Function at 0x1400c8a10
Capabilities:
Encode data using xor
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x348
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x2b0], xmm6
mov r8, rdx
mov eax, dword [0x141f43330]
xor edx, edx
div dword [0x141f43334]
add eax, 0xb79e6fb7
or eax, 0xeaa537fa
cmp eax, 0x4dcf19ad
je 0x1400c8ab4
mov eax, dword [0x141f43338]
xor eax, dword [0x141f4333c]
and eax, 0x27a2cc19
imul edx, eax, 0xb2bf595
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r13, rsp
cmp edx, 0x9b84dd37
jne 0x1400c8aed
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
jmp 0x1400c8a55
mov qword [rbp + 0x2a8], r9
mov qword [rbp + 0x298], r8
mov qword [rbp + 0x2a0], rcx
mov eax, dword [0x141f43340]
add eax, dword [0x141f43344]
or eax, 0xecf57e22
and eax, 0xedf77ee7
cmp eax, 0xda7f1349
jne 0x1400c8b3a
movzx eax, byte [0x141f49078]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400c6170
add rsp, 0x20
mov esi, 0x84c58f8f
nop
mov eax, dword [0x141f43348]
or eax, dword [0x141f4334c]
shr eax, 1
imul rax, rsi
shr rax, 0x3e
imul edi, eax, 0x9312455c
add edi, 0x87d005dc
movzx eax, byte [0x141f49078]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400c6170
add rsp, 0x20
cmp edi, 0xd51e9d4
jb 0x1400c8b40
mov rbx, rax
test rax, rax
je 0x1400c90c3
mov eax, dword [0x141f43350]
xor edx, edx
div dword [0x141f43354]
add eax, 0x38e4f0ef
or eax, 0x84992a7f
and eax, 0xa4fdfb7f
cmp eax, 0x1a8b8a89
jae 0x1400c8bbd
mov qword [r13], 0x80000
mov eax, 0x8342dd1b
nop word cs:[rax + rax]
mov ecx, dword [0x141f43358]
imul ecx, dword [0x141f4335c]
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xaaf67b4f
shr ecx, 1
imul rcx, rcx, 0x11c8079
shr rcx, 0x36
mov qword [r13], 0x80000
cmp ecx, 0x40cb6eeb
ja 0x1400c8bd0
xor eax, eax
test al, al
je 0x1400c8c20
mov qword [r13 + 8], rbx
nop word cs:[rax + rax]
mov eax, dword [str.39ap]
imul eax, dword [0x141f43364]
imul eax, eax, 0xdeadf65
add eax, 0x74ee70f2
mov qword [r13 + 8], rbx
cmp eax, 0xca8d4b4
jb 0x1400c8c20
mov eax, dword [0x141f43368]
imul eax, dword [0x141f4336c]
xor eax, 0x7160a884
add eax, 0xedce89ae
cmp eax, 0x7c6f12a1
ja 0x1400c8c8c
mov eax, dword [0x141f43370]
sub eax, dword [0x141f43374]
and eax, 0xd4eca8a7
imul eax, eax, 0x78a217a0
add eax, 0xf918d100
mov qword [r13 + 0x10], 0
cmp eax, 0x9ca5b74f
jbe 0x1400c8c96
mov qword [r13 + 0x10], 0
jmp 0x1400c8c61
mov eax, 0x80000
xor esi, esi
mov edi, 0x832ba557
xor edx, edx
mov r14d, 0x80000
mov qword [rbp + 0x278], r13
nop word cs:[rax + rax]
mov ecx, dword [0x141f43378]
imul ecx, dword [0x141f4337c]
add ecx, 0x5bfe90e
xor ecx, 0xfebd355b
add ecx, 0x81ce8913
cmp ecx, 0xa8f66d4
jb 0x1400c8d19
nop word [rax + rax]
mov ecx, dword [0x141f43380]
imul ecx, dword [0x141f43384]
or ecx, 0xf87dafaf
add ecx, 0x35a1e4a7
mov dword [r12], 0
cmp ecx, 0xc30eb3b2
jbe 0x1400c8d30
mov dword [r12], 0
jmp 0x1400c8cf0
sub rax, rdx
cmp r14, rax
ja 0x1400c8d77
sub rsp, 0x20
mov ecx, 5
mov rdx, rbx
mov r8d, r14d
mov r9, r12
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
add rsp, 0x20
test eax, eax
jns 0x1400c8f2d
mov r13d, eax
mov eax, dword [0x141f433c0]
add eax, dword [0x141f433c4]
cmp eax, 0xfdf40725
jne 0x1400c8df0
jmp 0x1400c8f20
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, r13
mov r8, r14
call fcn.1401035b0
add rsp, 0x30
mov eax, dword [0x141f43388]
xor edx, edx
div dword [0x141f4338c]
nop word [rax + rax]
test sil, sil
jne 0x1400c8db0
mov rbx, qword [r13 + 8]
nop dword [rax]
mov eax, dword [0x141f43390]
add eax, dword [0x141f43394]
imul rax, rax, 0x2fefb79d
shr rax, 0x3c
imul eax, eax, 0x89031a80
and eax, 0xf30af300
cmp eax, 0x8ca0305d
jae 0x1400c8dc0
jmp 0x1400c8d38
mov eax, dword [0x141f433c8]
imul eax, dword [0x141f433cc]
and eax, 0xb69f47ad
imul eax, eax, 0xe1cc41ee
shr eax, 9
imul rax, rax, 0x58fb87
shr rax, 0x2c
mov qword [rbp + 0x60], 0
cmp eax, 0x1c36cd0c
je 0x1400c8f20
sub rsp, 0x20
xor ecx, ecx
lea rdx, [rbp + 0x60]
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
mov rcx, qword [rbp + 0x60]
and r13d, 0xefffffff
cmp r13d, 0xc0000004
jne 0x1400c8fa0
mov eax, dword [r12]
mov rdx, r14
add rdx, r14
lea r14d, [rax + 0x2800]
test eax, eax
cmove r14, rdx
mov r13, qword [rbp + 0x278]
nop word cs:[rax + rax]
mov eax, dword [0x141f436e8]
xor edx, edx
div dword [0x141f436ec]
imul eax, eax, 0xe5b4c27e
add eax, 0xf79966be
imul rax, rax, 0xaf92eeb
shr rax, 0x3b
cmp eax, 0xdf48de61
ja 0x1400c8e80
test rcx, rcx
je 0x1400c8ec0
mov rax, qword [rcx]
sub rsp, 0x20
call qword [rax + 0x10]
add rsp, 0x20
nop
mov eax, dword [0x141f436f0]
imul eax, dword [0x141f436f4]
add eax, 0x389f11f6
shr eax, 1
imul rax, rdi
shr rax, 0x3d
cmp eax, 0x2d8ff2d5
ja 0x1400c8ec0
mov rdx, qword [r13 + 0x10]
nop word [rax + rax]
mov eax, dword [0x141f436f8]
imul eax, dword [0x141f436fc]
add eax, 0xbf018654
and eax, 0x895827e1
cmp eax, 0xc57bf13d
jae 0x1400c8ef0
mov rax, qword [r13]
jmp 0x1400c8cc0
mov qword [rbp + 0x60], 0
jmp 0x1400c8df0
mov rax, qword [rbp + 0x278]
mov qword [rax + 0x10], r14
mov rax, qword [rbp + 0x2a8]
mov qword [rax], 0
movzx eax, byte [0x141f49078]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400c6170
add rsp, 0x20
test rax, rax
je 0x1400c9036
mov rcx, rax
mov eax, dword [0x141f433b0]
and eax, dword [0x141f433b4]
xor eax, 0x1428080e
or eax, 0xebd717e0
shr eax, 1
imul rax, rax, 0x518ebccf
shr rax, 0x3d
cmp eax, 0xd2341c56
jbe 0x1400c90c5
jmp 0x1400c90fb
test rcx, rcx
mov rsi, qword [rbp + 0x278]
je 0x1400c8fba
mov rax, qword [rcx]
sub rsp, 0x20
call qword [rax + 0x10]
add rsp, 0x20
mov rax, qword [rsi]
mov ecx, 0xc50c8bb5
nop word cs:[rax + rax]
mov edx, dword [0x141f436c0]
or edx, dword [0x141f436c4]
imul rdx, rcx
shr rdx, 0x3d
imul edx, edx, 0x7c67d02f
or edx, 0xbe49b19
cmp edx, 0x932c4fd9
jb 0x1400c8fd0
test rax, rax
je 0x1400c9540
mov eax, dword [0x141f436c8]
or eax, dword [0x141f436cc]
or eax, 0xd523f1ff
mov ecx, 0xbe08c95d
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xb1d86f79
cmp ecx, 0xe0168f69
jbe 0x1400c94ed
jmp 0x1400c9516
mov eax, dword [0x141f43398]
or eax, dword [0x141f4339c]
imul rcx, rax, 0x2af0f91f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
xor eax, 0x2004383
or eax, 0xb4bf8c7c
cmp eax, 0x355fcc85
jne 0x1400c9070
ud2
mov eax, dword [0x141f433a0]
sub eax, dword [0x141f433a4]
and eax, 0x9ca2a38d
imul eax, eax, 0x6ce3c503
add eax, 0xda51aa3c
ud2
ud2
mov eax, dword [0x141f433b8]
or eax, dword [0x141f433bc]
add eax, 0xdfbb8812
xor eax, 0x1733cf39
mov edx, 0xdd200ccd
imul rdx, rax
shr rdx, 0x3c
mov qword [r15], 0x1f4
mov qword [r15 + 8], rcx
cmp edx, 0x21805254
jbe 0x1400c9108
mov qword [r15], 0x1f4
mov qword [r15 + 8], rcx
jmp 0x1400c90c5
mov qword [r15 + 0x10], 0
xor edi, edi
xor esi, esi
jmp 0x1400c9130
add rsi, r14
mov rdi, rdx
test r14, r14
je 0x1400c9279
nop word cs:[rax + rax]
mov eax, dword [0x141f433d0]
xor edx, edx
div dword [0x141f433d4]
or eax, 0xa5acbe69
imul eax, eax, 0x4c7d2518
xor eax, 0x87a058fe
cmp eax, 0xf7816471
ja 0x1400c9130
mov r14d, dword [rbx + rsi]
cmp rdi, qword [r15]
jne 0x1400c9194
mov eax, dword [str._h_v]
sub eax, dword [0x141f433ec]
add eax, 0xc7683863
xor eax, 0xdb43abf8
imul rcx, rax, 0xdcac029
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xf7fb0d7
jbe 0x1400c9200
jmp 0x1400c9267
lea rax, [rbx + rsi]
mov edx, dword [0x141f433d8]
mov r8d, dword [0x141f433dc]
add edx, r8d
add edx, 0x9bedf9ce
cmp edx, 0xd3d0633a
ja 0x1400c91f2
mov r8d, dword [0x141f433e0]
sub r8d, dword [0x141f433e4]
xor r8d, 0x4a20004
or r8d, 0x304139a
and r8d, 0x87e7139e
lea rdx, [rdi + 1]
mov qword [rcx + rdi*8], rax
mov qword [r15 + 0x10], rdx
cmp r8d, 0x9790f71e
jne 0x1400c9116
mov qword [rcx + rdi*8], rax
lea rdx, [rdi + 1]
mov qword [r15 + 0x10], rdx
jmp 0x1400c91b6
mov eax, dword [0x141f433f0]
sub eax, dword [0x141f433f4]
imul eax, eax, 0x3657be83
imul r12, rax, 0x799d0883
shr r12, 0x3e
or r12d, 0x1f600e02
sub rsp, 0x20
mov rcx, r15
call fcn.1400cae40
add rsp, 0x20
cmp r12d, 0xa529c63e
ja 0x1400c9267
nop dword [rax]
mov eax, dword [0x141f433f8]
xor eax, dword [0x141f433fc]
imul eax, eax, 0x5e4de1e2
and eax, 0x3e031a90
cmp eax, 0xd85bb802
je 0x1400c9240
mov rcx, qword [r15 + 8]
jmp 0x1400c9194
sub rsp, 0x20
mov rcx, r15
call fcn.1400cae40
add rsp, 0x20
jmp 0x1400c9200
mov eax, dword [0x141f43400]
xor eax, dword [0x141f43404]
imul eax, eax, 0xa24726cc
add eax, 0x44f09faf
cmp eax, 0xbad0e68f
mov rsi, qword [rbp + 0x2a0]
jbe 0x1400c92a9
lea rax, [rsi + 0x40]
mov qword [rbp + 0x248], rax
lea rbx, [rsi + 0x40]
mov rdi, qword [rbp + 0x298]
nop word cs:[rax + rax]
mov eax, dword [0x141f43408]
mov ecx, dword [0x141f4340c]
add eax, ecx
add eax, 0xcff38f5a
mov qword [rbp + 0x248], rbx
cmp eax, 0x248ebba7
jb 0x1400c92c0
movzx eax, byte [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x141f43410]
or ecx, dword [0x141f43414]
add ecx, 0x80baad6f
or ecx, 0xfbe7fefd
cmp ecx, 0xc3ede7cc
je 0x1400c92f0
mov ecx, dword [0x141f43418]
or ecx, dword [0x141f4341c]
add ecx, 0xc21d0697
imul rcx, rcx, 0x3e55f111
shr rcx, 0x3a
cmp ecx, 0x2fb07142
je 0x1400c9310
test al, al
je 0x1400c935a
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
call fcn.1400cb050
add rsp, 0x20
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400c9350
mov rax, qword [rsi + 0x10]
jmp 0x1400c935c
xor eax, eax
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x60], 0
sub rsp, 0x20
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
mov r8, qword [rbp + 0x2a8]
jge 0x1400c939b
xor edx, edx
jmp 0x1400c93d9
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
nop dword [rax]
mov eax, dword [0x141f43420]
and eax, dword [0x141f43424]
imul eax, eax, 0xd02de0ff
cmp eax, 0x9839fdde
je 0x1400c93c0
mov qword [rbp + 0x1b8], rdx
mov r14, qword [r15 + 0x10]
mov qword [rbp + 0x70], r14
movdqu xmm0, xmmword [r15]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x260], 0
mov qword [rbp + 0x268], 8
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x78], r8
lea rax, [rbp + 0x248]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rdi
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x90], rax
lea rax, [rbp + 0x1b8]
mov qword [rbp + 0x98], rax
mov rsi, qword [rbp + 0x60]
cmp rsi, r14
jb 0x1400c90c3
lea rdi, [rbp + 0x78]
mov r15, qword [rbp + 0x68]
mov qword [rbp + 0x1c8], rbx
nop word cs:[rax + rax]
mov eax, dword [0x141f43428]
xor edx, edx
div dword [0x141f4342c]
or eax, 0x9bfe6fe7
xor eax, 0x50f8bf48
add eax, 0xb3c09e2d
cmp eax, 0xbcce2a4d
ja 0x1400c9470
mov eax, dword [0x141f4907c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r12, qword [rax + 0x38]
test r12, r12
je 0x1400c94bf
add r12, 0x110
jmp 0x1400c9658
mov eax, dword [0x141f43430]
xor edx, edx
div dword [0x141f43434]
imul eax, eax, 0x395b1af9
or eax, 0x26b173d9
add eax, 0x18e5ae7c
cmp eax, 0xbe57dd01
jbe 0x1400c95e3
jmp 0x1400c9616
mov eax, dword [0x141f436d0]
and eax, dword [0x141f436d4]
and eax, 0x4f0516e4
xor eax, 0x800086be
add eax, 0x8f9a3a72
mov rcx, qword [0x141f49060]
cmp eax, 0x2cd00520
jbe 0x1400c951f
mov rax, qword [0x141f49060]
jmp 0x1400c94ed
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141f436d8]
imul eax, dword [0x141f436dc]
imul eax, eax, 0x99d32b06
and eax, 0x8400000
cmp eax, 0x87d81536
ja 0x1400c9540
nop
mov eax, dword [0x141f436e0]
add eax, dword [0x141f436e4]
or eax, 0x83546106
cmp eax, 0x348078f4
je 0x1400c9560
nop dword [rax + rax]
mov eax, dword [0x141f43700]
xor eax, dword [0x141f43704]
imul eax, eax, 0x852ab974
add eax, 0x755b2e34
or eax, 0xbfd39f9a
cmp eax, 0x9968fe88
jb 0x1400c9580
nop word cs:[rax + rax]
mov eax, dword [0x141f43708]
sub eax, dword [0x141f4370c]
or eax, 0xd90cbe2e
cmp eax, 0x9a3d8b83
je 0x1400c95b0
movaps xmm6, xmmword [rbp + 0x2b0]
lea rsp, [rbp + 0x2c8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ebx, dword [0x141f43438]
xor ebx, dword [0x141f4343c]
xor ebx, 0x46018008
or ebx, 0x99e3de6
xor ebx, 0x60fe76c9
sub rsp, 0x20
call fcn.14007d660
add rsp, 0x20
cmp ebx, 0x82f06f93
jbe 0x1400c9625
sub rsp, 0x20
call fcn.14007d660
add rsp, 0x20
jmp 0x1400c95e3
mov r12, rax
mov ecx, 0x87abcc3f
nop dword [rax]
mov eax, dword [0x141f43440]
xor edx, edx
div dword [0x141f43444]
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x807e91b9
add eax, 0x4802179
cmp eax, 0x51b4c69
ja 0x1400c9630
xor eax, eax
test al, al
je 0x1400c96ab
mov rax, qword [r12]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp r14, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], 1
lea rcx, [rbp + 0x1d0]
mov rdx, r14
xor r8d, r8d
call fcn.1400cd670
add rsp, 0x40
lea rbx, [rbp + 0x1d0]
nop word cs:[rax + rax]
mov r13d, dword [0x141f43448]
and r13d, dword [0x141f4344c]
and r13d, 0x10c036b
add r13d, 0x303e237e
mov rax, qword [r12]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp r14, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], 1
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.1400cd670
add rsp, 0x40
cmp r13d, 0x3c6fa104
ja 0x1400c96c0
test rsi, rsi
je 0x1400c9772
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141f43450]
sub eax, dword [0x141f43454]
add eax, 0xe4b5a73
or eax, 0x4bb9d32f
and eax, 0xffbdd36f
cmp eax, 0x60e81926
jb 0x1400c9750
mov r12, qword [rbp + 0x1d0]
mov rcx, qword [rbp + 0x1e0]
test r12, r12
sete r8b
test rcx, rcx
sete r9b
mov eax, dword [0x141f43458]
xor edx, edx
div dword [0x141f4345c]
xor eax, 0x3c0014
or eax, 0x6dc3ec08
cmp eax, 0xa27d3b27
je 0x1400c9780
or r8b, r9b
jne 0x1400c98a0
dec rcx
xor r14d, r14d
mov rax, r12
nop
add r14, qword [rax + 0x10]
sub rcx, 1
jb 0x1400c97e0
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x1400c97c0
nop word cs:[rax + rax]
mov eax, dword [0x141f43460]
and eax, dword [0x141f43464]
add eax, 0x655b07c9
xor eax, 0x6a0d0dcf
add eax, 0xbb87830c
cmp eax, 0x82b81e8e
jb 0x1400c97e0
test r14, r14
je 0x1400c98a0
xor eax, eax
test al, al
jne 0x1400ca880
lea rbx, [rbp + 0x260]
mov esi, dword [0x141f43470]
sub esi, dword [0x141f43474]
add esi, 0x163f2de9
xor esi, 0x4000c10
and esi, 0x2c38acd8
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, rbx
xor edx, edx
mov r8, r14
call fcn.1401035b0
add rsp, 0x30
cmp esi, 0x63d4f9bc
ja 0x1400c981c
nop word cs:[rax + rax]
mov eax, dword [0x141f43478]
xor eax, dword [0x141f4347c]
imul eax, eax, 0x2f9aa050
add eax, 0x74523d3a
and eax, 0x34a909a
cmp eax, 0x3aac4b4a
je 0x1400c9870
nop word cs:[rax + rax]
mov eax, dword [0x141f43468]
and eax, dword [0x141f4346c]
add eax, 0x8118bc9e
imul rax, rax, 0x53116a21
shr rax, 0x3d
and eax, 1
cmp eax, 0x368f5fea
ja 0x1400c98a0
test r12, r12
je 0x1400c9e97
xor edi, edi
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400c98f3
mov rax, qword [rbp + 0x2a8]
mov r12, rax
test rax, rax
je 0x1400c9e97
mov rcx, qword [r12 + 0x18]
test rcx, rcx
je 0x1400c9928
mov eax, dword [0x141f43480]
add eax, dword [0x141f43484]
xor eax, 0x84308c0
and eax, 0x58c30ac8
imul eax, eax, 0x14d60f43
cmp eax, 0x4257a816
jb 0x1400c98fd
mov qword [rcx + 0x20], 0
mov qword [rbp + 0x2a8], rcx
mov eax, dword [0x141f43488]
xor edx, edx
div dword [0x141f4348c]
mov eax, dword [0x141f43490]
add eax, dword [0x141f43494]
or eax, 0x7f80afb
add eax, 0xeb1cc401
and eax, 0x910c05c
cmp eax, 0x50314060
ja 0x1400c993d
mov r14, qword [r12]
mov r13, qword [r12 + 8]
mov r15, qword [r12 + 0x10]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call rsi
add rsp, 0x20
nop word cs:[rax + rax]
test dil, dil
jne 0x1400c9990
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400c9b86
nop dword [rax + rax]
mov eax, dword [0x141f43500]
xor eax, dword [0x141f43504]
xor eax, 0xefa9ec15
imul eax, eax, 0xe516e854
cmp eax, 0xf3d0110c
ja 0x1400c99b0
mov eax, dword [0x141f43508]
xor edx, edx
div dword [0x141f4350c]
test dil, dil
jne 0x1400c99dc
mov rax, qword [rbp + 0x260]
mov rbx, qword [rbp + 0x270]
sub rax, rbx
cmp rax, r15
jb 0x1400c9a4c
imul rcx, rbx, 0x158
add rcx, qword [rbp + 0x268]
imul r8, r15, 0x158
sub rsp, 0x20
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
add rbx, r15
mov qword [rbp + 0x270], rbx
test r14, r14
je 0x1400c98e0
mov eax, dword [0x141f43520]
or eax, dword [0x141f43524]
add eax, 0xb3800ef6
cmp eax, 0x6bd61ec2
jae 0x1400c9ac0
jmp 0x1400c9aea
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
lea rcx, [rbp + 0x260]
mov rdx, rbx
mov r8, r15
call fcn.1401035b0
add rsp, 0x30
mov eax, dword [0x141f43510]
xor edx, edx
div dword [0x141f43514]
and eax, 0xd1ff0dd7
add eax, 0x7f0b94a1
cmp eax, 0xf13cb09c
ja 0x1400c9a75
mov rbx, qword [rbp + 0x270]
nop dword [rax + rax]
mov eax, dword [0x141f43518]
or eax, dword [0x141f4351c]
imul eax, eax, 0xf0482de9
cmp eax, 0xfaabb610
je 0x1400c9aa0
jmp 0x1400c99f7
mov eax, dword [0x141f43528]
imul eax, dword [0x141f4352c]
add eax, 0x72c5ec7a
xor eax, 0x52952cb
and eax, 0x653957ef
mov rbx, qword [0x141f49060]
cmp eax, 0x675bf451
jne 0x1400c9b00
mov rax, qword [0x141f49060]
jmp 0x1400c9ac0
mov eax, dword [0x141f43530]
imul eax, dword [0x141f43534]
imul eax, eax, 0x7e518eea
or eax, 0x1367f351
imul rax, rax, 0x53652bc7
shr rax, 0x3e
cmp eax, 0xa5d2fc01
jbe 0x1400c9b40
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r13
call rsi
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141f43538]
xor edx, edx
div dword [0x141f4353c]
mov r15d, eax
and r15d, 0xbdb5c0fe
add r15d, 0xef8e0b4f
or r15d, 0x7ffcdd17
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r13
call rsi
add rsp, 0x20
cmp r15d, 0x41187908
jb 0x1400c9b40
jmp 0x1400c98e0
mov eax, 0xbdd1ebd5
nop dword [rax + rax]
mov ecx, dword [0x141f43498]
imul ecx, dword [0x141f4349c]
xor ecx, 0x10c19e05
add ecx, 0x7f7862a6
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x89d062c1
ja 0x1400c9b90
mov rcx, qword [rbp + 0x2a8]
test rcx, rcx
je 0x1400c9e97
mov edi, 0xdc20d007
jmp 0x1400c9beb
sub rsp, 0x20
xor edx, edx
mov r8, r13
call rsi
add rsp, 0x20
mov rcx, r12
test r12, r12
je 0x1400c9e97
mov r12, qword [rcx + 0x18]
test r12, r12
je 0x1400c9c70
mov eax, dword [0x141f434a0]
xor edx, edx
div dword [0x141f434a4]
and eax, 0xe9d7ad51
imul eax, eax, 0xa48192a8
cmp eax, 0xdef1717a
ja 0x1400c9bf8
mov eax, dword [0x141f434a8]
xor eax, dword [0x141f434ac]
add eax, 0x5c4a2
and eax, 0x2f2221f8
cmp eax, 0xfe360838
jne 0x1400c9c40
mov qword [r12 + 0x20], 0
nop
mov eax, dword [0x141f434b0]
add eax, dword [0x141f434b4]
imul eax, eax, 0xd59caf2b
or eax, 0xced9f4f2
and eax, 0xcff9f5f6
mov qword [r12 + 0x20], 0
cmp eax, 0x4927fec6
je 0x1400c9c40
nop dword [rax]
mov eax, dword [0x141f434b8]
xor edx, edx
div dword [0x141f434bc]
add eax, 0xe49f5f5c
xor eax, 0x6f904825
imul rax, rax, 0x34d37f05
shr rax, 0x3d
cmp eax, 0xc9211b16
ja 0x1400c9c70
mov r15, qword [rcx + 8]
mov qword [rbp + 0x2a8], rcx
mov r14, qword [rcx + 0x10]
test r14, r14
je 0x1400c9d4d
xor r13d, r13d
nop word cs:[rax + rax]
mov eax, dword [0x141f434c0]
xor edx, edx
div dword [0x141f434c4]
imul rax, rdi
shr rax, 0x3e
imul eax, eax, 0x46e00661
cmp eax, 0x8f1b60cb
jne 0x1400c9d00
imul rcx, r13, 0x158
add rcx, r15
sub rsp, 0x20
call fcn.1400cfca0
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141f434c8]
xor edx, edx
div dword [0x141f434cc]
mov ebx, eax
xor ebx, 0xa0003084
or ebx, 0x1c804448
and ebx, 0xbc807ccc
imul rcx, r13, 0x158
add rcx, r15
sub rsp, 0x20
call fcn.1400cfca0
add rsp, 0x20
cmp ebx, 0xc7a84af9
ja 0x1400c9d00
inc r13
cmp r13, r14
jne 0x1400c9cc0
mov r13, qword [rbp + 0x2a8]
mov rax, qword [r13]
nop dword [rax + rax]
mov ecx, dword [0x141f434d0]
and ecx, dword [0x141f434d4]
xor ecx, 0xb7623695
add ecx, 0xb37e153c
imul rcx, rcx, 0x43bfbb07
shr rcx, 0x3d
cmp ecx, 0x222f7219
je 0x1400c9d60
test rax, rax
je 0x1400c9e32
mov rbx, qword [0x141f49060]
mov eax, dword [0x141f434d8]
add eax, dword [0x141f434dc]
or eax, 0xc5e768
add eax, 0xc9e18781
or eax, 0xe7a8dc0a
cmp eax, 0xabd3b941
jb 0x1400c9dfc
nop dword [rax]
mov eax, dword [0x141f434e0]
xor eax, dword [0x141f434e4]
or eax, 0x70082900
and eax, 0xf029b911
imul r14, rax, 0x4f5030dd
shr r14, 0x3b
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call rsi
add rsp, 0x20
cmp r14d, 0x1edd659f
jbe 0x1400c9e10
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call rsi
add rsp, 0x20
jmp 0x1400c9dc0
mov eax, dword [0x141f434e8]
or eax, dword [0x141f434ec]
add eax, 0x20ab8602
xor eax, 0xec4e4bd7
add eax, 0x4b07fbec
cmp eax, 0xce323447
jb 0x1400c9e10
mov eax, dword [0x141f434f0]
imul eax, dword [0x141f434f4]
imul eax, eax, 0xc62cfa75
add eax, 0xc8504e22
cmp eax, 0x9ace2216
jb 0x1400c9e8e
nop word cs:[rax + rax]
mov eax, dword [0x141f434f8]
imul eax, dword [0x141f434fc]
and eax, 0x626aa8fc
add eax, 0xc721baf9
and eax, 0x6968d824
mov rcx, qword [0x141f49060]
cmp eax, 0x13095ba
jae 0x1400c9bd0
mov rax, qword [0x141f49060]
jmp 0x1400c9e60
mov eax, dword [0x141f43540]
imul eax, dword [0x141f43544]
xor eax, 0x1430dc28
imul eax, eax, 0xc3a2e568
cmp eax, 0xf80f8d20
mov rax, qword [rbp + 0x260]
mov qword [rbp + 0x288], rax
mov r14, qword [rbp + 0x268]
nop dword [rax]
mov eax, dword [0x141f43548]
imul eax, dword [0x141f4354c]
imul eax, eax, 0xe7030362
and eax, 0x63af51cc
add eax, 0x98bb9705
cmp eax, 0x13d34d91
jb 0x1400c9ed0
mov rcx, qword [rbp + 0x270]
imul rax, rcx, 0x158
add rax, r14
mov qword [rbp + 0x290], rax
nop dword [rax]
mov eax, dword [0x141f43550]
xor edx, edx
div dword [0x141f43554]
imul eax, eax, 0x4900d280
and eax, 0x6e1e1c00
cmp eax, 0xc923451a
je 0x1400c9f10
mov qword [rbp + 0x280], r14
test rcx, rcx
je 0x1400ca6e0
mov rdx, qword [rbp + 0x280]
nop word [rax + rax]
mov eax, dword [0x141f43558]
or eax, dword [0x141f4355c]
imul eax, eax, 0x34ef268
add eax, 0x5c421d06
xor eax, 0x9d293cb3
cmp eax, 0x1133408b
jb 0x1400c9f50
xor esi, esi
pcmpeqd xmm6, xmm6
nop dword [rax]
mov eax, dword [0x141f43560]
or eax, dword [0x141f43564]
and eax, 0x221bb800
add eax, 0xa4fdeaeb
cmp eax, 0x3f6047c
jb 0x1400c9f80
lea r14, [rdx + 0x158]
mov rax, qword [rdx]
cmp rax, 2
je 0x1400ca6e0
mov qword [rbp + 0x258], r14
mov qword [rbp + 0x2a8], rax
mov r13, qword [rdx + 0xe0]
test sil, sil
jne 0x1400c9fc6
lea rdi, [rdx + 0xe8]
add rdx, 8
sub rsp, 0x20
mov r8d, 0xd8
lea rcx, [rbp - 0x78]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movups xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movups xmm3, xmmword [rdi + 0x30]
movaps xmmword [rbp + 0x1d0], xmm0
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmmword [rbp + 0x1f0], xmm2
movaps xmmword [rbp + 0x200], xmm3
movups xmm0, xmmword [rdi + 0x40]
movaps xmmword [rbp + 0x210], xmm0
movups xmm0, xmmword [rdi + 0x50]
movaps xmmword [rbp + 0x220], xmm0
movdqu xmm0, xmmword [rdi + 0x60]
movdqa xmmword [rbp + 0x230], xmm0
mov rbx, qword [rbp + 0x2a0]
mov r14, qword [rbx + 0x60]
mov eax, dword [0x141f435c0]
imul eax, dword [0x141f435c4]
and eax, 0x838e408e
add eax, 0x6cac3677
or eax, 0x6ade93e9
cmp eax, 0x4d194ca8
jb 0x1400ca281
mov eax, dword [0x141f435c8]
imul eax, dword [0x141f435cc]
or eax, 0x7f97f8ff
imul rdi, rax, 0x244d80f9
shr rdi, 0x3d
mov r15, qword [rbx + 0x68]
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, r13
call fcn.1400d0590
add rsp, 0x20
cmp edi, 0xa8f29faa
je 0x1400ca281
mov r12, rax
cmp qword [rbx + 0x50], 0
je 0x1400ca689
mov r15, qword [rbx + 0x40]
mov rdi, qword [rbx + 0x48]
mov r14, r12
shr r14, 0x39
mov ecx, 0x9aaffb69
mov edx, 0x96c847fd
nop dword [rax + rax]
mov eax, dword [0x141f435d8]
or eax, dword [0x141f435dc]
imul rax, rcx
shr rax, 0x3f
xor eax, 0x31e2f545
add eax, 0x86b77a5c
cmp eax, 0x38271860
jb 0x1400ca0e0
movd xmm0, r14d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
nop dword [rax + rax]
mov eax, dword [0x141f435e0]
add eax, dword [0x141f435e4]
xor eax, 0x90c37bfe
imul rax, rdx
shr rax, 0x3d
add eax, 0x9b5bd76a
cmp eax, 0xffda40b0
ja 0x1400ca120
xor ecx, ecx
xor r8d, r8d
mov eax, dword [0x141f435e8]
xor edx, edx
div dword [0x141f435ec]
nop dword [rax + rax]
mov eax, dword [0x141f435f0]
or eax, dword [0x141f435f4]
add eax, 0xcc69c360
or eax, 0x70fa2803
and eax, 0xf9fb6c77
cmp eax, 0x3ffb4618
je 0x1400ca160
and r12, rdi
movdqu xmm1, xmmword [r15 + r12]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r9d, xmm2
test r9w, r9w
je 0x1400ca200
nop
mov eax, dword [0x141f435f8]
xor edx, edx
div dword [0x141f435fc]
add eax, 0xa8647870
xor eax, 0x510dc80
and eax, 0x45dcfdb4
cmp eax, 0xb98a6103
je 0x1400ca1a0
tzcnt eax, r9d
add rax, r12
and rax, rdi
neg rax
imul rax, rax, 0x160
cmp qword [r15 + rax - 0x160], r13
je 0x1400ca29d
lea eax, [r9 - 1]
nop dword [rax + rax]
test sil, sil
jne 0x1400ca1f0
and eax, r9d
mov r9d, eax
test ax, ax
jne 0x1400ca1a0
mov eax, dword [0x141f43600]
mov edx, dword [0x141f43604]
add eax, edx
add eax, 0x2e4e6bcb
and eax, 0xcf93fb59
cmp eax, 0x27c58cf8
jb 0x1400ca200
cmp r8, 1
mov r8d, 1
je 0x1400ca261
mov eax, dword [0x141f43608]
sub eax, dword [0x141f4360c]
or eax, 0x88ae5d10
and eax, 0x8aaf5d18
cmp eax, 0xbcc0fb3e
ja 0x1400ca22b
pmovmskb eax, xmm1
tzcnt r11d, eax
xor r8d, r8d
test ax, ax
setne r8b
add r11, r12
and r11, rdi
pcmpeqb xmm1, xmm6
pmovmskb eax, xmm1
test eax, eax
jne 0x1400ca3b7
add r12, rcx
add r12, 0x10
add rcx, 0x10
jmp 0x1400ca14a
mov rdx, qword [rbx + 0x68]
sub rsp, 0x20
mov rcx, r14
mov r8, r13
call fcn.1400d0590
add rsp, 0x20
jmp 0x1400ca071
add r15, rax
lea rdx, [r15 - 0x158]
sub rsp, 0x20
mov r8d, 0x158
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0x2a8]
mov qword [r15 - 0x158], rax
lea rcx, [r15 - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
lea rdx, [rbp - 0x78]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r15 - 0x78], r13
movaps xmm0, xmmword [rbp + 0x230]
movups xmmword [r15 - 0x10], xmm0
movaps xmm0, xmmword [rbp + 0x220]
movups xmmword [r15 - 0x20], xmm0
movaps xmm0, xmmword [rbp + 0x210]
movups xmmword [r15 - 0x30], xmm0
movdqa xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
movdqa xmm2, xmmword [rbp + 0x1f0]
movaps xmm3, xmmword [rbp + 0x200]
movups xmmword [r15 - 0x40], xmm3
movdqu xmmword [r15 - 0x50], xmm2
movdqu xmmword [r15 - 0x60], xmm1
movdqu xmmword [r15 - 0x70], xmm0
cmp qword [rbp + 0x60], 2
je 0x1400ca380
sub rsp, 0x20
lea rcx, [rbp + 0x60]
call fcn.1400cfca0
add rsp, 0x20
mov eax, dword [0x141f43638]
xor edx, edx
div dword [0x141f4363c]
add eax, 0x5017405d
and eax, 0x4b34f69d
cmp eax, 0xe792a5f1
je 0x1400ca360
nop
mov eax, dword [0x141f43640]
xor edx, edx
div dword [0x141f43644]
imul eax, eax, 0xf3d17d52
cmp eax, 0x575d2872
je 0x1400ca380
mov rax, qword [rbp + 0x258]
mov rdx, rax
cmp rax, qword [rbp + 0x290]
jne 0x1400c9f80
jmp 0x1400ca7df
movzx ecx, byte [r15 + r11]
test cl, cl
js 0x1400ca451
mov eax, dword [0x141f43610]
sub eax, dword [0x141f43614]
imul eax, eax, 0x9d61955b
xor eax, 0xdb828acb
add eax, 0xdca8ff36
cmp eax, 0x5415c53
jb 0x1400ca3c4
movdqa xmm0, xmmword [r15]
nop dword [rax]
mov eax, dword [0x141f43618]
xor edx, edx
div dword [0x141f4361c]
xor eax, 0xe01d218
add eax, 0x1b7b3028
xor eax, 0x73ea0219
cmp eax, 0x3735e3e0
jb 0x1400ca3f0
pmovmskb eax, xmm0
nop dword [rax + rax]
mov ecx, dword [0x141f43620]
imul ecx, dword [0x141f43624]
imul ecx, ecx, 0x95ad8580
and ecx, 0xd9ccc300
imul ecx, ecx, 0xe99303d1
cmp ecx, 0xbf24334
jb 0x1400ca420
tzcnt r11d, eax
movzx ecx, byte [r15 + r11]
mov eax, dword [0x141f43628]
add eax, dword [0x141f4362c]
imul eax, eax, 0xcf1bd304
add eax, 0xd36695dc
or eax, 0x3ef4e249
cmp eax, 0xe9afca80
mov byte [rbp + 0x298], cl
jbe 0x1400ca55d
mov eax, ecx
and al, 1
movzx eax, al
mov rcx, qword [rbp + 0x2a0]
sub qword [rcx + 0x50], rax
lea rax, [r11 - 0x10]
and rax, rdi
mov byte [r15 + r11], r14b
mov byte [rax + r15 + 0x10], r14b
inc qword [rcx + 0x58]
mov rax, r11
neg rax
imul rbx, rax, 0x160
mov qword [r15 + rbx - 0x160], r13
mov rax, qword [rbp + 0x2a8]
mov qword [r15 + rbx - 0x158], rax
lea rcx, [r15 + rbx]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
lea rdx, [rbp - 0x78]
mov r12, r11
call sub.VCRUNTIME140.dll_memcpy
movzx ecx, byte [rbp + 0x298]
mov r11, r12
add rsp, 0x20
mov qword [r15 + rbx - 0x78], r13
movaps xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
movdqa xmm2, xmmword [rbp + 0x1f0]
movaps xmm3, xmmword [rbp + 0x200]
movups xmmword [r15 + rbx - 0x70], xmm0
movdqu xmmword [r15 + rbx - 0x60], xmm1
movdqu xmmword [r15 + rbx - 0x50], xmm2
movups xmmword [r15 + rbx - 0x40], xmm3
movaps xmm0, xmmword [rbp + 0x210]
movups xmmword [r15 + rbx - 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x220]
movups xmmword [r15 + rbx - 0x20], xmm0
movdqa xmm0, xmmword [rbp + 0x230]
movdqu xmmword [r15 + rbx - 0x10], xmm0
mov qword [rbp + 0x250], rdi
nop word cs:[rax + rax]
mov eax, dword [0x141f43630]
xor edx, edx
div dword [0x141f43634]
mov ebx, eax
mov eax, ecx
and al, 1
movzx eax, al
mov rcx, qword [rbp + 0x2a0]
sub qword [rcx + 0x50], rax
lea rax, [r11 - 0x10]
and rax, rdi
mov byte [r15 + r11], r14b
mov byte [rax + r15 + 0x10], r14b
inc qword [rcx + 0x58]
xor ebx, 0x42480004
or ebx, 0x1d34a84b
mov rax, r11
neg rax
imul r12, rax, 0x160
mov qword [r15 + r12 - 0x160], r13
mov rax, qword [rbp + 0x2a8]
mov qword [r15 + r12 - 0x158], rax
lea rcx, [r15 + r12]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
lea rdx, [rbp - 0x78]
mov rdi, r13
mov r13, r11
call sub.VCRUNTIME140.dll_memcpy
movzx ecx, byte [rbp + 0x298]
mov r11, r13
mov r13, rdi
mov rdi, qword [rbp + 0x250]
add rsp, 0x20
mov qword [r15 + r12 - 0x78], r13
movaps xmm0, xmmword [rbp + 0x1d0]
movdqa xmm1, xmmword [rbp + 0x1e0]
movdqa xmm2, xmmword [rbp + 0x1f0]
movaps xmm3, xmmword [rbp + 0x200]
movups xmmword [r15 + r12 - 0x70], xmm0
movdqu xmmword [r15 + r12 - 0x60], xmm1
movdqu xmmword [r15 + r12 - 0x50], xmm2
movups xmmword [r15 + r12 - 0x40], xmm3
movaps xmm0, xmmword [rbp + 0x210]
movups xmmword [r15 + r12 - 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x220]
movups xmmword [r15 + r12 - 0x20], xmm0
movdqa xmm0, xmmword [rbp + 0x230]
movdqu xmmword [r15 + r12 - 0x10], xmm0
cmp ebx, 0x632e6f98
je 0x1400ca570
jmp 0x1400ca380
sub rsp, 0x20
mov rcx, qword [rbp + 0x1c8]
mov rdx, r14
mov r8, r15
call fcn.140103990
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141f435d0]
xor eax, dword [0x141f435d4]
imul eax, eax, 0xc755eaf6
or eax, 0x5b6d5ad4
mov ecx, 0xe20aa039
imul rax, rcx
shr rax, 0x3c
cmp eax, 0x6cabb3ee
ja 0x1400ca6b0
jmp 0x1400ca0c2
mov rcx, qword [rbp + 0x290]
sub rcx, r14
movabs r8, 0xbe82fa0be82fa0bf
nop word cs:[rax + rax]
mov r9d, dword [0x141f43568]
sub r9d, dword [0x141f4356c]
add r9d, 0x9742db10
xor r9d, 0x697a3d77
mov rax, rcx
mul r8
cmp r9d, 0x6fa0d58b
jb 0x1400ca700
cmp qword [rbp + 0x290], r14
je 0x1400ca7df
mov rbx, rdx
shr rbx, 8
xor esi, esi
mov edi, 0x984d2d2d
nop word cs:[rax + rax]
mov eax, dword [0x141f43570]
sub eax, dword [0x141f43574]
imul eax, eax, 0xcaacce17
and eax, 0x5c8841f6
imul eax, eax, 0x2b657e58
cmp eax, 0xb756613e
jne 0x1400ca790
imul rcx, rsi, 0x158
add rcx, r14
sub rsp, 0x20
call fcn.1400cfca0
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141f43578]
xor edx, edx
div dword [0x141f4357c]
mov r15d, eax
imul r15, rdi
shr r15, 0x3f
not r15d
and r15d, 0x20e81a7
imul rcx, rsi, 0x158
add rcx, r14
sub rsp, 0x20
call fcn.1400cfca0
add rsp, 0x20
cmp r15d, 0xf1fb3a49
ja 0x1400ca790
inc rsi
cmp rsi, rbx
jne 0x1400ca750
mov eax, dword [0x141f43580]
xor edx, edx
div dword [0x141f43584]
mov rdi, qword [rbp + 0x2a0]
nop word cs:[rax + rax]
mov eax, dword [0x141f43588]
or eax, dword [0x141f4358c]
add eax, 0x678c2867
imul rax, rax, 0x76a7ce83
shr rax, 0x3c
cmp eax, 0x16468110
je 0x1400ca800
nop word cs:[rax + rax]
mov eax, dword [0x141f43590]
mov ecx, dword [0x141f43594]
add eax, ecx
add eax, 0x23b27435
and eax, 0x1ec47318
cmp eax, 0x135572a1
je 0x1400ca830
cmp qword [rbp + 0x288], 0
mov r14, qword [rbp + 0x280]
je 0x1400ca973
mov eax, dword [0x141f43598]
mov ecx, dword [str._Le]
add eax, ecx
add eax, 0xc629f1ff
cmp eax, 0x44f091db
jae 0x1400ca8ad
jmp 0x1400ca8d7
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
lea rcx, [rbp + 0x260]
mov r9d, 8
xor edx, edx
mov r8, r14
call fcn.1401035b0
add rsp, 0x30
jmp 0x1400c9815
mov eax, dword [0x141f435a0]
or eax, dword [str._w]
add eax, 0xd5ec907f
xor eax, 0xcd7b2037
imul eax, eax, 0x5682abcf
mov rbx, qword [0x141f49060]
cmp eax, 0x65dc2c73
jbe 0x1400ca8e0
mov rax, qword [0x141f49060]
jmp 0x1400ca8ad
mov eax, dword [0x141f435a8]
or eax, dword [0x141f435ac]
and eax, 0x5400015
or eax, 0xfa8726a8
imul eax, eax, 0x637ad941
cmp eax, 0x8d045c9b
jb 0x1400ca940
mov esi, dword [0x141f435b0]
imul esi, dword [0x141f435b4]
add esi, 0x9487093d
or esi, 0x8df7ed9f
and esi, 0xedffedff
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xab1a5f2b
jae 0x1400ca960
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400ca903
mov eax, dword [0x141f435b8]
and eax, dword [0x141f435bc]
cmp eax, 0xdcc3ab51
je 0x1400ca960
mov r12, qword [rdi + 0x58]
test r12, r12
je 0x1400cacf8
mov rcx, qword [rbp + 0x2a0]
mov r9, qword [rcx + 0x40]
lea r8, [r9 + 0x10]
nop
mov eax, dword [0x141f43670]
sub eax, dword [0x141f43674]
imul eax, eax, 0x703a9cd8
or eax, 0x9ffffe4d
cmp eax, 0x8a4d06f9
jb 0x1400ca990
movdqa xmm0, xmmword [r9]
pmovmskb r10d, xmm0
not r10d
mov rax, qword [rcx + 0x48]
mov qword [rbp + 0x280], rax
mov rax, qword [rcx + 0x50]
mov qword [rbp + 0x288], rax
nop word cs:[rax + rax]
mov eax, dword [0x141f43678]
xor edx, edx
div dword [0x141f4367c]
imul eax, eax, 0xe7708f65
add eax, 0xab2516a4
xor eax, 0xf4abea83
cmp eax, 0x10d48de9
jb 0x1400ca9e0
pcmpeqd xmm6, xmm6
mov rdi, r9
mov rdx, r12
mov qword [rbp + 0x298], r9
nop word cs:[rax + rax]
test r10w, r10w
jne 0x1400caa66
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r8]
pmovmskb r10d, xmm0
add rdi, 0xffffffffffffea00
add r8, 0x10
cmp r10d, 0xffff
je 0x1400caa30
nop
mov eax, dword [0x141f43680]
sub eax, dword [0x141f43684]
cmp eax, 0x7f3a5f2f
je 0x1400caa50
not r10d
tzcnt eax, r10d
neg rax
imul rcx, rax, 0x160
cmp byte [rdi + rcx - 4], 0
mov byte [rdi + rcx - 4], 0
jne 0x1400cacb3
mov qword [rbp + 0x290], r8
lea rax, [rdi + rcx]
lea r11, [rdi + rcx]
add r11, 0xfffffffffffffea8
mov qword [rbp + 0x258], rdx
nop word cs:[rax + rax]
mov ecx, dword [0x141f43688]
xor ecx, dword [0x141f4368c]
xor ecx, 0x2114a399
and ecx, 0x7d74a3df
add ecx, 0xf04eab1c
cmp ecx, 0xf4293901
ja 0x1400caab0
mov r15, r9
sub r15, rax
sar r15, 5
movabs rax, 0x2e8ba2e8ba2e8ba3
imul r15, rax
lea r14, [r15 - 0x10]
and r14, qword [rbp + 0x280]
movdqu xmm0, xmmword [r9 + r14]
pcmpeqb xmm0, xmm6
mov ecx, dword [0x141f43690]
imul ecx, dword [0x141f43694]
pmovmskb eax, xmm0
xor ecx, 0x1d8b21e5
imul ecx, ecx, 0xce259b24
cmp ecx, 0xb4ee2d8a
jb 0x1400cacf0
nop dword [rax]
mov ecx, dword [0x141f43698]
xor ecx, dword [0x141f4369c]
or ecx, 0x51eee303
imul r8d, ecx, 0x3934b48
movdqu xmm0, xmmword [r9 + r15]
pcmpeqb xmm0, xmm6
pmovmskb edx, xmm0
mov cx, 0x10
test ax, ax
je 0x1400cab67
bsr cx, ax
xor ecx, 0xf
cmp r8d, 0x64863d75
je 0x1400cacf0
or edx, 0x10000
tzcnt eax, edx
add ecx, eax
mov bl, 0x80
cmp cx, 0xf
mov qword [rbp + 0x250], r10
ja 0x1400cabcb
mov rcx, qword [rbp + 0x288]
inc rcx
mov rax, qword [rbp + 0x2a0]
mov qword [rbp + 0x288], rcx
mov qword [rax + 0x50], rcx
nop dword [rax + rax]
mov eax, dword [0x141f436a0]
and eax, dword [0x141f436a4]
imul eax, eax, 0xe731af0e
cmp eax, 0x3d33b027
je 0x1400cabb0
mov bl, 0xff
mov eax, dword [0x141f436a8]
or eax, dword [0x141f436ac]
or eax, 0xe6fe7f11
mov ecx, 0xa1b03f55
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x6b0d294
jbe 0x1400cac26
mov byte [r9 + r15], bl
mov byte [r14 + r9 + 0x10], bl
lea rax, [r12 - 1]
mov rcx, qword [rbp + 0x2a0]
mov qword [rcx + 0x58], rax
sub rsp, 0x20
mov rcx, r11
mov rsi, r11
call fcn.1400cfca0
mov r11, rsi
mov r9, qword [rbp + 0x298]
add rsp, 0x20
mov qword [rbp + 0x2a8], r12
nop dword [rax]
mov eax, dword [0x141f436b0]
xor edx, edx
div dword [0x141f436b4]
xor eax, 0xf64bec77
imul rax, rax, 0x4e35fc73
shr rax, 0x3b
imul esi, eax, 0xfe5d7abb
mov byte [r9 + r15], bl
mov byte [r14 + r9 + 0x10], bl
mov rax, qword [rbp + 0x2a8]
lea r12, [rax - 1]
mov rax, qword [rbp + 0x2a0]
mov qword [rax + 0x58], r12
sub rsp, 0x20
mov rcx, r11
mov r13, r15
mov r15, r11
call fcn.1400cfca0
mov r11, r15
mov r15, r13
mov r9, qword [rbp + 0x298]
add rsp, 0x20
cmp esi, 0x869350ae
je 0x1400cac30
mov r10, qword [rbp + 0x250]
mov rdx, qword [rbp + 0x258]
mov r8, qword [rbp + 0x290]
lea eax, [r10 - 1]
and eax, r10d
mov r10d, eax
dec rdx
mov eax, dword [0x141f436b8]
or eax, dword [0x141f436bc]
or eax, 0xe2308001
xor eax, 0xb2118001
or eax, 0x58e7cfa
cmp eax, 0xf01215ac
je 0x1400cacc0
test rdx, rdx
jne 0x1400caa20
jmp 0x1400cacf8
test ax, ax
jmp 0x1400cab30
mov eax, 0x9d6be3db
nop dword [rax]
mov ecx, dword [0x141f43648]
sub ecx, dword [0x141f4364c]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x408b5c54
add ecx, 0xae58f580
cmp ecx, 0x2a096fef
jb 0x1400cad00
mov rdx, qword [rbp + 0x278]
mov rax, qword [rdx]
nop word cs:[rax + rax]
mov ecx, dword [0x141f43650]
imul ecx, dword [0x141f43654]
imul ecx, ecx, 0xd212cc57
xor ecx, 0x20928
and ecx, 0x30b609e9
cmp ecx, 0xcaac6189
ja 0x1400cad40
test rax, rax
je 0x1400cae10
mov eax, 0xb3828197
nop word cs:[rax + rax]
mov ecx, dword [0x141f43658]
xor ecx, dword [0x141f4365c]
xor ecx, 0xe81d579d
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xf70e5549
je 0x1400cad80
mov eax, dword [0x141f43660]
and eax, dword [0x141f43664]
mov rsi, qword [rdx + 8]
imul eax, eax, 0xed3b7fd0
add eax, 0x637b0608
cmp eax, 0xf70fd43e
jbe 0x1400cadde
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
test dil, dil
jne 0x1400cadf0
nop dword [rax + rax]
mov eax, dword [0x141f43668]
add eax, dword [0x141f4366c]
and eax, 0x800004
or eax, 0xd92d7123
xor eax, 0xb90d7fb7
cmp eax, 0x13af220f
jb 0x1400cae10
jmp 0x1400c9580