Function at 0x1400c17d0
Capabilities:
Encode data using xor
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp], xmm6
mov qword [rbp - 0x30], rdx
mov eax, dword [0x141dd25b8]
sub eax, dword [0x141dd25bc]
add eax, 0x60a210d6
or eax, 0x306f7bc5
and eax, 0x766f7fe7
cmp eax, 0x52714c96
jb 0x1400c18a1
mov edx, dword [0x141dd25c0]
imul edx, dword [0x141dd25c4]
or edx, 0xff65d228
xor edx, 0x1544b964
add edx, 0x3c7338e5
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x160
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
cmp edx, 0x32ec4db0
jbe 0x1400c18f4
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x160
call fcn.1400ed360
sub rsp, rax
jmp 0x1400c181a
mov qword [rbp - 0x10], rsi
mov qword [rbp - 0x78], r11
mov qword [rbp - 0x58], r10
mov qword [rbp - 0x50], r9
mov qword [rbp - 8], r8
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x40], rcx
mov eax, 0xe0
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x70
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, dword [0x141dd25c8]
imul eax, dword [0x141dd25cc]
imul eax, eax, 0xef82ee66
add eax, 0xd7787bce
cmp eax, 0xfe1e3ac9
jbe 0x1400c19e0
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
nop
mov edi, dword [0x141dd25d0]
or edi, dword [0x141dd25d4]
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 0x80000
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
cmp edi, 0xc29367
je 0x1400c19e0
mov rsi, rax
test rax, rax
je 0x1400c1a46
mov eax, dword [0x141dd25e0]
add eax, dword [0x141dd25e4]
imul eax, eax, 0x4d21a113
mov ecx, 0xbebc466d
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x11c5393d
cmp ecx, 0x47b96c48
jbe 0x1400c1a6f
jmp 0x1400c1a95
ud2
ud2
mov eax, dword [0x141dd25e8]
mov ecx, dword [0x141dd25ec]
add eax, ecx
add eax, 0x9a243284
or eax, 0x1c06b01c
mov qword [r15], 0x80000
cmp eax, 0xd5a92144
jne 0x1400c1a9e
mov qword [r15], 0x80000
jmp 0x1400c1a6f
mov eax, 0x9d98cf89
nop word cs:[rax + rax]
mov ecx, dword [0x141dd25f0]
or ecx, dword [0x141dd25f4]
or ecx, 0xe4e3e569
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xb2ac2df8
cmp ecx, 0xd4e51072
ja 0x1400c1ab0
mov eax, dword [0x141dd25f8]
or eax, dword [0x141dd25fc]
xor eax, 0x264288
and eax, 0x1fa74bac
cmp eax, 0xfde29266
jne 0x1400c1b10
mov qword [r15 + 8], rsi
mov qword [r15 + 0x10], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd2600]
xor eax, dword [0x141dd2604]
add eax, 0xf2a9912d
and eax, 0x42cbead5
mov qword [r15 + 8], rsi
mov qword [r15 + 0x10], 0
cmp eax, 0x1305fe06
jb 0x1400c1b10
mov ecx, 0x80000
xor r8d, r8d
mov edi, 0x80000
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x48], r12
nop
mov eax, dword [0x141dd2608]
xor edx, edx
div dword [0x141dd260c]
imul eax, eax, 0x504e0888
and eax, 0xcf1675c8
shr eax, 2
imul rax, rax, 0x4aa3e035
shr rax, 0x39
cmp eax, 0x4e05b04b
jbe 0x1400c1b90
mov dword [r13], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd2610]
xor edx, edx
div dword [0x141dd2614]
xor eax, 0x30722018
imul eax, eax, 0x8f91c7cf
mov dword [r13], 0
cmp eax, 0x3b788d31
je 0x1400c1b90
sub rcx, r8
cmp rdi, rcx
ja 0x1400c1be9
mov eax, dword [0x141dd2618]
and eax, dword [0x141dd261c]
add eax, 0x819e22e0
and eax, 0x8b717996
cmp eax, 0xa4d68706
mov r15, qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
jbe 0x1400c1c50
jmp 0x1400c1e80
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, r15
mov rdx, r8
mov r8, rdi
call fcn.1400faca0
add rsp, 0x30
nop
mov eax, dword [0x141dd2628]
add eax, dword [0x141dd262c]
imul eax, eax, 0xdbc19b12
add eax, 0xfa083652
shr eax, 2
imul rax, rax, 0xb97c5dd
shr rax, 0x36
cmp eax, 0x9e7fdb5d
jae 0x1400c1c10
mov rsi, qword [r15 + 8]
jmp 0x1400c1bc0
mov eax, dword [0x141dd2620]
xor eax, dword [0x141dd2624]
add eax, 0x25d45589
imul r12, rax, 0x4cf6bbbf
shr r12, 0x3e
xor r12d, 0x87a4db19
sub rsp, 0x20
mov ecx, 5
mov rdx, rsi
mov r8d, edi
mov r9, r13
call r15
add rsp, 0x20
cmp r12d, 0xe3afaad4
ja 0x1400c1e80
mov ebx, eax
test eax, eax
jns 0x1400c1fdd
nop word cs:[rax + rax]
mov eax, dword [0x141dd2670]
imul eax, dword [0x141dd2674]
add eax, 0x76119915
and eax, 0xe5916b48
cmp eax, 0xdf8cf58c
ja 0x1400c1cb0
mov r15, qword [rbp - 0x10]
mov qword [r15], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
mov r12, qword [r15]
mov eax, dword [0x141dd2678]
sub eax, dword [0x141dd267c]
imul rax, rax, 0x9342b45
shr rax, 0x3b
cmp eax, 0x225fe20f
je 0x1400c1cef
and ebx, 0xefffffff
cmp ebx, 0xc0000004
jne 0x1400c1ea0
mov eax, dword [r13]
mov ecx, dword [0x141dd2978]
xor ecx, dword [str.6a]
or ecx, 0x97b273e8
and ecx, 0x9fba73e9
lea rdx, [rdi + rdi]
lea ebx, [rax + 0x2800]
test eax, eax
cmove rbx, rdx
cmp ecx, 0x47604091
jb 0x1400c1d23
mov eax, dword [0x141dd2980]
sub eax, dword [0x141dd2984]
xor eax, 0x5a6f8b37
imul rax, rax, 0x54d11607
shr rax, 0x3e
cmp eax, 0xf85c684e
je 0x1400c1d53
test r12, r12
je 0x1400c1e20
nop
mov eax, dword [0x141dd2988]
xor eax, dword [0x141dd298c]
imul rax, rax, 0x2cf6f5c3
shr rax, 0x3d
imul eax, eax, 0xfad185d9
and eax, 0xeb228fd4
cmp eax, 0x4e6a6895
je 0x1400c1d80
mov rdi, qword [r12]
mov eax, dword [0x141dd2990]
or eax, dword [0x141dd2994]
mov ecx, 0x9d66fd03
imul rax, rcx
shr rax, 0x3f
xor eax, 0x6c326995
cmp eax, 0x90bbad61
jbe 0x1400c1de0
sub rsp, 0x20
mov rcx, r12
call qword [rdi + 0x10]
add rsp, 0x20
mov r15d, dword [0x141dd2998]
sub r15d, dword [0x141dd299c]
and r15d, 0xca13235
add r15d, 0x92351282
or r15d, 0xdbef9eca
sub rsp, 0x20
mov rcx, r12
call qword [rdi + 0x10]
add rsp, 0x20
cmp r15d, 0xa663b003
jb 0x1400c1de0
nop word [rax + rax]
mov eax, dword [0x141dd29a0]
xor eax, dword [0x141dd29a4]
imul eax, eax, 0x1d5e7e76
add eax, 0x96763d80
xor eax, 0xec0b5fc6
cmp eax, 0xc69d73de
jb 0x1400c1e20
mov r15, qword [rbp - 0x68]
mov rcx, qword [r15]
mov r8, qword [r15 + 0x10]
nop
mov eax, dword [0x141dd29a8]
add eax, dword [0x141dd29ac]
xor eax, 0x1322300
or eax, 0xbc458c3f
cmp eax, 0xd55c3a2
je 0x1400c1e50
mov rdi, rbx
jmp 0x1400c1b50
sub rsp, 0x20
mov ecx, 5
mov rdx, rsi
mov r8d, edi
mov r9, r13
call r15
add rsp, 0x20
jmp 0x1400c1c50
mov eax, dword [0x141dd2948]
sub eax, dword [0x141dd294c]
add eax, 0x4cc9894e
and eax, 0x849a000a
cmp eax, 0xec129dd1
ja 0x1400c1ea0
test r12, r12
je 0x1400c1f10
mov rax, qword [r12]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2950]
xor ecx, dword [0x141dd2954]
xor ecx, 0x6f5c49b9
add ecx, 0xbebd3223
or ecx, 0x499dfb70
cmp ecx, 0x338aeb04
jb 0x1400c1ed0
sub rsp, 0x20
mov rcx, r12
call qword [rax + 0x10]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd2958]
and eax, dword [0x141dd295c]
imul eax, eax, 0x6386c9b6
and eax, 0xd17f5446
cmp eax, 0x85931732
ja 0x1400c1f10
mov rcx, qword [rbp - 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x141dd2960]
sub eax, dword [0x141dd2964]
imul eax, eax, 0x4ddceedd
and eax, 0x135f00bf
cmp eax, 0xdda13e42
je 0x1400c1f40
cmp qword [rcx], 0
je 0x1400c1f90
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edi, edi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test dil, dil
jne 0x1400c1f80
nop word cs:[rax + rax]
mov eax, dword [0x141dd2968]
xor eax, dword [0x141dd296c]
or eax, 0xdf3ea665
add eax, 0x30e51b3c
cmp eax, 0x90167838
ja 0x1400c1f90
nop dword [rax]
mov eax, dword [str.tTS]
and eax, dword [0x141dd2974]
or eax, 0x9a53b363
imul rax, rax, 0x2f83fb15
shr rax, 0x3c
xor eax, 0x871d73ef
cmp eax, 0x35ac70ab
jbe 0x1400c1fb0
jmp 0x1400c24b0
mov eax, dword [0x141dd2630]
and eax, dword [0x141dd2634]
and eax, 0x85754549
xor eax, 0xea12b90
cmp eax, 0x694ee49f
mov r15, qword [rbp - 0x68]
mov r12, qword [rbp - 0x48]
ja 0x1400c2054
mov eax, dword [0x141dd2638]
sub eax, dword [0x141dd263c]
imul eax, eax, 0x6ac43000
imul rbx, rax, 0x446a29bb
shr rbx, 0x3d
xor ebx, 0x81ec325b
mov qword [r15 + 0x10], rdi
mov qword [r12], 0
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
cmp ebx, 0xa4dd8d6b
jbe 0x1400c207d
mov qword [r15 + 0x10], rdi
mov qword [r12], 0
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 0xfa0
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
jmp 0x1400c2002
test rax, rax
mov r13, qword [rbp - 0x20]
je 0x1400c20b0
mov ecx, dword [0x141dd2648]
mov edx, dword [0x141dd264c]
add ecx, edx
add ecx, 0x5b896f62
or ecx, 0x572e37a2
imul ecx, ecx, 0x56a6ae44
cmp ecx, 0x7f415c60
jbe 0x1400c20e4
jmp 0x1400c2110
mov eax, dword [0x141dd2640]
xor edx, edx
div dword [0x141dd2644]
add eax, 0x207a9cab
xor eax, 0x4c540308
or eax, 0x93a914e5
cmp eax, 0x3015f8cc
jb 0x1400c20e0
ud2
ud2
mov ecx, dword [0x141dd2650]
add ecx, dword [0x141dd2654]
imul rcx, rcx, 0x6486b91d
shr rcx, 0x3e
or ecx, 0x2018400
mov qword [r14], 0x1f4
cmp ecx, 0x4c7ab1f3
jbe 0x1400c2119
mov qword [r14], 0x1f4
jmp 0x1400c20e4
mov ecx, dword [0x141dd2658]
and ecx, dword [0x141dd265c]
and ecx, 0xec0e3abf
imul rcx, rcx, 0xa73b5b5
shr rcx, 0x3b
or ecx, 0xeb96bcea
cmp ecx, 0x751f2a2e
jae 0x1400c2150
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 0
mov ecx, dword [0x141dd2660]
add ecx, dword [0x141dd2664]
or ecx, 0x93dcf331
add ecx, 0x1148764f
xor ecx, 0x2df614cd
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 0
cmp ecx, 0xc3e59425
ja 0x1400c2150
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2668]
and ecx, dword [0x141dd266c]
cmp ecx, 0xb8825a3c
je 0x1400c2190
xor ebx, ebx
xor edi, edi
nop dword [rax + rax]
mov ecx, dword [0x141dd2680]
sub ecx, dword [0x141dd2684]
add ecx, 0x6431197d
xor ecx, 0x4000e220
and ecx, 0x7a54faaf
cmp ecx, 0x504f38bf
ja 0x1400c21b0
mov r12d, dword [rsi + rdi]
cmp rbx, qword [r14]
jne 0x1400c2210
mov eax, dword [0x141dd2698]
imul eax, dword [0x141dd269c]
or eax, 0x4f7fbb6d
and eax, 0xefffbb6f
cmp eax, 0x3470d4ff
jae 0x1400c2290
jmp 0x1400c22d1
lea rcx, [rsi + rdi]
mov edx, dword [0x141dd2688]
sub edx, dword [0x141dd268c]
and edx, 0xf4783089
cmp edx, 0x1cb3bcb9
jne 0x1400c2240
mov qword [rax + rbx*8], rcx
lea rdx, [rbx + 1]
mov qword [r14 + 0x10], rdx
nop word [rax + rax]
mov edx, dword [0x141dd2690]
mov r8d, dword [0x141dd2694]
add edx, r8d
add edx, 0x142242d2
or edx, 0x1b1c5632
imul r8, rdx, 0x3a0a057f
shr r8, 0x3d
lea rdx, [rbx + 1]
mov qword [rax + rbx*8], rcx
mov qword [r14 + 0x10], rdx
cmp r8d, 0xdb8d3a6b
ja 0x1400c2240
add rdi, r12
mov rbx, rdx
test r12, r12
jne 0x1400c21b0
jmp 0x1400c2329
mov eax, dword [0x141dd26a0]
or eax, dword [0x141dd26a4]
shr eax, 7
imul r13, rax, 0x295917
shr r13, 0x2d
add r13d, 0x5bd6c5cd
or r13d, 0x853c140c
sub rsp, 0x20
mov rcx, r14
call fcn.1400c3e30
add rsp, 0x20
cmp r13d, 0xd4c29eea
jae 0x1400c22f0
sub rsp, 0x20
mov rcx, r14
call fcn.1400c3e30
add rsp, 0x20
jmp 0x1400c2290
mov rax, qword [r14 + 8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd26a8]
and ecx, dword [0x141dd26ac]
add ecx, 0x8decc703
or ecx, 0xe4eb4a9f
cmp ecx, 0xd192731
jbe 0x1400c2300
mov r13, qword [rbp - 0x20]
jmp 0x1400c2210
mov eax, dword [0x141dd26b0]
and eax, dword [0x141dd26b4]
or eax, 0x92670b00
shr eax, 7
imul rax, rax, 0x290a691
shr rax, 0x30
or eax, 0xe7018e35
cmp eax, 0xe78938e6
mov rdi, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x18]
jbe 0x1400c2367
lea rax, [rdi + 0x40]
mov qword [rdx], rax
lea r15, [rdi + 0x40]
mov r12, qword [rbp - 0x48]
nop
mov eax, dword [0x141dd26b8]
imul eax, dword [0x141dd26bc]
add eax, 0xb9d83fa7
or eax, 0x17df7589
and eax, 0x97ff77e9
mov qword [rdx], r15
cmp eax, 0xd1896bf5
ja 0x1400c2370
nop word cs:[rax + rax]
mov eax, dword [0x141dd26c0]
imul eax, dword [0x141dd26c4]
imul rax, rax, 0x537805d1
shr rax, 0x3e
xor eax, 0xd96e87bb
imul rax, rax, 0x2801f7e1
shr rax, 0x3c
cmp eax, 0xa950d17
je 0x1400c23a0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400c23e0
cmp byte [rcx], 0
je 0x1400c2483
mov eax, dword [0x141dd26c8]
xor edx, edx
div dword [0x141dd26cc]
and eax, 0xd1a8af36
imul eax, eax, 0x7af070fc
cmp eax, 0x322a2729
jne 0x1400c2420
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
call fcn.1400c4250
add rsp, 0x20
nop
mov esi, dword [0x141dd26d0]
imul esi, dword [0x141dd26d4]
and esi, 0x8202a204
add esi, 0x4e9d5f39
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
call fcn.1400c4250
add rsp, 0x20
cmp esi, 0x52bdf9d
jb 0x1400c2420
nop word cs:[rax + rax]
mov eax, dword [0x141dd26d8]
xor eax, dword [0x141dd26dc]
or eax, 0xdbb7ebff
add eax, 0x1b3ed14e
cmp eax, 0xccf523bb
ja 0x1400c2460
mov rsi, qword [rdi + 0x10]
jmp 0x1400c2485
xor esi, esi
mov eax, dword [0x141dd26e0]
and eax, dword [0x141dd26e4]
imul eax, eax, 0xe0537722
and eax, 0x48c00248
cmp eax, 0xd966a80f
mov rdi, qword [rbp - 0x78]
jne 0x1400c2503
jmp 0x1400c253f
mov eax, dword [0x141dd29b0]
sub eax, dword [0x141dd29b4]
imul eax, eax, 0x7a10f1b1
add eax, 0x8bb40d30
cmp eax, 0xf97f0407
ja 0x1400c24b0
nop
mov eax, dword [0x141dd29b8]
or eax, dword [0x141dd29bc]
imul eax, eax, 0xef2db7ca
add eax, 0xdc1facd9
cmp eax, 0x45b8d91a
jb 0x1400c24d0
movaps xmm6, xmmword [rbp]
lea rsp, [rbp + 0x18]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ebx, dword [0x141dd26e8]
sub ebx, dword [0x141dd26ec]
or ebx, 0xfff8acc7
xor ebx, 0xda3f4a4b
mov qword [r13], rsi
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
cmp ebx, 0x1c7f51e5
jae 0x1400c255d
mov qword [r13], rsi
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemTimePreciseAsFileTime]
add rsp, 0x20
jmp 0x1400c2503
mov rcx, qword [rdi]
movabs rax, 0x19db1ded53e8000
cmp rcx, rax
jge 0x1400c2594
xor edx, edx
mov r10, qword [rbp - 8]
mov rcx, qword [rbp - 0x30]
mov r11, qword [rbp - 0x58]
mov r8, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x18]
xor eax, eax
test al, al
jne 0x1400c2660
jmp 0x1400c269e
movabs r8, 0xfe624e212ac18000
mov eax, dword [0x141dd26f0]
xor edx, edx
div dword [0x141dd26f4]
mov r10, qword [rbp - 8]
mov r11, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x18]
add rcx, r8
nop dword [rax + rax]
mov eax, dword [str.c:]
xor eax, dword [0x141dd26fc]
add eax, 0x33fccee9
or eax, 0x6f4ab7f2
cmp eax, 0x9f6f589c
ja 0x1400c25c0
movabs r8, 0xd6bf94d5e57a42bd
nop word [rax + rax]
mov eax, dword [0x141dd2700]
and eax, dword [0x141dd2704]
imul rax, rax, 0x4d8e86fd
shr rax, 0x3e
xor eax, 0xd8e007fd
imul r9, rax, 0x5e579fe7
shr r9, 0x3d
mov rax, rcx
mul r8
cmp r9d, 0x7ac9a157
ja 0x1400c25f0
shr rdx, 0x17
nop word [rax + rax]
mov eax, dword [0x141dd2708]
and eax, dword [0x141dd270c]
xor eax, 0x44a10
or eax, 0xffe394e3
and eax, 0xffe7fef7
cmp eax, 0x1edb46e9
je 0x1400c2630
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x70]
xor eax, eax
test al, al
je 0x1400c269e
mov qword [r8], rdx
mov rax, qword [r14 + 0x10]
mov qword [r11 + 0x10], rax
movups xmm0, xmmword [r14]
movups xmmword [r11], xmm0
mov qword [r10], 0
mov qword [r10 + 8], 8
mov qword [r10 + 0x10], 0
mov qword [r11 + 0x18], r12
mov qword [r11 + 0x20], rsi
mov qword [r11 + 0x28], rcx
mov qword [r11 + 0x30], r13
mov qword [r11 + 0x38], r8
mov rbx, r11
add rbx, 0x18
nop word cs:[rax + rax]
mov rax, qword [r14 + 0x10]
mov qword [r11 + 0x10], rax
mov eax, dword [0x141dd2710]
add eax, dword [0x141dd2714]
imul eax, eax, 0x1b376220
add eax, 0x246c0610
mov qword [r8], rdx
movdqu xmm0, xmmword [r14]
movdqu xmmword [r11], xmm0
mov qword [r10], 0
mov qword [r10 + 8], 8
mov qword [r10 + 0x10], 0
mov qword [r11 + 0x18], r12
mov qword [r11 + 0x20], rsi
mov qword [r11 + 0x28], rcx
mov qword [r11 + 0x30], r13
mov qword [r11 + 0x38], r8
cmp eax, 0x58e84b2c
jb 0x1400c26b0
mov r14, qword [r11]
mov rdi, qword [r11 + 0x10]
cmp r14, rdi
jb 0x1400c1a6d
mov rsi, qword [r11 + 8]
mov eax, dword [0x141dd7ffc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x38]
nop dword [rax]
mov eax, dword [0x141dd2718]
xor edx, edx
div dword [0x141dd271c]
imul eax, eax, 0x4c1ea448
add eax, 0xeb9cbdae
xor eax, 0x79a8e13d
cmp eax, 0x33ff3f2d
jb 0x1400c2740
nop word cs:[rax + rax]
mov eax, dword [0x141dd2720]
imul eax, dword [0x141dd2724]
or eax, 0x35a4f2b5
imul eax, eax, 0xd932dedd
add eax, 0x9a5d4dcd
cmp eax, 0xb223c596
jb 0x1400c2770
test rcx, rcx
je 0x1400c27da
mov eax, 0xcb316d05
add rcx, 0x110
nop word cs:[rax + rax]
mov edx, dword [0x141dd2730]
sub edx, dword [0x141dd2734]
add edx, 0x760cd070
or edx, 0x4bd3fa35
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x961d92c8
ja 0x1400c27b0
jmp 0x1400c2813
sub rsp, 0x20
call fcn.140076d50
add rsp, 0x20
mov rcx, rax
nop word [rax + rax]
mov eax, dword [0x141dd2728]
imul eax, dword [0x141dd272c]
add eax, 0xccf8c3c0
or eax, 0x8908a096
and eax, 0xfdbfa3fe
cmp eax, 0xa0e97d48
je 0x1400c27f0
mov rax, qword [rcx]
mov r9, qword [rax + 0x208]
xor eax, eax
cmp rdi, 0xffffffffffffffff
sete al
cmp rax, r9
cmova r9, rax
sub rsp, 0x40
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 1
mov rcx, qword [rbp - 0x50]
mov rdx, rdi
xor r8d, r8d
call fcn.1400c62f0
add rsp, 0x40
test r14, r14
je 0x1400c2913
mov rdi, qword [0x141dd7fe0]
mov eax, dword [0x141dd2738]
imul eax, dword [0x141dd273c]
and eax, 0xc7958c35
imul eax, eax, 0x268742d5
imul rax, rax, 0x47521b9f
shr rax, 0x3e
cmp eax, 0xb87c114d
je 0x1400c28d2
mov eax, dword [0x141dd2740]
and eax, dword [0x141dd2744]
imul ebx, eax, 0x4bc7cef5
add ebx, 0xfbf7ea84
or ebx, 0xd566747d
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0xe1300f4b
jbe 0x1400c28f0
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c2896
mov eax, dword [0x141dd2748]
imul eax, dword [0x141dd274c]
add eax, 0x4ea4aa14
or eax, 0xa3c40300
and eax, 0xa7e50b84
cmp eax, 0xd51d3df0
ja 0x1400c28f0
mov rax, qword [rbp - 0x50]
mov rbx, qword [rax]
test rbx, rbx
mov rsi, qword [rbp - 8]
je 0x1400c29db
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x1400c29db
xor r8d, r8d
mov r9, rbx
nop word [rax + rax]
mov eax, dword [0x141dd2760]
xor edx, edx
div dword [0x141dd2764]
mov eax, dword [0x141dd2768]
xor eax, dword [0x141dd276c]
add eax, 0xa340dbde
imul r11, rax, 0x27d561ab
shr r11, 0x3d
mov rax, qword [r9 + 0x18]
cmp rcx, 1
sete dl
test rax, rax
sete r10b
cmp r11d, 0x7e94fc54
je 0x1400c294e
add r8, qword [r9 + 0x10]
or dl, r10b
dec rcx
mov r9, rax
test dl, dl
je 0x1400c2940
mov eax, dword [0x141dd2750]
xor edx, edx
div dword [0x141dd2754]
mov eax, 0x955d749f
nop dword [rax]
mov ecx, dword [0x141dd2758]
or ecx, dword [0x141dd275c]
imul rcx, rax
shr rcx, 0x3e
add ecx, 0xe58421ee
cmp ecx, 0xc701ec4e
jb 0x1400c29b0
test r8, r8
jne 0x1400c3e04
mov qword [rbp - 0x48], r15
mov eax, 0xc6c98f01
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2770]
add ecx, dword [0x141dd2774]
and ecx, 0xb6150218
or ecx, 0xa8b584
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xfacb1c6e
ja 0x1400c29f0
test rbx, rbx
je 0x1400c3060
xor r13d, r13d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov r15, qword [rbx + 0x18]
test r15, r15
je 0x1400c2a50
mov qword [r15 + 0x20], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd2778]
xor eax, dword [0x141dd277c]
add eax, 0x4a2b89e7
or eax, 0x452cf14a
cmp eax, 0xd7472290
je 0x1400c2a50
mov rax, qword [rbx]
mov qword [rbp - 0x10], rax
mov eax, dword [0x141dd2780]
imul eax, dword [0x141dd2784]
add eax, 0x8adafc3
cmp eax, 0x70b4c117
ja 0x1400c2ad9
nop dword [rax]
mov eax, dword [0x141dd2788]
xor eax, dword [0x141dd278c]
imul rax, rax, 0x39b29bfb
shr rax, 0x3c
or eax, 0x50b9afa1
imul esi, eax, 0x7b273aa2
mov rdi, qword [rbx + 8]
mov r14, qword [rbx + 0x10]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
cmp esi, 0x394e3d34
jae 0x1400c2b00
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
jmp 0x1400c2a90
movabs rax, 0x8000000000000000
cmp qword [rbp - 0x10], rax
je 0x1400c2da3
mov qword [rbp - 0x20], r15
mov r15, qword [rbp - 8]
mov rax, qword [r15]
mov rbx, qword [r15 + 0x10]
sub rax, rbx
nop word cs:[rax + rax]
mov ecx, dword [0x141dd27e8]
and ecx, dword [0x141dd27ec]
xor ecx, 0x9525a9d
imul ecx, ecx, 0x2d2f65a6
cmp ecx, 0xaece3fdf
ja 0x1400c2b30
mov ecx, dword [0x141dd27f0]
or ecx, dword [0x141dd27f4]
and ecx, 0xe194edf4
add ecx, 0x54142038
or ecx, 0x48dddaef
cmp ecx, 0xa454bf42
ja 0x1400c2b50
cmp rax, r14
jb 0x1400c2cda
mov eax, dword [0x141dd2810]
and eax, dword [0x141dd2814]
or eax, 0x4391427c
add eax, 0x767f2075
imul rax, rax, 0x123dc775
shr rax, 0x3b
cmp eax, 0x6697a187
jbe 0x1400c2be0
imul rcx, rbx, 0x158
add rcx, qword [r15 + 8]
imul r8, r14, 0x158
sub rsp, 0x20
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
lea rax, [rbx + r14]
mov qword [r15 + 0x10], rax
nop word cs:[rax + rax]
mov esi, dword [0x141dd2818]
or esi, dword [0x141dd281c]
xor esi, 0xce401d88
imul rax, rsi, 0x29f5c86b
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1d
and esi, 0xfffffffc
imul rcx, rbx, 0x158
add rcx, qword [r15 + 8]
imul r8, r14, 0x158
sub rsp, 0x20
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
lea rax, [rbx + r14]
mov qword [r15 + 0x10], rax
cmp esi, 0x437ebb3f
ja 0x1400c2be0
cmp qword [rbp - 0x10], 0
mov r14, qword [rbp - 0x20]
je 0x1400c2cc0
mov rbx, qword [0x141dd7fe0]
mov eax, dword [0x141dd2820]
and eax, dword [0x141dd2824]
imul eax, eax, 0x6282d2a6
cmp eax, 0xc6f3d162
jne 0x1400c2c80
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd2828]
xor edx, edx
div dword [0x141dd282c]
imul eax, eax, 0xdb1ed2a5
xor eax, 0xb9d9613e
imul rsi, rax, 0x24a0a65
shr rsi, 0x39
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp esi, 0xb4a4af03
je 0x1400c2c80
nop
test r13b, r13b
jne 0x1400c2cc0
mov rbx, r14
test r14, r14
mov rsi, qword [rbp - 8]
jne 0x1400c2a30
jmp 0x1400c3060
mov eax, dword [0x141dd27f8]
sub eax, dword [0x141dd27fc]
add eax, 0x25608359
mov ecx, 0x88b9ed9d
imul rax, rcx
shr rax, 0x3f
add eax, 0x61f3d879
cmp eax, 0x882b4a6f
jbe 0x1400c2d29
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.1400faca0
add rsp, 0x30
mov esi, dword [0x141dd2800]
and esi, dword [0x141dd2804]
or esi, 0x2204080
xor esi, 0x44802012
and esi, 0x46a46892
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.1400faca0
add rsp, 0x30
cmp esi, 0x7d1994fe
je 0x1400c2d04
mov rbx, qword [r15 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dd2808]
add eax, dword [0x141dd280c]
xor eax, 0xd5f3f895
imul eax, eax, 0xfe8115ee
cmp eax, 0xf50d8843
je 0x1400c2d80
jmp 0x1400c2b7f
mov rsi, qword [rbp - 8]
nop word [rax + rax]
mov eax, dword [0x141dd2790]
xor edx, edx
div dword [0x141dd2794]
add eax, 0x5deaa4aa
xor eax, 0x9dea458d
cmp eax, 0x2fc5dada
jb 0x1400c2db0
test r15, r15
je 0x1400c3060
xor r14d, r14d
jmp 0x1400c2e00
sub rsp, 0x20
xor edx, edx
mov r8, r15
call r12
add rsp, 0x20
mov r15, r13
test r13, r13
mov rsi, qword [rbp - 8]
je 0x1400c3060
mov r13, qword [r15 + 0x18]
test r13, r13
je 0x1400c2e98
nop dword [rax]
mov eax, dword [0x141dd2798]
or eax, dword [0x141dd279c]
cmp eax, 0xf3503ae6
je 0x1400c2e10
mov eax, dword [0x141dd27a0]
xor eax, dword [0x141dd27a4]
or eax, 0x25c845d0
add eax, 0x2c97ae55
and eax, 0x22782a48
cmp eax, 0x35de6728
ja 0x1400c2f20
nop dword [rax]
mov qword [r13 + 0x20], 0
test r14b, r14b
jne 0x1400c2f20
nop word cs:[rax + rax]
mov eax, dword [0x141dd27a8]
and eax, dword [0x141dd27ac]
xor eax, 0x91040898
and eax, 0xf5b61ad9
imul rax, rax, 0x42cb8b35
shr rax, 0x3b
cmp eax, 0x25815e67
ja 0x1400c2e70
mov rdi, qword [r15 + 8]
mov rsi, qword [r15 + 0x10]
test rsi, rsi
je 0x1400c2ed0
mov rbx, rdi
nop dword [rax + rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c8390
add rsp, 0x20
add rbx, 0x158
dec rsi
jne 0x1400c2eb0
nop dword [rax]
mov eax, dword [0x141dd27b0]
and eax, dword [0x141dd27b4]
add eax, 0x31299fc6
or eax, 0x9bb96ffd
cmp eax, 0x3f113f9d
jb 0x1400c2ed0
cmp qword [r15], 0
je 0x1400c2fd7
mov eax, dword [0x141dd27b8]
xor eax, dword [0x141dd27bc]
xor eax, 0x20008400
and eax, 0x20028444
cmp eax, 0xe185c9c1
jbe 0x1400c2f30
jmp 0x1400c2f5a
mov qword [r13 + 0x20], 0
jmp 0x1400c2e50
mov eax, dword [0x141dd27c0]
or eax, dword [0x141dd27c4]
add eax, 0xb11c230
imul rax, rax, 0x12f45533
shr rax, 0x3c
mov rbx, qword [0x141dd7fe0]
cmp eax, 0x6de571aa
jbe 0x1400c2f70
mov rax, qword [0x141dd7fe0]
jmp 0x1400c2f30
mov eax, dword [0x141dd27c8]
sub eax, dword [str._1I_]
or eax, 0x9b8efab1
imul rax, rax, 0x4f6afa6d
shr rax, 0x3e
imul eax, eax, 0x6cf3ddd3
cmp eax, 0xbb7aac0e
je 0x1400c3000
nop dword [rax]
mov eax, dword [0x141dd27d0]
or eax, dword [0x141dd27d4]
or eax, 0xbdfeffe3
imul rsi, rax, 0x601b837
shr rsi, 0x3a
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp esi, 0xf5445161
ja 0x1400c3000
mov eax, dword [0x141dd27d8]
imul eax, dword [0x141dd27dc]
imul eax, eax, 0xa9d95964
add eax, 0x64fef7c6
or eax, 0xca251738
cmp eax, 0xad6ea1c7
jae 0x1400c3020
jmp 0x1400c3056
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
jmp 0x1400c2fa0
mov eax, dword [0x141dd27e0]
and eax, dword [0x141dd27e4]
shr eax, 2
imul rax, rax, 0x30a6a7a3
shr rax, 0x3a
xor eax, 0x190931
or eax, 0x99c6e44e
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x5cdc4fbc
jne 0x1400c2de0
mov rax, qword [0x141dd7fe0]
jmp 0x1400c3020
mov eax, dword [0x141dd2830]
xor edx, edx
div dword [str.X_L]
or eax, 0x480c4284
and eax, 0x482ecae4
cmp eax, 0x66194af6
je 0x1400c3060
mov rax, qword [rsi]
mov qword [rbp - 0x58], rax
mov r13, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
imul rcx, rax, 0x158
add rcx, r13
mov qword [rbp - 8], rcx
mov rbx, qword [rbp - 0x38]
mov ecx, dword [0x141dd2838]
xor ecx, dword [0x141dd283c]
imul ecx, ecx, 0xd1cf90f4
add ecx, 0x4ca3fb2d
or ecx, 0x21b0e605
cmp ecx, 0x937cda8
je 0x1400c30a0
mov qword [rbp - 0x50], r13
test rax, rax
je 0x1400c3853
xor r12d, r12d
pcmpeqd xmm6, xmm6
mov r9, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x28]
nop word cs:[rax + rax]
lea r13, [r9 + 0x158]
mov rax, qword [r9]
cmp rax, 2
je 0x1400c3853
mov qword [rbp - 0x10], rax
mov rsi, qword [r9 + 0xe0]
mov eax, dword [0x141dd2860]
xor edx, edx
div dword [0x141dd2864]
mov eax, dword [0x141dd2868]
xor eax, dword [0x141dd286c]
add eax, 0x7a69ef0c
imul rax, rax, 0x6d176b7f
shr rax, 0x3d
or eax, 0xd48a63bc
cmp eax, 0xeaaf6f6e
ja 0x1400c311d
lea rdi, [r9 + 0xe8]
add r9, 8
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movups xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movups xmm3, xmmword [rdi + 0x30]
movups xmmword [rbx], xmm0
movdqu xmmword [rbx + 0x10], xmm1
movdqu xmmword [rbx + 0x20], xmm2
movups xmmword [rbx + 0x30], xmm3
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rbx + 0x40], xmm0
movups xmm0, xmmword [rdi + 0x50]
movups xmmword [rbx + 0x50], xmm0
movdqu xmm0, xmmword [rdi + 0x60]
movdqu xmmword [rbx + 0x60], xmm0
mov r14, qword [rbp - 0x40]
mov rbx, qword [r14 + 0x60]
mov r15, qword [r14 + 0x68]
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, rsi
call fcn.1400c8d40
add rsp, 0x20
mov rdi, rax
mov rax, qword [r14 + 0x50]
mov r9d, 0xadd603ff
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2870]
and ecx, dword [0x141dd2874]
xor ecx, 0x1003524b
or ecx, 0x2af88c00
cmp ecx, 0xd3d3b316
je 0x1400c31e0
test rax, rax
je 0x1400c3463
mov rax, qword [rbp - 0x40]
mov rbx, qword [rax + 0x40]
mov r15, qword [rax + 0x48]
mov r10, rdi
shr r10, 0x39
movd xmm0, r10d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor ecx, ecx
xor r8d, r8d
and rdi, r15
movdqu xmm1, xmmword [rbx + rdi]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb eax, xmm2
test eax, eax
je 0x1400c3290
nop dword [rax]
tzcnt edx, eax
add rdx, rdi
and rdx, r15
neg rdx
imul rdx, rdx, 0x160
cmp qword [rbx + rdx - 0x160], rsi
je 0x1400c3370
lea edx, [rax - 1]
and edx, eax
mov eax, edx
test r12b, r12b
jne 0x1400c3279
test ax, ax
jne 0x1400c3250
nop word cs:[rax + rax]
mov eax, dword [0x141dd2880]
xor edx, edx
div dword [0x141dd2884]
or eax, 0x6694709f
add eax, 0x71e1b6f6
cmp eax, 0x4ecf8ea7
jb 0x1400c3290
cmp r8, 1
mov r8d, 1
je 0x1400c32d3
pmovmskb eax, xmm1
tzcnt r14d, eax
add r14, rdi
and r14, r15
xor r8d, r8d
test eax, eax
setne r8b
mov eax, dword [0x141dd2888]
mov edx, dword [0x141dd288c]
add eax, edx
add eax, 0xa712f8b0
xor eax, 0x3435c1d3
imul rax, r9
shr rax, 0x3b
cmp eax, 0x71d0ee53
je 0x1400c32d3
pcmpeqb xmm1, xmm6
pmovmskb eax, xmm1
test ax, ax
jne 0x1400c33b0
add rcx, 0x10
nop
mov eax, dword [0x141dd2890]
add eax, dword [0x141dd2894]
xor eax, 0x65002000
and eax, 0x65292008
imul rax, rax, 0x3549461d
shr rax, 0x3c
cmp eax, 0x7c00d8a
ja 0x1400c3310
add rdi, rcx
nop dword [rax + rax]
mov eax, dword [0x141dd2898]
and eax, dword [0x141dd289c]
xor eax, 0x2408ea18
add eax, 0x8557525c
or eax, 0xd29bcde2
cmp eax, 0xa518dea2
jb 0x1400c3340
jmp 0x1400c3234
add rbx, rdx
mov eax, dword [0x141dd28c0]
add eax, dword [0x141dd28c4]
xor eax, 0x1c6fa51
add eax, 0x172d8bf
or eax, 0x171134e2
cmp eax, 0x6e9d6108
mov r14, qword [rbp - 0x60]
mov r15, qword [rbp - 0x38]
jae 0x1400c3690
jmp 0x1400c37c0
mov eax, dword [0x141dd28a0]
add eax, dword [0x141dd28a4]
and eax, 0xb0ce6714
add eax, 0x8f5b0fe9
cmp eax, 0xb1b127a9
jb 0x1400c33b0
movzx edx, byte [rbx + r14]
test dl, dl
js 0x1400c342d
nop word cs:[rax + rax]
test r12b, r12b
jne 0x1400c33e0
movdqa xmm0, xmmword [rbx]
mov eax, dword [0x141dd28a8]
add eax, dword [0x141dd28ac]
xor eax, 0x8b3c48f9
add eax, 0xbdc4a52d
mov rcx, rax
mov edx, 0xbbf7a5db
imul rcx, rdx
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1a
cmp eax, 0x603a0473
ja 0x1400c33e9
pmovmskb eax, xmm0
tzcnt r14d, eax
movzx edx, byte [rbx + r14]
mov eax, dword [0x141dd28b0]
sub eax, dword [0x141dd28b4]
or eax, 0x80842040
and eax, 0xa8a62362
mov ecx, 0x8c010e5b
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xb07f676d
mov qword [rbp - 0x30], r10
mov byte [rbp - 0x18], dl
jbe 0x1400c34da
jmp 0x1400c35c2
test r12b, r12b
je 0x1400c347f
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov rdx, rbx
mov r8, r15
call fcn.1400faf00
add rsp, 0x20
mov r14d, dword [0x141dd2878]
sub r14d, dword [0x141dd287c]
or r14d, 0xe64836c0
xor r14d, 0x5a766480
add r14d, 0x324b3f26
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov rdx, rbx
mov r8, r15
call fcn.1400faf00
add rsp, 0x20
cmp r14d, 0xcd06f20d
jb 0x1400c3468
mov r9d, 0xadd603ff
nop dword [rax + rax]
test r12b, r12b
jne 0x1400c34d0
jmp 0x1400c3209
mov r8d, dword [0x141dd28b8]
or r8d, dword [0x141dd28bc]
mov eax, edx
and al, 1
movzx eax, al
mov rcx, qword [rbp - 0x40]
sub qword [rcx + 0x50], rax
lea rax, [r14 - 0x10]
and rax, r15
mov byte [rbx + r14], r10b
mov byte [rax + rbx + 0x10], r10b
inc qword [rcx + 0x58]
add r8d, 0x3433e41a
xor r8d, 0xccacdb84
mov dword [rbp - 0x20], r8d
mov rax, r14
neg rax
imul rdi, rax, 0x160
mov qword [rbx + rdi - 0x160], rsi
mov rax, qword [rbp - 0x10]
mov qword [rbx + rdi - 0x158], rax
lea rcx, [rbx + rdi]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
movzx edx, byte [rbp - 0x18]
mov r10, qword [rbp - 0x30]
add rsp, 0x20
mov qword [rbx + rdi - 0x78], rsi
mov rax, qword [rbp - 0x38]
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [rbx + rdi - 0x70], xmm0
movdqu xmmword [rbx + rdi - 0x60], xmm1
movdqu xmmword [rbx + rdi - 0x50], xmm2
movups xmmword [rbx + rdi - 0x40], xmm3
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbx + rdi - 0x30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbx + rdi - 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x60]
movdqu xmmword [rbx + rdi - 0x10], xmm0
cmp dword [rbp - 0x20], 0x637bce48
ja 0x1400c3762
mov eax, edx
and al, 1
movzx eax, al
mov rdx, qword [rbp - 0x40]
sub qword [rdx + 0x50], rax
mov rax, r14
neg rax
lea rcx, [r14 - 0x10]
and rcx, r15
mov byte [rbx + r14], r10b
mov byte [rcx + rbx + 0x10], r10b
inc qword [rdx + 0x58]
imul rdi, rax, 0x160
mov qword [rbx + rdi - 0x160], rsi
mov rax, qword [rbp - 0x10]
mov qword [rbx + rdi - 0x158], rax
lea rcx, [rbx + rdi]
add rcx, 0xfffffffffffffeb0
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
movzx edx, byte [rbp - 0x18]
mov r10, qword [rbp - 0x30]
add rsp, 0x20
mov qword [rbx + rdi - 0x78], rsi
mov rax, qword [rbp - 0x38]
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movups xmmword [rbx + rdi - 0x70], xmm0
movdqu xmmword [rbx + rdi - 0x60], xmm1
movdqu xmmword [rbx + rdi - 0x50], xmm2
movups xmmword [rbx + rdi - 0x40], xmm3
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rbx + rdi - 0x30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rbx + rdi - 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x60]
movdqu xmmword [rbx + rdi - 0x10], xmm0
jmp 0x1400c34da
mov eax, dword [0x141dd28c8]
and eax, dword [0x141dd28cc]
imul edi, eax, 0x7c0340e9
add edi, 0x1946f047
mov eax, 0xb5b7fea9
imul rdi, rax
shr rdi, 0x3e
lea rdx, [rbx - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov qword [rbx - 0x158], rax
lea rcx, [rbx - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx - 0x78], rsi
movups xmm0, xmmword [r15 + 0x60]
movups xmmword [rbx - 0x10], xmm0
movups xmm0, xmmword [r15 + 0x50]
movups xmmword [rbx - 0x20], xmm0
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rbx - 0x30], xmm0
movdqu xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqu xmm2, xmmword [r15 + 0x20]
movups xmm3, xmmword [r15 + 0x30]
movups xmmword [rbx - 0x40], xmm3
movdqu xmmword [rbx - 0x50], xmm2
movdqu xmmword [rbx - 0x60], xmm1
movdqu xmmword [rbx - 0x70], xmm0
cmp edi, 0x722c6f2d
ja 0x1400c37c0
cmp qword [r14], 2
je 0x1400c3762
sub rsp, 0x20
mov rcx, qword [rbp - 0x60]
call fcn.1400c8390
add rsp, 0x20
mov ecx, 0xe7173549
mov eax, dword [0x141dd28d0]
xor eax, dword [0x141dd28d4]
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x4c6de1f6
or eax, 0x417ad33b
cmp eax, 0x6d6629cc
je 0x1400c3767
mov rcx, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x38]
nop word cs:[rax + rax]
test r12b, r12b
jne 0x1400c37a0
mov r9, r13
cmp r13, qword [rbp - 8]
jne 0x1400c30f0
jmp 0x1400c38ff
lea rdx, [rbx - 0x158]
sub rsp, 0x20
mov r8d, 0x158
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov qword [rbx - 0x158], rax
lea rcx, [rbx - 0x150]
sub rsp, 0x20
mov r8d, 0xd8
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx - 0x78], rsi
movups xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqu xmm2, xmmword [r15 + 0x20]
movups xmm3, xmmword [r15 + 0x30]
movups xmmword [rbx - 0x70], xmm0
movdqu xmmword [rbx - 0x60], xmm1
movdqu xmmword [rbx - 0x50], xmm2
movups xmmword [rbx - 0x40], xmm3
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rbx - 0x30], xmm0
movups xmm0, xmmword [r15 + 0x50]
movups xmmword [rbx - 0x20], xmm0
movdqu xmm0, xmmword [r15 + 0x60]
movdqu xmmword [rbx - 0x10], xmm0
jmp 0x1400c3690
mov r8, qword [rbp - 8]
mov rax, r8
sub rax, r13
movabs rcx, 0xbe82fa0be82fa0bf
mul rcx
cmp r8, r13
je 0x1400c38ff
mov rsi, rdx
shr rsi, 8
xor edi, edi
nop dword [rax]
mov eax, dword [0x141dd2840]
or eax, dword [0x141dd2844]
or eax, 0x106000a
xor eax, 0x1200c0
or eax, 0x3e21f714
cmp eax, 0x92594f83
jne 0x1400c38c0
imul rcx, rdi, 0x158
add rcx, r13
sub rsp, 0x20
call fcn.1400c8390
add rsp, 0x20
nop dword [rax]
mov ebx, dword [0x141dd2848]
and ebx, dword [0x141dd284c]
or ebx, 0x1480406
and ebx, 0x21c9250e
imul rcx, rdi, 0x158
add rcx, r13
sub rsp, 0x20
call fcn.1400c8390
add rsp, 0x20
cmp ebx, 0x88f6c0cf
je 0x1400c38c0
inc rdi
cmp rdi, rsi
jne 0x1400c3880
cmp qword [rbp - 0x58], 0
mov r14, qword [rbp - 0x50]
je 0x1400c3992
mov rsi, qword [0x141dd7fe0]
mov eax, dword [0x141dd2850]
xor eax, dword [0x141dd2854]
imul eax, eax, 0xa5eb28ad
xor eax, 0x80116242
or eax, 0x9669dad
cmp eax, 0x62401884
jne 0x1400c394e
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd2858]
sub eax, dword [0x141dd285c]
imul ebx, eax, 0x4cd5d8aa
add ebx, 0xc202a2de
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0x4b78aa1
jbe 0x1400c3960
xor eax, eax
mov r8, qword [rbp - 0x40]
nop dword [rax + rax]
test al, al
jne 0x1400c39a0
mov r9, qword [r8 + 0x58]
test r9, r9
je 0x1400c3d60
nop word cs:[rax + rax]
mov eax, dword [0x141dd28f0]
or eax, dword [0x141dd28f4]
imul eax, eax, 0xa7936c3d
add eax, 0x340b56c6
and eax, 0x77a3fae5
cmp eax, 0xeb27b889
ja 0x1400c39c0
mov r10, qword [r8 + 0x40]
mov rax, qword [r8 + 0x50]
mov qword [rbp - 0x18], rax
lea r15, [r10 + 0x10]
movdqa xmm0, xmmword [r10]
pmovmskb r12d, xmm0
not r12d
mov eax, dword [0x141dd28f8]
or eax, dword [0x141dd28fc]
shr eax, 2
imul rax, rax, 0x4277b0cb
shr rax, 0x3c
imul eax, eax, 0xaa3a2b7e
shr eax, 4
imul rax, rax, 0x479e1e3
shr rax, 0x36
cmp eax, 0x20c44905
ja 0x1400c3a00
mov rax, qword [r8 + 0x48]
mov qword [rbp - 0x30], rax
xor r11d, r11d
pcmpeqd xmm6, xmm6
mov rbx, r10
mov rsi, r9
mov qword [rbp - 0x20], r10
jmp 0x1400c3a71
mov r9, r13
mov r8, r14
xor r11d, r11d
mov rsi, qword [rbp - 0x60]
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
dec rsi
je 0x1400c3d60
test r12w, r12w
jne 0x1400c3ac1
nop word [rax + rax]
movdqa xmm0, xmmword [r15]
pmovmskb r12d, xmm0
add rbx, 0xffffffffffffea00
add r15, 0x10
cmp r12d, 0xffff
je 0x1400c3a80
nop
mov eax, dword [0x141dd2900]
sub eax, dword [0x141dd2904]
imul eax, eax, 0x562f54b0
add eax, 0x7181e00c
cmp eax, 0x9149db6f
jae 0x1400c3aa0
not r12d
mov eax, dword [0x141dd2908]
xor edx, edx
div dword [0x141dd290c]
or eax, 0x80040001
xor eax, 0x122800c0
and eax, 0x922c20c1
cmp eax, 0x447e84fe
jb 0x1400c3c10
nop dword [rax]
mov edx, dword [0x141dd2910]
xor edx, dword [0x141dd2914]
or edx, 0xcc7fc90d
add edx, 0x931371a4
and edx, 0xcf116b23
tzcnt eax, r12d
neg rax
imul rcx, rax, 0x160
movzx eax, byte [rbx + rcx - 4]
mov byte [rbx + rcx - 4], 0
cmp edx, 0x3bc5c09a
jb 0x1400c3c10
test al, al
jne 0x1400c3a5d
lea rax, [rbx + rcx]
lea rdi, [rbx + rcx]
add rdi, 0xfffffffffffffea8
mov ecx, dword [0x141dd2918]
add ecx, dword [0x141dd291c]
imul ecx, ecx, 0xad02ed80
cmp ecx, 0x9742c34
je 0x1400c3b4a
nop word cs:[rax + rax]
test r11b, r11b
jne 0x1400c3b70
mov r11, r10
sub r11, rax
sar r11, 5
movabs rax, 0x2e8ba2e8ba2e8ba3
imul r11, rax
lea r14, [r11 - 0x10]
and r14, qword [rbp - 0x30]
movdqu xmm0, xmmword [r10 + r14]
pcmpeqb xmm0, xmm6
pmovmskb eax, xmm0
mov ecx, dword [0x141dd2920]
add ecx, dword [0x141dd2924]
xor ecx, 0x82700018
or ecx, 0x618f50e0
add ecx, 0xa09c728a
cmp ecx, 0xfc86e3b7
jbe 0x1400c3c02
test ax, ax
jmp 0x1400c3c02
bsr cx, ax
xor ecx, 0xf
mov edx, dword [0x141dd2928]
add edx, dword [0x141dd292c]
or edx, 0xc400c500
and edx, 0xc5b8d570
imul rdx, rdx, 0x7011c713
shr rdx, 0x3e
cmp edx, 0x80051037
jbe 0x1400c3c30
test ax, ax
jne 0x1400c3bd0
mov cx, 0x10
jmp 0x1400c3bd7
tzcnt eax, r12d
neg rax
imul rax, rax, 0x160
mov byte [rbx + rax - 4], 0
jmp 0x1400c3af0
mov qword [rbp - 0x60], rsi
movdqu xmm0, xmmword [r10 + r11]
pcmpeqb xmm0, xmm6
pmovmskb eax, xmm0
or eax, 0x10000
tzcnt eax, eax
add ecx, eax
mov sil, 0x80
cmp cx, 0xf
ja 0x1400c3c8a
mov eax, dword [0x141dd2930]
and eax, dword [0x141dd2934]
add eax, 0x1ebd53f9
or eax, 0x1951ff59
add eax, 0xea085ffb
cmp eax, 0xab2b3bcd
ja 0x1400c3c56
mov rax, qword [rbp - 0x18]
inc rax
mov qword [rbp - 0x18], rax
mov qword [r8 + 0x50], rax
mov sil, 0xff
mov qword [rbp - 0x38], rdi
mov qword [rbp - 8], r14
mov eax, dword [0x141dd2938]
xor edx, edx
div dword [0x141dd293c]
add eax, 0x425a16f
or eax, 0x2d1d2a41
imul eax, eax, 0xb19a53f9
cmp eax, 0xf196b8be
mov r14, qword [rbp - 0x40]
mov qword [rbp - 0x28], r9
mov qword [rbp - 0x10], r11
ja 0x1400c3d27
nop word cs:[rax + rax]
mov edi, dword [0x141dd2940]
imul edi, dword [0x141dd2944]
or edi, 0x5511cd64
and edi, 0xd5bbff6c
mov byte [r10 + r11], sil
mov rax, qword [rbp - 8]
mov byte [rax + r10 + 0x10], sil
lea r13, [r9 - 1]
mov qword [r14 + 0x58], r13
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
call fcn.1400c8390
mov r11, qword [rbp - 0x10]
mov r10, qword [rbp - 0x20]
mov r9, qword [rbp - 0x28]
add rsp, 0x20
cmp edi, 0xfd102434
jne 0x1400c3a50
mov byte [r10 + r11], sil
mov rax, qword [rbp - 8]
mov byte [rax + r10 + 0x10], sil
lea rax, [r9 - 1]
mov qword [r14 + 0x58], rax
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
call fcn.1400c8390
mov r11, qword [rbp - 0x10]
mov r10, qword [rbp - 0x20]
mov r9, qword [rbp - 0x28]
add rsp, 0x20
jmp 0x1400c3cd0
mov eax, dword [0x141dd28d8]
or eax, dword [0x141dd28dc]
add eax, 0xdbfa4532
and eax, 0xe3adbcc2
imul eax, eax, 0xf3536557
cmp eax, 0x3a6786ba
jb 0x1400c3d60
mov eax, 0x8bb6dd6b
mov rdx, qword [rbp - 0x68]
nop dword [rax]
mov ecx, dword [0x141dd28e0]
and ecx, dword [0x141dd28e4]
imul ecx, ecx, 0x246bc0c1
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x587f3794
cmp ecx, 0x72003271
ja 0x1400c3d90
cmp qword [rdx], 0
je 0x1400c3de0
mov r8, qword [rdx + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd28e8]
xor edx, edx
div dword [0x141dd28ec]
or eax, 0x40000840
and eax, 0x40000c48
cmp eax, 0xf5afcfd3
jae 0x1400c3de0
jmp 0x1400c24b0
sub rsp, 0x30
mov qword [rsp + 0x20], 0x158
mov r9d, 8
mov rcx, rsi
xor edx, edx
call fcn.1400faca0
add rsp, 0x30
jmp 0x1400c29db