Function at 0x1401c76c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x158
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xc0], xmm7
movaps xmmword [rbp + 0xb0], xmm6
mov qword [rbp + 0x88], r9
mov byte [rbp + 0x90], r8b
mov eax, dword [0x1415cc1a0]
sub eax, dword [0x1415cc1a4]
mov r8d, eax
xor r8d, 0xb52191ae
xor eax, 0x4a1e0210
or eax, 0xb52199af
or r8d, 0x4ade6650
and r8d, eax
xor r8d, 0xdcbfdace
cmp r8d, 0xcf5e67de
jbe 0x1401c778d
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
xor r8d, r8d
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rax, rsp
test r8b, r8b
jne 0x1401c7790
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x30], r10
mov qword [rbp - 0x38], r9
mov qword [rbp + 0x68], rcx
mov eax, dword [0x1415cc1a8]
sub eax, dword [0x1415cc1ac]
mov ecx, eax
and ecx, 0x99864a35
and eax, 0x90040815
sub ecx, eax
add ecx, 0x94043c1f
mov eax, ecx
xor eax, 0x2ebfc0f6
and eax, ecx
cmp eax, 0x31c773ae
jae 0x1401c78fc
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x160
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x150
call fcn.14021cf50
sub rsp, rax
mov eax, 0x60
call fcn.14021cf50
sub rsp, rax
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rax, rsp
mov qword [rax], rdx
mov qword [rbp + 0xa8], rdx
nop word cs:[rax + rax]
mov edx, dword [0x1415cc1b0]
sub edx, dword [0x1415cc1b4]
or edx, 0x9891ea10
mov eax, edx
xor eax, 0x20200c6
xor edx, 0x74dd2520
mov r9d, edx
and r9d, 0x25685529
and eax, 0x429700c6
imul eax, r9d
mov r9d, edx
and r9d, 0xca068ad6
or edx, 0xca978ad6
imul edx, r9d
add edx, eax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x160
call fcn.14021cf50
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r11, rsp
mov eax, 0x150
call fcn.14021cf50
sub rsp, rax
mov r8, rsp
mov eax, 0x60
call fcn.14021cf50
sub rsp, rax
mov r12, rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r15, rsp
mov rax, qword [rbp + 0xa8]
mov qword [r15], rax
cmp edx, 0x71888922
jb 0x1401c7910
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x98], r14
mov rsi, qword [rbp + 0xa8]
mov qword [rbp + 0x30], r8
mov qword [rbp + 0x60], r11
mov qword [rbp - 0x40], rdi
mov qword [rbp + 0xa0], r10
mov qword [rbp - 0x50], r9
mov qword [rbp + 0x58], rcx
mov eax, dword [0x1415cc1b8]
xor edx, edx
div dword [0x1415cc1bc]
mov edx, eax
xor edx, 0xa2b449bf
and eax, 0x5d4bb640
add eax, eax
sub eax, edx
mov edx, eax
xor edx, 0x4ba4fa92
xor eax, 0xa283dfcb
add eax, edx
and edx, 0x16d8daa6
sub eax, edx
cmp eax, 0xc505c2a1
mov rcx, qword [rbp + 0x140]
jae 0x1401c7aa7
mov qword [r13 + 8], rcx
mov eax, 0xde8ee1fb
mov rdi, rsi
shr rdi, 1
mov r14, qword [rbp + 0x150]
nop dword [rax]
mov edx, dword [0x1415cc1c0]
imul edx, dword [0x1415cc1c4]
imul rdx, rax
shr rdx, 0x3b
mov r9d, edx
xor r9d, 0x40423104
xor edx, 0xbb38ccb2
mov r10d, edx
and r10d, 0x2230cc0b
and r9d, 0x40423114
imul r9d, r10d
mov r10d, edx
and r10d, 0x990800b4
or edx, 0xd94a31b4
imul edx, r10d
add edx, r9d
mov qword [r13 + 8], rcx
cmp edx, 0x2b2af632
je 0x1401c7ac0
cmp rdi, rcx
mov rsi, qword [rbp + 0x88]
jae 0x1401c9416
mov r8, qword [rbp + 0x148]
lea rax, [r8 + r14*8]
mov qword [rbp - 0x80], rax
mov r9, qword [rbp + 0x158]
mov r10, qword [rbp + 0x18]
nop word [rax + rax]
mov eax, dword [0x1415cc218]
mov ecx, dword [0x1415cc21c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
xor ecx, 0x6d9d1a65
add ecx, 0x51ecedd4
cmp ecx, 0xacc248d6
ja 0x1401c7b50
test r14, r14
je 0x1401c9738
nop word cs:[rax + rax]
mov eax, dword [0x1415cc230]
mov ecx, dword [0x1415cc234]
mov edx, eax
not edx
and edx, ecx
not edx
not ecx
and ecx, eax
not ecx
and ecx, edx
not ecx
and ecx, 0x5392f68e
add ecx, 0xccc73787
or ecx, 0x7faabd61
cmp ecx, 0x76ac70a8
jb 0x1401c7b90
mov rax, qword [r9]
mov qword [rbp - 0x78], rax
mov rax, qword [r9 + 8]
mov qword [rbp - 0x70], rax
mov rax, qword [r9 + 0x10]
mov qword [rbp + 0x20], rax
lea rcx, [r10 + 0x10]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401c7bf0
mov rax, qword [r9 + 0x18]
mov qword [rbp + 0x28], rax
mov rax, qword [r9 + 0x20]
mov qword [rbp + 0x10], rax
movabs rbx, 0x3609820c033b024a
lea rax, [r10 + 0xe8]
mov qword [rbp - 8], rax
lea rax, [r10 + 8]
mov qword [rbp], rax
lea rax, [r10 + 0x100]
mov qword [rbp + 8], rax
mov rax, r10
add rax, 0x130
mov qword [rbp - 0x48], rax
mov r14d, 8
xor r15d, r15d
xorps xmm6, xmm6
pcmpeqd xmm7, xmm7
mov edi, 0xfa67803f
xor eax, eax
mov qword [rbp + 0x48], rax
xor eax, eax
mov qword [rbp + 0x80], rax
mov qword [rbp - 0x10], rcx
nop word cs:[rax + rax]
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x38], r8
mov rax, qword [r8]
mov rcx, qword [rbp - 0x78]
lock inc qword [rcx]
movzx ecx, word [rax + 0x38]
mov qword [rbp + 0x50], rcx
mov rcx, qword [rax + 0x40]
mov qword [rbp + 0x78], rcx
mov rcx, qword [rax + 0x50]
mov qword [rbp + 0xa8], rcx
mov r12, qword [rax + 0x58]
mov rcx, qword [rax + 0x78]
mov qword [rbp + 0x88], rcx
mov rax, qword [rax + 0x90]
mov qword [rbp + 0x90], rax
xor r13d, r13d
test r12, r12
setne r13b
mov rax, qword [rbp - 0x70]
mov rsi, qword [rax]
cmp qword [rsi + 0x18], 0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x98], r13
je 0x1401c81e0
mov rcx, qword [rsi + 0x20]
mov rdx, qword [rsi + 0x28]
sub rsp, 0x20
mov r8, qword [rbp + 0xa8]
call fcn.1401cd8b0
add rsp, 0x20
mov rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415cc238]
mov edx, dword [0x1415cc23c]
mov r8d, eax
xor r8d, edx
not r8d
or eax, edx
and eax, r8d
imul eax, eax, 0xc35c738c
and eax, 0x7e54f9bc
add eax, 0x66a393ba
cmp eax, 0xa8fca95d
ja 0x1401c7d10
mov rax, rcx
shr rax, 0x39
mov r14, qword [rsi]
mov r8, qword [rsi + 8]
mov edx, dword [0x1415cc240]
mov r9d, dword [0x1415cc244]
add edx, r9d
add edx, 0xad88ff67
and edx, 0xf5257425
cmp edx, 0xa043ce2c
ja 0x1401c7d4f
movzx eax, al
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r9d, r9d
mov rsi, qword [rbp + 0xa8]
mov rax, rcx
xor rax, r8
not rax
or rcx, r8
and rcx, rax
movdqu xmm1, xmmword [r14 + rcx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r10d, xmm2
test r10d, r10d
je 0x1401c7ecf
nop dword [rax]
mov eax, dword [0x1415cc248]
xor edx, edx
div dword [0x1415cc24c]
mov eax, dword [0x1415cc250]
mov edx, dword [0x1415cc254]
mov r11d, eax
xor r11d, edx
not r11d
and r11d, edx
add r11d, r11d
sub edx, r11d
add edx, eax
imul rdx, rdi
shr rdx, 0x3e
or edx, 0x53e37fa2
add edx, 0xfc9c25a7
cmp edx, 0x911ebd21
ja 0x1401c7dce
tzcnt eax, r10d
add rax, rcx
and rax, r8
mov rdx, rbx
sub rdx, rax
sub rdx, rbx
imul rax, rdx, 0x160
cmp qword [r14 + rax - 0x160], rsi
je 0x1401c7fb0
mov eax, dword [0x1415cc260]
xor edx, edx
div dword [0x1415cc264]
nop word cs:[rax + rax]
mov eax, dword [0x1415cc268]
xor edx, edx
div dword [0x1415cc26c]
xor eax, 0xfb294e69
imul rax, rax, 0x4dc7f2c7
shr rax, 0x3d
xor eax, 0x6f85c0d1
cmp eax, 0xb6a7e6c0
ja 0x1401c7e50
lea eax, [r10 - 1]
xor r10d, eax
not r10d
and r10d, eax
mov eax, dword [0x1415cc270]
mov edx, dword [str.hyL]
mov r11d, eax
xor r11d, edx
not r11d
or eax, edx
and eax, r11d
or eax, 0x42d9e64d
imul rax, rax, 0x4cc94441
shr rax, 0x3d
or eax, 0x4ed5ccc8
cmp eax, 0xe644998e
ja 0x1401c7e87
nop dword [rax]
test r15b, r15b
jne 0x1401c7ec0
test r10w, r10w
jne 0x1401c7dc0
pcmpeqb xmm1, xmm7
pmovmskb eax, xmm1
nop word [rax + rax]
mov edx, dword [0x1415cc258]
add edx, dword [0x1415cc25c]
imul rdx, rdx, 0x2ffc506f
shr rdx, 0x3c
imul edx, edx, 0xb5ad528a
mov r10d, edx
and r10d, 0x96b328a
xor edx, 0x896b328b
lea edx, [rdx + r10*2]
cmp edx, 0x298197c9
jb 0x1401c7ee0
test ax, ax
jne 0x1401c81e0
mov eax, dword [0x1415cc278]
sub eax, dword [0x1415cc27c]
mov edx, eax
not edx
and edx, 0xec9c4238
mov r10d, eax
and r10d, 0x1363bdc7
imul r10d, edx
mov edx, eax
and edx, 0xec9c4238
or eax, 0xec9c4238
imul eax, edx
add eax, r10d
mov edx, eax
xor edx, 0x4084f109
xor eax, 0x83520476
mov r10d, eax
and r10d, 0x3d6b0ac2
and edx, 0xc294f539
imul edx, r10d
mov r10d, eax
and r10d, 0xc294f53c
or eax, 0xc294f53d
imul eax, r10d
add eax, edx
cmp eax, 0x2685b788
ja 0x1401c7f22
add r9, 0x10
add rcx, r9
jmp 0x1401c7d8b
add r14, rax
mov rax, qword [r14 - 0x60]
test rax, rax
mov r10, qword [rbp + 0x88]
mov r11, qword [rbp + 0x90]
je 0x1401c8159
mov rsi, qword [rax + 0x10]
mov rdx, qword [rbp + 0x58]
mov qword [rdx], 0
mov r13, qword [rbp - 0x28]
mov qword [r13], 0
mov eax, dword [0x1415cc280]
or eax, dword [0x1415cc284]
imul rax, rax, 0x62ee838b
mov rcx, rax
shr rcx, 0x3d
not ecx
and ecx, 0x2cd3f8de
bt rax, 0x3d
sbb ecx, 0
mov eax, ecx
neg eax
dec ecx
and ecx, 0xcc1b099
mov r8d, eax
and r8d, 0x902c0326
imul r8d, ecx
mov ecx, eax
and ecx, 0x43000401
or eax, 0x4fc1b499
imul eax, ecx
add eax, r8d
cmp eax, 0xd9420323
mov r12, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
je 0x1401c808d
nop
mov edi, dword [0x1415cc288]
and edi, dword [0x1415cc28c]
and edi, 0x89b9e5c6
add edi, 0xf6a0f83
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov rcx, rsi
mov r8, r13
mov r9, r13
call r12
mov rdx, qword [rbp + 0x58]
add rsp, 0x30
cmp edi, 0xec11202a
jbe 0x1401c80b0
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov rcx, rsi
mov r8, r13
mov r9, r13
call r12
mov rdx, qword [rbp + 0x58]
add rsp, 0x30
jmp 0x1401c8050
test eax, eax
jne 0x1401c80ed
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
mov rdx, qword [rbp + 0x58]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415cc290]
or eax, dword [0x1415cc294]
and eax, 0x21000880
add eax, 0x4573de2f
cmp eax, 0xecaf9019
jae 0x1401c80d0
mov edi, 0xfa67803f
mov r12, qword [rbp + 0x70]
mov r13, qword [rbp + 0x98]
mov r10, qword [rbp + 0x88]
mov r11, qword [rbp + 0x90]
mov eax, dword [0x1415cc3d8]
add eax, dword [0x1415cc3dc]
or eax, 0x880301
imul rax, rax, 0x34a397fb
shr rax, 0x3d
cmp eax, 0xd7b2a0e6
je 0x1401c810b
mov rax, qword [rdx]
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
movabs rax, 0xfffffffd49ef6f00
add rdx, rax
cmp rdx, qword [r14 - 0x38]
jne 0x1401c81e0
lea rcx, [r14 - 0x158]
mov eax, dword [0x1415cc3e0]
imul eax, dword [0x1415cc3e4]
imul eax, eax, 0x4e717575
add eax, 0x36fdec6e
not eax
or eax, 0x8eb7fa8d
cmp eax, 0xb996d944
je 0x1401c8160
mov r8, qword [rbp + 0x20]
movzx eax, byte [r8 + 8]
mov rdx, qword [rbp - 0x40]
mov byte [rdx + 8], al
mov rax, qword [r8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x28]
mov r8, qword [rax]
mov rax, qword [rbp + 0x10]
mov r9, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r10
call fcn.1401d9750
add rsp, 0x30
test r15b, r15b
mov r8, qword [rbp + 0x38]
je 0x1401c9240
jmp 0x1401c9280
mov eax, dword [0x1415cc298]
xor eax, dword [0x1415cc29c]
mov ecx, eax
not ecx
and ecx, 0x1f6b0bb7
and eax, 0x6094f448
sub eax, ecx
or eax, 0xbe8c3dc2
add eax, 0xb016ea5d
cmp eax, 0xe56da87e
ja 0x1401c81e0
mov eax, dword [0x1415cc2a0]
mov ecx, dword [0x1415cc2a4]
add eax, ecx
add eax, 0x79035093
and eax, 0x193ce560
add eax, 0x21bea682
cmp eax, 0x8d559ae7
mov rdi, qword [rbp - 0x68]
mov r14, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x58]
mov rsi, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0x78]
ja 0x1401c8270
nop dword [rax]
mov eax, dword [0x1415cc2a8]
xor eax, dword [0x1415cc2ac]
add eax, 0x6534cd4a
xor eax, 0xa71e17f3
mov qword [rcx], rsi
cmp eax, 0x14c93f56
jae 0x1401c8280
mov qword [rcx], rsi
jmp 0x1401c8250
test rdx, rdx
je 0x1401c82d0
mov r8, qword [rbp + 0x50]
shr r8d, 1
sub rsp, 0x20
mov rcx, qword [rbp + 0xa0]
call fcn.14021ac80
add rsp, 0x20
mov eax, dword [0x1415cc2b0]
or eax, dword [0x1415cc2b4]
or eax, 0x3dc0a590
add eax, 0xf1f4675a
and eax, 0x4720368d
cmp eax, 0xd2d5f271
jae 0x1401c82a0
jmp 0x1401c8680
cmp rsi, 4
jge 0x1401c83cf
test rsi, rsi
jne 0x1401c84d5
mov eax, dword [0x1415cc2c8]
or eax, dword [0x1415cc2cc]
mov ecx, 0x8a3f098b
imul rax, rcx
shr rax, 0x3c
add eax, 0x9c4997fe
imul rcx, rax, 0x250bc2e7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xc6d2efa6
jne 0x1401c8323
movzx eax, byte [0x1415d3950]
mov rdi, qword [rbp + 0xa0]
nop word [rax + rax]
mov eax, dword [0x1415cc2d0]
xor edx, edx
div dword [0x1415cc2d4]
imul eax, eax, 0x3fdf68c
mov ecx, eax
not ecx
and ecx, 0x8ed5af26
and eax, 0x712a50d8
sub eax, ecx
mov ecx, eax
xor ecx, 0xfadea7a8
and eax, 0xfadea7aa
or eax, ecx
movzx ecx, byte [0x1415d3950]
cmp eax, 0x1b910b80
jb 0x1401c8330
mov eax, dword [0x1415cc2d8]
sub eax, dword [str.j_Bu]
mov ecx, eax
xor ecx, 0xaa689435
xor eax, 0x419401c2
and eax, 0xc3bc15f2
mov edx, ecx
and edx, 0x3c43ea0d
imul edx, eax
mov eax, ecx
and eax, 0xc3bc15f2
or ecx, 0xc3bc15f2
imul ecx, eax
add ecx, edx
mov eax, ecx
and eax, 0x3436d6b6
add eax, eax
sub ecx, eax
add ecx, 0xb436d6b6
cmp ecx, 0x3352280f
jbe 0x1401c85d3
jmp 0x1401c880f
jne 0x1401c84d5
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 6
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
mov rcx, rax
mov eax, dword [0x1415cc2f0]
mov edx, dword [0x1415cc2f4]
mov r8d, eax
and r8d, edx
add r8d, r8d
add eax, edx
sub eax, r8d
add eax, 0x50449d35
xor eax, 0xfe60c8d5
mov edx, eax
and edx, 0x2098dd2e
add edx, edx
neg edx
add eax, edx
add eax, 0x2098dd2e
cmp eax, 0xac77efa2
ja 0x1401c83f3
test rcx, rcx
mov rdi, qword [rbp + 0xa0]
je 0x1401c9b17
mov eax, dword [0x1415cc310]
xor edx, edx
div dword [0x1415cc314]
and eax, 0xf0773f59
imul eax, eax, 0x3437ae1
add eax, 0xebfaa309
cmp eax, 0x891fef7d
jae 0x1401c8480
mov word [rcx + 4], 0x6d65
mov dword [rcx], 0x74737953
nop word cs:[rax + rax]
mov word [rcx + 4], 0x6d65
mov dword [rcx], 0x74737953
test r15b, r15b
jne 0x1401c8480
nop word cs:[rax + rax]
mov eax, dword [0x1415cc318]
add eax, dword [0x1415cc31c]
imul rax, rax, 0xa6de457
shr rax, 0x39
mov edx, eax
xor edx, 2
and edx, eax
cmp edx, 0x1136aa6a
ja 0x1401c84a0
mov eax, 6
mov edx, 6
jmp 0x1401c8670
mov rax, qword [rbp - 0x20]
mov qword [rax], rcx
lea rcx, [0x1401d9430]
mov qword [rax + 8], rcx
lea rcx, [0x14159f288]
mov qword [rdi], rcx
mov qword [rdi + 8], 1
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x10], rax
mov eax, dword [0x1415cc2b8]
mov ecx, dword [0x1415cc2bc]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
and eax, 0x411ba29b
add eax, 0x2e063b8a
xor eax, 0x16d5f4ee
cmp eax, 0xd9bab55f
jbe 0x1401c8550
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.14021a500
add rsp, 0x20
nop dword [rax]
mov esi, dword [0x1415cc2c0]
imul esi, dword [0x1415cc2c4]
xor esi, 0xeada1e1e
mov eax, 0xb0739d25
sub eax, esi
add esi, 0x4f8c62da
and eax, 0x27006ecc
mov ecx, esi
and ecx, 0xd8ff9133
imul ecx, eax
mov eax, esi
and eax, 0x27006ecc
or esi, 0x27006ecc
imul esi, eax
add esi, ecx
mov qword [rdi + 0x18], 1
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.14008e840
add rsp, 0x20
cmp esi, 0x30b0111
jbe 0x1401c8550
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
mov rdx, qword [r14 + 0x10]
mov rdi, qword [rbp + 0xa0]
mov rsi, qword [rbp + 0xa8]
jmp 0x1401c8670
mov esi, dword [0x1415cc2e0]
xor esi, dword [0x1415cc2e4]
mov eax, esi
not eax
or eax, 0x11410818
and eax, 0x1d53683e
and esi, 0x62009001
sub esi, eax
mov eax, 0x8b248abf
imul rsi, rax
shr rsi, 0x3e
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
cmp esi, 0x248a6c95
ja 0x1401c880f
mov rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415cc2e8]
and eax, dword [0x1415cc2ec]
imul eax, eax, 0xebe9c80c
cmp eax, 0xa9b93d26
je 0x1401c8630
test rcx, rcx
mov rsi, qword [rbp + 0xa8]
je 0x1401c9fe3
mov dword [rcx], 0x656c6449
mov eax, 4
mov edx, 4
nop dword [rax]
mov qword [rdi], rax
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], rdx
mov byte [rdi + 0x18], 1
nop
mov eax, dword [0x1415cc320]
mov ecx, eax
not ecx
or ecx, dword [0x1415cc324]
add eax, ecx
add eax, 0xa3a94efa
or eax, 0xa0220884
and eax, 0xb12328dd
cmp eax, 0xf1663d4d
ja 0x1401c8680
mov rax, qword [rbp + 0x10]
mov r8, qword [rax]
mov eax, dword [0x1415cc328]
mov ecx, dword [0x1415cc32c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0x5040e100
xor ecx, 0xd44ceb91
and eax, 0x7940e164
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
and ecx, 0x573438bb
and eax, 0xa8cbc744
sub eax, ecx
cmp eax, 0xe58de5eb
ja 0x1401c86af
mov qword [rbp + 0x78], r8
test rsi, rsi
je 0x1401c87d0
sub rsp, 0x20
mov ecx, 0x410
xor edx, edx
mov r8d, esi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
mov r13, rax
movabs rax, 0x3ac45188069430e1
mov rcx, rax
not rcx
add rcx, rax
add rcx, r13
nop word cs:[rax + rax]
mov eax, dword [str.Bz__qv]
xor edx, edx
div dword [0x1415cc334]
add eax, 0x61f145ba
xor eax, 0x3e5f127f
cmp eax, 0x1ea147c3
jb 0x1401c8740
cmp rcx, 0xfffffffffffffffe
mov rdi, qword [rbp - 0x38]
mov r14, qword [rbp - 0x30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcessTimes]
jae 0x1401c87dd
nop word cs:[rax + rax]
mov eax, dword [0x1415cc354]
add eax, dword [0x1415cc350]
mov ecx, eax
and ecx, 0x6c129757
add ecx, ecx
sub eax, ecx
add eax, 0xec129757
xor eax, 0x12a5cc91
imul rax, rax, 0x3abcef55
shr rax, 0x3c
cmp eax, 0xe56ab271
ja 0x1401c8780
mov rax, r13
inc rax
cmp rax, 1
jbe 0x1401c88e6
jmp 0x1401c89ac
xor r10d, r10d
xor r11d, r11d
xor esi, esi
jmp 0x1401c8a80
mov eax, dword [0x1415cc338]
xor eax, dword [0x1415cc33c]
or eax, 0xdbead0f8
mov ecx, eax
and ecx, 0x714442c7
xor eax, 0x714442c7
lea eax, [rax + rcx*2]
add eax, 0x814b830a
cmp eax, 0x26113c4b
jae 0x1401c8830
jmp 0x1401c8930
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
jmp 0x1401c85d3
mov eax, dword [0x1415cc340]
or eax, dword [0x1415cc344]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3a3d8d3e
and ecx, 0xc5c272c1
imul ecx, edx
mov edx, eax
and edx, 0xc5c272c1
or eax, 0xc5c272c1
imul eax, edx
add eax, ecx
add eax, 0xd3ccb2e
imul rsi, rax, 0x24c34b6d
shr rsi, 0x3d
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
cmp esi, 0x4d6d40a1
ja 0x1401c8930
mov rsi, qword [rbp + 0xa8]
nop word cs:[rax + rax]
mov eax, dword [0x1415cc348]
imul eax, dword [0x1415cc34c]
mov ecx, eax
not ecx
and ecx, 0x63d6e62
mov edx, eax
and edx, 0x9c2919d
imul edx, ecx
mov ecx, eax
and ecx, 0x63d6e62
or eax, 0x63d6e62
imul eax, ecx
add eax, edx
or eax, 0xf592bb82
imul eax, eax, 0xe2eb6471
cmp eax, 0xec047890
ja 0x1401c88a0
mov eax, dword [0x1415cc358]
mov ecx, dword [0x1415cc35c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0xc28a57f0
cmp eax, 0x1a93cbf8
jne 0x1401c8950
jmp 0x1401c89e0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
jmp 0x1401c8830
sub rsp, 0x20
mov ecx, 0x1000
xor edx, edx
mov r8d, esi
call fcn.14021c5c0
add rsp, 0x20
test r15b, r15b
jne 0x1401c89e0
mov r13, rax
mov eax, dword [0x1415cc360]
xor eax, dword [0x1415cc364]
imul eax, eax, 0x5f61f7f3
mov ecx, eax
xor ecx, 0x21619a31
add ecx, eax
and eax, 0xde9e65ce
sub ecx, eax
xor ecx, 0x9be7b489
cmp ecx, 0x8f0be04c
je 0x1401c896f
mov rax, r13
dec rax
cmp rax, 0xfffffffffffffffe
jae 0x1401c89fd
mov eax, dword [0x1415cc370]
xor edx, edx
div dword [0x1415cc374]
add eax, 0x2b4d3230
or eax, 0xca5e53eb
cmp eax, 0xb5b2c9e1
jae 0x1401c8e70
jmp 0x1401c8ecc
sub rsp, 0x20
mov ecx, 0x1000
xor edx, edx
mov r8d, esi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
add rsp, 0x20
jmp 0x1401c8950
mov eax, dword [0x1415cc368]
or eax, dword [0x1415cc36c]
mov ecx, 0xd730b6d3
imul rax, rcx
shr rax, 0x3c
xor eax, 0x3517cb83
mov ecx, eax
and ecx, 0x10c003
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x8078e033
cmp eax, 0x627d4bae
jb 0x1401c8a64
nop word cs:[rax + rax]
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov r10d, 0
mov r11d, 0
mov esi, 0
mov al, 1
test al, al
jne 0x1401c8a80
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x1401c8a40
mov ecx, dword [0x1415cc3f0]
mov edx, dword [0x1415cc3f4]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xfb06d874
and ecx, 0x4f9278b
or ecx, r9d
or eax, r8d
and r8d, 0xfb06d874
and edx, 0x4f9278b
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
and ecx, 0x80e171d
xor eax, 0x80e171d
lea eax, [rax + rcx*2]
add eax, 0x17cadfca
and eax, 0xe75809c7
cmp eax, 0x8b1842e6
mov r12, qword [rbp - 0x50]
mov r14, qword [rbp + 0x18]
mov rbx, qword [rbp - 0x48]
mov qword [rbp + 0x50], r11
mov qword [rbp - 0x18], r10
ja 0x1401c8cc0
nop dword [rax + rax]
mov eax, dword [0x1415cc3f8]
xor edx, edx
div dword [0x1415cc3fc]
mov ecx, eax
and ecx, 0x3f94a4e8
mov edx, ecx
not edx
and edx, 0x4b67e787
mov r8d, eax
and r8d, 0x34900068
imul r8d, edx
and eax, 0xb04a480
or ecx, 0x4b67e787
imul ecx, eax
add ecx, r8d
mov eax, ecx
not eax
or eax, 0xaa15d8f9
lea edi, [rax + rcx]
inc edi
mov rax, qword [rbp + 0xa0]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
mov rax, qword [rbp - 0x10]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [r14 + 0x30], 0
mov qword [r14 + 0x38], 8
movups xmmword [r14 + 0x40], xmm6
movabs rax, 0x8000000000000000
mov qword [r14 + 0x60], rax
mov rcx, qword [rbp + 0xa8]
mov qword [r14 + 0xe0], rcx
mov qword [r14 + 0x80], rax
mov qword [r14 + 0x50], 8
mov qword [r14 + 0x58], 0
mov qword [r14 + 0x98], rax
mov qword [r14 + 0xb8], rax
mov rax, qword [rbp - 8]
movups xmmword [rax], xmm6
mov rax, qword [rbp + 0x98]
mov qword [r14], rax
mov rax, qword [rbp + 0x70]
mov qword [r14 + 8], rax
mov dword [r14 + 0xd8], 1
mov qword [r14 + 0xf8], rsi
mov rax, qword [rbp + 8]
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r14 + 0x120], r11
mov qword [r14 + 0x128], r10
mov dword [r14 + 0x150], 0
mov byte [r14 + 0x154], 1
movups xmmword [rbx + 0x10], xmm6
movups xmmword [rbx], xmm6
mov rcx, qword [rbp + 0x20]
movzx eax, byte [rcx + 8]
mov byte [r12 + 8], al
mov rax, qword [rcx]
mov qword [r12], rax
mov rax, qword [rbp + 0x28]
mov r8, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp + 0x90]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov rdx, r12
mov r9, qword [rbp + 0x78]
call fcn.14021c5f0
add rsp, 0x30
mov r13, qword [r14]
sub rsp, 0x20
mov r8d, 0x150
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp]
call fcn.14022aa10
mov r10, qword [rbp - 0x18]
mov r11, qword [rbp + 0x50]
add rsp, 0x20
cmp edi, 0x18093fca
ja 0x1401c8cc0
cmp r13, 2
jne 0x1401c8e00
mov r8, qword [rbp + 0x38]
mov r14, qword [rbp + 0x40]
movabs rbx, 0x3609820c033b024a
jmp 0x1401c939d
mov rax, qword [rbp + 0xa0]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
mov rax, qword [rbp - 0x10]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [r14 + 0x30], 0
mov qword [r14 + 0x38], 8
movups xmmword [r14 + 0x40], xmm6
movabs rax, 0x8000000000000000
mov qword [r14 + 0x60], rax
mov rcx, qword [rbp + 0xa8]
mov qword [r14 + 0xe0], rcx
mov qword [r14 + 0x80], rax
mov qword [r14 + 0x50], 8
mov qword [r14 + 0x58], 0
mov qword [r14 + 0x98], rax
mov qword [r14 + 0xb8], rax
mov rax, qword [rbp - 8]
movups xmmword [rax], xmm6
mov rax, qword [rbp + 0x98]
mov qword [r14], rax
mov rax, qword [rbp + 0x70]
mov qword [r14 + 8], rax
mov dword [r14 + 0xd8], 1
mov qword [r14 + 0xf8], rsi
mov rax, qword [rbp + 8]
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r14 + 0x120], r11
mov qword [r14 + 0x128], r10
mov dword [r14 + 0x150], 0
mov byte [r14 + 0x154], 1
movups xmmword [rbx + 0x10], xmm6
movups xmmword [rbx], xmm6
mov rcx, qword [rbp + 0x20]
movzx eax, byte [rcx + 8]
mov byte [r12 + 8], al
mov rax, qword [rcx]
mov qword [r12], rax
mov rax, qword [rbp + 0x28]
mov r8, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp + 0x90]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov rdx, r12
mov r9, qword [rbp + 0x78]
call fcn.14021c5f0
add rsp, 0x10
mov r8d, 0x150
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp]
call fcn.14022aa10
mov r10, qword [rbp - 0x18]
mov r11, qword [rbp + 0x50]
add rsp, 0x20
jmp 0x1401c8b00
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x48]
mov qword [rax], rcx
mov r14, qword [rbp + 0x40]
mov qword [rax + 8], r14
mov rdx, qword [rbp + 0x80]
mov qword [rax + 0x10], rdx
cmp rdx, rcx
mov rdi, qword [rbp + 0x30]
movabs rbx, 0x3609820c033b024a
jne 0x1401c92be
mov eax, dword [0x1415cc400]
xor edx, edx
div dword [0x1415cc404]
or eax, 0x260b5fa
add eax, 0x65de5ebd
not eax
or eax, 0xf274a443
cmp eax, 0x6b12aef6
jne 0x1401c9290
jmp 0x1401c9400
mov eax, dword [0x1415cc37c]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x1415cc378]
xor ecx, eax
xor ecx, 0xa09a0c4d
imul rsi, rcx, 0x50b481cd
shr rsi, 0x3c
xor esi, 0xd6dafdd5
mov qword [r14], 0
mov qword [rdi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r13
mov rdx, r14
mov r8, rdi
mov r9, rdi
call rbx
add rsp, 0x30
cmp esi, 0xd61262d3
jae 0x1401c8f00
mov qword [r14], 0
mov qword [rdi], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rcx, r13
mov rdx, r14
mov r8, rdi
mov r9, rdi
call fcn.14021c630
add rsp, 0x30
jmp 0x1401c8e70
test eax, eax
movabs rbx, 0xd6bf94d5e57a42bd
jne 0x1401c8f45
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415cc380]
mov ecx, dword [0x1415cc384]
add eax, ecx
add eax, 0x32777223
or eax, 0x60aa6ffb
imul eax, eax, 0xe9debf93
cmp eax, 0x1ed1c73a
jb 0x1401c8f20
mov r14, qword [r14]
nop dword [rax + rax]
mov eax, dword [0x1415cc388]
xor edx, edx
div dword [0x1415cc38c]
add eax, 0x3b8911b0
imul rax, rax, 0x7ce2c883
shr rax, 0x3e
cmp eax, 0x3a30764
je 0x1401c8f50
test r15b, r15b
jne 0x1401c90c0
nop
mov eax, dword [0x1415cc390]
imul eax, dword [0x1415cc394]
mov ecx, eax
not ecx
and ecx, 0xfe024ebd
mov edx, eax
and edx, 0x1fdb142
imul edx, ecx
mov ecx, eax
and ecx, 0xfe024ebd
or eax, 0xfe024ebd
imul eax, ecx
lea edi, [rax + rdx]
add edi, 0xd67160d6
xor edi, 0x25889b8e
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x18
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
cmp edi, 0x108beaa4
jb 0x1401c90c0
mov rsi, rax
test rax, rax
je 0x1401c9af6
mov r10, qword [rbp + 0x78]
nop dword [rax + rax]
mov ecx, dword [0x1415cc3b0]
mov edx, dword [0x1415cc3b4]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xb9537757
and ecx, 0x46ac88a8
or ecx, r9d
or eax, r8d
and r8d, 0xb9537757
and edx, 0x46ac88a8
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
and ecx, 0x661400f
or eax, 0x661400f
add ecx, eax
add ecx, 0xd671d9f4
not ecx
and ecx, 0x164b87de
mov rax, r14
mul rbx
cmp ecx, 0x95d73fb8
je 0x1401c9000
shr rdx, 0x17
mov eax, dword [0x1415cc3b8]
mov ecx, dword [0x1415cc3bc]
mov r8d, ecx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, ecx
or eax, ecx
imul eax, r9d
add eax, r8d
or eax, 0x1f7ddb0f
xor eax, 0x185af8aa
add eax, 0x65518ee5
cmp eax, 0x2c2d0e8f
jae 0x1401c90e0
jmp 0x1401c917c
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x18
xor ecx, ecx
call fcn.1401b5e70
add rsp, 0x20
jmp 0x1401c8f80
mov eax, dword [0x1415cc3c0]
mov ecx, dword [0x1415cc3c4]
mov r8d, ecx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, ecx
or eax, ecx
imul eax, r9d
add eax, r8d
mov ecx, eax
not ecx
mov r8d, eax
and r8d, 0xfb6f2a38
and ecx, 0x490d5c7
imul ecx, r8d
mov r8d, eax
and r8d, 0x490d5c7
or eax, 0x490d5c7
imul eax, r8d
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x57253d5
and eax, 0xfa8dac2a
sub eax, ecx
add eax, 0xfabd13c7
movabs rcx, 0xfffffffd49ef6f00
lea r11, [rcx + rdx]
cmp r11, r10
mov ecx, 0
cmovbe rcx, r11
mov qword [rsi], 1
cmp eax, 0x97beca5a
jbe 0x1401c9190
mov qword [rsi], 1
jmp 0x1401c90e0
mov eax, dword [0x1415cc3c8]
mov edx, dword [0x1415cc3cc]
mov r8d, eax
xor r8d, edx
not r8d
or eax, edx
and eax, r8d
mov edx, eax
xor edx, 0xd8f3f67d
xor eax, 0x240c0980
and eax, 0xbcafab85
mov r8d, edx
and r8d, 0x4350547a
imul r8d, eax
mov eax, edx
and eax, 0xbcafab85
or edx, 0xbcafab85
imul edx, eax
add edx, r8d
and edx, 0xf1bd5372
cmp edx, 0x9c726a43
jne 0x1401c91f7
mov qword [rsi + 8], 1
mov qword [rsi + 0x10], r13
sub r10, rcx
nop word [rax + rax]
mov eax, dword [0x1415cc3d0]
xor edx, edx
div dword [0x1415cc3d4]
xor eax, 0x1014151e
and eax, 0x9ef61d5e
xor eax, 0x30e2c483
mov qword [rsi + 8], 1
mov qword [rsi + 0x10], r13
cmp eax, 0x215132bc
ja 0x1401c9200
jmp 0x1401c8a80
mov eax, dword [0x1415cc3e8]
xor eax, dword [0x1415cc3ec]
and eax, 0x4114b21
add eax, 0x9a0f367a
xor eax, 0x88680ecf
mov qword [r14 - 0x158], r13
mov qword [r14 - 0x150], r12
cmp eax, 0xe47b4762
jae 0x1401c9280
mov r14, qword [rbp + 0x40]
jmp 0x1401c93a2
mov qword [r14 - 0x158], r13
mov qword [r14 - 0x150], r12
jmp 0x1401c9240
sub rsp, 0x20
mov rcx, qword [rbp + 0x60]
call fcn.1401ce640
mov rax, qword [rbp + 0x60]
add rsp, 0x20
test r15b, r15b
jne 0x1401c9400
test r15b, r15b
jne 0x1401c92ae
mov r14, qword [rax + 8]
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov eax, dword [0x1415cc408]
mov ecx, eax
not ecx
or ecx, dword [0x1415cc40c]
add eax, ecx
inc eax
imul rcx, rax, 0x6d0bfee5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x19
and eax, 0xfffffffd
cmp eax, 0x5153382a
jne 0x1401c931d
imul rax, qword [rbp + 0x80], 0x158
mov qword [r14 + rax], r13
lea rcx, [r14 + rax]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
mov rdx, rdi
call fcn.14022aa10
add rsp, 0x20
mov r12, qword [rbp + 0x80]
nop word cs:[rax + rax]
mov esi, dword [0x1415cc410]
sub esi, dword [0x1415cc414]
mov eax, esi
not eax
and eax, 0x1b56b2f
and esi, 0xfe4a94d0
sub esi, eax
mov eax, esi
not eax
and eax, 0x8b8ee340
and esi, 0x74711cbf
sub esi, eax
imul rax, r12, 0x158
mov qword [r14 + rax], r13
lea rcx, [r14 + rax]
add rcx, 8
sub rsp, 0x20
mov r8d, 0x150
mov rdx, rdi
call fcn.14022aa10
add rsp, 0x20
cmp esi, 0x935951d
je 0x1401c9330
inc r12
mov qword [rbp + 0x80], r12
mov r8, qword [rbp + 0x38]
mov edi, 0xfa67803f
add r8, 8
mov ecx, dword [0x1415cc418]
mov eax, dword [0x1415cc41c]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa73372d9
and ecx, 0x58cc8d26
imul ecx, edx
mov edx, eax
and edx, 0x58cc8d26
or eax, 0x58cc8d26
imul eax, edx
add eax, ecx
or eax, 0x3eff5fef
cmp eax, 0x101aa95f
jb 0x1401c93a6
cmp r8, qword [rbp - 0x80]
jne 0x1401c7c70
jmp 0x1401c96d0
sub rsp, 0x20
mov rcx, qword [rbp + 0x60]
call fcn.1401ce640
add rsp, 0x20
jmp 0x1401c9290
mov eax, 0xed196bb1
nop dword [rax + rax]
mov ecx, dword [0x1415cc1c8]
mov edx, dword [0x1415cc1cc]
mov r9d, ecx
not r9d
and r9d, edx
mov r10d, edx
not r10d
and r10d, ecx
imul r10d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r10d
mov edx, ecx
not edx
and edx, 0x62e7db80
mov r9d, ecx
and r9d, 0x9d18247f
imul r9d, edx
mov edx, ecx
and edx, 0x62e7db80
or ecx, 0x62e7db80
imul ecx, edx
add ecx, r9d
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x1c1e4d5c
cmp ecx, 0x6b3e680b
je 0x1401c9420
nop word cs:[rax + rax]
mov eax, dword [0x1415cc1d0]
or eax, dword [str.R_rW9]
mov ecx, eax
or ecx, 0x44986913
mov edx, eax
not edx
and edx, 0x3242804c
mov r9d, ecx
and r9d, 0xc9b577a2
imul r9d, edx
and ecx, 0x364a885d
or eax, 0x76dae95f
imul eax, ecx
add eax, r9d
mov ecx, eax
and ecx, 0x28692662
xor eax, 0x28692662
lea eax, [rax + rcx*2]
cmp eax, 0xf73ae3ed
je 0x1401c94a0
cmp byte [rbp + 0x90], 0
je 0x1401c9650
nop word cs:[rax + rax]
mov ecx, dword [0x1415cc1e0]
mov eax, dword [0x1415cc1e4]
mov edx, ecx
or edx, eax
not ecx
not eax
and eax, ecx
not eax
and eax, edx
mov ecx, 0x2511da37
sub ecx, eax
add eax, 0xdaee25c8
mov edx, eax
and edx, 0x88e21c5a
and ecx, 0x771de3a5
imul ecx, edx
mov edx, eax
and edx, 0x771de3a5
or eax, 0x771de3a5
imul eax, edx
add eax, ecx
or eax, 0x6a9e59e1
cmp eax, 0xbb01bece
je 0x1401c9510
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x38]
mov rbx, qword [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x1415cc1e8]
mov edx, dword [0x1415cc1ec]
mov r8d, eax
and r8d, edx
add r8d, r8d
add eax, edx
sub eax, r8d
imul rax, rax, 0xae21d29
shr rax, 0x3b
mov edx, eax
not edx
or eax, 0x10252080
imul eax, eax, 0x4b800828
and edx, 0x4120745
imul edx, edx, 0x5fb72fed
add edx, eax
cmp edx, 0xd065fb12
ja 0x1401c9590
test rcx, rcx
je 0x1401c99cf
add rcx, 0x110
nop word [rax + rax]
mov eax, dword [0x1415cc1fc]
mov edx, eax
xor edx, eax
not edx
and edx, dword [0x1415cc1f8]
xor edx, eax
and edx, 0x80808100
imul eax, edx, 0x455e1d59
cmp eax, 0x6b02e565
je 0x1401c95f0
nop word [rax + rax]
mov eax, dword [0x1415cc200]
mov edx, dword [0x1415cc204]
not eax
not edx
and edx, eax
mov eax, edx
not eax
or edx, 0xd7fb48e6
or eax, 0x7d7fffff
and eax, edx
cmp eax, 0x67595b07
je 0x1401c9620
jmp 0x1401c9a2b
mov eax, dword [0x1415cc1d8]
sub eax, dword [0x1415cc1dc]
mov ecx, eax
xor ecx, 0xf96588a2
and eax, 0x69a775d
add eax, eax
sub eax, ecx
add eax, 0xd41cf8df
and eax, 0xb1acf4e3
cmp eax, 0x3b1c55f8
jb 0x1401c9650
test rsi, rsi
je 0x1401c7b2d
mov ecx, 0xab0d4a61
shr rsi, 1
mov rbx, qword [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x1415cc210]
xor edx, edx
div dword [0x1415cc214]
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0xcf9dc47f
or eax, 0x6925aa8b
cmp eax, 0x3f9f194d
jbe 0x1401c96a0
mov rax, rsi
jmp 0x1401c9a8f
xor eax, eax
mov rdi, qword [rbp + 0x68]
mov rbx, qword [rbp + 0x48]
mov r15, qword [rbp + 0x80]
nop word cs:[rax + rax]
test al, al
jne 0x1401c96f0
test r15, r15
je 0x1401c97ce
mov eax, dword [0x1415cc440]
mov ecx, dword [0x1415cc444]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0xb643e4e9
or ecx, 0x8baa4e10
and ecx, 0xdbee6e16
cmp ecx, 0xf7188c8d
jne 0x1401ca079
jmp 0x1401ca0c0
mov eax, dword [0x1415cc220]
or eax, dword [0x1415cc224]
mov ecx, eax
and ecx, 0x3597ff76
or eax, 0x3597ff76
add eax, ecx
mov ecx, eax
xor ecx, 0xaca3c8ce
xor eax, 0x12182420
or eax, 0xc5e7531f
add eax, ecx
inc eax
cmp eax, 0xdb1f62aa
mov rdx, qword [rbp + 0x68]
jbe 0x1401c9784
pxor xmm0, xmm0
movdqu xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
pxor xmm0, xmm0
nop dword [rax + rax]
mov eax, dword [0x1415cc228]
mov ecx, dword [0x1415cc22c]
xor ecx, eax
not ecx
and ecx, eax
add ecx, 0xb3c054f5
shr ecx, 2
imul rax, rcx, 0x4365bb59
shr rax, 0x3c
movdqu xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
cmp eax, 0xf435d883
jae 0x1401c9790
jmp 0x1401ca5a7
xor eax, eax
test al, al
je 0x1401c97e4
pxor xmm0, xmm0
movdqu xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
pxor xmm0, xmm0
nop dword [rax + rax]
mov eax, dword [0x1415cc420]
xor edx, edx
div dword [0x1415cc424]
mov ecx, eax
not ecx
and ecx, 0x1b9c087
mov edx, eax
and edx, 0x3e463f78
imul edx, ecx
mov ecx, eax
and ecx, 0x1b9c087
or eax, 0x1b9c087
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xcb772483
mov r8d, edx
and r8d, 0x36570a3d
and ecx, 0x88d140
imul ecx, r8d
and edx, 0xc9a8f5c2
or eax, 0xcbfff5c3
imul eax, edx
add eax, ecx
movdqu xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
cmp eax, 0x4e1d9d7d
je 0x1401c97f0
mov eax, 0x822aec31
nop dword [rax]
mov ecx, dword [0x1415cc428]
imul ecx, dword [0x1415cc42c]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x643387e6
and edx, 0x9bcc7819
imul edx, r8d
mov r8d, ecx
and r8d, 0x9bcc7819
or ecx, 0x9bcc7819
imul ecx, r8d
add ecx, edx
mov edx, ecx
not edx
and edx, 0xaf4cf6eb
mov r8d, ecx
and r8d, 0x50b30914
imul r8d, edx
mov edx, ecx
and edx, 0xaf4cf6eb
or ecx, 0xaf4cf6eb
imul ecx, edx
add ecx, r8d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x64f91f45
ja 0x1401c9870
nop word [rax + rax]
mov eax, dword [0x1415cc430]
mov ecx, dword [0x1415cc434]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul eax, eax, 0xf12bb023
mov ecx, eax
and ecx, 0x5d22ea6
xor ecx, 0x1420020
and eax, 0x1420020
or eax, ecx
or eax, 0xfa2dd159
cmp eax, 0x5c220cbc
je 0x1401c98f0
test rbx, rbx
je 0x1401ca5a7
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415cc438]
mov ecx, dword [0x1415cc43c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x5bbcd9ac
add ecx, eax
and eax, 0x24432653
sub ecx, eax
or ecx, 0xa7026291
mov eax, ecx
xor eax, 0x380b1ce5
add eax, ecx
and ecx, 0xc7f4e31a
sub eax, ecx
cmp eax, 0xf030cb29
jb 0x1401c9970
jmp 0x1401ca5a7
sub rsp, 0x20
call fcn.14012bd20
add rsp, 0x20
mov rcx, rax
nop
mov eax, dword [0x1415cc1f0]
xor edx, edx
div dword [0x1415cc1f4]
mov edx, eax
not edx
and edx, 0x8c16d0e9
mov r8d, eax
and r8d, 0x73e92f16
imul r8d, edx
mov edx, eax
and edx, 0x8c16d0e9
or eax, 0x8c16d0e9
imul eax, edx
add eax, r8d
and eax, 0xfd8cc71a
imul eax, eax, 0x24984816
cmp eax, 0x47d7df45
jae 0x1401c99e0
shr rsi, 1
nop
mov eax, dword [0x1415cc208]
mov edx, dword [0x1415cc20c]
mov r8d, edx
not r8d
and r8d, eax
xor edx, eax
add edx, eax
sub edx, r8d
mov eax, edx
and eax, 0x47a0e2b1
xor edx, 0xc7a0e2b1
lea eax, [rdx + rax*2]
mov edx, eax
xor edx, 0xb504c00
xor eax, 0x148c9165
and eax, 0xd4acb3e7
and edx, 0x2b534c18
or edx, eax
mov rax, qword [rcx]
mov rax, qword [rax + 0x208]
cmp rax, rsi
cmovbe rax, rsi
cmp edx, 0x53ce9c5d
jbe 0x1401c9a30
mov qword [r13], rax
mov r11, qword [rbp + 0x70]
mov qword [r11], rdi
sub r14, rdi
jb 0x1401c9fe3
mov eax, dword [0x1415cc488]
or eax, dword [0x1415cc48c]
mov ecx, eax
xor ecx, 0x28502203
xor eax, 0xd3ad91a8
mov edx, eax
and edx, 0x478edcfc
and ecx, 0xb8712303
imul ecx, edx
mov edx, eax
and edx, 0xb8712303
or eax, 0xb8712303
imul eax, edx
add eax, ecx
imul rax, rax, 0x5571e9bb
shr rax, 0x3d
cmp eax, 0xf9270ba7
jne 0x1401c9b66
jmp 0x1401c9be2
mov eax, dword [0x1415cc398]
and eax, dword [0x1415cc39c]
and eax, 0xfdcd05ec
cmp eax, 0x8849edc
jne 0x1401c9fe5
jmp 0x1401ca01f
mov eax, dword [0x1415cc2f8]
mov ecx, dword [0x1415cc2fc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0x30981200
mov ecx, eax
xor ecx, 0x2ee30ecd
or eax, 0x10181000
and eax, ecx
cmp eax, 0xcb005627
jne 0x1401c9f67
jmp 0x1401c9fb1
mov ecx, dword [0x1415cc490]
mov edx, dword [0x1415cc494]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xb8858f4a
and ecx, 0x477a70b5
or ecx, r9d
or eax, r8d
and r8d, 0xb8858f4a
and edx, 0x477a70b5
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0x2c0810d4
and ecx, 0x6c1e31fc
xor eax, 0x4237292a
lea eax, [rax + rcx*2]
imul rcx, rax, 0x66e5c75
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
mov qword [r12], r15
mov qword [r12 + 8], r11
cmp eax, 0x7a7fbc3d
jne 0x1401c9bf0
mov qword [r12], r15
mov qword [r12 + 8], r11
jmp 0x1401c9b66
mov rax, qword [rbp + 0x148]
lea rax, [rax + rdi*8]
mov ecx, dword [0x1415cc498]
add ecx, dword [0x1415cc49c]
imul ecx, ecx, 0xc3d78157
add ecx, 0x269e5f9c
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xf3ca0d13
and edx, 0xc35f2ec
imul edx, r8d
mov r8d, ecx
and r8d, 0xc35f2ec
or ecx, 0xc35f2ec
imul ecx, r8d
add ecx, edx
cmp ecx, 0xc3a48eec
mov r10, qword [rbp + 0x158]
ja 0x1401c9cbd
mov ecx, dword [0x1415cc4a0]
sub ecx, dword [0x1415cc4a4]
add ecx, 0xee9f8531
mov edx, ecx
or edx, 0x80c76ec6
mov r8d, ecx
not r8d
and r8d, 0x2b308030
mov r9d, edx
and r9d, 0xd40913cf
imul r9d, r8d
and edx, 0x2bf6ec30
or ecx, 0xabf7eef6
imul ecx, edx
add ecx, r9d
mov qword [r12 + 0x10], r13
mov qword [r12 + 0x18], rax
mov qword [r12 + 0x20], r14
mov qword [r12 + 0x28], r10
mov qword [r12 + 0x30], r11
mov qword [r12 + 0x38], r13
cmp ecx, 0x52f3125f
jne 0x1401c9ce0
mov qword [r12 + 0x10], r13
mov qword [r12 + 0x18], rax
mov qword [r12 + 0x20], r14
mov qword [r12 + 0x28], r10
mov qword [r12 + 0x30], r11
mov qword [r12 + 0x38], r13
jmp 0x1401c9c50
mov rax, qword [rbp + 0x148]
mov qword [r12 + 0x40], rax
mov qword [r12 + 0x48], rdi
mov qword [r12 + 0x50], r10
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x38]
test rsi, rsi
je 0x1401c9d4e
mov eax, dword [0x1415cc4e0]
sub eax, dword [0x1415cc4e4]
add eax, 0x767787a4
mov ecx, eax
xor ecx, 0x820c00c
and ecx, eax
and ecx, 0xa870cc0c
cmp ecx, 0x98386521
mov r14, qword [rbp + 0x98]
jbe 0x1401ca33e
jmp 0x1401ca3a5
sub rsp, 0x20
call fcn.14012bd20
add rsp, 0x20
mov r14, qword [rbp + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x1415cc4a8]
and ecx, dword [0x1415cc4ac]
or ecx, 0xcbdff7b6
imul rcx, rcx, 0x29d6c96b
shr rcx, 0x3d
cmp ecx, 0x5bc1e5c4
ja 0x1401c9d70
mov r9, qword [rax]
nop dword [rax + rax]
mov eax, dword [0x1415cc4b0]
mov ecx, dword [0x1415cc4b4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xfd82029b
and eax, 0x27dfd64
sub eax, ecx
xor eax, 0x34dbba27
add eax, 0xcfbb17f6
cmp eax, 0x62b92749
jb 0x1401c9da0
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r8, qword [rax + 0x38]
test r8, r8
je 0x1401c9ebc
mov eax, dword [0x1415cc4c0]
xor edx, edx
div dword [0x1415cc4c4]
nop
mov eax, dword [0x1415cc4c8]
mov ecx, dword [0x1415cc4cc]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0xb52fb7e
mov eax, ecx
xor eax, 0x4699a461
or ecx, 0xb9665b9e
and ecx, eax
add ecx, 0x9811d78
cmp ecx, 0x3e97f0d6
jb 0x1401c9e20
mov rax, qword [r8 + 0x110]
nop word cs:[rax + rax]
mov ecx, dword [0x1415cc4d0]
imul ecx, dword [0x1415cc4d4]
imul rcx, rcx, 0x7ebf41e3
shr rcx, 0x3e
or ecx, 0x140c0dd8
xor ecx, 0xbe049c40
cmp ecx, 0x5fbd54ce
jb 0x1401c9e70
cmp rax, r9
jne 0x1401c9f1d
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
xor r9d, r9d
call fcn.1401ce9a0
add rsp, 0x20
jmp 0x1401ca3c3
sub r9, 0xffffffffffffff80
sub rsp, 0x20
mov rcx, r14
mov rdx, r9
mov r8, r12
call fcn.1402522a0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415cc4b8]
xor edx, edx
div dword [0x1415cc4bc]
mov ecx, eax
or ecx, 0x25b6792d
xor ecx, 0x95474986
or eax, 0x6ab8b679
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0xe988b0f6
add eax, ecx
inc eax
cmp eax, 0x37436535
jae 0x1401c9ee0
jmp 0x1401ca3c3
sub r9, 0xffffffffffffff80
sub rsp, 0x20
mov rcx, r14
mov rdx, r9
mov r9, r12
call fcn.140253140
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415cc4d8]
add eax, dword [0x1415cc4dc]
and eax, 0x1cbfa23
add eax, 0x1371e4da
or eax, 0xbcd5d14a
cmp eax, 0x287a86d2
jbe 0x1401c9f40
jmp 0x1401ca3c3
mov eax, dword [0x1415cc304]
add eax, dword [0x1415cc300]
mov ecx, eax
xor ecx, 0x11c39ec
xor eax, 0xbaa20200
mov edx, eax
and edx, 0xe443c613
and ecx, 0x1bbc39ec
imul ecx, edx
mov edx, eax
and edx, 0x1bbc39ec
or eax, 0x1bbc39ec
imul eax, edx
add eax, ecx
xor eax, 0x83fbc23f
ud2
ud2
ud2
mov eax, dword [0x1415cc3a0]
mov ecx, dword [0x1415cc3a4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul eax, eax, 0x52421ae7
add eax, 0x51d53b64
mov ecx, eax
and ecx, 0xed6ead6
xor eax, 0xed6ead6
lea eax, [rax + rcx*2]
ud2
ud2
mov eax, dword [0x1415cc448]
xor edx, edx
div dword [0x1415cc44c]
and eax, 0x3b216f81
imul rsi, rax, 0x38655d4b
shr rsi, 0x3a
add esi, 0x46c51605
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
cmp esi, 0x416e3bcd
jae 0x1401ca0dd
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x28
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
jmp 0x1401ca079
mov rcx, rax
mov eax, 0x9e659b93
nop word cs:[rax + rax]
mov edx, dword [0x1415cc450]
add edx, dword [0x1415cc454]
mov r8d, edx
not r8d
and r8d, 0xf0c41457
mov r9d, edx
and r9d, 0xf3beba8
imul r9d, r8d
mov r8d, edx
and r8d, 0xf0c41457
or edx, 0xf0c41457
imul edx, r8d
add edx, r9d
mov r8d, edx
and r8d, 0x1378ccf8
add r8d, r8d
sub edx, r8d
add edx, 0x1378ccf8
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x7d61df53
je 0x1401ca0f0
test rcx, rcx
je 0x1401ca184
mov eax, dword [0x1415cc46c]
add eax, dword [0x1415cc468]
and eax, 0xe8f8c95f
add eax, 0xb4cb1053
and eax, 0xecbb18aa
cmp eax, 0x6778e6e2
jne 0x1401ca209
jmp 0x1401ca25a
mov eax, dword [0x1415cc458]
mov ecx, dword [0x1415cc45c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0x6316f95a
imul rax, rcx, 0x1df318b7
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1f
or ecx, 0x967f9cac
cmp ecx, 0x9dca1b60
ja 0x1401ca1f2
mov eax, dword [0x1415cc460]
mov ecx, dword [0x1415cc464]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
add ecx, 0x1ec3c58e
xor ecx, 0xa6e32d54
ud2
ud2
mov eax, dword [0x1415cc470]
mov edx, dword [0x1415cc474]
mov r8d, eax
and r8d, edx
or eax, edx
add eax, r8d
add eax, 0x48aeaa4d
mov edx, eax
not edx
and edx, 0xbe13cbaa
mov r8d, eax
and r8d, 0x41ec3455
imul r8d, edx
mov edx, eax
and edx, 0xbe13cbaa
or eax, 0xbe13cbaa
imul eax, edx
add eax, r8d
mov qword [rcx], rbx
cmp eax, 0xc56f4e06
jae 0x1401ca25f
mov qword [rcx], rbx
jmp 0x1401ca209
mov qword [rcx + 8], r14
mov eax, dword [0x1415cc478]
mov edx, eax
not edx
or edx, dword [0x1415cc47c]
add eax, edx
inc eax
mov edx, eax
and edx, 0x4bb71928
or eax, 0x4bb71928
add eax, edx
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x446b8f6b
and edx, 0xbb947094
imul edx, r8d
mov r8d, eax
and r8d, 0xbb947094
or eax, 0xbb947094
imul eax, r8d
add eax, edx
or eax, 0x25bede62
cmp eax, 0x181a6bb3
jb 0x1401ca320
mov eax, dword [0x1415cc480]
xor edx, edx
div dword [0x1415cc484]
mov edx, eax
not edx
or edx, 0x868ccb02
or eax, 0x120cbf78
and eax, edx
not eax
or eax, 0x69730085
imul rdx, rax, 0x142f93ff
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
mov qword [rcx + 0x10], r15
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
mov qword [rdi], rcx
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], 1
cmp eax, 0xd09efb0a
jbe 0x1401ca5a7
mov qword [rcx + 0x10], r15
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
mov qword [rdi], rcx
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], 1
jmp 0x1401ca2bf
mov eax, dword [0x1415cc4e8]
sub eax, dword [0x1415cc4ec]
mov ecx, eax
not ecx
and ecx, 0x2b243e4c
mov edx, eax
and edx, 0xd4dbc1b3
imul edx, ecx
mov ecx, eax
and ecx, 0x2b243e4c
or eax, 0x2b243e4c
imul eax, ecx
add eax, edx
mov ecx, 0x9b9c8253
imul rcx, rax
shr rcx, 0x3f
imul edi, ecx, 0x76b78542
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, rsi
xor r9d, r9d
call fcn.1401ce9a0
add rsp, 0x20
cmp edi, 0x8f9126bf
jbe 0x1401ca3c3
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, rsi
xor r9d, r9d
call fcn.14021c670
add rsp, 0x20
jmp 0x1401ca33e
mov rsi, qword [r14]
mov r8, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
mov r9, qword [r14 + 0x18]
nop word cs:[rax + rax]
mov edx, dword [0x1415cc4f0]
mov eax, dword [0x1415cc4f4]
mov r10d, edx
not r10d
and r10d, eax
not eax
and eax, edx
sub eax, r10d
mov edx, eax
or edx, 0x5abc5a
mov r10d, eax
not r10d
and r10d, 0x33840225
mov r11d, edx
and r11d, 0xcc79ddca
imul r11d, r10d
and edx, 0x33862235
or eax, 0x33debe7f
imul eax, edx
add eax, r11d
xor eax, 0xcaeca8b2
cmp eax, 0xa4cb0127
jb 0x1401ca3e0
mov r10, qword [r14 + 0x20]
mov r11, qword [r14 + 0x28]
test r8, r8
je 0x1401ca5c9
nop dword [rax]
mov eax, dword [0x1415cc4f8]
sub eax, dword [0x1415cc4fc]
mov edx, eax
and edx, 0x9b77e222
or eax, 0x9b77e222
add eax, edx
imul rax, rax, 0x4d0fdde5
shr rax, 0x3d
xor eax, 0xdecaf6f6
cmp eax, 0xdfe037
je 0x1401ca450
test r9, r9
je 0x1401ca4f7
nop word [rax + rax]
mov eax, dword [0x1415cc500]
xor eax, dword [0x1415cc504]
add eax, 0xc2615cd7
mov edx, eax
not edx
and edx, 0xf94ed1c5
mov edi, eax
and edi, 0x6b12e3a
imul edi, edx
mov edx, eax
and edx, 0xf94ed1c5
or eax, 0xf94ed1c5
imul eax, edx
add eax, edi
add eax, 0xd297d0d3
cmp eax, 0x29012250
jb 0x1401ca490
mov qword [r8 + 0x18], r9
mov qword [r9 + 0x20], r8
mov eax, dword [0x1415cc508]
xor edx, edx
div dword [0x1415cc50c]
add rcx, r11
mov al, 1
nop
test al, al
je 0x1401ca4f0
mov r8, r10
mov eax, dword [0x1415cc588]
mov edx, dword [0x1415cc58c]
mov r9d, eax
not r9d
and eax, edx
not edx
or edx, r9d
not eax
and eax, edx
not eax
add eax, 0x7ba27180
mov edx, eax
xor edx, 0x6000a014
xor eax, 0x9fff5c89
mov r9d, eax
and r9d, 0x82c91bea
and edx, 0x7d36e415
imul edx, r9d
mov r9d, eax
and r9d, 0x7d36e415
or eax, 0x7d36e415
imul eax, r9d
add eax, edx
cmp eax, 0xb304d6ec
jne 0x1401ca570
mov qword [rbx], rsi
mov qword [rbx + 8], r8
mov qword [rbx + 0x10], rcx
nop word cs:[rax + rax]
mov eax, dword [0x1415cc590]
xor edx, edx
div dword [0x1415cc594]
mov edx, eax
add edx, 0xe04d5d18
not edx
or edx, 0x1daaeefe
add eax, edx
add eax, 0xe04d5d18
mov qword [rbx], rsi
mov qword [rbx + 8], r8
mov qword [rbx + 0x10], rcx
cmp eax, 0xdf2e55d9
je 0x1401ca570
movaps xmm6, xmmword [rbp + 0xb0]
movaps xmm7, xmmword [rbp + 0xc0]
lea rsp, [rbp + 0xd8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x1415cc510]
mov ecx, dword [0x1415cc514]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0x5131909
add ecx, ecx
sub eax, ecx
add eax, 0x5131909
mov ecx, 0x8ba7b953
imul rcx, rax
shr rcx, 0x3c
or ecx, 0x684e28b0
cmp ecx, 0x3efa31df
jb 0x1401ca661
mov eax, dword [0x1415cc518]
xor edx, edx
div dword [0x1415cc51c]
mov ecx, eax
xor ecx, 0xb5bb20fd
and eax, 0x4a44df02
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
or eax, 0x987e1450
or ecx, 0x6f954786
and ecx, eax
and ecx, 0xffff57d6
mov qword [rbx], r9
cmp ecx, 0xb4154501
jae 0x1401ca666
mov qword [rbx], r9
jmp 0x1401ca620
mov qword [rbx + 8], r10
mov qword [rbx + 0x10], r11
nop
mov eax, dword [0x1415cc520]
imul eax, dword [0x1415cc524]
mov ecx, eax
and ecx, 0x5ea1ed12
or eax, 0x5ea1ed12
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xace38572
and ecx, 0x531c7a8d
imul ecx, edx
mov edx, eax
and edx, 0x531c7a8d
or eax, 0x531c7a8d
imul eax, edx
add eax, ecx
imul rax, rax, 0x2ed2ed77
shr rax, 0x3d
cmp eax, 0xfa719ba5
je 0x1401ca670
test rsi, rsi
je 0x1401ca5a7
nop
mov eax, dword [0x1415cc528]
add eax, dword [0x1415cc52c]
or eax, 0x9bcb54a9
imul rax, rax, 0x6d08fb13
shr rax, 0x38
or eax, 0xa6d2683a
cmp eax, 0xdf596f25
ja 0x1401ca6d0
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1401ca72c
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
mov rsi, r12
test r12, r12
je 0x1401ca5a7
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x1401ca7f0
mov eax, dword [0x1415cc530]
mov ecx, dword [0x1415cc534]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x255920fa
and ecx, 0xdaa6df05
imul ecx, edx
mov edx, eax
and edx, 0x1aa6df05
or eax, 0x1aa6df05
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x30dd3b82
and eax, 0xc13a82
add eax, eax
sub ecx, eax
add ecx, 0x8cc1fec7
cmp ecx, 0x2c07082e
jb 0x1401ca739
mov qword [r12 + 0x20], 0
nop dword [rax]
mov eax, dword [0x1415cc538]
and eax, dword [0x1415cc53c]
imul eax, eax, 0x7fc087b5
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3fb65dae
and ecx, 0xc049a251
imul ecx, edx
mov edx, eax
and edx, 0xc049a251
or eax, 0xc049a251
imul eax, edx
add eax, ecx
xor eax, 0x17418166
cmp eax, 0xd7d46b90
ja 0x1401ca7a0
nop word cs:[rax + rax]
mov eax, dword [0x1415cc540]
mov ecx, dword [0x1415cc544]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
mov r8d, 0x3d946e1
sub r8d, eax
sub r8d, edx
add eax, edx
add eax, 0xfc26b91e
and r8d, 0x144041b
and eax, 0xa021e100
or eax, r8d
cmp eax, 0x92a932de
je 0x1401ca7f0
nop word cs:[rax + rax]
mov eax, dword [0x1415cc548]
mov ecx, dword [0x1415cc54c]
add eax, ecx
add eax, 0x24ed60c3
and eax, 0x57870fb
cmp eax, 0xafc88082
je 0x1401ca850
mov rdi, qword [rsi + 8]
mov r13, qword [rsi + 0x10]
nop word [rax + rax]
mov eax, dword [0x1415cc550]
imul eax, dword [0x1415cc554]
add eax, 0x7f094c56
mov ecx, eax
xor ecx, 0x4005264
xor eax, 0xf869ad9b
or ecx, 0xbbe291a
and ecx, eax
cmp ecx, 0xc8611280
je 0x1401ca880
test r13, r13
je 0x1401ca8dc
mov rbx, rdi
nop word [rax + rax]
sub rsp, 0x20
mov rcx, rbx
call fcn.1401cab60
add rsp, 0x20
add rbx, 0x158
dec r13
jne 0x1401ca8c0
mov eax, dword [0x1415cc558]
xor eax, dword [0x1415cc55c]
and eax, 0x78459a71
lea ecx, [rax - 0x78459a72]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x5e5415bc
and edx, 0xa1abea43
imul edx, r8d
and ecx, 0xa1abea43
or eax, 0xa7bbefcf
imul eax, ecx
add eax, edx
cmp eax, 0xee6a9bee
je 0x1401ca8dc
mov rax, qword [rsi]
mov ecx, dword [0x1415cc560]
mov edx, dword [0x1415cc564]
xor edx, ecx
not edx
and edx, ecx
or edx, 0xe04dc6a2
add edx, 0x7510d067
xor edx, 0x7edbd852
cmp edx, 0x2c246e3a
ja 0x1401ca925
nop word cs:[rax + rax]
test r14b, r14b
jne 0x1401ca960
test rax, rax
je 0x1401caaa8
mov eax, dword [0x1415cc568]
mov ecx, dword [0x1415cc56c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0x6f724374
mov edx, eax
and edx, 0x908dbc8b
imul edx, ecx
mov ecx, eax
and ecx, 0x6f724374
or eax, 0x6f724374
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x8f690cc3
mov edx, eax
and edx, 0x7096f33c
imul edx, ecx
mov ecx, eax
and ecx, 0x8f690cc0
or eax, 0x8f690cc3
imul eax, ecx
add eax, edx
and eax, 0x9cf72754
cmp eax, 0x91babf51
je 0x1401caa80
nop word [rax + rax]
mov eax, dword [0x1415cc574]
not eax
add eax, dword [0x1415cc570]
imul eax, eax, 0xf3128fcb
add eax, 0xf3128fcb
imul rax, rax, 0x1c86ddd
shr rax, 0x2e
and eax, 0x645
mov rbx, qword [0x1415d3918]
cmp eax, 0xee006b0d
je 0x1401caa80
mov eax, dword [0x1415cc578]
mov ecx, dword [0x1415cc57c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
imul rax, rcx, 0x4db811dd
shr rax, 0x3e
imul eax, eax, 0xdb580471
imul rax, rax, 0x796828ef
shr rax, 0x33
cmp eax, 0xc728c33d
jbe 0x1401caa90
jmp 0x1401cab20
mov rax, qword [0x1415d3918]
jmp 0x1401caa00
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
test r14b, r14b
jne 0x1401cab20
mov eax, dword [0x1415cc584]
add eax, dword [0x1415cc580]
mov ecx, eax
xor ecx, 0x9ee9fb12
or eax, 0x611604ed
and eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x589ea382
and ecx, 0xa7615c7d
imul ecx, edx
mov edx, eax
and edx, 0xa7615c7d
or eax, 0xa7615c7d
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa2771c7c
and ecx, 0x5d88e383
imul ecx, edx
mov edx, eax
and edx, 0x5d88e383
or eax, 0x5d88e383
imul eax, edx
add eax, ecx
cmp eax, 0x226d27e0
jae 0x1401cab40
jmp 0x1401cab50
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
add rsp, 0x20
jmp 0x1401caa90
mov rcx, qword [0x1415d3918]
test r14b, r14b
je 0x1401ca710
mov rax, qword [0x1415d3918]
jmp 0x1401cab40