Function at 0x1400c2870
Capabilities:
Encode data using xor
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp], xmm6
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x18], rcx
mov eax, dword [0x141dd55e8]
xor eax, dword [0x141dd55ec]
xor eax, 0x24104010
or eax, 0xdb881941
and eax, 0xff99f9d1
cmp eax, 0x48b7ae29
jne 0x1400c2940
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x40
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x160
call fcn.1400ef330
sub rsp, rax
mov eax, 0xe0
call fcn.1400ef330
sub rsp, rax
mov eax, 0x70
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov ecx, 0xaf91c06d
nop word cs:[rax + rax]
mov eax, dword [0x141dd55f0]
add eax, dword [0x141dd55f4]
mov rdx, rax
imul rdx, rcx
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
imul edx, eax, 0x553de985
xor edx, 0xd3e605ab
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r15, rsp
mov eax, 0x40
call fcn.1400ef330
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r12, rsp
mov eax, 0x160
call fcn.1400ef330
sub rsp, rax
mov rdi, rsp
mov eax, 0xe0
call fcn.1400ef330
sub rsp, rax
mov rbx, rsp
mov eax, 0x70
call fcn.1400ef330
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rax, rsp
cmp edx, 0x62e5e12a
jb 0x1400c2950
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x78], r11
mov qword [rbp - 0x80], r10
mov qword [rbp - 0x38], r9
mov eax, dword [0x141dd55f8]
xor eax, dword [0x141dd55fc]
add eax, 0x91ce2146
and eax, 0xf647999c
imul eax, eax, 0xcd0701f0
cmp eax, 0x3725981d
jb 0x1400c2ac5
mov eax, dword [0x141dd5600]
add eax, dword [0x141dd5604]
imul ecx, eax, 0x7922ac95
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r13, rsp
cmp ecx, 0xbd3d6984
jne 0x1400c2b0b
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
jmp 0x1400c2a5b
mov qword [rbp - 8], r11
mov qword [rbp - 0x30], r10
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x50], r8
mov eax, dword [0x141dd5608]
sub eax, dword [str.LeQ3]
add eax, 0xc4acb71a
or eax, 0x67a69ea8
shr eax, 3
imul rax, rax, 0x21b2ba41
shr rax, 0x39
cmp eax, 0xa7d7a685
jne 0x1400c2b70
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd5610]
sub eax, dword [0x141dd5614]
or eax, 0x3f6636d
imul esi, eax, 0x3ce2c85c
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp esi, 0xf43f0679
je 0x1400c2b70
mov r14, rax
test rax, rax
je 0x1400c32ca
mov eax, dword [0x141dd5618]
xor eax, dword [0x141dd561c]
xor eax, 0x71f952bd
imul eax, eax, 0x2bd2e806
add eax, 0x92150826
cmp eax, 0xc218c7fc
ja 0x1400c2be7
mov qword [r13], 0x80000
xor eax, eax
test al, al
je 0x1400c2bf1
mov qword [r13], 0x80000
jmp 0x1400c2bd9
mov eax, dword [0x141dd5620]
and eax, dword [0x141dd5624]
and eax, 0xc5b72413
imul eax, eax, 0xe5086d1e
cmp eax, 0x8de4eee5
mov r9, qword [rbp - 8]
je 0x1400c2c3c
mov eax, dword [0x141dd5628]
mov ecx, dword [0x141dd562c]
add eax, ecx
add eax, 0x5696471b
imul rax, rax, 0x494ec419
shr rax, 0x3e
mov qword [r13 + 8], r14
cmp eax, 0x41322ff5
jbe 0x1400c2c42
mov qword [r13 + 8], r14
jmp 0x1400c2c13
xor eax, eax
test al, al
je 0x1400c2c50
mov qword [r13 + 0x10], 0
mov qword [rbp - 0x10], r12
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x68], rdi
nop dword [rax]
mov eax, dword [0x141dd5630]
add eax, dword [0x141dd5634]
and eax, 0x76c42cd5
xor eax, 0xd0b11387
imul rcx, rax, 0x14d650d9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
mov qword [r13 + 0x10], 0
cmp eax, 0x8c9c288
ja 0x1400c2c60
mov eax, 0x80000
xor esi, esi
mov ebx, 0xa49cb43f
mov rdi, qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov r12d, 0x80000
mov qword [rbp - 0x58], r13
mov dword [r9], 0
sub rax, rsi
cmp r12, rax
jbe 0x1400c2d7a
nop dword [rax]
mov eax, dword [0x141dd5638]
imul eax, dword [0x141dd563c]
imul eax, eax, 0x5fd823a6
add eax, 0xd29d8f7e
cmp eax, 0x21408722
jb 0x1400c2f2b
mov r14d, dword [0x141dd5640]
and r14d, dword [0x141dd5644]
add r14d, 0x11cdc45e
and r14d, 0x4be9e1d8
add r14d, 0xf2331955
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, r13
mov rdx, rsi
mov r8, r12
call fcn.1400fe010
add rsp, 0x30
cmp r14d, 0xc0c67510
ja 0x1400c2cf3
mov r14, qword [r13 + 8]
nop dword [rax + rax]
mov eax, dword [0x141dd5648]
or eax, dword [0x141dd564c]
imul eax, eax, 0x4844651b
add eax, 0x7af22397
imul rax, rbx
shr rax, 0x3e
cmp eax, 0x6656f8f2
jae 0x1400c2d50
mov r9, qword [rbp - 8]
sub rsp, 0x20
mov ecx, 5
mov rdx, r14
mov r8d, r12d
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
add rsp, 0x20
test eax, eax
jns 0x1400c2f55
mov esi, eax
mov qword [r15], 0
mov eax, dword [0x141dd5678]
or eax, dword [0x141dd567c]
or eax, 0x5f7e1e46
add eax, 0x9120a725
or eax, 0x17b86d7a
cmp eax, 0xd2f87cb1
jbe 0x1400c2de0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call rdi
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [str.__E_]
xor edx, edx
div dword [0x141dd5684]
imul r13d, eax, 0xc6b8ea79
add r13d, 0x6ef8aaea
or r13d, 0x93912713
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call rdi
add rsp, 0x20
cmp r13d, 0x4cbe8e17
jb 0x1400c2de0
mov rcx, qword [r15]
and esi, 0xefffffff
cmp esi, 0xc0000004
jne 0x1400c3119
mov r9, qword [rbp - 8]
mov eax, dword [r9]
mov edx, dword [0x141dd59b8]
sub edx, dword [0x141dd59bc]
add edx, 0x91a7eb8d
imul rdx, rdx, 0x6b02c0ad
shr rdx, 0x3d
or edx, 0x8c5e0ca4
cmp edx, 0x524a5db8
jb 0x1400c2e37
add r12, r12
mov edx, dword [0x141dd59c0]
imul edx, dword [0x141dd59c4]
add edx, 0x86d00e06
and edx, 0x9d3a135e
lea r13d, [rax + 0x2800]
test eax, eax
cmove r13, r12
cmp edx, 0x61d5c572
jb 0x1400c2e65
test rcx, rcx
je 0x1400c2eca
mov rax, qword [rcx]
mov edx, dword [0x141dd59c8]
sub edx, dword [0x141dd59cc]
or edx, 0xc7250221
and edx, 0xe7e73777
cmp edx, 0x4be7ba9
je 0x1400c2e9b
sub rsp, 0x20
call qword [rax + 0x10]
add rsp, 0x20
mov r9, qword [rbp - 8]
mov eax, dword [0x141dd59d0]
xor edx, edx
div dword [0x141dd59d4]
mov eax, dword [0x141dd59d8]
xor edx, edx
div dword [0x141dd59dc]
and eax, 0x1d82e82e
add eax, 0x4ddfa2b3
imul rax, rax, 0x39409737
shr rax, 0x3b
cmp eax, 0xadd91835
ja 0x1400c2ed8
mov rcx, qword [rbp - 0x58]
mov rsi, qword [rcx + 0x10]
mov rax, qword [rcx]
mov r12, r13
mov r13, rcx
mov dword [r9], 0
sub rax, rsi
cmp r12, rax
ja 0x1400c2cd0
jmp 0x1400c2d7a
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, r13
mov rdx, rsi
mov r8, r12
call fcn.1400fe010
add rsp, 0x30
jmp 0x1400c2cf3
mov eax, dword [0x141dd5650]
sub eax, dword [0x141dd5654]
add eax, 0x43f0899c
imul rax, rax, 0x610c6bb5
shr rax, 0x38
xor eax, 0xec69ecf3
cmp eax, 0xb347fbb
mov rdi, qword [rbp - 0x30]
jae 0x1400c2fa7
mov qword [r13 + 0x10], r12
mov qword [rdi], 0
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
mov r15, qword [rbp - 0x18]
nop dword [rax + rax]
mov eax, dword [0x141dd5658]
and eax, dword [0x141dd565c]
imul esi, eax, 0xf0189de1
and esi, 0xbe84f556
mov qword [r13 + 0x10], r12
mov qword [rdi], 0
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp esi, 0x8d3c7184
je 0x1400c2fb0
mov r9, rax
test rax, rax
je 0x1400c3282
mov eax, dword [0x141dd5670]
and eax, dword [0x141dd5674]
and eax, 0xed414a70
shr eax, 1
imul rax, rax, 0x9acc467
shr rax, 0x36
cmp eax, 0x714d47be
mov r12, qword [rbp - 0x10]
mov r8, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x20]
jne 0x1400c303e
mov qword [rcx], 0x1f4
mov qword [rcx + 8], r9
xor eax, eax
mov qword [rcx], 0x1f4
mov qword [rcx + 8], r9
test al, al
jne 0x1400c3040
mov qword [rcx + 0x10], 0
xor esi, esi
xor edi, edi
jmp 0x1400c3077
lea rax, [r14 + rdi]
mov qword [r9 + rsi*8], rax
inc rsi
mov qword [rcx + 0x10], rsi
add rdi, rbx
test rbx, rbx
je 0x1400c30c3
mov eax, dword [0x141dd5688]
xor edx, edx
div dword [0x141dd568c]
mov eax, dword [0x141dd5690]
xor edx, edx
div dword [0x141dd5694]
or eax, 0xbbe124f1
cmp eax, 0xcc2b5319
je 0x1400c3085
mov ebx, dword [r14 + rdi]
cmp rsi, qword [rcx]
jne 0x1400c3060
sub rsp, 0x20
call fcn.1400c4d70
mov rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x40]
add rsp, 0x20
mov r9, qword [rcx + 8]
jmp 0x1400c3060
lea r14, [r15 + 0x40]
nop word [rax + rax]
mov eax, dword [0x141dd5698]
xor eax, dword [0x141dd569c]
or eax, 0xb9efcf97
and eax, 0xbdffdfb7
cmp eax, 0x812c6d70
je 0x1400c30d0
mov eax, dword [0x141dd56a0]
mov ecx, dword [0x141dd56a4]
add eax, ecx
add eax, 0xcfacc39c
and eax, 0x48025022
cmp eax, 0xebd2d341
mov rcx, qword [rbp - 0x28]
jbe 0x1400c32cc
jmp 0x1400c32ed
test rcx, rcx
mov rsi, qword [rbp - 0x58]
je 0x1400c3190
mov eax, 0x80e9d0b9
nop word [rax + rax]
mov edx, dword [0x141dd5988]
xor edx, dword [0x141dd598c]
or edx, 0x4aa18af3
add edx, 0xb2a697da
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x3ed43e51
ja 0x1400c3130
mov rax, qword [rcx]
nop dword [rax + rax]
mov edx, dword [0x141dd5990]
imul edx, dword [0x141dd5994]
add edx, 0x12068f89
cmp edx, 0x398b5c2c
jb 0x1400c3160
sub rsp, 0x20
call qword [rax + 0x10]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd5998]
add eax, dword [0x141dd599c]
and eax, 0xc3ec8e1
imul eax, eax, 0x9532105a
or eax, 0x8db9d811
cmp eax, 0xb0544bfa
ja 0x1400c3190
cmp qword [rsi], 0
je 0x1400c3250
mov rsi, qword [0x141ddb260]
mov eax, dword [0x141dd59a0]
and eax, dword [0x141dd59a4]
imul eax, eax, 0x449c45f8
xor eax, 0x8c15227a
and eax, 0xccb52e7a
cmp eax, 0x64891621
jne 0x1400c31fd
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd59a8]
and eax, dword [0x141dd59ac]
add eax, 0x898a70f6
imul rax, rax, 0x6988b793
shr rax, 0x3a
imul ebx, eax, 0x744bf4dd
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0x1af232a8
jb 0x1400c3210
nop dword [rax]
mov eax, dword [0x141dd59b0]
imul eax, dword [0x141dd59b4]
or eax, 0xdfaf6f1f
imul rcx, rax, 0xc26fa3f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0xc3ccb8d
ja 0x1400c3250
jmp 0x1400c4cda
mov eax, dword [0x141dd5660]
xor eax, dword [0x141dd5664]
cmp eax, 0x63a9e9c9
jne 0x1400c32a0
ud2
mov eax, dword [0x141dd5668]
and eax, dword [0x141dd566c]
and eax, 0xd817f616
imul rax, rax, 0x3cc4b995
shr rax, 0x3a
add eax, 0x51fe54aa
ud2
ud2
mov eax, dword [0x141dd56a8]
or eax, dword [0x141dd56ac]
or eax, 0x46d2ff14
imul eax, eax, 0x97267227
mov qword [r8], r14
cmp eax, 0x3a12fc61
jne 0x1400c32f2
mov qword [r8], r14
jmp 0x1400c32cc
cmp byte [rcx], 0
je 0x1400c33e2
mov eax, dword [0x141dd56b0]
xor edx, edx
div dword [0x141dd56b4]
add eax, 0xbaa4c3e6
mov ecx, 0xaf64bc11
imul rcx, rax
shr rcx, 0x3b
cmp ecx, 0x16dd0b47
jne 0x1400c3335
sub rsp, 0x20
mov rcx, r15
xor edx, edx
call fcn.1400c50a0
add rsp, 0x20
mov esi, 0xee3963dd
nop word [rax + rax]
mov edi, dword [0x141dd56b8]
or edi, dword [0x141dd56bc]
add edi, 0x9ad338a3
imul rdi, rsi
shr rdi, 0x3c
sub rsp, 0x20
mov rcx, r15
xor edx, edx
call fcn.1400c50a0
add rsp, 0x20
cmp edi, 0xb5429c64
je 0x1400c3340
nop word cs:[rax + rax]
mov eax, dword [0x141dd56c0]
or eax, dword [0x141dd56c4]
imul eax, eax, 0xa87ea2cf
imul rcx, rax, 0x23f15015
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xa323e95d
je 0x1400c3380
mov rsi, qword [r15 + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd56c8]
xor eax, dword [0x141dd56cc]
or eax, 0x62102401
xor eax, 8
and eax, 0x7232248b
cmp eax, 0x2cf7c9bb
jb 0x1400c33c0
jmp 0x1400c33e4
xor esi, esi
mov r15, qword [rbp - 0x60]
mov eax, dword [0x141dd56d0]
sub eax, dword [0x141dd56d4]
add eax, 0xa6cc824e
or eax, 0xe9b92553
and eax, 0xeffbb5d3
cmp eax, 0xe265be5
mov rdi, qword [rbp - 0x70]
jb 0x1400c3455
mov eax, dword [0x141dd56d8]
xor eax, dword [0x141dd56dc]
xor eax, 0xdc557b46
mov ebx, 0x810a77bd
imul rbx, rax
shr rbx, 0x3e
xor ebx, 0x71f2233
mov qword [r15], rsi
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
cmp ebx, 0x6f14b71b
jbe 0x1400c3472
mov qword [r15], rsi
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
jmp 0x1400c340e
mov r8, qword [rdi]
movabs rax, 0x19db1ded53e8000
cmp r8, rax
jge 0x1400c3490
xor ecx, ecx
mov rdi, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x30]
jmp 0x1400c34f8
movabs rax, 0xfe624e212ac18000
add r8, rax
mov r9d, 0xb69e4947
movabs r10, 0xd6bf94d5e57a42bd
mov rdi, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dd56e0]
sub eax, dword [0x141dd56e4]
imul r11d, eax, 0xedc5c5f6
or r11d, 0x1ec2fd95
imul r11, r9
shr r11, 0x3f
mov rax, r8
mul r10
cmp r11d, 0xc7022bcf
ja 0x1400c34c0
mov rcx, rdx
shr rcx, 0x17
mov eax, dword [0x141dd56e8]
sub eax, dword [0x141dd56ec]
imul eax, eax, 0x30b18c8
add eax, 0x26d93bf8
imul rax, rax, 0xc3125af
shr rax, 0x3b
cmp eax, 0xed6d4b4f
mov r8, qword [rbp - 0x80]
mov r9, qword [rbp - 0x78]
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x20]
jbe 0x1400c3572
mov qword [r9], rcx
mov rax, qword [r11 + 0x10]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [r11]
movups xmmword [r8], xmm0
mov qword [r12], 0
mov qword [r12 + 8], 8
mov qword [r12 + 0x10], 0
mov qword [r8 + 0x18], rbx
mov qword [r8 + 0x20], r10
mov qword [r8 + 0x28], rdi
mov qword [r8 + 0x30], r15
mov qword [r8 + 0x38], r9
mov rsi, r8
add rsi, 0x18
nop dword [rax]
mov eax, dword [0x141dd56f0]
xor edx, edx
div dword [0x141dd56f4]
xor eax, 0x216b2311
add eax, 0x60dab2ea
mov qword [r9], rcx
mov rdx, qword [r11 + 0x10]
mov qword [r8 + 0x10], rdx
movdqu xmm0, xmmword [r11]
movdqu xmmword [r8], xmm0
mov qword [r12], 0
mov qword [r12 + 8], 8
mov qword [r12 + 0x10], 0
mov qword [r8 + 0x18], rbx
mov qword [r8 + 0x20], r10
mov qword [r8 + 0x28], rdi
mov qword [r8 + 0x30], r15
mov qword [r8 + 0x38], r9
cmp eax, 0x5f494b67
jb 0x1400c3580
mov rdx, qword [r8]
mov rbx, qword [r8 + 0x10]
cmp rdx, rbx
jb 0x1400c39ac
mov qword [rbp - 0x28], r14
mov rdi, qword [r8 + 8]
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400c3600
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r14, qword [rax + 0x38]
test r14, r14
mov qword [rbp - 8], rdx
je 0x1400c364b
add r14, 0x110
nop
mov eax, dword [0x141dd5708]
and eax, dword [str.L_aZ.]
imul eax, eax, 0xb05afed4
cmp eax, 0x28b6fe13
je 0x1400c3630
jmp 0x1400c369c
xor eax, eax
test al, al
je 0x1400c3660
sub rsp, 0x20
call fcn.140078440
add rsp, 0x20
nop
mov r12d, dword [0x141dd5700]
add r12d, dword [0x141dd5704]
xor r12d, 0xdcf36c0e
add r12d, 0xe3524590
and r12d, 0xa928c5c9
sub rsp, 0x20
call fcn.140078440
add rsp, 0x20
cmp r12d, 0x55c5aece
jb 0x1400c3660
mov r14, rax
mov eax, dword [0x141dd5710]
or eax, dword [0x141dd5714]
add eax, 0x49c7cad6
and eax, 0xd4230620
cmp eax, 0xbf8fb1b8
jbe 0x1400c3702
mov rax, qword [r14]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rbx, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
mov rcx, qword [rbp - 0x38]
mov rdx, rbx
xor r8d, r8d
call fcn.1400c73c0
add rsp, 0x40
mov r12d, 0xc794279f
mov r15, qword [rbp - 0x38]
nop dword [rax]
mov eax, dword [0x141dd5718]
xor edx, edx
div dword [0x141dd571c]
imul r13d, eax, 0x837e9f18
xor r13d, 0x498eff35
imul r13, r12
shr r13, 0x3e
mov rax, qword [r14]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rbx, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
mov rcx, r15
mov rdx, rbx
xor r8d, r8d
call fcn.1400c73c0
add rsp, 0x40
cmp r13d, 0xa43b140c
ja 0x1400c3710
cmp qword [rbp - 8], 0
mov r15, qword [rbp - 0x10]
je 0x1400c38a1
mov eax, dword [0x141dd5720]
add eax, dword [str.x_fxL]
or eax, 0x61561232
xor eax, 0xae3c1037
imul rax, rax, 0x39dd8009
shr rax, 0x3d
cmp eax, 0xe96f6623
jne 0x1400c37d0
mov rax, qword [0x141ddb260]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5728]
and eax, dword [0x141dd572c]
add eax, 0x5df09f21
or eax, 0xe158890d
imul eax, eax, 0x9bef5a03
mov rsi, qword [0x141ddb260]
cmp eax, 0x3b7272be
je 0x1400c37d0
mov eax, dword [0x141dd5730]
sub eax, dword [0x141dd5734]
xor eax, 0xf02d9181
imul eax, eax, 0x81c65abe
cmp eax, 0x5a97a63e
jne 0x1400c382e
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov r14d, dword [0x141dd5738]
add r14d, dword [0x141dd573c]
or r14d, 0xc9b60a2c
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r14d, 0x25ef616c
je 0x1400c3840
mov eax, dword [0x141dd5740]
add eax, dword [0x141dd5744]
xor eax, 0x64ebb9e6
add eax, 0xb5d4d66a
imul rcx, rax, 0x82ff101
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x6a7d12ab
je 0x1400c3870
mov r9, qword [rbp - 0x38]
mov rdi, qword [r9]
nop dword [rax + rax]
mov eax, dword [0x141dd5748]
xor edx, edx
div dword [0x141dd574c]
and eax, 0x41410613
or eax, 0x3a9ef86c
imul r8d, eax, 0x6745a64d
mov rax, qword [r9 + 0x10]
test rax, rax
sete cl
test rdi, rdi
sete dl
cmp r8d, 0xcbc11f58
ja 0x1400c38b0
or dl, cl
jne 0x1400c39d2
xor ebx, ebx
mov rcx, rdi
nop word cs:[rax + rax]
mov r11d, dword [0x141dd5750]
or r11d, dword [0x141dd5754]
add r11d, 0x6eb62e20
or r11d, 0x26e84fa0
imul rdx, r11, 0x6a939a5d
shr rdx, 0x20
sub r11d, edx
shr r11d, 1
add r11d, edx
shr r11d, 0x1a
mov rdx, qword [rcx + 0x18]
mov r8, rax
dec r8
sete r9b
test rdx, rdx
sete r10b
cmp r11d, 0xf14620db
je 0x1400c3900
mov rax, r8
add rbx, qword [rcx + 0x10]
or r9b, r10b
mov rcx, rdx
je 0x1400c3900
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c3970
test rbx, rbx
je 0x1400c39d2
mov eax, dword [0x141dd5758]
add eax, dword [0x141dd575c]
xor eax, 0x15221852
or eax, 0x2818e2a8
shr eax, 1
imul rax, rax, 0x4a2cc603
shr rax, 0x3c
cmp eax, 0x3e2e17fe
jbe 0x1400c4cef
jmp 0x1400c4d41
ud2
test rdi, rdi
je 0x1400c3f80
movabs rax, 0x8000000000000001
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
dec rax
mov qword [rbp - 8], rax
nop word cs:[rax + rax]
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x1400c3a70
mov eax, dword [0x141dd5768]
xor edx, edx
div dword [0x141dd576c]
mov eax, dword [0x141dd5770]
or eax, dword [0x141dd5774]
imul eax, eax, 0xfaae3019
or eax, 0xb5b6bdf1
cmp eax, 0x40fc1130
jb 0x1400c3a17
xor eax, eax
test al, al
jne 0x1400c3a66
nop dword [rax + rax]
mov eax, dword [0x141dd5778]
sub eax, dword [0x141dd577c]
imul eax, eax, 0x625085be
add eax, 0xce3520cc
mov qword [rbx + 0x20], 0
cmp eax, 0xe6d1c223
jbe 0x1400c3a70
mov qword [rbx + 0x20], 0
jmp 0x1400c3a40
mov eax, dword [0x141dd5780]
xor eax, dword [0x141dd5784]
add eax, 0x3bd5dce
xor eax, 0x26024840
and eax, 0xb6f26d42
cmp eax, 0xeab1031c
ja 0x1400c3a70
mov r13, qword [rdi]
mov r14, qword [rdi + 8]
mov r15, qword [rdi + 0x10]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r13, qword [rbp - 8]
je 0x1400c3c46
mov eax, dword [0x141dd57f8]
sub eax, dword [0x141dd57fc]
xor eax, 0x99c8f465
add eax, 0x3cfacc64
xor eax, 0xdadb8e0
cmp eax, 0xa6abe854
ja 0x1400c3abe
mov eax, dword [0x141dd5800]
xor edx, edx
div dword [0x141dd5804]
xor eax, 0x82483258
or eax, 0x2db0cd85
cmp eax, 0x7d553797
je 0x1400c3ae0
mov eax, dword [0x141dd5808]
xor edx, edx
div dword [0x141dd580c]
mov eax, dword [0x141dd5810]
and eax, dword [0x141dd5814]
imul eax, eax, 0xca461d43
xor eax, 0x344825fd
cmp eax, 0xff0a5581
ja 0x1400c3b0d
mov rcx, qword [rbp - 0x10]
mov rax, qword [rcx]
mov rsi, qword [rcx + 0x10]
sub rax, rsi
cmp rax, r15
jb 0x1400c3c14
imul rcx, rsi, 0x158
mov rdi, qword [rbp - 0x10]
add rcx, qword [rdi + 8]
imul r8, r15, 0x158
sub rsp, 0x20
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
add rsi, r15
mov qword [rdi + 0x10], rsi
test r13, r13
je 0x1400c3be0
mov rsi, qword [0x141ddb260]
xor eax, eax
test al, al
je 0x1400c3ba0
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call r12
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd5818]
xor edx, edx
div dword [str.JZ_bk]
imul edi, eax, 0x34f0c82a
or edi, 0x422e724d
xor edi, 0xbc088007
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call r12
add rsp, 0x20
cmp edi, 0xf1e031bb
ja 0x1400c3ba0
nop dword [rax + rax]
mov eax, dword [0x141dd5820]
imul eax, dword [0x141dd5824]
add eax, 0x40eff9dd
and eax, 0x856693fc
xor eax, 0x7ce52886
cmp eax, 0x4f03ef30
jb 0x1400c3be0
mov rdi, rbx
test rbx, rbx
jne 0x1400c3a00
jmp 0x1400c3f80
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rdi, qword [rbp - 0x10]
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call fcn.1400fe010
add rsp, 0x30
mov rsi, qword [rdi + 0x10]
jmp 0x1400c3b42
test rbx, rbx
je 0x1400c3f80
xor r14d, r14d
mov ecx, 0xc901cb8d
mov r15d, 0xd20162d1
nop dword [rax]
mov eax, dword [0x141dd5788]
xor edx, edx
div dword [0x141dd578c]
mov eax, dword [0x141dd5790]
or eax, dword [0x141dd5794]
or eax, 0xff7d75da
add eax, 0x24706721
cmp eax, 0xf4d5933a
ja 0x1400c3c6e
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x1400c3d40
nop dword [rax + rax]
mov eax, dword [0x141dd5798]
imul eax, dword [0x141dd579c]
add eax, 0x766fe1e0
or eax, 0xb56ae20b
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x7476d7a1
ja 0x1400c3ca0
mov eax, dword [0x141dd57a0]
add eax, dword [0x141dd57a4]
xor eax, 0x54172631
add eax, 0xdaef6a6b
cmp eax, 0xc21fe198
ja 0x1400c3d15
nop word cs:[rax + rax]
mov eax, dword [0x141dd57a8]
and eax, dword [0x141dd57ac]
or eax, 0x408040c
and eax, 0xbf298c6e
mov qword [rdx + 0x20], 0
cmp eax, 0xbf0275b6
jne 0x1400c3d20
mov qword [rdx + 0x20], 0
jmp 0x1400c3cf0
mov eax, dword [0x141dd57b0]
sub eax, dword [str.:g_]
imul rax, r15
shr rax, 0x3e
add eax, 0x6258f37
cmp eax, 0x87da69dd
ja 0x1400c3d20
mov qword [rbp - 8], rdx
mov rdi, qword [rbx + 8]
mov r13, qword [rbx + 0x10]
test r13, r13
je 0x1400c3d80
mov rsi, rdi
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, rsi
call fcn.1400c96b0
add rsp, 0x20
add rsi, 0x158
dec r13
jne 0x1400c3d60
nop dword [rax]
mov eax, dword [0x141dd57b8]
xor edx, edx
div dword [0x141dd57bc]
xor eax, 0x21dd1834
imul eax, eax, 0x18cfd98e
add eax, 0x1c48bc6a
cmp eax, 0x800d7dc2
jb 0x1400c3d80
mov rax, qword [rbx]
nop dword [rax + rax]
mov ecx, dword [0x141dd57c0]
add ecx, dword [0x141dd57c4]
imul ecx, ecx, 0x60aab363
add ecx, 0x2860f51a
and ecx, 0xe36eec9d
cmp ecx, 0x3007a61a
jb 0x1400c3db0
test rax, rax
je 0x1400c3ec1
mov eax, dword [0x141dd57c8]
xor eax, dword [0x141dd57cc]
imul eax, eax, 0x2a889a8
xor eax, 0x201aa035
or eax, 0x8fc517c8
cmp eax, 0x7d0f91a7
jb 0x1400c3f70
nop word cs:[rax + rax]
mov eax, dword [0x141dd57d0]
sub eax, dword [0x141dd57d4]
add eax, 0x32448b1d
imul rax, rax, 0x753edc07
shr rax, 0x3d
xor eax, 0x34f16393
mov rsi, qword [0x141ddb260]
cmp eax, 0x781f934e
ja 0x1400c3f70
mov eax, dword [0x141dd57d8]
sub eax, dword [0x141dd57dc]
add eax, 0x17a08303
or eax, 0xcc11134c
add eax, 0x83786745
cmp eax, 0xf35fb449
jbe 0x1400c3e80
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd57e0]
mov ecx, dword [0x141dd57e4]
lea r13d, [rax + rcx]
add r13d, 0x13d50fe5
and r13d, 0x648d323e
xor r13d, 0x5343d8a7
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r13d, 0x6c81bbfc
jb 0x1400c3e80
mov rsi, qword [0x141ddb260]
mov eax, dword [0x141dd57e8]
sub eax, dword [0x141dd57ec]
imul eax, eax, 0x65e20014
add eax, 0xc61559c0
mov ecx, 0xad9d920d
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xc7479ac4
jbe 0x1400c3f10
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd57f0]
xor eax, dword [0x141dd57f4]
xor eax, 0x39465a0c
imul edi, eax, 0xaeeeb850
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
cmp edi, 0x537f5e04
jb 0x1400c3f10
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400c3f50
mov rax, qword [rbp - 8]
mov rbx, rax
test rax, rax
mov ecx, 0xc901cb8d
jne 0x1400c3c60
jmp 0x1400c3f80
mov rax, qword [0x141ddb260]
jmp 0x1400c3e10
mov eax, dword [0x141dd5828]
imul eax, dword [0x141dd582c]
imul eax, eax, 0x304ca0c0
add eax, 0xe53a15c0
cmp eax, 0x7fc6b81e
ja 0x1400c3f80
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov qword [rbp - 0x30], rcx
mov r13, qword [rax + 8]
mov rax, qword [rax + 0x10]
mov r15, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x48]
imul rcx, rax, 0x158
add rcx, r13
mov qword [rbp - 0x20], rcx
nop dword [rax + rax]
mov ecx, dword [0x141dd5830]
imul ecx, dword [0x141dd5834]
add ecx, 0xb27c0611
and ecx, 0x59c0110
cmp ecx, 0xe03c0707
ja 0x1400c3fd0
mov rdi, r13
test rax, rax
je 0x1400c479d
xor ecx, ecx
pcmpeqd xmm6, xmm6
mov rsi, r13
mov qword [rbp - 0x38], r13
nop word [rax + rax]
mov eax, dword [0x141dd5838]
xor edx, edx
div dword [0x141dd583c]
nop
test cl, cl
jne 0x1400c4020
lea rdi, [rsi + 0x158]
mov rax, qword [rsi]
cmp rax, 2
je 0x1400c479d
mov qword [rbp - 0x10], rax
mov qword [rbp - 0x40], rdi
mov r14, qword [rsi + 0xe0]
mov eax, dword [0x141dd5858]
and eax, dword [0x141dd585c]
imul eax, eax, 0x4d772636
cmp eax, 0xbc669dda
je 0x1400c40a4
mov eax, dword [0x141dd5860]
xor eax, dword [0x141dd5864]
or eax, 0x4cbbc8d8
imul rdi, rax, 0x1bbd6efb
shr rdi, 0x38
or edi, 0xeb6a8d8b
lea rdx, [rsi + 8]
sub rsp, 0x20
mov r8d, 0xd8
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp edi, 0xefc2f1c1
jne 0x1400c40c0
lea rdx, [rsi + 8]
sub rsp, 0x20
mov r8d, 0xd8
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
jmp 0x1400c4060
add rsi, 0xe8
movups xmm0, xmmword [rsi + 0x60]
mov rax, qword [rbp - 0x50]
movups xmmword [rax + 0x60], xmm0
movups xmm0, xmmword [rsi + 0x50]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rax + 0x40], xmm0
movdqu xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmm2, xmmword [rsi + 0x20]
movups xmm3, xmmword [rsi + 0x30]
movups xmmword [rax + 0x30], xmm3
movdqu xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov eax, dword [0x141dd5868]
and eax, dword [0x141dd586c]
cmp eax, 0xd1ca7381
jne 0x1400c4140
mov rcx, qword [r15 + 0x60]
mov rdx, qword [r15 + 0x68]
sub rsp, 0x20
mov r8, r14
call fcn.1400c9f50
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd5870]
or eax, dword [0x141dd5874]
imul ebx, eax, 0x3da37786
add ebx, 0xb45b977a
mov rsi, qword [r15 + 0x60]
mov r12, qword [r15 + 0x68]
sub rsp, 0x20
mov rcx, rsi
mov rdx, r12
mov r8, r14
call fcn.1400c9f50
add rsp, 0x20
cmp ebx, 0x175e643
jb 0x1400c4140
mov rdi, rax
cmp qword [r15 + 0x50], 0
jne 0x1400c4225
mov eax, dword [0x141dd5878]
xor edx, edx
div dword [0x141dd587c]
mov ecx, 0xaa8178a3
imul rax, rcx
shr rax, 0x3f
or eax, 0xafdf9bf6
cmp eax, 0x71ab7847
jb 0x1400c4781
mov r13, qword [rbp - 0x28]
mov ebx, dword [0x141dd5880]
imul ebx, dword [0x141dd5884]
or ebx, 0xc0100288
and ebx, 0xd1b8c288
xor ebx, 0x2c2125c4
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
mov r8, r12
call fcn.1400fe300
add rsp, 0x20
cmp ebx, 0xee5fe425
jb 0x1400c41bb
nop dword [rax + rax]
mov eax, dword [0x141dd5888]
xor eax, dword [0x141dd588c]
imul rax, rax, 0x5869801
shr rax, 0x3a
not eax
and eax, 0xc1512487
cmp eax, 0x32af7802
jb 0x1400c4200
mov rsi, qword [r15 + 0x40]
mov r12, qword [r15 + 0x48]
mov rbx, rdi
shr rbx, 0x39
movd xmm0, ebx
mov eax, dword [0x141dd5890]
or eax, dword [0x141dd5894]
add eax, 0xbb91facf
or eax, 0xe7444c84
add eax, 0x67b6d63e
cmp eax, 0xe270e7df
ja 0x1400c4238
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor ecx, ecx
xor eax, eax
and rdi, r12
movdqu xmm1, xmmword [rsi + rdi]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb edx, xmm2
test edx, edx
je 0x1400c4340
nop dword [rax + rax]
tzcnt r8d, edx
add r8, rdi
and r8, r12
neg r8
imul r8, r8, 0x160
cmp qword [rsi + r8 - 0x160], r14
je 0x1400c4410
nop word cs:[rax + rax]
mov r8d, dword [0x141dd58a0]
xor r8d, dword [0x141dd58a4]
imul r8d, r8d, 0x598516b8
xor r8d, 0xd89eb13
imul r8d, r8d, 0xd3079cab
cmp r8d, 0xb8d32792
ja 0x1400c42c0
lea r8d, [rdx - 1]
and r8d, edx
mov edx, r8d
nop word cs:[rax + rax]
mov r8d, dword [0x141dd58a8]
add r8d, dword [0x141dd58ac]
and r8d, 0xc2b0ce17
imul r8d, r8d, 0xf69b19b9
or r8d, 0x4dedadf4
cmp r8d, 0x5c6c8399
je 0x1400c4300
test dx, dx
jne 0x1400c4290
nop word cs:[rax + rax]
mov edx, dword [0x141dd5898]
imul edx, dword [0x141dd589c]
add edx, 0xdeb3dcc8
xor edx, 0x692f5f34
imul rdx, rdx, 0x3d644835
shr rdx, 0x3d
cmp edx, 0xb3b5512
ja 0x1400c4340
cmp rax, 1
mov eax, 1
je 0x1400c43ba
mov eax, dword [0x141dd58b0]
xor edx, edx
div dword [0x141dd58b4]
mov eax, dword [0x141dd58b8]
imul eax, dword [0x141dd58bc]
and eax, 0x21041020
add eax, 0x6595abd8
cmp eax, 0x159838b5
jb 0x1400c4385
pmovmskb edx, xmm1
tzcnt r9d, edx
add r9, rdi
xor eax, eax
test dx, dx
setne al
and r9, r12
pcmpeqb xmm1, xmm6
pmovmskb edx, xmm1
test edx, edx
jne 0x1400c456a
add rdi, rcx
add rdi, 0x10
add rcx, 0x10
nop word cs:[rax + rax]
mov edx, dword [0x141dd58c0]
xor edx, dword [0x141dd58c4]
imul edx, edx, 0x320f2bca
or edx, 0xd1feb282
imul edx, edx, 0xafa6d370
cmp edx, 0x7830b59a
jb 0x1400c43e0
jmp 0x1400c426c
add rsi, r8
lea rdx, [rsi - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rdi, qword [rbp - 0x68]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov qword [rsi - 0x158], rax
lea rcx, [rsi - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x48]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rsi - 0x78], r14
mov rax, qword [rbp - 0x50]
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rsi - 0x10], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rsi - 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rsi - 0x30], xmm0
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [rsi - 0x40], xmm3
movdqu xmmword [rsi - 0x50], xmm2
movdqu xmmword [rsi - 0x60], xmm1
movdqu xmmword [rsi - 0x70], xmm0
cmp qword [rdi], 2
je 0x1400c44e0
sub rsp, 0x20
mov rcx, qword [rbp - 0x68]
call fcn.1400c96b0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd58e8]
xor eax, dword [0x141dd58ec]
xor eax, 0x3fabeffe
add eax, 0xddca9f94
cmp eax, 0xec6060d8
jb 0x1400c44c0
nop dword [rax]
mov eax, dword [0x141dd58f0]
add eax, dword [0x141dd58f4]
and eax, 0xb0068540
cmp eax, 0x5a3d3a00
je 0x1400c44e0
mov r15, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
mov r13, qword [rbp - 0x38]
nop dword [rax + rax]
mov eax, dword [0x141dd58f8]
sub eax, dword [str.v8__n]
add eax, 0x4375b19a
or eax, 0x7f4f639a
imul rax, rax, 0x13bd1389
shr rax, 0x3a
cmp eax, 0xb57efad7
ja 0x1400c4510
nop dword [rax + rax]
mov eax, dword [0x141dd5900]
sub eax, dword [0x141dd5904]
cmp eax, 0xaed474fe
je 0x1400c4540
mov rsi, rcx
cmp rcx, qword [rbp - 0x20]
mov ecx, 0
jne 0x1400c4010
jmp 0x1400c4830
movzx r15d, byte [rsi + r9]
test r15b, r15b
js 0x1400c45ad
movdqa xmm0, xmmword [rsi]
pmovmskb eax, xmm0
tzcnt r9d, eax
mov eax, dword [0x141dd58c8]
xor edx, edx
div dword [0x141dd58cc]
nop
mov eax, dword [0x141dd58d0]
or eax, dword [0x141dd58d4]
and eax, 0xbbc6d364
cmp eax, 0x456a9657
je 0x1400c4590
movzx r15d, byte [rsi + r9]
mov eax, dword [0x141dd58d8]
xor eax, dword [0x141dd58dc]
or eax, 0xffe7f7ff
add eax, 0x3e68765b
cmp eax, 0xe00d8673
jbe 0x1400c4690
mov eax, r15d
and al, 1
movzx eax, al
mov rdx, qword [rbp - 0x18]
sub qword [rdx + 0x50], rax
mov rax, r9
neg rax
lea rcx, [r9 - 0x10]
and rcx, r12
mov byte [rsi + r9], bl
mov byte [rcx + rsi + 0x10], bl
inc qword [rdx + 0x58]
imul rdi, rax, 0x160
mov qword [rsi + rdi - 0x160], r14
mov rax, qword [rbp - 0x10]
mov qword [rsi + rdi - 0x158], rax
lea rcx, [rsi + rdi]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x48]
mov r13, r9
call sub.VCRUNTIME140.dll_memcpy
mov r9, r13
add rsp, 0x20
mov qword [rsi + rdi - 0x78], r14
mov rax, qword [rbp - 0x50]
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [rsi + rdi - 0x70], xmm0
movdqu xmmword [rsi + rdi - 0x60], xmm1
movdqu xmmword [rsi + rdi - 0x50], xmm2
movups xmmword [rsi + rdi - 0x40], xmm3
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rsi + rdi - 0x30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rsi + rdi - 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x60]
movdqu xmmword [rsi + rdi - 0x10], xmm0
nop word [rax + rax]
mov eax, dword [0x141dd58e0]
or eax, dword [0x141dd58e4]
mov ecx, r15d
and cl, 1
movzx ecx, cl
mov rdx, qword [rbp - 0x18]
sub qword [rdx + 0x50], rcx
and eax, 0x4d0efa96
lea rcx, [r9 - 0x10]
and rcx, r12
mov byte [rsi + r9], bl
mov byte [rcx + rsi + 0x10], bl
inc qword [rdx + 0x58]
xor eax, 0x76b0be2f
imul eax, eax, 0xaee4b21b
mov dword [rbp - 8], eax
mov rax, r9
neg rax
mov r13, rbx
imul rbx, rax, 0x160
mov qword [rsi + rbx - 0x160], r14
mov rax, qword [rbp - 0x10]
mov qword [rsi + rbx - 0x158], rax
lea rcx, [rsi + rbx]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x48]
mov rdi, r9
call sub.VCRUNTIME140.dll_memcpy
mov r9, rdi
add rsp, 0x20
mov qword [rsi + rbx - 0x78], r14
mov rax, qword [rbp - 0x50]
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [rsi + rbx - 0x70], xmm0
movdqu xmmword [rsi + rbx - 0x60], xmm1
movdqu xmmword [rsi + rbx - 0x50], xmm2
movups xmmword [rsi + rbx - 0x40], xmm3
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rsi + rbx - 0x30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rsi + rbx - 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x60]
movdqu xmmword [rsi + rbx - 0x10], xmm0
mov rbx, r13
cmp dword [rbp - 8], 0x8872ae61
jb 0x1400c4690
jmp 0x1400c44e0
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rsi
mov r8, r12
call fcn.1400fe300
add rsp, 0x20
jmp 0x1400c41b7
mov r8d, 0xcdafd19b
mov rcx, qword [rbp - 0x20]
sub rcx, rdi
movabs r9, 0xbe82fa0be82fa0bf
nop word cs:[rax + rax]
mov eax, dword [0x141dd5840]
mov edx, dword [0x141dd5844]
lea r10d, [rax + rdx]
add r10d, 0x1a4bffa2
imul r10, r8
shr r10, 0x3d
add r10d, 0x3f32e146
mov rax, rcx
mul r9
cmp r10d, 0x6299b4df
ja 0x1400c47c0
cmp qword [rbp - 0x20], rdi
je 0x1400c4830
mov rsi, rdx
shr rsi, 8
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, rdi
call fcn.1400c96b0
add rsp, 0x20
add rdi, 0x158
dec rsi
jne 0x1400c4810
nop dword [rax]
mov eax, dword [0x141dd5848]
xor eax, dword [0x141dd584c]
and eax, 0xa02a454
xor eax, 0x800468d5
or eax, 0x34f91120
cmp eax, 0xdd157cbb
je 0x1400c4830
cmp qword [rbp - 0x30], 0
je 0x1400c48d0
mov rsi, qword [0x141ddb260]
mov eax, dword [0x141dd5850]
imul eax, dword [0x141dd5854]
xor eax, 0x4478bc0a
imul rax, rax, 0x150e9b0b
shr rax, 0x3b
xor eax, 0x119fa3f1
cmp eax, 0x2a862cb8
jbe 0x1400c489f
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call rbx
add rsp, 0x20
test dil, dil
jne 0x1400c48b0
nop word [rax + rax]
mov eax, dword [0x141dd5930]
add eax, dword [0x141dd5934]
imul eax, eax, 0x1e752bcd
add eax, 0x8db37b90
cmp eax, 0x3ee2cc87
ja 0x1400c48d0
mov r12, qword [r15 + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5938]
add eax, dword [0x141dd593c]
or eax, 0x5f8537d
imul eax, eax, 0xb1c312dd
and eax, 0x49db04d6
cmp eax, 0x12a81b3e
je 0x1400c4900
test r12, r12
je 0x1400c4bc0
mov rcx, qword [rbp - 0x18]
mov eax, dword [0x141dd5940]
and eax, dword [0x141dd5944]
or eax, 0x5200750f
cmp eax, 0xc604d19b
je 0x1400c4930
mov rdi, qword [rcx + 0x40]
lea rbx, [rdi + 0x10]
mov eax, dword [0x141dd5948]
xor eax, dword [0x141dd594c]
imul eax, eax, 0x1a21efaf
add eax, 0xbff258e1
cmp eax, 0xc2e38669
jb 0x1400c4950
movdqa xmm0, xmmword [rdi]
pmovmskb r14d, xmm0
not r14d
mov rax, qword [rcx + 0x48]
mov qword [rbp - 8], rax
mov r15, qword [rcx + 0x50]
pcmpeqd xmm6, xmm6
mov r13, rdi
mov rsi, r12
jmp 0x1400c49d4
mov byte [rdi + r8], dl
mov byte [r9 + rdi + 0x10], dl
dec r12
mov rax, qword [rbp - 0x18]
mov qword [rax + 0x58], r12
sub rsp, 0x20
call fcn.1400c96b0
add rsp, 0x20
lea eax, [r14 - 1]
and eax, r14d
mov r14d, eax
dec rsi
je 0x1400c4bc0
test r14w, r14w
jne 0x1400c4a1b
nop word [rax + rax]
mov eax, dword [0x141dd5950]
xor eax, dword [0x141dd5954]
or eax, 0xfeeffebc
xor eax, 0xcebbba26
cmp eax, 0x21cf612f
jb 0x1400c49e0
add r13, 0xffffffffffffea00
movdqa xmm0, xmmword [rbx]
add rbx, 0x10
pmovmskb r14d, xmm0
cmp r14w, 0xffff
je 0x1400c49e0
not r14d
mov eax, dword [0x141dd5958]
add eax, dword [0x141dd595c]
imul eax, eax, 0xa5b56d2f
cmp eax, 0x74b56857
je 0x1400c4a81
nop word cs:[rax + rax]
mov edx, dword [0x141dd5960]
and edx, dword [0x141dd5964]
add edx, 0x194c670d
xor edx, 0x130500c3
or edx, 0xa8a2e934
tzcnt eax, r14d
neg rax
imul rcx, rax, 0x160
movzx eax, byte [r13 + rcx - 4]
mov byte [r13 + rcx - 4], 0
cmp edx, 0xd137ddb
jae 0x1400c4aa0
tzcnt eax, r14d
neg rax
imul rax, rax, 0x160
mov byte [r13 + rax - 4], 0
jmp 0x1400c4a40
test al, al
jne 0x1400c49c1
lea rax, [rcx + r13]
add rcx, r13
add rcx, 0xfffffffffffffea8
mov edx, dword [0x141dd5968]
mov r8d, dword [0x141dd596c]
add edx, r8d
add edx, 0x5f511df9
xor edx, 0x3360aeec
add edx, 0x5e2dd2a8
cmp edx, 0x9920df2
jb 0x1400c4ab6
mov r8, rdi
sub r8, rax
sar r8, 5
movabs rax, 0x2e8ba2e8ba2e8ba3
imul r8, rax
lea r9, [r8 - 0x10]
and r9, qword [rbp - 8]
movdqu xmm0, xmmword [rdi + r9]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb eax, xmm0
test eax, eax
je 0x1400c4b20
bsr ax, ax
xor eax, 0xf
jmp 0x1400c4b24
mov ax, 0x10
movdqu xmm0, xmmword [rdi + r8]
pcmpeqb xmm0, xmm6
pmovmskb edx, xmm0
or edx, 0x10000
tzcnt edx, edx
add eax, edx
mov dl, 0x80
cmp ax, 0xf
ja 0x1400c49a0
mov eax, dword [0x141dd5970]
xor edx, edx
div dword [0x141dd5974]
add eax, 0x19f20571
or eax, 0x5fdfac47
cmp eax, 0x6bc06648
je 0x1400c4b4a
mov eax, dword [0x141dd5978]
and eax, dword [0x141dd597c]
inc r15
xor eax, 0x58de8ff1
add eax, 0x45b0c15
cmp eax, 0x7f0d14ae
mov r10, qword [rbp - 0x18]
ja 0x1400c4bb8
nop dword [rax]
mov eax, dword [0x141dd5980]
sub eax, dword [0x141dd5984]
imul eax, eax, 0x5cb92a7c
add eax, 0x1d152cb0
mov qword [r10 + 0x50], r15
mov dl, 0xff
cmp eax, 0x91fbb8f0
jbe 0x1400c49a0
mov qword [r10 + 0x50], r15
jmp 0x1400c4b90
mov eax, dword [0x141dd5908]
and eax, dword [0x141dd590c]
add eax, 0xe175db85
xor eax, 0xd5a487a1
cmp eax, 0xa7d7bf31
ja 0x1400c4bc0
mov rcx, qword [rbp - 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5910]
add eax, dword [0x141dd5914]
xor eax, 0x80ac7257
imul rax, rax, 0x52349c3
shr rax, 0x3a
cmp eax, 0x62c14891
ja 0x1400c4bf0
cmp qword [rcx], 0
je 0x1400c4c70
mov r8, qword [rcx + 8]
mov eax, dword [0x141dd5918]
sub eax, dword [0x141dd591c]
xor eax, 0x3900a033
and eax, 0x3d70eb7b
xor eax, 0x4cbc5437
cmp eax, 0x5d0d82e
jae 0x1400c4c46
mov rax, qword [0x141ddb260]
xor eax, eax
nop dword [rax + rax]
mov rcx, qword [0x141ddb260]
test al, al
jne 0x1400c4c50
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd5920]
or eax, dword [0x141dd5924]
imul rax, rax, 0x5c0c5231
shr rax, 0x3e
imul eax, eax, 0xb7d9aca1
add eax, 0x76034262
cmp eax, 0x132b19b9
jb 0x1400c4c70
mov eax, 0x964268e5
mov ecx, 0xa603a7bb
nop word cs:[rax + rax]
mov edx, dword [0x141dd5928]
xor edx, dword [0x141dd592c]
imul rdx, rax
shr rdx, 0x3e
imul edx, edx, 0xfc398180
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0x7845c978
ja 0x1400c4cb0
movaps xmm6, xmmword [rbp]
lea rsp, [rbp + 0x18]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd5760]
and eax, dword [0x141dd5764]
or eax, 0xf60a8081
imul rsi, rax, 0x69ecf235
shr rsi, 0x3a
or esi, 0x80cfddc9
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r15
xor edx, edx
mov r8, rbx
call fcn.1400fe010
add rsp, 0x30
cmp esi, 0xf538c60
jae 0x1400c39d2
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r15
xor edx, edx
mov r8, rbx
call fcn.1400fe010
add rsp, 0x30
jmp 0x1400c4cef