Function at 0x1401a0fd0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
movaps xmmword [rbp - 0x10], xmm6
mov r15, rdx
mov rdi, rcx
mov eax, dword [0x1415c90b0]
mov ecx, dword [0x1415c90b4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
or ecx, 0x18a343b0
or eax, 0xe75cbc48
and eax, ecx
shr eax, 3
imul rax, rax, 0xa7f6173
shr rax, 0x37
or eax, 0xa348e10
cmp eax, 0xfed7c2e6
jbe 0x1401a1040
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
nop dword [rax + rax]
mov eax, dword [0x1415c90b8]
xor edx, edx
div dword [0x1415c90bc]
mov ecx, eax
not eax
or eax, 0x85000608
and eax, 0x8d8046d8
and ecx, 0x42492906
or ecx, eax
xor ecx, 0x2bc89c0
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r12, rsp
cmp ecx, 0xf72ad5a3
ja 0x1401a1040
mov eax, dword [0x1415c90c0]
mov ecx, dword [0x1415c90c4]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
not ecx
and ecx, 0xb9bb22b3
mov eax, ecx
not eax
xor ecx, 0x63b1ec1
and eax, 0x63b1ec1
add eax, eax
sub eax, ecx
add eax, 0xc3eab8a8
cmp eax, 0xa6c1a688
jb 0x1401a113b
mov ecx, dword [0x1415c90c8]
mov eax, dword [0x1415c90cc]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
add eax, 0xb5fdfb0d
mov ecx, eax
not ecx
and ecx, 0x71656476
mov edx, eax
and edx, 0x8e9a9b89
imul edx, ecx
mov ecx, eax
and ecx, 0x71656476
or eax, 0x71656476
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc6fa16c0
and ecx, 0x3905e93f
imul ecx, edx
mov edx, eax
and edx, 0x3905e93e
or eax, 0x3905e93f
imul eax, edx
add eax, ecx
mov qword [r12], 0
cmp eax, 0xd4e1e48c
jne 0x1401a1148
mov qword [r12], 0
jmp 0x1401a10c1
mov r14, qword [r15 + 0x10]
nop dword [rax]
mov eax, dword [0x1415c90d0]
and eax, dword [0x1415c90d4]
or eax, 0x60411e88
add eax, 0x310fb3c9
mov ecx, eax
not ecx
and ecx, 0x1a014059
mov edx, eax
and edx, 0xa5feb3a6
imul edx, ecx
mov ecx, eax
and ecx, 0x1a014059
or eax, 0x1a014059
imul eax, ecx
add eax, edx
cmp eax, 0x7fb30ed9
je 0x1401a1150
mov rax, r14
shr rax, 0x20
je 0x1401a12a0
mov eax, dword [0x1415c9188]
mov ecx, dword [0x1415c918c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
or eax, 0x260c0011
and eax, 0x66ac2859
or ecx, 0xe6adfdff
add ecx, eax
xor ecx, 0xea27ef4f
lea rax, [0x14159edb8]
cmp ecx, 0xe4a1c242
jae 0x1401a11f0
mov qword [rdi + 8], rax
mov qword [rdi], 0
nop dword [rax]
mov ecx, dword [0x1415c9190]
mov edx, dword [0x1415c9194]
not ecx
not edx
and edx, ecx
not edx
or edx, 0xaffbbd59
imul ecx, edx, 0x478a324e
mov qword [rdi + 8], rax
mov qword [rdi], 0
cmp ecx, 0x6c55882f
jb 0x1401a11f0
nop word cs:[rax + rax]
mov eax, dword [0x1415c9198]
mov ecx, dword [0x1415c919c]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
not ecx
imul eax, ecx, 0x6978b6ff
mov ecx, eax
not ecx
and ecx, 0x8a56599b
mov edx, eax
and edx, 0x75a9a664
imul edx, ecx
mov ecx, eax
and ecx, 0x8a56599b
or eax, 0x8a56599b
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xd6eb8b42
add ecx, eax
and eax, 0x291474bd
sub ecx, eax
cmp ecx, 0xf0d2cb9b
je 0x1401a1230
jmp 0x1401a24d0
mov eax, dword [0x1415c90d8]
xor edx, edx
div dword [0x1415c90dc]
mov ecx, eax
and ecx, 0x62c40a38
xor ecx, 0x20440200
and eax, 0x20440200
or eax, ecx
or eax, 0x9d3bf5c7
cmp eax, 0x527e5199
je 0x1401a12a0
mov eax, dword [0x1415c90e0]
xor edx, edx
div dword [0x1415c90e4]
add eax, 0xe93c5177
mov ecx, eax
and ecx, 0x3423822a
or eax, 0x3423822a
add eax, ecx
cmp eax, 0x3378e336
je 0x1401a1343
mov eax, dword [0x1415c90e8]
mov esi, dword [0x1415c90ec]
mov ecx, eax
not ecx
and ecx, esi
not esi
and esi, eax
sub esi, ecx
add esi, 0xa43d9318
or esi, 0x22bc7071
add esi, 0xe905cdbc
sub rsp, 0x20
xor ecx, ecx
mov edx, r14d
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
cmp esi, 0xc5607267
jae 0x1401a135e
sub rsp, 0x20
xor ecx, ecx
mov edx, r14d
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
jmp 0x1401a12f8
mov r13, qword [r12]
nop word cs:[rax + rax]
mov eax, dword [0x1415c90f0]
mov ecx, dword [0x1415c90f4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
xor ecx, 0x30ac87b5
xor eax, 0xc1425848
and eax, 0xd1465de8
mov edx, ecx
and edx, 0x2eb9a217
imul edx, eax
mov eax, ecx
and eax, 0xd1465de8
or ecx, 0xd1465de8
imul ecx, eax
add ecx, edx
mov eax, ecx
and eax, 0x5a936e50
add eax, eax
sub ecx, eax
cmp ecx, 0x1757bb15
je 0x1401a1370
test r13, r13
je 0x1401a15c9
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401a13e0
mov eax, 0x8ab3bda9
nop dword [rax]
mov edx, dword [0x1415c90f8]
mov ecx, dword [0x1415c90fc]
not edx
not ecx
or ecx, edx
not ecx
mov rdx, rcx
imul rdx, rax
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1b
mov edx, ecx
not edx
or edx, 0xbe8da877
add ecx, edx
inc ecx
mov edx, ecx
xor edx, 0x52b8ffb8
and ecx, 0x2d470047
add ecx, ecx
sub ecx, edx
cmp ecx, 0xd1989bed
je 0x1401a13f0
test r13, r13
js 0x1401a230b
movzx eax, byte [0x1415d3950]
mov eax, dword [0x1415c9118]
sub eax, dword [0x1415c911c]
add eax, 0xe36503e6
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xb9beb0b6
and ecx, 0x46414f49
imul ecx, edx
mov edx, eax
and edx, 0x46414f49
or eax, 0x46414f49
imul eax, edx
add eax, ecx
cmp eax, 0x154d9afa
jae 0x1401a14b0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.140219830
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415c9120]
mov ecx, dword [0x1415c9124]
lea esi, [rax + rcx]
add esi, 0x162eb2ef
mov eax, esi
xor eax, 0x90f228d6
and esi, 0x6f0dd729
add esi, esi
sub esi, eax
xor esi, 0x3cce3e32
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.140219830
add rsp, 0x20
cmp esi, 0x60607548
jb 0x1401a14b0
mov rbx, rax
nop dword [rax]
mov eax, dword [0x1415c9128]
sub eax, dword [0x1415c912c]
or eax, 0x3b8b2962
add eax, 0x7a3a7574
xor eax, 0x3cf7fcca
cmp eax, 0xb0807f86
jb 0x1401a1500
test rbx, rbx
jne 0x1401a15ce
mov eax, dword [0x1415c9130]
mov ecx, dword [0x1415c9134]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
imul rax, rax, 0x3d596621
shr rax, 0x3c
add eax, 0x7bb3b75
or eax, 0x1fe5331e
cmp eax, 0x8e4ee3a4
jbe 0x1401a155e
ud2
xor eax, eax
ud2
mov ebx, 1
mov qword [rbp - 0x18], r14
movabs rax, 0x96e0327ad313f46f
xor ecx, ecx
nop
mov r9, r13
sub r9, 1
cmovb r9, rcx
add r9, rax
cmp r13, 1
mov edx, dword [0x1415c9140]
mov r8d, dword [0x1415c9144]
lea edx, [rdx + r8 + 0x1e86fb89]
sbb r9, 0xffffffffffffffff
and edx, 0x4c0f2805
mov r8d, edx
xor r8d, 0x9f9cae4d
or edx, 0x40030000
and edx, r8d
cmp edx, 0x8bc6dc44
je 0x1401a15e0
sub r9, rax
cmp r13, r9
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], r9
jbe 0x1401a188f
mov eax, dword [0x1415c9148]
mov ecx, dword [0x1415c914c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul rax, rax, 0x64ff3dc9
shr rax, 0x3d
or eax, 0x6e7dffce
cmp eax, 0x616331b
jb 0x1401a1640
nop word cs:[rax + rax]
mov eax, dword [0x1415c9150]
imul eax, dword [0x1415c9154]
or eax, 0x6114f921
imul eax, eax, 0x55fe3b20
add eax, 0xa58d9539
cmp eax, 0x668ae723
ja 0x1401a1690
test r9, r9
je 0x1401a1824
nop dword [rax]
mov eax, dword [0x1415c9160]
add eax, dword [0x1415c9164]
imul eax, eax, 0xe1ad7ae0
mov ecx, eax
not ecx
and ecx, 0x714ae555
mov edx, eax
and edx, 0x8eb51aa0
imul edx, ecx
mov ecx, eax
and ecx, 0x714ae540
or eax, 0x714ae555
imul eax, ecx
add eax, edx
not eax
and eax, 0x8ab210ed
cmp eax, 0x633dacc9
ja 0x1401a16c0
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.140219850
add rsp, 0x20
mov rbx, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415c9168]
add eax, dword [0x1415c916c]
or eax, 0x209f573
imul eax, eax, 0xa1a4d2c4
imul rcx, rax, 0x3b1d1333
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xdb008b84
ja 0x1401a1730
test rbx, rbx
jne 0x1401a188f
mov eax, dword [0x1415c9170]
mov ecx, dword [0x1415c9174]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and eax, 0x5a0ed223
mov edx, ecx
and edx, 0x25f12ddc
imul edx, eax
mov eax, ecx
and eax, 0x5a0ed223
or ecx, 0x5a0ed223
imul ecx, eax
add ecx, edx
or ecx, 0xa3b88280
add ecx, 0xc75305a2
cmp ecx, 0x8597ed60
jae 0x1401a17b9
ud2
mov eax, dword [0x1415c9178]
sub eax, dword [0x1415c917c]
mov ecx, eax
not ecx
or ecx, 0x62569e51
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0x5e1979ad
xor eax, 0x5e1979ad
lea eax, [rax + rcx*2]
imul rax, rax, 0x7e643b1
shr rax, 0x39
ud2
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov eax, dword [0x1415c9158]
xor eax, dword [0x1415c915c]
mov ecx, eax
and ecx, 0xa4506470
mov edx, ecx
not edx
and edx, 0x50431f9d
mov r8d, eax
and r8d, 0xa4106060
imul r8d, edx
and eax, 0x400410
or ecx, 0x50431f9d
imul ecx, eax
lea eax, [rcx + r8]
add eax, 0x6d62ae4e
cmp eax, 0x4758c665
jbe 0x1401a1840
mov ebx, 1
sub rsp, 0x20
mov rcx, rbx
mov rdx, qword [rbp - 0x18]
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
test eax, eax
je 0x1401a215b
nop word cs:[rax + rax]
mov eax, dword [0x1415c91a0]
mov ecx, dword [0x1415c91a4]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x78c712ec
mov edx, eax
and edx, 0x738ed13
imul edx, ecx
mov ecx, eax
and ecx, 0x78c712ec
or eax, 0x78c712ec
imul eax, ecx
add eax, edx
xor eax, 0x10287901
and eax, 0x582afd35
cmp eax, 0x9779d98
jb 0x1401a18c0
mov rcx, qword [r15]
xor r8d, r8d
test rcx, rcx
setne r8b
mov rsi, qword [rbp - 0x18]
cmove rsi, rcx
mov r12, qword [r15 + 8]
xor edi, edi
mov r15d, 0xafdc4959
xorps xmm6, xmm6
mov r13, qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
mov r14d, 0x918474fd
nop dword [rax]
mov eax, dword [0x1415c91a8]
mov edx, dword [0x1415c91ac]
not eax
not edx
and edx, eax
not edx
imul eax, edx, 0x9bd998f0
add eax, 0xc4a20c80
cmp eax, 0xd6309e48
ja 0x1401a1940
cmp qword [rbp - 0x18], 0
je 0x1401a2200
test rsi, rsi
je 0x1401a2200
dec qword [rbp - 0x18]
nop
mov eax, dword [0x1415c91c8]
mov edx, dword [0x1415c91cc]
mov r9d, eax
xor r9d, edx
not r9d
or eax, edx
and eax, r9d
mov edx, eax
not edx
and edx, 0x9a7503cb
mov r9d, eax
and r9d, 0x658afc34
imul r9d, edx
mov edx, eax
and edx, 0x9a7503cb
or eax, 0x9a7503cb
imul eax, edx
add eax, r9d
imul rax, rax, 0x76757e1b
shr rax, 0x36
imul eax, eax, 0xc879adc4
cmp eax, 0x534270b6
je 0x1401a1980
dec rsi
mov eax, dword [0x1415c91d0]
xor edx, edx
div dword [0x1415c91d4]
mov eax, dword [0x1415c91d8]
mov edx, dword [0x1415c91dc]
mov r9d, eax
not r9d
and r9d, edx
mov r10d, edx
not r10d
and r10d, eax
imul r10d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r10d
mov edx, eax
not edx
and edx, 0xe3cb96a3
mov r9d, eax
and r9d, 0x1c34695c
imul r9d, edx
mov edx, eax
and edx, 0xe3cb96a3
or eax, 0xe3cb96a3
imul eax, edx
add eax, r9d
mov edx, eax
not edx
and edx, 0x593471da
mov r9d, eax
and r9d, 0xa6cb8e25
imul r9d, edx
mov edx, eax
and edx, 0x593471da
or eax, 0x593471da
imul eax, edx
add eax, r9d
imul rax, rax, 0xc620747
shr rax, 0x3b
cmp eax, 0xe7b6bd6d
ja 0x1401a19ee
test r8, r8
je 0x1401a22be
test rdi, rdi
jne 0x1401a1d00
nop dword [rax]
mov eax, dword [0x1415c91e0]
and eax, dword [0x1415c91e4]
mov edx, eax
xor edx, 0x5342b148
xor eax, 0x4350eb3
or eax, 0xab8ae14c
add eax, edx
inc eax
mov edx, eax
and edx, 0x20a3453c
add edx, edx
sub eax, edx
add eax, 0x20a3453c
cmp eax, 0xe79dacf6
ja 0x1401a1aa0
nop word [rax + rax]
mov eax, dword [0x1415c91e8]
and eax, dword [0x1415c91ec]
add eax, 0xa309161
and eax, 0xe772c41c
cmp eax, 0x5aec947c
jb 0x1401a1ae0
nop dword [rax]
mov eax, dword [0x1415c91f0]
xor edx, edx
div dword [0x1415c91f4]
add eax, 0xe91aff27
shr eax, 1
imul rax, rax, 0x2708b78b
shr rax, 0x38
cmp eax, 0x2dd31371
je 0x1401a1b00
test r12, r12
je 0x1401a1cf2
mov r8d, r12d
and r8d, 7
mov eax, dword [0x1415c91f8]
xor edx, edx
div dword [0x1415c91fc]
nop word cs:[rax + rax]
mov eax, dword [0x1415c9200]
mov edx, dword [0x1415c9204]
mov r9d, eax
xor r9d, edx
not r9d
and r9d, edx
add r9d, r9d
sub edx, r9d
add edx, eax
imul rax, rdx, 0x70bf47d
shr rax, 0x3a
add eax, 0x51001b09
cmp eax, 0xe1a97a12
ja 0x1401a1b50
mov rax, r12
mov rdi, rcx
test r8, r8
je 0x1401a1c42
xor ecx, ecx
nop dword [rax + rax]
mov edx, dword [0x1415c9208]
mov r9d, dword [0x1415c920c]
mov r10d, r9d
not r10d
mov r11d, edx
and r11d, r10d
or r10d, edx
not r10d
imul r10d, r11d
mov r11d, edx
and r11d, r9d
or edx, r9d
imul edx, r11d
add edx, r10d
add edx, 0x8267439f
mov r9d, edx
xor r9d, 0xc04ca00c
and edx, 0x3fb35ff3
add edx, edx
sub edx, r9d
mov r9d, edx
not r9d
and r9d, 0xaa6b33f9
mov r10d, edx
and r10d, 0x5594cc06
imul r10d, r9d
mov r9d, edx
and r9d, 0xaa6b33f9
or edx, 0xaa6b33f9
imul edx, r9d
add edx, r10d
cmp edx, 0x4bf50095
jb 0x1401a1ba0
dec rax
inc rcx
mov rdi, qword [rdi + 0x170]
cmp rcx, r8
jne 0x1401a1ba0
cmp r12, 8
jb 0x1401a1cf5
mov rcx, rax
not rcx
nop word cs:[rax + rax]
mov edx, dword [0x1415c9210]
mov r8d, dword [0x1415c9214]
xor r8d, edx
not r8d
and r8d, edx
mov edx, r8d
not edx
and edx, 0x474e58bc
and r8d, 0xb8b1a743
sub r8d, edx
mov edx, r8d
and edx, 0x6ab4ee9
or r8d, 0x6ab4ee9
add r8d, edx
cmp r8d, 0x93167148
je 0x1401a1c60
add rax, 0xfffffffffffffff8
mov rdx, qword [rdi + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdx, qword [rdx + 0x170]
mov rdi, qword [rdx + 0x170]
add rcx, 8
test rax, rax
jne 0x1401a1c60
jmp 0x1401a1cf5
mov rdi, rcx
xor r12d, r12d
xor ecx, ecx
nop word [rax + rax]
mov eax, dword [0x1415c9228]
imul eax, dword [0x1415c922c]
mov edx, eax
or edx, 0x8ae02110
not eax
and edx, 0x8ff36351
and eax, 0x4000800c
or eax, edx
not eax
imul rax, r15
shr rax, 0x3b
cmp eax, 0xb4df40e7
je 0x1401a1d00
mov qword [rbp - 0x38], rsi
movzx eax, word [rdi + 0x16a]
cmp r12, rax
jae 0x1401a1d50
mov rsi, rdi
jmp 0x1401a1da8
mov rsi, qword [rdi]
test rsi, rsi
je 0x1401a2285
mov eax, dword [0x1415c9234]
mov edx, eax
xor edx, edx
not edx
and edx, dword [0x1415c9230]
xor edx, eax
lea eax, [rdx - 0x4a105344]
not eax
or eax, 0x105f08c0
add eax, edx
add eax, 0xb5efacbd
and eax, 0xddfb008d
cmp eax, 0x6ba35d3f
ja 0x1401a1d5c
movzx r12d, word [rdi + 0x168]
inc rcx
mov rdi, rsi
cmp r12w, word [rsi + 0x16a]
jae 0x1401a1d50
lea rax, [r12 + 1]
test rcx, rcx
je 0x1401a2056
mov rdi, qword [rsi + rax*8 + 0x170]
nop
mov eax, dword [0x1415c9244]
mov edx, eax
xor edx, eax
not edx
and edx, dword [0x1415c9240]
xor edx, eax
add edx, 0xa3fe0bfb
cmp edx, 0x45b3f5e1
jb 0x1401a1dc0
mov r8, rcx
dec r8
je 0x1401a2042
lea rax, [rcx - 2]
nop word cs:[rax + rax]
mov edx, dword [0x1415c9248]
mov r9d, dword [0x1415c924c]
lea r10d, [rdx + r9]
add edx, r9d
add edx, 0x7c6fda24
mov r9d, edx
and r9d, 0xf25c0cac
xor edx, 0xda3f353
add edx, r10d
add edx, 0x7c6fda24
sub edx, r9d
and edx, 0xc1947d4d
cmp edx, 0xbd3450c0
je 0x1401a1e00
mov edx, r8d
not edx
or rdx, 0xfffffffffffffff8
mov r9, rdx
not r9
nop word cs:[rax + rax]
mov r11d, dword [0x1415c9250]
mov r10d, dword [0x1415c9254]
mov r15d, r11d
xor r15d, r10d
not r15d
and r15d, r10d
add r15d, r15d
sub r10d, r15d
add r10d, r11d
mov r11d, r10d
not r11d
mov r15d, r10d
and r15d, 0x290e8dc4
and r11d, 0x56f1723b
imul r11d, r15d
mov r15d, r10d
and r15d, 0x56f1723b
or r10d, 0x56f1723b
imul r10d, r15d
add r10d, r11d
and r10d, 0x51ab0d12
xor r10d, 0x50aa0902
cmp r10d, 0x9d1229d4
je 0x1401a1e60
test r9, r9
je 0x1401a1f20
neg rdx
mov r9d, 1
movabs r11, 0x6da4e6bc14615db8
nop word cs:[rax + rax]
mov rdi, qword [rdi + 0x170]
add r8, r11
mov r10, r11
not r10
add r8, r10
inc r9
cmp rdx, r9
jne 0x1401a1ef0
sub rcx, r9
mov r8, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x1415c9258]
or ecx, dword [0x1415c925c]
mov edx, ecx
not edx
and edx, 0x17a77819
mov r9d, ecx
and r9d, 0xe85887e6
imul r9d, edx
mov edx, ecx
and edx, 0x17a77819
or ecx, 0x17a77819
imul ecx, edx
add ecx, r9d
mov edx, ecx
and edx, 0xe27dfec1
or ecx, 0xe27dfec1
add ecx, edx
mov edx, ecx
not edx
mov r9d, ecx
and r9d, 0x46f20b39
and edx, 0xb90df4c6
imul edx, r9d
mov r9d, ecx
and r9d, 0xb90df4c6
or ecx, 0xb90df4c6
imul ecx, r9d
add ecx, edx
cmp ecx, 0x38ddacd9
jb 0x1401a1f20
cmp rax, 7
jb 0x1401a2042
nop dword [rax + rax]
mov eax, dword [0x1415c9260]
xor edx, edx
div dword [0x1415c9264]
not eax
or eax, 0xfff33fd2
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x88008
and eax, 0x8eb54df7
imul eax, edx
mov edx, ecx
and edx, 0x44025
or ecx, 0x8eb54df7
imul ecx, edx
add ecx, eax
mov eax, ecx
not eax
or eax, 0x3af8c7b4
add eax, ecx
inc eax
cmp eax, 0x7b463566
ja 0x1401a1fb0
mov rax, qword [rdi + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rdi, qword [rax + 0x170]
add r8, 0xfffffffffffffff8
jne 0x1401a1fb0
xor eax, eax
mov qword [rbp - 0x30], rax
mov eax, 0x33d6a6ff
cmp eax, 0x555ad7df
jne 0x1401a20a0
jmp 0x1401a2069
mov rdi, rsi
mov qword [rbp - 0x30], rax
mov eax, 0x33d6a6ff
cmp eax, 0x555ad7df
jne 0x1401a20a0
lea rax, [r12 + r12*2]
mov r8, qword [rsi + r12*8 + 8]
mov r9, qword [rsi + rax*8 + 0x60]
mov rax, qword [rsi + rax*8 + 0x70]
sub rsp, 0x40
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, rbx
xor edx, edx
call r13
add rsp, 0x40
nop word cs:[rax + rax]
mov eax, dword [0x1415c9268]
mov ecx, dword [0x1415c926c]
mov r15d, eax
not r15d
mov edx, ecx
not edx
mov r8d, r15d
and r8d, 0xc489a5be
and eax, 0x3b765a40
or eax, r8d
or r15d, edx
and edx, 0xc489a5be
and ecx, 0x3b765a40
or ecx, edx
xor ecx, eax
not r15d
or r15d, ecx
shr r15d, 1
imul r15, r14
shr r15, 0x3e
lea eax, [r15 + 0x71dd7dc]
add r15d, r15d
sub r15d, eax
or r15d, 0x1fd2b910
lea rax, [r12 + r12*2]
mov r8, qword [rsi + r12*8 + 8]
mov r9, qword [rsi + rax*8 + 0x60]
mov rax, qword [rsi + rax*8 + 0x70]
sub rsp, 0x40
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, rbx
xor edx, edx
call r13
add rsp, 0x40
cmp r15d, 0x185c2c93
je 0x1401a20a0
mov r8d, 1
mov ecx, 0
test eax, eax
mov rsi, qword [rbp - 0x38]
mov r15d, 0xafdc4959
mov r12, qword [rbp - 0x30]
jne 0x1401a1940
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp - 0x28]
mov qword [rcx + 8], rax
mov qword [rcx], 0
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
add rsp, 0x20
cmp qword [rbp - 0x20], 0
je 0x1401a24d0
mov rsi, qword [0x1415d3918]
mov eax, dword [0x1415c9278]
mov ecx, dword [0x1415c927c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul rax, rax, 0xbcb5693
shr rax, 0x3a
or eax, 0x78c20ed8
mov ecx, 0x814a9311
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x8fef3436
jbe 0x1401a244d
jmp 0x1401a24b3
mov eax, dword [0x1415c91b0]
mov ecx, dword [0x1415c91b4]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0x1f15d240
mov eax, ecx
xor eax, 0x284397dd
xor ecx, 0x969c2000
or ecx, 0x49215ebe
add ecx, eax
cmp ecx, 0x8426e4b5
je 0x1401a2200
mov rdx, qword [rbp - 0x28]
mov qword [rdx], rbx
mov eax, dword [0x1415c91b8]
and eax, dword [0x1415c91bc]
mov ecx, eax
not ecx
or eax, 0x30049800
or ecx, 0xca5a672b
and ecx, eax
mov eax, ecx
not eax
or eax, 0x8c800010
and ecx, 0x30088300
and eax, 0x8ed43831
or eax, ecx
cmp eax, 0xc8ceebe1
mov r8, qword [rbp - 0x20]
jne 0x1401a2340
jmp 0x1401a2376
ud2
mov eax, dword [0x1415c9218]
xor edx, edx
div dword [0x1415c921c]
or eax, 0x88d7cf3c
add eax, 0x95adb22f
cmp eax, 0xb81e6e9e
jbe 0x1401a22e0
ud2
mov eax, dword [0x1415c9220]
mov ecx, dword [0x1415c9224]
add eax, ecx
add eax, 0x61eecbc4
and eax, 0xe2f42ac4
add eax, 0xd99a7ace
ud2
mov eax, dword [0x1415c9100]
sub eax, dword [0x1415c9104]
add eax, 0xe940de01
imul rcx, rax, 0x5b9694ab
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0x2776c160
jne 0x1401a23ca
jmp 0x1401a23ff
mov eax, dword [0x1415c91c0]
add eax, dword [0x1415c91c4]
imul rax, rax, 0x2169a49f
shr rax, 0x3c
add eax, 0x59c2e5ee
mov ecx, eax
or ecx, 0xc25f6fd7
or eax, 0xdbdfeff7
and eax, ecx
mov qword [rdx + 8], r8
cmp eax, 0xcfbfd472
jae 0x1401a2380
mov qword [rdx + 8], r8
jmp 0x1401a2340
mov eax, dword [0x1415c9270]
or eax, dword [0x1415c9274]
xor eax, 0x81c35712
lea ecx, [rax + 0x6617226a]
mov edx, ecx
and edx, 0x61fb2a6d
xor ecx, 0x9e04d592
add eax, ecx
add eax, 0x6617226a
sub eax, edx
cmp eax, 0xd2115f17
je 0x1401a2380
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x1415c9108]
and eax, dword [0x1415c910c]
mov ecx, eax
xor ecx, 0x50080000
xor eax, 0x29000008
or eax, 0x86e5eff6
and ecx, 0x51080000
xor eax, 0xa8561d5b
lea eax, [rax + rcx*2]
ud2
ud2
mov eax, dword [0x1415c9280]
add eax, dword [0x1415c9284]
mov edi, eax
not edi
or eax, 0xd16d8439
or edi, 0x2e927bc6
and edi, eax
mov eax, edi
not eax
and eax, 0x1c0d06f2
mov ecx, edi
and ecx, 0xe3f2f90d
imul ecx, eax
mov eax, edi
and eax, 0x1c0d06f2
or edi, 0x1c0d06f2
imul edi, eax
add edi, ecx
xor edi, 0xc1c6f207
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
cmp edi, 0x6352518a
jne 0x1401a24d0
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401a244d
mov eax, dword [0x1415c9288]
imul eax, dword [0x1415c928c]
xor eax, 0xbfc0879f
imul rax, rax, 0x866881
shr rax, 0x36
or eax, 0x1f65f7b8
cmp eax, 0xa84112a5
ja 0x1401a24d0
nop dword [rax]
mov eax, dword [0x1415c9290]
or eax, dword [0x1415c9294]
imul rax, rax, 0x6e1a5905
shr rax, 0x3d
or eax, 0x8bf31f44
cmp eax, 0xf2b4ea96
je 0x1401a2500
jmp 0x1401a2380