Function at 0x1400c2580
Capabilities:
Encode data using xor
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x10], xmm6
mov qword [rbp - 0x40], rdx
mov eax, dword [0x141dd5ce8]
sub eax, dword [0x141dd5cec]
xor eax, 0x4625887c
imul rax, rax, 0x68afbbdb
shr rax, 0x3e
cmp eax, 0xb2650c3b
jne 0x1400c268e
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x160
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0xe0
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x10], rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd5cf0]
or eax, dword [0x141dd5cf4]
or eax, 0x26166a8c
imul ecx, eax, 0xa833301e
imul rax, rcx, 0x4f39a46d
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1e
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r11, rsp
mov eax, 0x160
call fcn.1400ef3b0
sub rsp, rax
mov r10, rsp
mov eax, 0xe0
call fcn.1400ef3b0
sub rsp, rax
mov rdx, rsp
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
cmp ecx, 0x97c566cd
ja 0x1400c26a0
mov qword [rbp - 0x78], r10
mov qword [rbp], r11
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x70], r9
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x28], rdx
movzx eax, byte [0x141ddb9b8]
mov eax, dword [0x141dd5cf8]
xor eax, dword [0x141dd5cfc]
xor eax, 0x283900
and eax, 0x383902
cmp eax, 0xef634038
ja 0x1400c284a
mov edi, dword [0x141dd5d00]
add edi, dword [0x141dd5d04]
or edi, 0xc4808e99
add edi, 0x55c1be23
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400bf820
add rsp, 0x20
cmp edi, 0xe8e96d55
jbe 0x1400c2860
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400bf820
add rsp, 0x20
jmp 0x1400c2816
mov r14, rax
test rax, rax
mov rdi, qword [rbp + 8]
je 0x1400c2ee5
mov qword [r15], 0x80000
mov qword [r15 + 8], r14
mov qword [rbp - 0x20], r15
mov qword [r15 + 0x10], 0
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400c2890
mov eax, 0x80000
mov rsi, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
xor edx, edx
mov r12d, 0x80000
mov dword [rbx], 0
sub rax, rdx
cmp r12, rax
ja 0x1400c2980
nop word [rax + rax]
mov eax, dword [0x141dd5d08]
xor edx, edx
div dword [0x141dd5d0c]
cmp eax, 0xf6d93115
jne 0x1400c28f0
sub rsp, 0x20
mov ecx, 5
mov rdx, r14
mov r8d, r12d
mov r9, rbx
call rsi
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd5d10]
sub eax, dword [0x141dd5d14]
imul r13d, eax, 0xe432b9c3
add r13d, 0x63418da8
imul rax, r13, 0x35fa0e7
shr rax, 0x20
sub r13d, eax
shr r13d, 1
add r13d, eax
shr r13d, 0x1f
sub rsp, 0x20
mov ecx, 5
mov rdx, r14
mov r8d, r12d
mov r9, rbx
call rsi
add rsp, 0x20
cmp r13d, 0x880eb834
ja 0x1400c28f0
mov r15d, eax
test eax, eax
jns 0x1400c2c6b
mov eax, dword [0x141dd5d40]
or eax, dword [0x141dd5d44]
imul eax, eax, 0x2448b165
or eax, 0x7f9de94c
cmp eax, 0x9e32ecc1
mov rsi, qword [sym.imp.oleaut32.dll_GetErrorInfo]
jbe 0x1400c2a00
jmp 0x1400c2c50
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, qword [rbp - 0x20]
mov r8, r12
call fcn.1400fd630
add rsp, 0x30
nop word cs:[rax + rax]
mov eax, dword [0x141dd5d18]
and eax, dword [0x141dd5d1c]
or eax, 0x98810995
and eax, 0xd9d14b95
imul rax, rax, 0x19857387
shr rax, 0x3c
cmp eax, 0xed29f102
ja 0x1400c29b0
mov rax, qword [rbp - 0x20]
mov r14, qword [rax + 8]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c29f0
jmp 0x1400c28c0
mov r13d, dword [0x141dd5d48]
sub r13d, dword [0x141dd5d4c]
and r13d, 0x6621c258
add r13d, 0x84452cfa
mov qword [rdi], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call rsi
add rsp, 0x20
cmp r13d, 0x67609a81
jb 0x1400c2c50
mov r13, qword [rdi]
mov rsi, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
nop dword [rax]
mov eax, dword [0x141dd5d50]
sub eax, dword [0x141dd5d54]
imul eax, eax, 0x19b6d51c
xor eax, 0x430748a0
and eax, 0x7b87d9b0
cmp eax, 0x1c59868c
jb 0x1400c2a50
and r15d, 0xefffffff
nop word [rax + rax]
mov eax, dword [0x141dd5d58]
sub eax, dword [0x141dd5d5c]
or eax, 0xcbdf9691
xor eax, 0xb39f6187
cmp eax, 0x23ce3930
jb 0x1400c2a80
cmp r15d, 0xc0000004
jne 0x1400c2ce5
mov eax, dword [0x141dd6008]
xor eax, dword [0x141dd600c]
or eax, 0x40a202cd
imul rax, rax, 0x22aaa33
shr rax, 0x39
imul eax, eax, 0x5d939d00
cmp eax, 0xfae07c22
ja 0x1400c2aaa
mov eax, dword [rbx]
add r12, r12
lea ecx, [rax + 0x2800]
mov edx, dword [0x141dd6010]
or edx, dword [0x141dd6014]
imul edx, edx, 0x1064de01
add edx, 0xbd8c731f
mov r8d, 0xb335b43b
imul rdx, r8
shr rdx, 0x3e
cmp edx, 0x5291041c
ja 0x1400c2ade
mov ecx, ecx
mov edx, dword [0x141dd6018]
and edx, dword [0x141dd601c]
imul rdx, rdx, 0x56406ad9
shr rdx, 0x3d
or edx, 0x21006c00
and edx, 0x21006c02
test eax, eax
mov r15, rcx
cmove r15, r12
cmp edx, 0xfb509e6c
je 0x1400c2b0e
test r13, r13
mov r12, qword [rbp - 0x20]
je 0x1400c2bc0
nop dword [rax + rax]
mov eax, dword [0x141dd6020]
add eax, dword [0x141dd6024]
and eax, 0x14115cad
imul eax, eax, 0xd41d8d64
add eax, 0x50293ddf
cmp eax, 0x2c2b9958
ja 0x1400c2b50
mov rax, qword [r13]
nop word [rax + rax]
mov ecx, dword [0x141dd6028]
imul ecx, dword [0x141dd602c]
and ecx, 0x8d8991d9
add ecx, 0x521b3b18
imul rcx, rcx, 0x4ff2b691
shr rcx, 0x3a
cmp ecx, 0xfa9f99e3
ja 0x1400c2b80
sub rsp, 0x20
mov rcx, r13
call qword [rax + 0x10]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd6030]
add eax, dword [0x141dd6034]
imul eax, eax, 0x3524d1c1
or eax, 0xe45fafc6
and eax, 0xe7dfbfee
cmp eax, 0x3e061406
jb 0x1400c2bc0
mov eax, dword [0x141dd6038]
xor eax, dword [0x141dd603c]
add eax, 0x6ab3e357
or eax, 0x1373858e
cmp eax, 0x7c69db7f
ja 0x1400c2be3
mov rax, qword [r12]
mov rdx, qword [r12 + 0x10]
nop dword [rax]
mov ecx, dword [0x141dd6040]
or ecx, dword [0x141dd6044]
add ecx, 0x6ab5631d
xor ecx, 0x3437594e
cmp ecx, 0x8b9b9115
jae 0x1400c2c10
mov r12, r15
mov dword [rbx], 0
sub rax, rdx
cmp r12, rax
jbe 0x1400c28c0
jmp 0x1400c2980
mov qword [rdi], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call rsi
add rsp, 0x20
jmp 0x1400c2a00
mov rax, qword [rbp - 0x20]
mov qword [rax + 0x10], r12
mov rax, qword [rbp - 0x48]
mov qword [rax], 0
movzx eax, byte [0x141ddb9b8]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400bf820
add rsp, 0x20
test rax, rax
je 0x1400c2e98
mov rcx, rax
mov r12, qword [rbp - 0x50]
mov qword [r12], 0x1f4
mov qword [r12 + 8], rax
mov eax, dword [0x141dd5d30]
and eax, dword [0x141dd5d34]
add eax, 0x6edf9714
shr eax, 4
imul rax, rax, 0x2b96993
shr rax, 0x34
cmp eax, 0x31b1810
jne 0x1400c2ee7
jmp 0x1400c2f22
test r13, r13
mov rbx, qword [rbp - 0x20]
je 0x1400c2da8
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c2d00
mov eax, dword [0x141dd5fd0]
or eax, dword [0x141dd5fd4]
mov rsi, qword [r13]
add eax, 0x148f3bb8
xor eax, 0x69000ae1
cmp eax, 0x7ac51acc
jae 0x1400c2d40
sub rsp, 0x20
mov rcx, r13
call qword [rsi + 0x10]
add rsp, 0x20
nop word cs:[rax + rax]
mov edi, dword [0x141dd5fd8]
imul edi, dword [0x141dd5fdc]
xor edi, 0x4600100
or edi, 0xf39ff6bf
sub rsp, 0x20
mov rcx, r13
call qword [rsi + 0x10]
add rsp, 0x20
cmp edi, 0x75aea8dc
jb 0x1400c2d40
mov eax, 0xd0486f81
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5fe0]
sub ecx, dword [0x141dd5fe4]
xor ecx, 0x673a5ca2
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xff11d645
cmp ecx, 0x42f9fbce
jb 0x1400c2d80
mov rax, qword [rbx]
nop dword [rax + rax]
mov ecx, dword [0x141dd5fe8]
add ecx, dword [0x141dd5fec]
or ecx, 0xfff7cff3
imul ecx, ecx, 0x8c186074
cmp ecx, 0x7308e120
ja 0x1400c2db0
test rax, rax
je 0x1400c2e70
xor eax, eax
test al, al
je 0x1400c2df0
mov rax, qword [0x141ddb9a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ff0]
imul eax, dword [0x141dd5ff4]
shr eax, 2
imul rax, rax, 0x21d65d33
shr rax, 0x3a
imul eax, eax, 0xe901f2af
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x450b3a3b
je 0x1400c2df0
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ff8]
or eax, dword [0x141dd5ffc]
add eax, 0xc6358303
and eax, 0x7a46d7aa
imul rax, rax, 0x3c573447
shr rax, 0x3b
cmp eax, 0xd3691d02
ja 0x1400c2e40
nop dword [rax + rax]
mov eax, dword [0x141dd6000]
imul eax, dword [0x141dd6004]
and eax, 0x20251451
xor eax, 0x1441
or eax, 0x8fdac9ae
cmp eax, 0x85746c5b
jbe 0x1400c2e70
jmp 0x1400c3270
mov eax, dword [0x141dd5d20]
sub eax, dword [0x141dd5d24]
add eax, 0x50b619e9
or eax, 0x2872d947
cmp eax, 0x1ad5ec35
jae 0x1400c2ec0
ud2
mov eax, dword [0x141dd5d28]
and eax, dword [0x141dd5d2c]
add eax, 0x2f22eeb2
imul rax, rax, 0x23bb4319
shr rax, 0x3d
ud2
ud2
mov eax, dword [0x141dd5d38]
or eax, dword [0x141dd5d3c]
imul eax, eax, 0x2f7d3286
add eax, 0x3d2b86e4
imul rdx, rax, 0x377eb49b
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
mov qword [r12 + 0x10], 0
cmp eax, 0x2e1fc73d
jne 0x1400c2f2d
mov qword [r12 + 0x10], 0
jmp 0x1400c2ee7
xor esi, esi
xor edi, edi
xor ebx, ebx
mov r13, qword [rbp]
jmp 0x1400c2f58
lea rax, [r14 + rbx]
mov qword [rcx + rdi*8], rax
inc rdi
mov qword [r12 + 0x10], rdi
add rbx, r15
test r15, r15
je 0x1400c2fb7
mov eax, dword [0x141dd5d60]
xor edx, edx
div dword [0x141dd5d64]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5d68]
imul eax, dword [0x141dd5d6c]
add eax, 0xf2168353
xor eax, 0x3dc44efe
cmp eax, 0xf512a886
ja 0x1400c2f70
mov r15d, dword [r14 + rbx]
cmp rdi, qword [r12]
jne 0x1400c2f40
sub rsp, 0x20
mov rcx, r12
call fcn.1400c47b0
add rsp, 0x20
mov rcx, qword [r12 + 8]
nop dword [rax]
test sil, sil
jne 0x1400c2fb0
jmp 0x1400c2f40
mov rsi, qword [rbp - 0x10]
lea rax, [rsi + 0x40]
mov qword [rbp - 0x18], rax
mov rcx, qword [rbp - 0x58]
mov qword [rcx], rax
nop word [rax + rax]
mov eax, dword [0x141dd5d70]
or eax, dword [0x141dd5d74]
and eax, 0x7e7a2dfb
xor eax, 0xddd75cce
add eax, 0x98d4f49f
cmp eax, 0x3550390c
jb 0x1400c2fd0
mov rax, qword [rbp - 0x40]
movzx eax, byte [rax]
mov ecx, 0xa94ab3e5
mov rdi, qword [rbp - 8]
mov r14, qword [rbp - 0x60]
nop word cs:[rax + rax]
mov edx, dword [0x141dd5d78]
add edx, dword [0x141dd5d7c]
imul rdx, rcx
shr rdx, 0x3f
imul edx, edx, 0x8c38ded3
and edx, 0x57ab38ca
cmp edx, 0x2491d9cb
je 0x1400c3010
test al, al
je 0x1400c321f
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
call fcn.1400c4a70
add rsp, 0x20
mov rsi, qword [rsi + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5d80]
add eax, dword [0x141dd5d84]
imul eax, eax, 0x574c9a27
and eax, 0xd2090018
cmp eax, 0xcd165849
je 0x1400c3060
xor eax, eax
test al, al
je 0x1400c309f
mov qword [r14], rsi
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
mov ebx, 0xfe6991e9
mov r12, qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
nop dword [rax + rax]
mov eax, dword [0x141dd5d88]
xor edx, edx
div dword [0x141dd5d8c]
imul r15d, eax, 0xa577106a
imul r15, rbx
shr r15, 0x3c
mov qword [r14], rsi
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call r12
add rsp, 0x20
cmp r15d, 0x500d10b9
ja 0x1400c30b0
mov rax, qword [rdi]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x1400c3104
xor edx, edx
jmp 0x1400c3122
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x68]
mov r9, qword [rbp - 0x60]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x50]
mov rsi, qword [rbp - 0x48]
mov qword [r8], rdx
mov rax, qword [r11 + 0x10]
mov qword [rcx + 0x10], rax
movdqu xmm0, xmmword [r11]
movdqu xmmword [rcx], xmm0
mov qword [r13], 0
mov qword [r13 + 8], 8
mov qword [r13 + 0x10], 0
mov qword [rcx + 0x18], rsi
mov qword [rcx + 0x20], r10
mov rax, qword [rbp - 0x40]
mov qword [rcx + 0x28], rax
mov qword [rcx + 0x30], r9
mov qword [rcx + 0x38], r8
mov r8, qword [rcx]
mov rdi, qword [rcx + 0x10]
cmp r8, rdi
jb 0x1400c2ee5
mov r15, rcx
add r15, 0x18
mov rsi, qword [rcx + 8]
nop dword [rax]
mov eax, dword [0x141dd5d90]
sub eax, dword [0x141dd5d94]
and eax, 0x226985aa
add eax, 0x4abe6782
xor eax, 0x5a94b156
cmp eax, 0x336b74b7
ja 0x1400c31a0
mov eax, dword [0x141dd5d98]
xor edx, edx
div dword [0x141dd5d9c]
mov eax, dword [0x141dd5da0]
and eax, dword [0x141dd5da4]
add eax, 0xb5a6bc51
and eax, 0xbfb3a630
imul eax, eax, 0xf28eac69
cmp eax, 0xc2e1b7ed
je 0x1400c31d0
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x38]
test rbx, rbx
mov qword [rbp + 8], r8
je 0x1400c3230
add rbx, 0x110
jmp 0x1400c3240
xor esi, esi
xor eax, eax
test al, al
jne 0x1400c3084
jmp 0x1400c309f
sub rsp, 0x20
call fcn.140077f40
add rsp, 0x20
mov rbx, rax
mov eax, dword [0x141dd5da8]
imul eax, dword [0x141dd5dac]
imul eax, eax, 0xeddcfc93
add eax, 0x124dd519
cmp eax, 0x19bc6f54
mov r14, qword [rbp - 0x70]
jae 0x1400c32af
jmp 0x1400c3321
mov eax, dword [0x141dd6048]
mov ecx, dword [0x141dd604c]
add eax, ecx
add eax, 0xd436d470
xor eax, 0x32fa684
imul rax, rax, 0x5279bdbf
shr rax, 0x39
cmp eax, 0xba75e390
ja 0x1400c3270
movaps xmm6, xmmword [rbp + 0x10]
lea rsp, [rbp + 0x28]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd5db0]
and eax, dword [0x141dd5db4]
or eax, 0x434c6026
and eax, 0x734e726e
imul r12, rax, 0x5ff72fbb
shr r12, 0x3d
mov rax, qword [rbx]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rdi, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 1
mov rcx, r14
mov rdx, rdi
xor r8d, r8d
call fcn.1400c6fd0
add rsp, 0x40
cmp r12d, 0xbd3ddf53
jbe 0x1400c336e
mov rax, qword [rbx]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rdi, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 1
mov rcx, r14
mov rdx, rdi
xor r8d, r8d
call fcn.1400c6fd0
add rsp, 0x40
jmp 0x1400c32af
cmp qword [rbp + 8], 0
je 0x1400c33dc
mov eax, dword [str.ZzDo]
xor edx, edx
div dword [0x141dd5dbc]
or eax, 0xa9290c39
and eax, 0xa96d2c39
cmp eax, 0x9653043d
jae 0x1400c33a0
mov rax, qword [0x141ddb9a0]
nop dword [rax + rax]
mov eax, dword [0x141dd5dc0]
or eax, dword [0x141dd5dc4]
or eax, 0xd31972b
add eax, 0xad64299
or eax, 0xf5094049
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x3d1ccb78
jb 0x1400c33a0
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rcx, qword [rbp - 0x70]
mov eax, dword [0x141dd5dc8]
xor edx, edx
div dword [0x141dd5dcc]
imul eax, eax, 0x5cccedf7
cmp eax, 0xc6e3d813
je 0x1400c33e0
mov rdi, qword [rcx]
test rdi, rdi
je 0x1400c3491
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400c3491
dec rax
xor esi, esi
mov rcx, rdi
nop dword [rax]
add rsi, qword [rcx + 0x10]
sub rax, 1
jb 0x1400c3433
mov rcx, qword [rcx + 0x18]
test rcx, rcx
jne 0x1400c3420
mov eax, dword [0x141dd5dd0]
xor edx, edx
div dword [0x141dd5dd4]
mov eax, 0xa174e35b
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5dd8]
add ecx, dword [0x141dd5ddc]
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x19fa1d0d
imul rcx, rcx, 0x6ad73fb
shr rcx, 0x37
cmp ecx, 0x3318d93d
je 0x1400c3450
test rsi, rsi
je 0x1400c3491
xor eax, eax
test al, al
je 0x1400c4683
jmp 0x1400c46cc
test rdi, rdi
je 0x1400c3aac
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c34b9
test rdi, rdi
je 0x1400c3aac
mov rbx, rdi
nop dword [rax]
mov eax, dword [0x141dd5de8]
xor edx, edx
div dword [0x141dd5dec]
add eax, 0x4e05aa6
and eax, 0x185e22
cmp eax, 0x96738daa
je 0x1400c34c0
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x1400c3564
mov eax, dword [0x141dd5df0]
xor edx, edx
div dword [0x141dd5df4]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5df8]
xor edx, edx
div dword [0x141dd5dfc]
or eax, 0x39466e8b
add eax, 0x56ba9007
imul rax, rax, 0x6fa80e05
shr rax, 0x3a
cmp eax, 0xb06321f2
ja 0x1400c3500
mov qword [rdi + 0x20], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e00]
imul eax, dword [0x141dd5e04]
imul eax, eax, 0xe89f368c
xor eax, 0x19001840
and eax, 0xd9813bc0
cmp eax, 0xed4b1838
ja 0x1400c3540
mov r12, qword [rbx]
mov rsi, qword [rbx + 8]
mov eax, dword [0x141dd5e08]
and eax, dword [0x141dd5e0c]
and eax, 0xca03c47a
imul eax, eax, 0x278f8c55
mov ecx, 0xaf7de46d
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xec893f12
je 0x1400c35f0
nop word cs:[rax + rax]
mov r13d, dword [0x141dd5e10]
sub r13d, dword [0x141dd5e14]
add r13d, 0xd18d7d94
shr r13d, 1
mov eax, 0x9e63c865
imul r13, rax
shr r13, 0x3c
add r13d, 0xcffb2ec2
mov r14, qword [rbx + 0x10]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r15
add rsp, 0x20
cmp r13d, 0x65082f35
jae 0x1400c3610
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r15
add rsp, 0x20
jmp 0x1400c35a0
movabs rax, 0x8000000000000000
cmp r12, rax
je 0x1400c379a
mov r13, qword [rbp]
nop word [rax + rax]
mov eax, dword [0x141dd5e80]
xor eax, dword [str.G_6_aq]
or eax, 0xb1d0ff7e
add eax, 0xf954278f
cmp eax, 0x480900da
jb 0x1400c3630
mov rax, qword [r13]
mov rbx, qword [r13 + 0x10]
sub rax, rbx
cmp rax, r14
jb 0x1400c367f
mov eax, dword [0x141dd5e90]
add eax, dword [0x141dd5e94]
xor eax, 0xa0000404
or eax, 0x1dff88f8
cmp eax, 0x5a8d1440
jne 0x1400c36d0
jmp 0x1400c3700
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r13
mov rdx, rbx
mov r8, r14
call fcn.1400fd630
add rsp, 0x30
mov rbx, qword [r13 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dd5e88]
or eax, dword [0x141dd5e8c]
imul eax, eax, 0x1bf5dd59
cmp eax, 0x92b543de
je 0x1400c36b0
jmp 0x1400c365d
imul rcx, rbx, 0x158
add rcx, qword [r13 + 8]
imul r8, r14, 0x158
sub rsp, 0x20
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
lea rax, [rbx + r14]
mov qword [r13 + 0x10], rax
xor eax, eax
test al, al
je 0x1400c3730
imul rcx, rbx, 0x158
add rcx, qword [r13 + 8]
imul r8, r14, 0x158
sub rsp, 0x20
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
lea rax, [rbx + r14]
mov qword [r13 + 0x10], rax
jmp 0x1400c36d0
test r12, r12
je 0x1400c34b0
mov rbx, qword [0x141ddb9a0]
xor eax, eax
test al, al
jne 0x1400c3785
nop word cs:[rax + rax]
mov r14d, dword [0x141dd5e98]
sub r14d, dword [0x141dd5e9c]
add r14d, 0xfcdfa0ac
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
cmp r14d, 0x8e34ca80
jbe 0x1400c34b0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
jmp 0x1400c3750
test rdi, rdi
mov r13, qword [rbp]
je 0x1400c3aac
nop word [rax + rax]
mov r13, qword [rdi + 0x18]
test r13, r13
je 0x1400c3840
mov eax, dword [0x141dd5e18]
sub eax, dword [0x141dd5e1c]
add eax, 0x183aed0b
and eax, 0xb24a5b46
xor eax, 0xcea0d28e
cmp eax, 0x229d95a1
jb 0x1400c37bd
mov eax, dword [0x141dd5e20]
add eax, dword [0x141dd5e24]
imul eax, eax, 0x67861b31
add eax, 0x6a90ff7b
cmp eax, 0xc5820d7f
jbe 0x1400c3810
mov qword [r13 + 0x20], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e28]
and eax, dword [0x141dd5e2c]
add eax, 0x2b410a74
and eax, 0xc3a0d438
mov qword [r13 + 0x20], 0
cmp eax, 0x9a6068ae
je 0x1400c3810
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e30]
xor eax, dword [0x141dd5e34]
imul eax, eax, 0x328df7e4
or eax, 0xc19ab1ab
cmp eax, 0xed8772f4
je 0x1400c3840
mov rax, qword [rdi + 8]
mov qword [rbp + 8], rax
mov r14, qword [rdi + 0x10]
test r14, r14
je 0x1400c3900
mov rbx, qword [rbp + 8]
xor r12d, r12d
jmp 0x1400c388f
add rbx, 0x158
inc r12
dec r14
je 0x1400c3900
mov eax, dword [0x141dd5e38]
imul eax, dword [0x141dd5e3c]
and eax, 0x456a7ae1
xor eax, 0x41dab591
cmp eax, 0x2093a56a
ja 0x1400c38e2
nop dword [rax]
mov eax, dword [0x141dd5e40]
xor edx, edx
div dword [0x141dd5e44]
imul esi, eax, 0xcb6a3461
or esi, 0xddf9fe9f
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c93d0
add rsp, 0x20
cmp esi, 0xed767916
jbe 0x1400c3880
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c93d0
add rsp, 0x20
jmp 0x1400c38b0
mov rax, qword [rdi]
xor ecx, ecx
test cl, cl
jne 0x1400c3905
test rax, rax
mov ebx, 0x9a1098eb
je 0x1400c39af
mov eax, dword [0x141dd5e48]
imul eax, dword [0x141dd5e4c]
add eax, 0xde9ab981
or eax, 0x27deb0b5
and eax, 0xa7ffb4bf
cmp eax, 0xa5db350e
jae 0x1400c3950
mov rax, qword [0x141ddb9a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e50]
xor edx, edx
div dword [0x141dd5e54]
and eax, 0x90905b38
imul eax, eax, 0x21ea2b2e
add eax, 0x1e47216f
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x2ab95405
ja 0x1400c3950
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 8]
call r15
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd5e58]
xor edx, edx
div dword [0x141dd5e5c]
add eax, 0x5e2a9774
and eax, 0x65b0c0d8
cmp eax, 0xd32ac040
ja 0x1400c3990
mov eax, dword [0x141dd5e60]
sub eax, dword [0x141dd5e64]
xor eax, 0x571dbc03
imul eax, eax, 0x45356d91
and eax, 0xed179623
cmp eax, 0x5996518d
jb 0x1400c3aa0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e68]
and eax, dword [0x141dd5e6c]
or eax, 0x63d35ebb
add eax, 0x57f2e7a4
imul rax, rbx
shr rax, 0x3f
mov rsi, qword [0x141ddb9a0]
cmp eax, 0x322e00fb
je 0x1400c3aa0
mov eax, dword [0x141dd5e70]
add eax, dword [0x141dd5e74]
xor eax, 0xd9abbe94
shr eax, 2
imul rax, rax, 0x22d8a017
shr rax, 0x39
or eax, 0x7667fe78
cmp eax, 0x5ef75d35
jne 0x1400c3a50
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
nop
mov eax, dword [0x141dd5e78]
xor eax, dword [0x141dd5e7c]
xor eax, 0x5baf62c0
add eax, 0xa1f41de4
imul rbx, rax, 0x5258028f
shr rbx, 0x3d
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
cmp ebx, 0x2d939761
ja 0x1400c3a50
mov rdi, r13
test r13, r13
mov r13, qword [rbp]
jne 0x1400c37b0
jmp 0x1400c3aac
mov rax, qword [0x141ddb9a0]
jmp 0x1400c39e0
mov rax, qword [r13]
mov qword [rbp - 0x40], rax
mov rbx, qword [r13 + 8]
mov rax, qword [r13 + 0x10]
imul rdx, rax, 0x158
add rdx, rbx
mov qword [rbp - 8], rdx
mov qword [rbp], rbx
test rax, rax
je 0x1400c417b
xor edi, edi
pcmpeqd xmm6, xmm6
mov r15d, 0x911b9b79
mov rdx, qword [rbp]
nop word [rax + rax]
lea rbx, [rdx + 0x158]
mov rax, qword [rdx]
cmp rax, 2
je 0x1400c417b
mov qword [rbp + 8], rax
mov qword [rbp - 0x30], rbx
mov rsi, qword [rdx + 0xe0]
mov eax, dword [0x141dd5ec8]
and eax, dword [0x141dd5ecc]
xor eax, 0x7ec3627b
imul rax, rax, 0x3695f837
shr rax, 0x3d
or eax, 0x31a9b1a6
cmp eax, 0x50f9141a
je 0x1400c3b13
lea rbx, [rdx + 0xe8]
add rdx, 8
sub rsp, 0x20
mov r8d, 0xd8
mov rcx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movups xmm0, xmmword [rbx]
movdqu xmm1, xmmword [rbx + 0x10]
movdqu xmm2, xmmword [rbx + 0x20]
movups xmm3, xmmword [rbx + 0x30]
mov rax, qword [rbp - 0x38]
movups xmmword [rax], xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x30], xmm3
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm0, xmmword [rbx + 0x50]
movups xmmword [rax + 0x50], xmm0
movdqu xmm0, xmmword [rbx + 0x60]
movdqu xmmword [rax + 0x60], xmm0
mov r13, qword [rbp - 0x10]
mov r14, qword [r13 + 0x60]
mov r12, qword [r13 + 0x68]
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, rsi
call fcn.1400c9d40
add rsp, 0x20
mov rbx, rax
cmp qword [r13 + 0x50], 0
jne 0x1400c3c2a
mov eax, dword [0x141dd5ed0]
sub eax, dword [0x141dd5ed4]
imul rax, rax, 0x1b4052a7
shr rax, 0x39
or eax, 0xd1313244
cmp eax, 0x431eb2e1
je 0x1400c3f7c
mov eax, dword [0x141dd5ed8]
or eax, dword [0x141dd5edc]
imul r13d, eax, 0x70b0953f
or r13d, 0xb36b99ff
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, r14
mov r8, r12
call fcn.1400fda50
add rsp, 0x20
cmp r13d, 0x4c0efd7c
jb 0x1400c3bf0
mov rax, qword [rbp - 0x10]
mov r14, qword [rax + 0x40]
mov r8, qword [rax + 0x48]
mov rcx, rbx
shr rcx, 0x39
mov eax, dword [0x141dd5ee0]
xor edx, edx
div dword [0x141dd5ee4]
nop dword [rax + rax]
mov eax, dword [0x141dd5ee8]
xor eax, dword [0x141dd5eec]
add eax, 0x26560783
or eax, 0x1c2f7da8
add eax, 0xcd36367
cmp eax, 0x5f456af3
jb 0x1400c3c50
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r10d, r10d
xor r11d, r11d
and rbx, r8
movdqu xmm1, xmmword [r14 + rbx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r12d, xmm2
test r12d, r12d
je 0x1400c3d50
nop dword [rax]
mov eax, dword [0x141dd5ef0]
add eax, dword [0x141dd5ef4]
xor eax, 0x89e46864
imul rax, r15
shr rax, 0x3f
cmp eax, 0x27be4d08
je 0x1400c3cb0
tzcnt eax, r12d
add rax, rbx
and rax, r8
neg rax
imul rax, rax, 0x160
cmp qword [r14 + rax - 0x160], rsi
je 0x1400c3e10
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
mov eax, dword [0x141dd5f00]
or eax, dword [0x141dd5f04]
or eax, 0x5c18e303
cmp eax, 0x3cbf3a6e
je 0x1400c3cfe
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f08]
xor edx, edx
div dword [0x141dd5f0c]
and eax, 0xf10d27bf
imul eax, eax, 0xcaa86368
add eax, 0xc7219318
cmp eax, 0x1c17e4ba
jb 0x1400c3d20
test r12w, r12w
jne 0x1400c3cb0
nop
test dil, dil
jne 0x1400c3d50
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ef8]
imul eax, dword [0x141dd5efc]
or eax, 0x4fbfddfc
add eax, 0x8cda8db7
cmp eax, 0x8e845d05
ja 0x1400c3d60
cmp r11, 1
mov r11d, 1
je 0x1400c3dee
mov edx, 0xa3346d8b
nop
mov eax, dword [0x141dd5f10]
and eax, dword [0x141dd5f14]
imul rax, rdx
shr rax, 0x3b
xor eax, 0x3bb48ef7
add eax, 0xb10c588c
cmp eax, 0xa989736e
jb 0x1400c3d90
pmovmskb eax, xmm1
tzcnt r9d, eax
add r9, rbx
and r9, r8
xor r11d, r11d
test ax, ax
setne r11b
mov edx, dword [0x141dd5f18]
xor edx, dword [0x141dd5f1c]
imul edx, edx, 0x6b43feb4
or edx, 0x810c8def
cmp edx, 0x22bb35ba
jb 0x1400c3dc4
pcmpeqb xmm1, xmm6
pmovmskb eax, xmm1
test eax, eax
jne 0x1400c3e50
add rbx, r10
add rbx, 0x10
add r10, 0x10
jmp 0x1400c3c8a
add r14, rax
mov eax, dword [0x141dd5f38]
and eax, dword [0x141dd5f3c]
and eax, 0x5a61b05f
xor eax, 0x9b6eab2f
mov ecx, 0x9dac2f47
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xf2553a86
mov r12, qword [rbp - 0x78]
mov r13, qword [rbp - 0x38]
jbe 0x1400c3fa0
jmp 0x1400c40e0
mov eax, dword [0x141dd5f20]
sub eax, dword [0x141dd5f24]
and eax, 0x4df067e1
imul eax, eax, 0x9c2bc19a
cmp eax, 0xfc2cfd20
ja 0x1400c3e50
movzx eax, byte [r14 + r9]
test al, al
js 0x1400c3ec2
movdqa xmm0, xmmword [r14]
mov eax, dword [0x141dd5f28]
xor edx, edx
div dword [0x141dd5f2c]
mov edx, 0xf633d567
mov eax, dword [0x141dd5f30]
add eax, dword [0x141dd5f34]
xor eax, 0x2cb539c5
imul rax, rdx
shr rax, 0x3e
or eax, 0x37fed50c
cmp eax, 0xa5952290
ja 0x1400c3e8f
pmovmskb eax, xmm0
tzcnt r9d, eax
movzx eax, byte [r14 + r9]
and al, 1
movzx eax, al
mov rdx, qword [rbp - 0x10]
sub qword [rdx + 0x50], rax
lea rax, [r9 - 0x10]
and rax, r8
mov byte [r14 + r9], cl
mov byte [rax + r14 + 0x10], cl
inc qword [rdx + 0x58]
neg r9
imul rbx, r9, 0x160
mov qword [r14 + rbx - 0x160], rsi
mov rax, qword [rbp + 8]
mov qword [r14 + rbx - 0x158], rax
lea rcx, [r14 + rbx]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r14 + rbx - 0x78], rsi
mov rax, qword [rbp - 0x38]
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [r14 + rbx - 0x70], xmm0
movdqu xmmword [r14 + rbx - 0x60], xmm1
movdqu xmmword [r14 + rbx - 0x50], xmm2
movups xmmword [r14 + rbx - 0x40], xmm3
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r14 + rbx - 0x30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [r14 + rbx - 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x60]
movdqu xmmword [r14 + rbx - 0x10], xmm0
jmp 0x1400c4072
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, r14
mov r8, r12
call fcn.1400fda50
add rsp, 0x20
jmp 0x1400c3bf0
mov eax, dword [0x141dd5f40]
imul eax, dword [0x141dd5f44]
imul ebx, eax, 0xc8181946
or ebx, 0xe1fede9f
lea rdx, [r14 - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 8]
mov qword [r14 - 0x158], rax
lea rcx, [r14 - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r14 - 0x78], rsi
movups xmm0, xmmword [r13 + 0x60]
movups xmmword [r14 - 0x10], xmm0
movups xmm0, xmmword [r13 + 0x50]
movups xmmword [r14 - 0x20], xmm0
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [r14 - 0x30], xmm0
movdqu xmm0, xmmword [r13]
movdqu xmm1, xmmword [r13 + 0x10]
movdqu xmm2, xmmword [r13 + 0x20]
movups xmm3, xmmword [r13 + 0x30]
movups xmmword [r14 - 0x40], xmm3
movdqu xmmword [r14 - 0x50], xmm2
movdqu xmmword [r14 - 0x60], xmm1
movdqu xmmword [r14 - 0x70], xmm0
cmp ebx, 0x65490f25
jb 0x1400c40e0
cmp qword [r12], 2
je 0x1400c4072
sub rsp, 0x20
mov rcx, r12
call fcn.1400c93d0
add rsp, 0x20
mov rcx, qword [rbp - 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f48]
sub eax, dword [0x141dd5f4c]
and eax, 0x32108c96
add eax, 0xa352bdae
and eax, 0x22211cd4
cmp eax, 0xca71d80
ja 0x1400c4080
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f50]
add eax, dword [0x141dd5f54]
or eax, 0x66109942
imul eax, eax, 0x334bf80e
cmp eax, 0x415de16
je 0x1400c40b0
mov rdx, rcx
cmp rcx, qword [rbp - 8]
jne 0x1400c3af0
jmp 0x1400c41dc
lea rdx, [r14 - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 8]
mov qword [r14 - 0x158], rax
lea rcx, [r14 - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r14 - 0x78], rsi
movups xmm0, xmmword [r13]
movdqu xmm1, xmmword [r13 + 0x10]
movdqu xmm2, xmmword [r13 + 0x20]
movups xmm3, xmmword [r13 + 0x30]
movups xmmword [r14 - 0x70], xmm0
movdqu xmmword [r14 - 0x60], xmm1
movdqu xmmword [r14 - 0x50], xmm2
movups xmmword [r14 - 0x40], xmm3
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [r14 - 0x30], xmm0
movups xmm0, xmmword [r13 + 0x50]
movups xmmword [r14 - 0x20], xmm0
movdqu xmm0, xmmword [r13 + 0x60]
movdqu xmmword [r14 - 0x10], xmm0
jmp 0x1400c3fa0
mov rcx, qword [rbp - 8]
sub rcx, rbx
movabs r8, 0xbe82fa0be82fa0bf
nop dword [rax]
mov r9d, dword [0x141dd5ea0]
and r9d, dword [0x141dd5ea4]
mov rax, rcx
mul r8
cmp r9d, 0x309d61bf
je 0x1400c4190
cmp qword [rbp - 8], rbx
je 0x1400c41dc
mov rsi, rdx
shr rsi, 8
nop word [rax + rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c93d0
add rsp, 0x20
add rbx, 0x158
dec rsi
jne 0x1400c41c0
mov rdi, qword [rbp - 0x10]
mov eax, dword [0x141dd5ea8]
or eax, dword [0x141dd5eac]
xor eax, 0xfb9b0751
imul eax, eax, 0x593c8996
cmp eax, 0x183eaaa1
je 0x1400c41e0
nop
mov eax, dword [0x141dd5eb0]
and eax, dword [0x141dd5eb4]
or eax, 0xa00284c0
and eax, 0xa482a6d8
imul eax, eax, 0x1b9b098a
cmp eax, 0xd40f504
je 0x1400c4200
cmp qword [rbp - 0x40], 0
je 0x1400c42b5
mov eax, dword [0x141dd5eb8]
xor eax, dword [0x141dd5ebc]
imul eax, eax, 0x6a3f456d
add eax, 0x336c36a3
and eax, 0x922138b4
cmp eax, 0x91b4696b
jbe 0x1400c4258
mov rax, qword [0x141ddb9a0]
xor eax, eax
nop word [rax + rax]
mov rcx, qword [0x141ddb9a0]
test al, al
jne 0x1400c4260
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xa5323709
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5ec0]
xor ecx, dword [0x141dd5ec4]
imul rcx, rax
shr rcx, 0x3d
and ecx, 0xfffffffc
or ecx, 0x43e31b20
cmp ecx, 0x7733eb10
ja 0x1400c4290
mov r13, qword [rdi + 0x58]
nop dword [rax]
mov eax, dword [0x141dd5f88]
xor edx, edx
div dword [0x141dd5f8c]
imul eax, eax, 0xc216cb8b
add eax, 0x70bc9816
cmp eax, 0xfbfb0afa
ja 0x1400c42c0
test r13, r13
je 0x1400c4600
mov eax, 0x8d6148cb
nop
mov ecx, dword [0x141dd5f90]
or ecx, dword [0x141dd5f94]
or ecx, 0xa7dbe19e
add ecx, 0x8d3529a2
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x8a6f4d6c
ja 0x1400c42f0
mov rax, qword [rbp - 0x18]
mov r8, qword [rax]
lea r14, [r8 + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f98]
sub eax, dword [0x141dd5f9c]
add eax, 0xc6849934
or eax, 0x41dc1725
cmp eax, 0x6b8ac0e
jb 0x1400c4330
movdqa xmm0, xmmword [r8]
pmovmskb r11d, xmm0
not r11d
mov rax, qword [rdi + 0x48]
mov qword [rbp], rax
mov rax, qword [rdi + 0x50]
mov qword [rbp - 0x18], rax
mov r9b, 1
pcmpeqd xmm6, xmm6
mov r10d, 0xa57b18bf
mov rbx, r8
mov rsi, r13
mov qword [rbp + 8], r8
jmp 0x1400c43a3
lea eax, [r11 - 1]
and eax, r11d
mov r11d, eax
dec rsi
je 0x1400c4600
test r11w, r11w
jne 0x1400c43e8
nop dword [rax]
movdqa xmm0, xmmword [r14]
pmovmskb r11d, xmm0
add rbx, 0xffffffffffffea00
add r14, 0x10
cmp r11d, 0xffff
je 0x1400c43b0
mov eax, dword [0x141dd5fa0]
xor edx, edx
div dword [0x141dd5fa4]
nop dword [rax]
test r9b, r9b
je 0x1400c43e0
not r11d
tzcnt eax, r11d
neg rax
imul rcx, rax, 0x160
cmp byte [rbx + rcx - 4], 0
mov byte [rbx + rcx - 4], 0
jne 0x1400c4390
lea rax, [rbx + rcx]
lea r9, [rbx + rcx]
add r9, 0xfffffffffffffea8
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5fa8]
imul ecx, dword [0x141dd5fac]
add ecx, 0x3b983743
or ecx, 0xaa98245d
cmp ecx, 0xc903482f
jb 0x1400c4420
mov r15, r8
sub r15, rax
sar r15, 5
movabs rax, 0x2e8ba2e8ba2e8ba3
imul r15, rax
lea r12, [r15 - 0x10]
and r12, qword [rbp]
movdqu xmm0, xmmword [r8 + r12]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb eax, xmm0
test eax, eax
mov qword [rbp - 8], rsi
je 0x1400c4485
bsr ax, ax
xor eax, 0xf
jmp 0x1400c4489
mov ax, 0x10
movdqu xmm0, xmmword [r8 + r15]
pcmpeqb xmm0, xmm6
pmovmskb ecx, xmm0
or ecx, 0x10000
tzcnt ecx, ecx
add eax, ecx
mov sil, 0x80
cmp ax, 0xf
mov qword [rbp - 0x30], r11
mov qword [rbp - 0x28], rbx
ja 0x1400c450b
mov eax, dword [0x141dd5fb0]
sub eax, dword [0x141dd5fb4]
cmp eax, 0x18e4d986
je 0x1400c44b4
mov rax, qword [rbp - 0x18]
inc rax
mov qword [rbp - 0x18], rax
mov qword [rdi + 0x50], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5fb8]
imul eax, dword [0x141dd5fbc]
add eax, 0x2ceb0c55
and eax, 0xe8c3425a
shr eax, 1
imul rax, r10
shr rax, 0x3e
cmp eax, 0x6d72217c
je 0x1400c44e0
mov sil, 0xff
mov qword [rbp - 0x38], r14
mov eax, dword [str._kt__b_6]
xor edx, edx
div dword [0x141dd5fc4]
mov ecx, 0x8cbb8d4f
imul rax, rcx
shr rax, 0x3f
or eax, 0xdb68ee70
mov ecx, 0xdd6654f5
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x459cc92e
jne 0x1400c4574
mov byte [r8 + r15], sil
mov byte [r12 + r8 + 0x10], sil
lea rax, [r13 - 1]
mov qword [rdi + 0x58], rax
sub rsp, 0x20
mov rcx, r9
mov rbx, r15
mov r15, r9
call fcn.1400c93d0
mov r9, r15
mov r15, rbx
mov r8, qword [rbp + 8]
add rsp, 0x20
mov r14, r12
mov r12, r13
nop word [rax + rax]
mov edi, dword [0x141dd5fc8]
sub edi, dword [0x141dd5fcc]
xor edi, 0x10408450
and edi, 0x18408451
mov byte [r8 + r15], sil
mov byte [r14 + r8 + 0x10], sil
lea r13, [r12 - 1]
mov rax, qword [rbp - 0x10]
mov qword [rax + 0x58], r13
sub rsp, 0x20
mov rcx, r9
mov rbx, r15
mov r15, r9
call fcn.1400c93d0
mov r9, r15
mov r15, rbx
mov r8, qword [rbp + 8]
add rsp, 0x20
cmp edi, 0x4cd586f
je 0x1400c4580
mov rdi, qword [rbp - 0x10]
mov r9b, 1
mov r10d, 0xa57b18bf
mov r11, qword [rbp - 0x30]
mov rsi, qword [rbp - 8]
mov rbx, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
jmp 0x1400c4390
mov eax, dword [0x141dd5f58]
and eax, dword [0x141dd5f5c]
add eax, 0xdbeb3cd9
and eax, 0x46803585
add eax, 0x90fc510a
cmp eax, 0x7ad877b9
jb 0x1400c4600
mov rcx, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f60]
and eax, dword [0x141dd5f64]
imul eax, eax, 0x5bf203b7
and eax, 0x8b9332b5
cmp eax, 0x35ba3efb
je 0x1400c4630
cmp qword [rcx], 0
je 0x1400c4780
mov rsi, qword [rcx + 8]
mov eax, dword [0x141dd5f68]
sub eax, dword [0x141dd5f6c]
or eax, 0x3600acc6
and eax, 0xb6c4acce
xor eax, 0x19fb7fb3
cmp eax, 0x97754844
jbe 0x1400c46f2
jmp 0x1400c471c
mov eax, dword [0x141dd5de0]
imul eax, dword [0x141dd5de4]
imul ebx, eax, 0x6de90adc
or ebx, 0x85fb0388
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r13
xor edx, edx
mov r8, rsi
call fcn.1400fd630
add rsp, 0x30
cmp ebx, 0x26d18145
jae 0x1400c3491
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r13
xor edx, edx
mov r8, rsi
call fcn.1400fd630
add rsp, 0x30
jmp 0x1400c4683
mov eax, dword [0x141dd5f70]
and eax, dword [0x141dd5f74]
imul rax, rax, 0x3e06b05f
shr rax, 0x3d
add eax, 0xbeae3ab1
mov rdi, qword [0x141ddb9a0]
cmp eax, 0x89e58cbd
jae 0x1400c4725
mov rax, qword [0x141ddb9a0]
jmp 0x1400c46f2
xor eax, eax
test al, al
jne 0x1400c4765
mov eax, dword [0x141dd5f78]
xor eax, dword [0x141dd5f7c]
add eax, 0x327e5ea9
and eax, 0x29cabe26
imul ebx, eax, 0x9306059f
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x2b07dc5a
jne 0x1400c4780
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c472b
mov eax, dword [0x141dd5f80]
imul eax, dword [0x141dd5f84]
add eax, 0xe74eb9b9
or eax, 0xe9d84c31
xor eax, 0xb818af77
cmp eax, 0xb0fa5aee
ja 0x1400c4780
jmp 0x1400c3270