Function at 0x1401d9750
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x80], r9
mov r12, rcx
mov eax, dword [0x1415cdaa0]
and eax, dword [0x1415cdaa4]
mov ecx, eax
xor ecx, 0xc70b21ac
or eax, 0x38f4de53
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0x2eea4bdf
mov r9d, eax
and r9d, 0xd115b420
imul r9d, ecx
mov ecx, eax
and ecx, 0x2eea4bdf
or eax, 0x2eea4bdf
imul eax, ecx
add eax, r9d
mov ecx, eax
xor ecx, 0x5b384080
or eax, 0xa4c7bf7f
and eax, ecx
cmp eax, 0x91c11aa4
jne 0x1401d97e8
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x20], rdx
mov ecx, 0xbf328939
nop word cs:[rax + rax]
mov eax, dword [0x1415cdaa8]
xor eax, dword [str.R_n__]
mov edx, eax
not edx
and edx, 0xb3df2980
mov r9d, eax
and r9d, 0x4c20d67f
imul r9d, edx
mov edx, eax
and edx, 0xb3df2980
or eax, 0xb3df2980
imul eax, edx
add eax, r9d
mov edx, eax
and edx, 0x2ad48900
xor eax, 0xaad48941
lea edx, [rax + rdx*2]
imul rdx, rcx
shr rdx, 0x3e
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
cmp edx, 0xee13a7c9
ja 0x1401d9800
mov qword [rbp - 0x40], r9
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x210
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x2b0
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x470
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x410
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x2d0
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov rax, qword [rbp + 0x20]
cmp byte [rax], 0
mov qword [rbp + 0x88], r12
je 0x1401da0eb
mov eax, dword [0x1415cdac0]
and eax, dword [0x1415cdac4]
add eax, 0x88634fe8
or eax, 0xe063986
xor eax, 0xf86f2752
cmp eax, 0xef41094a
jbe 0x1401d9af9
mov qword [rdx], 0
mov qword [rbp + 0x70], r9
mov qword [rbp + 8], r8
xor eax, eax
nop word cs:[rax + rax]
mov qword [rdx], 0
test al, al
jne 0x1401d9b10
mov qword [r13], 0
mov qword [r11], 0
mov qword [rbx], 0
mov qword [rsi], 0
mov qword [r15], 0
mov rax, qword [r12 + 0xf8]
test rax, rax
mov qword [rbp + 0x38], r11
je 0x1401d9c8e
nop word cs:[rax + rax]
mov ecx, dword [0x1415cdac8]
and ecx, dword [0x1415cdacc]
imul ecx, ecx, 0x87fd27d8
mov r8d, ecx
not r8d
mov r9d, ecx
or r9d, 0x21038672
mov r10d, r9d
and r10d, 0x192d7868
and r8d, 0xc6d00180
imul r8d, r10d
and r9d, 0xe6d28792
or ecx, 0xe7d387f2
imul ecx, r9d
add ecx, r8d
cmp ecx, 0x2e21cde2
je 0x1401d9b60
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1401d9bc0
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r11
mov r8, rdx
mov r9, r13
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
test eax, eax
jne 0x1401d9c8e
mov eax, dword [0x1415cdad0]
xor edx, edx
div dword [0x1415cdad4]
or eax, 0x308f5930
xor eax, 0xb57fb2b
mov ecx, eax
and ecx, 0x7572ab88
or eax, 0x7572ab88
add eax, ecx
cmp eax, 0x290fdd61
jae 0x1401d9c30
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415cdad8]
sub eax, dword [0x1415cdadc]
add eax, 0x9c1b346f
imul rdi, rax, 0x4194a9e9
shr rdi, 0x3c
add edi, 0x8418db09
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp edi, 0x5f99e3db
jb 0x1401d9c30
nop word [rax + rax]
mov eax, dword [0x1415cdae0]
imul eax, dword [0x1415cdae4]
xor eax, 0xf482241
add eax, 0xd800f957
cmp eax, 0x71b4632b
jb 0x1401d9c70
mov eax, dword [0x1415cdae8]
mov ecx, eax
not ecx
or ecx, dword [0x1415cdaec]
add eax, ecx
inc eax
mov ecx, eax
not ecx
and ecx, 0x8036de2
xor ecx, 0x4dec11dd
or eax, 0x4dec11dd
and eax, ecx
cmp eax, 0xd663d59a
jbe 0x1401d9cd7
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
mov r8, r15
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_GetSystemTimes]
nop
mov r12d, dword [0x1415cdaf0]
mov eax, dword [0x1415cdaf4]
mov ecx, r12d
and ecx, eax
add ecx, ecx
add r12d, eax
sub r12d, ecx
and r12d, 0x8160280
or r12d, 0xb4e9096e
imul rax, r12, 0x3f08ded7
shr rax, 0x20
sub r12d, eax
shr r12d, 1
add r12d, eax
shr r12d, 0x1f
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
mov r8, r15
call rdi
add rsp, 0x20
cmp r12d, 0x101f5889
je 0x1401d9ce0
nop dword [rax]
mov ecx, dword [0x1415cdaf8]
mov edx, ecx
not edx
or edx, dword [0x1415cdafc]
add edx, ecx
cmp edx, 0x10659c53
je 0x1401d9d40
test eax, eax
mov r12, qword [rbp + 0x88]
mov rdi, qword [rbp + 0x38]
jne 0x1401d9dc8
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov eax, 0xa8d0ee7d
nop dword [rax + rax]
mov ecx, dword [0x1415cdb00]
and ecx, dword [0x1415cdb04]
imul rcx, rax
shr rcx, 0x3c
mov edx, ecx
not edx
and edx, 0x19940b24
mov r8d, ecx
and r8d, 0xfffffffb
imul r8d, edx
mov edx, ecx
and edx, 4
or ecx, 0x19940b24
imul ecx, edx
add ecx, r8d
imul ecx, ecx, 0x3d284fa4
cmp ecx, 0xe79ac5d9
ja 0x1401d9d80
movabs r10, 0x41e9458a529bab1e
movabs r8, 0x2592ff98cd2b4b4d
mov rcx, r10
not rcx
mov r9, r8
not r9
nop dword [rax + rax]
mov eax, dword [0x1415cdb08]
xor edx, edx
div dword [0x1415cdb0c]
mov edx, eax
xor edx, 0xaf42beb0
and edx, eax
imul rax, rdx, 0x4711855d
mov rdx, rax
shr rdx, 0x3d
or edx, 0x283dbc3d
bt rax, 0x3d
adc edx, 0
cmp edx, 0xe59a5aa5
ja 0x1401d9df0
mov eax, dword [r13]
mov edx, dword [r13 + 4]
shl rdx, 0x20
mov r11d, ecx
and r11d, eax
not rax
and rax, r10
or r11, rax
xor rcx, r10
and rcx, rdx
xor rcx, r10
xor rcx, r11
mov eax, dword [rsi]
mov edx, dword [rsi + 4]
shl rdx, 0x20
mov r10d, r9d
and r10d, eax
not rax
and rax, r8
or r10, rax
xor r9, r8
and r9, rdx
xor r9, r8
xor r9, r10
mov r8, qword [rdi]
mov rax, qword [r12 + 0x110]
xor edx, edx
cmp r9, rax
cmovb rax, rdx
mov r10, qword [r15]
mov r11, r9
sub r11, rax
mov rsi, qword [r12 + 0x118]
cmp r10, rsi
cmovb rsi, rdx
mov rax, r10
not rax
and rax, rsi
not rsi
and rsi, r10
sub rsi, rax
mov rax, qword [r12 + 0x100]
mov rdx, qword [r12 + 0x108]
mov qword [r12 + 0x108], r8
mov qword [r12 + 0x100], rcx
mov qword [r12 + 0x118], r10
mov qword [r12 + 0x110], r9
add rsi, r11
mov r9, 0xffffffffffffffff
cmovae r9, rsi
test r9, r9
je 0x1401da05d
xor r10d, r10d
nop
mov r11d, dword [0x1415cdb10]
xor r11d, dword [0x1415cdb14]
and r11d, 0xd70e4eec
add r11d, 0xde88989c
mov esi, r11d
not esi
and esi, 0x8f0014af
mov edi, r11d
and edi, 0x701eeb50
imul edi, esi
mov esi, r11d
and esi, 0x8f8014ac
or r11d, 0x8f8014af
imul r11d, esi
add r11d, edi
cmp rcx, rax
mov rdi, rax
cmovb rdi, r10
cmp r8, rdx
mov rsi, rdx
cmovb rsi, r10
cmp r11d, 0xd0fe7c97
je 0x1401d9f00
sub rcx, rdi
mov eax, dword [0x1415cdb18]
xor edx, edx
div dword [0x1415cdb1c]
mov eax, 0xa334345d
sub r8, rsi
cvtsi2ss xmm0, r9
mov rdx, r9
shr rdx, 1
mov r10, 0xffffffffffffffff
movss xmm1, dword [0x140259280]
jmp 0x1401d9fe7
xorps xmm2, xmm2
cvtsi2ss xmm2, r11
divss xmm2, xmm3
mov r11d, dword [0x1415cdb20]
mov esi, dword [0x1415cdb24]
xor esi, r11d
not esi
and esi, r11d
xor esi, 0x503d4bff
imul rsi, rax
shr rsi, 0x3f
lea r11d, [rsi*2 - 0x1c1e5c50]
sub r11d, esi
mulss xmm2, xmm1
cmp r11d, 0xe2ad6399
jae 0x1401da047
test r9, r9
js 0x1401da000
movaps xmm3, xmm0
jmp 0x1401da016
mov r11d, r9d
and r11d, 1
or r11, rdx
xorps xmm3, xmm3
cvtsi2ss xmm3, r11
addss xmm3, xmm3
mov r11, r8
add r11, rcx
cmovb r11, r10
test r11, r11
jns 0x1401d9fa0
mov rsi, r11
shr rsi, 1
and r11d, 1
or r11, rsi
xorps xmm2, xmm2
cvtsi2ss xmm2, r11
addss xmm2, xmm2
jmp 0x1401d9fa8
mov rcx, qword [rbp + 8]
test rcx, rcx
js 0x1401da0c1
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
jmp 0x1401da0d9
mov dword [r12 + 0x150], 0
mov r9, qword [rbp + 0x70]
nop dword [rax]
mov eax, dword [0x1415cdb28]
xor edx, edx
div dword [0x1415cdb2c]
mov ecx, eax
and ecx, 0x5df2011c
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x71faeeb7
mov ecx, eax
not ecx
and ecx, 0x3adaee68
mov edx, eax
and edx, 0xc5251197
imul edx, ecx
mov ecx, eax
and ecx, 0x3adaee68
or eax, 0x3adaee68
imul eax, ecx
add eax, edx
cmp eax, 0x9559bb7c
je 0x1401da070
jmp 0x1401da0eb
mov rax, rcx
shr rax, 1
and ecx, 1
or rcx, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mov r9, qword [rbp + 0x70]
mulss xmm2, xmm0
movss dword [r12 + 0x150], xmm2
mov rbx, qword [rbp + 0x20]
mov r15, qword [rbp + 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdab0]
mov ecx, dword [0x1415cdab4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
or ecx, 0xd670d68d
add ecx, 0x12cf7e03
imul rax, rcx, 0x6c8533fd
shr rax, 0x3e
cmp eax, 0x23b13d74
je 0x1401da100
nop word cs:[rax + rax]
mov eax, dword [0x1415cdab8]
xor edx, edx
div dword [0x1415cdabc]
mov ecx, eax
xor ecx, 0xaf2b5747
and eax, 0x50d4a8b8
add eax, eax
sub eax, ecx
mov ecx, eax
and ecx, 0x83044250
or eax, 0x83044250
add eax, ecx
add eax, 0xdd6b2365
cmp eax, 0xd82e17f6
ja 0x1401da140
movzx eax, byte [rbx + 1]
xor ecx, ecx
test cl, cl
jne 0x1401da180
test al, al
je 0x1401da324
nop dword [rax]
mov eax, dword [0x1415cdb44]
add eax, dword [0x1415cdb40]
mov ecx, eax
xor ecx, 0xc19ca003
and eax, 0x3e635ffc
add eax, eax
sub eax, ecx
mov ecx, eax
or ecx, 0xc447080
not eax
and eax, 0x3190346
and ecx, 0xdcc47c98
sub ecx, eax
cmp ecx, 0x6928e08c
je 0x1401da190
xor eax, eax
nop
test al, al
jne 0x1401da1d0
mov rax, qword [r12 + 0xf8]
nop dword [rax]
mov ecx, dword [0x1415cdb48]
imul ecx, dword [0x1415cdb4c]
add ecx, 0x8a9bd5c
mov edx, ecx
xor edx, 0xc41950b2
and ecx, 0x3be6af4d
add ecx, ecx
sub ecx, edx
imul ecx, ecx, 0x18de90e5
cmp ecx, 0x29753772
ja 0x1401da1e0
test rax, rax
je 0x1401da2f0
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
mov rdx, r9
mov rsi, r9
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
test eax, eax
je 0x1401da25c
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [r12 + 0x140], xmm0
jmp 0x1401da2f0
mov eax, dword [0x1415cdb50]
and eax, dword [0x1415cdb54]
mov ecx, eax
xor ecx, 0x4c0868
xor eax, 0x4212a282
and eax, 0x6333f282
and ecx, 0x9ccc0d7d
sub ecx, eax
add ecx, 0xa1d764c7
cmp ecx, 0xf4f604cf
jbe 0x1401da29d
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov esi, 0xc9317421
nop word cs:[rax + rax]
mov eax, dword [0x1415cdb58]
or eax, dword [0x1415cdb5c]
or eax, 0xdc50df17
mov ecx, eax
not ecx
or ecx, 0x6ad55329
lea edi, [rax + rcx]
inc edi
imul rdi, rsi
shr rdi, 0x3f
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp edi, 0x218685d1
je 0x1401da2b0
nop dword [rax]
mov eax, dword [0x1415cdb60]
xor edx, edx
div dword [0x1415cdb64]
mov ecx, eax
xor ecx, 0xc4420001
xor eax, 0x3038c602
and eax, 0x3abdffc2
and ecx, 0xc542003d
add eax, ecx
add eax, 0xfffd9470
cmp eax, 0xa496071e
jb 0x1401da2f0
movzx ecx, byte [rbx + 2]
mov eax, dword [0x1415cdb30]
xor edx, edx
div dword [0x1415cdb34]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdb38]
mov edx, dword [0x1415cdb3c]
not eax
not edx
or edx, eax
mov eax, edx
not eax
and edx, 0x12cacf47
mov r8d, eax
and r8d, 0xd3530b8
imul r8d, edx
mov edx, eax
and edx, 0x12cacf47
or eax, 0x12cacf47
imul eax, edx
add eax, r8d
and eax, 0x12da4500
cmp eax, 0x1cf41e57
je 0x1401da340
test cl, cl
je 0x1401da4cd
mov eax, dword [0x1415ce878]
and eax, dword [0x1415ce87c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x455c6f65
and ecx, 0xbaa3909a
imul ecx, edx
mov edx, eax
and edx, 0x3aa3909a
or eax, 0x3aa3909a
imul eax, edx
add eax, ecx
mov ecx, eax
or ecx, 0x9e22b001
mov edx, eax
not edx
and edx, 0x60d545b0
mov r8d, ecx
and r8d, 0x87082a4f
imul r8d, edx
and ecx, 0x78f7d5b0
or eax, 0xfef7f5b1
imul eax, ecx
add eax, r8d
cmp eax, 0xa8bf7774
mov rdx, qword [rbp + 0x108]
jae 0x1401da410
mov qword [r12 + 0xe8], rdx
nop dword [rax + rax]
mov eax, dword [0x1415ce880]
add eax, dword [0x1415ce884]
mov ecx, eax
not ecx
or eax, 0x80011
or ecx, 0xaf1290c6
and ecx, 0xef12f0c6
and eax, 0x680211
or eax, ecx
mov qword [r12 + 0xe8], rdx
cmp eax, 0x9fd746ed
jb 0x1401da410
mov eax, dword [0x1415ce888]
xor edx, edx
div dword [0x1415ce88c]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce890]
mov ecx, dword [str.q0_hT]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0xcf009091
and eax, 0x30ff6f6e
sub eax, ecx
imul rax, rax, 0x7554c003
shr rax, 0x3b
mov ecx, eax
xor ecx, 0xd7074e6d
add ecx, eax
and eax, 2
sub ecx, eax
cmp ecx, 0xfcd5d141
je 0x1401da460
mov rax, qword [rbp + 0x100]
mov qword [r12 + 0xf0], rax
movzx r8d, byte [rbx + 3]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdb68]
sub eax, dword [0x1415cdb6c]
add eax, 0x35b8e83c
and eax, 0xf6a3e3bd
cmp eax, 0xcdf8e12c
jb 0x1401da4e0
mov rcx, qword [r12 + 0xf8]
movabs r10, 0x8000000000000000
test rcx, rcx
je 0x1401dabd0
mov r9d, 0xa1d9871b
nop
mov eax, dword [0x1415cdb70]
xor edx, edx
div dword [0x1415cdb74]
imul eax, eax, 0xb9f4f1d1
imul rax, r9
shr rax, 0x3f
or eax, 0x51dbe868
cmp eax, 0x47bc6f7a
je 0x1401da520
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov eax, dword [0x1415cdb78]
mov edx, dword [0x1415cdb7c]
xor edx, eax
not edx
and edx, eax
add edx, 0xd309c3e5
mov eax, edx
and eax, 0x825f480
add eax, eax
sub edx, eax
imul eax, edx, 0x958519cb
add eax, 0x31796180
cmp eax, 0x3b97efc6
jb 0x1401da550
test r8b, r8b
jle 0x1401da9b4
cmp r8b, 2
jl 0x1401da600
jne 0x1401da9c0
nop word [rax + rax]
mov eax, dword [0x1415cdb88]
add eax, dword [0x1415cdb8c]
xor eax, 0x10824
or eax, 0xdc8a73d9
and eax, 0xdc9b7bfd
cmp eax, 0x13c0d9b7
jb 0x1401da5a0
mov r8, qword [r12 + 0x80]
nop word [rax + rax]
mov eax, dword [0x1415cdb90]
xor edx, edx
div dword [0x1415cdb94]
add eax, 0xc6788a9a
or eax, 0xac908750
add eax, 0x6280acf2
cmp eax, 0x742df357
ja 0x1401da5d0
cmp r8, r10
jne 0x1401dabd0
nop dword [rax]
mov eax, dword [0x1415cdb98]
xor edx, edx
div dword [0x1415cdb9c]
mov edx, eax
xor edx, 0x6b60990a
and edx, eax
add edx, 0x4367df
and edx, 0x8c57f75d
cmp edx, 0x204f8c3e
je 0x1401da600
mov qword [r15], 0
sub rsp, 0x20
mov edx, 8
mov r8, r15
call fcn.14021c790
add rsp, 0x20
test eax, eax
je 0x1401daab8
mov r15, qword [r15]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdba0]
imul eax, dword [0x1415cdba4]
add eax, 0x9cb544fb
mov ecx, eax
and ecx, 0x39876159
or eax, 0x39876159
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1b9bb005
and ecx, 0xe4644ffa
imul ecx, edx
mov edx, eax
and edx, 0xe4644ffa
or eax, 0xe4644ffa
imul eax, edx
add eax, ecx
cmp eax, 0x9ba8dc9d
je 0x1401da660
lea rax, [r15 + 1]
cmp rax, 2
jb 0x1401dab90
mov eax, dword [0x1415cdba8]
add eax, dword [0x1415cdbac]
shr eax, 3
imul rax, rax, 0x152f2b0d
shr rax, 0x37
mov ecx, eax
not ecx
and ecx, 0xedc86f2e
mov edx, eax
and edx, 1
imul edx, ecx
mov ecx, eax
and ecx, 0xfffffffe
or eax, 0xedc86f2e
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x9f90dc97
add eax, ecx
inc eax
cmp eax, 0x56c98e78
mov rdi, qword [rbp + 0x28]
jae 0x1401da738
mov dword [rdi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r15
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
mov r13, qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
nop
mov esi, dword [0x1415cdbb0]
sub esi, dword [0x1415cdbb4]
or esi, 0xd00180
and esi, 0x22d0218a
mov dword [rdi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r15
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call r13
add rsp, 0x30
cmp esi, 0xc9f91f0b
je 0x1401da740
mov ecx, 0xe6c2eefd
nop dword [rax]
mov edx, dword [0x1415cdbb8]
imul edx, dword [0x1415cdbbc]
imul rdx, rcx
shr rdx, 0x3b
imul edx, edx, 0xc2f0761c
cmp edx, 0xa4c4077b
jb 0x1401da790
test eax, eax
jne 0x1401da8f3
mov eax, dword [0x1415cdbc0]
xor edx, edx
div dword [0x1415cdbc4]
or eax, 0xdeea71dc
imul eax, eax, 0xa4d832d5
add eax, 0xddf56fc8
cmp eax, 0x88100362
jbe 0x1401da7f0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415cdbc8]
mov esi, dword [0x1415cdbcc]
xor esi, eax
not esi
and esi, eax
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x1b2f302a
and eax, 0xe4d0cfd5
imul eax, ecx
mov ecx, esi
and ecx, 0xe4d0cfd5
or esi, 0xe4d0cfd5
imul esi, ecx
add esi, eax
mov eax, esi
not eax
and eax, 0x42c843c9
mov ecx, esi
and ecx, 0xbd37bc36
imul ecx, eax
mov eax, esi
and eax, 0x42c843c9
or esi, 0x42c843c9
imul esi, eax
add esi, ecx
imul rax, rsi, 0x783f28b
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1f
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0xe3218969
je 0x1401da7f0
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
nop word [rax + rax]
mov eax, dword [0x1415cdbd0]
xor eax, dword [0x1415cdbd4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x24c4f76e
and edx, 0xdb3b0891
imul edx, r8d
mov r8d, eax
and r8d, 0xdb3b0891
or eax, 0xdb3b0891
imul eax, r8d
add eax, edx
mov edx, eax
not edx
or edx, 0xc0042400
and edx, 0xc9052e10
and eax, 0x1468002b
sub eax, edx
cmp eax, 0x8d31dd96
ja 0x1401da890
cmp ecx, 0x8007007a
jne 0x1401daa31
mov ebx, dword [rdi]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov r12, rax
mov rcx, rax
inc rcx
nop dword [rax]
mov eax, dword [0x1415cdbe8]
xor edx, edx
div dword [0x1415cdbec]
xor eax, 0x30400
or eax, 0x30a40804
and eax, 0x7ff70c0c
cmp eax, 0x4794cb00
ja 0x1401da910
nop word cs:[rax + rax]
mov eax, dword [0x1415cdbf0]
xor edx, edx
div dword [0x1415cdbf4]
mov edx, eax
not edx
and edx, 0x5fd0dc04
mov r8d, eax
and r8d, 0xa02f23fb
imul r8d, edx
mov edx, eax
and edx, 0x5fd0dc04
or eax, 0x5fd0dc04
imul eax, edx
add eax, r8d
cmp eax, 0x72d3d8eb
je 0x1401da940
cmp rcx, 1
ja 0x1401da9e4
mov eax, dword [0x1415cdbf8]
imul eax, dword [0x1415cdbfc]
add eax, 0x2f6feb48
or eax, 0xd46b24df
cmp eax, 0x603c8c96
mov r12, qword [rbp + 0x88]
jae 0x1401dba86
jmp 0x1401dbacc
je 0x1401dabd0
nop word [rax + rax]
mov eax, dword [0x1415cdb80]
xor edx, edx
div dword [0x1415cdb84]
add eax, 0xcc21534
or eax, 0x92a1520d
cmp eax, 0xa8094ef7
je 0x1401da9c0
jmp 0x1401dba84
mov eax, dword [0x1415cdc10]
sub eax, dword [0x1415cdc14]
and eax, 0x7b7bf313
add eax, 0x569ca41f
mov ecx, eax
not ecx
and ecx, 0xfec8924
mov edx, eax
and edx, 0xf013721b
imul edx, ecx
mov ecx, eax
and ecx, 0xfec8524
or eax, 0xfec8d24
imul eax, ecx
add eax, edx
cmp eax, 0xa1b7ae7a
jne 0x1401dbb34
jmp 0x1401dbb56
mov eax, 0x8b4cd7ab
nop word cs:[rax + rax]
mov ecx, dword [0x1415cdbd8]
mov edx, dword [0x1415cdbdc]
mov r8d, ecx
xor r8d, edx
not r8d
or ecx, edx
and ecx, r8d
imul rcx, rcx, 0x174ca76b
shr rcx, 0x3b
xor ecx, 0x9e0cf789
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x373c7ec
je 0x1401daa40
sub rsp, 0x20
mov rcx, r15
call fcn.140219b10
add rsp, 0x20
mov rbx, qword [rbp + 0x20]
nop
mov ecx, dword [0x1415cdbe0]
sub ecx, dword [str.__t_]
add ecx, 0xbf4da1a0
xor ecx, 0x900d8717
cmp ecx, 0x23120b31
ja 0x1401daa90
test eax, eax
jne 0x1401dab90
mov eax, dword [0x1415cdc60]
mov ecx, dword [0x1415cdc64]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
and ecx, 0x53ad74bd
mov edx, eax
and edx, 0xac528b42
imul edx, ecx
mov ecx, eax
and ecx, 0x53ad74bd
or eax, 0x53ad74bd
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xab70199
add ecx, eax
and eax, 0x7548fe66
sub ecx, eax
not ecx
and ecx, 0x70fb00b5
cmp ecx, 0xb5e9032f
ja 0x1401dab47
mov eax, dword [0x1415cdc68]
mov ecx, dword [0x1415cdc6c]
add eax, ecx
add eax, 0xbb9445f6
xor eax, 0xb56d32b3
imul esi, eax, 0xf156ab98
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp esi, 0xe1d98021
jne 0x1401dab56
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
jmp 0x1401dab14
mov eax, 0x9befbfa5
nop dword [rax + rax]
mov ecx, dword [0x1415cdc70]
sub ecx, dword [0x1415cdc74]
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xb64a78a3
add ecx, 0x28583cf3
cmp ecx, 0x4444cfd7
jb 0x1401dab60
nop dword [rax + rax]
mov eax, dword [0x1415cdc78]
