Function at 0x1400642b0
Capabilities:
Check for debugger via api
Check for process debug object
Check for time delay via queryperformancecounter
Check processdebugflags
Check processdebugport
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov eax, dword [0x14158b8f8]
xor edx, edx
div dword [0x14158b8fc]
imul eax, eax, 0x2681706f
add eax, 0xc34a83ac
imul rax, rax, 0x4108914b
shr rax, 0x3e
cmp eax, 0x9cc61281
jbe 0x140064300
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
nop dword [rax]
mov eax, dword [0x14158b900]
xor eax, dword [0x14158b904]
add eax, 0x710977b5
mov ecx, eax
xor ecx, 0x4c0ac24
xor eax, 0x49044001
and eax, 0x5b055309
and ecx, 0xa4faacf6
or ecx, eax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r13, rsp
cmp ecx, 0xf4cf8fff
ja 0x140064300
mov eax, dword [0x14158b908]
imul eax, dword [0x14158b90c]
mov ecx, eax
not ecx
and ecx, 0x7478b4bd
mov edx, eax
and edx, 0xb874b42
imul edx, ecx
mov ecx, eax
and ecx, 0x7478b4bd
or eax, 0x7478b4bd
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x9bfd6506
mov r8d, edx
and r8d, 0x3d315ed3
and ecx, 0x40028028
imul ecx, r8d
and edx, 0xc2cea12c
or eax, 0xdbffe52e
imul eax, edx
add eax, ecx
cmp eax, 0x12a8e597
jae 0x140064416
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov ecx, 0xa6c8daf5
nop dword [rax + rax]
mov edx, dword [0x14158b910]
and edx, dword [0x14158b914]
imul rdx, rcx
shr rdx, 0x3d
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r14, rsp
cmp edx, 0x3d201f02
je 0x140064420
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x28], r8
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov qword [rdi], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
add rsp, 0x20
test eax, eax
je 0x140064857
nop dword [rax]
mov eax, dword [0x14158b918]
imul eax, dword [0x14158b91c]
imul eax, eax, 0xd063821f
add eax, 0x176e656a
imul rax, rax, 0x47e98f6d
shr rax, 0x3e
cmp eax, 0x794731af
ja 0x140064500
mov r10, qword [rdi]
mov ecx, dword [0x14158b920]
mov edx, dword [0x14158b924]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x20116810
and ecx, 0x8c2404ce
or ecx, r9d
or eax, r8d
and r8d, 0x20116810
and edx, 0x8c2404ce
or edx, r8d
xor edx, ecx
not eax
or eax, edx
and eax, 0xac356cde
mov ecx, eax
xor ecx, 0x51b93abf
or eax, 0xac044440
and eax, ecx
mov ecx, 0xd445acd9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x43e474c2
jbe 0x1400645a0
mov rax, qword [0x1415acbb0]
nop
mov ecx, dword [0x14158b928]
mov edx, dword [0x14158b92c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xa51f2dc0
and ecx, 0x5ae0d23f
or ecx, r9d
or eax, r8d
and r8d, 0xa51f2dc0
and edx, 0x5ae0d23f
or edx, r8d
xor edx, ecx
not eax
or eax, edx
add eax, 0x49e1c42d
or eax, 0x736fa6af
add eax, 0xc19a0e20
mov rcx, qword [0x1415acbb0]
cmp eax, 0xd978f307
ja 0x1400645a0
test rcx, rcx
jne 0x1400648e6
nop dword [rax + rax]
mov eax, dword [0x14158b930]
xor eax, dword [0x14158b934]
add eax, 0x9bdab5ea
mov ecx, eax
not ecx
and ecx, 0xc0145cd9
mov edx, eax
and edx, 0x3feba326
imul edx, ecx
mov ecx, eax
and ecx, 0xc0145cd9
or eax, 0xc0145cd9
imul eax, ecx
add eax, edx
xor eax, 0xeca4326c
cmp eax, 0xc12e8da6
ja 0x140064610
mov eax, dword [0x14158b938]
xor edx, edx
div dword [0x14158b93c]
mov ecx, eax
xor ecx, 0x10c242e3
or eax, 0xd040018
and eax, ecx
or eax, 0xe239bd04
add eax, 0xc6abdaf4
cmp eax, 0x266a52d8
jae 0x140064689
mov qword [rsi], 0
mov qword [rbp], r10
nop dword [rax]
mov eax, dword [0x14158b940]
sub eax, dword [0x14158b944]
xor eax, 0x51f785ba
add eax, 0x11fca69b
mov ecx, eax
not ecx
or eax, 0x4742c2c7
or ecx, 0xb8bd3d38
and ecx, eax
mov qword [rsi], 0
add ecx, 0xac6cf0e1
jae 0x140064690
mov qword [rbp - 8], rbx
mov eax, dword [0x14158b94c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x14158b948]
xor ecx, eax
add ecx, 0x2ec0aef1
mov eax, ecx
not eax
and eax, 0x42b5f4f2
mov edx, ecx
and edx, 0x3d4a0b0d
imul edx, eax
mov eax, ecx
and eax, 0x42b5f4f2
or ecx, 0x42b5f4f2
imul ecx, eax
add ecx, edx
and ecx, 0x51cb839e
cmp ecx, 0xb45dcc4b
jbe 0x140064728
sub rsp, 0x20
mov rcx, rsi
call fcn.14020b780
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
nop
mov ebx, dword [0x14158b950]
sub ebx, dword [0x14158b954]
mov eax, ebx
not eax
and eax, 0x1526976b
mov ecx, ebx
and ecx, 0x6ad96894
imul ecx, eax
mov eax, ebx
and eax, 0x1526976b
or ebx, 0x1526976b
imul ebx, eax
add ebx, ecx
mov eax, ebx
or eax, 0xbac2945d
mov ecx, ebx
not ecx
and ecx, 0x52d6200
mov edx, eax
and edx, 0x42909dbb
imul edx, ecx
and eax, 0xbd6f6244
or ebx, 0xbfeff65d
imul ebx, eax
add ebx, edx
sub rsp, 0x20
mov rcx, rsi
call rdi
add rsp, 0x20
cmp ebx, 0x150ad3dd
je 0x140064730
test eax, eax
je 0x140064866
mov rbx, qword [rbp - 8]
mov r10, qword [rbp]
nop word cs:[rax + rax]
mov eax, dword [0x14158b968]
xor eax, dword [0x14158b96c]
and eax, 0x7fffffff
xor eax, 0x1e1b42c8
add eax, 0x7de71dc
or eax, 0x9ae1ac81
cmp eax, 0x1e2045c0
jb 0x1400647c0
mov rcx, qword [rsi]
mov eax, dword [0x14158b970]
mov edx, dword [0x14158b974]
not eax
not edx
and edx, eax
mov eax, edx
not eax
and edx, 0x455a6b38
mov r8d, eax
and r8d, 0xbaa594c7
imul r8d, edx
mov edx, eax
and edx, 0x455a6b38
or eax, 0x455a6b38
imul eax, edx
add eax, r8d
mov edx, eax
not edx
or edx, 0x3c1b59e8
or eax, 0xc3e4a617
and eax, edx
mov edx, eax
and edx, 0x497e65ae
add edx, edx
neg edx
add eax, edx
add eax, 0x497e65ae
cmp eax, 0x804b1f87
jbe 0x1400648c7
jmp 0x1400648d4
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
ud2
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov eax, dword [0x14158b958]
or eax, dword [0x14158b95c]
add eax, 0x93e000e4
imul rax, rax, 0x5243530d
shr rax, 0x3c
cmp eax, 0xb25dfbb0
jne 0x1400648a0
ud2
mov eax, dword [0x14158b960]
add eax, dword [0x14158b964]
imul eax, eax, 0xf8faa6ad
add eax, 0x67f181b9
and eax, 0x336a35fc
ud2
ud2
mov qword [0x1415acbb0], rcx
xor eax, eax
test al, al
je 0x1400648dd
mov qword [0x1415acbb0], rcx
jmp 0x1400648c7
test rcx, rcx
je 0x140064b5a
mov rax, r10
or rax, rcx
shr rax, 0x20
je 0x1400648ff
mov rax, r10
xor edx, edx
div rcx
mov rsi, rax
jmp 0x140064908
mov eax, r10d
xor edx, edx
div ecx
mov esi, eax
mov rax, rsi
and rax, 0xffffffffc46535ff
mov r8d, esi
not r8d
and r8d, 0x3b9aca00
imul r8, rax
mov eax, esi
and eax, 0x3b9aca00
or rsi, 0x3b9aca00
imul rsi, rax
add rsi, r8
mov rax, rdx
and rax, 0xffffffffc46535ff
mov r8d, edx
not r8d
and r8d, 0x3b9aca00
imul r8, rax
mov eax, edx
and eax, 0x3b9aca00
or rdx, 0x3b9aca00
imul rdx, rax
add rdx, r8
mov rax, rdx
or rax, rcx
shr rax, 0x20
je 0x14006497c
mov rax, rdx
xor edx, edx
div rcx
jmp 0x140064982
mov eax, edx
xor edx, edx
div ecx
add rsi, rax
mov rax, rsi
shr rax, 9
movabs rcx, 0x44b82fa09b5a53
mul rcx
mov rdi, rdx
sub rsp, 0x20
mov ecx, 0x23
call fcn.14013ea60
add rsp, 0x20
mov qword [r15], 0
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
add rsp, 0x20
test eax, eax
je 0x140064a40
shr rdi, 0xb
mov qword [rbp], rdi
imul eax, edi, 0x3b9aca00
sub esi, eax
mov qword [rbp - 0x10], rsi
nop
mov eax, dword [0x14158b9b0]
add eax, dword [0x14158b9b4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfb9a99
and ecx, 0x46566
imul ecx, edx
mov edx, eax
and edx, 0x46566
or eax, 0x46566
imul eax, edx
add eax, ecx
or eax, 0xfd5eea47
and eax, 0xfddeeb5f
cmp eax, 0xa74ad22d
jb 0x1400649e0
mov rsi, qword [r15]
xor eax, eax
test al, al
movabs rdi, 0x44b82fa09b5a53
je 0x140064c12
jmp 0x140064c60
mov eax, dword [0x14158b990]
mov ecx, dword [0x14158b994]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
imul rax, rcx, 0x5a1cebc1
shr rax, 0x3e
or eax, 0x14d754f8
mov ecx, eax
xor ecx, 0x4954401
and ecx, eax
cmp ecx, 0x492077f4
jbe 0x140064a90
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop word [rax + rax]
mov ecx, dword [0x14158b998]
mov eax, dword [0x14158b99c]
xor eax, ecx
not eax
and eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xaa2441b2
and ecx, 0x55dbbe4d
imul ecx, edx
mov edx, eax
and edx, 0x55dbbe4d
or eax, 0x55dbbe4d
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x1c4b4e43
xor eax, 0x1c4b4e43
lea esi, [rax + rcx*2]
xor esi, 0x15e9cd44
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
cmp esi, 0x23907cad
jb 0x140064a90
mov eax, dword [0x14158b9a0]
mov ecx, dword [0x14158b9a4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
imul rcx, rax, 0x1ba228f7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
not eax
and eax, 0x498c1289
or eax, 0x40a900
xor eax, 0x48aa5d5f
cmp eax, 0xfc33daa9
jbe 0x140064b40
ud2
mov eax, dword [0x14158b9a8]
or eax, dword [0x14158b9ac]
ud2
mov eax, dword [0x14158b978]
sub eax, dword [0x14158b97c]
mov ecx, eax
xor ecx, 0x74242000
and ecx, eax
and ecx, 0x74242002
or ecx, 0x8bd09615
cmp ecx, 0xf3077a39
ja 0x140064be4
mov ecx, dword [0x14158b980]
mov eax, dword [0x14158b984]
mov edx, eax
not edx
and edx, ecx
xor eax, ecx
add eax, ecx
sub eax, edx
mov ecx, eax
xor ecx, 0xbed9a25b
or eax, 0x41265da4
and eax, ecx
mov ecx, eax
xor ecx, 0x29001050
xor eax, 0xd4ee4aaf
mov edx, eax
and edx, 0x52bbe529
and ecx, 0xad441ad6
imul ecx, edx
mov edx, eax
and edx, 0xad441ad6
or eax, 0xad441ad6
imul eax, edx
add eax, ecx
ud2
ud2
mov eax, dword [0x14158b9b8]
xor edx, edx
div dword [0x14158b9bc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x9351f8a3
and ecx, 0x6cae075c
imul ecx, edx
mov edx, eax
and edx, 0x6cae075c
or eax, 0x6cae075c
imul eax, edx
add eax, ecx
imul eax, eax, 0x13d405c4
or eax, 0x2eedc109
mov r8, qword [0x1415acbb0]
cmp eax, 0x3e30e59c
jne 0x140064c70
mov rax, qword [0x1415acbb0]
jmp 0x140064c12
mov eax, dword [0x14158b9c0]
sub eax, dword [0x14158b9c4]
mov ecx, eax
xor ecx, 0x3df77953
add ecx, eax
and eax, 0xc20886ac
sub ecx, eax
mov eax, ecx
not eax
or eax, 0xd1500030
and ecx, 0x204c600
and eax, 0xdd523834
or eax, ecx
cmp eax, 0x19c30ad4
jb 0x140064c70
test r8, r8
jne 0x140064eb6
mov qword [rbp - 8], rbx
mov eax, dword [0x14158b9c8]
mov ecx, dword [0x14158b9cc]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
imul rax, rcx, 0x299281b9
shr rax, 0x3d
imul eax, eax, 0xfbad3b81
cmp eax, 0xa2034854
jne 0x140064d02
mov qword [r12], 0
sub rsp, 0x20
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
nop dword [rax]
mov eax, dword [0x14158b9d0]
mov ecx, dword [0x14158b9d4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0xeb0ae582
imul r15, rax, 0x408f9787
shr r15, 0x3c
add r15d, 0x78d93af4
mov qword [r12], 0
sub rsp, 0x20
mov rcx, r12
call rbx
add rsp, 0x20
cmp r15d, 0x2a3f7086
jb 0x140064d10
test eax, eax
je 0x140064dba
mov eax, dword [0x14158b9e8]
mov ecx, dword [0x14158b9ec]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
not ecx
add ecx, 0xc60f7931
imul rax, rcx, 0x7509d87b
shr rax, 0x3c
imul eax, eax, 0xea23561f
cmp eax, 0x25746106
mov rbx, qword [rbp - 8]
jbe 0x140064e39
jmp 0x140064ea0
mov eax, dword [0x14158b9d8]
mov ecx, dword [0x14158b9dc]
not ecx
add eax, ecx
add eax, 0x77b83b0f
imul rax, rax, 0x10b72a91
shr rax, 0x3c
cmp eax, 0x88cccd30
je 0x140064e2a
mov eax, dword [0x14158b9e0]
sub eax, dword [0x14158b9e4]
mov esi, eax
xor esi, 0xb172ef50
and esi, eax
add esi, 0x1dde6d9a
imul rax, rsi, 0x453e0e8f
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1a
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0xa41de8b5
jbe 0x1400648c5
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
jmp 0x140064de1
mov eax, dword [0x14158b9f0]
mov ecx, dword [0x14158b9f4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, 0x8c0cc4d9
imul rcx, rax
shr rcx, 0x3f
mov eax, ecx
not eax
or ecx, 0x54150008
imul ecx, ecx, 0x280a9400
and eax, 0x81002895
imul eax, eax, 0xfd1fbc9d
add eax, ecx
mov r8, qword [r12]
mov qword [0x1415acbb0], r8
cmp eax, 0x2e8dfc21
jae 0x140064ead
mov rax, qword [r12]
mov qword [0x1415acbb0], rax
jmp 0x140064e39
test r8, r8
je 0x1400648c5
mov eax, dword [0x14158b9f8]
mov ecx, dword [0x14158b9fc]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
imul rax, rcx, 0x54138973
shr rax, 0x3d
add eax, 0xbdc835b7
cmp eax, 0xd4250abc
ja 0x140064fe5
mov r9d, dword [0x14158ba00]
mov eax, dword [0x14158ba04]
mov ecx, r9d
not ecx
or r9d, eax
not eax
and eax, ecx
not r9d
or r9d, eax
mov eax, r9d
not eax
xor r9d, 0x4a20100c
and r9d, eax
and r9d, 0x4e28b04c
add r9d, 0xaa9e1a29
mov rax, rsi
or rax, r8
shr rax, 0x20
je 0x140064f3e
mov rax, rsi
xor edx, edx
div r8
mov rcx, rax
jmp 0x140064f47
mov eax, esi
xor edx, edx
div r8d
mov ecx, eax
mov rax, rcx
and rax, 0xffffffffc46535ff
mov r10d, ecx
not r10d
and r10d, 0x3b9aca00
imul r10, rax
mov eax, ecx
and eax, 0x3b9aca00
or rcx, 0x3b9aca00
imul rcx, rax
add rcx, r10
mov rax, rdx
and rax, 0xffffffffc46535ff
mov r10d, edx
not r10d
and r10d, 0x3b9aca00
imul r10, rax
mov eax, edx
and eax, 0x3b9aca00
or rdx, 0x3b9aca00
imul rdx, rax
add rdx, r10
mov rax, rdx
or rax, r8
shr rax, 0x20
je 0x140064fbe
mov rax, rdx
xor edx, edx
div r8
mov r12, rax
jmp 0x140064fc8
mov eax, edx
xor edx, edx
div r8d
mov r12d, eax
add r12, rcx
mov rax, r12
shr rax, 9
mul rdi
mov rcx, qword [0x1415acbb0]
cmp r9d, 0x308d9a84
jae 0x140065062
mov rax, rsi
or rax, r8
shr rax, 0x20
je 0x140064ffe
mov rax, rsi
xor edx, edx
div r8
mov rax, rdx
jmp 0x140065007
mov eax, esi
xor edx, edx
div r8d
mov eax, edx
mov ecx, eax
not ecx
and ecx, 0x3b9aca00
mov rdx, rax
and rdx, 0xffffffffc46535ff
imul rdx, rcx
mov ecx, eax
and ecx, 0x3b9aca00
or rax, 0x3b9aca00
imul rax, rcx
add rax, rdx
mov rcx, rax
or rcx, r8
shr rcx, 0x20
je 0x140065051
xor edx, edx
div r8
mov rax, qword [0x1415acbb0]
jmp 0x140064ee9
xor edx, edx
div r8d
mov rax, qword [0x1415acbb0]
jmp 0x140064ee9
mov r15, rdx
test rcx, rcx
mov rsi, qword [rbp - 0x10]
mov rdi, qword [rbp]
jne 0x14006523f
xor eax, eax
test al, al
je 0x140065090
mov qword [r13], 0
nop word cs:[rax + rax]
mov eax, dword [0x14158ba08]
mov ecx, dword [0x14158ba0c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xf893a72
or eax, 0xecfba4c
add eax, 0xe8c2545c
mov qword [r13], 0
cmp eax, 0xac99a9bb
jb 0x140065090
sub rsp, 0x20
mov rcx, r13
call fcn.14020b780
add rsp, 0x20
nop dword [rax]
mov ecx, dword [0x14158ba10]
xor ecx, dword [0x14158ba14]
mov edx, ecx
or edx, 0xfc5e17ac
xor edx, 0xcef4454f
or ecx, 0x310bbab0
and ecx, edx
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x3003e2e0
and edx, 0x4ba4091b
imul edx, r8d
mov r8d, ecx
and r8d, 0x3a81813
or ecx, 0x4bac191b
imul ecx, r8d
add ecx, edx
cmp ecx, 0x937ccb20
ja 0x1400650f0
test eax, eax
je 0x140065ac0
mov ecx, 0xe6294f01
nop word cs:[rax + rax]
mov eax, dword [0x14158ba20]
xor edx, edx
div dword [0x14158ba24]
imul rax, rcx
shr rax, 0x3e
or eax, 0xb74578c4
mov edx, eax
xor edx, 0xb0416045
and edx, eax
cmp edx, 0xb97982d3
ja 0x140065160
mov rcx, qword [r13]
mov eax, dword [0x14158ba28]
xor eax, dword [0x14158ba2c]
mov edx, eax
xor edx, 0x7befc34
and eax, 0x4103cb
add eax, eax
sub eax, edx
not eax
and eax, 0x8158020
cmp eax, 0x10bb2e14
jne 0x1400651d0
mov qword [0x1415acbb0], rcx
nop word cs:[rax + rax]
mov eax, dword [0x14158ba30]
sub eax, dword [0x14158ba34]
mov edx, eax
and edx, 0x3f292e38
or eax, 0x3f292e38
add eax, edx
add eax, 0xee9ef7ee
and eax, 0xc0f60778
mov qword [0x1415acbb0], rcx
cmp eax, 0x6a9fa494
jb 0x1400651d0
nop word cs:[rax + rax]
mov eax, dword [0x14158ba38]
or eax, dword [0x14158ba3c]
mov edx, eax
not edx
or edx, 0x4f46d2f6
add eax, edx
inc eax
and eax, 0x74a80803
cmp eax, 0x7b0d575e
je 0x140065210
test rcx, rcx
je 0x140065cf0
shr r15, 0xb
imul r8d, r15d, 0x3b9aca00
cmp rcx, 0x3b9aca00
ja 0x14006525e
mov eax, 0x3b9aca00
xor edx, edx
div ecx
jmp 0x140065260
xor eax, eax
sub r12d, r8d
lea r8d, [rax - 0x3b9aca00]
xor r9d, r9d
cmp rcx, 2
setb dl
cmovae r8d, eax
xor r10d, r10d
mov rcx, r15
sub rcx, rdi
setne r10b
mov eax, 0xff
cmovbe eax, r10d
test al, al
jne 0x140065338
nop word cs:[rax + rax]
mov eax, dword [0x14158ba50]
mov r10d, dword [0x14158ba54]
mov r11d, eax
and r11d, r10d
not r10d
not eax
and eax, r10d
not r11d
not eax
and eax, r11d
and eax, 0x55bbdd71
xor eax, 0xbb028e58
add eax, 0xcb91106a
cmp eax, 0xd58833
jb 0x1400652a0
cmp r12d, esi
setne al
nop
mov r10d, dword [0x14158ba5c]
add r10d, dword [0x14158ba58]
shr r10d, 1
imul r10, r10, 0x44aa75b7
shr r10, 0x3c
mov r11d, r10d
not r11d
or r11d, 0x999c5a6d
add r10d, r11d
inc r10d
mov r11d, r10d
not r11d
and r11d, 0xd1855361
and r10d, 0x2e7aac9e
sub r10d, r11d
cmp r10d, 0xd13041c1
je 0x1400652e0
cmp r12d, esi
ja 0x1400654c0
cmp al, 1
jne 0x1400654c0
cmp r15, rdi
ja 0x140065bdb
mov r9b, dl
mov r10, rdi
sub r10, r15
nop word cs:[rax + rax]
mov eax, dword [0x14158bad8]
and eax, dword [0x14158badc]
mov edx, eax
not edx
or edx, 0x58400240
and eax, 0x1000000
xor edx, 0xa0000801
or edx, eax
and edx, 0xf9400a41
cmp edx, 0x7c46f7b3
jb 0x140065360
cmp r12d, esi
jbe 0x140065564
nop word [rax + rax]
mov eax, dword [0x14158bae0]
and eax, dword [0x14158bae4]
mov edx, eax
xor edx, 0x4457483
xor eax, 0x8228836c
or edx, 0xf9928a10
and edx, eax
mov eax, edx
not eax
mov r11d, edx
and r11d, 0x275f4858
and eax, 0xd8a0b7a7
imul eax, r11d
mov r11d, edx
and r11d, 0xd8a0b7a7
or edx, 0xd8a0b7a7
imul edx, r11d
add edx, eax
cmp edx, 0x39050dde
je 0x1400653a0
test r10, r10
je 0x140065bdb
mov rax, r10
movabs r10, 0x625b87e9ce89bbd1
add rax, r10
not r10
add r10, rax
nop word cs:[rax + rax]
mov eax, dword [0x14158bae8]
xor edx, edx
div dword [0x14158baec]
add eax, 0x8e9664eb
not eax
or eax, 0x36143775
cmp eax, 0x39b30763
je 0x140065420
lea r11d, [rsi + 0x3b9aca00]
nop dword [rax + rax]
mov eax, dword [0x14158baf0]
mov edx, dword [0x14158baf4]
mov esi, eax
xor esi, edx
not esi
and esi, edx
add esi, esi
sub edx, esi
add eax, edx
add eax, 0xf3dbc2f6
imul rax, rax, 0x11518c0f
shr rax, 0x3c
or eax, 0xfb15c264
cmp eax, 0x37d7f48b
jb 0x140065450
nop word cs:[rax + rax]
mov eax, dword [0x14158baf8]
xor eax, dword [0x14158bafc]
add eax, 0xce4df2af
or eax, 0x69d45d74
add eax, 0x14011911
cmp eax, 0x17cb3778
ja 0x140065490
jmp 0x140065567
mov eax, dword [0x14158ba60]
mov edx, dword [0x14158ba64]
mov r8d, edx
and r8d, eax
add eax, edx
sub eax, r8d
imul eax, eax, 0xfe7f28
add eax, 0x96f95540
mov edx, eax
and edx, 0x482c49c0
add edx, edx
sub eax, edx
cmp eax, 0x8e63643
je 0x1400654c0
nop word cs:[rax + rax]
mov eax, dword [0x14158ba68]
and eax, dword [0x14158ba6c]
mov edx, eax
not edx
and edx, 0xab59334b
mov r8d, eax
and r8d, 0x54a6ccb4
imul r8d, edx
mov edx, eax
and edx, 0xab59334b
or eax, 0xab59334b
imul eax, edx
add eax, r8d
mov edx, eax
xor edx, 0x8808080
xor eax, 0xd880c0e2
and edx, 0xf909484
add edx, edx
sub edx, eax
cmp edx, 0xe0960071
ja 0x140065500
cmp r15, rdi
jae 0x140065630
jmp 0x140065b38
mov r11d, esi
sub r11d, r12d
nop word [rax + rax]
mov eax, dword [0x14158bb00]
xor edx, edx
div dword [0x14158bb04]
add eax, 0x93efe773
mov edx, eax
not edx
or edx, 0x4281be8f
or eax, 0x826e27f9
and eax, edx
and eax, 0xc2efbfff
cmp eax, 0x206b86b8
je 0x140065570
cmp r11d, 0x3b9aca00
jb 0x1400655d4
mov eax, r11d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
add r10, rax
jb 0x140065a59
imul eax, eax, 0x3b9aca00
sub r11d, eax
mov al, 1
nop
test al, al
je 0x1400655d0
mov r13, rbx
mov eax, 0xff
xor edx, edx
nop
xor esi, esi
cmp r10, r9
setne sil
cmovb esi, eax
xor edi, edi
cmp r11d, r8d
setne dil
cmovb edi, eax
test sil, sil
cmovne edi, esi
cmp dil, 1
setne bl
cmp r15, qword [rbp]
setb sil
test dl, dl
jne 0x1400655e0
or bl, sil
mov rbx, r13
mov rsi, qword [rbp - 0x10]
jne 0x140065b38
nop word cs:[rax + rax]
mov eax, dword [0x14158ba70]
mov edx, dword [0x14158ba74]
mov r8d, edx
and r8d, eax
add eax, edx
sub eax, r8d
imul eax, eax, 0xacee1f1a
not eax
or eax, 0x100f1b9f
cmp eax, 0x4ac4a393
je 0x140065630
nop dword [rax + rax]
mov edx, dword [0x14158ba7c]
mov eax, edx
xor eax, edx
not eax
and eax, dword [0x14158ba78]
xor eax, edx
and eax, 0xad6f862b
mov edx, eax
xor edx, 0xd7a3d994
or eax, 0x284c062b
and eax, edx
mov edx, eax
not edx
and edx, 0x5a8e5367
mov r8d, eax
and r8d, 0xa5618408
imul r8d, edx
mov edx, eax
and edx, 0x80e0223
or eax, 0x5a8e5367
imul eax, edx
add eax, r8d
cmp eax, 0x357b2b95
jb 0x140065660
nop word [rax + rax]
mov eax, dword [0x14158ba80]
xor eax, dword [0x14158ba84]
imul eax, eax, 0xd04d7f12
add eax, 0x4302f6ee
mov edx, eax
not edx
and edx, 0xfe4aedd6
mov r8d, eax
and r8d, 0x1b51228
imul r8d, edx
mov edx, eax
and edx, 0xfe4aedd6
or eax, 0xfe4aedd6
imul eax, edx
add eax, r8d
cmp eax, 0xded8644b
jb 0x1400656c0
cmp r12d, esi
jae 0x1400657d2
mov eax, 0xdc6dd7d1
nop word [rax + rax]
mov edx, dword [0x14158ba88]
xor edx, dword [0x14158ba8c]
add edx, 0xdc9560e6
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0xf9376025
ja 0x140065720
nop word cs:[rax + rax]
mov eax, dword [0x14158ba90]
xor eax, dword [0x14158ba94]
and eax, 0x3b3fca12
add eax, 0x23b7342f
mov edx, eax
xor edx, 0x14e8d67a
and edx, eax
cmp edx, 0x9cd17e18
je 0x140065750
test rcx, rcx
je 0x140065b38
mov rax, rcx
movabs rcx, 0x153e327d56b351e8
add rax, rcx
not rcx
add rcx, rax
mov eax, r12d
and eax, 0x3b9aca00
xor r12d, 0x3b9aca00
lea r12d, [r12 + rax*2]
nop word [rax + rax]
mov eax, dword [0x14158ba98]
add eax, dword [0x14158ba9c]
and eax, 0x6d8c68dd
add eax, 0x540e24b
xor eax, 0x88067e4e
cmp eax, 0x883f7029
jb 0x1400657b0
sub r12d, esi
nop word cs:[rax + rax]
mov eax, dword [0x14158baa0]
or eax, dword [0x14158baa4]
imul rax, rax, 0x11b99ad9
shr rax, 0x3a
imul eax, eax, 0x7457e3c4
add eax, 0x95bf9a91
cmp eax, 0xe0db9ff6
jb 0x1400657e0
cmp r12d, 0x3b9aca00
jae 0x14006581a
mov rax, rcx
jmp 0x140065970
mov edx, r12d
shr edx, 9
imul rax, rdx, 0x44b83
shr rax, 0x27
nop dword [rax + rax]
mov r8d, dword [0x14158baac]
mov r9d, r8d
xor r9d, r9d
not r9d
and r9d, dword [0x14158baa8]
xor r9d, r8d
mov r8d, r9d
not r8d
mov r10d, r9d
and r10d, 0xba15e5d2
and r8d, 0x45ea1a2d
imul r8d, r10d
mov r10d, r9d
and r10d, 0x45ea1a2d
or r9d, 0x45ea1a2d
imul r9d, r10d
add r8d, r9d
add r8d, 0x6658d02d
cmp r8d, 0xb1698141
ja 0x140065830
imul rdx, rdx, 0x44b83
shr rdx, 0x27
imul edx, edx, 0x3b9aca00
sub r12d, edx
nop word cs:[rax + rax]
mov edx, dword [0x14158bab0]
and edx, dword [0x14158bab4]
mov r8d, edx
not r8d
or r8d, 0x10b59067
and r8d, 0x10f59b6f
and edx, 0x620a0010
or edx, r8d
xor edx, 0xe6cda01e
add edx, 0xe487d11d
cmp edx, 0xb6a60de9
jb 0x1400658b0
mov edx, eax
nop
mov r8d, dword [0x14158bab8]
add r8d, dword [0x14158babc]
mov eax, r8d
xor eax, 0xf345a8c1
or r8d, 0xcba573e
and r8d, eax
mov eax, r8d
xor eax, 0x890810e
xor r8d, 0xb72d52f1
mov r9d, r8d
and r9d, 0xf64f2e61
and eax, 0x9b0d19e
imul eax, r9d
mov r9d, r8d
and r9d, 0x9b0d19e
or r8d, 0x9b0d19e
imul r8d, r9d
add r8d, eax
mov rax, rcx
add rax, rdx
setb r9b
cmp r8d, 0x4e22849b
je 0x1400658f0
test r9b, r9b
jne 0x140065ca6
nop word cs:[rax + rax]
mov ecx, dword [0x14158bb28]
and ecx, dword [0x14158bb2c]
mov r8d, ecx
xor r8d, 0x40438204
and r8d, ecx
and r8d, 0xc0d383c4
xor r8d, 0xae0c4da0
cmp r12d, 0x3b9aca00
sete cl
cmp rax, 0x19
setb dl
cmp r8d, 0xb3667ec5
ja 0x140065970
or cl, dl
jne 0x140065b38
nop dword [rax]
mov eax, dword [0x14158bb30]
mov ecx, dword [0x14158bb34]
not eax
not ecx
or ecx, eax
xor ecx, 0xd2a64ee2
mov eax, ecx
and eax, 0x1c1667a4
xor eax, 0x6901e8d6
and ecx, 0x14160720
add ecx, ecx
sub ecx, eax
cmp ecx, 0x66c91f52
je 0x1400659c0
sub rsp, 0x20
mov rsi, qword [rbp - 0x18]
mov rcx, rsi
call fcn.1401e6330
add rsp, 0x20
cmp byte [rsi], 0x12
mov rdi, qword [rbp - 0x28]
mov r15, qword [rbp - 0x20]
jne 0x140065ba0
mov eax, dword [0x14158bb40]
mov ecx, dword [0x14158bb44]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not edx
or edx, ecx
mov eax, edx
xor eax, 0x400de018
xor edx, 0x21a818
and edx, eax
or edx, 0x97d207e7
cmp edx, 0xb946690f
jae 0x140065d7c
jmp 0x140065db5
ud2
xor eax, eax
test al, al
je 0x140065ae0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14158ba18]
or eax, dword [0x14158ba1c]
or eax, 0xcdc682db
imul esi, eax, 0xcd053fd6
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x6e5a7b02
and eax, 0x91a584fc
imul eax, ecx
mov ecx, esi
and ecx, 0x91a584f8
or esi, 0x91a584fc
imul esi, ecx
add esi, eax
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
cmp esi, 0xff3ea049
ja 0x140065ae0
jmp 0x1400648c5
sub rsp, 0x20
call fcn.1401ac190
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14158bb38]
mov ecx, eax
not ecx
or ecx, dword [0x14158bb3c]
add eax, ecx
inc eax
mov ecx, eax
xor ecx, 0x4b3cbd24
xor eax, 0x14c34241
and eax, 0x57c75365
mov edx, ecx
and edx, 0xa838ac9a
imul edx, eax
mov eax, ecx
and eax, 0x57c75365
or ecx, 0x57c75365
imul ecx, eax
add ecx, edx
cmp ecx, 0xc8bb5b29
je 0x140065b50
jmp 0x1400648c5
mov eax, dword [0x14158bb90]
xor eax, dword [0x14158bb94]
xor eax, 0x3a102060
mov ecx, eax
and ecx, 0x3b182579
and eax, 0x12000001
mov edx, ecx
xor edx, 0x29ddb5fc
add edx, ecx
sub edx, eax
cmp edx, 0x707773e1
jbe 0x1400661ec
jmp 0x14006621e
mov eax, dword [0x14158bb10]
xor edx, edx
div dword [0x14158bb14]
and eax, 0xb665b6fc
xor eax, 0xae0f8510
add eax, 0x3744e7e1
cmp eax, 0xb2de5b0c
jae 0x140065c01
ud2
mov eax, 0xeede1507
nop word cs:[rax + rax]
mov ecx, dword [0x14158bb18]
mov edx, dword [0x14158bb1c]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
or ecx, 0xd83a02e8
add ecx, 0x123d3cda
imul rcx, rax
shr rcx, 0x3b
ud2
mov ecx, dword [0x14158bac0]
mov eax, dword [0x14158bac4]
mov edx, ecx
and edx, eax
not edx
not ecx
not eax
or eax, ecx
and eax, edx
not eax
or eax, 0x4c51c3ab
add eax, 0x3efadde
imul rcx, rax, 0x1facbec1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0xf13a7691
jbe 0x140066138
jmp 0x140066153
mov eax, dword [0x14158ba40]
xor edx, edx
div dword [0x14158ba44]
mov ecx, eax
xor ecx, 0xfdba2b4d
and eax, 0x245d4b2
add eax, eax
sub eax, ecx
imul rax, rax, 0x67c4cf13
shr rax, 0x3d
imul eax, eax, 0x99b6e7f0
cmp eax, 0x232f91ac
ja 0x140065d2f
ud2
ud2
mov eax, dword [0x14158bb48]
imul eax, dword [0x14158bb4c]
xor eax, 0x348e9b4
add eax, 0xdaf38183
mov esi, 0x8d262be9
imul rsi, rax
shr rsi, 0x3f
sub rsp, 0x20
call fcn.140053e20
add rsp, 0x20
cmp esi, 0x74a7c131
jbe 0x140065dc4
sub rsp, 0x20
call fcn.14020b800
add rsp, 0x20
jmp 0x140065d7c
mov eax, dword [0x14158bb50]
add eax, dword [0x14158bb54]
mov ecx, eax
xor ecx, 0x2a59000f
xor eax, 0xc25b7d20
or ecx, 0x84864450
and ecx, eax
or ecx, 0x13798280
cmp ecx, 0x6a0267f7
jbe 0x140065eb0
mov qword [r14], 0
mov dword [r15], 0
mov qword [rbx], 0
mov dword [rdi], 0
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcess
mov rcx, rax
mov rdx, rdi
call sub.KERNEL32.dll_CheckRemoteDebuggerPresent
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 7
mov r8, r14
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x10
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x1f
mov r8, r15
mov r9d, 4
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x10
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x1e
mov r8, rbx
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
nop word [rax + rax]
mov esi, dword [0x14158bb58]
mov eax, dword [0x14158bb5c]
mov ecx, eax
not ecx
mov edx, esi
and edx, ecx
or ecx, esi
not ecx
imul ecx, edx
mov edx, esi
and edx, eax
or esi, eax
imul esi, edx
add esi, ecx
mov eax, esi
xor eax, 0x4cc875ba
and esi, 0x33378a45
add esi, esi
sub esi, eax
mov eax, esi
or eax, 0xab1a9f95
mov ecx, esi
not ecx
and ecx, 0x44e46040
mov edx, eax
and edx, 0xb1139bab
imul edx, ecx
and eax, 0x4eec6454
or esi, 0xeffeffd5
imul esi, eax
add esi, edx
mov qword [r14], 0
mov dword [r15], 0
mov qword [rbx], 0
mov dword [rdi], 0
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcess
mov rcx, rax
mov rdx, rdi
call sub.KERNEL32.dll_CheckRemoteDebuggerPresent
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 7
mov r8, r14
mov r9d, 8
call fcn.14020b7b0
add rsp, 0x10
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x1f
mov r8, r15
mov r9d, 4
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x10
call sub.KERNEL32.dll_GetCurrentProcess
sub rsp, 0x10
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x1e
mov r8, rbx
mov r9d, 8
call fcn.14020b7b0
add rsp, 0x30
cmp esi, 0x1d034a9
jb 0x140065eb0
cmp dword [rdi], 0
jne 0x14006609d
cmp qword [r14], 0
jne 0x14006609d
cmp dword [r15], 0
je 0x14006609d
cmp qword [rbx], 0
jne 0x14006609d
nop dword [rax]
mov eax, dword [0x14158bb78]
sub eax, dword [0x14158bb7c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x27cc77d7
and ecx, 0xd8338828
imul ecx, edx
mov edx, eax
and edx, 0xd8338828
or eax, 0xd8338828
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x6cd42530
add ecx, ecx
sub eax, ecx
add eax, 0x6cd42536
or eax, 0x37d831d5
cmp eax, 0x84f921b3
jb 0x140066000
mov eax, dword [0x14158bb80]
add eax, dword [0x14158bb84]
mov ecx, eax
not ecx
and ecx, 0x1586ad40
mov edx, eax
and edx, 0xea7952bf
imul edx, ecx
mov ecx, eax
and ecx, 0x1586ad40
or eax, 0x1586ad40
imul eax, ecx
add eax, edx
or eax, 0x12f751ac
add eax, 0x660f32c3
cmp eax, 0x391533c5
jae 0x14006617d
jmp 0x1400661c1
mov eax, dword [0x14158bb60]
sub eax, dword [0x14158bb64]
mov ecx, eax
and ecx, 0x3850f832
add ecx, ecx
sub eax, ecx
cmp eax, 0x6eeedbf8
je 0x1400660f6
mov eax, dword [0x14158bb68]
mov ecx, dword [0x14158bb6c]
not eax
not ecx
or ecx, eax
not ecx
imul rax, rcx, 0x1cc59535
shr rax, 0x3c
imul esi, eax, 0xe202682
sub rsp, 0x20
call fcn.14020b640
add rsp, 0x20
cmp esi, 0x7a503ac1
jne 0x140066110
sub rsp, 0x20
call fcn.14020b640
add rsp, 0x20
jmp 0x1400660bc
mov eax, dword [0x14158bb70]
and eax, dword [0x14158bb74]
imul rax, rax, 0x363c3ad5
shr rax, 0x3d
or eax, 0x64084d04
cmp eax, 0xfe466df0
ja 0x140066110
jmp 0x1400648c5
mov eax, dword [0x14158bac8]
imul eax, dword [0x14158bacc]
add eax, 0xfa31fe2a
ud2
ud2
mov eax, dword [0x14158bb88]
sub eax, dword [0x14158bb8c]
or eax, 0x5aa14c50
shr eax, 1
imul rsi, rax, 0x40218803
shr rsi, 0x3d
or esi, 0xf58905d4
sub rsp, 0x20
mov ecx, 0x80000001
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
call fcn.14020b7e0
add rsp, 0x20
cmp esi, 0x7f0da74c
jae 0x1400661db
sub rsp, 0x20
mov ecx, 0x80000001
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
call fcn.140066230
add rsp, 0x20
jmp 0x14006617d
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x14158bb98]
xor edx, edx
div dword [0x14158bb9c]
mov ecx, eax
xor ecx, 0x6864a51
xor eax, 0x1c3673df
add eax, ecx
and ecx, 0xe54fc671
sub eax, ecx
ud2
ud2