Function at 0x1400c2190
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
movaps xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x11], dl
mov qword [rbp - 0x28], rcx
xor eax, eax
test al, al
je 0x1400c2250
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
nop
mov ecx, dword [str._nLK]
and ecx, dword [0x141dd6554]
xor ecx, 0x160a13d1
add ecx, 0x2fd0219
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r10, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
cmp ecx, 0x755e849a
ja 0x1400c2250
mov eax, dword [0x141dd6558]
sub eax, dword [0x141dd655c]
mov ecx, 0x9f1f617f
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xa2d29edf
imul eax, ecx, 0x1f42e6f3
cmp eax, 0x6a83527
jb 0x1400c2380
mov eax, dword [0x141dd6560]
sub eax, dword [0x141dd6564]
imul ecx, eax, 0xa03f6609
or ecx, 0xbbf7bdf5
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r15, rsp
cmp ecx, 0x566d0e6f
jae 0x1400c238f
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
jmp 0x1400c2350
mov rcx, qword [rbp - 0x28]
lea rax, [rcx + 0x90]
mov qword [rbp - 0x40], rax
cmp qword [rcx + 0x90], 0
mov qword [rbp - 0x38], rdx
jne 0x1400c2800
mov eax, dword [0x141dd6568]
xor eax, dword [0x141dd656c]
imul eax, eax, 0xe598abfc
cmp eax, 0xaedae454
jne 0x1400c23d1
mov qword [r12], 0
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x70], r10
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x48], r8
nop word cs:[rax + rax]
mov eax, dword [0x141dd6570]
and eax, dword [0x141dd6574]
imul eax, eax, 0x49f003e8
add eax, 0x64ff6698
mov qword [r12], 0
cmp eax, 0x1290595e
jb 0x1400c23f0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, r12
call qword [sym.imp.pdh.dll_PdhOpenQueryA]
add rsp, 0x20
nop dword [rax + rax]
mov ecx, dword [0x141dd6578]
imul ecx, dword [0x141dd657c]
add ecx, 0xf0b5f43c
or ecx, 0xde83b305
imul rcx, rcx, 0x11a8ac51
shr rcx, 0x3c
cmp ecx, 0x10f51f41
ja 0x1400c2430
test eax, eax
je 0x1400c2467
xor edx, edx
jmp 0x1400c2699
mov r8, qword [r12]
mov edx, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rdx*8]
movzx edx, byte [rcx + 0x70]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6580]
sub ecx, dword [0x141dd6584]
add ecx, 0x5881384d
or ecx, 0x3a02b2fd
imul ecx, ecx, 0x87a18aa9
cmp ecx, 0x8b500a5c
je 0x1400c2490
test dl, 1
mov dword [rbp - 0x20], eax
mov qword [rbp - 0x30], r8
je 0x1400c2522
mov eax, dword [0x141ddc4fc]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rax*8]
mov r10, qword [rcx + 0x78]
mov rcx, qword [rcx + 0x80]
mov edx, 0xea1c2b2f
nop dword [rax + rax]
mov r8d, dword [0x141dd6598]
add r8d, dword [0x141dd659c]
imul r8d, r8d, 0xbf666dd7
and r8d, 0xeb5f4a7b
imul r8, rdx
shr r8, 0x3e
cmp r8d, 0xcaf81d7a
je 0x1400c24f0
jmp 0x1400c25fd
mov eax, dword [0x141dd6588]
imul eax, dword [0x141dd658c]
add eax, 0x57ba8442
imul rax, rax, 0x41600f23
shr rax, 0x3e
imul eax, eax, 0x2a3b6695
cmp eax, 0x8eb33f78
jbe 0x1400c258d
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
sub rsp, 0x20
mov edx, 0x10
mov rcx, rdi
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
mov rax, qword [rdi + 8]
mov ecx, dword [0x141ddc4fc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov byte [rcx + 0x70], 1
mov qword [rcx + 0x80], rax
xorps xmm6, xmm6
mov r12d, dword [0x141dd6590]
and r12d, dword [0x141dd6594]
xor r12d, 0x61e27acc
add r12d, 0x2d0b2548
xor r12d, 0xd3ba6824
movups xmmword [rdi], xmm6
sub rsp, 0x20
mov edx, 0x10
mov rcx, rdi
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
mov r10, qword [rdi]
mov ecx, dword [0x141ddc4fc]
mov rdx, qword gs:[0x58]
mov rdx, qword [rdx + rcx*8]
mov rcx, qword [rdi + 8]
mov byte [rdx + 0x70], 1
mov qword [rdx + 0x80], rcx
cmp r12d, 0xc6b21e0d
jae 0x1400c2590
mov edx, dword [0x141dd65a0]
imul edx, dword [0x141dd65a4]
or edx, 0x1f3ba03f
add edx, 0xf8281471
or edx, 0x51e0918c
cmp edx, 0x833bee56
je 0x1400c266a
mov edx, dword [0x141dd65a8]
imul edx, dword [0x141dd65ac]
imul edx, edx, 0x91f41bad
add edx, 0x54043730
or edx, 0xe00eded7
mov r8d, dword [0x141ddc4fc]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
lea r9, [r10 + 1]
mov qword [r8 + 0x78], r9
cmp edx, 0xbc5cec36
jne 0x1400c268b
lea rdx, [r10 + 1]
mov r8d, dword [0x141ddc4fc]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x78], rdx
jmp 0x1400c2624
lea rdx, [0x141dbad00]
mov eax, dword [rbp - 0x20]
mov r11, qword [rbp - 0x30]
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x50], rsi
mov r8d, dword [0x141dd65b0]
or r8d, dword [0x141dd65b4]
add r8d, 0x741e992b
xor r8d, 0x4fc9b235
cmp r8d, 0xf7731470
mov r9, qword [rbp - 0x28]
ja 0x1400c2737
mov r8d, dword [0x141dd65b8]
add r8d, dword [0x141dd65bc]
and r8d, 0x66bfb5b1
add r8d, 0x7598348a
imul r8, r8, 0x421f9501
shr r8, 0x3e
mov qword [r9 + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [r9 + 0x98], xmm0
mov qword [r9 + 0xa8], 0
mov qword [r9 + 0xb0], r10
mov qword [r9 + 0xb8], rcx
mov qword [r9 + 0xc0], r11
mov qword [r9 + 0xc8], 0
cmp r8d, 0xae6aabcc
jbe 0x1400c2779
mov qword [r9 + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [r9 + 0x98], xmm0
mov qword [r9 + 0xa8], 0
mov qword [r9 + 0xb0], r10
mov qword [r9 + 0xb8], rcx
mov qword [r9 + 0xc0], r11
mov qword [r9 + 0xc8], 0
jmp 0x1400c26ca
test eax, eax
je 0x1400c2925
mov rcx, qword [rbp - 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dd65c0]
sub eax, dword [0x141dd65c4]
imul rax, rax, 0x4516c231
shr rax, 0x3c
add eax, 0xc357bb6d
imul rax, rax, 0x3b69e993
shr rax, 0x3d
cmp eax, 0x4e745fb7
ja 0x1400c2790
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd65c8]
add ecx, dword [0x141dd65cc]
imul ecx, ecx, 0x1f0862d4
xor ecx, 0xa0840520
and ecx, 0xace487ec
cmp ecx, 0xd30cf0ce
je 0x1400c27d0
test rax, rax
je 0x1400c2f80
nop
mov eax, dword [0x141dd6648]
and eax, dword [0x141dd664c]
xor eax, 0x688fb1f7
add eax, 0x91eb793a
cmp eax, 0xa6e39b93
ja 0x1400c2800
mov eax, dword [0x141dd6650]
add eax, dword [0x141dd6654]
mov rsi, qword [rbp - 0x28]
mov rdi, qword [rsi + 0xc0]
xor eax, 0xaabd1cb1
or eax, 0x45426208
cmp eax, 0x57302488
jne 0x1400c2856
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
add rsp, 0x20
mov ebx, 0xbf35f9a1
mov r14, qword [sym.imp.pdh.dll_PdhCollectQueryData]
nop word cs:[rax + rax]
mov r15d, dword [0x141dd6658]
sub r15d, dword [0x141dd665c]
imul r15, rbx
shr r15, 0x3e
or r15d, 0x1db2e226
add r15d, 0xbcbf9779
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
cmp r15d, 0xd0a56bb
jb 0x1400c2870
movabs rax, 0x8000000000000000
mov r15, rax
cmp qword [rsi + 0x18], rax
movzx ebx, byte [rbp - 0x11]
je 0x1400c3000
nop word cs:[rax + rax]
mov eax, dword [0x141dd6668]
or eax, dword [0x141dd666c]
add eax, 0xa4993a6c
imul rax, rax, 0x5e7cc27b
shr rax, 0x3a
and eax, 0xfffffffc
cmp eax, 0x5b182666
ja 0x1400c28d0
mov eax, dword [0x141dd6670]
or eax, dword [0x141dd6674]
and eax, 0x7a408108
or eax, 0x859f5ad6
xor eax, 0x519f53a4
cmp eax, 0x97abecb2
mov r14, qword [rbp - 0x40]
jae 0x1400c2e95
jmp 0x1400c2ed9
movzx eax, byte [0x141ddc4f8]
mov eax, dword [0x141dd65d0]
or eax, dword [0x141dd65d4]
imul eax, eax, 0x2f7bdbc6
add eax, 0xb3d55c74
cmp eax, 0x513e5286
jae 0x1400c2960
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
nop
mov eax, dword [0x141dd65d8]
and eax, dword [0x141dd65dc]
imul edi, eax, 0xfc0b3fe0
add edi, 0xcea11aeb
xor edi, 0x7e74c8f1
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
cmp edi, 0xa3a04975
ja 0x1400c2960
mov rcx, rax
nop dword [rax]
mov eax, dword [0x141dd65e0]
xor eax, dword [0x141dd65e4]
xor eax, 0x2e3f8894
shr eax, 2
imul rax, rax, 0x24df0a6f
shr rax, 0x3b
cmp eax, 0x738da62b
je 0x1400c29a0
test rcx, rcx
mov rsi, qword [rbp - 0x28]
je 0x1400c2df9
mov eax, dword [str._jKG]
xor edx, edx
div dword [0x141dd65f4]
and eax, 0xba635bd1
add eax, 0x59561e01
mov edx, 0xc96c1b33
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0xfa69780d
jbe 0x1400c2a28
movups xmm0, xmmword [0x141dbae2e]
movups xmmword [rcx + 0xe], xmm0
movups xmm0, xmmword [0x141dbae20]
movups xmmword [rcx], xmm0
mov qword [r15], 0x1e
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], 0x1e
movups xmm0, xmmword [0x141dbae2e]
movups xmm1, xmmword [0x141dbae20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd65f8]
xor edx, edx
div dword [0x141dd65fc]
shr eax, 1
imul rax, rax, 0x8b900f9
shr rax, 0x38
movups xmmword [rcx + 0xe], xmm0
movups xmmword [rcx], xmm1
mov qword [r15], 0x1e
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], 0x1e
cmp eax, 0xad10f541
je 0x1400c2a40
mov eax, dword [0x141dd6600]
sub eax, dword [0x141dd6604]
add eax, 0x1ceb8c6d
or eax, 0x96d0e421
mov ecx, 0xd96d2599
imul rcx, rax
shr rcx, 0x3b
cmp ecx, 0xde48b5ee
jbe 0x1400c2ad0
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd6608]
or eax, dword [0x141dd660c]
and eax, 0xda87a77b
imul edi, eax, 0xd996c4cc
add edi, 0x6aa204e9
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
cmp edi, 0x8b7875f
jb 0x1400c2ad0
test rax, rax
je 0x1400c2e29
lea r8, [rsi + 0x18]
nop dword [rax]
mov ecx, dword [0x141dd6628]
or ecx, dword [0x141dd662c]
xor ecx, 0xd40300
and ecx, 0xdc0328
cmp ecx, 0x554f5026
je 0x1400c2b20
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov qword [r14], 5
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 5
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp - 0x40]
mov r9, r14
call fcn.1400d9cf0
mov rcx, rsi
movzx edx, byte [rbp - 0x11]
call fcn.1400c5d20
add rsp, 0x20
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x1400c2781
mov rax, qword [rbp - 0x28]
mov r8, qword [rax + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd6630]
xor edx, edx
div dword [0x141dd6634]
xor eax, 0x20063219
or eax, 0xddf1cd06
cmp eax, 0x60354a7b
je 0x1400c2ba0
add r8, 0x48
imul rax, rcx, 0x70
xor ecx, ecx
lea r9, [0x140055820]
lea r10, [0x141dbae58]
mov r12, qword [rbp - 0x70]
mov r15, qword [rbp - 0x68]
mov rbx, qword [rbp - 0x60]
jmp 0x1400c2c0c
mov rdx, qword [rbp - 0x20]
add rdx, 0x70
inc rcx
mov rax, qword [rbp - 0x78]
add rax, 0xffffffffffffff90
mov r8, rdx
je 0x1400c2781
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x78], rax
mov eax, dword [0x141dd6638]
xor eax, dword [0x141dd663c]
imul eax, eax, 0x6af9517
xor eax, 0x52840303
mov edx, 0x80c37e71
imul rax, rdx
shr rax, 0x3f
cmp eax, 0xc52d385e
mov qword [rbp - 0x30], rcx
ja 0x1400c2d3d
nop word [rax + rax]
mov eax, dword [0x141dd6640]
xor edx, edx
div dword [0x141dd6644]
xor eax, 0x9baf53ef
add eax, 0xe813f40d
imul r14, rax, 0x5543466d
shr r14, 0x3d
mov qword [r15], rcx
mov qword [r12], r15
mov qword [r12 + 8], r9
mov qword [r13], r10
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], r12
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov rdi, r13
mov r13, qword [rbp - 0x50]
mov rcx, r13
mov rdx, rdi
call fcn.14003a080
add rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov qword [rcx], r15
lea rax, [0x140055820]
mov qword [rcx + 8], rax
lea rax, [0x141dbae80]
mov qword [rbx], rax
mov qword [rbx + 8], 2
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], rcx
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rsi, qword [rbp - 0x58]
mov rcx, rsi
mov rdx, rbx
call fcn.14003a080
mov rcx, r13
mov r13, rdi
mov rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x20]
mov r9, rsi
call fcn.1400d9cf0
lea r10, [0x141dbae58]
lea r9, [0x140055820]
mov rcx, qword [rbp - 0x30]
add rsp, 0x20
cmp r14d, 0xd6d624a0
jne 0x1400c2bf0
mov qword [r15], rcx
mov qword [r12], r15
mov qword [r12 + 8], r9
mov qword [r13], r10
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], r12
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov r14, qword [rbp - 0x50]
mov rcx, r14
mov rdx, r13
call fcn.14003a080
add rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov qword [rcx], r15
lea rax, [0x140055820]
mov qword [rcx + 8], rax
lea rax, [0x141dbae80]
mov qword [rbx], rax
mov qword [rbx + 8], 2
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], rcx
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rsi, qword [rbp - 0x58]
mov rcx, rsi
mov rdx, rbx
call fcn.14003a080
mov rcx, r14
mov rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x20]
mov r9, rsi
call fcn.1400d9cf0
lea r10, [0x141dbae58]
lea r9, [0x140055820]
mov rcx, qword [rbp - 0x30]
add rsp, 0x20
jmp 0x1400c2c50
ud2
mov eax, dword [0x141dd6610]
xor eax, dword [0x141dd6614]
or eax, 0x680800
xor eax, 0x80000201
and eax, 0xc06c0e11
cmp eax, 0x2835f11f
jbe 0x1400c2e4d
ud2
mov eax, dword [0x141dd6618]
or eax, dword [0x141dd661c]
imul eax, eax, 0xf30ea4f4
add eax, 0xf86c113b
or eax, 0xd03b5491
ud2
mov eax, dword [0x141dd6678]
imul eax, dword [0x141dd667c]
imul rdi, rax, 0x4e76d413
shr rdi, 0x3d
or edi, 0xdeb7ff24
and edi, 0xdeb7ff26
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x28]
sub rsp, 0x20
mov rcx, r14
call fcn.1400db7a0
add rsp, 0x20
cmp edi, 0xa63e19ae
jae 0x1400c2ef3
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x28]
sub rsp, 0x20
mov rcx, r14
call fcn.1400db7a0
add rsp, 0x20
jmp 0x1400c2e95
mov ecx, eax
mov r8d, 0x9209a40b
nop dword [rax + rax]
mov eax, dword [0x141dd6680]
xor edx, edx
div dword [0x141dd6684]
or eax, 0x4a022de
xor eax, 0xfd689d02
imul rax, r8
shr rax, 0x3e
cmp eax, 0xd2258ba4
ja 0x1400c2f00
test ecx, ecx
je 0x1400c2f54
mov eax, dword [0x141dd6690]
mov ecx, dword [0x141dd6694]
add eax, ecx
add eax, 0xaa6fd149
xor eax, 0xa8235279
add eax, 0x48d2815d
cmp eax, 0x9448f3e
jae 0x1400c2fbe
jmp 0x1400c2fed
ud2
mov eax, dword [0x141dd6660]
add eax, dword [0x141dd6664]
imul rax, rax, 0x49acf1bb
shr rax, 0x3e
xor eax, 0x116f515b
imul eax, eax, 0x981985ec
cmp eax, 0x40b6792b
jb 0x1400c2f80
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd6698]
imul eax, dword [0x141dd669c]
and eax, 0xd20a5e
add eax, 0xacc85367
movss xmm1, dword [0x140103db0]
subss xmm1, xmm0
movss dword [rsi + 0x30], xmm1
cmp eax, 0x7e5cb8af
jae 0x1400c3000
movss xmm1, dword [0x140103db0]
subss xmm1, xmm0
movss dword [rsi + 0x30], xmm1
jmp 0x1400c2fbe
mov eax, dword [0x141dd66a0]
sub eax, dword [0x141dd66a4]
add eax, 0x80c85245
and eax, 0xc201a740
cmp eax, 0xa9c6b43a
je 0x1400c3050
mov edi, dword [0x141dd66a8]
imul edi, dword [0x141dd66ac]
xor edi, 0xc9312100
and edi, 0xfd79a122
sub rsp, 0x20
mov rcx, rsi
mov edx, ebx
call fcn.1400c5d20
add rsp, 0x20
cmp edi, 0xbaf74ddc
jne 0x1400c3064
sub rsp, 0x20
mov rcx, rsi
mov edx, ebx
call fcn.1400c5d20
add rsp, 0x20
jmp 0x1400c301d
mov rax, qword [rsi + 8]
mov qword [rbp - 0x20], rax
mov rcx, qword [rsi + 0x10]
imul rax, rcx, 0x70
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x48], rcx
test rcx, rcx
mov rcx, qword [rbp - 0x38]
je 0x1400c3210
mov rsi, r15
mov r14, qword [rbp - 0x20]
mov rax, qword [rbp - 0x30]
lea r12, [r14 + rax]
mov r13d, 0xaa0b8ccf
mov r15d, 0xa1f44c73
movss xmm6, dword [0x140103db0]
mov rdi, qword [rbp - 0x40]
mov eax, dword [0x141dd66b8]
or eax, dword [0x141dd66bc]
add eax, 0x28624592
imul rax, r13
shr rax, 0x3e
and eax, 0xfffffffe
cmp eax, 0xae5f1f86
ja 0x1400c30b0
cmp qword [r14 + 0x48], rsi
je 0x1400c31e1
nop dword [rax]
mov eax, dword [0x141dd6708]
xor edx, edx
div dword [0x141dd670c]
add eax, 0xdc8e1f9c
cmp eax, 0x8f634e78
jb 0x1400c30e0
mov eax, dword [0x141dd6710]
xor edx, edx
div dword [0x141dd6714]
or eax, 0x7d8f7e35
and eax, 0xfdcffebd
cmp eax, 0xfb7f1c27
ja 0x1400c315e
nop dword [rax]
mov ebx, dword [0x141dd6718]
sub ebx, dword [0x141dd671c]
or ebx, 0x82248d65
and ebx, 0x8bbdafef
xor ebx, 0x502a3535
mov rdx, qword [r14 + 0x50]
mov r8, qword [r14 + 0x58]
sub rsp, 0x20
mov rcx, rdi
call fcn.1400db7a0
add rsp, 0x20
cmp ebx, 0x51fdded
jae 0x1400c3180
mov rdx, qword [r14 + 0x50]
mov r8, qword [r14 + 0x58]
sub rsp, 0x20
mov rcx, rdi
call fcn.1400db7a0
add rsp, 0x20
jmp 0x1400c3120
mov ecx, dword [0x141dd6720]
sub ecx, dword [0x141dd6724]
or ecx, 0x160744b3
imul ecx, ecx, 0x7caf0e80
or ecx, 0xd7d5392e
cmp ecx, 0x6dc88954
je 0x1400c3180
test eax, eax
mov rcx, qword [rbp - 0x38]
je 0x1400c3498
mov eax, dword [0x141dd6738]
sub eax, dword [0x141dd673c]
add eax, 0x4b5ba492
xor eax, 0x2020f004
or eax, 0x13930ef9
cmp eax, 0xc65e075d
ja 0x1400c31b2
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [r14 + 0x60], xmm1
add r14, 0x70
mov eax, dword [0x141dd6740]
or eax, dword [0x141dd6744]
imul rax, r15
shr rax, 0x3f
or eax, 0xc1e83998
cmp eax, 0x5ac1d159
jb 0x1400c31e5
cmp r14, r12
jne 0x1400c30b0
nop
mov eax, dword [0x141dd66b0]
and eax, dword [0x141dd66b4]
imul rdx, rax, 0xefe1493
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
add eax, 0xb5586611
xor eax, 0xdd1bb4f7
cmp eax, 0x69d12260
ja 0x1400c3210
cmp byte [rbp - 0x11], 0
mov rdi, qword [rbp - 0x20]
mov r14, qword [rbp - 0x30]
mov r15, qword [rbp - 0x48]
je 0x1400c2f80
mov eax, dword [0x141dd66c0]
xor edx, edx
div dword [0x141dd66c4]
xor eax, eax
mov rdx, qword [rbp - 0x28]
nop dword [rax + rax]
test al, al
jne 0x1400c3270
cmp byte [rdx + 0x38], 0
jne 0x1400c2f80
mov eax, dword [0x141dd66c8]
xor eax, dword [0x141dd66cc]
and eax, 0x200
cmp eax, 0x7893e6cf
jne 0x1400c32aa
sub rsp, 0x20
mov rdx, r15
call fcn.1400d9110
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rsi, qword [rbp - 0x28]
nop
mov ebx, dword [0x141dd66d0]
or ebx, dword [0x141dd66d4]
add ebx, 0xf47c2ea0
or ebx, 0xa87afbcd
sub rsp, 0x20
mov rdx, r15
call fcn.1400d9110
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
cmp ebx, 0xb9846c47
je 0x1400c32b0
mov rbx, qword [rcx + 8]
test r15, r15
je 0x1400c33a7
mov rax, qword [rbp - 0x38]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x1400c33a7
lea rax, [rax*8 - 8]
add r14, 0xffffffffffffff90
xor ecx, ecx
mov edx, 0x854fdc73
xor r8d, r8d
jmp 0x1400c3330
or r9b, r10b
add r8, 8
add rcx, 0x70
test r9b, r9b
jne 0x1400c33a7
mov r9d, dword [0x141dd66f8]
or r9d, dword [0x141dd66fc]
or r9d, 0x593d9b7e
shr r9d, 1
imul r9, rdx
shr r9, 0x3d
cmp r9d, 0xd841e44e
je 0x1400c339c
nop dword [rax]
mov r11d, dword [0x141dd6700]
add r11d, dword [0x141dd6704]
or r11d, 0xc6ed59a8
and r11d, 0xd6fd59b8
cmp r14, rcx
mov r9, qword [rbx + r8]
mov qword [rdi + rcx + 0x68], r9
sete r9b
cmp rax, r8
sete r10b
cmp r11d, 0x188fe399
jne 0x1400c3320
mov r9, qword [rbx + r8]
mov qword [rdi + rcx + 0x68], r9
jmp 0x1400c3360
mov rax, qword [rbp - 0x38]
mov rax, qword [rax]
nop
mov ecx, dword [0x141dd66d8]
and ecx, dword [0x141dd66dc]
or ecx, 0x967d4757
and ecx, 0xf6fd4757
cmp ecx, 0xb24f631f
je 0x1400c33b0
test rax, rax
je 0x1400c3464
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dd66e0]
sub eax, dword [0x141dd66e4]
or eax, 0x24b1bc01
xor eax, 0x4bfbed8c
add eax, 0x31a78117
cmp eax, 0x3c227cd9
jae 0x1400c3418
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov r15d, dword [0x141dd66e8]
xor r15d, dword [0x141dd66ec]
add r15d, 0x316e5d42
or r15d, 0x34b97af0
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call r14
add rsp, 0x20
cmp r15d, 0x46b4a466
je 0x1400c3420
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400c3460
mov byte [rsi + 0x38], 1
nop dword [rax + rax]
mov eax, dword [0x141dd66f0]
and eax, dword [0x141dd66f4]
add eax, 0x4d3e3b95
imul rax, rax, 0x16461829
shr rax, 0x3c
cmp eax, 0x35ee2023
jae 0x1400c3470
jmp 0x1400c2f80
mov eax, dword [0x141dd6728]
or eax, dword [0x141dd672c]
add eax, 0x64072332
and eax, 0x9978507c
imul rax, rax, 0x4f9f5253
shr rax, 0x3c
cmp eax, 0x6431ba0
ja 0x1400c34f2
mov eax, dword [0x141dd6730]
xor eax, dword [0x141dd6734]
imul eax, eax, 0x19398303
add eax, 0xa8ce9bcd
shr eax, 2
imul rax, rax, 0x20e01c27
shr rax, 0x37
ud2
ud2