Function at 0x1400c8590
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x158
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xc0], xmm7
movaps xmmword [rbp + 0xb0], xmm6
mov qword [rbp + 0xa8], r9
mov byte [rbp + 0x78], r8b
mov eax, dword [0x141dd7068]
or eax, dword [0x141dd706c]
imul eax, eax, 0xfc84d135
xor eax, 0x24fdb199
cmp eax, 0xc8c452b7
jbe 0x1400c8624
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rax, qword [rbp + 0x158]
mov qword [rbp + 0x80], rax
mov r9, qword [rbp + 0x150]
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x88], rax
mov r14, qword [rbp + 0x140]
xor r10d, r10d
nop word cs:[rax + rax]
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r8, rsp
test r10b, r10b
jne 0x1400c8660
mov qword [rbp + 0xa0], r9
mov qword [rbp - 0x10], r8
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x58], rdi
mov qword [rbp], rsi
mov qword [rbp - 8], r11
mov qword [rbp + 0x68], rcx
xor eax, eax
test al, al
je 0x1400c877a
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x160
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x150
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x60
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
mov qword [rax], rdx
mov qword [rcx + 8], r14
mov rax, rdx
shr rax, 1
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x90], rdx
mov r8, r14
nop word cs:[rax + rax]
mov eax, dword [0x141dd7070]
xor edx, edx
div dword [0x141dd7074]
mov ecx, eax
add ecx, 0x1968648b
or ecx, 0x4c21384
and ecx, 0x84c21386
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdx, rsp
mov eax, 0x160
call fcn.1400f07c0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r10, rsp
mov eax, 0x150
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x60
call fcn.1400f07c0
sub rsp, rax
mov r13, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov rax, qword [rbp + 0x90]
mov qword [rdi], rax
mov qword [rsi + 8], r8
cmp ecx, 0x17fadf53
ja 0x1400c87a0
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x58], r10
mov qword [rbp - 0x20], r9
mov qword [rbp + 0x28], r11
mov r10, qword [rbp + 0x98]
cmp r10, r8
mov r14, qword [rbp + 0xa0]
jae 0x1400c9a46
nop word cs:[rax + rax]
mov eax, dword [0x141dd7098]
add eax, dword [0x141dd709c]
xor eax, 0x46023090
or eax, 0x2891c601
and eax, 0x7fb7feb9
cmp eax, 0x67eb4c73
je 0x1400c88c0
mov rcx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x28]
lea rax, [rcx + r14*8]
mov qword [rbp - 0x70], rax
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400c8900
nop word cs:[rax + rax]
mov eax, dword [0x141dd70a0]
and eax, dword [0x141dd70a4]
imul eax, eax, 0x1cd624a
add eax, 0xacd6343e
cmp eax, 0x41029079
jb 0x1400c8910
test r14, r14
je 0x1400c9b96
mov qword [rbp - 0x50], rdx
mov rdx, qword [rbp + 0x80]
mov rax, qword [rdx]
mov qword [rbp - 0x68], rax
mov rax, qword [rdx + 8]
mov qword [rbp - 0x60], rax
mov rax, qword [rdx + 0x10]
mov qword [rbp + 0x70], rax
mov rax, qword [rdx + 0x18]
mov qword [rbp + 0x20], rax
mov rax, qword [rdx + 0x20]
mov qword [rbp + 0x78], rax
lea rax, [r8 + 0x10]
mov qword [rbp - 0x48], rax
lea rax, [r8 + 0xe8]
mov qword [rbp - 0x40], rax
lea rax, [r8 + 8]
mov qword [rbp - 0x38], rax
lea rax, [r8 + 0x100]
mov qword [rbp - 0x30], rax
add r8, 0x130
mov qword [rbp - 0x28], r8
mov r13d, 8
xorps xmm6, xmm6
pcmpeqd xmm7, xmm7
xor r15d, r15d
mov esi, 0xd4fad14f
xor r8d, r8d
xor eax, eax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x30], rbx
jmp 0x1400c8a0a
mov rax, qword [rbp + 0x10]
mov qword [r12 - 0x158], rax
mov rax, qword [rbp + 8]
mov qword [r12 - 0x150], rax
mov rcx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x50]
mov r13, qword [rbp + 0x18]
mov esi, 0xd4fad14f
add rcx, 8
cmp rcx, qword [rbp - 0x70]
je 0x1400c9aec
mov qword [rbp + 0x50], r8
mov qword [rbp + 0x88], rcx
mov rax, qword [rcx]
mov rcx, qword [rbp - 0x68]
lock inc qword [rcx]
movzx ecx, word [rax + 0x38]
mov qword [rbp - 0x78], rcx
mov rcx, qword [rax + 0x40]
mov qword [rbp + 0xa8], rcx
mov r8, qword [rax + 0x50]
mov rcx, qword [rax + 0x58]
mov r14, qword [rax + 0x78]
mov rax, qword [rax + 0x90]
mov qword [rbp + 0x98], rax
xor eax, eax
mov qword [rbp + 8], rcx
test rcx, rcx
setne al
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x60]
mov rdi, qword [rax]
cmp qword [rdi + 0x18], 0
mov qword [rbp + 0xa0], r8
mov qword [rbp + 0x80], r14
je 0x1400c8ec0
mov rcx, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
sub rsp, 0x20
call fcn.1400cb210
add rsp, 0x20
mov rcx, rax
mov eax, dword [0x141dd70b8]
sub eax, dword [0x141dd70bc]
and eax, 0xaa00b024
or eax, 0x54fa00c8
xor eax, 0x8874ce91
cmp eax, 0xad738c18
ja 0x1400c8a95
mov rax, rcx
shr rax, 0x39
mov r12, qword [rdi]
mov r11, qword [rdi + 8]
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r9d, r9d
mov r10, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa0]
and rcx, r11
movdqu xmm1, xmmword [r12 + rcx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb eax, xmm2
test eax, eax
je 0x1400c8bc0
nop word cs:[rax + rax]
mov edx, dword [str.Bs_e]
imul edx, dword [0x141dd70c4]
imul edx, edx, 0x3514d7b7
shr edx, 2
imul rdx, rdx, 0x530ec795
shr rdx, 0x3a
and edx, 0xfffffffc
cmp edx, 0x717d819f
ja 0x1400c8b10
tzcnt edx, eax
add rdx, rcx
and rdx, r11
neg rdx
imul rdx, rdx, 0x160
cmp qword [r12 + rdx - 0x160], r8
je 0x1400c8c60
test r15b, r15b
jne 0x1400c8b5e
lea edx, [rax - 1]
and edx, eax
mov eax, edx
nop word [rax + rax]
mov edx, dword [0x141dd70d0]
sub edx, dword [str.yI4_]
xor edx, 0xce6439cc
add edx, 0xfbc47d87
cmp edx, 0x66ad72ff
jb 0x1400c8b70
mov edx, dword [0x141dd70d8]
sub edx, dword [0x141dd70dc]
xor edx, 0x4732b754
imul edx, edx, 0x9845428b
and edx, 0xdc096395
cmp edx, 0x74fdecae
ja 0x1400c8b90
test ax, ax
jne 0x1400c8b10
nop
test r15b, r15b
jne 0x1400c8bc0
pcmpeqb xmm1, xmm7
pmovmskb eax, xmm1
nop dword [rax]
mov edx, dword [0x141dd70c8]
and edx, dword [0x141dd70cc]
cmp edx, 0x29736d6b
je 0x1400c8bd0
test ax, ax
jne 0x1400c8ec0
add r9, 0x10
nop word cs:[rax + rax]
mov eax, dword [0x141dd70e0]
or eax, dword [0x141dd70e4]
imul rax, rsi
shr rax, 0x3d
imul eax, eax, 0x664b5f27
imul rax, rax, 0x22590859
shr rax, 0x3d
cmp eax, 0x3a5cfa0
ja 0x1400c8c00
add rcx, r9
nop
mov eax, dword [0x141dd70e8]
xor edx, edx
div dword [0x141dd70ec]
xor eax, 0x9da88e05
imul eax, eax, 0xd6b9ba11
cmp eax, 0xd6810842
jbe 0x1400c8c30
jmp 0x1400c8ae8
add r12, rdx
mov eax, dword [0x141dd70f0]
xor eax, dword [0x141dd70f4]
or eax, 0x70000
and eax, 0x11174087
cmp eax, 0x5e8701fe
ja 0x1400c8c63
mov rax, qword [r12 - 0x60]
test rax, rax
mov qword [rbp + 0x18], r13
je 0x1400c8e76
test r15b, r15b
mov r13, qword [rbp - 0x10]
jne 0x1400c8cd2
nop dword [rax + rax]
mov ecx, dword [0x141dd70f8]
xor ecx, dword [0x141dd70fc]
imul ecx, ecx, 0xc920bc41
or ecx, 0x6dee2cb
add ecx, 0x1ed9f48b
mov r14, qword [rax + 0x10]
mov dword [r13], 0
cmp ecx, 0x9665c0f5
jbe 0x1400c8ce0
mov dword [r13], 0
jmp 0x1400c8ca0
mov dword [r13 + 4], 0
mov eax, dword [0x141dd7100]
sub eax, dword [0x141dd7104]
add eax, 0x8cc270bc
and eax, 0xfbd0deca
mov ecx, 0xafb08657
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x32ac0039
mov rsi, qword [rbp - 0x18]
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
je 0x1400c8d66
nop dword [rax]
mov edi, dword [0x141dd7108]
and edi, dword [0x141dd710c]
mov eax, 0x98e7e1c3
imul rdi, rax
shr rdi, 0x3e
and edi, 0xfffffffe
mov qword [rsi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, r14
mov rdx, r13
mov r8, rsi
mov r9, rsi
call rbx
add rsp, 0x30
cmp edi, 0xc3e71951
jbe 0x1400c8d90
mov qword [rsi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, r14
mov rdx, r13
mov r8, rsi
mov r9, rsi
call rbx
add rsp, 0x30
jmp 0x1400c8d20
test eax, eax
mov rdi, r13
mov r13, qword [rbp + 0x18]
mov rbx, qword [rbp + 0x30]
mov esi, 0xd4fad14f
jne 0x1400c8e13
mov eax, dword [0x141dd7110]
sub eax, dword [0x141dd7114]
xor eax, 0x96f12cff
cmp eax, 0x82785831
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
jb 0x1400c8de0
nop word cs:[rax + rax]
sub rsp, 0x20
call r14
add rsp, 0x20
test r15b, r15b
je 0x1400c8df0
sub rsp, 0x20
call r14
add rsp, 0x20
jmp 0x1400c8dd0
mov eax, dword [0x141dd7118]
xor eax, dword [0x141dd711c]
add eax, 0x72191714
imul rax, rax, 0x12912c7
shr rax, 0x38
cmp eax, 0x42c29f69
je 0x1400c8df0
mov ecx, 0xc6df8c5f
mov eax, dword [0x141dd71f8]
xor edx, edx
div dword [0x141dd71fc]
add eax, 0x25c45aa
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0xd460ae64
cmp eax, 0x2b289dcc
je 0x1400c8e18
mov rax, qword [rdi]
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
cmp rdx, qword [r12 - 0x38]
mov r10, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa0]
jne 0x1400c8ec0
lea rax, [r12 - 0x158]
mov qword [rbp + 0xa0], rax
mov eax, dword [0x141dd7200]
sub eax, dword [0x141dd7204]
add eax, 0xf31bb2b4
or eax, 0x68845ab7
imul eax, eax, 0x480d64fd
cmp eax, 0x235605b5
mov r14, qword [rbp + 0x20]
mov rsi, qword [rbp - 0x20]
mov r13, qword [rbp + 0x70]
jae 0x1400c97c0
jmp 0x1400c9836
mov rcx, qword [rbp - 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7120]
xor edx, edx
div dword [0x141dd7124]
add eax, 0x84144dcb
and eax, 0x88b4292
imul eax, eax, 0x933313df
cmp eax, 0xafdfa135
je 0x1400c8ed0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7128]
or eax, dword [0x141dd712c]
and eax, 0x661137e0
add eax, 0x332281a7
xor eax, 0x49e446a
cmp eax, 0xd140899e
ja 0x1400c8f00
mov qword [rcx], r8
cmp qword [rbp + 0xa8], 0
mov r12, qword [rbp + 0x60]
je 0x1400c8f70
mov r14, qword [rbp - 0x78]
shr r14d, 1
mov eax, dword [0x141dd7130]
or eax, dword [str.0_X_]
add eax, 0xfa892a4
xor eax, 0x80010800
and eax, 0xcfd10d51
cmp eax, 0x5bee7a13
jbe 0x1400c90d0
jmp 0x1400c9140
test r8, r8
je 0x1400c8fbf
cmp r8, 4
jne 0x1400c8fee
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
mov edx, 6
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
test rax, rax
je 0x1400c9dd7
mov rcx, rax
mov word [rax + 4], 0x6d65
mov dword [rax], 0x74737953
mov r8d, 6
mov r9d, 6
jmp 0x1400c923f
movzx eax, byte [0x141ddc4f8]
mov eax, dword [0x141dd7150]
imul eax, dword [0x141dd7154]
xor eax, 0x6767fc13
imul eax, eax, 0x6f8730ec
cmp eax, 0xfda1acb5
jbe 0x1400c915f
jmp 0x1400c9197
mov qword [rbp + 0x40], rcx
test r15b, r15b
mov r14, qword [rbp - 8]
mov r12, qword [rbp]
lea rsi, [0x141dbaeb8]
jne 0x1400c9069
mov eax, dword [0x141dd7148]
xor edx, edx
div dword [0x141dd714c]
imul edi, eax, 0xa4ea5fa7
add edi, 0xb0981914
lea rax, [0x1400d06c0]
mov qword [rbp + 0x48], rax
mov qword [r14], rsi
mov qword [r14 + 8], 1
mov qword [r14 + 0x20], 0
lea rax, [rbp + 0x40]
mov qword [r14 + 0x10], rax
mov qword [r14 + 0x18], 1
sub rsp, 0x20
mov rcx, r12
mov rdx, r14
call fcn.14003a080
add rsp, 0x20
cmp edi, 0xc51cd61b
jbe 0x1400c90af
lea rax, [0x1400d06c0]
mov qword [rbp + 0x48], rax
mov qword [r14], rsi
mov qword [r14 + 8], 1
mov qword [r14 + 0x20], 0
lea rax, [rbp + 0x40]
mov qword [r14 + 0x10], rax
mov qword [r14 + 0x18], 1
sub rsp, 0x20
mov rcx, r12
mov rdx, r14
call fcn.14003a080
add rsp, 0x20
jmp 0x1400c9006
mov r8, qword [r12]
mov rcx, qword [r12 + 8]
mov r9, qword [r12 + 0x10]
mov r12, qword [rbp + 0x60]
mov esi, 0xd4fad14f
jmp 0x1400c923f
mov eax, dword [0x141dd7138]
sub eax, dword [0x141dd713c]
or eax, 0xe36bf51c
imul edi, eax, 0xf7bb50e1
sub rsp, 0x20
mov rcx, rbx
mov rdx, qword [rbp + 0xa8]
mov r8, r14
call fcn.14008ced0
add rsp, 0x20
cmp edi, 0x46b260a9
je 0x1400c9140
nop dword [rax]
mov eax, dword [0x141dd7140]
xor edx, edx
div dword [0x141dd7144]
or eax, 0xe8fe052f
imul rax, rax, 0x553d20d
shr rax, 0x39
and eax, 0xfffffffe
cmp eax, 0x75c246bb
je 0x1400c9110
jmp 0x1400c92b2
sub rsp, 0x20
mov rcx, rbx
mov rdx, qword [rbp + 0xa8]
mov r8, r14
call fcn.14008ced0
add rsp, 0x20
jmp 0x1400c90d0
mov eax, dword [0x141dd7158]
xor edx, edx
div dword [0x141dd715c]
mov edi, eax
add edi, 0xa08acdee
and edi, 0xbf79b1c7
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
cmp edi, 0x60cc1427
jne 0x1400c91ad
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
jmp 0x1400c915f
mov rcx, rax
test rax, rax
je 0x1400c9e32
mov eax, dword [0x141dd7178]
and eax, dword [0x141dd717c]
add eax, 0x6284f4ab
or eax, 0x79cd2e6b
add eax, 0x21019bb9
cmp eax, 0xf83d332a
mov edx, 0xcfb337cb
jbe 0x1400c91f0
mov dword [rcx], 0x656c6449
nop word cs:[rax + rax]
mov eax, dword [0x141dd7180]
imul eax, dword [0x141dd7184]
add eax, 0xefb8414b
imul rax, rdx
shr rax, 0x3d
and eax, 0xfffffffc
mov dword [rcx], 0x656c6449
cmp eax, 0x6fbc37a0
je 0x1400c91f0
nop word [rax + rax]
mov eax, dword [0x141dd7188]
add eax, dword [0x141dd718c]
cmp eax, 0x88987d05
je 0x1400c9220
mov r8d, 4
mov r9d, 4
mov eax, dword [0x141dd7198]
xor edx, edx
div dword [0x141dd719c]
imul eax, eax, 0x324fe916
xor eax, 0x93225
and eax, 0x12bba2d
cmp eax, 0xffdd9df3
jbe 0x1400c9280
mov qword [rbx], r8
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], r9
mov byte [rbx + 0x18], 1
nop word cs:[rax + rax]
mov eax, dword [0x141dd71a0]
add eax, dword [0x141dd71a4]
and eax, 0xa12b04d
imul eax, eax, 0x7d888f54
and eax, 0xdc9b95c
mov qword [rbx], r8
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], r9
mov byte [rbx + 0x18], 1
cmp eax, 0x7fe7a8ab
ja 0x1400c9280
mov ecx, 0xf52acdbf
nop word [rax + rax]
mov eax, dword [0x141dd71a8]
add eax, dword [0x141dd71ac]
imul rax, rcx
shr rax, 0x3c
imul eax, eax, 0xb3336c87
cmp eax, 0xfd570f09
je 0x1400c92c0
mov rax, qword [rbp + 0x78]
mov rcx, qword [rax]
mov r11, qword [rbp + 0x70]
mov r8, qword [rbp + 0xa0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd71b0]
imul eax, dword [0x141dd71b4]
xor eax, 0x42000604
or eax, 0x52800a1
and eax, 0x473856b5
cmp eax, 0x57266913
je 0x1400c9300
mov qword [rbp + 0xa8], rcx
test r8, r8
je 0x1400c93b0
sub rsp, 0x20
mov ecx, 0x410
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov rdx, rax
mov eax, dword [0x141dd71b8]
imul eax, dword [0x141dd71bc]
add eax, 0xc7036d3e
or eax, 0xac4712ae
cmp eax, 0x972f9a33
jb 0x1400c934b
lea rax, [rdx - 1]
cmp rax, 0xfffffffffffffffe
mov dil, 1
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
jae 0x1400c93c9
nop dword [rax]
mov eax, dword [0x141dd71c0]
imul eax, dword [0x141dd71c4]
imul eax, eax, 0x802766af
add eax, 0x16e8f49c
cmp eax, 0x4c25c776
ja 0x1400c9380
mov rax, rdx
inc rax
cmp rax, 1
jbe 0x1400c93e5
jmp 0x1400c943d
xor eax, eax
xor edx, edx
xor ecx, ecx
mov r10, qword [rbp + 0x98]
mov r14, qword [rbp + 0xa8]
jmp 0x1400c9611
sub rsp, 0x20
call rax
add rsp, 0x20
nop word cs:[rax + rax]
test dil, dil
je 0x1400c93e0
sub rsp, 0x20
mov ecx, 0x1000
xor edx, edx
mov r8, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov rdx, rax
mov ecx, 0x971c89bf
nop dword [rax]
mov eax, dword [0x141dd71c8]
or eax, dword [0x141dd71cc]
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0xb53f3510
cmp eax, 0xa70bb0bb
ja 0x1400c9410
mov rax, rdx
dec rax
cmp rax, 0xfffffffffffffffe
jae 0x1400c9459
test r15b, r15b
lea rsi, [rbp + 0x38]
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov r12, rdx
lea r14, [rbp + 0x40]
je 0x1400c9490
jmp 0x1400c9530
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
xor edx, edx
xor ecx, ecx
mov r11, qword [rbp + 0x70]
mov r10, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa0]
mov r14, qword [rbp + 0xa8]
jmp 0x1400c9611
mov edi, dword [0x141dd71d0]
sub edi, dword [0x141dd71d4]
or edi, 0x408800b
and edi, 0x688800b
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov rcx, r12
mov rdx, rsi
mov r8, r14
mov r9, r14
call rbx
add rsp, 0x30
cmp edi, 0x25a2fb72
je 0x1400c9530
test eax, eax
jne 0x1400c94f5
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop dword [rax]
test r15b, r15b
jne 0x1400c94f0
mov eax, dword [0x141dd71d8]
sub eax, dword [0x141dd71dc]
imul eax, eax, 0xe98e30e1
xor eax, 0x32221894
add eax, 0x2d7d84d
cmp eax, 0x39c98954
mov rbx, qword [rbp + 0x30]
mov esi, 0xd4fad14f
jae 0x1400c9560
jmp 0x1400c97b0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov rcx, r12
mov rdx, rsi
mov r8, r14
mov r9, r14
call rbx
add rsp, 0x30
jmp 0x1400c9490
mov eax, dword [0x141dd71e0]
imul eax, dword [0x141dd71e4]
or eax, 0x11d4153b
add eax, 0x90712d8b
mov rdi, qword [rbp + 0x38]
movzx ecx, byte [0x141ddc4f8]
cmp eax, 0x95fc2289
ja 0x1400c97b0
sub rsp, 0x20
mov edx, 0x18
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
test rax, rax
je 0x1400c9e07
mov rcx, rax
mov rax, rdi
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
mov r14, qword [rbp + 0xa8]
cmp rdx, r14
mov r8d, 0
cmovbe r8, rdx
mov rax, r14
sub rax, r8
mov qword [rcx], 1
mov qword [rcx + 8], 1
mov qword [rcx + 0x10], r12
mov r11, qword [rbp + 0x70]
mov r10, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa0]
mov r12, qword [rbp + 0x60]
movdqu xmm0, xmmword [rbx]
movdqu xmm1, xmmword [rbx + 0x10]
mov r9, qword [rbp - 0x48]
movdqu xmmword [r9 + 0x10], xmm1
movdqu xmmword [r9], xmm0
mov rdi, qword [rbp + 0x28]
mov qword [rdi + 0x30], 0
mov qword [rdi + 0x38], 8
movups xmmword [rdi + 0x40], xmm6
movabs r9, 0x8000000000000000
mov qword [rdi + 0x60], r9
mov qword [rdi + 0xe0], r8
mov qword [rdi + 0x80], r9
mov qword [rdi + 0x50], 8
mov qword [rdi + 0x58], 0
mov qword [rdi + 0x98], r9
mov qword [rdi + 0xb8], r9
mov r9, qword [rbp - 0x40]
movups xmmword [r9], xmm6
mov r9, qword [rbp + 0x10]
mov qword [rdi], r9
mov r9, qword [rbp + 8]
mov qword [rdi + 8], r9
mov dword [rdi + 0xd8], 1
mov qword [rdi + 0xf8], rcx
mov rcx, qword [rbp - 0x30]
movups xmmword [rcx + 0x10], xmm6
movups xmmword [rcx], xmm6
mov qword [rdi + 0x120], rdx
mov qword [rdi + 0x128], rax
mov dword [rdi + 0x150], 0
mov byte [rdi + 0x154], 1
mov rax, qword [rbp - 0x28]
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
movzx eax, byte [r11 + 8]
mov rdx, qword [rbp - 0x50]
mov byte [rdx + 8], al
mov rax, qword [r11]
mov qword [rdx], rax
mov rax, qword [rbp + 0x20]
mov r8, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], r10
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov r9, r14
call fcn.1400d0720
add rsp, 0x30
mov rdi, qword [rdi]
sub rsp, 0x20
mov r8d, 0x150
mov rcx, r12
mov rdx, qword [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp rdi, 2
jne 0x1400c9760
mov rcx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x50]
add rcx, 8
cmp rcx, qword [rbp - 0x70]
jne 0x1400c8a0a
jmp 0x1400c9aec
mov eax, dword [0x141dd7210]
imul eax, dword [0x141dd7214]
xor eax, 0xd11928c2
add eax, 0xbd6f5d32
imul rax, rax, 0x305e2ee1
shr rax, 0x3b
cmp eax, 0xa4f94db0
mov rdx, qword [rbp + 0x90]
mov rsi, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x58]
jbe 0x1400c9890
jmp 0x1400c98f0
movzx eax, byte [0x141ddc4f8]
jmp 0x1400c9560
mov eax, dword [0x141dd7208]
xor edx, edx
div dword [0x141dd720c]
mov edi, eax
add edi, 0x8e69a12d
or edi, 0x2b19e5b1
add edi, 0x21f6f4d0
movzx eax, byte [r13 + 8]
mov byte [rsi + 8], al
mov rax, qword [r13]
mov qword [rsi], rax
mov r8, qword [r14]
mov rax, qword [rbp + 0x78]
mov r9, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], r10
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0xa0]
mov rdx, rsi
call fcn.1400d0720
mov r10, qword [rbp + 0x98]
add rsp, 0x30
cmp edi, 0xf6e00dad
jbe 0x1400c89d0
movzx eax, byte [r13 + 8]
mov byte [rsi + 8], al
mov rax, qword [r13]
mov qword [rsi], rax
mov r8, qword [r14]
mov rax, qword [rbp + 0x78]
mov r9, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], r10
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0xa0]
mov rdx, rsi
call fcn.1400d0720
mov r10, qword [rbp + 0x98]
add rsp, 0x30
jmp 0x1400c97c0
mov eax, dword [0x141dd7218]
or eax, dword [0x141dd721c]
xor eax, 0xe010b8a1
or eax, 0x56e415e
mov qword [rcx], rsi
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], rdx
cmp eax, 0x3192c238
ja 0x1400c98f0
nop dword [rax + rax]
test r15b, r15b
jne 0x1400c98c0
cmp rdx, rsi
jne 0x1400c995c
mov eax, dword [0x141dd7220]
add eax, dword [0x141dd7224]
xor eax, 0x69c12b3f
cmp eax, 0xafb17450
jbe 0x1400c9900
jmp 0x1400c9a30
mov qword [rcx], rsi
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], rdx
jmp 0x1400c9890
mov eax, dword [0x141dd7228]
xor edx, edx
div dword [0x141dd722c]
xor eax, 0xd073c5c3
imul r14d, eax, 0xffe965fc
add r14d, 0x8c1554ff
sub rsp, 0x20
call fcn.1400cb640
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
cmp r14d, 0x61985aa
jb 0x1400c9a30
mov rsi, qword [rcx]
mov r13, qword [rcx + 8]
nop word cs:[rax + rax]
test r15b, r15b
jne 0x1400c9950
mov rdx, qword [rbp + 0x90]
mov eax, dword [0x141dd7230]
xor eax, dword [0x141dd7234]
imul rax, rax, 0x5694009f
shr rax, 0x3e
imul eax, eax, 0xca1fa8a9
add eax, 0x6d1bbb7
cmp eax, 0x6f74017f
jbe 0x1400c99c0
imul rax, rdx, 0x158
mov qword [r13 + rax], rdi
lea rcx, [rax + r13]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbp + 0x90]
add rsp, 0x20
nop word cs:[rax + rax]
mov r14d, dword [0x141dd7238]
imul r14d, dword [0x141dd723c]
add r14d, 0xad6f5767
and r14d, 0x52cf4bc2
imul rax, rdx, 0x158
mov qword [r13 + rax], rdi
lea rcx, [rax + r13]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbp + 0x90]
add rsp, 0x20
cmp r14d, 0x22adc5ed
je 0x1400c99c0
inc rdx
mov qword [rbp + 0x90], rdx
mov rcx, qword [rbp + 0x88]
mov r8, rsi
jmp 0x1400c89f7
sub rsp, 0x20
call fcn.1400cb640
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
jmp 0x1400c9900
mov r9, rdx
mov eax, dword [0x141dd7078]
xor edx, edx
div dword [0x141dd707c]
mov eax, 0xbb68eadb
nop dword [rax]
mov ecx, dword [0x141dd7080]
and ecx, dword [0x141dd7084]
or ecx, 0xe3bdafff
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xfc74e337
ja 0x1400c9a60
cmp byte [rbp + 0x78], 0
je 0x1400c9b3e
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x38]
test rax, rax
je 0x1400c9d7c
add rax, 0x110
nop word cs:[rax + rax]
mov ecx, dword [0x141dd7090]
imul ecx, dword [0x141dd7094]
xor ecx, 0x44088642
and ecx, 0x458a8773
xor ecx, 0x2e6f843c
cmp ecx, 0x68f7a3cb
ja 0x1400c9ac0
jmp 0x1400c9d90
cmp qword [rbp + 0x90], 0
mov rdi, qword [rbp + 0x68]
je 0x1400c9c14
mov r14, r8
mov eax, dword [0x141dd7278]
sub eax, dword [0x141dd727c]
mov ecx, 0xbad2bc85
imul rcx, rax
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1a
imul eax, eax, 0x2691bb80
add eax, 0xad605b29
cmp eax, 0xe7c567ad
jbe 0x1400ca426
jmp 0x1400ca44b
mov rdx, r9
nop word cs:[rax + rax]
mov eax, dword [0x141dd7088]
xor eax, dword [0x141dd708c]
imul rax, rax, 0x3feda781
shr rax, 0x3d
imul eax, eax, 0xc71dd3ab
add eax, 0xb31cebcb
cmp eax, 0xafebebb8
jb 0x1400c9b50
cmp qword [rbp + 0xa8], 0
je 0x1400c88c0
mov rdx, qword [rbp + 0xa8]
shr rdx, 1
jmp 0x1400c9dab
mov eax, dword [0x141dd70a8]
and eax, dword [0x141dd70ac]
or eax, 0x1dd9f9d9
imul eax, eax, 0x1e5d2d10
xor eax, 0x818570fa
cmp eax, 0x35d78aed
mov rcx, qword [rbp + 0x68]
jae 0x1400c9bcd
pxor xmm0, xmm0
movdqu xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
pxor xmm0, xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd70b0]
or eax, dword [0x141dd70b4]
imul rax, rax, 0x239192d1
shr rax, 0x3c
or eax, 0xe5848530
movdqu xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
cmp eax, 0x6809421a
je 0x1400c9be0
jmp 0x1400ca569
mov eax, dword [0x141dd7240]
xor edx, edx
div dword [0x141dd7244]
or eax, 0x6e1d0772
imul eax, eax, 0xacf7f592
cmp eax, 0x2c96b1c5
jne 0x1400c9c44
pxor xmm0, xmm0
movdqu xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
pxor xmm0, xmm0
nop dword [rax + rax]
mov eax, dword [0x141dd7248]
sub eax, dword [0x141dd724c]
or eax, 0x6e9b9ff7
and eax, 0x6f9b9fff
movdqu xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
cmp eax, 0x65e56bc8
jb 0x1400c9c50
mov eax, 0xac0746c9
nop
mov ecx, dword [0x141dd7250]
sub ecx, dword [0x141dd7254]
imul ecx, ecx, 0x5215bcf7
xor ecx, 0xf27a1fbc
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xf12e08ec
je 0x1400c9c80
nop dword [rax + rax]
mov eax, dword [str.aU0L]
imul eax, dword [0x141dd725c]
and eax, 0x35606c6e
add eax, 0x869b737a
xor eax, 0x1c7424ce
cmp eax, 0x6340aeaa
jb 0x1400c9cb0
test r8, r8
je 0x1400ca569
nop dword [rax]
mov eax, dword [0x141dd7260]
sub eax, dword [0x141dd7264]
xor eax, 0x4e2661ad
imul eax, eax, 0x9c175c81
add eax, 0xe27aac15
cmp eax, 0xd7f80e96
jb 0x1400c9ce0
mov eax, dword [0x141dd7268]
xor eax, dword [0x141dd726c]
add eax, 0x33df41da
xor eax, 0x81111410
or eax, 0x5ea86b2f
cmp eax, 0xba2d0d1c
jbe 0x1400c9d30
mov rax, qword [0x141ddc4e0]
nop dword [rax]
mov eax, dword [str.g7A_]
and eax, dword [0x141dd7274]
or eax, 0xbf5ffffe
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x5c253cb8
jb 0x1400c9d30
xor edx, edx
mov r8, r13
movaps xmm6, xmmword [rbp + 0xb0]
movaps xmm7, xmmword [rbp + 0xc0]
lea rsp, [rbp + 0xd8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
sub rsp, 0x20
call fcn.14007a040
mov r10, qword [rbp + 0x98]
add rsp, 0x20
mov rdx, qword [rbp + 0xa8]
mov rax, qword [rax]
mov rax, qword [rax + 0x208]
shr rdx, 1
cmp rax, rdx
cmova rdx, rax
mov eax, dword [0x141dd72b0]
imul eax, dword [0x141dd72b4]
or eax, 0x8dd64733
add eax, 0xcd2b8379
or eax, 0x5a4be4ad
cmp eax, 0x7f4f6143
jbe 0x1400c9eb3
jmp 0x1400c9ed8
ud2
mov eax, dword [0x141dd71e8]
and eax, dword [0x141dd71ec]
add eax, 0x3ff104e3
xor eax, 0x5340d34
and eax, 0x45fe4db4
cmp eax, 0xb311c212
jne 0x1400ca3fc
jmp 0x1400ca422
mov eax, dword [0x141dd7160]
xor eax, dword [0x141dd7164]
xor eax, 0xaada2ced
add eax, 0xc10fce9a
cmp eax, 0x46d4e871
jae 0x1400c9e60
ud2
mov eax, dword [0x141dd7168]
xor eax, dword [0x141dd716c]
add eax, 0x54ed9e5c
or eax, 0xfef37a7f
xor eax, 0xa09447b
ud2
mov eax, dword [0x141dd72b8]
mov ecx, dword [0x141dd72bc]
add eax, ecx
add eax, 0x53848362
and eax, 0x25f3e3d8
mov qword [rsi], rdx
mov qword [r15], r10
cmp eax, 0xfb43027c
jbe 0x1400c9ee0
mov qword [rsi], rdx
mov qword [r15], r10
jmp 0x1400c9eb3
sub r14, r10
jb 0x1400ca3fa
mov eax, dword [0x141dd72c0]
add eax, dword [0x141dd72c4]
or eax, 0xb8cf2d51
add eax, 0xadf7255e
and eax, 0xc446e5df
cmp eax, 0xbde292fe
mov rcx, qword [rbp + 0x88]
ja 0x1400c9f30
lea rax, [rcx + r10*8]
mov qword [r13], rdi
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], rsi
mov qword [r13 + 0x18], rax
mov qword [r13 + 0x20], r14
xor eax, eax
test al, al
je 0x1400c9f4a
lea rax, [rcx + r10*8]
mov qword [r13], rdi
mov qword [r13 + 8], r15
mov qword [r13 + 0x10], rsi
mov qword [r13 + 0x18], rax
mov qword [r13 + 0x20], r14
jmp 0x1400c9f12
mov rax, qword [rbp + 0x80]
mov qword [r13 + 0x28], rax
mov qword [r13 + 0x30], r15
mov qword [r13 + 0x38], rsi
mov qword [r13 + 0x40], rcx
mov qword [r13 + 0x48], r10
mov qword [r13 + 0x50], rax
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r8, qword [rax + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd72c8]
imul eax, dword [0x141dd72cc]
and eax, 0xd19037b6
imul eax, eax, 0xeca4e3c2
add eax, 0x279fcbfd
cmp eax, 0xc7a96467
jb 0x1400c9f90
test r8, r8
mov rbx, qword [rbp + 0x68]
je 0x1400c9fea
sub rsp, 0x20
xor esi, esi
mov rcx, r12
mov rdx, r13
xor r9d, r9d
call fcn.1400cb980
add rsp, 0x20
nop word cs:[rax + rax]
test sil, sil
jne 0x1400c9fe0
jmp 0x1400ca210
mov eax, dword [0x141dd72d0]
imul eax, dword [0x141dd72d4]
add eax, 0x6e43e8d3
and eax, 0xf3c1117a
cmp eax, 0x628b8ca
jb 0x1400ca03e
mov eax, dword [0x141dd72d8]
add eax, dword [0x141dd72dc]
and eax, 0x66800cf1
or eax, 0x91727108
imul rsi, rax, 0x883a57b
shr rsi, 0x3b
sub rsp, 0x20
call fcn.14007a040
add rsp, 0x20
cmp esi, 0xa2ddd11a
jne 0x1400ca04d
sub rsp, 0x20
call fcn.14007a040
add rsp, 0x20
jmp 0x1400ca008
mov rsi, qword [rax]
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x38]
test rdi, rdi
je 0x1400ca17a
mov rax, qword [rdi + 0x110]
nop word [rax + rax]
mov ecx, dword [0x141dd72f8]
xor ecx, dword [0x141dd72fc]
xor ecx, 0x6d3e5fc4
add ecx, 0x570751e3
cmp ecx, 0xc233ae1b
ja 0x1400ca080
mov ecx, dword [0x141dd7300]
imul ecx, dword [0x141dd7304]
imul ecx, ecx, 0xf59747c8
or ecx, 0x94001088
and ecx, 0xf6407998
cmp ecx, 0x531fa534
jb 0x1400ca0a0
cmp rax, rsi
jne 0x1400ca3b9
mov eax, dword [0x141dd7308]
add eax, dword [0x141dd730c]
imul eax, eax, 0xbc9de1d
xor eax, 0x26aa1ca2
or eax, 0xd144a25c
cmp eax, 0x58299804
jae 0x1400ca110
sub rsp, 0x20
mov rcx, r12
mov rdx, r13
mov r8, rdi
xor r9d, r9d
call fcn.1400cb980
add rsp, 0x20
nop dword [rax]
mov esi, dword [0x141dd7310]
add esi, dword [0x141dd7314]
and esi, 0x94440081
sub rsp, 0x20
mov rcx, r12
mov rdx, r13
mov r8, rdi
xor r9d, r9d
call fcn.1400cb980
add rsp, 0x20
cmp esi, 0x9c2ec436
je 0x1400ca110
nop word cs:[rax + rax]
mov eax, dword [0x141dd7318]
imul eax, dword [0x141dd731c]
imul eax, eax, 0x225f64af
xor eax, 0x64a04b56
imul eax, eax, 0x733bc7b4
cmp eax, 0x10c18f06
jbe 0x1400ca150
jmp 0x1400ca210
mov eax, dword [0x141dd72e0]
xor edx, edx
div dword [0x141dd72e4]
xor eax, 0x670671de
imul rax, rax, 0x7d7e5db9
shr rax, 0x3a
imul eax, eax, 0x460ea016
cmp eax, 0xe4bc475c
je 0x1400ca3db
sub rsi, 0xffffffffffffff80
mov edi, dword [0x141dd72e8]
or edi, dword [0x141dd72ec]
add edi, 0x7e03f6e4
or edi, 0xc808328
and edi, 0x2e91b33d
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
mov r8, r13
call fcn.140100100
add rsp, 0x20
cmp edi, 0xf36568ae
ja 0x1400ca1ad
nop dword [rax]
mov eax, dword [0x141dd72f0]
xor edx, edx
div dword [0x141dd72f4]
and eax, 0x28207081
cmp eax, 0xd8bc487c
je 0x1400ca1f0
nop word [rax + rax]
mov eax, dword [0x141dd7320]
xor edx, edx
div dword [0x141dd7324]
or eax, 0x6f1491d7
cmp eax, 0x6a56d3d
je 0x1400ca210
mov rsi, qword [r12]
mov r11, qword [r12 + 8]
mov r10, qword [r12 + 0x10]
mov r9, qword [r12 + 0x18]
mov rcx, qword [r12 + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7328]
xor eax, dword [0x141dd732c]
add eax, 0xf36066f6
and eax, 0x2063d5de
cmp eax, 0xe795a23e
je 0x1400ca250
mov r8, qword [r12 + 0x28]
test r11, r11
je 0x1400ca2d3
mov eax, dword [0x141dd7330]
xor edx, edx
div dword [0x141dd7334]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7338]
xor edx, edx
div dword [0x141dd733c]
and eax, 0x79d09781
imul rax, rax, 0x2f44fc9f
shr rax, 0x3b
add eax, 0xc22eab0d
cmp eax, 0xe03770c
jb 0x1400ca290
test r9, r9
je 0x1400ca353
mov qword [r11 + 0x18], r9
mov qword [r9 + 0x20], r11
add r10, r8
jmp 0x1400ca356
mov eax, dword [0x141dd7340]
imul eax, dword [0x141dd7344]
xor eax, 0x1756eb44
add eax, 0x63847c8b
and eax, 0x45608975
cmp eax, 0x699cacea
jne 0x1400ca300
mov qword [rbx], r9
nop dword [rax]
mov eax, dword [0x141dd7348]
xor eax, dword [0x141dd734c]
imul eax, eax, 0x3b47e97a
add eax, 0x24603234
xor eax, 0x6142e274
mov qword [rbx], r9
cmp eax, 0xd33df045
ja 0x1400ca300
mov eax, dword [0x141dd7350]
mov edx, dword [0x141dd7354]
add eax, edx
add eax, 0xc345a604
and eax, 0x2a049af1
xor eax, 0x52b1f9b7
cmp eax, 0x60618673
jbe 0x1400ca5c6
jmp 0x1400ca600
mov rcx, r11
mov qword [rbx], rsi
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], r10
nop word cs:[rax + rax]
mov eax, dword [0x141dd73c8]
and eax, dword [0x141dd73cc]
xor eax, 0x86423412
and eax, 0x8ec2347b
cmp eax, 0xd1fd05f5
ja 0x1400ca370
nop dword [rax]
mov eax, dword [0x141dd73d0]
imul eax, dword [0x141dd73d4]
imul eax, eax, 0x41870ef1
add eax, 0x664175db
or eax, 0x892911e7
cmp eax, 0xb6c7da27
jb 0x1400ca390
jmp 0x1400ca569
sub rsi, 0xffffffffffffff80
sub rsp, 0x20
mov rcx, r12
mov rdx, rsi
mov r8, rdi
mov r9, r13
call fcn.1401007e0
add rsp, 0x20
jmp 0x1400ca210
lea rdx, [rsi + 0x80]
sub rsp, 0x20
mov rcx, r12
mov r8, r13
call fcn.140100100
add rsp, 0x20
jmp 0x1400ca1a9
ud2
mov eax, dword [0x141dd71f0]
imul eax, dword [0x141dd71f4]
imul eax, eax, 0x2e09cb59
add eax, 0xacb37f94
or eax, 0xeec7f5b8
ud2
ud2
mov eax, dword [0x141dd7280]
imul eax, dword [0x141dd7284]
add eax, 0xeaf8ec8f
and eax, 0x2d1b00
movzx ecx, byte [0x141ddc4f8]
cmp eax, 0xbe1ab8b
jbe 0x1400ca454
movzx eax, byte [0x141ddc4f8]
jmp 0x1400ca426
mov eax, dword [str._Q]
and eax, dword [0x141dd728c]
add eax, 0x46a3c108
imul rax, rax, 0x4d6723ab
shr rax, 0x3c
cmp eax, 0xaf2cc24c
jbe 0x1400ca490
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd7290]
sub eax, dword [0x141dd7294]
and eax, 0x8415c321
xor eax, 0x8cd4d1eb
imul esi, eax, 0x2028f853
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
cmp esi, 0x2c3cb628
je 0x1400ca490
mov rcx, rax
mov r8, rax
xor eax, eax
test al, al
jne 0x1400ca4d0
test rcx, rcx
je 0x1400ca58b
mov qword [r8], r14
mov qword [r8 + 8], r13
mov eax, dword [0x141dd72a0]
sub eax, dword [0x141dd72a4]
add eax, 0xcfcb48fb
xor eax, 0xc911880a
cmp eax, 0x8820bbe1
jbe 0x1400ca50c
mov rax, qword [rbp + 0x90]
mov qword [r8 + 0x10], rax
add rcx, 0x18
mov r9, qword [rbp + 0x90]
nop word [rax + rax]
mov eax, dword [0x141dd72a8]
xor edx, edx
div dword [0x141dd72ac]
imul eax, eax, 0xaf5d1e4a
shr eax, 3
imul rax, rax, 0x151ebaf1
shr rax, 0x38
add eax, 0xe9bd229
mov qword [r8 + 0x10], r9
cmp eax, 0x7f1e94a
jb 0x1400ca520
pxor xmm0, xmm0
movdqu xmmword [rcx], xmm0
mov qword [rdi], r8
mov qword [rdi + 8], r8
mov qword [rdi + 0x10], 1
movaps xmm6, xmmword [rbp + 0xb0]
movaps xmm7, xmmword [rbp + 0xc0]
lea rsp, [rbp + 0xd8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2
mov eax, dword [0x141dd7358]
sub eax, dword [0x141dd735c]
imul eax, eax, 0x7dc15f14
or eax, 0x9c23799d
imul rdx, rax, 0x58ba3821
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], r8
cmp eax, 0xa1431999
jne 0x1400ca610
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], r8
jmp 0x1400ca5c6
mov eax, dword [0x141dd7360]
and eax, dword [0x141dd7364]
xor eax, 0x8490e5cb
add eax, 0x3587e9ae
or eax, 0x20b3bb04
cmp eax, 0x4d9943e0
jb 0x1400ca610
test rsi, rsi
je 0x1400ca370
nop dword [rax + rax]
mov eax, dword [0x141dd7368]
imul eax, dword [0x141dd736c]
add eax, 0x92ed2e53
imul rax, rax, 0x2fc24521
shr rax, 0x3d
cmp eax, 0xaa39f901
je 0x1400ca640
xor r14d, r14d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400ca67c
mov rsi, r13
test r13, r13
je 0x1400ca370
mov r13, qword [rsi + 0x18]
test r13, r13
je 0x1400ca6c5
mov eax, dword [0x141dd7370]
imul eax, dword [0x141dd7374]
add eax, 0x5ebca30c
and eax, 0x18d378d8
imul eax, eax, 0x8737320c
cmp eax, 0x481d2ca2
je 0x1400ca685
mov qword [r13 + 0x20], 0
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1400ca6c0
mov eax, dword [0x141dd7378]
xor edx, edx
div dword [0x141dd737c]
imul eax, eax, 0xbd1f679b
xor eax, 0x8090116
or eax, 0x71c2f220
cmp eax, 0xaaf169a6
ja 0x1400ca6c5
mov rdi, qword [rsi + 8]
mov r15, qword [rsi + 0x10]
test r15, r15
je 0x1400ca71c
mov rbx, rdi
nop word [rax + rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400ca8e0
add rsp, 0x20
add rbx, 0x158
dec r15
jne 0x1400ca700
mov eax, dword [0x141dd7380]
xor eax, dword [0x141dd7384]
imul eax, eax, 0xc5f7f450
cmp eax, 0xfdd666b3
je 0x1400ca71c
mov rcx, qword [rsi]
mov eax, dword [0x141dd7388]
xor edx, edx
div dword [0x141dd738c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7390]
xor eax, dword [0x141dd7394]
imul eax, eax, 0x6799c9d0
and eax, 0x709c9e70
cmp eax, 0x75d3aa91
ja 0x1400ca750
test rcx, rcx
je 0x1400ca7f6
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dd7398]
xor eax, dword [0x141dd739c]
mov ecx, 0xe98c09e9
imul rax, rcx
shr rax, 0x3a
imul eax, eax, 0xfe8f185a
cmp eax, 0xc97301c1
jne 0x1400ca7c0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd73a0]
xor eax, dword [0x141dd73a4]
imul r15d, eax, 0xde6d7255
add r15d, 0x1f422918
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r15d, 0x559e6db3
jb 0x1400ca7c0
mov eax, dword [0x141dd73a8]
and eax, dword [0x141dd73ac]
add eax, 0x56c1d1f8
imul rax, rax, 0x132909b7
shr rax, 0x3c
imul eax, eax, 0x9ff348e1
cmp eax, 0xbf68eaaf
jbe 0x1400ca826
mov rax, qword [0x141ddc4e0]
mov r15d, 0xa7102f25
nop dword [rax]
mov eax, dword [0x141dd73b0]
imul eax, dword [0x141dd73b4]
xor eax, 0x48844e16
imul rax, rax, 0x1b64c623
shr rax, 0x3a
imul eax, eax, 0xe02841a5
mov rdi, qword [0x141ddc4e0]
cmp eax, 0xfce7073f
ja 0x1400ca830
mov eax, dword [0x141dd73b8]
and eax, dword [0x141dd73bc]
imul eax, eax, 0x9034f30
cmp eax, 0xd2973a13
je 0x1400ca8c0
nop word [rax + rax]
mov eax, dword [0x141dd73c0]
xor eax, dword [0x141dd73c4]
and eax, 0x70ba4d5d
imul ebx, eax, 0xf29c7c5e
shr ebx, 1
imul rbx, r15
shr rbx, 0x3c
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
cmp ebx, 0xf3a27bf9
jne 0x1400ca670
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
jmp 0x1400ca880