Function at 0x1400c6fd0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3d8
movdqa xmmword [rsp + 0x3c0], xmm7
movaps xmmword [rsp + 0x3b0], xmm6
mov rdi, rdx
mov r15, rcx
mov rsi, qword [rsp + 0x458]
mov r14, qword [rsp + 0x450]
mov r12, qword [rsp + 0x448]
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xe0], rax
shr rdi, 1
cmp rdi, rax
jae 0x1400c8667
lea rax, [r12 + r14*8]
mov qword [rsp + 0x100], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd6570]
imul eax, dword [0x141dd6574]
or eax, 0xb1d3a896
imul eax, eax, 0xa375441f
or eax, 0x7c14ecd
cmp eax, 0x97156364
ja 0x1400c7050
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c7080
test r14, r14
je 0x1400c87eb
nop dword [rax]
mov eax, dword [0x141dd6580]
xor eax, dword [0x141dd6584]
and eax, 0x8180858b
add eax, 0x6288c0c3
cmp eax, 0xb34d4ebf
jb 0x1400c7090
mov rax, qword [rsi]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsi + 8]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsi + 0x10]
mov rcx, qword [rsi + 0x18]
mov rdx, qword [rsi + 0x20]
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xe8], r15
mov eax, 0xa951ef2d
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6588]
imul ecx, dword [0x141dd658c]
xor ecx, 0x78fdd2b
add ecx, 0x624511a
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xa71479ba
ja 0x1400c7100
mov edi, 8
xor r15d, r15d
xorps xmm6, xmm6
pcmpeqd xmm7, xmm7
xor ebx, ebx
xor eax, eax
mov qword [rsp + 0x48], rax
jmp 0x1400c7195
mov rsi, qword [rsp + 0x48]
imul rax, rsi, 0x158
mov qword [rdi + rax], r14
lea rcx, [rdi + rax]
add rcx, 8
mov r8d, 0x150
lea rdx, [rsp + 0x260]
call sub.VCRUNTIME140.dll_memcpy
inc rsi
mov qword [rsp + 0x48], rsi
add r12, 8
cmp r12, qword [rsp + 0x100]
je 0x1400c84c0
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], r12
mov rax, qword [r12]
mov rcx, qword [rsp + 0xf8]
lock inc qword [rcx]
movzx r13d, word [rax + 0x38]
mov rsi, qword [rax + 0x40]
mov rbp, qword [rax + 0x50]
mov rcx, qword [rax + 0x58]
mov rdx, qword [rax + 0x78]
mov qword [rsp + 0x58], rdx
mov rax, qword [rax + 0x90]
mov qword [rsp + 0x50], rax
xor edi, edi
mov qword [rsp + 0xa0], rcx
test rcx, rcx
setne dil
mov rax, qword [rsp + 0xf0]
mov r12, qword [rax]
cmp qword [r12 + 0x18], 0
mov qword [rsp + 0x30], rdi
je 0x1400c7710
mov eax, dword [0x141dd6590]
and eax, dword [0x141dd6594]
xor eax, 0x50f28000
and eax, 0xf0f3a826
add eax, 0xaf478e88
cmp eax, 0xe8d4b432
ja 0x1400c7490
nop
mov eax, dword [0x141dd6598]
imul eax, dword [0x141dd659c]
xor eax, 0x49de5a27
imul edi, eax, 0xa09b1f1c
add edi, 0xdee45b34
mov rcx, qword [r12 + 0x20]
mov rdx, qword [r12 + 0x28]
mov r8, rbp
call fcn.1400c9d40
cmp edi, 0xfce3b2a8
ja 0x1400c7490
mov rcx, rax
mov r14, qword [r12]
mov eax, dword [0x141dd65a0]
xor edx, edx
div dword [0x141dd65a4]
mov eax, dword [0x141dd65a8]
xor eax, dword [0x141dd65ac]
imul eax, eax, 0xc1cad679
add eax, 0x71a663f7
and eax, 0x412ea2f7
cmp eax, 0x37923c42
jb 0x1400c7281
mov rax, rcx
shr rax, 0x39
mov r8, qword [r12 + 8]
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r9d, r9d
mov r11, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rdi, qword [rsp + 0x30]
and rcx, r8
movdqu xmm1, xmmword [r14 + rcx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r10d, xmm2
test r10d, r10d
je 0x1400c73a0
mov eax, dword [0x141dd65b0]
xor edx, edx
div dword [0x141dd65b4]
mov eax, dword [0x141dd65b8]
xor edx, edx
div dword [0x141dd65bc]
imul eax, eax, 0x93668d0c
cmp eax, 0x6a391f9f
je 0x1400c72fe
tzcnt eax, r10d
add rax, rcx
and rax, r8
neg rax
imul rax, rax, 0x160
cmp qword [r14 + rax - 0x160], rbp
je 0x1400c74b0
mov eax, dword [0x141dd65d0]
or eax, dword [str.__E]
imul rax, rax, 0x5eb22f15
shr rax, 0x3e
imul eax, eax, 0x539da03d
or eax, 0xcdd7a77c
cmp eax, 0x7a922fc9
jb 0x1400c733c
lea eax, [r10 - 1]
mov edx, dword [0x141dd65d8]
or edx, dword [0x141dd65dc]
add edx, 0xa9dadd08
or edx, 0x7e76eddf
cmp edx, 0x1c26cb3b
jb 0x1400c7369
and eax, r10d
mov r10d, eax
test ax, ax
jne 0x1400c72f0
nop dword [rax + rax]
mov eax, dword [0x141dd65c0]
imul eax, dword [0x141dd65c4]
add eax, 0x2f866b9a
and eax, 0xb400040
cmp eax, 0xf11c2a3e
ja 0x1400c73a0
pcmpeqb xmm1, xmm7
pmovmskb eax, xmm1
nop word cs:[rax + rax]
mov edx, dword [0x141dd65c8]
imul edx, dword [0x141dd65cc]
imul rdx, rdx, 0x6a04ca97
shr rdx, 0x3e
or edx, 0xffedbcfe
cmp edx, 0x9797b5d5
je 0x1400c73d0
test ax, ax
jne 0x1400c7710
nop
mov eax, dword [0x141dd65e0]
or eax, dword [0x141dd65e4]
imul eax, eax, 0x8fcd014a
or eax, 0xc5b91bc1
cmp eax, 0xd6c52544
jb 0x1400c7400
add r9, 0x10
nop word cs:[rax + rax]
mov eax, dword [0x141dd65e8]
add eax, dword [0x141dd65ec]
or eax, 0x9688ec24
xor eax, 0xc3920420
or eax, 0x86511d1
cmp eax, 0x8a9c7620
ja 0x1400c7430
add rcx, r9
nop word cs:[rax + rax]
mov eax, dword [0x141dd65f0]
add eax, dword [0x141dd65f4]
or eax, 0x20010480
and eax, 0x20818482
cmp eax, 0xae8b3dc
je 0x1400c7460
jmp 0x1400c72d1
mov rcx, qword [r12 + 0x20]
mov rdx, qword [r12 + 0x28]
mov r8, rbp
call fcn.1400c9d40
jmp 0x1400c7230
add r14, rax
mov eax, dword [0x141dd65f8]
xor edx, edx
div dword [0x141dd65fc]
mov eax, dword [0x141dd6600]
add eax, dword [0x141dd6604]
imul rax, rax, 0xaae6863
shr rax, 0x36
add eax, 0xac23cfb9
imul rax, rax, 0x615f495b
shr rax, 0x3b
cmp eax, 0x96592041
ja 0x1400c74c1
mov rax, qword [r14 - 0x60]
test rax, rax
mov rdx, qword [rsp + 0x58]
mov r10, qword [rsp + 0x50]
je 0x1400c767c
mov edx, dword [0x141dd6608]
add edx, dword [0x141dd660c]
mov rcx, qword [rax + 0x10]
xor edx, 0x29a9183
or edx, 0xdd454e04
cmp edx, 0x9ee17ed4
mov edx, 0xe67acacf
jb 0x1400c755b
nop
mov eax, dword [0x141dd6610]
and eax, dword [0x141dd6614]
add eax, 0xcde5cb29
imul rax, rdx
shr rax, 0x3e
mov dword [rsp + 0x260], 0
cmp eax, 0xabdab6f2
jbe 0x1400c7570
mov dword [rsp + 0x260], 0
jmp 0x1400c7530
mov dword [rsp + 0x264], 0
mov qword [rsp + 0x108], 0
lea r8, [rsp + 0x108]
mov qword [rsp + 0x20], r8
lea rdx, [rsp + 0x260]
mov r9, r8
call r11
test eax, eax
movabs rdi, 0xd6bf94d5e57a42bd
jne 0x1400c75ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6618]
xor edx, edx
div dword [0x141dd661c]
and eax, 0xd6fff6ee
imul rcx, rax, 0x61d7a7e1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0xeb606e61
je 0x1400c75c0
mov r10, qword [rsp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6730]
or eax, dword [0x141dd6734]
and eax, 0xad0030c
or eax, 0x502fbcf3
xor eax, 0x31ffe59e
cmp eax, 0xebb8fb0b
ja 0x1400c7600
mov rcx, qword [rsp + 0x260]
mov rax, rcx
mul rdi
test r15b, r15b
jne 0x1400c762a
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
mov rdi, qword [rsp + 0x30]
nop dword [rax + rax]
mov eax, dword [0x141dd6738]
add eax, dword [0x141dd673c]
or eax, 0xabb79b87
and eax, 0xafb7dbc7
cmp eax, 0x673260d3
je 0x1400c7650
cmp rdx, qword [r14 - 0x38]
mov rdx, qword [rsp + 0x58]
jne 0x1400c7710
lea rsi, [r14 - 0x158]
mov rcx, qword [rsp + 0xa8]
movzx eax, byte [rcx + 8]
mov byte [rsp + 0x110], al
mov rax, qword [rcx]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x90]
mov r8, qword [rax]
mov rax, qword [rsp + 0xb0]
mov r9, qword [rax]
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], rdx
mov rcx, rsi
lea rdx, [rsp + 0x108]
call fcn.1400cf160
mov qword [rsi], rdi
mov eax, dword [0x141dd6740]
imul eax, dword [0x141dd6744]
add eax, 0xb7614ce1
imul rax, rax, 0x717d3399
shr rax, 0x3e
cmp eax, 0x6b28c60e
mov rcx, qword [rsp + 0xa0]
jne 0x1400c8440
jmp 0x1400c846a
lea r14, [rsp + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6620]
mov ecx, dword [0x141dd6624]
add eax, ecx
add eax, 0x3c222873
xor eax, 0x1309240
and eax, 0x2176b7f0
cmp eax, 0x51556da4
je 0x1400c7720
test r15b, r15b
jne 0x1400c77f0
nop dword [rax]
mov qword [rsp + 0xd0], rbp
test r15b, r15b
jne 0x1400c77f0
test rsi, rsi
lea r12, [rsp + 0x260]
je 0x1400c7810
mov eax, dword [0x141dd6628]
add eax, dword [0x141dd662c]
or eax, 0xf7a4a6e0
imul eax, eax, 0x93aa1200
cmp eax, 0x99afcf53
je 0x1400c7772
shr r13d, 1
mov eax, dword [0x141dd6630]
xor eax, dword [0x141dd6634]
imul eax, eax, 0x8006cc0a
add eax, 0x14a07ec7
and eax, 0xfff1d117
cmp eax, 0x64b2d26e
ja 0x1400c7793
mov eax, dword [0x141dd6638]
xor edx, edx
div dword [0x141dd663c]
xor eax, 0x1e0230e
imul rax, rax, 0x39344a17
shr rax, 0x3d
or eax, 0xc03a2afc
cmp eax, 0x5e5f6c87
jae 0x1400c79c0
jmp 0x1400c79fc
mov qword [rsp + 0xd0], rbp
mov qword [rsp + 0xd0], rbp
test r15b, r15b
jne 0x1400c77f0
jmp 0x1400c7761
test rbp, rbp
je 0x1400c78b4
cmp rbp, 4
jne 0x1400c78e9
mov eax, dword [0x141dd6680]
xor eax, dword [0x141dd6684]
or eax, 0x9e75db3c
cmp eax, 0x78cba7da
jne 0x1400c7850
movzx eax, byte [0x141ddb9b8]
mov edx, 6
xor ecx, ecx
call fcn.1400bf820
nop
mov eax, dword [0x141dd6688]
xor edx, edx
div dword [0x141dd668c]
imul eax, eax, 0xf9e75c1c
imul rsi, rax, 0x695a4395
shr rsi, 0x3d
add esi, 0x2e691d93
movzx eax, byte [0x141ddb9b8]
mov edx, 6
xor ecx, ecx
call fcn.1400bf820
cmp esi, 0x4da61bfc
ja 0x1400c7850
test rax, rax
je 0x1400c8caa
mov word [rax + 4], 0x6d65
mov dword [rax], 0x74737953
mov ecx, 6
mov edx, 6
jmp 0x1400c7a9a
movzx eax, byte [0x141ddb9b8]
mov eax, dword [0x141dd6658]
xor edx, edx
div dword [0x141dd665c]
imul eax, eax, 0x240e498e
add eax, 0x86379b14
xor eax, 0x4d561b3b
cmp eax, 0x991c273b
jae 0x1400c7a0e
jmp 0x1400c7a1f
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x38], rax
lea rax, [0x1400cf060]
mov qword [rsp + 0x40], rax
lea rax, [0x141db9ab8]
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], 1
mov qword [rsp + 0x128], 0
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], 1
mov rcx, r12
lea rdx, [rsp + 0x108]
call fcn.140037760
mov eax, dword [0x141dd6648]
or eax, dword [0x141dd664c]
or eax, 0x1587160
imul eax, eax, 0x8ebc1ae6
or eax, 0xbf89691f
cmp eax, 0x7bf1d730
jb 0x1400c794d
mov rcx, qword [rsp + 0x260]
nop dword [rax + rax]
mov eax, dword [0x141dd6650]
mov edx, dword [0x141dd6654]
add eax, edx
add eax, 0xb1cec664
or eax, 0xbc7dae51
add eax, 0x1522a23e
cmp eax, 0x9f17d602
jbe 0x1400c7980
mov rax, qword [rsp + 0x268]
mov rdx, qword [rsp + 0x270]
jmp 0x1400c7a9a
mov edi, dword [0x141dd6640]
imul edi, dword [0x141dd6644]
add edi, 0xb7e63752
mov eax, 0xce1d908d
imul rdi, rax
shr rdi, 0x3f
lea rcx, [rsp + 0x60]
mov rdx, rsi
mov r8, r13
call fcn.14008ba90
cmp edi, 0x351834b9
jb 0x1400c7b20
lea rcx, [rsp + 0x60]
mov rdx, rsi
mov r8, r13
call fcn.14008ba90
jmp 0x1400c79c0
mov edx, 4
xor ecx, ecx
call fcn.1400bf820
test r15b, r15b
je 0x1400c7a2d
mov edx, 4
xor ecx, ecx
call fcn.1400bf820
jmp 0x1400c7a0e
test rax, rax
je 0x1400c8d16
test r15b, r15b
jne 0x1400c7c38
mov ecx, dword [0x141dd6670]
xor ecx, dword [0x141dd6674]
imul ecx, ecx, 0x935c0046
or ecx, 0x820df2ce
mov dword [rax], 0x656c6449
cmp ecx, 0x702398b3
je 0x1400c7c38
nop dword [rax]
mov ecx, dword [0x141dd6678]
or ecx, dword [0x141dd667c]
xor ecx, 0x2a40408
and ecx, 0x16ac0599
cmp ecx, 0x8209389a
je 0x1400c7a70
mov ecx, 4
mov edx, 4
mov r8d, dword [0x141dd66a0]
and r8d, dword [0x141dd66a4]
add r8d, 0xf12ac42b
or r8d, 0x2adf7def
imul r8d, r8d, 0x767cf80d
cmp r8d, 0xe51ca531
jne 0x1400c7ae0
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rdx
mov byte [rsp + 0x78], 1
nop word [rax + rax]
mov r8d, dword [0x141dd66a8]
or r8d, dword [0x141dd66ac]
add r8d, 0x7bc35ec5
and r8d, 0x2f5ca829
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rdx
mov byte [rsp + 0x78], 1
cmp r8d, 0x4727356a
ja 0x1400c7ae0
nop dword [rax]
mov eax, dword [0x141dd66b0]
xor eax, dword [0x141dd66b4]
imul eax, eax, 0x47a6c11a
add eax, 0xabcbdb8
imul rax, rax, 0x5c03b437
shr rax, 0x3d
cmp eax, 0x7d558fcf
ja 0x1400c7b20
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [rsp + 0x98], rax
test rbp, rbp
mov rdi, qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0xb8], rbx
je 0x1400c7c50
nop word cs:[rax + rax]
mov eax, dword [str.K:__]
or eax, dword [0x141dd66bc]
or eax, 0x6f12f664
and eax, 0x7f1af675
cmp eax, 0xf213aab9
ja 0x1400c7b80
mov ecx, 0x410
xor edx, edx
mov r8d, ebp
call rdi
mov r13, rax
dec rax
cmp rax, 0xfffffffffffffffe
jae 0x1400c7bfe
nop word cs:[rax + rax]
mov eax, dword [0x141dd66c0]
xor edx, edx
div dword [0x141dd66c4]
add eax, 0xb41594d6
xor eax, 0x84a47008
shr eax, 2
imul rax, rax, 0x101dac55
shr rax, 0x3a
cmp eax, 0x61b21b94
ja 0x1400c7bc0
mov rax, r13
inc rax
cmp rax, 1
jbe 0x1400c7c04
jmp 0x1400c8163
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141dd66c8]
xor edx, edx
div dword [0x141dd66cc]
add eax, 0xf60d1c1e
imul rax, rax, 0x37b8e723
shr rax, 0x3d
imul eax, eax, 0x739497fc
cmp eax, 0x61278267
jne 0x1400c80f0
jmp 0x1400c8230
mov dword [rax], 0x656c6449
jmp 0x1400c7a3f
xor r8d, r8d
xor esi, esi
xor r9d, r9d
mov eax, dword [0x141dd6758]
and eax, dword [0x141dd675c]
add eax, 0xb01c1f05
and eax, 0x92500052
cmp eax, 0x79c8364e
mov rbx, qword [rsp + 0xa8]
lea r13, [rsp + 0x118]
movabs r12, 0x8000000000000000
mov qword [rsp + 0xc0], r9
mov r15, r8
ja 0x1400c7e28
nop
mov edi, dword [0x141dd6760]
sub edi, dword [0x141dd6764]
add edi, 0x7b9399e8
movdqu xmm0, xmmword [rsp + 0x60]
movdqu xmm1, xmmword [rsp + 0x70]
movdqu xmmword [r13 + 0x10], xmm1
movdqu xmmword [r13], xmm0
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 8
movups xmmword [rsp + 0x148], xmm6
mov qword [rsp + 0x168], r12
mov qword [rsp + 0x1e8], rbp
mov qword [rsp + 0x188], r12
mov qword [rsp + 0x158], 8
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1c0], r12
movups xmmword [r13 + 0xd8], xmm6
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x1e0], 1
mov qword [rsp + 0x200], r9
movups xmmword [r13 + 0x100], xmm6
movups xmmword [r13 + 0xf0], xmm6
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], r8
mov dword [rsp + 0x258], 0
mov byte [rsp + 0x25c], 1
movups xmmword [r13 + 0x130], xmm6
movups xmmword [r13 + 0x120], xmm6
movzx eax, byte [rbx + 8]
mov byte [rsp + 0x40], al
mov rax, qword [rbx]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x90]
mov r8, qword [rax]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x108]
lea rdx, [rsp + 0x38]
mov r9, qword [rsp + 0x98]
call fcn.1400cf160
mov r14, qword [rsp + 0x108]
mov r8d, 0x150
lea rcx, [rsp + 0x260]
lea rdx, [rsp + 0x110]
call sub.VCRUNTIME140.dll_memcpy
mov r8, r15
mov r9, qword [rsp + 0xc0]
cmp edi, 0x6032d1ed
jae 0x1400c7f90
movdqu xmm0, xmmword [rsp + 0x60]
movdqu xmm1, xmmword [rsp + 0x70]
movdqu xmmword [r13 + 0x10], xmm1
movdqu xmmword [r13], xmm0
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 8
movups xmmword [rsp + 0x148], xmm6
mov qword [rsp + 0x168], r12
mov qword [rsp + 0x1e8], rbp
mov qword [rsp + 0x188], r12
mov qword [rsp + 0x158], 8
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1c0], r12
movups xmmword [r13 + 0xd8], xmm6
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x1e0], 1
mov qword [rsp + 0x200], r9
movups xmmword [r13 + 0x100], xmm6
movups xmmword [r13 + 0xf0], xmm6
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], r8
mov dword [rsp + 0x258], 0
mov byte [rsp + 0x25c], 1
movups xmmword [r13 + 0x130], xmm6
movups xmmword [r13 + 0x120], xmm6
movzx eax, byte [rbx + 8]
mov byte [rsp + 0x40], al
mov rax, qword [rbx]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x90]
mov r8, qword [rax]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x108]
lea rdx, [rsp + 0x38]
mov r9, qword [rsp + 0x98]
call fcn.1400cf160
mov r8d, 0x150
lea rcx, [rsp + 0x260]
lea rdx, [rsp + 0x110]
call sub.VCRUNTIME140.dll_memcpy
mov r8, r15
mov r9, qword [rsp + 0xc0]
jmp 0x1400c7ca0
cmp r14, 2
jne 0x1400c7fc0
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0xb8]
xor r15d, r15d
jmp 0x1400c7183
xor r15d, r15d
test r15b, r15b
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0xb8]
je 0x1400c7ff0
mov qword [rsp + 0x108], rbx
nop dword [rax + rax]
mov eax, dword [0x141dd6768]
and eax, dword [0x141dd676c]
add eax, 0xfa09e5a5
xor eax, 0x7bfe0846
imul eax, eax, 0x5eb4be12
mov qword [rsp + 0x108], rbx
cmp eax, 0xb3898e6f
ja 0x1400c7ff0
mov eax, dword [0x141dd6770]
sub eax, dword [0x141dd6774]
xor eax, 0xfcc3fe8c
imul eax, eax, 0xc50c6a15
add eax, 0xf022ab04
cmp eax, 0x627168e3
jbe 0x1400c8050
mov qword [rsp + 0x110], rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd6778]
add eax, dword [0x141dd677c]
or eax, 0x865804f1
imul eax, eax, 0x3ea420b0
mov qword [rsp + 0x110], rdi
cmp eax, 0x1192b859
je 0x1400c8050
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x118], rax
cmp rax, rbx
jne 0x1400c7150
lea rcx, [rsp + 0x108]
call fcn.1400c9fe0
nop dword [rax]
mov eax, dword [0x141dd6780]
imul eax, dword [0x141dd6784]
add eax, 0x7ed579a8
xor eax, 0xa021e100
shr eax, 5
imul rax, rax, 0x8ad1dfb
shr rax, 0x36
cmp eax, 0x1269a3aa
ja 0x1400c80a0
mov rbx, qword [rsp + 0x108]
mov rdi, qword [rsp + 0x110]
jmp 0x1400c7150
mov esi, dword [0x141dd66d0]
sub esi, dword [0x141dd66d4]
xor esi, 0x2880
or esi, 0x46450a
and esi, 0x41467fdb
mov ecx, 0x1000
xor edx, edx
mov r8d, ebp
call rdi
cmp esi, 0x87f29fad
ja 0x1400c8230
mov r13, rax
nop dword [rax]
mov eax, dword [0x141dd66d8]
or eax, dword [0x141dd66dc]
xor eax, 0x53a7e3ce
imul eax, eax, 0x5672093d
or eax, 0x26f9dea9
cmp eax, 0xe3cbda1c
ja 0x1400c8130
mov rax, r13
dec rax
cmp rax, 0xfffffffffffffffe
jae 0x1400c8241
mov eax, dword [0x141dd66f0]
xor eax, dword [0x141dd66f4]
and eax, 0x20b01a65
imul rax, rax, 0x28ae4eb9
shr rax, 0x3a
cmp eax, 0x9958711c
mov rsi, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
jne 0x1400c81c0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x260], 0
mov qword [rsp + 0x20], r12
mov rcx, r13
mov rdx, r14
mov r8, r12
mov r9, r12
call rsi
nop word cs:[rax + rax]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x260], 0
mov qword [rsp + 0x20], r12
mov rcx, r13
mov rdx, r14
mov r8, r12
mov r9, r12
call rsi
test r15b, r15b
jne 0x1400c81c0
test eax, eax
jne 0x1400c81f7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x141dd66f8]
xor edx, edx
div dword [0x141dd66fc]
imul eax, eax, 0x4c022c5d
xor eax, 0x5219c44
or eax, 0xb8ce213a
cmp eax, 0x208274a5
movabs rdi, 0xd6bf94d5e57a42bd
jae 0x1400c82a0
jmp 0x1400c83f0
mov ecx, 0x1000
xor edx, edx
mov r8d, ebp
call rdi
jmp 0x1400c80f0
mov eax, dword [0x141dd66e0]
or eax, dword [0x141dd66e4]
add eax, 0x4f843409
or eax, 0xe1ba32b1
cmp eax, 0x43f7fb94
jae 0x1400c8264
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov esi, dword [0x141dd66e8]
xor esi, dword [0x141dd66ec]
xor esi, 0x2a7d58ba
call rdi
cmp esi, 0xcf898f2c
jae 0x1400c8270
jmp 0x1400c7c50
mov eax, dword [0x141dd6700]
and eax, dword [0x141dd6704]
add eax, 0xbeb9d0c8
imul rsi, rax, 0x6c7228fd
shr rsi, 0x3d
add esi, 0x821c7eb2
mov r14, qword [rsp + 0x38]
movzx eax, byte [0x141ddb9b8]
mov edx, 0x18
xor ecx, ecx
call fcn.1400bf820
cmp esi, 0x62d6d65c
jb 0x1400c83f0
mov r9, rax
mov r8, qword [rsp + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6708]
imul eax, dword [0x141dd670c]
imul eax, eax, 0x23d27a7b
add eax, 0xc5f8e637
and eax, 0x75a3f8ab
cmp eax, 0xd6b6ef79
ja 0x1400c8300
nop word cs:[rax + rax]
mov eax, dword [0x141dd6710]
sub eax, dword [0x141dd6714]
imul rax, rax, 0x7c8a8859
shr rax, 0x3e
xor eax, 0x46eb14d
cmp eax, 0x5755ac91
ja 0x1400c8330
test r9, r9
je 0x1400c8c78
nop dword [rax]
mov ecx, dword [0x141dd6718]
xor ecx, dword [0x141dd671c]
add ecx, 0xe908a7b
xor ecx, 0xa08d2320
and ecx, 0xe59d73e1
mov rax, r14
mul rdi
cmp ecx, 0x4e5dc57f
jb 0x1400c8360
mov rsi, rdx
shr rsi, 0x17
movabs rax, 0xfffffffd49ef6f00
add rsi, rax
cmp rsi, r8
mov eax, 0
cmovbe rax, rsi
sub r8, rax
mov qword [r9], 1
mov qword [r9 + 8], 1
mov eax, dword [0x141dd6720]
add eax, dword [0x141dd6724]
imul eax, eax, 0x31acea21
imul rax, rax, 0x2dd6386f
shr rax, 0x3a
add eax, 0x91d42862
cmp eax, 0x9f97f876
jbe 0x1400c8410
jmp 0x1400c8431
movzx eax, byte [0x141ddb9b8]
mov edx, 0x18
xor ecx, ecx
call fcn.1400bf820
jmp 0x1400c82a0
mov eax, dword [0x141dd6728]
add eax, dword [str.hE._fW]
imul eax, eax, 0x4a554826
mov qword [r9 + 0x10], r13
cmp eax, 0xf2b242e3
jne 0x1400c7c58
mov qword [r9 + 0x10], r13
jmp 0x1400c8410
mov eax, dword [0x141dd6748]
sub eax, dword [0x141dd674c]
add eax, 0x21a600e9
or eax, 0xd5540554
imul eax, eax, 0xcb4a4486
mov qword [r14 - 0x150], rcx
cmp eax, 0xf8a19803
jae 0x1400c8480
mov qword [r14 - 0x150], rcx
jmp 0x1400c8440
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov eax, dword [0x141dd6750]
and eax, dword [0x141dd6754]
imul eax, eax, 0x2bd1f2e1
add eax, 0x55ee34e6
cmp eax, 0x7af66324
ja 0x1400c8490
jmp 0x1400c7183
mov eax, dword [0x141dd6788]
add eax, dword [0x141dd678c]
imul eax, eax, 0x9ae2b144
add eax, 0x824c49fa
cmp eax, 0x13596516
jb 0x1400c84c0
mov r14, qword [rsp + 0x48]
test r14, r14
mov rsi, qword [rsp + 0xe8]
je 0x1400c8822
movzx eax, byte [0x141ddb9b8]
mov edx, 0x28
xor ecx, ecx
call fcn.1400bf820
mov rcx, rax
nop word [rax + rax]
mov eax, dword [0x141dd67a8]
xor edx, edx
div dword [0x141dd67ac]
or eax, 0xe68c9697
imul eax, eax, 0x61cccbf9
cmp eax, 0x9dd00b69
je 0x1400c8510
test rcx, rcx
je 0x1400c8c22
mov eax, dword [0x141dd67b0]
xor eax, dword [0x141dd67b4]
or eax, 0xd77ffbff
cmp eax, 0xaacce931
jae 0x1400c8560
mov qword [rcx], rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dd67b8]
xor edx, edx
div dword [0x141dd67bc]
imul rax, rax, 0x6ec49249
shr rax, 0x3d
imul eax, eax, 0x5e1781ba
add eax, 0xdbf00139
mov qword [rcx], rbx
cmp eax, 0xea402711
ja 0x1400c8560
mov eax, dword [0x141dd67c0]
xor eax, dword [0x141dd67c4]
add eax, 0x2b05fbdd
imul rax, rax, 0x27e52f9b
shr rax, 0x3d
xor eax, 0x16fab1bd
cmp eax, 0x242a163f
jbe 0x1400c85c7
mov qword [rcx + 8], rdi
mov qword [rcx + 0x10], r14
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
pxor xmm0, xmm0
nop dword [rax + rax]
mov eax, dword [0x141dd67c8]
imul eax, dword [0x141dd67cc]
and eax, 0xf94e7d6b
mov qword [rcx + 8], rdi
mov qword [rcx + 0x10], r14
movdqu xmmword [rcx + 0x18], xmm0
cmp eax, 0xaa916410
je 0x1400c85d0
mov eax, dword [0x141dd67d0]
xor eax, dword [0x141dd67d4]
imul eax, eax, 0x7bef9792
add eax, 0x18e78396
cmp eax, 0xe7be8e9f
jae 0x1400c8630
mov qword [rsi], rcx
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], 1
nop word cs:[rax + rax]
mov eax, dword [0x141dd67d8]
sub eax, dword [0x141dd67dc]
and eax, 0x24f34883
imul eax, eax, 0x69bbb8fb
add eax, 0x9dd8fea2
mov qword [rsi], rcx
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], 1
cmp eax, 0xba8f1ec1
jae 0x1400c8630
jmp 0x1400c9373
mov rbx, r9
nop word [rax + rax]
mov eax, dword [0x141dd6528]
sub eax, dword [0x141dd652c]
or eax, 0x96a26743
add eax, 0x29a99d37
xor eax, 0xd1b3fc4b
cmp eax, 0xb0f2703e
ja 0x1400c8670
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c86a0
test r8b, r8b
je 0x1400c8749
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x38]
nop word [rax + rax]
mov eax, dword [0x141dd6548]
add eax, dword [0x141dd654c]
or eax, 0xab8a0ac8
xor eax, 0x6a3aa01f
add eax, 0x31dc5c6f
cmp eax, 0x3b4c2f90
jb 0x1400c86d0
test rcx, rcx
je 0x1400c884e
add rcx, 0x110
nop word cs:[rax + rax]
mov eax, dword [0x141dd6550]
xor edx, edx
div dword [0x141dd6554]
or eax, 0x400
xor eax, 0xd00480c4
and eax, 0xf00c94c4
cmp eax, 0x92f5ce03
jb 0x1400c8710
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c8740
jmp 0x1400c8856
mov eax, dword [0x141dd6530]
xor edx, edx
div dword [0x141dd6534]
mov eax, 0x9d4111eb
nop dword [rax]
mov ecx, dword [0x141dd6538]
or ecx, dword [0x141dd653c]
xor ecx, 0x9d054b58
add ecx, 0x6e1dcaa4
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc237600a
ja 0x1400c8760
nop dword [rax + rax]
mov eax, dword [0x141dd6540]
add eax, dword [0x141dd6544]
xor eax, 0x1e0e625c
imul eax, eax, 0x9ae73397
and eax, 0xf6b0a955
cmp eax, 0x87adcf63
je 0x1400c8790
test rbx, rbx
je 0x1400c7036
shr rbx, 1
nop
mov eax, dword [0x141dd6568]
xor eax, dword [0x141dd656c]
imul rax, rax, 0xc683e6f
shr rax, 0x3b
or eax, 0xbaccb994
cmp eax, 0xf08db735
ja 0x1400c87c0
mov r8, rbx
jmp 0x1400c88a0
pxor xmm0, xmm0
movdqu xmmword [r15], xmm0
mov qword [r15 + 0x10], 0
nop dword [rax]
mov eax, dword [0x141dd6578]
xor eax, dword [0x141dd657c]
or eax, 0x9674bc36
add eax, 0xecc54e42
cmp eax, 0x31260eac
jbe 0x1400c8800
jmp 0x1400c9373
mov eax, dword [0x141dd6790]
add eax, dword [0x141dd6794]
imul eax, eax, 0x4368d2f
add eax, 0xb1d79986
or eax, 0xbb47634a
cmp eax, 0x4e0432b
jae 0x1400c8d74
jmp 0x1400c8da3
call fcn.140077f40
mov rcx, rax
mov eax, dword [0x141dd6558]
xor edx, edx
div dword [0x141dd655c]
shr rbx, 1
nop word [rax + rax]
mov eax, dword [0x141dd6560]
mov edx, dword [0x141dd6564]
add eax, edx
add eax, 0x4da7b54f
xor eax, 0xf8f0eead
mov rdx, qword [rcx]
mov r8, qword [rdx + 0x208]
cmp r8, rbx
cmovbe r8, rbx
cmp eax, 0xa22f0447
ja 0x1400c8870
mov eax, dword [0x141dd67e0]
xor edx, edx
div dword [0x141dd67e4]
cmp eax, 0x29bd961e
jne 0x1400c88d0
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0x60], rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd67e8]
xor edx, edx
div dword [0x141dd67ec]
and eax, 0x86880692
imul eax, eax, 0x180b1392
add eax, 0xe5cd9370
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0x60], rdi
cmp eax, 0x7da20254
jb 0x1400c88d0
sub r14, rdi
jb 0x1400c8bf9
lea rax, [r12 + rdi*8]
xor ecx, ecx
test cl, cl
je 0x1400c8962
lea rcx, [rsp + 0xc8]
mov qword [rsp + 0x108], rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x110], rcx
lea rdx, [rsp + 0xd8]
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], rcx
lea rcx, [rsp + 0xc8]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0xd8]
nop word [rax + rax]
mov r9d, dword [0x141dd67f8]
or r9d, dword [0x141dd67fc]
imul r9d, r9d, 0x79d8bb8d
and r9d, 0x86100a1
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0x110], r8
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], r8
cmp r9d, 0x18509437
ja 0x1400c8980
mov qword [rsp + 0x140], rdx
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x158], rsi
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r8, qword [rax + 0x38]
test r8, r8
je 0x1400c8a39
lea rcx, [rsp + 0x260]
lea rdx, [rsp + 0x108]
xor r9d, r9d
call fcn.1400ca360
jmp 0x1400c8e98
mov eax, dword [0x141dd6800]
add eax, dword [0x141dd6804]
imul eax, eax, 0x246d9792
and eax, 0x8ddb0ccc
cmp eax, 0x1a63fe86
jbe 0x1400c8a60
call fcn.140077f40
nop dword [rax]
mov eax, dword [0x141dd6808]
and eax, dword [0x141dd680c]
or eax, 0xe155ac9c
imul esi, eax, 0x3d69c8a2
add esi, 0x6877d03d
call fcn.140077f40
cmp esi, 0x467b9932
ja 0x1400c8a60
mov rsi, qword [rax]
nop dword [rax]
mov eax, dword [str.wbU_a]
imul eax, dword [0x141dd6814]
or eax, 0x51ce4e89
imul eax, eax, 0x5385f2c3
or eax, 0x8bf78967
cmp eax, 0x967fc3f0
je 0x1400c8a90
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x38]
nop
mov eax, dword [0x141dd6818]
xor edx, edx
div dword [0x141dd681c]
and eax, 0x6f7cc73f
add eax, 0xfa29ed64
or eax, 0x9d0590c5
cmp eax, 0x831b579d
jb 0x1400c8ad0
test rdi, rdi
je 0x1400c8b58
nop dword [rax]
mov eax, dword [0x141dd6838]
xor edx, edx
div dword [0x141dd683c]
imul eax, eax, 0x46e75354
add eax, 0x741619ab
or eax, 0xe3dac070
cmp eax, 0x2bb41a7c
jb 0x1400c8b00
cmp qword [rdi + 0x110], rsi
jne 0x1400c8c39
mov eax, dword [0x141dd6840]
or eax, dword [0x141dd6844]
and eax, 0x697c7ac6
xor eax, 0x7d8e7192
cmp eax, 0x9cf610cd
jbe 0x1400c8e03
jmp 0x1400c8e43
mov eax, dword [0x141dd6820]
or eax, dword [0x141dd6824]
imul eax, eax, 0xf6320224
imul rcx, rax, 0x61caef7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x7232f32a
je 0x1400c8c89
sub rsi, 0xffffffffffffff80
lea rdi, [rsp + 0x260]
lea rbx, [rsp + 0x108]
mov eax, dword [0x141dd6828]
xor edx, edx
div dword [0x141dd682c]
mov ebp, eax
add ebp, 0x4619ed5c
or ebp, 0x59c1f604
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.1400ff1b0
cmp ebp, 0x43325236
je 0x1400c8b9d
nop
mov eax, dword [0x141dd6830]
xor edx, edx
div dword [0x141dd6834]
add eax, 0x54434eb0
or eax, 0xe0f1a9de
add eax, 0xe782c501
cmp eax, 0xd6924ed9
jbe 0x1400c8bd0
jmp 0x1400c8e98
ud2
ud2
sub rsi, 0xffffffffffffff80
lea rcx, [rsp + 0x260]
lea r9, [rsp + 0x108]
mov rdx, rsi
mov r8, rdi
call fcn.1400ff940
mov eax, dword [0x141dd6858]
xor edx, edx
div dword [0x141dd685c]
imul eax, eax, 0x97e5aa5c
cmp eax, 0x9b0a8373
je 0x1400c8c58
jmp 0x1400c8e98
ud2
lea rdx, [rsi + 0x80]
lea rcx, [rsp + 0x260]
lea r8, [rsp + 0x108]
call fcn.1400ff1b0
jmp 0x1400c8b89
mov eax, dword [0x141dd6690]
xor edx, edx
div dword [0x141dd6694]
and eax, 0x162c6b89
imul eax, eax, 0x68b1c2c7
or eax, 0xb99c4e97
cmp eax, 0xa50498b5
jae 0x1400c8ce0
ud2
mov eax, dword [0x141dd6698]
xor edx, edx
div dword [0x141dd669c]
and eax, 0xd0cdc42e
imul eax, eax, 0x64fcd0a3
ud2
mov eax, dword [0x141dd6660]
sub eax, dword [0x141dd6664]
add eax, 0x3e949a07
cmp eax, 0x57de4a85
jbe 0x1400c8d30
ud2
xor eax, eax
nop word cs:[rax + rax]
ud2
mov eax, dword [0x141dd6798]
xor edx, edx
div dword [0x141dd679c]
xor eax, 0x8840601
or eax, 0x37133188
pxor xmm0, xmm0
movdqu xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
cmp eax, 0xc3349c0f
jbe 0x1400c8dc0
pxor xmm0, xmm0
movdqu xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
jmp 0x1400c8d74
mov eax, dword [0x141dd67a0]
sub eax, dword [0x141dd67a4]
add eax, 0x734f456d
imul rax, rax, 0x4479878d
shr rax, 0x3d
cmp eax, 0x4488ecb9
je 0x1400c8dc0
test rbx, rbx
je 0x1400c9373
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c9373
mov eax, dword [0x141dd6848]
and eax, dword [0x141dd684c]
and eax, 0x98cfa743
imul esi, eax, 0x9ebd01a
add esi, 0x1c02d89e
lea rcx, [rsp + 0x260]
lea rdx, [rsp + 0x108]
mov r8, rdi
xor r9d, r9d
call fcn.1400ca360
cmp esi, 0x6b59053c
jbe 0x1400c8e60
lea rcx, [rsp + 0x260]
lea rdx, [rsp + 0x108]
mov r8, rdi
xor r9d, r9d
call fcn.1400ca360
jmp 0x1400c8e03
mov eax, 0x8c14ebed
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6850]
or ecx, dword [0x141dd6854]
add ecx, 0xd158f612
and ecx, 0xd647d753
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x1e1465f5
je 0x1400c8e70
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400c8ea0
mov eax, 0x898a7031
nop dword [rax]
mov ecx, dword [0x141dd6860]
add ecx, dword [0x141dd6864]
xor ecx, 0x12348145
add ecx, 0xc9360144
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc4902c4b
ja 0x1400c8eb0
mov rdi, qword [rsp + 0x260]
mov rdx, qword [rsp + 0x268]
mov rax, qword [rsp + 0x270]
mov r8, qword [rsp + 0x278]
mov rcx, qword [rsp + 0x280]
mov r9d, dword [0x141dd6868]
add r9d, dword [0x141dd686c]
imul r9, r9, 0x833e077
shr r9, 0x34
xor r9d, 0x61004402
or r9d, 0x96aea3ec
cmp r9d, 0xe1f9bafe
nop
mov r9d, dword [0x141dd6870]
xor r9d, dword [0x141dd6874]
mov r10d, 0xac6e3723
imul r10, r9
shr r10, 0x3d
xor r10d, 0x29040b24
or r10d, 0x92e9a41b
cmp r10d, 0xa2b8105f
je 0x1400c8f30
mov r9, qword [rsp + 0x288]
test rdx, rdx
je 0x1400c8fdd
mov r10d, dword [0x141dd6878]
imul r10d, dword [0x141dd687c]
or r10d, 0x77ff5dd4
cmp r10d, 0x82bbb307
je 0x1400c8f70
test r8, r8
je 0x1400c9334
nop dword [rax + rax]
mov r10d, dword [0x141dd6880]
imul r10d, dword [0x141dd6884]
add r10d, 0x6598355e
and r10d, 0xf4c572d5
imul r10d, r10d, 0xa9d73571
cmp r10d, 0x76202265
je 0x1400c8fa0
mov qword [rdx + 0x18], r8
mov qword [r8 + 0x20], rdx
add rax, r9
jmp 0x1400c9337
mov qword [r15], r8
mov qword [r15 + 8], rcx
mov eax, dword [0x141dd6888]
imul eax, dword [0x141dd688c]
imul eax, eax, 0x6bc1692
or eax, 0xc6773f9f
imul eax, eax, 0x73709378
cmp eax, 0xb39c36a2
jne 0x1400c900d
mov qword [r15 + 0x10], r9
xor eax, eax
nop
mov qword [r15 + 0x10], r9
test al, al
jne 0x1400c9010
mov eax, dword [0x141dd6890]
xor edx, edx
div dword [0x141dd6894]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6898]
and eax, dword [0x141dd689c]
or eax, 0x31b29194
add eax, 0xc8f70386
xor eax, 0xf0ac2d13
cmp eax, 0x36f1dab5
jb 0x1400c9030
test rdi, rdi
je 0x1400c9350
xor r14d, r14d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c9089
xor edx, edx
mov r8, rdi
call r12
mov rax, qword [rsp + 0x30]
mov rdi, rax
test rax, rax
je 0x1400c9350
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x1400c90c4
mov qword [rcx + 0x20], 0
nop word [rax + rax]
mov eax, dword [0x141dd68a0]
xor edx, edx
div dword [0x141dd68a4]
add eax, 0x299018ad
or eax, 0x41002286
and eax, 0x6b5222ee
cmp eax, 0xa31be176
ja 0x1400c90a0
mov eax, dword [0x141dd68a8]
xor edx, edx
div dword [0x141dd68ac]
nop word cs:[rax + rax]
mov eax, dword [0x141dd68b0]
xor edx, edx
div dword [0x141dd68b4]
add eax, 0x9d9e1fae
xor eax, 0xa2210000
or eax, 0x441efbf4
cmp eax, 0xba3d3ded
ja 0x1400c90e0
mov eax, dword [0x141dd68b8]
xor edx, edx
div dword [0x141dd68bc]
nop word cs:[rax + rax]
mov eax, dword [0x141dd68c0]
add eax, dword [0x141dd68c4]
imul eax, eax, 0x984d651a
and eax, 0x951d8754
imul rax, rax, 0x195cfafd
shr rax, 0x3b
cmp eax, 0x62b972dc
je 0x1400c9120
mov rsi, qword [rdi + 8]
mov qword [rsp + 0x30], rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd68c8]
add eax, dword [0x141dd68cc]
imul eax, eax, 0xac89748
cmp eax, 0x8398d2ff
je 0x1400c9160
mov r13, qword [rdi + 0x10]
test r13, r13
je 0x1400c91f0
mov rbx, rsi
xor ebp, ebp
jmp 0x1400c919f
add rbx, 0x158
inc rbp
dec r13
je 0x1400c91f0
test r14b, r14b
jne 0x1400c91e1
nop word cs:[rax + rax]
mov eax, dword [0x141dd68d0]
imul eax, dword [0x141dd68d4]
xor eax, 0x957c05d4
imul r15d, eax, 0x8de5f85a
add r15d, 0x3120edaa
mov rcx, rbx
call fcn.1400c93d0
cmp r15d, 0xa839e030
jbe 0x1400c9190
mov rcx, rbx
call fcn.1400c93d0
jmp 0x1400c91b0
mov eax, dword [0x141dd68d8]
sub eax, dword [0x141dd68dc]
add eax, 0x9af90074
or eax, 0xe9f49993
add eax, 0x327d002f
cmp eax, 0xe3b13d4
jb 0x1400c91f0
mov rcx, qword [rdi]
mov eax, dword [0x141dd68e0]
xor edx, edx
div dword [0x141dd68e4]
add eax, 0x8c722601
or eax, 0x5bc70f96
and eax, 0x5fffef96
cmp eax, 0x50f366e0
je 0x1400c9215
nop dword [rax]
mov eax, dword [0x141dd68e8]
xor edx, edx
div dword [0x141dd68ec]
xor eax, 0xd33ca9e0
shr eax, 5
imul rax, rax, 0x27656e1
shr rax, 0x2f
cmp eax, 0xeda7a96
je 0x1400c9240
test rcx, rcx
je 0x1400c92e5
mov rbx, qword [0x141ddb9a0]
mov eax, dword [0x141dd68f0]
xor eax, dword [0x141dd68f4]
imul rcx, rax, 0x3005af7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
xor eax, 0x7106c4e9
cmp eax, 0x9686060f
ja 0x1400c92d0
mov eax, dword [0x141dd68f8]
xor eax, dword [0x141dd68fc]
and eax, 0xe5d5a016
imul r15, rax, 0x4af25bb7
shr r15, 0x3b
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r12
cmp r15d, 0x5906c659
jne 0x1400c92e0
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r12
jmp 0x1400c92a0
test r14b, r14b
jne 0x1400c92e0
mov eax, dword [0x141dd6900]
xor edx, edx
div dword [0x141dd6904]
add eax, 0xc46a12e7
cmp eax, 0x51739632
jb 0x1400c932b
nop
mov eax, dword [0x141dd6908]
xor edx, edx
div dword [0x141dd690c]
imul eax, eax, 0xbf4b8cbe
add eax, 0x1ace97ed
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xfaf9806b
jbe 0x1400c9070
mov rax, qword [0x141ddb9a0]
jmp 0x1400c9300
mov rcx, rdx
mov qword [r15], rdi
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], rax
nop word cs:[rax + rax]
mov eax, dword [str.NKQ]
add eax, dword [0x141dd6914]
imul eax, eax, 0xb4d6759d
xor eax, 0x640505c1
or eax, 0x195a3a22
cmp eax, 0xec125f73
je 0x1400c9350
mov ecx, 0xe8167fe3
nop dword [rax + rax]
mov eax, dword [0x141dd6918]
xor edx, edx
div dword [0x141dd691c]
imul rax, rcx
shr rax, 0x39
imul eax, eax, 0xd97e733f
add eax, 0xe063d8ae
cmp eax, 0x21193ebb
jb 0x1400c9380
movaps xmm6, xmmword [rsp + 0x3b0]
movaps xmm7, xmmword [rsp + 0x3c0]
add rsp, 0x3d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret