Function at 0x140066230
Capabilities:
Check mutex on windows
Encode data using base64
Encode data using xor
Query or enumerate registry value
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1598
call fcn.14020e090
sub rsp, rax
movaps xmmword [rsp + 0x1580], xmm7
movaps xmmword [rsp + 0x1570], xmm6
mov ecx, 5
call fcn.14020b820
lea rax, [0x14156dc0c]
mov qword [rsp + 0x558], rax
lea rax, [rsp + 0x558]
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0xb96bf464
mov edx, dword [rsp + 0x558]
call fcn.14020b840
mov ecx, dword [rax]
mov edx, ecx
and edx, 0x703576c3
add edx, edx
neg edx
lea r8d, [rcx + rdx]
add r8d, 0xf03576c3
movzx edx, byte [rax + 6]
movzx eax, word [rax + 4]
mov ecx, eax
shr ecx, 8
xor al, 0x15
xor cl, 0xf
mov r9d, edx
and r9b, 0x4a
add r9b, r9b
sub dl, r9b
add dl, 0x4a
movzx edx, dl
mov byte [rsp + 0x276], dl
shl rdx, 0x30
movzx ecx, cl
shl rcx, 0x28
or rcx, rdx
movzx eax, al
shl rax, 0x20
or rax, rcx
mov dword [rsp + 0x270], r8d
shr rax, 0x20
mov word [rsp + 0x274], ax
lea rcx, [rsp + 0x277]
mov r10d, r8d
shr r10d, 0x10
mov r9d, r8d
shr r9d, 0x18
mov eax, dword [0x14158bba0]
xor edx, edx
div dword [0x14158bba4]
add eax, 0xc0d62453
cmp eax, 0x370cbae3
jb 0x140066320
test r8b, r8b
js 0x14006637c
movzx esi, r8b
mov eax, 0x82eb5dd1
nop dword [rax + rax]
mov edx, dword [0x14158bba8]
sub edx, dword [0x14158bbac]
xor edx, 0x65b89ad4
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x86b6e455
ja 0x140066350
mov edi, 1
jmp 0x1400665a2
mov eax, r8d
and eax, 0x1f
mov esi, eax
shl esi, 6
mov r11d, r8d
shr r11d, 8
and r11d, 0x3f
or esi, r11d
xor edx, edx
nop word [rax + rax]
test dl, dl
jne 0x1400663a0
mov edi, 2
cmp r8b, 0xdf
jbe 0x1400665a2
shl r11d, 6
mov edx, r10d
xor edx, 0xffffffc0
or r10d, 0x3f
and r10d, edx
mov edx, r11d
not edx
mov esi, r10d
not esi
mov edi, edx
and edi, 0x11d6a4d9
and r11d, 0xb00
or r11d, edi
or edx, esi
and esi, 0x11d6a4d9
and r10d, 0x5b26
or r10d, esi
xor r10d, r11d
not edx
or edx, r10d
mov r10d, eax
shl r10d, 0xc
nop word cs:[rax + rax]
mov r11d, dword [0x14158bbb0]
or r11d, dword [0x14158bbb4]
add r11d, 0xf0d5fea5
xor r11d, 0x4064c423
or r11d, 0x379b329c
cmp r11d, 0xdeec9892
jb 0x140066410
mov esi, edx
xor esi, r10d
not r10d
and r10d, edx
add esi, edx
sub esi, r10d
xor r10d, r10d
nop
test r10b, r10b
jne 0x140066450
nop word cs:[rax + rax]
mov r10d, dword [0x14158bbb8]
mov r11d, dword [0x14158bbbc]
mov edi, r11d
not edi
mov ebx, r10d
and ebx, edi
or edi, r10d
not edi
imul edi, ebx
mov ebx, r10d
and ebx, r11d
or r10d, r11d
imul r10d, ebx
add r10d, edi
and r10d, 0xa572bfad
mov r11d, r10d
xor r11d, 0x523924
xor r10d, 0x73a50498
and r10d, 0x73e534bc
and r11d, 0x84128b01
sub r11d, r10d
cmp r11d, 0xac7e8351
ja 0x140066460
mov edi, 3
cmp r8b, 0xf0
jb 0x1400664f0
and eax, 7
shl eax, 0x12
shl edx, 6
or edx, eax
mov eax, r9d
not eax
or eax, 0x3f
lea esi, [r9 + rax]
inc esi
or esi, edx
mov edi, 4
nop dword [rax]
mov eax, dword [0x14158bbc0]
imul eax, dword [0x14158bbc4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x289089dd
and edx, 0xd76f7622
imul edx, r8d
mov r8d, eax
and r8d, 0xd76f7622
or eax, 0xd76f7622
imul eax, r8d
add eax, edx
and eax, 0x8cae2bb8
add eax, 0xbc59f354
cmp eax, 0xd6fc6865
ja 0x1400664f0
cmp esi, 0xffff
jbe 0x1400665a2
lea eax, [rsi + 0xff0000]
shr eax, 0xa
nop dword [rax]
mov edx, dword [0x14158bbc8]
mov r8d, dword [0x14158bbcc]
add edx, r8d
add edx, 0xe8e66893
mov r8d, edx
or r8d, 0xe0096312
and r8d, 0xf01963da
not edx
and edx, 0x5641004
or edx, r8d
cmp edx, 0x32d9f403
jb 0x140066550
or eax, 0xd800
or esi, 0xdc00
and esi, 0xdfff
mov r13d, esi
mov esi, eax
jmp 0x1400665a5
xor r13d, r13d
movabs r8, 0x3fffffffffffffff
mov qword [rsp + 0x48], rdi
lea r9, [rsp + rdi]
add r9, 0x270
mov r10, rcx
or r10, 2
mov r11, r9
not r11
movabs r14, 0xaaaaaaaaaaaaaaab
mov edi, 4
nop dword [rax + rax]
mov eax, dword [0x14158bbd0]
xor edx, edx
div dword [0x14158bbd4]
add eax, 0x59f94df7
or eax, 0xa360de9e
mov edx, eax
and edx, 0x24a1e850
xor eax, 0xa4a1e850
lea ebx, [rax + rdx*2]
mov r15d, ecx
and r15d, 2
add r15, r10
mov rdx, r15
not rdx
and rdx, r9
mov rax, r15
and rax, r11
sub rax, rdx
mul r14
shr rdx, 1
cmp r13w, 1
sbb rdx, 0xffffffffffffffff
mov eax, edx
and eax, 1
mov r12, rdx
xor r12, 1
lea r12, [r12 + rax*2]
cmp rdx, 3
cmovb r12, rdi
cmp ebx, 0x5f6de4bd
je 0x1400665e0
cmp r12, r8
ja 0x1400666a7
lea rdx, [r12 + r12]
movzx eax, byte [0x1415acbd0]
xor ecx, ecx
call fcn.14020ae90
test rax, rax
je 0x14006674d
mov rcx, rax
mov word [rax], si
mov eax, dword [0x14158bc08]
or eax, dword [0x14158bc0c]
mov qword [rsp + 0x558], r12
or eax, 0x50002483
and eax, 0x50012593
cmp eax, 0x265d67bd
jae 0x140066852
jmp 0x1400668b8
mov eax, dword [0x14158bbd8]
imul eax, dword [0x14158bbdc]
mov ecx, eax
and ecx, 0x4f150465
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x4f150465
mov ecx, eax
xor ecx, 0x11b08141
xor eax, 0xe80e66ae
or ecx, 0xc649783e
and ecx, eax
cmp ecx, 0x75be4c96
jne 0x1400666f0
ud2
mov eax, dword [0x14158bbe0]
xor edx, edx
div dword [0x14158bbe4]
or eax, 0x2279fbee
and eax, 0x237dfbef
add eax, 0x9fc564f9
ud2
mov eax, dword [0x14158bbf0]
sub eax, dword [0x14158bbf4]
mov ecx, eax
xor ecx, 0x560064e
and ecx, eax
mov eax, ecx
and eax, 0x1f6a966e
mov edx, eax
not edx
mov r8d, ecx
and r8d, 0x1100946e
and edx, 0x6eff2a01
imul edx, r8d
and ecx, 0xe6a0200
or eax, 0x6eff2a01
imul eax, ecx
add eax, edx
cmp eax, 0x32f4c4da
jbe 0x1400667a0
ud2
mov eax, dword [0x14158bbf8]
mov ecx, dword [0x14158bbfc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xebddb4ce
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd3d8c05d
and ecx, 0x2c273fa2
imul ecx, edx
mov edx, eax
and edx, 0x2c273fa2
or eax, 0x2c273fa2
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0xf3274538
or eax, 0xcd8bac6
and eax, ecx
ud2
ud2
mov eax, dword [0x14158bc10]
add eax, dword [0x14158bc14]
mov edx, 0x93a2d4a1
imul rdx, rax
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
mov edx, eax
not edx
and edx, 0x92c0a6f5
mov r8d, eax
and r8d, 2
imul r8d, edx
mov edx, eax
and edx, 0xfffffffd
or eax, 0x92c0a6f5
imul eax, edx
add eax, r8d
mov edx, eax
and edx, 0x76ed3bc0
xor eax, 0x76ed3bc0
lea eax, [rax + rdx*2]
mov qword [rsp + 0x560], rcx
cmp eax, 0x15f7dce6
jne 0x1400668c2
mov qword [rsp + 0x560], rcx
jmp 0x140066852
mov qword [rsp + 0x568], 1
mov r12d, 1
mov ebp, 2
mov esi, 0xa12add13
mov rbx, qword [rsp + 0x48]
test r13w, r13w
je 0x140066910
nop dword [rax]
xor edi, edi
cmp r12, qword [rsp + 0x558]
je 0x140066bb0
jmp 0x140066d51
mov eax, dword [0x14158bc1c]
mov edx, eax
xor edx, edx
not edx
and edx, dword [0x14158bc18]
xor edx, eax
imul rax, rdx, 0x54d9f8db
shr rax, 0x3e
add eax, 0x211ed0f3
cmp eax, 0xbcf31c34
ja 0x140066910
cmp rbx, 7
mov r10d, 0xb9bcdfff
mov edi, 0x9b08aceb
je 0x140066f9d
lea r9, [rbx + 1]
nop word cs:[rax + rax]
mov eax, dword [0x14158bc20]
mov edx, dword [0x14158bc24]
mov r8d, eax
xor r8d, edx
not edx
and edx, eax
add edx, edx
sub edx, r8d
or edx, 0xddd0a0e6
imul rdx, r10
shr rdx, 0x3d
add edx, 0x75fa0de6
cmp edx, 0x40903b92
jb 0x140066960
movzx r8d, byte [rsp + rbx + 0x270]
test r8b, r8b
js 0x140066a30
mov eax, dword [0x14158bc38]
xor edx, edx
div dword [0x14158bc3c]
mov eax, dword [0x14158bc40]
add eax, dword [0x14158bc44]
shr eax, 1
imul rax, rax, 0x2696439d
shr rax, 0x3c
lea edx, [rax - 0x40e10f64]
add eax, eax
sub eax, edx
add eax, 0xf48423ad
cmp eax, 0x84959ae1
ja 0x1400669b7
nop word cs:[rax + rax]
mov eax, dword [0x14158bc48]
mov edx, dword [0x14158bc4c]
not eax
not edx
or edx, eax
not edx
imul eax, edx, 0x3e0abe3d
or eax, 0xba98ab57
imul rax, rax, 0x11444e8f
shr rax, 0x3b
cmp eax, 0xa5300cfb
jae 0x1400669f0
mov r11, r9
jmp 0x140066b8c
mov eax, r8d
xor al, 0xe0
mov edx, r8d
or dl, 0x1f
and dl, al
movzx r10d, dl
mov eax, ebx
and eax, 2
mov rdx, rbx
xor rdx, 2
lea r11, [rdx + rax*2]
movzx r9d, byte [rsp + r9 + 0x270]
mov eax, dword [0x14158bc28]
xor edx, edx
div dword [0x14158bc2c]
imul eax, eax, 0x9aa25547
imul rax, rax, 0x32bb2a51
shr rax, 0x3c
or eax, 0x84b3cf98
cmp eax, 0x6cf3a932
jb 0x140066a5a
mov eax, r10d
shl eax, 6
nop dword [rax + rax]
mov edx, dword [0x14158bc30]
sub edx, dword [0x14158bc34]
or edx, 0x56c5ce6f
xor edx, 0x42821c4
imul rdx, rdi
shr rdx, 0x3f
cmp edx, 0x29545810
je 0x140066a90
and r9b, 0x3f
movzx edi, r9b
cmp r8b, 0xdf
jbe 0x140066b87
mov eax, dword [0x14158bc50]
xor edx, edx
div dword [0x14158bc54]
nop dword [rax + rax]
mov eax, dword [0x14158bc58]
imul eax, dword [0x14158bc5c]
add eax, 0x462e692b
and eax, 0x42891b10
cmp eax, 0x8aee00a8
ja 0x140066ae0
lea r9, [rbx + 3]
movzx r11d, byte [rsp + r11 + 0x270]
not r11d
shl edi, 6
not edi
or r11d, 0xffffffc0
and r11d, edi
not r11d
cmp r8b, 0xf0
jb 0x140066e06
nop word [rax + rax]
mov eax, dword [0x14158bc60]
xor edx, edx
div dword [0x14158bc64]
add eax, 0x7f461823
or eax, 0xfa0ce641
cmp eax, 0xdb43acf
je 0x140066b30
add rbx, 4
movzx eax, byte [rsp + r9 + 0x270]
shl r10d, 0x12
mov edx, r10d
not edx
or edx, 0x1c0000
add edx, r10d
shl r11d, 6
and eax, 0x3f
or eax, r11d
lea r8d, [rdx + rax]
inc r8d
mov r9, rbx
jmp 0x140066e24
or eax, edi
mov r8d, eax
xor edi, edi
mov rbx, r11
mov r13d, r8d
cmp r12, qword [rsp + 0x558]
jne 0x140066d51
nop word cs:[rax + rax]
mov eax, dword [0x14158bc90]
mov ecx, dword [0x14158bc94]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul eax, eax, 0x52b5ba8b
lea ecx, [rax + 0x5429c933]
mov edx, ecx
and edx, 0xec1b5f89
xor ecx, 0x13e4a076
add eax, ecx
add eax, 0x5429c933
sub eax, edx
cmp eax, 0x6e0e302d
je 0x140066bb0
mov qword [rsp + 0x48], rbx
lea rcx, [rsp + rbx]
add rcx, 0x270
mov r8d, dword [0x14158bc98]
mov eax, dword [0x14158bc9c]
mov edx, r8d
not edx
or r8d, eax
not eax
and eax, edx
not r8d
or r8d, eax
xor r8d, 0xd65b464f
add r8d, 0x1c635471
and r8d, 0x903df1ff
mov rax, r15
sub rax, rcx
mul r14
cmp r8d, 0xcb0c1a83
je 0x140066c00
mov rbx, rdx
mov qword [rsp + 0x50], rbp
shr rbx, 1
mov ecx, dword [0x14158bca0]
mov eax, dword [0x14158bca4]
xor eax, ecx
not eax
and eax, ecx
add eax, 0x372206e8
mov ecx, eax
not ecx
and ecx, 0xc55b9882
mov edx, eax
and edx, 0x3aa4677d
imul edx, ecx
mov ecx, eax
and ecx, 0xc55b9882
or eax, 0xc55b9882
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xc9e0bc1b
mov edx, eax
and edx, 0x361f43e4
imul edx, ecx
mov ecx, eax
and ecx, 0xc9e0bc1a
or eax, 0xc9e0bc1b
imul eax, ecx
add eax, edx
cmp eax, 0xb9c5a037
ja 0x140066f69
mov rbp, r12
lea r14, [rsp + 0x558]
nop dword [rax]
mov eax, dword [0x14158bca8]
mov r12d, dword [0x14158bcac]
mov ecx, eax
or ecx, r12d
not eax
not r12d
and r12d, eax
not r12d
and r12d, ecx
or r12d, 0x1b77d3f6
add r12d, 0xbee0f173
or r12d, 0xb4e0736f
cmp di, 1
mov r8d, 2
sbb r8, 0
mov eax, ebx
and eax, r8d
or r8, rbx
add r8, rax
mov rcx, r14
mov rdx, rbp
call fcn.14020b860
cmp r12d, 0x65793f86
jb 0x140066cd0
mov rcx, qword [rsp + 0x560]
mov r12, rbp
movabs r14, 0xaaaaaaaaaaaaaaab
mov rbp, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov eax, dword [0x14158bc80]
and eax, dword [0x14158bc84]
mov edx, eax
xor edx, 0xe13380
xor eax, 0x44647258
and eax, edx
or eax, 0xab0aba26
cmp eax, 0x568a76d7
jne 0x140066d90
mov word [rcx + r12*2], r13w
lea rax, [r12 + 1]
mov qword [rsp + 0x568], rax
nop word [rax + rax]
mov eax, dword [0x14158bc88]
mov edx, dword [0x14158bc8c]
mov r8d, eax
not r8d
or eax, edx
not edx
or edx, r8d
not edx
not eax
or eax, edx
not eax
mov edx, eax
and edx, 0x60c25df2
add edx, edx
neg edx
add edx, eax
add edx, 0x60c25df2
imul rdx, rsi
shr rdx, 0x3f
or edx, 0xab08113a
lea rax, [r12 + 1]
mov word [rcx + r12*2], r13w
mov qword [rsp + 0x568], rax
cmp edx, 0x7ecad91b
je 0x140066d90
add rbp, 2
mov r12, rax
mov r13d, edi
test r13w, r13w
jne 0x1400668f0
jmp 0x140066910
shl r10d, 0xc
mov eax, r11d
not eax
or r11d, r10d
not r10d
and r10d, eax
not r11d
or r11d, r10d
not r11d
mov r8d, r11d
mov eax, dword [0x14158bc6c]
mov edx, eax
xor edx, edx
not edx
and edx, dword [0x14158bc68]
xor edx, eax
mov eax, edx
and eax, 0x74b68599
xor edx, 0xf4b68599
lea eax, [rdx + rax*2]
mov edx, eax
not edx
and edx, 0x87b436f4
and eax, 0x784bc90b
sub eax, edx
add eax, 0xbe7cc09
cmp eax, 0xba39f5a9
ja 0x140066e24
cmp r8d, 0xffff
jbe 0x140066a21
nop word cs:[rax + rax]
mov eax, dword [0x14158bc70]
mov edx, dword [str._tYiocx_]
mov r10d, eax
xor r10d, edx
not edx
and edx, eax
add edx, edx
sub edx, r10d
mov eax, edx
xor eax, 0x150802
xor edx, 0x97db7695
or edx, 0x8008
and edx, 0x18a2a018
and eax, 0x241d5926
sub eax, edx
cmp eax, 0x796e9019
je 0x140066e80
lea r13d, [r8 + 0xff0000]
shr r13d, 0xa
or r13d, 0xd800
nop word cs:[rax + rax]
mov eax, dword [0x14158bc78]
mov edx, dword [0x14158bc7c]
mov r10d, edx
not r10d
and r10d, eax
xor edx, eax
add edx, eax
sub edx, r10d
mov eax, edx
xor eax, 0x96408281
xor edx, 0x21bd784e
or eax, 0x49375d30
and eax, edx
mov edx, eax
not edx
and edx, 0xce6dbbed
mov r10d, eax
and r10d, 0x31924412
imul r10d, edx
mov edx, eax
and edx, 0xce6dbbed
or eax, 0xce6dbbed
imul eax, edx
add eax, r10d
cmp eax, 0x1485c842
je 0x140066ee0
and r8d, 0x3ff
or r8d, 0xdc00
mov rbx, r9
mov edi, r8d
cmp r12, qword [rsp + 0x558]
je 0x140066bb0
jmp 0x140066d51
cmp di, 1
movabs rax, 0xeeb626f8ec2c9f76
mov r8, rax
sbb r8, 0
add r8, rbx
sub r8, rax
add r8, 2
lea rcx, [rsp + 0x558]
mov rdx, r12
call fcn.1402474d0
jmp 0x140066cc1
mov eax, dword [0x14158bcb0]
imul eax, dword [0x14158bcb4]
add eax, 0x27406171
mov ecx, eax
xor ecx, 0x61406bd4
xor eax, 0xa3811c95
and eax, ecx
cmp eax, 0x3dac577c
nop word cs:[rax + rax]
mov eax, dword [0x14158bcb8]
sub eax, dword [0x14158bcbc]
xor eax, 0xf526e0a2
add eax, 0x8bc2d106
mov ecx, eax
xor ecx, 0x1923e0f1
and eax, 0x66dc1f0e
add eax, eax
sub eax, ecx
cmp eax, 0x7877485c
jb 0x140066fd0
mov r15, qword [rsp + 0x558]
mov rbx, qword [rsp + 0x560]
test r12, r12
je 0x140067257
xor eax, eax
nop dword [rax]
cmp word [rbx + rax*2], 0
je 0x14006727e
inc rax
add rbp, 0xfffffffffffffffe
jne 0x140067020
mov eax, 0xaf6b76f3
nop dword [rax]
mov ecx, dword [0x14158bcd8]
mov edx, dword [0x14158bcdc]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
mov edx, ecx
not edx
and edx, 0x36fb495a
mov r8d, ecx
and r8d, 0xc904b6a5
imul r8d, edx
mov edx, ecx
and edx, 0x36fb495a
or ecx, 0x36fb495a
imul ecx, edx
add ecx, r8d
add ecx, 0x4b19429c
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x29ef3a66
ja 0x140067040
mov eax, dword [0x14158bce0]
mov ecx, dword [0x14158bce4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0x5391632a
xor eax, 0x15f1c1c0
cmp eax, 0x32502d77
jae 0x140067100
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], rbx
mov qword [rsp + 0x568], r12
nop word cs:[rax + rax]
mov eax, dword [0x14158bce8]
or eax, dword [0x14158bcec]
or eax, 0x38a052c4
shr eax, 2
imul rax, rax, 0x470a73d1
shr rax, 0x3c
not eax
and eax, 0x46d2abf5
xor eax, 0xbefe902e
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], rbx
mov qword [rsp + 0x568], r12
cmp eax, 0xe088e0b9
jb 0x140067100
nop word [rax + rax]
mov eax, dword [0x14158bcf0]
xor edx, edx
div dword [0x14158bcf4]
mov ecx, eax
xor ecx, 0x7f22aaa4
and eax, 0xdd555b
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x9a1f0ddb
and ecx, 0x65e0f224
imul ecx, edx
mov edx, eax
and edx, 0x65e0f224
or eax, 0x65e0f224
imul eax, edx
add eax, ecx
imul rax, rax, 0x75f6a8b9
shr rax, 0x3e
cmp eax, 0x3e893738
je 0x140067150
cmp word [rbx + r12*2 - 2], 0
je 0x1400673f0
mov eax, dword [0x14158bd68]
xor edx, edx
div dword [0x14158bd6c]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400671d0
nop word cs:[rax + rax]
mov eax, dword [0x14158bd70]
mov ecx, dword [0x14158bd74]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not edx
or edx, ecx
or edx, 0xa46ec4f5
add edx, 0xee3217a2
mov eax, edx
not eax
or edx, 0x22037a24
or eax, 0x5ddc815b
and eax, edx
cmp eax, 0x16e04835
je 0x1400671e0
cmp r12, r15
jne 0x1400679ee
mov eax, dword [0x14158bd78]
xor edx, edx
div dword [0x14158bd7c]
mov ecx, eax
xor ecx, 0x80100508
or eax, 0xc20200
and eax, ecx
and eax, 0x80d20708
cmp eax, 0x82247424
jbe 0x140067921
jmp 0x140067966
mov eax, dword [0x14158bcc0]
xor eax, dword [0x14158bcc4]
imul eax, eax, 0xc4b2e5f4
add eax, 0x3b8a77e8
cmp eax, 0xc6159200
jbe 0x14006765e
jmp 0x140067674
mov eax, dword [0x14158bda0]
xor edx, edx
div dword [0x14158bda4]
nop dword [rax]
mov eax, dword [0x14158bda8]
mov ecx, dword [0x14158bdac]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x5242e5df
and ecx, 0xadbd1a20
imul ecx, edx
mov edx, eax
and edx, 0xadbd1a20
or eax, 0xadbd1a20
imul eax, edx
add eax, ecx
add eax, 0xe77f2fa6
mov ecx, eax
and ecx, 0x4a2ae9c2
add ecx, ecx
sub eax, ecx
cmp eax, 0xa9f1176a
je 0x140067290
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x140067314
mov r12d, 1
jmp 0x140067629
mov eax, dword [0x14158bdb8]
xor edx, edx
div dword [0x14158bdbc]
nop word cs:[rax + rax]
mov eax, dword [0x14158bdc0]
xor edx, edx
div dword [0x14158bdc4]
add eax, 0x66a2b3fd
mov ecx, eax
and ecx, 0xfb973ca0
or eax, 0xfb973ca0
add eax, ecx
add eax, 0x38c1feae
cmp eax, 0x809ea891
jb 0x140067330
mov qword [rsp + 0x200], r12
nop word cs:[rax + rax]
mov ecx, dword [0x14158bdc8]
mov edx, dword [0x14158bdcc]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x8bd9a1fa
and ecx, 0x74265e05
or ecx, r9d
or eax, r8d
and r8d, 0x8bd9a1fa
and edx, 0x74265e05
or edx, r8d
xor edx, ecx
not eax
or eax, edx
lea ecx, [rax + 0x4c79d2e8]
mov edx, ecx
and edx, 0x7ef8c5f4
xor ecx, 0x81073a0b
add eax, ecx
add eax, 0x4c79d2e8
sub eax, edx
imul rax, rax, 0x13b41ca9
shr rax, 0x3c
cmp eax, 0x40a13cfb
jae 0x140067370
mov r12, rbx
jmp 0x140067dec
mov eax, dword [0x14158bd18]
imul eax, dword [0x14158bd1c]
mov ecx, eax
not ecx
and ecx, 0xe9f5da08
mov edx, eax
and edx, 0x160a25f7
imul edx, ecx
mov ecx, eax
and ecx, 0xe9f5da08
or eax, 0xe9f5da08
imul eax, ecx
add eax, edx
add eax, 0xd9742e4a
mov ecx, eax
and ecx, 0x4ac3a290
or eax, 0x4ac3a291
add eax, ecx
cmp eax, 0x35e1126a
je 0x1400673f0
cmp r15, r12
jbe 0x140067600
mov eax, dword [0x14158bd20]
xor edx, edx
div dword [0x14158bd24]
mov eax, 0xac4e580d
nop dword [rax + rax]
mov ecx, dword [0x14158bd28]
mov edx, dword [0x14158bd2c]
not ecx
not edx
or edx, ecx
not edx
or edx, 0x9d3184a6
imul rdx, rax
shr rdx, 0x3d
mov ecx, edx
xor ecx, 0x3b4c938d
add ecx, edx
and edx, 2
sub ecx, edx
cmp ecx, 0x31a793cd
jb 0x140067460
nop dword [rax]
mov eax, dword [0x14158bd30]
mov ecx, dword [0x14158bd34]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
and ecx, 0x5001e48
or eax, 0x5001e48
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xdf5bf8a
and ecx, 0x120a4075
imul ecx, edx
mov edx, eax
and edx, 0x120a4075
or eax, 0x120a4075
imul eax, edx
add eax, ecx
or eax, 0xef7b2e3d
cmp eax, 0x7c817354
jb 0x1400674a0
test r12, r12
jne 0x140067863
mov eax, dword [0x14158bd38]
sub eax, dword [0x14158bd3c]
mov ecx, 0xeabb2ad1
imul rcx, rax
shr rcx, 0x3c
add ecx, 0xda2e5f18
mov eax, ecx
xor eax, 0x422b6a
and ecx, 0x5a2c5415
add ecx, ecx
sub ecx, eax
cmp ecx, 0x1c4ddc45
jae 0x140067540
mov rax, qword [0x1415acb98]
nop
mov eax, dword [0x14158bd40]
add eax, dword [0x14158bd44]
or eax, 0x6e199e6a
and eax, 0xef79bf6e
mov r14, qword [0x1415acb98]
cmp eax, 0x8b58526d
je 0x140067540
mov eax, dword [0x14158bd48]
xor edx, edx
div dword [0x14158bd4c]
mov ecx, eax
and ecx, 0xe3744fd
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xee3744fd
or eax, 0xc8efb2bf
cmp eax, 0x7dd49d14
je 0x1400675de
mov eax, dword [0x14158bd50]
mov ecx, dword [0x14158bd54]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
xor ecx, 0xdff947d2
and ecx, eax
imul esi, ecx, 0x3e16095
mov eax, esi
xor eax, 0x4c4bf70e
or esi, 0xb3b408f1
and esi, eax
xor r12d, r12d
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0x7ab89ed3
jb 0x1400675ed
mov rcx, r14
xor edx, edx
mov r8, rbx
call fcn.14020ae70
jmp 0x140067591
mov ebx, 2
nop word cs:[rax + rax]
mov eax, dword [0x14158bd98]
xor eax, dword [0x14158bd9c]
imul rax, rax, 0x763d694f
shr rax, 0x3e
imul eax, eax, 0xf6955c32
add eax, 0x354cbb97
cmp eax, 0x8d569fd3
ja 0x140067600
mov eax, dword [0x14158bdb0]
xor eax, dword [0x14158bdb4]
add eax, 0x1915caed
imul rcx, rax, 0x9478c7f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x841e085a
jne 0x140067a0d
jmp 0x140067a28
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], rbx
xor eax, eax
test al, al
je 0x140067686
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], rbx
jmp 0x14006765e
mov eax, dword [0x14158bcc8]
imul eax, dword [0x14158bccc]
or eax, 0x8b4d75ac
and eax, 0x8bef75ed
cmp eax, 0xa81c2389
jbe 0x1400676b0
mov qword [rsp + 0x568], 0
mov eax, 0xcbcac807
nop word cs:[rax + rax]
mov ecx, dword [0x14158bcd0]
imul ecx, dword [0x14158bcd4]
xor ecx, 0x4fae1676
add ecx, 0x1bb7c67e
imul rcx, rax
shr rcx, 0x3f
mov qword [rsp + 0x568], 0
cmp ecx, 0x8c7f4af5
je 0x1400676c0
test r15, r15
je 0x140067714
mov word [rbx], 0
mov r12d, 1
cmp r15, 1
jbe 0x140067600
jmp 0x140067863
mov eax, dword [0x14158bcf8]
xor edx, edx
div dword [0x14158bcfc]
mov ecx, eax
and ecx, 0x10c4622b
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x50c4622b
xor eax, 0x40e38304
or eax, 0x9f1c74d3
cmp eax, 0x6dc9fba9
jne 0x140067753
lea rcx, [rsp + 0x558]
call fcn.14020b880
lea rsi, [rsp + 0x558]
nop dword [rax + rax]
mov eax, dword [0x14158bd00]
or eax, dword [0x14158bd04]
add eax, 0xd1059906
mov edi, eax
xor edi, 0xca3d9667
and edi, eax
mov eax, edi
not eax
mov ecx, edi
and ecx, 0x65e3d063
and eax, 0x9a1c2f9c
imul eax, ecx
mov ecx, edi
and ecx, 0x9a1c2f9c
or edi, 0x9a1c2f9c
imul edi, ecx
add edi, eax
mov rcx, rsi
call fcn.14020b880
cmp edi, 0x259425e3
je 0x140067760
nop word cs:[rax + rax]
mov eax, dword [0x14158bd08]
mov ecx, dword [0x14158bd0c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x26ca1a10
and ecx, 0xd935e5ef
imul ecx, edx
mov edx, eax
and edx, 0xd935e5ef
or eax, 0xd935e5ef
imul eax, edx
add eax, ecx
imul eax, eax, 0x71664b3e
mov ecx, eax
and ecx, 0x501e4f96
xor eax, 0x501e4f97
lea eax, [rax + rcx*2]
cmp eax, 0x691a2fc1
jb 0x1400677c0
mov r15, qword [rsp + 0x558]
nop
mov eax, dword [0x14158bd10]
sub eax, dword [0x14158bd14]
or eax, 0xf9997f39
mov ecx, eax
not ecx
or ecx, 0x206e2104
add eax, ecx
inc eax
cmp eax, 0x340fb08d
jae 0x140067820
mov rbx, qword [rsp + 0x560]
mov word [rbx], 0
mov r12d, 1
cmp r15, 1
jbe 0x140067600
mov eax, dword [0x14158bd58]
xor edx, edx
div dword [0x14158bd5c]
mov ecx, eax
not ecx
and ecx, 0xec5e3cea
and eax, 0x13a1c315
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1ba35023
and ecx, 0x45cafdc
imul ecx, edx
mov edx, eax
and edx, 0x45cafdc
or eax, 0x45cafdc
imul eax, edx
add eax, ecx
or eax, 0xed70aa0e
cmp eax, 0x4082d196
je 0x1400678f9
mov esi, dword [0x14158bd60]
mov eax, dword [0x14158bd64]
mov ecx, esi
and ecx, eax
or esi, eax
add esi, ecx
xor esi, 0x8d7d20
and esi, 0xcc8dfda4
add esi, 0x187d4b2e
lea r9, [r12 + r12]
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
cmp esi, 0x419345fa
jae 0x140067910
lea r9, [r12 + r12]
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call fcn.14020b280
jmp 0x1400678b5
mov rbx, rax
test rax, rax
jne 0x140067600
jmp 0x140066850
mov eax, dword [0x14158bd80]
xor edx, edx
div dword [0x14158bd84]
add eax, 0x8d49bb57
imul rax, rax, 0x66193a5f
shr rax, 0x3a
mov ecx, eax
and ecx, 0xfffffff8
add ecx, ecx
neg ecx
lea esi, [rax + rcx]
add esi, 0x3c2df838
lea rcx, [rsp + 0x558]
call fcn.140130ea0
cmp esi, 0x92ee3ec2
jbe 0x140067980
lea rcx, [rsp + 0x558]
call fcn.140130ea0
jmp 0x140067921
mov eax, dword [0x14158bd88]
mov ecx, dword [0x14158bd8c]
mov edx, eax
and edx, ecx
or eax, ecx
not edx
and edx, eax
mov eax, edx
not eax
or eax, 0x82a11779
and eax, 0x82a377f9
and edx, 0x645c8806
or edx, eax
cmp edx, 0xc1329ed8
je 0x140067980
mov r15, qword [rsp + 0x558]
mov rbx, qword [rsp + 0x560]
nop word cs:[rax + rax]
mov eax, dword [0x14158bd90]
sub eax, dword [0x14158bd94]
imul rax, rax, 0x44d8a039
shr rax, 0x3d
cmp eax, 0x19acf7c9
je 0x1400679d0
mov word [rbx + r12*2], 0
movabs rax, 0xbff5220d36a0462a
sub r12, rax
add r12, rax
inc r12
jmp 0x1400673f0
xor esi, esi
xor ecx, ecx
xor edx, edx
mov r8, rbx
call fcn.14020b8a0
mov r14, rax
call sub.KERNEL32.dll_GetLastError
test sil, sil
je 0x140067a3b
xor ecx, ecx
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_CreateMutexW
call fcn.14020b260
jmp 0x140067a0d
mov ecx, eax
cmp r14, 6
jge 0x140067af2
test r14, r14
je 0x140067af8
mov eax, dword [0x14158bde8]
xor edx, edx
div dword [str._y5_]
mov rsi, r12
nop word cs:[rax + rax]
mov eax, dword [0x14158bdf0]
and eax, dword [0x14158bdf4]
mov edx, eax
not edx
and edx, 0x45e8a435
mov r8d, eax
and r8d, 0xba175bca
imul r8d, edx
mov edx, eax
and edx, 0x45e8a435
or eax, 0x45e8a435
imul eax, edx
add eax, r8d
shr eax, 4
imul rax, rax, 0x468f241
shr rax, 0x35
or eax, 0x2b46ad4
cmp eax, 0xbeca9742
je 0x140067a70
movabs rax, 0x8000000000000000
lea r15, [rax + 1]
mov r12d, 1
cmp ecx, 0xb7
jne 0x140067bce
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r12d, r12d
jmp 0x140067bce
jne 0x140067a50
mov eax, dword [0x14158bdd0]
xor edx, edx
div dword [0x14158bdd4]
mov rsi, r12
mov r12d, ecx
nop dword [rax]
mov eax, dword [0x14158bdd8]
or eax, dword [0x14158bddc]
mov ecx, eax
not ecx
and ecx, 0x323d8f51
mov edx, eax
and edx, 0xcdc270ae
imul edx, ecx
mov ecx, eax
and ecx, 0x323d8f51
or eax, 0x323d8f51
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x8c668805
and ecx, 0xace7ae37
xor eax, 0x430011c8
and eax, 0x531851c8
or eax, ecx
cmp eax, 0x1970247c
jb 0x140067b10
mov eax, 0xc80e2e5f
nop dword [rax]
mov ecx, dword [0x14158bde0]
mov edx, dword [0x14158bde4]
xor edx, ecx
not edx
and edx, ecx
mov ecx, edx
not ecx
and ecx, 0x2ff53406
mov r8d, edx
and r8d, 0xd00acbf9
imul r8d, ecx
mov ecx, edx
and ecx, 0x2ff53406
or edx, 0x2ff53406
imul edx, ecx
add edx, r8d
imul ecx, edx, 0x3abbfaf
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x50892763
jae 0x140067b70
movabs r15, 0x8000000000000000
mov word [rbx], 0
test rsi, rsi
je 0x140067de4
mov eax, dword [0x14158bdf8]
mov ecx, dword [0x14158bdfc]
add eax, ecx
add eax, 0xe1a55f2d
mov ecx, eax
not ecx
and ecx, 0xca0a0da
mov edx, eax
and edx, 0x735f5f25
imul edx, ecx
mov ecx, eax
and ecx, 0xca0a0da
or eax, 0xca0a0da
imul eax, ecx
add eax, edx
and eax, 0x6e741532
cmp eax, 0x42c4c4b7
jae 0x140067c30
mov rax, qword [0x1415acb98]
nop dword [rax]
mov eax, dword [0x14158be00]
sub eax, dword [0x14158be04]
mov ecx, eax
not ecx
and ecx, 0x2527c521
mov edx, eax
and edx, 0xdad83ade
imul edx, ecx
mov ecx, eax
and ecx, 0x2527c521
or eax, 0x2527c521
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or eax, 0x77cbabc3
or ecx, 0x8834543c
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x9f89f7ed
and ecx, 0x60760812
imul ecx, edx
mov edx, eax
and edx, 0x60760812
or eax, 0x60760812
imul eax, edx
add eax, ecx
mov rsi, qword [0x1415acb98]
cmp eax, 0x789e65bd
je 0x140067c30
mov eax, dword [0x14158be08]
mov ecx, dword [0x14158be0c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x8ea70819
and eax, 0x7158f7e6
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x3010120
xor eax, 0x24a65edf
or ecx, 0xd858bccf
and ecx, eax
cmp ecx, 0x228de3db
jb 0x140067d7a
mov eax, dword [0x14158be10]
mov ecx, dword [0x14158be14]
mov edx, eax
not edx
or eax, ecx
not ecx
or ecx, edx
not ecx
not eax
or eax, ecx
not eax
lea ecx, [rax - 0x3eda5e7d]
mov edx, ecx
and edx, 0x9c1687bb
xor ecx, 0x63e97844
lea edi, [rax + rcx]
add edi, 0xc125a183
sub edi, edx
mov eax, edi
not eax
and eax, 0xbfbc0b3b
mov ecx, edi
and ecx, 0x4043f4c4
imul ecx, eax
mov eax, edi
and eax, 0xbfbc0b3b
or edi, 0xbfbc0b3b
imul edi, eax
add edi, ecx
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.14020ae70
cmp edi, 0xd739d91e
jbe 0x140067d90
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140067d02
mov eax, dword [0x14158be18]
or eax, dword [0x14158be1c]
mov ecx, eax
not ecx
or eax, 0x1000880c
or ecx, 0x400f2311
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
or edx, 0xaff054e2
mov r8d, edx
and r8d, 0x2ec02e60
and ecx, 0x500f811d
imul ecx, r8d
and edx, 0xd13fd19f
or eax, 0xffffd5ff
imul eax, edx
add eax, ecx
cmp eax, 0x6b7a9301
ja 0x140067d90
mov qword [rsp + 0x200], r14
movabs rax, 0x8000000000000000
inc rax
cmp r15, rax
jne 0x1400685f1
nop word cs:[rax + rax]
mov eax, dword [0x14158be20]
add eax, dword [0x14158be24]
imul eax, eax, 0x98a49124
add eax, 0xb0011b10
cmp eax, 0xae1ca2bf
jb 0x140067e10
test r12, r12
je 0x1400685a7
mov ecx, dword [0x14158be38]
mov eax, dword [0x14158be3c]
mov edx, ecx
xor edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov ecx, eax
not ecx
and ecx, 0x87567a6e
mov edx, eax
and edx, 0x78a98591
imul edx, ecx
mov ecx, eax
and ecx, 0x87567a6e
or eax, 0x87567a6e
imul eax, ecx
add eax, edx
imul rcx, rax, 0x35f37903
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
lea rcx, [0x14157206c]
cmp eax, 0xcbd9474b
lea r9, [rsp + 0x558]
jne 0x140067eb0
mov qword [rsp + 0x558], rcx
nop dword [rax + rax]
mov eax, dword [str.9:G_]
mov edx, dword [0x14158be44]
mov r8d, eax
and r8d, edx
xor eax, edx
lea eax, [rax + r8*2]
add eax, 0xf1393aaf
mov edx, eax
xor edx, 0x900b0200
xor eax, 0x4264004b
and eax, 0x6374f47b
and edx, 0x9c8b0b84
or edx, eax
mov qword [rsp + 0x558], rcx
cmp edx, 0x238aec95
je 0x140067eb0
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x1ca8af4c
mov edx, dword [rsp + 0x558]
call fcn.140047010
movabs rcx, 0x7905c5da8f6a5469
xor rcx, qword [rax]
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
mov r9d, eax
and r9b, 0x25
add r9b, r9b
sub al, r9b
add al, 0xa5
xor r8b, 0x45
mov r9d, edx
and r9b, 0x62
add r9b, r9b
sub dl, r9b
add dl, 0x62
mov qword [rsp + 0xe0], rcx
mov byte [rsp + 0xe8], al
mov byte [rsp + 0xe9], r8b
mov byte [rsp + 0xea], dl
lea r15, [rsp + 0xe0]
mov qword [rsp + 0x270], r15
mov qword [rsp + 0x278], 0xb
lea rax, [rsp + 0x270]
mov qword [rsp + 0x70], rax
lea rax, [0x14013def0]
mov qword [rsp + 0x78], rax
lea rax, [0x14024a380]
mov qword [rsp + 0x558], rax
mov qword [rsp + 0x560], 2
mov qword [rsp + 0x578], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], 1
lea rdi, [rsp + 0x558]
mov rcx, rdi
call fcn.140170ff0
lea rax, [0x141569eae]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x9eae20f9
mov edx, dword [rsp + 0x558]
call fcn.14003f150
mov r12, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x1415acbd0]
mov edx, 0x1d
xor ecx, ecx
call fcn.1401ac910
test rax, rax
je 0x140066850
mov r13, rax
mov eax, ebx
not al
or al, 0x21
or bl, 0xde
and bl, al
xor esi, 0xb167d6c1
movabs rax, 0x7a91e93ad7395860
mov rcx, rdi
and rcx, rax
add rcx, rcx
add rdi, rax
sub rdi, rcx
movabs rax, 0xf83961a8bd5cb8be
movabs rcx, 0xba028a694ca83fd3
xor rcx, rax
xor r14, rcx
movabs rax, 0x5ae747c2da2cd7ea
xor r12, rax
mov qword [r13], r12
mov qword [r13 + 8], r14
mov qword [r13 + 0x10], rdi
mov dword [r13 + 0x18], esi
mov eax, dword [0x14158be48]
mov ecx, dword [0x14158be4c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rax, rax, 0x7c8780ad
shr rax, 0x3e
add eax, 0xf260e9fd
cmp eax, 0x34ab89c3
jae 0x140068115
mov byte [r13 + 0x1c], bl
lea rcx, [rsp + 0x558]
mov r8d, 0x1d
mov rdx, r13
call fcn.14020bde0
lea rdi, [rsp + 0x558]
nop dword [rax]
mov eax, dword [0x14158be50]
and eax, dword [0x14158be54]
mov ecx, eax
not ecx
or ecx, 0x14
and ecx, 0x9034
and eax, 0x86000041
lea esi, [rcx + rax]
add esi, 0x695f2b8a
mov byte [r13 + 0x1c], bl
mov r8d, 0x1d
mov rcx, rdi
mov rdx, r13
call fcn.140168090
cmp esi, 0xfe4ef81b
ja 0x140068120
mov rcx, qword [rsp + 0x558]
mov rax, qword [rsp + 0x560]
nop word cs:[rax + rax]
mov edx, dword [0x14158be58]
mov r8d, dword [0x14158be5c]
mov r9d, edx
and r9d, r8d
add r9d, r9d
add edx, r8d
sub edx, r9d
add edx, 0x4d5598e8
mov r8d, edx
xor r8d, 0x20014848
and r8d, edx
and r8d, 0x748d4a4c
cmp r8d, 0x41b58fa
jb 0x140068180
cmp ecx, 2
jne 0x14006868f
nop dword [rax + rax]
mov ecx, dword [0x14158be78]
sub ecx, dword [0x14158be7c]
mov edx, ecx
not edx
and edx, 0x1f9a720b
mov r8d, ecx
and r8d, 0xe0658df4
imul r8d, edx
mov edx, ecx
and edx, 0x1f9a720b
or ecx, 0x1f9a720b
imul ecx, edx
add ecx, r8d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x111a0fd2
and edx, 0xee5f02d
imul edx, r8d
mov r8d, ecx
and r8d, 0xee5f02d
or ecx, 0xee5f02d
imul ecx, r8d
add ecx, edx
or ecx, 0xeef6f8f2
cmp ecx, 0xe6279be9
jb 0x1400681d0
mov rdx, rax
xor rdx, 0xfffffffffffffffc
mov rcx, rax
or rcx, 3
and rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x14158be80]
mov r8d, dword [0x14158be84]
mov r9d, edx
xor r9d, r8d
not r9d
and r9d, r8d
add r9d, r9d
sub r8d, r9d
add r8d, edx
and r8d, 0x3a1e5f99
imul edx, r8d, 0x7b037678
add edx, 0x9bb7c29d
cmp edx, 0xa8e15b4e
jb 0x140068260
cmp rcx, 2
mov qword [rsp + 0x540], r13
jg 0x14006850a
cmp rcx, 1
lea r13, [rsp + 0x70]
jne 0x140068a27
lea rbx, [rax - 1]
nop word cs:[rax + rax]
mov ecx, dword [0x14158be98]
mov edx, dword [0x14158be9c]
mov r8d, ecx
not r8d
and r8d, edx
not r8d
not edx
and edx, ecx
not edx
and edx, r8d
not edx
imul ecx, edx, 0x45db8a3
and ecx, 0x993d45be
cmp ecx, 0x644af0b2
je 0x1400682d0
mov r14, qword [rax - 1]
mov rsi, qword [rax + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14006834d
mov rcx, r14
call rax
nop dword [rax]
mov eax, dword [0x14158bea0]
and eax, dword [0x14158bea4]
mov ecx, eax
and ecx, 0x7a98328f
and eax, 0x2898200b
mov edx, ecx
xor edx, 0xd30512d4
add edx, ecx
sub edx, eax
cmp edx, 0xdf979cd0
je 0x140068320
mov eax, dword [0x14158bea8]
xor edx, edx
div dword [0x14158beac]
mov ecx, 0xaf2e260d
mov eax, dword [0x14158beb0]
xor edx, edx
div dword [0x14158beb4]
imul rax, rcx
shr rax, 0x3f
add eax, 0x77218c5b
cmp eax, 0x53d6c3e4
jb 0x140068360
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
nop word [rax + rax]
mov edx, dword [0x14158beb8]
mov r8d, dword [0x14158bebc]
mov r9d, edx
not r9d
and r9d, r8d
mov r10d, r8d
not r10d
and r10d, edx
imul r10d, r9d
mov r9d, edx
and r9d, r8d
or edx, r8d
imul edx, r9d
add edx, r10d
imul edx, edx, 0x1e2e763e
add edx, 0x8eb3f3f6
xor edx, 0xfeacc677
cmp edx, 0xc2a369fd
ja 0x140068390
test rax, rax
je 0x140068921
mov eax, dword [0x14158bec0]
xor edx, edx
div dword [0x14158bec4]
nop word cs:[rax + rax]
mov eax, dword [0x14158bec8]
or eax, dword [0x14158becc]
or eax, 0xbb7d1d56
imul eax, eax, 0x78b13b90
add eax, 0x2cf17ac0
cmp eax, 0x666c4ed3
ja 0x140068400
nop word cs:[rax + rax]
mov eax, dword [0x14158bed0]
sub eax, dword [0x14158bed4]
xor eax, 0x184106
or eax, 0x39e4aed9
add eax, 0x8658cf44
cmp eax, 0x10b3ca05
jb 0x140068430
cmp rcx, 0x11
jb 0x1400684b2
mov r14, qword [r14 - 8]
nop dword [rax]
mov eax, dword [0x14158bed8]
or eax, dword [0x14158bedc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x76d5206d
and ecx, 0x892adf92
imul ecx, edx
mov edx, eax
and edx, 0x892adf92
or eax, 0x892adf92
imul eax, edx
lea edx, [rax + rcx]
add edx, 0x70083462
add eax, ecx
not edx
or edx, 0x3299c057
add eax, edx
add eax, 0x70083462
cmp eax, 0xc011aef9
je 0x140068460
mov eax, dword [0x14158bee0]
mov ecx, dword [0x14158bee4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
xor ecx, 0x4afd7f49
and ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x6b47616b
and eax, 0x94b89e94
imul eax, edx
mov edx, ecx
and edx, 0x94b89e94
or ecx, 0x94b89e94
imul ecx, edx
add ecx, eax
cmp ecx, 0x493a7536
jne 0x1400688a7
jmp 0x14006890d
lea r13, [rsp + 0x70]
nop
mov eax, dword [0x14158be88]
xor eax, dword [0x14158be8c]
mov ecx, eax
xor ecx, 0x498a323e
xor eax, 0x94310c01
or ecx, 0xd4331c29
or eax, 0x2bcce3d6
and eax, ecx
not eax
add eax, 0x44c9fa96
cmp eax, 0xf41715fc
ja 0x140068510
nop word cs:[rax + rax]
mov eax, dword [0x14158be90]
mov ecx, dword [0x14158be94]
not eax
not ecx
and ecx, eax
not ecx
imul rax, rcx, 0x54bd8a91
shr rax, 0x3c
add eax, 0x41afe0a6
mov ecx, eax
not ecx
and ecx, 0xaa001e49
mov edx, eax
and edx, 0x410d4086
imul edx, ecx
mov ecx, eax
and ecx, 0xa2a029
or eax, 0xaaa2be69
imul eax, ecx
add eax, edx
cmp eax, 0x309ab359
jbe 0x140068550
jmp 0x140068a27
mov eax, dword [0x14158be60]
mov ecx, dword [0x14158be64]
xor ecx, eax
not ecx
and ecx, eax
not ecx
and ecx, 0x5abd397
mov eax, ecx
or eax, 0xad822edf
sub eax, ecx
mov ecx, eax
and ecx, 0x82896d0f
or eax, 0xd2896d0f
add eax, ecx
cmp eax, 0xf9c12da4
lea rsi, [rsp + 0x558]
jbe 0x140068751
jmp 0x14006878b
mov eax, dword [0x14158be28]
and eax, dword [0x14158be2c]
mov ecx, eax
not ecx
and ecx, 0xcfae67ee
mov edx, eax
and edx, 0x30519811
imul edx, ecx
mov ecx, eax
and ecx, 0xcfae67ee
or eax, 0xcfae67ee
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x321f1d84
or eax, 0xcde0e27b
and eax, ecx
add eax, 0xf1af06b1
cmp eax, 0xc8d8eb95
jbe 0x140068650
ud2
mov eax, dword [0x14158be30]
sub eax, dword [0x14158be34]
mov ecx, eax
and ecx, 0x995b2937
or eax, 0x995b2937
lea edx, [rcx + rax]
add eax, ecx
add eax, 0x3e3b9bcb
not eax
or eax, 0xe32d1e6e
add eax, edx
add eax, 0x3e3b9bcc
ud2
mov eax, dword [0x14158be68]
mov ecx, dword [0x14158be6c]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x842e0009
and eax, 0x7ac0ba92
or eax, r9d
or edx, r8d
and r8d, 0x842e0009
and ecx, 0x7ac0ba92
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
and edx, 0xfeeeba9b
add edx, 0x3a2b2f9a
cmp edx, 0xd98ddff8
ja 0x14006874a
mov eax, dword [0x14158be70]
mov ecx, dword [0x14158be74]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0xa25b7937
and eax, 0x5da486c8
or eax, r9d
or edx, r8d
and r8d, 0xa25b7937
and ecx, 0x5da486c8
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
imul esi, edx, 0x8c8b24b8
add esi, 0x152d2808
not esi
or esi, 0xf27378bb
call fcn.14020b640
cmp esi, 0xa289a445
jne 0x140066850
call fcn.1401ac190
jmp 0x1400686e4
lea rax, [0x14156f666]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0xb4425a8a
mov edx, dword [rsp + 0x558]
call fcn.14020b8c0
mov ecx, dword [rax]
movzx eax, word [rax + 4]
xor edx, edx
test dl, dl
je 0x1400687c1
lea rax, [0x14156f666]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0xb4425a8a
mov edx, dword [rsp + 0x558]
call fcn.14020b8c0
mov ecx, dword [rax]
movzx eax, word [rax + 4]
jmp 0x140068751
mov edx, ecx
not edx
or edx, 0xe57bf0c6
or ecx, 0x1a840f39
and ecx, edx
mov edx, eax
xor dl, 0x88
shr eax, 8
mov r8d, eax
and r8b, 0x33
add r8b, r8b
sub al, r8b
add al, 0x33
movzx eax, al
shl rax, 0x28
movzx edx, dl
shl rdx, 0x20
or rdx, rax
mov rax, rdx
xor rax, rcx
not rcx
and rcx, rdx
add rax, rdx
sub rax, rcx
mov dword [rsp + 0xe0], eax
shr rax, 0x20
mov word [rsp + 0xe4], ax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], 6
lea rax, [rsp + 0x270]
mov qword [rsp + 0x70], rax
lea rax, [0x14013def0]
mov qword [rsp + 0x78], rax
lea rax, [0x14024a380]
mov qword [rsp + 0x558], rax
mov qword [rsp + 0x560], 2
mov qword [rsp + 0x578], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], 1
lea rcx, [rsp + 0x558]
call fcn.140170ff0
call fcn.14020b640
mov eax, dword [0x14158bee8]
xor edx, edx
div dword [0x14158beec]
mov ebp, eax
add ebp, 0xe4762f2d
mov eax, ebp
not eax
and eax, 0x46651e27
mov ecx, ebp
and ecx, 0xb99ae1d8
imul ecx, eax
mov eax, ebp
and eax, 0x46651e27
or ebp, 0x46651e27
imul ebp, eax
add ebp, ecx
mov eax, ebp
and eax, 0x7283dba9
add eax, eax
sub ebp, eax
add ebp, 0xf283dba9
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r14
call fcn.14020ae70
cmp ebp, 0x1a96d2ad
jae 0x140068921
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400688a7
mov eax, dword [0x14158bef0]
or eax, dword [0x14158bef4]
add eax, 0x5078fa18
and eax, 0xf0d83391
imul rax, rax, 0x15db8ab1
shr rax, 0x3c
cmp eax, 0x76d131e1
ja 0x14006898c
mov eax, dword [0x14158bef8]
mov ecx, dword [0x14158befc]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
or ecx, 0xeaf66b56
or eax, 0xf7fbdffb
and eax, ecx
mov ecx, eax
and ecx, 0x1d0db4ad
and eax, 0x1505b0a4
add eax, eax
sub ecx, eax
mov r14, qword [0x1415acb98]
cmp ecx, 0xaf92ee22
jne 0x140068995
mov rax, qword [0x1415acb98]
jmp 0x140068949
mov eax, dword [0x14158bf00]
mov ecx, dword [0x14158bf04]
add eax, ecx
add eax, 0x28e0c1f1
or eax, 0xd847f672
cmp eax, 0xf184ab67
jbe 0x1400689d0
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x14158bf08]
xor edx, edx
div dword [0x14158bf0c]
mov ecx, eax
not ecx
and ecx, 0x8b8cace1
mov edx, eax
and edx, 0x7473531e
imul edx, ecx
mov ecx, eax
and ecx, 0x8b8cace1
or eax, 0x8b8cace1
imul eax, ecx
lea esi, [rax + rdx]
add esi, 0x766e9425
or esi, 0x611a1aa3
mov rcx, r14
xor edx, edx
mov r8, rbx
call fcn.14020ae70
cmp esi, 0xc9511927
jb 0x1400689d0
lea rax, [0x14157250b]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x610cb3e5
mov edx, dword [rsp + 0x558]
call fcn.140038c90
movabs rcx, 0xa4024d9c01175b25
xor rcx, qword [rax]
movabs rdx, 0xbe3c745b5b86d3c4
xor rdx, qword [rax + 8]
movzx esi, byte [rax + 0x10]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
mov eax, dword [0x14158bf10]
mov ecx, dword [0x14158bf14]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0xa04000
and eax, 0x1040831
or eax, r9d
or edx, r8d
and r8d, 0xa04000
and ecx, 0x1040831
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
and edx, 0x1a44831
xor edx, 0x1a44010
cmp edx, 0xa2bc5b6c
je 0x140068b72
mov eax, dword [0x14158bf18]
sub eax, dword [0x14158bf1c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xcad9414c
and ecx, 0x3526beb3
imul ecx, edx
mov edx, eax
and edx, 0x3526beb3
or eax, 0x3526beb3
imul eax, edx
lea edi, [rax + rcx]
add edi, 0x98183c65
or edi, 0xccf347b
mov byte [rsp + 0xf0], sil
lea rax, [rsp + 0xf1]
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], rax
mov word [rsp + 0x568], 0
mov dword [rsp + 0x570], 1
lea rcx, [rsp + 0x270]
lea rbx, [rsp + 0x558]
mov rdx, rbx
call fcn.140051660
cmp edi, 0x1d47ff75
jae 0x140068bc1
mov byte [rsp + 0xf0], sil
lea rax, [rsp + 0xf1]
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], rax
mov word [rsp + 0x568], 0
mov dword [rsp + 0x570], 1
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x558]
call fcn.140051660
jmp 0x140068add
mov eax, dword [0x14158bf20]
sub eax, dword [0x14158bf24]
add eax, 0x8b43528b
mov ecx, eax
and ecx, 0x4d23948e
add ecx, ecx
sub eax, ecx
add eax, 0x4d23948e
mov ecx, eax
and ecx, 0x259e7a87
add ecx, ecx
sub eax, ecx
add eax, 0x259e7a87
cmp eax, 0x47cce2d0
jae 0x140068c50
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x558], 0
mov rdx, qword [rsp + 0x278]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
xor r8d, r8d
xor r9d, r9d
call fcn.14020b910
nop dword [rax]
mov eax, dword [0x14158bf28]
mov esi, dword [0x14158bf2c]
mov ecx, esi
not ecx
and ecx, eax
xor esi, eax
add esi, eax
sub esi, ecx
or esi, 0x23479ca1
add esi, 0x5c3f7ffc
not esi
mov eax, esi
or eax, 0xf795047f
or esi, 0xf7d5847f
and esi, eax
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x558], 0
mov r14, qword [rsp + 0x278]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.14020b910
cmp esi, 0x103e369c
je 0x140068c50
mov edi, eax
test eax, eax
je 0x140068d90
movsxd rsi, edi
mov eax, 0x8362f039
shl rsi, 0x20
or rsi, 2
nop
mov ecx, dword [0x14158bf38]
mov edx, dword [0x14158bf3c]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
mov edx, ecx
xor edx, 0x6e178240
and ecx, 0x11e87dbf
add ecx, ecx
sub ecx, edx
add ecx, 0x5a4a4965
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x2cffcc19
ja 0x140068d00
nop dword [rax]
mov eax, dword [0x14158bf40]
xor eax, dword [0x14158bf44]
add eax, 0xd1c399
xor eax, 0x2feadccf
imul rax, rax, 0x6c6a756f
shr rax, 0x3e
cmp eax, 0xee3e56d
ja 0x140068d60
jmp 0x140068dda
mov eax, dword [0x14158bf30]
and eax, dword [0x14158bf34]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xe5f599d6
and ecx, 0x1a0a6629
imul ecx, edx
mov edx, eax
and edx, 0x1a0a6629
or eax, 0x1a0a6629
imul eax, edx
add eax, ecx
imul eax, eax, 0xd4afdde6
add eax, 0x8a765f74
cmp eax, 0xba6c9936
ja 0x140068d90
mov rsi, qword [rsp + 0x70]
mov eax, dword [0x14158bf48]
xor edx, edx
div dword [0x14158bf4c]
mov ecx, eax
xor ecx, 0xc534c173
and eax, 0x3acb3e8c
add eax, eax
sub eax, ecx
xor eax, 0xf246ea52
imul rax, rax, 0x451a99e5
shr rax, 0x3d
cmp eax, 0x4be8e3a3
nop
mov eax, dword [0x14158bf50]
imul eax, dword [0x14158bf54]
mov ecx, eax
not ecx
or ecx, 0x6d003560
and ecx, 0x6d0035e2
and eax, 0x803f8009
or eax, ecx
cmp eax, 0x3f2c6766
je 0x140068e10
cmp qword [rsp + 0x270], 0
je 0x140068e58
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0xa7d25575
nop dword [rax]
mov eax, dword [0x14158bf58]
xor edx, edx
div dword [0x14158bf5c]
imul rax, rcx
shr rax, 0x3e
or eax, 0xaa4f2720
xor eax, 0xa1c838af
cmp eax, 0x6fb358e
jb 0x140068e60
test edi, edi
je 0x140068ebf
mov eax, dword [0x14158bf60]
add eax, dword [0x14158bf64]
mov ecx, 0xf34a3b03
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0xc1a5c85b
or eax, 0x1ba2f08e
cmp eax, 0x78186c1f
jae 0x140069470
jmp 0x1400694d1
mov qword [rsp + 0x48], rsi
lea rax, [0x14156d183]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x135418b5
mov edx, dword [rsp + 0x558]
call fcn.140043da0
mov ecx, dword [rax]
mov edx, ecx
and edx, 0x234872d7
add edx, edx
neg edx
add ecx, edx
add ecx, 0x234872d7
movzx eax, byte [rax + 4]
xor al, 0x9e
mov byte [rsp + 0x74], al
mov dword [rsp + 0x70], ecx
lea rax, [rsp + 0x75]
mov qword [rsp + 0x558], r13
mov qword [rsp + 0x560], rax
mov word [rsp + 0x568], 0
mov dword [rsp + 0x570], 1
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x558]
call fcn.140051660
mov dword [rsp + 0x58], 0x800
mov dword [rsp + 0xe0], 0
movzx eax, byte [0x1415acbd0]
mov edx, 0x800
xor ecx, ecx
call fcn.1401ac910
test rax, rax
je 0x140068fbb
mov rbp, rax
mov eax, dword [0x14158bfa0]
mov ecx, dword [0x14158bfa4]
mov edx, eax
not edx
or edx, ecx
not ecx
or ecx, eax
not ecx
not edx
or edx, ecx
or edx, 0xaabbdfbf
mov eax, 0xba1e5a29
imul rax, rdx
shr rax, 0x3f
cmp eax, 0x5412947e
jne 0x140068ff4
jmp 0x140069032
mov eax, dword [0x14158bfb8]
mov ecx, dword [0x14158bfbc]
not eax
not ecx
or ecx, eax
not ecx
imul rax, rcx, 0x34300935
shr rax, 0x3a
add eax, 0xc8b4a68c
and eax, 0x48611
cmp eax, 0x38123303
jbe 0x140069959
jmp 0x1400699b9
mov eax, dword [0x14158bfa8]
mov ecx, dword [0x14158bfac]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
or ecx, 0xa5239418
and ecx, 0xa5739f5d
add ecx, 0xda96ea88
mov qword [rsp + 0x558], 0x800
cmp ecx, 0x7bf420b7
jae 0x140069040
mov qword [rsp + 0x558], 0x800
jmp 0x140068ff4
mov eax, dword [0x14158bfb0]
xor eax, dword [0x14158bfb4]
mov ecx, eax
and ecx, 0x7142fd6d
add ecx, ecx
sub eax, ecx
cmp eax, 0xc9dc3595
je 0x140069040
mov qword [rsp + 0x560], rbp
mov qword [rsp + 0x568], 0
mov r15d, 0x800
mov r13, qword [rsp + 0x278]
xor ebx, ebx
lea r14, [rsp + 0x58]
lea rdi, [rsp + 0xe0]
mov rsi, qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov qword [rsp + 0x50], r15
sub r15, rbx
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbp
mov rcx, qword [rsp + 0x48]
mov rdx, r13
xor r8d, r8d
mov r9, rdi
call rsi
mov r12d, eax
cmp eax, 0xea
jl 0x140069237
jne 0x140069240
nop
mov eax, dword [0x14158bfd0]
mov ecx, dword [0x14158bfd4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x2d719813
and eax, 0x128e67ec
imul eax, edx
mov edx, ecx
and edx, 0x128e67ec
or ecx, 0x128e67ec
imul ecx, edx
add ecx, eax
imul eax, ecx, 0xf13f800b
not eax
or eax, 0xc40bd1ad
cmp eax, 0x4b2d8bee
jb 0x1400690d0
mov r12d, dword [rsp + 0x58]
nop dword [rax + rax]
mov eax, dword [0x14158bfd8]
mov ecx, dword [0x14158bfdc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0x6beca6fa
or eax, 0xf94ba54d
cmp eax, 0x26c6c66f
je 0x140069130
cmp r15, r12
jae 0x1400690a0
mov eax, dword [0x14158c020]
mov ecx, dword [0x14158c024]
add eax, ecx
add eax, 0x70f5c8fc
imul rcx, rax, 0x20e892b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0x4b7125eb
lea r15, [rsp + 0x558]
jbe 0x1400691c0
mov rcx, r15
mov rdx, rbx
mov r8, r12
call fcn.14020b9c0
nop dword [rax]
mov eax, dword [0x14158c028]
mov ecx, dword [0x14158c02c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul rdi, rax, 0x40a63fa5
shr rdi, 0x3e
add edi, 0x620cb8dd
mov rcx, r15
mov rdx, rbx
mov r8, r12
call fcn.14020b9c0
cmp edi, 0x19122e5b
jb 0x1400691c0
mov r15, qword [rsp + 0x558]
mov rbp, qword [rsp + 0x560]
mov rbx, qword [rsp + 0x568]
lea rdi, [rsp + 0xe0]
jmp 0x140069097
test r12d, r12d
je 0x1400693b5
shl r12, 0x20
or r12, 2
mov r8, qword [rsp + 0x50]
nop dword [rax]
mov eax, dword [0x14158c030]
xor eax, dword [0x14158c034]
mov ecx, eax
xor ecx, 0xf2ccfe8a
and eax, 0xd330175
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2507a11a
and ecx, 0x1af85ee5
imul ecx, edx
mov edx, eax
and edx, 0x1af85ee5
or eax, 0x1af85ee5
imul eax, edx
add eax, ecx
or eax, 0xc45207bc
cmp eax, 0xd6624b47
jb 0x140069250
test r8, r8
je 0x140069344
mov eax, dword [0x14158c038]
xor edx, edx
div dword [0x14158c03c]
add eax, 0x959b080
mov ecx, eax
xor ecx, 0x7dd63582
xor eax, 0xe3704b25
add eax, ecx
and ecx, 0x61598158
sub eax, ecx
cmp eax, 0xf8ef3eda
jae 0x1400692f0
mov rax, qword [0x1415acb98]
nop word cs:[rax + rax]
mov eax, dword [0x14158c040]
sub eax, dword [0x14158c044]
mov ecx, eax
xor ecx, 0xf38d8802
add ecx, eax
and eax, 0xc7277fd
sub ecx, eax
shr ecx, 2
imul rax, rcx, 0x24acde95
shr rax, 0x3a
or eax, 0x963cc270
mov rcx, qword [0x1415acb98]
cmp eax, 0x8996319e
jb 0x1400692f0
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov al, 1
nop dword [rax + rax]
test al, al
je 0x140069340
xor r10d, r10d
movabs rdi, 0x8000000000000000
mov eax, dword [0x14158bff0]
xor edx, edx
div dword [0x14158bff4]
nop
mov eax, dword [0x14158bff8]
and eax, dword [0x14158bffc]
mov ecx, eax
xor ecx, 0x4ddfc675
xor eax, 0x4c55c470
and eax, 0x5e75d478
add eax, eax
sub ecx, eax
imul eax, ecx, 0x75fdbece
add eax, 0x491a0890
cmp eax, 0x8f49389f
jb 0x140069360
cmp qword [rsp + 0x270], 0
je 0x140069b00
mov ebp, r10d
xor eax, eax
test al, al
je 0x1400699f5
jmp 0x140069a27
mov r15d, dword [rsp + 0x58]
mov qword [rsp + 0x568], r15
mov r10d, dword [rsp + 0xe0]
cmp r10d, 0xb
jbe 0x1400693df
movabs r12, 0xde00000002
jmp 0x140069248
mov ecx, 0xdc879433
mov rdi, qword [rsp + 0x50]
nop dword [rax]
mov eax, dword [0x14158bfe0]
xor edx, edx
div dword [0x14158bfe4]
mov edx, eax
and edx, 0x1e1b3513
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x1e033403
and r8d, 0x60f88970
imul r8d, r9d
and eax, 0x180110
or edx, 0x60f88970
imul edx, eax
add edx, r8d
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0x6f8997de
ja 0x1400693f0
nop word cs:[rax + rax]
mov eax, dword [0x14158bfe8]
and eax, dword [0x14158bfec]
add eax, 0x5f53cfe2
cmp eax, 0xbe927b21
ja 0x140069450
mov r12, rbp
jmp 0x140069351
mov eax, dword [0x14158bf68]
mov ecx, dword [0x14158bf6c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and ecx, 0x92c5412b
mov edx, eax
and edx, 0x6d3abed4
imul edx, ecx
mov ecx, eax
and ecx, 0x92c5412b
or eax, 0x92c5412b
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x93248831
add ecx, eax
and eax, 0x6cdb77ce
sub ecx, eax
lea rax, [0x14156a1dd]
mov qword [rsp + 0x558], rax
cmp ecx, 0xf3452f6e
jne 0x1400694e2
lea rax, [0x14156a1dd]
mov qword [rsp + 0x558], rax
jmp 0x140069470
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0xf02ea238
mov edx, dword [rsp + 0x558]
call fcn.14020b960
mov rcx, qword [rax]
movabs rdx, 0xc95c84279ccc1398
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
movabs r8, 0x4e0bda3ecb76cc8d
mov r9, rcx
and r9, r8
add r9, r9
sub r8, r9
add r8, rcx
mov ecx, eax
not cl
or cl, 0x54
or al, 0xab
and al, cl
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x80], al
lea rax, [rsp + 0x81]
mov qword [rsp + 0x558], r13
mov qword [rsp + 0x560], rax
mov word [rsp + 0x568], 0
mov dword [rsp + 0x570], 1
lea rcx, [rsp + 0x270]
lea rdi, [rsp + 0x558]
mov rdx, rdi
call fcn.140051660
mov qword [rsp + 0x558], 0
mov r14, qword [rsp + 0x278]
mov qword [rsp + 0x20], rdi
mov rcx, 0xffffffff80000002
mov rdx, r14
xor r8d, r8d
mov r9d, 2
call fcn.14020b990
mov ebp, eax
mov rax, qword [rsp + 0x558]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x270], 0
je 0x1400696f0
mov eax, dword [0x14158bf70]
or eax, dword [0x14158bf74]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4c8a1622
and ecx, 0xb375e9dd
imul ecx, edx
mov edx, eax
and edx, 0xb375e9dd
or eax, 0xb375e9dd
imul eax, edx
add eax, ecx
imul eax, eax, 0x35b788ee
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc6d98260
and ecx, 0x39267d9e
imul ecx, edx
mov edx, eax
and edx, 0x39267d9e
or eax, 0x39267d9e
imul eax, edx
add eax, ecx
cmp eax, 0x9224e031
jbe 0x140069650
mov rax, qword [0x1415acb98]
nop dword [rax]
mov eax, dword [0x14158bf78]
sub eax, dword [0x14158bf7c]
add eax, 0x5115908b
not eax
and eax, 0xbcb401d6
mov ecx, eax
not ecx
xor eax, 0xfceee22
add eax, ecx
and ecx, 0xfceee22
sub eax, ecx
mov rcx, qword [0x1415acb98]
cmp eax, 0x1c6cfa99
jb 0x140069650
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x14158bf80]
sub eax, dword [0x14158bf84]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1545611
and ecx, 0x6aba9ee
imul ecx, edx
mov edx, eax
and edx, 0x6aba9ee
or eax, 0x6aba9ee
imul eax, edx
add eax, ecx
not eax
or eax, 0x106a98c3
and eax, 0x157fbde3
cmp eax, 0xfdf8cb4c
ja 0x1400696a0
nop word cs:[rax + rax]
mov eax, dword [0x14158bf88]
xor edx, edx
div dword [0x14158bf8c]
mov ecx, eax
and ecx, 0x17e2f8c5
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x97e2f8c5
xor eax, 0x2624420
and eax, 0x42f2ec63
cmp eax, 0xb812be88
ja 0x1400696f0
nop word cs:[rax + rax]
mov eax, dword [0x14158bf90]
mov ecx, dword [0x14158bf94]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0x857b6f26
add eax, 0x764b51da
mov ecx, eax
and ecx, 0x41c240d8
add ecx, ecx
sub eax, ecx
cmp eax, 0xcf8dce6d
je 0x140069730
mov eax, 0xa60a7e5b
nop
mov ecx, dword [0x14158bf98]
mov edx, dword [0x14158bf9c]
add ecx, edx
add ecx, 0xe29846c2
imul rcx, rax
shr rcx, 0x3d
mov edx, ecx
xor edx, 0x4fca9c41
and ecx, 0xfffffffe
add ecx, ecx
sub ecx, edx
cmp ecx, 0x74e45998
jb 0x140069780
test ebp, ebp
jne 0x140069945
nop dword [rax + rax]
mov eax, dword [0x14158c0a4]
add eax, dword [0x14158c0a0]
xor eax, 0xe17a41a1
imul rcx, rax, 0x28cec443
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0xb98c7f1d
je 0x1400697c0
mov eax, esi
and eax, 3
cmp rax, 2
jg 0x1400698f0
cmp eax, 1
jne 0x140068ec4
lea r14, [rsi - 1]
mov r15, qword [rsi - 1]
mov rsi, qword [rsi + 7]
mov r12, qword [rsi]
nop word cs:[rax + rax]
mov eax, dword [0x14158c0b0]
mov ecx, dword [0x14158c0b4]
lea edx, [rax + rcx]
add eax, ecx
add eax, 0x6de8081c
not eax
or eax, 0xfb52444
add eax, edx
add eax, 0x6de8081d
xor eax, 0xffbdf9d9
cmp eax, 0x6425ee60
je 0x140069820
mov eax, dword [0x14158c0b8]
xor edx, edx
div dword [0x14158c0bc]
or eax, 0x9f114466
add eax, 0x77a04193
cmp eax, 0x8765281a
ja 0x140069850
test r12, r12
je 0x14006a744
mov eax, dword [0x14158c0c0]
or eax, dword [0x14158c0c4]
mov ecx, eax
not ecx
and ecx, 0xe7fe5716
mov edx, eax
and edx, 0x1801a8e9
imul edx, ecx
mov ecx, eax
and ecx, 0xe7fe5716
or eax, 0xe7fe5716
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x42a93dd6
and ecx, 0xbd56c229
imul ecx, edx
mov edx, eax
and edx, 0xbd56c228
or eax, 0xbd56c229
imul eax, edx
add eax, ecx
mov ecx, 0xe900669f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x555e88d5
jbe 0x14006a6df
jmp 0x14006a72c
mov eax, dword [0x14158c0a8]
imul eax, dword [0x14158c0ac]
mov ecx, eax
and ecx, 0x66125e7b
mov edx, ecx
not edx
and edx, 0xad1ee83f
mov r8d, eax
and r8d, 0x42001640
imul r8d, edx
and eax, 0x2412483b
or ecx, 0xad1ee83f
imul ecx, eax
add ecx, r8d
imul rax, rcx, 0x241e5e93
shr rax, 0x3d
cmp eax, 0xc78a83b4
je 0x1400698f0
jmp 0x140068ec4
ud2
mov eax, dword [0x14158bfc0]
mov ecx, dword [0x14158bfc4]
not ecx
not eax
mov edx, eax
or edx, ecx
not edx
and eax, ecx
or eax, edx
mov ecx, eax
not ecx
and eax, 0x33d18449
mov edx, ecx
and edx, 0xcc2e7bb6
imul edx, eax
mov eax, ecx
and eax, 0x33d18449
or ecx, 0x33d18449
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0x1489a181
mov ecx, eax
not ecx
and ecx, 0xf8a64f
and eax, 0xff0759b0
sub eax, ecx
ud2
ud2
mov eax, dword [0x14158c000]
mov ecx, dword [0x14158c004]
lea edx, [rcx + rax]
add eax, ecx
add eax, 0x651c10a5
not eax
or eax, 0xbda4ce1d
add eax, edx
add eax, 0x3c157502
mov rbx, qword [0x1415acb98]
cmp eax, 0xb3d0e768
jae 0x140069a30
mov rax, qword [0x1415acb98]
jmp 0x1400699f5
mov eax, dword [0x14158c008]
sub eax, dword [0x14158c00c]
mov ecx, eax
xor ecx, 0x76aca9bd
and ecx, eax
mov eax, ecx
xor eax, 0x21681b
and eax, ecx
and eax, 0x525e91f
cmp eax, 0xdcabdeda
ja 0x140069a90
mov eax, dword [0x14158c010]
xor eax, dword [0x14158c014]
imul rsi, rax, 0x75567cc3
shr rsi, 0x3e
not esi
and esi, 0x28021
mov rcx, rbx
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0x1b10ec9a
jne 0x140069aa0
mov rcx, rbx
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140069a5b
mov r10d, ebp
nop word cs:[rax + rax]
mov eax, dword [0x14158c018]
sub eax, dword [0x14158c01c]
xor eax, 0xf05dcc8
mov ecx, 0x64c7412b
sub ecx, eax
add eax, 0x9b38bed4
and ecx, 0x7748809c
mov edx, eax
and edx, 0x88b77f63
imul edx, ecx
mov ecx, eax
and ecx, 0x7748809c
or eax, 0x7748809c
imul eax, ecx
add eax, edx
cmp eax, 0xdfa868a4
jbe 0x140069ab0
nop word [rax + rax]
mov eax, dword [0x14158c04c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x14158c048]
xor ecx, eax
or ecx, 0xdbfdc1a2
imul eax, ecx, 0xb58a3d3a
cmp eax, 0xc9337f50
je 0x140069b00
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x140069b7c
nop word cs:[rax + rax]
mov eax, dword [0x14158c098]
xor eax, dword [0x14158c09c]
imul eax, eax, 0xc25282e9
not eax
and eax, 0x13c8293a
mov ecx, eax
not ecx
xor eax, 0xc6e5286
and ecx, 0xc6e5286
add ecx, ecx
sub ecx, eax
cmp ecx, 0x8dbc1c60
jb 0x140069b40
mov rbp, r12
jmp 0x140069e3e
movabs rbp, 0xde00000002
cmp r10b, 5
jge 0x140069be6
cmp r10b, 4
jne 0x140069c32
nop word cs:[rax + rax]
mov eax, dword [0x14158c050]
mov ecx, eax
not ecx
or ecx, dword [0x14158c054]
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0xddb16566
and eax, 0x51016542
add eax, eax
sub ecx, eax
add ecx, 0x530d65db
mov eax, ecx
xor eax, 0xa0ecea2b
and ecx, 0x5f1315d4
add ecx, ecx
sub ecx, eax
cmp ecx, 0xd7df684f
ja 0x140069ba0
jmp 0x140069be8
jne 0x140069c37
cmp r15, 4
jne 0x140069c3c
mov eax, dword [0x14158c058]
xor edx, edx
div dword [0x14158c05c]
nop dword [rax]
mov eax, dword [0x14158c060]
or eax, dword [0x14158c064]
add eax, 0xff1aa06a
or eax, 0x35fbad38
mov ecx, eax
and ecx, 0x20c8b57c
xor eax, 0xa0c8b57c
lea eax, [rax + rcx*2]
cmp eax, 0x765de6ad
ja 0x140069c00
mov r13b, 1
jmp 0x140069c50
xor r13d, r13d
jmp 0x140069c50
xor r13d, r13d
jmp 0x140069c50
xor r13d, r13d
movabs rbp, 0xd00000002
nop dword [rax]
mov eax, dword [0x14158c068]
mov ecx, dword [0x14158c06c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0xea8622ba
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8416f7f8
and ecx, 0x7be90807
imul ecx, edx
mov edx, eax
and edx, 0x7be90807
or eax, 0x7be90807
imul eax, edx
add eax, ecx
xor eax, 0x1a86e124
cmp eax, 0x253751b7
jb 0x140069c50
test rdi, rdi
js 0x140069ca8
jne 0x140069cc0
jmp 0x140069e00
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x140069e00
nop dword [rax + rax]
mov ecx, dword [0x14158c070]
mov eax, dword [0x14158c074]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
or eax, 0xd870e09e
add eax, 0x1c5fd372
mov ecx, eax
not ecx
and ecx, 0x3385c51e
mov edx, eax
and edx, 0xcc7a3ae1
imul edx, ecx
mov ecx, eax
and ecx, 0x3385c51e
or eax, 0x3385c51e
imul eax, ecx
add eax, edx
cmp eax, 0x9e6873ab
je 0x140069cc0
mov eax, dword [0x14158c078]
and eax, dword [0x14158c07c]
add eax, 0xdbd55eac
or eax, 0xfc172ae8
mov ecx, eax
not ecx
or ecx, 0x13c62f77
add eax, ecx
inc eax
cmp eax, 0x4ecf45cd
ja 0x140069d81
mov eax, dword [0x14158c080]
mov ecx, dword [0x14158c084]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x400
xor ecx, 0x64200000
or ecx, 0x91102900
and ecx, 0xf53079d0
and eax, 0xc40404
or eax, ecx
mov rbx, qword [0x1415acb98]
cmp eax, 0x22f04847
jae 0x140069d8a
mov rax, qword [0x1415acb98]
jmp 0x140069d3b
mov eax, dword [0x14158c088]
mov ecx, dword [0x14158c08c]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
add eax, 0x6d26d9e8
mov ecx, eax
xor ecx, 0xee85969d
and ecx, eax
imul rax, rcx, 0x33cd3ea1
shr rax, 0x3d
cmp eax, 0xa4e2bad9
jne 0x140069dd0
mov rcx, rbx
xor edx, edx
mov r8, r12
call fcn.14020ae70
xor esi, esi
nop word cs:[rax + rax]
mov rcx, rbx
xor edx, edx
mov r8, r12
call fcn.14020ae70
test sil, sil
jne 0x140069de0
nop word cs:[rax + rax]
mov eax, dword [0x14158c090]
mov ecx, dword [0x14158c094]
xor ecx, eax
not ecx
and ecx, eax
and ecx, 0x79a2ba0b
add ecx, 0xbd0b58a8
mov eax, ecx
xor eax, 0xf76b7d43
or ecx, 0x88482b8
and ecx, eax
cmp ecx, 0x12ea63f5
ja 0x140069e00
test r13b, r13b
jne 0x14006a262
mov rax, rbp
not rax
or rax, 3
add rax, rbp
inc rax
cmp rax, 2
jg 0x14006a240
cmp rax, 1
jne 0x14006a6a8
lea r12, [rbp - 1]
nop word cs:[rax + rax]
mov eax, dword [0x14158c128]
xor edx, edx
div dword [0x14158c12c]
mov ecx, eax
not ecx
or ecx, 0x66473f97
add ecx, eax
imul eax, ecx, 0x156fffd3
add eax, 0x156fffd3
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8fbcfc44
and ecx, 0x704303bb
imul ecx, edx
mov edx, eax
and edx, 0x704303bb
or eax, 0x704303bb
imul eax, edx
add eax, ecx
cmp eax, 0x8db214c8
je 0x140069e70
mov r13, qword [rbp - 1]
nop word [rax + rax]
mov eax, dword [0x14158c130]
sub eax, dword [0x14158c134]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf1af0b62
and ecx, 0xe50f49d
imul ecx, edx
mov edx, eax
and edx, 0xe50f49d
or eax, 0xe50f49d
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0xd9c8138d
mov edx, eax
and edx, 0x2637ec72
imul edx, ecx
mov ecx, eax
and ecx, 0xd9c8138d
or eax, 0xd9c8138d
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x7ad2ffb2
or eax, 0x852d004d
and eax, ecx
cmp eax, 0xc86c1343
je 0x140069ed0
mov rsi, qword [rbp + 7]
mov rbx, qword [rsi]
nop word [rax + rax]
mov eax, dword [0x14158c138]
xor eax, dword [0x14158c13c]
or eax, 0x6a3d88a4
mov ecx, eax
and ecx, 0x67e59de
xor eax, 0x67e59de
lea eax, [rax + rcx*2]
mov ecx, eax
xor ecx, 0x147ee69e
and eax, 0x6b811961
add eax, eax
sub eax, ecx
cmp eax, 0x8175f8dd
jb 0x140069f50
test rbx, rbx
je 0x14006a01b
mov eax, dword [0x14158c140]
mov ecx, dword [0x14158c144]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0xaf9be92b
imul rcx, rax, 0x10a108fb
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
xor eax, 0x1d9fc91d
cmp eax, 0xcb5890b4
jne 0x140069fd0
mov rcx, r13
call rbx
mov eax, dword [0x14158c148]
xor eax, dword [0x14158c14c]
or eax, 0x3542f962
mov edi, eax
and edi, 0x48383f0e
mov ecx, edi
not ecx
mov edx, eax
and edx, 0x30110a
and ecx, 0xc84e86a5
imul ecx, edx
and eax, 0x48082e04
or edi, 0xc84eaea5
imul edi, eax
add edi, ecx
mov rcx, r13
call rbx
cmp edi, 0xfd4f9a5a
ja 0x140069fd0
cmp qword [rsi + 8], 0
je 0x14006a1db
mov rax, qword [rsi + 0x10]
nop word [rax + rax]
mov ecx, dword [0x14158c154]
mov edx, ecx
xor edx, edx
not edx
and edx, dword [0x14158c150]
xor edx, ecx
or edx, 0x60970f93
imul rcx, rdx, 0x616361db
shr rcx, 0x3e
cmp ecx, 0x82038fc9
ja 0x14006a030
cmp rax, 0x11
jb 0x14006a132
mov eax, 0xb6c5f52d
nop dword [rax]
mov ecx, dword [0x14158c158]
mov edx, dword [0x14158c15c]
not edx
add ecx, edx
add ecx, 0xe5aee5a6
xor ecx, 0x87dcfbef
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x2ba67af7
je 0x14006a070
nop dword [rax]
mov eax, dword [0x14158c160]
xor edx, edx
div dword [0x14158c164]
mov ecx, eax
xor ecx, 0x62c40c21
xor eax, 0x72e62ce3
and ecx, 0x66c4dc35
add ecx, ecx
sub ecx, eax
mov eax, ecx
xor eax, 0x9b3c4e12
or ecx, 0x64c3b1ed
and ecx, eax
cmp ecx, 0x93f09060
ja 0x14006a0a0
mov r13, qword [r13 - 8]
mov eax, 0xd27d39df
nop word cs:[rax + rax]
mov ecx, dword [0x14158c168]
mov edx, dword [str.S]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, ecx
mov ecx, edx
and ecx, 0x55c73463
add ecx, ecx
sub edx, ecx
add edx, 0x6af46cc
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x8d887f6f
ja 0x14006a0f0
mov eax, dword [0x14158c170]
sub eax, dword [0x14158c174]
mov ecx, eax
xor ecx, 0x806b0001
add ecx, eax
and eax, 0x7f94fffe
sub ecx, eax
xor ecx, 0xbd3e5dc7
imul rax, rcx, 0x2680c52b
shr rax, 0x3a
cmp eax, 0xa115173c
jne 0x14006a178
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r13
call fcn.14020ae70
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x14158c178]
mov ecx, eax
not ecx
or ecx, dword [0x14158c17c]
lea edi, [rax + rcx]
add edi, 0x69f608be
mov eax, edi
not eax
and eax, 0xc026e67b
mov ecx, edi
and ecx, 0x3fd91984
imul ecx, eax
mov eax, edi
and eax, 0xc026e67b
or edi, 0xc026e67b
imul edi, eax
add edi, ecx
xor edi, 0xbfc29b65
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r13
call rsi
cmp edi, 0x12237b64
je 0x14006a180
mov eax, dword [0x14158c180]
xor edx, edx
div dword [0x14158c184]
mov ecx, eax
and ecx, 0x4a3cc92f
xor eax, 0x4a3cc92f
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
and ecx, 0x13b2201e
mov edx, eax
and edx, 0xec4ddfe1
imul edx, ecx
mov ecx, eax
and ecx, 0x13b2201e
or eax, 0x13b2201e
imul eax, ecx
add eax, edx
add eax, 0xde08e08a
cmp eax, 0x78c41a92
jbe 0x14006a5a3
jmp 0x14006a5fb
mov eax, dword [0x14158c120]
add eax, dword [0x14158c124]
xor eax, 0x248
and eax, 0x80428678
cmp eax, 0x4211709e
jae 0x14006a240
jmp 0x14006a6a8
movabs rbx, 0x54584ffd3d0f0a7d
movabs r15, 0x39900dc905f23100
mov eax, dword [0x14158c100]
and eax, dword [0x14158c104]
mov ecx, eax
xor ecx, 0x4100000
xor eax, 0x600002
or ecx, 0xb008a70
and ecx, 0xef188a70
and eax, 0xe2300a
or eax, ecx
cmp eax, 0x22f2bfdf
jb 0x14006a312
mov eax, dword [0x14158c108]
xor eax, dword [0x14158c10c]
add eax, 0x620e563f
mov ecx, eax
and ecx, 0x743a4767
add ecx, ecx
sub eax, ecx
add eax, 0xf43a4767
mov ecx, eax
and ecx, 0x1ba7a3df
xor eax, 0x1ba7a3df
lea ebp, [rax + rcx*2]
lea rax, [0x141573678]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x58]
mov dword [rsp + 0x58], 0x78153b97
mov edx, dword [rsp + 0x58]
call fcn.14020b9e0
mov rsi, qword [rax]
xor rsi, r15
mov rdi, qword [rax + 8]
xor rdi, rbx
cmp ebp, 0xcd8785bb
jne 0x14006a340
lea rax, [0x141573678]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x58]
mov dword [rsp + 0x58], 0x78153b97
mov edx, dword [rsp + 0x58]
call fcn.14020b9e0
mov rcx, qword [rax]
mov rax, qword [rax + 8]
jmp 0x14006a2a9
mov rcx, qword [rax + 0x10]
movabs rbx, 0xad87efefe95fe4ee
not rbx
mov rdx, rcx
or rdx, rbx
and rbx, rcx
not rbx
and rbx, rdx
not rbx
mov rcx, qword [rax + 0x18]
movabs r14, 0x151725545f3edd92
mov rdx, rcx
and rdx, r14
add rdx, rdx
sub r14, rdx
add r14, rcx
mov ecx, dword [rax + 0x20]
mov edx, ecx
and edx, 0x46066cca
add edx, edx
neg edx
lea ebp, [rcx + rdx]
add ebp, 0xc6066cca
movzx r15d, word [rax + 0x24]
mov r12d, r15d
xor r12b, 0xa5
shr r15d, 8
mov eax, dword [0x14158c110]
mov ecx, dword [0x14158c114]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
xor eax, 0xdeb2cd97
add eax, 0x6808c7fd
and eax, 0xdb23c015
cmp eax, 0x1049d51e
jb 0x14006a4d2
mov r13d, dword [0x14158c118]
xor r13d, dword [0x14158c11c]
or r13d, 0xe4078b79
xor r13d, 0xb04b4b3b
add r13d, 0x8d6e65a
mov eax, r15d
and al, 9
add al, al
mov ecx, r15d
sub cl, al
add cl, 9
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], rdi
mov qword [rsp + 0x280], rbx
mov qword [rsp + 0x288], r14
mov dword [rsp + 0x290], ebp
mov byte [rsp + 0x294], r12b
mov byte [rsp + 0x295], cl
lea rax, [rsp + 0x270]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x26
lea rax, [rsp + 0x70]
mov qword [rsp + 0xe0], rax
lea rax, [0x14013def0]
mov qword [rsp + 0xe8], rax
lea rax, [0x14024a380]
mov qword [rsp + 0x558], rax
mov qword [rsp + 0x560], 2
mov qword [rsp + 0x578], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], 1
lea rcx, [rsp + 0x558]
call fcn.140170ff0
call fcn.14020b640
cmp r13d, 0xcc9db283
jbe 0x140066850
mov eax, r15d
and al, 9
add al, al
mov ecx, r15d
sub cl, al
add cl, 9
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], rdi
mov qword [rsp + 0x280], rbx
mov qword [rsp + 0x288], r14
mov dword [rsp + 0x290], ebp
mov byte [rsp + 0x294], r12b
mov byte [rsp + 0x295], cl
lea rax, [rsp + 0x270]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x26
lea rax, [rsp + 0x70]
mov qword [rsp + 0xe0], rax
lea rax, [0x14013def0]
mov qword [rsp + 0xe8], rax
lea rax, [0x14024a380]
mov qword [rsp + 0x558], rax
mov qword [rsp + 0x560], 2
mov qword [rsp + 0x578], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], 1
lea rcx, [rsp + 0x558]
call fcn.140170ff0
call fcn.14020b640
jmp 0x14006a3d6
mov eax, dword [0x14158c188]
mov ecx, dword [0x14158c18c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
or eax, 0x102a001c
or ecx, 0xc4943083
and ecx, eax
not ecx
or ecx, 0x2b41cf60
imul eax, ecx, 0x7d2ae247
mov rbx, qword [0x1415acb98]
cmp eax, 0x1f5b87c0
jne 0x14006a604
mov rax, qword [0x1415acb98]
jmp 0x14006a5a3
mov eax, dword [0x14158c190]
xor edx, edx
div dword [0x14158c194]
xor eax, 0x220e8089
mov ecx, eax
and ecx, 0xa29ea18b
mov edx, ecx
not edx
and edx, 0xa08af3dc
mov r8d, eax
and r8d, 0x2140003
imul r8d, edx
and eax, 0xa08aa188
or ecx, 0xa08af3dc
imul ecx, eax
add ecx, r8d
cmp ecx, 0x90b4368c
jne 0x14006a65e
mov rcx, rbx
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x14158c198]
mov edi, dword [0x14158c19c]
mov ecx, eax
xor ecx, edi
not ecx
and ecx, edi
add ecx, ecx
sub edi, ecx
add edi, eax
xor edi, 0x482240
or edi, 0xff93dd9c
mov rcx, rbx
xor edx, edx
mov r8, r12
call rsi
cmp edi, 0xb0d6eb8d
jb 0x14006a670
mov eax, dword [0x14158c1a0]
mov ecx, dword [0x14158c1a4]
add eax, ecx
add eax, 0xaa93c7a5
mov ecx, 0xaa3dd24d
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x38b5c31f
cmp ecx, 0xa75c309b
jbe 0x14006a8dc
jmp 0x14006a91a
mov eax, dword [0x14158c0c8]
mov ecx, dword [0x14158c0cc]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
xor ecx, 0x13456ce9
and eax, 0x6cba9316
add eax, eax
sub eax, ecx
shr eax, 3
imul rdi, rax, 0x28e2197
shr rdi, 0x36
not edi
and edi, 0x2334f0a1
neg edi
mov rcx, r15
call r12
cmp edi, 0x9bea104d
jae 0x14006a734
mov rcx, r15
call r12
jmp 0x14006a6df
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14006a740
mov rcx, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
nop dword [rax]
mov edx, dword [0x14158c0d0]
sub edx, dword [0x14158c0d4]
or edx, 0x2decbe56
and edx, 0xadfffefe
cmp edx, 0xac921652
jb 0x14006a750
test rcx, rcx
je 0x14006a88a
nop dword [rax]
mov ecx, dword [0x14158c0d8]
sub ecx, dword [0x14158c0dc]
mov edx, ecx
xor edx, 0xa711c80
or edx, 0xe580815f
xor ecx, 0xe6220
xor edx, 0xebffefec
and ecx, 0xa7f6ea0
add ecx, ecx
sub ecx, edx
cmp ecx, 0x77043aff
je 0x14006a780
nop dword [rax + rax]
mov ecx, dword [0x14158c0e0]
sub ecx, dword [0x14158c0e4]
and ecx, 0x2c9c9fb
imul ecx, ecx, 0xf319f3f1
mov edx, ecx
xor edx, 0x42f42c9d
and edx, ecx
cmp edx, 0xa6d0f893
ja 0x14006a7c0
cmp rax, 0x11
jb 0x14006a878
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14006a800
nop word cs:[rax + rax]
mov eax, dword [0x14158c0e8]
or eax, dword [0x14158c0ec]
add eax, 0xe61ae64d
imul rax, rax, 0x766d3269
shr rax, 0x38
cmp eax, 0x4a08871e
je 0x14006a810
mov r15, qword [r15 - 8]
nop word [rax + rax]
mov eax, dword [0x14158c0f0]
mov ecx, dword [0x14158c0f4]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
xor ecx, 0x882014
or ecx, 0xdf239da3
imul rax, rcx, 0x79c8e3cb
shr rax, 0x3e
cmp eax, 0x6046968c
ja 0x14006a840
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [0x1415acb98]
mov eax, dword [0x14158c0f8]
sub eax, dword [0x14158c0fc]
or eax, 0xffffdaef
imul rax, rax, 0x7317ce3b
shr rax, 0x3c
cmp eax, 0x4062af8e
ja 0x14006a8cd
xor esi, esi
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
je 0x140068ec4
mov rcx, r15
xor edx, edx
mov r8, r14
call fcn.14020ae70
jmp 0x14006a8b4
mov eax, dword [0x14158c1a8]
xor edx, edx
div dword [0x14158c1ac]
imul rax, rax, 0x2708b7d3
shr rax, 0x3b
or eax, 0xa5f54574
lea rcx, [0x1415729d6]
mov qword [rsp + 0x58], rcx
mov r12, qword [rsp + 0x58]
mov dword [rsp + 0x58], 0x453f84da
cmp eax, 0x24e72626
jae 0x14006a930
lea rax, [0x1415729d6]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x58], 0x453f84da
jmp 0x14006a8dc
mov ebp, dword [rsp + 0x58]
movabs rsi, 0xebde080c948703f0
movabs r14, 0xd784c11300751ea3
movabs r13, 0x6562b477bb765ec0
movabs rdi, 0x16897a25712c3103
xor eax, eax
test al, al
je 0x14006aaaf
mov rcx, r12
mov edx, ebp
call fcn.14003d4c0
mov rdx, qword [rax]
mov rcx, rdi
xor rcx, rdi
not rcx
and rcx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
mov r10, r9
xor r10, r13
not r10
and r10, r13
add r10, r10
mov r11, r13
sub r11, r10
add r11, r9
mov r9, rsi
not r9
not rdx
mov r10, rdx
or r10, r9
and rdx, r9
not rdx
and rdx, r10
movzx eax, byte [rax + 0x20]
mov qword [rsp + 0x270], rdx
xor rcx, rdi
mov qword [rsp + 0x278], rcx
xor r8, r14
mov qword [rsp + 0x280], r8
mov qword [rsp + 0x288], r11
mov ecx, eax
not cl
or al, 0x5e
or cl, 0xa1
and cl, al
not cl
mov byte [rsp + 0x290], cl
lea rax, [rsp + 0x270]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x21
lea rax, [rsp + 0x70]
mov qword [rsp + 0xe0], rax
lea rax, [0x14013def0]
mov qword [rsp + 0xe8], rax
lea rax, [0x14024a380]
mov qword [rsp + 0x558], rax
mov qword [rsp + 0x560], 2
mov qword [rsp + 0x578], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], 1
lea rbx, [rsp + 0x558]
mov rcx, rbx
call fcn.14020b600
lea rax, [0x14156cb92]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x4ccaf5c
mov edx, dword [rsp + 0x558]
call fcn.14020be40
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
lea r15, [rsp + 0x558]
mov rbx, rdi
nop word [rax + rax]
mov edi, dword [str.__Sr]
and edi, dword [0x14158c1b4]
and edi, 0xc66a8e5b
add edi, 0x2f0f8d54
mov rcx, r12
mov edx, ebp
call fcn.14020ba00
mov r8, qword [rax]
mov rcx, qword [rax + 8]
mov r9, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov r10, rdx
and r10, r13
add r10, r10
add rdx, r13
sub rdx, r10
mov r10, r9
xor r10, r14
not r10
and r10, r14
add r10, r10
mov r11, r14
sub r11, r10
add r11, r9
mov r9, r8
and r9, rsi
or r8, rsi
not r9
and r9, r8
movzx eax, byte [rax + 0x20]
mov qword [rsp + 0x270], r9
xor rcx, rbx
mov qword [rsp + 0x278], rcx
mov qword [rsp + 0x280], r11
mov qword [rsp + 0x288], rdx
xor al, 0xa1
mov byte [rsp + 0x290], al
lea rax, [rsp + 0x270]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0x21
lea rax, [rsp + 0x70]
mov qword [rsp + 0xe0], rax
lea rax, [0x14013def0]
mov qword [rsp + 0xe8], rax
lea rax, [0x14024a380]
mov qword [rsp + 0x558], rax
mov qword [rsp + 0x560], 2
mov qword [rsp + 0x578], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], 1
mov rcx, r15
call fcn.140170ff0
lea rax, [0x14156cb92]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x4ccaf5c
mov edx, dword [rsp + 0x558]
call fcn.14003a170
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
cmp edi, 0xf7beebee
ja 0x14006aac0
mov edx, ecx
and edx, 0x6570851f
add edx, edx
neg edx
xor al, 0x36
lea edi, [rcx + rdx]
add edi, 0x6570851f
movzx esi, al
mov eax, dword [0x14158c1b8]
sub eax, dword [0x14158c1bc]
mov ecx, eax
xor ecx, 0x5681ecd6
and eax, 0x297e1329
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x6bc8dc88
add ecx, eax
and eax, 0x94372377
sub ecx, eax
imul eax, ecx, 0x36f7a26
cmp eax, 0x3533a941
mov r12, qword [rsp + 0x48]
jae 0x14006ac9a
mov dword [rsp + 0x270], edi
mov byte [rsp + 0x274], sil
lea r9, [0x14024a368]
lea rdx, [rsp + 0x270]
mov r8d, 5
mov rcx, r12
call fcn.140049820
shl rsi, 0x20
mov edi, edi
not rsi
not rdi
and rdi, rsi
not rdi
mov rsi, rdi
shr rsi, 0x20
lea r14, [0x14024a368]
lea r13, [rsp + 0x270]
xor ebx, ebx
movabs r15, 0x8000000000000000
nop
mov dword [rsp + 0x270], edi
mov byte [rsp + 0x274], sil
mov r8d, 5
mov rcx, r12
mov rdx, r13
mov r9, r14
call fcn.140049820
test bl, bl
jne 0x14006acd0
test rax, rax
jne 0x14006adae
mov eax, dword [0x14158c1d0]
and eax, dword [0x14158c1d4]
mov ecx, eax
xor ecx, 0x50c802
xor eax, 0xbe0f3769
mov edx, eax
and edx, 0x43a00294
and ecx, 0xbc5ffd6b
imul ecx, edx
mov edx, eax
and edx, 0xbc5ffd6b
or eax, 0xbc5ffd6b
imul eax, edx
add eax, ecx
imul rcx, rax, 0x2cb4ed7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x2aac8af
ja 0x14006ad00
xor eax, eax
nop dword [rax]
test al, al
jne 0x14006ad60
movabs rax, 0xffffffff7fffffff
cmp r12, rax
ja 0x14006ae74
mov eax, dword [0x14158c1d8]
mov ecx, dword [0x14158c1dc]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0xc653db26
and ecx, 0x274eded1
add ecx, 0x4c78168e
cmp ecx, 0xc8d3f1a9
jbe 0x14006ae16
jmp 0x14006ae69
mov eax, dword [0x14158c1c0]
xor edx, edx
div dword [0x14158c1c4]
add eax, 0xff8a4745
mov ecx, eax
xor ecx, 0x5a9c19a
and eax, 0x7a563e65
add eax, eax
sub eax, ecx
imul rax, rax, 0x6fe24f13
shr rax, 0x3e
cmp eax, 0xf132e7cb
je 0x14006ae12
mov eax, dword [0x14158c1c8]
sub eax, dword [0x14158c1cc]
imul rax, rax, 0x33025005
shr rax, 0x3c
add eax, 0x90318c05
and eax, 0x118003
ud2
ud2
mov esi, dword [0x14158c1e0]
mov eax, dword [0x14158c1e4]
mov ecx, esi
and ecx, eax
add ecx, ecx
add esi, eax
sub esi, ecx
add esi, 0xbbd30e6e
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x430ca087
and eax, 0xbcf35f78
imul eax, ecx
mov ecx, esi
and ecx, 0xbcf35f78
or esi, 0xbcf35f78
imul esi, ecx
add esi, eax
mov rcx, r12
call fcn.14020ba20
cmp esi, 0x283da4d3
jae 0x14006ae74
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14006ae16
lea rax, [0x14156782e]
mov qword [rsp + 0x558], rax
lea rax, [rsp + 0x558]
mov rdi, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x9556a567
mov ebp, dword [rsp + 0x558]
mov eax, dword [0x14158c1e8]
or eax, dword [0x14158c1ec]
mov ecx, eax
not ecx
and ecx, 0x19ba3f89
mov edx, eax
and edx, 0x2645c076
imul edx, ecx
mov ecx, eax
and ecx, 0x19ba3f89
or eax, 0x19ba3f89
imul eax, ecx
add eax, edx
and eax, 0x21d28eb0
imul eax, eax, 0x6e5b7960
cmp eax, 0xa038b36a
ja 0x14006af22
mov eax, dword [0x14158c1f0]
mov ecx, dword [0x14158c1f4]
not eax
not ecx
and ecx, eax
not ecx
imul esi, ecx, 0x10d2e865
and esi, 0x84dd3407
add esi, 0xa42df929
mov rcx, rdi
mov edx, ebp
call fcn.140046850
cmp esi, 0xa3050af7
jbe 0x14006af2e
mov rcx, rdi
mov edx, ebp
call fcn.14020be60
jmp 0x14006aeea
mov rsi, qword [rax]
movzx ebx, word [rax + 8]
movzx eax, byte [0x1415acbd0]
mov edx, 0xa
xor ecx, ecx
call fcn.1401ac910
test rax, rax
je 0x140066850
mov ecx, ebx
and cl, 0x26
add cl, cl
sub bl, cl
add bl, 0x26
movabs rcx, 0xa9d6088524714ab6
xor rsi, rcx
mov qword [rax], rsi
mov byte [rax + 8], bl
mov byte [rax + 9], bh
mov qword [rsp + 0x558], 0xa
mov qword [rsp + 0x560], rax
mov qword [rsp + 0x568], 0xa
mov byte [rsp + 0x570], 0
mov qword [rsp + 0x578], 0
mov qword [rsp + 0x580], 8
mov qword [rsp + 0x588], 0
mov qword [rsp + 0x5e0], 0
mov qword [rsp + 0x5f0], 0
mov byte [rsp + 0x5f8], 0
mov eax, dword [0x14158c1f8]
xor eax, dword [0x14158c1fc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x873a08cc
and ecx, 0x78c5f733
imul ecx, edx
mov edx, eax
and edx, 0x78c5f733
or eax, 0x78c5f733
imul eax, edx
add eax, ecx
xor eax, 0x6052cd5f
add eax, 0xf3037c08
cmp eax, 0x7e95139f
jae 0x14006b070
mov byte [rsp + 0x5f9], 0
mov qword [rsp + 0x590], r15
mov word [rsp + 0x618], 0
mov byte [rsp + 0x620], 0
mov dword [rsp + 0x5b0], 6
mov dword [rsp + 0x5c0], 6
mov dword [rsp + 0x5d0], 6
nop word cs:[rax + rax]
mov eax, dword [0x14158c200]
mov ecx, dword [0x14158c204]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
or eax, 0xd08d8d8a
mov ecx, 0x889e7c6e
sub ecx, eax
add eax, 0x77618391
mov edx, eax
and edx, 0x308f19f
and ecx, 0xbcf60a60
imul ecx, edx
mov edx, eax
and edx, 0x7cf70260
or eax, 0xfcf70a60
imul eax, edx
add eax, ecx
mov byte [rsp + 0x5f9], 0
mov qword [rsp + 0x590], r15
mov word [rsp + 0x618], 0
mov byte [rsp + 0x620], 0
mov dword [rsp + 0x5b0], 6
mov dword [rsp + 0x5c0], 6
mov dword [rsp + 0x5d0], 6
cmp eax, 0x67a6bed5
jb 0x14006b070
mov eax, dword [0x14158c208]
sub eax, dword [0x14158c20c]
add eax, 0xedb561da
not eax
or eax, 0x4a03b5ac
cmp eax, 0xd412aae8
jae 0x14006b19f
mov byte [rsp + 0x621], 0
mov qword [rsp + 0x600], 0
mov qword [rsp + 0x610], 0
mov dword [rsp + 0x61c], 0x8000000
lea rax, [0x141571e05]
mov qword [rsp + 0x270], rax
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x270], 0xf17c83e0
mov edx, dword [rsp + 0x270]
call fcn.140047920
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov eax, dword [rax + 0x18]
movzx eax, byte [0x1415acbd0]
mov edx, 0x1c
xor ecx, ecx
call fcn.1401ac910
lea rsi, [0x141571e05]
mov rdi, r13
nop dword [rax]
mov eax, dword [0x14158c210]
mov ecx, dword [0x14158c214]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rax, rax, 0x140bd
shr rax, 0x2f
imul r13d, eax, 0x1283addf
mov byte [rsp + 0x621], 0
mov qword [rsp + 0x600], 0
mov qword [rsp + 0x610], 0
mov dword [rsp + 0x61c], 0x8000000
mov qword [rsp + 0x270], rsi
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x270], 0xf17c83e0
mov edx, dword [rsp + 0x270]
call fcn.140047920
mov rbx, qword [rax]
mov r15, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov ebp, dword [rax + 0x18]
movzx eax, byte [0x1415acbd0]
mov edx, 0x1c
xor ecx, ecx
call fcn.1401ac910
cmp r13d, 0xfdbb7d10
ja 0x14006b1b0
mov r14, rax
test rax, rax
je 0x14006b99b
movabs rax, 0xc8a4961941baba40
xor rbx, rax
movabs rax, 0xa266a2061694fe6a
xor r15, rax
movabs rax, 0xaee17a78b2ed7bb5
mov rcx, r12
and rcx, rax
add rcx, rcx
add r12, rax
sub r12, rcx
mov eax, ebp
not eax
or eax, 0x4b9690b0
or ebp, 0xb4696f4f
and ebp, eax
mov qword [r14], rbx
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], r12
mov dword [r14 + 0x18], ebp
lea rcx, [rsp + 0x578]
call fcn.1401acea0
mov rax, qword [rsp + 0x580]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x588], 1
lea rcx, [rsp + 0x558]
call fcn.14001abf0
mov ecx, 5
call fcn.14020b820
lea rax, [0x14156de3f]
mov qword [rsp + 0x270], rax
mov r15, rdi
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x270], 0xfa32eb79
mov edx, dword [rsp + 0x270]
call fcn.14020ba40
mov rbx, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x1415acbd0]
mov edx, 0xa
xor ecx, ecx
call fcn.1401ac910
test rax, rax
je 0x14006ba55
movabs r10, 0x8000000000000000
mov rdi, rax
mov r9d, esi
shr r9d, 8
nop dword [rax]
mov eax, dword [0x14158c248]
xor eax, dword [0x14158c24c]
mov ecx, eax
and ecx, 0x46685890
mov edx, ecx
not edx
and edx, 0xc2457108
mov r8d, eax
and r8d, 0x4280890
imul r8d, edx
and eax, 0x42405000
or ecx, 0xc2457108
imul ecx, eax
add ecx, r8d
imul eax, ecx, 0x984f0b86
cmp eax, 0xbfd1374d
jb 0x14006b390
movabs rax, 0xd0d6810755a2da9f
mov ecx, dword [0x14158c250]
add ecx, dword [0x14158c254]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x1338d1a0
and edx, 0xecc72e5f
imul edx, r8d
mov r8d, ecx
and r8d, 0xecc72e5f
or ecx, 0xecc72e5f
imul ecx, r8d
add ecx, edx
cmp ecx, 0xfeedd5fb
jne 0x14006b444
mov rcx, rbx
not rcx
mov rdx, rax
not rdx
mov r8, rcx
or r8, rdx
and rdx, rcx
not rdx
and rdx, r8
mov qword [rdi], rdx
xor r9b, 0x4e
xor sil, 0xfc
xor rbx, rax
xor eax, eax
nop word cs:[rax + rax]
mov qword [rdi], rbx
test al, al
jne 0x14006b460
mov eax, dword [0x14158c258]
add eax, dword [0x14158c25c]
mov ecx, eax
not ecx
and ecx, 0x20349727
and eax, 0xdfcb68d8
sub eax, ecx
mov ecx, eax
not ecx
and ecx, 0xb8e448c9
mov edx, eax
and edx, 0x471bb736
imul edx, ecx
mov ecx, eax
and ecx, 0xb8e448c9
or eax, 0xb8e448c9
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xc7104391
mov edx, eax
and edx, 0x38efbc6e
imul edx, ecx
mov ecx, eax
and ecx, 0xc7104391
or eax, 0xc7104391
imul eax, ecx
add eax, edx
cmp eax, 0x721bbfeb
jne 0x14006b610
mov byte [rdi + 8], sil
mov byte [rdi + 9], r9b
mov qword [rsp + 0x558], 0xa
mov qword [rsp + 0x560], rdi
mov qword [rsp + 0x568], 0xa
mov byte [rsp + 0x570], 0
mov qword [rsp + 0x578], 0
mov qword [rsp + 0x580], 8
mov qword [rsp + 0x588], 0
mov qword [rsp + 0x5e0], 0
mov qword [rsp + 0x5f0], 0
mov word [rsp + 0x5f8], 0
mov qword [rsp + 0x590], r10
mov word [rsp + 0x618], 0
mov word [rsp + 0x620], 0
mov dword [rsp + 0x5b0], 6
mov dword [rsp + 0x5c0], 6
mov dword [rsp + 0x5d0], 6
mov qword [rsp + 0x600], 0
mov qword [rsp + 0x610], 0
mov dword [rsp + 0x61c], 0x8000000
lea rax, [0x141572121]
mov qword [rsp + 0x270], rax
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x270], 0xa9910f3a
mov edx, dword [rsp + 0x270]
mov ebx, r9d
call fcn.14020ba60
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
movzx eax, byte [0x1415acbd0]
mov edx, 0x15
xor ecx, ecx
call fcn.1401ac910
mov r9d, ebx
nop dword [rax + rax]
mov ebp, dword [0x14158c260]
xor ebp, dword [0x14158c264]
add ebp, 0x9b3d31c8
mov eax, ebp
not eax
and eax, 0x98e3caee
mov ecx, ebp
and ecx, 0x671c3511
imul ecx, eax
mov eax, ebp
and eax, 0x98e3caee
or ebp, 0x98e3caee
imul ebp, eax
add ebp, ecx
mov eax, ebp
and eax, 0x21e53094
add eax, eax
sub ebp, eax
add ebp, 0x21e53095
mov byte [rdi + 8], sil
mov byte [rdi + 9], r9b
mov qword [rsp + 0x558], 0xa
mov qword [rsp + 0x560], rdi
mov qword [rsp + 0x568], 0xa
mov byte [rsp + 0x570], 0
mov qword [rsp + 0x578], 0
mov qword [rsp + 0x580], 8
mov qword [rsp + 0x588], 0
mov qword [rsp + 0x5e0], 0
mov qword [rsp + 0x5f0], 0
mov word [rsp + 0x5f8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x590], rax
mov word [rsp + 0x618], 0
mov word [rsp + 0x620], 0
mov dword [rsp + 0x5b0], 6
mov dword [rsp + 0x5c0], 6
mov dword [rsp + 0x5d0], 6
mov qword [rsp + 0x600], 0
mov qword [rsp + 0x610], 0
mov dword [rsp + 0x61c], 0x8000000
lea rax, [0x141572121]
mov qword [rsp + 0x270], rax
lea rax, [rsp + 0x270]
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x270], 0xa9910f3a
mov edx, dword [rsp + 0x270]
mov r12d, r9d
call fcn.14020ba60
mov r15, qword [rax]
mov rbx, qword [rax + 8]
mov r13d, dword [rax + 0x10]
movzx r14d, byte [rax + 0x14]
movzx eax, byte [0x1415acbd0]
mov edx, 0x15
xor ecx, ecx
call fcn.14020ae90
mov r9d, r12d
cmp ebp, 0x87015511
ja 0x14006b610
mov r12, rax
test rax, rax
je 0x14006bafb
movabs rsi, 0xf7455b3d49333ffb
movabs rdi, 0x8f2bd668de5a3736
xor eax, eax
test al, al
je 0x14006b87d
mov ecx, r14d
and cl, 0x5a
add cl, cl
mov eax, r14d
sub al, cl
add al, 0xda
mov ecx, r13d
or ecx, 0x27878f53
mov edx, r13d
not edx
or edx, 0xd87870ac
and edx, ecx
not edx
mov rcx, rbx
xor rcx, rsi
mov r8, r15
xor r8, rdi
not r8
and r8, rdi
add r8, r8
mov r9, rdi
sub r9, r8
add r9, r15
mov qword [r12], r9
mov qword [r12 + 8], rcx
mov dword [r12 + 0x10], edx
mov byte [r12 + 0x14], al
lea rcx, [rsp + 0x578]
call fcn.1401acea0
mov rax, qword [rsp + 0x580]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x588], 1
lea rcx, [rsp + 0x558]
call fcn.14020ba80
mov ecx, 5
call fcn.14020b820
mov eax, r14d
and al, 0x5a
add al, al
sub r14b, al
add r14b, 0xda
xor r13d, 0xd87870ac
mov rax, rbx
xor rax, rsi
not rax
and rax, rsi
add rax, rax
sub rsi, rax
add rsi, rbx
mov rax, r15
xor rax, rdi
not rax
and rax, rdi
add rax, rax
sub rdi, rax
add rdi, r15
lea r15, [rsp + 0x558]
lea rbp, [rsp + 0x578]
nop dword [rax]
mov eax, dword [0x14158c270]
imul eax, dword [0x14158c274]
mov ecx, 0xccdc1e2b
imul rax, rcx
shr rax, 0x3f
imul ebx, eax, 0x1aa24a46
add ebx, 0xa4365ff4
mov qword [r12], rdi
mov qword [r12 + 8], rsi
mov dword [r12 + 0x10], r13d
mov byte [r12 + 0x14], r14b
mov rcx, rbp
call fcn.1401acea0
mov rax, qword [rsp + 0x580]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x588], 1
mov rcx, r15
call fcn.14020ba80
mov ecx, 5
call fcn.14013ea60
cmp ebx, 0x386e64fe
jb 0x14006b8d0
mov eax, dword [0x14158c278]
mov ecx, dword [0x14158c27c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, 0x89e8fb79
imul rcx, rax
shr rcx, 0x3c
add ecx, 0x12688a3c
cmp ecx, 0xf31c4bed
jbe 0x14006bb4b
jmp 0x14006bba3
mov eax, dword [0x14158c218]
xor eax, dword [0x14158c21c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa96870fd
and ecx, 0x56978f02
imul ecx, edx
mov edx, eax
and edx, 0x56978f02
or eax, 0x56978f02
imul eax, edx
add eax, ecx
or eax, 0x5e259df6
mov ecx, eax
not ecx
or ecx, 0xdd3f825e
add eax, ecx
inc eax
cmp eax, 0x9bba2e45
jae 0x14006b9f0
ud2
mov eax, dword [0x14158c220]
xor edx, edx
div dword [0x14158c224]
or eax, 0x23bae1dd
imul rax, rax, 0x235344a3
shr rax, 0x3b
imul eax, eax, 0x66834c5a
ud2
mov eax, dword [str.z_v_]
imul eax, dword [0x14158c234]
or eax, 0x60643137
imul eax, eax, 0x77042482
add eax, 0x9f438c4
cmp eax, 0x1140f59e
jae 0x14006ba7b
ud2
mov eax, 0x9e67efa7
mov ecx, dword [0x14158c238]
or ecx, dword [0x14158c23c]
mov edx, ecx
not edx
and edx, 0x50493ff3
and ecx, 0xafb6c00c
sub ecx, edx
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x58270d7
ud2
mov eax, dword [0x14158c268]
mov ecx, dword [0x14158c26c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
xor ecx, 0xd5fffb4a
or eax, 0x441e2308
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0xcc901b40
or eax, 0xa28e3cfd
and eax, ecx
and eax, 0xee9e3ffd
cmp eax, 0xb2e151a6
jb 0x14006bb47
ud2
ud2
mov eax, dword [0x14158c280]
or eax, dword [0x14158c284]
mov esi, eax
xor esi, 0xf6bb6391
and esi, eax
add esi, 0xaed706ef
and esi, 0xe33ed677
lea rax, [0x141564aa2]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x93bf886f
mov edx, dword [rsp + 0x558]
call fcn.1400413b0
cmp esi, 0x209181dd
jae 0x14006bbd6
lea rax, [0x141564aa2]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x93bf886f
mov edx, dword [rsp + 0x558]
call fcn.14020be80
jmp 0x14006bb4b
mov rdi, rax
mov eax, dword [0x14158c288]
or eax, dword [0x14158c28c]
or eax, 0x7dffbef7
add eax, 0x558a9f86
cmp eax, 0x9b4844a9
ja 0x14006bc3e
mov eax, dword [0x14158c290]
and eax, dword [0x14158c294]
mov r14d, 0x916785c3
imul r14, rax
shr r14, 0x3f
or r14d, 0xf8c7d0c
mov rsi, qword [rdi]
movzx ebx, word [rdi + 8]
movzx ebp, byte [rdi + 0xa]
movzx eax, byte [0x1415acbd0]
mov edx, 0xb
xor ecx, ecx
call fcn.1401ac910
cmp r14d, 0x8a5e9667
jbe 0x14006bc5e
mov rax, qword [rdi]
movzx eax, byte [rdi + 0xa]
movzx eax, word [rdi + 8]
movzx eax, byte [0x1415acbd0]
mov edx, 0xb
xor ecx, ecx
call fcn.14020ae90
jmp 0x14006bbf6
test rax, rax
je 0x14006bcdb
shl ebp, 0x10
or ebx, ebp
mov r8d, ebx
shr r8d, 0x10
mov r9d, ebx
shr r9d, 8
nop word cs:[rax + rax]
mov edx, dword [0x14158c2a0]
mov ecx, dword [0x14158c2a4]
not edx
not ecx
or ecx, edx
not ecx
imul rdx, rcx, 0x3475c641
shr rdx, 0x3d
not edx
and edx, 0x5b0785d3
mov ecx, edx
xor ecx, 0xc0d37394
xor edx, 0x1407443
and edx, ecx
cmp edx, 0xe113f6ca
ja 0x14006bc80
xor r8b, 0xda
xor r9b, 0x16
xor ecx, ecx
test cl, cl
mov rdi, rax
mov ebp, r8d
mov r12d, r9d
je 0x14006bd39
jmp 0x14006bdd7
ud2
mov r15d, dword [0x14158c2a8]
sub r15d, dword [0x14158c2ac]
add r15d, 0x222ba9e6
xor r15d, 0x2a25c578
and r15d, 0x2af5cdfc
mov eax, ebx
and al, 0x2c
add al, al
mov ecx, ebx
sub cl, al
add cl, 0x2c
mov rax, rsi
movabs rdx, 0x9e42e2a705746e1c
xor rax, rdx
mov qword [rdi], rax
mov byte [rdi + 8], cl
mov byte [rdi + 9], r9b
mov byte [rdi + 0xa], r8b
lea rax, [0x141573af8]
mov qword [rsp + 0x558], rax
lea rax, [rsp + 0x558]
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0xfffe3425
mov edx, dword [rsp + 0x558]
call fcn.14020baa0
mov r9d, r12d
mov r8d, ebp
mov r13, qword [rax]
mov r14d, dword [rax + 8]
cmp r15d, 0x847e46f2
jne 0x14006be5b
mov eax, ebx
xor al, 0x2c
mov rcx, rsi
not rcx
movabs r10, 0x9e42e2a705746e1c
mov rdx, r10
not rdx
or rdx, rcx
not rdx
mov rcx, rsi
or rcx, r10
not rcx
or rcx, rdx
not rcx
mov qword [rdi], rcx
mov byte [rdi + 8], al
mov byte [rdi + 9], r9b
mov byte [rdi + 0xa], r8b
lea rax, [0x141573af8]
mov qword [rsp + 0x558], rax
lea rax, [rsp + 0x558]
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0xfffe3425
mov edx, dword [rsp + 0x558]
call fcn.14003d130
mov r9d, r12d
mov r8d, ebp
mov rcx, qword [rax]
mov eax, dword [rax + 8]
jmp 0x14006bd39
mov qword [rsp + 0x230], rdi
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x1415acbd0]
mov edx, 0xd
xor ecx, ecx
call fcn.1401ac910
test rax, rax
je 0x14006be94
mov r15, rax
movabs rax, 0x34b05eaf1d092b7c
xor ecx, ecx
test cl, cl
je 0x14006bee0
jmp 0x14006bf13
xor eax, eax
test al, al
jne 0x14006bedc
mov eax, dword [0x14158c2b0]
mov ecx, dword [0x14158c2b4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
xor eax, 0x10440104
or eax, 0xedbaf27b
ud2
ud2
mov ecx, dword [0x14158c2b8]
xor ecx, dword [0x14158c2bc]
add ecx, 0xda4d0ea9
and ecx, 0xca01400f
mov rdx, r13
and rdx, rax
add rdx, rdx
lea r8, [rax + r13]
sub r8, rdx
mov qword [r15], r8
cmp ecx, 0x17ee8e60
jne 0x14006bf27
mov rcx, rax
xor rcx, rax
not rcx
and rcx, r13
xor rcx, rax
mov qword [r15], rcx
jmp 0x14006bee0
xor bl, 0xbe
xor r14d, 0xd3d182bd
mov eax, dword [0x14158c2c0]
mov ecx, dword [0x14158c2c4]
add eax, ecx
add eax, 0xecb042e6
or eax, 0x4346a5d1
imul rax, rax, 0xfdb3b05
shr rax, 0x3b
cmp eax, 0xbbf69880
lea r13, [rsp + 0x558]
ja 0x14006bfa5
mov eax, dword [0x14158c2c8]
sub eax, dword [0x14158c2cc]
add eax, 0x17da3bd8
mov ecx, eax
xor ecx, 0x30855971
and ecx, eax
mov eax, ecx
xor eax, 0x46c1200a
and eax, ecx
mov dword [r15 + 8], r14d
mov byte [r15 + 0xc], bl
lea rcx, [0x14156c6ac]
mov qword [rsp + 0x558], rcx
cmp eax, 0x1647efaf
jbe 0x14006bfbe
mov dword [r15 + 8], r14d
mov byte [r15 + 0xc], bl
lea rax, [0x14156c6ac]
mov qword [rsp + 0x558], rax
jmp 0x14006bf63
mov rdi, qword [rsp + 0x558]
mov eax, dword [0x14158c2d0]
imul eax, dword [0x14158c2d4]
imul rax, rax, 0x434c3f89
shr rax, 0x3d
add eax, 0x418ab4a7
cmp eax, 0xc9b82634
lea r12, [rsp + 0x70]
ja 0x14006c07e
mov eax, dword [str.IZbQ]
or eax, dword [0x14158c2dc]
mov ecx, eax
not ecx
and ecx, 0x4eafcf82
mov edx, eax
and edx, 0xb150307d
imul edx, ecx
mov ecx, eax
and ecx, 0x4eafcf82
or eax, 0x4eafcf82
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or eax, 0x55080012
or ecx, 0xaaf7ffec
and ecx, eax
imul r14, rcx, 0xee87d43
shr r14, 0x3b
mov dword [rsp + 0x558], 0x2cc7dd99
mov edx, dword [rsp + 0x558]
mov rcx, rdi
call fcn.14003fa60
mov rbx, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x1415acbd0]
mov edx, 0xc
xor ecx, ecx
call fcn.14020ae90
cmp r14d, 0x30f77f3c
jbe 0x14006c0b6
mov dword [rsp + 0x558], 0x2cc7dd99
mov edx, dword [rsp + 0x558]
mov rcx, rdi
call fcn.14020bea0
mov rcx, qword [rax]
mov eax, dword [rax + 8]
movzx eax, byte [0x1415acbd0]
mov edx, 0xc
xor ecx, ecx
call fcn.14020ae90
jmp 0x14006bff3
test rax, rax
je 0x14006c885
xor esi, 0x95124fb0
movabs rcx, 0xd9a0d8ee16ee3509
xor rbx, rcx
mov qword [rax], rbx
mov qword [rsp + 0x228], rax
mov dword [rax + 8], esi
lea rax, [0x141570994]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
mov dword [rsp + 0x558], 0x239bf910
mov edx, dword [rsp + 0x558]
call fcn.14020bac0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
mov ecx, dword [0x14158c2e8]
add ecx, dword [0x14158c2ec]
mov edx, ecx
and edx, 0x2101dc70
xor ecx, 0x2101dc70
lea ecx, [rcx + rdx*2]
imul ecx, ecx, 0x8b16c7bc
not ecx
mov edx, ecx
or edx, 0x64f6e98c
or ecx, 0x64f6e98f
and ecx, edx
cmp ecx, 0x427b43dc
jae 0x14006c160
movzx ecx, byte [rax + 0xc]
nop word cs:[rax + rax]
mov ecx, dword [0x14158c2f0]
add ecx, dword [0x14158c2f4]
mov edx, ecx
xor edx, 0x24080110
xor ecx, 0xc3e7f881
mov r8d, ecx
and r8d, 0x5937fe6e
and edx, 0xa6c80191
imul edx, r8d
mov r8d, ecx
and r8d, 0xa6c80191
or ecx, 0xa6c80191
imul ecx, r8d
add ecx, edx
movzx ebx, byte [rax + 0xc]
cmp ecx, 0xde1d65f1
ja 0x14006c160
movzx eax, byte [0x1415acbd0]
mov edx, 0xd
xor ecx, ecx
call fcn.14020ae90
test rax, rax
je 0x14006c91d
ud2