Function at 0x1401be500
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
movaps xmmword [rbp], xmm6
mov byte [rbp - 1], dl
mov rsi, rcx
mov ecx, dword [0x1415cb518]
mov edx, dword [0x1415cb51c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xc085e824
and ecx, 0x3f7a17db
or ecx, r9d
or eax, r8d
and r8d, 0xc085e824
and edx, 0x3f7a17db
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x42d443ed
and ecx, 0xbd2bbc12
imul ecx, edx
mov edx, eax
and edx, 0xbd2bbc12
or eax, 0xbd2bbc12
imul eax, edx
add eax, ecx
add eax, 0x209370ac
mov ecx, eax
xor ecx, 0x57352cf7
or eax, 0xa8cad308
and eax, ecx
cmp eax, 0xf1ea144f
je 0x1401be646
mov eax, dword [0x1415cb520]
xor edx, edx
div dword [0x1415cb524]
mov ecx, eax
add ecx, 0x58b7bbbf
not ecx
or ecx, 0xf22fa3c
mov eax, ecx
not eax
xor ecx, 0x9357b056
add ecx, eax
and eax, 0x90550042
sub ecx, eax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r10, rsp
cmp ecx, 0x361edb9e
jae 0x1401be699
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
jmp 0x1401be5ad
mov qword [rbp - 0x48], rdx
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r11, rsp
mov eax, dword [0x1415cb528]
mov ecx, dword [0x1415cb52c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
and eax, 0xc02f1c20
cmp eax, 0x6eda39a9
jne 0x1401be70e
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
lea rax, [rsi + 0x90]
mov qword [rbp - 0x10], rax
nop dword [rax]
mov ecx, dword [0x1415cb530]
sub ecx, dword [0x1415cb534]
mov eax, ecx
not eax
or eax, 0xa1b6b5d
or ecx, 0xf5e494a2
and ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x4b3524d2
and eax, 0xb4cadb2d
imul eax, edx
mov edx, ecx
and edx, 0xb4cadb2d
or ecx, 0xb4cadb2d
imul ecx, edx
add ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x84528bc3
and eax, 0x7bad743c
imul eax, edx
mov edx, ecx
and edx, 0x7bad743c
or ecx, 0x7bad743c
imul ecx, edx
add ecx, eax
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
cmp ecx, 0x8679886c
ja 0x1401be720
cmp qword [rsi + 0x90], 0
mov qword [rbp - 0x18], rsi
jne 0x1401bec80
mov qword [rbp - 0x58], rdx
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x30], r10
mov qword [rbp - 0x68], r9
mov qword [rbp - 0x38], r8
mov eax, dword [0x1415cb538]
add eax, dword [0x1415cb53c]
mov ecx, 0x976859ff
imul rcx, rax
shr rcx, 0x3d
imul eax, ecx, 0x7e137ec4
cmp eax, 0xbbd263f1
je 0x1401be89e
mov eax, dword [0x1415cb540]
mov ecx, dword [0x1415cb544]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
or ecx, 0x9552e55d
add eax, ecx
inc eax
shr eax, 2
imul rsi, rax, 0x2a3d91f9
shr rsi, 0x3a
mov qword [r12], 0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, r12
call fcn.14021c4c0
add rsp, 0x20
cmp esi, 0xfe21d819
jne 0x1401be8bf
mov qword [r12], 0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, r12
call fcn.14021c4c0
add rsp, 0x20
jmp 0x1401be833
mov r11d, eax
mov eax, 0xb28712d5
nop word [rax + rax]
mov ecx, dword [0x1415cb548]
mov edx, dword [0x1415cb54c]
add ecx, edx
add ecx, 0xf106b7d1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xaf0818fe
cmp ecx, 0x3c18b847
jb 0x1401be8d0
test r11d, r11d
mov rsi, qword [rbp - 0x18]
je 0x1401be910
xor r9d, r9d
jmp 0x1401beae7
mov eax, dword [0x1415cb550]
or eax, dword [0x1415cb554]
imul eax, eax, 0x69daf55
add eax, 0xb0e4b692
cmp eax, 0x1ed7b25f
jb 0x1401be910
mov r12, qword [r12]
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x70]
nop dword [rax]
mov ecx, dword [0x1415cb558]
sub ecx, dword [0x1415cb55c]
mov edx, ecx
not edx
or edx, 0x2826d38
add ecx, edx
inc ecx
or ecx, 0xf869178c
mov edx, ecx
and edx, 0x769184b2
xor ecx, 0xf69184b2
lea ecx, [rcx + rdx*2]
cmp ecx, 0xb159f0b1
jb 0x1401be950
test al, 1
je 0x1401bea33
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401be9a0
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x78]
xor eax, eax
test al, al
jne 0x1401be9c0
mov eax, dword [0x1415d3954]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov r8, qword [rax + 0x80]
nop
mov eax, dword [0x1415cb568]
sub eax, dword [0x1415cb56c]
mov edx, eax
not edx
mov r9d, eax
and r9d, 0x1f4ef384
and edx, 0xe0b10c7b
imul edx, r9d
mov r9d, eax
and r9d, 0xe0b10c7b
or eax, 0xe0b10c7b
imul eax, r9d
add eax, edx
shr eax, 2
imul rax, rax, 0x24e60e25
shr rax, 0x3a
and eax, 1
cmp eax, 0xcfe7e33
ja 0x1401be9e0
jmp 0x1401beab0
mov dword [rbp - 0x20], r11d
nop word [rax + rax]
mov eax, dword [0x1415cb560]
xor edx, edx
div dword [0x1415cb564]
imul rax, rax, 0x28d028a9
shr rax, 0x3d
add eax, 0xe663fd79
cmp eax, 0x7dac109c
jb 0x1401bea40
xorps xmm0, xmm0
movups xmmword [r13], xmm0
sub rsp, 0x20
mov edx, 0x10
mov rcx, r13
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
mov rcx, qword [r13]
mov r8, qword [r13 + 8]
mov eax, dword [0x1415d3954]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov byte [rax + 0x70], 1
mov qword [rax + 0x80], r8
mov r11d, dword [rbp - 0x20]
movabs rax, 0x8579685a0d54aeaf
mov rdx, rcx
sub rdx, rax
add rax, rdx
inc rax
mov edx, dword [0x1415d3954]
mov r9, qword gs:[0x58]
mov rdx, qword [r9 + rdx*8]
mov qword [rdx + 0x78], rax
lea r9, [0x14159f0d0]
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x28], rbx
mov eax, dword [0x1415cb570]
xor edx, edx
div dword [0x1415cb574]
imul rdx, rax, 0xe75ed7d
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
or eax, 0x968341d2
cmp eax, 0x8939e96d
jb 0x1401beb90
mov eax, dword [0x1415cb578]
mov edx, dword [0x1415cb57c]
mov r10d, eax
and r10d, edx
or eax, edx
add eax, r10d
mov edx, eax
xor edx, 0x40021228
and edx, eax
not edx
or edx, 0x7e82d94
and edx, 0xffee7fbc
mov qword [rsi + 0x90], r9
xorps xmm0, xmm0
movups xmmword [rsi + 0x98], xmm0
mov qword [rsi + 0xa8], 0
mov qword [rsi + 0xb0], rcx
mov qword [rsi + 0xb8], r8
mov qword [rsi + 0xc0], r12
mov qword [rsi + 0xc8], 0
cmp edx, 0xf1f85ed9
jne 0x1401bebd1
mov qword [rsi + 0x90], r9
xorps xmm0, xmm0
movups xmmword [rsi + 0x98], xmm0
mov qword [rsi + 0xa8], 0
mov qword [rsi + 0xb0], rcx
mov qword [rsi + 0xb8], r8
mov qword [rsi + 0xc0], r12
mov qword [rsi + 0xc8], 0
jmp 0x1401beb1d
test r11d, r11d
je 0x1401bed77
mov eax, 0xab919e61
nop
mov ecx, dword [0x1415cb580]
add ecx, dword [0x1415cb584]
mov edx, ecx
not edx
and edx, 0xd873a678
mov r8d, ecx
and r8d, 0x278c5987
imul r8d, edx
mov edx, ecx
and edx, 0xd873a678
or ecx, 0xd873a678
imul ecx, edx
add ecx, r8d
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x7cc84020
cmp ecx, 0x2e58caa1
jb 0x1401bebe0
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov rsi, qword [rbp - 0x18]
nop dword [rax]
mov ecx, dword [0x1415cb588]
mov edx, dword [0x1415cb58c]
mov r8d, ecx
not r8d
and ecx, edx
not edx
or edx, r8d
not ecx
and ecx, edx
not ecx
and ecx, 0x4800100
cmp ecx, 0x6bc2dde5
ja 0x1401bec40
test rax, rax
je 0x1401bfc7f
nop word cs:[rax + rax]
mov eax, dword [str.Vy_PO]
xor edx, edx
div dword [0x1415cb61c]
mov ecx, eax
xor ecx, 0x848aa876
and eax, 0x7b755789
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa51194f9
and ecx, 0x5aee6b06
imul ecx, edx
mov edx, eax
and edx, 0x5aee6b06
or eax, 0x5aee6b06
imul eax, edx
add eax, ecx
not eax
or eax, 0x3ad6568a
add eax, 0x2c66aad5
jae 0x1401bec80
nop word cs:[rax + rax]
mov eax, dword [0x1415cb620]
xor edx, edx
div dword [0x1415cb624]
mov ecx, eax
and ecx, 0x1d1bc34c
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x9d1bc34c
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xe1ef94b9
and ecx, 0x1e106b46
imul ecx, edx
mov edx, eax
and edx, 0x1e106b46
or eax, 0x1e106b46
imul eax, edx
add eax, ecx
cmp eax, 0x143f2837
je 0x1401bece0
mov rdi, qword [rsi + 0xc0]
movabs rbx, 0x8000000000000000
mov eax, dword [0x1415cb628]
mov ecx, dword [0x1415cb62c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
add eax, 0xdde3af81
xor eax, 0xbcf2c19
mov ecx, 0x8a5ae825
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xaac4092a
jbe 0x1401bed86
jmp 0x1401bedcc
xor eax, eax
test al, al
je 0x1401bf488
jmp 0x1401bf4dc
mov eax, dword [0x1415cb630]
or eax, dword [0x1415cb634]
mov ecx, eax
and ecx, 0xdfbc39d
add ecx, ecx
neg ecx
lea esi, [rax + rcx]
add esi, 0xdfbc39d
and esi, 0xa48245bc
add esi, 0xcdb002e2
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
add rsp, 0x20
cmp esi, 0x26930dd3
jae 0x1401bedde
sub rsp, 0x20
mov rcx, rdi
call fcn.14021c500
add rsp, 0x20
jmp 0x1401bed86
mov rsi, qword [rbp - 0x18]
cmp qword [rsi + 0x18], rbx
je 0x1401beef4
mov eax, dword [0x1415cb638]
xor edx, edx
div dword [0x1415cb63c]
xor eax, eax
mov rcx, qword [rbp - 0x10]
test al, al
jne 0x1401bee00
nop word cs:[rax + rax]
mov eax, dword [0x1415cb640]
or eax, dword [0x1415cb644]
imul eax, eax, 0xd70ded9b
or eax, 0x6f65efba
cmp eax, 0xab370061
jb 0x1401bee10
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x28]
sub rsp, 0x20
call fcn.1401ec030
add rsp, 0x20
test eax, eax
je 0x1401bf3cd
movss xmm1, dword [0x140259280]
subss xmm1, xmm0
nop word [rax + rax]
mov eax, dword [0x1415cb660]
add eax, dword [0x1415cb664]
mov ecx, eax
not ecx
or ecx, 0x8600483b
or eax, 0x79ffb7c4
and eax, ecx
add eax, 0xcea79a85
imul rax, rax, 0x7d001363
shr rax, 0x3e
cmp eax, 0xc9aee240
je 0x1401bee60
nop word cs:[rax + rax]
mov eax, dword [0x1415cb668]
xor eax, dword [0x1415cb66c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf9e56a56
and ecx, 0x61a95a9
imul ecx, edx
mov edx, eax
and edx, 0x61a95a9
or eax, 0x61a95a9
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0xb7a5a5b9
add eax, ecx
inc eax
not eax
or eax, 0x60268cf8
cmp eax, 0x6ca702f7
je 0x1401beea0
movss dword [rsi + 0x30], xmm1
sub rsp, 0x20
mov rcx, rsi
movzx edx, byte [rbp - 1]
call fcn.1401c3900
add rsp, 0x20
mov r14, qword [rsi + 8]
mov rdi, qword [rsi + 0x10]
imul r15, rdi, 0x70
test rdi, rdi
je 0x1401bf070
lea r12, [r14 + r15]
movss xmm6, dword [0x140259280]
mov r13, r14
jmp 0x1401bef3d
add r13, 0x70
cmp r13, r12
je 0x1401bf070
cmp qword [r13 + 0x48], rbx
je 0x1401bef30
nop word cs:[rax + rax]
mov eax, dword [0x1415cb6d0]
or eax, dword [0x1415cb6d4]
add eax, 0x4255f581
mov ecx, eax
not ecx
and ecx, 0x8943bbcd
mov edx, eax
and edx, 0x76bc4432
imul edx, ecx
mov ecx, eax
and ecx, 0x8943bbcd
or eax, 0x8943bbcd
imul eax, ecx
add eax, edx
add eax, 0xfa249451
cmp eax, 0xb4d106e5
ja 0x1401bef50
mov rdx, qword [r13 + 0x50]
mov r8, qword [r13 + 0x58]
sub rsp, 0x20
mov rcx, qword [rbp - 0x10]
call fcn.1401ec030
add rsp, 0x20
nop dword [rax]
mov ecx, dword [0x1415cb6d8]
add ecx, dword [0x1415cb6dc]
xor ecx, 0x604205a6
imul rcx, rcx, 0x279333b1
shr rcx, 0x3a
or ecx, 0xcd2325de
cmp ecx, 0xc74f57b
jb 0x1401befb0
test eax, eax
je 0x1401bf322
nop word cs:[rax + rax]
mov eax, dword [0x1415cb6f0]
or eax, dword [0x1415cb6f4]
or eax, 0x40f2009a
and eax, 0xc8f7a0bb
cmp eax, 0xbfa71a40
je 0x1401beff0
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [r13 + 0x60], xmm1
nop word [rax + rax]
mov eax, dword [0x1415cb6f8]
sub eax, dword [0x1415cb6fc]
mov ecx, eax
xor ecx, 0xac4f973b
and ecx, eax
mov eax, ecx
not eax
or eax, 0xcc34a100
and eax, 0xdc3cf193
mov edx, ecx
and edx, 0x23830a0c
or edx, eax
xor edx, 0x9323ae83
and ecx, 0x30b5a10
or ecx, edx
cmp ecx, 0xc5e9e07b
je 0x1401bf020
jmp 0x1401bef30
mov eax, dword [0x1415cb670]
xor edx, edx
div dword [0x1415cb674]
mov ecx, eax
not ecx
or ecx, 0x990c387e
or eax, 0x5e1ae752
and eax, ecx
mov ecx, eax
xor ecx, 0x1005824
and ecx, eax
and ecx, 0xd71eff2e
cmp ecx, 0xb49242e4
je 0x1401bf070
cmp byte [rbp - 1], 0
je 0x1401bfc7f
mov eax, 0xf3145cbd
nop word cs:[rax + rax]
mov ecx, dword [0x1415cb678]
mov edx, dword [0x1415cb67c]
not ecx
not edx
or edx, ecx
not edx
add edx, 0x969b358b
or edx, 0xd26948c2
imul rdx, rax
shr rdx, 0x3d
cmp edx, 0xbddef9d3
ja 0x1401bf0c0
movzx eax, byte [rsi + 0x38]
nop word cs:[rax + rax]
mov ecx, dword [0x1415cb680]
mov edx, ecx
not edx
or edx, dword [0x1415cb684]
add ecx, edx
inc ecx
imul rcx, rcx, 0x6f10093b
shr rcx, 0x3e
or ecx, 0x710541d0
cmp ecx, 0xa95d9f11
ja 0x1401bf100
test al, al
jne 0x1401bfc7f
sub rsp, 0x20
mov rsi, qword [rbp - 0x48]
mov rcx, rsi
mov rdx, rdi
call fcn.1401e8340
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415cb688]
mov ecx, dword [0x1415cb68c]
add eax, ecx
add eax, 0xc4bfe626
or eax, 0xbe1bfa34
add eax, 0x9d837c69
cmp eax, 0x4e8b9ce
jb 0x1401bf150
mov rcx, qword [rsi]
mov rbx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
nop
test rdi, rdi
sete r9b
mov eax, dword [0x1415cb690]
xor edx, edx
div dword [0x1415cb694]
add eax, 0xbec0937c
mov edx, eax
xor edx, 0x3c5ef57e
xor eax, 0x40a00800
and eax, 0x60a4697c
mov r10d, edx
and r10d, 0x9f5b9683
imul r10d, eax
mov eax, edx
and eax, 0x60a4697c
or edx, 0x60a4697c
imul edx, eax
add edx, r10d
test r8, r8
sete al
cmp edx, 0xfafab693
ja 0x1401bf180
or r9b, al
jne 0x1401bf220
lea rax, [r8*8 - 8]
add r15, 0xffffffffffffff90
xor edx, edx
xor r8d, r8d
nop word cs:[rax + rax]
mov r9, qword [rbx + r8]
mov qword [r14 + rdx + 0x68], r9
cmp r15, rdx
je 0x1401bf220
lea r9, [r8 + 8]
add rdx, 0x70
cmp rax, r8
mov r8, r9
jne 0x1401bf200
nop
mov eax, dword [0x1415cb698]
add eax, dword [0x1415cb69c]
and eax, 0x839899e9
imul eax, eax, 0xa751e731
cmp eax, 0x8d91f7a0
je 0x1401bf220
test rcx, rcx
je 0x1401bfbd1
mov eax, dword [str.6w_aU]
mov ecx, dword [0x1415cb6a4]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x1deff21f
and eax, 0x184ad00b
sub ecx, eax
add ecx, 0x5a4ad9ab
xor ecx, 0x90e390a7
cmp ecx, 0x7d0cb07f
jae 0x1401bf290
mov rax, qword [0x1415d3918]
nop word cs:[rax + rax]
mov eax, dword [0x1415cb6a8]
sub eax, dword [0x1415cb6ac]
imul rax, rax, 0x204c18ab
shr rax, 0x36
mov ecx, eax
not ecx
or eax, 7
or ecx, 0x10
and ecx, eax
not ecx
and ecx, 0x8182917
mov rdi, qword [0x1415d3918]
cmp ecx, 0x8be8d596
je 0x1401bf290
mov eax, dword [0x1415cb6b0]
imul eax, dword [0x1415cb6b4]
shr eax, 2
imul rax, rax, 0x430dd0a3
shr rax, 0x3b
imul eax, eax, 0x916d6273
mov ecx, eax
not ecx
and ecx, 0xec4d7f1
mov edx, eax
and edx, 0xf13b280e
imul edx, ecx
mov ecx, eax
and ecx, 0xec4d7f1
or eax, 0xec4d7f1
imul eax, ecx
add eax, edx
cmp eax, 0x655126b9
jbe 0x1401bfb5c
jmp 0x1401bfbb9
mov eax, dword [0x1415cb6e0]
xor eax, dword [0x1415cb6e4]
or eax, 0x1c953661
xor eax, 0xb4906071
or eax, 0x4362898e
cmp eax, 0x5ca260d7
jae 0x1401bf346
ud2
xor eax, eax
nop dword [rax + rax]
ud2
mov eax, dword [0x1415cb648]
xor edx, edx
div dword [0x1415cb64c]
add eax, 0xb792cea7
mov ecx, eax
xor ecx, 0x3f7a0b0
and eax, 0x85f4f
add eax, eax
sub eax, ecx
and eax, 0x3d71264
cmp eax, 0x2298bb3b
ja 0x1401bf453
mov eax, dword [0x1415cb650]
xor edx, edx
div dword [0x1415cb654]
or eax, 0xd93312c5
mov ecx, eax
not ecx
or ecx, 0x7c9d101f
lea edx, [rax + rcx]
inc edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0xa82e9c70
mov r8d, edx
and r8d, 0x57d1638a
imul r8d, ecx
and edx, 0x280c9c75
or eax, 0xa82e9c75
imul eax, edx
add eax, r8d
ud2
ud2
mov eax, dword [0x1415cb590]
xor eax, dword [0x1415cb594]
mov ecx, eax
xor ecx, 0xf2002040
xor eax, 0xc45e08
and eax, 0xc65f8f
and ecx, 0xff39a070
or ecx, eax
imul rsi, rcx, 0x1157d96b
shr rsi, 0x3c
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
cmp esi, 0x56dfa04a
jbe 0x1401bf500
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
jmp 0x1401bf488
mov ecx, dword [0x1415cb598]
sub ecx, dword [0x1415cb59c]
imul rcx, rcx, 0x3eebd577
shr rcx, 0x3d
or ecx, 0xd5b95678
cmp ecx, 0xf9e28423
je 0x1401bf500
test rax, rax
je 0x1401bf724
mov ecx, dword [0x1415cb5a8]
sub ecx, dword [0x1415cb5ac]
imul ecx, ecx, 0x4cc42947
add ecx, 0x8042d721
mov edx, ecx
xor edx, 0x1a8ad4cc
or ecx, 0xe5752b33
and ecx, edx
cmp ecx, 0x59b71c77
jae 0x1401bf58d
movups xmm0, xmmword [0x14159f1fe]
movups xmmword [rax + 0xe], xmm0
movups xmm0, xmmword [0x14159f1f0]
movups xmmword [rax], xmm0
mov qword [r14], 0x1e
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 0x1e
movzx ecx, byte [0x1415d3950]
movups xmm0, xmmword [0x14159f1fe]
movups xmm1, xmmword [0x14159f1f0]
nop dword [rax + rax]
mov ecx, dword [0x1415cb5b0]
sub ecx, dword [0x1415cb5b4]
imul ecx, ecx, 0xe1a77b10
and ecx, 0x690acd70
add ecx, 0x1701bcf5
movups xmmword [rax + 0xe], xmm0
movups xmmword [rax], xmm1
mov qword [r14], 0x1e
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 0x1e
movzx edx, byte [0x1415d3950]
cmp ecx, 0xe48b43d7
ja 0x1401bf5a0
mov eax, dword [0x1415cb5b8]
xor eax, dword [0x1415cb5bc]
imul eax, eax, 0xa7b4fe34
cmp eax, 0xb9558807
jne 0x1401bf620
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415cb5c0]
or eax, dword [0x1415cb5c4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x36303b4f
and ecx, 0xc9cfc4b0
imul ecx, edx
mov edx, eax
and edx, 0xc9cfc4b0
or eax, 0xc9cfc4b0
imul eax, edx
lea esi, [rax + rcx]
add esi, 0x8145f302
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x9a611800
and eax, 0x659ee7f0
imul eax, ecx
mov ecx, esi
and ecx, 0x659ee7f2
or esi, 0x659ee7f2
imul esi, ecx
add esi, eax
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
cmp esi, 0xea1fa86e
ja 0x1401bf620
mov r12, rax
mov eax, dword [0x1415cb5c8]
xor edx, edx
div dword [0x1415cb5cc]
mov ecx, 0x97c467cd
mov rsi, qword [rbp - 0x18]
nop word [rax + rax]
mov eax, dword [0x1415cb5d0]
xor edx, edx
div dword [0x1415cb5d4]
or eax, 0xd4346b6f
imul rax, rcx
shr rax, 0x3c
mov edx, eax
xor edx, 0x82d71872
or eax, 0xd
and eax, edx
cmp eax, 0x8bf4882e
je 0x1401bf6c0
test r12, r12
je 0x1401bf754
mov eax, dword [0x1415cb5f0]
xor eax, dword [0x1415cb5f4]
or eax, 0xfb0b0bbf
imul eax, eax, 0x46df3388
xor eax, 0x2902ebc5
cmp eax, 0x27e10ca7
mov rbx, qword [rbp - 0x10]
jbe 0x1401bf7f1
jmp 0x1401bf832
ud2
mov eax, dword [0x1415cb5d8]
xor edx, edx
div dword [0x1415cb5dc]
mov ecx, eax
and ecx, 0x20c918
xor ecx, 0x204118
xor eax, 0x20500400
and eax, 0x20d70402
add eax, ecx
add eax, 0xdf0832e5
cmp eax, 0x4a2c225d
jae 0x1401bf78c
jmp 0x1401bf7b7
mov eax, dword [0x1415cb5e4]
xor eax, dword [0x1415cb5e0]
mov ecx, eax
and ecx, 0x5c29ad7a
xor eax, 0x5c29ad7a
lea eax, [rax + rcx*2]
imul eax, eax, 0xe2cea5f0
ud2
ud2
lea r8, [rsi + 0x18]
mov byte [r12 + 4], 0x30
mov dword [r12], 0x5f746f74
mov qword [rdi], 5
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], 5
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
mov r9, rdi
call fcn.14021c4e0
add rsp, 0x20
xor eax, eax
test al, al
je 0x1401bf86f
lea r8, [rsi + 0x18]
mov byte [r12 + 4], 0x30
mov dword [r12], 0x5f746f74
mov qword [rdi], 5
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], 5
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
mov r9, rdi
call fcn.1401e9650
add rsp, 0x20
jmp 0x1401bf7f1
sub rsp, 0x20
mov rcx, rsi
movzx edx, byte [rbp - 1]
call fcn.1401c3900
add rsp, 0x20
mov r8, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
nop dword [rax + rax]
mov ecx, dword [0x1415cb5f8]
and ecx, dword [0x1415cb5fc]
add ecx, 0x8405291c
xor ecx, 0x4b0a9cff
cmp ecx, 0xcce26f10
jb 0x1401bf890
test rax, rax
je 0x1401bebda
nop dword [rax]
mov ecx, dword [0x1415cb600]
sub ecx, dword [0x1415cb604]
mov edx, ecx
and edx, 0x290d9b73
add edx, edx
neg edx
add ecx, edx
add ecx, 0x290d9b73
mov edx, ecx
and edx, 0x31df7499
xor edx, 0x105d3418
and ecx, 0x105d3418
or ecx, edx
or ecx, 0xce208b66
cmp ecx, 0xd402d9ba
jb 0x1401bf8c0
add r8, 0x48
imul rax, rax, 0x70
mov rdx, 0xffffffffffffffff
xor ecx, ecx
lea r9, [0x1400bea50]
lea r10, [0x14159f228]
xor r11d, r11d
mov r12, qword [rbp - 0x68]
mov r15, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x50]
mov r13, qword [rbp - 0x30]
jmp 0x1401bf964
mov r8, qword [rbp - 0x20]
add r8, 0x70
mov rcx, qword [rbp - 0x78]
dec rcx
mov r11, qword [rbp - 0x70]
inc r11
mov rax, qword [rbp - 0x80]
add rax, 0xffffffffffffff90
je 0x1401bebda
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x70], r11
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x80], rax
inc rdx
mov eax, dword [0x1415cb608]
add eax, dword [0x1415cb60c]
mov ecx, eax
not ecx
or ecx, 0x48004100
or eax, 0x2022087
and eax, ecx
and eax, 0x4a026187
add eax, 0x2710799a
cmp eax, 0x14838961
mov qword [rbp - 0x40], rdx
jb 0x1401bfa9e
nop dword [rax]
mov eax, dword [0x1415cb610]
mov r14d, dword [0x1415cb614]
mov ecx, eax
xor ecx, r14d
not r14d
and r14d, eax
add r14d, r14d
sub r14d, ecx
add r14d, 0x595e4861
and r14d, 0xd02b10d3
mov qword [rdi], rdx
mov qword [r15], rdi
mov qword [r15 + 8], r9
mov qword [rsi], r10
mov qword [rsi + 8], 2
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 1
sub rsp, 0x20
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
mov rdx, rsi
call fcn.14021a500
add rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov qword [rcx], rdi
lea rax, [0x1400bea50]
mov qword [rcx + 8], rax
lea rax, [0x14159f250]
mov qword [r12], rax
mov qword [r12 + 8], 2
mov qword [r12 + 0x20], 0
mov qword [r12 + 0x10], rcx
mov qword [r12 + 0x18], 1
sub rsp, 0x20
mov rcx, r13
mov rdx, r12
call fcn.14008e840
mov rcx, rbx
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp - 0x20]
mov r9, r13
call fcn.14021c4e0
lea r10, [0x14159f228]
lea r9, [0x1400bea50]
mov rdx, qword [rbp - 0x40]
add rsp, 0x20
cmp r14d, 0xe0d28e3c
jne 0x1401bf940
mov qword [rdi], rdx
mov qword [r15], rdi
mov qword [r15 + 8], r9
mov qword [rsi], r10
mov qword [rsi + 8], 2
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 1
sub rsp, 0x20
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
mov rdx, rsi
call fcn.14008e840
add rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov qword [rcx], rdi
lea rax, [0x1400bea50]
mov qword [rcx + 8], rax
lea rax, [0x14159f250]
mov qword [r12], rax
mov qword [r12 + 8], 2
mov qword [r12 + 0x20], 0
mov qword [r12 + 0x10], rcx
mov qword [r12 + 0x18], 1
sub rsp, 0x20
mov r14, qword [rbp - 0x30]
mov rcx, r14
mov rdx, r12
call fcn.14008e840
mov rcx, rbx
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp - 0x20]
mov r9, r14
call fcn.1401e9650
lea r10, [0x14159f228]
lea r9, [0x1400bea50]
mov rdx, qword [rbp - 0x40]
add rsp, 0x20
jmp 0x1401bf9b0
mov eax, dword [0x1415cb6b8]
and eax, dword [0x1415cb6bc]
not eax
or eax, 0x26fc13bb
mov ecx, eax
not ecx
and eax, 0xf75f8ab7
mov edx, ecx
and edx, 0x8006440
imul edx, eax
mov eax, ecx
and eax, 0xd1038804
or ecx, 0xf75f8ab7
imul ecx, eax
add ecx, edx
imul esi, ecx, 0x648108d7
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xe46d4703
jbe 0x1401bfbd1
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401bfb5c
mov rax, qword [rbp - 0x18]
mov byte [rax + 0x38], 1
nop dword [rax]
mov eax, dword [0x1415cb6c0]
sub eax, dword [0x1415cb6c4]
mov ecx, eax
not ecx
or ecx, 0x5aa6158b
or eax, 0xa559ea74
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0x58365b9f
mov edx, eax
and edx, 0xa7c9a460
imul edx, ecx
mov ecx, eax
and ecx, 0x58365b9f
or eax, 0x58365b9f
imul eax, ecx
add eax, edx
xor eax, 0xa045e571
cmp eax, 0xd08cc45e
ja 0x1401bfbe0
mov eax, 0xb96df937
nop word cs:[rax + rax]
mov ecx, dword [0x1415cb6c8]
mov edx, dword [0x1415cb6cc]
not ecx
not edx
mov r8d, ecx
or r8d, edx
and edx, ecx
not edx
and edx, r8d
mov ecx, edx
not ecx
and ecx, 0x902c1de4
and edx, 0x6fd3e21b
sub edx, ecx
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0xd656c4c6
je 0x1401bfc40
movaps xmm6, xmmword [rbp]
lea rsp, [rbp + 0x18]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret