Function at 0x1400da3b0
Capabilities:
Enumerate processes
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2a8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x220], 0xfffffffffffffffe
mov qword [rbp + 0x1f0], rcx
mov dword [rbp - 0x60], 0x238
mov eax, dword [0x1406cdde4]
mov ecx, dword [0x1406cdde0]
lea edx, [rax - 1]
imul edx, eax
mov dword [rbp + 0x1e4], edx
test dl, 1
sete dl
mov dword [rbp + 0x1e0], ecx
cmp ecx, 0xa
setl al
mov ecx, eax
and cl, dl
xor cl, 1
xor al, dl
mov edx, eax
xor dl, 1
or dl, cl
mov ebx, dword [0x1406d3e70]
mov qword [rbp + 0x1d8], rbx
mov ebx, dword [0x1406d3e74]
mov dword [rbp + 0x1e8], ebx
cmp dl, 1
jne 0x1400da444
xor al, cl
jne 0x1400da844
mov rax, qword [rbp + 0x1d8]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
cmp dword [rbp + 0x1e8], 0xa
jl 0x1400da472
test edx, edx
je 0x1400da472
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x1400da470
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400da802
mov rcx, qword gs:[0x60]
test al, al
je 0x1400da802
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x200], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400da4d6
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400da800
cmp dword [rbp + 0x1e8], 0xa
setl al
test edx, edx
sete bl
setne cl
xor cl, al
and bl, al
xor bl, cl
mov eax, dword [0x1406d3dbc]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406d3db8], 0xa
setl cl
or cl, al
mov byte [rbp + 0x21f], cl
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3dac], 0xa
setl al
or al, cl
mov ecx, dword [0x1406d3db0]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406d3db4], 0xa
setl dl
or dl, cl
mov rcx, qword [rbp + 0x200]
mov rsi, qword [rcx + 0x30]
mov byte [rbp + 0x21e], bl
mov byte [rbp + 0x1fc], dl
test bl, bl
je 0x1400da580
cmp byte [rbp + 0x21f], 0
jne 0x1400da58d
jmp 0x1400da7e0
cmp byte [rbp + 0x21f], 0
je 0x1400da7f0
mov qword [rbp + 0x208], rcx
movsxd rcx, dword [rsi + 0x3c]
mov edx, dword [rcx + rsi + 0x88]
mov rcx, rdx
mov qword [rbp + 0x210], rdx
test rdx, rdx
je 0x1400da780
mov rcx, qword [rbp + 0x210]
mov ecx, dword [rsi + rcx + 0x18]
mov r8, rcx
jmp 0x1400da5e6
mov r11d, 0x811c9dc5
mov rcx, r8
cmp r11d, 0x7f8fe695
je 0x1400da810
sub r8, 1
jb 0x1400da780
mov r13d, ecx
add r13d, 0xffffffff
mov rcx, qword [rbp + 0x210]
mov ecx, dword [rsi + rcx + 0x20]
add rcx, rsi
mov r9d, dword [rcx + r13*4]
mov bl, byte [rsi + r9]
test bl, bl
je 0x1400da5d0
add r9, rsi
mov r11d, 0x811c9dc5
jmp 0x1400da733
mov ecx, r11d
and ecx, 0x7ab683ed
or ecx, 0x1410812
mov ebx, r11d
and ebx, 0x85497c12
xor ebx, ecx
mov ecx, ebx
xor ecx, 0x50af90c3
xor ebx, 0xfebef7ed
and ebx, ecx
mov r12d, r11d
and r12d, 0xae11672e
mov r14d, r10d
and r14d, 0xae11672e
mov ecx, ebx
not ecx
mov r15d, r12d
not r15d
and ecx, r15d
and r15d, 0x6400fcd7
xor r11d, 0x24006406
and r11d, r12d
or r11d, r15d
xor r11d, ebx
xor r11d, 0x6400fcd7
xor r12d, ebx
or r12d, ecx
not r12d
or r12d, r11d
mov ecx, r10d
xor ecx, 0xac106400
and ecx, r14d
mov ebx, r10d
and ebx, 0x12c8050
mov edi, r10d
and edi, 0x50c21881
lea edx, [rdi + 0x9148106]
xor edx, ebx
xor edi, 0xfdd6fc81
mov ebx, r10d
and ebx, 0xac106400
or ebx, 0x52831b03
xor ebx, ecx
mov ecx, ebx
xor ecx, 0x53af9b53
xor edx, 0xa390278
and edx, ecx
or ebx, 0x400080
and ebx, edi
or ebx, edx
mov ecx, r10d
and ecx, 0x51ee98d1
or ecx, 0x2e016708
xor ecx, r14d
xor ecx, 0x7fefffd9
xor r10d, 0xae11672e
or r10d, ecx
mov ecx, r10d
xor ecx, ebx
not ecx
not r10d
and r10d, ebx
or r10d, ecx
xor r10d, r12d
imul r11d, r10d, 0x1000193
mov bl, byte [r9]
test bl, bl
je 0x1400da5d6
add r9, 1
movsx r10d, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400da620
nop word [rax + rax]
test al, al
je 0x1400da750
mov ecx, r10d
and ecx, 0xebcba6fa
and r10d, 0x14345925
or r10d, 0xab402048
xor r10d, ecx
xor r10d, 0xab402068
jmp 0x1400da620
mov dl, byte [rbp + 0x1fc]
test dl, dl
mov bl, byte [rbp + 0x21e]
mov rcx, qword [rbp + 0x208]
je 0x1400da7d0
nop word [rax + rax]
mov rcx, qword [rcx]
test dl, dl
je 0x1400da7d0
cmp rcx, qword [rbp + 0x200]
je 0x1400da8a2
mov rsi, qword [rcx + 0x30]
test rsi, rsi
jne 0x1400da565
jmp 0x1400da8a2
mov rcx, qword [rcx]
jmp 0x1400da7a0
jmp 0x1400da7e0
jmp 0x1400da7f0
jmp 0x1400da800
mov rcx, qword gs:[0x60]
jmp 0x1400da498
mov rcx, qword [rbp + 0x210]
mov eax, dword [rsi + rcx + 0x1c]
mov ecx, dword [rsi + rcx + 0x24]
add rax, rsi
add rcx, rsi
movzx ecx, word [rcx + r13*2]
mov ebx, dword [rax + rcx*4]
add rbx, rsi
cmp dword [rbp + 0x1e0], 0xa
jl 0x1400da8ad
mov eax, dword [rbp + 0x1e4]
and eax, 1
je 0x1400da8ad
mov rax, qword [rbp + 0x1d8]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
cmp dword [rbp + 0x1e8], 0xa
mov dword [rbp + 0x1fc], edx
jl 0x1400da867
test edx, edx
jne 0x1400da8a0
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400daec2
jmp 0x1400dab83
jmp 0x1400da8a0
xor ebx, ebx
cmp dword [rbp + 0x1e0], 0xa
jge 0x1400da839
xor edi, edi
mov ecx, 2
xor edx, edx
call rbx
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x1400db844
lea rdx, [rbp - 0x60]
mov rcx, r15
call sub.KERNEL32.dll_Process32FirstW
lea r14, [rbp - 0x34]
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rcx, qword [rbp + 0x1f0]
mov r9, qword [rcx + 0x10]
mov r8, qword [rcx + 0x18]
mov ecx, dword [0x1406d3e78]
mov r10d, dword [0x1406d3e7c]
lea edi, [rcx - 1]
imul edi, ecx
test dil, 1
sete bl
cmp r10d, 0xa
setl cl
mov edx, ecx
and dl, bl
xor dl, 1
xor cl, bl
mov ebx, ecx
xor bl, dl
not cl
or cl, dl
and cl, bl
test cl, cl
jne 0x1400da920
mov rsi, qword [rbp + 0x1f0]
cmp r8, 8
jb 0x1400da93b
mov rcx, qword [rbp + 0x1f0]
mov rsi, qword [rcx]
cmp r10d, 0xa
setge cl
and cl, dil
nop word cs:[rax + rax]
nop
test cl, cl
jne 0x1400da950
cmp r9, rax
mov rdx, r9
cmova rdx, rax
test rdx, rdx
je 0x1400da984
xor ecx, ecx
nop word cs:[rax + rax]
nop
movzx ebx, word [rsi + rcx*2]
cmp bx, word [rbp + rcx*2 - 0x34]
jne 0x1400da9de
add rcx, 1
cmp rdx, rcx
jne 0x1400da970
cmp r9, rax
jne 0x1400da9de
cmp dword [0x1406d3e80], 0xa
jl 0x1400dab02
mov eax, dword [0x1406d3e84]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400dab02
nop dword [rax + rax]
jmp 0x1400da9b0
cmp r10, rax
sbb ecx, ecx
cmp rax, r10
mov edx, 1
cmovae edx, ecx
cmp r10, rax
cmovb edx, ecx
test edx, edx
je 0x1400daab6
lea rdx, [rbp - 0x60]
mov rcx, r15
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x1400daae2
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rcx, qword [rbp + 0x1f0]
mov r10, qword [rcx + 0x10]
mov r8, qword [rcx + 0x18]
mov ebx, dword [0x1406d3e78]
mov r9d, dword [0x1406d3e7c]
lea edi, [rbx - 1]
imul edi, ebx
test dil, 1
sete cl
cmp r9d, 0xa
setl bl
mov edx, ebx
and dl, cl
xor dl, 1
xor bl, cl
mov ecx, ebx
xor cl, dl
not bl
or bl, dl
and bl, cl
nop dword [rax]
test bl, bl
jne 0x1400daa40
mov rsi, qword [rbp + 0x1f0]
cmp r8, 8
jb 0x1400daa5b
mov rcx, qword [rbp + 0x1f0]
mov rsi, qword [rcx]
cmp r9d, 0xa
setge bl
and bl, dil
nop word cs:[rax + rax]
nop
test bl, bl
jne 0x1400daa70
cmp rax, r10
mov rdx, r10
cmovb rdx, rax
test rdx, rdx
je 0x1400da9c0
xor ebx, ebx
nop dword [rax]
movzx ecx, word [rsi + rbx*2]
cmp cx, word [rbp + rbx*2 - 0x34]
jne 0x1400daaa9
add rbx, 1
cmp rdx, rbx
jne 0x1400daa90
jmp 0x1400da9c0
mov edx, 1
test edx, edx
jne 0x1400da9de
cmp dword [0x1406d3e80], 0xa
jl 0x1400dab58
mov eax, dword [0x1406d3e84]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400dab58
nop dword [rax + rax]
jmp 0x1400daae0
cmp dword [0x1406d3e80], 0xa
jl 0x1400dab2d
mov eax, dword [0x1406d3e84]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400dab2d
nop dword [rax]
jmp 0x1400dab00
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400daef5
jmp 0x1400daee8
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400db534
jmp 0x1400db527
mov eax, dword [0x1406d3d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406d3d9c], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1400db217
jmp 0x1400db20a
mov rcx, qword gs:[0x60]
test al, al
je 0x1400daec2
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x208], rax
cmp dword [0x1406d3da0], 0xa
jl 0x1400dabc1
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400daec0
cmp dword [rbp + 0x1e8], 0xa
setl al
test edx, edx
sete dl
setne cl
xor cl, al
and dl, al
xor dl, cl
mov eax, dword [0x1406d3dbc]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406d3db8], 0xa
setl cl
or cl, al
mov byte [rbp + 0x200], cl
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406d3dac], 0xa
setl bl
or bl, al
mov eax, dword [0x1406d3db0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406d3db4], 0xa
setl cl
or cl, al
mov rax, qword [rbp + 0x208]
mov r13, qword [rax + 0x30]
mov byte [rbp + 0x21f], dl
mov byte [rbp + 0x21e], cl
test dl, dl
je 0x1400dac70
cmp byte [rbp + 0x200], 0
jne 0x1400dac7d
jmp 0x1400daea0
cmp byte [rbp + 0x200], 0
je 0x1400daeb0
mov qword [rbp + 0x210], rax
movsxd rax, dword [r13 + 0x3c]
mov r11d, dword [rax + r13 + 0x88]
test r11, r11
je 0x1400dae50
mov eax, dword [r13 + r11 + 0x18]
mov r9, rax
jmp 0x1400dacc4
mov esi, 0x811c9dc5
mov rax, r9
cmp esi, 0x7f8fe695
je 0x1400daed0
sub r9, 1
jb 0x1400dae50
add eax, 0xffffffff
mov edx, dword [r13 + r11 + 0x20]
add rdx, r13
mov r10d, dword [rdx + rax*4]
mov dl, byte [r13 + r10]
test dl, dl
je 0x1400dacb0
add r10, r13
mov esi, 0x811c9dc5
jmp 0x1400dae04
mov edx, esi
and edx, 0x7ab683ed
or edx, 0x1410812
mov r15d, esi
and r15d, 0x85497c12
xor r15d, edx
mov edx, r15d
xor edx, 0x50af90c3
xor r15d, 0xfebef7ed
and r15d, edx
mov r8d, esi
and r8d, 0xae11672e
mov r14d, edi
and r14d, 0xae11672e
mov r12d, r15d
not r12d
mov edx, r8d
not edx
and r12d, edx
and edx, 0x6400fcd7
xor esi, 0x24006406
and esi, r8d
or esi, edx
xor esi, r15d
xor esi, 0x6400fcd7
xor r8d, r15d
or r8d, r12d
not r8d
or r8d, esi
mov edx, edi
xor edx, 0xac106400
and edx, r14d
mov esi, edi
and esi, 0x12c8050
mov ecx, edi
and ecx, 0x50c21881
lea eax, [rcx + 0x9148106]
xor eax, esi
xor ecx, 0xfdd6fc81
mov esi, edi
and esi, 0xac106400
or esi, 0x52831b03
xor esi, edx
mov edx, esi
xor edx, 0x53af9b53
xor eax, 0xa390278
and eax, edx
or esi, 0x400080
and esi, ecx
or esi, eax
mov eax, edi
and eax, 0x51ee98d1
or eax, 0x2e016708
xor eax, r14d
xor eax, 0x7fefffd9
xor edi, 0xae11672e
or edi, eax
mov eax, edi
xor eax, esi
not eax
not edi
and edi, esi
or edi, eax
xor edi, r8d
imul esi, edi, 0x1000193
mov dl, byte [r10]
test dl, dl
je 0x1400dacb5
add r10, 1
movsx edi, dl
add dl, 0xbf
cmp dl, 0x19
ja 0x1400dad00
nop word [rax + rax]
test bl, bl
je 0x1400dae20
mov edx, edi
and edx, 0xebcba6fa
and edi, 0x14345925
or edi, 0xab402048
xor edi, edx
xor edi, 0xab402068
jmp 0x1400dad00
mov cl, byte [rbp + 0x21e]
test cl, cl
mov dl, byte [rbp + 0x21f]
mov rax, qword [rbp + 0x210]
je 0x1400dae90
nop word [rax + rax]
mov rax, qword [rax]
test cl, cl
je 0x1400dae90
cmp rax, qword [rbp + 0x208]
je 0x1400daed0
mov r13, qword [rax + 0x30]
test r13, r13
jne 0x1400dac50
jmp 0x1400daed0
mov rax, qword [rax]
jmp 0x1400dae70
jmp 0x1400daea0
jmp 0x1400daeb0
jmp 0x1400daec0
mov rcx, qword gs:[0x60]
jmp 0x1400dab83
mov edx, dword [rbp + 0x1fc]
cmp dword [rbp + 0x1e8], 0xa
jge 0x1400da45d
jmp 0x1400da472
mov rcx, qword gs:[0x60]
test al, al
jne 0x1400daf00
mov rcx, qword gs:[0x60]
jmp 0x1400daee8
mov rax, qword [rcx + 0x18]
mov rsi, qword [rax + 0x10]
cmp dword [0x1406d3da0], 0xa
jl 0x1400daf32
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400daf32
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x1400daf30
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x1406d3dac], 0xa
setl cl
mov edx, dword [0x1406d3db0]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete dl
cmp dword [0x1406d3db4], 0xa
setl al
cmp dword [0x1406d3db8], 0xa
jl 0x1400daf92
mov ebx, dword [0x1406d3dbc]
lea edi, [rbx - 1]
imul edi, ebx
and edi, 1
je 0x1400daf92
nop word cs:[rax + rax]
nop
jmp 0x1400daf90
or cl, r8b
or al, dl
mov byte [rbp + 0x200], al
mov r12, qword [rsi + 0x30]
mov qword [rbp + 0x1e8], rsi
mov qword [rbp + 0x208], rsi
movsxd rax, dword [r12 + 0x3c]
mov edx, dword [rax + r12 + 0x88]
mov rax, rdx
mov qword [rbp + 0x210], rdx
test rdx, rdx
je 0x1400db174
mov rax, qword [rbp + 0x210]
mov eax, dword [r12 + rax + 0x18]
mov r10, rax
jmp 0x1400daff4
mov edx, 0x811c9dc5
mov rax, r10
cmp edx, 0x8285aca5
je 0x1400db1b3
sub r10, 1
jb 0x1400db174
mov r13d, eax
add r13d, 0xffffffff
mov rax, qword [rbp + 0x210]
mov eax, dword [r12 + rax + 0x20]
add rax, r12
mov r14d, dword [rax + r13*4]
mov bl, byte [r12 + r14]
test bl, bl
je 0x1400dafe0
add r14, r12
mov edx, 0x811c9dc5
jmp 0x1400db12e
mov eax, edx
and eax, 0x7ab683ed
or eax, 0x1410812
mov r9d, edx
and r9d, 0x85497c12
xor r9d, eax
mov eax, r9d
xor eax, 0x50af90c3
xor r9d, 0xfebef7ed
and r9d, eax
mov r11d, edx
and r11d, 0xae11672e
mov r8d, esi
and r8d, 0xae11672e
mov eax, r9d
not eax
mov ebx, r11d
not ebx
and eax, ebx
and ebx, 0x6400fcd7
xor edx, 0x24006406
and edx, r11d
or edx, ebx
xor edx, r9d
xor edx, 0x6400fcd7
xor r11d, r9d
or r11d, eax
not r11d
or r11d, edx
mov eax, esi
xor eax, 0xac106400
and eax, r8d
mov edx, esi
and edx, 0x12c8050
mov ebx, esi
and ebx, 0x50c21881
lea edi, [rbx + 0x9148106]
xor edi, edx
xor ebx, 0xfdd6fc81
mov edx, esi
and edx, 0xac106400
or edx, 0x52831b03
xor edx, eax
mov eax, edx
xor eax, 0x53af9b53
xor edi, 0xa390278
and edi, eax
or edx, 0x400080
and edx, ebx
or edx, edi
mov eax, esi
and eax, 0x51ee98d1
or eax, 0x2e016708
xor eax, r8d
xor eax, 0x7fefffd9
xor esi, 0xae11672e
or esi, eax
mov eax, esi
xor eax, edx
not eax
not esi
and esi, edx
or esi, eax
xor esi, r11d
imul edx, esi, 0x1000193
mov bl, byte [r14]
test bl, bl
je 0x1400dafe5
add r14, 1
movsx esi, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400db030
nop word cs:[rax + rax]
nop dword [rax + rax]
test cl, cl
je 0x1400db150
mov eax, esi
and eax, 0xebcba6fa
and esi, 0x14345925
or esi, 0xab402048
xor esi, eax
xor esi, 0xab402068
jmp 0x1400db030
mov dl, byte [rbp + 0x200]
test dl, dl
mov rax, qword [rbp + 0x1e8]
mov rbx, qword [rbp + 0x208]
je 0x1400db1ae
mov rbx, qword [rbx]
test dl, dl
je 0x1400db1ae
cmp rbx, rax
je 0x1400db1f2
mov qword [rbp + 0x208], rbx
mov r12, qword [rbx + 0x30]
test r12, r12
jne 0x1400dafaf
jmp 0x1400db1f2
mov rbx, qword [rbx]
jmp 0x1400db18c
mov rcx, qword [rbp + 0x210]
mov eax, dword [r12 + rcx + 0x1c]
mov ecx, dword [r12 + rcx + 0x24]
add rax, r12
add rcx, r12
movzx ecx, word [rcx + r13*2]
mov edx, dword [rax + rcx*4]
add rdx, r12
cmp dword [0x1406cdd74], 0xa
jl 0x1400db1fd
mov eax, dword [0x1406cdd70]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400db1fd
nop
jmp 0x1400db1f0
xor edx, edx
cmp dword [0x1406cdd74], 0xa
jge 0x1400db1de
mov rcx, r15
call rdx
mov edi, dword [rbp - 0x58]
jmp 0x1400db844
mov rcx, qword gs:[0x60]
test al, al
jne 0x1400db222
mov rcx, qword gs:[0x60]
jmp 0x1400db20a
mov rax, qword [rcx + 0x18]
mov rsi, qword [rax + 0x10]
cmp dword [0x1406d3da0], 0xa
jl 0x1400db252
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400db252
nop word cs:[rax + rax]
nop
jmp 0x1400db250
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x1406d3dac], 0xa
setl cl
mov edx, dword [0x1406d3db0]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete dl
cmp dword [0x1406d3db4], 0xa
setl al
cmp dword [0x1406d3db8], 0xa
jl 0x1400db2b2
mov ebx, dword [0x1406d3dbc]
lea edi, [rbx - 1]
imul edi, ebx
and edi, 1
je 0x1400db2b2
nop word cs:[rax + rax]
nop
jmp 0x1400db2b0
or cl, r8b
or al, dl
mov byte [rbp + 0x200], al
mov r12, qword [rsi + 0x30]
mov qword [rbp + 0x1e8], rsi
mov qword [rbp + 0x208], rsi
movsxd rax, dword [r12 + 0x3c]
mov edx, dword [rax + r12 + 0x88]
mov rax, rdx
mov qword [rbp + 0x210], rdx
test rdx, rdx
je 0x1400db494
mov rax, qword [rbp + 0x210]
mov eax, dword [r12 + rax + 0x18]
mov r10, rax
jmp 0x1400db314
mov edx, 0x811c9dc5
mov rax, r10
cmp edx, 0x8285aca5
je 0x1400db4d3
sub r10, 1
jb 0x1400db494
mov r13d, eax
add r13d, 0xffffffff
mov rax, qword [rbp + 0x210]
mov eax, dword [r12 + rax + 0x20]
add rax, r12
mov r14d, dword [rax + r13*4]
mov bl, byte [r12 + r14]
test bl, bl
je 0x1400db300
add r14, r12
mov edx, 0x811c9dc5
jmp 0x1400db44e
mov eax, edx
and eax, 0x7ab683ed
or eax, 0x1410812
mov r9d, edx
and r9d, 0x85497c12
xor r9d, eax
mov eax, r9d
xor eax, 0x50af90c3
xor r9d, 0xfebef7ed
and r9d, eax
mov r11d, edx
and r11d, 0xae11672e
mov r8d, esi
and r8d, 0xae11672e
mov eax, r9d
not eax
mov ebx, r11d
not ebx
and eax, ebx
and ebx, 0x6400fcd7
xor edx, 0x24006406
and edx, r11d
or edx, ebx
xor edx, r9d
xor edx, 0x6400fcd7
xor r11d, r9d
or r11d, eax
not r11d
or r11d, edx
mov eax, esi
xor eax, 0xac106400
and eax, r8d
mov edx, esi
and edx, 0x12c8050
mov ebx, esi
and ebx, 0x50c21881
lea edi, [rbx + 0x9148106]
xor edi, edx
xor ebx, 0xfdd6fc81
mov edx, esi
and edx, 0xac106400
or edx, 0x52831b03
xor edx, eax
mov eax, edx
xor eax, 0x53af9b53
xor edi, 0xa390278
and edi, eax
or edx, 0x400080
and edx, ebx
or edx, edi
mov eax, esi
and eax, 0x51ee98d1
or eax, 0x2e016708
xor eax, r8d
xor eax, 0x7fefffd9
xor esi, 0xae11672e
or esi, eax
mov eax, esi
xor eax, edx
not eax
not esi
and esi, edx
or esi, eax
xor esi, r11d
imul edx, esi, 0x1000193
mov bl, byte [r14]
test bl, bl
je 0x1400db305
add r14, 1
movsx esi, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400db350
nop word cs:[rax + rax]
nop dword [rax + rax]
test cl, cl
je 0x1400db470
mov eax, esi
and eax, 0xebcba6fa
and esi, 0x14345925
or esi, 0xab402048
xor esi, eax
xor esi, 0xab402068
jmp 0x1400db350
mov dl, byte [rbp + 0x200]
test dl, dl
mov rax, qword [rbp + 0x1e8]
mov rbx, qword [rbp + 0x208]
je 0x1400db4ce
mov rbx, qword [rbx]
test dl, dl
je 0x1400db4ce
cmp rbx, rax
je 0x1400db512
mov qword [rbp + 0x208], rbx
mov r12, qword [rbx + 0x30]
test r12, r12
jne 0x1400db2cf
jmp 0x1400db512
mov rbx, qword [rbx]
jmp 0x1400db4ac
mov rcx, qword [rbp + 0x210]
mov eax, dword [r12 + rcx + 0x1c]
mov ecx, dword [r12 + rcx + 0x24]
add rax, r12
add rcx, r12
movzx ecx, word [rcx + r13*2]
mov edx, dword [rax + rcx*4]
add rdx, r12
cmp dword [0x1406cdd74], 0xa
jl 0x1400db51d
mov eax, dword [0x1406cdd70]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400db51d
nop
jmp 0x1400db510
xor edx, edx
cmp dword [0x1406cdd74], 0xa
jge 0x1400db4fe
mov rcx, r15
call rdx
jmp 0x1400db202
mov rcx, qword gs:[0x60]
test al, al
jne 0x1400db53f
mov rcx, qword gs:[0x60]
jmp 0x1400db527
mov rax, qword [rcx + 0x18]
mov rsi, qword [rax + 0x10]
cmp dword [0x1406d3da0], 0xa
jl 0x1400db572
mov eax, dword [0x1406d3da4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400db572
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x1400db570
mov eax, dword [0x1406d3da8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x1406d3dac], 0xa
setl cl
mov edx, dword [0x1406d3db0]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete dl
cmp dword [0x1406d3db4], 0xa
setl al
cmp dword [0x1406d3db8], 0xa
jl 0x1400db5d2
mov ebx, dword [0x1406d3dbc]
lea edi, [rbx - 1]
imul edi, ebx
and edi, 1
je 0x1400db5d2
nop word cs:[rax + rax]
nop
jmp 0x1400db5d0
or cl, r8b
or al, dl
mov byte [rbp + 0x200], al
mov r12, qword [rsi + 0x30]
mov qword [rbp + 0x1e8], rsi
mov qword [rbp + 0x208], rsi
movsxd rax, dword [r12 + 0x3c]
mov edx, dword [rax + r12 + 0x88]
mov rax, rdx
mov qword [rbp + 0x210], rdx
test rdx, rdx
je 0x1400db7b4
mov rax, qword [rbp + 0x210]
mov eax, dword [r12 + rax + 0x18]
mov r10, rax
jmp 0x1400db634
mov edx, 0x811c9dc5
mov rax, r10
cmp edx, 0x8285aca5
je 0x1400db7f3
sub r10, 1
jb 0x1400db7b4
mov r13d, eax
add r13d, 0xffffffff
mov rax, qword [rbp + 0x210]
mov eax, dword [r12 + rax + 0x20]
add rax, r12
mov r14d, dword [rax + r13*4]
mov bl, byte [r12 + r14]
test bl, bl
je 0x1400db620
add r14, r12
mov edx, 0x811c9dc5
jmp 0x1400db76e
mov eax, edx
and eax, 0x7ab683ed
or eax, 0x1410812
mov r9d, edx
and r9d, 0x85497c12
xor r9d, eax
mov eax, r9d
xor eax, 0x50af90c3
xor r9d, 0xfebef7ed
and r9d, eax
mov r11d, edx
and r11d, 0xae11672e
mov r8d, esi
and r8d, 0xae11672e
mov eax, r9d
not eax
mov ebx, r11d
not ebx
and eax, ebx
and ebx, 0x6400fcd7
xor edx, 0x24006406
and edx, r11d
or edx, ebx
xor edx, r9d
xor edx, 0x6400fcd7
xor r11d, r9d
or r11d, eax
not r11d
or r11d, edx
mov eax, esi
xor eax, 0xac106400
and eax, r8d
mov edx, esi
and edx, 0x12c8050
mov ebx, esi
and ebx, 0x50c21881
lea edi, [rbx + 0x9148106]
xor edi, edx
xor ebx, 0xfdd6fc81
mov edx, esi
and edx, 0xac106400
or edx, 0x52831b03
xor edx, eax
mov eax, edx
xor eax, 0x53af9b53
xor edi, 0xa390278
and edi, eax
or edx, 0x400080
and edx, ebx
or edx, edi
mov eax, esi
and eax, 0x51ee98d1
or eax, 0x2e016708
xor eax, r8d
xor eax, 0x7fefffd9
xor esi, 0xae11672e
or esi, eax
mov eax, esi
xor eax, edx
not eax
not esi
and esi, edx
or esi, eax
xor esi, r11d
imul edx, esi, 0x1000193
mov bl, byte [r14]
test bl, bl
je 0x1400db625
add r14, 1
movsx esi, bl
add bl, 0xbf
cmp bl, 0x19
ja 0x1400db670
nop word cs:[rax + rax]
nop dword [rax + rax]
test cl, cl
je 0x1400db790
mov eax, esi
and eax, 0xebcba6fa
and esi, 0x14345925
or esi, 0xab402048
xor esi, eax
xor esi, 0xab402068
jmp 0x1400db670
mov dl, byte [rbp + 0x200]
test dl, dl
mov rax, qword [rbp + 0x1e8]
mov rbx, qword [rbp + 0x208]
je 0x1400db7ee
mov rbx, qword [rbx]
test dl, dl
je 0x1400db7ee
cmp rbx, rax
je 0x1400db832
mov qword [rbp + 0x208], rbx
mov r12, qword [rbx + 0x30]
test r12, r12
jne 0x1400db5ef
jmp 0x1400db832
mov rbx, qword [rbx]
jmp 0x1400db7cc
mov rcx, qword [rbp + 0x210]
mov eax, dword [r12 + rcx + 0x1c]
mov ecx, dword [r12 + rcx + 0x24]
add rax, r12
add rcx, r12
movzx ecx, word [rcx + r13*2]
mov edx, dword [rax + rcx*4]
add rdx, r12
cmp dword [0x1406cdd74], 0xa
jl 0x1400db83d
mov eax, dword [0x1406cdd70]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400db83d
nop
jmp 0x1400db830
xor edx, edx
cmp dword [0x1406cdd74], 0xa
jge 0x1400db81e
xor edi, edi
mov rcx, r15
call rdx
cmp dword [0x1406cdddc], 0xa
jl 0x1400db860
mov eax, dword [0x1406cddd8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400db886
jmp 0x1400db860
mov rcx, qword [rbp + 0x1f0]
call fcn.1400bd230
cmp dword [0x1406cdddc], 0xa
jl 0x1400db894
mov eax, dword [0x1406cddd8]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400db894
mov rcx, qword [rbp + 0x1f0]
call fcn.1400bd230
jmp 0x1400db860
mov edx, dword [0x1406d3e98]
mov eax, dword [0x1406d3e9c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
mov edx, dword [0x1406d3ea0]
mov ebx, dword [0x1406d3ea4]
cmp eax, 0xa
jl 0x1400db8c9
test ecx, ecx
je 0x1400db8c9
lea esi, [rdx - 1]
imul esi, edx
and esi, 1
jmp 0x1400db8e4
lea esi, [rdx - 1]
imul esi, edx
and esi, 1
cmp ebx, 0xa
jl 0x1400db8db
test esi, esi
jne 0x1400db900
cmp eax, 0xa
jl 0x1400db902
test ecx, ecx
je 0x1400db902
cmp ebx, 0xa
jl 0x1400db8c9
test esi, esi
je 0x1400db8c9
nop dword [rax]
jmp 0x1400db8f0
jmp 0x1400db900
mov eax, edi
add rsp, 0x2a8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret