Function at 0x1400c73c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x178
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xe0], xmm7
movaps xmmword [rbp + 0xd0], xmm6
mov qword [rbp + 0xb0], r9
mov byte [rbp + 0xa0], r8b
mov qword [rbp + 0xc0], rdx
mov eax, dword [0x141dd5e80]
and eax, dword [0x141dd5e84]
mov qword [rbp + 0x88], rcx
or eax, 0x88400010
and eax, 0x8a400051
cmp eax, 0xdc623e83
jbe 0x1400c74f0
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x160
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x150
call fcn.1400ef330
sub rsp, rax
mov eax, 0x60
call fcn.1400ef330
sub rsp, rax
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
nop word [rax + rax]
mov eax, dword [0x141dd5e88]
xor edx, edx
div dword [0x141dd5e8c]
add eax, 0x8d4f85dc
or eax, 0xe21620e5
imul eax, eax, 0xd99c7463
mov dword [rbp + 0xc8], eax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r14, rsp
mov eax, 0x160
call fcn.1400ef330
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rcx, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r8, rsp
mov eax, 0x150
call fcn.1400ef330
sub rsp, rax
mov rsi, rsp
mov eax, 0x60
call fcn.1400ef330
sub rsp, rax
mov r9, rsp
mov eax, 0x30
call fcn.1400ef330
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov rax, rsp
cmp dword [rbp + 0xc8], 0xb6a80658
ja 0x1400c74f0
mov qword [rbp + 0xb8], r9
mov qword [rbp + 0x20], r15
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xa8], r12
mov qword [rbp - 0x28], r14
mov qword [rbp + 0x80], rsi
mov qword [rbp - 0x10], r8
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x68], r11
mov qword [rbp - 0x30], r10
mov r9, qword [rbp + 0xc0]
mov qword [rax], r9
mov r8, qword [rbp + 0x160]
mov qword [rdx + 8], r8
shr r9, 1
cmp r9, r8
mov rdi, rcx
jae 0x1400c88b8
nop dword [rax]
mov eax, dword [0x141dd5ed0]
imul eax, dword [0x141dd5ed4]
imul eax, eax, 0x8ffe32f0
add eax, 0xd259a700
cmp eax, 0x488daae6
ja 0x1400c7670
mov r15, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x170]
lea rax, [r15 + rcx*8]
mov qword [rbp - 0x48], rax
mov r11, qword [rbp + 0x20]
nop dword [rax]
mov eax, dword [0x141dd5ed8]
imul eax, dword [0x141dd5edc]
or eax, 0x8e4f9b0b
xor eax, 0x337d01c7
add eax, 0x80a611ff
cmp eax, 0x3540536b
ja 0x1400c76b0
test rcx, rcx
je 0x1400c8a6f
mov rcx, qword [rbp + 0x178]
mov rax, qword [rcx]
mov qword [rbp - 0x40], rax
mov rax, qword [rcx + 8]
mov qword [rbp - 0x38], rax
mov rax, qword [rcx + 0x10]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x20]
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0xa8], rdx
mov qword [rbp + 0x40], rax
lea rdx, [r11 + 0x10]
lea r8, [r11 + 0xe8]
lea r9, [r11 + 8]
lea r10, [r11 + 0x100]
add r11, 0x130
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400c7730
mov esi, 8
xorps xmm6, xmm6
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
pcmpeqd xmm7, xmm7
xor eax, eax
mov qword [rbp + 0x98], rax
xor ecx, ecx
mov qword [rbp + 0x70], rdi
mov qword [rbp + 8], rdx
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x10], r8
mov qword [rbp + 0x18], r9
mov qword [rbp - 0x20], r10
xor r12d, r12d
mov qword [rbp - 0x18], r11
nop word cs:[rax + rax]
mov qword [rbp + 0x90], rcx
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x48], r15
mov rax, qword [r15]
mov rcx, qword [rbp - 0x40]
lock inc qword [rcx]
movzx ecx, word [rax + 0x38]
mov qword [rbp + 0x78], rcx
mov rcx, qword [rax + 0x40]
mov qword [rbp + 0xb8], rcx
mov r13, qword [rax + 0x50]
mov rcx, qword [rax + 0x58]
mov qword [rbp + 0xb0], rcx
mov rdx, qword [rax + 0x78]
mov qword [rbp + 0xc8], rdx
mov rax, qword [rax + 0x90]
mov qword [rbp + 0xc0], rax
xor eax, eax
test rcx, rcx
setne al
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp - 0x38]
mov rsi, qword [rax]
cmp qword [rsi + 0x18], 0
je 0x1400c7cc0
mov eax, dword [0x141dd5ee8]
add eax, dword [0x141dd5eec]
xor eax, 0x6f27300a
imul rax, rax, 0x34bb5c7b
shr rax, 0x3d
cmp eax, 0xfe304c7c
jne 0x1400c7840
mov rcx, qword [rsi + 0x20]
mov rdx, qword [rsi + 0x28]
sub rsp, 0x20
mov r8, r13
call fcn.1400c9f50
add rsp, 0x20
nop word cs:[rax + rax]
mov rcx, qword [rsi + 0x20]
mov rdx, qword [rsi + 0x28]
sub rsp, 0x20
mov r8, r13
call fcn.1400c9f50
add rsp, 0x20
test r12b, r12b
jne 0x1400c7840
mov r15, qword [rsi]
mov rcx, rax
nop word cs:[rax + rax]
test r12b, r12b
jne 0x1400c7870
mov eax, dword [0x141dd5ef0]
and eax, dword [0x141dd5ef4]
add eax, 0x504c77d7
and eax, 0x77ebb7e3
cmp eax, 0xa8701884
je 0x1400c7875
mov rax, rcx
shr rax, 0x39
mov r8, qword [rsi + 8]
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r9d, r9d
mov r11, qword [rbp + 0xc8]
and rcx, r8
movdqu xmm1, xmmword [r15 + rcx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb eax, xmm2
test eax, eax
je 0x1400c7935
nop word cs:[rax + rax]
tzcnt edx, eax
add rdx, rcx
and rdx, r8
neg rdx
imul rdx, rdx, 0x160
cmp qword [r15 + rdx - 0x160], r13
je 0x1400c79e0
lea edx, [rax - 1]
and edx, eax
mov eax, edx
nop dword [rax]
mov edx, dword [0x141dd5f10]
sub edx, dword [0x141dd5f14]
or edx, 0xafdf04d0
add edx, 0x68269238
cmp edx, 0x703ef69
jb 0x1400c7910
test ax, ax
jne 0x1400c78e0
pcmpeqb xmm1, xmm7
pmovmskb r10d, xmm1
mov eax, dword [0x141dd5ef8]
xor edx, edx
div dword [0x141dd5efc]
mov eax, dword [0x141dd5f00]
imul eax, dword [0x141dd5f04]
imul eax, eax, 0xdd90ff40
cmp eax, 0x85567078
je 0x1400c794c
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f08]
and eax, dword [0x141dd5f0c]
and eax, 0xa102fbfe
xor eax, 0x8f32c97e
imul eax, eax, 0xcad03b7e
cmp eax, 0x89703da0
jb 0x1400c7970
test r10w, r10w
jne 0x1400c7cc0
nop dword [rax]
mov eax, dword [0x141dd5f18]
xor edx, edx
div dword [0x141dd5f1c]
add eax, 0xc7692660
shr eax, 1
imul rax, rax, 0x49f7e1df
shr rax, 0x3d
or eax, 0xc18f5572
cmp eax, 0x3ef15eab
jb 0x1400c79a0
add r9, 0x10
add rcx, r9
jmp 0x1400c78b9
add r15, rdx
mov eax, dword [0x141dd5f20]
or eax, dword [0x141dd5f24]
xor eax, 0x43c244e1
imul eax, eax, 0x4fcbe016
and eax, 0x7dcd19ca
cmp eax, 0xf3189b0c
je 0x1400c79e3
mov rax, qword [r15 - 0x60]
test rax, rax
mov rdx, qword [rbp + 0xc0]
je 0x1400c7b7e
mov ecx, dword [0x141dd5f28]
or ecx, dword [0x141dd5f2c]
mov rsi, qword [rax + 0x10]
imul eax, ecx, 0x7c09f3fc
and eax, 0xc45bbbb4
cmp eax, 0x3a5cfb60
jae 0x1400c7a67
mov rdx, qword [rbp + 0x68]
mov qword [rdx], 0
mov qword [rbx], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rsi
mov r8, rbx
mov r9, rbx
call r14
add rsp, 0x30
mov rdi, qword [rbp + 0x68]
nop dword [rax + rax]
mov qword [rdi], 0
mov qword [rbx], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
mov r9, rbx
call r14
add rsp, 0x30
test r12b, r12b
jne 0x1400c7a70
test eax, eax
jne 0x1400c7ae0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd5f30]
xor edx, edx
div dword [0x141dd5f34]
imul eax, eax, 0x6d65ba47
add eax, 0x80cf87c9
cmp eax, 0xae50c96e
jae 0x1400c7ac0
mov rdi, qword [rbp + 0x70]
mov r9d, 0xbeb48fdb
mov rcx, qword [rbp + 0x68]
mov r8d, 0xc4dfc08d
mov r11, qword [rbp + 0xc8]
nop dword [rax + rax]
mov eax, dword [0x141dd6030]
and eax, dword [0x141dd6034]
add eax, 0x1eca9ecf
imul rax, r8
shr rax, 0x3f
cmp eax, 0x57102e8b
ja 0x1400c7b00
mov rcx, qword [rcx]
mov eax, dword [0x141dd6038]
xor edx, edx
div dword [0x141dd603c]
mov r8d, eax
xor r8d, 0xc176e5f
imul r8, r9
shr r8, 0x3f
mov rax, rcx
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
cmp r8d, 0x86c5dfa4
je 0x1400c7b23
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
cmp rdx, qword [r15 - 0x38]
mov rdx, qword [rbp + 0xc0]
jne 0x1400c7cc0
mov rcx, qword [rbp + 0x40]
movzx eax, byte [rcx + 8]
mov byte [rdi + 8], al
mov rax, qword [rcx]
mov qword [rdi], rax
mov eax, dword [0x141dd6040]
imul eax, dword [0x141dd6044]
lea rsi, [r15 - 0x158]
xor eax, 0x20020001
or eax, 0x4ff9f7f6
cmp eax, 0x9a6aec0
jne 0x1400c7c0c
mov rax, qword [rbp + 0xa8]
mov r8, qword [rax]
mov rax, qword [rbp + 0x58]
mov r9, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r11
mov rcx, rsi
mov rdx, rdi
call fcn.1400cf410
mov rdx, qword [rbp + 0xc0]
mov r11, qword [rbp + 0xc8]
add rsp, 0x30
mov rax, qword [rbp + 0xa0]
mov qword [r15 - 0x158], rax
mov rax, qword [rbp + 0xb0]
mov qword [r15 - 0x150], rax
mov r14, qword [rbp + 0x58]
mov rbx, rdi
mov rdi, qword [rbp + 0xa8]
nop word [rax + rax]
mov eax, dword [0x141dd6048]
mov ecx, dword [0x141dd604c]
add eax, ecx
add eax, 0xdbe1afd3
or eax, 0xa90d07a2
imul r13d, eax, 0x13ddecd0
mov r8, qword [rdi]
mov r9, qword [r14]
sub rsp, 0x30
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r11
mov rcx, rsi
mov rdx, rbx
call fcn.1400cf410
mov rdx, qword [rbp + 0xc0]
mov r11, qword [rbp + 0xc8]
add rsp, 0x30
mov rax, qword [rbp + 0xa0]
mov qword [r15 - 0x158], rax
mov rax, qword [rbp + 0xb0]
mov qword [r15 - 0x150], rax
cmp r13d, 0xfcefc442
je 0x1400c7c20
mov r15, qword [rbp + 0x48]
mov rsi, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x90]
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rdi, rbx
mov rbx, qword [rbp + 0x60]
jmp 0x1400c865a
mov rcx, qword [rbp - 0x30]
mov qword [rcx], r13
nop word [rax + rax]
mov eax, dword [0x141dd5f38]
imul eax, dword [0x141dd5f3c]
add eax, 0x8d832534
cmp eax, 0xb2f4f7ed
ja 0x1400c7cd0
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
mov r15, qword [rbp + 0x38]
je 0x1400c7d40
mov r8, qword [rbp + 0x78]
shr r8d, 1
sub rsp, 0x20
mov rcx, r15
call fcn.14008bbc0
add rsp, 0x20
mov eax, dword [0x141dd5f48]
or eax, dword [0x141dd5f4c]
xor eax, 0xc12c1074
and eax, 0xcb6d7d7c
imul eax, eax, 0xea6e5cd4
cmp eax, 0xe2fa7fd8
jae 0x1400c7d10
jmp 0x1400c7fc8
mov eax, dword [0x141dd5f40]
imul eax, dword [0x141dd5f44]
imul eax, eax, 0x711be11c
and eax, 0xf4ea6f90
add eax, 0x2f63b545
cmp eax, 0xff3ba20d
ja 0x1400c7d40
test r13, r13
mov rsi, qword [rbp - 0x50]
je 0x1400c7eed
cmp r13, 4
jne 0x1400c7e60
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 6
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
mov rcx, rax
nop dword [rax]
mov eax, dword [0x141dd5f78]
xor eax, dword [0x141dd5f7c]
xor eax, 0x808128
or eax, 0xda697e97
add eax, 0x195852b8
cmp eax, 0xe1a9b6e1
jb 0x1400c7da0
test rcx, rcx
je 0x1400c8b50
mov eax, dword [0x141dd5f88]
or eax, dword [0x141dd5f8c]
xor eax, 0xb034a4b2
and eax, 0xb837e4b7
imul eax, eax, 0xf8303005
cmp eax, 0x6e8eaaa4
jbe 0x1400c7e00
mov word [rcx + 4], 0x6d65
mov dword [rcx], 0x74737953
nop word [rax + rax]
mov eax, dword [0x141dd5f90]
xor edx, edx
div dword [0x141dd5f94]
or eax, 0xbf5e77d9
imul eax, eax, 0x7d3bdf8e
mov word [rcx + 4], 0x6d65
mov dword [rcx], 0x74737953
cmp eax, 0x384d6b8c
jb 0x1400c7e00
nop dword [rax]
mov eax, dword [0x141dd5f98]
or eax, dword [0x141dd5f9c]
or eax, 0xf7bbd9d7
and eax, 0xffbbdbf7
cmp eax, 0xcbf0bbef
jb 0x1400c7e30
mov eax, 6
mov edx, 6
jmp 0x1400c7fb8
mov eax, dword [0x141dd5f50]
sub eax, dword [0x141dd5f54]
imul rax, rax, 0x120a7215
shr rax, 0x3a
imul eax, eax, 0xfa92654f
imul rax, rax, 0x220818e1
shr rax, 0x3d
cmp eax, 0xadd8c38e
ja 0x1400c7e60
mov qword [rbp + 0x28], rcx
lea rax, [0x1400cf2b0]
mov qword [rbp + 0x30], rax
lea rax, [0x141db9a98]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 1
mov qword [rbp - 0x60], 0
lea rax, [rbp + 0x28]
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 1
sub rsp, 0x20
mov rcx, rsi
lea rdx, [rbp - 0x80]
call fcn.1400384d0
add rsp, 0x20
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
jmp 0x1400c7fb8
mov eax, dword [0x141dd5f58]
or eax, dword [0x141dd5f5c]
imul rax, rax, 0x1d3d8a4b
shr rax, 0x3c
imul eax, eax, 0x5259e3d6
cmp eax, 0xb1a08e64
jne 0x1400c7f20
movzx eax, byte [0x141ddb278]
nop dword [rax + rax]
movzx eax, byte [0x141ddb278]
test r12b, r12b
jne 0x1400c7f20
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x1400c8b15
mov rcx, rax
mov eax, dword [0x141dd5f68]
and eax, dword [0x141dd5f6c]
imul rax, rax, 0x4cc1956f
shr rax, 0x3d
imul eax, eax, 0xfa95cc1f
xor eax, 0x7efa78d
cmp eax, 0x8bc442cb
jbe 0x1400c7f80
mov dword [rcx], 0x656c6449
nop dword [rax + rax]
mov eax, dword [0x141dd5f70]
xor eax, dword [0x141dd5f74]
imul rax, rax, 0x35a0e21d
shr rax, 0x3c
xor eax, 0xfdd13e7b
add eax, 0x67dff5ef
mov dword [rcx], 0x656c6449
cmp eax, 0xf7c273bb
jae 0x1400c7f80
mov eax, 4
mov edx, 4
mov qword [r15], rax
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], rdx
mov byte [r15 + 0x18], 1
mov rcx, qword [rbp + 0x58]
nop dword [rax]
mov eax, dword [0x141dd5fa0]
add eax, dword [0x141dd5fa4]
or eax, 0x3829d07b
and eax, 0xbfbdf97f
cmp eax, 0x6281fcb5
je 0x1400c7fd0
nop dword [rax]
mov eax, dword [0x141dd5fa8]
add eax, dword [0x141dd5fac]
imul eax, eax, 0x76167f80
or eax, 0xef5bb8dd
cmp eax, 0xe7a501f4
je 0x1400c7ff0
mov rax, qword [rcx]
nop word cs:[rax + rax]
test r12b, r12b
jne 0x1400c8020
test r13, r13
mov qword [rbp + 0xb8], rax
je 0x1400c81b1
mov eax, dword [0x141dd5fb0]
mov ecx, dword [0x141dd5fb4]
add eax, ecx
add eax, 0xad3b3db6
or eax, 0xbffdaefe
cmp eax, 0x729bf8dd
jb 0x1400c8035
sub rsp, 0x20
mov ecx, 0x410
xor edx, edx
mov r8d, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov r12, rax
dec rax
lea rdi, [rbp + 0x28]
lea rbx, [rbp - 0x80]
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5fb8]
add ecx, dword [0x141dd5fbc]
imul rcx, rcx, 0x5ef9a439
shr rcx, 0x3c
add ecx, 0x2a54c425
or ecx, 0xd96c3831
cmp ecx, 0x66c4e89e
jb 0x1400c8090
cmp rax, 0xfffffffffffffffe
jae 0x1400c80d2
mov rax, r12
inc rax
cmp rax, 1
jbe 0x1400c810a
jmp 0x1400c816f
sub rsp, 0x20
call r14
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd5fc0]
xor edx, edx
div dword [0x141dd5fc4]
imul rax, rax, 0x13180cd7
shr rax, 0x37
or eax, 0xdbb34bda
and eax, 0xdbb34bfb
cmp eax, 0xed9a3526
jae 0x1400c80e0
sub rsp, 0x20
mov ecx, 0x1000
xor edx, edx
mov r8d, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov r12, rax
mov eax, dword [0x141dd5fc8]
add eax, dword [0x141dd5fcc]
and eax, 0x8442260
imul eax, eax, 0x53d17fca
cmp eax, 0x8eba9896
ja 0x1400c8125
mov rax, r12
dec rax
mov ecx, dword [0x141dd5fd0]
sub ecx, dword [0x141dd5fd4]
imul ecx, ecx, 0xef695766
add ecx, 0x7c6b7c72
cmp ecx, 0xfa430c32
ja 0x1400c8149
cmp rax, 0xfffffffffffffffe
jae 0x1400c81a6
mov eax, dword [0x141dd5fd8]
xor edx, edx
div dword [0x141dd5fdc]
mov ecx, 0xa9d35c51
imul rax, rcx
shr rax, 0x3f
or eax, 0xc183cc1a
cmp eax, 0x4d497e05
mov r15, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
jae 0x1400c86a0
jmp 0x1400c86f2
sub rsp, 0x20
call r14
add rsp, 0x20
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov eax, dword [0x141dd6050]
xor edx, edx
div dword [0x141dd6054]
and eax, 0xa4e68ce6
imul eax, eax, 0x201b5d74
cmp eax, 0xf4471ddd
mov rsi, qword [rbp - 0x28]
mov r12, qword [rbp - 0x20]
mov rdi, qword [rbp + 0x20]
mov r14, qword [rbp - 0x18]
mov qword [rbp + 0x78], r8
mov qword [rbp - 8], r9
mov qword [rbp], r10
ja 0x1400c83a0
nop word [rax + rax]
mov eax, dword [0x141dd6058]
sub eax, dword [0x141dd605c]
mov ecx, 0xc7d72301
imul rax, rcx
shr rax, 0x3f
imul r15d, eax, 0xa9a02e2f
mov rax, qword [rbp + 0x38]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
mov rax, qword [rbp + 8]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rdi + 0x30], 0
mov qword [rdi + 0x38], 8
movups xmmword [rdi + 0x40], xmm6
movabs rax, 0x8000000000000000
mov qword [rdi + 0x60], rax
mov qword [rdi + 0xe0], r13
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x50], 8
mov qword [rdi + 0x58], 0
mov qword [rdi + 0x98], rax
mov qword [rdi + 0xb8], rax
mov rax, qword [rbp + 0x10]
movups xmmword [rax], xmm6
mov rax, qword [rbp + 0xa0]
mov qword [rdi], rax
mov rax, qword [rbp + 0xb0]
mov qword [rdi + 8], rax
mov dword [rdi + 0xd8], 1
mov qword [rdi + 0xf8], r8
movups xmmword [r12 + 0x10], xmm6
movups xmmword [r12], xmm6
mov qword [rdi + 0x120], r9
mov qword [rdi + 0x128], r10
mov dword [rdi + 0x150], 0
mov byte [rdi + 0x154], 1
movups xmmword [r14 + 0x10], xmm6
movups xmmword [r14], xmm6
mov rcx, qword [rbp + 0x40]
movzx eax, byte [rcx + 8]
mov byte [rsi + 8], al
mov rax, qword [rcx]
mov qword [rsi], rax
mov rax, qword [rbp + 0xa8]
mov r8, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xc8]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov rdx, rsi
mov r9, qword [rbp + 0xb8]
call fcn.1400cf410
add rsp, 0x30
mov rbx, qword [rdi]
sub rsp, 0x20
mov r8d, 0x150
mov rcx, qword [rbp + 0x80]
mov rdx, qword [rbp + 0x18]
call sub.VCRUNTIME140.dll_memcpy
mov r10, qword [rbp]
mov r9, qword [rbp - 8]
mov r8, qword [rbp + 0x78]
add rsp, 0x20
cmp r15d, 0x27386555
je 0x1400c83a0
cmp rbx, 2
jne 0x1400c84e0
mov r15, qword [rbp + 0x48]
mov rdi, qword [rbp + 0x70]
mov rsi, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x90]
mov rbx, qword [rbp + 0x60]
xor r12d, r12d
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
jmp 0x1400c865a
mov rax, qword [rbp + 0x38]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
mov rax, qword [rbp + 8]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rdi + 0x30], 0
mov qword [rdi + 0x38], 8
movups xmmword [rdi + 0x40], xmm6
movabs rax, 0x8000000000000000
mov qword [rdi + 0x60], rax
mov qword [rdi + 0xe0], r13
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x50], 8
mov qword [rdi + 0x58], 0
mov qword [rdi + 0x98], rax
mov qword [rdi + 0xb8], rax
mov rax, qword [rbp + 0x10]
movups xmmword [rax], xmm6
mov rax, qword [rbp + 0xa0]
mov qword [rdi], rax
mov rax, qword [rbp + 0xb0]
mov qword [rdi + 8], rax
mov dword [rdi + 0xd8], 1
mov qword [rdi + 0xf8], r8
movups xmmword [r12 + 0x10], xmm6
movups xmmword [r12], xmm6
mov qword [rdi + 0x120], r9
mov qword [rdi + 0x128], r10
mov dword [rdi + 0x150], 0
mov byte [rdi + 0x154], 1
movups xmmword [r14 + 0x10], xmm6
movups xmmword [r14], xmm6
mov rcx, qword [rbp + 0x40]
movzx eax, byte [rcx + 8]
mov byte [rsi + 8], al
mov rax, qword [rcx]
mov qword [rsi], rax
mov rax, qword [rbp + 0xa8]
mov r8, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xc8]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov rdx, rsi
mov r9, qword [rbp + 0xb8]
call fcn.1400cf410
add rsp, 0x10
mov r8d, 0x150
mov rcx, qword [rbp + 0x80]
mov rdx, qword [rbp + 0x18]
call sub.VCRUNTIME140.dll_memcpy
mov r10, qword [rbp]
mov r9, qword [rbp - 8]
mov r8, qword [rbp + 0x78]
add rsp, 0x20
jmp 0x1400c8200
mov r8, rbx
mov eax, dword [0x141dd6060]
or eax, dword [0x141dd6064]
mov r13, qword [rbp - 0x10]
mov rcx, qword [rbp + 0x98]
mov qword [r13], rcx
add eax, 0x87a9d983
or eax, 0xfe78cfd
cmp eax, 0xd9dabbd8
mov r15, qword [rbp + 0x48]
mov rdi, qword [rbp + 0x70]
mov rsi, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x90]
mov rbx, qword [rbp + 0x60]
mov r12d, 0
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
jbe 0x1400c853b
mov qword [r13 + 8], rsi
mov qword [r13 + 0x10], rcx
mov rdx, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6068]
imul eax, dword [0x141dd606c]
and eax, 0x302200d
add eax, 0xb0079b3f
mov qword [r13 + 8], rsi
mov qword [r13 + 0x10], rcx
cmp eax, 0x73a46042
jb 0x1400c8550
cmp rcx, qword [rbp + 0x98]
jne 0x1400c862a
mov qword [rbp + 0xc8], r8
mov eax, dword [0x141dd6070]
sub eax, dword [0x141dd6074]
add eax, 0x1d3c1e72
imul rax, rax, 0x1268fa39
shr rax, 0x3c
imul eax, eax, 0x28979b65
cmp eax, 0x6e9ab545
jne 0x1400c85d0
sub rsp, 0x20
mov rcx, r13
call fcn.1400ca430
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd6078]
add eax, dword [0x141dd607c]
imul esi, eax, 0x8527284f
xor esi, 0x56020180
or esi, 0x88acb673
sub rsp, 0x20
mov rcx, r13
call fcn.1400ca430
add rsp, 0x20
cmp esi, 0xbaea8970
je 0x1400c85d0
mov rax, qword [r13]
mov qword [rbp + 0x98], rax
mov rsi, qword [r13 + 8]
mov rdx, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xc8]
imul rax, rcx, 0x158
mov qword [rsi + rax], r8
lea rcx, [rsi + rax]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rbp + 0x90]
add rsp, 0x20
inc rcx
add r15, 8
nop
mov eax, dword [0x141dd6080]
sub eax, dword [0x141dd6084]
imul eax, eax, 0xcfc39f90
and eax, 0xe1ef170
imul eax, eax, 0xc2765821
cmp eax, 0x1e06db6a
jb 0x1400c8660
cmp r15, qword [rbp - 0x48]
jne 0x1400c7780
jmp 0x1400c8a24
mov eax, dword [0x141dd5fe0]
imul eax, dword [0x141dd5fe4]
imul rsi, rax, 0x650c553
shr rsi, 0x39
or esi, 0xdf241e2a
mov qword [rbp + 0x28], 0
mov qword [rbp - 0x80], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, r12
mov rdx, rdi
mov r8, rbx
mov r9, rbx
call r15
add rsp, 0x30
cmp esi, 0xed19c4c3
jbe 0x1400c8720
mov qword [rbp + 0x28], 0
mov qword [rbp - 0x80], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, r12
mov rdx, rdi
mov r8, rbx
mov r9, rbx
call r15
add rsp, 0x30
jmp 0x1400c86a0
test eax, eax
jne 0x1400c87c4
mov eax, dword [0x141dd5fe8]
xor eax, dword [0x141dd5fec]
or eax, 0x868c1171
xor eax, 0x1b652d7
add eax, 0x6496ca05
cmp eax, 0x8d911857
jb 0x1400c878f
nop word [rax + rax]
mov esi, dword [0x141dd5ff0]
xor esi, dword [0x141dd5ff4]
imul rax, rsi, 0x3e13f33
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1b
or esi, 0xf01dec9c
xor esi, 0xc7bc4ef5
sub rsp, 0x20
call r14
add rsp, 0x20
cmp esi, 0x7ad791a0
jbe 0x1400c87a0
sub rsp, 0x20
call r14
add rsp, 0x20
jmp 0x1400c8750
mov eax, dword [0x141dd5ff8]
imul eax, dword [0x141dd5ffc]
imul eax, eax, 0x17ce99fc
add eax, 0x48ae6889
xor eax, 0xd7c986a1
cmp eax, 0xd3afeb8
jb 0x1400c87a0
mov eax, dword [0x141dd6000]
add eax, dword [0x141dd6004]
xor eax, 0x20040890
or eax, 0xd5fbf76d
cmp eax, 0xc654aece
mov eax, dword [0x141dd6008]
add eax, dword [0x141dd600c]
imul rax, rax, 0x4cb35165
shr rax, 0x3c
add eax, 0xe36fc021
and eax, 0xe327c007
cmp eax, 0x8381f089
je 0x1400c87df
mov rsi, qword [rbp + 0x28]
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x18
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x1400c8b82
mov r8, rax
mov rax, rsi
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
mov r9, rdx
shr r9, 0x17
movabs rax, 0xfffffffd49ef6f00
add r9, rax
mov rcx, qword [rbp + 0xb8]
cmp r9, rcx
mov eax, 0
cmovbe rax, r9
mov r10, rcx
sub r10, rax
mov qword [r8], 1
mov qword [r8 + 8], 1
mov qword [r8 + 0x10], r12
nop word cs:[rax + rax]
mov eax, dword [0x141dd6028]
sub eax, dword [0x141dd602c]
imul rax, rax, 0x3c8f19cb
shr rax, 0x3d
or eax, 0xddf7f7fe
cmp eax, 0xa44007db
je 0x1400c8890
jmp 0x1400c81ba
mov r13, rdx
mov rsi, rax
nop
mov eax, dword [0x141dd5e90]
sub eax, dword [0x141dd5e94]
imul eax, eax, 0x20a2365a
add eax, 0xa9ed3e4f
cmp eax, 0xa48bffd3
jb 0x1400c88c0
mov r12, qword [rbp + 0x170]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5e98]
sub eax, dword [0x141dd5e9c]
add eax, 0x15f014f1
or eax, 0xfaa77c65
add eax, 0x3f04d21a
cmp eax, 0x554321a8
ja 0x1400c88f0
cmp byte [rbp + 0xa0], 0
mov r14, qword [rbp + 0xb0]
je 0x1400c89b0
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x38]
mov rbx, qword [rbp + 0x178]
mov r8, qword [rbp + 0xc8]
mov r15, qword [rbp + 0xb8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5ea8]
or ecx, dword [0x141dd5eac]
or ecx, 0xff85fd67
add ecx, 0x83b0e5cb
xor ecx, 0xf893df08
cmp ecx, 0x93a44049
ja 0x1400c8960
test rax, rax
je 0x1400c8ae2
add rax, 0x110
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x1400c89a0
jmp 0x1400c8c4a
mov eax, dword [0x141dd5ea0]
imul eax, dword [0x141dd5ea4]
and eax, 0x7ca8f8a7
cmp eax, 0xebde2119
je 0x1400c89b0
test r14, r14
je 0x1400c7670
mov rcx, qword [rbp + 0xb0]
shr rcx, 1
mov rbx, qword [rbp + 0x178]
mov r12, qword [rbp + 0x170]
mov r8, qword [rbp + 0xc8]
mov r15, qword [rbp + 0xb8]
nop dword [rax + rax]
mov eax, dword [0x141dd5ec8]
xor edx, edx
div dword [0x141dd5ecc]
and eax, 0xd61af5e4
add eax, 0x7f9e8a9d
cmp eax, 0xcb4a765c
jae 0x1400c8a00
jmp 0x1400c8c83
test rcx, rcx
je 0x1400c8ab5
mov r14, rcx
mov rbx, rsi
mov eax, dword [0x141dd60a0]
imul eax, dword [0x141dd60a4]
or eax, 0x8bc98bb8
mov ecx, 0xb59258d3
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0x31708543
cmp eax, 0x887f5cc
mov rdi, qword [rbp + 0x88]
jae 0x1400c8fc7
jmp 0x1400c9008
pxor xmm0, xmm0
mov rax, qword [rbp + 0x88]
movdqu xmmword [rax], xmm0
mov qword [rax + 0x10], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ee0]
xor edx, edx
div dword [0x141dd5ee4]
imul eax, eax, 0x6c085758
add eax, 0xf9e3edf8
cmp eax, 0x5c1a81bf
jbe 0x1400c8a90
jmp 0x1400c9681
mov eax, dword [0x141dd6088]
sub eax, dword [0x141dd608c]
or eax, 0x8643d7b7
add eax, 0x650f4543
cmp eax, 0x5a46372
mov rcx, qword [rbp + 0x88]
jae 0x1400c8f2f
jmp 0x1400c8f5c
mov qword [rbp + 0xc0], r9
mov eax, dword [0x141dd5eb0]
xor eax, dword [0x141dd5eb4]
add eax, 0xdee1e00
and eax, 0xc798df70
imul eax, eax, 0xc28eea96
cmp eax, 0x4212e063
jbe 0x1400c8bfa
jmp 0x1400c8c2d
ud2
ud2
mov eax, dword [0x141dd6010]
and eax, dword [0x141dd6014]
add eax, 0xb334918b
xor eax, 0x82584417
cmp eax, 0xc57d2281
jbe 0x1400c8bb0
ud2
mov eax, dword [0x141dd6018]
xor eax, dword [0x141dd601c]
imul eax, eax, 0x27f4dc0c
ud2
mov eax, dword [0x141dd5eb8]
and eax, dword [0x141dd5ebc]
imul edi, eax, 0x71333ba8
add edi, 0xd87043b8
or edi, 0xeb3665dc
sub rsp, 0x20
call fcn.140078440
add rsp, 0x20
cmp edi, 0x6b4108ef
jae 0x1400c8c3c
sub rsp, 0x20
call fcn.140078440
add rsp, 0x20
jmp 0x1400c8bfa
mov r8, qword [rbp + 0xc8]
mov r9, qword [rbp + 0xc0]
shr r14, 1
nop dword [rax]
mov ecx, dword [0x141dd5ec0]
mov edx, dword [0x141dd5ec4]
add edx, ecx
add edx, 0x67d9bacc
xor edx, 0x7b0ce948
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x208]
cmp rcx, r14
cmovbe rcx, r14
cmp edx, 0x11c21788
jb 0x1400c8c50
mov qword [r13], rcx
mov qword [r8], r9
sub r12, r9
jb 0x1400c8f2d
mov eax, dword [0x141dd60e8]
xor edx, edx
div dword [0x141dd60ec]
or eax, 0xcfe7cf62
cmp eax, 0x7b520a9a
mov rax, rsi
je 0x1400c8cbc
mov qword [r15], rax
xor eax, eax
test al, al
mov rax, rsi
je 0x1400c8cc1
mov qword [r15], rax
jmp 0x1400c8cb0
mov eax, dword [0x141dd60f0]
imul eax, dword [0x141dd60f4]
add eax, 0x8c6bf8f3
or eax, 0xb48e418d
and eax, 0xb7cfd5bd
cmp eax, 0xa603b334
jae 0x1400c8ce8
mov qword [r15 + 8], r8
mov rdx, qword [rbp + 0x168]
lea rax, [rdx + r9*8]
mov r14, qword [rbp + 0xa8]
nop word [rax + rax]
mov ecx, dword [0x141dd60f8]
imul ecx, dword [0x141dd60fc]
xor ecx, 0x475324f0
mov qword [r15 + 8], r8
cmp ecx, 0xc194debd
ja 0x1400c8d00
mov ecx, dword [0x141dd6100]
and ecx, dword [0x141dd6104]
and ecx, 0xd52de030
xor ecx, 0xe94e41ee
imul ecx, ecx, 0xb086a00c
cmp ecx, 0x36d3ee57
jae 0x1400c8d70
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x20], r12
mov qword [r15 + 0x28], rbx
mov qword [r15 + 0x30], r8
mov qword [r15 + 0x38], r13
mov qword [r15 + 0x40], rdx
mov qword [r15 + 0x48], r9
mov qword [r15 + 0x50], rbx
nop dword [rax]
mov ecx, dword [0x141dd6108]
or ecx, dword [0x141dd610c]
and ecx, 0x420135c0
or ecx, 0x15f6082b
xor ecx, 0xd0f6f60b
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x20], r12
mov qword [r15 + 0x28], rbx
mov qword [r15 + 0x30], r8
mov qword [r15 + 0x38], r13
mov qword [r15 + 0x40], rdx
mov qword [r15 + 0x48], r9
mov qword [r15 + 0x50], rbx
cmp ecx, 0xfbb13260
ja 0x1400c8d70
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x38]
test rsi, rsi
je 0x1400c8e0f
mov eax, dword [0x141dd6140]
add eax, dword [0x141dd6144]
imul eax, eax, 0x982c5887
imul rcx, rax, 0x3842a4d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x1679e280
jbe 0x1400c9211
jmp 0x1400c9245
sub rsp, 0x20
call fcn.140078440
add rsp, 0x20
nop dword [rax]
mov ecx, dword [0x141dd6110]
or ecx, dword [0x141dd6114]
xor ecx, 0x746d55ea
imul rcx, rcx, 0x4aeaf659
shr rcx, 0x3d
cmp ecx, 0x30424cd4
je 0x1400c8e20
mov rsi, qword [rax]
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x38]
test rdi, rdi
je 0x1400c8ee8
nop dword [rax + rax]
mov eax, dword [0x141dd6120]
xor edx, edx
div dword [0x141dd6124]
add eax, 0xc761c060
imul rax, rax, 0x1c709b3
shr rax, 0x37
cmp eax, 0x5818aac9
je 0x1400c8e70
cmp qword [rdi + 0x110], rsi
je 0x1400c8eca
mov eax, dword [0x141dd6128]
sub eax, dword [0x141dd612c]
imul eax, eax, 0xcb792d63
xor eax, 0x6ebb7d18
add eax, 0x4556959b
cmp eax, 0x129c20b
jae 0x1400c918d
jmp 0x1400c91cf
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, rdi
xor r9d, r9d
call fcn.1400ca7e0
add rsp, 0x20
jmp 0x1400c927a
sub rsi, 0xffffffffffffff80
sub rsp, 0x20
mov rcx, r14
mov rdx, rsi
mov r8, r15
call fcn.1400ff880
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd6118]
or eax, dword [0x141dd611c]
add eax, 0x8acc912a
cmp eax, 0x941e719f
jae 0x1400c8f10
jmp 0x1400c927a
ud2
mov eax, dword [0x141dd6090]
xor eax, dword [0x141dd6094]
or eax, 0xdbe2adb7
and eax, 0xdbfafdf7
pxor xmm0, xmm0
movdqu xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
cmp eax, 0x8dfc3c50
jae 0x1400c8f6e
pxor xmm0, xmm0
movdqu xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
jmp 0x1400c8f2f
cmp qword [rbp + 0x98], 0
je 0x1400c9681
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd6098]
and eax, dword [0x141dd609c]
or eax, 0xe56747e4
xor eax, 0xd45e390c
add eax, 0x7f47f389
cmp eax, 0xcdcb5508
jae 0x1400c8fa0
jmp 0x1400c9681
mov esi, dword [0x141dd60a8]
xor esi, dword [0x141dd60ac]
add esi, 0xd4c1157b
xor esi, 0xc006a202
or esi, 0x3e9459d
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp esi, 0x85610582
jbe 0x1400c9025
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
jmp 0x1400c8fc7
mov rcx, rax
mov eax, dword [0x141dd60b0]
xor edx, edx
div dword [0x141dd60b4]
nop word cs:[rax + rax]
mov eax, dword [0x141dd60b8]
xor eax, dword [str.yxgMt]
imul eax, eax, 0x653f4873
add eax, 0x5a827de1
xor eax, 0x6fadcab3
cmp eax, 0x29fef20a
jb 0x1400c9040
mov eax, 0xa354f245
mov r8, qword [rbp + 0x98]
nop
mov edx, dword [0x141dd60c0]
and edx, dword [0x141dd60c4]
imul edx, edx, 0x2f30d8e2
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x8d2bdb84
ja 0x1400c9070
test rcx, rcx
je 0x1400c911a
mov eax, dword [0x141dd60d8]
add eax, dword [0x141dd60dc]
and eax, 0x6ba98a52
add eax, 0xbb35fdf5
imul rax, rax, 0x698bfe67
shr rax, 0x3c
cmp eax, 0xa2dd25ff
jbe 0x1400c90d0
mov qword [rcx], r8
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], r14
nop
mov eax, dword [0x141dd60e0]
sub eax, dword [0x141dd60e4]
or eax, 0x6a728f
add eax, 0xe50732d1
and eax, 0x52239f0
mov qword [rcx], r8
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], r14
cmp eax, 0xde4884f3
ja 0x1400c90d0
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
mov qword [rdi], rcx
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], 1
jmp 0x1400c9681
mov eax, dword [0x141dd60c8]
and eax, dword [0x141dd60cc]
mov ecx, 0x9bf10e43
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x8ca2b38a
imul eax, ecx, 0x97d11785
cmp eax, 0x3aac53e8
jb 0x1400c914e
ud2
ud2
mov eax, dword [0x141dd6130]
add eax, dword [0x141dd6134]
imul rbx, rax, 0x4ed568c3
shr rbx, 0x3d
or ebx, 0x63fb62fc
lea rdx, [rsi + 0x80]
sub rsp, 0x20
mov rcx, r14
mov r8, rdi
mov r9, r15
call fcn.140100130
add rsp, 0x20
cmp ebx, 0xdfec3bb0
jbe 0x1400c91f0
lea rdx, [rsi + 0x80]
sub rsp, 0x20
mov rcx, r14
mov r8, rdi
mov r9, r15
call fcn.140100130
add rsp, 0x20
jmp 0x1400c918d
mov eax, dword [0x141dd6138]
imul eax, dword [0x141dd613c]
imul eax, eax, 0xc7259b02
and eax, 0x1a401002
cmp eax, 0x2079bba2
je 0x1400c91f0
jmp 0x1400c927a
mov edi, dword [0x141dd6148]
imul edi, dword [0x141dd614c]
or edi, 0x4faeffff
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, rsi
xor r9d, r9d
call fcn.1400ca7e0
add rsp, 0x20
cmp edi, 0x68d6c565
jae 0x1400c9260
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, rsi
xor r9d, r9d
call fcn.1400ca7e0
add rsp, 0x20
jmp 0x1400c9211
mov eax, dword [0x141dd6150]
xor edx, edx
div dword [0x141dd6154]
or eax, 0xfabffdf3
cmp eax, 0x87a1a485
je 0x1400c9260
mov r11, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6158]
imul eax, dword [0x141dd615c]
cmp eax, 0xf42159d8
je 0x1400c9290
mov rsi, qword [r14]
mov r9, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
mov r8, qword [r14 + 0x18]
mov rax, qword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
nop dword [rax + rax]
mov r10d, dword [0x141dd6160]
xor r10d, dword [0x141dd6164]
imul r10d, r10d, 0x78716b80
and r10d, 0x8a9d4980
cmp r10d, 0x328c3e15
je 0x1400c92c0
test r9, r9
je 0x1400c932f
nop word [rax + rax]
mov r10d, dword [0x141dd6168]
imul r10d, dword [0x141dd616c]
imul r10d, r10d, 0xddba108b
add r10d, 0x476cbf0c
cmp r10d, 0xdfb0314a
ja 0x1400c92f0
test r8, r8
je 0x1400c960c
mov qword [r9 + 0x18], r8
mov qword [r8 + 0x20], r9
add rcx, rdx
jmp 0x1400c960f
mov ecx, dword [0x141dd6170]
and ecx, dword [0x141dd6174]
and ecx, 0x30018f0
or ecx, 0xf4d36602
xor ecx, 0x80698e40
cmp ecx, 0x2659954f
jae 0x1400c9360
mov qword [r11], r8
mov qword [r11 + 8], rax
nop dword [rax]
mov ecx, dword [0x141dd6178]
and ecx, dword [0x141dd617c]
imul ecx, ecx, 0xb7975f78
add ecx, 0xa4efb478
or ecx, 0xdd9b7424
mov qword [r11], r8
mov qword [r11 + 8], rax
cmp ecx, 0x4f4474cb
jb 0x1400c9360
mov qword [r11 + 0x10], rdx
test rsi, rsi
je 0x1400c9681
nop word [rax + rax]
mov eax, dword [0x141dd6180]
imul eax, dword [0x141dd6184]
add eax, 0xd64a71c1
and eax, 0xe5fcab36
add eax, 0x97aa2dfa
cmp eax, 0x5c126c
jb 0x1400c93a0
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd6188]
or eax, dword [0x141dd618c]
imul eax, eax, 0x8b0a39fd
add eax, 0x5bdef73
cmp eax, 0xc96b242f
ja 0x1400c93d0
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x1400c9428
mov qword [r12 + 0x20], 0
mov eax, dword [0x141dd6190]
sub eax, dword [0x141dd6194]
add eax, 0xb6ec4ee2
imul rax, rax, 0x4dc3b06f
shr rax, 0x3d
or eax, 0xad2f4754
cmp eax, 0xb308644c
ja 0x1400c9400
mov rdi, qword [rsi + 8]
mov r13, qword [rsi + 0x10]
test r14b, r14b
jne 0x1400c9430
test r13, r13
je 0x1400c945c
mov rbx, rdi
nop dword [rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c96b0
add rsp, 0x20
add rbx, 0x158
dec r13
jne 0x1400c9440
cmp qword [rsi], 0
je 0x1400c9553
mov eax, dword [0x141dd6198]
sub eax, dword [0x141dd619c]
add eax, 0x99d052be
imul rax, rax, 0xa372a65
shr rax, 0x3b
cmp eax, 0x3660736f
jne 0x1400c9490
mov rax, qword [0x141ddb260]
mov eax, dword [0x141dd61a0]
add eax, dword [0x141dd61a4]
imul eax, eax, 0x45207600
and eax, 0xdd972e00
mov rbx, qword [0x141ddb260]
cmp eax, 0xf30b21a3
je 0x1400c9490
mov eax, dword [0x141dd61a8]
or eax, dword [0x141dd61ac]
imul eax, eax, 0xb68ac56
add eax, 0xbe1fab38
xor eax, 0xf5e2d8f7
cmp eax, 0x5e80385c
jbe 0x1400c94f0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd61b0]
or eax, dword [0x141dd61b4]
or eax, 0x4a7a34cd
imul r13d, eax, 0xb5c8cdbf
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
cmp r13d, 0xc362b6ad
je 0x1400c94f0
nop word cs:[rax + rax]
mov eax, dword [0x141dd61b8]
add eax, dword [0x141dd61bc]
and eax, 0xe07aba4d
imul eax, eax, 0xd7e26e8d
add eax, 0x161fa4e9
cmp eax, 0x8355405
jb 0x1400c9530
mov eax, dword [0x141dd61c0]
or eax, dword [0x141dd61c4]
xor eax, 0x13c4c387
imul rax, rax, 0x25d9dbc5
shr rax, 0x3d
or eax, 0xc9a4219a
cmp eax, 0x2263df9f
jae 0x1400c9590
mov rax, qword [0x141ddb260]
nop word cs:[rax + rax]
mov eax, dword [0x141dd61c8]
xor edx, edx
div dword [0x141dd61cc]
add eax, 0x933dfb53
imul rax, rax, 0xd404093
shr rax, 0x3a
xor eax, 0x3fb85c5b
mov rcx, qword [0x141ddb260]
cmp eax, 0x17795b1a
jb 0x1400c9590
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd61d0]
or eax, dword [0x141dd61d4]
imul eax, eax, 0x7b591b4a
add eax, 0x1cf51073
cmp eax, 0xd7bdba80
ja 0x1400c95e0
mov rsi, r12
test r12, r12
jne 0x1400c93d0
jmp 0x1400c9681
mov rax, r9
mov edx, dword [0x141dd61d8]
and edx, dword [0x141dd61dc]
mov r8d, 0xf310eccb
imul r8, rdx
shr r8, 0x3e
or r8d, 0xa993afd0
and r8d, 0xa993afd1
cmp r8d, 0x192beb2c
jae 0x1400c9650
mov qword [r11], rsi
mov qword [r11 + 8], rax
mov qword [r11 + 0x10], rcx
nop dword [rax + rax]
mov edx, dword [0x141dd61e0]
and edx, dword [0x141dd61e4]
and edx, 0xe66d97a3
add edx, 0xd850e713
or edx, 0x2342ea1c
mov qword [r11], rsi
mov qword [r11 + 8], rax
mov qword [r11 + 0x10], rcx
cmp edx, 0xc19a095c
ja 0x1400c9650
movaps xmm6, xmmword [rbp + 0xd0]
movaps xmm7, xmmword [rbp + 0xe0]
lea rsp, [rbp + 0xf8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret