Function at 0x1400c6c60
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x158
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xc0], xmm7
movaps xmmword [rbp + 0xb0], xmm6
mov qword [rbp + 0xa0], r9
mov byte [rbp + 0x78], r8b
mov r9, rdx
mov qword [rbp + 0x90], rcx
mov eax, dword [0x141dd5200]
imul eax, dword [0x141dd5204]
mov r8, qword [rbp + 0x140]
and eax, 0x8b02141d
add eax, 0x213c69d7
cmp eax, 0x5e6e0552
jae 0x1400c6d57
mov eax, 0x160
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x150
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x60
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
mov qword [rax], r9
mov qword [rdx + 8], r8
mov rax, r9
shr rax, 1
mov qword [rbp + 0xa8], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5208]
xor edx, edx
div dword [0x141dd520c]
and eax, 0xd52617e4
imul eax, eax, 0xc7f29331
imul rdx, rax, 0x273d6ff7
shr rdx, 0x3c
mov eax, 0x160
call fcn.1400eeec0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r12, rsp
mov eax, 0x150
call fcn.1400eeec0
sub rsp, rax
mov rcx, rsp
mov eax, 0x60
call fcn.1400eeec0
sub rsp, rax
mov rbx, rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rdi, rsp
mov qword [rdi], r9
mov qword [r13 + 8], r8
cmp edx, 0x168ab8c9
je 0x1400c6d70
mov qword [rbp - 0x68], rcx
mov qword [rbp + 0x20], r10
mov r10, qword [rbp + 0xa8]
cmp r10, r8
jae 0x1400c8217
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x150]
lea rax, [r8 + rdx*8]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x20]
nop dword [rax]
mov eax, dword [0x141dd5278]
imul eax, dword [0x141dd527c]
xor eax, 0x8605b506
add eax, 0x8a57481
xor eax, 0xec9f4e4d
cmp eax, 0xe1f86c30
ja 0x1400c6e80
test rdx, rdx
je 0x1400c855b
mov rdx, qword [rbp + 0x158]
mov r9, qword [rdx]
mov rax, qword [rdx + 8]
mov qword [rbp - 0x70], rax
mov rax, qword [rdx + 0x10]
mov qword [rbp - 8], rax
mov rax, qword [rdx + 0x18]
mov qword [rbp], rax
mov rax, qword [rdx + 0x20]
mov qword [rbp + 8], rax
lea rax, [rcx + 0x10]
mov qword [rbp - 0x60], rax
lea rax, [rcx + 0xe8]
mov qword [rbp - 0x58], rax
lea rax, [rcx + 8]
mov qword [rbp - 0x50], rax
lea rax, [rcx + 0x100]
mov qword [rbp - 0x48], rax
add rcx, 0x130
mov qword [rbp - 0x40], rcx
nop word [rax + rax]
mov eax, dword [0x141dd5280]
sub eax, dword [0x141dd5284]
add eax, 0x8169a6b6
and eax, 0x26930dbb
imul rax, rax, 0x21a7eb67
shr rax, 0x3a
cmp eax, 0xdad4bf2f
ja 0x1400c6f10
mov r13d, 8
xorps xmm6, xmm6
pcmpeqd xmm7, xmm7
xor eax, eax
mov qword [rbp + 0x88], rax
xor ebx, ebx
mov qword [rbp + 0x10], r11
mov qword [rbp + 0x28], r9
mov qword [rbp - 0x30], r12
jmp 0x1400c6f80
mov r8, qword [rbp + 0xa0]
mov r13, qword [rbp + 0xa8]
mov r9, qword [rbp + 0x28]
add r8, 8
cmp r8, qword [rbp - 0x78]
je 0x1400c8368
mov qword [rbp + 0xa8], r13
xor eax, eax
test al, al
jne 0x1400c6fc8
nop dword [rax]
mov eax, dword [0x141dd5288]
xor edx, edx
div dword [0x141dd528c]
xor eax, 0x72e2b387
add eax, 0x1fe57546
or eax, 0x568289a
mov rcx, qword [r8]
lock inc qword [r9]
mov rsi, qword [rcx + 0x58]
xor r10d, r10d
test rsi, rsi
setne dl
cmp eax, 0x75d714d7
jne 0x1400c6fd0
lock inc qword [r9]
jmp 0x1400c6f90
mov qword [rbp + 0xa0], r8
movzx eax, word [rcx + 0x38]
mov qword [rbp + 0x80], rax
mov rax, qword [rcx + 0x40]
mov qword [rbp + 0x98], rax
mov r15, qword [rcx + 0x50]
mov rax, qword [rcx + 0x78]
mov qword [rbp + 0x78], rax
mov rax, qword [rcx + 0x90]
mov qword [rbp - 0x18], rax
mov r10b, dl
mov qword [rbp - 0x10], r10
mov rax, qword [rbp - 0x70]
mov rdi, qword [rax]
cmp qword [rdi + 0x18], 0
je 0x1400c74f0
mov eax, dword [0x141dd5290]
add eax, dword [0x141dd5294]
imul eax, eax, 0xe656b8ef
or eax, 0x3cffff72
cmp eax, 0xa6392005
jae 0x1400c7053
mov rcx, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
sub rsp, 0x20
mov r8, r15
call fcn.1400c9a90
add rsp, 0x20
xor r13d, r13d
nop word cs:[rax + rax]
mov rcx, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
sub rsp, 0x20
mov r8, r15
call fcn.1400c9a90
add rsp, 0x20
test r13b, r13b
jne 0x1400c7060
mov rcx, rax
mov r13, qword [rdi]
mov r8, qword [rdi + 8]
mov eax, dword [0x141dd5298]
or eax, dword [0x141dd529c]
imul eax, eax, 0x6dde06c1
add eax, 0x3d16734a
and eax, 0xd6db7e50
cmp eax, 0xe8176705
ja 0x1400c7087
mov rax, rcx
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r9d, r9d
mov r11, qword [rbp + 0x10]
mov eax, dword [0x141dd52a0]
xor edx, edx
div dword [0x141dd52a4]
mov eax, dword [0x141dd52a8]
imul eax, dword [0x141dd52ac]
or eax, 0xc88008
and eax, 0x55c98048
cmp eax, 0xbd61aed
je 0x1400c70d8
and rcx, r8
movdqu xmm1, xmmword [r13 + rcx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb eax, xmm2
nop dword [rax]
test ax, ax
je 0x1400c71c0
nop dword [rax]
mov edx, dword [0x141dd52b0]
or edx, dword [0x141dd52b4]
add edx, 0x96e5576d
xor edx, 0x8e3fdca2
imul rdx, rdx, 0x4d264805
shr rdx, 0x3e
cmp edx, 0x5086e842
ja 0x1400c7120
tzcnt edx, eax
add rdx, rcx
and rdx, r8
neg rdx
imul rdx, rdx, 0x160
cmp qword [r13 + rdx - 0x160], r15
je 0x1400c7230
lea edx, [rax - 1]
mov r10d, dword [0x141dd52c8]
or r10d, dword [0x141dd52cc]
or r10d, 0xaf185878
cmp r10d, 0x1460b3a6
je 0x1400c7170
and edx, eax
mov eax, edx
mov edx, dword [0x141dd52d0]
xor edx, dword [0x141dd52d4]
add edx, 0x8df7fd8d
and edx, 0xdb53b074
cmp edx, 0xdd535052
ja 0x1400c7192
jmp 0x1400c7110
pcmpeqb xmm1, xmm7
pmovmskb eax, xmm1
nop dword [rax + rax]
mov edx, dword [0x141dd52b8]
or edx, dword [0x141dd52bc]
or edx, 0xf1c31818
imul edx, edx, 0x4431b524
cmp edx, 0x908d99e4
je 0x1400c71d0
mov edx, dword [0x141dd52c0]
xor edx, dword [0x141dd52c4]
xor edx, 0xc182efc2
add edx, 0xb58cb1f3
cmp edx, 0xfe28f77f
ja 0x1400c71f0
test ax, ax
jne 0x1400c74f0
add rcx, r9
add rcx, 0x10
add r9, 0x10
jmp 0x1400c70ca
add r13, rdx
mov eax, dword [0x141dd52d8]
imul eax, dword [0x141dd52dc]
imul eax, eax, 0x123d810d
or eax, 0x17347d52
and eax, 0x77b5fd5a
cmp eax, 0x63f6bda6
ja 0x1400c7233
mov rax, qword [r13 - 0x60]
test rax, rax
je 0x1400c746e
mov ecx, dword [0x141dd52e0]
add ecx, dword [0x141dd52e4]
imul ecx, ecx, 0xb294e1ea
add ecx, 0x18b08242
or ecx, 0x25f478cc
cmp ecx, 0xc1ed1f86
lea r8, [rbp + 0x30]
mov r10, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
lea rdx, [rbp + 0x60]
nop word [rax + rax]
mov ecx, dword [0x141dd52e8]
or ecx, dword [0x141dd52ec]
or ecx, 0x70aece4f
imul ecx, ecx, 0x6cca2992
cmp ecx, 0xb57b178
je 0x1400c72a0
mov ecx, dword [0x141dd52f0]
imul ecx, dword [0x141dd52f4]
add ecx, 0x350902a0
and ecx, 0xc76a7beb
cmp ecx, 0xcd3dd0a7
jbe 0x1400c72f1
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x30], 0
mov rcx, qword [rax + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd52f8]
or eax, dword [0x141dd52fc]
or eax, 0xd8c5fd49
imul eax, eax, 0x131afebd
add eax, 0xd08f5f4d
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x30], 0
cmp eax, 0x991c967b
jb 0x1400c7300
sub rsp, 0x30
mov qword [rsp + 0x20], r8
mov r9, r8
call r10
add rsp, 0x30
test eax, eax
jne 0x1400c73c0
mov eax, dword [0x141dd5300]
add eax, dword [0x141dd5304]
or eax, 0xb8a180c6
imul eax, eax, 0xa2c2ab51
add eax, 0x9df92c56
cmp eax, 0xd254cb3b
ja 0x1400c73a4
nop dword [rax]
mov edi, dword [0x141dd5308]
sub edi, dword [0x141dd530c]
add edi, 0xa2493110
xor edi, 0x6c631000
or edi, 0x9388c7cf
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0xe251ef64
jne 0x1400c73c0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400c7370
mov r11, qword [rbp + 0x10]
mov r9d, 0x8f4055c9
nop word [rax + rax]
mov eax, dword [0x141dd5468]
imul eax, dword [0x141dd546c]
imul eax, eax, 0x918661c4
or eax, 0xf03b4f10
imul eax, eax, 0x3ff0ca42
cmp eax, 0x14f51ec2
jb 0x1400c73d0
mov rcx, qword [rbp + 0x60]
mov r8d, dword [0x141dd5470]
and r8d, dword [0x141dd5474]
add r8d, 0x9bdd02f6
xor r8d, 0xe025edac
imul r8, r9
shr r8, 0x3f
mov rax, rcx
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
cmp r8d, 0xe0588f39
ja 0x1400c73f9
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
mov eax, dword [0x141dd5478]
or eax, dword [0x141dd547c]
and eax, 0xc0cf2c40
xor eax, 0x64280000
cmp eax, 0x4e6941e1
ja 0x1400c7447
cmp rdx, qword [r13 - 0x38]
jne 0x1400c74f0
lea rcx, [r13 - 0x158]
mov rdx, qword [rbp - 8]
movzx eax, byte [rdx + 8]
mov byte [r11 + 8], al
mov rax, qword [rdx]
mov qword [r11], rax
mov rax, qword [rbp]
mov r8, qword [rax]
mov rax, qword [rbp + 8]
mov r9, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov rdx, r11
call fcn.1400cf0d0
add rsp, 0x30
mov rax, qword [rbp - 0x10]
mov qword [r13 - 0x158], rax
mov eax, dword [0x141dd5480]
xor eax, dword [0x141dd5484]
xor eax, 0xa881f42a
add eax, 0xd1b4d18c
and eax, 0xcc1f9a0d
cmp eax, 0x8f5fc7a7
jne 0x1400c81e0
jmp 0x1400c820e
mov eax, dword [0x141dd5310]
and eax, dword [0x141dd5314]
imul rcx, rax, 0x3d0efc8d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
add eax, 0x2de04bc9
cmp eax, 0xc3f8b163
mov ecx, 0x81ae1767
mov eax, dword [0x141dd5318]
xor eax, dword [0x141dd531c]
imul rax, rcx
shr rax, 0x3f
or eax, 0xd26c6e26
imul rax, rax, 0x7460a25d
shr rax, 0x3e
cmp eax, 0x1bda43bf
je 0x1400c751f
mov qword [rbp - 0x80], r15
mov rdx, qword [rbp + 0x98]
test rdx, rdx
je 0x1400c7590
mov r8, qword [rbp + 0x80]
shr r8d, 1
sub rsp, 0x20
mov rcx, r14
call fcn.14008b7e0
add rsp, 0x20
mov r13, qword [rbp + 0xa8]
lea r10, [rbp + 0x30]
jmp 0x1400c7900
test r15, r15
je 0x1400c7699
cmp r15, 4
mov r13, qword [rbp + 0xa8]
jne 0x1400c779c
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 6
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
mov rcx, rax
nop dword [rax + rax]
mov eax, dword [0x141dd5360]
xor edx, edx
div dword [0x141dd5364]
or eax, 0xbb1b02de
cmp eax, 0x300bc5c5
je 0x1400c75d0
test rcx, rcx
je 0x1400c86ee
mov eax, dword [0x141dd5380]
or eax, dword [0x141dd5384]
xor eax, 0xb7dd74c8
imul rax, rax, 0x5b597699
shr rax, 0x3e
cmp eax, 0x6dfe9bd
lea r10, [rbp + 0x30]
jbe 0x1400c7630
mov word [rcx + 4], 0x6d65
mov dword [rcx], 0x74737953
nop word cs:[rax + rax]
mov eax, dword [0x141dd5388]
add eax, dword [0x141dd538c]
xor eax, 0xa440d089
add eax, 0x9e72c40f
mov word [rcx + 4], 0x6d65
mov dword [rcx], 0x74737953
cmp eax, 0xc3a98fec
ja 0x1400c7630
nop dword [rax]
mov eax, dword [0x141dd5390]
imul eax, dword [0x141dd5394]
add eax, 0x5a22be6e
imul rax, rax, 0x2e3a80df
shr rax, 0x3a
imul eax, eax, 0x5b9e80fc
cmp eax, 0x60c91590
je 0x1400c7660
mov eax, 6
mov edx, 6
jmp 0x1400c7886
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
mov rcx, rax
mov eax, dword [0x141dd5338]
xor edx, edx
div dword [0x141dd533c]
mov r13, qword [rbp + 0xa8]
nop dword [rax]
mov eax, dword [0x141dd5340]
xor eax, dword [0x141dd5344]
imul eax, eax, 0x11ad4151
and eax, 0x9280fb42
xor eax, 0xb1127330
cmp eax, 0x2603ca53
ja 0x1400c76d0
test rcx, rcx
lea r10, [rbp + 0x30]
je 0x1400c8b6f
mov eax, dword [0x141dd5348]
sub eax, dword [0x141dd534c]
and eax, 0x20007815
xor eax, 0xd8d18a0
cmp eax, 0x28974de2
jae 0x1400c7730
mov dword [rcx], 0x656c6449
nop word cs:[rax + rax]
mov eax, dword [0x141dd5350]
sub eax, dword [0x141dd5354]
imul eax, eax, 0x57e7aab1
xor eax, 0xa6a665fc
imul rdx, rax, 0x38e8038d
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
mov dword [rcx], 0x656c6449
cmp eax, 0x7dbfa669
ja 0x1400c7730
nop dword [rax + rax]
mov eax, dword [0x141dd5358]
xor eax, dword [0x141dd535c]
xor eax, 0x2600ec00
or eax, 0x99fb122f
cmp eax, 0x92da5eab
jb 0x1400c7770
mov eax, 4
mov edx, 4
jmp 0x1400c7886
mov qword [rbp + 0x98], rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dd5320]
imul eax, dword [0x141dd5324]
add eax, 0xeacbaccd
cmp eax, 0x21393a96
ja 0x1400c77b0
lea rax, [rbp - 0x80]
mov qword [rbp - 0x28], rax
mov eax, dword [0x141dd5328]
xor edx, edx
div dword [0x141dd532c]
or eax, 0xf14f5e2b
imul rax, rax, 0x4fc090dd
shr rax, 0x3b
and eax, 3
cmp eax, 0x4b219e81
lea rsi, [0x1400cef40]
lea r10, [rbp + 0x30]
je 0x1400c7c5c
mov eax, dword [0x141dd5330]
add eax, dword [0x141dd5334]
imul edi, eax, 0x5c340a29
add edi, 0x1b0b795d
mov qword [rbp - 0x20], rsi
lea rax, [0x141db8c98]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 1
mov qword [rbp + 0x50], 0
lea rax, [rbp - 0x28]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], 1
sub rsp, 0x20
lea rcx, [rbp + 0x60]
mov rdx, r10
call fcn.140038da0
lea r10, [rbp + 0x30]
add rsp, 0x20
cmp edi, 0xa0ac95c8
jae 0x1400c7c5c
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x70]
mov rsi, qword [rbp + 0x98]
mov r8d, dword [0x141dd5398]
add r8d, dword [0x141dd539c]
or r8d, 0xb7fbff76
imul r8d, r8d, 0xd120e78e
cmp r8d, 0x9ceaa363
jae 0x1400c78c0
mov qword [r14], rax
mov qword [r14 + 8], rcx
mov qword [r14 + 0x10], rdx
mov byte [r14 + 0x18], 1
nop dword [rax + rax]
mov r8d, dword [0x141dd53a0]
sub r8d, dword [0x141dd53a4]
imul r8d, r8d, 0x11303582
xor r8d, 0x8e92cd8d
imul r8, r8, 0x1b990d4b
shr r8, 0x3b
mov qword [r14], rax
mov qword [r14 + 8], rcx
mov qword [r14 + 0x10], rdx
mov byte [r14 + 0x18], 1
cmp r8d, 0x54cdd4b7
ja 0x1400c78c0
mov rax, qword [rbp + 8]
mov r9, qword [rax]
mov eax, dword [0x141dd53a8]
xor edx, edx
div dword [0x141dd53ac]
nop word cs:[rax + rax]
mov eax, dword [0x141dd53b0]
xor eax, dword [0x141dd53b4]
or eax, 0xf587be99
add eax, 0x6ac9f4a
cmp eax, 0xd3d4d01c
ja 0x1400c7920
test r15, r15
je 0x1400c7a40
mov qword [rbp + 0x80], r9
mov qword [rbp + 0x98], rsi
mov eax, dword [0x141dd53b8]
xor edx, edx
div dword [0x141dd53bc]
and eax, 0xc0cd1610
xor eax, 0x80890004
cmp eax, 0x1f8554e1
jae 0x1400c798b
sub rsp, 0x20
mov ecx, 0x410
xor edx, edx
mov r8d, r15d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_OpenProcess]
nop word cs:[rax + rax]
mov edi, dword [0x141dd53c0]
xor edi, dword [0x141dd53c4]
xor edi, 0x32056498
add edi, 0xb43665fb
or edi, 0xc96ab403
sub rsp, 0x20
mov ecx, 0x410
xor edx, edx
mov r8d, r15d
call rsi
add rsp, 0x20
cmp edi, 0xbf38a4f1
jb 0x1400c79a0
mov r13, rax
dec rax
mov ecx, dword [0x141dd53c8]
sub ecx, dword [0x141dd53cc]
cmp ecx, 0xdd80e181
je 0x1400c79e0
cmp rax, 0xfffffffffffffffe
mov dil, 1
mov qword [rbp + 0x18], rbx
jae 0x1400c7a4b
nop word cs:[rax + rax]
mov eax, dword [0x141dd53d8]
and eax, dword [0x141dd53dc]
imul eax, eax, 0xef51997d
cmp eax, 0x351379ae
je 0x1400c7a10
mov rax, r13
inc rax
cmp rax, 1
jbe 0x1400c7a8f
jmp 0x1400c7ab7
xor eax, eax
xor edx, edx
xor ecx, ecx
jmp 0x1400c7cb0
mov eax, dword [0x141dd53d0]
and eax, dword [0x141dd53d4]
imul rax, rax, 0x64865961
shr rax, 0x3a
cmp eax, 0xa41b2dd2
jne 0x1400c7a77
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop
sub rsp, 0x20
call rsi
add rsp, 0x20
test dil, dil
je 0x1400c7a80
sub rsp, 0x20
mov ecx, 0x1000
xor edx, edx
mov r8d, r15d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov r13, rax
dec rax
cmp rax, 0xfffffffffffffffe
jae 0x1400c7b91
mov eax, dword [0x141dd53f8]
sub eax, dword [0x141dd53fc]
imul rax, rax, 0x40c6ad6f
shr rax, 0x3e
or eax, 0xdb3514ce
imul eax, eax, 0x83195bd8
cmp eax, 0x85e8d67c
jbe 0x1400c7b11
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x30], 0
sub rsp, 0x30
lea r8, [rbp + 0x30]
mov qword [rsp + 0x20], r8
mov rcx, r13
lea rdx, [rbp + 0x60]
mov r9, r8
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
lea rsi, [rbp + 0x30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
lea r12, [rbp + 0x60]
mov eax, dword [0x141dd5400]
add eax, dword [0x141dd5404]
imul edi, eax, 0x2f52dfc0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x30], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, r13
mov rdx, r12
mov r8, rsi
mov r9, rsi
call rbx
add rsp, 0x30
cmp edi, 0xdef3a3ac
je 0x1400c7b20
test eax, eax
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x1400c8000
mov eax, dword [0x141dd5408]
imul eax, dword [0x141dd540c]
cmp eax, 0xd30e37b3
jne 0x1400c7fc0
jmp 0x1400c7ff1
mov eax, dword [0x141dd53e0]
and eax, dword [0x141dd53e4]
imul rax, rax, 0x4d965bf
shr rax, 0x39
imul eax, eax, 0xa7097a51
and eax, 0xb306510f
cmp eax, 0xf8549b9b
jbe 0x1400c7bc8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r13, qword [rbp + 0xa8]
mov ebx, 0x8a7f7eed
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edi, dword [0x141dd53e8]
or edi, dword [0x141dd53ec]
or edi, 0xcba91728
imul rdi, rbx
shr rdi, 0x3e
xor edi, 0xee8d797
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xc4c188fe
ja 0x1400c7be0
nop word cs:[rax + rax]
mov eax, dword [0x141dd53f0]
imul eax, dword [0x141dd53f4]
and eax, 0x8fb6ba81
add eax, 0x7750131f
cmp eax, 0x3fefd1d8
ja 0x1400c7c20
xor eax, eax
xor edx, edx
xor ecx, ecx
lea r10, [rbp + 0x30]
mov rbx, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x98]
mov r9, qword [rbp + 0x80]
jmp 0x1400c7cb0
mov qword [rbp - 0x20], rsi
lea rax, [0x141db8c98]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 1
mov qword [rbp + 0x50], 0
lea rax, [rbp - 0x28]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], 1
sub rsp, 0x20
lea rcx, [rbp + 0x60]
mov rdx, r10
call fcn.140038da0
lea r10, [rbp + 0x30]
add rsp, 0x20
jmp 0x1400c7808
movdqu xmm0, xmmword [r14]
movdqu xmm1, xmmword [r14 + 0x10]
mov r8, qword [rbp - 0x60]
movdqu xmmword [r8 + 0x10], xmm1
movdqu xmmword [r8], xmm0
mov rdi, qword [rbp + 0x20]
mov qword [rdi + 0x30], 0
mov qword [rdi + 0x38], 8
movups xmmword [rdi + 0x40], xmm6
movabs r8, 0x8000000000000000
mov qword [rdi + 0x60], r8
mov qword [rdi + 0xe0], r15
mov qword [rdi + 0x80], r8
mov qword [rdi + 0x50], 8
mov qword [rdi + 0x58], 0
mov qword [rdi + 0x98], r8
mov qword [rdi + 0xb8], r8
mov r8, qword [rbp - 0x58]
movups xmmword [r8], xmm6
mov r8, qword [rbp - 0x10]
mov qword [rdi], r8
mov qword [rdi + 8], rsi
mov dword [rdi + 0xd8], 1
mov qword [rdi + 0xf8], rcx
mov rcx, qword [rbp - 0x48]
movups xmmword [rcx + 0x10], xmm6
movups xmmword [rcx], xmm6
mov qword [rdi + 0x120], rdx
mov qword [rdi + 0x128], rax
mov dword [rdi + 0x150], 0
mov byte [rdi + 0x154], 1
mov rax, qword [rbp - 0x40]
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov rcx, qword [rbp - 8]
movzx eax, byte [rcx + 8]
mov byte [rbp + 0x38], al
mov rax, qword [rcx]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp]
mov r8, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov rdx, r10
call fcn.1400cf0d0
add rsp, 0x30
mov rdi, qword [rdi]
sub rsp, 0x20
mov r8d, 0x150
mov rsi, qword [rbp - 0x68]
mov rcx, rsi
mov rdx, qword [rbp - 0x50]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp rdi, 2
je 0x1400c7f93
mov eax, dword [0x141dd5490]
add eax, dword [0x141dd5494]
mov rcx, qword [rbp + 0x88]
mov qword [r12], rcx
imul eax, eax, 0x4c283b93
add eax, 0xc7ba86d3
cmp eax, 0x5e91da59
jbe 0x1400c7e20
mov qword [r12 + 8], r13
mov qword [r12 + 0x10], rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dd5498]
xor eax, dword [0x141dd549c]
xor eax, 0x39fc443c
imul eax, eax, 0x80a97019
or eax, 0x389bb30a
mov qword [r12 + 8], r13
mov qword [r12 + 0x10], rbx
cmp eax, 0xdbc2beac
je 0x1400c7e20
nop dword [rax]
mov eax, dword [0x141dd54a0]
or eax, dword [0x141dd54a4]
and eax, 0xd199360b
cmp eax, 0x14eeb40f
je 0x1400c7e50
cmp rbx, rcx
jne 0x1400c7ee3
sub rsp, 0x20
mov rcx, r12
call fcn.1400c9f70
add rsp, 0x20
mov r13, qword [r12 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd54a8]
sub eax, dword [0x141dd54ac]
and eax, 0xc985dc
xor eax, 0x68af9c69
imul rax, rax, 0x513947e7
shr rax, 0x3c
cmp eax, 0x2772a2ab
je 0x1400c7e90
mov rcx, qword [r12]
nop dword [rax]
mov eax, dword [0x141dd54b0]
or eax, dword [0x141dd54b4]
imul eax, eax, 0x78dd3121
xor eax, 0x8823c0e0
add eax, 0xc81dd00a
cmp eax, 0xd5fe5e0
jb 0x1400c7ec0
mov qword [rbp + 0x88], rcx
mov eax, dword [0x141dd54b8]
xor edx, edx
div dword [0x141dd54bc]
imul eax, eax, 0x3b82b4c4
add eax, 0xbd02d564
and eax, 0x2fd18dbc
cmp eax, 0xba985041
je 0x1400c7f5f
nop
mov r15d, dword [0x141dd54c0]
and r15d, dword [0x141dd54c4]
add r15d, 0x3655daf0
and r15d, 0x9180b032
imul rax, rbx, 0x158
mov qword [r13 + rax], rdi
lea rcx, [rax + r13]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp r15d, 0xf97ffd3d
jne 0x1400c7f90
imul rax, rbx, 0x158
mov qword [r13 + rax], rdi
lea rcx, [rax + r13]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
jmp 0x1400c7f10
inc rbx
mov r8, qword [rbp + 0xa0]
mov r9, qword [rbp + 0x28]
add r8, 8
cmp r8, qword [rbp - 0x78]
jne 0x1400c6f80
jmp 0x1400c8368
mov eax, dword [0x141dd5410]
and eax, dword [0x141dd5414]
mov ecx, 0x8228e1c5
imul rax, rcx
shr rax, 0x3c
imul edi, eax, 0x72da0abe
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x8214124c
jne 0x1400c8000
sub rsp, 0x20
call rsi
add rsp, 0x20
jmp 0x1400c7fc0
mov eax, dword [0x141dd5418]
and eax, dword [0x141dd541c]
imul eax, eax, 0x8f065f06
add eax, 0x4dd6a67e
cmp eax, 0x57e98c87
mov rbx, qword [rbp + 0x18]
mov r12, qword [rbp - 0x30]
mov rsi, qword [rbp + 0x98]
nop dword [rax + rax]
mov eax, dword [0x141dd5420]
add eax, dword [0x141dd5424]
and eax, 0xbb554765
imul eax, eax, 0x624feddc
add eax, 0xfa4805b8
cmp eax, 0xc71a33cc
ja 0x1400c8030
mov rax, qword [rbp + 0x60]
mov qword [rbp - 0x38], rax
mov eax, dword [0x141dd5428]
xor edx, edx
div dword [0x141dd542c]
and eax, 0x46781f4a
imul eax, eax, 0x711bc664
and eax, 0x9c62eaf8
cmp eax, 0x8a5daf74
ja 0x1400c80c0
mov eax, dword [0x141dd5430]
imul eax, dword [0x141dd5434]
or eax, 0x2312a508
and eax, 0xaf9bb52e
imul edi, eax, 0x8ad0840c
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 0x18
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
cmp edi, 0xd780fc8d
jne 0x1400c80e0
movzx eax, byte [0x141dda6b8]
sub rsp, 0x20
mov edx, 0x18
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
jmp 0x1400c8080
mov rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5438]
and eax, dword [0x141dd543c]
and eax, 0xaa542b54
imul eax, eax, 0x5fdcb39c
cmp eax, 0x4f03ccf8
je 0x1400c80f0
test rcx, rcx
lea r10, [rbp + 0x30]
mov r9, qword [rbp + 0x80]
je 0x1400c866f
mov rax, qword [rbp - 0x38]
movabs rdx, 0xd6bf94d5e57a42bd
mul rdx
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
cmp rdx, r9
mov r8d, 0
cmovbe r8, rdx
mov eax, dword [0x141dd5458]
and eax, dword [0x141dd545c]
or eax, 0x1dc45695
and eax, 0x3dc47e9d
cmp eax, 0x66a0a618
jne 0x1400c8190
mov qword [rcx], 1
mov qword [rcx + 8], 1
mov qword [rcx + 0x10], r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd5460]
or eax, dword [0x141dd5464]
or eax, 0xf426bae7
add eax, 0xe1990725
mov qword [rcx], 1
mov qword [rcx + 8], 1
mov qword [rcx + 0x10], r13
cmp eax, 0xb6a3597b
jb 0x1400c8190
mov rax, r9
sub rax, r8
mov r13, qword [rbp + 0xa8]
jmp 0x1400c7cb0
mov eax, dword [0x141dd5488]
sub eax, dword [0x141dd548c]
imul eax, eax, 0x75a2997b
and eax, 0x35272764
add eax, 0x9be06b8
mov qword [r13 - 0x150], rsi
cmp eax, 0xbd5f42c5
jbe 0x1400c6f60
mov qword [r13 - 0x150], rsi
jmp 0x1400c81e0
mov eax, dword [0x141dd5210]
xor edx, edx
div dword [0x141dd5214]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5218]
or eax, dword [0x141dd521c]
or eax, 0xb6c3a9a
and eax, 0xbed3a9a
cmp eax, 0xb6306cc0
ja 0x1400c8230
cmp byte [rbp + 0x78], 0
je 0x1400c847d
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5230]
add eax, dword [0x141dd5234]
imul eax, eax, 0xf6b29c79
or eax, 0x1d13194c
imul rdx, rax, 0x1e1d7f9
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
cmp eax, 0xf03a58b6
ja 0x1400c8280
nop word cs:[rax + rax]
mov eax, dword [0x141dd5238]
xor edx, edx
div dword [0x141dd523c]
and eax, 0x7df0edf2
imul rax, rax, 0x9beebdf
shr rax, 0x3a
cmp eax, 0xad8d0acb
je 0x1400c82c0
test rcx, rcx
je 0x1400c863f
add rcx, 0x110
mov r8, qword [rbp + 0x158]
mov r9, qword [rbp + 0xa0]
mov r10, qword [rbp + 0xa8]
nop word [rax + rax]
mov eax, dword [0x141dd5250]
imul eax, dword [0x141dd5254]
xor eax, 0x31f34401
add eax, 0xbeaff988
or eax, 0xcea9ffdf
cmp eax, 0xc6345659
je 0x1400c8310
nop word cs:[rax + rax]
mov eax, dword [0x141dd5258]
sub eax, dword [0x141dd525c]
add eax, 0x3fb81d16
or eax, 0x9c256086
imul eax, eax, 0x5dcb0394
cmp eax, 0xf0ce4474
ja 0x1400c8340
jmp 0x1400c8856
test rbx, rbx
je 0x1400c8577
mov rdi, qword [rbp + 0x88]
mov eax, dword [0x141dd5500]
imul eax, dword [0x141dd5504]
imul eax, eax, 0x90e4729e
add eax, 0x9f94e82e
imul rax, rax, 0x4bd0eaa1
shr rax, 0x3d
cmp eax, 0xb2f70bd7
mov rsi, qword [rbp + 0x90]
jbe 0x1400c83b0
movzx eax, byte [0x141dda6b8]
mov eax, dword [0x141dd5508]
or eax, dword [0x141dd550c]
and eax, 0xe991182a
add eax, 0x12d7fba6
imul rax, rax, 0x517528fd
shr rax, 0x3e
movzx ecx, byte [0x141dda6b8]
cmp eax, 0x1e593bc0
ja 0x1400c83b0
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.1400bf230
add rsp, 0x20
test rax, rax
je 0x1400c876d
mov qword [rax], rdi
mov qword [rax + 8], r13
mov ecx, dword [0x141dd5528]
mov edx, dword [0x141dd552c]
add ecx, edx
add ecx, 0x36fc8051
and ecx, 0x3009d7cb
add ecx, 0x6f6a2b24
cmp ecx, 0xdcf6800
jae 0x1400c8438
mov qword [rax + 0x10], rbx
pxor xmm0, xmm0
movdqu xmmword [rax + 0x18], xmm0
pxor xmm0, xmm0
nop dword [rax]
mov ecx, dword [0x141dd5530]
or ecx, dword [0x141dd5534]
xor ecx, 0x35a63cd5
imul ecx, ecx, 0x2d305c6c
mov qword [rax + 0x10], rbx
movdqu xmmword [rax + 0x18], xmm0
cmp ecx, 0xa8e2818f
je 0x1400c8440
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], 1
jmp 0x1400c9170
mov rdx, qword [rbp + 0xa0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5220]
and eax, dword [0x141dd5224]
and eax, 0xfd85ac26
xor eax, 0x7b46948d
imul rax, rax, 0x677b4c89
shr rax, 0x3d
cmp eax, 0x7e36b8fa
ja 0x1400c8490
mov eax, 0x9b01dffb
nop dword [rax]
mov ecx, dword [0x141dd5228]
sub ecx, dword [0x141dd522c]
and ecx, 0x3a4214f6
add ecx, 0xe297349e
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xb54fb79d
ja 0x1400c84c0
test rdx, rdx
je 0x1400c6e5f
mov rcx, qword [rbp + 0xa0]
shr rcx, 1
nop dword [rax + rax]
mov eax, dword [0x141dd5268]
and eax, dword [0x141dd526c]
xor eax, 0x97a132
or eax, 0xec284e89
add eax, 0xf5546836
cmp eax, 0x288d3a6d
jb 0x1400c8500
mov r8, qword [rbp + 0x158]
nop dword [rax]
mov eax, dword [0x141dd5270]
add eax, dword [0x141dd5274]
or eax, 0x201015e0
and eax, 0x683217e4
imul eax, eax, 0x73b598a
cmp eax, 0xc933fa12
jae 0x1400c8530
mov rax, rcx
jmp 0x1400c8890
pxor xmm0, xmm0
mov rax, qword [rbp + 0x90]
movdqu xmmword [rax], xmm0
mov qword [rax + 0x10], 0
jmp 0x1400c9170
pxor xmm0, xmm0
mov rax, qword [rbp + 0x90]
movdqu xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov eax, dword [0x141dd54c8]
xor edx, edx
div dword [0x141dd54cc]
mov r8, qword [rbp + 0x88]
mov eax, 0xe7b2401f
nop dword [rax + rax]
mov ecx, dword [0x141dd54d0]
imul ecx, dword [0x141dd54d4]
imul rcx, rcx, 0x5c028633
shr rcx, 0x3e
or ecx, 0xfd48d650
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x989cb2a7
ja 0x1400c85b0
nop
mov eax, dword [0x141dd54d8]
xor edx, edx
div dword [0x141dd54dc]
xor eax, 0x31caf5b0
imul rax, rax, 0xb85dbcb
shr rax, 0x3b
imul eax, eax, 0x605a7731
cmp eax, 0x9b640578
je 0x1400c85e0
test r8, r8
je 0x1400c9170
mov eax, dword [0x141dd54e0]
and eax, dword [0x141dd54e4]
xor eax, 0x88886c92
and eax, 0x88887e9e
add eax, 0x82911d70
cmp eax, 0x856c57ba
jbe 0x1400c8b71
jmp 0x1400c8b95
mov eax, dword [0x141dd5240]
and eax, dword [0x141dd5244]
mov ecx, 0x85c73d1b
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x36471d89
cmp ecx, 0x7bed1a1e
jbe 0x1400c87f7
jmp 0x1400c882f
mov eax, dword [0x141dd5440]
imul eax, dword [0x141dd5444]
xor eax, 0x40200880
or eax, 0xbb9df77b
cmp eax, 0xee7cb20f
jae 0x1400c8690
ud2
mov eax, dword [0x141dd5448]
or eax, dword [0x141dd544c]
add eax, 0x3d87e43c
or eax, 0x8e58ba78
and eax, 0xaf7fbf78
ud2
mov eax, dword [0x141dd5368]
imul eax, dword [0x141dd536c]
or eax, 0xe46af259
add eax, 0xccef4239
cmp eax, 0x16744122
jae 0x1400c8710
ud2
mov eax, dword [0x141dd5370]
or eax, dword [0x141dd5374]
imul eax, eax, 0x2bb567a9
add eax, 0x4d40c00e
or eax, 0xab5582ac
ud2
mov eax, dword [0x141dd5510]
xor eax, dword [0x141dd5514]
imul eax, eax, 0xd7a222eb
add eax, 0x289d538f
imul rax, rax, 0x53989df9
shr rax, 0x3d
cmp eax, 0x2b5499de
jne 0x1400c87a0
ud2
mov eax, dword [0x141dd5518]
and eax, dword [0x141dd551c]
imul eax, eax, 0x5814b9a8
or eax, 0x73289800
and eax, 0x7b2c9900
ud2
mov eax, dword [0x141dd5248]
add eax, dword [0x141dd524c]
imul eax, eax, 0x88df1311
xor eax, 0x49222a7
imul r14, rax, 0x60d38fd5
shr r14, 0x3e
sub rsp, 0x20
call fcn.140078280
add rsp, 0x20
cmp r14d, 0x796f9449
jb 0x1400c883e
sub rsp, 0x20
call fcn.140078280
add rsp, 0x20
jmp 0x1400c87f7
mov rcx, rax
mov r8, qword [rbp + 0x158]
mov r9, qword [rbp + 0xa0]
mov r10, qword [rbp + 0xa8]
shr r9, 1
nop dword [rax]
mov eax, dword [0x141dd5260]
xor eax, dword [0x141dd5264]
xor eax, 0x83ec271a
imul edx, eax, 0xd6e1571e
mov rax, qword [rcx]
mov rax, qword [rax + 0x208]
cmp rax, r9
cmovbe rax, r9
cmp edx, 0x654d06d1
je 0x1400c8860
mov ecx, dword [0x141dd5538]
imul ecx, dword [0x141dd553c]
or ecx, 0x4000404
xor ecx, 0x220060
and ecx, 0x426046d
cmp ecx, 0x257be73b
jne 0x1400c88be
mov qword [r13], rax
mov qword [r15], r10
mov rdx, qword [rbp + 0x150]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5540]
sub ecx, dword [0x141dd5544]
xor ecx, 0x2ebb4ddd
add ecx, 0x37a45a57
imul rcx, rcx, 0x30dba869
shr rcx, 0x3c
mov qword [r13], rax
mov qword [r15], r10
cmp ecx, 0xc1694d97
ja 0x1400c88d0
sub rdx, r10
jb 0x1400c8b28
mov rcx, qword [rbp + 0x148]
lea rax, [rcx + r10*8]
mov qword [rbx], rdi
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], rax
mov qword [rbx + 0x20], rdx
mov qword [rbx + 0x28], r8
mov qword [rbx + 0x30], r15
mov qword [rbx + 0x38], r13
mov qword [rbx + 0x40], rcx
mov eax, dword [0x141dd5558]
xor eax, dword [0x141dd555c]
mov qword [rbx + 0x48], r10
add eax, 0xfc702a88
and eax, 0xa30a8f7a
cmp eax, 0x6cf20d11
jne 0x1400c895e
mov qword [rbx + 0x50], r8
xor eax, eax
mov qword [rbx + 0x50], r8
test al, al
jne 0x1400c8960
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x38]
test rdi, rdi
je 0x1400c89b3
mov eax, dword [0x141dd5590]
or eax, dword [0x141dd5594]
xor eax, 0x2b2e7c1d
imul rax, rax, 0x2bf1a751
shr rax, 0x3d
cmp eax, 0xfbd7728d
jbe 0x1400c8c75
jmp 0x1400c8cb3
xor eax, eax
test al, al
je 0x1400c89d0
sub rsp, 0x20
call fcn.140078280
add rsp, 0x20
nop word cs:[rax + rax]
mov edi, dword [0x141dd5560]
or edi, dword [0x141dd5564]
and edi, 0x20012c
sub rsp, 0x20
call fcn.140078280
add rsp, 0x20
cmp edi, 0xd579e4a5
ja 0x1400c89d0
mov rdi, qword [rax]
nop word [rax + rax]
mov eax, dword [0x141dd5568]
imul eax, dword [0x141dd556c]
and eax, 0xbfbcf3e6
cmp eax, 0xb3b4ebcc
je 0x1400c8a00
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r14, qword [rax + 0x38]
test r14, r14
je 0x1400c8a54
cmp qword [r14 + 0x110], rdi
jne 0x1400c8ae7
xor eax, eax
test al, al
je 0x1400c8c26
jmp 0x1400c8c5a
mov eax, dword [0x141dd5570]
xor eax, dword [0x141dd5574]
add eax, 0xf661b898
and eax, 0xad5cb78
cmp eax, 0x4267a86
ja 0x1400c8b09
sub rdi, 0xffffffffffffff80
mov eax, dword [0x141dd5578]
xor edx, edx
div dword [0x141dd557c]
imul r14d, eax, 0x5a944439
or r14d, 0xeca911bc
add r14d, 0xb7eb673e
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.1400fe570
add rsp, 0x20
cmp r14d, 0x66267bf0
jb 0x1400c8a79
nop dword [rax + rax]
mov eax, dword [0x141dd5580]
and eax, dword [0x141dd5584]
add eax, 0xafe4195d
and eax, 0xafcbb1f2
xor eax, 0xd9921d16
cmp eax, 0xcb6e8e30
ja 0x1400c8ac0
jmp 0x1400c8d00
sub rdi, 0xffffffffffffff80
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
mov r8, r14
mov r9, rbx
call fcn.1400fef20
add rsp, 0x20
jmp 0x1400c8d00
lea rdx, [rdi + 0x80]
sub rsp, 0x20
mov rcx, rsi
mov r8, rbx
call fcn.1400fe570
add rsp, 0x20
jmp 0x1400c8a75
mov eax, dword [0x141dd5548]
and eax, dword [0x141dd554c]
or eax, 0x7122137b
add eax, 0x16b24251
and eax, 0x88c77edc
cmp eax, 0x59615fba
jb 0x1400c8b6b
mov eax, dword [0x141dd5550]
xor edx, edx
div dword [0x141dd5554]
xor eax, 0x1b5d4bdf
add eax, 0x4415d5d9
ud2
ud2
ud2
mov eax, dword [0x141dd54e8]
xor eax, dword [0x141dd54ec]
add eax, 0xb44c1e6a
or eax, 0x644d14d4
mov rsi, qword [0x141dda6a0]
cmp eax, 0x75da8adf
jae 0x1400c8b9e
mov rax, qword [0x141dda6a0]
jmp 0x1400c8b71
mov eax, dword [0x141dd54f0]
imul eax, dword [0x141dd54f4]
xor eax, 0x38205bea
mov ecx, 0xdb7fea1b
imul rcx, rax
shr rcx, 0x3d
or ecx, 0xe458c628
cmp ecx, 0xb905a992
jb 0x1400c8c0e
mov eax, dword [0x141dd54f8]
sub eax, dword [0x141dd54fc]
shr eax, 1
mov edi, 0x8af54d23
imul rdi, rax
shr rdi, 0x3e
xor edi, 0x2bd1c2df
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x1eca0b3f
jae 0x1400c9170
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c8bcb
mov edi, dword [0x141dd5588]
add edi, dword [0x141dd558c]
and edi, 0x44
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, r14
xor r9d, r9d
call fcn.1400ca2a0
add rsp, 0x20
cmp edi, 0xbc367082
jb 0x1400c8d00
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, r14
xor r9d, r9d
call fcn.1400ca2a0
add rsp, 0x20
jmp 0x1400c8c26
mov r14d, dword [0x141dd5598]
add r14d, dword [0x141dd559c]
xor r14d, 0xfdb6f680
add r14d, 0x4aa31283
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
xor r9d, r9d
call fcn.1400ca2a0
add rsp, 0x20
cmp r14d, 0x373727d
jae 0x1400c8cd0
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
xor r9d, r9d
call fcn.1400ca2a0
add rsp, 0x20
jmp 0x1400c8c75
mov eax, dword [0x141dd55a0]
sub eax, dword [0x141dd55a4]
add eax, 0x873e463d
xor eax, 0x7f36311
imul eax, eax, 0x6704c8c7
cmp eax, 0xf2906e15
ja 0x1400c8cd0
nop word cs:[rax + rax]
mov eax, dword [0x141dd55a8]
xor edx, edx
div dword [0x141dd55ac]
xor eax, 0x5ec54737
imul rax, rax, 0x21e03ce5
shr rax, 0x3d
cmp eax, 0xfb2bd869
je 0x1400c8d00
mov rdi, qword [rsi]
mov r9, qword [rsi + 8]
mov r11, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
mov rcx, qword [rsi + 0x28]
test r9, r9
mov rbx, qword [rbp + 0x90]
je 0x1400c8e24
mov r10, qword [rsi + 0x10]
nop dword [rax]
mov eax, dword [0x141dd55b0]
xor edx, edx
div dword [0x141dd55b4]
and eax, 0x6a592
cmp eax, 0x1715748b
je 0x1400c8d50
nop word [rax + rax]
mov eax, dword [0x141dd55b8]
or eax, dword [0x141dd55bc]
xor eax, 0x420244e1
and eax, 0xc24ec5e7
add eax, 0xfcc7893a
cmp eax, 0xa6615627
jb 0x1400c8d70
test r11, r11
je 0x1400c8e14
mov qword [r9 + 0x18], r11
nop dword [rax + rax]
mov eax, dword [0x141dd55c0]
and eax, dword [0x141dd55c4]
imul eax, eax, 0x29fd2923
cmp eax, 0x31cdc87f
je 0x1400c8da0
mov eax, dword [0x141dd55c8]
add eax, dword [0x141dd55cc]
or eax, 0xc6271d3d
imul eax, eax, 0x5e0e518
add eax, 0x1305cb8
cmp eax, 0x241e9748
jae 0x1400c8de0
mov qword [r11 + 0x20], r9
add r10, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd55d0]
add eax, dword [0x141dd55d4]
xor eax, 0x1408100
or eax, 0xde3e7cbf
mov qword [r11 + 0x20], r9
cmp eax, 0xf84effa5
je 0x1400c8df0
mov r9, r8
mov qword [rbx], rdi
mov qword [rbx + 8], r9
mov qword [rbx + 0x10], r10
jmp 0x1400c9170
mov qword [rbx], r11
mov eax, dword [0x141dd55d8]
xor eax, dword [0x141dd55dc]
and eax, 0x1577b2be
imul eax, eax, 0xed26877d
or eax, 0xdb0cd418
cmp eax, 0x534a7414
jae 0x1400c8e4e
mov qword [rbx + 8], r8
mov eax, 0x98945f07
nop word cs:[rax + rax]
mov edx, dword [0x141dd55e0]
xor edx, dword [0x141dd55e4]
imul edx, edx, 0x43940514
imul rdx, rax
shr rdx, 0x3d
mov qword [rbx + 8], r8
cmp edx, 0x8149b714
je 0x1400c8e60
mov eax, dword [0x141dd55e8]
imul eax, dword [0x141dd55ec]
imul eax, eax, 0xaa517c70
or eax, 0x8003d544
and eax, 0x81e3fd54
cmp eax, 0xfa6bebbe
jbe 0x1400c8eb0
mov qword [rbx + 0x10], rcx
nop
mov eax, dword [0x141dd55f0]
xor edx, edx
div dword [0x141dd55f4]
or eax, 0x5f22108
and eax, 0x65fe3519
add eax, 0x1426a9f0
mov qword [rbx + 0x10], rcx
cmp eax, 0xeb31a2c9
ja 0x1400c8eb0
test rdi, rdi
je 0x1400c9170
mov eax, dword [0x141dd55f8]
xor edx, edx
div dword [0x141dd55fc]
nop
mov eax, dword [0x141dd5600]
imul eax, dword [0x141dd5604]
add eax, 0x9a4d4d93
xor eax, 0xf2229fa
imul eax, eax, 0x8dbbae08
cmp eax, 0x77fe348a
ja 0x1400c8ef0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5608]
add eax, dword [0x141dd560c]
imul eax, eax, 0x4a1d8c28
xor eax, 0xa0809020
or eax, 0x537f2ac1
cmp eax, 0xe2340eed
ja 0x1400c8f20
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd5610]
xor edx, edx
div dword [0x141dd5614]
test r14b, r14b
jne 0x1400c8f5e
mov r13, qword [rdi + 0x18]
test r13, r13
je 0x1400c8f80
mov qword [r13 + 0x20], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5618]
sub eax, dword [0x141dd561c]
imul eax, eax, 0xc140edf5
add eax, 0x3e844fb6
imul rax, rax, 0x11c0b0ff
shr rax, 0x3a
cmp eax, 0xbac7cdd
ja 0x1400c8f80
mov eax, dword [0x141dd5620]
and eax, dword [0x141dd5624]
add eax, 0xb011afe5
imul rax, rax, 0x3486c29b
shr rax, 0x3d
cmp eax, 0xfe6f766a
ja 0x1400c8fa9
mov rsi, qword [rdi + 8]
mov r12, qword [rdi + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5628]
xor edx, edx
div dword [0x141dd562c]
imul rax, rax, 0x5cb1d7db
shr rax, 0x3d
or eax, 0x7dad0b0c
cmp eax, 0xef20aec7
ja 0x1400c8fe0
test r12, r12
je 0x1400c902c
mov rbx, rsi
nop dword [rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1400c91b0
add rsp, 0x20
add rbx, 0x158
dec r12
jne 0x1400c9010
mov rax, qword [rdi]
nop
test r14b, r14b
jne 0x1400c9030
test rax, rax
je 0x1400c90c0
mov rbx, qword [0x141dda6a0]
mov eax, dword [0x141dd5630]
xor edx, edx
div dword [0x141dd5634]
shr eax, 1
mov ecx, 0xb07d21bd
imul rax, rcx
shr rax, 0x3b
or eax, 0xe6afb7fb
cmp eax, 0x9bfae88c
jb 0x1400c90ab
nop
mov eax, dword [0x141dd5638]
add eax, dword [0x141dd563c]
or eax, 0xeb23e69f
imul r12d, eax, 0x3a0b19c
xor r12d, 0x72180009
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
cmp r12d, 0x82fbfba5
jae 0x1400c90c0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
jmp 0x1400c9070
mov rsi, qword [0x141dda6a0]
mov eax, dword [str._eRu]
mov ecx, dword [0x141dd5644]
add eax, ecx
add eax, 0xac79e18e
and eax, 0xf59d9be
imul eax, eax, 0xd6481f27
cmp eax, 0x717ac145
jb 0x1400c9129
nop dword [rax]
mov ebx, dword [0x141dd5648]
sub ebx, dword [0x141dd564c]
add ebx, 0xe9cf5465
or ebx, 0xdfe1f65
add ebx, 0x8dce4fa1
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
cmp ebx, 0x13df0241
jae 0x1400c9140
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
jmp 0x1400c90f0
mov eax, dword [0x141dd5650]
xor edx, edx
div dword [0x141dd5654]
and eax, 0x1cf406d0
add eax, 0xa7498cd3
or eax, 0x93fc9a3f
cmp eax, 0x61eb78f6
jb 0x1400c9140
mov rdi, r13
test r13, r13
jne 0x1400c8f50
mov eax, dword [0x141dd5658]
or eax, dword [0x141dd565c]
xor eax, 0xcb6998ac
add eax, 0x68c31406
cmp eax, 0xa2276489
jb 0x1400c9170
movaps xmm6, xmmword [rbp + 0xb0]
movaps xmm7, xmmword [rbp + 0xc0]
lea rsp, [rbp + 0xd8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret