Function at 0x1400c06d0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
movaps xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x11], dl
mov r12, rcx
xor eax, eax
test al, al
je 0x1400c078e
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov ecx, 0x89952ac3
nop word cs:[rax + rax]
mov edx, dword [0x141dd2408]
or edx, dword [0x141dd240c]
and edx, 0x778d4703
add edx, 0xcf8e0458
imul rdx, rcx
shr rdx, 0x3f
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r9, rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r11, rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
cmp edx, 0xe23d9c20
ja 0x1400c07a0
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x78], r8
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
lea rax, [r12 + 0x90]
mov qword [rbp - 0x20], rax
mov rcx, qword [r12 + 0x90]
nop dword [rax + rax]
mov eax, dword [0x141dd2410]
xor edx, edx
div dword [0x141dd2414]
add eax, 0xc458cf17
and eax, 0x5c06f1a0
imul eax, eax, 0x6859cc49
cmp eax, 0xd8f5f8eb
je 0x1400c08b0
test rcx, rcx
mov qword [rbp - 0x38], r12
jne 0x1400c0dcf
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x58], r11
mov qword [rbp - 0x60], r10
mov qword [rbp - 0x68], r9
nop word cs:[rax + rax]
mov eax, dword [0x141dd2418]
xor edx, edx
div dword [0x141dd241c]
add eax, 0xb6790ff4
xor eax, 0x79ec2cfa
imul rcx, rax, 0x2a0243b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xaf65e92c
je 0x1400c0900
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x50], rdi
mov eax, dword [0x141dd2420]
and eax, dword [0x141dd2424]
or eax, 0x64e8556e
add eax, 0xa48f45fc
mov ecx, 0x9a5934e9
imul rcx, rax
shr rcx, 0x3a
cmp ecx, 0x8e1cc7b
jne 0x1400c0982
mov qword [r14], 0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, r14
call qword [sym.imp.pdh.dll_PdhOpenQueryA]
add rsp, 0x20
mov rdi, qword [sym.imp.pdh.dll_PdhOpenQueryA]
nop dword [rax]
mov ebx, dword [0x141dd2428]
or ebx, dword [0x141dd242c]
xor ebx, 0x534f724a
add ebx, 0xfbb928af
or ebx, 0x19dbfd7a
mov qword [r14], 0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0xc4772059
jb 0x1400c0990
test eax, eax
je 0x1400c09dd
xor edx, edx
mov rbx, qword [rbp - 0x30]
jmp 0x1400c0c15
mov rbx, qword [rbp - 0x30]
mov edx, 0xae9c06b3
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2430]
and ecx, dword [0x141dd2434]
add ecx, 0xd8ebd60d
imul rcx, rdx
shr rcx, 0x3f
cmp ecx, 0x5c2dc61d
ja 0x1400c09f0
mov r14, qword [r14]
mov edx, dword [0x141dd7ffc]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rdx*8]
movzx edx, byte [rcx + 0x70]
nop
mov ecx, dword [0x141dd2438]
xor ecx, dword [0x141dd243c]
xor ecx, 0x60402201
and ecx, 0x72456203
imul ecx, ecx, 0x76ddffd6
cmp ecx, 0x4007d280
jb 0x1400c0a30
test dl, 1
mov dword [rbp - 0x44], eax
je 0x1400c0abb
nop
mov edx, dword [0x141dd2458]
mov ecx, dword [0x141dd245c]
add ecx, edx
add ecx, 0x700ed02
xor ecx, 0x331f2e4b
cmp ecx, 0x7c07535b
jb 0x1400c0a60
mov eax, dword [0x141dd7ffc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x78]
mov ecx, dword [0x141dd7ffc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov rcx, qword [rcx + 0x80]
jmp 0x1400c0b93
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
sub rsp, 0x20
mov edx, 0x10
mov rcx, rsi
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd2440]
imul eax, dword [0x141dd2444]
add eax, 0xf0660f01
xor eax, 0x42400810
or eax, 0xbc3b706f
cmp eax, 0x5953280c
jb 0x1400c0ae0
mov rdi, qword [rsi]
mov rcx, qword [rsi + 8]
mov edx, dword [0x141dd2448]
add edx, dword [0x141dd244c]
xor edx, 0x8480c000
or edx, 0x635a0177
add edx, 0xf96d0100
cmp edx, 0x651edcf1
jb 0x1400c0b70
mov edx, dword [0x141dd7ffc]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov r8d, dword [0x141dd2450]
imul r8d, dword [0x141dd2454]
or r8d, 0xffb7efed
mov byte [rdx + 0x70], 1
mov qword [rdx + 0x80], rcx
cmp r8d, 0xbadb5169
jae 0x1400c0b93
mov edx, dword [0x141dd7ffc]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov byte [rdx + 0x70], 1
mov qword [rdx + 0x80], rcx
jmp 0x1400c0b30
mov edx, dword [0x141dd2460]
add edx, dword [0x141dd2464]
xor edx, 0x4840820
or edx, 0x1a4bd69e
cmp edx, 0x2e1d31df
jae 0x1400c0bd2
lea rdx, [rdi + 1]
mov r8d, dword [0x141dd7ffc]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x78], rdx
lea r8, [rdi + 1]
lea rdx, [0x141db6b00]
nop dword [rax]
mov r9d, dword [0x141dd2468]
and r9d, dword [0x141dd246c]
mov r10d, dword [0x141dd7ffc]
mov r11, qword gs:[0x58]
mov r10, qword [r11 + r10*8]
mov qword [r10 + 0x78], r8
cmp r9d, 0xcd0e930f
je 0x1400c0be0
mov eax, dword [rbp - 0x44]
mov qword [r12 + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [r12 + 0x98], xmm0
mov qword [r12 + 0xa8], 0
mov qword [r12 + 0xb0], rdi
mov qword [r12 + 0xb8], rcx
mov qword [r12 + 0xc0], r14
mov qword [r12 + 0xc8], 0
test eax, eax
jne 0x1400c0d8b
nop word cs:[rax + rax]
mov eax, dword [0x141dd2478]
imul eax, dword [0x141dd247c]
add eax, 0x29e5e48f
xor eax, 0xa0a71b16
cmp eax, 0x617f1aec
jb 0x1400c0c70
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
test rax, rax
je 0x1400c0d2b
movups xmm0, xmmword [0x141db6c2e]
movups xmmword [rax + 0xe], xmm0
movups xmm0, xmmword [0x141db6c20]
movups xmmword [rax], xmm0
mov rcx, qword [rbp - 0x28]
mov qword [rcx], 0x1e
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], 0x1e
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
test rax, rax
mov rsi, qword [rbp - 0x38]
je 0x1400c0d5f
mov ecx, dword [0x141dd24a8]
xor ecx, dword [0x141dd24ac]
or ecx, 0xc0de24e2
xor ecx, 0x79f2f244
cmp ecx, 0xbfa0f9c2
mov r9, qword [rbp - 0x40]
jbe 0x1400c1057
jmp 0x1400c1095
mov eax, dword [0x141dd2480]
xor edx, edx
div dword [0x141dd2484]
and eax, 0x389b1430
imul rax, rax, 0x19263a6d
shr rax, 0x36
imul eax, eax, 0xd85ddac5
cmp eax, 0xe9770043
jbe 0x1400c0fdd
jmp 0x1400c1010
mov eax, dword [0x141dd2498]
add eax, dword [0x141dd249c]
imul eax, eax, 0xf719c535
add eax, 0xa355fd42
and eax, 0x2ad04bc6
cmp eax, 0x8c8d8851
jbe 0x1400c1038
jmp 0x1400c1053
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2470]
mov edx, dword [0x141dd2474]
add ecx, edx
add ecx, 0xedb45e38
xor ecx, 0xff72ced8
cmp ecx, 0xa14c3bed
ja 0x1400c0da0
test rax, rax
mov r12, qword [rbp - 0x38]
je 0x1400c17b4
mov eax, dword [0x141dd24d8]
sub eax, dword [0x141dd24dc]
imul eax, eax, 0xa86b0343
add eax, 0x8ca4a8bf
cmp eax, 0xf2206def
jbe 0x1400c0e03
mov rcx, qword [r12 + 0xc0]
sub rsp, 0x20
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
add rsp, 0x20
mov rdi, qword [sym.imp.pdh.dll_PdhCollectQueryData]
nop word [rax + rax]
mov eax, dword [0x141dd24e0]
xor edx, edx
div dword [0x141dd24e4]
mov esi, eax
add esi, 0xf676d2d6
or esi, 0x8b0e9cda
mov rcx, qword [r12 + 0xc0]
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp esi, 0x8bd309ec
je 0x1400c0e10
movabs rdi, 0x8000000000000000
mov eax, dword [str.ckp]
xor eax, dword [0x141dd24ec]
or eax, 0x8faf0b5b
add eax, 0x12fe5db8
cmp eax, 0xc314053b
ja 0x1400c0e50
cmp qword [r12 + 0x18], rdi
mov r14, qword [rbp - 0x20]
je 0x1400c1384
xor eax, eax
nop
test al, al
jne 0x1400c0e80
nop word cs:[rax + rax]
mov eax, dword [0x141dd24f0]
and eax, dword [0x141dd24f4]
not eax
or eax, 0x21033280
and eax, 0xa3133a92
cmp eax, 0x68fe7ba8
jb 0x1400c0e90
mov eax, dword [0x141dd24f8]
imul eax, dword [0x141dd24fc]
mov rsi, qword [r12 + 0x20]
and eax, 0x80602724
add eax, 0x8606f66b
cmp eax, 0x4fd0a5b4
jbe 0x1400c0ef0
mov r8, qword [r12 + 0x28]
sub rsp, 0x20
mov rcx, r14
mov rdx, rsi
call fcn.1400d90c0
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd2500]
add eax, dword [0x141dd2504]
imul ebx, eax, 0xaac5e4e5
xor ebx, 0xb89656a
add ebx, 0xe69e01d9
mov r8, qword [r12 + 0x28]
sub rsp, 0x20
mov rcx, r14
mov rdx, rsi
call fcn.1400d90c0
add rsp, 0x20
cmp ebx, 0x9653c678
ja 0x1400c0ef0
test eax, eax
je 0x1400c0fa2
movss xmm1, dword [0x1400ffdb0]
subss xmm1, xmm0
nop
mov eax, dword [0x141dd2518]
imul eax, dword [0x141dd251c]
imul eax, eax, 0x71116588
add eax, 0x5ebb9b9c
and eax, 0x5518302c
cmp eax, 0x17de4126
jb 0x1400c0f40
nop word cs:[rax + rax]
mov eax, dword [0x141dd2520]
xor eax, dword [0x141dd2524]
imul eax, eax, 0x174e48b0
add eax, 0x8cf77fb
or eax, 0xee44e2f9
cmp eax, 0x2d1e1b0d
je 0x1400c0f70
xor eax, eax
test al, al
je 0x1400c1348
jmp 0x1400c137b
mov eax, dword [0x141dd2508]
add eax, dword [0x141dd250c]
and eax, 0x80204
cmp eax, 0x26887bab
ja 0x1400c0fd9
mov eax, dword [0x141dd2510]
or eax, dword [0x141dd2514]
add eax, 0xf1bc83da
and eax, 0xd501b33c
ud2
ud2
mov eax, dword [0x141dd2488]
add eax, dword [0x141dd248c]
mov ecx, 0x8188aeb1
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x3d37d61d
imul rax, rcx, 0x27545417
shr rax, 0x3b
ud2
ud2
ud2
mov eax, dword [0x141dd24a0]
imul eax, dword [0x141dd24a4]
add eax, 0x9d668859
ud2
ud2
mov ecx, dword [0x141dd24b0]
or ecx, dword [0x141dd24b4]
xor ecx, 0xe774ff2c
add ecx, 0x31b8138e
shr ecx, 1
imul rcx, rcx, 0x426e1b9d
shr rcx, 0x3d
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov qword [r9], 5
cmp ecx, 0x484c7c73
jbe 0x1400c10a8
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov qword [r9], 5
jmp 0x1400c1057
lea r8, [rsi + 0x18]
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], 5
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
call fcn.1400d7680
mov rcx, rsi
movzx edx, byte [rbp - 0x11]
call fcn.1400c4250
add rsp, 0x20
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
mov rsi, rax
mov eax, dword [0x141dd24b8]
xor r8d, r8d
xor edx, edx
div dword [0x141dd24bc]
imul rax, rcx, 0x70
add rax, rsi
mov qword [rbp - 0x28], rax
test r8b, r8b
jne 0x1400c1100
test rcx, rcx
je 0x1400c0d8b
nop
mov eax, dword [0x141dd24c0]
xor edx, edx
div dword [0x141dd24c4]
add eax, 0x2d9c3e09
or eax, 0xd4479db4
cmp eax, 0x6264716e
je 0x1400c1110
xor ecx, ecx
lea rdi, [0x140053630]
lea rdx, [0x141db6c58]
mov qword [rbp - 0x70], r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd24c8]
xor eax, dword [0x141dd24cc]
or eax, 0xcc583bfc
add eax, 0x5a3333ac
cmp eax, 0x4a372b10
jbe 0x1400c122a
mov qword [rbx], rcx
mov rax, qword [rbp - 0x58]
mov qword [rax], rbx
mov qword [rax + 8], rdi
mov qword [r15], rdx
mov qword [r15 + 8], 2
mov qword [r15 + 0x20], 0
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 1
sub rsp, 0x20
mov r12, rcx
mov rcx, r13
mov rdx, r15
call fcn.1400378f0
add rsp, 0x20
mov r14, rsi
add rsi, 0x48
mov rax, qword [rbp - 0x68]
mov qword [rax], rbx
mov qword [rax + 8], rdi
mov rdx, qword [rbp - 0x50]
lea rcx, [0x141db6c80]
mov qword [rdx], rcx
mov qword [rdx + 8], 2
mov qword [rdx + 0x20], 0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 1
sub rsp, 0x20
mov rdi, qword [rbp - 0x60]
mov rcx, rdi
call fcn.1400378f0
mov rcx, r13
mov rdx, qword [rbp - 0x20]
mov r8, rsi
mov rsi, r14
mov r9, rdi
lea rdi, [0x140053630]
call fcn.1400d7680
lea rdx, [0x141db6c58]
mov rcx, r12
add rsp, 0x20
mov r13, qword [rbp - 0x50]
mov qword [rbp - 0x40], rcx
nop word cs:[rax + rax]
mov ebx, dword [0x141dd24d0]
sub ebx, dword [0x141dd24d4]
or ebx, 0x43c9
and ebx, 0xa00773c9
add ebx, 0x54d2f971
mov r14, qword [rbp - 0x30]
mov qword [r14], rcx
mov rax, qword [rbp - 0x58]
mov qword [rax], r14
mov qword [rax + 8], rdi
mov qword [r15], rdx
mov qword [r15 + 8], 2
mov qword [r15 + 0x20], 0
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 1
sub rsp, 0x20
mov r12, qword [rbp - 0x70]
mov rcx, r12
mov rdx, r15
call fcn.1400378f0
add rsp, 0x20
lea rdi, [rsi + 0x48]
mov rcx, qword [rbp - 0x68]
mov qword [rcx], r14
lea rax, [0x140053630]
mov qword [rcx + 8], rax
lea rax, [0x141db6c80]
mov qword [r13], rax
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], rcx
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov r14, qword [rbp - 0x60]
mov rcx, r14
mov rdx, r13
call fcn.1400378f0
mov rcx, r12
mov rdx, qword [rbp - 0x20]
mov r8, rdi
lea rdi, [0x140053630]
mov r9, r14
call fcn.1400d7680
lea rdx, [0x141db6c58]
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
cmp ebx, 0xbeb167ad
ja 0x1400c1240
add rsi, 0x70
inc rcx
cmp rsi, qword [rbp - 0x28]
mov r13, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x30]
jne 0x1400c1150
jmp 0x1400c0d8b
mov eax, dword [0x141dd2528]
or eax, dword [0x141dd252c]
imul eax, eax, 0x97011a06
add eax, 0x789be42c
mov ecx, 0x850d7af5
imul rcx, rax
shr rcx, 0x3e
movss dword [r12 + 0x30], xmm1
cmp ecx, 0x59ac35eb
jbe 0x1400c1384
movss dword [r12 + 0x30], xmm1
jmp 0x1400c1348
sub rsp, 0x20
mov rcx, r12
movzx edx, byte [rbp - 0x11]
call fcn.1400c4250
add rsp, 0x20
mov rbx, qword [r12 + 8]
nop dword [rax]
mov eax, dword [0x141dd2530]
or eax, dword [0x141dd2534]
xor eax, 0x84c7f5ce
add eax, 0xc1e7c187
or eax, 0x62ed290a
cmp eax, 0x799dc2bc
je 0x1400c13a0
mov rsi, qword [r12 + 0x10]
imul r14, rsi, 0x70
test rsi, rsi
je 0x1400c14eb
lea r15, [rbx + r14]
mov r12d, 0x8bbf9975
movss xmm6, dword [0x1400ffdb0]
mov r13, rbx
nop dword [rax]
mov eax, dword [0x141dd2538]
sub eax, dword [0x141dd253c]
and eax, 0xeb680603
imul rax, rax, 0x7bad427f
shr rax, 0x3e
cmp eax, 0x9629d512
ja 0x1400c13f0
cmp qword [r13 + 0x48], rdi
je 0x1400c14b9
nop dword [rax]
mov eax, dword [str.X_vp]
mov ecx, dword [0x141dd259c]
add eax, ecx
add eax, 0x2e988b56
shr eax, 1
imul rax, r12
shr rax, 0x3c
add eax, 0xc5d7149d
cmp eax, 0x7d8b74fc
jb 0x1400c1420
mov rdx, qword [r13 + 0x50]
mov r8, qword [r13 + 0x58]
sub rsp, 0x20
mov rcx, qword [rbp - 0x20]
call fcn.1400d90c0
add rsp, 0x20
mov ecx, dword [0x141dd25a0]
and ecx, dword [0x141dd25a4]
xor ecx, 0x88873e71
add ecx, 0x45439df
cmp ecx, 0xb30619af
ja 0x1400c1462
test eax, eax
je 0x1400c1036
mov eax, dword [0x141dd25a8]
add eax, dword [0x141dd25ac]
or eax, 0xd6effa00
add eax, 0x1403ddbe
or eax, 0x688d018f
cmp eax, 0x27e762c1
je 0x1400c148a
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [r13 + 0x60], xmm1
add r13, 0x70
mov eax, dword [0x141dd25b0]
xor edx, edx
div dword [0x141dd25b4]
imul eax, eax, 0xa6708417
add eax, 0xe87c3f03
and eax, 0x7d9f5ba7
cmp eax, 0x821e1b6c
ja 0x1400c14bd
cmp r13, r15
jne 0x1400c13f0
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400c14f0
cmp byte [rbp - 0x11], 0
mov r15, qword [rbp - 0x38]
je 0x1400c17b4
nop word cs:[rax + rax]
mov eax, dword [0x141dd2540]
or eax, dword [0x141dd2544]
imul eax, eax, 0x59e79228
add eax, 0xdee68fa8
cmp eax, 0xe06f69fb
jb 0x1400c1510
movzx ecx, byte [r15 + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd2548]
xor edx, edx
div dword [0x141dd254c]
and eax, 0x46040105
cmp eax, 0xb86a7eda
je 0x1400c1540
test cl, cl
jne 0x1400c17b4
mov eax, dword [0x141dd2550]
and eax, dword [0x141dd2554]
mov ecx, 0xae136e37
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x7d4f5978
xor eax, 0x2a952afe
cmp eax, 0x5c4000ad
mov r12, qword [rbp - 0x78]
ja 0x1400c15d3
mov edi, dword [0x141dd2558]
imul edi, dword [0x141dd255c]
imul rax, rdi, 0x109975a9
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1f
add edi, 0xfda4577b
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
call fcn.1400d6bb0
add rsp, 0x20
cmp edi, 0x7800f2f7
jae 0x1400c15e8
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
call fcn.1400d6bb0
add rsp, 0x20
jmp 0x1400c1591
mov rax, qword [r12]
mov rdi, qword [r12 + 8]
mov rcx, qword [r12 + 0x10]
mov edx, 0x96ac506d
nop dword [rax + rax]
test rcx, rcx
sete r8b
test rsi, rsi
sete r9b
mov r10d, dword [0x141dd2560]
and r10d, dword [0x141dd2564]
add r10d, 0x2543e058
mov r11, r10
imul r11, rdx
shr r11, 0x20
sub r10d, r11d
shr r10d, 1
add r10d, r11d
shr r10d, 0x1d
cmp r10d, 0x9b2eeb17
ja 0x1400c1600
or r9b, r8b
jne 0x1400c1680
lea rcx, [rcx*8 - 8]
add r14, 0xffffffffffffff90
xor edx, edx
xor r8d, r8d
nop word [rax + rax]
mov r9, qword [rdi + r8]
mov qword [rbx + rdx + 0x68], r9
cmp r14, rdx
je 0x1400c1680
lea r9, [r8 + 8]
add rdx, 0x70
cmp rcx, r8
mov r8, r9
jne 0x1400c1660
nop
mov ecx, dword [0x141dd2568]
imul ecx, dword [0x141dd256c]
or ecx, 0x40341b84
and ecx, 0x40379bb6
add ecx, 0xad47f1b3
cmp ecx, 0xf5e6d6a5
ja 0x1400c1680
nop word [rax + rax]
mov ecx, dword [str.PSe_f]
add ecx, dword [0x141dd2574]
or ecx, 0x328991ad
add ecx, 0xc7523fa6
and ecx, 0xcf243f07
cmp ecx, 0x696e132a
je 0x1400c16b0
test rax, rax
je 0x1400c17a8
mov eax, dword [0x141dd2578]
sub eax, dword [0x141dd257c]
xor eax, 0xf7aea89a
imul eax, eax, 0x6263a471
add eax, 0xad4e8710
cmp eax, 0xedf789f0
ja 0x1400c172d
mov eax, dword [0x141dd2580]
mov ecx, dword [0x141dd2584]
add eax, ecx
add eax, 0xb6b1a391
and eax, 0x723c3f92
add eax, 0x1831717c
mov rsi, qword [0x141dd7fe0]
cmp eax, 0xe2bef2c8
jbe 0x1400c1736
mov rax, qword [0x141dd7fe0]
jmp 0x1400c1702
mov eax, dword [0x141dd2588]
or eax, dword [0x141dd258c]
and eax, 0xf82b74bb
imul eax, eax, 0xa09d0676
cmp eax, 0x1e1e5268
jb 0x1400c1790
mov eax, dword [0x141dd2590]
and eax, dword [0x141dd2594]
imul ebx, eax, 0xd0a8b178
add ebx, 0x99398223
and ebx, 0xa16e921
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x255158bc
jbe 0x1400c17a8
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c1754
mov byte [r15 + 0x38], 1
mov al, 1
nop
test al, al
je 0x1400c17b0
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret