Function at 0x1401114a0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using murmur2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x340]
sub rsp, 0x440
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rbp + 0x330], rax
mov rbx, r8
mov qword [rbp + 0x78], rbx
mov r8, rdx
mov qword [rbp + 0x70], rdx
mov rdi, rcx
mov qword [rbp - 0x40], rcx
mov eax, dword [rdx + 0x10]
mov dword [rsp + 0x60], eax
mov qword [rsp + 0x58], rdx
cmp qword [rdx + 0x18], 0x10
jb 0x140111500
mov rax, qword [rdx]
mov qword [rsp + 0x58], rax
mov rdx, qword [rbx + 0x10]
cmp rdx, 0xf
ja 0x140111533
xor eax, eax
mov qword [rcx], rax
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 0xf
mov rcx, r8
call fcn.14001e820
mov rcx, rbx
call fcn.14001e820
mov rax, rdi
jmp 0x1401133d8
mov rax, qword [rbx + 0x18]
cmp rax, 0x10
jb 0x140111546
mov rcx, qword [rbx]
lea r8, [rcx + 0xf]
jmp 0x14011154d
lea r8, [rbx + 0xf]
mov rcx, rbx
mov qword [rbp + 0x310], 0
movdqa xmm0, xmmword [0x1401746b0]
movdqu xmmword [rbp + 0x320], xmm0
add rcx, 3
cmp rcx, r8
je 0x14011158b
sub r8, rcx
mov rdx, rcx
lea rcx, [rbp + 0x310]
call fcn.14001ea30
mov rax, qword [rbx + 0x18]
mov rdx, qword [rbx + 0x10]
cmp rax, 0x10
jb 0x14011159a
mov rcx, qword [rbx]
lea rsi, [rdx + rcx]
jmp 0x1401115a1
lea rsi, [rdx + rbx]
mov rcx, rbx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], 0
lea r14, [rcx + 0xf]
mov rbx, rsi
xor ecx, ecx
sub rbx, r14
je 0x14011164c
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x14011346f
cmp rbx, 0x1000
jb 0x14011160e
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140113475
call fcn.14012bbb4
test rax, rax
je 0x140113469
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140111619
mov rcx, rbx
call fcn.14012bbb4
mov rdi, rax
mov qword [rbp + 0x288], rdi
lea rcx, [rdi + rbx]
mov qword [rbp + 0x298], rcx
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.14012dc00
sub rdi, r14
lea rcx, [rdi + rsi]
mov rdx, rcx
mov qword [rbp + 0x290], rcx
jmp 0x140111653
mov rdx, qword [rbp + 0x290]
sub ecx, dword [rbp + 0x288]
mov qword [rbp + 0x60], rcx
mov dword [rbp + 0x68], ecx
mov eax, 0x80
cmp ecx, eax
jge 0x1401116b2
sub eax, ecx
mov ebx, eax
nop dword [rax]
mov byte [rsp + 0x50], 0
cmp rdx, qword [rbp + 0x298]
je 0x140111694
mov byte [rdx], 0
mov rdx, qword [rbp + 0x290]
inc rdx
mov qword [rbp + 0x290], rdx
jmp 0x1401116ac
lea r8, [rsp + 0x50]
lea rcx, [rbp + 0x288]
call fcn.1400f27b0
mov rdx, qword [rbp + 0x290]
sub rbx, 1
jne 0x140111670
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x208], 0
xor eax, eax
mov qword [rbp + 0x210], rax
mov dword [rbp + 0x218], eax
mov dword [rbp + 0x2a0], eax
mov dword [rbp + 0x280], eax
mov cl, 0x65
mov byte [rsp + 0x70], cl
movdqa xmm0, xmmword [0x1401747e0]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x35080d11
mov dword [rbp - 0x4c], 0xc130a17
mov dword [rbp - 0x48], 0x170001
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140111726
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140111735
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rsp + 0x74]
mov edi, 8
mov r9d, edi
nop dword [rax + rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140111760
mov r9d, 0x1b
lea r8, [rsp + 0x74]
lea rdx, [rbp - 0x60]
call fcn.14011c9b0
mov qword [rbp - 0x68], rax
movsx ebx, byte [rsp + 0x70]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1401117cd
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1401117dc
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rsp + 0x74]
mov r9, rdi
nop word [rax + rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140111800
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x74]
mov rdx, qword [rbp - 0x68]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x14011188f
movsx edx, byte [rsp + 0x70]
movd xmm1, edx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rax]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
add rax, 0x10
mov ecx, 0xb
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x140111880
mov byte [rsi + 0x1b], cl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov eax, 0x5a4d
cmp qword [rdi + 0x60], 0
je 0x14011195f
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1401118a8
