [0x141dd5e5c]
add eax, 0xdb34f541
shr eax, 2
imul rax, rax, 0x1005b039
shr rax, 0x3a
or eax, 0x9eaefc30
cmp eax, 0xac860dbc
jbe 0x1400c7260
jmp 0x1400c728b
mov r8, qword [r13 + 8]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r15
jmp 0x1400c70e0
mov eax, dword [0x141dd5e60]
sub eax, dword [0x141dd5e64]
xor eax, 0xa314ea2f
imul rax, r14
shr rax, 0x3c
mov r8, qword [r13 + 0x38]
mov rcx, qword [0x141ddb260]
cmp eax, 0x3c56d5f3
jne 0x1400c72a0
mov rax, qword [0x141ddb260]
jmp 0x1400c7260
xor edx, edx
call r15
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e68]
imul eax, dword [0x141dd5e6c]
imul rcx, rax, 0xa08e567
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
xor eax, 0x35a71bbb
imul eax, eax, 0x554a7927
cmp eax, 0x27154ed
je 0x1400c72b0
cmp rbp, rsi
jne 0x1400c7070
xor eax, eax
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x130]
nop dword [rax + rax]
test al, al
jne 0x1400c7300
mov rax, qword [rsi]
nop word [rax + rax]
mov ecx, dword [0x141dd5e70]
imul ecx, dword [0x141dd5e74]
and ecx, 0x86600828
or ecx, 0x3894d7c7
imul ecx, ecx, 0x9728604b
cmp ecx, 0x924d8507
ja 0x1400c7310
test rax, rax
je 0x1400c734e
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0xf0]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0xe0]
movups xmmword [rsi], xmm0
xor eax, eax
test al, al
je 0x1400c736e
mov byte [rsi + 0x38], bl
xor eax, eax
mov byte [rsi + 0x38], bl
test al, al
jne 0x1400c7370
nop word [rax + rax]
mov eax, dword [0x141dd5e78]
xor edx, edx
div dword [0x141dd5e7c]
add eax, 0x36a4291
or eax, 0x64a2e42b
cmp eax, 0x3c88d4ed
jb 0x1400c7380
add rsp, 0x1c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret