Function at 0x140109250
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
movaps xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x11], dl
mov r14, rcx
xor eax, eax
test al, al
je 0x140109310
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
nop
mov eax, dword [0x140225bd8]
add eax, dword [0x140225bdc]
imul rax, rax, 0x366f4db9
shr rax, 0x3b
or eax, 0x72d9f638
mov ecx, eax
xor ecx, 0x42c9d402
and ecx, eax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r9, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov rbx, rsp
cmp ecx, 0xfc02f62f
ja 0x140109310
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov rcx, rsp
lea rax, [r14 + 0x90]
mov qword [rbp - 0x28], rax
cmp qword [r14 + 0x90], 0
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x58], r12
jne 0x1401097d2
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x70], r11
mov qword [rbp - 0x38], r10
mov qword [rbp - 0x78], r9
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x48], rdx
mov eax, dword [0x140225be0]
sub eax, dword [0x140225be4]
mov ecx, eax
xor ecx, 0x694a2148
and ecx, eax
mov eax, ecx
xor eax, 0xd9ad702c
xor ecx, 0xaee56c6b
and ecx, eax
cmp ecx, 0xd3a71d95
ja 0x140109475
mov qword [rsi], 0
xor eax, eax
test al, al
je 0x14010947e
mov qword [rsi], 0
jmp 0x140109468
mov eax, dword [0x140225be8]
xor eax, dword [0x140225bec]
and eax, 0x61444342
mov ecx, eax
xor ecx, 0x87f08a6
or eax, 0x61004340
and eax, ecx
cmp eax, 0x2945afe7
jbe 0x1401094c0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, rsi
call fcn.140150c50
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140225bf0]
mov ecx, dword [0x140225bf4]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
not ecx
or ecx, 0xca322a00
or eax, 0x35cdd5ff
and eax, ecx
mov r14d, eax
not r14d
or eax, 0x49bbc302
or r14d, 0xb6443cfd
and r14d, eax
not r14d
add r14d, 0xe8ee521e
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, rsi
call fcn.140150c50
add rsp, 0x20
cmp r14d, 0x3f206e32
jb 0x1401094c0
mov r12d, eax
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x140109530
test r12d, r12d
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r13
je 0x140109548
xor edx, edx
jmp 0x1401096dd
mov rsi, qword [rsi]
nop dword [rax + rax]
mov eax, dword [0x140225bf8]
xor eax, dword [0x140225bfc]
mov ecx, eax
and ecx, 0x931dc840
or eax, 0x931dc840
add eax, ecx
cmp eax, 0x42ec6652
je 0x140109550
mov eax, dword [0x14022cb7c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
test byte [rax + 0x60], 1
je 0x1401095e8
nop
mov eax, dword [0x140225c10]
xor edx, edx
div dword [0x140225c14]
xor eax, 0x400000
or eax, 0xed3ff9ff
cmp eax, 0xfab6a5ca
ja 0x140109590
mov eax, dword [0x14022cb7c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x68]
mov ecx, dword [0x14022cb7c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov rcx, qword [rcx + 0x70]
jmp 0x1401096b7
mov eax, dword [0x140225c00]
mov ecx, dword [0x140225c04]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
not ecx
or ecx, 0x67ba46a3
xor ecx, 0x3002b922
and eax, 0x1000b900
add eax, eax
sub eax, ecx
or eax, 0x621eb647
cmp eax, 0x3e0854c7
jae 0x14010963e
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
sub rsp, 0x20
mov edx, 0x10
mov rcx, rdi
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
xorps xmm6, xmm6
nop word cs:[rax + rax]
mov eax, dword [0x140225c08]
xor eax, dword [0x140225c0c]
imul r14, rax, 0x10f52099
shr r14, 0x3c
or r14d, 0x52282bf4
movups xmmword [rdi], xmm6
sub rsp, 0x20
mov edx, 0x10
mov rcx, rdi
call fcn.14014ef90
add rsp, 0x20
cmp r14d, 0xfc966804
ja 0x140109650
mov rax, qword [rdi]
mov rcx, qword [rdi + 8]
mov edx, dword [0x14022cb7c]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov byte [rdx + 0x60], 1
mov qword [rdx + 0x70], rcx
lea rdx, [rax + 1]
mov r8d, dword [0x14022cb7c]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x68], rdx
lea rdx, [0x1402076a0]
mov r8, qword [rbp - 0x30]
mov qword [r8 + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [r8 + 0x98], xmm0
mov qword [r8 + 0xa8], 0
mov qword [r8 + 0xb0], rax
mov qword [r8 + 0xb8], rcx
mov qword [r8 + 0xc0], rsi
mov qword [r8 + 0xc8], 0
test r12d, r12d
je 0x140109ad4
nop word [rax + rax]
mov eax, dword [0x140225c18]
mov ecx, dword [0x140225c1c]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
and eax, 0x24b9939c
imul eax, eax, 0x7ed0711f
and eax, 0x4cca5c18
cmp eax, 0x9ead5782
je 0x140109730
mov rax, qword [rbp - 0x28]
mov rcx, qword [rax]
mov r14, qword [rbp - 0x30]
nop dword [rax + rax]
mov eax, dword [0x140225c20]
xor edx, edx
div dword [0x140225c24]
cmp eax, 0x474b47e2
je 0x140109770
nop word cs:[rax + rax]
mov eax, dword [0x140225c28]
or eax, dword [0x140225c2c]
lea edx, [rax + 0x59d292f6]
not edx
or edx, 0x2d7f8435
add eax, edx
add eax, 0x59d292f7
mov edx, eax
xor edx, 0x9390a374
and eax, 0x6c6f5c8b
add eax, eax
sub eax, edx
cmp eax, 0x2b610a36
je 0x140109790
test rcx, rcx
je 0x14010a33d
movzx ebx, byte [rbp - 0x11]
mov r15, qword [rbp - 0x28]
nop word [rax + rax]
mov eax, dword [0x140225ce0]
or eax, dword [0x140225ce4]
imul rcx, rax, 0x3f8e4be5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
mov ecx, eax
not ecx
and ecx, 0x3a99acc1
mov edx, eax
and edx, 0xfffffffe
imul edx, ecx
mov ecx, eax
and ecx, 1
or eax, 0x3a99acc1
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0xc66d6294
add ecx, eax
cmp ecx, 0x2a4dd247
je 0x1401097e0
mov eax, dword [0x140225ce8]
mov ecx, dword [0x140225cec]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
mov eax, ecx
or eax, 0x4c21190d
not ecx
or ecx, 0xb3dee6f2
and ecx, eax
xor ecx, 0x4cf6ee45
cmp ecx, 0xfc4aea3
jae 0x140109881
mov rcx, qword [r14 + 0xc0]
sub rsp, 0x20
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
add rsp, 0x20
mov rsi, qword [sym.imp.pdh.dll_PdhCollectQueryData]
nop dword [rax + rax]
mov eax, dword [0x140225cf0]
imul eax, dword [0x140225cf4]
mov ecx, eax
and ecx, 0x32da3be3
add ecx, ecx
neg ecx
lea edi, [rax + rcx]
add edi, 0x32da3be3
imul rax, rdi, 0x5ce576cb
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1f
mov rcx, qword [r14 + 0xc0]
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x25460cfe
je 0x140109890
movabs rsi, 0x8000000000000000
nop dword [rax]
mov eax, dword [str.3dY_j:fm]
mov ecx, dword [0x140225cfc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x25b795de
xor eax, 0x2a342109
imul rax, rax, 0x5fb330b9
shr rax, 0x3e
cmp eax, 0x3c46808
ja 0x1401098f0
cmp qword [r14 + 0x18], rsi
je 0x140109a93
mov eax, dword [0x140225d08]
mov ecx, dword [0x140225d0c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
