Function at 0x140092ad0
Capabilities:
Encode data using xor
Enumerate files on windows
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x390]
sub rsp, 0x490
mov rax, qword [0x140221880]
xor rax, rsp
mov qword [rbp + 0x380], rax
xor ebx, ebx
mov qword [rsp + 0x70], rcx
mov dword [rsp + 0x40], ebx
mov byte [rsp + 0x78], 1
lea ecx, [rbx + 0x30]
call fcn.140190b18
mov qword [rsp + 0x48], rax
lea r13, [rbp + 0x109]
mov dword [rbp + 0xa8], ebx
xor cl, cl
mov qword [rbp + 0x108], rbx
mov qword [rax + 4], rbx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x28], rbx
mov byte [rax], 0xdc
mov r12d, dword [rax + 4]
mov dword [rbp + 0x60], r12d
mov r12d, ebx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbx
nop dword [rax]
movzx r9d, byte [r13 - 1]
mov eax, 0x80808081
movzx r10d, byte [r13]
movzx r11d, byte [r13 + 1]
movzx ebx, byte [r13 + 2]
movzx edi, byte [r13 + 3]
movzx esi, byte [r13 + 4]
movzx r14d, byte [r13 + 5]
movzx r15d, byte [r13 + 6]
movzx ecx, cl
add ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xfc9215ddfa245
movzx r8d, cl
add r8, rax
movabs rax, 0x8080808080808081
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xd9103fc58343e
movzx r8d, cl
add r8, rax
movabs rax, 0x8080808080808081
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r9d
movabs r9, 0x8080808080808081
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xa9422cffde495
movzx ecx, cl
add rcx, rax
mov rax, r9
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xfc9215ddfa245
movzx r8d, cl
add r8, rax
mov rax, r9
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xd9103fc58343e
movzx r8d, cl
add r8, rax
mov rax, r9
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r10d
movabs r10, 0xfc9215ddfa245
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xa9422cffde495
movzx ecx, cl
add rcx, rax
mov rax, r9
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r10
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xd9103fc58343e
movzx r8d, cl
add r8, rax
mov rax, r9
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movabs rax, 0xa9422cffde495
movzx ecx, cl
add rcx, rax
mov rax, r9
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, ebx
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r10
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
movzx ecx, r8b
add ecx, ebx
mov eax, 0x80808081
mul ecx
movabs r11, 0xd9103fc58343e
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r11
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, ebx
movabs rbx, 0xa9422cffde495
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx ecx, cl
add rcx, rbx
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, edi
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r10
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, edi
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r11
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, edi
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx ecx, cl
add rcx, rbx
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, esi
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
movzx r8d, cl
add r8, r10
mov rax, r9
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, esi
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r11
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, esi
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx ecx, cl
add rcx, rbx
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r14d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r10
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r14d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r11
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r14d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx ecx, cl
add rcx, rbx
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r15d
mul ecx
add r12d, 8
lea r13, [r13 + 8]
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r10
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r15d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx r8d, cl
add r8, r11
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r15d
mov r15, r9
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r9
movzx ecx, cl
add rcx, rbx
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
cmp r12d, 8
jb 0x140092b60
mov r14, qword [rsp + 0x48]
lea rdi, [rbp + 0x61]
mov r12d, dword [rbp + 0x60]
mov r13, r11
mov dword [rbp + 0x60], r12d
mov r12, r10
mov byte [r14 + 1], cl
xor cl, cl
xor esi, esi
mov r14, rbx
nop dword [rax]
movzx r9d, byte [rdi - 1]
mov eax, 0x80808081
movzx r10d, byte [rdi]
movzx r11d, byte [rdi + 1]
movzx ebx, byte [rdi + 2]
movzx ecx, cl
add ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, ebx
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, ebx
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
movzx ecx, r8b
inc ecx
lea rdi, [rdi + 4]
xor ecx, ebx
mov eax, 0x80808081
mul ecx
add esi, 4
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
cmp esi, 4
jb 0x140093120
mov r14, qword [rsp + 0x48]
lea rdi, [rbp + 0x101]
mov eax, dword [rbp + 0xa8]
mov dword [rbp + 0x100], eax
mov byte [r14 + 2], cl
xor cl, cl
xor esi, esi
movabs r14, 0xa9422cffde495
nop dword [rax]
movzx r9d, byte [rdi - 1]
mov eax, 0x80808081
movzx r10d, byte [rdi]
movzx r11d, byte [rdi + 1]
movzx ebx, byte [rdi + 2]
movzx ecx, cl
add ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r9d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r10d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
inc ecx
xor ecx, r11d
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
mov eax, 0x80808081
movzx ecx, cl
add ecx, ebx
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r12
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
mov eax, 0x80808081
movzx ecx, r8b
add ecx, ebx
mul ecx
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx r8d, cl
add r8, r13
mul r8
shr rdx, 7
imul rax, rdx, 0xff
sub r8, rax
movzx ecx, r8b
inc ecx
lea rdi, [rdi + 4]
xor ecx, ebx
mov eax, 0x80808081
mul ecx
add esi, 4
shr edx, 7
imul eax, edx, 0xff
sub ecx, eax
mov rax, r15
movzx ecx, cl
add rcx, r14
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
cmp esi, 4
jb 0x1400933e0
mov r14, qword [rsp + 0x48]
mov byte [r14 + 3], cl
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x140093686
call fcn.1401a6090
mov ecx, 0x5d2
call fcn.1401ab860
mov qword [r14 + 0x10], rax
test rax, rax
je 0x1400936b1
xor edx, edx
mov qword [r14 + 0x28], 0x5d2
mov r8d, 0x5d2
mov rcx, rax
call fcn.1401d1c40
xor edx, edx
mov qword [rbp - 0x80], r14
xorps xmm0, xmm0
xor r14d, r14d
movdqu xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r14
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140093b88
lea rdx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
jne 0x140093b71
movzx edi, byte [rsp + 0x44]
nop word [rax + rax]
mov r8d, dword [rbp + 0x138]
xor edx, edx
mov ecx, 0x410
mov qword [rbp + 0x60], r14
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x140093737
xor ecx, ecx
jmp 0x140093b52
lea r9, [rbp + 0xa8]
mov dword [rbp + 0xa8], r14d
mov r8d, 8
lea rdx, [rbp + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
test eax, eax
je 0x140093b4f
mov rdx, qword [rbp + 0x60]
lea r8, [rbp + 0x270]
mov r9d, 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
test eax, eax
je 0x140093b4f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
mov qword [rbp + 0xc0], r14
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc8], r14
lea rax, [rbp + 0x270]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400937b1
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0xb0]
call fcn.14003ce50
xorps xmm0, xmm0
mov qword [rbp + 0x120], r14
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x128], r14
lea rax, [rbp + 0x270]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400937f4
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x110]
call fcn.14003ce50
mov r10, qword [rbp + 0x120]
movsxd rdx, r10d
mov rcx, rdx
cmp rdx, 1
jle 0x14009399b
mov r8, qword [rbp + 0x128]
mov r9, qword [rbp + 0x110]
nop word [rax + rax]
cmp r8, 0xf
lea rax, [rbp + 0x110]
cmova rax, r9
cmp byte [rax + rcx - 1], 0x5c
je 0x140093866
dec edx
dec rcx
cmp rcx, 1
jg 0x140093840
jmp 0x14009399b
movsxd r15, edx
cmp r15, r10
ja 0x14009388b
cmp r8, 0xf
mov qword [rbp + 0x120], r15
lea rax, [rbp + 0x110]
cmova rax, r9
mov byte [rax + r15], 0
jmp 0x1400938eb
mov r14, r15
mov rax, r8
sub r14, r10
sub rax, r10
cmp r14, rax
ja 0x1400938cd
cmp r8, 0xf
lea rax, [r10 + r14]
lea rsi, [rbp + 0x110]
mov qword [rbp + 0x120], rax
cmova rsi, r9
mov r8, r14
add rsi, r10
xor edx, edx
mov rcx, rsi
call fcn.1401d1c40
mov byte [rsi + r14], 0
jmp 0x1400938e8
mov r9, r14
mov byte [rsp + 0x20], 0
movzx r8d, dil
lea rcx, [rbp + 0x110]
mov rdx, r14
call fcn.1400ff9f0
xor r14d, r14d
mov rax, qword [rbp + 0xc0]
xorps xmm0, xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
movups xmmword [rsp + 0x50], xmm0
cmp rax, r15
jb 0x140094653
sub rax, r15
lea rdx, [rbp + 0xb0]
mov r8, 0xffffffffffffffff
lea rcx, [rsp + 0x50]
cmp rax, r8
cmovb r8, rax
cmp qword [rbp + 0xc8], 0xf
cmova rdx, qword [rbp + 0xb0]
add rdx, r15
call fcn.14003ce50
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140093983
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009397e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140094659
call fcn.140190a2c
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm1
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x50]
call fcn.140040c90
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x30]
call fcn.140040c90
xorps xmm0, xmm0
mov qword [rbp], r14
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp + 8], r14
lea rax, [rbp + 0x15c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400939e0
lea rdx, [rbp + 0x15c]
lea rcx, [rbp - 0x10]
call fcn.14003ce50
mov rdx, qword [rbp + 0xd8]
mov eax, dword [rbp + 0x138]
mov dword [rbp + 0x10], eax
cmp rdx, qword [rbp + 0xe0]
je 0x140093ab2
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movaps xmm0, xmmword [rbp - 0x50]
movups xmmword [rdx], xmm0
movaps xmm1, xmmword [rbp - 0x40]
xorps xmm0, xmm0
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], r14
mov qword [rdx + 0x38], r14
movaps xmm0, xmmword [rbp - 0x30]
movups xmmword [rdx + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x20]
xorps xmm0, xmm0
movups xmmword [rdx + 0x30], xmm1
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
movups xmmword [rdx + 0x40], xmm0
mov qword [rdx + 0x50], r14
mov qword [rdx + 0x58], r14
movaps xmm0, xmmword [rbp - 0x10]
movups xmmword [rdx + 0x40], xmm0
movaps xmm1, xmmword [rbp]
movups xmmword [rdx + 0x50], xmm1
mov eax, dword [rbp + 0x10]
mov qword [rbp], r14
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
mov dword [rdx + 0x60], eax
add qword [rbp + 0xd8], 0x68
jmp 0x140093ac2
lea r8, [rbp - 0x50]
lea rcx, [rbp + 0xd0]
call fcn.14010de40
lea rcx, [rbp - 0x50]
call fcn.140092790
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x140093b0c
mov rcx, qword [rbp + 0x110]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140093b07
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140094659
call fcn.140190a2c
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140093b58
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140093b48
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140094659
call fcn.140190a2c
jmp 0x140093b58
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
je 0x140093710
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x140093b88
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rbp + 0xd8]
xorps xmm0, xmm0
mov rsi, qword [rbp + 0xd0]
mov r13, r14
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x108], rbx
movdqu xmmword [rbp + 0xe8], xmm0
mov rdi, qword [rbp + 0xf0]
cmp rsi, rbx
je 0x140094556
mov rax, qword [0x140329c98]
xor r12b, r12b
mov rcx, qword [0x140329ca0]
movabs r15, 0x7fffffffffffffff
cmp rax, rcx
je 0x140093bf7
mov edx, dword [rsi + 0x60]
cmp dword [rax], edx
je 0x140093bf4
add rax, 4
cmp rax, rcx
jne 0x140093be5
jmp 0x140093bf7
mov r12b, 1
mov rbx, qword [rbp + 0xe8]
cmp rbx, rdi
je 0x140093c55
mov r14, qword [rsi + 0x18]
mov r15, qword [rsi + 0x10]
nop dword [rax + rax]
mov rdx, rsi
cmp r14, 0xf
jbe 0x140093c1c
mov rdx, qword [rsi]
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
mov r8, qword [rbx + 0x10]
jbe 0x140093c2d
mov rcx, qword [rbx]
cmp r8, r15
jne 0x140093c3f
call fcn.1401d1fe0
test eax, eax
je 0x140094506
add rbx, 0x20
cmp rbx, rdi
jne 0x140093c10
xor r14d, r14d
movabs r15, 0x7fffffffffffffff
test r12b, r12b
jne 0x140094506
cmp rdi, r13
je 0x140093c78
mov rdx, rsi
mov rcx, rdi
call fcn.140040c90
add qword [rbp + 0xf0], 0x20
jmp 0x140093c8a
mov r8, rsi
lea rcx, [rbp + 0xe8]
mov rdx, rdi
call fcn.14010e960
mov rcx, qword [rsi + 0x10]
xor eax, eax
mov qword [rbp + 0xc0], rax
xorps xmm0, xmm0
mov rax, r15
sub rax, rcx
movups xmmword [rbp + 0xb0], xmm0
cmp rax, 1
jb 0x140094671
cmp qword [rsi + 0x18], 0xf
mov r9, rsi
jbe 0x140093cbe
mov r9, qword [rsi]
lea rax, [0x1401fe168]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x78]
call fcn.140101a10
cmp qword [rbp - 0x60], 0xf
lea rcx, [rbp - 0x78]
xorps xmm0, xmm0
mov qword [rbp + 0xc0], r14
cmova rcx, qword [rbp - 0x78]
lea rdx, [rbp + 0x130]
movdqu xmmword [rbp + 0xb0], xmm0
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140093e76
nop dword [rax + rax]
test byte [rbp + 0x130], 0x10
jne 0x140093e55
xorps xmm0, xmm0
mov qword [rsp + 0x60], r14
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], r14
lea rax, [rbp + 0x15c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140093d50
lea rdx, [rbp + 0x15c]
lea rcx, [rsp + 0x50]
call fcn.14003ce50
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x20]
call fcn.140042c50
mov rdx, qword [rbp + 0xb8]
cmp rdx, qword [rbp + 0xc0]
je 0x140093dbe
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
add qword [rbp + 0xb8], 0x20
jmp 0x140093dcd
mov r8, rax
lea rcx, [rbp + 0xb0]
call fcn.14010e770
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140093e08
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140093e03
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009465f
call fcn.140190a2c
mov rdx, qword [rsp + 0x68]
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
cmp rdx, 0xf
jbe 0x140093e55
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140093e50
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009465f
call fcn.140190a2c
lea rdx, [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140093d20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [rsp + 0x40]
test dil, 1
je 0x140093e93
and edi, 0xfffffffe
lea rcx, [rbp + 0xb0]
mov dword [rsp + 0x40], edi
call fcn.1400bb3a0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140093ece
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140093ec9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140094665
call fcn.140190a2c
xorps xmm0, xmm0
mov qword [rbp + 0x98], r14
xor r8d, r8d
mov qword [rbp + 0xa0], r14
lea rdx, [0x1401f821e]
lea rcx, [rbp + 0x88]
movups xmmword [rbp + 0x88], xmm0
call fcn.14003ce50
xorps xmm0, xmm0
mov qword [rbp + 0x78], r14
xor r8d, r8d
mov qword [rbp + 0x80], r14
lea rdx, [0x1401f821e]
lea rcx, [rbp + 0x68]
movups xmmword [rbp + 0x68], xmm0
call fcn.14003ce50
mov rbx, qword [rbp + 0xb0]
mov r15, qword [rbp + 0xb8]
cmp rbx, r15
je 0x1400941e5
nop dword [rax + rax]
mov r14, qword [rbx + 0x18]
mov rcx, rbx
mov rdi, qword [rbx + 0x10]
cmp r14, 0xf
jbe 0x140093f54
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140093f71
mov r8, rdi
lea rdx, str.8c9f4ca526a4899af01688ae0bd65b207b3fb958b278daf7cb70cd74ff2c0eb6
call fcn.1401d1fe0
test eax, eax
je 0x140094377
mov rcx, rbx
cmp r14, 0xf
jbe 0x140093f7d
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140093f9a
mov r8, rdi
lea rdx, str.1e0b1988caea9af9a64497870ed45b62516e7a5263073973869790e8f57a83fb
call fcn.1401d1fe0
test eax, eax
je 0x14009420f
mov rcx, rbx
cmp r14, 0xf
jbe 0x140093fa6
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140093fc3
mov r8, rdi
lea rdx, str.7fcb80beb9b58f06e3a5459b1b20d5dae2aa1fb4fee7dba829db2206f2317b75
call fcn.1401d1fe0
test eax, eax
je 0x14009420f
mov rcx, rbx
cmp r14, 0xf
jbe 0x140093fcf
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140093fec
mov r8, rdi
lea rdx, str.38b58d423ad26984d45daf2bcc0a50b390648ffbe5c49cb3373d68c00a326f71
call fcn.1401d1fe0
test eax, eax
je 0x14009420f
mov rcx, rbx
cmp r14, 0xf
jbe 0x140093ff8
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140094015
mov r8, rdi
lea rdx, str.036e899b8ac36e4d224a98b511ac25ed51c0b0ebf62e4ffd9b684210d633d028
call fcn.1401d1fe0
test eax, eax
je 0x14009420f
mov rcx, rbx
cmp r14, 0xf
jbe 0x140094021
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x14009403e
mov r8, rdi
lea rdx, str.c29d35b9c2c55def74e77b94eda5263e18a5c77357d2ad0786dafb6490c4b153
call fcn.1401d1fe0
test eax, eax
je 0x140094377
mov rcx, rbx
cmp r14, 0xf
jbe 0x14009404a
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140094067
mov r8, rdi
lea rdx, str.dcacd41cd441975c79e79f919f825e220ae78dc22a85844d1a2396112a93ec2e
call fcn.1401d1fe0
test eax, eax
je 0x1400942c1
mov rcx, rbx
cmp r14, 0xf
jbe 0x140094073
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140094090
mov r8, rdi
lea rdx, str.00caf71c18bf668de733aa8ddf3a80acd9722c346fd39ec15580fe709e6bbbe5
call fcn.1401d1fe0
test eax, eax
je 0x1400942c1
mov rcx, rbx
cmp r14, 0xf
jbe 0x14009409c
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x1400940b9
mov r8, rdi
lea rdx, str.0fd6ce08ad5679888967b594321042581cad840f22ffdf69bedd8af0c79d0a2c
call fcn.1401d1fe0
test eax, eax
je 0x1400942c1
mov rcx, rbx
cmp r14, 0xf
jbe 0x1400940c5
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x1400940e2
mov r8, rdi
lea rdx, str.a71e682ed41e7e1e81e8e3e5b630e71f26e56ef513f6b48ad0100ebac2d073b2
call fcn.1401d1fe0
test eax, eax
je 0x140094377
mov rcx, rbx
cmp r14, 0xf
jbe 0x1400940ee
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x14009410b
mov r8, rdi
lea rdx, str.5a7dd24ec6e751b71d6b367e07b57d122a6359034e09fb818885a1334371f572
call fcn.1401d1fe0
test eax, eax
je 0x14009431c
mov rcx, rbx
cmp r14, 0xf
jbe 0x140094117
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140094134
mov r8, rdi
lea rdx, str.a96c95613b653b7d144f5d04815122a9972e18d559fab5d88e9d6f605ecc4c6c
call fcn.1401d1fe0
test eax, eax
je 0x1400942c1
mov rcx, rbx
cmp r14, 0xf
jbe 0x140094140
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x14009415d
mov r8, rdi
lea rdx, str.9ec1601d746c6bb1fc6881ea50d2c2bfaf6228c28466726e34e6d1d41e44740c
call fcn.1401d1fe0
test eax, eax
je 0x1400942c1
mov rcx, rbx
cmp r14, 0xf
jbe 0x140094169
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x140094186
mov r8, rdi
lea rdx, str.fe50e520dadc90004d83e3f705a7b7f6339014255a0fb4f63be42571cfd72e78
call fcn.1401d1fe0
test eax, eax
je 0x14009420f
mov rcx, rbx
cmp r14, 0xf
jbe 0x140094192
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x1400941af
mov r8, rdi
lea rdx, str.73dde8293f177db88e6c6dd108550079f96e08e6f02c5414c7056faec5a417d5
call fcn.1401d1fe0
test eax, eax
je 0x140094377
mov rcx, rbx
cmp r14, 0xf
jbe 0x1400941bb
mov rcx, qword [rbx]
cmp rdi, 0x40
jne 0x1400941d8
mov r8, rdi
lea rdx, str.46cfec3251fe353a4cf3fc269a1101f8a7c2326b07a283897012583c5e6628b0
call fcn.1401d1fe0
test eax, eax
je 0x140094377
add rbx, 0x20
cmp rbx, r15
jne 0x140093f40
mov rdx, qword [0x140329ca0]
lea r8, [rsi + 0x60]
cmp rdx, qword [0x140329ca8]
je 0x140094468
mov eax, dword [r8]
mov dword [rdx], eax
add qword [0x140329ca0], 4
jmp 0x14009446d
lea rax, [rbp + 0x88]
cmp rax, rsi
je 0x14009426e
cmp qword [rsi + 0x18], 0xf
mov r9, rsi
mov rdi, qword [rsi + 0x10]
jbe 0x14009422c
mov r9, qword [rsi]
mov rax, qword [rbp + 0xa0]
cmp rdi, rax
ja 0x14009425f
cmp rax, 0xf
lea rbx, [rbp + 0x88]
mov r8, rdi
mov rdx, r9
cmova rbx, qword [rbp + 0x88]
mov rcx, rbx
call fcn.1401d15a0
mov byte [rdi + rbx], 0
jmp 0x14009426e
mov rdx, rdi
lea rcx, [rbp + 0x88]
call fcn.1400ff8b0
lea r9, [rsi + 0x40]
lea rax, [rbp + 0x68]
cmp rax, r9
je 0x14009442a
cmp qword [r9 + 0x18], 0xf
mov rdi, qword [r9 + 0x10]
jbe 0x14009428d
mov r9, qword [r9]
mov rax, qword [rbp + 0x80]
cmp rdi, rax
ja 0x14009441e
cmp rax, 0xf
lea rbx, [rbp + 0x68]
mov r8, rdi
mov rdx, r9
cmova rbx, qword [rbp + 0x68]
mov rcx, rbx
call fcn.1401d15a0
mov byte [rbx + rdi], 0
jmp 0x14009442a
lea rax, [rbp + 0x88]
cmp rax, rsi
je 0x1400943d6
cmp qword [rsi + 0x18], 0xf
mov r9, rsi
mov rdi, qword [rsi + 0x10]
jbe 0x1400942e2
mov r9, qword [rsi]
mov rax, qword [rbp + 0xa0]
cmp rdi, rax
ja 0x1400943c7
cmp rax, 0xf
lea rbx, [rbp + 0x88]
mov r8, rdi
mov rdx, r9
cmova rbx, qword [rbp + 0x88]
mov rcx, rbx
call fcn.1401d15a0
mov byte [rdi + rbx], 0
jmp 0x1400943d6
lea rax, [rbp + 0x88]
cmp rax, rsi
je 0x14009426e
cmp qword [rsi + 0x18], 0xf
mov r9, rsi
mov rdi, qword [rsi + 0x10]
jbe 0x14009433d
mov r9, qword [rsi]
mov rax, qword [rbp + 0xa0]
cmp rdi, rax
ja 0x14009425f
cmp rax, 0xf
lea rbx, [rbp + 0x88]
mov r8, rdi
mov rdx, r9
cmova rbx, qword [rbp + 0x88]
mov rcx, rbx
call fcn.1401d15a0
mov byte [rbx + rdi], 0
jmp 0x14009426e
lea rax, [rbp + 0x88]
cmp rax, rsi
je 0x1400943d6
cmp qword [rsi + 0x18], 0xf
mov r9, rsi
mov rdi, qword [rsi + 0x10]
jbe 0x140094394
mov r9, qword [rsi]
mov rax, qword [rbp + 0xa0]
cmp rdi, rax
ja 0x1400943c7
cmp rax, 0xf
lea rbx, [rbp + 0x88]
mov r8, rdi
mov rdx, r9
cmova rbx, qword [rbp + 0x88]
mov rcx, rbx
call fcn.1401d15a0
mov byte [rbx + rdi], 0
jmp 0x1400943d6
mov rdx, rdi
lea rcx, [rbp + 0x88]
call fcn.1400ff8b0
lea r9, [rsi + 0x40]
lea rax, [rbp + 0x68]
cmp rax, r9
je 0x14009442a
cmp qword [r9 + 0x18], 0xf
mov rdi, qword [r9 + 0x10]
jbe 0x1400943f1
mov r9, qword [r9]
mov rax, qword [rbp + 0x80]
cmp rdi, rax
ja 0x14009441e
cmp rax, 0xf
lea rbx, [rbp + 0x68]
mov r8, rdi
mov rdx, r9
cmova rbx, qword [rbp + 0x68]
mov rcx, rbx
call fcn.1401d15a0
mov byte [rdi + rbx], 0
jmp 0x14009442a
mov rdx, rdi
lea rcx, [rbp + 0x68]
call fcn.1400ff8b0
lea rdx, [rsi + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140040c90
mov rcx, qword [rsp + 0x48]
mov r8, rax
xor edx, edx
call fcn.1400e98b0
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.140040c90
mov rcx, qword [rsp + 0x48]
mov r8, rax
xor edx, edx
call fcn.1400e98b0
mov byte [rsp + 0x78], 0
jmp 0x14009446d
call fcn.14010dc60
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x1400944ab
mov rcx, qword [rbp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400944a6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009466b
call fcn.140190a2c
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x1400944ec
mov rcx, qword [rbp + 0x88]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400944e7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009466b
call fcn.140190a2c
lea rcx, [rbp + 0xb0]
call fcn.1400bb3a0
mov r13, qword [rbp + 0xf8]
mov rdi, qword [rbp + 0xf0]
add rsi, 0x68
cmp rsi, qword [rbp + 0x108]
je 0x14009451b
xor r14d, r14d
jmp 0x140093bc2
mov rbx, qword [rbp + 0xd8]
mov rsi, qword [rbp + 0xd0]
cmp rsi, rbx
je 0x140094556
nop
mov rcx, rsi
call fcn.140092790
add rsi, 0x68
cmp rsi, rbx
jne 0x140094530
mov rax, qword [rbp + 0xd0]
mov rdi, qword [rbp + 0xf0]
mov qword [rbp + 0xd8], rax
mov rcx, qword [rbp + 0xe8]
cmp rcx, rdi
je 0x140094578
mov rdx, rdi
call fcn.1400fdeb0
mov rax, qword [rbp + 0xe8]
mov qword [rbp + 0xf0], rax
movups xmm0, xmmword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
lea rcx, [rbp + 0xe8]
movups xmmword [rsi], xmm0
call fcn.1400bb3a0
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x14009461a
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x1400945c8
nop dword [rax]
mov rcx, rbx
call fcn.140092790
add rbx, 0x68
cmp rbx, rdi
jne 0x1400945b0
mov rbx, qword [rbp + 0xd0]
mov rcx, qword [rbp + 0xe0]
movabs rax, 0x4ec4ec4ec4ec4ec5
sub rcx, rbx
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rbx
imul rdx, rdx, 0x68
cmp rdx, 0x1000
jb 0x140094612
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009464d
mov rcx, rbx
call fcn.140190a2c
mov rax, rsi
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.140190770
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401ac538
int3
call fcn.1400beea0
int3
call fcn.1401ac538
int3
call fcn.1401ac538
int3
call fcn.1401ac538
int3
call fcn.1401ac538
int3
call fcn.14003b930
int3