cmp word [r11], ax
jne 0x14011195f
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14011195f
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14011195f
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x1401118a3
nop word [rax + rax]
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x14011194e
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14011194a
cmp byte [rcx], al
jne 0x14011194e
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140111922
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140111961
test dl, dl
jne 0x140111939
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140111910
jmp 0x1401118a3
xor eax, eax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x140173e78]
lea rcx, [rbp + 0x200]
call rax
mov r13d, eax
mov edi, 0xc
test eax, eax
js 0x140112abb
mov r12, qword [rbp + 0x200]
mov cl, 0x38
mov byte [rbp + 0x80], cl
movdqa xmm0, xmmword [0x140174a30]
movdqu xmmword [rbp + 0xb0], xmm0
mov word [rbp + 0xc0], 0x41
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1401119c8
lea edx, [rdi + 0x78]
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1401119d7
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x84]
mov edi, 8
mov r9d, edi
nop dword [rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140111a00
mov r9d, 0x11
lea r8, [rbp + 0x84]
lea rdx, [rbp + 0xb0]
call fcn.14011c9b0
mov qword [rbp + 0xa8], rax
movsx ebx, byte [rbp + 0x80]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140111a77
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140111a86
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x84]
mov r9, rdi
nop word [rax + rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140111ab0
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x84]
mov rdx, qword [rbp + 0xa8]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x140111b35
movsx ecx, byte [rbp + 0x80]
movd xmm1, ecx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rax]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
xor byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x140111c04
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140111b49
mov r14d, 0x5a4d
cmp word [r11], r14w
jne 0x140111c00
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140111c00
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140111c00
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140111b49
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x140111bef
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x140111beb
cmp byte [rcx], al
jne 0x140111bef
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140111bc3
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140111c06
test dl, dl
jne 0x140111bda
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140111bb1
jmp 0x140111b49
xor eax, eax
jmp 0x140111c0c
xor eax, eax
mov r14d, 0x5a4d
mov dword [rsp + 0x20], 0
mov r9d, 0x20
lea r8, str.ChainingModeGCM
lea rdx, str.ChainingMode
mov rcx, r12
call rax
mov r13d, eax
test eax, eax
js 0x140112ab6
mov r12, qword [rbp + 0x200]
mov cl, 0x12
mov byte [rbp + 0xd0], cl
movdqa xmm0, xmmword [0x140174ad0]
movdqu xmmword [rbp + 0x100], xmm0
mov word [rbp + 0x110], 0x6b
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140111c7b
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140111c8a
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0xd4]
mov edi, 8
mov r9d, edi
nop
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140111cb0
mov r9d, 0x11
lea r8, [rbp + 0xd4]
lea rdx, [rbp + 0x100]
call fcn.14011c9b0
mov qword [rbp + 0xf8], rax
movsx ebx, byte [rbp + 0xd0]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140111d27
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140111d36
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0xd4]
mov r9, rdi
nop word [rax + rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140111d60
mov r9d, dword [0x140196874]
lea r8, [rbp + 0xd4]
mov rdx, qword [rbp + 0xf8]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x140111de5
movsx ecx, byte [rbp + 0xd0]
movd xmm1, ecx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rax]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
xor byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x140111ed0
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140111eba
cmp word [r11], r14w
jne 0x140111ecc
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140111ecc
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140111ecc
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140111eba
nop
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x140111eae
mov r8, rsi
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x140111eaa
cmp byte [rcx], al
jne 0x140111eae
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140111e82
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140111ed2
test dl, dl
jne 0x140111e99
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140111e70
cmp qword [rdi + 0x60], 0
je 0x140111ed0
mov r14d, 0x5a4d
jmp 0x140111e10
xor eax, eax
jmp 0x140111ed8
xor eax, eax
mov r14d, 0x5a4d
mov dword [rsp + 0x28], 0
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x20], rcx
mov edi, 0xc
mov r9d, edi
lea r8, [rbp + 0x210]
lea rdx, str.AuthTagLength
mov rcx, r12
call rax
mov r13d, eax
test eax, eax
js 0x140112abb
mov r12, qword [rbp + 0x200]
mov cl, 0x6b
mov byte [rbp + 0x120], cl
movdqa xmm0, xmmword [0x140174880]
movdqu xmmword [rbp + 0x150], xmm0
mov word [rbp + 0x160], 0x12
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140111f53
lea edx, [rdi + 0x78]
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140111f62
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x124]
mov edi, 8
mov r10d, edi
nop word [rax + rax]
mov eax, r11d
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r10, 1
jne 0x140111f90
lea r9d, [r10 + 0x11]
lea r8, [rbp + 0x124]
lea rdx, [rbp + 0x150]
call fcn.14011c9b0
mov qword [rbp + 0x148], rax
movsx ebx, byte [rbp + 0x120]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140112005
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140112014
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x124]
mov r9, rdi
mov eax, r10d
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112034
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x124]
mov rdx, qword [rbp + 0x148]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x1401120b9
movsx ecx, byte [rbp + 0x120]
movd xmm1, ecx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rax]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
xor byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x1401121a0
nop dword [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14011218a
cmp word [r11], r14w
jne 0x14011219c
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14011219c
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14011219c
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14011218a
nop
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x14011217e
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14011217a
cmp byte [rcx], al
jne 0x14011217e
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140112152
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x1401121a2
test dl, dl
jne 0x140112169
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140112140
cmp qword [rdi + 0x60], 0
je 0x1401121a0
mov r14d, 0x5a4d
jmp 0x1401120e0
xor eax, eax
jmp 0x1401121a8
xor eax, eax
mov r14d, 0x5a4d
mov dword [rsp + 0x28], 0
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x20], rcx
mov r9d, 4
lea r8, [rbp + 0x2a0]
lea rdx, str.BlockLength
mov rcx, r12
call rax
mov r13d, eax
test eax, eax
js 0x140112ab6
mov r12, qword [rbp + 0x200]
mov cl, 0x4e
mov byte [rbp + 0x10], cl
movdqa xmm0, xmmword [0x140174940]
movdqu xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x50], 0x3a2b2323
mov dword [rbp + 0x54], 0x52d273c
mov word [rbp + 0x58], 0x372b
xor eax, eax
mov byte [rbp + 0x5a], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14011222d
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14011223c
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x14]
mov edi, 8
mov r9d, edi
nop
mov eax, r10d
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112260
mov r9d, 0x1a
lea r8, [rbp + 0x14]
lea rdx, [rbp + 0x40]
call fcn.14011c9b0
mov qword [rbp + 0x38], rax
movsx ebx, byte [rbp + 0x10]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1401122cb
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1401122da
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x14]
mov r9, rdi
nop word [rax + rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112300
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x14]
mov rdx, qword [rbp + 0x38]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x14011238f
movsx edx, byte [rbp + 0x10]
movd xmm1, edx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rax]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
add rax, 0x10
mov ecx, 0xa
nop
xor byte [rax], dl
lea rax, [rax + 1]
sub rcx, 1
jne 0x140112380
mov byte [rsi + 0x1a], cl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x140112470
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14011245a
cmp word [r11], r14w
jne 0x14011246c
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14011246c
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14011246c
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14011245a
nop
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x14011244e
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14011244a
cmp byte [rcx], al
jne 0x14011244e
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140112422
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140112472
test dl, dl
jne 0x140112439
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140112410
cmp qword [rdi + 0x60], 0
je 0x140112470
mov r14d, 0x5a4d
jmp 0x1401123b0
xor eax, eax
jmp 0x140112478
xor eax, eax
mov r14d, 0x5a4d
mov dword [rsp + 0x30], 0
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x28], ecx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x208]
mov rcx, r12
call rax
mov r13d, eax
test eax, eax
js 0x140112ab6
mov edi, dword [rbp + 0x214]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2f8], xmm0
mov qword [rbp + 0x308], 0
test rdi, rdi
je 0x140112533
cmp rdi, 0x1000
jb 0x140112505
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14011345d
call fcn.14012bbb4
mov rcx, rax
test rax, rax
je 0x140113463
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14011250d
mov rcx, rdi
call fcn.14012bbb4
mov qword [rbp + 0x2f8], rax
lea rbx, [rax + rdi]
mov qword [rbp + 0x308], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.14012e2b0
mov qword [rbp + 0x300], rbx
mov ebx, dword [rbp + 0x210]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], 0
xor edi, edi
xor eax, eax
test rbx, rbx
je 0x1401125bd
cmp rbx, 0x1000
jb 0x14011258d
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14011345d
call fcn.14012bbb4
mov rcx, rax
test rax, rax
je 0x140113463
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140112595
mov rcx, rbx
call fcn.14012bbb4
mov qword [rbp + 0x2c0], rax
lea rdi, [rbx + rax]
mov qword [rbp + 0x2d0], rdi
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.14012e2b0
mov qword [rbp + 0x2c8], rdi
mov eax, edi
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], rcx
mov dword [rbp + 0x220], 0x58
mov dword [rbp + 0x224], 1
lea rcx, [rbp + 0x310]
cmp qword [rbp + 0x328], 0x10
jb 0x14011261a
mov rcx, qword [rbp + 0x310]
mov edi, eax
mov qword [rbp + 0x228], rcx
mov eax, dword [rbp + 0x320]
mov dword [rbp + 0x230], eax
mov rax, qword [rbp + 0x2c0]
mov qword [rbp + 0x248], rax
sub edi, eax
mov dword [rbp + 0x250], edi
mov rcx, qword [rbp + 0x2f8]
mov qword [rbp + 0x258], rcx
mov eax, dword [rbp + 0x300]
sub eax, ecx
mov dword [rbp + 0x260], eax
mov ebx, dword [rbp + 0x2a0]
movdqu xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], 0
test rbx, rbx
je 0x1401126e2
cmp rbx, 0x1000
jb 0x1401126b2
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14011345d
call fcn.14012bbb4
mov rcx, rax
test rax, rax
je 0x140113463
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401126ba
mov rcx, rbx
call fcn.14012bbb4
mov qword [rbp + 0x2a8], rax
lea r12, [rbx + rax]
mov qword [rbp + 0x2b8], r12
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.14012e2b0
mov qword [rbp + 0x2b0], r12
jmp 0x1401126e9
mov r12, qword [rbp + 0x2b0]
mov dword [rbp + 0x270], 1
mov r13, qword [rbp + 0x288]
mov rax, qword [rbp + 0x2a8]
mov qword [rsp + 0x58], rax
sub r12, rax
mov rax, qword [rbp + 0x208]
mov qword [rsp + 0x60], rax
mov cl, 0x7d
mov byte [rbp - 0x30], cl
mov dword [rbp], 0x40f3e3f
mov dword [rbp + 4], 0x1839090d
mov dword [rbp + 8], 0xd040f1e
mov word [rbp + 0xc], 9
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140112750
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14011275f
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp - 0x2c]
mov esi, 8
mov r9d, esi
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112781
mov ebx, 0xd
mov r9d, ebx
lea r8, [rbp - 0x2c]
lea rdx, [rbp]
call fcn.14011c9b0
mov qword [rbp - 8], rax
movsx edi, byte [rbp - 0x30]
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x1401127ec
lea edx, [rbx + 0x77]
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x1401127fb
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp - 0x2c]
mov r9, rsi
nop dword [rax + rax]
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112820
mov r9d, dword [0x140196874]
lea r8, [rbp - 0x2c]
mov rdx, qword [rbp - 8]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x14011288f
movzx ecx, byte [rbp - 0x30]
nop dword [rax + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rbx, 1
jne 0x140112880
mov byte [rsi + 0xd], bl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x140112970
nop
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x14011295a
cmp word [r11], r14w
jne 0x14011296c
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14011296c
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14011296c
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14011295a
nop
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x14011294e
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x14011294a
cmp byte [rcx], al
jne 0x14011294e
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140112922
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140112972
test dl, dl
jne 0x140112939
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140112910
cmp qword [rdi + 0x60], 0
je 0x140112970
mov r14d, 0x5a4d
jmp 0x1401128b0
xor eax, eax
jmp 0x140112978
xor eax, eax
mov r14d, 0x5a4d
mov dword [rsp + 0x48], 0
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x40
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r12
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x220]
mov r8d, 0x40
mov rdx, r13
mov rcx, qword [rsp + 0x60]
call rax
mov r13d, eax
test eax, eax
jns 0x140112d43
mov rcx, qword [rbp + 0x2a8]
test rcx, rcx
je 0x140112a20
mov rdx, qword [rbp + 0x2b8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140112a05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113463
call fcn.14012b910
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], 0
mov rcx, qword [rbp + 0x2c0]
test rcx, rcx
je 0x140112a76
mov rdx, qword [rbp + 0x2d0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140112a5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113463
call fcn.14012b910
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], 0
mov rcx, qword [rbp + 0x2f8]
test rcx, rcx
je 0x140112ab6
mov rdx, qword [rbp + 0x308]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140112ab1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113463
call fcn.14012b910
mov edi, 0xc
mov r12, qword [rbp + 0x200]
test r12, r12
je 0x140112fd1
mov cl, 0x29
mov byte [rsp + 0x70], cl
movdqa xmm0, xmmword [0x140174a90]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x44415d40
mov dword [rbp - 0x4c], 0x5f465b79
mov dword [rbp - 0x48], 0x5b4c4d40
xor eax, eax
mov byte [rbp - 0x44], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140112b13
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140112b22
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rsp + 0x74]
mov esi, 8
mov r9d, esi
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112b45
mov r9d, 0x1c
lea r8, [rsp + 0x74]
lea rdx, [rbp - 0x60]
call fcn.14011c9b0
mov qword [rbp - 0x68], rax
movsx ebx, byte [rsp + 0x70]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140112bb2
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140112bc1
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rsp + 0x74]
mov r9, rsi
nop
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140112be0
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x74]
mov rdx, qword [rbp - 0x68]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x140112c70
movsx ecx, byte [rsp + 0x70]
movd xmm1, ecx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rax]
pxor xmm1, xmm0
movdqu xmmword [rax], xmm1
add rax, 0x10
nop dword [rax + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdi, 1
jne 0x140112c60
mov byte [rsi + 0x1c], dil
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x140112fc8
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140112c84
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x140112fc8
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140112fc8
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140112fc8
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140112c84
nop
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x140112fb3
mov r8, rsi
sub r8, rcx
nop word [rax + rax]
movzx eax, byte [rcx + r8]
test al, al
je 0x140112fab
cmp byte [rcx], al
jne 0x140112fb3
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140112d10
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140112fca
mov r12, qword [rbp + 0x288]
add r12, 0x40
mov r13, qword [rbp + 0x2b0]
mov rax, qword [rbp + 0x2a8]
mov qword [rsp + 0x58], rax
sub r13, rax
mov rax, qword [rbp + 0x208]
mov qword [rsp + 0x60], rax
lea rdx, str.BCryptDecrypt
lea rcx, [rbp + 0x1c0]
call fcn.1400201a0
mov rcx, rax
call fcn.14001d2b0
mov r15, rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdi, qword [rcx]
cmp qword [rdi + 0x60], 0
je 0x140112e6b
nop dword [rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140112e59
cmp word [r11], r14w
jne 0x140112e6b
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140112e6b
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140112e6b
lea rax, [r11 + rcx]
mov esi, dword [rax + 0x1c]
add rsi, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r14d, dword [rax + 0x24]
add r14, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140112e59
nop
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x140112e4d
mov r8, r15
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x140112e49
cmp byte [rcx], al
jne 0x140112e4d
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140112e22
movsxd rax, r10d
movzx ecx, word [r14 + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140112e6d
test dl, dl
jne 0x140112e39
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140112e10
cmp qword [rdi + 0x60], 0
je 0x140112e6b
mov r14d, 0x5a4d
jmp 0x140112db0
xor eax, eax
mov dword [rsp + 0x48], 0
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x40
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x220]
mov r8d, 0x40
mov rdx, r12
mov rcx, qword [rsp + 0x60]
call rax
mov r13d, eax
mov rcx, qword [rbp + 0x2a8]
test rcx, rcx
je 0x140112f0d
mov rdx, qword [rbp + 0x2b8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140112ef2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113463
call fcn.14012b910
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], 0
mov rcx, qword [rbp + 0x2c0]
test rcx, rcx
je 0x140112f63
mov rdx, qword [rbp + 0x2d0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140112f48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113463
call fcn.14012b910
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], 0
mov rcx, qword [rbp + 0x2f8]
test rcx, rcx
je 0x140112ab6
mov rdx, qword [rbp + 0x308]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140112ab1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113463
jmp 0x140112ab1
test dl, dl
jne 0x140112d2f
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140112cf0
jmp 0x140112c84
xor eax, eax
xor edx, edx
mov rcx, r12
call rax
mov r12, qword [rbp + 0x208]
test r12, r12
je 0x140113246
mov cl, 0x6b
mov byte [rbp + 0x170], cl
movdqa xmm0, xmmword [0x140174830]
movdqu xmmword [rbp + 0x1a0], xmm0
xor eax, eax
mov byte [rbp + 0x1b0], al
movsx ebx, cl
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14011301c
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14011302b
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x174]
mov edi, 8
mov r9d, edi
mov eax, edx
xor eax, r10d
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub r9, 1
jne 0x140113050
mov r9d, 0x10
lea r8, [rbp + 0x174]
lea rdx, [rbp + 0x1a0]
call fcn.14011c9b0
mov qword [rbp + 0x198], rax
movsx ebx, byte [rbp + 0x170]
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1401130c7
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1401130d6
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r9d, ecx, 0x5bd1e995
xor edx, edx
lea r8, [rbp + 0x174]
mov eax, r9d
xor eax, edx
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8], eax
add edx, 0x5bd1e995
lea r8, [r8 + 4]
sub rdi, 1
jne 0x1401130f3
mov r9d, dword [0x140196874]
lea r8, [rbp + 0x174]
mov rdx, qword [rbp + 0x198]
call fcn.14011cb00
mov rsi, rax
test rax, rax
je 0x140113175
movsx eax, byte [rbp + 0x170]
movd xmm1, eax
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
movdqu xmm0, xmmword [rsi]
pxor xmm1, xmm0
movdqu xmmword [rsi], xmm1
mov byte [rsi + 0x10], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], 0
je 0x14011323f
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140113189
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x14011323f
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14011323f
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14011323f
lea rax, [r11 + rcx]
mov r14d, dword [rax + 0x1c]
add r14, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov r15d, dword [rax + 0x24]
add r15, r11
xor r10d, r10d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x140113189
xor dl, dl
mov ecx, dword [r9]
add rcx, r11
cmp byte [rcx], dl
je 0x14011322e
mov r8, rsi
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x14011322a
cmp byte [rcx], al
jne 0x14011322e
mov dl, 1
inc rcx
cmp byte [rcx], 0
jne 0x140113202
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140113241
test dl, dl
jne 0x140113219
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1401131f0
jmp 0x140113189
xor eax, eax
mov rcx, r12
call rax
test r13d, r13d
jne 0x140113402
mov qword [rbp + 0x2d8], 0
xor ecx, ecx
mov qword [rbp + 0x2e8], rcx
mov r9d, 0xf
mov qword [rbp + 0x2f0], r9
mov rdi, qword [rbp + 0x290]
mov rbx, qword [rbp + 0x288]
mov rdx, rdi
sub rdx, rbx
cmp rdx, 0x10
jb 0x1401132a6
lea rcx, [rbp + 0x2d8]
call fcn.140104330
xor ecx, ecx
mov qword [rbp + 0x2e8], rcx
mov r9, qword [rbp + 0x2f0]
cmp rbx, rdi
je 0x140113306
nop dword [rax + rax]
movzx edx, byte [rbx]
cmp rcx, r9
jae 0x1401132e0
lea rax, [rcx + 1]
mov qword [rbp + 0x2e8], rax
lea rax, [rbp + 0x2d8]
cmp r9, 0x10
cmovae rax, qword [rbp + 0x2d8]
mov byte [rax + rcx], dl
mov byte [rax + rcx + 1], 0
jmp 0x1401132f0
movzx r9d, dl
lea rcx, [rbp + 0x2d8]
call fcn.140023d00
inc rbx
mov r9, qword [rbp + 0x2f0]
mov rcx, qword [rbp + 0x2e8]
cmp rbx, rdi
jne 0x1401132b0
mov rbx, qword [rbp - 0x40]
mov qword [rbx], 0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov rdx, qword [rbp + 0x60]
lea eax, [rdx - 0x10]
cmp edx, 0x10
mov r8, qword [rbp + 0x68]
cmova r8d, eax
cmp rcx, r8
cmovb r8, rcx
lea rdx, [rbp + 0x2d8]
cmp r9, 0x10
cmovae rdx, qword [rbp + 0x2d8]
mov rcx, rbx
call fcn.14001ea30
lea rcx, [rbp + 0x2d8]
call fcn.14001e820
mov rcx, qword [rbp + 0x288]
test rcx, rcx
je 0x1401133b7
mov rdx, qword [rbp + 0x298]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011339c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113469
call fcn.14012b910
xorps xmm0, xmm0
mov qword [rbp + 0x298], 0
movdqu xmmword [rbp + 0x288], xmm0
lea rcx, [rbp + 0x310]
call fcn.14001e820
mov rcx, qword [rbp + 0x70]
call fcn.14001e820
mov rcx, qword [rbp + 0x78]
call fcn.14001e820
mov rax, rbx
mov rcx, qword [rbp + 0x330]
xor rcx, rsp
call fcn.14012b8f0
mov rbx, qword [rsp + 0x498]
add rsp, 0x440
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rbx, qword [rbp - 0x40]
mov qword [rbx], 0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov rcx, qword [rbp + 0x288]
test rcx, rcx
je 0x1401133b7
mov rdx, qword [rbp + 0x298]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011339c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140113469
jmp 0x14011339c
call fcn.140005870
int3
call fcn.140133e80
int3
call fcn.140133e80
int3
call fcn.1400f2ac0
int3
call fcn.140005870
int3