mov ecx, dword [0x1415cdc7c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
imul eax, ecx, 0x764dfc62
mov ecx, eax
xor ecx, 0x6d0bfb10
add ecx, eax
and eax, 0x92f404ee
sub ecx, eax
add ecx, 0x55e8abda
cmp ecx, 0x1a994462
jb 0x1401dab90
nop dword [rax]
mov eax, dword [0x1415cdd08]
xor eax, dword [0x1415cdd0c]
mov ecx, eax
and ecx, 0xb3217d83
mov edx, ecx
not edx
and edx, 0xb93d238b
mov r8d, eax
and r8d, 0x2005c00
imul r8d, edx
and eax, 0xb1212183
or ecx, 0xb93d238b
imul ecx, eax
add ecx, r8d
xor ecx, 0x57e17c32
cmp ecx, 0x6f486998
ja 0x1401dabd0
movzx edi, byte [rbx + 4]
movzx esi, byte [rbx + 5]
movzx r9d, byte [rbx + 6]
movzx r15d, byte [rbx + 7]
cmp r15b, 1
jg 0x1401dac42
mov rbx, qword [rbp + 0x68]
jne 0x1401dad00
jmp 0x1401dafe0
mov rbx, qword [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd10]
xor eax, dword [0x1415cdd14]
shr eax, 2
imul rax, rax, 0x233f0291
shr rax, 0x3b
not eax
and eax, 0x94022203
imul ecx, eax, 0x8804034
or eax, 0x2aa84134
imul eax, eax, 0x22280100
add eax, ecx
cmp eax, 0x1cb7a593
jb 0x1401dac50
mov rax, qword [r12 + 0x40]
mov ecx, dword [0x1415cdd18]
or ecx, dword [0x1415cdd1c]
cmp ecx, 0xc0d01877
je 0x1401dac90
nop word cs:[rax + rax]
mov ecx, dword [0x1415cdd20]
add ecx, dword [0x1415cdd24]
or ecx, 0x2c404b00
mov edx, ecx
and edx, 0xbe4b4b47
and ecx, 0x9e014842
mov r8d, edx
xor r8d, 0x61ca8735
add r8d, edx
sub r8d, ecx
cmp r8d, 0xbb5cea4b
ja 0x1401dacb0
test rax, rax
je 0x1401dafe0
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd28]
mov ecx, dword [0x1415cdd2c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
or ecx, 0x5c950c63
mov eax, ecx
xor eax, 0xe4940df2
and ecx, 0x1b6bf20d
add ecx, ecx
sub ecx, eax
xor ecx, 0x45a0dc4
cmp ecx, 0x3079769
jb 0x1401dad00
test r9b, r9b
jle 0x1401dae1d
cmp r9b, 2
jl 0x1401dafe0
jne 0x1401daec0
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd38]
sub eax, dword [0x1415cdd3c]
mov ecx, eax
xor ecx, 0x11340110
or eax, 0x402020
and eax, ecx
and eax, 0x11742130
add eax, 0x479692de
cmp eax, 0xd03c89b5
ja 0x1401dad60
nop dword [rax]
mov eax, dword [0x1415cdd40]
mov ecx, dword [0x1415cdd44]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
imul rax, rcx, 0x4597e8e9
shr rax, 0x3d
add eax, 0xe8abd7c1
mov ecx, eax
and ecx, 0x8000c447
xor ecx, 0x7b0c1ab3
and eax, 0xa30103
or eax, ecx
cmp eax, 0xaff4e920
jb 0x1401dad90
mov rax, qword [r12 + 0x58]
nop dword [rax]
mov ecx, dword [0x1415cdd48]
xor ecx, dword [0x1415cdd4c]
mov edx, ecx
not edx
or edx, 0x2e207c6
add ecx, edx
inc ecx
xor ecx, 0x73f99e2
imul rcx, rcx, 0xa317e29
shr rcx, 0x3b
cmp ecx, 0x1dc169e
ja 0x1401dade0
test rax, rax
jne 0x1401dae30
jmp 0x1401dafe0
jne 0x1401daec0
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd50]
or eax, dword [0x1415cdd54]
or eax, 0x2cebbf10
mov ecx, eax
xor ecx, 0x47b028fe
and ecx, eax
add ecx, 0x316a1d05
cmp ecx, 0x9e8b91a6
ja 0x1401dae30
test dil, dil
jle 0x1401daeef
cmp dil, 2
jl 0x1401dafe0
jne 0x1401db3c0
mov rax, qword [r12 + 0x98]
mov ecx, 0x884d9739
nop
mov edx, dword [0x1415cdd60]
xor edx, dword [0x1415cdd64]
add edx, 0x5ade60ca
or edx, 0x385516f
imul rdx, rcx
shr rdx, 0x3d
cmp edx, 0x8b0c9540
ja 0x1401dae80
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1401dafe0
jmp 0x1401daef5
mov eax, dword [0x1415cdd30]
xor eax, dword [0x1415cdd34]
and eax, 0x51caa7af
add eax, 0xe490d3d7
shr eax, 1
imul rax, rax, 0x44731c83
shr rax, 0x3d
cmp eax, 0x12f318b9
ja 0x1401daec0
jmp 0x1401dba84
jne 0x1401db3c0
cmp sil, 1
jg 0x1401daf10
je 0x1401dafe0
jmp 0x1401e25fd
mov eax, dword [0x1415cdd68]
mov ecx, dword [0x1415cdd6c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul eax, eax, 0x4a21682e
add eax, 0x6ce41784
cmp eax, 0x8502e77e
ja 0x1401daf10
movabs r8, 0x8000000000000000
nop dword [rax + rax]
mov eax, dword [0x1415cdd70]
add eax, dword [0x1415cdd74]
mov ecx, 0x435f1a66
sub ecx, eax
or ecx, 0x700f2f5
add eax, ecx
add eax, 0xbca0e59a
not eax
or eax, 0xee93b783
cmp eax, 0x3bce3b1c
je 0x1401daf60
mov rax, qword [r12 + 0xb8]
nop word cs:[rax + rax]
mov ecx, dword [0x1415cdd78]
and ecx, dword [0x1415cdd7c]
add ecx, 0x39981979
or ecx, 0x382ea5c6
mov edx, ecx
and edx, 0x12d78810
add edx, edx
sub ecx, edx
cmp ecx, 0xd19acf56
je 0x1401dafa0
cmp rax, r8
jne 0x1401e25fd
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd80]
or eax, dword [str._MY]
imul rax, rax, 0x244905c9
shr rax, 0x3d
not eax
and eax, 0x98444e09
xor eax, 0x805a9c98
cmp eax, 0xb3dadab7
ja 0x1401dafe0
mov rcx, qword [r12 + 0xf8]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd88]
xor edx, edx
div dword [0x1415cdd8c]
and eax, 0x7d7ddc7e
xor eax, 0x4c75d040
add eax, 0xe1dec6d6
cmp eax, 0x6c1b70b7
ja 0x1401db020
nop word cs:[rax + rax]
mov eax, dword [0x1415cdd94]
mov edx, eax
xor edx, eax
not edx
and edx, dword [0x1415cdd90]
xor edx, eax
imul eax, edx, 0x89fc5000
mov edx, eax
or edx, 0xda73851
xor edx, 0xbe6ed30a
or eax, 0x41912851
and eax, edx
cmp eax, 0xec0961da
ja 0x1401db050
test rcx, rcx
je 0x1401e25fd
mov eax, 0x9418a209
nop word cs:[rax + rax]
mov edx, dword [0x1415cdd98]
and edx, dword [0x1415cdd9c]
xor edx, 0x793ff3de
imul rdx, rax
shr rdx, 0x3d
mov r8d, edx
not r8d
or r8d, 1
or edx, 0x5f95f256
and edx, r8d
cmp edx, 0x7c3e7e2f
ja 0x1401db0a0
mov byte [rbp + 0x70], r9b
nop dword [rax]
mov eax, dword [0x1415cdda0]
mov edx, dword [0x1415cdda4]
mov r8d, eax
not r8d
or eax, edx
not edx
or edx, r8d
not edx
not eax
or eax, edx
not eax
and eax, 0xe47ab6c
mov edx, eax
not edx
or edx, 0xaadea983
add edx, eax
cmp edx, 0x4642506
je 0x1401db0e0
mov r13, qword [rcx + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r13
mov edx, 0x1a
mov r8, qword [rbp + 0x58]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
test eax, eax
js 0x1401e2550
mov byte [rbp + 0x38], r15b
mov byte [rbp + 0x28], dil
nop word cs:[rax + rax]
mov eax, dword [0x1415cdda8]
and eax, dword [str.cA7oR]
mov ecx, eax
not ecx
or ecx, 0x83877171
or eax, 0x7c788e8e
and eax, ecx
add eax, 0xdbf70789
xor eax, 0x8e638051
cmp eax, 0xa0abe6e1
jb 0x1401db160
mov rax, qword [rbp + 0x58]
mov r15, qword [rax]
nop word cs:[rax + rax]
mov eax, dword [0x1415cddb0]
mov ecx, dword [0x1415cddb4]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0xe7482997
or ecx, 0x6b9499a1
and ecx, 0x6fbdfbe7
cmp ecx, 0xa3949059
je 0x1401db1a0
test r15, r15
mov qword [rbp + 0x78], r13
je 0x1401db403
nop dword [rax + rax]
mov eax, dword [0x1415ce290]
mov ecx, dword [str.W_obm_r]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0xa93de62
imul rax, rax, 0xe21e98b
shr rax, 0x3a
mov ecx, eax
and ecx, 0xfffffffe
or eax, 0x100b5bc2
add eax, ecx
cmp eax, 0xf690ebaa
ja 0x1401db1e0
mov byte [rbp + 0x58], sil
mov eax, dword [0x1415ce298]
sub eax, dword [str.RMeA]
imul eax, eax, 0xfec034d6
xor eax, 0x9000008a
or eax, 0x6dfeea71
cmp eax, 0xe51ae7bd
jbe 0x1401db27c
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r13
mov rdx, r15
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov esi, 0xa6dc5f65
nop word cs:[rax + rax]
mov eax, dword [0x1415ce2a4]
add eax, dword [0x1415ce2a0]
mov ecx, eax
and ecx, 0xd75ceda
add ecx, ecx
sub eax, ecx
add eax, 0xd75ceda
imul rax, rsi
shr rax, 0x3d
imul edi, eax, 0x8d961036
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r13
mov rdx, r15
mov r8, rbx
call fcn.14021c7c0
add rsp, 0x30
cmp edi, 0x5887c737
jb 0x1401db290
nop dword [rax + rax]
mov ecx, dword [0x1415ce2a8]
mov edx, dword [0x1415ce2ac]
mov r8d, ecx
not r8d
and r8d, edx
not edx
and edx, ecx
sub edx, r8d
add edx, 0x5b148831
mov ecx, edx
not ecx
or edx, 0x80440008
or ecx, 0x28042b1
and ecx, edx
not ecx
and ecx, 0x82c442b9
cmp ecx, 0xa5538a4
ja 0x1401db2f0
test eax, eax
mov rdi, qword [rbp + 0x18]
movzx r15d, byte [rbp + 0x38]
je 0x1401db8ba
mov ecx, 0x88885353
nop word [rax + rax]
mov eax, dword [0x1415ce2c0]
xor edx, edx
div dword [0x1415ce2c4]
add eax, 0x6c40fd78
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xa19ed8be
ja 0x1401db350
mov eax, dword [0x1415ce2c8]
mov ecx, dword [0x1415ce2cc]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0x75daf91
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xd75daf91
or eax, 0xeb06d108
imul eax, eax, 0x260302a4
cmp eax, 0x21c3d867
jae 0x1401defa4
jmp 0x1401df019
mov eax, dword [0x1415cdd58]
imul eax, dword [0x1415cdd5c]
imul rcx, rax, 0x246bae5d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
add eax, 0xa4e60957
mov ecx, eax
xor ecx, 0x7e67a6e0
and eax, 0x80091f
add eax, eax
sub eax, ecx
cmp eax, 0x59e84ae
je 0x1401db3c0
jmp 0x1401dba84
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401db410
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r13
xor edx, edx
mov r8, qword [rbp + 0x90]
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov rdi, qword [rbp + 0x80]
mov rbx, qword [rbp + 0x48]
nop word [rax + rax]
mov ecx, dword [0x1415cddb8]
add ecx, dword [0x1415cddbc]
not ecx
or ecx, 0x35dac069
mov edx, ecx
xor edx, 0x80202010
xor ecx, 0x2a1798ef
mov r8d, ecx
and r8d, 0x52885782
and edx, 0xa837285c
imul edx, r8d
mov r8d, ecx
and r8d, 0x8d652814
or ecx, 0xad77285c
imul ecx, r8d
add ecx, edx
cmp ecx, 0x8a98642c
jb 0x1401db450
test eax, eax
js 0x1401db870
nop dword [rax]
mov eax, dword [0x1415cddc8]
xor edx, edx
div dword [0x1415cddcc]
xor eax, 0xbf2ea1e0
add eax, 0xe8242a9d
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf26d8634
and ecx, 0xd9279cb
imul ecx, edx
mov edx, eax
and edx, 0xd9279cb
or eax, 0xd9279cb
imul eax, edx
add eax, ecx
cmp eax, 0xfd38ba97
ja 0x1401db4b0
mov rax, qword [rbp + 0x90]
mov rdx, qword [rax + 8]
mov rax, qword [rax + 0x28]
xor ecx, ecx
test rax, rax
setne cl
mov qword [r12], rcx
mov qword [r12 + 8], rax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r13
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
test eax, eax
je 0x1401db908
mov byte [rbp + 0x58], sil
mov eax, dword [0x1415cddd0]
mov ecx, dword [str._b:W]
mov edx, eax
or edx, ecx
not eax
not ecx
and ecx, eax
not ecx
and ecx, edx
xor ecx, 0x1c4431
or ecx, 0x4343b342
mov eax, ecx
and eax, 0x305afbf
add eax, eax
sub ecx, eax
cmp ecx, 0x35b42123
jne 0x1401db5b0
mov rdx, qword [rbx + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r13
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
nop word cs:[rax + rax]
mov eax, dword [0x1415cdddc]
xor eax, dword [0x1415cddd8]
imul esi, eax, 0xfa20341b
or esi, 0x74e53cc9
add esi, 0xc566693d
mov rdx, qword [rbx + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r13
mov r8, rdi
call fcn.14021c7c0
add rsp, 0x30
cmp esi, 0xc9f28ecb
ja 0x1401db5b0
nop dword [rax]
mov ecx, dword [0x1415cdde0]
mov edx, dword [0x1415cdde4]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
imul ecx, ecx, 0xc01a1870
add ecx, 0xa08ac230
xor ecx, 0xa9a9ac07
cmp ecx, 0x545bb534
jb 0x1401db600
test eax, eax
je 0x1401db941
nop word cs:[rax + rax]
mov eax, dword [0x1415cddf0]
add eax, dword [0x1415cddf4]
mov ecx, eax
not ecx
and ecx, 0x85edd110
mov edx, eax
and edx, 0x7a122eef
imul edx, ecx
mov ecx, eax
and ecx, 0x85edd110
or eax, 0x85edd110
imul eax, ecx
add eax, edx
add eax, 0xa0b6e30f
cmp eax, 0xc2f69b63
ja 0x1401db660
mov qword [rbp + 0x48], r15
movzx eax, word [rdi + 0x38]
mov qword [rbp + 8], rax
mov rax, qword [rdi + 0x40]
mov qword [rbp - 0x10], rax
mov rax, qword [rdi + 0x80]
mov qword [rbp + 0x90], rax
movzx eax, byte [rbp + 0x38]
test al, al
jle 0x1401dba41
mov r13, qword [rdi + 0x78]
movzx r15d, word [rdi + 0x70]
cmp al, 2
jl 0x1401db749
jne 0x1401dba47
mov eax, dword [0x1415cde00]
sub eax, dword [0x1415cde04]
mov ecx, eax
xor ecx, 0x804024
xor eax, 0xb9000803
and eax, 0xfb511d03
and ecx, 0x4aee2fc
or ecx, eax
mov eax, ecx
not eax
or eax, 0x6c86615c
add eax, ecx
inc eax
cmp eax, 0x432622de
ja 0x1401db6e0
mov rcx, qword [r12 + 0x40]
nop
mov eax, dword [0x1415cde08]
xor edx, edx
div dword [0x1415cde0c]
or eax, 0xb04492b3
imul eax, eax, 0x2efe7001
cmp eax, 0xc9b392e0
je 0x1401db720
test rcx, rcx
jne 0x1401dced8
mov eax, dword [0x1415cde10]
mov ecx, dword [0x1415cde14]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x1c9bb794
mov ecx, eax
and ecx, 0xb2c43c96
or eax, 0xb2c43c96
add eax, ecx
not eax
and eax, 0xf19696f5
cmp eax, 0x5b878488
jae 0x1401db79d
mov eax, dword [0x1415d3940]
lea rax, [r12 + 0x30]
mov qword [rbp + 0x80], rax
nop dword [rax]
mov eax, dword [0x1415cde18]
xor edx, edx
div dword [0x1415cde1c]
imul ecx, eax, 0x646380e0
or ecx, 0xe77dcd76
and ecx, 0xe7ffdf76
mov eax, dword [0x1415d3940]
cmp ecx, 0x18ebc8ec
je 0x1401db7b0
nop
mov ecx, dword [0x1415cde20]
mov edx, dword [0x1415cde24]
add ecx, edx
add ecx, 0x8db31320
mov edx, ecx
xor edx, 0x661f853f
and ecx, 0x19e07ac0
add ecx, ecx
sub ecx, edx
cmp ecx, 0x48abf4ed
je 0x1401db7e0
cmp eax, 4
je 0x1401dc40c
mov eax, dword [0x1415cde2c]
add eax, dword [0x1415cde28]
mov ecx, eax
not ecx
and ecx, 0xeeccb282
mov edx, eax
and edx, 0x11334d7d
imul edx, ecx
mov ecx, eax
and ecx, 0xeeccb282
or eax, 0xeeccb282
imul eax, ecx
add eax, edx
imul eax, eax, 0xf1781d7d
xor eax, 0xd36e0e81
cmp eax, 0xd04da298
jae 0x1401dc3c3
jmp 0x1401dc3fd
mov eax, dword [0x1415cddc0]
and eax, dword [0x1415cddc4]
mov ecx, eax
xor ecx, 0xc552d916
add ecx, eax
and eax, 0x3aad26e9
sub ecx, eax
mov eax, ecx
and eax, 0x5974325d
xor ecx, 0xd974325d
lea eax, [rcx + rax*2]
mov ecx, eax
not ecx
and ecx, 0x8907db83
and eax, 0x76f8247c
sub eax, ecx
cmp eax, 0xe90126c9
je 0x1401db870
jmp 0x1401e2550
mov eax, dword [0x1415ce2e0]
mov ecx, dword [0x1415ce2e4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
and eax, 0x7d290f6e
add eax, eax
neg eax
add eax, ecx
add eax, 0x7d290f6e
mov ecx, 0xb5be0cbf
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x357837d8
cmp ecx, 0x364f7f87
jne 0x1401df7de
jmp 0x1401df81c
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415cdde8]
mov ecx, dword [0x1415cddec]
add eax, ecx
add eax, 0xae996230
and eax, 0x342d04f5
cmp eax, 0x8889cad5
ja 0x1401db920
jmp 0x1401db9c0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop
mov eax, dword [0x1415ce288]
xor edx, edx
div dword [0x1415ce28c]
mov ecx, eax
not ecx
and ecx, 0xe8225955
mov edx, eax
and edx, 0x17dda6aa
imul edx, ecx
mov ecx, eax
and ecx, 0xe8225955
or eax, 0xe8225955
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8a886839
and ecx, 0x757797c6
imul ecx, edx
mov edx, eax
and edx, 0x757797c6
or eax, 0x757797c6
imul eax, edx
add eax, ecx
xor eax, 0xbd0bc1ad
add eax, 0x6deaa077
jae 0x1401db950
nop dword [rax + rax]
mov ecx, dword [0x1415ce2b0]
mov eax, dword [0x1415ce2b4]
mov edx, ecx
and edx, eax
not edx
not ecx
not eax
or eax, ecx
and eax, edx
not eax
add eax, 0x758f2190
imul rcx, rax, 0x1f73705
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0x56e095bb
cmp eax, 0x8227b233
ja 0x1401db9c0
nop word cs:[rax + rax]
mov eax, dword [0x1415ce2b8]
and eax, dword [0x1415ce2bc]
not eax
and eax, 0x240ca08
mov ecx, eax
not ecx
and ecx, 0x31954e12
xor eax, 0xce6ab1ed
lea eax, [rax + rcx*2]
cmp eax, 0x8145921a
jae 0x1401dba10
jmp 0x1401e2550
je 0x1401dced8
mov eax, dword [0x1415cddf8]
mov ecx, dword [0x1415cddfc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0x2e83045
and eax, 0x92eabc5f
cmp eax, 0xf586ec1a
je 0x1401dba47
ud2
mov eax, dword [0x1415cdc00]
or eax, dword [0x1415cdc04]
mov ecx, eax
not ecx
and ecx, 0x36dfa947
and eax, 0xc92056b8
sub eax, ecx
xor eax, 0x5fc381fc
shr eax, 1
mov esi, 0x8cb9ab59
imul rsi, rax
shr rsi, 0x3b
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0xe119df3d
jbe 0x1401dbae0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
jmp 0x1401dba86
mov eax, dword [0x1415cdc08]
mov ecx, dword [0x1415cdc0c]
xor ecx, eax
not ecx
and ecx, eax
and ecx, 0x8054003
lea eax, [rcx + 0x5728bfec]
mov edx, ecx
not edx
and edx, 0x454000
mov r8d, eax
and r8d, 0x5e28a88b
imul r8d, edx
and eax, 0x1055764
or ecx, 0x576dffec
imul ecx, eax
add ecx, r8d
cmp ecx, 0xcb0f0b6d
jae 0x1401dbae0
jmp 0x1401daa31
sub rsp, 0x20
mov rcx, r12
mov edx, 8
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov rsi, rax
xor eax, eax
test al, al
je 0x1401dbb71
sub rsp, 0x20
mov rcx, r12
mov edx, 8
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
jmp 0x1401dbb34
test rsi, rsi
mov r12, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x28]
je 0x1401daa31
nop word cs:[rax + rax]
mov eax, dword [0x1415cdc18]
add eax, dword [0x1415cdc1c]
mov ecx, eax
and ecx, 0xc9532a54
xor ecx, 0x88502844
and eax, 0x88502844
or eax, ecx
or eax, 0x36acd5ab
imul eax, eax, 0x459aed85
cmp eax, 0x957a6e2
jb 0x1401dbb90
mov rdi, r13
mov ebx, dword [rdx]
mov eax, dword [0x1415cdc20]
mov ecx, dword [0x1415cdc24]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
xor eax, 0xb0ce137c
cmp eax, 0x736c5a1e
jne 0x1401dbc0f
sub rsp, 0x30
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x20], rax
mov rcx, r15
mov edx, 1
mov r8, rsi
mov r9d, ebx
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
mov r13, qword [rbp + 0x28]
nop word cs:[rax + rax]
mov eax, dword [str.s25x]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415cdc28]
xor ecx, eax
imul r12d, ecx, 0x4c4e1ad6
add r12d, 0x7aa497b7
mov eax, 0xfc63e48d
imul r12, rax
shr r12, 0x39
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov rcx, r15
mov edx, 1
mov r8, rsi
mov r9d, ebx
call rdi
add rsp, 0x30
cmp r12d, 0xf527dff6
ja 0x1401dbc20
test eax, eax
je 0x1401dbe0a
mov rbx, qword [rsi]
mov eax, dword [0x1415cdc50]
mov ecx, dword [0x1415cdc54]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, 0xcaef2acb
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x466c7e68
cmp ecx, 0xafde4b0b
mov r13, qword [rbp - 0x10]
jbe 0x1401dbce0
sub rsp, 0x20
mov rcx, r13
mov rdx, rbx
call fcn.1401e3580
add rsp, 0x20
nop
mov eax, dword [0x1415cdc58]
mov ecx, dword [0x1415cdc5c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
xor ecx, 0xde44f23a
imul rdi, rcx, 0x21ed0237
shr rdi, 0x3d
add edi, 0xd5024687
sub rsp, 0x20
mov rcx, r13
mov rdx, rbx
call fcn.1401e3580
add rsp, 0x20
cmp edi, 0x9467ca5e
jb 0x1401dbce0
mov r12, qword [r13]
movabs rax, 0x8000000000000000
cmp r12, rax
jne 0x1401dbf51
mov eax, dword [0x1415cdcd0]
xor edx, edx
div dword [0x1415cdcd4]
add eax, 0xa0560d94
imul rax, rax, 0x4ac91d35
shr rax, 0x3d
cmp eax, 0xd96df63d
jne 0x1401dbd76
sub rsp, 0x20
mov rcx, rsi
call fcn.1401e2f10
add rsp, 0x20
mov r12, qword [rbp + 0x88]
nop dword [rax]
mov eax, dword [0x1415cdcd8]
xor edx, edx
div dword [0x1415cdcdc]
mov ebx, eax
and ebx, 0xc2219f38
add ebx, 0x25c60b7a
and ebx, 0xe7a1bff8
xor ebx, 0x31c6296
sub rsp, 0x20
mov rcx, rsi
call fcn.1401e2f10
add rsp, 0x20
cmp ebx, 0xd136d48c
ja 0x1401dbd80
mov eax, dword [0x1415cdce0]
mov ecx, dword [0x1415cdce4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
or eax, 0x4327e989
and eax, 0x7fa7eda9
add eax, 0x96b4b7c7
cmp eax, 0xe2c18f0b
jbe 0x1401dc27d
jmp 0x1401dc2c9
mov eax, dword [0x1415cdc30]
imul eax, dword [0x1415cdc34]
mov ecx, eax
xor ecx, 0x140000
xor eax, 0xc023b08
or ecx, 0x12408
and ecx, eax
not ecx
and ecx, 0xc173f08
cmp ecx, 0xfe11587e
jbe 0x1401dbe49
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov r12, qword [rbp + 0x88]
mov eax, dword [0x1415cdc3c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415cdc38]
xor ecx, eax
imul eax, ecx, 0x29f5cf0c
mov ecx, eax
xor ecx, 0x645dbe26
add ecx, eax
and eax, 0x9ba241d8
sub ecx, eax
mov eax, ecx
not eax
or eax, 0xb2ccfa42
lea edi, [rcx + rax]
inc edi
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp edi, 0x888b3c20
ja 0x1401dbe50
mov eax, dword [0x1415cdc40]
mov ecx, dword [0x1415cdc44]
mov edx, eax
or edx, ecx
not eax
not ecx
and ecx, eax
not ecx
and ecx, edx
add ecx, 0xb7839f81
mov eax, ecx
and eax, 0x185a1789
xor ecx, 0x985a1789
lea eax, [rcx + rax*2]
cmp eax, 0xef8e347a
jne 0x1401dbee5
sub rsp, 0x20
mov rcx, rsi
call fcn.1401e2f10
add rsp, 0x20
mov ebx, 0x8bb8e2e3
nop word [rax + rax]
mov eax, dword [0x1415cdc48]
mov ecx, dword [0x1415cdc4c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea edi, [rax + rdx*2]
xor edi, 0xd8f1e126
imul rdi, rbx
shr rdi, 0x3e
mov eax, edi
not eax
and eax, 0x8f77b3e9
mov ecx, edi
and ecx, 0xfffffffe
imul ecx, eax
mov eax, edi
and eax, 1
or edi, 0x8f77b3e9
imul edi, eax
add edi, ecx
sub rsp, 0x20
mov rcx, rsi
call fcn.1401e2f10
add rsp, 0x20
cmp edi, 0x1d7a98a3
jbe 0x1401dbef0
jmp 0x1401daa31
mov r9, qword [r13 + 8]
mov r8, qword [r13 + 0x10]
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1401dbf60
mov rax, qword [rbp + 0x88]
mov rax, qword [rax + 0x80]
xor ecx, ecx
mov rbx, qword [rbp + 0x20]
nop dword [rax + rax]
test cl, cl
jne 0x1401dbf80
test rax, rax
js 0x1401dbf90
jne 0x1401dbfa3
jmp 0x1401dc0dd
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1401dc0dd
mov eax, dword [0x1415cdc80]
xor edx, edx
div dword [0x1415cdc84]
imul rcx, rax, 0xe978c13
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x18
mov ecx, eax
xor ecx, 0x30804082
xor eax, 0x5043c10
and eax, 0x5043c38
and ecx, 0x308040c7
or ecx, eax
cmp ecx, 0x3f1e6eed
je 0x1401dbfa3
mov qword [rbp + 0x70], r9
mov qword [rbp + 0x78], r8
mov rax, qword [rbp + 0x88]
mov rbx, qword [rax + 0x88]
mov eax, dword [0x1415cdc88]
and eax, dword [0x1415cdc8c]
imul rax, rax, 0x40bf1f6f
shr rax, 0x3e
mov ecx, eax
xor ecx, 0xf07ac77f
add ecx, eax
cmp ecx, 0x49d6a5b6
jne 0x1401dc040
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x1415cdc90]
mov ecx, dword [0x1415cdc94]
xor ecx, eax
not ecx
and ecx, eax
imul rax, rcx, 0x4f0f93c1
shr rax, 0x3d
mov ecx, eax
not ecx
or ecx, 0x1a8caaa
lea r13d, [rax + rcx]
inc r13d
or r13d, 0xfed77068
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call rdi
add rsp, 0x20
cmp r13d, 0xb186545e
jb 0x1401dc047
mov rbx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x78]
mov r9, qword [rbp + 0x70]
mov eax, dword [0x1415cdc9c]
add eax, dword [0x1415cdc98]
mov ecx, eax
and ecx, 0xcf8fed28
and eax, 0xa096528
mov edx, ecx
xor edx, 0xd5f68893
add edx, ecx
sub edx, eax
and edx, 0xfffffff9
xor edx, 0xa97f4d6c
cmp edx, 0x5cc40602
jb 0x1401dc0a7
mov eax, dword [0x1415cdca0]
sub eax, dword [0x1415cdca4]
or eax, 0xec642ebe
mov ecx, eax
xor ecx, 0x40b02048
and ecx, eax
or ecx, 0xbd4ade13
cmp ecx, 0xc7ea0180
jbe 0x1401dc11b
mov rax, qword [rbp + 0x88]
mov qword [rax + 0x80], r12
mov qword [rax + 0x88], r9
mov rdi, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdca8]
mov ecx, dword [0x1415cdcac]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not ecx
and ecx, eax
and ecx, 0x4f5ebd0c
add ecx, 0xd98da924
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x88], r9
cmp ecx, 0xfb999305
ja 0x1401dc130
mov qword [rdi + 0x90], r8
sub rsp, 0x20
mov rcx, rsi
call fcn.1401e2f10
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov ecx, eax
mov eax, dword [0x1415cdcb0]
xor r8d, r8d
xor edx, edx
div dword [0x1415cdcb4]
mov r12, rdi
nop word cs:[rax + rax]
test r8b, r8b
jne 0x1401dc1b0
test ecx, ecx
jne 0x1401dc240
mov eax, dword [0x1415cdcb8]
add eax, dword [0x1415cdcbc]
imul eax, eax, 0xf899306
and eax, 0x5487f88
imul eax, eax, 0xb9d12bfe
cmp eax, 0xf4930400
ja 0x1401dc226
mov eax, dword [0x1415cdcc0]
mov ecx, dword [0x1415cdcc4]
mov edx, eax
not edx
and eax, ecx
not ecx
or ecx, edx
not ecx
or ecx, eax
add ecx, 0x2954cd04
mov eax, ecx
and eax, 0x4693ee27
xor ecx, 0x4693ee27
lea esi, [rcx + rax*2]
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp esi, 0xfe5478d2
jne 0x1401dc240
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x1401dc1e1
mov eax, dword [0x1415cdcc8]
sub eax, dword [0x1415cdccc]
or eax, 0x6082c718
mov ecx, eax
xor ecx, 0xc86c31f6
and eax, 0x3793ce09
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x20818989
or eax, 0xdf7e7666
and eax, ecx
cmp eax, 0xc51054dd
je 0x1401dc240
jmp 0x1401dabd0
mov eax, dword [0x1415cdce8]
mov ecx, dword [0x1415cdcec]
mov edx, eax
not edx
or eax, ecx
not ecx
or ecx, edx
not ecx
not eax
or eax, ecx
and eax, 0xb784f50f
xor eax, 0x36004004
mov esi, 0x8a1f91f3
imul rsi, rax
shr rsi, 0x3e
sub rsp, 0x20
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp esi, 0xbcd5d307
jbe 0x1401dc2db
sub rsp, 0x20
mov rcx, r15
call fcn.140219b10
add rsp, 0x20
jmp 0x1401dc27d
mov ecx, eax
mov rbx, qword [rbp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdcf0]
xor edx, edx
div dword [str.j8_m]
add eax, 0x3abe9928
or eax, 0x50b50a32
cmp eax, 0x6a9c42d7
jb 0x1401dc2f0
test ecx, ecx
jne 0x1401dabd0
mov eax, dword [0x1415cdcfc]
add eax, dword [0x1415cdcf8]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x18f36518
and ecx, 0x670c9ae7
imul ecx, edx
mov edx, eax
and edx, 0x670c9ae7
or eax, 0x670c9ae7
imul eax, edx
add eax, ecx
and eax, 0x7520eced
add eax, 0x2e9c0f88
cmp eax, 0x61fe2637
jb 0x1401dc3b4
mov eax, dword [0x1415cdd00]
mov ecx, dword [0x1415cdd04]
add eax, ecx
add eax, 0xd0abef37
mov esi, eax
and esi, 0xbf7847b3
mov ecx, esi
not ecx
mov edx, eax
and edx, 0xe484192
and ecx, 0xf1b1be6d
imul ecx, edx
and eax, 0xb1300621
or esi, 0xf1b1be6d
imul esi, eax
add esi, ecx
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp esi, 0xa53dd276
jbe 0x1401dabd0
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x1401dc35b
mov eax, dword [0x1415cde30]
xor edx, edx
div dword [0x1415cde34]
and eax, 0xc248d3ec
xor eax, 0x94325e13
mov edi, 0xee6458b3
imul rdi, rax
shr rdi, 0x3b
sub rsp, 0x20
call fcn.1402537c0
add rsp, 0x20
cmp edi, 0x46f2f30
jbe 0x1401dc40c
sub rsp, 0x20
call fcn.14021c890
add rsp, 0x20
jmp 0x1401dc3c3
movzx eax, byte [0x1415d3944]
nop word cs:[rax + rax]
mov ecx, dword [0x1415cde38]
and ecx, dword [0x1415cde3c]
add ecx, 0x7ea8616d
not ecx
and ecx, 0x5f3aef0e
cmp ecx, 0x5430e59b
je 0x1401dc420
nop word cs:[rax + rax]
mov ecx, dword [0x1415cde40]
sub ecx, dword [0x1415cde44]
imul rcx, rcx, 0xe3b9a5f
shr rcx, 0x3a
cmp ecx, 0x15f2e099
je 0x1401dc450
test al, al
je 0x1401dc76a
sub rsp, 0x20
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x78]
call fcn.1401e5640
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415cdf18]
sub eax, dword [0x1415cdf1c]
cmp eax, 0x4c18d35c
je 0x1401dc490
mov rsi, qword [r12 + 0x38]
mov rbx, qword [r12 + 0x40]
nop dword [rax]
mov eax, dword [0x1415cdf20]
mov ecx, dword [0x1415cdf24]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rax, rax, 0x5c5d734d
shr rax, 0x3e
lea ecx, [rax - 0x75f6b480]
not eax
and eax, 0xa0000d
imul eax, eax, 0x4549062
imul ecx, ecx, 0x8efddbef
add ecx, eax
cmp ecx, 0x7fa5834d
jb 0x1401dc4b0
test rbx, rbx
je 0x1401dc67d
xor r12d, r12d
mov r13d, 0x83b0e751
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1401dc53b
mov eax, r12d
and eax, 1
or r12, 1
add r12, rax
cmp r12, rbx
je 0x1401dc67d
mov ecx, dword [0x1415cdf28]
mov edx, dword [0x1415cdf2c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x4298953e
and ecx, 0xbd676ac1
or ecx, r9d
or eax, r8d
and r8d, 0x4298953e
and edx, 0xbd676ac1
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
and ecx, 0x566aa1b3
mov edx, eax
and edx, 0xa9955e4c
imul edx, ecx
mov ecx, eax
and ecx, 0x566aa1b3
or eax, 0x566aa1b3
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xaf01e7a4
or eax, 0x50fe185b
and eax, ecx
imul eax, eax, 0x7b65c4a7
cmp eax, 0x7df57a8d
je 0x1401dc53b
mov rcx, r12
shl rcx, 5
cmp qword [rsi + rcx], 0
je 0x1401dc525
add rcx, rsi
mov eax, dword [0x1415cdf30]
xor edx, edx
div dword [0x1415cdf34]
nop word [rax + rax]
mov eax, dword [0x1415cdf38]
or eax, dword [0x1415cdf3c]
or eax, 0xb63dc70
imul rax, r13
shr rax, 0x3f
imul eax, eax, 0xe368fde5
cmp eax, 0x9b5120b9
jb 0x1401dc5f0
mov r8, qword [rcx + 8]
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
call rdi
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415cdf40]
mov ecx, dword [0x1415cdf44]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0x2c5e411
and eax, 0xeee5f533
imul rax, rax, 0x332679a1
shr rax, 0x3d
cmp eax, 0x461258e0
je 0x1401dc630
jmp 0x1401dc525
xor eax, eax
nop
test al, al
jne 0x1401dc680
mov rax, qword [rbp + 0x80]
mov rax, qword [rax]
mov r12, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov ecx, dword [0x1415cdf48]
mov edx, dword [0x1415cdf4c]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
xor ecx, 0x2f6d07e8
imul rcx, rcx, 0x473687b7
shr rcx, 0x3b
or ecx, 0x244d9170
cmp ecx, 0x38cd5b78
je 0x1401dc6a0
mov ecx, dword [0x1415cdf50]
sub ecx, dword [0x1415cdf54]
mov edx, ecx
and edx, 0xbd3d4931
or ecx, 0xbd3d4931
add ecx, edx
mov edx, ecx
not edx
or edx, 0xdf365aa5
add ecx, edx
inc ecx
mov edx, ecx
and edx, 0x3ca5208d
or ecx, 0x3ca5208d
add ecx, edx
cmp ecx, 0x4ee9a6b8
je 0x1401dc6f0
test rax, rax
je 0x1401dcebf
mov rbx, qword [0x1415d3918]
mov eax, dword [0x1415cdf58]
xor edx, edx
div dword [0x1415cdf5c]
xor eax, 0x10123003
and eax, 0x305230c3
cmp eax, 0x4d8dcbca
jbe 0x1401dce54
jmp 0x1401dce71
mov eax, dword [0x1415cde48]
mov ecx, dword [0x1415cde4c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
xor ecx, 0x998309c
add ecx, eax
and eax, 0x3667cf63
sub ecx, eax
add ecx, 0x9be7a677
or ecx, 0xdbf54cbc
cmp ecx, 0x3dc9b316
mov rbx, qword [rbp + 0x78]
mov rsi, qword [rbp]
je 0x1401dc808
mov eax, dword [0x1415cde50]
and eax, dword [0x1415cde54]
or eax, 0x1504
and eax, 0xd1483d34
shr eax, 2
imul rdi, rax, 0x22c0c027
shr rdi, 0x3a
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, r13
mov r9, r15
call fcn.14021c7f0
add rsp, 0x20
cmp edi, 0xc86dec40
jne 0x1401dc823
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, r13
mov r9, r15
call fcn.1401e3fe0
add rsp, 0x20
jmp 0x1401dc7c3
mov r15, qword [rsi]
mov rbx, rsi
movabs r9, 0x8000000000000000
mov rsi, qword [rbp + 0x40]
mov eax, dword [0x1415cde58]
mov ecx, dword [0x1415cde5c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
or ecx, 0x10e4598a
mov edx, eax
not edx
and edx, 0x4108050
mov r8d, ecx
and r8d, 0xfb0f66a7
imul r8d, edx
and ecx, 0x4f09958
or eax, 0x14f4d9da
imul eax, ecx
add eax, r8d
mov ecx, eax
and ecx, 0x8df62d0
add ecx, ecx
sub eax, ecx
add eax, 0x88df62d3
cmp eax, 0xd446e32a
ja 0x1401dc837
cmp r15, r9
jne 0x1401dc8eb
mov qword [rsi], 0
mov qword [rsi + 8], 8
mov eax, dword [0x1415cde90]
and eax, dword [0x1415cde94]
add eax, 0xaaacddbb
and eax, 0x5f5fb
add eax, 0x93affb68
cmp eax, 0xae926404
jbe 0x1401dca43
jmp 0x1401dca96
mov eax, dword [0x1415cde60]
xor eax, dword [0x1415cde64]
and eax, 0xd81164
add eax, 0xc6351ab5
cmp eax, 0x6950d8dd
jb 0x1401dc8eb
mov eax, dword [0x1415cde68]
mov ecx, dword [0x1415cde6c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, 0x84a8120d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x9abb67f0
jne 0x1401dc946
mov rdx, qword [rbx + 8]
sub rsp, 0x20
mov rcx, rsi
call fcn.1401e4750
add rsp, 0x20
xor edi, edi
mov r13, rsi
mov rsi, qword [rbx + 8]
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
call fcn.14021c810
add rsp, 0x20
test dil, dil
jne 0x1401dc94b
mov eax, dword [0x1415cde70]
xor edx, edx
div dword [0x1415cde74]
add eax, 0x59fc98e7
not eax
or eax, 0xc5142016
cmp eax, 0x80d67662
je 0x1401dc967
test r15, r15
je 0x1401dcac9
mov rbx, qword [0x1415d3918]
mov eax, dword [0x1415cde7c]
add eax, dword [0x1415cde78]
mov ecx, eax
and ecx, 0x7e0066c
xor eax, 0x7e0066c
lea eax, [rax + rcx*2]
xor eax, 0x7118fdc3
imul eax, eax, 0x40a5f5ac
cmp eax, 0x6c9ba286
jne 0x1401dc9dc
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415cde84]
mov edi, eax
xor edi, eax
not edi
and edi, dword [0x1415cde80]
xor edi, eax
and edi, 0x74022c53
xor edi, 0xf94a0e82
add edi, 0x93c22cd
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
cmp edi, 0x454c6e54
jb 0x1401dc9dc
mov eax, dword [0x1415cde88]
add eax, dword [0x1415cde8c]
not eax
and eax, 0x25800000
or eax, 0x4805824e
cmp eax, 0x64731fc3
je 0x1401dca1f
jmp 0x1401dcac9
mov eax, dword [0x1415cde98]
imul eax, dword [0x1415cde9c]
or eax, 0x4ae5f737
mov ecx, eax
and ecx, 0xb79e5dc8
mov edx, ecx
not edx
and edx, 0x4823aaa6
mov r8d, eax
and r8d, 0xb7981548
imul r8d, edx
and eax, 0x64880
or ecx, 0x4827eaa6
imul ecx, eax
add ecx, r8d
mov qword [rsi + 0x10], 0
cmp ecx, 0xe34ad33d
jbe 0x1401dcaa0
mov qword [rsi + 0x10], 0
jmp 0x1401dca43
mov eax, dword [0x1415cdea0]
add eax, dword [0x1415cdea4]
or eax, 0x592f3056
imul eax, eax, 0x6e627ced
mov ecx, eax
xor ecx, 0x32ed174
and ecx, eax
cmp ecx, 0xf7b31188
ja 0x1401dcaa0
mov rsi, qword [r12 + 0x38]
mov r15, qword [r12 + 0x40]
mov eax, dword [0x1415cdea8]
xor edx, edx
div dword [0x1415cdeac]
add eax, 0x549e5eb0
mov ecx, eax
xor ecx, 0x85018084
xor eax, 0x8300860
and eax, 0x28b22879
and ecx, 0xd74dd786
sub ecx, eax
cmp ecx, 0x68085350
je 0x1401dcad3
test r15, r15
je 0x1401dccd7
xor r12d, r12d
mov rax, r12
shl rax, 5
cmp qword [rsi + rax], 0
je 0x1401dcc51
mov ecx, dword [0x1415cdeb0]
add ecx, dword [0x1415cdeb4]
mov edx, ecx
xor edx, 0x22ac008e
xor ecx, 0x44400600
and edx, 0xb2ac20de
and ecx, 0x4d53df21
or ecx, edx
cmp ecx, 0xc63d7605
jne 0x1401dcb5d
mov rcx, qword [0x1415d3918]
add rax, rsi
mov ecx, dword [0x1415cdeb8]
mov edx, dword [0x1415cdebc]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
add ecx, 0x4ab1f2d1
mov edx, ecx
not edx
mov r8d, ecx
or r8d, 0x78765085
mov r9d, r8d
and r9d, 0x9ab7ff79
and edx, 0x5080002
imul edx, r9d
and r8d, 0x65480086
or ecx, 0x7d7e5087
imul ecx, r8d
add ecx, edx
mov rbx, qword [rax + 8]
mov r13, qword [0x1415d3918]
cmp ecx, 0xf0319f39
je 0x1401dcb60
mov eax, dword [0x1415cdec0]
add eax, dword [0x1415cdec4]
mov ecx, eax
and ecx, 0x862acd7
add ecx, ecx
sub eax, ecx
add eax, 0x392b0812
or eax, 0xd0c5be7e
cmp eax, 0x9c83b278
jb 0x1401dccbc
mov eax, dword [0x1415cdec8]
mov ecx, dword [0x1415cdecc]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
add eax, 0xd41b30b8
mov edi, eax
xor edi, 0xf54d7610
and edi, eax
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xe4895538
je 0x1401dccbc
inc r12
nop word cs:[rax + rax]
mov eax, dword [0x1415cded0]
add eax, dword [0x1415cded4]
cmp eax, 0x7ee1a1b1
je 0x1401dcc60
nop word cs:[rax + rax]
mov eax, dword [0x1415cded8]
xor eax, dword [0x1415cdedc]
imul eax, eax, 0x230685c2
mov ecx, eax
and ecx, 0x591564a0
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x591564a0
xor eax, 0xd085ac2c
cmp eax, 0x44b925e6
jb 0x1401dcc80
cmp r12, r15
jne 0x1401dcb14
jmp 0x1401dccd7
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401dcc0c
mov eax, 0xad79718f
mov ecx, dword [0x1415cdee0]
xor ecx, dword [0x1415cdee4]
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x25e465fe
je 0x1401dccdc
mov rax, qword [rbp + 0x80]
cmp qword [rax], 0
mov r12, qword [rbp + 0x88]
je 0x1401dcdff
mov eax, dword [0x1415cdee8]
xor edx, edx
div dword [0x1415cdeec]
and eax, 0x5c50f8c5
add eax, 0xcf75c1e8
cmp eax, 0x8f2266d8
jb 0x1401dcd59
mov eax, dword [0x1415cdef0]
or eax, dword [0x1415cdef4]
and eax, 0x620c130
or eax, 0x9895264c
imul eax, eax, 0xe9fb996d
mov rbx, qword [0x1415d3918]
cmp eax, 0x207e64aa
jae 0x1401dcd62
mov rax, qword [0x1415d3918]
jmp 0x1401dcd2f
mov eax, dword [0x1415cdef8]
mov ecx, dword [0x1415cdefc]
add eax, ecx
add eax, 0x2fa76b5e
or eax, 0xdccec56f
imul rax, rax, 0x65c9f341
shr rax, 0x3c
cmp eax, 0x96cb1b84
ja 0x1401dcdc0
mov eax, dword [0x1415cdf00]
add eax, dword [0x1415cdf04]
and eax, 0xa8d11ccd
imul edi, eax, 0xafa3078f
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
cmp edi, 0x189d490b
jne 0x1401dcdd8
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401dcd8c
mov eax, 0xd9b7b505
mov ecx, dword [0x1415cdf08]
xor ecx, dword [0x1415cdf0c]
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x69fffb28
cmp ecx, 0xa2e5150f
ja 0x1401dcddd
mov rcx, qword [rbp + 0x40]
mov rax, qword [rcx + 0x10]
mov rdx, qword [rbp + 0x80]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov eax, dword [0x1415cdf10]
add eax, dword [0x1415cdf14]
imul rax, rax, 0x42fe0f49
shr rax, 0x3e
lea ecx, [rax + 0x617902a]
imul ecx, ecx, 0x48284480
or eax, 0xef3fdcaa
imul eax, eax, 0xa1000800
add eax, ecx
cmp eax, 0x61e977b6
jbe 0x1401dce18
jmp 0x1401dced8
sub rsp, 0x20
xor edi, edi
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test dil, dil
je 0x1401dce89
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401dce54
mov eax, dword [0x1415cdf60]
imul eax, dword [0x1415cdf64]
mov ecx, eax
not ecx
or ecx, 0x8e345e46
or eax, 0x71cba1b9
and eax, ecx
mov ecx, eax
xor ecx, 0x80382100
and ecx, eax
and ecx, 0xd878ad40
cmp ecx, 0x49167434
ja 0x1401dce89
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx + 0x10]
mov rdx, qword [rbp + 0x80]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
lea rdx, [r12 + 0x48]
mov r13, qword [rbp + 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x1415cdf68]
imul eax, dword [0x1415cdf6c]
mov ecx, eax
xor ecx, 0xc7355738
add ecx, eax
and eax, 0x38caa8c7
sub ecx, eax
imul rax, rcx, 0x72365b7
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1e
cmp ecx, 0xc47a5320
je 0x1401dcef0
xor eax, eax
movabs rsi, 0x8000000000000000
mov r15, qword [rbp + 0x48]
nop word [rax + rax]
test al, al
jne 0x1401dcf40
cmp byte [rbp + 0x70], 1
jg 0x1401dcf51
je 0x1401dcf6d
jmp 0x1401dd5b3
mov rax, qword [r12 + 0x58]
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1401dcf60
test rax, rax
jne 0x1401dd5b3
mov qword [rbp + 0x80], rdx
nop word cs:[rax + rax]
mov eax, dword [0x1415cdf70]
imul eax, dword [0x1415cdf74]
add eax, 0x6dcbc9d2
or eax, 0x76886391
add eax, 0xd66c3366
cmp eax, 0x2cf5885e
jb 0x1401dcf80
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r13
mov rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0x60]
call fcn.14021c830
add rsp, 0x20
mov rcx, rax
nop word [rax + rax]
mov eax, dword [0x1415cdf78]
xor edx, edx
div dword [0x1415cdf7c]
mov edx, eax
not edx
and edx, 0x6cdce20c
mov r8d, eax
and r8d, 0x93231df3
imul r8d, edx
mov edx, eax
and edx, 0x6cdce20c
or eax, 0x6cdce20c
imul eax, edx
add eax, r8d
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xaef17770
and edx, 0x510e888d
imul edx, r8d
mov r8d, eax
and r8d, 0x510e888c
or eax, 0x510e888d
imul eax, r8d
add eax, edx
not eax
and eax, 0xb675f51d
cmp eax, 0xc9b150
je 0x1401dcfd0
test rcx, rcx
je 0x1401dd20f
mov rax, qword [rbp + 0x60]
mov rcx, qword [rax]
mov rax, qword [rax + 0x18]
movabs rdx, 0xe4dc3a68696e9073
movabs r9, 0x77901fa74fbbdc69
sub rcx, r9
sub rcx, qword [rbp + 0x90]
add r9, rdx
add r9, rcx
add r9, rax
sub r9, rdx
nop word cs:[rax + rax]
mov eax, dword [0x1415cdf88]
or eax, dword [0x1415cdf8c]
mov ecx, eax
and ecx, 0xbc2769b7
xor ecx, 0x98232927
and eax, 0xdbfbbf6f
or eax, ecx
mov ecx, eax
or ecx, 0x43d89648
mov edx, eax
not edx
and edx, 0x10056901
mov r8d, ecx
and r8d, 0xefba90f6
imul r8d, edx
and ecx, 0x10456f09
or eax, 0x53ddff49
imul eax, ecx
add eax, r8d
cmp eax, 0x6ea9ec00
je 0x1401dd090
sub rsp, 0x20
mov rdi, qword [rbp + 0x10]
mov rcx, rdi
mov rdx, r13
mov r8, qword [rbp + 0x90]
call fcn.1401e3fe0
add rsp, 0x20
mov rax, qword [rdi]
cmp rax, rsi
je 0x1401dd250
mov qword [rbp], rax
mov r8, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x50], rax
mov rdi, qword [r12 + 0x50]
mov eax, dword [0x1415ce010]
xor edx, edx
div dword [0x1415ce014]
add eax, 0xa8a5bb5f
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xb5bd7976
and ecx, 0x4a428689
imul ecx, edx
mov edx, eax
and edx, 0x4a428689
or eax, 0x4a428689
imul eax, edx
add eax, ecx
add eax, 0x190176a8
cmp eax, 0x94dacdfe
jb 0x1401dd128
mov qword [rbp + 0x40], r8
mov rax, qword [r12 + 0x58]
mov qword [rbp + 0x90], rax
mov eax, dword [0x1415ce018]
and eax, dword [str.uG_]
mov ecx, eax
not ecx
and ecx, 0x1e729a98
mov edx, eax
and edx, 0xe18d6567
imul edx, ecx
mov ecx, eax
and ecx, 0x1e729a98
or eax, 0x1e729a98
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3c5e9a80
and ecx, 0xc3a16579
imul ecx, edx
mov edx, eax
and edx, 0xc3a16578
or eax, 0xc3a16579
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x28b8d3a0
mov edx, eax
and edx, 0xd7472c58
imul edx, ecx
mov ecx, eax
and ecx, 0x28b8d3a0
or eax, 0x28b8d3a0
imul eax, ecx
add eax, edx
cmp eax, 0xcc42f650
jne 0x1401ddac2
jmp 0x1401ddafb
mov eax, dword [0x1415cdf80]
mov ecx, dword [0x1415cdf84]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
or eax, 0x404c8408
and eax, 0x61dccce8
or ecx, 0x7ddccfed
add ecx, eax
and ecx, 0x4a4ab7d0
cmp ecx, 0x4c8e5e6b
je 0x1401dd20f
nop dword [rax + rax]
mov ecx, dword [0x1415cdf90]
mov edx, dword [0x1415cdf94]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xce4b439c
and ecx, 0x31b4bc63
or ecx, r9d
or eax, r8d
and r8d, 0xce4b439c
and edx, 0x31b4bc63
or edx, r8d
xor edx, ecx
not eax
or eax, edx
add eax, 0x559460ca
not eax
or eax, 0x3b71c946
mov ecx, eax
not ecx
and eax, 0xef8fad3d
mov edx, ecx
and edx, 0x1280
imul edx, eax
mov eax, ecx
and eax, 0xc48e2439
or ecx, 0xef8fad3d
imul ecx, eax
add ecx, edx
cmp ecx, 0x93f1f04b
je 0x1401dd250
mov rsi, qword [r12 + 0x50]
mov rax, qword [r12 + 0x58]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1401dd443
xor r12d, r12d
xor ebx, ebx
nop dword [rax + rax]
mov eax, dword [0x1415cdf98]
mov ecx, dword [0x1415cdf9c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0x15664831
or eax, 0x55377349
add eax, 0x19a6619a
cmp eax, 0x2e32a6bf
jb 0x1401dd2f0
mov r13, rbx
shl r13, 5
cmp qword [rsi + r13], 0
je 0x1401dd408
add r13, rsi
mov eax, dword [0x1415cdfa0]
and eax, dword [0x1415cdfa4]
mov ecx, eax
xor ecx, 0x42d01b1b
add ecx, eax
and eax, 0xbd2fe4e4
sub ecx, eax
imul rax, rcx, 0x4aa0a715
shr rax, 0x3e
imul eax, eax, 0xf04cdec6
cmp eax, 0x84accf56
ja 0x1401dd330
mov eax, dword [0x1415cdfa8]
add eax, dword [0x1415cdfac]
imul rax, rax, 0x33c783d
shr rax, 0x39
or eax, 0xfbffc988
xor eax, 0xeb9b9f44
add eax, 0x10d4c3a9
cmp eax, 0xe1c7b22e
ja 0x1401dd424
nop word cs:[rax + rax]
mov eax, dword [0x1415cdfb0]
mov ecx, dword [0x1415cdfb4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0x65da690f
imul eax, eax, 0x1c9c6c6a
shr eax, 4
imul rdi, rax, 0x431bbbf
shr rdi, 0x36
mov r8, qword [r13 + 8]
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x3fa303a9
ja 0x1401dd424
inc rbx
mov r13, qword [rbp + 0x78]
nop
test r12b, r12b
jne 0x1401dd410
cmp rbx, qword [rbp + 0x90]
jne 0x1401dd2f0
jmp 0x1401dd443
mov r8, qword [r13 + 8]
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
call fcn.140219910
add rsp, 0x20
jmp 0x1401dd3a0
mov r8, qword [rbp + 0x80]
nop word [rax + rax]
mov eax, dword [0x1415cdfb8]
sub eax, dword [0x1415cdfbc]
imul rax, rax, 0x13fd63e9
shr rax, 0x3a
and eax, 0xfffffffe
add eax, 0x8c96ec2e
cmp eax, 0xda99f2c8
ja 0x1401dd450
mov rax, qword [r8]
nop dword [rax]
mov ecx, dword [0x1415cdfc0]
mov edx, dword [0x1415cdfc4]
add ecx, edx
add ecx, 0x72cb3a39
and ecx, 0x2adab7f9
cmp ecx, 0xed254128
je 0x1401dd480
test rax, rax
mov r12, qword [rbp + 0x88]
je 0x1401dd99f
mov eax, dword [0x1415cdfc8]
or eax, dword [0x1415cdfcc]
mov ecx, eax
not ecx
and ecx, 0xa7b3c88f
mov edx, eax
and edx, 0x584c3770
imul edx, ecx
mov ecx, eax
and ecx, 0xa7b3c88f
or eax, 0xa7b3c88f
imul eax, ecx
add eax, edx
imul eax, eax, 0x17fd0981
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc0aa803d
and ecx, 0x3f557fc2
imul ecx, edx
mov edx, eax
and edx, 0x3f557fc2
or eax, 0x3f557fc2
imul eax, edx
add eax, ecx
cmp eax, 0x594c0d96
jae 0x1401dd520
mov rax, qword [0x1415d3918]
mov eax, dword [0x1415cdfd0]
xor eax, dword [0x1415cdfd4]
add eax, 0x8b227fe0
mov ecx, eax
and ecx, 0x44b7fa20
xor eax, 0xc4b7fa20
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
and ecx, 0xe26c1b74
mov edx, eax
and edx, 0x1d93e48b
imul edx, ecx
mov ecx, eax
and ecx, 0xe26c1b74
or eax, 0xe26c1b74
imul eax, ecx
add eax, edx
mov rbx, qword [0x1415d3918]
cmp eax, 0x1d254006
jb 0x1401dd520
mov eax, dword [0x1415cdfdc]
xor eax, dword [0x1415cdfd8]
or eax, 0x4dd736c8
mov ecx, 0xb6599511
imul rcx, rax
shr rcx, 0x3e
mov eax, ecx
xor eax, 0xb8fe2a55
and ecx, 0xfffffffe
add ecx, ecx
sub ecx, eax
cmp ecx, 0x528d30bf
jbe 0x1401dd8e8
jmp 0x1401dd93f
lea r9, [r12 + 0x98]
lea r10, [r12 + 0xb8]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce120]
and eax, dword [0x1415ce124]
mov ecx, eax
xor ecx, 0x7af0167c
xor eax, 0x800ae980
and eax, 0xa0baefe0
mov edx, ecx
and edx, 0x5f45101f
or edx, eax
xor edx, 0xd7926797
and ecx, 0x77288877
or ecx, edx
mov eax, ecx
and eax, 0x1ae7276b
xor ecx, 0x9ae7276b
lea eax, [rcx + rax*2]
cmp eax, 0xf57cda9c
ja 0x1401dd5d0
nop dword [rax]
mov eax, dword [0x1415ce128]
xor edx, edx
div dword [0x1415ce12c]
mov ecx, eax
not ecx
and ecx, 0x1ded1248
mov edx, eax
and edx, 0x212edb7
imul edx, ecx
mov ecx, eax
and ecx, 0x1ded1248
or eax, 0x1ded1248
imul eax, ecx
add eax, edx
or eax, 0xecba4438
imul rax, rax, 0xc0dc40f
shr rax, 0x3a
cmp eax, 0x20cc3df5
ja 0x1401dd620
cmp byte [rbp + 0x28], 1
jg 0x1401dd6f0
jne 0x1401dd7ab
nop dword [rax + rax]
mov eax, dword [0x1415ce130]
xor edx, edx
div dword [0x1415ce134]
mov ecx, eax
not ecx
and ecx, 0x84415a72
mov edx, eax
and edx, 0x7bbea58d
imul edx, ecx
mov ecx, eax
and ecx, 0x84415a72
or eax, 0x84415a72
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x51623e4c
and ecx, 0xae9dc1b3
imul ecx, edx
mov edx, eax
and edx, 0xae9dc1b2
or eax, 0xae9dc1b3
imul eax, edx
add eax, ecx
cmp eax, 0x128fd70b
je 0x1401dd680
mov r11b, 1
jmp 0x1401dd7b0
mov eax, dword [0x1415ce138]
or eax, dword [0x1415ce13c]
imul eax, eax, 0x58cbcaf8
mov ecx, eax
xor ecx, 0x59298028
or eax, 0x24125a90
and eax, ecx
and eax, 0x7d3bdab8
cmp eax, 0xd21fc1d2
je 0x1401dd6f0
mov rax, qword [r9]
mov ecx, 0xa196995d
nop word cs:[rax + rax]
mov edx, dword [0x1415ce140]
add edx, dword [0x1415ce144]
mov r8d, edx
xor r8d, 0xff7658cd
and r8d, edx
xor r8d, 0xf0c3354e
imul r8, rcx
shr r8, 0x3b
cmp rax, rsi
sete r11b
cmp r8d, 0x93b2e16a
je 0x1401dd730
mov eax, 0xc11c09c7
nop dword [rax]
mov ecx, dword [0x1415ce148]
mov edx, dword [0x1415ce14c]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x5a48c007
and ecx, 0x5a08000f
xor ecx, 0x2101025e
cmp ecx, 0xd9e1c026
je 0x1401dd770
jmp 0x1401dd7b0
xor r11d, r11d
nop
mov eax, dword [0x1415ce150]
mov ecx, dword [0x1415ce154]
xor ecx, eax
not ecx
and ecx, eax
add ecx, 0xfbee31e6
or ecx, 0x696fcf29
imul eax, ecx, 0x536715f0
cmp eax, 0x8fb58348
jb 0x1401dd7b0
cmp byte [rbp + 0x58], 1
jg 0x1401dd7eb
je 0x1401dd88e
xor eax, eax
jmp 0x1401dd84c
mov eax, dword [0x1415ce158]
xor edx, edx
div dword [0x1415ce15c]
nop dword [rax]
mov eax, dword [0x1415ce160]
xor edx, edx
div dword [0x1415ce164]
add eax, 0x9a711c0c
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x34e184f2
and ecx, 0xcb1e7b0d
imul ecx, edx
mov edx, eax
and edx, 0xcb1e7b0d
or eax, 0xcb1e7b0d
imul eax, edx
add eax, ecx
add eax, 0x7e6e7c0c
cmp eax, 0x560a48ba
jb 0x1401dd800
cmp qword [r10], rsi
sete al
or al, r11b
movzx esi, byte [rbp + 0x58]
nop word cs:[rax + rax]
mov ecx, dword [0x1415ce16c]
add ecx, dword [0x1415ce168]
or ecx, 0x840090a
and ecx, 0x5a60ed2b
add ecx, 0x8b347bfb
cmp ecx, 0x16dfdaba
jb 0x1401dd860
test al, al
je 0x1401def00
mov dword [rbp + 0x40], r11d
mov qword [rbp + 0x50], r10
mov qword [rbp + 0x90], r9
mov eax, dword [0x1415ce170]
mov ecx, dword [0x1415ce174]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x40b25fac
or eax, 0x938a20e8
and eax, 0xfffea2eb
cmp eax, 0x34f32003
jne 0x1401de44c
jmp 0x1401de470
mov eax, dword [0x1415cdfe0]
mov ecx, dword [0x1415cdfe4]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
imul eax, ecx, 0xd7739927
mov ecx, eax
and ecx, 0xb7e2097
add ecx, ecx
neg ecx
lea edi, [rax + rcx]
add edi, 0xb7e2097
xor edi, 0xedcf0e12
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x97316d41
jbe 0x1401dd956
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
jmp 0x1401dd8e8
mov eax, 0x88e7a9b9
mov r8, qword [rbp + 0x80]
mov ecx, dword [0x1415cdfec]
mov edx, ecx
xor edx, edx
not edx
and edx, dword [0x1415cdfe8]
xor edx, ecx
imul rdx, rax
shr rdx, 0x3f
lea ecx, [rdx + 0xa8d5926]
xor ecx, 0xfac678b5
or ecx, edx
imul rcx, rcx, 0x2c3115f7
shr rcx, 0x3d
cmp ecx, 0x80bc0529
ja 0x1401dd962
mov eax, dword [0x1415cdff0]
mov ecx, dword [0x1415cdff4]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x45637da9
and ecx, 0xba9c8256
imul ecx, edx
mov edx, eax
and edx, 0xba9c8256
or eax, 0xba9c8256
imul eax, edx
add eax, ecx
mov ecx, 0xe459c695
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc619ca0f
je 0x1401dda20
mov eax, dword [0x1415cdff8]
sub eax, dword [0x1415cdffc]
xor eax, 0xff8724d7
mov ecx, eax
and ecx, 0x8181844
or eax, 0x8181844
add eax, ecx
add eax, 0xf1a85b96
mov qword [r8], 0
cmp eax, 0x9e8bc6ec
jae 0x1401dda29
mov qword [r8], 0
jmp 0x1401dd9ed
mov eax, dword [0x1415ce000]
xor eax, dword [0x1415ce004]
add eax, 0x4a75ac21
mov ecx, eax
and ecx, 0xad067cae
or eax, 0xad067cae
add eax, ecx
and eax, 0xdf411bab
cmp eax, 0x52aa089
movabs rsi, 0x8000000000000000
jne 0x1401dda80
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
nop word cs:[rax + rax]
mov eax, dword [0x1415ce008]
xor edx, edx
div dword [0x1415ce00c]
add eax, 0x6a10af78
imul rax, rax, 0x6b4e9bd7
shr rax, 0x3e
imul eax, eax, 0x66644729
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
cmp eax, 0x84cf58ee
jae 0x1401dda80
jmp 0x1401dd5b3
mov eax, dword [0x1415ce020]
imul eax, dword [0x1415ce024]
or eax, 0x1617cc7b
add eax, 0x64b35244
mov ecx, eax
not ecx
or eax, 0x56b842a3
or ecx, 0xa9433d5c
and ecx, eax
mov qword [r12 + 0x58], 0
cmp ecx, 0x4e231791
jne 0x1401ddb06
mov qword [r12 + 0x58], 0
jmp 0x1401ddac2
cmp qword [rbp + 0x90], 0
je 0x1401ddc34
xor r13d, r13d
xor ebx, ebx
jmp 0x1401ddb2b
inc rbx
cmp rbx, qword [rbp + 0x90]
je 0x1401ddc34
test r13b, r13b
jne 0x1401ddb2b
mov rax, rbx
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1401ddb1b
mov r12, rdi
add rax, rdi
mov rsi, qword [rax + 8]
mov eax, dword [0x1415ce030]
xor eax, dword [0x1415ce034]
mov ecx, eax
not ecx
or ecx, 0x1000020
and ecx, 0x9488173
and eax, 0x30005a04
or eax, ecx
xor eax, 0x8842e2c5
cmp eax, 0x2da4e34d
jb 0x1401ddbca
mov edi, dword [0x1415ce038]
xor edi, dword [0x1415ce03c]
or edi, 0x53c20c40
add edi, 0xb4e8380f
mov rax, rdi
mov ecx, 0xb5c80e71
imul rax, rcx
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x19
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x5b01cf30
jbe 0x1401ddbe5
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
jmp 0x1401ddb77
mov rdi, r12
nop dword [rax + rax]
mov eax, dword [0x1415ce040]
or eax, dword [0x1415ce044]
add eax, 0xaa719d25
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2f0258c5
and ecx, 0xd0fda73a
imul ecx, edx
mov edx, eax
and edx, 0xd0fda73a
or eax, 0xd0fda73a
imul eax, edx
add eax, ecx
cmp eax, 0xd8f9d0d6
ja 0x1401ddbf0
jmp 0x1401ddb1b
mov rax, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x50]
lea rax, [rax + rcx*2]
mov qword [rbp + 0x90], rax
mov eax, dword [0x1415ce028]
mov ecx, dword [0x1415ce02c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0x230dfeae
add ecx, ecx
sub eax, ecx
add eax, 0x230dfeae
mov ecx, eax
xor ecx, 0x48f94f49
or eax, 0xb706b0b6
and eax, ecx
mov ecx, eax
and ecx, 0x32931d7d
xor eax, 0xb2931d7d
lea eax, [rax + rcx*2]
cmp eax, 0x16aa90a1
je 0x1401ddc47
xor edx, edx
xor eax, eax
mov qword [rbp + 0x60], rax
mov r12, qword [rbp + 0x88]
mov rbx, qword [rbp - 0x58]
mov qword [rbp + 0x10], rdx
mov eax, dword [0x1415ce048]
xor edx, edx
div dword [0x1415ce04c]
mov ecx, eax
xor ecx, 0xaf80ca28
add ecx, eax
and eax, 0x507f35d7
sub ecx, eax
mov eax, ecx
xor eax, 0x9a10e060
xor ecx, 0x65c51f80
or eax, 0x42f0b9f
and eax, ecx
cmp eax, 0x6c674e73
ja 0x1401ddcc0
mov rax, qword [rbp + 0x60]
cmp rax, qword [rbp + 0x50]
je 0x1401de13e
mov rax, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x60]
lea rsi, [rax + rcx*2]
xor r13d, r13d
mov rax, rsi
nop word [rax + rax]
mov ecx, dword [0x1415ce050]
or ecx, dword [0x1415ce054]
or ecx, 0x47f54b7d
mov edx, ecx
xor edx, 0x10082000
and edx, ecx
and edx, 0x1adc2004
cmp edx, 0xf213925a
ja 0x1401ddd20
cmp word [rax], 0
je 0x1401dddad
mov ecx, dword [0x1415ce058]
mov edx, dword [0x1415ce05c]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add ecx, edx
add ecx, 0x8ed1e604
or ecx, 0x75246cdb
xor ecx, 0xb2414985
cmp ecx, 0xd6d412e2
ja 0x1401ddd50
add rax, 2
mov ecx, r13d
and ecx, 1
or r13, 1
add r13, rcx
cmp rax, qword [rbp + 0x90]
jne 0x1401ddd20
jmp 0x1401de13e
add qword [rbp + 0x60], r13
jb 0x1401dba84
mov eax, dword [0x1415ce0a0]
imul eax, dword [0x1415ce0a4]
add eax, 0x3247abbd
imul rcx, rax, 0x344f6901
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0xf0799744
ja 0x1401dddb7
mov ecx, 0xe992082d
mov eax, dword [0x1415ce0a8]
xor eax, dword [0x1415ce0ac]
xor eax, 0x810786
or eax, 0xbd7a3810
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xdb251ae2
je 0x1401ddde9
mov rax, qword [rbp + 0x60]
cmp rax, qword [rbp + 0x50]
ja 0x1401de1fa
mov eax, dword [0x1415ce0b0]
sub eax, dword [0x1415ce0b4]
add eax, 0x107a0ebb
xor eax, 0x502c129
add eax, 0x9478439a
cmp eax, 0xf174323a
ja 0x1401dde1c
lea rcx, [rsi + r13*2]
mov r8, rsi
nop word cs:[rax + rax]
mov eax, dword [0x1415ce0d0]
mov edx, dword [0x1415ce0d4]
mov r9d, edx
not r9d
and r9d, eax
xor edx, eax
add edx, eax
sub edx, r9d
add edx, 0xa34786d9
imul rax, rdx, 0x4feca15
shr rax, 0x3a
or eax, 0x78c81e94
cmp eax, 0x8e1346e4
ja 0x1401dde50
cmp r8, rcx
je 0x1401de13e
mov eax, dword [0x1415ce0d8]
xor edx, edx
div dword [0x1415ce0dc]
or eax, 0x5d037594
xor eax, 0x8a7d768
add eax, 0xd3aa9123
cmp eax, 0x1f8d5e3d
jb 0x1401dde92
lea rax, [r8 + 2]
nop word [rax + rax]
mov edx, dword [0x1415ce0e0]
sub edx, dword [0x1415ce0e4]
not edx
or edx, 0xc460604e
mov r9d, edx
not r9d
mov r10d, r9d
or r10d, 0x318c1321
mov r11d, r10d
and r11d, 0x30889811
and edx, 0xa134484
imul edx, r11d
and r10d, 0xb1707a0
or r9d, 0x3b9f57a5
imul r9d, r10d
add r9d, edx
cmp r9d, 0x1e8d0556
je 0x1401ddec0
movzx edx, word [r8]
mov r8d, dword [0x1415ce0e8]
or r8d, dword [0x1415ce0ec]
and r8d, 0x3ddc9643
add r8d, 0xfd22abd4
and r8d, 0xffdfffc7
xor r8d, 0xb6c587a9
cmp r8d, 0x94dd07ca
jb 0x1401ddf1a
mov r8, rax
cmp dx, 0x3d
jne 0x1401dde50
mov qword [rbp - 0x48], rdi
mov eax, dword [0x1415ce0f0]
and eax, dword [0x1415ce0f4]
xor eax, 0x96d95908
mov ecx, eax
and ecx, 0xcdaa9506
or eax, 0xcdaa9506
add eax, ecx
cmp eax, 0xf4961d67
jbe 0x1401ddf9b
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
mov r8, r13
call fcn.14014ae90
add rsp, 0x20
mov eax, dword [0x1415ce0f8]
sub eax, dword [0x1415ce0fc]
imul rax, rax, 0x4c8fa459
shr rax, 0x3e
imul edi, eax, 0xba052820
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
mov r8, r13
call fcn.14014ae90
add rsp, 0x20
cmp edi, 0x40ae1b7d
je 0x1401ddf9b
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx]
mov r8d, dword [0x1415ce100]
add r8d, dword [0x1415ce104]
mov edx, r8d
xor edx, 0xc01c5bb3
and edx, r8d
add edx, 0x78fa727
cmp edx, 0xcab12cc4
ja 0x1401ddfe0
mov r13, qword [rbp + 0x10]
cmp r13, rax
mov rdi, qword [rbp - 0x48]
mov esi, 0xb1991e11
jne 0x1401de068
sub rsp, 0x20
call fcn.140033df0
add rsp, 0x20
mov edx, 0xb79ed36f
mov eax, dword [0x1415ce108]
add eax, dword [0x1415ce10c]
mov ecx, eax
not ecx
and ecx, 0xd3a11d07
and eax, 0x2c5ee2f8
sub eax, ecx
imul rax, rdx
shr rax, 0x3f
or eax, 0xb9b047d4
cmp eax, 0xb05913dd
jb 0x1401de02c
mov rdi, qword [r12 + 0x50]
xor eax, eax
test al, al
jne 0x1401de064
mov eax, dword [0x1415ce110]
add eax, dword [0x1415ce114]
mov ecx, eax
xor ecx, 0x4100252
xor eax, 0xd20022a2
and eax, ecx
and eax, 0xd61123f2
cmp eax, 0x92bcfa4f
je 0x1401de119
mov eax, dword [0x1415ce118]
or eax, dword [0x1415ce11c]
mov ecx, eax
xor ecx, 0x2ebf5f72
and ecx, eax
mov eax, ecx
and eax, 0x527a19b6
add eax, eax
neg eax
add ecx, eax
add ecx, 0x527a19b6
imul rcx, rsi
shr rcx, 0x3e
mov rax, r13
shl rax, 5
mov edx, r13d
and edx, 1
mov r8, r13
xor r8, 1
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + rax + 0x10], xmm1
movups xmmword [rdi + rax], xmm0
lea rax, [r8 + rdx*2]
mov qword [r12 + 0x58], rax
cmp ecx, 0xb025d378
ja 0x1401de119
mov rcx, qword [rbp + 0x60]
inc rcx
mov rdx, rax
mov rax, rcx
mov qword [rbp + 0x60], rcx
cmp rcx, qword [rbp + 0x50]
jbe 0x1401ddcbc
jmp 0x1401de28c
mov rax, r13
shl rax, 5
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + rax + 0x10], xmm1
movups xmmword [rdi + rax], xmm0
lea rax, [r13 + 1]
mov qword [r12 + 0x58], rax
jmp 0x1401de093
mov eax, dword [0x1415ce07c]
add eax, dword [0x1415ce078]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x50fdc4e
and ecx, 0x1af023b1
imul ecx, edx
mov edx, eax
and edx, 0x1af023b1
or eax, 0x1af023b1
imul eax, edx
add eax, ecx
and eax, 0x1eb16035
imul rax, rax, 0x51bc85d
shr rax, 0x37
cmp eax, 0x24edbf7
je 0x1401de13e
xor eax, eax
movabs rsi, 0x8000000000000000
mov r13, qword [rbp + 0x78]
mov rbx, qword [rbp + 0x40]
test al, al
jne 0x1401de19c
cmp qword [rbp], 0
je 0x1401dd5b3
mov eax, dword [0x1415ce080]
mov ecx, dword [0x1415ce084]
add eax, ecx
add eax, 0x3b04161c
mov ecx, eax
not ecx
and ecx, 0x97edfe3e
mov edx, eax
and edx, 0x681201c1
imul edx, ecx
mov ecx, eax
and ecx, 0x97edfe3e
or eax, 0x97edfe3e
imul eax, ecx
add eax, edx
xor eax, 0x58a28e3f
cmp eax, 0xeab1eef2
jne 0x1401de2ca
jmp 0x1401de300
mov eax, dword [0x1415ce0b8]
mov ecx, dword [0x1415ce0bc]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0x135d1d52
cmp ecx, 0x7db5afba
jae 0x1401de21e
ud2
mov eax, dword [0x1415ce0c0]
mov ecx, dword [0x1415ce0c4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
xor eax, 0xd59a7dac
add eax, 0x4f0da759
not eax
or eax, 0x126a3074
ud2
mov eax, dword [0x1415ce060]
mov ecx, dword [0x1415ce064]
add eax, ecx
add eax, 0x6faf0fd0
mov ecx, eax
xor ecx, 0x290384cf
xor eax, 0x2786000
and eax, 0x27c7100
and ecx, 0xfd838eff
sub ecx, eax
cmp ecx, 0xfbd303d0
jbe 0x1401de3da
jmp 0x1401de3ff
mov eax, dword [0x1415ce088]
xor edx, edx
div dword [0x1415ce08c]
mov ecx, 0xbf007b1b
imul rcx, rax
shr rcx, 0x3b
xor ecx, 0x42831b89
add ecx, 0x6f7eb1f5
mov rsi, qword [0x1415d3918]
cmp ecx, 0x4d18afa9
jae 0x1401de309
mov rax, qword [0x1415d3918]
jmp 0x1401de2ca
mov eax, dword [0x1415ce090]
mov ecx, dword [0x1415ce094]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
not ecx
and ecx, 0x31c55b27
mov edx, eax
and edx, 0xce3aa4d8
imul edx, ecx
mov ecx, eax
and ecx, 0x31c55b27
or eax, 0x31c55b27
imul eax, ecx
add eax, edx
imul eax, eax, 0x3a694ed5
xor eax, 0xca0af684
cmp eax, 0x83622958
je 0x1401de3ae
mov edi, dword [0x1415ce098]
or edi, dword [0x1415ce09c]
add edi, 0xc6daeb37
mov eax, edi
not eax
and eax, 0xed899c4
mov ecx, edi
and ecx, 0xf127663b
imul ecx, eax
mov eax, edi
and eax, 0xed899c4
or edi, 0xed899c4
imul edi, eax
add edi, ecx
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xc9e9e493
jne 0x1401de3c5
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
jmp 0x1401de358
xor eax, eax
movabs rsi, 0x8000000000000000
test al, al
jne 0x1401de3d1
jmp 0x1401dd5b3
mov eax, dword [0x1415ce068]
imul eax, dword [0x1415ce06c]
add eax, 0xf22b7d3e
or eax, 0xd3c9b4aa
add eax, 0x50dca318
ud2
ud2
mov eax, dword [0x1415ce178]
add eax, dword [0x1415ce17c]
and eax, 0xc4999679
xor eax, 0x910a502f
movzx ecx, byte [0x1415d3950]
cmp eax, 0xab985520
jbe 0x1401de479
movzx eax, byte [0x1415d3950]
jmp 0x1401de44c
mov r12, qword [rbp + 8]
mov ecx, r12d
shr ecx, 1
lea rax, [rcx + 1]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x10], rcx
lea rdx, [rcx*2 + 2]
sub rsp, 0x20
xor edi, edi
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
mov rbx, rax
mov rsi, qword [rbp + 0x30]
nop
test dil, dil
jne 0x1401de4b0
test rbx, rbx
je 0x1401dba84
mov rdi, qword [rbp - 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce180]
add eax, dword [0x1415ce184]
mov ecx, eax
not ecx
or ecx, 0x3726fdaf
or eax, 0xbf3ed49f
and eax, ecx
and eax, 0xbf3efdbf
cmp eax, 0xfa2a66b0
je 0x1401de4d0
mov eax, dword [0x1415ce188]
mov ecx, dword [0x1415ce18c]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x37f062e6
mov r8d, edx
and r8d, 0x9a40efc4
and ecx, 0x400f1019
imul ecx, r8d
and edx, 0x65bf103b
or eax, 0x77ff72ff
imul eax, edx
add eax, ecx
add eax, 0xe858ce4
cmp eax, 0x52439289
jae 0x1401de572
mov qword [rsi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, qword [rbp + 0x78]
mov rdx, rdi
mov r8, rbx
mov r9, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov r13, qword [rbp + 0x78]
mov r15, r12
nop dword [rax]
mov r12d, dword [0x1415ce190]
mov eax, dword [0x1415ce194]
mov ecx, r12d
and ecx, eax
add ecx, ecx
add r12d, eax
sub r12d, ecx
mov eax, r12d
and eax, 0xd6be3aaf
or r12d, 0xd6be3aaf
add r12d, eax
xor r12d, 0xb2ba6153
mov qword [rsi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rsi
mov rcx, r13
mov rdx, rdi
mov r8, rbx
mov r9, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp r12d, 0xb8c83388
je 0x1401de580
mov qword [rbp + 0x80], rbx
test eax, eax
je 0x1401de803
mov eax, dword [0x1415ce198]
xor edx, edx
div dword [0x1415ce19c]
mov r12, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce1a0]
and eax, dword [0x1415ce1a4]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xfcdbffbf
mov r8d, edx
and r8d, 0xdb72edb9
and ecx, 0x40040
imul ecx, r8d
and edx, 0x248d1246
or eax, 0xfcdfffff
imul eax, edx
add eax, ecx
cmp eax, 0x2afcdb1c
jb 0x1401de610
mov rax, qword [rbp + 0x30]
mov rax, qword [rax]
mov r15, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x60]
nop dword [rax]
mov ecx, dword [0x1415ce1a8]
imul ecx, dword [0x1415ce1ac]
not ecx
mov edx, ecx
or edx, 0xb7b7afff
or ecx, 0xf7bfafff
sub ecx, edx
cmp ecx, 0x28301b33
ja 0x1401de670
nop word [rax + rax]
mov ecx, dword [0x1415ce1b0]
mov edx, dword [0x1415ce1b4]
mov r9d, ecx
and r9d, edx
not r9d
not ecx
not edx
or edx, ecx
and edx, r9d
xor edx, 0xce875fc9
add edx, 0x8c25334f
cmp edx, 0x1478a99
jb 0x1401de6a0
cmp rax, qword [rbp + 8]
jne 0x1401ded2e
nop dword [rax]
mov eax, dword [0x1415ce1d0]
sub eax, dword [0x1415ce1d4]
xor eax, 0x67a9b3b2
imul eax, eax, 0xe648ff6b
add eax, 0xc1aca39
cmp eax, 0x9d04cacd
jb 0x1401de6e0
mov eax, dword [0x1415ce1d8]
xor edx, edx
div dword [0x1415ce1dc]
or eax, 0x3536264d
add eax, 0x7cb6c514
mov ecx, eax
and ecx, 0x68c056f2
or eax, 0x68c056fa
add eax, ecx
cmp eax, 0x19470290
mov r9, qword [rbp + 0x10]
jae 0x1401de740
mov word [rbx + r9*2], 0
nop dword [rax]
mov eax, dword [0x1415ce1e0]
mov ecx, dword [0x1415ce1e4]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
or ecx, 0xde4d6087
add ecx, 0x6659b569
mov word [rbx + r9*2], 0
cmp ecx, 0x87edec41
ja 0x1401de740
lea rcx, [rbx + r8*2]
xor eax, eax
mov rdx, rbx
mov r13, qword [rbp + 0x78]
cmp word [rdx], 0
je 0x1401de888
nop dword [rax]
mov esi, dword [0x1415ce1e8]
mov r9d, dword [0x1415ce1ec]
mov r10d, r9d
not r10d
mov r11d, esi
and r11d, r10d
or r10d, esi
not r10d
imul r10d, r11d
mov r11d, esi
and r11d, r9d
or esi, r9d
imul esi, r11d
add esi, r10d
mov r9d, esi
and r9d, 0x3ba64a96
xor r9d, 0x10000004
xor esi, 0x2200800
or r9d, 0x87ec1b8a
or esi, 0xfc5bf57d
and esi, r9d
cmp esi, 0x9415a7a0
je 0x1401de790
add rdx, 2
inc rax
cmp rdx, rcx
jne 0x1401de782
jmp 0x1401de891
mov ecx, dword [0x1415ce1b8]
mov edx, dword [0x1415ce1bc]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xfd96d6e2
and ecx, 0x269291d
or ecx, r9d
or eax, r8d
and r8d, 0xfd96d6e2
and edx, 0x269291d
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
and ecx, 0x6d0d8744
mov edx, eax
and edx, 0x92f278bb
imul edx, ecx
mov ecx, eax
and ecx, 0x6d0d8744
or eax, 0x6d0d8744
imul eax, ecx
add eax, edx
xor eax, 0x221229a0
cmp eax, 0x6706022f
mov r12, qword [rbp + 0x88]
jne 0x1401dec5e
jmp 0x1401dec9e
xor ecx, ecx
test cl, cl
jne 0x1401de88a
mov r8, rax
sub rsp, 0x20
mov rdi, qword [rbp - 8]
mov rcx, rdi
mov rdx, rbx
call fcn.14021ac80
add rsp, 0x20
mov rsi, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
movzx ecx, byte [rbp + 0x58]
mov rdx, rsi
mov r9, qword [rbp + 0x50]
call fcn.1401e5fc0
add rsp, 0x20
cmp byte [rbp + 0x40], 0
je 0x1401de9ac
mov eax, dword [0x1415ce210]
add eax, dword [0x1415ce214]
imul rax, rax, 0x76be135b
shr rax, 0x3e
or eax, 0x38f58dba
cmp eax, 0xf37f85f8
mov r10, qword [rbp - 0x20]
mov r11, qword [rbp - 8]
jne 0x1401de90f
movups xmm0, xmmword [r11]
movups xmm1, xmmword [r11 + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmmword [r10], xmm0
movabs r9, 0x8000000000000000
mov eax, dword [0x1415ce218]
xor eax, dword [0x1415ce21c]
mov ecx, eax
and ecx, 0xb4bc0000
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x30a80000
and edx, 0xc75554ca
imul edx, r8d
and eax, 0x84140000
or ecx, 0xc75554ca
imul ecx, eax
add ecx, edx
movups xmm0, xmmword [r11]
movups xmm1, xmmword [r11 + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmmword [r10], xmm0
cmp ecx, 0x8fcec5bd
je 0x1401de919
mov eax, dword [0x1415ce220]
xor edx, edx
div dword [0x1415ce224]
add eax, 0x4f2f0207
or eax, 0x612ee98e
cmp eax, 0xcedcae8
jb 0x1401de96f
mov rax, qword [rbp + 0x90]
mov rax, qword [rax]
test rax, rax
js 0x1401dea86
jne 0x1401dea8f
jmp 0x1401debae
mov rdx, qword [rbp - 8]
mov eax, dword [0x1415ce248]
or eax, dword [0x1415ce24c]
imul eax, eax, 0xf0b10d7f
mov ecx, eax
xor ecx, 0x36a1b651
add ecx, eax
and eax, 0xc95e49ae
sub ecx, eax
cmp ecx, 0xafe57b45
je 0x1401de9b0
mov rax, qword [rdx]
mov ecx, dword [0x1415ce250]
mov edx, dword [0x1415ce254]
mov r8d, ecx
not r8d
or ecx, edx
not edx
and edx, r8d
not edx
and edx, ecx
add edx, 0xa492b5fa
or edx, 0xe2ff17bb
and edx, 0xf3ffbfbb
cmp edx, 0x46a7c1d1
jb 0x1401de9de
test rax, rax
je 0x1401debce
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415ce258]
or eax, dword [0x1415ce25c]
mov ecx, eax
xor ecx, 0x4881e731
xor eax, 0xb4d27de7
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0xd001799b
mov edx, eax
and edx, 0x2ffe8664
imul edx, ecx
mov ecx, eax
and ecx, 0xd001799b
or eax, 0xd001799b
imul eax, ecx
add eax, edx
cmp eax, 0x7a50723a
jb 0x1401dea38
jmp 0x1401debce
cmp rax, r9
je 0x1401debae
mov eax, dword [0x1415ce228]
mov ecx, dword [0x1415ce22c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x7489108b
and ecx, 0xf48b118b
and eax, 0x1040060
or eax, ecx
cmp eax, 0x29919fb2
jb 0x1401dea8f
mov eax, dword [0x1415ce230]
mov ecx, dword [0x1415ce234]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
not ecx
or ecx, 0x1c84a19
add eax, ecx
inc eax
mov ecx, eax
xor ecx, 0x79731b2e
xor eax, 0x8a0c0
or eax, 0xf7c55733
add eax, ecx
cmp eax, 0x23bf2319
je 0x1401dead9
mov rsi, qword [r12 + 0xa0]
mov eax, dword [0x1415ce238]
mov ecx, dword [0x1415ce23c]
add eax, ecx
add eax, 0xa99167c
mov ecx, eax
and ecx, 0xfff7fca
add ecx, ecx
sub eax, ecx
cmp eax, 0x44ab5295
jne 0x1401deb5e
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x1415ce240]
mov ecx, dword [0x1415ce244]
not eax
not ecx
or ecx, eax
not ecx
imul rbx, rcx, 0x249cdf65
shr rbx, 0x3c
add ebx, 0x446e07e2
and ebx, 0x6804e2
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rdi
add rsp, 0x20
cmp ebx, 0xaaf1e79
ja 0x1401deb65
mov rax, qword [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rbp + 0x90]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov rbx, qword [rbp + 0x80]
mov eax, dword [0x1415ce260]
mov ecx, dword [0x1415ce264]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
or eax, 0xe27d3c69
add eax, 0x482ccb93
cmp eax, 0xddad696b
jbe 0x1401debfb
mov rax, qword [0x1415d3918]
movzx esi, byte [rbp + 0x58]
nop
mov eax, dword [0x1415ce268]
xor eax, dword [0x1415ce26c]
mov ecx, eax
xor ecx, 0xed94f3ed
or eax, 0x126b0c12
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0x3b6d86c
add eax, ecx
inc eax
mov ecx, eax
xor ecx, 0x4344baa9
or eax, 0xbcbb4556
and eax, ecx
mov rcx, qword [0x1415d3918]
cmp eax, 0x26f51dae
ja 0x1401dec00
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401def00
mov eax, dword [0x1415ce1c0]
xor edx, edx
div dword [0x1415ce1c4]
mov esi, eax
xor esi, 0xff51a686
mov eax, esi
and eax, 0xb96bc47
or esi, 0xb96bc47
add esi, eax
or esi, 0xe04d61f3
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp esi, 0x1ce6c58d
jae 0x1401decad
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x1401dec5e
mov r15, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x80]
nop dword [rax + rax]
mov eax, dword [0x1415ce1c8]
mov ecx, dword [0x1415ce1cc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x58853f45
and ecx, 0xa77ac0ba
imul ecx, edx
mov edx, eax
and edx, 0xa77ac0ba
or eax, 0xa77ac0ba
imul eax, edx
add eax, ecx
imul eax, eax, 0xc2740878
mov ecx, eax
xor ecx, 0x88977d22
or eax, 0x776882d0
and eax, ecx
cmp eax, 0x5a8cb4cb
jae 0x1401decc0
xor eax, eax
test al, al
jne 0x1401ded30
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
mov rax, qword [rbp + 0x90]
mov rax, qword [rax]
test rax, rax
mov r13, qword [rbp + 0x78]
js 0x1401ded67
jne 0x1401ded7a
jmp 0x1401deebd
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1401deebd
mov rsi, qword [r12 + 0xa0]
mov eax, dword [0x1415ce1f0]
mov ecx, dword [0x1415ce1f4]
add eax, ecx
add eax, 0xfc7b5ca3
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x313ccbc0
and ecx, 0x4ec3343f
imul ecx, edx
mov edx, eax
and edx, 0x4ec3343f
or eax, 0x4ec3343f
imul eax, edx
add eax, ecx
not eax
and eax, 0x546eb103
cmp eax, 0x4805ad7d
jb 0x1401dee0d
mov eax, dword [0x1415ce1f8]
xor edx, edx
div dword [0x1415ce1fc]
mov ecx, eax
not ecx
and ecx, 0x1d97622
mov edx, eax
and edx, 0xfe2689dd
imul edx, ecx
mov ecx, eax
and ecx, 0x1d97622
or eax, 0x1d97622
imul eax, ecx
add eax, edx
mov rbx, qword [0x1415d3918]
cmp eax, 0x4a42753d
jne 0x1401dee16
mov rax, qword [0x1415d3918]
jmp 0x1401dedca
xor eax, eax
test al, al
jne 0x1401deea3
mov eax, dword [0x1415ce200]
mov ecx, dword [0x1415ce204]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0xc069ceff
mov edx, eax
and edx, 0x3f963100
imul edx, ecx
mov ecx, eax
and ecx, 0xc069ceff
or eax, 0xc069ceff
imul eax, ecx
add eax, edx
add eax, 0xd570dcd2
shr eax, 2
imul rdi, rax, 0x41534fb1
shr rdi, 0x36
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x51138802
jbe 0x1401deebd
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
jmp 0x1401dee20
movabs rax, 0x8000000000000000
mov rcx, qword [rbp + 0x90]
mov qword [rcx], rax
movzx esi, byte [rbp + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce20c]
add eax, dword [0x1415ce208]
or eax, 0x95ae391f
add eax, 0x3af13ed5
cmp eax, 0x1b734752
jbe 0x1401deee0
nop dword [rax]
mov eax, dword [0x1415ce270]
sub eax, dword [0x1415ce274]
and eax, 0xfbe8714
add eax, 0x119fa9f0
and eax, 0x28d23334
cmp eax, 0x4286b6d6
ja 0x1401def00
mov rbx, qword [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce278]
mov ecx, dword [0x1415ce27c]
add eax, ecx
add eax, 0xedf4810a
xor eax, 0x3dead197
imul rax, rax, 0x68a6ad11
shr rax, 0x3b
cmp eax, 0xd279ffec
ja 0x1401def30
nop word [rax + rax]
mov eax, dword [0x1415ce280]
add eax, dword [str.___v]
mov ecx, eax
not ecx
and ecx, 0xb9c787d6
mov edx, eax
and edx, 0x46387829
imul edx, ecx
mov ecx, eax
and ecx, 0xb9c787d6
or eax, 0xb9c787d6
imul eax, ecx
add eax, edx
xor eax, 0xa78720af
cmp eax, 0x72b8f4c3
je 0x1401def60
jmp 0x1401db1e0
mov eax, dword [0x1415ce2d0]
mov ecx, dword [0x1415ce2d4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
lea esi, [rax + rdx]
add esi, 0xfc22d7fc
mov eax, esi
and eax, 0x23d744a
xor eax, 0x2342400
and esi, 0x2342400
or esi, eax
mov edx, dword [rbx + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r13
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp esi, 0xb1e6f07
jbe 0x1401df050
mov edx, dword [rbx + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r13
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
jmp 0x1401defa4
mov ecx, dword [0x1415ce2d8]
or ecx, dword [0x1415ce2dc]
or ecx, 0xeb67991b
add ecx, 0x6fc404db
not ecx
and ecx, 0x901778a1
cmp ecx, 0xf6d75ec7
je 0x1401df050
test eax, eax
je 0x1401df16e
mov eax, dword [0x1415ce2f0]
mov ecx, dword [0x1415ce2f4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x7b83d138
and eax, 0x47c2ec7
add eax, eax
sub eax, ecx
cmp eax, 0x206e1aa9
je 0x1401df080
movzx eax, word [rdi + 0x24]
mov qword [rbp + 0x90], rax
mov eax, dword [rdi + 0x28]
mov qword [rbp + 0x80], rax
lea rcx, [r12 + 0x30]
nop dword [rax]
mov eax, dword [0x1415ce2f8]
imul eax, dword [0x1415ce2fc]
imul eax, eax, 0x75d487aa
or eax, 0xfcd8c290
cmp eax, 0x340643e2
je 0x1401df0e0
mov eax, dword [rdi + 0x48]
mov qword [rbp + 0x48], rax
test r15b, r15b
jle 0x1401df1b5
mov qword [rbp + 0x30], rcx
movzx esi, word [rdi + 0x40]
mov ebx, dword [rdi + 0x44]
cmp r15b, 2
jl 0x1401df132
jne 0x1401df1bb
cmp qword [r12 + 0x40], 0
jne 0x1401dfe97
mov eax, dword [0x1415ce308]
sub eax, dword [0x1415ce30c]
imul rcx, rax, 0x4d3fe025
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
add eax, 0x1baa4cca
mov ecx, eax
xor ecx, 0x3a93ecdf
and ecx, eax
cmp ecx, 0xd5b97aa5
jbe 0x1401df1e6
jmp 0x1401df22c
mov eax, dword [0x1415ce820]
mov ecx, dword [0x1415ce824]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0xeac9c045
mov eax, ecx
not eax
or eax, 0xc37bc17e
xor eax, 0xcfeb56e4
and ecx, 0xc801680
add ecx, ecx
sub ecx, eax
cmp ecx, 0x63b105b1
jne 0x1401e2425
jmp 0x1401e2484
je 0x1401dfe97
mov eax, dword [0x1415ce300]
mov ecx, dword [0x1415ce304]
not ecx
add eax, ecx
add eax, 0x1bed34d5
and eax, 0x7373c3e4
add eax, 0xdd56f709
cmp eax, 0xe3d21d5f
jb 0x1401df1bb
jmp 0x1401dba84
mov eax, dword [0x1415ce310]
sub eax, dword [0x1415ce314]
imul rax, rax, 0x709e38e5
shr rax, 0x3c
mov ecx, eax
or ecx, 0x248222a
and ecx, 0x248222e
imul ecx, ecx, 0x14828550
or eax, 0x3fdba7fb
imul edx, eax, 0x29110081
add edx, ecx
mov eax, dword [0x1415d3940]
cmp edx, 0x886c2fee
jbe 0x1401df234
mov eax, dword [0x1415d3940]
jmp 0x1401df1e6
cmp eax, 4
je 0x1401df294
mov eax, dword [0x1415ce318]
imul eax, dword [0x1415ce31c]
or eax, 0x4309a102
and eax, 0x5b0da132
cmp eax, 0x4480bf17
jb 0x1401df285
mov edi, dword [0x1415ce320]
imul edi, dword [0x1415ce324]
add edi, 0x9b21554e
and edi, 0xc8757566
sub rsp, 0x20
call fcn.1402537c0
add rsp, 0x20
cmp edi, 0x95cf1607
jbe 0x1401df294
sub rsp, 0x20
call fcn.1402537c0
add rsp, 0x20
jmp 0x1401df257
movzx eax, byte [0x1415d3944]
nop dword [rax + rax]
mov ecx, dword [0x1415ce328]
mov edx, dword [0x1415ce32c]
not ecx
not edx
and edx, ecx
and edx, 0xc2385189
xor edx, 0x1ca2d379
cmp edx, 0x691dcf12
ja 0x1401df2a0
sub rsp, 0x20
test al, al
je 0x1401df51c
mov rcx, qword [rbp - 0x38]
mov rdx, r13
call fcn.14021c850
add rsp, 0x20
mov eax, dword [0x1415ce408]
xor edx, edx
div dword [0x1415ce40c]
mov eax, dword [0x1415ce410]
xor edx, edx
div dword [0x1415ce414]
mov ecx, eax
xor ecx, 0xdafa231
and eax, 0x2505dce
add eax, eax
sub eax, ecx
add eax, 0x8f15a6
not eax
and eax, 0x1ee756f6
cmp eax, 0xe1ff8484
je 0x1401df2f0
mov rdi, qword [r12 + 0x38]
mov rax, qword [r12 + 0x40]
mov qword [rbp + 0x68], rax
test rax, rax
je 0x1401df4ed
neg qword [rbp + 0x68]
lea r13, [rdi + 8]
xor r12d, r12d
xor esi, esi
nop word cs:[rax + rax]
mov eax, dword [0x1415ce418]
sub eax, dword [0x1415ce41c]
imul eax, eax, 0xba4e5ca9
add eax, 0x3f8c5df5
not eax
or eax, 0xf50be889
add eax, 0xa2940c2d
jae 0x1401df350
cmp qword [r13 - 8], 0
je 0x1401df490
mov eax, dword [0x1415ce420]
xor edx, edx
div dword [0x1415ce424]
mov eax, dword [str.Ye]
mov ecx, dword [0x1415ce42c]
not ecx
add eax, ecx
add eax, 0x3486c958
and eax, 0xd2979eae
mov ecx, 0xb7735031
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xb1843d2f
ja 0x1401df38e
mov rbx, qword [r13]
mov eax, dword [0x1415ce430]
mov ecx, dword [0x1415ce434]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
xor ecx, 0xfe058104
and ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0xa49ca6b2
and eax, 0x5b63594d
imul eax, edx
mov edx, ecx
and edx, 0x5b63594d
or ecx, 0x5b63594d
imul ecx, edx
add ecx, eax
and ecx, 0xb91ef939
cmp ecx, 0x9b04c44a
ja 0x1401df468
nop word cs:[rax + rax]
mov eax, dword [0x1415ce438]
xor edx, edx
div dword [0x1415ce43c]
mov r15d, eax
xor r15d, 0x35bbf2bc
add r15d, 0x538454cd
and r15d, 0xdfec024f
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
cmp r15d, 0xfdcafe04
jbe 0x1401df490
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401df420
inc rsi
mov eax, dword [0x1415ce440]
add eax, dword [0x1415ce444]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x338d92af
and ecx, 0xcc726d50
imul ecx, edx
mov edx, eax
and edx, 0xcc726d50
or eax, 0xcc726d50
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x124050
xor eax, 0x124052
or eax, ecx
cmp eax, 0xda070b6f
je 0x1401df493
dec r12
add r13, 0x20
cmp qword [rbp + 0x68], r12
jne 0x1401df350
mov rdx, qword [rbp + 0x30]
cmp qword [rdx], 0
je 0x1401dfe7a
mov eax, dword [0x1415ce448]
sub eax, dword [0x1415ce44c]
or eax, 0x43c956a5
cmp eax, 0x16e03f44
jne 0x1401dfd64
jmp 0x1401dfd98
mov rdi, qword [rbp - 0x28]
mov rcx, rdi
mov rdx, r13
mov r8, rbx
mov r9, rsi
call fcn.14021c7f0
add rsp, 0x20
mov rdi, qword [rdi]
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x1401df610
mov eax, dword [0x1415ce368]
mov ecx, dword [0x1415ce36c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
xor ecx, 0x68f41b3b
or eax, 0x970be4c4
and eax, ecx
add eax, 0x3d22e432
cmp eax, 0x3693c1de
mov r8, qword [rbp - 0x18]
jae 0x1401df590
mov qword [r8], 0
mov qword [r8 + 8], 8
nop
mov eax, dword [0x1415ce370]
mov ecx, dword [0x1415ce374]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0x613eeb21
imul rax, rcx, 0x4e59b7fd
shr rax, 0x3e
add eax, 0x1ad9ae7f
mov qword [r8], 0
mov qword [r8 + 8], 8
cmp eax, 0x43aa047b
ja 0x1401df590
mov eax, dword [0x1415ce378]
xor edx, edx
div dword [0x1415ce37c]
or eax, 0xa2c765d9
imul eax, eax, 0xee2f00fd
add eax, 0xf9fffee0
cmp eax, 0x3f837f34
jae 0x1401df82b
jmp 0x1401df839
mov eax, dword [0x1415ce330]
xor eax, dword [0x1415ce334]
imul eax, eax, 0x57d5081a
and eax, 0x22370c4a
cmp eax, 0xe8c16a74
je 0x1401df610
mov rax, qword [rbp - 0x28]
mov rsi, qword [rax + 8]
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, rsi
call fcn.14021c810
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415ce338]
and eax, dword [0x1415ce33c]
imul rax, rax, 0x23ae7939
shr rax, 0x3c
or eax, 0xd683bc50
imul eax, eax, 0x994ec998
cmp eax, 0x75185c85
jb 0x1401df650
test rdi, rdi
je 0x1401df880
mov eax, dword [0x1415ce340]
mov ecx, dword [0x1415ce344]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
imul rax, rax, 0x4329ee03
shr rax, 0x3d
imul eax, eax, 0xc3ce0166
cmp eax, 0x61a8e780
je 0x1401df6d8
mov eax, dword [0x1415ce348]
add eax, dword [0x1415ce34c]
imul rax, rax, 0x5b98ae99
shr rax, 0x3e
or eax, 0xeaa4c44e
mov rbx, qword [0x1415d3918]
cmp eax, 0xf2812fd1
jbe 0x1401df6e1
mov rax, qword [0x1415d3918]
jmp 0x1401df6ae
mov eax, dword [0x1415ce350]
mov ecx, dword [0x1415ce354]
xor ecx, eax
not ecx
and ecx, eax
add ecx, 0x8b036b5a
mov eax, ecx
not eax
or eax, 0xb6cd965e
or ecx, 0xd4329436
and ecx, eax
and ecx, 0xf6ff967e
cmp ecx, 0xd9b84a61
ja 0x1401df782
mov eax, dword [0x1415ce358]
sub eax, dword [0x1415ce35c]
mov ecx, eax
and ecx, 0x66891c72
add ecx, ecx
neg ecx
lea edi, [rax + rcx]
add edi, 0x66891c72
mov eax, edi
or eax, 0x82f80dc6
mov ecx, edi
not ecx
and ecx, 0x2406d009
mov edx, eax
and edx, 0xdb1923f6
imul edx, ecx
and eax, 0x24e6dc09
or edi, 0xa6feddcf
imul edi, eax
add edi, edx
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
cmp edi, 0xe71819d4
jae 0x1401df79d
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401df718
mov eax, dword [0x1415ce360]
mov ecx, dword [0x1415ce364]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0x6679dda2
mov ecx, eax
xor ecx, 0x31432dd5
and ecx, eax
mov eax, ecx
or eax, 0x782d5a6e
not ecx
or ecx, 0x87d2a591
and ecx, eax
cmp ecx, 0xa768acc0
ja 0x1401df79d
jmp 0x1401df880
mov eax, dword [0x1415ce2ec]
add eax, dword [0x1415ce2e8]
or eax, 0x5c0fb848
shr eax, 2
imul rsi, rax, 0x1165c50d
shr rsi, 0x36
add esi, 0xd27d53bd
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0xf76c9de7
jb 0x1401e24a0
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x1401df7de
mov qword [r8 + 0x10], 0
xor eax, eax
test al, al
je 0x1401df850
mov qword [r8 + 0x10], 0
jmp 0x1401df82b
mov eax, dword [0x1415ce380]
sub eax, dword [0x1415ce384]
mov ecx, eax
and ecx, 0x523be56a
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x23c4aeb2
or eax, 0x3a90a58b
cmp eax, 0x6ba90b5f
je 0x1401df850
nop dword [rax + rax]
mov eax, dword [0x1415ce388]
add eax, dword [0x1415ce38c]
mov ecx, eax
xor ecx, 0x92bcbf74
xor eax, 0x95bfc673
add eax, ecx
and ecx, 0xf8fc86f8
sub eax, ecx
add eax, 0xc483e2a7
cmp eax, 0xc979096
jb 0x1401df880
nop
mov eax, dword [0x1415ce390]
xor edx, edx
div dword [0x1415ce394]
mov ecx, eax
xor ecx, 0x2507436f
and eax, 0x5af8bc90
add eax, eax
sub eax, ecx
add eax, 0xd445cfd3
and eax, 0xa60d23ed
cmp eax, 0xae07c11a
ja 0x1401df8b0
mov rsi, qword [r12 + 0x38]
mov rdi, qword [r12 + 0x40]
test rdi, rdi
je 0x1401dfb1b
xor r13d, r13d
mov r9d, 0xa7135beb
nop dword [rax]
mov eax, dword [0x1415ce398]
or eax, dword [0x1415ce39c]
mov ecx, eax
or ecx, 0xa00704a2
and ecx, 0xe347ccab
or eax, 0xfb77feab
add eax, ecx
imul eax, eax, 0x4c283eb7
cmp eax, 0x6dbea519
je 0x1401df900
mov rcx, r13
shl rcx, 5
cmp qword [rsi + rcx], 0
je 0x1401dfabc
add rcx, rsi
mov eax, dword [0x1415ce3a0]
add eax, dword [0x1415ce3a4]
or eax, 0x39115e1a
add eax, 0xa3408a5e
and eax, 0xf406423c
cmp eax, 0x5a74ff70
je 0x1401df9a3
mov eax, dword [0x1415ce3a8]
xor edx, edx
div dword [0x1415ce3ac]
mov edx, eax
not edx
and edx, 0x3cd49853
and eax, 0xc32b67ac
sub eax, edx
or eax, 0x1fc3a5eb
imul rax, r9
shr rax, 0x3d
mov rbx, qword [rcx + 8]
mov r15, qword [0x1415d3918]
cmp eax, 0xfce4c1cc
jne 0x1401df9ac
mov rax, qword [0x1415d3918]
jmp 0x1401df965
mov eax, dword [0x1415ce3b0]
xor edx, edx
div dword [0x1415ce3b4]
mov ecx, eax
and ecx, 0x1cf01ac7
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xdcf01ac7
or eax, 0xd0b54245
cmp eax, 0x93de0f35
je 0x1401dfa53
mov eax, dword [0x1415ce3b8]
mov ecx, dword [0x1415ce3bc]
mov r12d, eax
not r12d
mov edx, ecx
not edx
mov r8d, r12d
and r8d, 0x18208080
and eax, 0x400c6610
or eax, r8d
or r12d, edx
and edx, 0x18208080
and ecx, 0x400c6610
or ecx, edx
xor ecx, eax
not r12d
or r12d, ecx
or r12d, 0xa7d3196f
mov eax, 0xa89b5ab5
imul r12, rax
shr r12, 0x3f
or r12d, 0x2fea9c38
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
cmp r12d, 0x89212b2d
jbe 0x1401dfa6d
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
jmp 0x1401df9d9
mov r12, qword [rbp + 0x88]
mov r9d, 0xa7135beb
nop word [rax + rax]
mov eax, dword [0x1415ce3c0]
mov ecx, dword [0x1415ce3c4]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not eax
or eax, ecx
not eax
imul eax, eax, 0xad865228
mov ecx, eax
not ecx
or ecx, 0x23eda95f
add eax, ecx
inc eax
or eax, 0x2943a463
cmp eax, 0x82e5ec9d
ja 0x1401dfa80
inc r13
nop
mov eax, dword [0x1415ce3cc]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415ce3c8]
xor ecx, eax
mov eax, ecx
or eax, 0x804b38dc
mov edx, ecx
not edx
and edx, 0x1f244700
mov r8d, eax
and r8d, 0xe09bb8b3
imul r8d, edx
and eax, 0x1f64474c
or ecx, 0x9f6f7fdc
imul ecx, eax
add ecx, r8d
or ecx, 0x262c7da6
cmp ecx, 0x32607bc6
jb 0x1401dfac0
cmp r13, rdi
jne 0x1401df900
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce3d0]
xor edx, edx
div dword [0x1415ce3d4]
imul eax, eax, 0xb2a6a26d
imul rax, rax, 0x51908649
shr rax, 0x32
or eax, 0x449c41a7
cmp eax, 0xbed01dba
ja 0x1401dfb30
test rcx, rcx
mov r13, qword [rbp + 0x78]
je 0x1401dfc35
mov rbx, qword [0x1415d3918]
mov eax, dword [0x1415ce3d8]
or eax, dword [0x1415ce3dc]
mov ecx, eax
xor ecx, 0x5aa0b
xor eax, 0x632001f4
and eax, 0xf7a845f4
and ecx, 0x857ba0b
sub ecx, eax
mov eax, ecx
not eax
and eax, 0x608e16bd
and ecx, 0x9f71e942
sub ecx, eax
cmp ecx, 0xb4ef5817
jbe 0x1401dfbc4
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x1415ce3e0]
mov edi, dword [0x1415ce3e4]
mov ecx, eax
not ecx
and ecx, edi
not edi
and edi, eax
sub edi, ecx
add edi, 0xe7580e4b
mov eax, edi
or eax, 0xd10df1da
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd0c5ee33
and ecx, 0x2f3a11cc
imul ecx, edx
and eax, 0x2f3a11cc
or edi, 0xff3ff1de
imul edi, eax
add edi, ecx
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
cmp edi, 0xc5edf641
ja 0x1401dfbd0
mov eax, dword [0x1415ce3e8]
xor edx, edx
div dword [0x1415ce3ec]
mov ecx, eax
not ecx
or eax, 0x18d7b18c
and ecx, 0x86284c41
mov edx, eax
and edx, 0x611192b2
or edx, ecx
xor edx, 0x662c0021
and eax, 0xf8c26d6c
or eax, edx
cmp eax, 0x6e3d3645
mov rdx, qword [rbp - 0x18]
mov r8, qword [rbp + 0x30]
je 0x1401dfcb1
mov eax, dword [0x1415ce3f0]
and eax, dword [0x1415ce3f4]
mov ecx, eax
not ecx
or ecx, 0x22ab5f3f
add ecx, eax
imul eax, ecx, 0x86552dc1
add eax, 0xe7150bf3
mov rcx, qword [rdx + 0x10]
mov qword [r8 + 0x10], rcx
movups xmm0, xmmword [rdx]
movups xmmword [r8], xmm0
cmp eax, 0x52ec2ed7
jbe 0x1401dfcd0
mov rax, qword [rdx + 0x10]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [r8], xmm0
jmp 0x1401dfc78
mov eax, dword [0x1415ce3f8]
mov ecx, dword [0x1415ce3fc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0x7b03262e
imul rax, rax, 0x272984ff
shr rax, 0x3c
cmp eax, 0x604e4f28
ja 0x1401dfcd0
nop word cs:[rax + rax]
mov eax, dword [0x1415ce400]
xor edx, edx
div dword [0x1415ce404]
mov ecx, eax
xor ecx, 0x142e8cad
xor eax, 0x4b811052
or eax, 0xa45e6380
add eax, ecx
inc eax
imul rcx, rax, 0x934b7ab
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x3577a8bb
ja 0x1401dfd20
jmp 0x1401dfe97
mov eax, dword [0x1415ce450]
sub eax, dword [0x1415ce454]
or eax, 0x433d6a64
mov ecx, eax
not ecx
or ecx, 0x3bd2a70c
add eax, ecx
inc eax
not eax
or eax, 0x59c6cd7e
mov rbx, qword [0x1415d3918]
cmp eax, 0x10447e44
jne 0x1401dfda1
mov rax, qword [0x1415d3918]
jmp 0x1401dfd64
mov eax, dword [0x1415ce458]
and eax, dword [0x1415ce45c]
or eax, 0xe10ce1c5
cmp eax, 0x5361c936
je 0x1401dfe3d
mov eax, dword [0x1415ce460]
mov ecx, dword [0x1415ce464]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3b588ae0
and ecx, 0x4a7751f
imul ecx, edx
mov edx, eax
and edx, 0x4a7751f
or eax, 0x4a7751f
imul eax, edx
lea esi, [rax + rcx]
add esi, 0xb207b067
not esi
or esi, 0xca42f050
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xe9ed5217
jne 0x1401dfe57
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call fcn.140219910
add rsp, 0x20
jmp 0x1401dfdbd
mov rdx, qword [rbp + 0x30]
nop dword [rax + rax]
mov eax, dword [0x1415ce468]
mov ecx, dword [0x1415ce46c]
add eax, ecx
add eax, 0x12bb77f0
cmp eax, 0xb530dcf7
jb 0x1401dfe60
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov r12, qword [rbp + 0x88]
mov r13, qword [rbp + 0x78]
lea rbx, [r12 + 0x48]
nop dword [rax]
mov eax, dword [0x1415ce470]
xor edx, edx
div dword [0x1415ce474]
xor eax, 0x1a6241f9
imul eax, eax, 0xe068a731
imul rax, rax, 0x5490ad3f
shr rax, 0x3e
cmp eax, 0xec364e82
ja 0x1401dfea0
movzx eax, byte [rbp + 0x70]
test al, al
movabs rsi, 0x8000000000000000
mov rdi, qword [rbp - 0x68]
jle 0x1401e0189
cmp al, 2
jl 0x1401dff79
jne 0x1401e018f
nop word cs:[rax + rax]
mov eax, dword [0x1415ce484]
add eax, dword [0x1415ce480]
mov ecx, eax
not ecx
and ecx, 0x1f75669b
and eax, 0xe08a9964
sub eax, ecx
add eax, 0x9277c402
mov ecx, eax
and ecx, 0x7cf49f68
add ecx, ecx
sub eax, ecx
cmp eax, 0x11008768
je 0x1401dff00
mov rax, qword [r12 + 0x58]
mov ecx, 0xfc3b8fab
nop
mov edx, dword [0x1415ce488]
sub edx, dword [0x1415ce48c]
imul rdx, rcx
shr rdx, 0x3d
add edx, 0x3a32ec44
mov r8d, edx
xor r8d, 0x3820600f
and r8d, edx
cmp r8d, 0x9c5ae00d
je 0x1401dff40
test rax, rax
jne 0x1401e1620
mov ecx, 0xee416597
nop
mov eax, dword [0x1415ce490]
xor edx, edx
div dword [0x1415ce494]
mov edx, eax
and edx, 0x4b5eda60
add edx, edx
neg edx
add eax, edx
add eax, 0xcb5eda60
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xbf928c2
je 0x1401dff80
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r13
mov r15, qword [rbp + 0x48]
mov rdx, r15
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
test rax, rax
mov qword [rbp + 0x18], rbx
je 0x1401e0150
mov rax, r15
not rax
add rax, qword [rdi]
mov rcx, qword [rdi + 0x18]
mov rdx, rsi
lea rsi, [rcx + rax]
inc rsi
lea rax, [rdx - 3]
cmp rsi, rax
ja 0x1401e0333
mov rbx, rsi
shr rbx, 1
movabs rax, 0x311365f3179185e7
mov rcx, rbx
sub rcx, rax
add rax, rcx
inc rax
mov qword [rbp + 0x70], rax
lea rdx, [rax + rax]
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
mov qword [rbp + 0x68], rax
test rax, rax
je 0x1401e02fa
mov eax, dword [0x1415ce4b8]
or eax, dword [0x1415ce4bc]
imul rax, rax, 0x3e0860a7
shr rax, 0x3d
mov ecx, eax
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xd5ee0c19
or eax, 0x6686a909
cmp eax, 0x20fbc857
jne 0x1401e0080
mov qword [r14], 0
mov eax, dword [0x1415ce4c0]
mov ecx, dword [0x1415ce4c4]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov qword [r14], 0
cmp ecx, 0x425fb4dc
je 0x1401e0080
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov rcx, r13
mov rdx, r15
mov r15, qword [rbp + 0x68]
mov r8, r15
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1401e00d0
test eax, eax
je 0x1401e01bf
nop dword [rax]
mov eax, dword [0x1415ce4c8]
mov ecx, dword [0x1415ce4cc]
not ecx
add eax, ecx
add eax, 0xda26465c
not eax
or eax, 0x6fffeedb
cmp eax, 0xb0469769
jb 0x1401e00e0
cmp qword [r14], rsi
jne 0x1401e025a
mov eax, dword [0x1415ce508]
and eax, dword [0x1415ce50c]
add eax, 0xd415910
xor eax, 0xa7230beb
add eax, 0x57cb08fe
cmp eax, 0x6b94060e
movabs r8, 0x8000000000000000
jae 0x1401e0382
jmp 0x1401e03c1
mov eax, dword [0x1415ce498]
mov ecx, dword [0x1415ce49c]
add eax, ecx
add eax, 0x1cd72098
and eax, 0xf78ebee7
add eax, 0xda5b08c8
cmp eax, 0xf2e7a3d3
ja 0x1401e0150
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401e0180
jmp 0x1401e0f90
je 0x1401e1620
mov eax, dword [0x1415ce478]
mov ecx, dword [0x1415ce47c]
add eax, ecx
add eax, 0x13d369d9
imul rax, rax, 0x58def4a1
shr rax, 0x3e
imul eax, eax, 0xa4d4c66a
cmp eax, 0x8f60f659
ja 0x1401e018f
jmp 0x1401dba84
mov eax, dword [0x1415ce4d0]
and eax, dword [0x1415ce4d4]
xor eax, 0x9bb3b48a
imul rcx, rax, 0x17999d15
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0xe05d3669
cmp eax, 0x19e69733
jae 0x1401e01fd
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
mov esi, 0x806586a5
nop word cs:[rax + rax]
mov edi, dword [0x1415ce4d8]
add edi, dword [0x1415ce4dc]
imul rdi, rsi
shr rdi, 0x3f
or edi, 0x495f325a
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp edi, 0xd46bde21
ja 0x1401e0210
nop
mov eax, dword [0x1415ce4e0]
xor edx, edx
div dword [0x1415ce4e4]
and eax, 0xb0dab907
cmp eax, 0x851d2003
je 0x1401e0240
mov eax, dword [0x1415ce4e8]
and eax, dword [0x1415ce4ec]
imul eax, eax, 0x3d7b26fe
add eax, 0x18a6854a
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xcdfab1c6
and ecx, 0x32054e39
imul ecx, edx
mov edx, eax
and edx, 0x32054e38
or eax, 0x32054e39
imul eax, edx
add eax, ecx
cmp eax, 0x9eae6bbc
jae 0x1401e02a6
mov rax, qword [0x1415d3918]
xor eax, eax
nop dword [rax + rax]
mov rsi, qword [0x1415d3918]
test al, al
jne 0x1401e02b0
mov eax, dword [0x1415ce4f0]
add eax, dword [0x1415ce4f4]
mov ecx, eax
xor ecx, 0x9c8b1c6e
add ecx, eax
and eax, 0x6374e391
sub ecx, eax
mov eax, 0xac8eab1d
imul rax, rcx
shr rax, 0x3e
xor eax, 0xe947eb26
cmp eax, 0x8d194eb4
jne 0x1401e0edb
jmp 0x1401e0f3c
ud2
mov eax, dword [0x1415ce4a0]
or eax, dword [0x1415ce4a4]
or eax, 0x30d0d528
imul eax, eax, 0x7bd2334a
xor eax, 0xe4cf66bf
cmp eax, 0x5d331ca8
ja 0x1401e037e
mov eax, dword [0x1415ce4a8]
sub eax, dword [0x1415ce4ac]
add eax, 0xd1315196
or eax, 0xbb7af643
and eax, 0xbbfef753
ud2
ud2
mov eax, dword [0x1415ce510]
xor edx, edx
div dword [0x1415ce514]
mov ecx, eax
and ecx, 0x6b6298aa
or eax, 0x6b6298aa
add eax, ecx
add eax, 0x8b28600
mov ecx, eax
xor ecx, 0x9cd0e32e
or eax, 0x632f1cd1
and eax, ecx
mov word [r15 + rbx*2], 0
cmp eax, 0xeeaa0e53
jne 0x1401e03d0
mov word [r15 + rbx*2], 0
jmp 0x1401e0382
mov eax, dword [0x1415ce518]
mov ecx, dword [0x1415ce51c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0xb368173e
mov ecx, eax
xor ecx, 0x1771551
xor eax, 0xb088c824
or eax, 0x4e5433db
add eax, ecx
cmp eax, 0x116998af
je 0x1401e03d0
cmp qword [rbp + 0x70], r8
je 0x1401e0f90
mov eax, 0x864faf07
mov ecx, dword [0x1415ce5b8]
or ecx, dword [0x1415ce5bc]
xor ecx, 0xec253d94
imul rcx, rax
shr rcx, 0x3f
not ecx
and ecx, 0x5454a845
cmp ecx, 0xe5bb6a89
ja 0x1401e0413
mov eax, dword [0x1415ce5c0]
mov ecx, dword [0x1415ce5c4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
xor eax, 0x529a4d00
imul eax, eax, 0x7dbf127c
and eax, 0xd6312214
cmp eax, 0x73750f72
jae 0x1401e0488
mov qword [r12 + 0x58], 0
mov qword [rbp + 0x38], rbx
mov r9, qword [r12 + 0x50]
mov r8, r12
mov eax, dword [0x1415ce5c8]
mov ecx, dword [0x1415ce5cc]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x25aba7ee
and eax, 0xda545811
imul eax, edx
mov edx, ecx
and edx, 0xda545811
or ecx, 0xda545811
imul ecx, edx
add eax, ecx
add eax, 0xdec64101
xor eax, 0x61b6184d
mov r12, qword [r8 + 0x58]
mov qword [r8 + 0x58], 0
cmp eax, 0x9ba73053
ja 0x1401e0494
test r12, r12
je 0x1401e065b
xor r13d, r13d
mov r14d, 0xc196fad9
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x1415ce5e8]
sub eax, dword [0x1415ce5ec]
xor eax, 0x5c60c08
and eax, 0x47d78c08
xor eax, 0xb16ce00
cmp eax, 0x8615e934
ja 0x1401e0510
mov rax, r13
shl rax, 5
mov r15, r9
cmp qword [r9 + rax], 0
je 0x1401e05f0
add rax, r15
mov rsi, qword [rax + 8]
mov eax, dword [0x1415ce5f0]
xor eax, dword [0x1415ce5f4]
mov ecx, eax
xor ecx, 0x1420814
or eax, 0x4a002000
and eax, ecx
and eax, 0x4b422814
cmp eax, 0x2b44324e
jae 0x1401e0590
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415ce5f8]
xor edx, edx
div dword [0x1415ce5fc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xbf2553dc
and ecx, 0x40daac23
imul ecx, edx
mov edx, eax
and edx, 0x40daac23
or eax, 0x40daac23
imul eax, edx
lea edi, [rax + rcx]
add edi, 0x3458b38c
xor edi, 0x99cc9241
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp edi, 0x3329d389
ja 0x1401e0590
inc r13
nop word cs:[rax + rax]
mov eax, dword [0x1415ce600]
mov ecx, dword [0x1415ce604]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x495fdf39
add eax, ecx
inc eax
imul rax, r14
shr rax, 0x3d
imul eax, eax, 0x45550a29
cmp eax, 0xa094672f
ja 0x1401e0600
cmp r13, r12
mov r9, r15
jne 0x1401e0510
mov eax, dword [0x1415ce5d0]
xor edx, edx
div dword [0x1415ce5d4]
mov r12, qword [rbp + 0x88]
mov rbx, qword [rbp - 0x50]
mov eax, dword [0x1415ce5d8]
mov ecx, dword [0x1415ce5dc]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and ecx, 0x90268da6
mov edx, eax
and edx, 0x6fd97259
imul edx, ecx
mov ecx, eax
and ecx, 0x90268da6
or eax, 0x90268da6
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x4dd72f55
mov edx, eax
and edx, 0xb228d0aa
imul edx, ecx
mov ecx, eax
and ecx, 0x4dd72f54
or eax, 0x4dd72f55
imul eax, ecx
add eax, edx
add eax, 0x9f49cf9c
cmp eax, 0xdec3f60f
ja 0x1401e0674
mov eax, dword [0x1415ce5e0]
add eax, dword [0x1415ce5e4]
mov ecx, eax
xor ecx, 0x37e49037
add ecx, eax
and eax, 0xc81b6fc8
sub ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x2b93ab8c
and eax, 0xd46c5473
imul eax, edx
mov edx, ecx
and edx, 0xd46c5473
or ecx, 0xd46c5473
imul ecx, edx
add ecx, eax
cmp ecx, 0x1b63aec2
je 0x1401e06e0
mov rax, qword [rbp + 0x38]
add rax, rax
neg rax
mov qword [rbp + 0x38], rax
xor r15d, r15d
xor ecx, ecx
mov qword [rbp + 0x48], r9
mov eax, dword [0x1415ce608]
mov edx, dword [0x1415ce60c]
not eax
not edx
or edx, eax
mov eax, edx
not eax
xor edx, 0x88846015
and eax, 0x8846015
add eax, eax
sub eax, edx
add eax, 0x52107846
cmp eax, 0xf1ec7aa3
ja 0x1401e0743
cmp rcx, qword [rbp + 0x70]
je 0x1401e0d5c
mov rax, qword [rbp + 0x68]
lea r13, [rax + rcx*2]
mov rax, qword [rbp + 0x38]
lea rax, [rax + rcx*2]
mov rdx, 0xffffffffffffffff
xor esi, esi
mov r8, r13
cmp word [r13 + rsi*2], 0
je 0x1401e086d
mov r10d, dword [0x1415ce610]
mov r9d, dword [0x1415ce614]
mov r11d, r9d
not r11d
and r11d, r10d
xor r9d, r10d
add r9d, r10d
sub r9d, r11d
imul r10, r9, 0xfac6233
shr r10, 0x20
sub r9d, r10d
shr r9d, 1
add r9d, r10d
shr r9d, 0x1c
lea r10d, [r9 + 0x7f85156d]
mov r11d, r10d
and r11d, 0x5000009
xor r10d, 0xfafddf76
add r9d, r10d
add r9d, 0x7f85156d
sub r9d, r11d
cmp r9d, 0x423f6a27
je 0x1401e07a7
add r8, 2
mov r9d, dword [0x1415ce618]
mov r10d, dword [0x1415ce61c]
mov r11d, r9d
not r11d
and r11d, r10d
mov edi, r10d
not edi
and edi, r9d
imul edi, r11d
mov r11d, r9d
and r11d, r10d
or r9d, r10d
imul r9d, r11d
add r9d, edi
or r9d, 0x33e4524c
cmp r9d, 0x732163b5
je 0x1401e0811
inc rsi
dec rdx
add rax, 2
cmp rax, 2
jne 0x1401e079a
jmp 0x1401e0d5c
mov eax, dword [0x1415ce628]
xor edx, edx
div dword [0x1415ce62c]
mov eax, dword [0x1415ce630]
sub eax, dword [0x1415ce634]
and eax, 0x46e69d2a
add eax, 0xfbaa3439
cmp eax, 0x89187bd1
ja 0x1401e087b
lea r14, [rcx + rsi]
cmp r14, rcx
jb 0x1401e0d6b
mov eax, dword [0x1415ce650]
xor edx, edx
div dword [0x1415ce654]
mov ecx, eax
not ecx
or eax, 0x8e49c162
or ecx, 0x71b63e9d
and ecx, eax
mov eax, ecx
not eax
and ecx, 0x80000872
mov edx, eax
and edx, 0x37bdc300
or edx, ecx
xor edx, 0x91248952
and eax, 0x11248120
or eax, edx
cmp eax, 0x69116724
je 0x1401e08a5
mov eax, dword [0x1415ce658]
and eax, dword [str.q_vS9]
add eax, 0x6bbe938e
mov ecx, eax
xor ecx, 0x590589
xor eax, 0x8320ba70
and ecx, 0xc5f458b
and eax, 0xf3a0ba74
or eax, ecx
cmp eax, 0x42bb2a90
ja 0x1401e08ec
cmp r14, qword [rbp + 0x70]
ja 0x1401e0d79
mov eax, dword [0x1415ce660]
mov ecx, dword [0x1415ce664]
add eax, ecx
add eax, 0x1d967f09
mov ecx, eax
and ecx, 0x40b9c557
add ecx, ecx
sub eax, ecx
add eax, 0x40b9c557
mov ecx, eax
not ecx
or ecx, 0xf25f873a
or eax, 0xda078c5
and eax, ecx
cmp eax, 0x9d54c4d4
jb 0x1401e0928
lea rax, [rsi*2]
add rax, r13
mov ecx, dword [0x1415ce668]
mov edx, dword [0x1415ce66c]
xor edx, ecx
not edx
and edx, ecx
add edx, 0x5eab4eaa
xor edx, 0x8a7d72e8
cmp edx, 0x5fe29eb4
ja 0x1401e096f
mov rcx, r13
cmp rcx, rax
je 0x1401e0d5c
mov edx, dword [0x1415ce678]
and edx, dword [0x1415ce67c]
mov r8d, edx
xor r8d, 0x1a554001
xor edx, 0xe5220830
and edx, 0xe52a9e38
and r8d, 0x1ad561c7
or r8d, edx
cmp r8d, 0x5a843d06
je 0x1401e09a1
movzx edx, word [rcx]
add rcx, 2
mov r8d, dword [0x1415ce680]
mov r9d, dword [0x1415ce684]
mov r10d, r9d
not r10d
mov r11d, r8d
and r11d, r10d
or r10d, r8d
not r10d
imul r10d, r11d
mov r11d, r8d
and r11d, r9d
or r8d, r9d
imul r8d, r11d
add r8d, r10d
add r8d, 0xbbb5d04f
and r8d, 0x41777eaf
xor r8d, 0xd1807e98
cmp r8d, 0xf838f4ae
ja 0x1401e09dd
nop
mov r8d, dword [0x1415ce688]
add r8d, dword [0x1415ce68c]
imul r8, r8, 0x5333f2fb
shr r8, 0x3e
or r8d, 0x7c00f104
cmp r8d, 0x9f2cf7ab
je 0x1401e0a30
cmp dx, 0x3d
jne 0x1401e0998
mov eax, dword [0x1415ce690]
mov ecx, dword [0x1415ce694]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rax, rax, 0x4ca452dd
shr rax, 0x3e
cmp eax, 0x7f6ab3cb
je 0x1401e0afb
mov eax, dword [0x1415ce698]
or eax, dword [0x1415ce69c]
mov edi, eax
xor edi, 0xbd92d582
and edi, eax
mov eax, edi
not eax
and eax, 0xb1b6f6da
mov ecx, edi
and ecx, 0x4e490925
imul ecx, eax
mov eax, edi
and eax, 0xb1b6f6da
or edi, 0xb1b6f6da
imul edi, eax
add edi, ecx
sub rsp, 0x20
mov rcx, rbx
mov rdx, r13
mov r8, rsi
call fcn.14014ae90
add rsp, 0x20
cmp edi, 0x6ab149ff
jne 0x1401e0b13
sub rsp, 0x20
mov rcx, rbx
mov rdx, r13
mov r8, rsi
call fcn.14014ae90
add rsp, 0x20
jmp 0x1401e0aa1
mov eax, dword [0x1415ce6a0]
xor edx, edx
div dword [0x1415ce6a4]
mov eax, dword [0x1415ce6a8]
xor edx, edx
div dword [0x1415ce6ac]
mov ecx, eax
and ecx, 0x5493822b
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x10900201
and edx, 0xe64b813a
imul edx, r8d
and eax, 0x4403802a
or ecx, 0xe64b813a
imul ecx, eax
add ecx, edx
mov eax, ecx
not eax
and eax, 0x5e6c5f9f
mov edx, ecx
and edx, 0xa193a060
imul edx, eax
mov eax, ecx
and eax, 0x5e6c5f9e
or ecx, 0x5e6c5f9f
imul ecx, eax
add ecx, edx
cmp ecx, 0xcbbacd70
jb 0x1401e0b21
mov rax, qword [rbp + 0x18]
cmp r15, qword [rax]
mov r9, qword [rbp + 0x48]
mov r10, r14
jne 0x1401e0c84
mov eax, dword [0x1415ce6b0]
mov ecx, dword [0x1415ce6b4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0x9fd6cd2e
add eax, 0x4b8c2ade
or eax, 0x77e4ef2d
cmp eax, 0x6043e36f
jae 0x1401e0bf4
sub rsp, 0x20
mov rcx, qword [rbp + 0x18]
call fcn.14021c8b0
add rsp, 0x20
mov rdi, qword [rbp + 0x18]
mov esi, dword [0x1415ce6b8]
imul esi, dword [0x1415ce6bc]
mov eax, esi
xor eax, 0x32024118
xor esi, 0xc1090b56
and esi, eax
and esi, 0xf34b4b7e
sub rsp, 0x20
mov rcx, rdi
call fcn.140033df0
add rsp, 0x20
cmp esi, 0xe6623052
je 0x1401e0bf8
mov r9, qword [r12 + 0x50]
mov r10, r14
mov eax, dword [0x1415ce6c0]
mov ecx, dword [0x1415ce6c4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
or eax, 0x901467bf
mov ecx, eax
and ecx, 0x664254a1
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xd5d77e27
cmp eax, 0x344638c0
jb 0x1401e0c3a
mov eax, dword [0x1415ce6c8]
add eax, dword [0x1415ce6cc]
mov ecx, eax
or ecx, 0x87ccede0
xor ecx, 0x15bbccfb
or eax, 0xea443304
and eax, ecx
cmp eax, 0x1e75c345
je 0x1401e0d29
mov eax, dword [0x1415ce6d0]
mov ecx, dword [0x1415ce6d4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
lea ecx, [rax + rdx]
add ecx, 0x78ff816
not ecx
or ecx, 0x2dfd9b4
mov rdx, r15
shl rdx, 5
lea rax, [r15 + 1]
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r9 + rdx + 0x10], xmm1
movups xmmword [r9 + rdx], xmm0
mov qword [r12 + 0x58], rax
cmp ecx, 0xd93cdbd5
je 0x1401e0d29
inc r10
mov r15, rax
mov rcx, r10
cmp r10, qword [rbp + 0x70]
jbe 0x1401e073f
jmp 0x1401e0db5
mov rax, r15
shl rax, 5
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r9 + rax + 0x10], xmm1
movups xmmword [r9 + rax], xmm0
mov eax, r15d
and eax, 1
mov rcx, r15
or rcx, 1
add rcx, rax
mov qword [r12 + 0x58], rcx
jmp 0x1401e0cac
xor eax, eax
test al, al
je 0x1401e0de7
jmp 0x1401e0e31
ud2
ud2
ud2
mov eax, dword [0x1415ce638]
mov ecx, dword [0x1415ce63c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0xdec103bc
xor eax, 0x655bfc6d
imul eax, eax, 0xa1393d3b
mov rsi, qword [0x1415d3918]
cmp eax, 0x84b9d22
jae 0x1401e0e3a
mov rax, qword [0x1415d3918]
jmp 0x1401e0de7
mov eax, dword [0x1415ce640]
mov ecx, dword [0x1415ce644]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0xa105aa86
mov ecx, eax
not ecx
or eax, 0xb4a8fb80
or ecx, 0x4b57047f
and ecx, eax
add ecx, 0x74aa91cd
cmp ecx, 0xd480b004
mov rbx, qword [rbp + 0x68]
ja 0x1401e0e92
sub rsp, 0x20
xor edi, edi
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
test dil, dil
je 0x1401e0ea9
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
jmp 0x1401e0e76
movabs rsi, 0x8000000000000000
mov eax, dword [0x1415ce648]
sub eax, dword [0x1415ce64c]
imul eax, eax, 0x7229f963
and eax, 0xe9f74eee
add eax, 0x42759eb
cmp eax, 0xedc7ef6b
ja 0x1401e0eb3
jmp 0x1401e1620
mov eax, dword [0x1415ce4f8]
xor edx, edx
div dword [0x1415ce4fc]
or eax, 0x2369cc1b
mov edi, eax
xor edi, 0x5cf43f1b
and edi, eax
mov eax, edi
not eax
mov ecx, edi
and ecx, 0x338bb000
and eax, 0xcc540fe7
imul eax, ecx
mov ecx, edi
and ecx, 0xcc1443e4
or edi, 0xcc544fe7
imul edi, ecx
add edi, eax
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call fcn.140219910
add rsp, 0x20
cmp edi, 0xfc752614
jbe 0x1401e0f60
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call fcn.140219910
add rsp, 0x20
jmp 0x1401e0edb
mov eax, dword [0x1415ce500]
sub eax, dword [0x1415ce504]
mov ecx, eax
not ecx
or ecx, 0xa5ac9528
or eax, 0x5a536ad7
and eax, ecx
xor eax, 0xba86c0a0
add eax, 0x9a44c0eb
cmp eax, 0xe2329c86
ja 0x1401e0f60
nop
mov eax, dword [0x1415ce520]
sub eax, dword [0x1415ce524]
mov ecx, eax
xor ecx, 0x4000005
xor eax, 0x3bb1f6ca
mov edx, eax
and edx, 0xe87ead78
and ecx, 0x17815287
imul ecx, edx
mov edx, eax
and edx, 0x17815287
or eax, 0x17815287
imul eax, edx
add eax, ecx
add eax, 0x9faef73a
cmp eax, 0x2d1975d2
ja 0x1401e0f90
mov r15, qword [r12 + 0x50]
nop dword [rax]
mov eax, dword [0x1415ce528]
xor edx, edx
div dword [0x1415ce52c]
or eax, 0x36554429
mov ecx, eax
not ecx
or ecx, 0x3061726a
add eax, ecx
inc eax
mov ecx, eax
not ecx
or ecx, 0xe94215ca
or eax, 0x16bdea34
and eax, ecx
cmp eax, 0xe6e9bead
je 0x1401e0fe0
mov rax, qword [r12 + 0x58]
mov qword [rbp + 0x68], rax
test rax, rax
je 0x1401e1250
xor r13d, r13d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r14d, r14d
jmp 0x1401e1058
mov eax, r14d
and eax, 1
xor r14, 1
lea r14, [r14 + rax*2]
cmp r14, qword [rbp + 0x68]
je 0x1401e1250
mov eax, dword [0x1415ce530]
mov ecx, dword [0x1415ce534]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0xd2b87bfa
add eax, 0x2ba18343
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xb30b2461
and ecx, 0x4cf4d89e
imul ecx, edx
mov edx, eax
and edx, 0x4cf4db1e
or eax, 0x4cf4db9e
imul eax, edx
add eax, ecx
cmp eax, 0x826f977f
ja 0x1401e1058
mov rax, r14
shl rax, 5
cmp qword [r15 + rax], 0
je 0x1401e1040
mov ecx, dword [0x1415ce538]
mov edx, dword [0x1415ce53c]
mov r8d, ecx
xor r8d, edx
not edx
and edx, ecx
add edx, edx
sub edx, r8d
add edx, 0xdbae2554
cmp edx, 0x9b59221f
jbe 0x1401e10fe
mov rcx, qword [0x1415d3918]
add rax, r15
nop word cs:[rax + rax]
mov ecx, dword [0x1415ce540]
sub ecx, dword [0x1415ce544]
xor ecx, 0x96c9e9b6
imul rcx, rcx, 0x2735f853
shr rcx, 0x3d
mov edx, ecx
xor edx, 0x7869e93
add edx, ecx
mov rsi, qword [rax + 8]
mov rbx, qword [0x1415d3918]
cmp edx, 0x94f43bf9
ja 0x1401e1110
mov eax, dword [0x1415ce548]
sub eax, dword [0x1415ce54c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd1f5c613
and ecx, 0x2e0a39ec
imul ecx, edx
mov edx, eax
and edx, 0x2e0a39ec
or eax, 0x2e0a39ec
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0x258c2054
add eax, ecx
add eax, 0x9b04db99
cmp eax, 0xa26f9b20
ja 0x1401e1230
nop dword [rax]
mov eax, dword [0x1415ce550]
mov ecx, dword [0x1415ce554]
mov edx, eax
or edx, ecx
not eax
not ecx
and ecx, eax
not ecx
and ecx, edx
mov edi, ecx
xor edi, 0x5f34f250
xor ecx, 0x1145040
and ecx, 0x11c584d
add ecx, ecx
sub edi, ecx
add edi, 0x11c584d
mov eax, edi
not eax
mov ecx, edi
and ecx, 0x46b06d60
and eax, 0xb94f929f
imul eax, ecx
mov ecx, edi
and ecx, 0xb94f929f
or edi, 0xb94f929f
imul edi, ecx
add edi, eax
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
cmp edi, 0xd9d26ef0
je 0x1401e1230
nop word [rax + rax]
test r13b, r13b
jne 0x1401e1220
jmp 0x1401e1040
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
jmp 0x1401e11a0
mov eax, dword [0x1415ce558]
mov ecx, dword [0x1415ce55c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0x35c6f828
xor eax, 0xbb0148ce
imul eax, eax, 0x4d24709a
cmp eax, 0xbfca5f96
je 0x1401e1250
mov rax, qword [rbp + 0x18]
mov rax, qword [rax]
nop dword [rax]
mov ecx, dword [str._3a_]
sub ecx, dword [0x1415ce564]
add ecx, 0x2a1d6dd3
and ecx, 0xd8a92cbe
xor ecx, 0x80a808aa
cmp ecx, 0xdec4fc71
ja 0x1401e12a0
mov ecx, 0xb27a988f
mov r12, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov edx, dword [0x1415ce568]
and edx, dword [0x1415ce56c]
imul rdx, rcx
shr rdx, 0x3c
mov r8d, edx
not r8d
and r8d, 0xcbab536b
and edx, 4
or edx, r8d
xor edx, 0x744803fe
xor r8d, 0x2001
mov r9d, edx
and r9d, 0xa611094
and r8d, 0x220b
imul r8d, r9d
mov r9d, edx
and r9d, 0xb582400b
or edx, 0xb582620b
imul edx, r9d
add edx, r8d
cmp edx, 0x363ab4ed
jb 0x1401e12e0
test rax, rax
je 0x1401e14ec
mov eax, dword [0x1415ce570]
sub eax, dword [0x1415ce574]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x68ac7b32
and ecx, 0x975384cd
imul ecx, edx
mov edx, eax
and edx, 0x975384cd
or eax, 0x975384cd
imul eax, edx
add eax, ecx
shr eax, 6
imul rax, rax, 0x3553803
shr rax, 0x31
add eax, 0xbdaf2f12
cmp eax, 0xd68c79aa
jbe 0x1401e13a5
mov rax, qword [0x1415d3918]
mov eax, 0x94626273
nop word [rax + rax]
mov ecx, dword [0x1415ce578]
mov edx, dword [0x1415ce57c]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
not ecx
or ecx, 0xf9e760c
mov edx, ecx
not edx
mov r8d, edx
and r8d, 0x102188c1
and ecx, 0xefc4213e
imul ecx, r8d
mov r8d, edx
and r8d, 0xe0400132
or edx, 0xefc4213e
imul edx, r8d
add edx, ecx
imul rdx, rax
shr rdx, 0x3e
mov rsi, qword [0x1415d3918]
cmp edx, 0x91daf2fe
je 0x1401e13b0
mov eax, dword [0x1415ce580]
mov ecx, dword [0x1415ce584]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
and ecx, 0xfba74d0
xor eax, 0xfba74d0
lea eax, [rax + rcx*2]
not eax
or eax, 0x3d09fcf0
and eax, 0xfd3dfcf6
cmp eax, 0x35b0d2e8
jb 0x1401e14d4
mov eax, dword [0x1415ce588]
xor eax, dword [0x1415ce58c]
mov edi, eax
and edi, 0xc49c8bc6
mov ecx, edi
not ecx
and ecx, 0x885f74ea
mov edx, eax
and edx, 0x44808b04
imul edx, ecx
and eax, 0x801c00c2
or edi, 0x885f74ea
imul edi, eax
add edi, edx
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x112f8a53
jne 0x1401e14ec
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401e147d
mov eax, dword [0x1415ce590]
xor eax, dword [0x1415ce594]
and eax, 0x2a256992
add eax, 0x87a32f7f
cmp eax, 0x7b64a45b
jae 0x1401e151b
mov qword [r12 + 0x48], 0
mov qword [r12 + 0x50], 8
movabs rsi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1415ce598]
xor edx, edx
div dword [0x1415ce59c]
mov ecx, eax
xor ecx, 0xdaa8ef67
or eax, 0x25571098
and eax, ecx
imul rax, rax, 0x180ae759
shr rax, 0x38
mov ecx, eax
xor ecx, 0xc
and ecx, eax
mov qword [r12 + 0x48], 0
mov qword [r12 + 0x50], 8
cmp ecx, 0xae13beb8
ja 0x1401e1530
mov eax, dword [0x1415ce5a0]
mov ecx, dword [0x1415ce5a4]
xor ecx, eax
not ecx
and ecx, eax
xor ecx, 0x4aa6886e
imul rax, rcx, 0x2698e73d
shr rax, 0x3b
cmp eax, 0x855adcc4
ja 0x1401e15d7
mov eax, dword [str.6_tv]
sub eax, dword [0x1415ce5ac]
mov ecx, 0x9e83b7f5
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x47982f40
xor eax, 0x4280253
mov qword [r12 + 0x58], 0
cmp eax, 0x97d10ffb
jne 0x1401e15f0
mov qword [r12 + 0x58], 0
jmp 0x1401e15a3
mov eax, dword [str.Hh_F]
xor edx, edx
div dword [0x1415ce5b4]
add eax, 0x933bb9ea
mov ecx, eax
not ecx
and ecx, 0x7694fe27
and eax, 0x896b01d8
sub eax, ecx
xor eax, 0x5f702537
cmp eax, 0x5eecb8da
jae 0x1401e15f0
lea r14, [r12 + 0x98]
lea r15, [r12 + 0xb8]
mov eax, dword [0x1415ce6d8]
imul eax, dword [0x1415ce6dc]
imul eax, eax, 0xed17694c
or eax, 0xccf0e230
imul eax, eax, 0x8e128d01
cmp eax, 0x1311da07
jb 0x1401e1630
nop word cs:[rax + rax]
mov eax, dword [0x1415ce6e0]
sub eax, dword [0x1415ce6e4]
add eax, 0x1744954b
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x900fc086
and ecx, 0x6ff03f79
imul ecx, edx
mov edx, eax
and edx, 0x6ff03f79
or eax, 0x6ff03f79
imul eax, edx
add eax, ecx
xor eax, 0x1cb3fa3a
cmp eax, 0x495067ea
jb 0x1401e1660
nop word cs:[rax + rax]
mov eax, dword [0x1415ce6e8]
mov ecx, dword [0x1415ce6ec]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
and ecx, 0x70ba4990
mov eax, ecx
xor eax, 0x1be81784
and eax, 0x3bf81784
xor ecx, 0x6415a87b
lea eax, [rcx + rax*2]
cmp eax, 0xbbf78c2a
ja 0x1401e16b0
cmp byte [rbp + 0x28], 1
jg 0x1401e1700
jne 0x1401e178b
mov r13b, 1
jmp 0x1401e178e
mov eax, dword [0x1415ce6f0]
mov ecx, dword [0x1415ce6f4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
and ecx, 0x55dbcf1b
xor ecx, 0x1dacf00
and eax, 0x1dacf00
or eax, ecx
cmp eax, 0xc009ca9d
je 0x1401e1700
mov rax, qword [r14]
nop dword [rax + rax]
mov ecx, dword [0x1415ce6f8]
imul ecx, dword [0x1415ce6fc]
imul rdx, rcx, 0x51e51c9b
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1c
and ecx, 1
imul ecx, ecx, 0x30a24c9f
cmp rax, rsi
sete r13b
cmp ecx, 0x2e2231a6
je 0x1401e1750
jmp 0x1401e178e
xor r13d, r13d
mov eax, 0x8f22a5fb
nop word cs:[rax + rax]
mov ecx, dword [0x1415ce700]
imul ecx, dword [0x1415ce704]
mov edx, ecx
xor edx, 0x232d1002
xor ecx, 0xccc267bc
mov r8d, ecx
and r8d, 0xd010e86d
and edx, 0x2fef1792
imul edx, r8d
mov r8d, ecx
and r8d, 0x2fef1792
or ecx, 0x2fef1792
imul ecx, r8d
add ecx, edx
imul rcx, rax
shr rcx, 0x3b
cmp ecx, 0x5521052e
ja 0x1401e17a0
movzx eax, byte [rbp + 0x58]
test al, al
jle 0x1401e1819
cmp al, 2
jl 0x1401e1880
movabs rax, 0x8000000000000000
jne 0x1401e1909
cmp qword [r15], rax
sete al
jmp 0x1401e1821
jne 0x1401e1909
xor eax, eax
or al, r13b
nop word cs:[rax + rax]
mov ecx, dword [0x1415ce710]
sub ecx, dword [0x1415ce714]
mov edx, ecx
not edx
and edx, 0x681c4874
and ecx, 0x97e3b78b
sub ecx, edx
mov edx, ecx
not edx
or edx, 0x4dca761a
or ecx, 0xdb8d9057
and ecx, edx
and ecx, 0xdfcff65f
cmp ecx, 0xd8f0d242
jb 0x1401e1830
test al, al
je 0x1401e25fd
nop word cs:[rax + rax]
mov eax, dword [0x1415ce718]
sub eax, dword [0x1415ce71c]
imul eax, eax, 0xb603ccde
add eax, 0xda338c04
or eax, 0x816a07f4
cmp eax, 0xbf381e15
je 0x1401e1880
nop word cs:[rax + rax]
mov eax, dword [0x1415ce720]
or eax, dword [0x1415ce724]
xor eax, 0xd3e6c27
imul rax, rax, 0x2e19eef9
shr rax, 0x3d
or eax, 0x2b8f754e
cmp eax, 0x78b9bdb0
ja 0x1401e18b0
mov r12, qword [rbp + 0x90]
shr r12d, 1
mov eax, dword [str.qkp]
xor edx, edx
div dword [0x1415ce72c]
add eax, 0xf6ad032c
imul rax, rax, 0x7123c925
shr rax, 0x3e
cmp eax, 0x6b04b5fb
jne 0x1401e193b
jmp 0x1401e1979
mov eax, dword [0x1415ce708]
add eax, dword [0x1415ce70c]
mov ecx, eax
xor ecx, 0x4d7223ad
xor eax, 0x748c8f54
and eax, ecx
imul rax, rax, 0x22a2d381
shr rax, 0x3b
cmp eax, 0x43649a84
je 0x1401e1909
jmp 0x1401dba84
mov eax, dword [0x1415ce730]
and eax, dword [0x1415ce734]
imul edi, eax, 0x733a92bb
add edi, 0x3a7ea7ef
lea rdx, [r12*2 + 2]
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
cmp edi, 0xef3079fe
jae 0x1401e1999
lea rdx, [r12*2 + 2]
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
jmp 0x1401e193b
mov rsi, rax
test rax, rax
je 0x1401e1f79
lea rbx, [r12 + 1]
nop word [rax + rax]
mov eax, dword [0x1415ce740]
imul eax, dword [0x1415ce744]
mov ecx, eax
not ecx
or eax, 0x54018010
or ecx, 0x82
and eax, 0x56279470
and ecx, 0x1000282
or ecx, eax
add ecx, 0xce4fef33
jae 0x1401e19b0
mov rax, qword [rbp - 0x40]
mov qword [rax], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x80]
mov r8, rsi
mov r9, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x1415ce748]
mov edx, dword [0x1415ce74c]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add ecx, edx
add ecx, 0x737e025e
mov edx, ecx
and edx, 0xe65b9636
or ecx, 0xe65b9636
add ecx, edx
xor ecx, 0x5a254c4a
cmp ecx, 0x967f4123
ja 0x1401e1a20
test eax, eax
je 0x1401e1da7
mov rax, qword [rbp - 0x40]
mov rax, qword [rax]
mov ecx, 0xb9038d81
nop dword [rax + rax]
mov edx, dword [0x1415ce750]
mov r8d, dword [0x1415ce754]
mov r9d, edx
xor r9d, r8d
not r9d
and r9d, r8d
add r9d, r9d
sub r8d, r9d
add r8d, edx
imul edx, r8d, 0x86b87794
add edx, 0xbda81cbc
imul rdx, rcx
shr rdx, 0x3d
cmp edx, 0xd581413d
je 0x1401e1a80
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1401e1ad0
cmp rax, qword [rbp + 0x90]
jne 0x1401e1e4d
nop word cs:[rax + rax]
mov eax, dword [0x1415ce770]
and eax, dword [0x1415ce774]
not eax
or eax, 0x53891d58
mov ecx, eax
not ecx
and eax, 0x54275e95
mov edx, ecx
and edx, 0xa850a022
imul edx, eax
mov eax, ecx
and eax, 0x4264285
or ecx, 0x54275e95
imul ecx, eax
add ecx, edx
imul rax, rcx, 0x4e85cb17
shr rax, 0x3d
cmp eax, 0x32212f72
ja 0x1401e1af0
mov word [rsi + r12*2], 0
lea rax, [rsi + rbx*2]
xor r8d, r8d
mov ecx, 0xad2a0819
mov rdx, rsi
nop word cs:[rax + rax]
mov r12, qword [rbp + 0x88]
mov r9d, dword [0x1415ce778]
xor r9d, dword [0x1415ce77c]
mov r10d, r9d
not r10d
and r10d, 0x251490d9
mov r11d, r9d
and r11d, 0xdaeb6f26
imul r11d, r10d
mov r10d, r9d
and r10d, 0x251490d9
or r9d, 0x251490d9
imul r9d, r10d
add r9d, r11d
xor r9d, 0x29f52e9e
imul r9d, r9d, 0xcc59193a
cmp r9d, 0x16bb8120
jb 0x1401e1b67
cmp word [rdx], 0
je 0x1401e1cf7
add rdx, 2
inc r8
mov r10d, dword [0x1415ce780]
mov r9d, dword [0x1415ce784]
mov r11d, r9d
not r11d
and r11d, r10d
xor r9d, r10d
add r9d, r10d
sub r9d, r11d
mov r10d, r9d
not r10d
mov r11d, r9d
and r11d, 0x8d331138
and r10d, 0x72cceec7
imul r10d, r11d
mov r11d, r9d
and r11d, 0x72cceec7
or r9d, 0x72cceec7
imul r9d, r11d
add r9d, r10d
mov r10d, r9d
not r10d
and r10d, 0x3fedb65d
mov r11d, r9d
and r11d, 0x401249a2
imul r11d, r10d
mov r10d, r9d
and r10d, 0x3fedb65d
or r9d, 0x3fedb65d
imul r9d, r10d
add r9d, r11d
or r9d, 0xa1427a1a
cmp r9d, 0xebe7541
jb 0x1401e1bd0
nop word [rax + rax]
mov r10d, dword [0x1415ce788]
mov r11d, dword [0x1415ce78c]
mov r9d, r10d
not r9d
mov edi, r11d
not edi
mov r12d, r9d
and r12d, 0xf2075530
and r10d, 0xdf8aacf
or r10d, r12d
or r9d, edi
and edi, 0xf2075530
and r11d, 0xdf8aacf
or r11d, edi
xor r11d, r10d
not r9d
or r9d, r11d
mov r10d, r9d
not r10d
or r10d, 0x11605acd
add r9d, r10d
inc r9d
or r9d, 0xcecf534b
imul r9, rcx
shr r9, 0x3d
cmp r9d, 0xc6c6158b
ja 0x1401e1c70
cmp rdx, rax
jne 0x1401e1b60
mov r8, rbx
mov r12, qword [rbp + 0x88]
sub rsp, 0x20
mov rdi, qword [rbp - 0x30]
mov rcx, rdi
mov rdx, rsi
call fcn.14014ae90
add rsp, 0x20
mov rbx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
movzx ecx, byte [rbp + 0x58]
mov rdx, rbx
mov r9, r15
call fcn.1401e5fc0
add rsp, 0x20
test r13b, r13b
je 0x1401e1f1b
nop word cs:[rax + rax]
mov eax, dword [0x1415ce7b8]
and eax, dword [0x1415ce7bc]
mov ecx, eax
xor ecx, 0xf18e08e8
or eax, 0xe71f717
and eax, ecx
mov ecx, eax
and ecx, 0x1af8ea54
xor eax, 0x1af8ea54
lea eax, [rax + rcx*2]
xor eax, 0x13324bcb
cmp eax, 0x550e0b6c
je 0x1401e1d40
mov rax, qword [rbp - 0x30]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov r13, qword [rbp - 0x60]
movups xmmword [r13 + 0x10], xmm1
movups xmmword [r13], xmm0
mov rax, qword [r14]
test rax, rax
js 0x1401e1fe0
jne 0x1401e1ff3
jmp 0x1401e2101
mov eax, dword [0x1415ce758]
mov ecx, dword [0x1415ce75c]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0x701f0322
mov eax, 0xc2708fcd
imul rax, rcx
shr rax, 0x3f
or eax, 0x321b184a
cmp eax, 0x9e3dd27a
jne 0x1401e1df0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415ce760]
mov edi, dword [0x1415ce764]
mov ecx, eax
xor ecx, edi
not edi
and edi, eax
add edi, edi
sub edi, ecx
add edi, 0x8307400e
xor edi, 0xa3c41199
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp edi, 0x57e1202
jb 0x1401e1df0
nop dword [rax]
mov eax, dword [0x1415ce768]
xor eax, dword [0x1415ce76c]
and eax, 0x18000100
or eax, 0x81d48c0a
cmp eax, 0x59b976c8
je 0x1401e1e30
mov eax, dword [0x1415ce790]
or eax, dword [0x1415ce794]
add eax, 0x76d020d3
mov ecx, eax
not ecx
or ecx, 0x45fc37a8
or eax, 0xba03c857
and eax, ecx
add eax, 0xfff8a008
cmp eax, 0xb3f7d31e
jbe 0x1401e1e82
mov rax, qword [0x1415d3918]
mov r12, qword [rbp + 0x88]
nop dword [rax]
mov eax, dword [0x1415ce79c]
add eax, dword [0x1415ce798]
mov ecx, eax
xor ecx, 0xdea5f098
xor eax, 0x215a0f67
mov edx, eax
and edx, 0x3b0bc4e2
and ecx, 0x44f43b1d
imul ecx, edx
mov edx, eax
and edx, 0x44f43b1d
or eax, 0x44f43b1d
imul eax, edx
add eax, ecx
and eax, 0x74a69be3
mov rbx, qword [0x1415d3918]
cmp eax, 0xf6e54d18
je 0x1401e1e90
mov eax, dword [0x1415ce7a0]
sub eax, dword [0x1415ce7a4]
or eax, 0xfdc28fb3
mov ecx, 0x85154279
imul rcx, rax
shr rcx, 0x3e
mov eax, ecx
and eax, 1
xor ecx, 0xaa33bf29
lea eax, [rcx + rax*2]
cmp eax, 0xff1c42f5
jne 0x1401e213b
jmp 0x1401e2158
cmp qword [rdi], 0
je 0x1401e2320
mov r15, qword [0x1415d3918]
mov eax, dword [0x1415ce7f8]
or eax, dword [0x1415ce7fc]
xor eax, 0xd9cc0ebf
imul rax, rax, 0x225b0189
shr rax, 0x3a
mov ecx, eax
not ecx
and ecx, 0xb8af37b3
mov edx, eax
and edx, 0xfffffffc
imul edx, ecx
mov ecx, eax
and ecx, 3
or eax, 0xb8af37b3
imul eax, ecx
add eax, edx
cmp eax, 0x7f4c9088
jae 0x1401e22c4
jmp 0x1401e2307
ud2
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1401e2101
mov eax, dword [0x1415ce7c0]
sub eax, dword [0x1415ce7c4]
xor eax, 0xe32395fe
imul rax, rax, 0x69aa68ab
shr rax, 0x3e
add eax, 0xb443fdd7
cmp eax, 0x1c91a5b2
jb 0x1401e1ff3
mov eax, dword [0x1415ce7c8]
or eax, dword [0x1415ce7cc]
and eax, 0x48abff6b
mov ecx, 0x89dae2f3
imul rcx, rax
shr rcx, 0x3d
mov eax, ecx
not eax
or eax, 0xce87d5bc
add eax, ecx
inc eax
cmp eax, 0xd794abb7
jbe 0x1401e206b
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
call fcn.140219910
add rsp, 0x20
mov edi, 0xe9ff39ad
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x1415ce7d0]
mov ecx, dword [0x1415ce7d4]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
or ecx, 0x17de4622
mov eax, ecx
and eax, 0x13f5172e
add eax, eax
neg eax
lea r15d, [rcx + rax]
add r15d, 0x93f5172e
imul r15, rdi
shr r15, 0x3d
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
cmp r15d, 0x64641128
ja 0x1401e2077
mov eax, dword [0x1415ce7d8]
or eax, dword [0x1415ce7dc]
add eax, 0xa1bbcf07
imul rax, rax, 0x5e17a6cb
shr rax, 0x3d
add eax, 0x7c8e3afd
cmp eax, 0x1eff7148
jb 0x1401e20d9
mov eax, dword [0x1415ce7e0]
xor edx, edx
div dword [0x1415ce7e4]
mov ecx, eax
not ecx
and ecx, 0xab03dd2e
and eax, 0x54fc22d1
sub eax, ecx
imul eax, eax, 0xf2539
add eax, 0xb05fd3c7
cmp eax, 0x7c2529a6
jbe 0x1401e2228
jmp 0x1401e2256
sub rsp, 0x20
xor edi, edi
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test dil, dil
je 0x1401e2170
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401e213b
mov rax, qword [r14]
movabs rsi, 0x8000000000000000
test rax, rax
js 0x1401e2189
jne 0x1401e2192
jmp 0x1401e2220
cmp rax, rsi
je 0x1401e2220
mov eax, dword [0x1415ce7a8]
mov ecx, eax
not ecx
or ecx, dword [0x1415ce7ac]
add eax, ecx
add eax, 0x85ec96ce
or eax, 0x91954a89
imul rax, rax, 0x52ffdd61
shr rax, 0x3e
cmp eax, 0xb6e97908
jbe 0x1401e21d0
mov rax, qword [0x1415d3918]
nop word [rax + rax]
mov eax, dword [0x1415ce7b0]
and eax, dword [0x1415ce7b4]
imul rax, rax, 0x55c76ac9
shr rax, 0x39
xor eax, 0x943c241b
mov ecx, eax
and ecx, 0x38040b
or eax, 0x3bbd54b
add eax, ecx
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x1415d3918]
cmp eax, 0x6401981c
jb 0x1401e21d0
sub rsp, 0x20
xor edx, edx
call fcn.140219910
add rsp, 0x20
mov qword [r14], rsi
jmp 0x1401e25fd
mov eax, dword [0x1415ce7e8]
xor edx, edx
div dword [0x1415ce7ec]
imul eax, eax, 0x7ff490e1
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
cmp eax, 0x5b1864e0
jne 0x1401e2270
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
jmp 0x1401e2228
mov eax, dword [0x1415ce7f0]
mov ecx, eax
not ecx
or ecx, dword [0x1415ce7f4]
add eax, ecx
add eax, 0xd2348507
mov ecx, eax
not ecx
and ecx, 0xfba25b84
mov edx, eax
and edx, 0x45da47b
imul edx, ecx
mov ecx, eax
and ecx, 0xfba25b84
or eax, 0xfba25b84
imul eax, ecx
add eax, edx
shr eax, 1
imul rax, rax, 0x72fa513
shr rax, 0x37
cmp eax, 0xf61aed09
jae 0x1401e2270
jmp 0x1401e2320
mov eax, dword [0x1415ce800]
sub eax, dword [0x1415ce804]
mov edi, eax
not edi
or eax, 0xdbc3ce74
or edi, 0x243c318b
and edi, eax
not edi
add edi, 0xb54a3e20
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xdfe35fe5
jbe 0x1401e2320
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
jmp 0x1401e22c4
mov eax, dword [0x1415ce808]
xor edx, edx
div dword [0x1415ce80c]
add eax, 0x30d179f1
and eax, 0x455032e0
xor eax, 0x4001260
cmp eax, 0x884b7eb6
ja 0x1401e2320
mov rbx, qword [0x1415d3918]
mov ecx, dword [0x1415ce810]
mov eax, dword [0x1415ce814]
mov edx, ecx
xor edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x18158848
and ecx, 0xe7ea77b7
imul ecx, edx
mov edx, eax
and edx, 0xe7ea77b7
or eax, 0xe7ea77b7
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x87881282
and ecx, 0x7877ed7d
imul ecx, edx
mov edx, eax
and edx, 0x7877ed7d
or eax, 0x7877ed7d
imul eax, edx
add eax, ecx
xor eax, 0xd406862a
cmp eax, 0x71f4d462
jb 0x1401e240d
mov eax, dword [0x1415ce818]
mov edi, dword [0x1415ce81c]
mov ecx, edi
not ecx
and ecx, eax
xor edi, eax
add edi, eax
sub edi, ecx
mov eax, edi
or eax, 0x4100000
not edi
and eax, 0x3411000a
and edi, 0x460060
or edi, eax
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xf8cd587f
jbe 0x1401e25fd
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401e23bd
mov eax, dword [0x1415ce828]
mov ecx, dword [0x1415ce82c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov esi, 0x85cf10e3
imul rsi, rax
shr rsi, 0x3e
or esi, 0x14264154
xor esi, 0xea355408
add esi, 0xf6764254
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0x856af289
jae 0x1401e24a0
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x1401e2425
mov eax, dword [0x1415ce830]
and eax, dword [0x1415ce834]
mov ecx, eax
not ecx
and ecx, 0x12e0c04f
mov edx, eax
and edx, 0x6d1f3fb0
imul edx, ecx
mov ecx, eax
and ecx, 0x12e0c04f
or eax, 0x12e0c04f
imul eax, ecx
add eax, edx
or eax, 0x2a2baef1
and eax, 0x7effeeff
cmp eax, 0x5b93229
jb 0x1401e24a0
nop word cs:[rax + rax]
mov eax, dword [0x1415ce838]
imul eax, dword [0x1415ce83c]
mov ecx, eax
not ecx
and ecx, 0xbab6086e
and eax, 0x4549f791
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x89a9f999
and ecx, 0x76560666
imul ecx, edx
mov edx, eax
and edx, 0x76560666
or eax, 0x76560666
imul eax, edx
add eax, ecx
and eax, 0xaaffb94e
cmp eax, 0x282bb23a
jb 0x1401e24f0
nop word cs:[rax + rax]
mov eax, dword [0x1415ce840]
mov ecx, dword [0x1415ce844]
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
not eax
mov ecx, eax
and ecx, 0x9ff68480
mov edx, ecx
not edx
and edx, 0x244249cf
mov r8d, eax
and r8d, 0x9bb48400
imul r8d, edx
and eax, 0x4420080
or ecx, 0x244249cf
imul ecx, eax
lea eax, [rcx + r8]
add eax, 0x417fc3b9
cmp eax, 0x9f65b8f3
jb 0x1401e2550
nop word cs:[rax + rax]
mov eax, dword [0x1415ce848]
mov ecx, dword [0x1415ce84c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xd27ea08c
mov r8d, edx
and r8d, 0x8f7aa073
and ecx, 0x20815f00
imul ecx, r8d
and edx, 0x70855f8c
or eax, 0xf2ffff8c
imul eax, edx
add eax, ecx
cmp eax, 0x28452bc5
je 0x1401e25b0
mov rax, qword [rbp + 0x20]
movzx ecx, byte [rax + 8]
mov eax, dword [0x1415ce850]
xor edx, edx
div dword [0x1415ce854]
mov eax, 0x84038a89
lea rdi, [r12 + 0x60]
mov r15, qword [rbp - 0x78]
mov r13, qword [rbp - 0x70]
nop word cs:[rax + rax]
mov edx, dword [0x1415ce858]
xor edx, dword [0x1415ce85c]
imul rdx, rax
shr rdx, 0x3c
or edx, 0x516cc0e9
imul rdx, rdx, 0x35dfc4ff
shr rdx, 0x3a
cmp edx, 0xa6aff6a
ja 0x1401e2630
nop dword [rax]
mov eax, dword [str.k_an]
mov edx, dword [0x1415ce864]
mov r8d, eax
xor r8d, edx
not edx
and edx, eax
add edx, edx
sub edx, r8d
add edx, 0xd6da8450
or edx, 0x40e0262b
imul rax, rdx, 0x175111db
shr rax, 0x39
cmp eax, 0x8c369b7c
ja 0x1401e2660
cmp cl, 1
movabs r9, 0x8000000000000000
jg 0x1401e26c0
je 0x1401e2750
jmp 0x1401e28d7
mov eax, dword [0x1415ce868]
xor edx, edx
div dword [0x1415ce86c]
mov ecx, eax
not ecx
or ecx, 0x5256148e
add ecx, eax
imul eax, ecx, 0xdae08bc7
add eax, 0xdae08bc7
mov ecx, eax
not ecx
and ecx, 0xf00f516b
mov edx, eax
and edx, 0xff0ae94
imul edx, ecx
mov ecx, eax
and ecx, 0xf00f516b
or eax, 0xf00f516b
imul eax, ecx
add eax, edx
cmp eax, 0x26162dac
ja 0x1401e26c0
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x1415ce870]
and ecx, dword [0x1415ce874]
xor ecx, 0x4dd16e10
add ecx, 0x1eed28e9
cmp ecx, 0x2980485
jb 0x1401e2720
cmp rax, r9
jne 0x1401e28d7
nop dword [rax]
mov eax, dword [0x1415ce898]
add eax, dword [0x1415ce89c]
mov ecx, eax
xor ecx, 0x89e32e87
xor eax, 0x48030
and eax, 0x86ae35
mov edx, ecx
and edx, 0x7951ca
imul edx, eax
mov eax, ecx
and eax, 0x86ae35
or ecx, 0x86ae35
imul ecx, eax
add ecx, edx
or ecx, 0xff5a239a
cmp ecx, 0xa6b5ed72
jb 0x1401e2750
nop dword [rax]
mov eax, dword [0x1415ce8a0]
mov ecx, eax
not ecx
or ecx, dword [0x1415ce8a4]
lea edx, [rax + rcx]
inc edx
add eax, ecx
not edx
or edx, 0x874d6f06
add eax, edx
add eax, 0x407066a6
mov ecx, eax
not ecx
and ecx, 0xe8752c6c
mov edx, eax
and edx, 0x178ad393
imul edx, ecx
mov ecx, eax
and ecx, 0xe8752c6c
or eax, 0xe8752c6c
imul eax, ecx
add eax, edx
cmp eax, 0xdb95724e
je 0x1401e27a0
mov rax, qword [r12 + 0xf8]
nop dword [rax]
mov ecx, dword [0x1415ce8a8]
mov edx, dword [0x1415ce8ac]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x756a75b6
and edx, 0xa958a49
imul edx, r8d
mov r8d, ecx
and r8d, 0xa958a49
or ecx, 0xa958a49
imul ecx, r8d
add ecx, edx
add ecx, 0x43047706
or ecx, 0x935fd4b8
cmp ecx, 0x201684d7
je 0x1401e2800
test rax, rax
je 0x1401e28a1
nop
mov ecx, dword [0x1415ce8c0]
mov edx, dword [0x1415ce8c4]
add ecx, edx
add ecx, 0x71cdcd44
mov edx, ecx
not edx
or ecx, 0xfcdc01f
or edx, 0xf0323fe0
and edx, ecx
cmp edx, 0xca89f10c
je 0x1401e2860
mov rsi, qword [rax + 0x10]
xor eax, eax
test al, al
je 0x1401e2939
jmp 0x1401e299d
mov qword [r15], r9
nop word cs:[rax + rax]
mov eax, dword [0x1415ce8b8]
sub eax, dword [0x1415ce8bc]
xor eax, 0x385b8b
or eax, 0xdc810070
add eax, 0xcfba7e2d
cmp eax, 0x58a6f802
jbe 0x1401e28b0
jmp 0x1401e2cea
xor eax, eax
mov rcx, qword [rbp - 0x80]
sub rcx, qword [r12 + 0x120]
cmovae rax, rcx
mov qword [r12 + 0x128], rax
mov byte [r12 + 0x154], 1
nop word [rax + rax]
mov eax, dword [0x1415ce8b0]
sub eax, dword [0x1415ce8b4]
imul rax, rax, 0x79f7df6f
shr rax, 0x3e
not eax
and eax, 0xac008281
cmp eax, 0x99f564
jb 0x1401e2900
lea rsp, [rbp + 0x98]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x1415ce8c8]
and eax, dword [0x1415ce8cc]
imul rbx, rax, 0x2d7fb085
shr rbx, 0x3d
add ebx, 0xad326b0b
mov eax, ebx
and eax, 0x20100007
xor eax, 0xc2403432
and ebx, 0xd224b0a
or ebx, eax
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r13
xor edx, edx
call fcn.14022b190
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x105
call fcn.14021c870
add rsp, 0x20
cmp ebx, 0x11ab8fba
jae 0x1401e29cd
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r13
xor edx, edx
call fcn.14022b190
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x105
call fcn.14021c870
add rsp, 0x20
jmp 0x1401e2939
xor ecx, ecx
mov r8d, 0x9eeddb99
mov r9d, 0xbdc463ff
nop dword [rax + rax]
cmp word [r13 + rcx*2], 0
je 0x1401e2ef8
mov eax, dword [0x1415ce8d0]
mov edx, dword [0x1415ce8d4]
mov r10d, edx
not r10d
mov r11d, eax
and r11d, r10d
or r10d, eax
not r10d
imul r10d, r11d
mov r11d, eax
and r11d, edx
or eax, edx
imul eax, r11d
add eax, r10d
not eax
and eax, 0xd09c2927
mov edx, eax
not edx
xor eax, 0xc9e12986
and edx, 0x49e12986
add edx, edx
sub edx, eax
mov eax, edx
not eax
or eax, 0x228b96ec
add eax, edx
inc eax
cmp eax, 0x48a24e4e
ja 0x1401e29ed
lea rsi, [rcx + 1]
mov eax, dword [0x1415ce8d8]
xor edx, edx
div dword [0x1415ce8dc]
mov eax, dword [0x1415ce8e0]
mov edx, dword [0x1415ce8e4]
mov r10d, eax
and r10d, edx
xor eax, edx
lea eax, [rax + r10*2]
imul rax, r8
shr rax, 0x3e
imul eax, eax, 0xc5b1615e
add eax, 0xaed80fd2
cmp eax, 0x7642b93
jb 0x1401e2a5e
movzx r10d, word [r13 + rcx*2 + 2]
nop word cs:[rax + rax]
mov eax, dword [0x1415ce8e8]
xor edx, edx
div dword [0x1415ce8ec]
add eax, 0xd76e4547
and eax, 0xc30fc105
imul rax, r9
shr rax, 0x3e
cmp eax, 0x200b5c99
ja 0x1401e2aa0
test r10w, r10w
je 0x1401e2c5d
nop word cs:[rax + rax]
mov eax, dword [0x1415ce8f0]
xor edx, edx
div dword [0x1415ce8f4]
mov edx, eax
xor edx, 0x4e211110
and edx, eax
and edx, 0x4e671512
imul rax, rdx, 0x4d89cbcd
shr rax, 0x39
cmp eax, 0x147fd86
je 0x1401e2ae0
lea rsi, [rcx + 2]
mov eax, dword [0x1415ce8f8]
xor edx, edx
div dword [0x1415ce8fc]
mov eax, dword [0x1415ce904]
add eax, dword [0x1415ce900]
imul eax, eax, 0x87d0d112
add eax, 0x7a35fd65
and eax, 0x8ea77a31
cmp eax, 0x34a6891c
je 0x1401e2b22
nop word cs:[rax + rax]
mov eax, dword [0x1415ce908]
mov edx, dword [0x1415ce90c]
mov r10d, eax
and r10d, edx
or eax, edx
add eax, r10d
mov edx, eax
not edx
or eax, 0xa31dcedf
or edx, 0x5ce23120
and edx, eax
not edx
imul eax, edx, 0xdf537086
mov edx, eax
and edx, 0xdd7091d2
or eax, 0xdd7091d3
add eax, edx
cmp eax, 0xd87f478b
je 0x1401e2b50
cmp word [r13 + rsi*2], 0
je 0x1401e2c5d
mov eax, dword [0x1415ce910]
mov edx, dword [0x1415ce914]
xor edx, eax
not edx
and edx, eax
mov eax, edx
not eax
or eax, 0xac25d3b4
add eax, edx
imul eax, eax, 0x1289a7c5
cmp eax, 0x2d03486b
je 0x1401e2ba3
mov eax, ecx
and eax, 3
or rcx, 3
add rcx, rax
mov eax, dword [0x1415ce918]
mov edx, eax
not edx
or edx, dword [0x1415ce91c]
add edx, eax
imul eax, edx, 0x9486664b
add eax, 0x67b0ec10
cmp eax, 0x219daf61
ja 0x1401e2bd9
nop dword [rax]
mov eax, dword [0x1415ce920]
and eax, dword [0x1415ce924]
add eax, 0xc53cde3d
mov edx, eax
not edx
mov r10d, eax
and r10d, 0xd367ee1
and edx, 0xf2c9811e
imul edx, r10d
mov r10d, eax
and r10d, 0xf2c9811e
or eax, 0xf2c9811e
imul eax, r10d
add eax, edx
imul eax, eax, 0xf5edfba
cmp eax, 0x6586d68b
jb 0x1401e2c00
cmp rcx, 0x105
jne 0x1401e29e0
mov esi, 0x105
xor eax, eax
test al, al
je 0x1401e2c79
sub rsp, 0x20
mov rcx, r15
mov rdx, r13
mov r8, rsi
call fcn.14014ae90
add rsp, 0x20
mov ebx, 0xd0e6eb93
nop
mov r14d, dword [0x1415ce928]
imul r14d, dword [0x1415ce92c]
imul r14, rbx
shr r14, 0x3e
add r14d, 0xc79e7daf
mov eax, r14d
not eax
mov ecx, r14d
and ecx, 0x838069b0
and eax, 0x3860004f
imul eax, ecx
mov ecx, r14d
and ecx, 0x441e140f
or r14d, 0x7c7e144f
imul r14d, ecx
add r14d, eax
sub rsp, 0x20
mov rcx, r15
mov rdx, r13
mov r8, rsi
call fcn.14021ac80
add rsp, 0x20
cmp r14d, 0xb1835ca7
ja 0x1401e2c80
mov rax, qword [rdi]
nop dword [rax]
mov ecx, dword [0x1415ce930]
add ecx, dword [0x1415ce934]
mov edx, ecx
xor edx, 0x63b06a09
or ecx, 0x1c4f95f6
and ecx, edx
imul ecx, ecx, 0x7452c860
or ecx, 0xa45bcfb9
cmp ecx, 0xd30cf143
ja 0x1401e2cf0
test rax, rax
movabs rcx, 0x8000000000000000
js 0x1401e2d36
jne 0x1401e2d40
jmp 0x1401e2deb
cmp rax, rcx
je 0x1401e2deb
nop
mov eax, dword [0x1415ce938]
or eax, dword [0x1415ce93c]
add eax, 0xfb56b0dd
mov ecx, eax
and ecx, 0x63eb9f96
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x40631900
and edx, 0xa398c6be
imul edx, r8d
and eax, 0x23888696
or ecx, 0xa398c6be
imul ecx, eax
add ecx, edx
cmp ecx, 0xfb6bb1a
je 0x1401e2d40
mov rsi, qword [r12 + 0x68]
mov eax, dword [0x1415ce940]
mov ecx, dword [0x1415ce944]
add eax, ecx
add eax, 0xe50356af
or eax, 0xba6be26
cmp eax, 0x5d47277d
jae 0x1401e2dc6
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
test bl, bl
jne 0x1401e2dd0
mov eax, dword [0x1415ce948]
mov ecx, dword [0x1415ce94c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
or eax, 0x1090239
not ecx
and eax, 0x21998239
movzx ecx, cl
or ecx, eax
and ecx, 0x2199823b
cmp ecx, 0x549dc468
jbe 0x1401e2e40
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x1415ce950]
and eax, dword [0x1415ce954]
mov ecx, eax
xor ecx, 0x4193dc45
or eax, 0xbe6c23ba
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0x1e36da07
mov edx, eax
and edx, 0xe1c925f8
imul edx, ecx
mov ecx, eax
and ecx, 0x1e36da07
or eax, 0x1e36da07
imul eax, ecx
add eax, edx
imul eax, eax, 0x38aac00f
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
cmp eax, 0x42f561d1
ja 0x1401e2e40
nop
mov eax, dword [0x1415ce958]
mov ecx, dword [0x1415ce95c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
not ecx
or ecx, 0xfe368b52
mov eax, ecx
not eax
and ecx, 0x967b912a
mov edx, eax
and edx, 0x1806485
imul edx, ecx
mov ecx, eax
and ecx, 0x491028
or eax, 0x967b912a
imul eax, ecx
add eax, edx
add eax, 0xe06450d0
cmp eax, 0x3c93de19
jb 0x1401e2ea0
jmp 0x1401e28d7
mov rsi, rcx
xor eax, eax
test al, al
jne 0x1401e2c63
jmp 0x1401e2c79