Function at 0x140178600
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rsi, rcx
mov eax, dword [0x1415c5b10]
xor eax, dword [0x1415c5b14]
or eax, 0x88f90bfe
add eax, 0x52126701
and eax, 0xff1ff5ff
xor eax, 0x49312d8
cmp eax, 0xa8a3de1c
jae 0x140178660
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
nop word cs:[rax + rax]
mov ecx, dword [0x1415c5b18]
and ecx, dword [0x1415c5b1c]
add ecx, 0x2ff782d1
or ecx, 0xd31ff48e
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
cmp ecx, 0x6a8ef55c
jb 0x140178660
xor eax, eax
test al, al
jne 0x1401786e4
mov eax, dword [0x1415c5b20]
xor edx, edx
div dword [0x1415c5b24]
mov ecx, eax
not eax
and eax, 0x28f9a1b2
and ecx, 0xd7065e4d
sub ecx, eax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
movzx eax, byte [0x1415d38ac]
cmp ecx, 0xaec06a3f
jne 0x140178700
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
movzx eax, byte [0x1415d38ac]
jmp 0x1401786a6
mov ecx, dword [0x1415c5b28]
mov edx, dword [0x1415c5b2c]
xor edx, ecx
not edx
and edx, ecx
mov ecx, edx
and ecx, 0x5fc2da24
add ecx, ecx
neg ecx
add ecx, edx
add ecx, 0xdfc2da24
mov edx, ecx
not edx
and edx, 0x176f2d52
mov r8d, ecx
and r8d, 0x890d2ad
imul r8d, edx
mov edx, ecx
and edx, 0x176f2d52
or ecx, 0x176f2d52
imul ecx, edx
add ecx, r8d
not ecx
and ecx, 0x1b60b7ee
cmp ecx, 0x48b8fe97
ja 0x140178700
test al, al
je 0x140179120
nop word [rax + rax]
mov eax, dword [0x1415c5b30]
and eax, dword [0x1415c5b34]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x5dd6f074
and ecx, 0xa2290f8b
imul ecx, edx
mov edx, eax
and edx, 0xa2290f8b
or eax, 0xa2290f8b
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0xcfebd460
xor ecx, 0x4031440
and eax, 0x4031440
or eax, ecx
or eax, 0x30142b9f
cmp eax, 0xc37d7447
jb 0x140178770
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x60]
cmp rax, 1
jg 0x140179120
cmp eax, 1
je 0x140178870
mov eax, dword [0x1415c5b38]
add eax, dword [0x1415c5b3c]
or eax, 0x2045cdb5
add eax, 0x541c4ab5
mov ecx, eax
and ecx, 0x39420cc8
xor eax, 0x39420cc8
lea eax, [rax + rcx*2]
cmp eax, 0x7df10e7a
jb 0x140178831
sub rsp, 0x20
call fcn.140249b40
add rsp, 0x20
xor eax, eax
test al, al
je 0x140178840
sub rsp, 0x20
call fcn.140249b40
add rsp, 0x20
jmp 0x14017881e
mov eax, dword [0x1415c5b40]
sub eax, dword [0x1415c5b44]
add eax, 0xb77bc230
or eax, 0x4041a32e
and eax, 0x40ddabae
cmp eax, 0x8aeee9a2
ja 0x140178840
nop word cs:[rax + rax]
mov eax, dword [0x1415c5b48]
imul eax, dword [0x1415c5b4c]
add eax, 0x2a200190
xor eax, 0x824e17db
cmp eax, 0xa02cf5e0
ja 0x140178870
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r15, qword [rax + 0x68]
mov eax, dword [0x1415c5b50]
xor edx, edx
div dword [0x1415c5b54]
imul eax, eax, 0x7a589854
and eax, 0xbebb0ac
xor eax, 0x86a80a0
cmp eax, 0x5698d712
jbe 0x1401788f0
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x68], 0
nop dword [rax + rax]
mov eax, dword [0x1415c5b58]
sub eax, dword [0x1415c5b5c]
mov ecx, dword [0x1415d3954]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
and eax, 0x52008040
mov qword [rcx + 0x68], 0
cmp eax, 0xfa1ae95a
je 0x1401788f0
mov eax, dword [0x1415c5b60]
xor edx, edx
div dword [0x1415c5b64]
nop word cs:[rax + rax]
mov eax, dword [0x1415c5b68]
mov ecx, dword [0x1415c5b6c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
xor eax, 0x84000004
or eax, 0x78d4c193
and eax, 0xfcd4e5d7
cmp eax, 0x477041c7
je 0x140178940
test r15, r15
je 0x140179120
mov eax, dword [0x1415c5b70]
xor edx, edx
div dword [0x1415c5b74]
or eax, 0x610e6d1
cmp eax, 0x5d6f640b
jne 0x1401789af
mov cl, 1
xor eax, eax
lock cmpxchg byte [r15 + 0x10], cl
lea rdi, [r15 + 0x10]
mov cl, 1
nop word cs:[rax + rax]
mov eax, dword [0x1415c5b78]
sub eax, dword [0x1415c5b7c]
xor eax, 0x1a7f1fe
imul rdx, rax, 0x398dd08f
shr rdx, 0x36
add edx, 0x3d019a9e
xor eax, eax
lock cmpxchg byte [r15 + 0x10], cl
sete al
cmp edx, 0xc7574b9c
ja 0x1401789c0
nop word cs:[rax + rax]
mov ecx, dword [0x1415c5b80]
mov edx, dword [0x1415c5b84]
mov r8d, ecx
not r8d
and r8d, edx
not edx
and edx, ecx
sub edx, r8d
or edx, 0xff6db84
add edx, 0xf1be0380
not edx
and edx, 0xa4214c2
cmp edx, 0x147bb5b2
ja 0x140178a00
test al, al
je 0x14017971d
mov ecx, 0xd9c4f2b3
lea rax, [r15 + 0x18]
nop dword [rax]
mov edx, dword [0x1415c5b90]
sub edx, dword [0x1415c5b94]
and edx, 0xffeafd94
imul rdx, rcx
shr rdx, 0x3e
add edx, 0x58f47717
cmp edx, 0x4cd45d36
jb 0x140178a50
mov qword [rbx], rax
mov qword [rbx + 8], 0
sub rsp, 0x20
lea rdx, [0x14159e998]
mov rcx, rbx
mov r8, rsi
call fcn.1400bc7e0
add rsp, 0x20
mov rcx, qword [rbx + 8]
test al, al
je 0x1401792ee
nop dword [rax]
mov eax, dword [0x1415c5c08]
mov edx, dword [0x1415c5c0c]
xor edx, eax
not edx
and edx, eax
mov eax, edx
not eax
mov r8d, edx
or r8d, 0x11a994f6
mov r9d, r8d
and r9d, 0xaf289c1e
and eax, 0x40566301
imul eax, r9d
and r8d, 0x50d763e1
or edx, 0x51fff7f7
imul edx, r8d
add edx, eax
imul eax, edx, 0x64094a52
cmp eax, 0xf2d29403
ja 0x140178ab0
test rcx, rcx
je 0x140179769
nop dword [rax]
mov eax, dword [0x1415c5c30]
and eax, dword [0x1415c5c34]
add eax, 0x84820a64
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x5ea7a3d6
and edx, 0xa1585c29
imul edx, r8d
mov r8d, eax
and r8d, 0xa1585c29
or eax, 0xa1585c29
imul eax, r8d
add eax, edx
imul rdx, rax, 0x748c0b3
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
cmp eax, 0x4679de5d
ja 0x140178b10
mov rdx, rcx
xor rdx, 0xfffffffffffffffc
mov rax, rcx
or rax, 3
and rax, rdx
nop word [rax + rax]
mov edx, dword [0x1415c5c38]
mov r8d, dword [0x1415c5c3c]
mov r9d, edx
xor r9d, r8d
not r8d
and r8d, edx
add r8d, r8d
sub r8d, r9d
mov edx, r8d
not edx
and edx, 0x7ae95c5f
mov r9d, r8d
and r9d, 0x8516a3a0
imul r9d, edx
mov edx, r8d
and edx, 0x7ae95c5f
or r8d, 0x7ae95c5f
imul r8d, edx
add r8d, r9d
imul rdx, r8, 0x7c317b0b
shr rdx, 0x3e
or edx, 0xbad7e4e8
cmp edx, 0xa1559be5
je 0x140178b80
cmp rax, 2
jg 0x140179240
cmp rax, 1
jne 0x140179928
lea rsi, [rcx - 1]
mov eax, dword [0x1415c5c50]
and eax, dword [0x1415c5c54]
mov edx, eax
not edx
or edx, 0x1690d53
and edx, 0x81798d53
and eax, 0xa804288
sub eax, edx
not eax
and eax, 0xa6e0c2d8
cmp eax, 0x6723e96f
je 0x140178c00
mov rbx, qword [rcx - 1]
nop word cs:[rax + rax]
mov eax, dword [0x1415c5c5c]
mov edx, eax
xor edx, edx
not edx
and edx, dword [0x1415c5c58]
xor edx, eax
mov eax, edx
not eax
or eax, 0x1dc4f660
add eax, edx
inc eax
and eax, 0x1dc1938e
xor eax, 0x18018306
cmp eax, 0x86f32ed
ja 0x140178c40
mov r14, qword [rcx + 7]
mov r12, qword [r14]
mov eax, dword [0x1415c5c60]
xor edx, edx
div dword [0x1415c5c64]
nop word [rax + rax]
mov eax, dword [0x1415c5c68]
add eax, dword [0x1415c5c6c]
mov ecx, eax
not ecx
and ecx, 0xc49cee72
mov edx, eax
and edx, 0x3b63118d
imul edx, ecx
mov ecx, eax
and ecx, 0xc49cee72
or eax, 0xc49cee72
imul eax, ecx
add eax, edx
add eax, 0x2ef67e00
cmp eax, 0xdc3d12aa
ja 0x140178c90
test r12, r12
je 0x140178da4
mov eax, dword [0x1415c5c70]
mov ecx, dword [0x1415c5c74]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0xe527bb5d
and ecx, eax
mov eax, 0x8604e0ab
imul rax, rcx
shr rax, 0x3e
add eax, 0x881d7cea
cmp eax, 0x54ba144a
jae 0x140178d34
sub rsp, 0x20
mov rcx, rbx
call r12
add rsp, 0x20
xor r13d, r13d
nop word [rax + rax]
sub rsp, 0x20
mov rcx, rbx
call r12
add rsp, 0x20
test r13b, r13b
jne 0x140178d40
nop word cs:[rax + rax]
mov eax, dword [0x1415c5c78]
and eax, dword [0x1415c5c7c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x7493c8
and ecx, 0x7f8b6c37
imul ecx, edx
mov edx, eax
and edx, 0x7f8b6c37
or eax, 0x7f8b6c37
imul eax, edx
add eax, ecx
or eax, 0x8e116b85
add eax, 0xe9264f19
cmp eax, 0xbf88ead1
ja 0x140178d60
mov rax, qword [r14 + 8]
nop dword [rax + rax]
mov ecx, dword [0x1415c5c80]
mov edx, dword [0x1415c5c84]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
or edx, 0xbff6b6df
cmp edx, 0xe1652497
ja 0x140178db0
mov rcx, qword [r14 + 0x10]
nop
mov edx, dword [0x1415c5c88]
or edx, dword [0x1415c5c8c]
add edx, 0x2a1ad583
mov r8d, edx
xor r8d, 0x180d881
and r8d, edx
or r8d, 0xdc76235c
cmp r8d, 0xf4d2019a
ja 0x140178de0
test rax, rax
je 0x140178fd0
mov eax, dword [0x1415c5c90]
xor edx, edx
div dword [0x1415c5c94]
nop word cs:[rax + rax]
mov eax, dword [0x1415c5c98]
mov edx, dword [0x1415c5c9c]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
xor eax, 0x686e0ba3
mov edx, eax
and edx, 0x5b90ab2c
and eax, 0x1210a100
add eax, eax
sub edx, eax
cmp edx, 0xf32729b4
je 0x140178e30
nop
mov eax, dword [0x1415c5ca0]
imul eax, dword [0x1415c5ca4]
add eax, 0xcb4cd770
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xf910d4e0
and edx, 0x6ef2b1f
imul edx, r8d
mov r8d, eax
and r8d, 0x6ef2b1f
or eax, 0x6ef2b1f
imul eax, r8d
add eax, edx
imul rax, rax, 0x5a37b6e5
shr rax, 0x3e
cmp eax, 0xd2515109
ja 0x140178e80
cmp rcx, 0x11
jb 0x140178fb6
nop dword [rax + rax]
mov eax, dword [0x1415c5ca8]
xor edx, edx
div dword [0x1415c5cac]
mov ecx, eax
xor ecx, 0xc80fe79b
and ecx, eax
add ecx, 0xf794178
mov eax, ecx
and eax, 0x1aaf766
add eax, eax
sub ecx, eax
add ecx, 0x81aaf766
cmp ecx, 0x7ec4dbe9
jb 0x140178ee0
nop word [rax + rax]
mov eax, dword [0x1415c5cb0]
sub eax, dword [0x1415c5cb4]
mov ecx, eax
xor ecx, 0x80210e
xor eax, 0xe75ddeb1
mov edx, eax
and edx, 0xba7f0a60
and ecx, 0x4580f59f
imul ecx, edx
mov edx, eax
and edx, 0x4580f59f
or eax, 0x4580f59f
imul eax, edx
add eax, ecx
add eax, 0x944041b1
cmp eax, 0x4be99c05
ja 0x140178f20
mov rbx, qword [rbx - 8]
nop dword [rax]
mov eax, dword [0x1415c5cb8]
xor edx, edx
div dword [0x1415c5cbc]
mov ecx, eax
not ecx
and ecx, 0x364242c
mov edx, eax
and edx, 0x49bdbd3
imul edx, ecx
mov ecx, eax
and ecx, 0x364242c
or eax, 0x364242c
imul eax, ecx
add eax, edx
xor eax, 0x5040419
or eax, 0xfadbb3e2
cmp eax, 0xf2e4d056
jb 0x140178f70
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415c5cc0]
add eax, dword [0x1415c5cc4]
mov ecx, eax
and ecx, 0x2baad608
add ecx, ecx
sub eax, ecx
add eax, 0xabaad608
mov ecx, eax
xor ecx, 0xe37a003d
or eax, 0x1c85ffc2
and eax, ecx
add eax, 0xa7eb31d8
cmp eax, 0x2d27eef8
jae 0x14017900f
mov rax, qword [0x1415d3918]
xor eax, eax
nop word cs:[rax + rax]
mov rbx, qword [0x1415d3918]
test al, al
jne 0x140179020
mov eax, dword [0x1415c5cc8]
add eax, dword [0x1415c5ccc]
imul eax, eax, 0xad2fd073
mov ecx, eax
or ecx, 0x8b091103
not eax
and eax, 0x20600e64
and ecx, 0xdb1f3103
or ecx, eax
xor ecx, 0x4b5be516
cmp ecx, 0x27e3f381
jae 0x140179080
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415c5cd0]
sub eax, dword [0x1415c5cd4]
imul r14d, eax, 0x523abef0
add r14d, 0x1310de25
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
cmp r14d, 0xda3cddfb
ja 0x140179080
nop dword [rax + rax]
mov eax, dword [0x1415c5cd8]
mov ecx, dword [str.V_M]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add eax, ecx
add eax, 0xb8bf41d5
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xe3fb293c
mov r8d, edx
and r8d, 0x68d94f53
and ecx, 0x14049080
imul ecx, r8d
and edx, 0x9726b0ac
or eax, 0xf7ffb9bc
imul eax, edx
add eax, ecx
cmp eax, 0x5e418db9
jb 0x1401790c0
jmp 0x140179928
mov eax, dword [0x1415c5d48]
add eax, dword [0x1415c5d4c]
mov ecx, eax
not ecx
or eax, 0x3733bcfb
and ecx, 0x48cc4104
mov edx, eax
and edx, 0x80002e10
or edx, ecx
xor edx, 0x9a3c4303
and eax, 0xe5c392ec
or eax, edx
cmp eax, 0xb0810256
jb 0x140179120
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r15, qword [rax + 0x88]
test r15, r15
jne 0x14017a195
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x1415c5d50]
or ecx, dword [0x1415c5d54]
add ecx, 0xbe02b71b
imul rcx, rcx, 0x5adfa469
shr rcx, 0x3d
or ecx, 0xbc601b5e
cmp ecx, 0xf829827f
je 0x1401791a0
test rax, rax
jle 0x14017928f
cmp rax, 2
jl 0x140179d10
cmp eax, 2
jne 0x14017969e
mov eax, dword [0x1415c5da8]
mov ecx, dword [0x1415c5dac]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
xor ecx, 0x13b72b4
and eax, 0xc48d4b
add eax, eax
sub eax, ecx
or eax, 0xfe7edf7f
cmp eax, 0xe6ffa212
jb 0x140179868
jmp 0x140179812
mov eax, dword [0x1415c5c40]
and eax, dword [0x1415c5c44]
add eax, 0x280b5c78
mov ecx, eax
and ecx, 0x31cc06b7
or eax, 0x31cc06b7
add eax, ecx
cmp eax, 0xe02c9aff
ja 0x140179240
nop word [rax + rax]
mov eax, dword [0x1415c5c48]
add eax, dword [0x1415c5c4c]
not eax
or eax, 0x79daddb1
cmp eax, 0xd0320db4
je 0x140179270
jmp 0x140179928
mov ecx, dword [0x1415c5d60]
mov eax, dword [str.UGfo]
xor eax, ecx
not eax
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0x196b0617
mov edx, eax
and edx, 0xe694f9e8
imul edx, ecx
mov ecx, eax
and ecx, 0x196b0617
or eax, 0x196b0617
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x1a3220f7
and eax, 0xe5cddf08
sub eax, ecx
add eax, 0xaa74fdbc
cmp eax, 0x5588ccd4
jb 0x140179d01
jmp 0x140179ca9
xor eax, eax
test al, al
jne 0x1401792f0
test rcx, rcx
je 0x140179910
mov rax, rcx
xor rax, 0xfffffffffffffffc
and rax, rcx
nop word [rax + rax]
mov edx, dword [0x1415c5b98]
xor edx, dword [0x1415c5b9c]
imul edx, edx, 0x15e8a50e
add edx, 0xba91dd24
cmp edx, 0x4e3f5ff8
jb 0x140179310
mov edx, dword [0x1415c5ba0]
add edx, dword [0x1415c5ba4]
imul edx, edx, 0x1f54761a
imul rdx, rdx, 0x60403ee9
shr rdx, 0x3c
mov r8d, edx
not r8d
and r8d, 0x51b0f002
mov r9d, edx
and r9d, 0xfffffffd
imul r9d, r8d
mov r8d, edx
and r8d, 2
or edx, 0x51b0f002
imul edx, r8d
add edx, r9d
cmp edx, 0x3e0fa276
jb 0x140179330
cmp rax, 2
jg 0x140179610
cmp rax, 1
jne 0x140179910
mov eax, 0x86b134ad
lea rsi, [rcx - 1]
nop
mov edx, dword [0x1415c5bb8]
mov r8d, dword [0x1415c5bbc]
not r8d
mov r9d, edx
or r9d, r8d
and r8d, edx
not r8d
and r8d, r9d
not r8d
imul r8, rax
shr r8, 0x3f
or r8d, 0x9ae92dca
cmp r8d, 0x18679eed
je 0x1401793a0
mov rbx, qword [rcx - 1]
nop
mov edx, dword [0x1415c5bc0]
mov r8d, dword [0x1415c5bc4]
mov eax, edx
not eax
mov r9d, r8d
not r9d
mov r10d, eax
and r10d, 0x4a8a0e7f
and edx, 0xb575f180
or edx, r10d
or eax, r9d
and r9d, 0x4a8a0e7f
and r8d, 0xb575f180
or r8d, r9d
xor r8d, edx
not eax
or eax, r8d
add eax, 0x8bd688a5
mov edx, eax
and edx, 0x7a6865dc
or eax, 0x7a6865dc
add eax, edx
mov edx, eax
and edx, 0x1d7991d7
add edx, edx
sub eax, edx
add eax, 0x1d7991d7
cmp eax, 0x604a44c6
jb 0x1401793e0
mov r14, qword [rcx + 7]
mov rax, qword [r14]
nop dword [rax]
mov ecx, dword [0x1415c5bc8]
mov edx, dword [0x1415c5bcc]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
imul ecx, edx, 0x350e8e27
mov edx, ecx
not edx
and edx, 0x6784f415
mov r8d, ecx
and r8d, 0x987b0bea
imul r8d, edx
mov edx, ecx
and edx, 0x6784f415
or ecx, 0x6784f415
imul ecx, edx
add ecx, r8d
or ecx, 0x6a8abb55
cmp ecx, 0x4e4a08dd
je 0x140179460
test rax, rax
je 0x1401794e0
sub rsp, 0x20
mov rcx, rbx
call rax
add rsp, 0x20
xor eax, eax
test al, al
jne 0x1401794d0
nop word cs:[rax + rax]
mov eax, dword [0x1415c5bd0]
mov ecx, dword [0x1415c5bd4]
add eax, ecx
add eax, 0x840934f8
imul rax, rax, 0x14c57005
shr rax, 0x3c
cmp eax, 0x7e6602d7
ja 0x1401794e0
nop word cs:[rax + rax]
mov eax, dword [0x1415c5bd8]
sub eax, dword [str.Zag]
add eax, 0xbe05ee68
and eax, 0x303a518
cmp eax, 0xf8983b3a
ja 0x140179510
cmp qword [r14 + 8], 0
je 0x1401795d3
mov rax, qword [r14 + 0x10]
nop dword [rax]
mov ecx, dword [0x1415c5be0]
xor ecx, dword [0x1415c5be4]
add ecx, 0xf8ccdb31
or ecx, 0x37e7fbff
cmp ecx, 0xc3b7ac32
je 0x140179540
mov ecx, dword [0x1415c5be8]
mov edx, dword [0x1415c5bec]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
add ecx, 0x27f6c710
mov edx, ecx
xor edx, 0x954fb7e1
and edx, ecx
add edx, 0x96870891
cmp edx, 0x3ed27e1f
jb 0x140179560
cmp rax, 0x11
jb 0x1401795b9
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [0x1415d3918]
mov eax, dword [0x1415c5bf0]
xor edx, edx
div dword [0x1415c5bf4]
imul rax, rax, 0xaa02943
shr rax, 0x35
and eax, 0xffffffce
xor eax, 0x44a00404
cmp eax, 0x1abbf8d3
jb 0x1401798b5
jmp 0x14017986c
mov eax, dword [0x1415c5ba8]
imul eax, dword [0x1415c5bac]
add eax, 0xbbf0427d
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xff9b9c75
and ecx, 0x64638a
imul ecx, edx
mov edx, eax
and edx, 0x64638a
or eax, 0x64638a
imul eax, edx
add eax, ecx
cmp eax, 0xafbd3a24
je 0x140179610
mov eax, dword [0x1415c5bb0]
mov ecx, dword [0x1415c5bb4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
add eax, 0xc6c707d0
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x990eb036
and ecx, 0x66f14fc9
imul ecx, edx
mov edx, eax
and edx, 0x66f14fc9
or eax, 0x66f14fc9
imul eax, edx
add eax, ecx
cmp eax, 0x883a2a28
je 0x140179650
jmp 0x140179910
mov ecx, dword [0x1415c5d58]
mov edx, dword [0x1415c5d5c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xd291f312
and ecx, 0x2d6e0ced
or ecx, r9d
or eax, r8d
and r8d, 0xd291f312
and edx, 0x2d6e0ced
or edx, r8d
xor edx, ecx
not eax
or eax, edx
add eax, 0x7bffffb7
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x5997a505
and ecx, 0xa6685afa
imul ecx, edx
mov edx, eax
and edx, 0xa6685afa
or eax, 0xa6685afa
imul eax, edx
add eax, ecx
add eax, 0x7e7a4ac8
cmp eax, 0xc85a52f1
jb 0x14017969e
jmp 0x140179c96
sub rsp, 0x20
mov rcx, rdi
call fcn.140248480
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415c5b88]
sub eax, dword [0x1415c5b8c]
imul rax, rax, 0x61637427
shr rax, 0x3e
mov ecx, eax
xor ecx, 0xe38123f3
lea eax, [rcx + rax*2]
imul rax, rax, 0x1b7a2c7f
shr rax, 0x3c
cmp eax, 0xcc627dd9
ja 0x140179730
jmp 0x140178a40
mov eax, dword [0x1415c5c10]
or eax, dword [0x1415c5c14]
imul rax, rax, 0x2c09a70d
shr rax, 0x3d
or eax, 0xc0a0dc1e
xor eax, 0x579d936d
cmp eax, 0x1789bb94
jae 0x140179793
ud2
mov eax, dword [0x1415c5c18]
add eax, dword [0x1415c5c1c]
mov ecx, eax
xor ecx, 0x395cfb9d
add ecx, eax
and eax, 0xc6a30462
sub ecx, eax
and ecx, 0xae3d99d6
ud2
mov eax, dword [0x1415c5db0]
sub eax, dword [0x1415c5db4]
mov ecx, eax
not ecx
and ecx, 0xcbc70bf9
and eax, 0x3438f406
sub eax, ecx
mov ecx, eax
not ecx
and ecx, 0x7583fdf3
mov edx, eax
and edx, 0xa7c020c
imul edx, ecx
mov ecx, eax
and ecx, 0x7583fdf3
or eax, 0x7583fdf3
imul eax, ecx
add eax, edx
or eax, 0x9bcf1a81
ud2
ud2
mov eax, dword [0x1415c5bf8]
mov ecx, dword [0x1415c5bfc]
xor ecx, eax
not ecx
and ecx, eax
and ecx, 0x5f812882
imul r14, rcx, 0x4e551f3d
shr r14, 0x39
or r14d, 0xf38d5db7
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x65f457dd
jae 0x1401798d0
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call fcn.140219910
add rsp, 0x20
jmp 0x14017986c
mov eax, dword [0x1415c5c00]
add eax, dword [0x1415c5c04]
or eax, 0x799c15
imul rax, rax, 0x4e0bae17
mov rcx, rax
shr rcx, 0x3d
or ecx, 0x39bf8641
bt rax, 0x3d
adc ecx, 0
cmp ecx, 0xece3e748
je 0x1401798d0
nop word cs:[rax + rax]
mov eax, dword [0x1415c5c28]
or eax, dword [0x1415c5c2c]
add eax, 0xf903c752
cmp eax, 0x2fb899b7
jbe 0x140179910
xor eax, eax
xchg byte [rdi], al
nop dword [rax]
mov ecx, dword [0x1415c5ce4]
add ecx, dword [0x1415c5ce0]
mov edx, ecx
not edx
or edx, 0x12840012
or ecx, 0x80809080
and ecx, edx
and ecx, 0x92849092
cmp ecx, 0x86d612f7
je 0x140179930
nop dword [rax]
mov ecx, dword [0x1415c5ce8]
xor ecx, dword [0x1415c5cec]
xor ecx, 0xc8330444
imul rcx, rcx, 0x2fcba71f
shr rcx, 0x3d
not ecx
and ecx, 0xf3d69265
cmp ecx, 0x2385580e
je 0x140179960
cmp al, 2
jne 0x140179a45
mov eax, dword [0x1415c5cf0]
xor edx, edx
div dword [0x1415c5cf4]
mov ecx, eax
and ecx, 0x3331d35
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xb7331d35
mov ecx, eax
xor ecx, 0x2492292
and ecx, eax
and ecx, 0x269b692
cmp ecx, 0x957dfb46
jne 0x1401799df
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
mov rsi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
nop word cs:[rax + rax]
mov eax, dword [0x1415c5cf8]
mov ecx, dword [0x1415c5cfc]
not eax
not ecx
mov edx, eax
or edx, ecx
not edx
and ecx, eax
or ecx, edx
mov ebx, ecx
not ebx
xor ecx, 0x79848fd7
or ebx, 0x79848fd7
and ebx, ecx
mov eax, ebx
and eax, 0x421f82ab
xor eax, 0x421d0220
and ebx, 0x421d0220
or ebx, eax
sub rsp, 0x20
mov rcx, rdi
call rsi
add rsp, 0x20
cmp ebx, 0x2d9e571a
je 0x1401799f0
mov ecx, 0xafa46495
nop word [rax + rax]
mov eax, dword [0x1415c5d00]
xor edx, edx
div dword [0x1415c5d04]
imul rax, rcx
shr rax, 0x3f
add eax, 0xf80b16c3
xor eax, 0xcec09ed4
cmp eax, 0x7e4430c4
ja 0x140179a50
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x68]
mov eax, dword [0x1415c5d08]
xor eax, dword [0x1415c5d0c]
add eax, 0x7ac9b2c6
mov ecx, eax
and ecx, 0xcd126655
or eax, 0xcd126655
add eax, ecx
mov ecx, 0xd7756059
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x6b15ffe7
ja 0x140179b0a
mov eax, dword [0x1415c5d10]
mov ecx, dword [0x1415c5d14]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0x2b7c273c
and eax, 0x9de45705
xor eax, 0x10e04205
mov ecx, dword [0x1415d3954]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x68], r15
cmp eax, 0xf0231d3e
jbe 0x140179b26
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x68], r15
jmp 0x140179ac6
test rsi, rsi
je 0x140179c98
mov eax, dword [0x1415c5d18]
add eax, dword [0x1415c5d1c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1831874a
and ecx, 0xe7ce78b5
imul ecx, edx
mov edx, eax
and edx, 0xe7ce78b5
or eax, 0xe7ce78b5
imul eax, edx
add eax, ecx
add eax, 0x9dfbcba7
imul rax, rax, 0x12d69e77
shr rax, 0x3c
cmp eax, 0x7a97191e
jbe 0x140179b7d
lock dec qword [rsi]
xor ecx, ecx
nop
mov rax, 0xffffffffffffffff
lock xadd qword [rsi], rax
test cl, cl
jne 0x140179b80
mov ecx, dword [0x1415c5d20]
or ecx, dword [0x1415c5d24]
cmp ecx, 0x333c01f1
je 0x140179b90
cmp rax, 1
jne 0x140179c98
mov eax, dword [str.Dk4]
mov ecx, dword [0x1415c5d2c]
add eax, ecx
add eax, 0x12e2612d
or eax, 0x4d1579b
add eax, 0x855dc6b4
cmp eax, 0x43d3a612
jae 0x140179be0
nop word cs:[rax + rax]
mov eax, dword [0x1415c5d30]
or eax, dword [0x1415c5d34]
xor eax, 0x96a3318
and eax, 0xfd6e373e
cmp eax, 0xf3008416
je 0x140179be0
mov eax, dword [0x1415c5d38]
mov ecx, dword [0x1415c5d3c]
mov edx, eax
and edx, ecx
or eax, ecx
lea ecx, [rdx + rax]
add eax, edx
add eax, 0xddd411d5
mov edx, eax
and edx, 0x5a2812bb
xor eax, 0xa5d7ed44
add eax, ecx
add eax, 0xddd411d5
sub eax, edx
add eax, 0x2fd6fb12
cmp eax, 0xa171a7ef
jbe 0x140179c50
sub rsp, 0x20
mov rcx, rsi
call fcn.140124030
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415c5d40]
and eax, dword [0x1415c5d44]
mov ecx, eax
xor ecx, 0xf45ff3bc
and ecx, eax
mov eax, ecx
and eax, 0xaba32337
or ecx, 0xaba32337
lea edi, [rax + rcx]
add edi, 0xd4d83d51
sub rsp, 0x20
mov rcx, rsi
call fcn.140124030
add rsp, 0x20
cmp edi, 0x1fd9da30
jbe 0x140179c50
jmp 0x140179c98
ud2
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ebx, dword [0x1415c5d68]
mov eax, dword [0x1415c5d6c]
mov ecx, eax
not ecx
mov edx, ebx
and edx, ecx
or ecx, ebx
not ecx
imul ecx, edx
mov edx, ebx
and edx, eax
or ebx, eax
imul ebx, edx
add ebx, ecx
xor ebx, 0xdf67e85f
add ebx, 0xbf8eca70
mov eax, ebx
and eax, 0x74402786
add eax, eax
sub ebx, eax
add ebx, 0x74402786
sub rsp, 0x20
call fcn.140246bb0
add rsp, 0x20
cmp ebx, 0x28ac7d8b
jae 0x140179d10
sub rsp, 0x20
call fcn.14021bf10
add rsp, 0x20
jmp 0x140179ca9
mov eax, dword [0x1415c5d70]
xor edx, edx
div dword [0x1415c5d74]
nop
mov eax, dword [0x1415c5d78]
or eax, dword [0x1415c5d7c]
imul eax, eax, 0x9c11ebbc
xor eax, 0x3e81ad11
imul eax, eax, 0x265049ce
cmp eax, 0x3224fa6e
jb 0x140179d20
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x90]
nop
mov eax, dword [0x1415c5d80]
mov ecx, dword [0x1415c5d84]
xor ecx, eax
not ecx
and ecx, eax
add ecx, 0x8e20053a
mov eax, ecx
xor eax, 0x11b3ce6
and ecx, 0x7ee4c319
add ecx, ecx
sub ecx, eax
add ecx, 0x9d06b710
cmp ecx, 0x1093d682
jb 0x140179d60
test rbx, rbx
jne 0x140179e4d
mov eax, dword [0x1415c5d88]
xor eax, dword [0x1415c5d8c]
mov ecx, eax
and ecx, 0x1dd4c1b7
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x1dd4c1b7
and eax, 0x9c304f4f
cmp eax, 0x26297c68
jne 0x140179de0
sub rsp, 0x20
call fcn.14021ba20
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415c5d90]
sub eax, dword [0x1415c5d94]
imul rbx, rax, 0x425e6665
shr rbx, 0x3c
mov eax, ebx
not eax
mov ecx, ebx
and ecx, 3
and eax, 0x250b754
imul eax, ecx
mov ecx, ebx
and ecx, 0xfffffffc
or ebx, 0x250b754
imul ebx, ecx
add ebx, eax
and ebx, 0x125b8d04
sub rsp, 0x20
call fcn.1402470e0
add rsp, 0x20
cmp ebx, 0xa0944a12
ja 0x140179de0
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x90]
lock inc qword [rbx]
jle 0x140179edb
nop word [rax + rax]
mov eax, dword [0x1415c5da0]
mov ecx, eax
not ecx
or ecx, dword [0x1415c5da4]
add ecx, eax
imul eax, ecx, 0x4badbc7d
add eax, 0x4badbc7d
xor eax, 0x5cd9ed79
imul eax, eax, 0x881fc9b9
cmp eax, 0x3283557c
jb 0x140179e60
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140179ea0
test rbx, rbx
je 0x1401791e7
mov eax, dword [0x1415c5db8]
sub eax, dword [0x1415c5dbc]
mov ecx, eax
and ecx, 0x1ab959
xor eax, 0x3ab959
lea eax, [rax + rcx*2]
or eax, 0xffd2f3e4
cmp eax, 0xdc66435b
jb 0x140179f6c
jmp 0x140179f0f
ud2
mov eax, dword [0x1415c5dc0]
mov ecx, dword [0x1415c5dc4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
or ecx, 0x3821a491
add ecx, eax
inc ecx
or ecx, 0x5013680e
add ecx, 0xb8d96a61
mov r15, qword [rbx + 0x28]
mov rax, 0xffffffffffffffff
lock xadd qword [rbx], rax
cmp ecx, 0x3170726a
jbe 0x140179f80
lock dec qword [rbx]
jmp 0x140179f0f
mov ecx, dword [0x1415c5dc8]
mov edx, dword [0x1415c5dcc]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
mov edx, ecx
and edx, 0x140fee83
or ecx, 0x140fee83
add ecx, edx
mov edx, ecx
not edx
and edx, 0xd43ddd3a
mov r8d, ecx
and r8d, 0x2bc222c5
imul r8d, edx
mov edx, ecx
and edx, 0xd43ddd3a
or ecx, 0xd43ddd3a
imul ecx, edx
add ecx, r8d
mov edx, ecx
not edx
and edx, 0x44e353bb
mov r8d, ecx
and r8d, 0xbb1cac44
imul r8d, edx
mov edx, ecx
and edx, 0x44e353ba
or ecx, 0x44e353bb
imul ecx, edx
add ecx, r8d
cmp ecx, 0xebcdd9e7
ja 0x140179f80
nop dword [rax + rax]
mov ecx, dword [0x1415c5dd0]
xor ecx, dword [0x1415c5dd4]
add ecx, 0x44004018
cmp ecx, 0x4005903f
ja 0x14017a010
cmp rax, 1
jne 0x14017a195
mov ecx, dword [0x1415c5dd8]
mov eax, dword [0x1415c5ddc]
mov edx, ecx
xor edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
imul rcx, rax, 0x30a9ded1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
mov ecx, eax
shr ecx, 0x1d
shr eax, 0x1c
and eax, 0xfffffffa
xor ecx, 0x81f040d
add eax, ecx
add eax, 0x1447704b
cmp eax, 0xfe75c216
ja 0x14017a09f
mov eax, dword [0x1415c5de0]
or eax, dword [0x1415c5de4]
or eax, 0x601ce8ff
imul eax, eax, 0xdfd5ff4d
add eax, 0x6976a3e2
cmp eax, 0x4040e55f
jae 0x14017a0a1
jmp 0x14017a07c
mov eax, dword [0x1415c5de8]
mov ecx, dword [0x1415c5dec]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x36dad915
and ecx, 0x492526ea
add ecx, ecx
sub ecx, eax
mov eax, ecx
and eax, 0xd9b3f2fd
or ecx, 0xd9b3f2fd
add ecx, eax
imul eax, ecx, 0xed48d3ae
cmp eax, 0x133ca540
jbe 0x14017a100
sub rsp, 0x20
mov rcx, rbx
call fcn.14013fcd0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415c5df0]
mov ecx, dword [0x1415c5df4]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
lea r12d, [rax + rcx]
add r12d, 0xdb6060
mov eax, r12d
xor eax, 0x1634683d
or r12d, 0xe9cb97c2
and r12d, eax
add r12d, 0x8b91c01a
sub rsp, 0x20
mov rcx, rbx
call fcn.14021b880
add rsp, 0x20
cmp r12d, 0x42c1229c
ja 0x14017a100
nop word cs:[rax + rax]
mov eax, dword [0x1415c5df8]
or eax, dword [0x1415c5dfc]
mov ecx, eax
and ecx, 0xe09ba02
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xc09e130c
mov ecx, eax
and ecx, 0x3feae1ba
or eax, 0x3feae1ba
add eax, ecx
cmp eax, 0xe748d308
ja 0x14017a160
mov eax, dword [0x1415c5e00]
mov ecx, dword [0x1415c5e04]
not eax
not ecx
mov edx, eax
or edx, ecx
not edx
and ecx, eax
or ecx, edx
mov eax, ecx
not eax
xor ecx, 0xc5d6467d
add ecx, eax
and eax, 0xc5d6467d
sub ecx, eax
or ecx, 0x3173b80d
add ecx, 0xfda05a2a
cmp ecx, 0xc238db13
jbe 0x14017a1e0
mov rax, qword [0x1415d38f0]
nop dword [rax]
mov eax, dword [0x1415c5e08]
xor edx, edx
div dword [0x1415c5e0c]
add eax, 0x4a1faf1a
xor eax, 0x42240802
and eax, 0xe66d3836
mov rcx, qword [0x1415d38f0]
cmp eax, 0xff3965b4
ja 0x14017a1e0
cmp r15, rcx
jne 0x14017a28b
mov eax, dword [0x1415c5e28]
xor edx, edx
div dword [0x1415c5e2c]
nop
mov eax, dword [0x1415c5e30]
xor eax, dword [0x1415c5e34]
not eax
or eax, 0xb657eab7
and eax, 0xb657faf7
add eax, 0x6c0ea03e
jae 0x14017a220
mov ebx, dword [0x1415d38f8]
nop word cs:[rax + rax]
mov eax, dword [0x1415c5e38]
add eax, dword [0x1415c5e3c]
mov ecx, eax
xor ecx, 0x10680413
xor eax, 0x88937be4
or ecx, 0xef86c8ec
and ecx, eax
xor ecx, 0xb0a5bd80
cmp ecx, 0x81f1f504
jb 0x14017a250
cmp ebx, 0xffffffff
je 0x14017a2e0
inc ebx
jmp 0x14017a50a
mov eax, dword [0x1415c5e10]
and eax, dword [0x1415c5e14]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2430519e
and ecx, 0xdbcfae61
imul ecx, edx
mov edx, eax
and edx, 0xdbcfae61
or eax, 0xdbcfae61
imul eax, edx
add eax, ecx
imul rax, rax, 0x1a374233
shr rax, 0x3c
not eax
and eax, 0x66e76235
add eax, 0xd3d3ccb1
jae 0x14017a3d7
jmp 0x14017a393
mov eax, dword [0x1415c5e58]
mov ecx, dword [0x1415c5e5c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
add eax, 0x6ad683b0
mov ecx, 0xa42e3327
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x973f6b1b
jne 0x14017a320
ud2
mov eax, dword [0x1415c5e60]
sub eax, dword [str.WJ_ro]
imul rax, rax, 0x2217762b
shr rax, 0x3d
lea ecx, [rax + 0x8da3042]
not eax
and eax, 0x4000c905
imul eax, eax, 0xb5000630
imul ecx, ecx, 0xfddaff77
add ecx, eax
ud2
mov eax, dword [0x1415c5e18]
add eax, dword [0x1415c5e1c]
mov ecx, eax
xor ecx, 0xc69c320a
and ecx, eax
add ecx, 0x10fc9606
mov eax, ecx
xor eax, 0x64cc0707
and ecx, 0x1b33f8f8
add ecx, ecx
sub ecx, eax
mov dl, 1
xor eax, eax
lock cmpxchg byte [0x1415d38fc], dl
sete al
cmp ecx, 0xf2f1f0ae
jbe 0x14017a3e5
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x1415d38fc], cl
jmp 0x14017a393
mov ecx, 0xcadca5bb
nop word [rax + rax]
mov edx, dword [0x1415c5e20]
mov r8d, dword [0x1415c5e24]
mov r9d, edx
xor r9d, r8d
not r8d
and r8d, edx
add r8d, r8d
sub r8d, r9d
imul r8, rcx
shr r8, 0x3f
imul edx, r8d, 0x2cb2edf5
and edx, 0x144c0f50
cmp edx, 0x9004b921
je 0x14017a3f0
test al, al
jne 0x14017a482
sub rsp, 0x20
lea rcx, [0x1415d38fc]
call fcn.14021b760
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415c5e40]
xor edx, edx
div dword [0x1415c5e44]
add eax, 0x1b63c243
mov ecx, eax
and ecx, 0xed6c23b0
and eax, 0x86c0300
add eax, eax
sub ecx, eax
add ecx, 0x88ff970e
cmp ecx, 0xb42b18a
jb 0x14017a450
mov eax, dword [0x1415c5e48]
mov ecx, dword [0x1415c5e4c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and ecx, 0xe5f7ef5a
and eax, 0x1a0810a5
sub eax, ecx
mov ecx, eax
and ecx, 0xf9ab4b41
or eax, 0xf9ab4b41
add eax, ecx
imul eax, eax, 0x80d19cc1
cmp eax, 0x13d14f7a
jb 0x14017a4fc
mov eax, dword [0x1415c5e50]
xor edx, edx
div dword [0x1415c5e54]
mov ecx, eax
xor ecx, 0xaab72d32
add ecx, eax
and eax, 0x5548d2cd
sub ecx, eax
mov eax, ecx
xor eax, 0x436a1319
and eax, ecx
or eax, 0x9c95e4a0
mov qword [0x1415d38f0], r15
cmp eax, 0x2aeb5ef4
ja 0x14017a505
mov qword [0x1415d38f0], r15
jmp 0x14017a4c1
mov ebx, 1
mov eax, dword [0x1415c5e70]
mov ecx, dword [0x1415c5e74]
mov edx, eax
or edx, ecx
not edx
not eax
not ecx
and ecx, eax
or ecx, edx
not ecx
mov eax, ecx
and eax, 0x176a4b7b
add eax, eax
neg eax
add eax, ecx
add eax, 0x176a4b7b
mov ecx, eax
xor ecx, 0xc6b38b0d
and eax, 0x394c74f2
add eax, eax
sub eax, ecx
mov ecx, eax
and ecx, 0x77d2ccd5
add ecx, ecx
sub eax, ecx
cmp eax, 0xee3b7516
je 0x14017a5cc
mov eax, dword [0x1415c5e78]
and eax, dword [0x1415c5e7c]
mov ecx, 0x8bfccbb7
imul rcx, rax
shr rcx, 0x3f
imul r15d, ecx, 0xa32280ae
mov eax, r15d
xor eax, 0x95cbc962
or r15d, 0x6a34369c
and r15d, eax
mov dword [0x1415d38f8], ebx
lea rax, [0x1415d38f0]
mov qword [r14], rax
mov qword [rdi], r14
mov qword [rdi + 8], 0
sub rsp, 0x20
lea rdx, [0x14159e968]
mov rcx, rdi
mov r8, rsi
call fcn.14021ae60
add rsp, 0x20
cmp r15d, 0x25b0ee4e
jbe 0x14017a606
mov dword [0x1415d38f8], ebx
lea rax, [0x1415d38f0]
mov qword [r14], rax
mov qword [rdi], r14
mov qword [rdi + 8], 0
sub rsp, 0x20
lea rdx, [0x14159e968]
mov rcx, rdi
mov r8, rsi
call fcn.1400bc7e0
add rsp, 0x20
jmp 0x14017a55c
mov rbx, qword [rdi + 8]
test al, al
je 0x14017a6b1
nop word cs:[rax + rax]
mov eax, dword [0x1415c5f00]
and eax, dword [0x1415c5f04]
mov ecx, eax
not ecx
and ecx, 0x351e02c
mov edx, eax
and edx, 0xfcae1fd3
imul edx, ecx
mov ecx, eax
and ecx, 0x351e02c
or eax, 0x351e02c
imul eax, ecx
add eax, edx
add eax, 0x5df2c27a
xor eax, 0xb6b9ddc0
cmp eax, 0x6da0befd
jb 0x14017a620
test rbx, rbx
jne 0x14017abb9
mov eax, dword [0x1415c5f08]
mov ecx, dword [0x1415c5f0c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
and eax, 0x860eb94b
xor eax, 0xe0b72318
and ecx, 0x6089843
add ecx, ecx
sub ecx, eax
imul eax, ecx, 0xdf41ff69
cmp eax, 0x35da40d9
je 0x14017ab31
jmp 0x14017aaef
test rbx, rbx
je 0x14017aae8
nop word [rax + rax]
mov eax, dword [0x1415c5e80]
xor edx, edx
div dword [0x1415c5e84]
mov ecx, eax
xor ecx, 0x594b3fdf
xor eax, 0x391475c9
add eax, ecx
and ecx, 0x1fa0b5e9
sub eax, ecx
and eax, 0x3e9c3011
cmp eax, 0x945fb229
ja 0x14017a6c0
nop word cs:[rax + rax]
mov eax, dword [0x1415c5e88]
xor edx, edx
div dword [0x1415c5e8c]
add eax, 0xe6d6f41a
mov ecx, eax
and ecx, 0xc743523e
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x8143003e
and edx, 0x4ebc7200
imul edx, r8d
and eax, 0x46005200
or ecx, 0x4ebc7200
imul ecx, eax
add ecx, edx
cmp ecx, 0x21706b96
je 0x14017a700
mov ecx, ebx
and ecx, 3
mov eax, dword [0x1415c5e90]
xor edx, edx
div dword [0x1415c5e94]
and eax, 0x3fffffff
xor eax, 0x17a63349
add eax, 0xd5b4172a
and eax, 0x36656e40
cmp eax, 0xe8d2162d
je 0x14017a750
cmp rcx, 2
jg 0x14017aa90
cmp ecx, 1
jne 0x14017aae8
lea rsi, [rbx - 1]
mov eax, dword [0x1415c5ea8]
and eax, dword [0x1415c5eac]
or eax, 0x7259c76f
cmp eax, 0x85ebb8a5
je 0x14017a790
mov rdi, qword [rbx - 1]
mov rbx, qword [rbx + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14017a801
sub rsp, 0x20
mov rcx, rdi
call rax
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415c5eb0]
sub eax, dword [0x1415c5eb4]
or eax, 0x725f4e1f
xor eax, 0xc4c1f1e0
imul rcx, rax, 0x10e78e11
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
cmp eax, 0x6756d6ea
ja 0x14017a7d0
cmp qword [rbx + 8], 0
je 0x14017aa56
mov rax, qword [rbx + 0x10]
mov ecx, 0x8dbcaf59
nop word cs:[rax + rax]
mov edx, dword [0x1415c5eb8]
mov r8d, dword [0x1415c5ebc]
not edx
not r8d
or r8d, edx
not r8d
mov edx, r8d
and edx, 0x8fa8de6
and r8d, 0x8922
add r8d, r8d
sub edx, r8d
add edx, 0x6004db2b
imul rdx, rcx
shr rdx, 0x3d
cmp edx, 0x63ba0942
ja 0x14017a820
nop word cs:[rax + rax]
mov ecx, dword [0x1415c5ec0]
mov edx, dword [0x1415c5ec4]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
or ecx, 0x319ed4e6
mov edx, ecx
and edx, 0x5ece1508
add edx, edx
neg edx
add ecx, edx
add ecx, 0xdece1508
xor ecx, 0x7f965931
cmp ecx, 0xfb512013
ja 0x14017a870
cmp rax, 0x11
jb 0x14017a98e
mov eax, dword [0x1415c5ec8]
xor edx, edx
div dword [0x1415c5ecc]
nop word cs:[rax + rax]
mov ecx, dword [0x1415c5ed0]
mov eax, dword [0x1415c5ed4]
mov edx, ecx
or edx, eax
not ecx
not eax
and eax, ecx
not eax
and eax, edx
add eax, 0x53318280
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x15eb4f
and ecx, 0xffea14b0
imul ecx, edx
mov edx, eax
and edx, 0xffea14b0
or eax, 0xffea14b0
imul eax, edx
add eax, ecx
imul rax, rax, 0x7206105
shr rax, 0x37
cmp eax, 0xcbb3cb7e
ja 0x14017a8f0
mov rdi, qword [rdi - 8]
nop dword [rax]
mov eax, dword [0x1415c5ed8]
mov ecx, dword [0x1415c5edc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0x30483fbe
imul eax, eax, 0x53d1fe76
cmp eax, 0xd79130b4
jb 0x14017a950
mov eax, dword [0x1415c5ee0]
mov ecx, dword [0x1415c5ee4]
mov edx, eax
not edx
or edx, ecx
not ecx
or ecx, eax
and ecx, edx
mov eax, ecx
not eax
mov edx, eax
and edx, 0x1436a1da
and ecx, 0x6bc95e25
imul ecx, edx
mov edx, eax
and edx, 0x6bc95e25
or eax, 0x6bc95e25
imul eax, edx
add eax, ecx
not eax
or eax, 0x8abf2abf
xor eax, 0x848fd8e5
cmp eax, 0x771c1098
jbe 0x14017a9fa
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x1415c5eec]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415c5ee8]
xor ecx, eax
add ecx, 0x7156295a
mov r15d, ecx
xor r15d, 0x923fa835
and r15d, ecx
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r15d, 0x6b826353
ja 0x14017aa10
mov eax, dword [0x1415c5ef0]
xor eax, dword [0x1415c5ef4]
add eax, 0x774118cc
mov ecx, 0xd31d9dd5
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xfaa618fd
ja 0x14017ab9b
jmp 0x14017ab75
mov eax, dword [0x1415c5e98]
xor eax, dword [0x1415c5e9c]
or eax, 0xa2082
xor eax, 0x40042402
or eax, 0x3d719a7d
cmp eax, 0xb13c1d6a
je 0x14017aa90
xor ebx, ebx
nop word cs:[rax + rax]
mov eax, dword [0x1415c5ea0]
or eax, dword [0x1415c5ea4]
add eax, 0xba206265
imul rax, rax, 0x6e8aed23
shr rax, 0x3c
cmp eax, 0x28073e56
je 0x14017aac0
jmp 0x14017abb9
xor ebx, ebx
jmp 0x14017abb9
mov ecx, dword [0x1415c5f10]
mov eax, dword [0x1415c5f14]
not eax
mov edx, ecx
or edx, eax
and eax, ecx
not eax
and eax, edx
not eax
imul rcx, rax, 0x1685506d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
mov ecx, eax
xor ecx, 0x89f1068b
lea eax, [rcx + rax*2]
ud2
ud2
mov eax, dword [0x1415c5ef8]
xor edx, edx
div dword [0x1415c5efc]
xor eax, 0x16004d0
or eax, 0xf69ff92f
mov rcx, qword [0x1415d3918]
cmp eax, 0x9fc92a09
jae 0x14017aba4
mov rax, qword [0x1415d3918]
jmp 0x14017ab75
sub rsp, 0x20
xor ebx, ebx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415c5f20]
or eax, dword [0x1415c5f24]
add eax, 0xf195732d
or eax, 0x9a371f7c
cmp eax, 0x9b9d7b85
jb 0x14017ac16
mov eax, dword [0x1415c5f28]
mov ecx, dword [str.Wr_Y_]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0xc1ff6792
add ecx, 0xca8cb89
mov edx, 0xd6f46b9b
imul rdx, rcx
shr rdx, 0x3e
mov rsi, qword [r14]
mov eax, dword [rsi + 8]
dec eax
mov dword [rsi + 8], eax
cmp edx, 0xcaca590
jne 0x14017ac28
mov rax, qword [r14]
mov ecx, dword [rax + 8]
mov edx, ecx
not edx
lea ecx, [rdx + rcx*2]
mov dword [rax + 8], ecx
jmp 0x14017abd6
test eax, eax
jne 0x14017ae40
mov eax, dword [0x1415c5f30]
mov ecx, dword [str._eE_]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
and ecx, 0x76842a64
mov edx, eax
and edx, 0x897bd59b
imul edx, ecx
mov ecx, eax
and ecx, 0x76842a64
or eax, 0x76842a64
imul eax, ecx
add eax, edx
add eax, 0x5f38a900
mov ecx, eax
and ecx, 0xce23600
xor eax, 0x8ce23601
lea eax, [rax + rcx*2]
cmp eax, 0xb3131dd9
je 0x14017acd0
mov eax, dword [0x1415c5f38]
xor ecx, ecx
xor edx, edx
div dword [0x1415c5f3c]
mov edx, eax
xor edx, 0x43085bd8
add edx, eax
and eax, 0xbcf7a427
sub edx, eax
mov eax, edx
add eax, 0x5d644ac0
not eax
or eax, 0x3f9975cf
add eax, edx
add eax, 0x5d644ac0
mov qword [rsi], 0
xchg byte [rsi + 0xc], cl
cmp eax, 0x8e2c06d3
jne 0x14017acde
mov qword [rsi], 0
xor eax, eax
xchg byte [rsi + 0xc], al
jmp 0x14017ac89
add rsi, 0xc
nop word cs:[rax + rax]
mov eax, dword [0x1415c5f40]
imul eax, dword [0x1415c5f44]
and eax, 0xc0201019
add eax, 0x90811c7a
cmp eax, 0xc2772784
ja 0x14017acf0
nop
mov eax, dword [0x1415c5f48]
sub eax, dword [0x1415c5f4c]
imul rax, rax, 0x34987363
shr rax, 0x3b
or eax, 0x245020
and eax, 0x245024
cmp eax, 0xbe9a8360
ja 0x14017ad10
cmp cl, 2
jne 0x14017ae40
mov eax, dword [0x1415c5f50]
imul eax, dword [0x1415c5f54]
add eax, 0x35d103e5
mov ecx, eax
not ecx
and ecx, 0xe511f7ea
mov edx, eax
and edx, 0x1aee0815
imul edx, ecx
mov ecx, eax
and ecx, 0xe511f7ea
or eax, 0xe511f7ea
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x493f503a
and ecx, 0xb6c0afc4
imul ecx, edx
mov edx, eax
and edx, 0xb6c0afc4
or eax, 0xb6c0afc4
imul eax, edx
add eax, ecx
cmp eax, 0x90e3aec7
jb 0x14017adf4
mov eax, dword [0x1415c5f58]
add eax, dword [0x1415c5f5c]
mov ecx, eax
xor ecx, 0xd99d9cb1
xor eax, 0x2400006
or eax, 0xf4b667d8
lea edi, [rcx + rax]
inc edi
mov eax, edi
xor eax, 0xadfdd78c
and edi, 0x52022873
add edi, edi
sub edi, eax
sub rsp, 0x20
mov rcx, rsi
call fcn.14021b780
add rsp, 0x20
cmp edi, 0x2b5a1d28
jae 0x14017ae10
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
jmp 0x14017ada8
mov eax, dword [0x1415c5f60]
sub eax, dword [0x1415c5f64]
mov ecx, eax
not ecx
or ecx, 0xe141044e
and ecx, 0xed495c4e
and eax, 0x208290
sub eax, ecx
xor eax, 0xedee1437
cmp eax, 0xab562fd
jb 0x14017ae10
nop
mov eax, dword [0x1415c5f68]
sub eax, dword [0x1415c5f6c]
add eax, 0x72190214
or eax, 0x5bff623f
imul rax, rax, 0x3d62f4b
shr rax, 0x37
cmp eax, 0x3c491847
ja 0x14017ae40
nop dword [rax + rax]
mov eax, dword [0x1415c5f70]
mov ecx, dword [0x1415c5f74]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0x6fbcf5bb
and eax, 0x2db52131
cmp eax, 0x43ed53fc
ja 0x14017ae70
nop word [rax + rax]
mov eax, dword [0x1415c5f78]
mov ecx, dword [0x1415c5f7c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
xor ecx, 0xf3213658
or eax, 0xcdec9a7
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0xd002629f
mov edx, eax
and edx, 0x2ffd9d60
imul edx, ecx
mov ecx, eax
and ecx, 0xd002629f
or eax, 0xd002629f
imul eax, ecx
add eax, edx
imul eax, eax, 0x65deb2d0
cmp eax, 0x86170578
jb 0x14017aea0
test rbx, rbx
je 0x140179c98
jmp 0x140179c96