Function at 0x14011e0f0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
mov qword [rbp], r9
mov qword [rbp + 0x48], r8
mov qword [rbp + 0x30], rdx
mov eax, dword [0x140227e08]
xor eax, dword [0x140227e0c]
mov qword [rbp + 0x90], rcx
and eax, 0x1c0c1c2
add eax, 0x2165327f
cmp eax, 0x77cf0e79
jbe 0x14011e280
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x210
call fcn.1401516e0
sub rsp, rax
mov eax, 0x2b0
call fcn.1401516e0
sub rsp, rax
mov eax, 0x470
call fcn.1401516e0
sub rsp, rax
mov eax, 0x410
call fcn.1401516e0
sub rsp, rax
mov eax, 0x2d0
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
nop word [rax + rax]
mov eax, dword [0x140227e10]
xor edx, edx
div dword [0x140227e14]
imul rcx, rax, 0x7e199285
shr rcx, 0x3d
or ecx, 0x7d7c73be
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r9, rsp
mov eax, 0x210
call fcn.1401516e0
sub rsp, rax
mov rdx, rsp
mov eax, 0x2b0
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
mov eax, 0x470
call fcn.1401516e0
sub rsp, rax
mov r12, rsp
mov eax, 0x410
call fcn.1401516e0
sub rsp, rax
mov r10, rsp
mov eax, 0x2d0
call fcn.1401516e0
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x72e5a02c
jb 0x14011e280
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x38], rsi
mov qword [rbp - 0x10], r10
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x18], r15
mov qword [rbp - 8], rbx
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x38], r11
mov qword [rbp + 0x18], r9
mov qword [rbp - 0x48], r8
mov qword [rbp - 0x70], rdx
xor eax, eax
test al, al
jne 0x14011e52a
mov eax, dword [0x140227e18]
sub eax, dword [0x140227e1c]
mov ecx, eax
not ecx
and ecx, 0xff10bd96
mov edx, eax
and edx, 0xef4269
imul edx, ecx
mov ecx, eax
and ecx, 0xff10bd96
or eax, 0xff10bd96
imul eax, ecx
add eax, edx
imul rax, rax, 0x4f999345
shr rax, 0x3c
mov ecx, eax
and ecx, 0xfffffffd
xor eax, 0x2506da6d
lea ecx, [rax + rcx*2]
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rsi, rsp
cmp ecx, 0x92916e8a
jbe 0x14011e57d
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
jmp 0x14011e477
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x80], rdx
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov r9, qword [rbp + 0x30]
cmp byte [r9], 0
mov r12, qword [rbp + 0x90]
je 0x14011e69c
mov eax, dword [0x140227e28]
and eax, dword [0x140227e2c]
imul rax, rax, 0x5076e55b
shr rax, 0x3e
imul eax, eax, 0x30254a1a
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x12ab902a
and ecx, 0xad546fd4
imul ecx, edx
mov edx, eax
and edx, 0x2d546fd4
or eax, 0xad546fd4
imul eax, edx
add eax, ecx
cmp eax, 0xab9b62ed
jne 0x14011e650
mov dword [r8], 0
mov eax, dword [0x140227e30]
xor edx, edx
div dword [0x140227e34]
and eax, 0x1500a120
mov dword [r8], 0
cmp eax, 0xc2323755
je 0x14011e650
mov eax, dword [0x140227e38]
sub eax, dword [0x140227e3c]
and eax, 0x2add0e10
xor eax, 0x71469410
add eax, 0x2724ab42
cmp eax, 0xe5a0ad1
jae 0x14011fed3
jmp 0x14011ff2c
movzx eax, byte [r9 + 1]
nop word cs:[rax + rax]
mov ecx, dword [0x140227e20]
sub ecx, dword [0x140227e24]
mov edx, ecx
and edx, 0xebaec6bc
or ecx, 0xebaec6bc
add ecx, edx
cmp ecx, 0xbb384a5f
je 0x14011e6b0
test al, al
je 0x14011e953
mov eax, 0xa2874757
nop word cs:[rax + rax]
mov ecx, dword [0x140227ef8]
mov edx, dword [0x140227efc]
add ecx, edx
add ecx, 0x9b8104d1
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xf3f4169a
je 0x14011e6f0
mov rax, qword [r12 + 0xf8]
xor ecx, ecx
nop
test cl, cl
jne 0x14011e720
test rax, rax
je 0x14011e912
mov rbx, r9
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
mov rsi, r10
mov rdx, r10
call fcn.140150fc0
add rsp, 0x20
nop word [rax + rax]
mov ecx, dword [0x140227f00]
mov edx, dword [0x140227f04]
mov r8d, ecx
not r8d
and r8d, edx
not edx
and edx, ecx
sub edx, r8d
xor edx, 0x9c73ec4f
add edx, 0x6a48e6de
xor edx, 0x70c6260e
cmp edx, 0xa3f2a75b
ja 0x14011e750
test eax, eax
je 0x14011e842
mov eax, dword [0x140227f08]
xor edx, edx
div dword [0x140227f0c]
nop dword [rax]
mov eax, dword [0x140227f10]
xor edx, edx
div dword [0x140227f14]
and eax, 0x4ae47ccd
xor eax, 0x4260108d
add eax, 0x5ff232a9
cmp eax, 0xcb9477fd
ja 0x14011e7a0
mov r9, rbx
nop word [rax + rax]
mov eax, dword [0x140227f18]
add eax, dword [0x140227f1c]
mov ecx, eax
not ecx
and ecx, 0xc4368ece
mov edx, eax
and edx, 0x3bc97131
imul edx, ecx
mov ecx, eax
and ecx, 0xc4368ece
or eax, 0xc4368ece
imul eax, ecx
add eax, edx
shr eax, 2
imul rax, rax, 0x11621f61
shr rax, 0x3a
imul eax, eax, 0x539f93b4
cmp eax, 0x9f13230a
ja 0x14011e7d0
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [r12 + 0x140], xmm0
jmp 0x14011e912
mov eax, dword [0x140227f20]
xor edx, edx
div dword [0x140227f24]
or eax, 0xbefdffad
cmp eax, 0xd26b890
jne 0x14011e86a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x140227f28]
mov ecx, dword [0x140227f2c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and ecx, 0x8e2fa675
mov edx, eax
and edx, 0x71d0598a
imul edx, ecx
mov ecx, eax
and ecx, 0x8e2fa675
or eax, 0x8e2fa675
imul eax, ecx
add eax, edx
and eax, 0xf2ab019c
imul edi, eax, 0xa9502342
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xe8722300
je 0x14011e880
mov r9, rbx
nop dword [rax]
mov eax, dword [0x140227f30]
imul eax, dword [0x140227f34]
imul rcx, rax, 0x36b0893b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
or eax, 0xa07bd3c3
xor eax, 0x1c9dc935
cmp eax, 0xbcbfba6a
jb 0x14011e8e0
mov eax, 0x8c7469f3
nop word [rax + rax]
mov ecx, dword [0x140227f38]
mov edx, dword [0x140227f3c]
mov r8d, ecx
and r8d, edx
or ecx, edx
add ecx, r8d
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x5c9d53d3
or ecx, 0xfeb43a38
cmp ecx, 0xbe036733
je 0x14011e920
mov eax, dword [0x140227ed8]
xor edx, edx
div dword [0x140227edc]
nop word cs:[rax + rax]
mov eax, dword [0x140227ee0]
mov ecx, dword [0x140227ee4]
not eax
not ecx
and ecx, eax
not ecx
imul eax, ecx, 0xb01c8bf0
add eax, 0x97e0b09d
and eax, 0x775e030
cmp eax, 0x649fb6b7
je 0x14011e970
mov r8, qword [rbp + 0x100]
nop word cs:[rax + rax]
mov eax, dword [0x140227ee8]
xor eax, dword [0x140227eec]
add eax, 0xfd15a8d8
mov ecx, eax
and ecx, 0x7f5b7d78
or eax, 0x7f5b7d78
add eax, ecx
cmp eax, 0x30b21a1e
je 0x14011e9b0
movzx ecx, byte [r9 + 2]
nop dword [rax]
mov eax, dword [0x140227ef0]
xor edx, edx
div dword [0x140227ef4]
add eax, 0x49c1e387
not eax
and eax, 0xe1d14b14
cmp eax, 0x62125722
je 0x14011e9e0
test cl, cl
je 0x14011eaa0
mov eax, dword [0x140228ba8]
sub eax, dword [0x140228bac]
mov rcx, qword [rbp + 0x108]
mov qword [r12 + 0xe8], rcx
add eax, 0x705bf59a
or eax, 0x9d626640
cmp eax, 0x1213ecef
jne 0x14011ea40
mov qword [r12 + 0xf0], r8
nop dword [rax]
mov eax, dword [0x140228bb0]
xor edx, edx
div dword [0x140228bb4]
mov ecx, eax
not ecx
and ecx, 0x75e501bc
and eax, 0x8a1afe43
sub eax, ecx
imul rax, rax, 0x518bd257
shr rax, 0x3d
mov ecx, eax
not ecx
and ecx, 0xdde5d06a
mov edx, eax
and edx, 1
imul edx, ecx
mov ecx, eax
and ecx, 0xfffffffe
or eax, 0xdde5d06a
imul eax, ecx
add eax, edx
mov qword [r12 + 0xf0], r8
cmp eax, 0x6a44d98
jbe 0x14011ea40
nop word [rax + rax]
mov eax, dword [0x140227f40]
and eax, dword [0x140227f44]
or eax, 0xdf5d5adf
add eax, 0x4a90950d
cmp eax, 0xd1bb8e48
ja 0x14011eaa0
nop dword [rax]
mov eax, dword [0x140227f48]
mov ecx, dword [0x140227f4c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x342ac00c
and ecx, 0x343ac80e
and eax, 0x41c12460
or eax, ecx
mov ecx, eax
xor ecx, 0xca10614
xor eax, 0xc25401c0
and eax, 0xc25405c0
mov edx, ecx
and edx, 0x29896a3a
imul edx, eax
mov eax, ecx
and eax, 0x50528440
or ecx, 0xd25685c0
imul ecx, eax
add ecx, edx
cmp ecx, 0xac9ddd8e
je 0x14011eac0
movzx eax, byte [r9 + 3]
mov rcx, qword [r12 + 0xf8]
nop
mov edx, dword [0x140227f50]
mov r8d, dword [0x140227f54]
add edx, r8d
add edx, 0x3134ea7c
xor edx, 0xc4d70cc4
cmp edx, 0x64150569
jb 0x14011eb30
movabs rdi, 0x8000000000000000
test rcx, rcx
je 0x14011f409
mov rsi, qword [rcx + 0x10]
nop dword [rax + rax]
mov ecx, dword [0x140227f58]
and ecx, dword [0x140227f5c]
imul ecx, ecx, 0xab707327
add ecx, 0xa3fbf10d
cmp ecx, 0x9e4d75c9
ja 0x14011eb70
test eax, eax
je 0x14011f409
cmp eax, 1
je 0x14011ec60
mov ecx, 0xdae7a52d
nop word cs:[rax + rax]
mov eax, dword [0x140227f60]
xor edx, edx
div dword [0x140227f64]
add eax, 0xd4e3a0cd
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x4a4a255a
ja 0x14011ebb0
mov rax, qword [r12 + 0x80]
nop word [rax + rax]
mov ecx, dword [0x140227f68]
mov edx, dword [0x140227f6c]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
mov edx, ecx
or edx, 0x7d7a03f7
mov r8d, ecx
not r8d
and r8d, 0x84a008
mov r9d, edx
and r9d, 0x9b595c22
imul r9d, r8d
and edx, 0x64a6a3dd
or ecx, 0x7dfea3ff
imul ecx, edx
add ecx, r9d
cmp ecx, 0x24125c93
je 0x14011ebe0
cmp rax, rdi
jne 0x14011f409
nop word [rax + rax]
mov eax, dword [0x140227f70]
sub eax, dword [0x140227f74]
or eax, 0xa0b6fdb4
add eax, 0x743e51cf
mov ecx, eax
xor ecx, 0x36bead69
or eax, 0x49415286
and eax, ecx
cmp eax, 0xa7802933
ja 0x14011ec60
mov eax, dword [0x140227f78]
mov ecx, dword [0x140227f7c]
mov edx, eax
or edx, ecx
not edx
not eax
not ecx
and ecx, eax
or ecx, edx
not ecx
mov eax, ecx
and eax, 0x205341f0
add eax, eax
neg eax
add eax, ecx
add eax, 0x205341f0
mov ecx, eax
and ecx, 0x2cc15e9b
xor eax, 0x2cc15e9b
lea eax, [rax + rcx*2]
add eax, 0x61457450
cmp eax, 0x310d7576
jb 0x14011ed23
mov eax, dword [0x140227f80]
xor edx, edx
div dword [0x140227f84]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4536878
and ecx, 0x1bac9787
imul ecx, edx
mov edx, eax
and edx, 0x1bac9787
or eax, 0x1bac9787
imul eax, edx
add eax, ecx
add eax, 0x36296f70
or eax, 0xe9691eee
mov qword [r14], 0
cmp eax, 0x30904cb2
jae 0x14011ed2c
mov qword [r14], 0
jmp 0x14011ecd6
mov eax, dword [0x140227f88]
and eax, dword [0x140227f8c]
imul rax, rax, 0x2d5df045
shr rax, 0x3d
imul eax, eax, 0x2bf880c2
mov ecx, eax
not ecx
and ecx, 0xe2656467
mov edx, eax
and edx, 0x1d9a9b98
imul edx, ecx
mov ecx, eax
and ecx, 0x22656466
or eax, 0xe2656467
imul eax, ecx
add eax, edx
cmp eax, 0x84a365b6
jbe 0x14011ed8f
sub rsp, 0x20
mov rcx, rsi
mov edx, 8
mov r8, r14
call fcn.140151120
add rsp, 0x20
mov rdi, qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
nop word cs:[rax + rax]
mov eax, dword [0x140227f90]
xor edx, edx
div dword [0x140227f94]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x4bddb4ca
mov r8d, edx
and r8d, 0xadfb725a
and ecx, 0x10000925
imul ecx, r8d
and edx, 0x52048da5
or eax, 0x5bddbdef
imul eax, edx
lea ebx, [rax + rcx]
add ebx, 0x2381123
sub rsp, 0x20
mov rcx, rsi
mov edx, 8
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0xa6c814df
jb 0x14011eda0
test eax, eax
movabs rdi, 0x8000000000000000
je 0x14011f3fc
nop word cs:[rax + rax]
mov eax, dword [0x140227f98]
mov ecx, dword [0x140227f9c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0x4fd7508f
mov ecx, eax
and ecx, 0x41cc0f77
add ecx, ecx
sub eax, ecx
add eax, 0x41cc0f77
imul rax, rax, 0x2873ea05
shr rax, 0x3d
cmp eax, 0xe83ef20c
ja 0x14011ee20
mov r14, qword [r14]
nop word cs:[rax + rax]
mov eax, dword [0x140227fa0]
mov ecx, dword [0x140227fa4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
imul rax, rax, 0x3e524ed1
shr rax, 0x3d
xor eax, 0x99e2de0f
mov ecx, eax
and ecx, 0x208009
or ecx, 0x400400c0
xor ecx, 0x5835e1
and eax, 0x99824a07
or eax, ecx
cmp eax, 0x271c9573
jb 0x14011ee80
lea rax, [r14 + 1]
cmp rax, 2
jb 0x14011f409
nop word cs:[rax + rax]
mov eax, dword [0x140227fa8]
mov ecx, dword [0x140227fac]
mov edx, eax
not edx
and eax, ecx
not ecx
and ecx, edx
not eax
not ecx
and ecx, eax
mov eax, ecx
and eax, 0x1ba1343e
add eax, eax
neg eax
add eax, ecx
add eax, 0x9ba1343e
mov ecx, eax
not ecx
and ecx, 0x50495919
mov edx, eax
and edx, 0xafb6a6e6
imul edx, ecx
mov ecx, eax
and ecx, 0x50495919
or eax, 0x50495919
imul eax, ecx
add eax, edx
imul rax, rax, 0x15c9db19
shr rax, 0x3b
cmp eax, 0xed851425
je 0x14011eee0
mov dword [r13], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov rcx, r14
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
test eax, eax
jne 0x14011f058
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
nop dword [rax + rax]
mov eax, dword [0x140227fb0]
xor edx, edx
div dword [0x140227fb4]
add eax, 0x8f271b64
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xfa1c72f2
and edx, 0x5e38d0d
imul edx, r8d
mov r8d, eax
and r8d, 0x5e38d0d
or eax, 0x5e38d0d
imul eax, r8d
add eax, edx
cmp eax, 0x3091b9c4
je 0x14011ef90
movzx r8d, cx
or r8d, 0x80070000
nop word cs:[rax + rax]
mov eax, dword [0x140227fb8]
xor edx, edx
div dword [0x140227fbc]
mov edx, eax
and edx, 0x2b427ae9
mov r9d, edx
not r9d
and r9d, 0xf0b8120d
mov r10d, eax
and r10d, 0xb4268e0
imul r10d, r9d
and eax, 0x20001209
or edx, 0xf0b8120d
imul edx, eax
add edx, r10d
imul rdx, rdx, 0x247be435
shr rdx, 0x3d
test ecx, ecx
mov eax, r8d
cmovle eax, ecx
cmp edx, 0x82ffe393
je 0x14011eff0
cmp eax, 0x8007007a
jne 0x14011f39e
mov edi, dword [r13]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov rbx, rax
mov eax, dword [0x140227fc8]
xor edx, edx
div dword [0x140227fcc]
mov rax, rbx
inc rax
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x14011f090
nop word cs:[rax + rax]
mov ecx, dword [0x140227fd0]
imul ecx, dword [0x140227fd4]
or ecx, 0x826d5355
add ecx, 0x4b9d963a
xor ecx, 0x6f6c94fa
cmp ecx, 0xabd4ebce
ja 0x14011f0a0
cmp rax, 1
ja 0x14011f112
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x140227fd8]
and eax, dword [0x140227fdc]
add eax, 0xdd475ae2
xor eax, 0x7a2dd6b
cmp eax, 0xce42b4cc
je 0x14011f0f0
jmp 0x14011f39e
mov eax, dword [0x140227fe0]
xor edx, edx
div dword [0x140227fe4]
mov ecx, eax
not ecx
or ecx, 0xe04e1934
or eax, 0x492b68e6
and eax, ecx
not eax
or eax, 0x16908609
add eax, 0x1f76f361
cmp eax, 0xd279907e
jae 0x14011f15c
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rdi
call fcn.140150c10
add rsp, 0x20
mov r15, qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop word cs:[rax + rax]
mov r12d, dword [0x140227fe8]
mov eax, dword [0x140227fec]
mov ecx, eax
not ecx
mov edx, r12d
and edx, ecx
or ecx, r12d
not ecx
imul ecx, edx
mov edx, r12d
and edx, eax
or r12d, eax
imul r12d, edx
add r12d, ecx
not r12d
or r12d, 0x195b1c37
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rdi
call r15
add rsp, 0x20
cmp r12d, 0x77ebff35
je 0x14011f170
mov rsi, rax
test rax, rax
mov r12, qword [rbp + 0x90]
movabs rdi, 0x8000000000000000
je 0x14011f39e
mov r9d, dword [r13]
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov rcx, r14
mov edx, 1
mov r8, rsi
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x140227ff0]
mov edx, dword [0x140227ff4]
mov r8d, ecx
not r8d
mov r9d, edx
not r9d
mov r10d, r8d
and r10d, 0x82800305
and ecx, 0x28060ca8
or ecx, r10d
or r8d, r9d
and r9d, 0x82800305
and edx, 0x28060ca8
or edx, r9d
xor edx, ecx
not r8d
or r8d, edx
xor r8d, 0x2820128
or r8d, 0x5579f052
imul ecx, r8d, 0x197c765e
cmp ecx, 0x9db0f443
ja 0x14011f210
test eax, eax
je 0x14011f354
nop dword [rax + rax]
mov eax, dword [0x140228000]
xor edx, edx
div dword [0x140228004]
and eax, 0x2a36567
add eax, 0x1435c26a
or eax, 0xeeeed8b2
cmp eax, 0xba220a6a
jb 0x14011f280
mov rdx, qword [rsi]
sub rsp, 0x20
mov rbx, qword [rbp + 0x20]
mov rcx, rbx
call fcn.140150fe0
add rsp, 0x20
mov r15, qword [rbx]
mov ecx, 0xd8537c3d
nop word cs:[rax + rax]
mov eax, dword [0x140228008]
xor edx, edx
div dword [0x14022800c]
imul rax, rcx
shr rax, 0x3e
mov edx, eax
not edx
and edx, 0x25baa5e6
mov r8d, eax
and r8d, 1
imul r8d, edx
mov edx, eax
and edx, 0xfffffffe
or eax, 0x25baa5e6
imul eax, edx
add eax, r8d
cmp eax, 0xaea262b1
je 0x14011f2d0
cmp r15, rdi
jne 0x14011fd09
mov eax, dword [0x140228088]
xor edx, edx
div dword [0x14022808c]
add eax, 0x4ca944aa
mov ecx, eax
xor ecx, 0xa748a240
xor eax, 0x183315af
or ecx, 0x50a65dbd
and ecx, eax
cmp ecx, 0x5e121df0
jbe 0x140120951
jmp 0x140120994
sub rsp, 0x20
call fcn.14014f250
mov rcx, rsi
call fcn.1401278c0
add rsp, 0x20
mov eax, dword [0x140227ff8]
xor edx, edx
div dword [0x140227ffc]
lea ecx, [rax - 0x4f4afc15]
not ecx
or ecx, 0xdb85dfdd
add eax, ecx
add eax, 0xb0b503ec
mov ecx, eax
xor ecx, 0xed2ef492
and ecx, eax
cmp ecx, 0x1b3bd12a
jae 0x14011f369
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov ecx, 0x8501f5b9
nop word cs:[rax + rax]
mov edx, dword [0x140227fc4]
add edx, dword [0x140227fc0]
imul rdx, rcx
shr rdx, 0x3d
imul edx, edx, 0xbed2d4a
imul r8, rdx, 0x28c7c04b
shr r8, 0x20
sub edx, r8d
shr edx, 1
add edx, r8d
shr edx, 0x1f
cmp edx, 0x8455c98e
ja 0x14011f3c0
test eax, eax
jne 0x14011f409
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
mov eax, 0xade55ced
nop
mov ecx, dword [0x1402280c0]
xor ecx, dword [0x1402280c4]
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x4a1f247f
or ecx, 0x92664cb4
cmp ecx, 0x9886bd38
jb 0x14011f410
mov rbx, qword [rbp + 0x30]
movzx r11d, byte [rbx + 4]
nop word cs:[rax + rax]
mov eax, dword [0x1402280c8]
add eax, dword [0x1402280cc]
xor eax, 0xd154255
cmp eax, 0xbaaf07c9
je 0x14011f450
movzx esi, byte [rbx + 5]
movzx r8d, byte [rbx + 6]
movzx r9d, byte [rbx + 7]
test r9d, r9d
je 0x14011f4a0
cmp r9d, 1
je 0x14011f670
cmp qword [r12 + 0x40], 0
je 0x14011f670
nop word cs:[rax + rax]
mov eax, dword [0x1402280d0]
or eax, dword [0x1402280d4]
imul eax, eax, 0xd89b58cf
add eax, 0xb1ce7853
cmp eax, 0x354ac7cb
jb 0x14011f4a0
test r8d, r8d
je 0x14011f508
cmp r8d, 1
je 0x14011f670
mov rcx, qword [r12 + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x1402280d8]
xor edx, edx
div dword [0x1402280dc]
add eax, 0x56989ea
xor eax, 0xa269ece6
cmp eax, 0xee3c36a6
je 0x14011f4e0
test rcx, rcx
je 0x14011f670
test r11d, r11d
je 0x14011f5c1
cmp r11d, 1
je 0x14011f670
cmp r11d, 2
jne 0x14011fc99
nop word cs:[rax + rax]
mov eax, dword [str._.E_]
and eax, dword [0x1402280e4]
xor eax, 0x37922a49
add eax, 0x520743e6
cmp eax, 0xe2b1e399
ja 0x14011f530
nop dword [rax]
mov eax, dword [0x1402280e8]
mov ecx, dword [0x1402280ec]
add eax, ecx
add eax, 0xecdbe45c
mov ecx, eax
and ecx, 0x1038f135
add ecx, ecx
sub eax, ecx
add eax, 0x855c81ee
cmp eax, 0x1017ef17
jb 0x14011f550
mov rax, qword [r12 + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x1402280f0]
or ecx, dword [0x1402280f4]
imul ecx, ecx, 0xf1792d6
not ecx
or ecx, 0x2024210c
and ecx, 0x26753bce
cmp ecx, 0xb495deb4
ja 0x14011f590
cmp rax, rdi
je 0x14011f670
test esi, esi
je 0x140123f63
cmp esi, 1
je 0x14011f670
cmp esi, 2
jne 0x14011fec8
mov r10d, r9d
nop
mov eax, dword [0x1402280f8]
or eax, dword [0x1402280fc]
or eax, 0x67dfb7d3
add eax, 0x88c75322
cmp eax, 0x71d2d1c5
jb 0x14011f5e0
mov rax, qword [r12 + 0xb8]
mov r9d, r8d
nop dword [rax + rax]
mov ecx, dword [0x140228100]
mov edx, dword [0x140228104]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add ecx, edx
add ecx, 0x5ada7762
mov edx, ecx
and edx, 0x769729a7
add edx, edx
sub ecx, edx
add ecx, 0xf69729a7
and ecx, 0x8499fad2
cmp ecx, 0x679d31d8
ja 0x14011f610
cmp rax, rdi
mov r8d, r9d
mov r9d, r10d
jne 0x140123f63
nop word cs:[rax + rax]
mov eax, dword [0x140228108]
and eax, dword [0x14022810c]
mov ecx, eax
or ecx, 0x88420358
not eax
and eax, 0x70045083
and ecx, 0x8fea235c
sub ecx, eax
imul rax, rcx, 0x651852f7
shr rax, 0x3e
cmp eax, 0x9c725ae5
ja 0x14011f670
mov rcx, qword [r12 + 0xf8]
nop dword [rax]
mov eax, dword [0x140228110]
sub eax, dword [0x140228114]
not eax
or eax, 0x83010183
xor eax, 0x83401304
or eax, 0x5cbee478
cmp eax, 0xa39003c2
ja 0x14011f6b0
nop word cs:[rax + rax]
mov eax, dword [0x140228118]
xor edx, edx
div dword [0x14022811c]
or eax, 0xf1addffb
xor eax, 0xa614ad93
cmp eax, 0x1d4b4e6e
jb 0x14011f6e0
test rcx, rcx
je 0x140123f63
mov ebx, esi
mov r14, rdi
mov edi, r11d
mov dword [rbp + 8], r9d
mov dword [rbp + 0x48], r8d
mov eax, dword [0x140228120]
imul eax, dword [0x140228124]
mov r15, qword [rcx + 0x10]
and eax, 0x59b23768
mov ecx, eax
not ecx
or ecx, 0x11921068
or eax, 0x4824e785
and eax, ecx
cmp eax, 0xcb16785c
jne 0x14011f772
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r15
mov edx, 0x1a
mov r8, qword [rbp + 0x80]
mov r9d, 8
call qword [sym.imp.ntdll.dll_NtQueryInformationProcess]
add rsp, 0x30
mov r13, qword [rbp + 0x80]
nop dword [rax]
mov eax, dword [0x140228128]
mov ecx, dword [0x14022812c]
not eax
not ecx
or ecx, eax
mov esi, ecx
not esi
or esi, 0x2c32088
and ecx, 0x81108b42
and esi, 0x6aeb34a8
or esi, ecx
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r15
mov edx, 0x1a
mov r8, r13
mov r9d, 8
call fcn.140151030
add rsp, 0x30
cmp esi, 0x51682a59
je 0x14011f780
test eax, eax
js 0x140123f35
mov rdx, qword [rbp + 0x80]
mov r13d, edi
nop dword [rax + rax]
mov eax, dword [0x140228130]
xor eax, dword [0x140228134]
mov ecx, eax
not ecx
or ecx, 0x9cd8a145
add eax, ecx
inc eax
mov ecx, eax
or ecx, 0x800c588c
and ecx, 0xb82cfc8d
or eax, 0xbb3efe8f
add eax, ecx
cmp eax, 0x3ac96df6
jb 0x14011f7f0
mov rdi, qword [rdx]
nop dword [rax]
mov eax, dword [0x140228138]
sub eax, dword [0x14022813c]
lea ecx, [rax - 0x41f73440]
not ecx
or ecx, 0x60f53e26
add eax, ecx
add eax, 0xfdd28345
cmp eax, 0x23ae6889
jb 0x14011f830
test rdi, rdi
mov dword [rbp + 0x78], ebx
mov qword [rbp + 0x80], r15
je 0x14011fb90
mov dword [rbp + 0x68], r13d
mov eax, dword [0x140228650]
mov ecx, dword [0x140228654]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0x95c626a3
or ecx, 0x1822ef61
imul rax, rcx, 0x4d8ced23
shr rax, 0x3e
cmp eax, 0xe279fcf0
mov r14, qword [rbp - 0x68]
jne 0x14011f8cf
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r15
mov rdx, rdi
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov esi, 0xada52a6d
mov r13, rdi
nop word [rax + rax]
mov eax, dword [str.2_KW7]
mov ecx, dword [0x14022865c]
lea edi, [rax + rcx]
add edi, 0x3d51e631
mov eax, edi
and eax, 0x797c2c70
add eax, eax
sub edi, eax
add edi, 0xf97c2c70
shr edi, 1
imul rdi, rsi
shr rdi, 0x3e
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r15
mov rdx, r13
mov r8, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp edi, 0x904ec79
ja 0x14011f8e0
mov ecx, eax
mov eax, dword [0x140228660]
xor r8d, r8d
xor edx, edx
div dword [0x140228664]
nop word cs:[rax + rax]
test r8b, r8b
jne 0x14011f960
test ecx, ecx
movabs rdi, 0x8000000000000000
je 0x14011fcaa
mov eax, 0xbdedf11f
nop dword [rax]
mov ecx, dword [0x140228670]
imul ecx, dword [0x140228674]
imul rcx, rax
shr rcx, 0x3d
imul ecx, ecx, 0x4c80db1d
add ecx, 0x5f6eb585
cmp ecx, 0xe04ff52d
ja 0x14011f980
mov edx, dword [r14 + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r15
mov rsi, qword [rbp - 0x60]
mov r8, rsi
call fcn.140151070
add rsp, 0x30
test eax, eax
je 0x14011fcd4
mov r8d, dword [rbp + 0x48]
mov r9d, dword [rbp + 8]
nop word cs:[rax + rax]
mov eax, dword [0x140228688]
mov ecx, dword [0x14022868c]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not ecx
and ecx, eax
xor ecx, 0x278ec6b4
add ecx, 0x844e20d8
cmp ecx, 0x488f9b5a
jb 0x14011f9f0
nop
mov eax, dword [0x140228690]
xor edx, edx
div dword [0x140228694]
not eax
or eax, 0x42eb41f0
mov ecx, eax
not ecx
and eax, 0x6090481
mov edx, ecx
and edx, 0x9148004
or edx, eax
xor edx, 0xa918405
and ecx, 0xc108004
or ecx, edx
or ecx, 0xf0203b7a
cmp ecx, 0x3edfc049
je 0x14011fa20
movzx eax, word [rsi + 0x24]
mov qword [rbp + 0x70], rax
mov eax, dword [rsi + 0x28]
mov qword [rbp + 0x50], rax
lea r13, [r12 + 0x30]
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x14011fa80
mov eax, dword [rsi + 0x48]
mov qword [rbp + 0x60], rax
test r9d, r9d
je 0x140125147
movzx ebx, word [rsi + 0x40]
mov r15d, dword [rsi + 0x44]
cmp r9d, 1
je 0x14011fb49
cmp r9d, 2
jne 0x14011fcea
mov eax, dword [0x1402286a0]
xor eax, dword [0x1402286a4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x96b4b161
and ecx, 0x694b4e9e
imul ecx, edx
mov edx, eax
and edx, 0x694b4e9e
or eax, 0x694b4e9e
imul eax, edx
add eax, ecx
xor eax, 0xccba103b
add eax, 0xed78cfa
cmp eax, 0x9c13b9d3
ja 0x14011fab0
mov rcx, qword [r12 + 0x40]
mov r8d, 0x9497b063
nop
mov eax, dword [0x1402286a8]
xor edx, edx
div dword [0x1402286ac]
mov edx, eax
not edx
or edx, 0x9832f181
add eax, edx
inc eax
mov edx, eax
not edx
and edx, 0xa6685d9f
and eax, 0x5997a260
sub eax, edx
imul rax, r8
shr rax, 0x3e
cmp eax, 0x4645fb3f
ja 0x14011fb00
test rcx, rcx
mov r8d, dword [rbp + 0x48]
jne 0x140125147
mov eax, dword [0x14022cb70]
cmp eax, 4
je 0x1401245d6
mov eax, dword [0x1402286b0]
xor eax, dword [0x1402286b4]
xor eax, 0x73599718
add eax, 0x47cfd6e3
imul rax, rax, 0x5ecae607
shr rax, 0x3d
cmp eax, 0x8ce7b4b8
jbe 0x140124571
jmp 0x140124584
mov eax, dword [0x140228140]
xor edx, edx
div dword [0x140228144]
or eax, 0x8dbf5f27
mov ecx, eax
xor ecx, 0xdf063768
add ecx, eax
and eax, 0x20f9c897
sub ecx, eax
cmp ecx, 0x3d237b29
jb 0x14011fb90
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r15
xor edx, edx
mov r14, qword [rbp + 0x40]
mov r8, r14
mov r9d, 0x30
call qword [sym.imp.ntdll.dll_NtQueryInformationProcess]
add rsp, 0x30
test eax, eax
js 0x14011fc10
mov qword [rbp + 0x10], rdi
mov rsi, qword [r14 + 8]
mov rdi, qword [r14 + 0x28]
xor eax, eax
test al, al
je 0x140120b10
jmp 0x140120b3a
mov eax, dword [0x140228148]
mov ecx, dword [0x14022814c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
or eax, 0x62ac0938
and ecx, 0x89008005
and eax, 0x62bd2fb8
sub eax, ecx
xor eax, 0xfb743814
cmp eax, 0x5bec7a5d
ja 0x14011fc10
movabs r14, 0x8000000000000000
nop
mov eax, dword [0x140228150]
sub eax, dword [0x140228154]
or eax, 0xab18e94d
add eax, 0xfa66ff4c
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa9ae3698
and ecx, 0x56510162
imul ecx, edx
mov edx, eax
and edx, 0x5651c963
or eax, 0x5651c963
imul eax, edx
add eax, ecx
cmp eax, 0x192b4915
jb 0x14011fc50
jmp 0x140123f35
mov eax, 0xffffffff
add eax, 0x92098874
jae 0x14011fc99
jmp 0x140120b0e
mov r14, rdi
mov eax, dword [0x140228678]
sub eax, dword [0x14022867c]
and eax, 0x1b014086
imul eax, eax, 0x573e50c9
cmp eax, 0x71597497
jae 0x140123ec9
jmp 0x140123f25
mov r14, rdi
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x140123f35
mov eax, dword [0x140228698]
xor edx, edx
div dword [0x14022869c]
add eax, 0xfbb8d38b
cmp eax, 0x651fb873
jb 0x14011fcea
jmp 0x140120b0e
mov r8, qword [rbp + 0x20]
mov eax, dword [0x140228010]
mov ecx, dword [0x140228014]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and eax, 0x5bb79eb6
mov edx, ecx
and edx, 0xa4486149
imul edx, eax
mov eax, ecx
and eax, 0x5bb79eb6
or ecx, 0x5bb79eb6
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0x94fed878
cmp eax, 0xa9ea96b3
ja 0x14011fd0d
mov r12, qword [r8 + 8]
mov r13, qword [r8 + 0x10]
mov eax, dword [0x140228018]
and eax, dword [0x14022801c]
mov ecx, eax
or ecx, 0x8520540
not eax
or eax, 0x208c023
and eax, 0x320ce027
and ecx, 0x8720540
sub ecx, eax
cmp ecx, 0xbcc450a6
jb 0x14011fd5a
mov rax, qword [rbp + 0x90]
mov rax, qword [rax + 0x80]
shl rax, 1
test rax, rax
je 0x14011fe76
mov qword [rbp + 0x78], r14
mov rax, qword [rbp + 0x90]
mov rbx, qword [rax + 0x88]
mov r14, qword [0x14022cb48]
mov eax, dword [0x140228024]
xor eax, dword [0x140228020]
mov edx, 0xc1533931
imul rdx, rax
shr rdx, 0x3f
mov eax, edx
add eax, eax
neg eax
add eax, edx
add eax, 0xed0daf1f
imul rax, rax, 0x22ebaa13
shr rax, 0x3d
cmp eax, 0xe230c331
jne 0x14011fe0b
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov edi, dword [0x140228028]
sub edi, dword [0x14022802c]
mov eax, 0x9ea88d8b
imul rdi, rax
shr rdi, 0x3d
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x4b225cbf
je 0x14011fe0b
mov r14, qword [rbp + 0x78]
mov eax, dword [0x140228030]
sub eax, dword [0x140228034]
add eax, 0xacc5379e
xor eax, 0xc29479ca
mov ecx, eax
and ecx, 0x2c4667fc
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x2c4667fc
cmp eax, 0x3306c167
ja 0x14011fe46
mov eax, dword [0x140228038]
mov ecx, dword [0x14022803c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul rax, rax, 0x74bb648d
shr rax, 0x3e
add eax, 0xb8ae3e87
cmp eax, 0x4a10512a
mov rdi, qword [rbp + 0x90]
jae 0x140120682
jmp 0x1401206c2
xor eax, eax
test al, al
jne 0x14011feca
jmp 0x140120b0e
mov eax, dword [0x140227e40]
sub eax, dword [0x140227e44]
mov ecx, eax
not ecx
or ecx, 0x6ca9f34f
add eax, ecx
inc eax
mov ecx, eax
xor ecx, 0x2cc146c2
xor eax, 0x813e0105
and eax, 0x913e013d
and ecx, 0x6ec1fec2
sub ecx, eax
mov dword [r8 + 4], 0
mov qword [rdi], 0
mov qword [r15], 0
mov qword [rbx], 0
cmp ecx, 0x698b3004
jae 0x14011ff4b
mov dword [r8 + 4], 0
mov qword [rdi], 0
mov qword [r15], 0
mov qword [rbx], 0
jmp 0x14011fed3
mov eax, dword [0x140227e48]
mov ecx, dword [0x140227e4c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0x60765b04
shr eax, 2
imul rax, rax, 0x5112beb3
shr rax, 0x3c
cmp eax, 0x85a84d7f
jbe 0x14011ff87
mov qword [r11], 0
mov qword [rsi], 0
mov qword [rbp + 0x10], r10
nop dword [rax + rax]
mov eax, dword [0x140227e50]
or eax, dword [0x140227e54]
imul eax, eax, 0x24b23bb
add eax, 0x9de84496
mov ecx, eax
not ecx
and ecx, 0xd9cc690e
and eax, 0x263396f1
sub eax, ecx
mov qword [r11], 0
mov qword [rsi], 0
cmp eax, 0x95ca1cf3
ja 0x14011ff90
mov rax, qword [r12 + 0xf8]
test rax, rax
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x78], r11
je 0x14012019e
mov ecx, 0x90855067
nop dword [rax + rax]
mov edx, dword [0x140227e58]
mov r9d, dword [0x140227e5c]
mov r10d, edx
not r10d
or edx, r9d
not r9d
or r9d, r10d
and r9d, edx
imul r9, rcx
shr r9, 0x3e
imul edx, r9d, 0xa67ebc04
cmp edx, 0x828f15cc
je 0x14011fff0
mov rcx, qword [rax + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rdx, r8
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x140227e60]
sub ecx, dword [0x140227e64]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xd4bbd6c7
and edx, 0x2b442938
imul edx, r8d
mov r8d, ecx
and r8d, 0x2b442938
or ecx, 0x2b442938
imul ecx, r8d
add ecx, edx
xor ecx, 0xfcb9c49e
add ecx, 0x5d9162ff
cmp ecx, 0x80dfcd68
jb 0x140120050
test eax, eax
mov r11, qword [rbp + 0x78]
jne 0x14012019e
mov eax, dword [0x140227e68]
mov ecx, dword [0x140227e6c]
add eax, ecx
add eax, 0xb1dbdd8
shr eax, 3
imul rax, rax, 0x1055b851
shr rax, 0x36
imul eax, eax, 0x9c9a8c66
cmp eax, 0xf617270c
je 0x140120151
mov r14d, dword [0x140227e70]
imul r14d, dword [0x140227e74]
mov eax, r14d
xor eax, 0xdf486177
or r14d, 0x20b79e88
and r14d, eax
mov eax, r14d
not eax
and eax, 0xbc6efbb
mov ecx, r14d
and ecx, 0xf4391044
imul ecx, eax
mov eax, r14d
and eax, 0xbc6efbb
or r14d, 0xbc6efbb
imul r14d, eax
add r14d, ecx
mov eax, r14d
xor eax, 0x363dc19b
and r14d, 0x49c23e64
add r14d, r14d
sub r14d, eax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp r14d, 0xb3f3446d
jbe 0x140120163
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
jmp 0x1401200d8
mov r11, qword [rbp + 0x78]
nop word [rax + rax]
mov eax, dword [str._E_]
sub eax, dword [0x140227e7c]
add eax, 0x9d4a5a60
mov ecx, eax
not ecx
and ecx, 0xc1d9d742
and eax, 0x3e2628bd
sub eax, ecx
xor eax, 0x93c4cac7
cmp eax, 0xff336259
je 0x140120170
mov qword [rbp + 8], r13
mov eax, dword [0x140227e80]
and eax, dword [0x140227e84]
or eax, 0x9699de3d
mov ecx, 0x9adb8eb5
imul rcx, rax
shr rcx, 0x3c
mov eax, ecx
xor eax, 0xe
and eax, ecx
cmp eax, 0xb9685a35
jbe 0x1401201e9
sub rsp, 0x20
mov rcx, rbx
mov rdx, r11
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
mov r11, qword [rbp + 0x78]
add rsp, 0x20
mov r12d, 0xcc58d8a1
mov r14, qword [sym.imp.KERNEL32.dll_GetSystemTimes]
nop word cs:[rax + rax]
mov eax, dword [0x140227e88]
mov ecx, dword [str._:JJ]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov r13d, eax
xor r13d, 0x5d3f4e64
add r13d, eax
and eax, 0xa2c0b19b
sub r13d, eax
imul r13, r12
shr r13, 0x3e
not r13d
or r13d, 0xcbc71762
sub rsp, 0x20
mov rcx, rbx
mov rdx, r11
mov r8, rsi
call r14
mov r11, qword [rbp + 0x78]
add rsp, 0x20
cmp r13d, 0x1e355892
jb 0x140120200
mov ecx, 0xb689d323
mov r12, qword [rbp + 0x90]
mov rbx, qword [rbp + 0x30]
mov r13, qword [rbp + 8]
mov r14, qword [rbp + 0x68]
nop dword [rax]
mov edx, dword [0x140227e90]
mov r8d, dword [0x140227e94]
mov r9d, r8d
not r9d
mov r10d, edx
and r10d, r9d
or r9d, edx
not r9d
imul r9d, r10d
mov r10d, edx
and r10d, r8d
or edx, r8d
imul edx, r10d
add edx, r9d
imul rdx, rcx
shr rdx, 0x3e
add edx, 0x1ca44005
and edx, 0xc80000f
xor edx, 0xc14228b9
cmp edx, 0x5d201af8
jb 0x140120290
test eax, eax
jne 0x140120330
sub rsp, 0x20
call fcn.14014f250
mov r11, qword [rbp + 0x78]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x140227e98]
and eax, dword [0x140227e9c]
mov ecx, eax
and ecx, 0x386866a8
xor eax, 0x386866a8
lea eax, [rax + rcx*2]
or eax, 0x92a704a
add eax, 0x3ac003f2
cmp eax, 0x909a4f0b
jb 0x140120300
nop dword [rax]
mov eax, dword [0x140227ea0]
add eax, dword [0x140227ea4]
mov ecx, eax
not ecx
or ecx, 0xa09ada3
add eax, ecx
inc eax
imul rax, rax, 0x5fe3c4b1
shr rax, 0x3d
mov ecx, eax
xor ecx, 0x4734c53d
and eax, 0xfffffffe
add eax, eax
sub eax, ecx
cmp eax, 0x2082ede5
jb 0x140120330
mov r8, qword [rdi]
mov ecx, dword [r15]
nop word cs:[rax + rax]
mov eax, dword [0x140227ea8]
xor edx, edx
div dword [0x140227eac]
mov edx, eax
xor edx, 0x5a1b3097
and edx, eax
imul eax, edx, 0xae161428
cmp eax, 0xe5bac23e
ja 0x140120380
mov eax, dword [r15 + 4]
shl rax, 0x20
not rax
not rcx
and rcx, rax
not rcx
mov edx, dword [r11]
mov eax, dword [r11 + 4]
shl rax, 0x20
mov r9, rdx
not r9
movabs r10, 0x89f66b84d7252fe8
and r9, r10
and edx, 0x28dad017
or rdx, r9
xor rax, r10
xor rax, rdx
mov r10, qword [rsi]
mov r11, qword [r12 + 0x110]
xor esi, esi
cmp rax, r11
cmovb r11, rsi
mov rdi, qword [r12 + 0x118]
mov r9, qword [r12 + 0x100]
mov rdx, qword [r12 + 0x108]
mov qword [r12 + 0x108], rcx
mov qword [r12 + 0x100], r8
mov qword [r12 + 0x118], r10
mov qword [r12 + 0x110], rax
sub rax, r11
cmp r10, rdi
cmovb rdi, rsi
sub r10, rdi
add r10, rax
mov rax, 0xffffffffffffffff
cmovae rax, r10
test rax, rax
je 0x14012047c
xor r10d, r10d
cmp r8, r9
cmovb r9, r10
sub r8, r9
cmp rcx, rdx
cmovb rdx, r10
sub rcx, rdx
test rax, rax
js 0x140120527
cvtsi2ss xmm1, rax
jmp 0x14012053c
mov r9, rbx
mov r10, qword [rbp + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x140227ec0]
xor eax, dword [0x140227ec4]
mov ecx, eax
xor ecx, 0x8418440
or ecx, 0x50083894
xor eax, 0x2804000
and eax, 0x2a04022
and ecx, 0xd959bcd5
or ecx, eax
add ecx, 0xaa3e436a
jae 0x140120490
mov eax, dword [0x140227ec8]
mov ecx, dword [0x140227ecc]
mov edx, eax
not edx
or eax, ecx
not ecx
or ecx, edx
and ecx, eax
mov eax, ecx
and eax, 0xf76d6031
mov edx, eax
not edx
and edx, 0x9bd7324
mov r8d, ecx
and r8d, 0xf6400011
imul r8d, edx
and ecx, 0x12d6020
or eax, 0x9bd7324
imul eax, ecx
add eax, r8d
imul rax, rax, 0x5e6c6849
shr rax, 0x3e
cmp eax, 0xf3787198
jbe 0x140120624
jmp 0x140120674
mov rdx, rax
shr rdx, 1
and eax, 1
or rax, rdx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
add rcx, r8
mov rax, 0xffffffffffffffff
cmovae rax, rcx
test rax, rax
mov r9, rbx
mov r10, qword [rbp + 0x10]
js 0x14012055d
cvtsi2ss xmm0, rax
jmp 0x140120572
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [rbp + 0x48]
divss xmm0, xmm1
mulss xmm0, dword [0x14017a100]
test rcx, rcx
js 0x140120591
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
jmp 0x1401205a9
mov rax, rcx
shr rax, 1
and ecx, 1
or rcx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
addss xmm1, xmm1
mov eax, dword [0x140227eb4]
add eax, dword [0x140227eb0]
mulss xmm0, xmm1
imul eax, eax, 0x8b0cddcd
or eax, 0x6ff17fbb
cmp eax, 0x717278fe
jne 0x1401205e0
movss dword [r12 + 0x150], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x140227eb8]
xor edx, edx
div dword [0x140227ebc]
mov ecx, eax
xor ecx, 0x9a85df
and ecx, eax
imul rax, rcx, 0x75d27d41
shr rax, 0x3e
mov ecx, eax
xor ecx, 0xcd39856b
add ecx, eax
movss dword [r12 + 0x150], xmm0
cmp ecx, 0x724aca1b
je 0x1401205e0
jmp 0x14011e69c
mov eax, dword [0x140227ed0]
sub eax, dword [0x140227ed4]
imul rax, rax, 0x75c95231
shr rax, 0x3e
add eax, 0x75d7b5c3
mov ecx, eax
not ecx
and ecx, 0x80084837
imul ecx, ecx, 0x51552100
and eax, 0x248294c7
imul eax, eax, 0xf5dffdf7
add eax, ecx
mov dword [r12 + 0x150], 0
cmp eax, 0x5fbfeed
jae 0x14011e69c
mov dword [r12 + 0x150], 0
jmp 0x140120624
mov eax, dword [0x140228040]
and eax, dword [0x140228044]
xor eax, 0x759634eb
mov ecx, eax
and ecx, 0x21a1e24a
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xa1a1e24a
shr eax, 3
imul rax, rax, 0x11a1e759
shr rax, 0x39
mov qword [rdi + 0x80], r15
cmp eax, 0x5c381f45
jne 0x1401206cb
mov qword [rdi + 0x80], r15
jmp 0x140120682
mov eax, dword [0x140228048]
mov ecx, dword [0x14022804c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
and ecx, 0x45dc46bc
imul eax, ecx, 0xe881b9ed
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x54a44e0c
and ecx, 0xab5bb1f0
imul ecx, edx
mov edx, eax
and edx, 0xab5bb1f0
or eax, 0xab5bb1f0
imul eax, edx
add eax, ecx
cmp eax, 0xce31d0ba
jb 0x140120741
mov qword [rdi + 0x88], r12
mov qword [rdi + 0x90], r13
sub rsp, 0x20
mov rcx, rsi
call fcn.1401278c0
add rsp, 0x20
xor eax, eax
test al, al
je 0x140120761
mov qword [rdi + 0x88], r12
mov qword [rdi + 0x90], r13
sub rsp, 0x20
mov rcx, rsi
call fcn.140151000
add rsp, 0x20
jmp 0x14012071d
mov eax, dword [0x140228050]
mov ecx, dword [0x140228054]
not eax
not ecx
or ecx, eax
not ecx
and ecx, 0x3a6eabca
add ecx, 0xb6399212
cmp ecx, 0x82f4c61c
jae 0x14012079a
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov edi, 0xcb71d169
mov r12, qword [rbp + 0x90]
mov eax, dword [0x140228058]
xor edx, edx
div dword [0x14022805c]
mov esi, eax
and esi, 0xa7e49680
imul rsi, rdi
shr rsi, 0x3e
mov eax, esi
xor eax, 0xbb82421d
or esi, 2
and esi, eax
sub rsp, 0x20
mov rcx, r14
call fcn.14014f1d0
add rsp, 0x20
cmp esi, 0x9c964165
ja 0x1401207a6
test eax, eax
jne 0x1401208c6
mov eax, dword [0x140228060]
and eax, dword [0x140228064]
mov ecx, eax
not ecx
and ecx, 0xb8ca6b1c
mov edx, eax
and edx, 0x473594e3
imul edx, ecx
mov ecx, eax
and ecx, 0xb8ca6b1c
or eax, 0xb8ca6b1c
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x3055f5d8
and eax, 0x4faa0a24
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
or ecx, 0xe18d5d34
add eax, ecx
inc eax
cmp eax, 0xb81fc783
jbe 0x140120857
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x140228068]
mov edi, dword [0x14022806c]
xor edi, eax
not edi
and edi, eax
and edi, 0x248d843
add edi, 0xb7ff391a
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xfa02fb7d
ja 0x14012085e
mov eax, dword [0x140228074]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x140228070]
xor ecx, eax
xor ecx, 0x9053585a
mov eax, ecx
and eax, 0x18b8c26b
add eax, eax
neg eax
add eax, ecx
add eax, 0x58b8c26b
and eax, 0x7d9fa473
cmp eax, 0x4de41f46
jb 0x14012088e
mov eax, dword [0x140228078]
sub eax, dword [0x14022807c]
mov ecx, eax
xor ecx, 0xbeb1dfa7
xor eax, 0x22b0c9a6
and eax, 0x63fae9fe
add eax, eax
sub ecx, eax
add ecx, 0xb9a12325
cmp ecx, 0x77065073
ja 0x1401208c6
movabs rdi, 0x8000000000000000
mov eax, dword [0x140228084]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x140228080]
xor ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x692ea39
and eax, 0x16d15c6
imul eax, edx
mov edx, ecx
and edx, 0x16d15c6
or ecx, 0x16d15c6
imul ecx, edx
add eax, ecx
add eax, 0x77497f15
and eax, 0x6d8ba8a
cmp eax, 0x103808ba
je 0x140120900
jmp 0x14011f409
mov eax, dword [0x140228090]
xor edx, edx
div dword [0x140228094]
mov edi, eax
add edi, 0x5ec55c03
or edi, 0xc0f6b012
add edi, 0x644c9c4e
sub rsp, 0x20
mov rcx, rsi
call fcn.140151000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp edi, 0xddb4304a
jbe 0x1401209af
sub rsp, 0x20
mov rcx, rsi
call fcn.140151000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x140120951
mov ecx, dword [0x140228098]
mov edx, dword [0x14022809c]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
xor ecx, 0xc0040220
or ecx, 0x34ab6d57
mov edx, ecx
xor edx, 0xf355c398
and ecx, 0xcaa3c67
add ecx, ecx
sub ecx, edx
cmp ecx, 0x81e8d97b
je 0x1401209af
mov ecx, dword [0x1402280a0]
imul ecx, dword [0x1402280a4]
mov edx, ecx
xor edx, 0xfe85a4ca
and ecx, 0x17a5b35
add ecx, ecx
sub ecx, edx
mov edx, ecx
xor edx, 0xd16addc1
and edx, ecx
mov ecx, edx
not ecx
or ecx, 0x900ad7fd
add ecx, edx
cmp ecx, 0xd9098c34
je 0x140120a06
test eax, eax
movabs rdi, 0x8000000000000000
jne 0x140120b03
mov eax, dword [0x1402280a8]
sub eax, dword [0x1402280ac]
add eax, 0xd83103a
or eax, 0xda1a6ef3
cmp eax, 0xe8dc3705
jne 0x140120a80
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x1402280b0]
sub eax, dword [0x1402280b4]
imul edi, eax, 0x449761cb
add edi, 0x462f065
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0xcf3a8f1c
ja 0x140120a87
movabs rdi, 0x8000000000000000
mov eax, dword [0x1402280b8]
or eax, dword [0x1402280bc]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x58452701
mov r8d, edx
and r8d, 0xfddb72a0
and ecx, 0x220885e
imul ecx, r8d
and edx, 0x2248d5f
or eax, 0x5a65af5f
imul eax, edx
add eax, ecx
add eax, 0x303ac102
cmp eax, 0xeef18fbe
ja 0x140120abb
xor eax, eax
test al, al
jne 0x140120b05
jmp 0x14011f409
ud2
mov eax, dword [0x140228158]
and eax, dword [0x14022815c]
or eax, 0x4dbbea44
imul eax, eax, 0x3fb1adcf
xor ecx, ecx
test rdi, rdi
setne cl
mov qword [r12], rcx
cmp eax, 0xef5d91d4
jne 0x140120b48
xor eax, eax
test rdi, rdi
setne al
mov qword [r12], rax
jmp 0x140120b10
mov eax, dword [0x140228160]
xor eax, dword [0x140228164]
xor eax, 0x22230eb4
imul rcx, rax, 0x14cb472d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1a
or eax, 0xf2535e80
cmp eax, 0xced2ab03
jne 0x140120ba4
mov qword [r12 + 8], rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r15
mov rdx, rsi
mov r8, qword [rbp + 0x38]
call fcn.140151070
add rsp, 0x30
mov rbx, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop dword [rax + rax]
mov eax, dword [0x140228168]
mov ecx, eax
not ecx
or ecx, dword [0x14022816c]
lea r14d, [rax + rcx]
inc r14d
xor r14d, 0x5532fd58
add r14d, 0x5638e75e
mov eax, r14d
and eax, 0x160fb8e8
add eax, eax
sub r14d, eax
add r14d, 0x160fb8e8
mov qword [r12 + 8], rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r15
mov rdx, rsi
mov r8, qword [rbp + 0x38]
call rbx
mov rcx, qword [rbp + 0x38]
add rsp, 0x30
cmp r14d, 0x4ac9efae
jb 0x140120bb0
test eax, eax
je 0x1401212fe
mov rdx, qword [rcx + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r15
mov rdi, qword [rbp - 0x10]
mov r8, rdi
call fcn.140151070
add rsp, 0x30
mov ecx, eax
nop word cs:[rax + rax]
mov eax, dword [0x140228170]
xor edx, edx
div dword [0x140228174]
add eax, 0x86a12b16
mov edx, eax
and edx, 0x74a3362d
xor eax, 0x74a3362d
lea eax, [rax + rdx*2]
add eax, 0x5c2de670
cmp eax, 0xf6b4df4f
ja 0x140120c60
test ecx, ecx
mov r14, qword [rbp + 0x70]
mov r8d, dword [rbp + 8]
je 0x1401213ba
nop
mov eax, dword [0x140228188]
and eax, dword [0x14022818c]
add eax, 0x3bbb6277
mov ecx, eax
and ecx, 0xc99dc81e
xor ecx, 0x8114c816
and eax, 0x8114c816
or eax, ecx
or eax, 0x366237e1
cmp eax, 0x69e26f6f
je 0x140120ca0
movzx eax, word [rdi + 0x38]
mov qword [rbp + 0x38], rax
mov rax, qword [rdi + 0x40]
mov qword [rbp + 0x20], rax
mov rbx, qword [rbp + 0x88]
nop dword [rax]
mov eax, dword [0x140228190]
mov ecx, dword [0x140228194]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
or eax, 0x8270610
xor eax, 0x8160600
or eax, 0xa7c8d9cd
cmp eax, 0x46afc8f6
je 0x140120cf0
mov rax, qword [rdi + 0x80]
mov qword [rbp + 0x40], rax
test r8d, r8d
mov dword [rbp + 0x68], r13d
je 0x140121d1c
movzx esi, word [rdi + 0x70]
mov rdi, qword [rdi + 0x78]
cmp r8d, 1
je 0x140120d5d
mov rax, qword [r12 + 0x40]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x140120d50
test rax, rax
jne 0x140121d1c
mov eax, dword [0x140228198]
mov ecx, dword [0x14022819c]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
and eax, 0xca41ba2a
imul eax, eax, 0xaf79f516
cmp eax, 0x578fa1a
jne 0x140120d8d
mov eax, dword [0x14022cb70]
lea r14, [r12 + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x1402281a0]
sub eax, dword [0x1402281a4]
mov ecx, eax
and ecx, 0xa83ab
add ecx, ecx
neg ecx
add ecx, eax
add ecx, 0x490a83ab
not ecx
and ecx, 0x206084
mov eax, dword [0x14022cb70]
cmp ecx, 0xe8b22e03
ja 0x140120da0
nop word cs:[rax + rax]
mov ecx, dword [0x1402281a8]
mov edx, dword [0x1402281ac]
mov r8d, ecx
and r8d, edx
not ecx
not edx
or edx, ecx
not edx
or edx, r8d
add edx, 0x8fe097f4
or edx, 0x59f78a3a
mov ecx, edx
xor ecx, 0xc7566160
and ecx, edx
cmp ecx, 0x343ac61a
ja 0x140120de0
cmp eax, 4
je 0x140120f07
xor eax, eax
test al, al
jne 0x14012161d
mov eax, dword [0x1402281b0]
mov ecx, dword [0x1402281b4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0x5c079cc6
add ecx, ecx
neg ecx
lea r15d, [rax + rcx]
add r15d, 0xdc079cc6
mov eax, r15d
and eax, 0x52fa9864
or r15d, 0x52fa9864
add r15d, eax
mov eax, r15d
not eax
and eax, 0x261c8793
mov ecx, r15d
and ecx, 0xd9e3786c
imul ecx, eax
mov eax, r15d
and eax, 0x261c8793
or r15d, 0x261c8793
imul r15d, eax
add r15d, ecx
sub rsp, 0x20
call fcn.140174530
add rsp, 0x20
cmp r15d, 0x34f09c37
jb 0x140120e2e
mov r15, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov eax, dword [0x1402281b8]
xor edx, edx
div dword [0x1402281bc]
mov ecx, eax
and ecx, 0x58f20c22
mov edx, ecx
not edx
and edx, 0x5467b2b4
mov r8d, eax
and r8d, 0x8900c02
imul r8d, edx
and eax, 0x50620020
or ecx, 0x5467b2b4
imul ecx, eax
add ecx, r8d
cmp ecx, 0x24af3b76
ja 0x140120ec0
movzx eax, byte [0x14022cb74]
nop
mov ecx, dword [0x1402281c0]
mov edx, dword [0x1402281c4]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, ecx
mov ecx, edx
or ecx, 0x8ad03743
not edx
or edx, 0x752fc8bc
and edx, ecx
mov ecx, edx
not ecx
xor edx, 0x9d19efbb
and edx, ecx
cmp edx, 0x951a9320
je 0x140120f10
sub rsp, 0x20
test al, al
je 0x1401214df
mov rcx, qword [rbp + 0x50]
mov rdx, r15
call fcn.1401290c0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x140228298]
and eax, dword [0x14022829c]
add eax, 0x9227f875
mov ecx, eax
not ecx
and ecx, 0x3f1e39d8
mov edx, eax
and edx, 0xc0e1c627
imul edx, ecx
mov ecx, eax
and ecx, 0x3f1e39d8
or eax, 0x3f1e39d8
imul eax, ecx
add eax, edx
cmp eax, 0x82c25a85
je 0x140120f80
mov rsi, qword [r12 + 0x38]
mov rax, qword [r12 + 0x40]
test rax, rax
je 0x1401211bd
mov rbx, rax
xor r13d, r13d
mov r12d, 0xd0b3f3ab
nop
mov eax, dword [0x1402282a0]
xor edx, edx
div dword [0x1402282a4]
cmp eax, 0x7be029c7
je 0x140120fe0
mov rax, r13
shl rax, 5
cmp qword [rsi + rax], 0
je 0x140121162
add rax, rsi
mov ecx, dword [0x1402282a8]
mov edx, dword [0x1402282ac]
mov r8d, ecx
not r8d
mov r9d, edx
not r9d
mov r10d, r8d
and r10d, 0x6001000
and ecx, 0x41200023
or ecx, r10d
or r8d, r9d
and r9d, 0x6001000
and edx, 0x41200023
or edx, r9d
xor edx, ecx
not r8d
or r8d, edx
and r8d, 0x47201023
add r8d, 0xfc261f42
cmp r8d, 0xbd2f81f7
jb 0x14012100a
mov rdi, qword [rax + 8]
mov eax, dword [0x1402282b0]
add eax, dword [0x1402282b4]
mov ecx, eax
and ecx, 0x29787527
xor eax, 0x29787527
lea eax, [rax + rcx*2]
mov ecx, 0x881818e9
imul rax, rcx
shr rax, 0x3e
mov ecx, eax
not ecx
and ecx, 0x74c54366
and eax, 1
or ecx, eax
xor ecx, 0x1eb0c27
or ecx, eax
cmp ecx, 0x941af98d
jbe 0x1401210d0
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov r15d, dword [0x1402282bc]
add r15d, dword [0x1402282b8]
or r15d, 0x421d3647
add r15d, 0x9ebf5c
imul r15, r12
shr r15, 0x3f
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call fcn.14014eed0
add rsp, 0x20
cmp r15d, 0x2631f37a
ja 0x1401210d0
mov r15, qword [rbp + 0x80]
nop dword [rax]
mov eax, dword [0x1402282c0]
mov ecx, dword [0x1402282c4]
not eax
not ecx
and ecx, eax
not ecx
mov eax, ecx
and eax, 0x9d6bb6e4
and ecx, 0x90836c0
add ecx, ecx
sub eax, ecx
add eax, 0x8b0877c9
mov ecx, eax
not ecx
and ecx, 0x41a36ea4
and eax, 0xbe5c9148
sub eax, ecx
cmp eax, 0x36d45aa
je 0x140121120
mov eax, r13d
and eax, 1
or r13, 1
add r13, rax
nop
mov eax, dword [0x1402282c8]
or eax, dword [0x1402282cc]
mov ecx, eax
not ecx
and ecx, 0x60015a26
mov edx, eax
and edx, 0x9ffea5d9
imul edx, ecx
mov ecx, eax
and ecx, 0x60015a26
or eax, 0x60015a26
imul eax, ecx
add eax, edx
add eax, 0x95d8dabd
or eax, 0x396ca770
cmp eax, 0x1d6045a6
jb 0x140121170
cmp r13, rbx
jne 0x140120fe0
mov rax, qword [r14]
mov ecx, dword [str._v_vl]
mov edx, dword [0x1402282d4]
not ecx
not edx
or edx, ecx
mov ecx, edx
not ecx
xor edx, 0xcf3812ba
or ecx, 0xcf3812ba
and ecx, edx
cmp ecx, 0x32f2c981
je 0x1401211c0
test rax, rax
mov r13d, dword [rbp + 0x68]
mov rbx, qword [rbp + 0x88]
je 0x14012123a
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1402282d8]
xor edx, edx
div dword [0x1402282dc]
add eax, 0x9f417b7c
or eax, 0xbe7037af
add eax, 0x910d0637
cmp eax, 0xf054cd74
ja 0x140121216
xor eax, eax
test al, al
mov rdx, qword [rbp + 0x50]
je 0x140121253
mov rax, qword [rdx + 0x10]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [r14], xmm0
mov r12, qword [rbp + 0x90]
nop word [rax + rax]
mov eax, dword [0x1402282e0]
sub eax, dword [0x1402282e4]
mov ecx, eax
not ecx
and ecx, 0x9c2d3c70
and eax, 0x63d2c38f
sub eax, ecx
and eax, 0xe1d9b71e
add eax, 0x3681a77d
mov rcx, qword [rdx + 0x10]
mov qword [r14 + 0x10], rcx
movups xmm0, xmmword [rdx]
movups xmmword [r14], xmm0
cmp eax, 0xa549b9e5
jb 0x140121260
mov r14, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x1402282e8]
or eax, dword [0x1402282ec]
mov ecx, eax
or ecx, 0x432beaa1
mov edx, eax
not edx
and edx, 0xa000151a
mov r8d, ecx
and r8d, 0x1ff56a64
imul r8d, edx
and ecx, 0xe00a959b
or eax, 0xe32bffbb
imul eax, ecx
add eax, r8d
and eax, 0xb27daccc
cmp eax, 0x671f03a9
jb 0x1401212b0
jmp 0x140121d1c
mov eax, dword [0x140228178]
sub eax, dword [0x14022817c]
or eax, 0xff880f9a
mov ecx, eax
and ecx, 0xe31554d
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xe31554d
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa3d57a17
and ecx, 0xc2a81e8
imul ecx, edx
mov edx, eax
and edx, 0x502a81e8
or eax, 0x5c2a81e8
imul eax, edx
add eax, ecx
cmp eax, 0xe77c0689
jne 0x14012135e
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x140228180]
mov edi, dword [0x140228184]
mov ecx, edi
not ecx
and ecx, eax
xor edi, eax
add edi, eax
sub edi, ecx
mov eax, edi
xor eax, 0x52681000
or edi, 0xc102a90
and edi, eax
or edi, 0x840042
and edi, 0x5efc3ad2
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x8255c5c7
jae 0x140121370
jmp 0x14012149e
mov eax, dword [0x140228638]
mov ecx, dword [0x14022863c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x69081
and ecx, eax
mov eax, ecx
xor eax, 0x817a8081
and eax, ecx
and eax, 0x9f7ed491
cmp eax, 0xfd7d7774
jbe 0x140121412
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x140228640]
mov ecx, dword [str.__fmg_V_]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
xor ecx, 0xb81ac015
imul rdi, rcx, 0x610ca355
shr rdi, 0x3e
or edi, 0xa2709a88
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x545beec5
jb 0x140121420
nop word cs:[rax + rax]
mov eax, dword [0x140228648]
sub eax, dword [0x14022864c]
mov ecx, eax
not ecx
and ecx, 0x24707961
and eax, 0xdb8f869e
sub eax, ecx
xor eax, 0xd0400054
or eax, 0x2fa6cc0b
cmp eax, 0xce6606c7
ja 0x140121470
mov eax, 0x9ea2d053
movabs r14, 0x8000000000000000
nop dword [rax]
mov ecx, dword [0x140228668]
or ecx, dword [0x14022866c]
imul ecx, ecx, 0x75eb7d9b
add ecx, 0xaccb6c01
shr ecx, 1
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xf1f22127
ja 0x1401214b0
jmp 0x140123f35
mov rcx, qword [rbp - 0x28]
mov rdx, r15
mov r8, rdi
mov r9, rsi
mov rsi, rcx
call fcn.140128610
add rsp, 0x20
mov rdi, qword [rsi]
mov eax, 0x9a8c0f7b
mov ecx, dword [0x1402281c8]
or ecx, dword [0x1402281cc]
mov edx, ecx
not edx
and edx, 0xedeb6757
mov r8d, ecx
and r8d, 0x121498a8
imul r8d, edx
mov edx, ecx
and edx, 0xedeb6757
or ecx, 0xedeb6757
imul ecx, edx
add ecx, r8d
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xeeae0128
cmp ecx, 0x32cf5914
jb 0x140121500
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x1401215a8
mov eax, dword [0x140228200]
mov ecx, dword [0x140228204]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
and eax, 0x7fffffff
xor eax, 0x2533416a
and ecx, 0x2533416a
or ecx, eax
imul eax, ecx, 0x167f1b71
or eax, 0xa71400e3
cmp eax, 0x52b4e83d
mov r10, qword [rbp + 0x58]
jae 0x140121763
jmp 0x1401217d6
mov eax, dword [0x1402281d0]
mov ecx, dword [0x1402281d4]
not ecx
add eax, ecx
add eax, 0xa733d10e
or eax, 0x22012005
and eax, 0xbfd52aa5
cmp eax, 0x9e13d2fa
je 0x1401215a8
mov rsi, qword [rsi + 8]
sub rsp, 0x20
mov rcx, qword [rbp + 0x58]
mov rdx, rsi
call fcn.140128b60
add rsp, 0x20
test rdi, rdi
mov rdi, qword [rbp]
je 0x1401217f3
mov eax, dword [0x1402281d8]
sub eax, dword [0x1402281dc]
or eax, 0x80b85e20
xor eax, 0x49ec9fbb
imul rax, rax, 0x173afe39
shr rax, 0x3c
cmp eax, 0x7c25710e
jbe 0x14012162f
jmp 0x14012165c
sub rsp, 0x20
call fcn.140174530
add rsp, 0x20
jmp 0x140120e2e
mov eax, dword [0x1402281e0]
or eax, dword [0x1402281e4]
add eax, 0xe6cc1796
mov ecx, 0x84f6f765
imul rcx, rax
shr rcx, 0x3e
mov rdi, qword [0x14022cb48]
cmp ecx, 0xdf388b55
jne 0x140121665
mov rax, qword [0x14022cb48]
jmp 0x14012162f
mov r13, r12
mov eax, dword [0x1402281e8]
xor eax, dword [0x1402281ec]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x72908c6
and ecx, 0xf8d6f739
imul ecx, edx
mov edx, eax
and edx, 0xf8d6f739
or eax, 0xf8d6f739
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x5767e179
and ecx, 0xa8981e86
imul ecx, edx
mov edx, eax
and edx, 0xa8981e86
or eax, 0xa8981e86
imul eax, edx
add eax, ecx
or eax, 0x3760d910
cmp eax, 0x847e21f5
jae 0x1401216e3
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call fcn.14014eed0
add rsp, 0x20
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x1402281f0]
add eax, dword [0x1402281f4]
mov r12d, eax
or r12d, 0x1800600
not eax
and eax, 0x10411013
and r12d, 0x9800688
or r12d, eax
xor r12d, 0x43904b
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
cmp r12d, 0xdc510abd
ja 0x1401216ea
mov r12, r13
mov rdi, qword [rbp]
mov r13d, dword [rbp + 0x68]
mov eax, dword [0x1402281f8]
xor edx, edx
div dword [0x1402281fc]
or eax, 0x36dee803
add eax, 0x23f02b70
cmp eax, 0x8fde822b
ja 0x14012173f
jmp 0x1401217f3
mov ecx, dword [0x140228208]
mov edx, dword [0x14022820c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x88856e17
and ecx, 0x777a91e8
or ecx, r9d
or eax, r8d
and r8d, 0x88856e17
and edx, 0x777a91e8
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0xea14d8fa
and eax, 0x15eb2705
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0xf8e60322
add ecx, eax
and eax, 0x719fcdd
sub ecx, eax
mov qword [r10], 0
cmp ecx, 0x41098bbd
jne 0x1401217df
mov qword [r10], 0
jmp 0x140121763
mov qword [r10 + 8], 8
mov qword [r10 + 0x10], 0
mov rdi, qword [rbp]
mov eax, dword [0x140228210]
mov ecx, dword [0x140228214]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
shr eax, 2
imul rax, rax, 0x651a7537
shr rax, 0x3b
cmp eax, 0x602efd6d
je 0x1401217f3
mov eax, dword [0x140228218]
or eax, dword [0x14022821c]
shr eax, 3
imul rax, rax, 0x12e4925b
shr rax, 0x37
add eax, 0xabba327f
mov ecx, eax
not ecx
and ecx, 0x5404c1c2
and eax, 0xa188323d
sub eax, ecx
cmp eax, 0xcb84065d
ja 0x14012181d
mov r8, qword [r12 + 0x38]
mov rax, qword [r12 + 0x40]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140121a4d
xor r15d, r15d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rbp - 0x10], r14
mov ebx, r13d
mov r13, r15
shl r13, 5
cmp qword [r8 + r13], 0
je 0x140121961
mov eax, dword [0x140228220]
sub eax, dword [0x140228224]
mov r14, r8
add r13, r8
and eax, 0x4db4e7e4
mov ecx, eax
add ecx, 0xc254e1dc
not ecx
or ecx, 0x56dd6a1b
add eax, ecx
add eax, 0xc254e1dc
cmp eax, 0xb96e10da
jne 0x1401218e0
mov r8, qword [r13 + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call fcn.14014eed0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140228228]
add eax, dword [0x14022822c]
imul esi, eax, 0x776a4e51
add esi, 0x1bbc0d6b
mov eax, esi
or eax, 0x9c148f44
not esi
or esi, 0x63eb70bb
and esi, eax
mov r8, qword [r13 + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call r12
add rsp, 0x20
cmp esi, 0x29cbc252
jb 0x1401218e0
mov r8, r14
mov r14, qword [rbp - 0x10]
mov eax, dword [0x140228230]
xor edx, edx
div dword [0x140228234]
mov ecx, eax
not ecx
or ecx, 0xc188901
and ecx, 0x1d999d01
and eax, 0xe06460a0
add eax, ecx
add eax, 0x434101cd
cmp eax, 0x58a3f595
jb 0x140121930
inc r15
mov r13d, ebx
nop word [rax + rax]
mov eax, dword [0x140228238]
mov ecx, dword [0x14022823c]
mov edx, ecx
not edx
mov r9d, eax
and r9d, edx
or edx, eax
not edx
imul edx, r9d
mov r9d, eax
and r9d, ecx
or eax, ecx
imul eax, r9d
add eax, edx
not eax
or eax, 0x9d7e30e2
mov ecx, eax
not ecx
mov edx, ecx
or edx, 0x42a0563d
mov r9d, edx
and r9d, 0xa15035
and eax, 0xa114a940
imul eax, r9d
and edx, 0x62008f08
or ecx, 0xe3b4ff7d
imul ecx, edx
add ecx, eax
cmp ecx, 0xe616126c
ja 0x140121970
mov rbx, qword [rbp + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x140228244]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x140228240]
xor ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x9ce3e6ab
and eax, 0x631c1954
imul eax, edx
mov edx, ecx
and edx, 0x631c1954
or ecx, 0x631c1954
imul ecx, edx
add ecx, eax
imul rax, rcx, 0x72a2085f
shr rax, 0x3e
imul eax, eax, 0x3ec98f20
cmp eax, 0x5bded363
je 0x1401219f0
cmp r15, qword [rbp + 0x50]
jne 0x140121879
mov eax, 0x8710b44f
mov ecx, dword [0x140228248]
xor ecx, dword [0x14022824c]
shr ecx, 1
imul rcx, rax
shr rcx, 0x3d
not ecx
or ecx, 0xa6d353e2
cmp ecx, 0x561d94c7
je 0x140121a52
mov rax, qword [r14]
mov ecx, dword [0x140228250]
mov edx, dword [0x140228254]
mov r9d, edx
and r9d, ecx
add ecx, edx
sub ecx, r9d
imul ecx, ecx, 0xd752b9e0
add ecx, 0x562bd0a0
mov edx, ecx
and edx, 0x3f18cb20
add edx, edx
sub ecx, edx
cmp ecx, 0x21262b41
je 0x140121a7b
mov r15, qword [rbp + 0x80]
mov ecx, dword [0x140228258]
mov edx, dword [0x14022825c]
mov r10d, ecx
not r10d
and r10d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r10d
mov r10d, ecx
and r10d, edx
or ecx, edx
imul ecx, r10d
add ecx, r9d
imul ecx, ecx, 0x63329cdb
mov edx, ecx
not edx
mov r9d, ecx
and r9d, 0x6b83e068
and edx, 0x147c1f97
imul edx, r9d
mov r9d, ecx
and r9d, 0x147c1f97
or ecx, 0x147c1f97
imul ecx, r9d
add ecx, edx
or ecx, 0xb7d3d05b
cmp ecx, 0x5af5f712
jb 0x140121ab9
test rax, rax
mov r12, qword [rbp + 0x90]
je 0x140121bf4
mov eax, dword [0x140228260]
add eax, dword [0x140228264]
and eax, 0x6531e3c0
mov ecx, eax
xor ecx, 0xe28a0318
or eax, 0x411c040
and eax, ecx
or eax, 0x19603ca7
cmp eax, 0xe6c2d011
jbe 0x140121b6f
mov rax, qword [0x14022cb48]
mov eax, dword [0x140228268]
xor edx, edx
div dword [0x14022826c]
or eax, 0xe214c498
mov rcx, qword [0x14022cb48]
cmp eax, 0x6abe910f
je 0x140121b6f
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x140228270]
mov ecx, dword [0x140228274]
mov edx, eax
or edx, ecx
not edx
not eax
not ecx
and ecx, eax
or ecx, edx
mov eax, ecx
not eax
and ecx, 0x308013aa
mov edx, eax
and edx, 0xf7fec55
imul edx, ecx
mov ecx, eax
and ecx, 0x308013aa
or eax, 0x308013aa
imul eax, ecx
add eax, edx
add eax, 0x1920f463
not eax
or eax, 0xc1a8beb6
add eax, 0xb9dd2c98
jae 0x140121ba0
mov eax, dword [0x140228278]
or eax, dword [0x14022827c]
imul rax, rax, 0x23f4e651
shr rax, 0x3d
mov ecx, eax
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x14b02a19
imul rcx, rax, 0x2d79a3d5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xd14bcbe2
mov r8, qword [rbp + 0x58]
je 0x140121cb3
mov eax, dword [0x140228280]
mov ecx, dword [0x140228284]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x6954f387
and ecx, 0x96ab0c78
imul ecx, edx
mov edx, eax
and edx, 0x96ab0c78
or eax, 0x96ab0c78
imul eax, edx
add eax, ecx
add eax, 0x5e26185b
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x9a13ad0
and ecx, 0xf65ec52c
imul ecx, edx
mov edx, eax
and edx, 0xf65ec52b
or eax, 0xf65ec52f
imul eax, edx
add eax, ecx
mov rcx, qword [r8 + 0x10]
mov qword [r14 + 0x10], rcx
movups xmm0, xmmword [r8]
movups xmmword [r14], xmm0
cmp eax, 0x255bd04d
jae 0x140121cc8
mov rax, qword [r8 + 0x10]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [r8]
movups xmmword [r14], xmm0
jmp 0x140121c37
mov eax, 0xdd2d27b3
mov ecx, dword [0x140228288]
or ecx, dword [0x14022828c]
xor ecx, 0x390d9557
add ecx, 0x6008e61f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x851e95ab
ja 0x140121ccd
mov r14, qword [rbp + 0x70]
mov eax, dword [0x140228290]
add eax, dword [0x140228294]
imul rax, rax, 0x43595db5
shr rax, 0x3e
or eax, 0xf5e7ec78
cmp eax, 0x10ba0974
jb 0x140121cf9
lea rax, [r12 + 0x48]
mov qword [rbp + 0x50], rax
nop word cs:[rax + rax]
mov eax, dword [0x1402282f0]
xor eax, dword [0x1402282f4]
mov ecx, eax
and ecx, 0x38ac0dda
and eax, 0x20880848
xor ecx, 0x67995849
lea eax, [rcx + rax*2]
mov ecx, eax
not ecx
or eax, 0x2a903ddc
or ecx, 0xd56f8226
and ecx, eax
cmp ecx, 0xad5bb50e
ja 0x140121d30
mov eax, dword [0x1402282f8]
xor edx, edx
div dword [0x1402282fc]
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x140228300]
xor eax, dword [0x140228304]
and eax, 0x7eb34afb
add eax, 0xc59e2b7
mov ecx, eax
and ecx, 0x64bf4752
or eax, 0x64bf5752
add eax, ecx
cmp eax, 0x51b1080
jb 0x140121d90
mov rsi, qword [rbp + 0x40]
mov eax, dword [0x140228308]
mov ecx, dword [0x14022830c]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0xf6c2073a
and eax, 0x93df8c5
or eax, r9d
or edx, r8d
and r8d, 0xf6c2073a
and ecx, 0x93df8c5
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
mov eax, edx
xor eax, 0x52ebd67c
and eax, edx
mov ecx, eax
and ecx, 0x18a2bf3b
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x98a2bf3b
imul rax, rax, 0xbd8b891
shr rax, 0x3a
cmp eax, 0xaf00306c
ja 0x140121dc0
mov eax, dword [rbp + 0x48]
test eax, eax
je 0x140122fa0
cmp eax, 1
je 0x140121eb0
cmp eax, 2
jne 0x140122105
mov rcx, qword [r12 + 0x58]
nop dword [rax]
mov eax, dword [0x140228318]
xor edx, edx
div dword [0x14022831c]
add eax, 0x247d7a07
and eax, 0x46d184cf
imul rax, rax, 0x4058a01b
shr rax, 0x3c
cmp eax, 0x11a81cbd
ja 0x140121e50
mov r8d, 0xd8a3a0f3
mov eax, dword [0x140228320]
xor edx, edx
div dword [0x140228324]
xor eax, 0xa97bf39f
add eax, 0xe17034d6
imul rax, r8
shr rax, 0x3c
cmp eax, 0x7fd45d29
ja 0x140121e80
test rcx, rcx
jne 0x140122fa0
mov eax, dword [0x140228328]
mov ecx, dword [0x14022832c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0x5d3ebaec
add ecx, ecx
sub eax, ecx
add eax, 0xdd3ebaec
mov ecx, eax
and ecx, 0x411d288e
and eax, 0x18208e
mov edx, ecx
xor edx, 0xcda5cc21
add edx, ecx
sub edx, eax
cmp edx, 0x9538b0df
jb 0x140121eb0
mov eax, dword [0x140228330]
xor edx, edx
div dword [0x140228334]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xeb1532af
and ecx, 0x14eacd50
imul ecx, edx
mov edx, eax
and edx, 0x14eacd50
or eax, 0x14eacd50
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or eax, 0x94112424
and ecx, 0x20a4a09
and eax, 0xdcd1b5e4
or eax, ecx
cmp eax, 0x5a58533a
jne 0x140121f7b
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call fcn.140151140
add rsp, 0x20
mov r13, rsi
mov rsi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
nop word cs:[rax + rax]
mov eax, dword [0x140228338]
and eax, dword [0x14022833c]
add eax, 0x7b65b849
imul rdi, rax, 0x2af095c1
shr rdi, 0x3c
add edi, 0x3664c95b
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r15
mov rdx, r13
mov r8, rbx
call rsi
add rsp, 0x20
cmp edi, 0x5ee0f1a6
ja 0x140121f90
mov r13d, dword [rbp + 0x68]
nop word [rax + rax]
mov ecx, dword [0x140228340]
mov edx, dword [0x140228344]
mov r8d, ecx
xor r8d, edx
not edx
and edx, ecx
add edx, edx
sub edx, r8d
add edx, 0x6f18ade2
mov ecx, edx
or ecx, 0xa0dd1dcf
not edx
and edx, 0x43222000
mov r8d, ecx
and r8d, 0x9c41c335
or r8d, edx
xor r8d, 0x4d3a0632
and ecx, 0x2e843af8
or ecx, r8d
cmp ecx, 0xee7a26e9
je 0x140121fe0
test rax, rax
je 0x1401220e8
mov eax, 0x93578265
nop word cs:[rax + rax]
mov ecx, dword [0x140228350]
mov edx, dword [0x140228354]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
add ecx, 0xcc4dd714
mov rdx, rcx
imul rdx, rax
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1e
not ecx
and ecx, 0x9fee23c7
cmp ecx, 0xb6b2bb4
je 0x140122050
mov eax, dword [0x140228358]
imul eax, dword [0x14022835c]
mov rsi, qword [rbx]
imul eax, eax, 0xfb75b25c
mov ecx, eax
add ecx, 0x680b566c
not ecx
or ecx, 0x4579c5e
add eax, ecx
add eax, 0x680b566c
cmp eax, 0x7ece1953
mov r13, qword [rbp + 0x40]
jne 0x140122140
jmp 0x140122196
mov eax, dword [0x140228348]
or eax, dword [0x14022834c]
add eax, 0x5a6d54bc
cmp eax, 0x32b55940
ja 0x1401220e8
jmp 0x140122200
mov ecx, 0xabfb1e51
mov eax, dword [0x140228310]
xor edx, edx
div dword [0x140228314]
mov edx, eax
xor edx, 0xda981362
or eax, 0x2567ec9d
and eax, edx
add eax, 0x5ec122c3
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xc10d66d9
ja 0x14012210a
jmp 0x140120b0e
mov edi, dword [0x140228360]
and edi, dword [0x140228364]
and edi, 0xfffffff
xor edi, 0x7f7d97f
add edi, 0xe8679079
or edi, 0xf3289d7d
mov rax, qword [rbx + 0x18]
mov rcx, r13
not rcx
add rcx, rsi
lea r9, [rax + rcx]
inc r9
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, r13
call fcn.140128610
add rsp, 0x20
cmp edi, 0xd7134ac1
jae 0x1401221b8
mov r9, rsi
sub r9, r13
add r9, qword [rbx + 0x18]
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
mov r8, r13
call fcn.140128610
add rsp, 0x20
jmp 0x140122140
mov r13d, dword [rbp + 0x68]
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x140228368]
xor edx, edx
div dword [0x14022836c]
xor eax, 0x401f46d7
add eax, 0xd09a13fd
or eax, 0x19f7cf76
cmp eax, 0xadf702a3
ja 0x1401221d0
mov rax, qword [r14]
cmp rax, rdi
jne 0x1401225dc
mov rdi, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
mov eax, dword [0x140228370]
xor edx, edx
div dword [0x140228374]
nop dword [rax + rax]
mov eax, dword [0x140228378]
mov ecx, dword [0x14022837c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
or ecx, 0x12400c01
not eax
and ecx, 0xda50ae11
and eax, 0x2350c4
or eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xa49d51c4
and eax, 0x4862aa11
imul eax, edx
mov edx, ecx
and edx, 0x4922a23a
or ecx, 0x4962aa3b
imul ecx, edx
add ecx, eax
cmp ecx, 0x4d7dfcc8
je 0x140122220
test rsi, rsi
je 0x1401223a1
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x140228380]
mov ecx, dword [0x140228384]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0x9f4c8ece
mov edx, eax
and edx, 0x60b37131
imul edx, ecx
mov ecx, eax
and ecx, 0x9f4c8ece
or eax, 0x9f4c8ece
imul eax, ecx
add eax, edx
imul eax, eax, 0x95bebaa0
mov ecx, eax
and ecx, 0x250ea600
xor eax, 0xa50ea638
lea eax, [rax + rcx*2]
cmp eax, 0xacb806c6
jb 0x1401222b0
mov rax, rbx
shl rax, 5
cmp qword [rdi + rax], 0
je 0x140122368
add rax, rdi
mov ecx, dword [str.k_7n]
xor ecx, dword [0x14022838c]
add ecx, 0x22908ca4
or ecx, 0xd6f8a9ff
cmp ecx, 0xe1d47e19
je 0x140122330
mov r8, qword [rax + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
inc rbx
nop dword [rax + rax]
mov eax, dword [0x140228394]
add eax, dword [0x140228390]
and eax, 0xf639141e
xor eax, 0x47310c27
imul rax, rax, 0x77005f01
shr rax, 0x3e
cmp eax, 0xa66e05ad
je 0x140122370
cmp rbx, rsi
jne 0x1401222b0
mov rdx, qword [rbp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [str.o.8]
or eax, dword [0x14022839c]
add eax, 0x5dd2c43f
mov ecx, eax
not ecx
and ecx, 0x61fac771
and eax, 0x9e05388e
sub eax, ecx
add eax, 0x64ea4d0
cmp eax, 0x111b4623
jb 0x1401223b0
mov rax, qword [rdx]
nop word cs:[rax + rax]
mov ecx, dword [0x1402283a0]
mov edx, dword [0x1402283a4]
not ecx
not edx
and edx, ecx
not edx
add edx, 0x7e09983a
mov ecx, edx
or ecx, 0x3462000d
not edx
and edx, 0xc0043a22
and ecx, 0x3462015d
or ecx, edx
xor ecx, 0xf29cb350
cmp ecx, 0x11c4e075
jb 0x1401223f0
mov ecx, 0xb6502ef5
nop word cs:[rax + rax]
mov edx, dword [0x1402283a8]
add edx, dword [0x1402283ac]
imul rdx, rcx
shr rdx, 0x3e
mov r8d, edx
xor r8d, 0x93eb9503
lea edx, [r8 + rdx*2]
not edx
or edx, 0x57359b95
cmp edx, 0x5f18be3d
je 0x140122440
test rax, rax
je 0x14012256c
mov eax, dword [0x1402283b0]
mov ecx, dword [0x1402283b4]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0xfcbc3e9f
mov eax, ecx
not eax
or eax, 0x5fef59b7
add eax, ecx
cmp eax, 0xf1feb998
jne 0x1401224ae
mov rax, qword [0x14022cb48]
mov eax, 0x825f7b9b
nop word cs:[rax + rax]
mov ecx, dword [0x1402283b8]
sub ecx, dword [0x1402283bc]
or ecx, 0xef78b021
imul edx, ecx, 0xb8b3b948
imul rdx, rax
shr rdx, 0x3d
mov rcx, qword [0x14022cb48]
cmp edx, 0x2960cdf
ja 0x1401224c0
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call fcn.14014eed0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1402283c0]
mov ecx, dword [0x1402283c4]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
imul eax, ecx, 0xd6201789
mov ecx, eax
and ecx, 0x6ab8d16a
xor eax, 0xeab8d16a
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x852fd8f4
and ecx, 0x7ad0270b
imul ecx, edx
mov edx, eax
and edx, 0x7ad0270b
or eax, 0x7ad0270b
imul eax, edx
add eax, ecx
cmp eax, 0x71f42b81
jb 0x140122510
mov qword [r12 + 0x48], 0
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1402283c8]
mov ecx, dword [0x1402283cc]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0x66b58281
mov ecx, eax
and ecx, 0xb588d0b
add ecx, ecx
sub eax, ecx
add eax, 0x8b588d0b
xor eax, 0xa3cce52f
cmp eax, 0x5796b735
jb 0x1401225a0
jmp 0x140122f70
mov qword [rbp - 0x28], rax
mov eax, dword [0x1402283d0]
xor edx, edx
div dword [str.L7Uk]
mov ecx, eax
not ecx
or ecx, 0x7c100892
and ecx, 0x7c30d893
and eax, 0x10d2560
sub eax, ecx
mov ecx, eax
xor ecx, 0x2322cea6
and eax, 0x4dd3149
add eax, eax
sub eax, ecx
cmp eax, 0xac35de92
je 0x1401225e0
mov r8, qword [r14 + 8]
mov rax, qword [r14 + 0x10]
mov qword [rbp + 0x58], rax
mov r13, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
mov qword [r12 + 0x58], 0
mov eax, dword [0x1402283d8]
xor edx, edx
div dword [0x1402283dc]
mov ecx, eax
and ecx, 0x44bbcfdd
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x44bbcfdd
or eax, 0x5e4da5a6
imul rax, rax, 0x327923c5
shr rax, 0x3d
cmp eax, 0x1040ec8f
ja 0x14012263c
test rsi, rsi
mov qword [rbp + 0x88], r8
je 0x14012284c
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov ecx, dword [0x1402283e8]
mov eax, dword [0x1402283ec]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
add eax, 0xda7eabcf
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa205e6a
and ecx, 0xf5dfa195
imul ecx, edx
mov edx, eax
and edx, 0xf5dfa195
or eax, 0xf5dfa195
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x66bb5c6
add ecx, ecx
sub eax, ecx
add eax, 0x66bb5c6
cmp eax, 0x2ff2b125
ja 0x140122690
mov r15, rbx
shl r15, 5
cmp qword [r13 + r15], 0
je 0x140122801
mov rdi, r12
add r15, r13
mov eax, dword [str._S_a]
mov ecx, dword [0x1402283f4]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
and ecx, 0x2f14dc45
add ecx, 0x225e3129
mov eax, ecx
or eax, 0x8114da42
not ecx
or ecx, 0x7eeb24b5
and ecx, eax
add ecx, 0x43b5c203
jae 0x1401227a3
mov eax, dword [0x1402283f8]
imul eax, dword [0x1402283fc]
mov r12d, eax
and r12d, 0x30000040
mov ecx, r12d
not ecx
and ecx, 0x98f1a2a7
mov edx, eax
and edx, 0x20000040
imul edx, ecx
and eax, 0x10000000
or r12d, 0x98f1a2a7
imul r12d, eax
add r12d, edx
mov r8, qword [r15 + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
cmp r12d, 0x3707c9ea
jae 0x1401227bd
mov r8, qword [r15 + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
jmp 0x140122742
mov r12, rdi
movabs rdi, 0x8000000000000000
nop word [rax + rax]
mov eax, dword [0x140228400]
mov ecx, dword [0x140228404]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
imul eax, eax, 0x7399b9bb
add eax, 0xcd44dce2
imul rax, rax, 0x76e73085
shr rax, 0x3e
cmp eax, 0x4203aa6f
je 0x1401227d0
inc rbx
nop word cs:[rax + rax]
mov eax, dword [0x140228408]
mov ecx, dword [0x14022840c]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
not ecx
imul eax, ecx, 0x79695017
add eax, 0xd83ae0a5
cmp eax, 0xa4c1737e
jb 0x140122810
cmp rbx, rsi
mov r8, qword [rbp + 0x88]
jne 0x140122690
mov rcx, qword [rbp + 0x58]
mov eax, dword [0x1402283e0]
xor edx, edx
div dword [0x1402283e4]
add eax, 0x622efa06
xor eax, 0xcbf6556c
add eax, 0xcc95e317
cmp eax, 0x65bf7d71
jb 0x140122850
lea rax, [r8 + rcx*2]
mov qword [rbp + 0x70], rax
mov esi, 0xa3adedeb
xor ebx, ebx
xor eax, eax
cmp rax, rcx
je 0x140122df4
mov rcx, qword [rbp + 0x88]
lea rdx, [rcx + rax*2]
xor r14d, r14d
mov rcx, rdx
cmp word [rcx], 0
je 0x1401228fa
add rcx, 2
nop dword [rax]
mov r9d, dword [0x140228410]
or r9d, dword [0x140228414]
add r9d, 0x19db4f57
mov r8d, r9d
not r8d
and r8d, 0xa0776bc
and r9d, 0x15f88943
sub r9d, r8d
or r9d, 0xe2f7e7a6
cmp r9d, 0x1745d2f7
jb 0x1401228b0
inc r14
cmp rcx, qword [rbp + 0x70]
jne 0x14012289f
jmp 0x140122df4
mov ecx, dword [0x140228430]
mov r10d, dword [0x140228434]
mov r8d, ecx
not r8d
and r8d, r10d
mov r9d, r10d
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, r10d
or ecx, r10d
imul ecx, r8d
add ecx, r9d
or ecx, 0x98f6954e
imul rcx, rcx, 0x1bc20ab3
shr rcx, 0x3c
cmp ecx, 0xa09ac1d8
je 0x1401228fa
mov rcx, r14
and rcx, rax
mov r8, r14
xor r8, rax
lea r11, [r8 + rcx*2]
cmp r11, rax
jb 0x140122e6c
cmp r11, qword [rbp + 0x58]
ja 0x140122ec3
mov eax, dword [0x140228468]
sub eax, dword [0x14022846c]
or eax, 0xbd1a941c
lea ecx, [rax - 0x87a6cef]
mov r8d, ecx
and r8d, 0x5480fad0
xor ecx, 0xab7d052f
add eax, ecx
add eax, 0xf7859311
sub eax, r8d
cmp eax, 0x1069d38d
jb 0x140122969
lea rax, [rdx + r14*2]
mov ecx, dword [0x140228470]
mov r8d, dword [0x140228474]
add ecx, r8d
add ecx, 0xebc4aded
mov r8d, ecx
and r8d, 0x2f438de8
add r8d, r8d
sub ecx, r8d
add ecx, 0xaf438de8
mov r9d, ecx
not r9d
and r9d, 0x381e081
mov r8d, ecx
and r8d, 0xfc7e1f7e
imul r8d, r9d
mov r9d, ecx
and r9d, 0x381e081
or ecx, 0x381e081
imul ecx, r9d
add ecx, r8d
cmp ecx, 0xa533eab2
ja 0x1401229a5
mov rcx, rdx
cmp rcx, rax
je 0x140122df4
mov r15, rdx
nop word [rax + rax]
mov edx, dword [0x140228488]
mov r8d, dword [0x14022848c]
mov r9d, edx
not r9d
and r9d, r8d
mov r10d, r8d
not r10d
and r10d, edx
imul r10d, r9d
mov r9d, edx
and r9d, r8d
or edx, r8d
imul edx, r9d
add edx, r10d
and edx, 0xdfb64337
mov r8d, edx
xor r8d, 0xd7144137
xor edx, 0x28e21e08
or edx, 0x609a0c2
and r8d, 0xc9324304
and edx, 0x689a0f2
or edx, r8d
xor edx, 0xc3669569
cmp edx, 0x73419c1e
jb 0x140122a20
movzx edx, word [rcx]
add rcx, 2
mov r8d, dword [0x140228490]
sub r8d, dword [0x140228494]
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0x401a5c16
and r9d, 0xbfe5a3e9
imul r9d, r10d
mov r10d, r8d
and r10d, 0xbfe5a3e9
or r8d, 0xbfe5a3e9
imul r8d, r10d
add r8d, r9d
xor r8d, 0xce963484
mov r9d, r8d
and r9d, 0x29227d34
or r8d, 0x29227d34
add r8d, r9d
cmp r8d, 0x1d2f99a3
je 0x140122a94
nop dword [rax]
mov r8d, dword [0x140228498]
or r8d, dword [0x14022849c]
xor r8d, 0x4fb10da2
imul r8, rsi
shr r8, 0x3f
or r8d, 0xbcc1f202
cmp r8d, 0xbf9cc019
ja 0x140122b00
cmp dx, 0x3d
mov rdx, r15
jne 0x140122a0e
mov qword [rbp + 0x40], r11
mov eax, dword [0x1402284a0]
mov ecx, dword [0x1402284a4]
mov r8d, ecx
and r8d, eax
add eax, ecx
sub eax, r8d
add eax, 0x8c442be4
mov ecx, eax
and ecx, 0x718d1d2a
xor eax, 0xf18d1d2a
lea eax, [rax + rcx*2]
cmp eax, 0x2771e726
mov rdi, qword [rbp - 0x40]
je 0x140122cb7
mov r12d, dword [0x1402284a8]
sub r12d, dword [0x1402284ac]
mov eax, r12d
not eax
mov ecx, r12d
and ecx, 0x17cd0d10
and eax, 0xe832f2ef
imul eax, ecx
mov ecx, r12d
and ecx, 0xe832f2ef
or r12d, 0xe832f2ef
imul r12d, ecx
add r12d, eax
sub rsp, 0x20
mov rcx, rdi
mov r8, r14
call fcn.1400b7770
mov rdx, r15
add rsp, 0x20
cmp r12d, 0xd3bbabbd
je 0x140122cb7
mov r12, qword [rbp + 0x90]
mov r14, qword [rbp + 0x50]
mov r10d, 0x974becff
mov r11, qword [rbp + 0x40]
mov eax, dword [0x1402284b0]
mov ecx, dword [0x1402284b4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
xor eax, 0xe9cccb65
imul rax, rax, 0x1fdde5b9
shr rax, 0x3c
cmp eax, 0x31d5359b
je 0x140122bec
mov rax, qword [r14]
movabs rdi, 0x8000000000000000
xor r9d, r9d
mov ecx, dword [0x1402284b8]
mov edx, dword [0x1402284bc]
add ecx, edx
add ecx, 0x7e347bd5
mov edx, ecx
xor edx, 0x37c9ed4e
and edx, ecx
mov ecx, edx
not ecx
and ecx, 0x1035197
mov r8d, edx
and r8d, 0xfefcae68
imul r8d, ecx
mov ecx, edx
and ecx, 0x1035197
or edx, 0x1035197
imul edx, ecx
add edx, r8d
cmp edx, 0x9a43d2e8
ja 0x140122c29
cmp rbx, rax
jne 0x140122d38
xor r13d, r13d
mov eax, dword [0x1402284c0]
sub eax, dword [0x1402284c4]
imul rax, r10
shr rax, 0x3f
mov ecx, eax
xor ecx, 0x55c60cbd
lea eax, [rcx + rax*2]
xor eax, 0x1314ba23
cmp eax, 0xb5dc83b7
jbe 0x140122cd2
jmp 0x140122ddf
sub rsp, 0x20
mov rcx, rdi
mov r8, r14
call fcn.1400b7770
mov rdx, r15
add rsp, 0x20
jmp 0x140122b79
sub rsp, 0x20
mov rcx, r14
call fcn.1401298c0
add rsp, 0x20
test r13b, r13b
jne 0x140122ddf
mov r13, qword [r12 + 0x50]
mov eax, dword [0x1402284c8]
mov ecx, dword [0x1402284cc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xc779428e
xor eax, 0x1af35a6e
add eax, 0x8cf33414
cmp eax, 0xaa7a4e12
jb 0x140122cf0
xor r9d, r9d
mov r11, qword [rbp + 0x40]
mov eax, dword [0x1402284d0]
mov ecx, dword [0x1402284d4]
xor ecx, eax
not ecx
and ecx, eax
imul eax, ecx, 0x522862f
imul rax, rax, 0x1da0cdb3
shr rax, 0x39
not eax
and eax, 0xf06a98c1
cmp eax, 0x19838a5d
mov rdx, qword [rbp - 0x40]
jae 0x140122d90
mov rax, rbx
shl rax, 5
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r13 + rax + 0x10], xmm1
movups xmmword [r13 + rax], xmm0
lea rax, [rbx + 1]
mov qword [r12 + 0x58], rax
mov rax, rbx
shl rax, 5
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r13 + rax + 0x10], xmm1
movups xmmword [r13 + rax], xmm0
mov eax, ebx
and eax, 1
mov rcx, rbx
xor rcx, 1
lea rax, [rcx + rax*2]
mov qword [r12 + 0x58], rax
test r9b, r9b
jne 0x140122d90
inc r11
mov rbx, rax
mov rax, r11
mov rcx, qword [rbp + 0x58]
cmp r11, rcx
jbe 0x140122885
jmp 0x140122f36
sub rsp, 0x20
mov rcx, r14
call fcn.1401298c0
add rsp, 0x20
jmp 0x140122cd2
mov eax, dword [0x140228438]
mov ecx, dword [0x14022843c]
xor ecx, eax
not ecx
and ecx, eax
imul eax, ecx, 0x6a0da5bc
mov ecx, eax
not ecx
and ecx, 0x2e473873
and eax, 0xd1b8c78c
sub eax, ecx
xor eax, 0x3911de7a
cmp eax, 0x532d4fdf
jb 0x140122df4
cmp qword [rbp - 0x28], 0
mov r13d, dword [rbp + 0x68]
mov r15, qword [rbp + 0x88]
je 0x140122f70
mov eax, dword [0x140228440]
xor edx, edx
div dword [0x140228444]
and eax, 0xe5863c8f
add eax, 0x6f184373
and eax, 0xbb9eb965
cmp eax, 0x68a1966c
jne 0x140123880
jmp 0x1401238a9
ud2
mov eax, dword [0x140228478]
xor edx, edx
div dword [0x14022847c]
mov ecx, eax
not ecx
and ecx, 0xcb0aad5b
mov edx, eax
and edx, 0x34f552a4
imul edx, ecx
mov ecx, eax
and ecx, 0xcb0aad5b
or eax, 0xcb0aad5b
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x999bf432
xor eax, 0x444034d
or eax, 0x62b28880
add eax, ecx
cmp eax, 0xea544133
jne 0x140122f15
ud2
mov eax, dword [0x140228480]
xor edx, edx
div dword [0x140228484]
xor eax, 0x4c7405c3
ud2
mov eax, dword [0x140228418]
xor edx, edx
div dword [0x14022841c]
xor eax, 0xfe4f6c40
imul eax, eax, 0xbf588191
add eax, 0x8b2718cb
cmp eax, 0x34dfec8d
jae 0x140123952
jmp 0x140123992
mov eax, dword [0x1402284d8]
mov ecx, dword [0x1402284dc]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
and eax, 0x6b90c06f
add eax, eax
neg eax
add eax, ecx
add eax, 0xe8f17679
or eax, 0x5e9497ce
cmp eax, 0x37e37b17
jb 0x140122f70
mov eax, dword [0x1402284e0]
mov ecx, dword [0x1402284e4]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
and ecx, 0x49bb12c3
add ecx, ecx
sub eax, ecx
add eax, 0xc9bb12c3
or eax, 0x122f1e22
cmp eax, 0xd0e9a768
je 0x140122fa0
mov eax, dword [0x1402284e8]
xor edx, edx
div dword [0x1402284ec]
mov ecx, 0xc16cd065
lea rbx, [r12 + 0x98]
lea r14, [r12 + 0xb8]
nop word cs:[rax + rax]
mov eax, dword [0x1402284f0]
xor edx, edx
div dword [0x1402284f4]
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0xf2b29201
mov edx, eax
and edx, 0xbc06b61f
or eax, 0xbc06b61f
add eax, edx
cmp eax, 0x29eb4e79
jb 0x140123000
test r13d, r13d
je 0x14012307a
cmp r13d, 1
jne 0x14012307f
nop dword [rax]
mov eax, dword [0x140228500]
xor edx, edx
div dword [0x140228504]
imul rax, rax, 0x14427d77
shr rax, 0x35
mov ecx, eax
or ecx, 0xbfa11040
and ecx, 0xbfa11073
and eax, 0x33
add eax, eax
sub eax, ecx
cmp eax, 0x40d58e6a
jae 0x140123040
mov r15b, 1
jmp 0x1401230e0
xor r15d, r15d
jmp 0x1401230e0
cmp r13d, 2
jne 0x140123680
mov rax, qword [rbx]
nop dword [rax]
mov ecx, dword [0x140228508]
imul ecx, dword [0x14022850c]
mov edx, ecx
not edx
and edx, 0x9d29f9ec
mov r8d, ecx
and r8d, 0x62d60613
imul r8d, edx
mov edx, ecx
and edx, 0x9d29f9ec
or ecx, 0x9d29f9ec
imul ecx, edx
add ecx, r8d
imul ecx, ecx, 0xd08d6bad
cmp rax, rdi
sete r15b
cmp ecx, 0xedb0524
je 0x140123090
nop
mov eax, dword [0x140228510]
imul eax, dword [0x140228514]
lea ecx, [rax + 0x7c84d429]
mov edx, ecx
and edx, 0x2882a5ba
xor ecx, 0xd77d5a45
add eax, ecx
add eax, 0x7c84d429
sub eax, edx
add eax, 0xc64c53bf
cmp eax, 0xa757323e
jb 0x1401230e0
mov eax, dword [rbp + 0x78]
test eax, eax
mov rdi, qword [rbp + 0x38]
je 0x140123178
cmp eax, 1
je 0x140123190
cmp dword [rbp + 0x78], 2
jne 0x1401236c5
movabs rax, 0x8000000000000000
cmp qword [r14], rax
sete al
mov ecx, dword [0x140228520]
xor ecx, dword [0x140228524]
or ecx, 0x88f6db54
mov edx, ecx
and edx, 0x53a54688
xor ecx, 0xd3a54688
lea ecx, [rcx + rdx*2]
imul rcx, rcx, 0x76d9686d
shr rcx, 0x3e
cmp ecx, 0xa366ecb8
je 0x140123140
jmp 0x14012317a
xor eax, eax
or al, r15b
xor ecx, ecx
nop
test cl, cl
jne 0x140123180
test al, al
je 0x140123e45
nop dword [rax]
mov eax, dword [0x140228528]
mov ecx, dword [0x14022852c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0xfffdf975
and eax, 0x2068a
sub eax, ecx
add eax, 0xe253e029
imul rax, rax, 0x2c6e4747
shr rax, 0x3d
cmp eax, 0xc501edd0
ja 0x140123190
mov eax, edi
shr eax, 1
mov qword [rbp + 0x58], rax
inc rax
mov qword [rbp + 0x70], rax
lea rdx, [rax + rax]
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
call fcn.140107940
add rsp, 0x20
test rax, rax
mov r13, qword [rbp + 0x20]
je 0x140123853
mov rsi, rax
nop dword [rax]
mov eax, dword [0x140228540]
add eax, dword [0x140228544]
mov ecx, eax
and ecx, 0x6744a452
xor eax, 0x6744a452
lea eax, [rax + rcx*2]
mov ecx, eax
xor ecx, 0xa0e48d22
and ecx, eax
imul rax, rcx, 0x11d0557
shr rax, 0x34
cmp eax, 0x7b261990
ja 0x140123220
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x88], rbx
mov eax, dword [0x140228548]
mov ecx, dword [0x14022854c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0xebd42628
mov ecx, eax
and ecx, 0x3dd586ea
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xbdd586ea
mov ecx, eax
not ecx
or ecx, 0x479ab9f9
or eax, 0xb8654606
and eax, ecx
cmp eax, 0x7c31f514
jae 0x1401232d5
mov rax, qword [rbp + 0x60]
mov qword [rax], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x80]
mov rdx, r13
mov r8, rsi
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov rbx, qword [rbp + 0x80]
mov r14, r13
mov r13, rdi
mov rdi, qword [rbp + 0x60]
nop word cs:[rax + rax]
mov eax, dword [0x140228550]
mov ecx, dword [0x140228554]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
imul r12d, eax, 0x6f45fcd3
and r12d, 0x747ebd83
add r12d, 0xdff62247
mov qword [rdi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov rdx, r14
mov r8, rsi
mov r9, r13
call fcn.140151070
add rsp, 0x30
cmp r12d, 0x881646bd
jb 0x1401232f0
test eax, eax
je 0x140123707
mov r12, qword [rbp + 0x90]
mov r14, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x60]
mov r9, qword [rbp + 0x38]
mov r8, qword [rbp + 0x70]
nop word [rax + rax]
mov eax, dword [0x140228558]
imul eax, dword [0x14022855c]
imul rcx, rax, 0x2711a2f7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x19eaddbe
cmp eax, 0x746a2a7f
ja 0x140123370
mov rcx, qword [rdx]
mov eax, dword [0x140228560]
xor edx, edx
div dword [0x140228564]
mov edx, eax
not edx
or eax, 0x20001202
and edx, 0x515c099
and eax, 0x38ca3e62
or eax, edx
xor eax, 0x1645cc9b
add eax, 0xc1eb284d
cmp eax, 0x23b9f5d1
jb 0x1401233a0
cmp rcx, r9
jne 0x140123aa7
nop
mov eax, dword [0x140228580]
xor edx, edx
div dword [0x140228584]
and eax, 0x8cbd6235
lea ecx, [rax - 0x8fc91ea]
mov edx, ecx
and edx, 0x8a182e70
xor ecx, 0x75e7d10f
add eax, ecx
add eax, 0xf7036e16
sub eax, edx
cmp eax, 0xcd31f6e4
jb 0x1401233e0
mov rax, qword [rbp + 0x58]
mov word [rsi + rax*2], 0
lea r11, [rsi + r8*2]
xor ecx, ecx
mov r9, rsi
mov r13d, dword [rbp + 0x68]
cmp word [r9], 0
je 0x1401234fd
nop dword [rax]
mov eax, dword [0x140228588]
sub eax, dword [0x14022858c]
add eax, 0x6b4c0157
mov edx, eax
not edx
mov r10d, eax
and r10d, 0xaed22706
and edx, 0x512dd8f9
imul edx, r10d
mov r10d, eax
and r10d, 0x512dd8f9
or eax, 0x512dd8f9
imul eax, r10d
add eax, edx
cmp eax, 0xf81524f7
je 0x140123440
add r9, 2
inc rcx
nop dword [rax]
mov eax, dword [0x140228590]
xor edx, edx
div dword [0x140228594]
imul rax, rax, 0x599345c1
shr rax, 0x3b
and eax, 0xfffffffd
add eax, 0xf5f68097
cmp eax, 0x4a7fd454
jb 0x140123490
nop dword [rax + rax]
mov eax, dword [0x140228598]
mov edx, dword [0x14022859c]
add eax, edx
add eax, 0xdd75e361
mov edx, eax
and edx, 0xd1266199
and eax, 0x206091
add eax, eax
sub edx, eax
add edx, 0x8c21f2b1
cmp edx, 0x8b24c589
jb 0x1401234c0
cmp r9, r11
jne 0x14012342e
jmp 0x140123534
mov eax, dword [0x1402285a0]
mov edx, dword [0x1402285a4]
mov r8d, eax
xor r8d, edx
not edx
and edx, eax
add edx, edx
sub edx, r8d
add edx, 0x3fddd504
and edx, 0x752d5719
imul eax, edx, 0xbe04ee36
cmp eax, 0xfbd8580c
je 0x1401234fd
mov r8, rcx
mov rdi, qword [rbp + 0x28]
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.1400b7770
add rsp, 0x20
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x78]
mov qword [rbp + 0x70], rdx
mov r9, qword [rbp + 0x50]
call fcn.140129c80
add rsp, 0x20
test r15b, r15b
je 0x140123748
mov eax, dword [0x1402285e0]
mov ecx, dword [0x1402285e4]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x5d029336
add ecx, ecx
sub eax, ecx
add eax, 0x5d029336
mov ecx, eax
not ecx
and ecx, 0x44fc5807
mov edx, eax
and edx, 0xbb03a7f8
imul edx, ecx
mov ecx, eax
and ecx, 0x44fc5807
or eax, 0x44fc5807
imul eax, ecx
add eax, edx
not eax
or eax, 0x386a2687
cmp eax, 0x989271d5
jb 0x140123574
mov rax, qword [rbp + 0x28]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rdi, qword [rbp - 0x78]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rax, qword [r14]
mov ecx, dword [0x1402285e8]
mov edx, dword [0x1402285ec]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
xor ecx, 0x60286051
or ecx, 0x9d4191aa
cmp ecx, 0xa055dcdf
je 0x1401235e7
shl rax, 1
test rax, rax
je 0x140123653
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1402285f0]
xor eax, dword [0x1402285f4]
imul eax, eax, 0xda8a0ee5
xor eax, 0x5ed044f5
imul eax, eax, 0x18ab59ea
cmp eax, 0xffe0d90b
jbe 0x140123ce6
jmp 0x140123d1d
mov eax, dword [0x1402284f8]
mov ecx, dword [0x1402284fc]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and eax, 0x158e8693
xor ecx, 0x6a71796c
lea eax, [rcx + rax*2]
or eax, 0x51203011
mov ecx, eax
and ecx, 0x5834e876
xor eax, 0x5834e876
lea eax, [rax + rcx*2]
cmp eax, 0xcf72738a
ja 0x140123680
jmp 0x140120b0e
mov eax, dword [0x140228518]
mov ecx, dword [0x14022851c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0x42278
or ecx, 0x1b8000
and ecx, eax
or ecx, 0xffe05d87
xor ecx, 0xc2ef7d5
cmp ecx, 0x72717d4f
jb 0x1401236c5
jmp 0x140120b0e
mov eax, dword [0x140228568]
xor edx, edx
div dword [0x14022856c]
imul rax, rax, 0x2a10b0cb
shr rax, 0x3d
xor eax, 0x5b9468a3
add eax, 0xf7cf7bc0
cmp eax, 0x989f0126
mov r12, qword [rbp + 0x90]
mov r14, qword [rbp + 0x88]
jbe 0x140123a17
jmp 0x140123a4a
mov rax, qword [rdi]
mov ecx, dword [0x140228608]
mov edx, dword [0x14022860c]
mov r8d, ecx
and r8d, edx
xor ecx, edx
lea ecx, [rcx + r8*2]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xf9d5bfe6
and edx, 0x62a4019
imul edx, r8d
mov r8d, ecx
and r8d, 0x62a4019
or ecx, 0x62a4019
imul ecx, r8d
add ecx, edx
mov edx, ecx
not edx
and edx, 0x637b7a66
and ecx, 0x9c848599
sub ecx, edx
imul rcx, rcx, 0x73ee1ae5
shr rcx, 0x3c
cmp ecx, 0x6fdaae0d
je 0x14012374b
mov edx, dword [0x140228610]
mov ecx, dword [0x140228614]
mov r8d, edx
xor r8d, ecx
not ecx
and ecx, edx
add ecx, ecx
sub ecx, r8d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xbd1b0e2f
and edx, 0x42e4f1d0
imul edx, r8d
mov r8d, ecx
and r8d, 0x42e4f1d0
or ecx, 0x42e4f1d0
imul ecx, r8d
add ecx, edx
or ecx, 0x4f54bb20
xor ecx, 0xc84ec6a0
cmp ecx, 0x110498a8
jb 0x1401237b6
test rax, rax
je 0x140123de3
mov eax, dword [0x140228618]
xor edx, edx
div dword [0x14022861c]
mov ecx, 0x766682b6
sub ecx, eax
add eax, 0x89997d49
and ecx, 0xc6715d57
and eax, 0x398ea2a8
or eax, ecx
cmp eax, 0xa0164d03
jne 0x140123d9b
jmp 0x140123dc7
mov eax, dword [0x140228530]
sub eax, dword [0x140228534]
mov ecx, eax
not ecx
and ecx, 0xb4b774d6
and eax, 0x4b488b29
sub eax, ecx
cmp eax, 0x3b5bc90c
jne 0x1401239d2
jmp 0x140123a08
mov eax, dword [0x140228448]
and eax, dword [0x14022844c]
xor eax, 0x5ee65cca
add eax, 0xe654d94c
or eax, 0x22226b8f
mov rsi, qword [0x14022cb48]
cmp eax, 0xd0cfcf2a
jae 0x1401238b2
mov rax, qword [0x14022cb48]
jmp 0x140123880
mov eax, dword [0x140228450]
mov ecx, dword [0x140228454]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0xac92f37e
mov eax, ecx
and eax, 0x240e05a9
add eax, eax
neg eax
add eax, ecx
add eax, 0x240e05a9
or eax, 0x37be8aef
cmp eax, 0x6cddbbac
jae 0x1401238ff
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x140228458]
or eax, dword [0x14022845c]
add eax, 0x3e5cc6a9
mov r14d, eax
or r14d, 0x48e22400
not eax
and eax, 0x3048841
and r14d, 0x48e37612
or r14d, eax
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call rbx
add rsp, 0x20
cmp r14d, 0x93bf46d6
je 0x140123906
jmp 0x140122f70
mov eax, dword [0x140228420]
mov ecx, dword [0x140228424]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x14555a56
add ecx, eax
and eax, 0x14555a56
sub ecx, eax
mov eax, 0xde7c7fa5
imul rax, rcx
shr rax, 0x3e
add eax, 0xbbca4922
ud2
ud2
mov eax, dword [0x140228538]
sub eax, dword [0x14022853c]
mov ecx, eax
not ecx
or ecx, 0xe0dbdbb7
add eax, ecx
inc eax
xor eax, 0xf387dc79
mov ecx, 0x8f6acdbb
imul rcx, rax
shr rcx, 0x3f
ud2
ud2
mov eax, dword [str._mRneTrd]
xor edx, edx
div dword [0x140228574]
mov edi, eax
not edi
or edi, 0x2a2d5a87
and edi, 0xeaaf5b8f
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
cmp edi, 0x5d5bd9b
jne 0x140123a60
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x140123a17
mov eax, dword [0x140228578]
xor edx, edx
div dword [0x14022857c]
mov ecx, eax
not ecx
or ecx, 0x80800210
and ecx, 0xc39a86d0
mov edx, eax
and edx, 0x1841502f
or edx, ecx
xor edx, 0xeaa102da
and eax, 0x91b840a
or eax, edx
imul rax, rax, 0x3e6b615b
shr rax, 0x3b
cmp eax, 0x23b8374f
jae 0x140123a60
mov rdi, qword [0x14022cb48]
mov eax, dword [0x1402285a8]
sub eax, dword [0x1402285ac]
mov ecx, eax
xor ecx, 0x8e45b4c7
xor eax, 0x111a0930
and eax, 0x135e19b1
mov edx, ecx
and edx, 0xeca1e64e
imul edx, eax
mov eax, ecx
and eax, 0x135e19b1
or ecx, 0x135e19b1
imul ecx, eax
add ecx, edx
imul eax, ecx, 0xe3c56973
cmp eax, 0x6f0c7422
jne 0x140123b0b
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call fcn.14014eed0
add rsp, 0x20
mov r13d, dword [rbp + 0x68]
nop
mov eax, dword [0x1402285b0]
mov ebx, dword [0x1402285b4]
not eax
not ebx
or ebx, eax
not ebx
add ebx, 0x829c378b
not ebx
or ebx, 0x4777ea79
and ebx, 0xd7fffe7d
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call fcn.14014eed0
add rsp, 0x20
cmp ebx, 0xb76b0b00
je 0x140123b10
nop word cs:[rax + rax]
mov eax, dword [0x1402285b8]
sub eax, dword [0x1402285bc]
mov ecx, eax
or ecx, 0x84005
not eax
and eax, 0x12050b00
and ecx, 0x10ac007
add eax, ecx
add eax, 0xccd03478
cmp eax, 0x6df566e2
jb 0x140123b60
mov rax, qword [r14]
shl rax, 1
test rax, rax
je 0x140123c39
mov eax, dword [0x1402285c0]
xor eax, dword [0x1402285c4]
imul eax, eax, 0xf505ebc3
xor eax, 0x349f2ff
cmp eax, 0x74305ea0
ja 0x140123b9e
mov rsi, qword [r12 + 0xa0]
mov eax, dword [0x1402285c8]
mov ecx, dword [0x1402285cc]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul eax, eax, 0xfb68cb8e
add eax, 0x4e700231
mov ecx, eax
xor ecx, 0x29424fbe
or eax, 0xd6bdb041
and eax, ecx
cmp eax, 0xeef7f7f9
jbe 0x140123c15
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
test dil, dil
jne 0x140123c1e
mov eax, dword [0x1402285d0]
mov ecx, dword [0x1402285d4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
and ecx, 0x853932fc
xor ecx, 0x642a2f11
add ecx, 0xd8cb1832
cmp ecx, 0x9e660fdc
movabs rcx, 0x8000000000000000
ja 0x140123c7e
mov qword [r14], rcx
xor eax, eax
test al, al
je 0x140123c90
mov qword [r14], rcx
jmp 0x140123c75
mov eax, dword [0x1402285d8]
mov ecx, dword [0x1402285dc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
xor eax, 0x2c61105
imul rcx, rax, 0xebc8bb9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x42b74ad9
cmp eax, 0x88b8b651
ja 0x140123c90
jmp 0x140123e45
mov eax, dword [0x1402285f8]
xor edx, edx
div dword [0x1402285fc]
or eax, 0x46a5bd16
shr eax, 1
imul rax, rax, 0x5ba77835
shr rax, 0x38
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
cmp eax, 0x74a59026
jne 0x140123d2f
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
jmp 0x140123ce6
mov eax, dword [0x140228600]
sub eax, dword [0x140228604]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xef909496
and ecx, 0x106f6b69
imul ecx, edx
mov edx, eax
and edx, 0x106f6b69
or eax, 0x106f6b69
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x90d49a02
xor eax, 0x220b00dd
and eax, 0x229f8adf
mov edx, ecx
and edx, 0xdd607520
imul edx, eax
mov eax, ecx
and eax, 0x229f8adf
or ecx, 0x229f8adf
imul ecx, eax
add ecx, edx
cmp ecx, 0x85106814
ja 0x140123d2f
jmp 0x140123de3
mov eax, dword [0x140228620]
mov ecx, dword [0x140228624]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
xor eax, 0x19d63147
add eax, 0x266b1018
mov rcx, qword [0x14022cb48]
cmp eax, 0xe4b448a5
jbe 0x140123dd0
mov rax, qword [0x14022cb48]
jmp 0x140123d9b
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x70]
call fcn.14014eed0
add rsp, 0x20
xor eax, eax
test al, al
jne 0x140123e13
mov eax, dword [0x140228628]
xor eax, dword [0x14022862c]
imul eax, eax, 0x6e824da7
add eax, 0xbc2a42a8
or eax, 0x6db80e1e
mov rcx, qword [0x14022cb48]
cmp eax, 0xff6b364f
jbe 0x140123e1c
mov rax, qword [0x14022cb48]
jmp 0x140123de9
sub rsp, 0x20
xor edi, edi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
test dil, dil
jne 0x140123e40
mov r15, qword [rbp + 0x80]
mov rdi, qword [rbp + 0x10]
mov eax, dword [str.11qY]
mov ecx, dword [0x140228634]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd537709b
and ecx, 0x2ac88f64
imul ecx, edx
mov edx, eax
and edx, 0x2ac88f64
or eax, 0x2ac88f64
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or eax, 0x8800d04a
or ecx, 0x5c80006
and ecx, eax
not ecx
or ecx, 0x72372fb1
cmp ecx, 0xed6c5292
ja 0x140123e50
jmp 0x14011f86b
mov eax, dword [0x140228680]
sub eax, dword [0x140228684]
mov ecx, eax
not ecx
and ecx, 0x6e038c8e
mov edx, eax
and edx, 0x91fc7371
imul edx, ecx
mov ecx, eax
and ecx, 0x6e038c8e
or eax, 0x6e038c8e
imul eax, ecx
add eax, edx
mov ecx, 0x89f40f5b
imul rcx, rax
shr rcx, 0x3f
imul esi, ecx, 0x5a1af66f
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp esi, 0xf6e28944
jb 0x140123f35
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x140123ec9
mov rdi, r14
mov rbx, qword [rbp + 0x30]
nop dword [rax]
mov eax, dword [0x140228b90]
or eax, dword [0x140228b94]
imul rax, rax, 0x77e30feb
shr rax, 0x3e
add eax, 0xede073eb
cmp eax, 0x4f26db21
jb 0x140123f40
movzx eax, byte [rbx + 8]
lea rbx, [r12 + 0x60]
nop dword [rax]
mov ecx, dword [0x140228b98]
mov edx, dword [0x140228b9c]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
add ecx, 0xbff37a58
xor ecx, 0x5200088c
and ecx, 0xf347288c
cmp ecx, 0x582b3cb3
jb 0x140123f70
test eax, eax
mov r8, qword [rbp - 0x20]
je 0x140127704
cmp eax, 1
je 0x140124020
xor eax, eax
nop
test al, al
jne 0x140123fd0
mov rax, qword [rbx]
nop word [rax + rax]
mov ecx, dword [0x140228ba0]
mov edx, dword [0x140228ba4]
xor edx, ecx
not edx
and edx, ecx
mov ecx, edx
not ecx
or ecx, 0xe3d8aff
add ecx, edx
inc ecx
and ecx, 0x1058c04a
cmp ecx, 0x965d8f25
je 0x140123fe0
cmp rax, rdi
jne 0x140127704
nop word [rax + rax]
mov eax, dword [0x140228bb8]
and eax, dword [0x140228bbc]
xor eax, 0xaee050a8
add eax, 0x58259ad6
cmp eax, 0x6f29fcd5
ja 0x140124020
mov rax, qword [r12 + 0xf8]
test rax, rax
je 0x14012426d
mov rsi, qword [rax + 0x10]
sub rsp, 0x20
xor edi, edi
mov r8d, 0x20a
mov r14, qword [rbp - 0x70]
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
xor edx, edx
mov r8, r14
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
mov r9d, 0x9bf0718d
xor ecx, ecx
nop dword [rax]
cmp word [r14 + rcx*2], 0
je 0x14012430c
lea r8, [rcx + 1]
mov eax, dword [0x140228bf8]
xor edx, edx
div dword [0x140228bfc]
mov eax, dword [0x140228c00]
add eax, dword [0x140228c04]
mov edx, eax
or edx, 0x69e86f9f
mov r10d, eax
not r10d
and r10d, 0x92179000
mov r11d, edx
and r11d, 0x44c06b6b
imul r11d, r10d
and edx, 0xbb3f9494
or eax, 0xfbffff9f
imul eax, edx
add eax, r11d
imul rax, rax, 0x72c4f229
shr rax, 0x3c
cmp eax, 0xea353174
je 0x1401240ae
cmp word [r14 + r8*2], 0
je 0x14012430f
mov eax, dword [0x140228c08]
mov edx, dword [0x140228c0c]
mov r8d, edx
not r8d
mov r10d, eax
and r10d, r8d
or r8d, eax
not r8d
imul r8d, r10d
mov r10d, eax
and r10d, edx
or eax, edx
imul eax, r10d
add eax, r8d
imul rax, r9
shr rax, 0x3e
add eax, 0x6e3cb057
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x60188011
and edx, 0x80c3050e
imul edx, r8d
mov r8d, eax
and r8d, 0xe24304e
or eax, 0x8ee7354e
imul eax, r8d
add eax, edx
cmp eax, 0xf02f35f5
ja 0x14012410c
mov eax, ecx
and eax, 2
mov rdx, rcx
xor rdx, 2
lea r8, [rdx + rax*2]
cmp word [r14 + r8*2], 0
je 0x14012430f
mov eax, dword [0x140228c10]
xor edx, edx
div dword [0x140228c14]
nop dword [rax + rax]
mov eax, dword [0x140228c18]
mov edx, dword [0x140228c1c]
mov r8d, eax
not r8d
and r8d, edx
mov r10d, edx
not r10d
and r10d, eax
imul r10d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r10d
add eax, 0x27f6c59d
or eax, 0x5108028
and eax, 0x2f95b428
cmp eax, 0x6681dba0
je 0x1401241b0
add rcx, 3
nop dword [rax + rax]
mov eax, dword [0x140228c20]
mov edx, dword [0x140228c24]
not edx
mov r8d, eax
or r8d, edx
and edx, eax
not r8d
or r8d, edx
mov eax, r8d
xor eax, 0x546aa49f
and r8d, 0x2b955b60
add r8d, r8d
sub r8d, eax
and r8d, 0x8f499558
imul rax, r8, 0x68f1e3ed
shr rax, 0x3b
cmp eax, 0xbd371b4f
je 0x140124200
nop word [rax + rax]
test dil, dil
jne 0x140124250
cmp rcx, 0x105
jne 0x140124090
mov r8d, 0x105
jmp 0x140124324
mov eax, dword [0x140228be0]
imul eax, dword [0x140228be4]
or eax, 0xccdc1019
and eax, 0xddfc99fb
mov ecx, 0xce2189fb
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x3cb67371
jne 0x14012429c
mov qword [r8], rdi
mov eax, 0xaf53c1b5
nop word cs:[rax + rax]
mov ecx, dword [0x140228be8]
or ecx, dword [str.1]
imul ecx, ecx, 0x77e410d4
imul rcx, rax
shr rcx, 0x3e
add ecx, 0xb9af5251
mov qword [r8], rdi
cmp ecx, 0x1ee961aa
jb 0x1401242b0
nop dword [rax + rax]
mov eax, dword [0x140228bf0]
mov ecx, dword [0x140228bf4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0x74fa54b6
xor eax, 0xa0a92040
and eax, 0xa6af7040
cmp eax, 0xc1064da8
jae 0x1401242e0
jmp 0x140124340
mov r8, rcx
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140124320
sub rsp, 0x20
mov rcx, qword [rbp - 0x20]
mov rdx, r14
call fcn.1400b7770
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x140228c28]
xor edx, edx
div dword [0x140228c2c]
mov ecx, eax
not ecx
and ecx, 0xa0754515
mov edx, eax
and edx, 0x5f8abaea
imul edx, ecx
mov ecx, eax
and ecx, 0xa0754515
or eax, 0xa0754515
imul eax, ecx
add eax, edx
add eax, 0xea1fe5cb
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x38e4165d
and ecx, 0xc71be9a2
imul ecx, edx
mov edx, eax
and edx, 0xc71be9a2
or eax, 0xc71be9a2
imul eax, edx
add eax, ecx
cmp eax, 0x44dca011
je 0x140124340
mov rax, qword [rbx]
shl rax, 1
test rax, rax
je 0x140124504
mov eax, dword [0x140228c30]
xor edx, edx
div dword [0x140228c34]
mov eax, 0x93c2e505
nop word [rax + rax]
mov ecx, dword [0x140228c38]
xor ecx, dword [0x140228c3c]
imul rcx, rcx, 0x5cb9e321
shr rcx, 0x3d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xfffffffe
and edx, 0xd8c2e8a1
imul edx, r8d
mov r8d, ecx
and r8d, 1
or ecx, 0xd8c2e8a1
imul ecx, r8d
add ecx, edx
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xddfc5fa4
ja 0x1401243d0
mov rsi, qword [r12 + 0x68]
mov rdi, qword [0x14022cb48]
mov eax, dword [0x140228c40]
mov ecx, dword [0x140228c44]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x7b31049c
and ecx, 0xc67103
mov r8d, edx
and r8d, 0xde288e60
imul r8d, ecx
and edx, 0x21d7719f
or eax, 0x7bf7759f
imul eax, edx
add eax, r8d
mov ecx, 0x99ce87f9
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x88c800cb
jbe 0x14012449e
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call fcn.14014eed0
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x140228c48]
mov ecx, dword [0x140228c4c]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
and ecx, 0xec33cf70
xor ecx, 0xc8224d40
or ecx, 0x13cc308c
shr ecx, 2
imul r15, rcx, 0x21931b57
shr r15, 0x3b
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
cmp r15d, 0xf6e3e352
ja 0x1401244b0
mov eax, dword [0x140228c50]
mov ecx, dword [0x140228c54]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0xb582c64b
and eax, 0x4a7d39b4
or eax, r9d
or edx, r8d
and r8d, 0xb582c64b
and ecx, 0x4a7d39b4
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
imul eax, edx, 0x1b07cd4e
mov ecx, eax
xor ecx, 0xc5a1b14e
add ecx, eax
and eax, 0x3a5e4eb0
sub ecx, eax
cmp ecx, 0x87555976
mov rdx, qword [rbp - 0x20]
jne 0x14012785d
jmp 0x1401278a9
sub rsp, 0x20
call fcn.1401510a0
add rsp, 0x20
xor eax, eax
test al, al
je 0x1401245a0
sub rsp, 0x20
call fcn.140174530
add rsp, 0x20
jmp 0x140124571
mov eax, dword [0x1402286b8]
mov ecx, dword [0x1402286bc]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
and ecx, 0x61292552
or eax, 0x61292552
add eax, ecx
and eax, 0xf6afad6a
imul eax, eax, 0xff3e4bdf
cmp eax, 0x5b6f97d0
je 0x1401245a0
movzx ecx, byte [0x14022cb74]
nop dword [rax]
mov eax, dword [0x1402286c0]
and eax, dword [0x1402286c4]
or eax, 0x83c4ab81
add eax, 0xe6511a15
cmp eax, 0xf498b847
ja 0x1401245e0
nop dword [rax]
mov eax, dword [0x1402286c8]
xor edx, edx
div dword [0x1402286cc]
add eax, 0xda0dad1b
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x430765b0
and edx, 0xbcf89a4f
imul edx, r8d
mov r8d, eax
and r8d, 0xbcf89a4f
or eax, 0xbcf89a4f
imul eax, r8d
add eax, edx
imul eax, eax, 0x212b75e8
cmp eax, 0xe1bff156
ja 0x140124600
test cl, cl
je 0x140124870
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x80]
call fcn.140151100
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140228788]
mov ecx, dword [0x14022878c]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
add eax, 0x7a3f537e
or eax, 0xe836129c
shr eax, 2
imul rax, rax, 0x261096c9
shr rax, 0x3b
cmp eax, 0xc5d41316
ja 0x140124670
mov rbx, qword [r12 + 0x38]
mov rsi, qword [r12 + 0x40]
test rsi, rsi
je 0x14012494b
xor edi, edi
xor r14d, r14d
nop
mov rcx, r14
shl rcx, 5
cmp qword [rbx + rcx], 0
je 0x14012480a
add rcx, rbx
nop word cs:[rax + rax]
mov eax, dword [str.Zaa_]
sub eax, dword [0x140228794]
or eax, 0x77e8d6c9
imul eax, eax, 0x9c726bf1
add eax, 0x449f1eb1
cmp eax, 0xe6f6966a
ja 0x1401246e0
mov eax, dword [0x140228798]
and eax, dword [0x14022879c]
add eax, 0x950f9547
or eax, 0x679e0cb1
cmp eax, 0xfbac00ad
je 0x140124860
nop word cs:[rax + rax]
mov eax, dword [0x1402287a0]
xor edx, edx
div dword [0x1402287a4]
and eax, 0xf6c90da9
mov r15, qword [rcx + 8]
mov r12, qword [0x14022cb48]
cmp eax, 0x882d7ce2
je 0x140124860
mov eax, dword [0x1402287a8]
mov ecx, dword [0x1402287ac]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
and eax, 0x1180e530
add eax, eax
neg eax
add eax, ecx
add eax, 0x1180e530
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x41c4cd69
and ecx, 0xbe3b3296
imul ecx, edx
mov edx, eax
and edx, 0xbe3b3296
or eax, 0xbe3b3296
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x99730fb4
mov edx, eax
and edx, 0x668cf04a
imul edx, ecx
mov ecx, eax
and ecx, 0x99730fb4
or eax, 0x99730fb4
imul eax, ecx
add eax, edx
cmp eax, 0xbaea90f6
jbe 0x1401247f0
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
nop dword [rax]
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
test dil, dil
jne 0x1401247f0
inc r14
mov eax, dword [0x1402287b0]
xor edx, edx
div dword [0x1402287b4]
shr eax, 7
imul rax, rax, 0x2284e49
shr rax, 0x2f
lea ecx, [rax + 0x68ba2e79]
mov edx, ecx
and edx, 0x302c4f
xor ecx, 0xec8bc2b0
add eax, ecx
add eax, 0x68ba2e79
sub eax, edx
cmp eax, 0x33a05ad6
je 0x14012480d
cmp r14, rsi
jne 0x1401246c0
jmp 0x14012494b
mov rax, qword [0x14022cb48]
jmp 0x140124730
mov eax, dword [0x1402286d0]
mov ecx, dword [0x1402286d4]
add eax, ecx
add eax, 0xeea7cdf9
mov ecx, eax
and ecx, 0xb0c5acba
or eax, 0xb0c5acba
add eax, ecx
add eax, 0x13af4c62
cmp eax, 0x20a64fc
jb 0x140124870
nop
mov eax, dword [0x1402286d8]
mov ecx, dword [0x1402286dc]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0x39739d1b
and ecx, 0x1e81307c
mov eax, ecx
not eax
or eax, 0xa91f589f
add eax, ecx
inc eax
cmp eax, 0xd3e8dbb7
ja 0x1401248a0
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp + 0x80]
mov r8, r15
mov r9, rbx
mov rbx, rcx
call fcn.1401510c0
add rsp, 0x20
mov rsi, qword [rbx]
cmp rsi, rdi
jne 0x140124ba7
mov r8, qword [rbp - 8]
mov qword [r8], 0
mov eax, dword [0x140228700]
mov ecx, dword [0x140228704]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not eax
or eax, ecx
not eax
add eax, 0x26279f6e
xor eax, 0x9c302b81
or eax, 0x60c3406e
cmp eax, 0x1de383d5
jne 0x140124c9a
jmp 0x140124cdb
mov rax, qword [r13]
mov ecx, 0xea8c6931
nop word cs:[rax + rax]
mov edx, dword [0x1402287b8]
add edx, dword [str._rO_K]
mov r8d, edx
not r8d
and r8d, 0x94b37e9b
mov r9d, edx
and r9d, 0x6b4c8164
imul r9d, r8d
mov r8d, edx
and r8d, 0x94b37e9b
or edx, 0x94b37e9b
imul edx, r8d
add edx, r9d
imul rdx, rcx
shr rdx, 0x3e
or edx, 0x6352df54
cmp edx, 0xc3e691de
ja 0x140124960
test rax, rax
mov r12, qword [rbp + 0x90]
mov r8, qword [rbp - 0x18]
je 0x140124b5a
mov eax, dword [0x1402287c0]
mov ecx, dword [0x1402287c4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xae17373a
and ecx, 0x51e8c8c5
imul ecx, edx
mov edx, eax
and edx, 0x51e8c8c5
or eax, 0x51e8c8c5
imul eax, edx
add eax, ecx
or eax, 0x3867f4d8
imul eax, eax, 0xc3dae81
cmp eax, 0x651bd59a
jne 0x140124a40
mov rax, qword [0x14022cb48]
nop word cs:[rax + rax]
mov eax, dword [0x1402287c8]
and eax, dword [0x1402287cc]
mov ecx, eax
and ecx, 0x12b11d8e
xor eax, 0x12b11d8e
lea eax, [rax + rcx*2]
add eax, 0xb1a702b2
or eax, 0xbc7c1e3d
mov r15, qword [0x14022cb48]
cmp eax, 0x55522a9
jb 0x140124a40
mov eax, dword [0x1402287d0]
xor edx, edx
div dword [0x1402287d4]
xor eax, 0x1ac52e0b
imul eax, eax, 0x7dc985f3
imul rax, rax, 0x3a20c017
shr rax, 0x3d
cmp eax, 0x227f04f8
jbe 0x140124ab4
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call fcn.14014eed0
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x1402287d8]
add eax, dword [0x1402287dc]
imul edi, eax, 0x69a7130c
add edi, 0x371d5342
mov eax, edi
and eax, 0x59081e92
or edi, 0x59081e92
add edi, eax
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call rsi
add rsp, 0x20
cmp edi, 0xc0d44edc
jb 0x140124ac0
mov r8, qword [rbp - 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x1402287e0]
or eax, dword [0x1402287e4]
mov ecx, eax
not ecx
and ecx, 0x647b5c0e
mov edx, eax
and edx, 0x9b84a3f1
imul edx, ecx
mov ecx, eax
and ecx, 0x647b5c0e
or eax, 0x647b5c0e
imul eax, ecx
add eax, edx
add eax, 0x9de53f42
mov ecx, eax
xor ecx, 0xd63cda8a
and ecx, eax
cmp ecx, 0x2626331b
ja 0x140124b10
mov rax, qword [r8 + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [r8]
movups xmmword [r13], xmm0
movabs rdi, 0x8000000000000000
mov r8d, dword [rbp + 0x48]
nop dword [rax]
mov eax, dword [0x1402287e8]
and eax, dword [0x1402287ec]
add eax, 0xf79e3a0c
xor eax, 0x8532752f
add eax, 0xa9a4f21
cmp eax, 0xb2c27ebe
ja 0x140124b80
jmp 0x140125147
mov rbx, qword [rbx + 8]
sub rsp, 0x20
mov rcx, qword [rbp - 8]
mov rdx, rbx
call fcn.1401510e0
add rsp, 0x20
nop
mov eax, dword [0x1402286e0]
mov ecx, dword [0x1402286e4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
or ecx, 0x2c08a0a9
mov eax, ecx
and eax, 0x519a498e
xor ecx, 0xd19a498e
lea eax, [rcx + rax*2]
cmp eax, 0xfec92100
je 0x140124bc0
test rsi, rsi
je 0x140124ced
mov eax, dword [0x1402286e8]
imul eax, dword [0x1402286ec]
add eax, 0x98afa622
or eax, 0x68370d93
cmp eax, 0xffe5c850
je 0x140124c48
mov eax, dword [0x1402286f0]
xor edx, edx
div dword [0x1402286f4]
imul rax, rax, 0xc269697
shr rax, 0x3b
or eax, 0xe9cd9c3e
mov rcx, qword [0x14022cb48]
cmp eax, 0x382e857f
jae 0x140124c51
mov rax, qword [0x14022cb48]
jmp 0x140124c1c
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.14014eed0
add rsp, 0x20
mov eax, dword [0x1402286fc]
add eax, dword [0x1402286f8]
mov ecx, eax
and ecx, 0x2d094f69
or eax, 0x2d094f69
add eax, ecx
or eax, 0xd31048e6
mov ecx, eax
not ecx
or ecx, 0x953f10dd
add eax, ecx
inc eax
cmp eax, 0xcb8759a3
jae 0x140124c63
jmp 0x140124ced
mov eax, dword [0x140228708]
xor edx, edx
div dword [0x14022870c]
mov ecx, eax
not ecx
and ecx, 0x20822049
xor eax, 0x110000
xor ecx, 0x20000032
and eax, 0xcd39c384
sub eax, ecx
mov qword [r8 + 8], 8
mov qword [r8 + 0x10], 0
cmp eax, 0xa6b3cb3b
jae 0x140124ced
mov qword [r8 + 8], 8
mov qword [r8 + 0x10], 0
jmp 0x140124c9a
mov eax, 0xb41c26cb
nop word cs:[rax + rax]
mov ecx, dword [0x140228710]
or ecx, dword [0x140228714]
add ecx, 0x3f0c8891
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x120913be
cmp ecx, 0xa3530fbd
je 0x140124d00
nop dword [rax + rax]
mov eax, dword [str.d5_f]
add eax, dword [0x14022871c]
and eax, 0x4491470
cmp eax, 0x50ba48d4
je 0x140124d30
mov rbx, qword [r12 + 0x38]
mov rax, qword [r12 + 0x40]
mov qword [rbp + 0x88], rax
test rax, rax
je 0x140124f40
xor r14d, r14d
mov r12d, 0x92087a6d
xor edi, edi
nop dword [rax]
mov eax, dword [0x140228720]
mov ecx, eax
not ecx
or ecx, dword [0x140228724]
lea edx, [rax + rcx]
inc edx
add eax, ecx
not edx
or edx, 0x60426b77
add eax, edx
inc eax
imul eax, eax, 0xb5defdfd
add eax, 0xb5defdfd
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x13fcd5c9
and ecx, 0xec032a36
imul ecx, edx
mov edx, eax
and edx, 0xec032a36
or eax, 0xec032a36
imul eax, edx
add eax, ecx
cmp eax, 0xc9edf710
ja 0x140124d70
mov rax, rdi
shl rax, 5
cmp qword [rbx + rax], 0
je 0x140124ec3
add rax, rbx
nop word cs:[rax + rax]
test r14b, r14b
jne 0x140124df0
mov r15, qword [rax + 8]
mov eax, dword [0x140228728]
mov ecx, dword [0x14022872c]
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
not eax
imul rax, rax, 0x7a1021b1
shr rax, 0x3e
mov ecx, eax
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x1199075f
cmp eax, 0x7f3562e1
jbe 0x140124e50
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140228730]
mov ecx, dword [0x140228734]
not ecx
lea edx, [rax + rcx]
add edx, 0xdcbf26a1
add eax, ecx
not edx
or edx, 0xe5118db7
lea esi, [rdx + rax]
add esi, 0xdcbf26a2
xor esi, 0x8e8757d
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
cmp esi, 0xc1f15e93
jb 0x140124e50
nop word cs:[rax + rax]
mov eax, dword [0x140228738]
xor eax, dword [0x14022873c]
cmp eax, 0x14916fb2
je 0x140124eb0
inc rdi
nop word cs:[rax + rax]
mov eax, dword [0x140228740]
mov ecx, dword [0x140228744]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0x16b4ae6
add eax, 0xefe70b73
imul rax, rax, 0x4f21e5eb
shr rax, 0x3d
cmp eax, 0xa6a7246d
je 0x140124ed0
mov eax, dword [0x140228748]
and eax, dword [0x14022874c]
add eax, 0x264aadde
mov ecx, eax
and ecx, 0x4a509276
xor eax, 0xca509276
lea eax, [rax + rcx*2]
imul rax, r12
shr rax, 0x3f
cmp eax, 0x3a4b11c2
ja 0x140124f00
cmp rdi, qword [rbp + 0x88]
jne 0x140124d70
nop dword [rax]
mov eax, dword [0x140228750]
mov ecx, dword [0x140228754]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0xf011907f
mov ecx, eax
not ecx
or ecx, 0xfba30e4b
add eax, ecx
inc eax
xor eax, 0x30292a59
cmp eax, 0x14d3506a
jb 0x140124f40
mov rax, qword [r13]
nop
mov ecx, dword [0x140228758]
mov edx, dword [0x14022875c]
mov r8d, ecx
and r8d, edx
add r8d, r8d
add ecx, edx
sub ecx, r8d
mov edx, ecx
xor edx, 0xc0220cdd
and edx, ecx
add edx, 0xb57c22a6
mov ecx, edx
not ecx
and ecx, 0xb4af7db7
mov r8d, edx
and r8d, 0x4b508248
imul r8d, ecx
mov ecx, edx
and ecx, 0xb4af7db7
or edx, 0xb4af7db7
imul edx, ecx
add edx, r8d
cmp edx, 0x6c280dde
jb 0x140124f90
nop
mov ecx, dword [0x140228760]
imul ecx, dword [0x140228764]
and ecx, 0x66ad0fa
xor ecx, 0x40a0068
add ecx, 0xd95160cd
cmp ecx, 0xa95364a
jb 0x140124ff0
test rax, rax
mov r12, qword [rbp + 0x90]
movabs rdi, 0x8000000000000000
je 0x1401250cb
mov r15, qword [0x14022cb48]
mov eax, dword [0x140228768]
mov ecx, dword [0x14022876c]
xor ecx, eax
not ecx
and ecx, eax
add ecx, 0x6d014ab7
and ecx, 0x508d967a
cmp ecx, 0xdfc7c713
je 0x1401250b3
mov eax, dword [0x140228770]
xor eax, dword [0x140228774]
mov ecx, eax
and ecx, 0xa1ce9eb5
or eax, 0xa1ce9eb5
add eax, ecx
shr eax, 3
imul rsi, rax, 0x1247d15d
shr rsi, 0x35
mov eax, esi
not eax
and eax, 0x5396cac
and esi, 0xfffffff3
sub esi, eax
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x92d611d2
jae 0x1401250cb
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14012505e
mov eax, dword [0x140228778]
or eax, dword [0x14022877c]
add eax, 0x9ea23777
mov ecx, eax
xor ecx, 0x3614608b
or ecx, 0x62c1c46d
xor eax, 0x40c18464
or eax, 0x9d3e3b92
and eax, ecx
cmp eax, 0xa7e24903
mov rdx, qword [rbp - 8]
mov r8d, dword [rbp + 0x48]
je 0x140125135
mov eax, dword [0x140228780]
mov ecx, eax
not ecx
or ecx, dword [0x140228784]
add eax, ecx
inc eax
or eax, 0x87cc21f4
mov rcx, qword [rdx + 0x10]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rdx]
movups xmmword [r13], xmm0
cmp eax, 0x6d935ff9
jne 0x140125147
mov rax, qword [rdx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [r13], xmm0
jmp 0x140125105
lea rbx, [r12 + 0x48]
nop dword [rax]
mov ecx, dword [0x1402287f0]
mov eax, dword [0x1402287f4]
not ecx
not eax
or eax, ecx
not eax
add eax, 0xe22ac89b
mov ecx, eax
xor ecx, 0xb086bfa6
and eax, 0x4f794059
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd78b5347
and ecx, 0x2874acb8
imul ecx, edx
mov edx, eax
and edx, 0x2874acb8
or eax, 0x2874acb8
imul eax, edx
add eax, ecx
cmp eax, 0xe803917e
je 0x140125150
mov r15, qword [rbp - 0x58]
mov r13d, dword [rbp + 0x68]
mov eax, dword [0x1402287f8]
xor eax, dword [0x1402287fc]
mov ecx, eax
not ecx
or eax, 0xe00c76d6
or ecx, 0x1ff38929
and ecx, eax
lea eax, [rcx + 0x3f1ce361]
mov edx, eax
and edx, 0xf88f18bd
xor eax, 0x770e742
add eax, ecx
add eax, 0x3f1ce361
sub eax, edx
cmp eax, 0x7746db3a
jb 0x1401251b0
test r8d, r8d
je 0x140126606
cmp r8d, 1
je 0x140125246
cmp r8d, 2
jne 0x14012560f
nop dword [rax]
mov eax, dword [0x140228800]
sub eax, dword [0x140228804]
imul eax, eax, 0xdb38e7d1
mov ecx, eax
xor ecx, 0xc4eecb61
and ecx, eax
add ecx, 0x47c2f66e
cmp ecx, 0x69bcbfac
ja 0x140125210
cmp qword [r12 + 0x58], 0
jne 0x140126606
mov r13, qword [rbp + 0x60]
nop word [rax + rax]
mov eax, dword [0x140228808]
and eax, dword [0x14022880c]
add eax, 0x6fd84eeb
or eax, 0xd13f7652
mov ecx, eax
and ecx, 0x2320341b
add ecx, ecx
sub eax, ecx
cmp eax, 0x26cdd6d5
je 0x140125250
mov eax, 0xa08eb639
nop
mov ecx, dword [0x140228810]
xor ecx, dword [0x140228814]
shr ecx, 1
imul rcx, rax
shr rcx, 0x3e
not ecx
and ecx, 0x9224864f
neg ecx
imul rcx, rcx, 0x3ae13863
shr rcx, 0x39
cmp ecx, 0x8325a80
ja 0x140125280
mov eax, dword [0x140228818]
add eax, dword [0x14022881c]
imul rax, rax, 0x88decef
shr rax, 0x3b
or eax, 0xb00608d0
cmp eax, 0xbe0ea9de
jbe 0x1401252f7
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0x80]
mov rdx, r13
mov r8, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov r14, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov edi, dword [0x140228820]
xor edi, dword [0x140228824]
and edi, 0x731c49cf
add edi, 0x18fb8def
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r14
mov rdx, r13
mov r8, r15
call rsi
add rsp, 0x20
cmp edi, 0xccaf7a4c
ja 0x140125310
test rax, rax
je 0x1401255e0
movabs r8, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x140228830]
mov ecx, dword [0x140228834]
add eax, ecx
add eax, 0xb3dcac0c
mov ecx, eax
not ecx
and ecx, 0xa78d6e39
mov edx, eax
and edx, 0x587291c6
imul edx, ecx
mov ecx, eax
and ecx, 0xa78d6e39
or eax, 0xa78d6e39
imul eax, ecx
add eax, edx
add eax, 0x1ff3c1b5
cmp eax, 0xd9208254
ja 0x140125360
mov rax, qword [r15]
nop dword [rax]
mov ecx, dword [0x140228838]
add ecx, dword [0x14022883c]
and ecx, 0xdb7ddce
add ecx, 0x6787e59b
and ecx, 0x5fbfffff
xor ecx, 0x957a4830
cmp ecx, 0x106c7683
jb 0x1401253b0
not r13
add rax, r13
lea rcx, [r8 - 3]
nop word cs:[rax + rax]
mov r8d, dword [0x140228840]
mov edx, dword [0x140228844]
mov r9d, r8d
xor r9d, edx
not edx
and edx, r8d
add edx, edx
sub edx, r9d
mov r8d, edx
not r8d
mov r9d, edx
and r9d, 0xae0b2670
and r8d, 0x51f4d98f
imul r8d, r9d
mov r9d, edx
and r9d, 0x51f4d98f
or edx, 0x51f4d98f
imul edx, r9d
add edx, r8d
xor edx, 0x1a5bc7a9
mov r8, qword [r15 + 0x18]
lea r14, [r8 + rax]
inc r14
mov r12, r14
shr r12, 1
mov rsi, r12
or rsi, 1
bt r14d, 1
adc rsi, 0
cmp edx, 0x12c3e059
je 0x1401253f0
cmp r14, rcx
ja 0x14012561a
lea r13, [rsi + rsi]
nop dword [rax + rax]
mov eax, dword [0x140228860]
xor edx, edx
div dword [0x140228864]
add eax, 0x548d3e4e
mov ecx, eax
and ecx, 0x5af0cdef
xor eax, 0x5af0cdef
lea eax, [rax + rcx*2]
cmp eax, 0x3e1004b2
je 0x140125480
mov ecx, dword [0x140228868]
mov eax, dword [0x14022886c]
mov edx, ecx
and edx, eax
not ecx
not eax
or eax, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2cc1b354
and ecx, 0xd33e4cab
imul ecx, edx
mov edx, eax
and edx, 0xd33e4cab
or eax, 0xd33e4cab
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x8ba15f7d
or eax, 0x745ea082
and eax, ecx
cmp eax, 0x4eb9fa31
jne 0x140125520
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.140107940
add rsp, 0x20
nop word [rax + rax]
mov edi, dword [0x140228870]
xor edi, dword [0x140228874]
add edi, 0x1f1de039
mov eax, edi
xor eax, 0x48b8f6fb
and edi, 0x37470904
add edi, edi
sub edi, eax
or edi, 0x185e935d
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.140107940
add rsp, 0x20
cmp edi, 0xd5a5f640
ja 0x140125520
mov r15, rax
test rax, rax
je 0x140120b0e
mov eax, dword [0x140228878]
mov ecx, dword [0x14022887c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x85339560
mov r8d, edx
and r8d, 0xf9050b
and ecx, 0x46a94
imul ecx, r8d
and edx, 0x106faf4
or eax, 0x137fff4
imul eax, edx
add eax, ecx
or eax, 0xfe4055d7
cmp eax, 0x240df6a
mov rdi, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x60]
jne 0x1401256b3
jmp 0x140125735
mov eax, dword [0x140228828]
mov ecx, dword [0x14022882c]
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
not eax
imul eax, eax, 0xc742c6f4
add eax, 0xb05031a0
cmp eax, 0xe6c3215b
ja 0x1401255e0
jmp 0x140126074
xor eax, eax
test al, al
jne 0x140125611
jmp 0x140120b0e
mov eax, dword [0x140228848]
xor edx, edx
div dword [0x14022884c]
and eax, 0x2341a063
mov ecx, eax
not ecx
or ecx, 0xbaa0f66f
add eax, ecx
inc eax
cmp eax, 0xec3bef13
jbe 0x140125644
ud2
mov eax, dword [str..Y_]
mov ecx, dword [0x140228854]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0xb7d1340c
or ecx, 0x482ecbf3
and ecx, eax
imul rax, rcx, 0xc57cf7f
shr rax, 0x3a
imul eax, eax, 0xf4e7f070
ud2
mov eax, dword [0x140228880]
mov ecx, dword [0x140228884]
mov r8d, eax
and r8d, ecx
or eax, ecx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0x96c4e3a4
mov r8d, eax
and r8d, 0x693b1c5b
imul r8d, ecx
mov ecx, eax
and ecx, 0x96c4e3a4
or eax, 0x96c4e3a4
imul eax, ecx
add eax, r8d
mov ecx, eax
not ecx
mov r8d, eax
and r8d, 0xfff268a4
and ecx, 0xd975b
imul ecx, r8d
mov r8d, eax
and r8d, 0xd9758
or eax, 0xd975b
imul eax, r8d
add eax, ecx
and eax, 0xd26c42fc
mov qword [rdi], 0
cmp eax, 0xc27ad460
jbe 0x140125741
mov qword [rdi], 0
jmp 0x1401256b3
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, qword [rbp + 0x80]
mov r8, r15
mov r9, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
nop word cs:[rax + rax]
mov ecx, dword [0x140228888]
or ecx, dword [0x14022888c]
or ecx, 0x2d814573
add ecx, 0xb5fed0ef
imul rdx, rcx, 0x13be0e73
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1a
cmp ecx, 0x68a84c52
je 0x140125770
test eax, eax
movabs r9, 0x8000000000000000
je 0x140125e57
nop word cs:[rax + rax]
mov eax, dword [0x140228890]
xor edx, edx
div dword [0x140228894]
mov ecx, eax
or ecx, 0x2001
not eax
or eax, 0x21500802
and eax, 0x31d25812
and ecx, 0x20a009
sub ecx, eax
cmp ecx, 0xe6486650
ja 0x1401257c0
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x140228898]
or ecx, dword [0x14022889c]
mov edx, ecx
and edx, 0x3deaef6a
xor ecx, 0x3deaef6a
lea ecx, [rcx + rdx*2]
mov edx, ecx
xor edx, 0x10020802
xor ecx, 0x6d656388
mov r8d, ecx
and r8d, 0xcff8f575
and edx, 0x30070a8a
imul edx, r8d
mov r8d, ecx
and r8d, 0x30070a8a
or ecx, 0x30070a8a
imul ecx, r8d
add ecx, edx
cmp ecx, 0x73451f22
ja 0x140125800
cmp rax, r14
jne 0x140125f50
mov eax, dword [0x1402288d8]
add eax, dword [0x1402288dc]
mov ecx, eax
xor ecx, 0x448ba41e
or eax, 0xbb745be1
and eax, ecx
mov ecx, eax
xor ecx, 0x37b002cc
add ecx, eax
and eax, 0x84ffd33
sub ecx, eax
and ecx, 0x2037ed3b
cmp ecx, 0x9f851b5d
jbe 0x1401258b0
mov word [r15 + r12*2], 0
nop word [rax + rax]
mov eax, dword [0x1402288e0]
xor edx, edx
div dword [0x1402288e4]
and eax, 0x40911140
mov word [r15 + r12*2], 0
cmp eax, 0x71b637d1
je 0x1401258b0
cmp rsi, r9
mov r12, qword [rbp + 0x90]
je 0x140126074
mov rdx, qword [r12 + 0x50]
mov rdi, qword [r12 + 0x58]
mov qword [r12 + 0x58], 0
mov eax, dword [0x140228948]
add eax, dword [0x14022894c]
or eax, 0x257f6ece
imul rax, rax, 0x28bf5cc3
shr rax, 0x3c
and eax, 1
cmp eax, 0x573e26ab
ja 0x1401258f4
test rdi, rdi
mov qword [rbp + 0x88], rdx
je 0x1401259e1
xor r12d, r12d
mov r13d, 0xa13ba18d
xor r14d, r14d
nop word cs:[rax + rax]
mov eax, dword [0x140228950]
sub eax, dword [0x140228954]
imul eax, eax, 0xfc68502b
add eax, 0x9d4fca73
imul rax, r13
shr rax, 0x3f
cmp eax, 0x27624b08
ja 0x140125940
mov rax, r14
shl rax, 5
cmp qword [rdx + rax], 0
je 0x140125999
add rax, rdx
mov r8, qword [rax + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, qword [rbp + 0x88]
add rsp, 0x20
inc r14
test r12b, r12b
jne 0x14012599c
nop word cs:[rax + rax]
mov eax, dword [0x14022895c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x140228958]
xor ecx, eax
or ecx, 0x2e5c4521
and ecx, 0x2e7c4569
cmp ecx, 0xe6046a32
ja 0x1401259b0
cmp r14, rdi
jne 0x140125940
lea r12, [r15 + rsi*2]
xor eax, eax
mov qword [rbp + 0x60], rax
xor eax, eax
movabs rdi, 0x8000000000000000
cmp rax, rsi
je 0x14012647d
lea r9, [r15 + rax*2]
xor r8d, r8d
mov rcx, r9
nop word [rax + rax]
mov edx, dword [0x140228960]
mov r10d, dword [0x140228964]
mov r11d, edx
not r11d
and r11d, r10d
not r10d
and r10d, edx
sub r11d, r10d
add r11d, 0xc0c51da1
or r11d, 0x4c90ce59
and r11d, 0x6c9bef5f
cmp r11d, 0xd0dc3f31
je 0x140125a10
cmp word [rcx], 0
je 0x140125ab2
mov edx, dword [0x140228968]
or edx, dword [0x14022896c]
mov r10d, edx
not r10d
or r10d, 0x90e08048
and r10d, 0xdee9a86c
and edx, 0x21164793
or edx, r10d
mov r10d, edx
xor r10d, 0x557b2fea
and r10d, edx
cmp r10d, 0x53673eaa
jb 0x140125a53
add rcx, 2
mov edx, r8d
and edx, 1
xor r8, 1
lea r8, [r8 + rdx*2]
cmp rcx, r12
jne 0x140125a10
jmp 0x14012647d
mov ecx, dword [0x140228970]
imul ecx, dword [0x140228974]
imul ecx, ecx, 0xfc2cc0b3
mov edx, ecx
not edx
or edx, 0x48e77135
add ecx, edx
inc ecx
mov edx, ecx
xor edx, 0xc1613240
or ecx, 0x3e9ecdbf
and ecx, edx
cmp ecx, 0x5d9fc374
ja 0x140125ab2
lea r13, [r8 + rax]
cmp r13, rax
jb 0x140126493
mov eax, dword [0x140228980]
mov ecx, dword [0x140228984]
mov edx, ecx
not edx
mov r10d, eax
and r10d, edx
or edx, eax
not edx
imul edx, r10d
mov r10d, eax
and r10d, ecx
or eax, ecx
imul eax, r10d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xe44825ad
mov r10d, edx
and r10d, 0x7e561308
and ecx, 0x1a1c852
imul ecx, r10d
and edx, 0x1a9ecf7
or eax, 0x65e9edff
imul eax, edx
add eax, ecx
or eax, 0xbada7efa
cmp eax, 0xcad79d5a
je 0x140125af8
cmp r13, rsi
ja 0x140120b0e
lea rcx, [r9 + r8*2]
mov eax, dword [0x1402289a0]
xor edx, edx
div dword [0x1402289a4]
xor eax, 0x10ea675
add eax, 0xcbfd7ef8
mov edx, eax
not edx
and edx, 0xcff29d03
mov r10d, eax
and r10d, 0x300d62fc
imul r10d, edx
mov edx, eax
and edx, 0xcff29d03
or eax, 0xcff29d03
imul eax, edx
add eax, r10d
cmp eax, 0x6c72b508
je 0x140125b6d
mov rax, r9
mov edx, dword [0x1402289a8]
mov r10d, dword [0x1402289ac]
mov r11d, r10d
not r11d
mov edi, edx
and edi, r11d
or r11d, edx
not r11d
imul r11d, edi
mov edi, edx
and edi, r10d
or edx, r10d
imul edx, edi
add edx, r11d
and edx, 0x26f311f2
imul edx, edx, 0x5c5d6229
and edx, 0x25031322
cmp edx, 0xd8374542
je 0x140125bba
cmp rax, rcx
movabs rdi, 0x8000000000000000
je 0x14012647d
mov edx, dword [0x1402289b0]
mov r10d, dword [0x1402289b4]
mov r11d, r10d
not r11d
and r11d, edx
xor r10d, edx
add r10d, edx
sub r10d, r11d
add r10d, 0x38ec9f95
imul rdx, r10, 0x4e5dab2f
shr rdx, 0x3d
cmp edx, 0x884c4c7e
je 0x140125c17
lea rdx, [rax + 2]
nop word cs:[rax + rax]
mov r10d, dword [0x1402289b8]
mov r11d, dword [0x1402289bc]
mov edi, r11d
not edi
mov r14d, r10d
and r14d, edi
or edi, r10d
not edi
imul edi, r14d
mov r14d, r10d
and r14d, r11d
or r10d, r11d
imul r10d, r14d
add r10d, edi
or r10d, 0x1dbc47a1
lea r11d, [r10 - 0x993ba9c]
mov edi, r11d
and edi, 0x2692900
xor r11d, 0xf506d6ff
add r10d, r11d
add r10d, 0xf66c4564
sub r10d, edi
cmp r10d, 0x77d114af
jb 0x140125c60
cmp word [rax], 0x3d
mov rax, rdx
jne 0x140125bba
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov rdx, r9
call fcn.1400b7770
add rsp, 0x20
mov eax, dword [0x1402289c0]
xor edx, edx
div dword [0x1402289c4]
imul rax, rax, 0xa4b6423
shr rax, 0x3a
xor eax, 0x70696433
add eax, 0xd3ebb63c
cmp eax, 0x36ff7dbc
jb 0x140125ce7
mov rax, qword [rbx]
movabs rdi, 0x8000000000000000
mov ecx, dword [0x1402289c8]
mov edx, dword [0x1402289cc]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
imul ecx, edx, 0x811768f
mov edx, ecx
not edx
or edx, 0x96755621
add edx, ecx
imul ecx, edx, 0x43e18b02
cmp ecx, 0xc4dd5bd2
je 0x140125d1e
cmp qword [rbp + 0x60], rax
mov rdx, qword [rbp + 0x88]
jne 0x140125df9
mov eax, dword [0x1402289d0]
add eax, dword [0x1402289d4]
or eax, 0xcc5e4734
add eax, 0x5fa5ba86
cmp eax, 0x4bb5ec59
jae 0x140125d98
sub rsp, 0x20
mov rcx, rbx
call fcn.1401298c0
add rsp, 0x20
mov eax, dword [0x1402289dc]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x1402289d8]
xor ecx, eax
xor ecx, 0x20ee3c67
imul rax, rcx, 0x18917569
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1f
imul edi, ecx, 0x7d2d328d
sub rsp, 0x20
mov rcx, rbx
call fcn.1401298c0
add rsp, 0x20
cmp edi, 0x82003898
ja 0x140125d98
mov rax, qword [rbp + 0x90]
mov rdx, qword [rax + 0x50]
movabs rdi, 0x8000000000000000
mov r8, qword [rbp + 0x60]
mov rax, r8
shl rax, 5
mov rcx, qword [rbp - 0x38]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
mov qword [rbp + 0x88], rdx
movups xmmword [rdx + rax], xmm0
inc r8
mov rax, qword [rbp + 0x90]
mov rcx, r8
mov qword [rbp + 0x60], r8
mov qword [rax + 0x58], r8
mov eax, r13d
and eax, 1
xor r13, 1
lea rax, [rax*2]
add rax, r13
cmp rax, rsi
jbe 0x1401259f7
jmp 0x140120b0e
mov eax, dword [0x1402288a0]
sub eax, dword [0x1402288a4]
and eax, 0xac091809
imul eax, eax, 0x7ce9e63c
cmp eax, 0x45da2461
jbe 0x140125e83
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word [rax + rax]
mov eax, dword [0x1402288a8]
sub eax, dword [0x1402288ac]
mov ecx, eax
not ecx
and ecx, 0x4ea928c5
mov edx, eax
and edx, 0xb156d73a
imul edx, ecx
mov ecx, eax
and ecx, 0x4ea928c5
or eax, 0x4ea928c5
imul eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x48b3af94
xor eax, 0x48b3af94
lea edi, [rax + rcx*2]
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x87bec8a7
je 0x140125e90
nop word cs:[rax + rax]
mov eax, dword [0x1402288b0]
mov ecx, dword [0x1402288b4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
and eax, 0xfb2d7624
mov edx, eax
not edx
mov r8d, ecx
and r8d, 0x9b2c7420
and edx, 0x60018b4e
imul edx, r8d
and ecx, 0x60010204
or eax, 0x60018b4e
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xbdb966f3
and eax, 0xbdb966f0
or eax, ecx
cmp eax, 0x199b6d8
jb 0x140125ef0
nop dword [rax]
mov eax, dword [0x1402288b8]
and eax, dword [0x1402288bc]
mov ecx, eax
not ecx
or ecx, 0x62431030
and ecx, 0xf36f9830
mov edx, eax
and edx, 0x8804645
or edx, ecx
xor edx, 0xc485a010
and eax, 0x11a80800
or eax, edx
imul rax, rax, 0x6833372d
shr rax, 0x3e
cmp eax, 0x348fca20
ja 0x140125f50
mov eax, dword [0x1402288c0]
or eax, dword [0x1402288c4]
add eax, 0x137740b5
mov ecx, eax
xor ecx, 0x85deebcb
and eax, 0x7a211434
add eax, eax
sub eax, ecx
add eax, 0xbd20886d
cmp eax, 0x772ea89b
mov r12, qword [rbp + 0x90]
jbe 0x140125ff0
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1402288c8]
add eax, dword [0x1402288cc]
imul rax, rax, 0x67b96199
shr rax, 0x3e
imul esi, eax, 0x8f0d2aa
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
cmp esi, 0x4426edd3
ja 0x140125ff0
nop
mov eax, dword [0x1402288d0]
add eax, dword [0x1402288d4]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x8e376399
and ecx, 0x30800404
mov r8d, edx
and r8d, 0xc76fbbf3
imul r8d, ecx
and edx, 0x3890440c
or eax, 0xbeb7679d
imul eax, edx
add eax, r8d
cmp eax, 0x36d774ee
je 0x140126030
mov eax, 0x9f70536d
nop dword [rax]
mov ecx, dword [0x1402288e8]
sub ecx, dword [0x1402288ec]
imul rcx, rax
shr rcx, 0x3e
lea edx, [rcx - 0x7eaf7f7c]
and edx, 0x81508085
or ecx, 0xbf779dfd
add ecx, edx
cmp ecx, 0x7bffe84e
ja 0x140126080
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401260c0
mov r14, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
test rsi, rsi
je 0x140126202
xor edi, edi
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r12d, r12d
jmp 0x1401260fc
inc r12
cmp r12, rsi
je 0x140126202
mov r13, r12
shl r13, 5
cmp qword [r14 + r13], 0
je 0x1401260f0
add r13, r14
mov eax, dword [0x1402288f0]
xor edx, edx
div dword [0x1402288f4]
nop dword [rax + rax]
mov eax, dword [0x1402288f8]
sub eax, dword [0x1402288fc]
shr eax, 3
imul rax, rax, 0x2685129f
shr rax, 0x3a
imul eax, eax, 0xcb45d0c4
cmp eax, 0x7c2217a2
je 0x140126120
mov eax, dword [0x140228900]
or eax, dword [0x140228904]
mov ecx, eax
not ecx
and ecx, 0x35e5047f
mov edx, eax
and edx, 0xca1afb80
imul edx, ecx
mov ecx, eax
and ecx, 0x35e5047f
or eax, 0x35e5047f
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xafa26886
and ecx, 0x505d9779
imul ecx, edx
mov edx, eax
and edx, 0x505d9779
or eax, 0x505d9779
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x4bc3669f
add ecx, ecx
sub eax, ecx
add eax, 0xcbc3669f
cmp eax, 0xf379fecd
jbe 0x1401261e0
mov r8, qword [r13 + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
nop word cs:[rax + rax]
mov r8, qword [r13 + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
test dil, dil
jne 0x1401261e0
jmp 0x1401260f0
mov rax, qword [rbx]
nop word cs:[rax + rax]
mov ecx, dword [0x140228908]
sub ecx, dword [0x14022890c]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x6c85cb7b
and edx, 0x937a3484
imul edx, r8d
mov r8d, ecx
and r8d, 0x937a3484
or ecx, 0x937a3484
imul ecx, r8d
add ecx, edx
add ecx, 0xfcc388f1
shr ecx, 3
imul rcx, rcx, 0x26a240c1
shr rcx, 0x39
cmp ecx, 0xf9ba1b54
ja 0x140126210
test rax, rax
mov r12, qword [rbp + 0x90]
mov r13d, dword [rbp + 0x68]
je 0x14012642a
mov eax, dword [0x140228910]
mov ecx, dword [0x140228914]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, 0x80257d73
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x7dc385fb
jne 0x1401262b0
mov rax, qword [0x14022cb48]
nop dword [rax]
mov eax, dword [0x140228918]
add eax, dword [0x14022891c]
or eax, 0x1084044f
and eax, 0xb6bf244f
imul rax, rax, 0x211f22f
shr rax, 0x36
mov r15, qword [0x14022cb48]
cmp eax, 0x9fbce53a
ja 0x1401262b0
mov eax, dword [0x140228920]
mov ecx, dword [0x140228924]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
xor eax, 0xa045aa05
or ecx, 0x5fba55fa
and ecx, eax
mov eax, ecx
xor eax, 0xd6bf45a1
or ecx, 0x2940ba5e
and ecx, eax
mov eax, ecx
and eax, 0x3f77979d
xor ecx, 0xbf77979d
lea eax, [rcx + rax*2]
cmp eax, 0xcce2b5eb
jbe 0x14012633b
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call fcn.14014eed0
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x140228928]
mov ecx, dword [0x14022892c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and ecx, 0xcee729f2
mov edx, eax
and edx, 0x3118d60d
imul edx, ecx
mov ecx, eax
and ecx, 0xcee729f2
or eax, 0xcee729f2
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xed90de9f
mov edx, eax
and edx, 0x126f2160
imul edx, ecx
mov ecx, eax
and ecx, 0xed90de9e
or eax, 0xed90de9f
imul eax, ecx
lea edi, [rax + rdx]
add edi, 0x760640fd
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call rsi
add rsp, 0x20
cmp edi, 0x3b6083aa
jb 0x140126350
mov eax, 0xcb07c731
nop word [rax + rax]
mov ecx, dword [0x140228930]
sub ecx, dword [0x140228934]
imul rcx, rax
shr rcx, 0x3e
mov edx, ecx
not edx
and edx, 0x7c7b15a
mov r8d, ecx
and r8d, 1
imul r8d, edx
mov edx, ecx
and edx, 0xfffffffe
or ecx, 0x7c7b15a
imul ecx, edx
add ecx, r8d
not ecx
or ecx, 0xfbaed2e5
cmp ecx, 0x99b7ff52
je 0x1401263e0
mov eax, dword [0x140228938]
mov ecx, dword [str.__b.]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
or ecx, 0xea7452
or eax, 0xff158bad
and eax, ecx
add eax, 0x8b87a2c1
mov ecx, eax
xor ecx, 0x2269bb23
or eax, 0xdd9644dc
and eax, ecx
cmp eax, 0xf7f0f86f
movabs rdi, 0x8000000000000000
jbe 0x1401265a8
jmp 0x1401265eb
mov rbx, qword [0x14022cb48]
xor eax, eax
test al, al
je 0x14012653c
jmp 0x14012657e
mov eax, dword [0x140228988]
mov ecx, dword [0x14022898c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0xd82aa9fe
mov ecx, 0xb4029fcb
imul rcx, rax
shr rcx, 0x3d
imul eax, ecx, 0xc13d8058
cmp eax, 0x4d42e185
jne 0x1401264c8
ud2
mov eax, dword [0x140228990]
and eax, dword [0x140228994]
or eax, 0x2a9be277
add eax, 0xb8156822
xor eax, 0x286738f8
ud2
mov eax, dword [0x140228978]
sub eax, dword [0x14022897c]
imul rax, rax, 0x2fdb6ca7
shr rax, 0x3d
not eax
and eax, 0x7caa123f
imul esi, eax, 0x85ab0914
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xb4ed58c9
jbe 0x140126595
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
jmp 0x14012653c
mov al, 1
mov r12, qword [rbp + 0x90]
mov r13d, dword [rbp + 0x68]
test al, al
je 0x1401265a2
jmp 0x140126606
mov eax, dword [0x140228940]
xor edx, edx
div dword [0x140228944]
add eax, 0xf6077b0d
mov ecx, eax
not ecx
and ecx, 0x8070a02a
and eax, 0x7f8f5fd5
sub eax, ecx
mov ecx, eax
not ecx
and ecx, 0x96556d6d
and eax, 0x69aa9292
sub eax, ecx
mov qword [rbx], 0
cmp eax, 0x8da0ea0a
jne 0x1401265f4
mov qword [rbx], 0
jmp 0x1401265a8
mov qword [r12 + 0x50], 8
mov qword [r12 + 0x58], 0
lea r10, [r12 + 0x98]
nop
mov eax, dword [0x1402289e0]
xor edx, edx
div dword [0x1402289e4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3993455b
and ecx, 0xc66cbaa4
imul ecx, edx
mov edx, eax
and edx, 0xc66cbaa4
or eax, 0xc66cbaa4
imul eax, edx
add eax, ecx
or eax, 0x663fc972
add eax, 0x1a79eda5
cmp eax, 0x52db13ad
ja 0x140126610
lea rsi, [r12 + 0xb8]
mov r9d, dword [rbp + 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x1402289e8]
xor edx, edx
div dword [0x1402289ec]
mov ecx, eax
not ecx
and ecx, 0x8fc3c91e
mov edx, eax
and edx, 0x703c36e1
imul edx, ecx
mov ecx, eax
and ecx, 0x8fc3c91e
or eax, 0x8fc3c91e
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x44475580
mov r8d, edx
and r8d, 0x17bd6326
and ecx, 0xa8008859
imul ecx, r8d
and edx, 0xe8429cd8
or eax, 0xec47ddd9
imul eax, edx
add eax, ecx
cmp eax, 0x4d2a71bf
ja 0x140126670
test r13d, r13d
je 0x140126715
cmp r13d, 1
jne 0x140126721
mov r13, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
mov eax, dword [0x1402289f0]
mov ecx, dword [0x1402289f4]
xor ecx, eax
not ecx
and ecx, eax
or ecx, 0xef7d1d1f
cmp ecx, 0xd2249c09
je 0x1401266f0
mov r14b, 1
jmp 0x14012674e
xor r14d, r14d
mov r13, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14012674e
cmp qword [r10], rdi
sete r14b
mov r13, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
mov eax, dword [0x1402289f8]
sub eax, dword [0x1402289fc]
and eax, 0xc64cdd38
imul eax, eax, 0x2c384d6b
cmp eax, 0xfcdbba1d
je 0x140126730
test r9d, r9d
je 0x140126838
cmp r9d, 1
je 0x140126897
cmp r9d, 2
jne 0x140126c19
mov rcx, qword [rsi]
nop
mov edx, dword [0x140228a08]
mov eax, dword [0x140228a0c]
mov r8d, edx
not r8d
and r8d, eax
mov r9d, eax
not r9d
and r9d, edx
imul r9d, r8d
mov r8d, edx
and r8d, eax
or edx, eax
imul edx, r8d
add edx, r9d
mov eax, edx
not eax
mov r8d, edx
and r8d, 0xb90e8efc
and eax, 0x46f17103
imul eax, r8d
mov r8d, edx
and r8d, 0x46f17103
or edx, 0x46f17103
imul edx, r8d
add edx, eax
cmp rcx, rdi
sete al
cmp edx, 0x3258cd16
je 0x140126770
nop dword [rax]
mov ecx, dword [0x140228a10]
and ecx, dword [0x140228a14]
mov edx, ecx
xor edx, 0xc93f8281
xor ecx, 0x2280383a
and ecx, 0xa3bdbaba
mov r8d, edx
and r8d, 0x5c424545
imul r8d, ecx
mov ecx, edx
and ecx, 0xa3bdbaba
or edx, 0xa3bdbaba
imul edx, ecx
add edx, r8d
mov ecx, edx
not ecx
or ecx, 0xf7326f19
add ecx, edx
cmp ecx, 0xb7fc763
je 0x1401267e0
jmp 0x14012683a
xor eax, eax
lea ecx, [r14 + rax]
and al, r14b
sub cl, al
nop word cs:[rax + rax]
mov eax, dword [0x140228a18]
mov edx, dword [0x140228a1c]
mov r8d, eax
and r8d, edx
xor eax, edx
lea eax, [rax + r8*2]
imul rdx, rax, 0xcc7e591
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
imul eax, eax, 0xd418978d
and eax, 0x3e4e5440
cmp eax, 0xb5e35178
ja 0x140126850
test cl, 1
je 0x140127630
mov r12, qword [rbp + 0x70]
nop dword [rax + rax]
mov eax, dword [0x140228a20]
sub eax, dword [0x140228a24]
imul eax, eax, 0x73fbe720
cmp eax, 0x9fbdad0c
je 0x1401268a0
mov qword [rbp + 0x88], r10
shr r12d, 1
mov eax, dword [0x140228a28]
xor edx, edx
div dword [0x140228a2c]
imul eax, eax, 0x17a4f352
mov ecx, eax
and ecx, 0x3ad52228
add ecx, ecx
sub eax, ecx
imul eax, eax, 0x683e93a7
add eax, 0xc9564018
cmp eax, 0x4a7bcbc0
jae 0x140126913
lea rdx, [r12*2 + 2]
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
call fcn.14014ee50
add rsp, 0x20
lea rax, [r12 + 1]
mov qword [rbp - 0x30], rax
mov qword [rbp + 0x58], r12
lea r15, [r12*2 + 2]
nop dword [rax + rax]
mov edi, dword [0x140228a30]
or edi, dword [0x140228a34]
xor edi, 0xa0dd3033
add edi, 0x2b80db0f
xor edi, 0xdf3a909d
movzx eax, byte [0x14022cb78]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call fcn.140107940
add rsp, 0x20
cmp edi, 0xefc34463
ja 0x140126930
mov rbx, rax
test rax, rax
je 0x140126cd8
nop dword [rax + rax]
mov eax, dword [0x140228a44]
not eax
sub eax, dword [0x140228a40]
add eax, 0x6b3ded15
or eax, 0x9d1909b7
and eax, 0xbf1be9ff
cmp eax, 0x4b862ed8
jb 0x140126980
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp + 0x50]
nop dword [rax]
mov eax, dword [0x140228a48]
sub eax, dword [0x140228a4c]
or eax, 0x2e529860
mov ecx, eax
and ecx, 0x45a490c
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x845a490c
mov ecx, eax
xor ecx, 0xa75ef0ca
and eax, 0x58a10f35
add eax, eax
sub eax, ecx
cmp eax, 0x87974220
je 0x1401269b0
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x60], rsi
mov eax, dword [0x140228a50]
and eax, dword [0x140228a54]
imul eax, eax, 0x7eb272e7
mov ecx, 0xd54793ef
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0xf55737eb
cmp eax, 0xf7778c4e
jne 0x140126a4a
mov qword [r15], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rcx, qword [rbp + 0x80]
mov rdx, r12
mov r8, rbx
mov r9, qword [rbp + 0x70]
call fcn.140151070
add rsp, 0x30
mov r14, qword [rbp + 0x80]
mov rsi, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x140228a58]
sub eax, dword [0x140228a5c]
imul eax, eax, 0xd4f4bf07
mov edi, eax
xor edi, 0x3e19f9b8
xor eax, 0xc1440044
and eax, 0xc55d79cc
and edi, 0x3aa28633
sub edi, eax
mov qword [r15], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, r12
mov r8, rbx
mov r9, rsi
call r13
add rsp, 0x30
cmp edi, 0x70c7fa6b
jb 0x140126a60
test eax, eax
je 0x140126c70
movabs rdi, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x140228a60]
mov ecx, dword [0x140228a64]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul eax, eax, 0x9aaaae84
add eax, 0xeacb4fed
cmp eax, 0x8def0e29
jb 0x140126ad0
mov rcx, qword [r15]
mov eax, dword [str._Ii9_]
xor edx, edx
div dword [0x140228a6c]
mov r15d, dword [rbp + 0x78]
nop dword [rax]
mov eax, dword [0x140228a70]
mov edx, dword [0x140228a74]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
mov edx, eax
not edx
or edx, 0x36bde71e
add edx, eax
imul eax, edx, 0x8c773c39
cmp eax, 0x105726b9
je 0x140126b10
nop word [rax + rax]
mov eax, dword [0x140228a78]
xor eax, dword [0x140228a7c]
mov edx, eax
not edx
or edx, 0x1810c620
and edx, 0x9e58f72e
mov r8d, eax
and r8d, 0x40210041
or r8d, edx
xor r8d, 0xdc06108c
and eax, 0x42482102
or eax, r8d
cmp eax, 0x9f5054b5
je 0x140126b60
cmp rcx, qword [rbp + 0x70]
jne 0x14012733e
nop dword [rax]
mov eax, dword [str._hp]
xor edx, edx
div dword [0x140228a94]
and eax, 0xce116047
imul eax, eax, 0xa1109058
add eax, 0x4f5a83af
cmp eax, 0xe9dd1cea
jb 0x140126bb0
mov eax, dword [0x140228a98]
xor edx, edx
div dword [0x140228a9c]
and eax, 0xffae1191
xor eax, 0x55020080
imul rcx, rax, 0x763f76bb
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x19
cmp eax, 0x7343c0c5
mov r10, qword [rbp - 0x30]
mov rcx, qword [rbp + 0x58]
jbe 0x140126d13
jmp 0x140126d36
mov eax, dword [0x140228a00]
mov ecx, dword [0x140228a04]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
xor eax, 0x5e6ce809
imul rcx, rax, 0x5a1664c3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xbcdae892
cmp eax, 0x3a7a7e84
ja 0x140126c19
jmp 0x140120b0e
mov ecx, dword [0x140228a80]
mov eax, dword [0x140228a84]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
mov ecx, eax
or ecx, 0x39300757
mov edx, eax
not edx
and edx, 0x420a3888
mov r8d, ecx
and r8d, 0x34e5c173
imul r8d, edx
and ecx, 0x4b1a3e8c
or eax, 0x7b3a3fdf
imul eax, ecx
add eax, r8d
and eax, 0x50bf1064
cmp eax, 0x388ff2da
movabs rdi, 0x8000000000000000
jne 0x1401272d1
jmp 0x1401272e5
ud2
mov eax, dword [0x140228aa0]
sub eax, dword [0x140228aa4]
add eax, 0xced61e7c
and eax, 0x3a936331
mov word [rbx + rcx*2], 0
cmp eax, 0x1c223055
jne 0x140126d3e
mov word [rbx + rcx*2], 0
jmp 0x140126d13
lea rcx, [rbx + r10*2]
mov r12, qword [rbp + 0x90]
nop dword [rax]
mov eax, dword [0x140228aa8]
xor edx, edx
div dword [0x140228aac]
add eax, 0x6b6402bf
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x99052cc1
and edx, 0x66fad33e
imul edx, r8d
mov r8d, eax
and r8d, 0x66fad33e
or eax, 0x66fad33e
imul eax, r8d
add eax, edx
xor eax, 0x17fd5125
cmp eax, 0xe475cdba
ja 0x140126d50
xor r14d, r14d
mov r11, rbx
nop word cs:[rax + rax]
cmp word [r11], 0
je 0x140126e75
mov eax, dword [0x140228ab0]
xor edx, edx
div dword [0x140228ab4]
nop dword [rax]
mov eax, dword [0x140228ab8]
add eax, dword [0x140228abc]
mov edx, eax
xor edx, 0x2806000
and edx, eax
or edx, 0xfd7f9def
cmp edx, 0x5195ed69
je 0x140126dd0
add r11, 2
inc r14
mov eax, dword [0x140228ac0]
mov edx, dword [0x140228ac4]
mov r9d, eax
and r9d, edx
add r9d, r9d
add eax, edx
sub eax, r9d
imul eax, eax, 0xc2e18b41
add eax, 0x66092d2c
xor eax, 0xe70de472
cmp eax, 0xe7698189
je 0x140126dfb
nop dword [rax]
mov eax, dword [0x140228ac8]
mov edx, dword [0x140228acc]
mov r9d, eax
and r9d, edx
not edx
not eax
and eax, edx
not r9d
not eax
and eax, r9d
and eax, 0x5034e488
mov edx, eax
not edx
or edx, 0xc186ae3f
add edx, eax
cmp edx, 0x1b8f8d25
je 0x140126e30
cmp r11, rcx
jne 0x140126db0
mov r14, r10
mov eax, dword [0x140228ad0]
mov ecx, dword [0x140228ad4]
mov edx, ecx
not edx
mov r9d, eax
and r9d, edx
or edx, eax
not edx
imul edx, r9d
mov r9d, eax
and r9d, ecx
or eax, ecx
imul eax, r9d
add eax, edx
mov ecx, 0xb9c2b853
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x2a1b78ea
cmp ecx, 0xcc8d82f2
jne 0x140126ef2
sub rsp, 0x20
mov rsi, qword [rbp + 0x18]
mov rcx, rsi
mov rdx, rbx
mov r8, r14
call fcn.140150530
add rsp, 0x20
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
sub rsp, 0x20
mov ecx, r15d
mov r9, qword [rbp + 0x60]
call fcn.140129c80
add rsp, 0x20
mov r13, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x60]
nop word [rax + rax]
mov eax, dword [0x140228ad8]
sub eax, dword [0x140228adc]
xor eax, 0x6caef5f0
imul r15, rax, 0x547558f9
shr r15, 0x3e
sub rsp, 0x20
mov rcx, r13
mov rdx, rbx
mov r8, r14
call fcn.1400b7770
add rsp, 0x20
mov rsi, qword [r13 + 8]
mov r8, qword [r13 + 0x10]
sub rsp, 0x20
mov ecx, dword [rbp + 0x78]
mov rdx, rsi
mov r9, rdi
call fcn.140129c80
add rsp, 0x20
cmp r15d, 0xb0f7c63f
ja 0x140126f00
cmp byte [rbp + 0x28], 0
je 0x140127098
xor eax, eax
mov r9, qword [rbp + 0x18]
nop dword [rax]
test al, al
jne 0x140126f70
mov eax, dword [0x140228b0c]
add eax, dword [0x140228b08]
imul rax, rax, 0x63104d8d
shr rax, 0x3e
not eax
and eax, 0xbeb2d
cmp eax, 0x1519a06f
mov r15, qword [rbp - 0x48]
jbe 0x140126fb0
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
nop
mov eax, dword [0x140228b10]
xor edx, edx
div dword [0x140228b14]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xfeb2e6cf
mov r8d, edx
and r8d, 0x5962fc3b
and ecx, 0xd0100
imul ecx, r8d
and edx, 0xa69d03c4
or eax, 0xfebfe7cf
imul eax, edx
add eax, ecx
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
cmp eax, 0x5ba0f310
je 0x140126fb0
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
shl rax, 1
test rax, rax
je 0x14012726d
mov eax, dword [str.0GXno]
mov ecx, dword [0x140228b1c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
and ecx, 0x88e7a8c5
imul eax, ecx, 0x7c32d59e
mov ecx, eax
not ecx
or ecx, 0xfeb9f4b1
add ecx, eax
cmp ecx, 0x131ea2ef
je 0x14012701d
mov rsi, qword [r12 + 0xa0]
mov rdi, qword [0x14022cb48]
mov eax, dword [0x140228b20]
xor edx, edx
div dword [0x140228b24]
mov ecx, eax
not ecx
or ecx, 0x3b33348b
add eax, ecx
add eax, 0x5275e6ec
xor eax, 0xb98d384f
cmp eax, 0x5bc03a80
jae 0x140127214
jmp 0x140127256
mov rdx, qword [rbp + 0x18]
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x140228b38]
add eax, dword [0x140228b3c]
mov ecx, eax
and ecx, 0x6f4bcb04
add ecx, ecx
sub eax, ecx
add eax, 0xef4bcb04
imul rax, rax, 0x40c8782d
shr rax, 0x3a
mov ecx, eax
and ecx, 4
or eax, 0x84089e24
add eax, ecx
cmp eax, 0xc040af5f
ja 0x1401270b0
mov rax, qword [rdx]
mov ecx, 0x8e4f113d
nop word cs:[rax + rax]
mov edx, dword [0x140228b40]
mov r8d, dword [0x140228b44]
add edx, r8d
add edx, 0xd843d3ff
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0x43c9747d
je 0x140127100
test rax, rax
je 0x1401275b0
mov eax, dword [0x140228b48]
mov ecx, dword [0x140228b4c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
xor ecx, 0x832f59c2
xor eax, 0x22551c2
and eax, 0x7ae551cb
add eax, eax
sub ecx, eax
cmp ecx, 0x19e6aee3
jne 0x140127180
mov rax, qword [0x14022cb48]
mov eax, dword [0x140228b50]
and eax, dword [0x140228b54]
and eax, 0x7cdf331d
xor eax, 0x68dc210d
add eax, 0x5cd04917
mov rdi, qword [0x14022cb48]
cmp eax, 0xe33d2167
ja 0x140127180
mov eax, dword [0x140228b58]
mov ecx, dword [0x140228b5c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0xe6d10363
add eax, ecx
inc eax
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x6f1c1960
and ecx, 0x90e3e69f
imul ecx, edx
mov edx, eax
and edx, 0x90e3e69f
or eax, 0x90e3e69f
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x649491aa
add ecx, eax
and eax, 0x9b6b6e55
sub ecx, eax
cmp ecx, 0x378360c3
jne 0x140127523
jmp 0x140127565
mov r14d, dword [0x140228b28]
xor r14d, dword [0x140228b2c]
add r14d, 0x1d1692e9
and r14d, 0xc34d8e9a
add r14d, 0xb0fcc698
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x8be83dda
jbe 0x14012726d
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call fcn.14014eed0
add rsp, 0x20
jmp 0x140127214
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
mov rax, qword [rbp + 0x88]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov eax, 0xf4aabd55
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov ecx, dword [0x140228b30]
xor ecx, dword [0x140228b34]
imul ecx, ecx, 0xc2bba7b2
imul rcx, rax
shr rcx, 0x3e
lea edx, [rcx - 0x44b89bd8]
add ecx, ecx
sub ecx, edx
cmp ecx, 0x309f8fa5
je 0x1401272a0
jmp 0x1401275b0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
xor eax, eax
test al, al
je 0x140127300
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
jmp 0x1401272d1
mov eax, dword [0x140228a88]
xor edx, edx
div dword [0x140228a8c]
mov ecx, eax
not ecx
or ecx, 0x912a68ab
or eax, 0x6ed59754
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0xa24801
or eax, 0x81182582
and eax, ecx
not eax
and eax, 0x81ba6d83
cmp eax, 0xca3442e9
ja 0x140127300
mov eax, dword [0x140228ae0]
xor eax, dword [0x140228ae4]
and eax, 0x41154409
xor eax, 0x41044409
or eax, 0x2482826
cmp eax, 0x7af13807
je 0x1401273fd
mov eax, dword [0x140228ae8]
mov ecx, dword [0x140228aec]
mov esi, eax
not esi
mov edx, ecx
not edx
mov r8d, esi
and r8d, 0x43da4a7
and eax, 0xfbc25b58
or eax, r8d
or esi, edx
and edx, 0x43da4a7
and ecx, 0xfbc25b58
or ecx, edx
xor ecx, eax
not esi
or esi, ecx
mov eax, esi
not eax
and eax, 0x34a01046
mov ecx, esi
and ecx, 0xcb5fefb9
imul ecx, eax
mov eax, esi
and eax, 0x34a01046
or esi, 0x34a01046
imul esi, eax
add esi, ecx
mov eax, esi
or eax, 0x20800509
not esi
and eax, 0x20a60789
and esi, 0xc4516860
or esi, eax
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.14014eed0
add rsp, 0x20
cmp esi, 0xe09640e8
jne 0x14012741c
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140127364
mov rbx, qword [rbp + 0x88]
mov rax, qword [rbx]
mov r12, qword [rbp + 0x90]
nop dword [rax]
mov ecx, dword [0x140228af0]
sub ecx, dword [0x140228af4]
add ecx, 0x719c0110
imul rcx, rcx, 0x4785a0d
shr rcx, 0x36
not ecx
and ecx, 0xd65c74f2
cmp ecx, 0xdd49bddf
ja 0x140127430
shl rax, 1
test rax, rax
je 0x14012751b
mov eax, dword [0x140228af8]
xor eax, dword [0x140228afc]
and eax, 0x86d11e71
lea ecx, [rax - 0x33d2b047]
mov edx, ecx
and edx, 0x4c336f58
xor ecx, 0xb2cc10a3
add eax, ecx
add eax, 0xcc2d4fb9
sub eax, edx
cmp eax, 0x66acaaa3
jae 0x1401274c0
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call fcn.14014eed0
add rsp, 0x20
nop dword [rax]
mov esi, dword [0x140228b04]
add esi, dword [0x140228b00]
mov eax, esi
or eax, 0xffbfffbe
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc5ff0e20
movzx ecx, cx
imul ecx, edx
and eax, 0x3a00f1df
or esi, 0xffbfffff
imul esi, eax
add esi, ecx
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call fcn.14014eed0
add rsp, 0x20
cmp esi, 0x9b5f85eb
ja 0x1401274c0
mov qword [rbx], rdi
jmp 0x140127630
mov r14d, dword [0x140228b60]
sub r14d, dword [0x140228b64]
add r14d, 0x8037c689
or r14d, 0x8102c0a5
xor r14d, 0xab15a873
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x3d20d2d5
jae 0x14012757d
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140127523
movabs rdi, 0x8000000000000000
mov eax, dword [0x140228b68]
sub eax, dword [0x140228b6c]
and eax, 0x370f3b70
xor eax, 0x7040210
imul rax, rax, 0x2ded67f3
shr rax, 0x3b
cmp eax, 0x1eb9249c
ja 0x140127587
nop
mov eax, dword [0x140228b70]
or eax, dword [0x140228b74]
add eax, 0x4bc06a1e
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xbb59094
and ecx, 0xf44a6f6b
imul ecx, edx
mov edx, eax
and edx, 0xf44a6f6b
or eax, 0xf44a6f6b
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8ec07797
and ecx, 0x713f8868
imul ecx, edx
mov edx, eax
and edx, 0x713f8868
or eax, 0x713f8868
imul eax, edx
add eax, ecx
cmp eax, 0x332a1b81
jb 0x1401275b0
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x140228b78]
add eax, dword [0x140228b7c]
mov ecx, eax
not ecx
and ecx, 0x53a87c27
mov edx, eax
and edx, 0xac5783d8
imul edx, ecx
mov ecx, eax
and ecx, 0x53a87c27
or eax, 0x53a87c27
imul eax, ecx
add eax, edx
add eax, 0xdb6cd36a
and eax, 0xa25c843a
cmp eax, 0x5d5388d1
ja 0x140127630
mov rbx, qword [rbp + 0x30]
nop dword [rax + rax]
mov eax, dword [0x140228b80]
xor edx, edx
div dword [0x140228b84]
add eax, 0x3bc4072f
mov ecx, eax
or ecx, 0xea5d37db
not eax
or eax, 0x15a2c824
and eax, ecx
xor eax, 0x3ed8f254
cmp eax, 0x130831e
jb 0x140127680
mov eax, dword [0x140228b88]
mov ecx, dword [0x140228b8c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
or eax, 0xbc365b67
mov ecx, eax
and ecx, 0x26fec859
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x66fec859
or eax, 0x81b97c53
cmp eax, 0xe990e8e5
ja 0x1401276b0
jmp 0x140123f63
xor eax, eax
mov rcx, qword [rbp]
sub rcx, qword [r12 + 0x120]
cmovae rax, rcx
mov ecx, dword [0x140228bc0]
or ecx, dword [0x140228bc4]
add ecx, 0x855d6898
and ecx, 0x8030402
cmp ecx, 0xe68ccaae
ja 0x1401277bb
mov ecx, dword [0x140228bc8]
sub ecx, dword [0x140228bcc]
mov edx, ecx
not edx
and edx, 0x86a2d683
mov r8d, ecx
and r8d, 0x795d297c
imul r8d, edx
mov edx, ecx
and edx, 0x86a2d683
or ecx, 0x86a2d683
imul ecx, edx
add ecx, r8d
mov edx, ecx
not edx
and edx, 0x68a719a3
mov r8d, ecx
and r8d, 0x9758e65c
imul r8d, edx
mov edx, ecx
and edx, 0x68a719a3
or ecx, 0x68a719a3
imul ecx, edx
add ecx, r8d
mov edx, 0xbd389b43
imul rdx, rcx
shr rdx, 0x3f
mov qword [r12 + 0x128], rax
cmp edx, 0x9e0d7d54
jbe 0x1401277c8
mov qword [r12 + 0x128], rax
jmp 0x14012773a
mov eax, dword [0x140228bd0]
mov ecx, dword [0x140228bd4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
imul rax, rax, 0x5d017563
shr rax, 0x3e
or eax, 0x41ee71f4
cmp eax, 0x6e2deba2
jne 0x140127800
mov byte [r12 + 0x154], 1
nop dword [rax]
mov eax, dword [0x140228bd8]
xor eax, dword [0x140228bdc]
mov ecx, eax
not ecx
and ecx, 0xf24109e6
and eax, 0xdbef619
sub eax, ecx
mov ecx, eax
not ecx
or ecx, 0x646b2d45
or eax, 0x9b94d2ba
and eax, ecx
imul rax, rax, 0x7dc6bb4f
shr rax, 0x3e
mov byte [r12 + 0x154], 1
cmp eax, 0x7c78ff7e
je 0x140127800
lea rsp, [rbp + 0x98]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x140228c58]
mov ecx, dword [0x140228c5c]
xor ecx, eax
not ecx
and ecx, eax
or ecx, 0x74476036
add ecx, 0x6f111bdd
imul rax, rcx, 0x1f4e0d61
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x19
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
cmp ecx, 0x2aaf77b4
jbe 0x140127704
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
jmp 0x14012785d