Function at 0x1400c3500
Capabilities:
Encode data using xor
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x398
movdqa xmmword [rsp + 0x380], xmm6
mov r14, rdx
mov eax, dword [0x141dd6748]
xor edx, edx
div dword [0x141dd674c]
mov rbx, rcx
add eax, 0x79899bb7
mov ecx, 0x8586b991
imul rcx, rax
shr rcx, 0x3b
or ecx, 0x36db6af5
cmp ecx, 0x99f4ff
jb 0x1400c3583
mov esi, dword [0x141dd6750]
xor esi, dword [0x141dd6754]
add esi, 0xda1d5ae8
xor esi, 0xada7cf5c
movzx eax, byte [0x141ddc4f8]
mov edx, 0x80000
xor ecx, ecx
call fcn.1400c0a10
cmp esi, 0x65ea4042
jae 0x1400c3598
movzx eax, byte [0x141ddc4f8]
mov edx, 0x80000
xor ecx, ecx
call fcn.1400c0a10
jmp 0x1400c3550
mov rdi, rax
test rax, rax
je 0x1400c35de
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x78], 0x80000
mov eax, dword [0x141dd6768]
and eax, dword [0x141dd676c]
add eax, 0x26df449a
mov ecx, 0xc2a0ad43
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x937c32fd
jne 0x1400c3639
jmp 0x1400c3671
mov eax, dword [0x141dd6758]
and eax, dword [0x141dd675c]
add eax, 0x9d92ee85
xor eax, 0x4c00082
and eax, 0x54c7aad6
cmp eax, 0xbcdbd5c8
jne 0x1400c3610
ud2
mov eax, dword [0x141dd6760]
xor edx, edx
div dword [0x141dd6764]
imul eax, eax, 0xd4726e80
and eax, 0x8559fe00
add eax, 0x93fa2b1
ud2
mov eax, dword [0x141dd6770]
imul eax, dword [0x141dd6774]
or eax, 0x173052dc
imul rax, rax, 0x37a74c05
shr rax, 0x3c
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], 0
cmp eax, 0x5a060bde
jne 0x1400c3687
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], 0
jmp 0x1400c3639
xor ebp, ebp
mov eax, 0x80000
lea r12, [rsp + 0x2a8]
mov r13, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov ebx, 0xbc57bb37
mov r14d, 0x80000
mov dword [rsp + 0x2a8], 0
sub rax, rbp
cmp r14, rax
ja 0x1400c3908
nop
mov eax, dword [0x141dd6778]
xor eax, dword [0x141dd677c]
imul rax, rax, 0x69a53df
shr rax, 0x39
or eax, 0xa7de7ebe
cmp eax, 0x82443ce2
jae 0x1400c3700
mov ecx, 5
mov rdx, rdi
mov r8d, r14d
mov r9, r12
call r13
nop word cs:[rax + rax]
mov esi, dword [0x141dd6780]
and esi, dword [str._nL0]
or esi, 0x10220808
xor esi, 0x20000200
and esi, 0x30a2ca28
mov ecx, 5
mov rdx, rdi
mov r8d, r14d
mov r9, r12
call r13
cmp esi, 0x1da3943d
jb 0x1400c3700
mov r15d, eax
test eax, eax
jns 0x1400c39ba
mov qword [rsp + 0x150], 0
xor ecx, ecx
lea rdx, [rsp + 0x150]
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov rbp, qword [rsp + 0x150]
and r15d, 0xefffffff
nop dword [rax]
mov eax, dword [0x141dd67c0]
or eax, dword [0x141dd67c4]
and eax, 0x110801
or eax, 0x962232f8
imul rax, rbx
shr rax, 0x3e
cmp eax, 0x17f53c89
ja 0x1400c3770
cmp r15d, 0xc0000004
jne 0x1400c3ce9
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b18]
xor eax, dword [0x141dd6b1c]
xor eax, 0x2ca64339
add eax, 0xca70d5ae
cmp eax, 0x8bbd36fd
jb 0x1400c37b0
mov eax, dword [rsp + 0x2a8]
mov ecx, dword [0x141dd6b20]
or ecx, dword [0x141dd6b24]
and ecx, 0xc8042088
or ecx, 0x17db1f55
xor ecx, 0xc67b5fd0
cmp ecx, 0x6400f27e
ja 0x1400c37d4
mov rcx, r14
add rcx, r14
lea r14d, [rax + 0x2800]
test eax, eax
cmove r14, rcx
test rbp, rbp
je 0x1400c38a0
mov rcx, qword [rbp]
mov eax, dword [0x141dd6b28]
xor edx, edx
div dword [0x141dd6b2c]
add eax, 0xa3b8c809
shr eax, 2
imul rax, rax, 0x14881947
shr rax, 0x3a
cmp eax, 0x372fe051
je 0x1400c381a
mov eax, dword [0x141dd6b30]
imul eax, dword [0x141dd6b34]
mov rsi, qword [rcx + 0x10]
and eax, 0x280a0ac0
add eax, 0x8db766cf
cmp eax, 0x4571717
jae 0x1400c3870
mov rcx, rbp
call rsi
nop dword [rax]
mov r15d, dword [0x141dd6b38]
sub r15d, dword [0x141dd6b3c]
add r15d, 0x38174f03
or r15d, 0x27d647f7
mov rcx, rbp
call rsi
cmp r15d, 0x59b6558c
je 0x1400c3870
nop word [rax + rax]
mov eax, dword [0x141dd6b40]
xor eax, dword [0x141dd6b44]
and eax, 0xd3b9207d
add eax, 0x5bdeb9bd
cmp eax, 0x7d271810
ja 0x1400c38a0
nop dword [rax]
mov eax, dword [0x141dd6b48]
xor edx, edx
div dword [0x141dd6b4c]
add eax, 0x6a341470
xor eax, 0x4ab2a287
add eax, 0x958ab8e
cmp eax, 0x92ec7c50
ja 0x1400c38c0
mov rbp, qword [rsp + 0x88]
mov rax, qword [rsp + 0x78]
mov dword [rsp + 0x2a8], 0
sub rax, rbp
cmp r14, rax
jbe 0x1400c36c0
mov eax, dword [0x141dd6788]
or eax, dword [0x141dd678c]
and eax, 0x26c1f9f4
imul eax, eax, 0xb4fc7557
cmp eax, 0x5a71680b
lea rdi, [rsp + 0x78]
jne 0x1400c3950
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, rdi
mov rdx, rbp
mov r8, r14
call fcn.1400fe550
nop dword [rax + rax]
mov esi, dword [0x141dd6790]
and esi, dword [0x141dd6794]
or esi, 0xffd94004
add esi, 0xbd28153c
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, rdi
mov rdx, rbp
mov r8, r14
call fcn.1400fe550
cmp esi, 0xc3c8a7d7
ja 0x1400c392b
nop dword [rax]
mov eax, dword [0x141dd6798]
add eax, dword [0x141dd679c]
and eax, 0x698c
xor eax, 0x28acec77
cmp eax, 0x2083ec4
jbe 0x1400c3990
mov rdi, qword [rsp + 0x80]
jmp 0x1400c36c0
mov eax, dword [0x141dd67a0]
imul eax, dword [0x141dd67a4]
imul eax, eax, 0x81f8fdc1
cmp eax, 0xcf07bf1e
jne 0x1400c39fb
mov qword [rsp + 0x88], r14
mov qword [rsp + 0xa0], 0
movzx eax, byte [0x141ddc4f8]
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400c0a10
mov esi, 0xc9fd1307
mov eax, dword [0x141dd67a8]
add eax, dword [0x141dd67ac]
imul rax, rsi
shr rax, 0x3e
imul ebx, eax, 0x3d65d036
xor ebx, 0xfd72bf17
mov qword [rsp + 0x88], r14
mov qword [rsp + 0xa0], 0
movzx eax, byte [0x141ddc4f8]
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400c0a10
cmp ebx, 0x73a75efb
jb 0x1400c3a00
test rax, rax
je 0x1400c3e6f
mov qword [rsp + 0xa8], 0x1f4
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 0
xor esi, esi
lea r14, [rsp + 0xa8]
mov ebx, 0xa051172f
mov r15d, 0xa648053f
xor r13d, r13d
xor r12d, r12d
nop word cs:[rax + rax]
mov ecx, dword [0x141dd67c8]
imul ecx, dword [0x141dd67cc]
imul rdx, rcx, 0x1dd846a5
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add ecx, 0x46b40203
cmp ecx, 0x175574e9
jb 0x1400c3aa0
mov ebp, dword [rdi + r12]
cmp r13, qword [rsp + 0xa8]
jne 0x1400c3b39
mov rcx, r14
call fcn.1400c5a30
mov eax, dword [0x141dd67d8]
xor edx, edx
div dword [0x141dd67dc]
or eax, 0x103600
and eax, 0x80553e10
cmp eax, 0xad5f37c7
ja 0x1400c3ae5
mov rax, qword [rsp + 0xb0]
nop dword [rax]
mov ecx, dword [0x141dd67e0]
imul ecx, dword [0x141dd67e4]
imul ecx, ecx, 0xb11bfe1d
imul rcx, rbx
shr rcx, 0x3f
add ecx, 0x7f093e01
cmp ecx, 0xeb0d5c7f
jae 0x1400c3b10
lea rcx, [rdi + r12]
mov edx, dword [0x141dd67d0]
or edx, dword [0x141dd67d4]
imul rdx, r15
shr rdx, 0x3e
xor edx, 0xc6f0c627
imul edx, edx, 0xd3555c70
cmp edx, 0x4d69a8e7
jae 0x1400c3b80
mov qword [rax + r13*8], rcx
lea rdx, [r13 + 1]
mov qword [rsp + 0xb8], rdx
nop word cs:[rax + rax]
mov qword [rax + r13*8], rcx
lea rdx, [r13 + 1]
mov qword [rsp + 0xb8], rdx
test sil, sil
jne 0x1400c3b80
add r12, rbp
mov r13, rdx
test rbp, rbp
jne 0x1400c3aa0
mov ecx, 0xc7d831d1
mov rdi, qword [rsp + 0x48]
lea rbx, [rdi + 0x40]
mov r15, qword [rsp + 0x50]
nop word [rax + rax]
mov eax, dword [0x141dd67e8]
xor edx, edx
div dword [0x141dd67ec]
imul rax, rcx
shr rax, 0x3f
or eax, 0xebefb5fe
cmp eax, 0x86247638
jb 0x1400c3bc0
mov eax, dword [0x141dd67f0]
xor edx, edx
div dword [0x141dd67f4]
or eax, 0x23bdb8ca
imul eax, eax, 0xed28f85c
or eax, 0xc73be079
cmp eax, 0x438b8e32
jne 0x1400c3c10
mov qword [rsp + 0xc0], rbx
nop
mov eax, dword [0x141dd67f8]
and eax, dword [0x141dd67fc]
xor eax, 0xc0040802
or eax, 0x24787549
and eax, 0xf47f7fdb
mov qword [rsp + 0xc0], rbx
cmp eax, 0xc5f3a924
je 0x1400c3c10
mov eax, dword [0x141dd6800]
xor edx, edx
div dword [0x141dd6804]
nop dword [rax + rax]
mov eax, dword [0x141dd6808]
imul eax, dword [0x141dd680c]
add eax, 0x8c1354f
and eax, 0x511c5f39
cmp eax, 0x739e47ce
je 0x1400c3c50
cmp byte [r15], 0
je 0x1400c3da9
mov eax, dword [0x141dd6810]
or eax, dword [0x141dd6814]
add eax, 0x7990af57
and eax, 0x6ee04887
add eax, 0xd7f6d2cc
cmp eax, 0xddd47417
jbe 0x1400c3ca4
mov rcx, rdi
xor edx, edx
call fcn.1400c5d20
xor esi, esi
nop word cs:[rax + rax]
mov rcx, rdi
xor edx, edx
call fcn.1400c5d20
test sil, sil
jne 0x1400c3cb0
nop
mov eax, dword [0x141dd6818]
xor edx, edx
div dword [0x141dd681c]
imul eax, eax, 0x413d9c45
add eax, 0x5f46f28e
cmp eax, 0xd10be04c
ja 0x1400c3cc0
mov rax, qword [rdi + 0x10]
jmp 0x1400c3dab
test rbp, rbp
je 0x1400c3d36
nop
mov eax, dword [0x141dd6af8]
xor edx, edx
div dword [0x141dd6afc]
or eax, 0x474770a6
cmp eax, 0x12a0c18a
je 0x1400c3cf0
mov rax, qword [rbp]
nop
mov ecx, dword [0x141dd6b00]
xor ecx, dword [0x141dd6b04]
and ecx, 0x21402002
xor ecx, 0xaf98ee41
cmp ecx, 0xc3c5334
jb 0x1400c3d10
mov rcx, rbp
call qword [rax + 0x10]
mov rax, qword [rsp + 0x78]
nop dword [rax + rax]
mov ecx, dword [0x141dd6b08]
sub ecx, dword [0x141dd6b0c]
imul ecx, ecx, 0xdbedf0a4
or ecx, 0x43a5ef6b
and ecx, 0xebadffef
cmp ecx, 0xf05bf10
jb 0x1400c3d40
test rax, rax
je 0x1400c3d80
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd6b10]
imul eax, dword [0x141dd6b14]
imul eax, eax, 0x40efa345
or eax, 0x104022a2
and eax, 0x704066b3
cmp eax, 0xaad22f4d
jae 0x1400c3d80
jmp 0x1400c3ed0
xor eax, eax
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], 0
lea rcx, [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
mov rax, qword [rsp + 0x150]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x1400c3de8
xor edx, edx
jmp 0x1400c3e43
movabs rcx, 0xfe624e212ac18000
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6820]
sub ecx, dword [0x141dd6824]
or ecx, 0xffffb9ff
cmp ecx, 0xa6fea4d3
jb 0x1400c3e00
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
nop dword [rax + rax]
mov eax, dword [0x141dd6828]
xor eax, dword [0x141dd682c]
cmp eax, 0x5377243f
je 0x1400c3e30
mov eax, dword [0x141dd6830]
add eax, dword [0x141dd6834]
imul eax, eax, 0x2c808dbd
add eax, 0x5ecfd5f4
and eax, 0x7e58b709
cmp eax, 0x7dda2848
jne 0x1400c3f64
jmp 0x1400c401d
xor eax, eax
test al, al
jne 0x1400c3ea0
mov eax, dword [0x141dd67b0]
imul eax, dword [0x141dd67b4]
add eax, 0xee7f0086
imul rax, rax, 0x499c4da5
shr rax, 0x3d
add eax, 0xf2acd52
ud2
ud2
mov eax, dword [0x141dd6b50]
add eax, dword [0x141dd6b54]
and eax, 0x208021
or eax, 0xef565f06
imul eax, eax, 0x3aa90ec7
cmp eax, 0xef12979d
je 0x1400c3ed0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b58]
imul eax, dword [0x141dd6b5c]
imul eax, eax, 0xca59fe36
add eax, 0xc2d401a2
cmp eax, 0x57b54d0b
jb 0x1400c3f00
nop
mov eax, dword [0x141dd6b60]
sub eax, dword [0x141dd6b64]
xor eax, 0xb0002a1e
or eax, 0x4b44c1c1
imul rax, rax, 0x1941d985
shr rax, 0x3c
cmp eax, 0x7e6b1995
je 0x1400c3f20
movaps xmm6, xmmword [rsp + 0x380]
add rsp, 0x398
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [0x141dd6838]
imul eax, dword [0x141dd683c]
mov r14, qword [rsp + 0xb8]
mov qword [rsp + 0x160], r14
movdqu xmm0, xmmword [rsp + 0xa8]
movdqa xmmword [rsp + 0x150], xmm0
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0x168], rcx
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], r15
lea rcx, [rsp + 0x148]
mov qword [rsp + 0x180], rcx
lea rcx, [rsp + 0xc8]
mov qword [rsp + 0x188], rcx
or eax, 0xd7febdef
imul eax, eax, 0x722e5309
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 8
mov qword [rsp + 0xe0], 0
cmp eax, 0xa5491c66
jne 0x1400c40b6
mov qword [rsp + 0xc8], rdx
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x160], rax
movups xmm0, xmmword [rsp + 0xa8]
movaps xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 8
mov qword [rsp + 0xe0], 0
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], r15
lea rax, [rsp + 0x148]
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x188], rax
jmp 0x1400c3f64
mov rdi, qword [rsp + 0x150]
cmp rdi, r14
jb 0x1400c41cf
mov qword [rsp + 0x90], rbx
lea r12, [rsp + 0x168]
mov rbx, qword [rsp + 0x158]
nop
mov eax, dword [0x141dd6858]
and eax, dword [0x141dd685c]
imul eax, eax, 0xc532807
cmp eax, 0x38eae569
je 0x1400c40e0
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r15, qword [rax + 0x38]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c4120
test r15, r15
je 0x1400c4198
mov eax, dword [0x141dd6878]
xor edx, edx
div dword [0x141dd687c]
mov ecx, 0x94a27633
add r15, 0x110
nop word cs:[rax + rax]
mov eax, dword [0x141dd6880]
xor edx, edx
div dword [0x141dd6884]
imul eax, eax, 0xd0467fa
shr eax, 1
imul rax, rcx
shr rax, 0x3c
cmp eax, 0x98d90faa
je 0x1400c4150
nop word cs:[rax + rax]
mov eax, dword [0x141dd6888]
or eax, dword [0x141dd688c]
cmp eax, 0x5a1ca0d7
je 0x1400c4180
jmp 0x1400c42a3
mov eax, dword [0x141dd6860]
imul eax, dword [0x141dd6864]
xor eax, 0xa8124375
add eax, 0x92f5ca61
shr eax, 1
mov ecx, 0xd78619a3
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x43b9e15b
jbe 0x1400c4249
jmp 0x1400c4276
mov eax, dword [0x141dd6840]
mov ecx, dword [0x141dd6844]
add eax, ecx
add eax, 0x1ac3255c
or eax, 0x9d69e114
add eax, 0x47ab8839
cmp eax, 0x50aa3070
ja 0x1400c4217
mov eax, dword [0x141dd6848]
and eax, dword [0x141dd684c]
and eax, 0x6e8b129d
add eax, 0x4f1666e2
or eax, 0xb7b95e35
ud2
ud2
mov eax, dword [0x141dd6868]
xor edx, edx
div dword [0x141dd686c]
imul esi, eax, 0xc8e0ea2f
or esi, 0x4e5dbdef
xor esi, 0x867af424
call fcn.14007a040
cmp esi, 0xe83bdd19
jbe 0x1400c427d
call fcn.14007a040
jmp 0x1400c4249
mov r15, rax
mov eax, dword [0x141dd6870]
add eax, dword [0x141dd6874]
imul eax, eax, 0x8bcb2f57
add eax, 0x18112afb
or eax, 0x4d50b5b7
cmp eax, 0xa121bbd7
jbe 0x1400c4280
mov eax, dword [0x141dd6890]
imul eax, dword [0x141dd6894]
add eax, 0x64e69d32
cmp eax, 0xf8399844
ja 0x1400c4327
mov eax, dword [0x141dd6898]
or eax, dword [0x141dd689c]
imul esi, eax, 0xc5582ae6
add esi, 0x59b417de
or esi, 0xda7ea8bc
mov rax, qword [r15]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp r14, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x2a8]
mov rdx, r14
xor r8d, r8d
call fcn.1400c8590
cmp esi, 0x4163691d
jae 0x1400c4371
mov rax, qword [r15]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp r14, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x2a8]
mov rdx, r14
xor r8d, r8d
call fcn.1400c8590
jmp 0x1400c42bc
test rdi, rdi
je 0x1400c43f2
mov eax, dword [0x141dd68a0]
sub eax, dword [0x141dd68a4]
add eax, 0xc2496286
xor eax, 0xce797c2b
cmp eax, 0xed5096af
jbe 0x1400c43a0
mov rax, qword [0x141ddc4e0]
nop word [rax + rax]
mov eax, dword [0x141dd68a8]
and eax, dword [0x141dd68ac]
imul eax, eax, 0x19afe6cb
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x1b128e15
je 0x1400c43a0
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dd68b0]
and eax, dword [0x141dd68b4]
add eax, 0xe7856ea8
or eax, 0x24dec155
add eax, 0x3a05743e
cmp eax, 0xc5ae4591
ja 0x1400c43d0
mov eax, 0xb521822d
nop word [rax + rax]
mov ecx, dword [0x141dd68b8]
sub ecx, dword [0x141dd68bc]
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0x90a288c7
imul rcx, rcx, 0x1f8af37b
shr rcx, 0x3c
cmp ecx, 0x89348e84
ja 0x1400c4400
mov r15, qword [rsp + 0x2a8]
test r15, r15
je 0x1400c44d0
mov rax, qword [rsp + 0x2b8]
test rax, rax
je 0x1400c44d0
xor r8d, r8d
mov rcx, r15
nop word cs:[rax + rax]
mov edx, dword [0x141dd68c0]
imul edx, dword [0x141dd68c4]
imul r11, rdx, 0x1ed47d15
shr r11, 0x39
add r11d, 0x7ea99301
xor r11d, 0x623a5635
mov rdx, qword [rcx + 0x18]
cmp rax, 1
sete r9b
test rdx, rdx
sete r10b
cmp r11d, 0x59408003
ja 0x1400c4460
add r8, qword [rcx + 0x10]
or r9b, r10b
dec rax
mov rcx, rdx
test r9b, r9b
je 0x1400c4460
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c44c0
test r8, r8
jne 0x1400c551a
nop dword [rax]
mov eax, dword [0x141dd68c8]
and eax, dword [0x141dd68cc]
xor eax, 0x3748c77f
add eax, 0xb164730c
cmp eax, 0xf06f88af
ja 0x1400c44d0
test r15, r15
je 0x1400c4be0
xor ecx, ecx
mov ebp, 0xb3b51481
mov r14d, 0xd096c823
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c4521
mov r15, rbx
test rbx, rbx
mov ecx, 0
je 0x1400c4be0
mov rbx, qword [r15 + 0x18]
test rbx, rbx
je 0x1400c4564
mov eax, dword [0x141dd68d8]
xor eax, dword [0x141dd68dc]
xor eax, 0xd3834028
shr eax, 3
imul rax, rax, 0x2182a10d
shr rax, 0x38
xor eax, 0xc270eaad
cmp eax, 0x46e9c9de
jb 0x1400c452a
mov qword [rbx + 0x20], 0
nop dword [rax]
test cl, cl
jne 0x1400c4560
mov eax, dword [0x141dd68e0]
xor edx, edx
div dword [0x141dd68e4]
mov eax, dword [0x141dd68e8]
add eax, dword [0x141dd68ec]
shr eax, 2
imul rax, rax, 0x40463f2b
shr rax, 0x3a
or eax, 0xa9ffcf79
cmp eax, 0x6af1edfd
jb 0x1400c4572
mov rax, qword [r15]
mov qword [rsp + 0x50], rax
mov eax, dword [0x141dd68f0]
xor eax, dword [0x141dd68f4]
or eax, 0x6d2df10f
xor eax, 0x4e56b613
imul rax, rbp
shr rax, 0x3e
cmp eax, 0x9f026422
ja 0x1400c45a0
mov r12, qword [r15 + 8]
mov r13, qword [r15 + 0x10]
mov eax, dword [0x141dd68f8]
xor eax, dword [0x141dd68fc]
or eax, 0x733f0682
add eax, 0xf1002621
and eax, 0xf06efa1e
cmp eax, 0xd517c22d
jbe 0x1400c4600
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, r15
call rdi
nop dword [rax]
mov eax, dword [0x141dd6900]
imul eax, dword [0x141dd6904]
imul esi, eax, 0xc04b1ee1
add esi, 0x61b12bff
imul rsi, r14
shr rsi, 0x3e
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, r15
call rdi
cmp esi, 0x88dd11f3
ja 0x1400c4600
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x50], rax
je 0x1400c48bc
mov rax, qword [rsp + 0xd0]
mov r15, qword [rsp + 0xe0]
sub rax, r15
nop
mov ecx, dword [0x141dd6990]
and ecx, dword [0x141dd6994]
xor ecx, 0x1cababec
imul ecx, ecx, 0x85f8c583
xor ecx, 0xe094dcf6
cmp ecx, 0x5b486abf
ja 0x1400c4660
cmp rax, r13
jb 0x1400c46be
mov eax, dword [0x141dd69b0]
imul eax, dword [0x141dd69b4]
imul rax, rax, 0x2bc0efc3
shr rax, 0x3c
imul eax, eax, 0xf56fe87c
add eax, 0x7e1c5700
cmp eax, 0x3a8ed989
jae 0x1400c4790
jmp 0x1400c4810
mov eax, dword [0x141dd6998]
and eax, dword [0x141dd699c]
xor eax, 0x294e31c3
imul eax, eax, 0xda468329
or eax, 0x63bd5845
cmp eax, 0xf751b957
ja 0x1400c475f
mov esi, dword [0x141dd69a0]
or esi, dword [0x141dd69a4]
and esi, 0x10690264
xor esi, 0xc15a2fe2
add esi, 0xc359d7e8
mov qword [rsp + 0x20], 0x158
mov r9d, 8
lea rcx, [rsp + 0xd0]
mov rdx, r15
mov r8, r13
call fcn.1400fe550
cmp esi, 0x4cf274d
jb 0x1400c475f
mov r15, qword [rsp + 0xe0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd69a8]
xor edx, edx
div dword [0x141dd69ac]
and eax, 0xcd5b8dfc
cmp eax, 0xc82b7864
je 0x1400c4740
jmp 0x1400c468b
mov qword [rsp + 0x20], 0x158
mov r9d, 8
lea rcx, [rsp + 0xd0]
mov rdx, r15
mov r8, r13
call fcn.1400fe550
jmp 0x1400c46e1
mov esi, dword [0x141dd69b8]
imul esi, dword [0x141dd69bc]
or esi, 0x8fff94bd
add esi, 0x254ba079
imul rcx, r15, 0x158
add rcx, qword [rsp + 0xd8]
imul r8, r13, 0x158
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r15 + r13]
mov qword [rsp + 0xe0], rax
cmp esi, 0xc1dc4fa9
jb 0x1400c4810
cmp qword [rsp + 0x50], 0
je 0x1400c4510
mov r15, qword [0x141ddc4e0]
mov eax, dword [0x141dd69c0]
add eax, dword [0x141dd69c4]
and eax, 0x642aea71
add eax, 0xb4ea44cb
cmp eax, 0x417b17dd
jae 0x1400c4840
jmp 0x1400c48b0
imul rcx, r15, 0x158
add rcx, qword [rsp + 0xd8]
imul r8, r13, 0x158
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r15 + r13]
mov qword [rsp + 0xe0], rax
jmp 0x1400c4790
mov eax, dword [0x141dd69c8]
xor edx, edx
div dword [0x141dd69cc]
imul esi, eax, 0x1405d989
add esi, 0x59c4802
mov eax, 0x9ef9960d
imul rsi, rax
shr rsi, 0x3e
mov rcx, r15
xor edx, edx
mov r8, r12
call rdi
cmp esi, 0xc368e750
ja 0x1400c48b0
nop dword [rax]
mov eax, dword [0x141dd69d0]
or eax, dword [0x141dd69d4]
or eax, 0x2c48d65a
imul eax, eax, 0x493aa553
or eax, 0xb79acfc7
cmp eax, 0x9e1bbaee
jb 0x1400c4880
jmp 0x1400c4510
mov rcx, r15
xor edx, edx
mov r8, r12
call rdi
jmp 0x1400c4840
test rbx, rbx
je 0x1400c4be0
mov r12d, 0xd4999147
nop dword [rax + rax]
mov r13, qword [rbx + 0x18]
test r13, r13
je 0x1400c490f
mov qword [r13 + 0x20], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6908]
imul eax, dword [0x141dd690c]
imul eax, eax, 0xa5eaa86e
or eax, 0xfffdbfcf
cmp eax, 0x9126d0b1
jb 0x1400c48f0
mov eax, dword [0x141dd6910]
xor edx, edx
div dword [0x141dd6914]
or eax, 0xa9ffffdf
cmp eax, 0xd23ac27
je 0x1400c490f
mov r14, qword [rbx + 8]
mov eax, dword [0x141dd6918]
xor edx, edx
div dword [0x141dd691c]
cmp eax, 0xd34bdbe1
je 0x1400c492d
mov rsi, qword [rbx + 0x10]
mov eax, dword [0x141dd6920]
xor edx, edx
div dword [0x141dd6924]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6928]
sub eax, dword [0x141dd692c]
or eax, 0xf2b443a9
xor eax, 0xb4f7c6bd
add eax, 0x2a1884e1
cmp eax, 0x9918cdd0
ja 0x1400c4960
test rsi, rsi
je 0x1400c49fd
xor r15d, r15d
nop word [rax + rax]
mov eax, dword [0x141dd6930]
sub eax, dword [0x141dd6934]
add eax, 0xf8836474
or eax, 0x9e4e7784
cmp eax, 0xde9bffcb
jne 0x1400c49c0
imul rcx, r15, 0x158
add rcx, r14
call fcn.1400ca8e0
nop dword [rax]
mov ebp, dword [0x141dd6938]
or ebp, dword [0x141dd693c]
and ebp, 0x9987c6a2
xor ebp, 0x457e9aa1
add ebp, 0x7c2bf524
imul rcx, r15, 0x158
add rcx, r14
call fcn.1400ca8e0
cmp ebp, 0x418ff756
jb 0x1400c49c0
inc r15
cmp r15, rsi
jne 0x1400c4990
cmp qword [rbx], 0
je 0x1400c4af8
mov eax, dword [0x141dd6940]
xor edx, edx
div dword [0x141dd6944]
and eax, 0x8f9d1d4
add eax, 0x9fbe5fa8
and eax, 0xecca6ac
cmp eax, 0x589a9d5a
ja 0x1400c4a5a
nop dword [rax + rax]
mov eax, dword [0x141dd6948]
and eax, dword [0x141dd694c]
or eax, 0xa865d850
imul eax, eax, 0x8009820f
add eax, 0xbae7b463
mov r15, qword [0x141ddc4e0]
cmp eax, 0x298d3471
jbe 0x1400c4a70
mov rax, qword [0x141ddc4e0]
jmp 0x1400c4a30
mov eax, dword [0x141dd6950]
sub eax, dword [0x141dd6954]
or eax, 0x40008871
and eax, 0x4508887d
cmp eax, 0xfdba998d
jbe 0x1400c4aa0
mov rcx, r15
xor edx, edx
mov r8, r14
call rdi
nop word [rax + rax]
mov eax, dword [0x141dd6958]
xor eax, dword [0x141dd695c]
xor eax, 0x3f67c17b
imul rax, rax, 0x41155927
shr rax, 0x3d
imul esi, eax, 0x58ba04bd
mov rcx, r15
xor edx, edx
mov r8, r14
call rdi
cmp esi, 0xee267fe4
je 0x1400c4aa0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6960]
or eax, dword [0x141dd6964]
and eax, 0x927ed94
cmp eax, 0x6ecb8b5d
je 0x1400c4ae0
mov eax, dword [0x141dd6968]
imul eax, dword [0x141dd696c]
imul eax, eax, 0x95fb27ca
cmp eax, 0xe3e18b64
jne 0x1400c4b20
mov rax, qword [0x141ddc4e0]
nop dword [rax]
mov eax, dword [0x141dd6970]
and eax, dword [0x141dd6974]
imul eax, eax, 0x61a4a10c
add eax, 0x87b47e84
mov r14, qword [0x141ddc4e0]
cmp eax, 0xb86cc6d9
ja 0x1400c4b20
mov eax, dword [0x141dd6978]
or eax, dword [0x141dd697c]
xor eax, 0x30d20205
and eax, 0x70df562f
cmp eax, 0xf0b6615d
jne 0x1400c4b70
mov rcx, r14
xor edx, edx
mov r8, rbx
call rdi
nop dword [rax]
mov eax, dword [0x141dd6980]
xor eax, dword [0x141dd6984]
and eax, 0x50002518
imul esi, eax, 0xa69a19c2
mov rcx, r14
xor edx, edx
mov r8, rbx
call rdi
cmp esi, 0xd7798e2d
ja 0x1400c4b70
nop dword [rax]
mov eax, dword [0x141dd6988]
xor edx, edx
div dword [0x141dd698c]
and eax, 0x7d8731c9
xor eax, 0xd9f7c766
imul rax, r12
shr rax, 0x38
cmp eax, 0xdc9ce2a2
ja 0x1400c4ba0
mov rbx, r13
test r13, r13
jne 0x1400c48d0
nop word cs:[rax + rax]
mov eax, dword [0x141dd69d8]
and eax, dword [0x141dd69dc]
or eax, 0x7c235db
imul eax, eax, 0xc85ef248
xor eax, 0x63a1fcb2
cmp eax, 0x31ff1f00
jb 0x1400c4be0
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xe0]
imul rdx, rax, 0x158
add rdx, rcx
mov qword [rsp + 0x68], rdx
mov r15, rcx
test rax, rax
mov r14, qword [rsp + 0x48]
mov qword [rsp + 0x60], rcx
je 0x1400c5443
nop dword [rax + rax]
mov eax, dword [0x141dd69e0]
and eax, dword [0x141dd69e4]
xor eax, 0x6000008
or eax, 0x8404210
and eax, 0x1e60de18
cmp eax, 0x4c757441
je 0x1400c4c50
mov eax, 0xd5f219d3
nop word [rax + rax]
mov ecx, dword [0x141dd69e8]
and ecx, dword [0x141dd69ec]
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xf07b6ca8
imul rcx, rcx, 0x3a3d4701
shr rcx, 0x3c
cmp ecx, 0xe1a83991
je 0x1400c4c80
xor ebx, ebx
pcmpeqd xmm6, xmm6
mov r12d, 0xd91bd943
mov rdx, qword [rsp + 0x60]
nop
lea r15, [rdx + 0x158]
mov rax, qword [rdx]
cmp rax, 2
je 0x1400c5443
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x70], r15
mov r13, qword [rdx + 0xe0]
lea rsi, [rdx + 0xe8]
add rdx, 8
mov r8d, 0xd8
lea rcx, [rsp + 0x2a8]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x141dd6a08]
xor eax, dword [0x141dd6a0c]
imul eax, eax, 0x587c3767
mov ecx, 0xb15a3297
imul rax, rcx
shr rax, 0x3e
and eax, 0xfffffffe
cmp eax, 0x9098c35f
jbe 0x1400c4da0
movups xmm0, xmmword [rsi + 0x60]
movaps xmmword [rsp + 0x130], xmm0
movups xmm0, xmmword [rsi + 0x50]
movaps xmmword [rsp + 0x120], xmm0
movups xmm0, xmmword [rsi + 0x40]
movaps xmmword [rsp + 0x110], xmm0
movdqu xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0x20]
movups xmm3, xmmword [rsi + 0x30]
movaps xmmword [rsp + 0x100], xmm3
movaps xmmword [rsp + 0xf0], xmm2
movaps xmmword [rsp + 0xe0], xmm1
movdqa xmmword [rsp + 0xd0], xmm0
mov rcx, qword [r14 + 0x60]
mov rdx, qword [r14 + 0x68]
mov r8, r13
call fcn.1400cb210
nop word cs:[rax + rax]
movups xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmm2, xmmword [rsi + 0x20]
movups xmm3, xmmword [rsi + 0x30]
movaps xmmword [rsp + 0xd0], xmm0
movdqa xmmword [rsp + 0xe0], xmm1
movdqa xmmword [rsp + 0xf0], xmm2
movaps xmmword [rsp + 0x100], xmm3
movups xmm0, xmmword [rsi + 0x40]
movaps xmmword [rsp + 0x110], xmm0
movups xmm0, xmmword [rsi + 0x50]
movaps xmmword [rsp + 0x120], xmm0
movdqu xmm0, xmmword [rsi + 0x60]
movdqa xmmword [rsp + 0x130], xmm0
mov rdi, qword [r14 + 0x60]
mov r15, qword [r14 + 0x68]
mov rcx, rdi
mov rdx, r15
mov r8, r13
call fcn.1400cb210
test bl, bl
jne 0x1400c4da0
mov rbp, rax
cmp qword [r14 + 0x50], 0
je 0x1400c53d0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6a20]
and eax, dword [0x141dd6a24]
imul eax, eax, 0x3fb3fb7
shr eax, 5
imul rax, rax, 0x4126aab
shr rax, 0x34
add eax, 0xa11bafe6
cmp eax, 0x62d8cbd
jb 0x1400c4e30
mov r9, rbp
shr r9, 0x39
mov rdi, qword [r14 + 0x40]
mov r15, qword [r14 + 0x48]
movzx eax, r9b
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor eax, eax
xor ecx, ecx
and rbp, r15
movdqu xmm1, xmmword [rdi + rbp]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb edx, xmm2
test edx, edx
je 0x1400c4f60
nop word cs:[rax + rax]
mov r8d, dword [0x141dd6a28]
xor r8d, dword [str._FxQ_]
and r8d, 0xd5f521fa
imul r8, r12
shr r8, 0x3e
imul r8d, r8d, 0x87a3e38a
cmp r8d, 0xed2924c3
ja 0x1400c4eb0
tzcnt r8d, edx
add r8, rbp
and r8, r15
neg r8
imul r8, r8, 0x160
cmp qword [rdi + r8 - 0x160], r13
je 0x1400c5020
mov r8d, dword [0x141dd6a30]
imul r8d, dword [0x141dd6a34]
or r8d, 0xae3c23b3
cmp r8d, 0x7787c7e3
je 0x1400c4f00
lea r8d, [rdx - 1]
and r8d, edx
mov edx, r8d
xor ebx, ebx
nop dword [rax + rax]
mov r8d, dword [0x141dd6a38]
add r8d, dword [0x141dd6a3c]
or r8d, 0xbdc7a379
cmp r8d, 0x43529213
je 0x1400c4f30
test dx, dx
jne 0x1400c4eb0
nop word [rax + rax]
test bl, bl
jne 0x1400c4f60
cmp rcx, 1
mov ecx, 1
je 0x1400c4fa6
pmovmskb edx, xmm1
tzcnt r10d, edx
mov ecx, dword [0x141dd6a40]
and ecx, dword [0x141dd6a44]
xor ecx, 0x12300503
or ecx, 0x4d0fcafc
cmp ecx, 0x894b1406
je 0x1400c4f78
add r10, rbp
and r10, r15
xor ecx, ecx
test dx, dx
setne cl
mov edx, dword [0x141dd6a48]
or edx, dword [0x141dd6a4c]
or edx, 0xefa4d83
add edx, 0x89c6687b
xor edx, 0x48817d55
cmp edx, 0x55f95290
jb 0x1400c4fa6
pcmpeqb xmm1, xmm6
pmovmskb edx, xmm1
test dx, dx
jne 0x1400c51b7
nop dword [rax]
mov edx, dword [0x141dd6a50]
or edx, dword [0x141dd6a54]
xor edx, 0x1185a06
and edx, 0x6b187b0f
imul edx, edx, 0x3177b66d
cmp edx, 0x2a3a45c3
jb 0x1400c4fe0
add rax, 0x10
add rbp, rax
jmp 0x1400c4e85
add rdi, r8
lea rdx, [rdi - 0x158]
mov r8d, 0x158
lea rcx, [rsp + 0x150]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x58]
mov qword [rdi - 0x158], rax
lea rcx, [rdi - 0x150]
mov r8d, 0xd8
lea rdx, [rsp + 0x2a8]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rdi - 0x78], r13
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rdi - 0x10], xmm0
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rdi - 0x20], xmm0
movaps xmm0, xmmword [rsp + 0x110]
movups xmmword [rdi - 0x30], xmm0
movdqa xmm0, xmmword [rsp + 0xd0]
movdqa xmm1, xmmword [rsp + 0xe0]
movdqa xmm2, xmmword [rsp + 0xf0]
movaps xmm3, xmmword [rsp + 0x100]
movups xmmword [rdi - 0x40], xmm3
movdqu xmmword [rdi - 0x50], xmm2
movdqu xmmword [rdi - 0x60], xmm1
movdqu xmmword [rdi - 0x70], xmm0
cmp qword [rsp + 0x150], 2
je 0x1400c5170
mov eax, dword [0x141dd6a68]
or eax, dword [0x141dd6a6c]
add eax, 0xf49bb42f
mov ecx, 0xdff9f30b
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xaa3eb493
lea rdi, [rsp + 0x150]
jbe 0x1400c5110
mov rcx, rdi
call fcn.1400ca8e0
nop word cs:[rax + rax]
mov esi, dword [0x141dd6a70]
imul esi, dword [0x141dd6a74]
xor esi, 0xa012000
or esi, 0xf54a4bb7
mov rcx, rdi
call fcn.1400ca8e0
cmp esi, 0xe47fb39d
jb 0x1400c5110
nop dword [rax]
mov eax, dword [0x141dd6a78]
imul eax, dword [0x141dd6a7c]
and eax, 0x6c30a370
imul eax, eax, 0x926fc8dd
add eax, 0x8f6d91b0
cmp eax, 0xe83935f4
ja 0x1400c5140
nop word cs:[rax + rax]
mov eax, dword [0x141dd6a80]
xor edx, edx
div dword [0x141dd6a84]
add eax, 0xb26033f6
xor eax, 0xd2b76c1d
imul eax, eax, 0xd5e4c92c
cmp eax, 0xa82e78f8
je 0x1400c5170
mov rax, qword [rsp + 0x70]
mov rdx, rax
cmp rax, qword [rsp + 0x68]
mov r14, qword [rsp + 0x48]
mov ebx, 0
jne 0x1400c4cc0
jmp 0x1400c54d0
movzx ebx, byte [rdi + r10]
test bl, bl
js 0x1400c51d2
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
tzcnt r10d, eax
movzx ebx, byte [rdi + r10]
mov eax, dword [0x141dd6a58]
xor edx, edx
div dword [0x141dd6a5c]
xor eax, 0x28f047e
imul eax, eax, 0x41067510
cmp eax, 0xa67e19fe
jae 0x1400c52d0
mov eax, ebx
and al, 1
movzx eax, al
mov rdx, qword [rsp + 0x48]
sub qword [rdx + 0x50], rax
mov rax, r10
neg rax
lea rcx, [r10 - 0x10]
and rcx, r15
mov byte [rdi + r10], r9b
mov byte [rcx + rdi + 0x10], r9b
inc qword [rdx + 0x58]
imul rsi, rax, 0x160
mov qword [rdi + rsi - 0x160], r13
mov rax, qword [rsp + 0x58]
mov qword [rdi + rsi - 0x158], rax
lea rcx, [rdi + rsi]
add rcx, 0xfffffffffffffeb0
mov r8d, 0xd8
lea rdx, [rsp + 0x2a8]
mov r14, r9
mov rbp, r10
call sub.VCRUNTIME140.dll_memcpy
mov r10, rbp
mov r9, r14
mov qword [rdi + rsi - 0x78], r13
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmm1, xmmword [rsp + 0xe0]
movdqa xmm2, xmmword [rsp + 0xf0]
movaps xmm3, xmmword [rsp + 0x100]
movups xmmword [rdi + rsi - 0x70], xmm0
movdqu xmmword [rdi + rsi - 0x60], xmm1
movdqu xmmword [rdi + rsi - 0x50], xmm2
movups xmmword [rdi + rsi - 0x40], xmm3
movaps xmm0, xmmword [rsp + 0x110]
movups xmmword [rdi + rsi - 0x30], xmm0
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rdi + rsi - 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rdi + rsi - 0x10], xmm0
nop dword [rax]
mov eax, dword [0x141dd6a60]
and eax, dword [0x141dd6a64]
mov ecx, ebx
and cl, 1
movzx ecx, cl
mov rdx, qword [rsp + 0x48]
sub qword [rdx + 0x50], rcx
lea rcx, [r10 - 0x10]
and rcx, r15
mov byte [rdi + r10], r9b
mov byte [rcx + rdi + 0x10], r9b
inc qword [rdx + 0x58]
imul eax, eax, 0xfc969d7b
mov dword [rsp + 0x50], eax
mov rax, r10
neg rax
imul rsi, rax, 0x160
mov qword [rdi + rsi - 0x160], r13
mov rax, qword [rsp + 0x58]
mov qword [rdi + rsi - 0x158], rax
lea rcx, [rdi + rsi]
add rcx, 0xfffffffffffffeb0
mov r8d, 0xd8
lea rdx, [rsp + 0x2a8]
mov r14, r9
mov rbp, r10
call sub.VCRUNTIME140.dll_memcpy
mov r10, rbp
mov r9, r14
mov qword [rdi + rsi - 0x78], r13
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmm1, xmmword [rsp + 0xe0]
movdqa xmm2, xmmword [rsp + 0xf0]
movaps xmm3, xmmword [rsp + 0x100]
movups xmmword [rdi + rsi - 0x70], xmm0
movdqu xmmword [rdi + rsi - 0x60], xmm1
movdqu xmmword [rdi + rsi - 0x50], xmm2
movups xmmword [rdi + rsi - 0x40], xmm3
movaps xmm0, xmmword [rsp + 0x110]
movups xmmword [rdi + rsi - 0x30], xmm0
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rdi + rsi - 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x130]
movdqu xmmword [rdi + rsi - 0x10], xmm0
cmp dword [rsp + 0x50], 0x90af29a0
je 0x1400c52d0
jmp 0x1400c5170
mov rcx, qword [rsp + 0x90]
mov rdx, rdi
mov r8, r15
call fcn.1400fe930
mov ecx, 0xc9b616ab
nop dword [rax + rax]
mov eax, dword [0x141dd6a10]
sub eax, dword [0x141dd6a14]
or eax, 0x3ac9ff71
add eax, 0x752cdd60
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x2ba7ff28
je 0x1400c53f0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6a18]
add eax, dword [0x141dd6a1c]
imul eax, eax, 0xddcc3418
add eax, 0x31c43341
cmp eax, 0x705b61d7
jb 0x1400c5420
jmp 0x1400c4e30
mov r8, qword [rsp + 0x68]
mov rax, r8
sub rax, r15
movabs rcx, 0xbe82fa0be82fa0bf
mul rcx
cmp r8, r15
je 0x1400c54d0
mov rdi, rdx
shr rdi, 8
xor esi, esi
xor ebx, ebx
jmp 0x1400c547f
add r15, 0x158
inc rbx
dec rdi
je 0x1400c54d0
mov eax, dword [0x141dd69f0]
or eax, dword [0x141dd69f4]
or eax, 0xfc5fbf76
and eax, 0xfc7ffffe
cmp eax, 0x86fa844e
je 0x1400c54ad
nop dword [rax]
mov rcx, r15
call fcn.1400ca8e0
test sil, sil
je 0x1400c5470
mov rcx, r15
call fcn.1400ca8e0
mov rcx, r15
call fcn.1400ca8e0
test sil, sil
jne 0x1400c54ad
jmp 0x1400c5470
mov eax, dword [0x141dd69f8]
imul eax, dword [0x141dd69fc]
imul eax, eax, 0xff49500c
or eax, 0x5309482
and eax, 0x2d31d6a2
cmp eax, 0x6798ae38
ja 0x1400c54d0
cmp qword [rsp + 0x98], 0
mov rbx, qword [rsp + 0x60]
je 0x1400c55c0
mov rdi, qword [0x141ddc4e0]
xor eax, eax
test al, al
je 0x1400c556d
jmp 0x1400c55ae
mov qword [rsp + 0x20], 0x158
lea rcx, [rsp + 0xd0]
mov r9d, 8
xor edx, edx
call fcn.1400fe550
mov ecx, 0x97742915
nop dword [rax]
mov eax, dword [0x141dd68d0]
xor edx, edx
div dword [0x141dd68d4]
imul rax, rcx
shr rax, 0x36
imul eax, eax, 0xdae19f7d
add eax, 0x29dab924
cmp eax, 0x3d3ab938
ja 0x1400c5540
jmp 0x1400c44d0
mov eax, dword [0x141dd6a00]
or eax, dword [0x141dd6a04]
or eax, 0xe2e4ff47
imul rcx, rax, 0x5153a89
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul esi, eax, 0x24c73299
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0x3775fd24
jb 0x1400c55c0
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c556d
mov eax, dword [0x141dd6aa0]
add eax, dword [0x141dd6aa4]
and eax, 0x30883305
cmp eax, 0xd8fe3b8c
je 0x1400c55c0
mov r12, qword [r14 + 0x58]
nop dword [rax]
mov eax, dword [0x141dd6aa8]
and eax, dword [0x141dd6aac]
add eax, 0x35168b10
and eax, 0x13138581
cmp eax, 0x5d13b953
je 0x1400c55e0
test r12, r12
je 0x1400c5971
mov rdx, qword [rsp + 0x48]
nop dword [rax + rax]
mov eax, dword [0x141dd6ab0]
imul eax, dword [0x141dd6ab4]
imul eax, eax, 0x2d3c309e
xor eax, 0x318a3e3c
imul rcx, rax, 0x506a6eaf
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0x9e2eca62
ja 0x1400c5610
mov r8, qword [rdx + 0x40]
lea rbx, [r8 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dd6ab8]
sub eax, dword [0x141dd6abc]
xor eax, 0x22008842
and eax, 0xab8b8853
cmp eax, 0xf7a75837
je 0x1400c5650
movdqa xmm0, xmmword [r8]
pmovmskb r9d, xmm0
not r9d
mov eax, 0x8bf0028b
nop
mov ecx, dword [0x141dd6ac0]
or ecx, dword [0x141dd6ac4]
imul ecx, ecx, 0x82508efe
imul rcx, rax
shr rcx, 0x3c
imul ecx, ecx, 0x3ab1c160
cmp ecx, 0x9f2ead3b
jb 0x1400c5680
mov rax, qword [rdx + 0x48]
mov qword [rsp + 0x90], rax
mov r10, qword [rdx + 0x50]
pcmpeqd xmm6, xmm6
mov r11d, 0xbc7d50ab
mov r14, r8
mov rdx, r12
mov qword [rsp + 0x50], r8
mov r13, qword [rsp + 0x48]
nop word cs:[rax + rax]
test r9w, r9w
jne 0x1400c5710
nop word cs:[rax + rax]
movdqa xmm0, xmmword [rbx]
pmovmskb r9d, xmm0
add r14, 0xffffffffffffea00
add rbx, 0x10
cmp r9d, 0xffff
je 0x1400c56f0
not r9d
tzcnt eax, r9d
neg rax
imul rax, rax, 0x160
cmp byte [r14 + rax - 4], 0
mov byte [r14 + rax - 4], 0
jne 0x1400c592a
mov rsi, r8
sub rsi, r14
sub rsi, rax
sar rsi, 5
movabs rcx, 0x2e8ba2e8ba2e8ba3
imul rsi, rcx
lea r15, [rsi - 0x10]
and r15, qword [rsp + 0x90]
movdqu xmm0, xmmword [r8 + r15]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb ecx, xmm0
test ecx, ecx
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x60], rbx
je 0x1400c5787
bsr cx, cx
xor ecx, 0xf
jmp 0x1400c578b
mov cx, 0x10
movdqu xmm0, xmmword [r8 + rsi]
pcmpeqb xmm0, xmm6
pmovmskb edx, xmm0
or edx, 0x10000
tzcnt edx, edx
add ecx, edx
mov bl, 0x80
cmp cx, 0xf
jbe 0x1400c57c0
mov qword [rsp + 0x70], r10
jmp 0x1400c585c
mov ecx, dword [0x141dd6ac8]
or ecx, dword [0x141dd6acc]
and ecx, 0x4edaf7e4
xor ecx, 0xb29cdfae
imul ecx, ecx, 0x16147a7f
cmp ecx, 0xccadd628
ja 0x1400c57c0
inc r10
xor ecx, ecx
test cl, cl
je 0x1400c57f8
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0x50], r10
mov rdx, qword [rsp + 0x48]
nop dword [rax]
mov ecx, dword [0x141dd6ad0]
and ecx, dword [0x141dd6ad4]
or ecx, 0xd1754cfc
imul rcx, rcx, 0x50608737
shr rcx, 0x3c
imul ecx, ecx, 0xbf28554
mov qword [rdx + 0x50], r10
cmp ecx, 0x7e0667df
ja 0x1400c5800
nop
mov ecx, dword [0x141dd6ad8]
and ecx, dword [0x141dd6adc]
imul rcx, r11
shr rcx, 0x3c
and ecx, 0xfffffffc
xor ecx, 0x1c48d8f5
cmp ecx, 0x6180b455
ja 0x1400c5830
mov qword [rsp + 0x70], r10
mov bl, 0xff
mov qword [rsp + 0x98], r14
add r14, rax
add r14, 0xfffffffffffffea8
mov eax, dword [0x141dd6ae0]
xor edx, edx
div dword [str.J9S_C]
and eax, 0x2dc7b68c
imul eax, eax, 0x3d7d05ed
and eax, 0x34b08448
cmp eax, 0x7b65c5ae
jbe 0x1400c58b7
mov byte [r8 + rsi], bl
mov byte [r15 + r8 + 0x10], bl
lea rax, [r12 - 1]
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 0x58], rax
mov rcx, r14
call fcn.1400ca8e0
mov r8, qword [rsp + 0x50]
mov rdi, rsi
nop word [rax + rax]
mov esi, dword [0x141dd6ae8]
add esi, dword [0x141dd6aec]
xor esi, 0x794a759
and esi, 0x2ff5afd9
add esi, 0xee1ebebb
mov byte [r8 + rdi], bl
mov byte [r15 + r8 + 0x10], bl
lea rbp, [r12 - 1]
mov qword [r13 + 0x58], rbp
mov rcx, r14
call fcn.1400ca8e0
mov r8, qword [rsp + 0x50]
cmp esi, 0x5e39f916
ja 0x1400c58c0
mov r12, rbp
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x70]
mov r11d, 0xbc7d50ab
mov rdx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x98]
lea eax, [r9 - 1]
and eax, r9d
mov r9d, eax
dec rdx
mov eax, dword [0x141dd6af0]
or eax, dword [0x141dd6af4]
add eax, 0x22a20883
imul rcx, rax, 0x256d4b9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0xa68fc63d
cmp eax, 0x22b39310
jb 0x1400c5937
test rdx, rdx
jne 0x1400c56e0
mov rax, qword [rsp + 0x78]
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1400c5980
test rax, rax
je 0x1400c59e0
mov r8, qword [rsp + 0x80]
xor eax, eax
test al, al
jne 0x1400c59c9
mov eax, dword [0x141dd6a88]
xor edx, edx
div dword [0x141dd6a8c]
or eax, 0xc3181658
imul rax, rax, 0xa1f8ac7
shr rax, 0x3a
imul eax, eax, 0x25a845eb
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x887b72ed
jne 0x1400c59d2
mov rax, qword [0x141ddc4e0]
jmp 0x1400c5997
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dd6a90]
imul eax, dword [0x141dd6a94]
and eax, 0x6002
add eax, 0x2a04a386
cmp eax, 0x605241b2
ja 0x1400c59e0
nop
mov eax, dword [0x141dd6a98]
xor edx, edx
div dword [0x141dd6a9c]
or eax, 0x31f81433
and eax, 0xb1fc5433
cmp eax, 0x60fe128a
je 0x1400c5a00
jmp 0x1400c3ed0