xor ecx, 0x131a42e8
imul eax, ecx, 0x2b622954
cmp eax, 0xd0ac7a32
jne 0x140109990
mov rdx, qword [r14 + 0x20]
mov r8, qword [r14 + 0x28]
sub rsp, 0x20
mov rcx, r15
call fcn.14012e6b0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x140225d10]
or eax, dword [0x140225d14]
mov ecx, 0xfcde9ca
sub ecx, eax
add eax, 0xf0321635
and ecx, 0x1457dd8
and eax, 0xfeba8227
or eax, ecx
xor eax, 0x4ceb71f5
imul edi, eax, 0xd6eec24b
mov rdx, qword [r14 + 0x20]
mov r8, qword [r14 + 0x28]
sub rsp, 0x20
mov rcx, r15
call fcn.140150c90
add rsp, 0x20
cmp edi, 0xdcea1c8
je 0x140109990
mov ecx, dword [0x140225d18]
sub ecx, dword [0x140225d1c]
mov edx, ecx
and edx, 0x484a811b
add edx, edx
neg edx
add ecx, edx
add ecx, 0xc84a811b
imul rcx, rcx, 0x524db669
shr rcx, 0x3c
or ecx, 0xfd4ebbfe
cmp ecx, 0x65df9b75
je 0x1401099e0
test eax, eax
je 0x140109b71
nop word cs:[rax + rax]
mov eax, dword [0x140225d28]
add eax, dword [0x140225d2c]
mov ecx, eax
not ecx
or ecx, 0xbfbfdb1f
or eax, 0xf7afff5e
and eax, ecx
and eax, 0xffbfff5f
cmp eax, 0x619de62f
jb 0x140109a30
movss xmm1, dword [0x14017a100]
subss xmm1, xmm0
nop word cs:[rax + rax]
mov eax, dword [0x140225d30]
sub eax, dword [0x140225d34]
or eax, 0x24411
and eax, 0x4102cd15
cmp eax, 0x19273097
je 0x140109a70
movss dword [r14 + 0x30], xmm1
mov eax, dword [0x140225d38]
mov ecx, eax
not ecx
or ecx, dword [0x140225d3c]
add eax, ecx
inc eax
or eax, 0x60880002
mov ecx, eax
and ecx, 0x70ca2827
and eax, 0x504a0005
add eax, eax
sub ecx, eax
add ecx, 0xd27ac29d
cmp ecx, 0x3cd30141
jae 0x14010a391
jmp 0x14010a3e9
mov eax, dword [0x140225c30]
mov ecx, dword [0x140225c34]
mov edx, eax
not edx
and edx, ecx
not edx
not ecx
and ecx, eax
not ecx
and ecx, edx
not ecx
imul eax, ecx, 0xbf026770
imul rax, rax, 0x2d3e1933
shr rax, 0x3d
imul eax, eax, 0x432fad04
cmp eax, 0xb2c0b4fe
jbe 0x140109b17
movzx eax, byte [0x14022cb78]
xor eax, eax
mov r14, qword [rbp - 0x30]
nop dword [rax]
movzx ecx, byte [0x14022cb78]
test al, al
jne 0x140109b20
mov eax, dword [0x140225c38]
or eax, dword [0x140225c3c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x690ef17b
and ecx, 0x96f10e84
imul ecx, edx
mov edx, eax
and edx, 0x96f10e84
or eax, 0x96f10e84
imul eax, edx
add eax, ecx
xor eax, 0xa2440430
or eax, 0x5d93a10a
cmp eax, 0x2d62b376
jne 0x140109bb1
jmp 0x140109beb
ud2
mov eax, dword [0x140225c40]
xor edx, edx
div dword [0x140225c44]
xor eax, 0x8bd074a4
imul rsi, rax, 0x204957e9
shr rsi, 0x3c
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.140107940
add rsp, 0x20
cmp esi, 0xca83bdcc
jne 0x140109c01
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.14014ee50
add rsp, 0x20
jmp 0x140109bb1
mov rcx, rax
mov eax, dword [0x140225c48]
xor edx, edx
div dword [0x140225c4c]
nop word cs:[rax + rax]
mov eax, dword [0x140225c50]
add eax, dword [0x140225c54]
xor eax, 0x1144b7e3
cmp eax, 0x553ba1cd
je 0x140109c20
test rcx, rcx
je 0x140109c63
mov eax, dword [0x140225c70]
sub eax, dword [0x140225c74]
and eax, 0x977781e4
add eax, 0xd3c070fd
cmp eax, 0x8616389c
jae 0x140109d33
jmp 0x140109db9
mov eax, dword [str.T2_X]
mov ecx, dword [0x140225c5c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
xor eax, 0x98cf605c
xor ecx, 0x470005a2
and ecx, 0x5f4905b6
mov edx, eax
and edx, 0x20b6fa49
imul edx, ecx
mov ecx, eax
and ecx, 0x5f4905b6
or eax, 0x5f4905b6
imul eax, ecx
add eax, edx
and eax, 0x41613880
cmp eax, 0x8d276b50
ja 0x140109cf4
mov eax, dword [0x140225c60]
mov ecx, dword [0x140225c64]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
or ecx, 0x10a3b001
and ecx, 0x94bbf083
and eax, 0x6a44041c
add eax, ecx
add eax, 0x620539c6
ud2
ud2
mov edx, dword [0x140225c78]
and edx, dword [0x140225c7c]
mov eax, edx
and eax, 0xda93df3a
mov r8d, eax
not r8d
mov r9d, edx
and r9d, 0x48801808
and r8d, 0x965bc776
imul r8d, r9d
and edx, 0x9213c732
or eax, 0x965bc776
imul eax, edx
add eax, r8d
mov edx, eax
not edx
and edx, 0x75af9684
mov r8d, eax
and r8d, 0x8a506978
imul r8d, edx
mov edx, eax
and edx, 0x75af9684
or eax, 0x75af9684
imul eax, edx
add eax, r8d
movups xmm0, xmmword [0x1402077ce]
movups xmmword [rcx + 0xe], xmm0
movups xmm0, xmmword [str.Processor__Total___Idle_TimeProcessor____Idle_Time]
movups xmmword [rcx], xmm0
cmp eax, 0x3a60eefd
jae 0x140109dd3
movups xmm0, xmmword [0x1402077ce]
movups xmmword [rcx + 0xe], xmm0
movups xmm0, xmmword [str.Processor__Total___Idle_TimeProcessor____Idle_Time]
movups xmmword [rcx], xmm0
jmp 0x140109d33
mov rax, qword [rbp - 0x20]
mov qword [rax], 0x1e
mov qword [rax + 8], rcx
mov qword [rax + 0x10], 0x1e
movzx eax, byte [0x14022cb78]
mov eax, dword [0x140225c80]
mov ecx, dword [0x140225c84]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0xc7310a0b
mov ecx, eax
or ecx, 0x9c80080
and ecx, 0x59eb81da
or eax, 0x5bfbf3fb
add eax, ecx
cmp eax, 0x9de9a944
jae 0x140109e52
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.140107940
add rsp, 0x20
mov esi, 0x8a7f76c3
nop word [rax + rax]
mov eax, dword [0x140225c88]
mov ecx, eax
not ecx
or ecx, dword [0x140225c8c]
add eax, ecx
inc eax
imul rax, rsi
shr rax, 0x3f
imul edi, eax, 0x88d4cd74
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.14014ee50
add rsp, 0x20
cmp edi, 0x483934bd
ja 0x140109e60
test rax, rax
je 0x140109f48
lea r8, [r14 + 0x18]
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov qword [rbx], 5
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 5
sub rsp, 0x20
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x28]
mov r9, rbx
call fcn.14012c1c0
add rsp, 0x20
mov eax, dword [0x140225ca8]
mov ecx, dword [0x140225cac]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
or ecx, 0xd370cfc
xor ecx, 0x1646a7f3
or eax, 0xe9b9580c
and eax, ecx
imul rcx, rax, 0x399fc85
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x3981759
movzx ebx, byte [rbp - 0x11]
jne 0x14010a01b
jmp 0x14010a062
mov eax, dword [str.P_Q]
sub eax, dword [0x140225c94]
add eax, 0xce4bbfa9
mov ecx, eax
not ecx
and ecx, 0xc820b158
mov edx, eax
and edx, 0x37df4ea7
imul edx, ecx
mov ecx, eax
and ecx, 0xc820b158
or eax, 0xc820b158
imul eax, ecx
add eax, edx
and eax, 0xc7bcb738
cmp eax, 0x151deb29
jne 0x140109f8e
ud2
mov eax, dword [0x140225c98]
mov ecx, dword [0x140225c9c]
not eax
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
mov eax, ecx
and eax, 0x2c6a98e5
mov edx, eax
not edx
mov r8d, ecx
and r8d, 0x24288045
and edx, 0x9a561ea8
imul edx, r8d
and ecx, 0x84218a0
or eax, 0x9a561ea8
imul eax, ecx
add eax, edx
xor eax, 0x45b77ef0
ud2
mov eax, dword [0x140225cb0]
xor edx, edx
div dword [0x140225cb4]
mov esi, eax
add esi, 0xf3f9ae29
mov eax, esi
xor eax, 0x396f3045
and esi, 0x4690cfba
add esi, esi
sub esi, eax
add esi, 0x461969e1
sub rsp, 0x20
mov rcx, r14
mov edx, ebx
call fcn.14010dba0
add rsp, 0x20
cmp esi, 0xb42cdcc9
jbe 0x14010a076
sub rsp, 0x20
mov rcx, r14
mov edx, ebx
call fcn.14010dba0
add rsp, 0x20
jmp 0x14010a01b
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x140109730
mov rax, qword [rbp - 0x30]
mov r9, qword [rax + 8]
mov eax, 0xbc30f84b
mov edx, dword [0x140225cb8]
imul edx, dword [0x140225cbc]
mov r8d, edx
and r8d, 0x3b35a95e
xor edx, 0xbb35a95e
lea edx, [rdx + r8*2]
xor edx, 0x9e34c9aa
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x6f1147b4
ja 0x14010a090
mov eax, dword [0x140225cc0]
xor edx, edx
div dword [0x140225cc4]
nop word cs:[rax + rax]
mov eax, dword [0x140225cc8]
xor eax, dword [0x140225ccc]
mov edx, eax
not edx
or edx, 0x8eaab3c4
or eax, 0xcaae93c7
and eax, edx
and eax, 0xceaeb3c7
cmp eax, 0xf53b6d8
jb 0x14010a0e0
nop dword [rax]
mov eax, dword [0x140225cd0]
sub eax, dword [0x140225cd4]
mov edx, eax
xor edx, 0x420165
and edx, eax
and edx, 0xc6431b7d
mov eax, edx
xor eax, 0xa690550b
or edx, 0x40430a74
and edx, eax
cmp edx, 0x9aefcff7
je 0x14010a110
add r9, 0x48
imul rax, rcx, 0x70
lea rcx, [0x14006f9a0]
lea rdx, [0x1402077f8]
xor r8d, r8d
mov rsi, qword [rbp - 0x78]
mov r13, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x68]
mov r14, qword [rbp - 0x60]
jmp 0x14010a189
mov r9, qword [rbp - 0x20]
add r9, 0x70
inc r8
mov rax, qword [rbp - 0x80]
add rax, 0xffffffffffffff90
je 0x140109730
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x80], rax
xor eax, eax
test al, al
mov qword [rbp - 0x50], r8
jne 0x14010a283
nop
mov eax, dword [0x140225cd8]
sub eax, dword [0x140225cdc]
imul r12d, eax, 0x49bb7965
xor r12d, 0x10230154
and r12d, 0x953f0d5d
mov qword [r14], r8
mov qword [rsi], r14
mov qword [rsi + 8], rcx
mov qword [rbx], rdx
mov qword [rbx + 8], 2
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rdi, qword [rbp - 0x38]
mov rcx, rdi
mov rdx, rbx
call fcn.140150af0
add rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov qword [rcx], r14
lea rax, [0x14006f9a0]
mov qword [rcx + 8], rax
lea rax, [0x140207820]
mov qword [r13], rax
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], rcx
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov r15, qword [rbp - 0x40]
mov rcx, r15
mov rdx, r13
call fcn.140041330
mov rcx, rdi
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov r9, r15
call fcn.140150c70
mov r8, qword [rbp - 0x50]
lea rdx, [0x1402077f8]
lea rcx, [0x14006f9a0]
add rsp, 0x20
cmp r12d, 0x117a0914
jne 0x14010a170
mov qword [r14], r8
mov qword [rsi], r14
mov qword [rsi + 8], rcx
mov qword [rbx], rdx
mov qword [rbx + 8], 2
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rdi, qword [rbp - 0x38]
mov rcx, rdi
mov rdx, rbx
call fcn.140041330
add rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov qword [rcx], r14
lea rax, [0x14006f9a0]
mov qword [rcx + 8], rax
lea rax, [0x140207820]
mov qword [r13], rax
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], rcx
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov r15, qword [rbp - 0x40]
mov rcx, r15
mov rdx, r13
call fcn.140041330
mov rcx, rdi
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x20]
mov r9, r15
call fcn.140150c70
mov r8, qword [rbp - 0x50]
lea rdx, [0x1402077f8]
lea rcx, [0x14006f9a0]
add rsp, 0x20
jmp 0x14010a1a0
mov eax, 0x9a2172bb
nop word cs:[rax + rax]
mov ecx, dword [0x140225d00]
or ecx, dword [0x140225d04]
add ecx, 0x1b5b9229
mov edx, ecx
xor edx, 0x892c4a7c
and edx, ecx
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0xb48fa752
je 0x14010a350
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x140225d40]
and eax, dword [0x140225d44]
imul edi, eax, 0x9d46a5ce
mov eax, edi
not eax
and eax, 0x3040662f
mov ecx, edi
and ecx, 0xcfbf99d0
imul ecx, eax
mov eax, edi
and eax, 0x3040662e
or edi, 0x3040662f
imul edi, eax
add edi, ecx
and edi, 0xf1948832
sub rsp, 0x20
mov rcx, r14
mov edx, ebx
call fcn.14010dba0
add rsp, 0x20
cmp edi, 0x93119d40
jne 0x14010a3fd
sub rsp, 0x20
mov rcx, r14
mov edx, ebx
call fcn.14010dba0
add rsp, 0x20
jmp 0x14010a391
mov r8, qword [r14 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x140225d48]
mov ecx, dword [0x140225d4c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
not eax
and eax, 0xe4d7d4e7
mov edx, ecx
and edx, 0x1b282b18
imul edx, eax
mov eax, ecx
and eax, 0xe4d7d4e7
or ecx, 0xe4d7d4e7
imul ecx, eax
add ecx, edx
cmp ecx, 0xe07aa441
je 0x14010a410
mov rbx, qword [r14 + 0x10]
imul r14, rbx, 0x70
mov qword [rbp - 0x20], r8
lea r15, [r8 + r14]
nop word cs:[rax + rax]
mov eax, dword [0x140225d50]
mov ecx, dword [0x140225d54]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
not eax
or ecx, 0x16a93c87
or eax, 0xe956c378
and eax, ecx
mov ecx, eax
not ecx
and eax, 0x34f1be18
and ecx, 0xcb0e41e7
sub ecx, eax
cmp ecx, 0x6526d26e
je 0x14010a470
test rbx, rbx
je 0x14010a607
mov r12d, 0x99442041
xor r13d, r13d
movss xmm6, dword [0x14017a100]
mov rdi, qword [rbp - 0x20]
cmp qword [rdi + 0x48], rsi
je 0x14010a5c5
mov eax, dword [0x140225d90]
xor edx, edx
div dword [0x140225d94]
mov eax, dword [0x140225d98]
and eax, dword [0x140225d9c]
mov ecx, eax
not ecx
and ecx, 0x3e24e7f8
mov edx, eax
and edx, 0xc1db1807
imul edx, ecx
mov ecx, eax
and ecx, 0x3e24e7f8
or eax, 0x3e24e7f8
imul eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x1e5419c8
add ecx, ecx
sub eax, ecx
add eax, 0x5e5419c9
and eax, 0x32e930a9
cmp eax, 0x1da74aed
jb 0x14010a4e8
mov rdx, qword [rdi + 0x50]
mov r8, qword [rdi + 0x58]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
call fcn.140150c90
add rsp, 0x20
test eax, eax
je 0x14010a88a
nop dword [rax]
mov eax, dword [0x140225db8]
and eax, dword [0x140225dbc]
and eax, 0x28808002
imul rax, rax, 0x163e91ab
shr rax, 0x38
cmp eax, 0xdad6a7e3
je 0x14010a560
movaps xmm1, xmm6
subss xmm1, xmm0
test r13b, r13b
jne 0x14010a600
nop
mov eax, dword [0x140225dc0]
add eax, dword [0x140225dc4]
xor eax, 0x65102708
or eax, 0x82ef40e6
movss dword [rdi + 0x60], xmm1
cmp eax, 0x5eb74dd1
je 0x14010a600
nop word cs:[rax + rax]
test r13b, r13b
jne 0x14010a5c0
add rdi, 0x70
nop dword [rax]
mov eax, dword [0x140225dc8]
add eax, dword [0x140225dcc]
or eax, 0x6b23f25f
imul rax, r12
shr rax, 0x3d
cmp eax, 0xc9a545cd
je 0x14010a5d0
cmp rdi, r15
jne 0x14010a4d0
jmp 0x14010a607
movss dword [rdi + 0x60], xmm1
jmp 0x14010a590
cmp byte [rbp - 0x11], 0
mov rdi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x58]
je 0x14010a33d
mov eax, 0x8f35f673
nop
mov ecx, dword [0x140225d58]
sub ecx, dword [0x140225d5c]
add ecx, 0x1f5ed9b3
or ecx, 0x7f79c3c
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xa4b19751
je 0x14010a620
mov eax, 0xb6f43a53
nop dword [rax]
mov ecx, dword [0x140225d60]
sub ecx, dword [0x140225d64]
imul ecx, ecx, 0xd8e3460a
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x551ae9ab
je 0x14010a650
cmp byte [rdi + 0x38], 0
jne 0x14010a33d
mov ecx, dword [0x140225d68]
mov eax, dword [0x140225d6c]
mov edx, ecx
xor edx, eax
not edx
and edx, eax
add edx, edx
sub eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x21220080
xor eax, 0x5c945d3a
mov edx, eax
and edx, 0xd2d9f25d
and ecx, 0x2d260da2
imul ecx, edx
mov edx, eax
and edx, 0x2d260da2
or eax, 0x2d260da2
imul eax, edx
add eax, ecx
imul eax, eax, 0x14fe59c5
cmp eax, 0x1768f229
jne 0x14010a6f0
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
call fcn.14012b1c0
add rsp, 0x20
nop word cs:[rax + rax]
mov esi, dword [0x140225d70]
imul esi, dword [0x140225d74]
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x3c70ad4e
and eax, 0x438f52b1
imul eax, ecx
mov ecx, esi
and ecx, 0x438f52b1
or esi, 0x438f52b1
imul esi, ecx
add esi, eax
or esi, 0xb5ebdf2f
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
call fcn.14012b1c0
add rsp, 0x20
cmp esi, 0x2c313bf7
je 0x14010a6f0
mov rax, qword [r15]
mov r8, qword [r15 + 8]
mov rcx, qword [r15 + 0x10]
test rcx, rcx
sete dl
setne r10b
test rbx, rbx
sete r9b
setne r11b
and r11b, r10b
cmp r11b, 1
mov r11, qword [rbp - 0x20]
je 0x14010a777
or r9b, dl
jne 0x14010a7ae
lea rcx, [rcx*8 - 8]
add r14, 0xffffffffffffff90
xor edx, edx
xor r9d, r9d
nop dword [rax + rax]
mov r10, qword [r8 + r9]
mov qword [r11 + rdx + 0x68], r10
cmp r14, rdx
je 0x14010a7ae
lea r10, [r9 + 8]
add rdx, 0x70
cmp rcx, r9
mov r9, r10
jne 0x14010a790
test rax, rax
je 0x14010a846
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov ecx, dword [0x140225d78]
mov eax, dword [0x140225d7c]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xdc03c94e
and ecx, 0x23fc36b1
imul ecx, edx
mov edx, eax
and edx, 0x23fc36b1
or eax, 0x23fc36b1
imul eax, edx
add eax, ecx
mov ecx, eax
or ecx, 0x62d23015
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xb28f4dbc
and edx, 0x4d70b243
imul edx, r8d
and ecx, 0x4d70b243
or eax, 0x6ff2b257
imul eax, ecx
add eax, edx
cmp eax, 0x2357a9b1
jb 0x14010a7d0
mov eax, dword [0x140225d80]
mov ecx, dword [0x140225d84]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x15f8f9a4
and ecx, eax
add ecx, 0x7544d0f0
mov eax, ecx
and eax, 0x5528af18
xor ecx, 0x5528af18
lea eax, [rcx + rax*2]
cmp eax, 0x2b80c713
jae 0x14010a922
jmp 0x14010a953
mov eax, dword [0x140225da0]
add eax, dword [0x140225da4]
and eax, 0x4f3f6a6e
add eax, 0x738c7282
and eax, 0x6b8f3418
cmp eax, 0x58fd7cb
jb 0x14010a8d6
mov eax, dword [0x140225dac]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x140225da8]
xor ecx, eax
add ecx, 0x89bc0c34
xor ecx, 0x37aa2424
ud2
ud2
mov eax, dword [0x140225d88]
xor edx, edx
div dword [0x140225d8c]
imul rcx, rax, 0x1153deab
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
mov byte [rdi + 0x38], 1
cmp eax, 0x6484389c
jne 0x14010a33d
mov byte [rdi + 0x38], 1
jmp 0x14010a922