Function at 0x14001abf0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov r14, rcx
cmp qword [rcx], 0
je 0x14001acde
mov rdi, qword [r14 + 8]
mov eax, dword [0x141586c30]
sub eax, dword [0x141586c34]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x7276e288
mov r8d, edx
and r8d, 0xe8e639a1
and ecx, 0x5090456
imul ecx, r8d
and edx, 0x1719c65e
or eax, 0x777fe6de
imul eax, edx
add eax, ecx
xor eax, 0x1c371679
cmp eax, 0x17c02b4f
jae 0x14001ac6b
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141586c38]
mov ecx, dword [0x141586c3c]
mov edx, eax
and edx, ecx
or eax, ecx
lea ebx, [rdx + rax]
add ebx, 0x1a47ddff
mov eax, ebx
not eax
mov ecx, ebx
and ecx, 0x9d8b1603
and eax, 0x6274e9fc
imul eax, ecx
mov ecx, ebx
and ecx, 0x6274e9fc
or ebx, 0x6274e9fc
imul ebx, ecx
add ebx, eax
xor ebx, 0x5662302b
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call rsi
cmp ebx, 0xadcd971c
ja 0x14001ac80
xor eax, eax
test al, al
jne 0x14001ace0
mov rdi, qword [r14 + 0x28]
mov qword [rsp + 0x20], r14
mov rsi, qword [r14 + 0x30]
test rsi, rsi
je 0x14001aec5
xor r15d, r15d
mov r12d, 0xbf476da5
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141586c40]
imul eax, dword [0x141586c44]
mov ecx, eax
or ecx, 0x50b137b7
xor ecx, 0x93186174
or eax, 0x6ce79e8b
and eax, ecx
imul eax, eax, 0xe43d4382
cmp eax, 0x914a03d
je 0x14001ad10
lea rax, [r15 + r15*4]
cmp qword [rdi + rax*8 + 8], 0
je 0x14001ae20
lea rax, [rdi + rax*8]
mov rbx, qword [rax + 0x10]
mov r14, qword [0x1415acb98]
mov eax, dword [0x141586c48]
mov ecx, dword [0x141586c4c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
imul rcx, r12
shr rcx, 0x3e
mov eax, ecx
xor eax, 2
and eax, ecx
add eax, 0xd93091af
cmp eax, 0xfdf4bc13
jbe 0x14001ada0
mov rcx, r14
xor edx, edx
mov r8, rbx
call fcn.14020ae70
nop
mov eax, dword [0x141586c50]
and eax, dword [0x141586c54]
mov ebp, eax
xor ebp, 0x631fd1a3
xor eax, 0x8c602c14
and eax, 0xad6ead15
mov ecx, ebp
and ecx, 0x529152ea
imul ecx, eax
mov eax, ebp
and eax, 0xad6ead15
or ebp, 0xad6ead15
imul ebp, eax
add ebp, ecx
xor ebp, 0x967f661f
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
cmp ebp, 0x23354247
jb 0x14001ada0
nop word cs:[rax + rax]
mov eax, dword [str.D__6]
mov ecx, dword [0x141586c5c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
xor eax, 0x1dd0b99c
cmp eax, 0xc50b94a0
je 0x14001ae00
inc r15
nop word cs:[rax + rax]
mov eax, dword [0x141586c60]
mov ecx, dword [0x141586c64]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x499821a9
and eax, 0x40c54
or eax, r9d
or edx, r8d
and r8d, 0x499821a9
and ecx, 0x40c54
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
or edx, 0xb663d202
add edx, 0x761910fb
imul rax, rdx, 0x4b0de767
shr rax, 0x3d
cmp eax, 0xf8ebd778
ja 0x14001ae30
nop
mov eax, dword [0x141586c68]
xor eax, dword [0x141586c6c]
xor eax, 0xb583ace
add eax, 0xf1f9e3af
mov ecx, eax
xor ecx, 0xd462ebb0
or eax, 0x2b9d144f
and eax, ecx
cmp eax, 0x7e27c01c
ja 0x14001ae90
cmp r15, rsi
jne 0x14001ad10
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x14001aed0
mov r14, qword [rsp + 0x20]
mov rax, qword [r14 + 0x20]
nop dword [rax]
mov ecx, dword [0x141586c70]
imul ecx, dword [0x141586c74]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xe2a101ee
and edx, 0x1d5efe11
imul edx, r8d
mov r8d, ecx
and r8d, 0x1d5efe11
or ecx, 0x1d5efe11
imul ecx, r8d
add ecx, edx
imul rcx, rcx, 0x455c740d
shr rcx, 0x3e
or ecx, 0x4fe671d2
cmp ecx, 0x3cc7ed76
jb 0x14001aee0
test rax, rax
je 0x14001b010
mov rbx, qword [0x1415acb98]
mov eax, dword [0x141586c78]
xor edx, edx
div dword [0x141586c7c]
xor eax, 0x22b5544e
add eax, 0xd3092a6f
not eax
or eax, 0x7d7dee2b
add eax, 0xf8b715da
jae 0x14001afaa
mov eax, dword [0x141586c80]
or eax, dword [0x141586c84]
and eax, 0xe84bc0e0
mov esi, eax
not esi
or eax, 0x8aa49334
or esi, 0x755b6ccb
and esi, eax
not esi
add esi, 0xeee12dee
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0x1022f1ff
jbe 0x14001afc0
mov rcx, rbx
xor edx, edx
mov r8, rdi
call fcn.14020ae70
jmp 0x14001af6a
mov eax, dword [0x141586c88]
mov ecx, dword [0x141586c8c]
add eax, ecx
add eax, 0xdb231461
imul rax, rax, 0x76ba469b
shr rax, 0x3a
mov ecx, eax
not ecx
mov edx, eax
and edx, 6
and ecx, 0x147016d9
imul ecx, edx
mov edx, eax
and edx, 0xfffffff9
or eax, 0x147016d9
imul eax, edx
add eax, ecx
cmp eax, 0x4d7a0761
ja 0x14001afc0
nop word cs:[rax + rax]
mov eax, dword [0x141586c90]
mov ecx, dword [0x141586c94]
mov edx, eax
or edx, ecx
not eax
not ecx
and ecx, eax
not ecx
and ecx, edx
mov eax, ecx
not eax
or ecx, 0xb7f0b5a5
or eax, 0x9004e610
and eax, ecx
and eax, 0xb7f4f7b5
imul rcx, rax, 0xc934e55
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0xc2d85188
ja 0x14001b010
mov rdi, qword [r14 + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141586c98]
mov ecx, dword [0x141586c9c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
or eax, 0x208daf21
mov ecx, eax
and ecx, 0x707314d4
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xf07314d4
or eax, 0x665c45cb
cmp eax, 0xa98fd2e8
ja 0x14001b070
test rdi, rdi
je 0x14001be80
mov eax, dword [0x141586ca0]
xor ecx, ecx
xor edx, edx
div dword [0x141586ca4]
nop word cs:[rax + rax]
test cl, cl
jne 0x14001b0d0
nop word cs:[rax + rax]
mov eax, dword [0x141586ca8]
or eax, dword [0x141586cac]
imul rcx, rax, 0x41401127
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x238e7b00
je 0x14001b0e0
mov r9, qword [r14 + 0x98]
mov r13, qword [r14 + 0x90]
test r9, r9
je 0x14001bc59
nop
mov eax, dword [0x141586cb0]
mov ecx, dword [0x141586cb4]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x79328820
or ecx, 0x86cd77df
and ecx, eax
add ecx, 0x997a3fd3
imul rax, rcx, 0x7fe70871
shr rax, 0x3e
cmp eax, 0x9671c227
ja 0x14001b120
movabs rax, 0x82a80722f13c55d8
not rax
mov qword [rsp + 0x30], rax
mov r14d, 0xd802e74f
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, rdi
xor edi, edi
nop word cs:[rax + rax]
test rdi, rdi
je 0x14001b1a0
mov r12, rbx
mov rbx, rdi
jmp 0x14001b3c3
mov eax, dword [0x141586cf8]
add eax, dword [0x141586cfc]
mov ecx, eax
xor ecx, 0x80420240
xor eax, 0x7281a004
or ecx, 0x12910804
and ecx, eax
or ecx, 0xd2c55bb
cmp ecx, 0x3fb9dd1a
ja 0x14001b1a0
test r13, r13
je 0x14001b3bd
nop dword [rax + rax]
mov eax, dword [0x141586d00]
mov ecx, eax
not ecx
or ecx, dword [0x141586d04]
add eax, ecx
inc eax
or eax, 0x480bfe67
add eax, 0xc4296e1a
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x38056011
and ecx, 0xc7fa1388
imul ecx, edx
mov edx, eax
and edx, 0xc7f80f88
or eax, 0xc7fa1f88
imul eax, edx
add eax, ecx
cmp eax, 0x921b1635
je 0x14001b1e0
mov rax, r13
not rax
or rax, 7
add rax, r13
inc rax
xor ecx, ecx
test cl, cl
jne 0x14001b23c
test rax, rax
je 0x14001b2da
nop dword [rax + rax]
mov ecx, dword [0x141586d08]
mov edx, dword [0x141586d0c]
mov r8d, ecx
and r8d, edx
or ecx, edx
add r8d, ecx
add r8d, 0xd8eb6f60
xor r8d, 0x6dbea0a1
add r8d, 0xf31c9cb1
mov rcx, r13
and rcx, 0xfffffffffffffff8
mov edx, 0
cmp r8d, 0xe8bed587
jb 0x14001b250
nop word cs:[rax + rax]
mov r8d, dword [0x141586d14]
add r8d, dword [0x141586d10]
imul r8, r8, 0x69b495ff
shr r8, 0x3e
imul r8d, r8d, 0x616b58d1
cmp r8d, 0xf38f6b3e
ja 0x14001b2a0
inc rdx
mov rbx, qword [rbx + 0x3d8]
cmp rdx, rax
jne 0x14001b2a0
jmp 0x14001b2e0
mov rcx, r13
nop dword [rax]
mov eax, dword [0x141586d18]
xor edx, edx
div dword [str._n_E]
mov edx, eax
not edx
or edx, 0xaccba0ed
add edx, eax
imul eax, edx, 0xc2aa6e71
add eax, 0xc2aa6e71
imul rax, rax, 0x5523fb91
shr rax, 0x3e
cmp eax, 0xc1ecf59c
je 0x14001b2e0
cmp r13, 8
jb 0x14001b3bd
nop word cs:[rax + rax]
mov eax, dword [0x141586d20]
and eax, dword [0x141586d24]
or eax, 0xbb2ef1f0
imul eax, eax, 0x80ec1e6b
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xcea1b5be
and edx, 0x315e4a41
imul edx, r8d
mov r8d, eax
and r8d, 0x315e4a41
or eax, 0x315e4a41
imul eax, r8d
add eax, edx
cmp eax, 0x6d0e58de
je 0x14001b330
mov rax, qword [rbx + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rbx, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14001b330
xor r13d, r13d
xor r12d, r12d
movabs rax, 0x82a80722f13c55d8
add r9, rax
add r9, qword [rsp + 0x30]
mov eax, dword [0x141586d38]
xor edx, edx
div dword [0x141586d3c]
nop word cs:[rax + rax]
mov eax, dword [0x141586d40]
mov ecx, dword [0x141586d44]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul rax, r14
shr rax, 0x3d
imul eax, eax, 0xf04f391
and eax, 0x54caac7c
cmp eax, 0xfb5af1de
ja 0x14001b3f0
mov qword [rsp + 0x28], r9
movzx eax, word [rbx + 0x3d2]
cmp r13, rax
jae 0x14001b460
mov rbp, r13
mov r15, rbx
jmp 0x14001b5d9
mov r13d, 0x8017ce59
nop word cs:[rax + rax]
mov r15, qword [rbx + 0x160]
test r15, r15
je 0x14001c0d1
mov eax, dword [0x141586d88]
xor edx, edx
div dword [0x141586d8c]
or eax, 0x45da46b7
imul rax, r13
shr rax, 0x3f
or eax, 0x68600a06
cmp eax, 0x7c668951
jbe 0x14001b4c0
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call fcn.14020ae70
nop dword [rax + rax]
mov eax, dword [str._r_M4O]
xor edx, edx
div dword [0x141586d94]
mov edi, eax
not eax
and eax, 0xafa77d63
and edi, 0x5058829c
sub edi, eax
add edi, 0xa7293c69
mov eax, edi
xor eax, 0x4e7a59b8
or edi, 0xb185a647
and edi, eax
movzx ebp, word [rbx + 0x3d0]
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call rsi
cmp edi, 0xcfe2ed0f
je 0x14001b4c0
inc r12
movzx eax, word [r15 + 0x3d2]
mov ecx, dword [0x141586d98]
mov edx, ecx
not edx
or edx, dword [0x141586d9c]
add ecx, edx
inc ecx
imul rcx, rcx, 0x3c8d023d
shr rcx, 0x3c
imul ecx, ecx, 0xccdac362
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xcf0e6b92
and edx, 0x30f1946c
imul edx, r8d
mov r8d, ecx
and r8d, 0x30f1946c
or ecx, 0x30f1946c
imul ecx, r8d
add ecx, edx
cmp ecx, 0xfa8d6e6b
je 0x14001b51c
nop word [rax + rax]
mov ecx, dword [0x141586da0]
imul ecx, dword [0x141586da4]
add ecx, 0x92cf3b8d
mov edx, ecx
not edx
and edx, 0xc4b31a89
mov r8d, ecx
and r8d, 0x3b4ce576
imul r8d, edx
mov edx, ecx
and edx, 0xc4b31a89
or ecx, 0xc4b31a89
imul ecx, edx
add ecx, r8d
add ecx, 0x859e62a
cmp ecx, 0x571a4b99
jb 0x14001b580
mov rbx, r15
cmp bp, ax
jae 0x14001b470
test r12, r12
mov r11d, 0xba9a28b9
je 0x14001b880
nop dword [rax + rax]
mov eax, dword [0x141586d48]
imul eax, dword [0x141586d4c]
mov ecx, eax
xor ecx, 0x8d5d70f
and ecx, eax
mov eax, ecx
not eax
and eax, 0x6941b8c3
mov edx, ecx
and edx, 0x96be473c
imul edx, eax
mov eax, ecx
and eax, 0x6941b8c3
or ecx, 0x6941b8c3
imul ecx, eax
add ecx, edx
or ecx, 0x413552a6
cmp ecx, 0x807c7033
jb 0x14001b5f0
nop dword [rax + rax]
mov eax, dword [0x141586d50]
mov ecx, dword [0x141586d54]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x5f567709
and eax, 0xa0a988f6
imul eax, edx
mov edx, ecx
and edx, 0xa0a988f6
or ecx, 0xa0a988f6
imul ecx, edx
add eax, ecx
add eax, 0x661c7640
mov ecx, eax
and ecx, 0x51b29ff4
add ecx, ecx
sub eax, ecx
add eax, 0xd1b29ff4
cmp eax, 0x86ea25b7
ja 0x14001b640
mov rcx, r12
mov rdi, qword [r15 + rbp*8 + 0x3e0]
dec rcx
je 0x14001b871
lea r8, [r12 - 2]
mov eax, dword [0x141586d58]
mov edx, dword [0x141586d5c]
mov r9d, eax
and r9d, edx
or eax, edx
add eax, r9d
or eax, 0x43f45e25
add eax, 0x66696c7f
not eax
mov edx, eax
or edx, 0x2fedc6b4
or eax, 0x2fedc6b5
and eax, edx
add eax, 0x6c9b722e
jb 0x14001b6b5
mov r9d, ecx
and r9d, 7
nop word cs:[rax + rax]
mov eax, dword [0x141586d60]
add eax, dword [0x141586d64]
and eax, 0x22500fb1
mov edx, eax
xor edx, 0x1080
xor eax, 0x41024939
and eax, 0x63024f39
and edx, 0x501080
or edx, eax
xor edx, 0x72ee5ff4
cmp edx, 0x1af56d64
jb 0x14001b700
test r9, r9
je 0x14001b790
xor eax, eax
mov rdi, qword [rdi + 0x3d8]
mov ecx, eax
and ecx, 1
xor rax, 1
lea rax, [rax + rcx*2]
cmp rax, r9
jne 0x14001b740
nop dword [rax]
mov eax, dword [0x141586d68]
xor edx, edx
div dword [str.L6_a]
xor eax, 0xfad869c
imul eax, eax, 0xcbe177f
and eax, 0x7527773c
cmp eax, 0x61ee3b43
ja 0x14001b760
not r9
add r12, r9
mov rcx, r12
nop
mov eax, dword [0x141586d70]
and eax, dword [0x141586d74]
mov edx, eax
not edx
mov r9d, eax
or r9d, 0x7c39ee34
and edx, 0x106114a
mov r10d, r9d
and r10d, 0xe6e844b1
imul r10d, edx
and r9d, 0x1917bb4e
or eax, 0x7d3fff7e
imul eax, r9d
add eax, r10d
mov edx, eax
not edx
or eax, 0x9ed7ea8b
or edx, 0x61281574
and edx, eax
cmp edx, 0xe7afaf54
ja 0x14001b790
cmp r8, 7
jb 0x14001b871
mov r8, rcx
neg r8
nop word [rax + rax]
mov eax, dword [0x141586d78]
xor edx, edx
div dword [0x141586d7c]
mov eax, dword [0x141586d80]
imul eax, dword [0x141586d84]
or eax, 0xfbbeeaef
imul rax, r11
shr rax, 0x3d
cmp eax, 0xfb2072f4
je 0x14001b80e
add rcx, 0xfffffffffffffff8
mov rax, qword [rdi + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rdi, qword [rax + 0x3d8]
add r8, 8
jne 0x14001b800
xor r13d, r13d
jmp 0x14001b890
lea r13, [rbp + 1]
mov rdi, r15
nop word [rax + rax]
mov eax, dword [0x141586db0]
imul eax, dword [0x141586db4]
mov ecx, eax
and ecx, 0x588e926
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x588e926
not eax
and eax, 0x4828a211
cmp eax, 0x81139280
ja 0x14001b890
imul rax, rbp, 0x38
lea rbx, [r15 + rax]
add rbx, 0x168
cmp qword [r15 + rax + 0x168], 0
je 0x14001b97b
nop dword [rax]
mov eax, dword [str._t]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x141586db8]
xor ecx, eax
add ecx, 0x2b9df05e
cmp ecx, 0x4687823b
jb 0x14001b8e0
mov eax, dword [0x141586dc0]
xor edx, edx
div dword [0x141586dc4]
add eax, 0x5ec35dec
mov ecx, eax
xor ecx, 0x1f46243d
and ecx, eax
imul eax, ecx, 0x4fc458ca
cmp eax, 0xaef21f67
jne 0x14001b940
mov r8, qword [rbx + 8]
mov rcx, qword [0x1415acb98]
xor edx, edx
call rsi
nop dword [rax + rax]
mov eax, dword [0x141586dc8]
mov ecx, dword [0x141586dcc]
not ecx
mov r12d, eax
or r12d, ecx
and ecx, eax
not r12d
or r12d, ecx
add r12d, 0x7207e786
mov r8, qword [rbx + 8]
mov rcx, qword [0x1415acb98]
xor edx, edx
call rsi
cmp r12d, 0x37c0e75e
jb 0x14001b940
cmp qword [rbx + 0x20], 0
je 0x14001b991
mov r8, qword [rbx + 0x28]
mov rcx, qword [0x1415acb98]
xor edx, edx
call rsi
shl rbp, 5
add r15, rbp
mov r8d, 0xd0070817
mov eax, dword [0x141586dd0]
xor edx, edx
div dword [0x141586dd4]
imul rax, r8
shr rax, 0x3e
mov ecx, eax
not ecx
and ecx, 0xd6d7ff5e
mov edx, eax
and edx, 1
imul edx, ecx
mov ecx, eax
and ecx, 0xfffffffe
or eax, 0xd6d7ff5e
imul eax, ecx
add eax, edx
add eax, 0xeafe2685
cmp eax, 0x736c1c21
jb 0x14001b99e
mov rax, qword [r15]
nop word cs:[rax + rax]
mov ecx, dword [0x141586dd8]
sub ecx, dword [0x141586ddc]
mov edx, ecx
not edx
or ecx, 0xacfd7ff7
or edx, 0xdf23ffdd
and edx, ecx
not edx
add edx, 0xfeb72cc8
cmp edx, 0xd6bb0e11
ja 0x14001b9f0
test rax, rax
js 0x14001ba30
jne 0x14001ba50
jmp 0x14001bb01
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14001bb01
nop word cs:[rax + rax]
xor eax, eax
test al, al
jne 0x14001ba50
mov eax, dword [0x141586de0]
and eax, dword [0x141586de4]
or eax, 0x77eb656c
add eax, 0x5acb283d
or eax, 0x2c1c3273
cmp eax, 0x95d9a8f7
jae 0x14001ba80
mov rax, qword [0x1415acb98]
nop
mov eax, dword [0x141586de8]
add eax, dword [0x141586dec]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xaf81186d
and ecx, 0x507ee792
imul ecx, edx
mov edx, eax
and edx, 0x507ee792
or eax, 0x507ee792
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xccb33ccc
and ecx, 0x334cc332
imul ecx, edx
mov edx, eax
and edx, 0x334cc332
or eax, 0x334cc332
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0x4f046e64
or eax, 0xb0fb919b
and eax, ecx
mov r8, qword [r15 + 8]
mov rcx, qword [0x1415acb98]
cmp eax, 0x8270248f
ja 0x14001ba80
xor edx, edx
call rsi
mov eax, dword [0x141586df0]
xor edx, edx
div dword [0x141586df4]
mov r9, qword [rsp + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141586df8]
xor edx, edx
div dword [0x141586dfc]
mov ecx, eax
and ecx, 0xc857856
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xc857856
or eax, 0xac60a389
cmp eax, 0xc805c512
je 0x14001bb20
nop dword [rax]
mov eax, dword [0x141586e00]
mov ecx, dword [0x141586e04]
not eax
not ecx
and ecx, eax
mov eax, ecx
or eax, 0xdb39d474
sub eax, ecx
imul rcx, rax, 0x4fca9bbf
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
xor eax, 0x76e95ee7
cmp eax, 0xe3251354
ja 0x14001bb50
mov ebx, 0
test r9, r9
jne 0x14001b190
mov rax, qword [rdi + 0x160]
test rax, rax
je 0x14001be5d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [rsp + 0x20]
jmp 0x14001bbd3
mov rax, qword [rbx + 0x160]
mov rdi, rbx
test rax, rax
je 0x14001be65
mov rbx, rax
mov eax, dword [0x141586d28]
imul eax, dword [0x141586d2c]
imul eax, eax, 0x4df2ed10
xor eax, 0x60a1ce85
mov ecx, eax
and ecx, 0x2278a561
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x2278a56b
cmp eax, 0x1b43a342
jb 0x14001bc46
nop dword [rax + rax]
mov eax, dword [0x141586d30]
xor edx, edx
div dword [0x141586d34]
mov ebp, eax
and ebp, 0x3e69b449
add ebp, 0x34d5d07f
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0xf71c4da1
jbe 0x14001bbc0
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call fcn.14020ae70
jmp 0x14001bc10
test r13, r13
je 0x14001bb99
mov eax, dword [0x141586cb8]
xor edx, edx
div dword [0x141586cbc]
mov eax, dword [0x141586cc0]
imul eax, dword [0x141586cc4]
add eax, 0xba716d0c
mov ecx, eax
xor ecx, 0x711b43cc
xor eax, 0x8c43033
and eax, 0x49d7327f
mov edx, ecx
and edx, 0xb628cd80
imul edx, eax
mov eax, ecx
and eax, 0x49d7327f
or ecx, 0x49d7327f
imul ecx, eax
add ecx, edx
cmp ecx, 0x75d1146e
ja 0x14001bc70
mov r8d, r13d
not r8d
or r8, 0xfffffffffffffff8
mov rcx, r8
not rcx
nop dword [rax]
mov eax, dword [str._W_]
xor edx, edx
div dword [0x141586ccc]
mov edx, eax
or edx, 0x23f9a637
not eax
or eax, 0xdc0659c8
and eax, edx
not eax
add eax, 0x5823cba6
cmp eax, 0xdb35e0e7
ja 0x14001bcd0
test rcx, rcx
je 0x14001bfdd
mov rcx, r13
and rcx, 0xfffffffffffffff8
nop dword [rax]
mov eax, dword [0x141586cd0]
xor eax, dword [0x141586cd4]
mov edx, eax
not edx
or edx, 0xa21b359
and edx, 0xeee9f7d9
mov r9d, eax
and r9d, 0x11160820
or r9d, edx
xor r9d, 0xc55bc021
and eax, 0x219204a0
or eax, r9d
mov edx, eax
not edx
and edx, 0x5904c03
and eax, 0xfa4e31b0
sub eax, edx
cmp eax, 0xe98a74d5
je 0x14001bd10
mov eax, dword [0x141586cd8]
xor edx, edx
div dword [0x141586cdc]
or eax, 0xfc90ba06
mov edx, eax
not edx
or edx, 0x32804288
and edx, 0x3fd052cb
mov r9d, eax
and r9d, 0xc8124
or r9d, edx
xor r9d, 0x4fad24f
and eax, 0x9088004
or eax, r9d
cmp eax, 0x90d020b4
ja 0x14001bd60
add r8, 2
xor eax, eax
nop dword [rax]
mov edx, dword [str.jL.VY]
mov r9d, dword [0x141586ce4]
xor r9d, edx
not r9d
and r9d, edx
mov edx, r9d
not edx
and edx, 0xc43659fe
mov r10d, r9d
and r10d, 0x3bc9a601
imul r10d, edx
mov edx, r9d
and edx, 0xc43659fe
or r9d, 0xc43659fe
imul r9d, edx
mov r11d, 0xae6ae470
sub r11d, r9d
sub r11d, r10d
lea edx, [r9 + r10]
add edx, 0x51951b8f
and r11d, 0xa1207a78
mov r9d, edx
and r9d, 0x5edf8587
imul r9d, r11d
mov r10d, edx
and r10d, 0xa1207a78
or edx, 0xa1207a78
imul edx, r10d
add edx, r9d
cmp edx, 0xd4e062a0
ja 0x14001bdb0
mov rdi, qword [rdi + 0x3d8]
inc r8
inc rax
cmp r8, 1
jne 0x14001bdb0
jmp 0x14001bfe0
mov rbx, rdi
mov r14, qword [rsp + 0x20]
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141586e08]
mov ecx, dword [0x141586e0c]
add eax, ecx
add eax, 0x42d72b0c
and eax, 0xd84ea41e
mov ecx, eax
not ecx
or ecx, 0x18468016
or eax, 0xc08835e9
and eax, ecx
cmp eax, 0xe04c9e88
ja 0x14001be80
mov rax, qword [r14 + 0x38]
nop word cs:[rax + rax]
mov ecx, dword [0x141586e10]
and ecx, dword [0x141586e14]
add ecx, 0x60a5f906
or ecx, 0xa7e4d5f4
imul ecx, ecx, 0xc1922d2f
cmp ecx, 0x4f431043
jb 0x14001bec0
test rax, rax
js 0x14001bef2
jne 0x14001bf10
jmp 0x14001c1c3
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14001c1c3
nop word cs:[rax + rax]
mov ecx, dword [0x141586e18]
mov edx, dword [0x141586e1c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x30a079
and ecx, 0xffcf5f86
or ecx, r9d
or eax, r8d
and r8d, 0x30a079
and edx, 0xffcf5f86
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd395cf3b
and ecx, 0x2c6a30c4
imul ecx, edx
mov edx, eax
and edx, 0x2c6a30c4
or eax, 0x2c6a30c4
imul eax, edx
add eax, ecx
xor eax, 0xb3e82369
cmp eax, 0x4c626ae3
je 0x14001bf10
mov rdi, qword [r14 + 0x40]
mov eax, dword [0x141586e20]
sub eax, dword [0x141586e24]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xdc7964f3
and ecx, 0x23869b0c
imul ecx, edx
mov edx, eax
and edx, 0x23869b0c
or eax, 0x23869b0c
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x90642040
and ecx, eax
and ecx, 0x92743278
cmp ecx, 0xfc2c8fca
jne 0x14001c116
jmp 0x14001c180
mov rcx, r13
mov eax, dword [0x141586ce8]
mov edx, dword [0x141586cec]
mov r8d, eax
not r8d
and r8d, edx
not edx
and edx, eax
sub edx, r8d
imul eax, edx, 0xca76ae60
add eax, 0x665bd340
or eax, 0x6fccff1d
cmp eax, 0xa082badd
je 0x14001bfe0
cmp r13, 8
jb 0x14001bb99
nop dword [rax]
mov eax, dword [0x141586cf0]
mov edx, dword [0x141586cf4]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x3aabb87
and edx, 0x1c554478
imul edx, r8d
mov r8d, eax
and r8d, 0x1c554478
or eax, 0x1c554478
imul eax, r8d
add eax, edx
and eax, 0x13402118
cmp eax, 0xa2228bc8
ja 0x14001c020
mov rax, qword [rdi + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rdi, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14001c020
jmp 0x14001bb99
mov eax, dword [0x141586da8]
sub eax, dword [0x141586dac]
add eax, 0x83690bd8
and eax, 0xba02662a
cmp eax, 0xd59eab4a
jbe 0x14001c0fd
mov edx, 8
mov rcx, rbx
call fcn.14020b130
ud2
xor esi, esi
nop
mov edx, 8
mov rcx, rbx
call fcn.14020b130
ud2
mov eax, dword [0x141586e28]
mov ecx, dword [0x141586e2c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
not eax
and eax, 0xb58ad1f2
mov edx, ecx
and edx, 0x4a752e0d
imul edx, eax
mov eax, ecx
and eax, 0xb58ad1f2
or ecx, 0xb58ad1f2
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0xaa4a1216
mov esi, 0xaf63350d
imul rsi, rax
shr rsi, 0x3f
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call fcn.14020ae70
cmp esi, 0x49b9919d
jbe 0x14001c1a0
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14001c116
mov eax, dword [0x141586e30]
and eax, dword [0x141586e34]
or eax, 0x24d849c0
and eax, 0xb7dbd9c6
imul eax, eax, 0x7b4a23e6
cmp eax, 0xb043a781
ja 0x14001c1a0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14001c1d0
mov ecx, dword [r14 + 0x58]
nop dword [rax + rax]
mov eax, dword [0x141586e38]
xor edx, edx
div dword [0x141586e3c]
and eax, 0x208ed057
add eax, 0x94f0e005
cmp eax, 0xb9cf5ffe
ja 0x14001c1e0
cmp ecx, 6
jge 0x14001c20e
cmp ecx, 4
jge 0x14001c214
jmp 0x14001c2d6
je 0x14001c2d6
mov rdi, qword [r14 + 0x60]
mov eax, dword [0x141586e40]
xor edx, edx
div dword [0x141586e44]
or eax, 0xdab0482a
add eax, 0x81a4d555
mov ecx, eax
xor ecx, 0xa18e3e1b
and ecx, eax
cmp ecx, 0xdaae992b
je 0x14001c27e
mov eax, dword [0x141586e4c]
add eax, dword [0x141586e48]
mov ecx, eax
xor ecx, 0x200856
or eax, 0x92c81221
and eax, ecx
or eax, 0x6d17e588
imul rsi, rax, 0x1ab63837
shr rsi, 0x3c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0xdd47814c
jbe 0x14001c288
mov rcx, rdi
call fcn.14020b150
jmp 0x14001c242
mov eax, 0xad193127
nop dword [rax]
mov ecx, dword [0x141586e50]
mov edx, dword [0x141586e54]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
shr edx, 1
imul rdx, rax
shr rdx, 0x3d
add edx, 0x5b979dab
mov ecx, edx
and ecx, 0x203058c
add ecx, ecx
sub edx, ecx
add edx, 0x20b458c
cmp edx, 0x97340150
ja 0x14001c290
mov eax, dword [r14 + 0x68]
nop word [rax + rax]
mov ecx, dword [0x141586e58]
mov edx, dword [0x141586e5c]
not ecx
not edx
or edx, ecx
not edx
mov ecx, edx
and ecx, 0xe5452353
and edx, 0x44410301
add edx, edx
sub ecx, edx
add ecx, 0x4c611f89
xor ecx, 0x695ccb50
cmp ecx, 0x437c1b2d
je 0x14001c2e0
cmp eax, 6
jge 0x14001c326
cmp eax, 4
jl 0x14001c340
jmp 0x14001c328
je 0x14001c340
mov rcx, qword [r14 + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word cs:[rax + rax]
mov eax, dword [0x141586e60]
sub eax, dword [0x141586e64]
imul rax, rax, 0x26e40f7b
shr rax, 0x3d
imul eax, eax, 0x10915f98
mov ecx, eax
and ecx, 0x25eb048
xor eax, 0x225eb048
lea eax, [rax + rcx*2]
cmp eax, 0x6ab64644
je 0x14001c340
mov eax, dword [r14 + 0x78]
nop dword [rax + rax]
mov ecx, dword [0x141586e68]
add ecx, dword [0x141586e6c]
xor ecx, 0xb8022b34
and ecx, 0xf9723b36
cmp ecx, 0xd16a4b30
je 0x14001c380
cmp eax, 6
jge 0x14001c3ac
cmp eax, 4
jge 0x14001c3ae
jmp 0x14001c3ee
je 0x14001c3ee
mov rcx, qword [r14 + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov eax, dword [0x141586e70]
imul eax, dword [0x141586e74]
xor eax, 0xd3d60031
lea ecx, [rax + 0x5dda6d]
not ecx
or ecx, 0x1a770c15
add eax, ecx
add eax, 0x5dda6e
cmp eax, 0x22d11e53
ja 0x14001c3c0
xor eax, eax
test al, al
jne 0x14001c3f0
mov rdi, qword [r14 + 0xa8]
test rdi, rdi
je 0x14001d3e0
nop word cs:[rax + rax]
mov eax, dword [0x141586e78]
xor edx, edx
div dword [0x141586e7c]
imul eax, eax, 0x389f2752
mov ecx, eax
xor ecx, 0xe4013e4c
add ecx, eax
and eax, 0x1bfec1b2
sub ecx, eax
xor ecx, 0x4aca7e77
cmp ecx, 0xf073910b
ja 0x14001c410
mov r15, qword [r14 + 0xb0]
mov rbx, qword [r14 + 0xb8]
nop word cs:[rax + rax]
mov eax, dword [0x141586e80]
mov ecx, dword [0x141586e84]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0x5efa5377
and eax, 0x40240c00
cmp eax, 0x50af270f
ja 0x14001c460
test rbx, rbx
je 0x14001cf60
mov eax, 0xd5209b1b
nop word cs:[rax + rax]
mov ecx, dword [0x141586e88]
mov edx, ecx
not edx
or edx, dword [0x141586e8c]
add ecx, edx
inc ecx
or ecx, 0x94bf280c
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x4da9085c
je 0x14001c4a0
nop word [rax + rax]
mov eax, dword [0x141586e90]
mov ecx, dword [0x141586e94]
not eax
not ecx
and ecx, eax
not ecx
imul rax, rcx, 0x3a49ca2b
shr rax, 0x3d
mov ecx, eax
xor ecx, 0x97823e05
add eax, ecx
add eax, 0xb66d0ac2
cmp eax, 0x4c12ed09
jb 0x14001c4d0
xor r14d, r14d
mov r13d, 0x93edea4b
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, rdi
xor edi, edi
nop word [rax + rax]
mov eax, dword [0x141586ec8]
xor edx, edx
div dword [0x141586ecc]
mov eax, dword [0x141586ed0]
xor edx, edx
div dword [0x141586ed4]
mov ecx, eax
not ecx
and ecx, 0x51ead9cd
mov edx, eax
and edx, 0xae152632
imul edx, ecx
mov ecx, eax
and ecx, 0x51ead9cd
or eax, 0x51ead9cd
imul eax, ecx
add eax, edx
xor eax, 0xe3c67f7c
cmp eax, 0x3a2aa0c5
je 0x14001c52e
test rdi, rdi
jne 0x14001c86e
mov eax, dword [0x141586ed8]
or eax, dword [0x141586edc]
imul rax, rax, 0x75ed41a3
shr rax, 0x3e
imul eax, eax, 0xadabe101
or eax, 0x88e38461
cmp eax, 0x272b0acb
je 0x14001c578
nop word cs:[rax + rax]
mov ecx, dword [0x141586ee0]
add ecx, dword [0x141586ee4]
mov eax, ecx
xor eax, 0xf53d96a7
xor ecx, 0xa822800
and ecx, 0xbbaa3827
mov edx, eax
and edx, 0x4455c7d8
or edx, ecx
xor edx, 0x6be3e0aa
and eax, 0xd049d88d
or eax, edx
mov ecx, eax
not ecx
and ecx, 0x72d36112
mov edx, eax
and edx, 0x8d2c9eed
imul edx, ecx
mov ecx, eax
and ecx, 0x72d36112
or eax, 0x72d36112
imul eax, ecx
add eax, edx
cmp eax, 0xb1bf5bf1
je 0x14001c5b0
test r15, r15
je 0x14001c7b7
mov eax, dword [0x141586ee8]
mov ecx, dword [0x141586eec]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0x264d90a8
or eax, 0x46851d58
mov ecx, 0xcaa003bb
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xa95b7c3b
ja 0x14001c61d
mov rax, r15
xor rax, 0xfffffffffffffff8
mov rcx, r15
or rcx, 7
and rcx, rax
mov eax, dword [0x141586ef0]
xor edx, edx
div dword [0x141586ef4]
mov eax, dword [0x141586ef8]
sub eax, dword [0x141586efc]
add eax, 0xad88c664
imul rax, rax, 0x5bb335ad
shr rax, 0x3e
cmp eax, 0xe25786fc
je 0x14001c66f
test rcx, rcx
je 0x14001c7bf
mov eax, r15d
not eax
or rax, 0xfffffffffffffff8
add rax, r15
inc rax
nop word [rax + rax]
mov edx, dword [0x141586f00]
and edx, dword [0x141586f04]
mov r8d, edx
or r8d, 0x8bd1542c
mov r9d, edx
not r9d
and r9d, 0x342e2b41
mov r10d, r8d
and r10d, 0xc210d492
imul r10d, r9d
and r8d, 0x3def2b6d
or edx, 0xbfff7f6d
imul edx, r8d
add edx, r10d
add edx, 0xad98d9fc
cmp edx, 0x11336dd8
jb 0x14001c6b0
mov rdx, 0xffffffffffffffff
xor r8d, r8d
mov rdi, rsi
mov r9d, dword [0x141586f08]
mov r10d, dword [0x141586f0c]
mov r11d, r10d
not r11d
mov esi, r9d
and esi, r11d
or r11d, r9d
not r11d
imul r11d, esi
mov esi, r9d
and esi, r10d
or r9d, r10d
imul r9d, esi
add r9d, r11d
mov r10d, r9d
xor r10d, 0x936241
xor r9d, 0xaf440d3e
mov r11d, r9d
and r11d, 0xdc6895ac
and r10d, 0x23976a53
imul r10d, r11d
mov r11d, r9d
and r11d, 0x23976a53
or r9d, 0x23976a53
imul r9d, r11d
add r9d, r10d
imul r9d, r9d, 0x2a4b41bf
cmp r9d, 0x7bbf4f60
je 0x14001c710
inc r8
mov rdi, qword [rdi + 0x170]
dec rdx
cmp rcx, r8
jne 0x14001c710
cmp r15, 8
jae 0x14001c7cf
jmp 0x14001c869
mov rdi, rsi
jmp 0x14001c869
mov rax, r15
mov rdi, rsi
cmp r15, 8
jb 0x14001c869
movabs r8, 0x7ffffffffffffff8
nop dword [rax]
mov ecx, dword [0x141586f10]
mov edx, dword [0x141586f14]
not ecx
not edx
or edx, ecx
mov ecx, edx
not ecx
xor edx, 0x3debec2
and ecx, 0x3debec2
add ecx, ecx
sub ecx, edx
or ecx, 0xe946bd5e
and ecx, 0xf9d7bfff
cmp ecx, 0x16d74546
je 0x14001c7e0
mov rcx, rax
and rcx, r8
xor rax, 0xfffffffffffffff8
mov rdx, qword [rdi + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdi, qword [rdx + 0x170]
lea rax, [rax + rcx*2]
test rax, rax
jne 0x14001c7e0
xor r15d, r15d
xor esi, esi
dec rbx
nop word cs:[rax + rax]
mov eax, dword [0x141586f40]
mov ecx, dword [0x141586f44]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x4a487
and eax, 0x3b5b78
add eax, eax
sub eax, ecx
add eax, 0x93f6e7d7
or eax, 0xff88563e
cmp eax, 0x4bb5e26
je 0x14001c880
mov qword [rsp + 0x28], rbx
movzx eax, word [rdi + 0x16a]
cmp r15, rax
jae 0x14001c8f0
mov r12, r15
mov rbx, rdi
jmp 0x14001ca66
mov eax, dword [0x141586f48]
xor edx, edx
div dword [0x141586f4c]
xor eax, 0xcc8008c0
or eax, 0x327e5324
mov ecx, eax
and ecx, 0x16ff657c
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x96ff657c
cmp eax, 0xeaea8a2e
ja 0x14001c8f0
mov rbx, qword [rdi]
test rbx, rbx
je 0x14001d300
mov eax, dword [0x141586f78]
or eax, dword [0x141586f7c]
mov ecx, eax
not ecx
or ecx, 0xc0b5a131
add eax, ecx
inc eax
mov ecx, 0xb3614de1
imul rax, rcx
shr rax, 0x3e
or eax, 0xef90bb74
cmp eax, 0x4b774b48
jae 0x14001c970
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call rbp
nop
mov eax, dword [0x141586f80]
mov ecx, dword [0x141586f84]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0xc18e984
add ecx, ecx
sub eax, ecx
add eax, 0xcc18e984
or eax, 0xbace41a8
mov r15d, eax
xor r15d, 0x363a95a8
and r15d, eax
movzx r12d, word [rdi + 0x168]
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call rbp
cmp r15d, 0xcd0fb80c
je 0x14001c970
mov eax, esi
and eax, 1
or rsi, 1
add rsi, rax
nop dword [rax]
mov eax, dword [0x141586f88]
and eax, dword [0x141586f8c]
mov ecx, eax
xor ecx, 0xa2ab3e48
and eax, 0x5d54c1b7
add eax, eax
sub eax, ecx
imul rax, rax, 0x1199a07d
shr rax, 0x3c
xor eax, 0x6673985f
cmp eax, 0x2138a400
jb 0x14001c9f0
movzx eax, word [rbx + 0x16a]
mov ecx, dword [0x141586f90]
mov edx, dword [0x141586f94]
mov r8d, ecx
and r8d, edx
add r8d, r8d
add ecx, edx
sub ecx, r8d
or ecx, 0x20c88990
and ecx, 0xb4cca9b0
cmp ecx, 0xc8df684b
ja 0x14001ca2b
mov rdi, rbx
cmp r12w, ax
jae 0x14001c8f0
lea r15, [r12 + 1]
test rsi, rsi
je 0x14001cc60
mov rdi, qword [rbx + r15*8 + 0x170]
mov eax, dword [0x141586f50]
mov ecx, dword [0x141586f54]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
xor ecx, 0x6b9ef549
add ecx, 0xc195aa36
and ecx, 0xd963fe04
cmp ecx, 0x2a570ced
je 0x14001ca7c
lea rax, [rsi - 1]
nop word cs:[rax + rax]
mov ecx, dword [0x141586f58]
sub ecx, dword [0x141586f5c]
mov edx, ecx
xor edx, 0x19ff7d81
and edx, ecx
add edx, 0x22c44c59
mov ecx, edx
xor ecx, 0x95a7e1c8
and edx, 0x6a581e37
add edx, edx
sub edx, ecx
cmp edx, 0x2d4f7276
jb 0x14001cac0
test rax, rax
je 0x14001cc4e
nop
test r14b, r14b
jne 0x14001cb00
mov rcx, rax
xor rcx, 0xfffffffffffffff8
and rcx, rax
je 0x14001cba8
xor eax, eax
nop word [rax + rax]
mov edx, dword [0x141586f60]
mov r8d, dword [0x141586f64]
mov r9d, edx
not r9d
and r9d, r8d
not r9d
not r8d
and r8d, edx
not r8d
and r8d, r9d
mov edx, r8d
xor edx, 0x6a283006
and edx, 0x6a6ef86e
xor r8d, 0x557cb79
lea edx, [r8 + rdx*2]
cmp edx, 0xdac2c212
je 0x14001cb20
inc rax
mov rdi, qword [rdi + 0x170]
cmp rax, rcx
jne 0x14001cb20
mov eax, dword [0x141586f68]
sub eax, dword [0x141586f6c]
mov edx, eax
not edx
or edx, 0x1b079d11
or eax, 0xe4f862ee
and eax, edx
add eax, 0x6c2ca447
cmp eax, 0x3f03c24b
jb 0x14001cb76
not rcx
add rcx, rsi
mov rax, rcx
add rsi, 0xfffffffffffffffe
mov ecx, dword [0x141586f70]
xor ecx, dword [0x141586f74]
mov edx, ecx
not edx
and edx, 0x7fc506cd
mov r8d, ecx
and r8d, 0x803af932
imul r8d, edx
mov edx, ecx
and edx, 0x7fc506cd
or ecx, 0x7fc506cd
imul ecx, edx
add ecx, r8d
mov edx, ecx
xor edx, 0x83082e83
and edx, ecx
not edx
or edx, 0x6cd09110
cmp edx, 0xb7cded0d
jb 0x14001cbac
cmp rsi, 7
jb 0x14001cc4e
nop word cs:[rax + rax]
mov rcx, qword [rdi + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rdi, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14001cc10
xor r15d, r15d
jmp 0x14001cc70
mov rdi, rbx
nop word cs:[rax + rax]
mov eax, dword [0x141586fa8]
mov ecx, dword [0x141586fac]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xd7c29735
add ecx, eax
and eax, 0x283d68ca
sub ecx, eax
xor ecx, 0xdc2f84f5
cmp ecx, 0x3ce7bd2b
ja 0x14001cc70
lea rax, [r12 + r12*2]
mov rsi, qword [rbx + rax*8 + 0x60]
mov rbx, qword [rbx + rax*8 + 0x68]
mov rax, qword [rbx]
test rax, rax
je 0x14001ccbe
mov rcx, rsi
call rax
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
nop word cs:[rax + rax]
mov edx, dword [0x141586fb4]
mov r8d, edx
xor r8d, r8d
not r8d
and r8d, dword [0x141586fb0]
xor r8d, edx
imul rdx, r8, 0x6da1bcd5
shr rdx, 0x20
sub r8d, edx
shr r8d, 1
add r8d, edx
mov edx, r8d
shr edx, 0x1c
shr r8d, 0x1b
and r8d, 0xc
xor edx, 0xfc935316
add edx, r8d
add edx, 0x248a000
cmp edx, 0xed6f95f7
jb 0x14001ccd0
test rcx, rcx
je 0x14001ceb2
nop dword [rax + rax]
mov ecx, dword [0x141586fb8]
mov edx, dword [0x141586fbc]
mov r8d, ecx
xor r8d, edx
not r8d
or ecx, edx
and ecx, r8d
mov edx, 0x25bd0bfd
sub edx, ecx
add ecx, 0xda42f402
and edx, 0xb0777a39
mov r8d, ecx
and r8d, 0x4f8885c6
imul r8d, edx
mov edx, ecx
and edx, 0xb0777a39
or ecx, 0xb0777a39
imul ecx, edx
add ecx, r8d
imul rdx, rcx, 0x100afe59
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1e
cmp ecx, 0x5901c7ac
je 0x14001cd30
cmp rax, 0x11
jb 0x14001ce15
mov eax, dword [0x141586fc0]
and eax, dword [0x141586fc4]
mov ecx, eax
xor ecx, 0x313a140b
add ecx, eax
and eax, 0xcec5ebf4
sub ecx, eax
add ecx, 0x7da65f9b
cmp ecx, 0xfd4e4f68
ja 0x14001cda1
nop dword [rax]
mov eax, dword [0x141586fc8]
mov ecx, dword [0x141586fcc]
not ecx
add eax, ecx
add eax, 0x35ff8928
mov ecx, eax
and ecx, 0x8cccd6
add ecx, ecx
sub eax, ecx
add eax, 0xd68cccd6
or eax, 0xfe8ecc6b
cmp eax, 0xa06d3909
jb 0x14001cdd0
mov rsi, qword [rsi - 8]
nop word cs:[rax + rax]
test r14b, r14b
jne 0x14001ce10
mov eax, dword [0x141586fd0]
xor eax, dword [0x141586fd4]
or eax, 0x6461eef2
imul rcx, rax, 0x8d0c5e5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x706de38c
cmp eax, 0xec395176
ja 0x14001cf40
nop dword [rax + rax]
mov eax, dword [0x141586fd8]
mov ecx, dword [0x141586fdc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
and ecx, 0xb124bf
add ecx, ecx
sub eax, ecx
add eax, 0xb0b124bf
or eax, 0xec986a66
imul ebx, eax, 0xf730f1f
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rsi
call rbp
cmp ebx, 0x7e63d04a
je 0x14001cf40
mov rbx, qword [rsp + 0x28]
nop word [rax + rax]
mov eax, dword [0x141586fe4]
add eax, dword [0x141586fe0]
or eax, 0x6f7ecb4a
add eax, 0x6ecc8f10
not eax
or eax, 0x7dbc0369
cmp eax, 0x781dd738
je 0x14001cec0
nop word cs:[rax + rax]
mov eax, dword [0x141586fe8]
add eax, dword [0x141586fec]
mov ecx, eax
and ecx, 0x2fb0175e
add ecx, ecx
sub eax, ecx
add eax, 0x31056e8
shr eax, 1
imul rax, r13
shr rax, 0x3d
cmp eax, 0xd8273c87
ja 0x14001cef0
mov esi, 0
test rbx, rbx
jne 0x14001c520
jmp 0x14001d1b3
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rsi
call rbp
jmp 0x14001ce50
mov ecx, dword [0x141586e98]
mov eax, dword [0x141586e9c]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc8b0de89
and ecx, 0x374f2176
imul ecx, edx
mov edx, eax
and edx, 0x374f2176
or eax, 0x374f2176
imul eax, edx
add eax, ecx
xor eax, 0x77f2f324
mov ecx, eax
and ecx, 0x7defd0fe
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xfdefd0fe
cmp eax, 0x959d8186
jb 0x14001cf60
nop
mov eax, dword [0x141586ea0]
sub eax, dword [0x141586ea4]
add eax, 0x3041d4f4
shr eax, 2
imul rax, rax, 0x2696f52b
shr rax, 0x3a
mov ecx, eax
xor ecx, 0x5693cc4a
and eax, 1
add eax, eax
sub eax, ecx
cmp eax, 0xcc0dc7cc
ja 0x14001cfc0
test r15, r15
je 0x14001d1b3
mov rax, r15
xor rax, 0xfffffffffffffff8
and rax, r15
nop dword [rax + rax]
mov ecx, dword [0x141586ea8]
sub ecx, dword [0x141586eac]
imul rcx, rcx, 0x381e6f7b
shr rcx, 0x3c
add ecx, 0x84f51daf
mov edx, ecx
and edx, 0x4500dbb
add edx, edx
sub ecx, edx
add ecx, 0x2d5aafbb
cmp ecx, 0xa3fe8e50
jb 0x14001d010
nop word [rax + rax]
mov ecx, dword [0x141586eb0]
mov edx, ecx
not edx
or edx, dword [0x141586eb4]
add ecx, edx
inc ecx
mov edx, ecx
not edx
mov r8d, ecx
or r8d, 0xa437b3e7
and edx, 0x59c04008
mov r9d, r8d
and r9d, 0x26189e53
imul r9d, edx
and r8d, 0xd9e761ac
or ecx, 0xfdf7f3ef
imul ecx, r8d
add ecx, r9d
mov edx, ecx
xor edx, 0xa95a3179
and ecx, 0x56a5ce84
add ecx, ecx
sub ecx, edx
cmp ecx, 0x3f8c5bbe
je 0x14001d050
mov rcx, r15
test rax, rax
je 0x14001d144
and rcx, 0xfffffffffffffff8
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x14001d0d0
mov rdx, 0xffffffffffffffff
xor r8d, r8d
nop
mov r9d, dword [0x141586eb8]
add r9d, dword [0x141586ebc]
mov r10d, r9d
and r10d, 0x60cd5547
or r9d, 0x60cd5547
add r9d, r10d
mov r10d, r9d
xor r10d, 0xe938cd6f
and r10d, r9d
mov r9d, r10d
and r9d, 0x6fbe4d03
add r9d, r9d
neg r9d
add r9d, r10d
add r9d, 0x6fbe4d03
cmp r9d, 0xf55b7f2c
ja 0x14001d0e0
inc r8
mov rdi, qword [rdi + 0x170]
dec rdx
cmp rax, r8
jne 0x14001d0e0
cmp r15, 8
jb 0x14001d1b3
nop word [rax + rax]
mov eax, dword [0x141586ec0]
xor edx, edx
div dword [0x141586ec4]
or eax, 0x7f3970cb
imul eax, eax, 0xcfe791d3
xor eax, 0x6be1e9bf
cmp eax, 0x432e07e7
ja 0x14001d150
mov rax, qword [rdi + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rdi, qword [rax + 0x170]
add rcx, 0xfffffffffffffff8
jne 0x14001d150
mov eax, dword [0x141586f18]
xor edx, edx
div dword [0x141586f1c]
nop word cs:[rax + rax]
mov eax, dword [0x141586f20]
add eax, dword [0x141586f24]
imul eax, eax, 0xce6fb845
mov ecx, eax
not ecx
or eax, 0x561022c5
or ecx, 0xa9efdd3a
and ecx, eax
imul eax, ecx, 0xa045303a
cmp eax, 0xadd25ec7
jb 0x14001d1d0
mov rax, qword [rdi]
test rax, rax
je 0x14001d2ee
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov rsi, rax
mov eax, dword [0x141586f28]
xor eax, dword [0x141586f2c]
mov ecx, eax
xor ecx, 0xf2b58dc7
and eax, 0xd4a7238
add eax, eax
sub eax, ecx
mov ecx, eax
or ecx, 0x60e7d324
mov edx, eax
not edx
and edx, 0x31800d1
mov r8d, ecx
and r8d, 0xdcc23e0a
imul r8d, edx
and ecx, 0x233dc1f5
or eax, 0x63ffd3f5
imul eax, ecx
add eax, r8d
cmp eax, 0x855b7b4a
jbe 0x14001d290
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call rbx
nop word cs:[rax + rax]
mov eax, dword [0x141586f30]
mov ecx, dword [0x141586f34]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
shr eax, 3
imul rax, rax, 0xa02d10b
shr rax, 0x38
imul ebp, eax, 0x65b06470
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call rbx
cmp ebp, 0x7d47555c
je 0x14001d290
mov rax, qword [rsi]
mov rdi, rsi
test rax, rax
jne 0x14001d220
xor eax, eax
test al, al
je 0x14001d386
jmp 0x14001d3c0
mov rsi, rdi
xor eax, eax
test al, al
je 0x14001d386
jmp 0x14001d3c0
mov eax, dword [0x141586f98]
and eax, dword [0x141586f9c]
xor eax, 0xed99aad6
mov ecx, eax
and ecx, 0x766c12c7
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x20e33eb9
cmp eax, 0x66a20c77
jae 0x14001d33a
mov edx, 8
mov rcx, rdi
call fcn.1400f71f0
ud2
mov ebx, 0xb50aeacb
nop
mov eax, dword [0x141586fa0]
xor edx, edx
div dword [0x141586fa4]
mov esi, eax
and esi, 0xf0dd280e
imul rsi, rbx
shr rsi, 0x3e
mov eax, esi
xor eax, 0x68558352
and esi, 0xfffffffe
or esi, eax
mov edx, 8
mov rcx, rdi
call fcn.14020b130
ud2
mov edi, dword [0x141586f38]
xor edi, dword [0x141586f3c]
or edi, 0xb6986779
mov eax, edi
xor eax, 0xaa8d3129
xor edi, 0xdcb7f1c0
and edi, eax
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rsi
call fcn.14020ae70
cmp edi, 0x37a18525
jb 0x14001d3e0
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14001d386
mov eax, dword [0x141586ff0]
add eax, dword [str.sc__a]
mov ecx, eax
xor ecx, 0x45000c
and ecx, eax
or ecx, 0xf73affd1
cmp ecx, 0xfb671c64
je 0x14001d3e0
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret