Function at 0x1401b2290
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x78
lea rbp, [rsp + 0x70]
movaps xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x11], dl
mov qword [rbp - 0x20], rcx
mov eax, dword [0x1415a4a68]
xor eax, dword [0x1415a4a6c]
mov ecx, eax
not ecx
and ecx, 0x293778b8
mov edx, eax
and edx, 0x56c88747
imul edx, ecx
mov ecx, eax
and ecx, 0x293778b8
or eax, 0x293778b8
imul eax, ecx
add eax, edx
xor eax, 0x40254d10
or eax, 0x8fca82c2
cmp eax, 0x1330b149
je 0x1401b2347
mov eax, dword [str.q_tz]
xor edx, edx
div dword [0x1415a4a74]
imul eax, eax, 0xfe7c198d
mov ecx, eax
xor ecx, 0x69c2b82
add ecx, eax
and eax, 0x163d47d
sub ecx, eax
and ecx, 0x6bbf03e
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r13, rsp
cmp ecx, 0x87f26251
jbe 0x1401b2363
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
jmp 0x1401b22f4
mov qword [rbp - 0x58], rdx
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r11, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov rdi, rsp
mov eax, dword [0x1415a4a78]
xor edx, edx
div dword [0x1415a4a7c]
add eax, 0x295373e5
xor eax, 0x53c05122
and eax, 0x57e75f2f
cmp eax, 0x3180637a
jne 0x1401b241f
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rax, qword [rbp - 0x20]
lea rdx, [rax + 0x90]
nop word [rax + rax]
mov eax, dword [0x1415a4a80]
or eax, dword [0x1415a4a84]
imul ecx, eax, 0x1e6a39dc
and ecx, 0x45895200
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r15, rsp
cmp ecx, 0x4df1aa9e
ja 0x1401b2430
mov rax, qword [rbp - 0x20]
cmp qword [rax + 0x90], 0
mov qword [rbp - 0x28], rdx
jne 0x1401b2a90
mov qword [rbp - 0x68], r8
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401b24b0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x38], r11
mov qword [rbp - 0x60], r10
mov qword [rbp - 0x50], r9
mov eax, dword [0x1415a4a88]
mov ecx, dword [0x1415a4a8c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
xor ecx, 0x12ba416c
and eax, 0x6d45be93
add eax, eax
sub eax, ecx
imul eax, eax, 0xa6867cdd
not eax
or eax, 0x20d83c3d
add eax, 0xd28075fc
jae 0x1401b2568
mov eax, dword [0x1415a4a90]
mov ecx, dword [0x1415a4a94]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xa31c3bc0
mov ecx, eax
and ecx, 0x11c64087
xor eax, 0x51c64087
lea eax, [rax + rcx*2]
or eax, 0x8ead6cd8
mov qword [rbx], 0
cmp eax, 0x5d844cf2
jae 0x1401b2571
mov qword [rbx], 0
jmp 0x1401b2515
mov eax, dword [0x1415a4a98]
mov ecx, dword [0x1415a4a9c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul eax, eax, 0x54c2798f
xor eax, 0x2e8602d6
imul rax, rax, 0x4b79442b
shr rax, 0x3e
cmp eax, 0xc9b893dd
ja 0x1401b260e
mov eax, dword [0x1415a4aa0]
xor edx, edx
div dword [0x1415a4aa4]
mov edi, eax
xor edi, 0xdd1b9ae3
and edi, eax
mov eax, edi
not eax
and eax, 0x5756cae9
mov ecx, edi
and ecx, 0xa8a93516
imul ecx, eax
mov eax, edi
and eax, 0x5756cae9
or edi, 0x5756cae9
imul edi, eax
add edi, ecx
mov eax, edi
xor eax, 0x6204c571
or edi, 0x9dfb3a8e
and edi, eax
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, rbx
call qword [sym.imp.pdh.dll_PdhOpenQueryA]
add rsp, 0x20
cmp edi, 0xdd689c99
jbe 0x1401b2624
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, rbx
call fcn.14020d590
add rsp, 0x20
jmp 0x1401b25a4
mov r10d, eax
test eax, eax
je 0x1401b2637
xor r9d, r9d
mov r13, qword [rbp - 0x20]
jmp 0x1401b2962
mov rbx, qword [rbx]
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x70]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a4aa8]
mov edx, dword [0x1415a4aac]
not ecx
not edx
or edx, ecx
xor edx, 0x7624061a
imul ecx, edx, 0x264b76c6
cmp ecx, 0x3f21cbe9
je 0x1401b2660
test al, 1
mov dword [rbp - 0x30], r10d
je 0x1401b2787
mov r13, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x1415a4ac8]
sub eax, dword [0x1415a4acc]
imul rax, rax, 0x5e4a0b87
shr rax, 0x3e
or eax, 0xd76da182
cmp eax, 0x79622826
jb 0x1401b26a0
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x78]
nop dword [rax]
mov eax, dword [0x1415a4ad0]
and eax, dword [0x1415a4ad4]
add eax, 0x2639cd26
mov edx, eax
not edx
and edx, 0x73f740f0
mov r8d, eax
and r8d, 0x8c08bf0f
imul r8d, edx
mov edx, eax
and edx, 0x73f740f0
or eax, 0x73f740f0
imul eax, edx
add eax, r8d
imul eax, eax, 0xd55b7e47
cmp eax, 0x56cf095e
ja 0x1401b26e0
mov eax, dword [0x1415acbd4]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov r8, qword [rax + 0x80]
nop word cs:[rax + rax]
mov eax, dword [str.T._fM]
mov edx, dword [0x1415a4adc]
xor edx, eax
not edx
and edx, eax
add edx, 0x907a18b4
and edx, 0x93b12099
mov eax, edx
not eax
or eax, 0xede34177
add eax, edx
inc eax
cmp eax, 0x3e510768
jb 0x1401b2750
jmp 0x1401b286a
mov eax, 0xa857d6e9
nop dword [rax]
mov ecx, dword [0x1415a4ab0]
mov edx, dword [0x1415a4ab4]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xb17ab880
cmp ecx, 0x8d7967a7
jb 0x1401b2790
mov eax, dword [str.X_n_W_v]
xor edx, edx
div dword [0x1415a4abc]
nop word cs:[rax + rax]
mov eax, dword [0x1415a4ac0]
mov ecx, dword [0x1415a4ac4]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
xor eax, 0xf2b3950e
add eax, ecx
and ecx, 0xd4c6af1
sub eax, ecx
add eax, 0xaa145c7e
cmp eax, 0xc5d743f8
ja 0x1401b27f0
xorps xmm0, xmm0
movups xmmword [r13], xmm0
sub rsp, 0x20
mov edx, 0x10
mov rcx, r13
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
mov rcx, qword [r13]
mov r8, qword [r13 + 8]
mov eax, dword [0x1415acbd4]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov byte [rax + 0x70], 1
mov qword [rax + 0x80], r8
mov r13, qword [rbp - 0x20]
mov eax, dword [0x1415a4ae0]
sub eax, dword [0x1415a4ae4]
imul rax, rax, 0x12559931
shr rax, 0x3b
or eax, 0x8e3c2c65
imul rax, rax, 0x4f1084e7
shr rax, 0x3d
cmp eax, 0x2afc81b8
jbe 0x1401b28c8
movabs rax, 0x343ac14d1400711c
mov rdx, rcx
sub rdx, rax
add rax, rdx
inc rax
mov edx, dword [0x1415acbd4]
mov r9, qword gs:[0x58]
mov rdx, qword [r9 + rdx*8]
mov qword [rdx + 0x78], rax
mov rax, rcx
xor rax, 1
lea r9, [0x141578f40]
nop word cs:[rax + rax]
mov edx, dword [0x1415a4ae8]
mov r10d, dword [0x1415a4aec]
mov r11d, r10d
not r11d
mov edi, edx
and edi, r11d
or r11d, edx
not r11d
imul r11d, edi
mov edi, edx
and edi, r10d
or edx, r10d
imul edx, edi
add edx, r11d
mov r10d, edx
xor r10d, 0xed6b2696
and r10d, edx
imul rdx, r10, 0x11ac4c53
shr rdx, 0x3b
not edx
and edx, 0x215ac22f
mov r10d, ecx
and r10d, 1
lea r10, [rax + r10*2]
mov r11d, dword [0x1415acbd4]
mov rdi, qword gs:[0x58]
mov r11, qword [rdi + r11*8]
mov qword [r11 + 0x78], r10
cmp edx, 0x7e994ec
je 0x1401b28e0
mov r10d, dword [rbp - 0x30]
mov eax, dword [0x1415a4af0]
xor edx, edx
div dword [0x1415a4af4]
add eax, 0x8cb41108
mov edx, eax
and edx, 0x9ece3cf3
or eax, 0x9ece3cf3
add eax, edx
add eax, 0x9e8a5aa8
cmp eax, 0x2327f8f
jae 0x1401b29cd
mov qword [r13 + 0x90], r9
xorps xmm0, xmm0
movups xmmword [r13 + 0x98], xmm0
mov qword [r13 + 0xa8], 0
mov qword [r13 + 0xb0], rcx
mov qword [r13 + 0xb8], r8
mov qword [r13 + 0xc0], rbx
mov qword [r13 + 0xc8], 0
xorps xmm0, xmm0
mov eax, dword [0x1415a4af8]
mov edx, dword [0x1415a4afc]
add eax, edx
add eax, 0x9ace8a5e
xor eax, 0x3f68315e
imul rax, rax, 0x1c8ef1bd
shr rax, 0x38
mov qword [r13 + 0x90], r9
movups xmmword [r13 + 0x98], xmm0
mov qword [r13 + 0xa8], 0
mov qword [r13 + 0xb0], rcx
mov qword [r13 + 0xb8], r8
mov qword [r13 + 0xc0], rbx
mov qword [r13 + 0xc8], 0
cmp eax, 0x29f4719e
ja 0x1401b29d0
test r10d, r10d
jne 0x1401b2a6c
mov eax, dword [0x1415a4b00]
add eax, dword [0x1415a4b04]
mov ecx, eax
xor ecx, 0x81445200
and ecx, eax
xor ecx, 0x91041002
or ecx, 0x269badf9
cmp ecx, 0xaa908270
jne 0x1401b336b
jmp 0x1401b33b5
mov rdx, qword [rbp - 0x28]
mov rax, qword [rdx]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1401b2a80
test rax, rax
je 0x1401b38d0
nop dword [rax]
mov eax, dword [0x1415a4b70]
mov ecx, dword [0x1415a4b74]
xor ecx, eax
not ecx
and ecx, eax
imul rax, rcx, 0x61410e09
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1f
or ecx, 0xb8a7c2fc
imul rax, rcx, 0x4b7c36b7
shr rax, 0x3d
cmp eax, 0xa72877ef
ja 0x1401b2a90
mov r15, qword [rbp - 0x20]
mov rdi, qword [r15 + 0xc0]
xor eax, eax
test al, al
movzx r13d, byte [rbp - 0x11]
je 0x1401b2af4
sub rsp, 0x20
mov rcx, rdi
call fcn.14020d5b0
add rsp, 0x20
mov esi, 0xa048b92f
mov rbx, qword [sym.imp.pdh.dll_PdhCollectQueryData]
mov r14d, dword [0x1415a4b78]
mov eax, dword [0x1415a4b7c]
mov ecx, r14d
and ecx, eax
or r14d, eax
not r14d
or r14d, ecx
not r14d
imul r14, rsi
shr r14, 0x3f
add r14d, 0xddb8e511
sub rsp, 0x20
mov rcx, rdi
call rbx
add rsp, 0x20
cmp r14d, 0x7703d2d1
jb 0x1401b2b00
movabs rbx, 0x8000000000000000
cmp qword [r15 + 0x18], rbx
je 0x1401b2cbf
nop word [rax + rax]
mov eax, dword [0x1415a4b88]
mov ecx, dword [0x1415a4b8c]
not eax
not ecx
or ecx, eax
not ecx
and ecx, 0x59b84a3f
add ecx, 0x1c399d4b
or ecx, 0x76101613
cmp ecx, 0xfaa53b28
je 0x1401b2b60
mov rdx, qword [r15 + 0x20]
mov r8, qword [r15 + 0x28]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
call fcn.1401df3e0
add rsp, 0x20
mov ecx, eax
nop dword [rax]
mov eax, dword [0x1415a4b90]
xor edx, edx
div dword [0x1415a4b94]
xor eax, 0xb32a16a4
add eax, 0x63e80fe8
or eax, 0x360fc336
cmp eax, 0x10d99926
jb 0x1401b2bb0
test ecx, ecx
je 0x1401b3308
movss xmm1, dword [0x14024a280]
subss xmm1, xmm0
nop dword [rax + rax]
mov eax, dword [0x1415a4ba8]
mov ecx, dword [0x1415a4bac]
mov r8d, 0x5691e3b
sub r8d, eax
sub r8d, ecx
add eax, ecx
add eax, 0xfa96e1c4
and r8d, 0xafd947c1
and eax, 0x5026b83e
sub eax, r8d
or eax, 0x58af3d48
cmp eax, 0x70d5252f
ja 0x1401b2bf0
mov eax, dword [0x1415a4bb0]
add eax, dword [0x1415a4bb4]
mov ecx, eax
xor ecx, 0x9743460d
and ecx, eax
mov eax, 0xe66b5091
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xac2ee523
jbe 0x1401b2c5a
movss dword [r15 + 0x30], xmm1
mov eax, 0xd27e11ef
nop
mov ecx, dword [str.n_t__a]
mov edx, dword [0x1415a4bbc]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
mov edx, ecx
xor edx, 0x59c32b62
add edx, ecx
and ecx, 0xa63cd49d
sub edx, ecx
imul rdx, rax
shr rdx, 0x3b
or edx, 0x3e8c6fee
movss dword [r15 + 0x30], xmm1
cmp edx, 0xf02796d1
je 0x1401b2c60
mov eax, dword [0x1415a4bc0]
or eax, dword [0x1415a4bc4]
mov ecx, eax
xor ecx, 0x1054309
xor eax, 0x141a8010
and eax, 0x749a8c74
and ecx, 0x8b65738b
add eax, ecx
add eax, 0xc878c2a7
cmp eax, 0xfca7ab96
jbe 0x1401b2d10
sub rsp, 0x20
mov rcx, r15
mov edx, r13d
call fcn.14020d550
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415a4bc8]
xor eax, dword [0x1415a4bcc]
xor eax, 0x960a6d6
add eax, 0xf7f118cc
imul rsi, rax, 0x55584583
shr rsi, 0x3e
sub rsp, 0x20
mov rcx, r15
mov edx, r13d
call fcn.14020d550
add rsp, 0x20
cmp esi, 0x6583dc86
ja 0x1401b2d10
mov rsi, qword [r15 + 8]
mov eax, 0xa27c8edb
nop word cs:[rax + rax]
mov ecx, dword [0x1415a4bd0]
sub ecx, dword [0x1415a4bd4]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x26ac199d
and edx, 0xd953e662
imul edx, r8d
mov r8d, ecx
and r8d, 0xd953e662
or ecx, 0xd953e662
imul ecx, r8d
add ecx, edx
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x7076160b
cmp ecx, 0xef0a2791
ja 0x1401b2d60
mov rdi, qword [r15 + 0x10]
imul r14, rdi, 0x70
add r14, rsi
test rdi, rdi
je 0x1401b2fd0
xor r15d, r15d
movss xmm6, dword [0x14024a280]
mov r12, rsi
nop word cs:[rax + rax]
mov eax, dword [0x1415a4be0]
xor edx, edx
div dword [0x1415a4be4]
nop
mov eax, dword [0x1415a4be8]
add eax, dword [0x1415a4bec]
mov ecx, eax
and ecx, 0x9b9b6031
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x10114011
and edx, 0xcfeeb36a
imul edx, r8d
and eax, 0x8b8a2020
or ecx, 0xcfeeb36a
imul ecx, eax
add ecx, edx
and ecx, 0xc4fab1c4
cmp ecx, 0x3603e6fd
je 0x1401b2df0
cmp qword [r12 + 0x48], rbx
je 0x1401b2fa1
nop word cs:[rax + rax]
mov eax, dword [0x1415a4c60]
mov ecx, dword [0x1415a4c64]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0x75617261
add ecx, ecx
sub eax, ecx
imul eax, eax, 0x7b3e574a
cmp eax, 0x4bf9d2cf
je 0x1401b2e50
mov rdx, qword [r12 + 0x50]
mov r8, qword [r12 + 0x58]
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
call fcn.1401df3e0
add rsp, 0x20
test eax, eax
je 0x1401b36c8
mov eax, dword [0x1415a4c68]
or eax, dword [0x1415a4c6c]
shr eax, 1
imul rax, rax, 0x25296633
shr rax, 0x37
add eax, 0xbe0fbb3c
not eax
or eax, 0xd5f66472
cmp eax, 0xd5e1d7aa
je 0x1401b2eb7
movaps xmm1, xmm6
subss xmm1, xmm0
nop word [rax + rax]
mov eax, dword [0x1415a4c70]
imul eax, dword [0x1415a4c74]
or eax, 0xfeca837d
and eax, 0xffee837f
add eax, 0xb22df072
cmp eax, 0xf3896d37
ja 0x1401b2ef0
mov eax, dword [0x1415a4c78]
or eax, dword [0x1415a4c7c]
add eax, 0x34ddcd7b
or eax, 0x8c4d1700
xor eax, 0xcf30cde5
cmp eax, 0xad782edc
ja 0x1401b2fc0
nop dword [rax]
mov eax, dword [0x1415a4c80]
add eax, dword [0x1415a4c84]
mov ecx, eax
xor ecx, 0x426e064b
and eax, 0x3d91f9b4
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
and ecx, 0x833f51e8
mov edx, eax
and edx, 0x7cc0ae17
imul edx, ecx
mov ecx, eax
and ecx, 0x833f51e8
or eax, 0x833f51e8
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x118168f1
and eax, 0x118168f0
or eax, ecx
movss dword [r12 + 0x60], xmm1
cmp eax, 0x9ff8a28f
jb 0x1401b2fc0
add r12, 0x70
nop word cs:[rax + rax]
test r15b, r15b
jne 0x1401b2fb0
cmp r12, r14
jne 0x1401b2de0
jmp 0x1401b2fd0
movss dword [r12 + 0x60], xmm1
jmp 0x1401b2f40
mov eax, dword [0x1415a4bd8]
sub eax, dword [0x1415a4bdc]
mov ecx, eax
and ecx, 0xac96744
or eax, 0xac96744
add eax, ecx
and eax, 0xc4838014
add eax, 0xf77bbac
cmp eax, 0x6203991
jb 0x1401b2fd0
test r13b, r13b
je 0x1401b38d0
mov eax, dword [0x1415a4bf0]
xor edx, edx
div dword [0x1415a4bf4]
nop word cs:[rax + rax]
mov eax, dword [str.Om_r_v]
xor edx, edx
div dword [0x1415a4bfc]
add eax, 0xe26b5f30
or eax, 0x7f65a1e0
and eax, 0x7fe7b5f0
cmp eax, 0x6790ba7c
jb 0x1401b3020
mov r8, qword [rbp - 0x20]
nop dword [rax + rax]
mov eax, dword [0x1415a4c00]
and eax, dword [0x1415a4c04]
mov ecx, eax
xor ecx, 0x2b00a838
xor eax, 0xc45e5600
and eax, 0xcd5e5e00
mov edx, ecx
and edx, 0x32a1a1ff
imul edx, eax
mov eax, ecx
and eax, 0xcd5e5e00
or ecx, 0xcd5e5e00
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0x4e08294b
cmp eax, 0x36e44d39
jb 0x1401b3050
movzx eax, byte [r8 + 0x38]
nop dword [rax]
mov ecx, dword [0x1415a4c08]
add ecx, dword [0x1415a4c0c]
or ecx, 0x2d0d8df2
imul ecx, ecx, 0x33f871aa
or ecx, 0xc9fb30b2
cmp ecx, 0xedabf1b
jb 0x1401b30a0
test al, al
jne 0x1401b38d0
sub rsp, 0x20
mov r15, qword [rbp - 0x58]
mov rcx, r15
mov rdx, rdi
call fcn.1401dbb80
add rsp, 0x20
mov eax, dword [0x1415a4c10]
xor edx, edx
div dword [0x1415a4c14]
nop word cs:[rax + rax]
mov eax, dword [0x1415a4c18]
and eax, dword [0x1415a4c1c]
imul rcx, rax, 0x1213add3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x73cf9818
imul rax, rax, 0x26b0107f
shr rax, 0x39
cmp eax, 0x56553f45
ja 0x1401b3100
mov r8, qword [r15 + 8]
test rdi, rdi
sete cl
mov rax, qword [r15 + 0x10]
or rdi, rax
sete dl
cmp rax, 1
adc cl, 0
sub cl, dl
test cl, 1
mov rbx, qword [rbp - 0x20]
jne 0x1401b3249
lea rax, [r8 + rax*8]
mov rcx, r8
nop dword [rax + rax]
mov edx, dword [0x1415a4c50]
xor edx, dword [0x1415a4c54]
mov r9d, edx
not r9d
and r9d, 0x500000
or edx, 0x500000
or r9d, 0x8102a600
and r9d, edx
not r9d
and r9d, 0xe152b700
cmp r9d, 0xfdbeade2
jne 0x1401b31c0
mov rdx, qword [rcx]
mov qword [rsi + 0x68], rdx
nop word cs:[rax + rax]
mov edx, dword [0x1415a4c58]
mov r9d, dword [0x1415a4c5c]
mov r10d, edx
not r10d
and r10d, r9d
mov r11d, r9d
not r11d
and r11d, edx
imul r11d, r10d
mov r10d, edx
and r10d, r9d
or edx, r9d
imul edx, r10d
add edx, r11d
mov edi, edx
xor edi, 0x4ef3319
and edi, edx
mov edx, edi
not edx
or edx, 0x2001a091
and edx, 0xe531a793
and edi, 0x8445008
or edi, edx
lea rdx, [rsi + 0x70]
lea r9, [rcx + 8]
cmp rdx, r14
mov r10, qword [rcx]
mov qword [rsi + 0x68], r10
sete r10b
cmp r9, rax
sete r11b
cmp edi, 0x4fdfb129
jb 0x1401b31c0
or r10b, r11b
mov rcx, r9
mov rsi, rdx
je 0x1401b3170
mov rax, qword [r15]
nop dword [rax]
mov ecx, dword [0x1415a4c20]
mov edx, dword [0x1415a4c24]
add ecx, edx
add ecx, 0x619ebb3f
mov edx, ecx
not edx
and edx, 0x4fb6fba4
mov r9d, ecx
and r9d, 0xb049045b
imul r9d, edx
mov edx, ecx
and edx, 0x4fb6fba4
or ecx, 0x4fb6fba4
imul ecx, edx
add ecx, r9d
cmp ecx, 0xe48e8c7b
je 0x1401b3250
nop dword [rax + rax]
mov ecx, dword [0x1415a4c28]
mov edx, dword [0x1415a4c2c]
mov r9d, ecx
xor r9d, edx
not r9d
or ecx, edx
and ecx, r9d
mov edx, ecx
not edx
and edx, 0x304fd367
and ecx, 0xcfb02c98
sub ecx, edx
cmp ecx, 0xd002b115
je 0x1401b32a0
test rax, rax
je 0x1401b3979
mov eax, dword [0x1415a4c34]
add eax, dword [0x1415a4c30]
or eax, 0x2b3fb7bf
add eax, 0x3f7f62c4
and eax, 0x320a2283
cmp eax, 0x1c2f2d4e
jae 0x1401b3903
jmp 0x1401b3960
mov eax, dword [0x1415a4b98]
mov ecx, dword [0x1415a4b9c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
add eax, 0x5780b364
cmp eax, 0xc30bc68a
ja 0x1401b3367
mov eax, dword [0x1415a4ba0]
xor edx, edx
div dword [str.HRl_L]
mov ecx, eax
xor ecx, 0xd0dc4502
and ecx, eax
mov eax, ecx
not eax
or eax, 0xa692145e
or ecx, 0x596deba1
and ecx, eax
add ecx, 0x27964217
ud2
ud2
mov eax, dword [0x1415a4b08]
mov ecx, dword [0x1415a4b0c]
not ecx
lea edx, [rax + rcx]
add edx, 0xc0c5bfb3
add eax, ecx
mov ecx, 0x3f3a404c
sub ecx, eax
and ecx, 0x198d98c4
and edx, 0xe6726738
or edx, ecx
shr edx, 2
imul rax, rdx, 0x263fc7b7
shr rax, 0x33
movzx ecx, byte [0x1415acbd0]
cmp eax, 0xe61127c2
jbe 0x1401b33be
movzx eax, byte [0x1415acbd0]
jmp 0x1401b336b
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1401ac910
add rsp, 0x20
test rax, rax
mov r13, qword [rbp - 0x20]
je 0x1401b35f9
mov rdi, rax
mov eax, dword [0x1415a4b28]
xor edx, edx
div dword [0x1415a4b2c]
imul rax, rax, 0x73395871
shr rax, 0x3d
imul eax, eax, 0xfaa6bad8
xor eax, 0xc1e05a32
cmp eax, 0x97abb91
jae 0x1401b3429
movups xmm0, xmmword [0x14157906e]
movups xmmword [rdi + 0xe], xmm0
movups xmm0, xmmword [0x141579060]
movups xmmword [rdi], xmm0
mov qword [r15], 0x1e
movups xmm0, xmmword [0x14157906e]
movups xmm1, xmmword [0x141579060]
nop word [rax + rax]
mov eax, dword [0x1415a4b30]
or eax, dword [0x1415a4b34]
xor eax, 0x5365de10
shr eax, 1
imul rax, rax, 0x239127df
shr rax, 0x3b
add eax, 0xaac490aa
movups xmmword [rdi + 0xe], xmm0
movups xmmword [rdi], xmm1
mov qword [r15], 0x1e
cmp eax, 0xa78ad200
jb 0x1401b3440
nop dword [rax + rax]
mov eax, dword [0x1415a4b3c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415a4b38]
xor ecx, eax
imul eax, ecx, 0x6d6e1c30
shr eax, 1
imul rax, rax, 0xad5d74d
shr rax, 0x39
not eax
and eax, 0x979f34d
cmp eax, 0x34f4b1a8
je 0x1401b3480
mov eax, dword [0x1415a4b40]
mov ecx, dword [0x1415a4b44]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
xor eax, 0xfb74a97
imul eax, eax, 0xfbfda79f
and eax, 0xa4ee38c5
cmp eax, 0x32ec3ec3
jbe 0x1401b3520
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], 0x1e
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1401ac910
add rsp, 0x20
nop
mov eax, dword [0x1415a4b48]
or eax, dword [0x1415a4b4c]
mov ecx, eax
xor ecx, 0x4800a00
or eax, 0x53549178
and eax, ecx
and eax, 0x57d49b78
imul ebx, eax, 0x2c0458dc
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], 0x1e
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.14020ae90
add rsp, 0x20
cmp ebx, 0xbdcfdb89
ja 0x1401b3520
test rax, rax
je 0x1401b36c8
mov qword [rbp - 0x30], r12
mov rdi, r13
lea r8, [r13 + 0x18]
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov qword [r14], 5
mov ecx, dword [str._vudh]
sub ecx, dword [0x1415a4b54]
mov edx, ecx
not edx
mov r9d, ecx
and r9d, 0x92273c89
and edx, 0x6dd8c376
imul edx, r9d
mov r9d, ecx
and r9d, 0x6dd8c376
or ecx, 0x6dd8c376
imul ecx, r9d
add ecx, edx
mov edx, ecx
not edx
or edx, 0x75aea559
add ecx, edx
inc ecx
and ecx, 0x56634392
cmp ecx, 0x335efacf
jae 0x1401b36ca
jmp 0x1401b36fe
mov eax, dword [0x1415a4b10]
sub eax, dword [0x1415a4b14]
mov ecx, eax
xor ecx, 0x4249d61e
add ecx, eax
and eax, 0x3db629e1
sub ecx, eax
mov eax, ecx
or eax, 0x8a13fb56
xor eax, 0x74ba207
or ecx, 0xf8b45df8
and ecx, eax
cmp ecx, 0x8d52d7ca
jne 0x1401b3634
ud2
mov eax, dword [0x1415a4b18]
and eax, dword [0x1415a4b1c]
add eax, 0x7f97621f
xor eax, 0x1979dd6c
imul rax, rax, 0x2c91e385
shr rax, 0x3d
ud2
ud2
mov ecx, dword [0x1415a4b58]
mov edx, dword [0x1415a4b5c]
not ecx
not edx
or edx, ecx
not edx
or edx, 0x4c47d9ad
add edx, 0x4806435a
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 5
cmp edx, 0xce435cda
jbe 0x1401b370c
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], 5
jmp 0x1401b36ca
mov eax, dword [0x1415a4b64]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x1415a4b60]
xor ecx, eax
or ecx, 0xcebaebd2
imul rax, rcx, 0x3fb8aff7
shr rax, 0x3a
or eax, 0x94c999db
cmp eax, 0x4cde6efa
movzx r13d, byte [rbp - 0x11]
mov r12, r8
jb 0x1401b37a2
mov eax, dword [0x1415a4b68]
mov ecx, dword [0x1415a4b6c]
not eax
not ecx
and ecx, eax
and ecx, 0x26ede0d5
mov eax, ecx
not eax
and eax, 0x47eb5c0e
xor ecx, 0x3814a3f1
lea eax, [rcx + rax*2]
imul ebx, eax, 0x4cf057d2
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp - 0x28]
mov r9, r14
call fcn.1401dcc00
mov rcx, rdi
mov edx, r13d
call fcn.14020d550
mov r8, r12
add rsp, 0x20
cmp ebx, 0xd643fa17
jne 0x1401b37cc
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp - 0x28]
mov r9, r14
call fcn.1401dcc00
mov rcx, rdi
mov edx, r13d
call fcn.14020d550
mov r8, r12
add rsp, 0x20
jmp 0x1401b3745
mov rax, qword [rdi + 0x10]
test rax, rax
mov r15, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x38]
mov r13, qword [rbp - 0x48]
mov r8, qword [rbp - 0x30]
je 0x1401b2a6c
mov rcx, qword [rbp - 0x20]
mov rdi, qword [rcx + 8]
add rdi, 0x48
imul rbx, rax, 0x70
xor r14d, r14d
mov qword [rbp - 0x40], rsi
mov qword [rsi], r14
inc r14
mov qword [rdx], rsi
lea r12, [0x1400b29c0]
mov qword [rdx + 8], r12
lea rax, [0x141579098]
mov qword [r13], rax
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], rdx
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov rcx, r8
mov rdx, r13
mov rsi, r8
call fcn.14020b380
add rsp, 0x20
mov rax, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x40]
mov qword [rax], rcx
mov qword [rax + 8], r12
lea rcx, [0x1415790c0]
mov qword [r15], rcx
mov qword [r15 + 8], 2
mov qword [r15 + 0x20], 0
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 1
sub rsp, 0x20
mov r12, qword [rbp - 0x60]
mov rcx, r12
mov rdx, r15
call fcn.140082280
mov rcx, rsi
mov rdx, qword [rbp - 0x28]
mov r8, rdi
mov r9, r12
call fcn.14020d570
mov r8, rsi
mov rdx, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x40]
add rsp, 0x20
add rdi, 0x70
add rbx, 0xffffffffffffff90
jne 0x1401b3800
jmp 0x1401b2a6c
mov eax, dword [0x1415a4b80]
imul eax, dword [0x1415a4b84]
and eax, 0x6253de43
add eax, 0xabd99ef7
cmp eax, 0x4b59c22f
jb 0x1401b38d0
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [str._J47]
xor eax, dword [0x1415a4c3c]
mov ecx, eax
and ecx, 0x17ec92e9
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x17ec92e9
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xdfe6524
mov r9d, edx
and r9d, 0x857069b0
and ecx, 0x7201924b
imul ecx, r9d
and edx, 0x7a8f964f
or eax, 0x7ffff76f
imul eax, edx
add eax, ecx
mov rcx, qword [0x1415acb98]
cmp eax, 0x8b951fe2
jae 0x1401b3969
mov rax, qword [0x1415acb98]
jmp 0x1401b3903
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415a4c40]
mov ecx, dword [0x1415a4c44]
not eax
not ecx
and ecx, eax
not ecx
or ecx, 0x79eb010f
add ecx, 0xcb00fcff
and ecx, 0xcc59ec50
cmp ecx, 0x3d70adfe
jae 0x1401b39b0
mov byte [rbx + 0x38], 1
nop dword [rax + rax]
mov eax, dword [0x1415a4c48]
xor eax, dword [0x1415a4c4c]
mov ecx, eax
xor ecx, 0x102082ca
or eax, 0xc8d00820
and eax, ecx
and eax, 0xd8f08aea
mov ecx, eax
xor ecx, 0xf2a3a73c
or eax, 0x85008c2
and eax, ecx
mov byte [rbx + 0x38], 1
cmp eax, 0xf60e3cbd
ja 0x1401b39b0
jmp 0x1401b38d0