Function at 0x140001340
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb00
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400ce040]
xor rax, rsp
mov qword [rbp + 0xa80], rax
movabs rax, 0x579a6e15ed4f5ca6
movabs r12, 0x7ab74338c062718b
mov qword [rbp], rax
movabs r15, 0xc6a4e0e5dbd61a18
mov rax, qword [rbp]
movabs rbx, 0x9906142e849508fd
mov qword [rbp + 0x1a0], rax
movabs r13, 0x61ecb5bbd4170aca
movabs rax, 0x8ff0b0a0988e5f35
mov esi, ecx
mov qword [rbp], rax
lea rcx, [rbp + 0x1a0]
mov rax, qword [rbp]
mov rdi, rdx
mov qword [rbp + 0x1a8], rax
movabs rax, 0xb42b3903a9b846b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x61ecbf96f93a27e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
vmovdqu ymm0, ymmword [rbp + 0x7a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vzeroupper
call fcn.1400012e0
cmp esi, 0xc0000005
ja 0x1400014bb
je 0x1400014af
cmp esi, 0x80000002
je 0x1400014a3
cmp esi, 0x80000003
je 0x140001497
cmp esi, 0x80000004
jne case.0x1400014e5.1073741817
lea rdx, str.EXCEPTION_SINGLE_STEP
jmp 0x140001584
lea rdx, str.EXCEPTION_BREAKPOINT
jmp 0x140001584
lea rdx, str.EXCEPTION_DATATYPE_MISALIGNMENT
jmp 0x140001584
lea rdx, str.EXCEPTION_ACCESS_VIOLATION
jmp 0x140001584
lea eax, [rsi + 0x3ffffffa]
cmp eax, 0xf7
ja case.0x1400014e5.1073741817
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x2c1c]
mov ecx, dword [rdx + rax*4 + 0x2bd8]
add rcx, rdx
jmp rcx
lea rdx, str.EXCEPTION_ARRAY_BOUNDS_EXCEEDED
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_DENORMAL_OPERAND
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_DIVIDE_BY_ZERO
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_INEXACT_RESULT
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_INVALID_OPERATION
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_OVERFLOW
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_STACK_CHECK
jmp 0x140001584
lea rdx, str.EXCEPTION_FLT_UNDERFLOW
jmp 0x140001584
lea rdx, str.EXCEPTION_ILLEGAL_INSTRUCTION
jmp 0x140001584
lea rdx, str.EXCEPTION_IN_PAGE_ERROR
jmp 0x140001584
lea rdx, str.EXCEPTION_INT_DIVIDE_BY_ZERO
jmp 0x140001584
lea rdx, str.EXCEPTION_INT_OVERFLOW
jmp 0x140001584
lea rdx, str.EXCEPTION_INVALID_DISPOSITION
jmp 0x140001584
lea rdx, str.EXCEPTION_NONCONTINUABLE_EXCEPTION
jmp 0x140001584
lea rdx, str.EXCEPTION_PRIV_INSTRUCTION
jmp 0x140001584
lea rdx, str.EXCEPTION_STACK_OVERFLOW
jmp 0x140001584
lea rdx, str.UNKNOWN_EXCEPTION
movabs rax, 0x9926302a51208df
lea rcx, [rbp + 0x10]
mov qword [rbp], rax
mov r8d, esi
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xc6ae9dbdfeae2a63
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x588], rax
xorps xmm0, xmmword [rbp + 0x580]
movdqa xmmword [rbp + 0x10], xmm0
call fcn.1400012e0
mov rcx, qword [rdi]
lea rdx, [rbp + 0x380]
mov r8d, 0x30
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, qword [rbp + 0x388]
lea r8, [rbp + 0x860]
mov rcx, rax
mov r9d, 0x104
call qword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
mov rax, qword [rdi]
lea rdx, [rbp + 0x860]
lea rcx, [rbp + 0x1c0]
mov r8, qword [rax + 0x10]
movabs rax, 0x14d82a4ca1011ec7
sub r8, qword [rbp + 0x388]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xf684cbc5a8f33a22
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x99061e76e8f92d85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
vmovdqu ymm0, ymmword [rbp + 0x840]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vzeroupper
call fcn.1400012e0
movabs rax, 0x7a97794ba51608c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp], r15
mov qword [rbp + 0x590], rax
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movdqa xmm0, xmmword [rbp + 0x20]
lea rcx, [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x20], xmm0
call fcn.1400012e0
xor ebx, ebx
movabs r14, 0x7ab74318985041ae
mov rax, qword [rdi]
mov rcx, qword [rax + 0x10]
movzx edx, byte [rcx + rbx]
lea rcx, [rbp + 0x30]
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x5a8], rax
xorps xmm0, xmmword [rbp + 0x5a0]
movdqa xmmword [rbp + 0x30], xmm0
call fcn.1400012e0
inc rbx
cmp rbx, 0x14
jl 0x140001760
lea rcx, [0x1400b9c44]
call fcn.1400012e0
movabs rax, 0x40c33b5db40c1ec8
lea rcx, [rbp + 0x40]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xc6a4e0e5dbd61a12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x5b8], rax
xorps xmm0, xmmword [rbp + 0x5b0]
movdqa xmmword [rbp + 0x40], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x50]
movabs r14, 0xc6a4e0ef83ba763d
mov rdx, qword [rax + 0xf8]
movabs rax, 0x2876368893051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rbp + 0x5c8], rax
xorps xmm0, xmmword [rbp + 0x5c0]
movdqa xmmword [rbp + 0x50], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x60]
mov rdx, qword [rax + 0x78]
movabs rax, 0x2876360813051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x5d8], rax
xorps xmm0, xmmword [rbp + 0x5d0]
movdqa xmmword [rbp + 0x60], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x70]
mov rdx, qword [rax + 0x80]
movabs rax, 0x2876360833051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x5e8], rax
xorps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x70], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x80]
mov rdx, qword [rax + 0x88]
movabs rax, 0x2876360843051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0x5f8], rax
xorps xmm0, xmmword [rbp + 0x5f0]
movdqa xmmword [rbp + 0x80], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x90]
mov rdx, qword [rax + 0x90]
movabs rax, 0x2876360823051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rbp + 0x608], rax
xorps xmm0, xmmword [rbp + 0x600]
movdqa xmmword [rbp + 0x90], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0xa0]
mov rdx, qword [rax + 0x98]
movabs rax, 0x2876368933051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0x618], rax
xorps xmm0, xmmword [rbp + 0x610]
movdqa xmmword [rbp + 0xa0], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0xb0]
mov rdx, qword [rax + 0xa0]
movabs rax, 0x2876368823051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0x628], rax
xorps xmm0, xmmword [rbp + 0x620]
movdqa xmmword [rbp + 0xb0], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0xc0]
mov rdx, qword [rax + 0xa8]
movabs rax, 0x2876371933051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xc0]
mov qword [rbp + 0x638], rax
xorps xmm0, xmmword [rbp + 0x630]
movdqa xmmword [rbp + 0xc0], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0xd0]
mov rdx, qword [rax + 0xb0]
movabs rax, 0x2876371843051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xd0]
mov qword [rbp + 0x648], rax
xorps xmm0, xmmword [rbp + 0x640]
movdqa xmmword [rbp + 0xd0], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0xe0]
movabs rbx, 0xc6a4e0e5d18e7674
mov rdx, qword [rax + 0xb8]
movabs rax, 0x5fcf7318f83051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x650], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xe0]
mov qword [rbp + 0x658], rax
xorps xmm0, xmmword [rbp + 0x650]
movdqa xmmword [rbp + 0xe0], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0xf0]
mov rdx, qword [rax + 0xc0]
movabs rax, 0x5fcf7318f93051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xf0]
mov qword [rbp + 0x668], rax
xorps xmm0, xmmword [rbp + 0x660]
movdqa xmmword [rbp + 0xf0], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x100]
mov rdx, qword [rax + 0xc8]
movabs rax, 0x2876308f13051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x100]
mov qword [rbp + 0x4f8], rax
xorps xmm0, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x100], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x110]
mov rdx, qword [rax + 0xd0]
movabs rax, 0x2876309f13051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x110]
mov qword [rbp + 0x508], rax
xorps xmm0, xmmword [rbp + 0x500]
movdqa xmmword [rbp + 0x110], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x120]
mov rdx, qword [rax + 0xd8]
movabs rax, 0x287630af13051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x120]
mov qword [rbp + 0x518], rax
xorps xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x120], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x130]
mov rdx, qword [rax + 0xe0]
movabs rax, 0x287630bf13051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x130]
mov qword [rbp + 0x528], rax
xorps xmm0, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x130], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
mov rdx, qword [rax + 0xe8]
lea rcx, [rbp + 0x140]
movabs rax, 0x287630cf13051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x140]
mov qword [rbp + 0x538], rax
xorps xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x140], xmm0
call fcn.1400012e0
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x150]
mov rdx, qword [rax + 0xf0]
movabs rax, 0x287630df13051ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x150]
mov qword [rbp + 0x548], rax
xorps xmm0, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x150], xmm0
call fcn.1400012e0
mov rax, qword [rdi]
cmp dword [rax + 0x18], 2
jb 0x1400025b2
mov rax, qword [rax + 0x20]
movabs r11, 0x898b2164a2ce1aff
movabs r10, 0xa38685c163fcd10c
test rax, rax
je 0x14000226d
sub rax, 1
je 0x140002137
movabs rcx, 0x9906142e849508fd
cmp rax, 7
je 0x14000207d
movabs rax, 0x7ad93457ae091fde
lea rdx, [rbp + 0x160]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x160]
mov qword [rbp + 0x558], rax
xorps xmm0, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0x160], xmm0
jmp 0x1400023a1
movabs rax, 0x3e97275db31710c8
lea rdx, [rbp + 0x1e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xa7c88f8cadf64a5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x9906142eeafa6189
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
vmovdqu ymm0, ymmword [rbp + 0x7c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x1e0], ymm1
jmp 0x14000239e
movabs rax, 0x1fc33355a51605ca
lea rdx, [rbp + 0x2c0]
mov qword [rbp], rax
movabs rcx, 0x9906142e849508fd
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0xafd697c5b4a23a7c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xf7673441f0b56d89
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x1289d6d8b57963ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xedea0101ceac738c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xa38685b21099a368
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x690], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x698], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
mov qword [rbp], r10
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x2e0]
vmovdqu ymm0, ymmword [rbp + 0x680]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
mov qword [rbp + 0x6a8], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqa xmmword [rbp + 0x2e0], xmm2
jmp 0x14000239e
movabs rax, 0x1fc33355a51605ca
lea rdx, [rbp + 0x300]
mov qword [rbp], rax
movabs rcx, 0x9906142e849508fd
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0xa7c192c5b4a23a7c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xb968750eebe12899
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x129fd0d8b77664a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0xfdea4544c7a27896
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0xa38685c163fcd16d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
mov qword [rbp], r10
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x320]
vmovdqu ymm0, ymmword [rbp + 0x6c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
mov qword [rbp + 0x6e8], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x6e0]
vmovdqa ymmword [rbp + 0x300], ymm1
vmovdqa xmmword [rbp + 0x320], xmm2
vzeroupper
cmp esi, 0xc0000005
je 0x1400024ee
cmp esi, 0xc0000006
jne 0x1400025b2
mov rax, qword [rdi]
mov r9, qword [rax + 0x30]
mov r8, qword [rax + 0x28]
movabs rax, 0xed62e4aaf041fc2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs rax, 0xe6d7c5c5e1b87571
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movabs rax, 0xb95e7842a1b57c9c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
movabs rax, 0x44ccdbd4a7766fb8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movabs rax, 0x898b2164a8967693
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
mov qword [rbp], rcx
lea rcx, [rbp + 0x340]
mov rax, qword [rbp]
mov qword [rbp + 0x710], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
mov qword [rbp], r10
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x360]
vmovdqu ymm0, ymmword [rbp + 0x700]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
mov qword [rbp + 0x728], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x340], ymm1
vmovdqa xmmword [rbp + 0x360], xmm2
vzeroupper
call fcn.1400012e0
jmp 0x1400025b2
mov rax, qword [rdi]
mov r8, qword [rax + 0x28]
movabs rax, 0xed62e4aaf041fc2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0xe6d7c5c5e1b87571
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x935e7842a1b57c9c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
mov qword [rbp], rcx
lea rcx, [rbp + 0x200]
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
vmovdqu ymm0, ymmword [rbp + 0x7e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
vzeroupper
call fcn.1400012e0
mov rax, qword [rdi]
movabs rbx, 0x35fe1768852129ce
movabs r14, 0x9906142e849508fd
test byte [rax + 4], 1
je 0x140002690
mov qword [rbp], rbx
lea rcx, [rbp + 0x220]
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x88eba3ab94984556
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xdc4a566fd1db41a9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0x61ecb5bbd4170ac0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
vmovdqu ymm0, ymmword [rbp + 0x800]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
vzeroupper
call fcn.1400012e0
mov rax, qword [rdi]
test byte [rax + 4], 8
je 0x140002750
mov qword [rbp], rbx
lea rcx, [rbp + 0x240]
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x99efa3a48f854556
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x93425d62c5c346b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x830], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x838], rax
vmovdqu ymm0, ymmword [rbp + 0x820]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x240], ymm1
vzeroupper
call fcn.1400012e0
mov rax, qword [rdi]
test byte [rax + 4], 0x80
je 0x14000281a
mov qword [rbp], rbx
lea rcx, [rbp + 0x260]
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x87f3b4a394854556
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xd0415d7ccbca4daf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0x61ecb5b191434b84
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x740], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x748], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x750], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x758], rax
vmovdqu ymm0, ymmword [rbp + 0x740]
vpxor ymm1, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x260], ymm1
vzeroupper
call fcn.1400012e0
mov rax, qword [rdi]
cmp qword [rax + 8], 0
je 0x140002897
movabs rax, 0x15d4264ae01110c3
lea rcx, [rbp + 0x170]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0xc6a4e0e5dbdc7e6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x170]
mov qword [rbp + 0x568], rax
xorps xmm0, xmmword [rbp + 0x560]
movdqa xmmword [rbp + 0x170], xmm0
call fcn.1400012e0
mov rsi, qword [rdi + 8]
lea rcx, [rbp + 0x3e0]
xor edx, edx
mov r8d, 0x108
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x3ec], 3
lea rcx, [rbp + 0x180]
mov dword [rbp + 0x40c], 3
mov dword [rbp + 0x41c], 3
mov rax, qword [rsi + 0xf8]
mov qword [rbp + 0x3e0], rax
mov rax, qword [rsi + 0xa0]
mov qword [rbp + 0x400], rax
mov rax, qword [rsi + 0x98]
mov qword [rbp + 0x410], rax
movabs rax, 0x1bc06353a30305d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xc6a4e0e5dbdc7174
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x180]
mov qword [rbp + 0x578], rax
xorps xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x180], xmm0
call fcn.1400012e0
mov edi, 5
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword [sym.imp.dbghelp.dll_SymGetModuleBase64]
lea r9, [rbp + 0x3e0]
xor edx, edx
mov r8, rbx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
mov rcx, qword [sym.imp.dbghelp.dll_SymFunctionTableAccess64]
mov qword [rsp + 0x30], rcx
mov ecx, 0x8664
mov qword [rsp + 0x28], rdx
mov rdx, rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.dbghelp.dll_StackWalk64]
test eax, eax
je 0x140002ada
mov rcx, qword [rbp + 0x3e0]
lea rdx, [rbp + 0x3b0]
mov r8d, 0x30
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, qword [rbp + 0x3b8]
lea r8, [rbp + 0x970]
mov rcx, rax
mov r9d, 0x104
call qword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
movabs rax, 0x5ac46618980e1dae
lea r8, [rbp + 0x970]
mov qword [rbp], rax
lea rcx, [rbp + 0x280]
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x9ec88cc0a3e63a33
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x9906142e849508f7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x760], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x770], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov rdx, qword [rbp + 0x3e0]
mov qword [rbp + 0x778], rax
mov r9, rdx
vmovdqu ymm0, ymmword [rbp + 0x760]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
sub r9, qword [rbp + 0x3b8]
vmovdqa ymmword [rbp + 0x280], ymm1
vzeroupper
call fcn.1400012e0
sub rdi, 1
jne 0x140002970
movabs rax, 0x579a6e15ed4f5ca6
lea rcx, [rbp + 0x2a0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xeb89cdc8f6fb3735
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xb42b3903a9b825d0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x61ecbf96f93a27e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x780], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x788], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
vmovdqu ymm0, ymmword [rbp + 0x780]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x2a0], ymm1
vzeroupper
call fcn.1400012e0
mov rcx, qword [rbp + 0xa80]
xor rcx, rsp
call fcn.14009b100
mov rbx, qword [rsp + 0xb50]
add rsp, 0xb00
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret