Function at 0x1400f9350
Capabilities:
Create pipe
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x20], xmm6
mov r10d, edx
mov r11d, edx
mov eax, dword [0x1402242f8]
mov r9d, dword [0x1402242fc]
mov edx, r9d
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, r9d
or eax, r9d
imul eax, r8d
add eax, edx
mov r8d, eax
not r8d
and r8d, 0xa622b3e4
mov edx, eax
and edx, 0x59dd4c1b
imul edx, r8d
mov r8d, eax
and r8d, 0xa622b3e4
or eax, 0xa622b3e4
imul eax, r8d
add eax, edx
add eax, 0x180484d1
mov r8d, eax
not r8d
mov edx, eax
and edx, 0xa4c4ae2d
and r8d, 0x5b3b51d0
imul r8d, edx
mov edx, eax
and edx, 0x5b3b51d0
or eax, 0x5b3b51d0
imul eax, edx
add eax, r8d
cmp eax, 0x4d9723a2
jb 0x1400f9467
mov eax, dword [0x140224300]
mov r8d, dword [0x140224304]
mov edx, eax
xor edx, r8d
not edx
and edx, r8d
add edx, edx
sub r8d, edx
add r8d, eax
mov eax, r8d
and eax, 0x73bbc92d
or r8d, 0x73bbc92d
add r8d, eax
imul eax, r8d, 0x1b2d8bdf
mov edx, 0xa450f467
imul rdx, rax
shr rdx, 0x3e
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
cmp edx, 0x133b4540
jbe 0x1400f9476
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
jmp 0x1400f940a
mov qword [rbp + 0x10], rax
mov eax, dword [0x140224308]
mov r9d, dword [0x14022430c]
mov edx, eax
not edx
and edx, r9d
mov r8d, r9d
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, r9d
or eax, r9d
imul eax, edx
add eax, r8d
mov edx, eax
xor edx, 0x9f8b7936
add edx, eax
and eax, 0x607486c9
sub edx, eax
or edx, 0x5f362acf
imul eax, edx, 0x37928d22
cmp eax, 0x20ca3ecd
jne 0x1400f9510
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x140224310]
and eax, dword [0x140224314]
imul eax, eax, 0x8f094e81
mov edx, eax
xor edx, 0x231a0404
and edx, eax
or edx, 0xd8e5637b
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
cmp edx, 0x81451be3
jb 0x1400f9510
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x68], r9
mov qword [rbp - 0x70], r8
mov byte [rbp + 0x1f], r11b
mov qword [rbp - 0x30], rcx
mov eax, dword [0x140224318]
sub eax, dword [0x14022431c]
mov ecx, eax
and ecx, 0x1fefc01d
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xead364a
not eax
and eax, 0xc10ca880
cmp eax, 0x53bffe76
je 0x1400f9620
mov eax, dword [0x140224324]
add eax, dword [0x140224320]
imul rcx, rax, 0x1cbd03c3
shr rcx, 0x3c
or ecx, 0x58f2f8c0
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r12, rsp
cmp ecx, 0xfb29274b
jbe 0x1400f9659
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
jmp 0x1400f95bb
mov qword [rbp - 0x40], r9
mov qword [rbp - 0x48], r8
mov qword [rbp - 0x18], rdx
mov byte [rbp + 0x1e], r10b
movzx eax, r10b
mov ecx, 0x40080002
sub ecx, eax
mov dword [rbp - 0x24], ecx
xor r14d, r14d
mov dword [rbp + 4], 8
xorps xmm6, xmm6
lea rsi, [0x140071fc0]
lea rbx, [0x14006f9a0]
lea r13, str.Pr__
mov r15b, 1
xor eax, eax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], r12
nop word [rax + rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov dword [rcx], eax
mov rax, qword [0x14022cb50]
test rax, rax
je 0x1400f98e9
mov eax, dword [0x140224330]
add eax, dword [0x140224334]
mov ecx, eax
xor ecx, 0x6d606504
add ecx, eax
and eax, 0x929f9afb
sub ecx, eax
mov eax, ecx
xor eax, 0xc37ceb
add eax, ecx
and ecx, 0x7f3c8314
sub eax, ecx
and eax, 0x59f3523a
cmp eax, 0x973f61ed
jbe 0x1400f976d
mov eax, 1
lock xadd qword [0x14022cb50], rax
mov rcx, qword [rbp - 0x50]
mov qword [rcx], rax
mov rax, qword [rbp - 0x18]
mov r8, qword [rbp - 0x48]
mov qword [r8], rax
mov qword [r8 + 8], rsi
mov qword [r8 + 0x10], rcx
mov qword [r8 + 0x18], rbx
mov rdx, qword [rbp - 0x40]
mov qword [rdx], r13
mov qword [rdx + 8], 2
mov qword [rdx + 0x20], 0
mov qword [rdx + 0x10], r8
mov qword [rdx + 0x18], 2
sub rsp, 0x20
mov rcx, r12
call fcn.140150af0
add rsp, 0x20
mov rax, qword [rbp - 0x38]
inc eax
mov dword [rbp - 0x28], eax
mov rbx, qword [rbp - 0x50]
mov rsi, qword [rbp - 0x48]
mov r14, r12
mov r12, qword [rbp - 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x140224338]
mov edi, dword [0x14022433c]
mov ecx, eax
or ecx, edi
not eax
not edi
and edi, eax
mov eax, 1
lock xadd qword [0x14022cb50], rax
not ecx
or edi, ecx
mov qword [rbx], rax
mov rax, qword [rbp - 0x18]
mov qword [rsi], rax
lea rax, [0x140071fc0]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rbx
lea rax, [0x14006f9a0]
mov qword [rsi + 0x18], rax
mov qword [r12], r13
mov qword [r12 + 8], 2
mov qword [r12 + 0x20], 0
mov qword [r12 + 0x10], rsi
mov qword [r12 + 0x18], 2
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
call fcn.140041330
add rsp, 0x20
cmp edi, 0xf464131a
je 0x1400f9790
nop
mov eax, dword [0x140224340]
mov ecx, dword [0x140224344]
add eax, ecx
add eax, 0x6e505dd4
mov ecx, eax
and ecx, 0x4e66de20
add ecx, ecx
sub eax, ecx
imul eax, eax, 0x9df1b7d4
add eax, 0x3218d280
cmp eax, 0x71280ab7
ja 0x1400f9820
mov rdx, qword [rbp - 0x10]
mov r12, r14
xor r14d, r14d
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [0x140224348]
or ecx, dword [0x14022434c]
add ecx, 0xacf0bcf2
mov eax, ecx
xor eax, 0x1080040
xor ecx, 0x2a660100
and eax, 0xc188aae9
and ecx, 0x3e775516
or ecx, eax
test rdx, rdx
sete al
cmp ecx, 0x507bf2de
ja 0x1400f9862
or r15b, al
test r15b, 1
mov rsi, qword [rbp - 8]
jne 0x1400f9960
mov eax, dword [0x1402244d8]
and eax, dword [0x1402244dc]
imul eax, eax, 0xc4cfff46
add eax, 0x37c60033
or eax, 0x2a66e3c2
cmp eax, 0x42caba9b
jae 0x1400facd0
jmp 0x1400facf8
test rcx, rcx
jne 0x1400f96d4
movups xmmword [rdi], xmm6
sub rsp, 0x20
mov edx, 0x10
mov rcx, rdi
call fcn.14014ef90
add rsp, 0x20
mov rax, qword [rdi]
test r14b, r14b
jne 0x1400f994a
nop dword [rax]
mov edx, dword [0x140224328]
xor edx, dword [0x14022432c]
mov ecx, edx
not ecx
or ecx, 0x800
and ecx, 0x9050800
and edx, 0x42724000
or edx, ecx
mov qword [0x14022cb50], rax
mov rcx, qword [0x14022cb50]
cmp edx, 0x7eef2282
jbe 0x1400f98e0
mov qword [0x14022cb50], rax
mov rcx, qword [0x14022cb50]
jmp 0x1400f9910
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
mov eax, dword [0x140224350]
xor eax, dword [0x140224354]
add eax, 0x56278e0c
mov ecx, eax
and ecx, 0x4261990b
xor eax, 0xc261990b
lea eax, [rax + rcx*2]
cmp eax, 0x6906cef6
jb 0x1400f9970
mov rax, qword [r12]
mov qword [rbp - 0x10], rax
mov r10, qword [r12 + 8]
mov r13, qword [r12 + 0x10]
lea rax, [r10 + r13]
mov qword [rbp - 0x20], rax
test r13, r13
mov qword [rbp - 8], r10
je 0x1400f9f80
mov eax, dword [0x140224358]
sub eax, dword [0x14022435c]
mov ecx, eax
not ecx
and ecx, 0x1addf9f1
mov edx, eax
and edx, 0xe522060e
imul edx, ecx
mov ecx, eax
and ecx, 0x1addf9f1
or eax, 0x1addf9f1
imul eax, ecx
add eax, edx
mov ecx, 0x83617447
imul rax, rcx
shr rax, 0x3e
not eax
or eax, 0x4f78570e
cmp eax, 0xac7f4107
je 0x1400f99bf
lea rbx, [r10 + 1]
mov r12, qword [rbp - 0x20]
mov eax, dword [0x140224360]
imul eax, dword [0x140224364]
add eax, 0xa64861ab
mov ecx, eax
or ecx, 0x10840068
not eax
and eax, 0x4113a490
and ecx, 0x9e844b6e
sub ecx, eax
cmp ecx, 0x2d6fa786
jb 0x1400f9a15
movzx r8d, byte [r10]
test r8b, r8b
js 0x1400f9a90
mov eax, dword [0x140224378]
xor edx, edx
div dword [0x14022437c]
mov ecx, eax
xor ecx, 0x552d245
and ecx, 0x75ade6d
xor eax, 0x3a8d0c38
lea eax, [rax + rcx*2]
or eax, 0xda78b601
cmp eax, 0xe036fcb7
jae 0x1400f9a4f
mov ecx, r8d
jmp 0x1400f9f10
mov eax, dword [0x140224368]
mov ecx, dword [0x14022436c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
imul eax, eax, 0x511cbcc7
mov ecx, eax
not ecx
and ecx, 0xe1ca52ad
mov edx, eax
and edx, 0x1e35ad52
imul edx, ecx
mov ecx, eax
and ecx, 0xe1ca52ad
or eax, 0xe1ca52ad
imul eax, ecx
add eax, edx
add eax, 0x2ad4cdf1
cmp eax, 0xd96e39ea
ja 0x1400f9a90
mov r9d, r8d
and r9d, 0x1f
lea rbx, [r10 + 2]
movzx ecx, byte [r10 + 1]
mov eax, r9d
shl eax, 6
and cl, 0x3f
nop word [rax + rax]
test r14b, r14b
jne 0x1400f9b00
movzx r10d, cl
mov edx, eax
or edx, r10d
not eax
mov ecx, r10d
not ecx
and ecx, eax
not ecx
and ecx, edx
nop dword [rax + rax]
mov edx, dword [0x140224370]
mov r11d, dword [str.T_9]
mov eax, edx
not eax
mov esi, r11d
not esi
mov edi, eax
and edi, 0x201163
and edx, 0xffdfee9c
or edx, edi
or eax, esi
and esi, 0x201163
and r11d, 0xffdfee9c
or r11d, esi
xor r11d, edx
not eax
or eax, r11d
mov edx, eax
or edx, 0xb38d257
not eax
or eax, 0xf4c72da8
and eax, edx
not eax
add eax, 0x5cd3968f
mov edx, eax
xor edx, 0x731143d4
and eax, 0xceebc2b
add eax, eax
sub eax, edx
cmp eax, 0x371178e5
je 0x1400f9b20
cmp r8b, 0xdf
mov r11, qword [rbp - 8]
mov rdi, 0xffffffffffffffff
jbe 0x1400f9f10
mov eax, dword [0x140224380]
xor edx, edx
div dword [0x140224384]
nop word cs:[rax + rax]
mov eax, dword [0x140224388]
sub eax, dword [0x14022438c]
add eax, 0x6864e617
not eax
and eax, 0x80a04048
cmp eax, 0xe837a478
ja 0x1400f9bc0
lea rbx, [r11 + 3]
shl r10d, 6
movzx eax, byte [r11 + 2]
mov ecx, dword [0x140224390]
sub ecx, dword [0x140224394]
and ecx, 0x1fd751fe
imul ecx, ecx, 0xd7f709df
cmp ecx, 0x3199face
je 0x1400f9bec
and al, 0x3f
movzx ecx, al
mov eax, r10d
xor eax, ecx
not ecx
and ecx, r10d
add eax, r10d
sub eax, ecx
mov edx, r9d
shl edx, 0xc
mov ecx, eax
not ecx
mov r10d, edx
not r10d
mov r11d, ecx
and r11d, 0xfdc5ae39
mov esi, eax
and esi, 0x23a51c6
or esi, r11d
or ecx, r10d
and r10d, 0xfdc5ae39
and edx, 0x5000
or edx, r10d
xor edx, esi
not ecx
or ecx, edx
mov edx, dword [0x140224398]
mov r10d, dword [0x14022439c]
mov r11d, edx
and r11d, r10d
add r11d, r11d
add edx, r10d
sub edx, r11d
add edx, 0xf4021857
mov r10d, edx
xor r10d, 0xd7e9ff2b
or edx, 0x281600d4
and edx, r10d
cmp edx, 0x1929b19d
je 0x1400f9c5e
cmp r8b, 0xf0
mov rdx, qword [rbp - 8]
jb 0x1400f9d6e
mov ecx, dword [0x1402243a0]
sub ecx, dword [0x1402243a4]
xor ecx, 0x4f88f94d
imul rcx, rcx, 0x6406dc57
shr rcx, 0x3e
cmp ecx, 0x245b75f9
ja 0x1400f9ca9
lea rbx, [rdx + 4]
movzx edx, byte [rdx + 3]
shl r9d, 0x12
mov ecx, r9d
not ecx
or ecx, 0x1c0000
add ecx, r9d
inc ecx
shl eax, 6
nop dword [rax]
mov r8d, dword [0x1402243a8]
mov r9d, dword [0x1402243ac]
mov r10d, r8d
not r10d
mov r11d, r9d
not r11d
mov esi, r10d
and esi, 0x8866d94d
and r8d, 0x779926b2
or r8d, esi
or r10d, r11d
and r11d, 0x8866d94d
and r9d, 0x779926b2
or r9d, r11d
xor r9d, r8d
not r10d
or r10d, r9d
imul r8d, r10d, 0xafb8352e
add r8d, 0xc1250292
and r8d, 0xf671e9e6
cmp r8d, 0x8e53bafd
jb 0x1400f9cf0
and edx, 0x3f
mov r8d, edx
and r8d, eax
add edx, eax
sub edx, r8d
not edx
not ecx
and ecx, edx
not ecx
mov edx, dword [0x1402243b0]
mov r8d, dword [0x1402243b4]
mov eax, edx
not eax
mov r9d, r8d
not r9d
mov r10d, eax
and r10d, 0x2fad1d6c
and edx, 0xd052e293
or edx, r10d
or eax, r9d
and r9d, 0x2fad1d6c
and r8d, 0xd052e293
or r8d, r9d
xor r8d, edx
not eax
or eax, r8d
add eax, 0x6f03f6d8
xor eax, 0xb5640219
add eax, 0x21bf15c7
cmp eax, 0xd3c9ba1f
ja 0x1400f9d6e
cmp ecx, 0xffff
jbe 0x1400f9f10
mov r8d, 0xf8118e73
mov r10, rbx
nop
mov eax, dword [0x1402243b8]
mov edx, dword [0x1402243bc]
add eax, edx
add eax, 0x742e7d6
or eax, 0x4452582b
imul rax, r8
shr rax, 0x3b
cmp eax, 0x9b204d40
ja 0x1400f9de0
lea esi, [rcx + 0xff0000]
mov r9d, 4
mov eax, dword [0x1402243c0]
xor edx, edx
div dword [0x1402243c4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xc8ab14c3
and edx, 0x3754eb3c
imul edx, r8d
mov r8d, eax
and r8d, 0x3754eb3c
or eax, 0x3754eb3c
imul eax, r8d
add eax, edx
shr eax, 1
mov edx, 0x871ec2ed
imul rax, rdx
shr rax, 0x35
imul eax, eax, 0xd86cbd38
cmp eax, 0x7b365a1b
ja 0x1400f9e13
shr esi, 0xa
or esi, 0xd800
nop word cs:[rax + rax]
mov eax, dword [0x1402243c8]
mov edx, eax
not edx
or edx, dword [0x1402243cc]
add eax, edx
inc eax
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x36ea1d09
and edx, 0xc915e2f6
imul edx, r8d
mov r8d, eax
and r8d, 0xc915e2f6
or eax, 0xc915e2f6
imul eax, r8d
add eax, edx
add eax, 0x61637450
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xbf5eb0c2
and edx, 0x40a14f3d
imul edx, r8d
mov r8d, eax
and r8d, 0x40a14f3c
or eax, 0x40a14f3d
imul eax, r8d
add eax, edx
cmp eax, 0xdfe12c1e
ja 0x1400f9e80
and ecx, 0x3ff
or ecx, 0xdc00
mov eax, 2
mov r15d, ecx
jmp 0x1400f9f30
mov al, 1
test al, al
je 0x1400f9f12
mov eax, 1
xor r15d, r15d
mov esi, ecx
mov r9d, 4
mov r10, rbx
nop dword [rax]
mov rcx, r12
sub rcx, r10
add rcx, 3
cmovb rcx, rdi
shr rcx, 2
lea rbx, [rcx + rax]
inc rbx
add rcx, rax
cmp rcx, 3
cmovb rbx, r9
test r14b, r14b
jne 0x1400f9f30
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x1400fafd9
mov qword [rbp + 8], r10
lea rdi, [rbx + rbx]
mov r12w, 1
jmp 0x1400f9f98
mov ebx, 4
mov edi, 8
xor r15d, r15d
xor eax, eax
mov qword [rbp + 8], rax
xor esi, esi
xor r12d, r12d
mov qword [rbp - 0x78], r13
mov eax, dword [0x1402243e8]
add eax, dword [0x1402243ec]
mov ecx, 0xbd495f79
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x619b87a7
cmp eax, 0x3cac52e3
jae 0x1400f9fe0
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.14014ee50
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1402243f0]
mov ecx, dword [0x1402243f4]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not eax
or eax, ecx
or eax, 0xedab204c
mov r13d, eax
not r13d
mov ecx, r13d
or ecx, 0x21452b0
mov edx, ecx
and edx, 0x4404b1
and eax, 0x7129a90a
imul eax, edx
and ecx, 0x1210db02
or r13d, 0x733dfbba
imul r13d, ecx
add r13d, eax
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rdi
call fcn.140107940
add rsp, 0x20
cmp r13d, 0x4aea263
jb 0x1400f9fe0
mov rcx, rax
test rax, rax
je 0x1400fb0b3
mov eax, dword [0x1402243f8]
mov edx, dword [0x1402243fc]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
add eax, 0xe71fd851
cmp eax, 0xe15d19ae
lea r13, str.Pr__
mov r10, qword [rbp + 0x10]
ja 0x1400faa40
nop dword [rax]
mov eax, dword [0x140224400]
xor eax, dword [0x140224404]
mov edx, eax
and edx, 0x7e432e64
or eax, 0x7e432e64
add eax, edx
mov edx, eax
xor edx, 0xc4004341
xor eax, 0x183e2c2e
mov r8d, eax
and r8d, 0x33d3b8b6
and edx, 0xcc2c4749
imul edx, r8d
mov r8d, eax
and r8d, 0xcc2c4749
or eax, 0xcc2c4749
imul eax, r8d
add eax, edx
mov word [rcx], si
mov qword [r10], rbx
mov qword [r10 + 8], rcx
cmp eax, 0xe12ddf74
ja 0x1400faa40
mov qword [r10 + 0x10], 1
mov r11, qword [rbp + 8]
nop word cs:[rax + rax]
mov eax, dword [0x140224408]
or eax, dword [0x14022440c]
xor eax, 0xf5aed7af
imul rax, rax, 0x54e060d3
shr rax, 0x3e
cmp eax, 0x43181025
je 0x1400fa130
mov eax, 1
mov esi, 0xcb62d80b
nop dword [rax]
mov rdi, rax
mov eax, dword [0x140224410]
mov edx, dword [0x140224414]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
or eax, 0x20691024
and eax, 0xec691024
cmp eax, 0x4893a4b8
ja 0x1400fa163
test r11, r11
lea rbx, [0x14006f9a0]
je 0x1400fa330
nop word cs:[rax + rax]
mov eax, dword [0x140224418]
and eax, dword [0x14022441c]
imul rax, rax, 0x825f123
shr rax, 0x39
add eax, 0xf0211931
cmp eax, 0xac6c61ae
jb 0x1400fa1c0
test r15w, r15w
je 0x1400fa200
xor r9d, r9d
mov ebx, r15d
jmp 0x1400fa6f0
mov eax, dword [0x140224420]
add eax, dword [0x140224424]
or eax, 0xec0258d7
and eax, 0xec1adeff
cmp eax, 0xbfb071b7
je 0x1400fa200
nop dword [rax]
mov eax, dword [0x140224428]
mov edx, dword [0x14022442c]
not eax
not edx
and edx, eax
mov eax, edx
not eax
and edx, 0x13d3780
mov r8d, eax
and r8d, 0xfec2c87f
imul r8d, edx
mov edx, eax
and edx, 0x13d3780
or eax, 0x13d3780
imul eax, edx
add eax, r8d
xor eax, 0x865dd9cd
add eax, 0xade64cec
cmp eax, 0x3771a250
ja 0x1400fa220
cmp r11, qword [rbp - 0x20]
je 0x1400fa330
lea r8, [r11 + 1]
movzx ebx, byte [r11]
mov eax, dword [0x140224430]
xor edx, edx
div dword [0x140224434]
add eax, 0xa5fa789a
mov edx, eax
not edx
and edx, 0xb8a0e47d
and eax, 0x475f1b82
sub eax, edx
cmp eax, 0x6ea294ef
je 0x1400fa280
test bl, bl
js 0x1400fa3e0
nop word cs:[rax + rax]
mov eax, dword [0x140224450]
xor eax, dword [0x140224454]
xor eax, 0x9cba18a8
imul rax, rax, 0x279df86d
shr rax, 0x3d
mov edx, eax
xor edx, 0x1ae2cba3
add edx, eax
cmp edx, 0x1d165360
je 0x1400fa2c0
nop
mov eax, dword [str.FcQJ]
xor edx, edx
div dword [0x14022445c]
mov edx, eax
and edx, 0x5bf5c021
xor edx, 0x43a18021
and eax, 0x43a18021
or eax, edx
xor eax, 0x9154021
or eax, 0xa40a3fde
add eax, 0xbc1cdee4
jae 0x1400fa2f0
mov al, 1
jmp 0x1400fa6e0
mov rsi, qword [r10]
cmp r12w, 1
jne 0x1400faa50
mov eax, dword [0x1402244a8]
xor edx, edx
div dword [0x1402244ac]
nop dword [rax]
mov eax, dword [0x1402244b0]
xor edx, edx
div dword [0x1402244b4]
add eax, 0x971c59c1
imul rax, rax, 0x66f224b7
shr rax, 0x3d
add eax, 0xfaf95da7
cmp eax, 0xb04df757
jb 0x1400fa350
nop word [rax + rax]
mov eax, dword [0x1402244b8]
mov edx, dword [0x1402244bc]
add eax, edx
add eax, 0xe9baa16d
and eax, 0xafd0a476
imul rax, rax, 0xef73f27
shr rax, 0x3b
cmp eax, 0xcea74295
je 0x1400fa380
xor ebx, ebx
mov r11d, 0
mov r12d, 0
mov r13d, 0
cmp rdi, rsi
mov esi, 0xcb62d80b
je 0x1400fa752
jmp 0x1400fa7d3
mov eax, dword [0x140224438]
sub eax, dword [0x14022443c]
add eax, 0xb00dffd7
or eax, 0x255169e8
mov edx, eax
and edx, 0x506d8b69
add edx, edx
neg edx
add eax, edx
add eax, 0x506d8b69
cmp eax, 0xf1c4bc8b
jb 0x1400fa3e0
mov eax, ebx
xor al, 0xe0
and al, bl
lea r8, [r11 + 2]
movzx eax, al
mov r13, r11
movzx edx, byte [r11 + 1]
mov r9d, dword [0x140224440]
mov r10d, dword [0x140224444]
mov r11d, r9d
not r11d
and r11d, r10d
mov esi, r10d
not esi
and esi, r9d
imul esi, r11d
mov r11d, r9d
and r11d, r10d
or r9d, r10d
imul r9d, r11d
add r9d, esi
add r9d, 0x8a600dd
mov r10d, r9d
and r10d, 0xb20e820d
or r9d, 0xb20e820d
add r9d, r10d
mov r10d, r9d
xor r10d, 0x4c73d1a7
and r9d, 0x338c2e58
add r9d, r9d
sub r9d, r10d
cmp r9d, 0xf1e9d4d8
ja 0x1400fa425
mov r10d, eax
shl r10d, 6
and dl, 0x3f
mov r9d, dword [0x140224448]
sub r9d, dword [0x14022444c]
mov r11d, 0xae8e40cd
imul r9, r11
shr r9, 0x3e
imul r9d, r9d, 0x3f8adf2c
add r9d, 0x624c4fa0
cmp r9d, 0xc97ecbb6
ja 0x1400fa49d
movzx r9d, dl
cmp bl, 0xdf
mov esi, 0xcb62d80b
jbe 0x1400fa6c8
mov r11, r13
nop word cs:[rax + rax]
mov edx, dword [0x140224460]
or edx, dword [0x140224464]
mov r8d, edx
and r8d, 0x360e5f57
or edx, 0x360e5f57
add edx, r8d
xor edx, 0x831800
or edx, 0xdf1ce7cc
cmp edx, 0xc7a6b28a
jb 0x1400fa4f0
mov r10, qword [rbp + 0x10]
test r14b, r14b
jne 0x1400fa527
movzx edx, byte [r11 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp bl, 0xf0
jb 0x1400fa86c
nop word cs:[rax + rax]
mov r8d, dword [0x140224468]
mov r9d, dword [0x14022446c]
mov r10d, r9d
and r10d, r8d
add r8d, r9d
sub r8d, r10d
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0x1eeb7fc0
and r9d, 0x2114803f
imul r9d, r10d
mov r10d, r8d
and r10d, 0x2114803f
or r8d, 0x2114803f
imul r8d, r10d
add r8d, r9d
xor r8d, 0x20c55312
and r8d, 0x33c57bb7
cmp r8d, 0x3cb4ae6
jb 0x1400fa550
nop word cs:[rax + rax]
mov r8d, dword [0x140224470]
mov r9d, dword [0x140224474]
mov r10d, r9d
not r10d
mov r11d, r8d
and r11d, r10d
or r10d, r8d
not r10d
imul r10d, r11d
mov r11d, r8d
and r11d, r9d
or r8d, r9d
imul r8d, r11d
add r8d, r10d
mov r9d, r8d
not r9d
and r9d, 0x95ba0daa
and r8d, 0x6a45f255
sub r8d, r9d
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0xbed7be2d
and r9d, 0x412841d2
imul r9d, r10d
mov r10d, r8d
and r10d, 0x412841d2
or r8d, 0x412841d2
imul r8d, r10d
add r8d, r9d
cmp r8d, 0x3d31604a
je 0x1400fa5c0
and eax, 7
shl eax, 0x12
mov r11, r13
movzx r8d, byte [r13 + 3]
add r11, 4
nop dword [rax]
mov r9d, dword [0x140224478]
mov r10d, dword [0x14022447c]
xor r10d, r9d
not r10d
and r10d, r9d
xor r10d, 0x1824440
or r10d, 0xa87d319d
add r10d, 0x3653f163
cmp r10d, 0xe3646d61
jb 0x1400fa660
shl edx, 6
mov r9d, r8d
xor r9b, 0xc0
and r9b, r8b
movzx ebx, r9b
or ebx, edx
mov edx, eax
and edx, ebx
add ebx, eax
sub ebx, edx
mov r10, qword [rbp + 0x10]
cmp ebx, 0xffff
ja 0x1400fa883
mov r8, r11
jmp 0x1400fa324
or r10d, r9d
mov ebx, r10d
mov al, 1
mov r10, qword [rbp + 0x10]
nop word cs:[rax + rax]
test al, al
je 0x1400fa6e0
xor r9d, r9d
mov r11, r8
nop word [rax + rax]
mov eax, dword [0x1402244a0]
xor edx, edx
div dword [0x1402244a4]
and eax, 0x36f1515a
add eax, 0xfff85a25
imul rax, rsi
shr rax, 0x3f
cmp eax, 0x7c4ee78a
je 0x1400fa6f0
cmp rdi, qword [r10]
jne 0x1400fa7d0
mov rax, qword [rbp - 0x20]
sub rax, r11
add rax, 3
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
shr rax, 2
movzx r13d, r12w
cmp r9w, 1
sbb rax, 0xffffffffffffffff
test r14b, r14b
jne 0x1400fa747
add r13, rax
mov r15d, r9d
mov qword [rbp + 8], rbx
mov rbx, r15
mov r14, r12
mov r12, r11
mov eax, dword [0x1402244d0]
xor edx, edx
div dword [str.h9_]
add eax, 0x1f377714
mov ecx, 0xdfa7c795
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xea974661
je 0x1400fa840
xor r15d, r15d
nop dword [rax]
lea r8, [r13 + 1]
sub rsp, 0x20
mov rcx, r10
mov rdx, rdi
call fcn.14014f290
mov r10, qword [rbp + 0x10]
add rsp, 0x20
test r15b, r15b
jne 0x1400fa790
mov rcx, qword [r10 + 8]
mov r11, r12
mov r12, r14
xor r14d, r14d
mov r15, rbx
mov rbx, qword [rbp + 8]
jmp 0x1400fa7d3
mov r15d, r9d
mov eax, dword [0x1402244c0]
mov edx, dword [0x1402244c4]
mov r8d, eax
and r8d, edx
add r8d, r8d
add eax, edx
sub eax, r8d
mov edx, eax
not edx
and edx, 0x46895ade
mov r8d, eax
and r8d, 0xb976a521
imul r8d, edx
mov edx, eax
and edx, 0x46895ade
or eax, 0x46895ade
imul eax, edx
add eax, r8d
imul rax, rax, 0x696706a5
shr rax, 0x3d
imul eax, eax, 0x88830f5c
cmp eax, 0x5f67529b
lea r13, str.Pr__
jbe 0x1400fa9a0
jmp 0x1400faa20
mov eax, r13d
and eax, 1
mov r8, r13
or r8, 1
add r8, rax
sub rsp, 0x20
mov rcx, r10
mov rdx, rdi
call fcn.140177790
mov r10, qword [rbp + 0x10]
add rsp, 0x20
jmp 0x1400fa78a
add r11, 3
shl eax, 0xc
or edx, eax
mov ebx, edx
cmp ebx, 0xffff
jbe 0x1400fa6c0
mov eax, dword [0x140224480]
xor edx, edx
div dword [0x140224484]
mov eax, dword [0x140224488]
xor eax, dword [0x14022448c]
mov edx, eax
xor edx, 0x46d5e673
or eax, 0xb92a198c
and eax, edx
imul eax, eax, 0x593bd8f
mov edx, eax
and edx, 0x67177b93
add edx, edx
neg edx
add eax, edx
add eax, 0x67177b93
cmp eax, 0x99aad39f
jb 0x1400fa891
mov eax, ebx
and eax, 0xff0000
mov edx, ebx
xor edx, 0xff0000
lea eax, [rdx + rax*2]
shr eax, 0xa
nop word cs:[rax + rax]
mov edx, dword [0x140224494]
mov r8d, edx
xor r8d, edx
not r8d
and r8d, dword [0x140224490]
xor r8d, edx
add r8d, 0x1ca98b7e
not r8d
and r8d, 0x222408
cmp r8d, 0x10afb417
ja 0x1400fa8f0
or eax, 0xd800
mov edx, ebx
not edx
or edx, 0x3ff
lea r8d, [rbx + rdx]
inc r8d
add ebx, edx
mov edx, r8d
and edx, 0x23ff
xor r8d, 0xffffdc00
lea r9d, [r8 + rbx]
inc r9d
sub r9d, edx
mov ebx, eax
nop word [rax + rax]
mov eax, dword [0x140224498]
sub eax, dword [0x14022449c]
mov edx, eax
and edx, 0x66fb5ae8
add edx, edx
neg edx
add eax, edx
add eax, 0xe6fb5ae8
mov edx, eax
not edx
or eax, 0x23549648
or edx, 0xdcab69b7
and edx, eax
cmp edx, 0xebeb94c1
je 0x1400fa960
jmp 0x1400fa6f0
mov eax, dword [0x1402244c8]
mov edx, dword [0x1402244cc]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
lea edx, [rax + r8]
add edx, 0xca0b3d18
mov eax, edx
not eax
and eax, 0x46184e46
mov r8d, edx
and r8d, 0xb9e7b1b9
imul r8d, eax
mov eax, edx
and eax, 0x46184e46
or edx, 0x46184e46
imul edx, eax
add edx, r8d
xor edx, 0xc4b77dfd
lea rax, [rdi + 1]
mov word [rcx + rdi*2], bx
mov qword [r10 + 0x10], rax
cmp edx, 0xa6ea865e
jb 0x1400fa160
mov word [rcx + rdi*2], bx
mov eax, edi
and eax, 1
mov rdx, rdi
xor rdx, 1
lea rax, [rdx + rax*2]
mov qword [r10 + 0x10], rax
jmp 0x1400fa9a0
mov word [rcx], si
mov qword [r10], rbx
mov qword [r10 + 8], rcx
jmp 0x1400fa0b0
mov rcx, qword [r10 + 8]
sub rsp, 0x40
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000
mov dword [rsp + 0x20], 0x10000
mov qword [rbp + 8], rcx
mov edx, dword [rbp - 0x24]
mov r8d, dword [rbp + 4]
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
add rsp, 0x40
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400faf50
mov eax, dword [0x140224540]
mov ecx, dword [0x140224544]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0xf74cfe38
imul eax, eax, 0xcc16dbad
not eax
and eax, 0x8062427c
cmp eax, 0x931e8301
jne 0x1400faaf3
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r12, qword [rbp - 0x58]
nop word [rax + rax]
mov eax, dword [0x14022454c]
add eax, dword [0x140224548]
xor eax, 0xabc05dfa
imul rdi, rax, 0x5161ed27
shr rdi, 0x3e
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
cmp edi, 0xb3cd0473
ja 0x1400fab00
mov ecx, dword [0x140224550]
xor ecx, dword [0x140224554]
imul ecx, ecx, 0xc28421da
mov edx, 0xb2cf13b9
imul rcx, rdx
shr rcx, 0x3e
imul ecx, ecx, 0xa5b96b2a
cmp ecx, 0x92a8771d
je 0x1400fab31
mov rdi, qword [rbp - 0x60]
mov r9d, dword [rbp - 0x28]
nop word cs:[rax + rax]
mov ecx, dword [0x140224558]
and ecx, dword [0x14022455c]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x407170fa
and edx, 0xbf8e8f05
imul edx, r8d
mov r8d, ecx
and r8d, 0xbf8e8f05
or ecx, 0xbf8e8f05
imul ecx, r8d
add ecx, edx
mov edx, ecx
and edx, 0xacb51b6
add edx, edx
sub ecx, edx
add ecx, 0x8acb51b6
not ecx
or ecx, 0xe084bac0
cmp ecx, 0xd47b145d
jb 0x1400fab70
cmp r9d, 0xa
jge 0x1400faf11
mov ecx, dword [0x1402245f8]
mov edx, dword [0x1402245fc]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
not ecx
or ecx, 0x142682d2
mov edx, ecx
xor edx, 0x420
xor ecx, 0xfadb7ac5
mov r8d, ecx
and r8d, 0x3194909
and edx, 0xf8c236e4
imul edx, r8d
mov r8d, ecx
and r8d, 0xece4b436
or ecx, 0xfce6b6f6
imul ecx, r8d
add ecx, edx
cmp ecx, 0x26935cad
jb 0x1400fabd6
cmp eax, 5
jne 0x1400fac50
mov eax, r9d
mov qword [rbp - 0x38], rax
jmp 0x1400fac80
test r14b, r14b
jne 0x1400fac50
cmp eax, 0x57
sete cl
cmp dword [rbp + 4], 0
setne dl
sete r8b
or r8b, cl
add r8b, dl
inc r8b
mov dword [rbp + 4], 0
test r8b, 1
je 0x1400faf11
test rsi, rsi
je 0x1400faee0
mov eax, dword [0x140224628]
xor edx, edx
div dword [0x14022462c]
add eax, 0xe2b11cbf
mov ecx, eax
and ecx, 0x1e2e93c6
xor eax, 0x9e2e93c6
lea eax, [rax + rcx*2]
add eax, 0x42251fa4
cmp eax, 0xabc2d966
jae 0x1400fad70
jmp 0x1400fae10
mov eax, dword [0x1402244e0]
mov ecx, dword [0x1402244e4]
not ecx
add eax, ecx
add eax, 0xaac73e31
or eax, 0x31c7fc88
mov rdi, qword [0x14022cb48]
cmp eax, 0xf8ae17c0
jne 0x1400fad10
mov rax, qword [0x14022cb48]
jmp 0x1400facd0
mov eax, dword [0x1402244e8]
sub eax, dword [0x1402244ec]
add eax, 0xf1042666
xor eax, 0x1718852
and eax, 0xc5758dd2
cmp eax, 0x4091e734
jae 0x1400fad45
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r13
add rsp, 0x20
mov bl, 1
nop word [rax + rax]
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r13
add rsp, 0x20
test bl, bl
je 0x1400fad50
jmp 0x1400f9960
mov ecx, dword [0x140224634]
mov eax, ecx
xor eax, eax
not eax
and eax, dword [0x140224630]
xor eax, ecx
mov ecx, eax
xor ecx, 0x3a2256b6
and eax, 0x45dda949
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x885dea81
and eax, 0x77a2157e
add eax, eax
sub eax, ecx
mov ecx, eax
and ecx, 0x5f6435fb
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x5f6435fb
mov rdi, qword [0x14022cb48]
cmp eax, 0x95cc827c
jb 0x1400fae10
mov eax, dword [0x140224638]
mov ecx, dword [0x14022463c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0xf7a7481d
or ecx, 0x858b7e2
and ecx, eax
cmp ecx, 0xe792e475
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [rbp + 8]
jne 0x1400fae20
jmp 0x1400fae78
mov rax, qword [0x14022cb48]
jmp 0x1400fad70
mov eax, dword [0x140224640]
mov ecx, dword [0x140224644]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rsi, rax, 0x1e71af6b
shr rsi, 0x3c
or esi, 0x6ee35e84
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call r12
add rsp, 0x20
cmp esi, 0x64e718b1
jae 0x1400fae90
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call r12
add rsp, 0x20
jmp 0x1400fae20
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x58]
nop dword [rax + rax]
mov eax, dword [0x140224648]
xor edx, edx
div dword [0x14022464c]
mov ecx, eax
not ecx
or ecx, 0x90010200
and ecx, 0xd1938380
and eax, 0x286c5052
or eax, ecx
imul rax, rax, 0x4dac053b
shr rax, 0x3d
cmp eax, 0x6a88096b
ja 0x1400faea0
nop word [rax + rax]
mov eax, dword [0x140224650]
add eax, dword [0x140224654]
mov ecx, eax
and ecx, 0x2974f56e
or eax, 0x2974f56e
add eax, ecx
cmp eax, 0x641006a2
je 0x1400faee0
xor r15d, r15d
lea rsi, [0x140071fc0]
jmp 0x1400f96b0
mov ecx, dword [0x140224600]
and ecx, dword [0x140224604]
xor ecx, 0x60660e9a
add ecx, 0x1a426be
mov edx, ecx
and edx, 0x1af9e076
add edx, edx
sub ecx, edx
add ecx, 0x9af9e076
cmp ecx, 0xd8794a3b
mov r9, qword [rbp - 0x30]
jae 0x1400fb932
jmp 0x1400fb985
mov qword [rbp + 0x10], r15
mov r14, qword [rbp - 0x30]
mov r15, qword [rbp - 0x70]
mov r12, qword [rbp - 0x68]
mov r13, qword [rbp - 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x1402244f0]
xor edx, edx
div dword [0x1402244f4]
mov ecx, eax
xor ecx, 0xc50203a2
xor eax, 0x30283049
and eax, 0x30e8f849
and ecx, 0xcf1707b6
or ecx, eax
cmp ecx, 0x1bb92828
jb 0x1400faf70
test rsi, rsi
je 0x1400fb194
mov eax, dword [0x1402244f8]
sub eax, dword [0x1402244fc]
add eax, 0xcdef7f78
mov ecx, eax
xor ecx, 0xd0445c5b
or eax, 0x2fbba3a4
and eax, ecx
cmp eax, 0x2dd7542
jne 0x1400fb0b5
jmp 0x1400fb0cf
mov eax, dword [0x1402243d0]
imul eax, dword [0x1402243d4]
mov ecx, eax
xor ecx, 0x6066ee05
add ecx, eax
and eax, 0x9f9911fa
sub ecx, eax
add ecx, 0xeff00052
xor ecx, 0xfc381c33
cmp ecx, 0x2a3bf9e7
je 0x1400fb071
mov eax, dword [0x1402243d8]
mov ecx, dword [0x1402243dc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0xcd781fb4
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x676b3e51
and ecx, 0x9894c1ae
imul ecx, edx
mov edx, eax
and edx, 0x9894c1ae
or eax, 0x9894c1ae
imul eax, edx
add eax, ecx
add eax, 0xd3070a05
ud2
ud2
ud2
mov eax, dword [0x140224504]
add eax, dword [0x140224500]
mov rbx, qword [0x14022cb48]
cmp eax, 0x8593080
jne 0x1400fb0d8
mov rax, qword [0x14022cb48]
jmp 0x1400fb0b5
mov eax, dword [0x140224508]
imul eax, dword [0x14022450c]
and eax, 0x7ffffff
xor eax, 0xd4d0f2
add eax, 0x35ec3dff
or eax, 0xf83c7fd4
cmp eax, 0xb46a820a
mov rdi, qword [rbp + 8]
jb 0x1400fb16b
mov esi, dword [0x140224510]
sub esi, dword [0x140224514]
add esi, 0xf6e9433
mov eax, esi
not eax
and eax, 0x7f400ec
mov ecx, esi
and ecx, 0xf80bff13
imul ecx, eax
mov eax, esi
and eax, 0x7f400ec
or esi, 0x7f400ec
imul esi, eax
add esi, ecx
mov eax, esi
not eax
and eax, 0xb6e9cb01
and esi, 0x491634fc
sub esi, eax
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xa65a5051
jae 0x1400fb183
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400fb104
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400fb190
xor eax, eax
test al, al
je 0x1400fb1a3
mov dword [r12 + 0x10], 0
movzx edx, byte [rbp + 0x1e]
movzx r8d, byte [rbp + 0x1f]
nop dword [rax]
mov eax, dword [0x140224518]
sub eax, dword [0x14022451c]
xor eax, 0x920142
or eax, 0x776ddeb8
add eax, 0x3029494d
mov dword [r12 + 0x10], 0
cmp eax, 0x61af3de9
ja 0x1400fb1b0
mov eax, dword [0x140224520]
or eax, dword [0x140224524]
add eax, 0xe0d3a7f8
imul rcx, rax, 0x41f52005
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xd3ac745a
cmp eax, 0x33d27e14
jne 0x1400fb243
mov dword [r12], 0
xorps xmm0, xmm0
movups xmmword [r12 + 0x14], xmm0
mov word [r12 + 0x24], 0
mov byte [r12 + 0x21], r8b
mov eax, edx
xor al, 1
mov byte [r12 + 0x20], al
mov dword [r15], 0x18
mov qword [r15 + 8], 0
xor dl, 1
xorps xmm0, xmm0
nop dword [rax]
mov eax, dword [0x140224528]
add eax, dword [0x14022452c]
imul eax, eax, 0xf0c70917
add eax, 0x1fc25a7c
imul rcx, rax, 0x49369909
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
mov dword [r12], 0
movups xmmword [r12 + 0x14], xmm0
mov word [r12 + 0x24], 0
mov byte [r12 + 0x21], r8b
mov byte [r12 + 0x20], dl
mov dword [r15], 0x18
mov qword [r15 + 8], 0
cmp eax, 0x56bad962
ja 0x1400fb250
mov eax, dword [0x140224530]
or eax, dword [0x140224534]
lea ecx, [rax - 0x48cf9441]
mov edx, ecx
and edx, 0x9345acee
xor ecx, 0x6cba5311
add eax, ecx
add eax, 0xb7306bbf
sub eax, edx
cmp eax, 0x497d68a7
mov rdi, qword [rbp - 8]
jb 0x1400fb345
mov eax, dword [0x140224538]
mov ecx, dword [0x14022453c]
not eax
not ecx
or ecx, eax
not ecx
mov esi, 0x8456a3f5
imul rsi, rcx
shr rsi, 0x3f
not esi
and esi, 0x1ae46cf5
xor esi, 0x19a03301
add esi, 0xa7a1b976
mov dword [r15 + 0x10], 1
mov qword [r12 + 8], r15
sub rsp, 0x20
mov rcx, rdi
mov rdx, r13
mov r8, r12
call fcn.140150a70
add rsp, 0x20
cmp esi, 0x448ca6a0
jae 0x1400fb36d
mov dword [r15 + 0x10], 1
mov qword [r12 + 8], r15
sub rsp, 0x20
mov rcx, rdi
mov rdx, r13
mov r8, r12
call fcn.1400c20b0
add rsp, 0x20
jmp 0x1400fb2e5
mov rcx, rdx
test rax, rax
je 0x1400fb3a5
mov eax, dword [0x1402245b4]
add eax, dword [0x1402245b0]
and eax, 0x30eec4aa
imul eax, eax, 0x8a69365e
and eax, 0xb5d067a8
cmp eax, 0xb7df55e8
mov r15, qword [rbp + 0x10]
jbe 0x1400fb67d
jmp 0x1400fb6a8
mov eax, dword [0x140224560]
xor edx, edx
div dword [0x140224564]
or eax, 0xeea73064
imul eax, eax, 0xf780f7e2
cmp eax, 0x2f23a1d6
mov rdx, qword [rbp + 0x10]
jne 0x1400fb3d0
mov qword [r14 + 8], rdx
nop dword [rax]
mov eax, dword [0x140224568]
and eax, dword [0x14022456c]
add eax, 0x2577edf6
imul rax, rax, 0x67e147c5
shr rax, 0x3e
imul eax, eax, 0xaf52779c
mov qword [r14 + 8], rdx
cmp eax, 0x5de98a9a
je 0x1400fb3d0
mov eax, dword [0x140224570]
xor eax, dword [0x140224574]
mov edx, eax
not edx
and edx, 0x18b027e
and eax, 0xfe74fd81
sub eax, edx
add eax, 0x5b7b8ce3
mov edx, 0x9d21e079
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x60138ccb
jbe 0x1400fb43f
mov qword [r14 + 0x10], rcx
mov qword [r14], 0
mov r8d, 0xaa4a1dcb
nop word cs:[rax + rax]
mov eax, dword [0x140224578]
xor edx, edx
div dword [0x14022457c]
imul rax, r8
shr rax, 0x3e
add eax, 0x63121f42
and eax, 0x23000f07
mov qword [r14 + 0x10], rcx
mov qword [r14], 0
cmp eax, 0x11bfa670
jb 0x1400fb450
mov eax, 0x9c9bb3bf
nop word [rax + rax]
mov ecx, dword [0x140224580]
mov edx, dword [0x140224584]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xf57ea314
cmp ecx, 0x500575d0
jb 0x1400fb490
cmp qword [rbp - 0x10], 0
je 0x1400fb668
mov eax, dword [0x140224588]
mov ecx, dword [0x14022458c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0x2084c0df
and eax, ecx
and eax, 0xaca6e0df
mov ecx, 0xbfd72f75
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x995295b8
jne 0x1400fb530
mov rax, qword [0x14022cb48]
nop word cs:[rax + rax]
mov eax, dword [0x140224590]
mov ecx, dword [0x140224594]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
imul eax, eax, 0xd6a7af92
mov ecx, eax
xor ecx, 0x79f0af5f
add ecx, eax
and eax, 0x60f50a0
sub ecx, eax
and ecx, 0x5cf8533d
mov rdi, qword [0x14022cb48]
cmp ecx, 0x3582d443
jb 0x1400fb530
mov eax, dword [0x14022459c]
add eax, dword [0x140224598]
mov ecx, eax
xor ecx, 0xace89c76
and eax, 0x53176389
add eax, eax
sub eax, ecx
and eax, 0xac855101
or eax, 0x537886c6
cmp eax, 0x5755207c
mov rbx, qword [rbp - 8]
jb 0x1400fb615
mov esi, dword [0x1402245a0]
mov eax, dword [0x1402245a4]
mov ecx, eax
not ecx
mov edx, esi
and edx, ecx
or ecx, esi
not ecx
imul ecx, edx
mov edx, esi
and edx, eax
or esi, eax
imul esi, edx
add esi, ecx
mov eax, esi
not eax
mov ecx, esi
or ecx, 0x462a6ab
and eax, 0x52994154
mov edx, ecx
and edx, 0xad26be02
imul edx, eax
and ecx, 0x52d941fd
or esi, 0x56fbe7ff
imul esi, ecx
add esi, edx
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x87dcc699
jne 0x1400fb630
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400fb5a4
mov eax, dword [0x1402245a8]
mov ecx, dword [0x1402245ac]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0x55729391
or eax, 0xffae5559
mov ecx, eax
and ecx, 0x68c3a041
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x68c3a041
cmp eax, 0x2ccf2e6b
jbe 0x1400fb630
movaps xmm6, xmmword [rbp + 0x20]
lea rsp, [rbp + 0x38]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x1402245b8]
xor edx, edx
div dword [0x1402245bc]
imul eax, eax, 0xb55a4aba
add eax, 0xa59d6326
mov qword [r14 + 8], rcx
mov qword [r14], 1
cmp eax, 0x183605ec
jae 0x1400fb6c0
mov qword [r14 + 8], rcx
mov qword [r14], 1
jmp 0x1400fb67d
mov eax, dword [0x1402245c0]
sub eax, dword [0x1402245c4]
xor eax, 0x689ee54b
imul rax, rax, 0x2563154f
shr rax, 0x3d
cmp eax, 0x1c439af4
je 0x1400fb6c0
mov rbx, r15
nop word cs:[rax + rax]
mov eax, dword [0x1402245c8]
or eax, dword [0x1402245cc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd13500c5
and ecx, 0x2ecaff3a
imul ecx, edx
mov edx, eax
and edx, 0x2ecaff3a
or eax, 0x2ecaff3a
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x7c3b5e6
mov edx, eax
and edx, 0xf83c4a18
imul edx, ecx
mov ecx, eax
and ecx, 0x7c3b5e6
or eax, 0x7c3b5e6
imul eax, ecx
add eax, edx
add eax, 0x7af7509f
cmp eax, 0xb1f94729
ja 0x1400fb6f0
cmp qword [rbp - 0x10], 0
je 0x1400fb912
mov eax, dword [0x1402245d0]
mov ecx, dword [0x1402245d4]
mov edx, eax
not edx
or eax, ecx
not ecx
or ecx, edx
not ecx
not eax
or eax, ecx
not eax
imul eax, eax, 0xd87692e1
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xc0027670
mov r8d, edx
and r8d, 0xdb3b39d0
and ecx, 0x24c4800f
imul ecx, r8d
and edx, 0x24c4c62f
or eax, 0xe4c6f67f
imul eax, edx
add eax, ecx
cmp eax, 0x7f40a6c2
jbe 0x1400fb7d0
mov rax, qword [0x14022cb48]
nop word cs:[rax + rax]
mov eax, dword [0x1402245d8]
and eax, dword [0x1402245dc]
or eax, 0x4711f107
add eax, 0xa9df02e2
or eax, 0xa74be50d
mov rdi, qword [0x14022cb48]
cmp eax, 0x61e28d6d
jb 0x1400fb7d0
mov eax, dword [0x1402245e0]
imul eax, dword [0x1402245e4]
imul rax, rax, 0x1f26245d
shr rax, 0x3c
lea ecx, [rax - 0x54f8dd02]
add eax, eax
sub eax, ecx
mov ecx, eax
and ecx, 0x450dc03
or eax, 0xa654dcdb
add eax, ecx
cmp eax, 0xe26187cd
mov r14, qword [rbp - 8]
jb 0x1400fb882
mov eax, dword [0x1402245e8]
xor eax, dword [0x1402245ec]
or eax, 0xd1363abb
lea ecx, [rax - 0x7076028d]
mov edx, ecx
and edx, 0x9e044
xor ecx, 0xefc61d3a
lea esi, [rax + rcx]
add esi, 0x8f89fd73
sub esi, edx
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call fcn.14014eed0
add rsp, 0x20
cmp esi, 0x56d466da
jae 0x1400fb8a0
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call fcn.14014eed0
add rsp, 0x20
jmp 0x1400fb835
mov ecx, dword [0x1402245f0]
and ecx, dword [0x1402245f4]
mov eax, ecx
not eax
or ecx, 0x7a27e317
or eax, 0x85d81ce8
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0x3b0aae85
mov edx, eax
and edx, 0xc4f5517a
imul edx, ecx
mov ecx, eax
and ecx, 0x3b0aae85
or eax, 0x3b0aae85
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8392e1e4
and ecx, 0x7c6d1e1b
imul ecx, edx
mov edx, eax
and edx, 0x7c6d1e1b
or eax, 0x7c6d1e1b
imul eax, edx
add eax, ecx
cmp eax, 0x920f9a29
je 0x1400fb8a0
cmp r15, 0xffffffffffffffff
je 0x1400fb668
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400fb668
mov ecx, dword [0x140224608]
xor ecx, dword [0x14022460c]
mov edx, ecx
and edx, 0x7a383c23
add edx, edx
neg edx
add ecx, edx
add ecx, 0x7a383c23
not ecx
or ecx, 0x48138200
and ecx, 0xd8138368
mov rdx, rax
shl rdx, 0x20
lea r8, [rdx*2 + 2]
sub r8, rdx
mov qword [r9 + 8], r8
mov qword [r9], 1
cmp ecx, 0x901441c8
jne 0x1400fb9a4
mov rcx, rax
shl rcx, 0x20
lea rdx, [rcx*2 + 2]
sub rdx, rcx
mov qword [r9 + 8], rdx
mov qword [r9], 1
jmp 0x1400fb932
mov rbx, 0xffffffffffffffff
test rsi, rsi
je 0x1400fb6f0
mov eax, dword [0x140224614]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x140224610]
xor ecx, eax
or ecx, 0x7f3e5bff
add ecx, 0x568efdc0
cmp ecx, 0xe83f166e
ja 0x1400fba0f
mov eax, dword [0x140224618]
xor eax, dword [0x14022461c]
add eax, 0xab6bd295
mov edx, 0x8436fe63
imul rdx, rax
shr rdx, 0x3c
or edx, 0x6716865b
mov rcx, qword [0x14022cb48]
cmp edx, 0x1f79dec5
jae 0x1400fba18
mov rax, qword [0x14022cb48]
jmp 0x1400fb9dc
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140224620]
xor edx, edx
div dword [0x140224624]
or eax, 0x9a623348
mov ecx, eax
xor ecx, 0x4e8972a0
add ecx, eax
and eax, 0xb1768d5f
sub ecx, eax
mov eax, ecx
and eax, 0x4d732d61
xor ecx, 0x4d732d61
lea eax, [rcx + rax*2]
cmp eax, 0xf574a42
je 0x1400fba30
jmp 0x1400fb6f0