Function at 0x140170ff0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rdi, rcx
mov eax, dword [0x14159f380]
xor eax, dword [0x14159f384]
mov ecx, 0x9efbc009
imul rcx, rax
shr rcx, 0x3c
add ecx, 0x28d652d5
mov eax, ecx
not eax
or eax, 0x210c3
or ecx, 0xafd44f3c
and ecx, eax
cmp ecx, 0x2b634dea
jae 0x140171050
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
nop dword [rax + rax]
mov eax, dword [0x14159f388]
xor edx, edx
div dword [0x14159f38c]
mov ecx, eax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rsi, rsp
cmp ecx, 0x44ea9fb4
je 0x140171050
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rbx, rsp
mov eax, dword [0x14159f390]
mov ecx, dword [0x14159f394]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xdd85ab60
mov ecx, eax
and ecx, 0x2a9e4bb0
and eax, 0x2a8a4310
sub ecx, eax
add ecx, 0x7babe754
cmp ecx, 0x5ae0e26f
jae 0x1401710f0
movzx eax, byte [0x1415acb2c]
nop dword [rax]
mov eax, dword [0x14159f398]
sub eax, dword [0x14159f39c]
add eax, 0x63a64987
mov ecx, eax
not ecx
and ecx, 0xf6726f9
mov edx, eax
and edx, 0xf098d906
imul edx, ecx
mov ecx, eax
and ecx, 0xf6726f9
or eax, 0xf6726f9
imul eax, ecx
add eax, edx
imul rcx, rax, 0x55ce990b
shr rcx, 0x3e
movzx eax, byte [0x1415acb2c]
cmp ecx, 0xb58c0c34
je 0x1401710f0
test al, al
je 0x140171400
nop word [rax + rax]
mov eax, dword [0x14159f3a0]
mov ecx, dword [0x14159f3a4]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
and eax, 0x32ed03d0
add eax, eax
neg eax
add eax, ecx
add eax, 0x32ed03d0
or eax, 0x19f05640
mov ecx, eax
not ecx
or ecx, 0x7880fe7f
add eax, ecx
inc eax
cmp eax, 0x334717bc
jb 0x140171150
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x60]
nop dword [rax + rax]
mov eax, dword [0x14159f3a8]
xor edx, edx
div dword [0x14159f3ac]
imul eax, eax, 0x9efb7603
add eax, 0x9c87e032
mov edx, eax
not edx
and edx, 0xcc8d9aa9
mov r8d, eax
and r8d, 0x33726556
imul r8d, edx
mov edx, eax
and edx, 0xcc8d9aa9
or eax, 0xcc8d9aa9
imul eax, edx
add eax, r8d
cmp eax, 0xfcdad5be
je 0x1401711b0
cmp rcx, 1
jg 0x140171400
cmp ecx, 1
je 0x1401712c0
mov eax, dword [0x14159f3b0]
mov ecx, dword [0x14159f3b4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0x2af9416
or eax, 0x5002001a
and eax, 0xd126159e
cmp eax, 0x462f5acd
jne 0x140171260
sub rsp, 0x20
call fcn.14020cfe0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x14159f3b8]
and eax, dword [0x14159f3bc]
mov r15d, eax
xor r15d, 0x2181
xor eax, 0x80800000
mov ecx, r15d
or ecx, 0x7f7cdc74
mov edx, ecx
and edx, 0xa47767a
and eax, 0x80800181
imul eax, edx
and ecx, 0xf5b88985
or r15d, 0xfffcddf5
imul r15d, ecx
add r15d, eax
sub rsp, 0x20
call fcn.14023ab00
add rsp, 0x20
cmp r15d, 0x475084ab
ja 0x140171260
nop
mov eax, dword [0x14159f3c0]
add eax, dword [0x14159f3c4]
xor eax, 0xa83381b
imul rax, rax, 0x265f105b
shr rax, 0x3d
or eax, 0x24de071e
cmp eax, 0x9da50bf3
ja 0x1401712c0
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r15, qword [rax + 0x68]
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x68], 0
mov eax, dword [0x14159f3c8]
xor eax, dword [0x14159f3cc]
add eax, 0x88b71019
or eax, 0x9523e86d
cmp eax, 0x9ef8db86
je 0x140171320
test r15, r15
je 0x140171400
mov cl, 1
xor eax, eax
lock cmpxchg byte [r15 + 0x10], cl
lea rsi, [r15 + 0x10]
sete al
nop word [rax + rax]
mov ecx, dword [0x14159f3d0]
sub ecx, dword [0x14159f3d4]
and ecx, 0x2f964743
mov edx, 0x16c6d0a0
sub edx, ecx
add ecx, 0xe9392f5f
mov r8d, ecx
and r8d, 0x9f323a0b
and edx, 0x60c445f4
imul edx, r8d
mov r8d, ecx
and r8d, 0x60cd45f4
or ecx, 0x60cd45f4
imul ecx, r8d
add ecx, edx
cmp ecx, 0x2d01b689
je 0x140171360
test al, al
je 0x1401717be
mov eax, dword [0x14159f3d8]
mov ecx, dword [0x14159f3dc]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
imul eax, ecx, 0xf1b1c908
mov ecx, eax
xor ecx, 0x8a48e195
or eax, 0x75b71e68
and eax, ecx
cmp eax, 0x696d7702
ja 0x140171a26
jmp 0x1401719ce
mov eax, dword [0x14159f560]
imul eax, dword [0x14159f564]
add eax, 0xbe9539d2
or eax, 0xdcbc397
add eax, 0x9e57c64e
cmp eax, 0xe032088c
ja 0x140171400
nop word cs:[rax + rax]
mov eax, dword [0x14159f568]
sub eax, dword [0x14159f56c]
cmp eax, 0x76091a8f
je 0x140171430
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x88]
mov eax, 0xcd7c8c65
nop word cs:[rax + rax]
mov ecx, dword [0x14159f570]
mov edx, dword [0x14159f574]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
or ecx, 0x4018204
and ecx, 0x8c19e7f6
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x827b965d
ja 0x140171470
test rbx, rbx
jne 0x1401723a6
nop word cs:[rax + rax]
mov eax, dword [0x14159f578]
or eax, dword [0x14159f57c]
and eax, 0x8227c176
add eax, 0x75f9b7a0
mov ecx, eax
and ecx, 0x2a7e3764
add ecx, ecx
sub eax, ecx
add eax, 0xaa7e376c
cmp eax, 0x4c4c342b
jb 0x1401714d0
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x98]
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x140171520
test rax, rax
jle 0x1401716e7
cmp rax, 2
jge 0x1401718c8
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x90]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140171560
nop word cs:[rax + rax]
mov eax, dword [0x14159f588]
xor edx, edx
div dword [0x14159f58c]
imul eax, eax, 0x6b708f25
or eax, 0xcf4dbe06
imul rax, rax, 0x1f98043
shr rax, 0x36
cmp eax, 0x4106e5b2
ja 0x140171570
test rcx, rcx
je 0x1401716f9
mov eax, dword [0x14159f5a0]
and eax, dword [0x14159f5a4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x83aa63c1
and edx, 0x7c559c3e
imul edx, r8d
mov r8d, eax
and r8d, 0x7c559c3e
or eax, 0x7c559c3e
imul eax, r8d
add eax, edx
imul rax, rax, 0x56259473
shr rax, 0x3d
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xfffffffe
and edx, 0x40f3fdbd
imul edx, r8d
mov r8d, eax
and r8d, 1
or eax, 0x40f3fdbd
imul eax, r8d
add eax, edx
cmp eax, 0xf9045209
jbe 0x140171620
lock inc qword [rcx]
nop word [rax + rax]
mov eax, dword [0x14159f5a8]
sub eax, dword [0x14159f5ac]
mov edx, eax
xor edx, 0xf8d50c30
or eax, 0x72af3cf
and eax, edx
mov edx, eax
xor edx, 0x336f721b
xor eax, 0x44100020
and eax, 0x57775021
mov r8d, edx
and r8d, 0xa888afde
imul r8d, eax
mov eax, edx
and eax, 0x57775021
or edx, 0x57775021
imul edx, eax
add edx, r8d
mov eax, 1
lock xadd qword [rcx], rax
cmp edx, 0x4538cd44
jb 0x140171620
test rax, rax
js 0x1401717d9
test rcx, rcx
je 0x1401718d1
mov rbx, qword [rcx + 0x28]
mov eax, dword [0x14159f5d8]
sub eax, dword [0x14159f5dc]
add eax, 0xc5e8c061
mov edx, eax
not edx
and edx, 0x3f8d3ddb
mov r8d, eax
and r8d, 0xc072c224
imul r8d, edx
mov edx, eax
and edx, 0x3f8d3ddb
or eax, 0x3f8d3ddb
imul eax, edx
add eax, r8d
or eax, 0x1b2e1d7b
cmp eax, 0x782d03c4
je 0x1401722d8
jmp 0x140172250
sub rsp, 0x20
call fcn.140237bf0
add rsp, 0x20
jmp 0x140171537
sub rsp, 0x20
call fcn.1402380c0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14159f590]
mov ecx, dword [0x14159f594]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x67903656
mov ecx, eax
not ecx
and ecx, 0xddc2e76b
mov edx, eax
and edx, 0x223d1894
imul edx, ecx
mov ecx, eax
and ecx, 0xddc2e76b
or eax, 0xddc2e76b
imul eax, ecx
add eax, edx
cmp eax, 0x97c16a5d
ja 0x140171710
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x90]
nop dword [rax]
mov eax, dword [0x14159f598]
sub eax, dword [0x14159f59c]
add eax, 0x235ef621
mov edx, eax
xor edx, 0x234c54ab
and edx, eax
add edx, 0x50f1ea21
cmp edx, 0xd3af44f
jb 0x140171790
jmp 0x1401715a4
sub rsp, 0x20
mov rcx, rsi
call fcn.1402393c0
add rsp, 0x20
xor eax, eax
test al, al
jne 0x1401717d0
jmp 0x1401713b9
mov eax, dword [0x14159f5b0]
add eax, dword [0x14159f5b4]
and eax, 0x12f00a20
mov ecx, eax
not ecx
lea edx, [rax + 0x4c07d15f]
mov r8d, edx
and r8d, 0xc578369
and ecx, 0xb2a80880
imul ecx, r8d
and edx, 0x52a05816
or eax, 0xfeafd9df
imul eax, edx
add eax, ecx
cmp eax, 0xf89b4e24
jbe 0x140171830
ud2
mov eax, dword [0x14159f5b8]
sub eax, dword [0x14159f5bc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x42935224
and ecx, 0xbd6caddb
imul ecx, edx
mov edx, eax
and edx, 0xbd6caddb
or eax, 0xbd6caddb
imul eax, edx
add eax, ecx
add eax, 0x913ebd32
xor eax, 0x71bf33a
ud2
cmp eax, 2
jne 0x140171963
mov eax, dword [0x14159f5c8]
mov ecx, dword [0x14159f5cc]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0xfaa475a
mov ecx, eax
xor ecx, 0x88010c01
xor eax, 0x523ad01a
mov edx, eax
and edx, 0x65e633f6
and ecx, 0x9a19cc09
imul ecx, edx
mov edx, eax
and edx, 0x9a19cc09
or eax, 0x9a19cc09
imul eax, edx
add eax, ecx
cmp eax, 0xa70aa894
jae 0x140171930
ud2
mov eax, dword [0x14159f5d0]
sub eax, dword [0x14159f5d4]
imul eax, eax, 0x965ece61
add eax, 0x3b82feda
shr eax, 2
imul rax, rax, 0x5dd587e3
shr rax, 0x3a
ud2
mov eax, dword [0x14159f580]
add eax, dword [0x14159f584]
mov ecx, eax
not ecx
and ecx, 0x27812e11
mov edx, eax
and edx, 0xd87ed1ee
imul edx, ecx
mov ecx, eax
and ecx, 0x27812e11
or eax, 0x27812e11
imul eax, ecx
add eax, edx
add eax, 0x51a8a61e
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfc580fd2
and ecx, 0x3a7f02d
imul ecx, edx
mov edx, eax
and edx, 0x3a7f02d
or eax, 0x3a7f02d
imul eax, edx
add eax, ecx
cmp eax, 0x23cbdf5b
jb 0x140171963
jmp 0x140172abe
mov eax, dword [0x14159f3e4]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x14159f3e0]
xor ecx, eax
mov eax, ecx
and eax, 0x70c9dcca
mov edx, eax
not edx
and edx, 0xf9a2696f
mov r8d, ecx
and r8d, 0x499480
imul r8d, edx
and ecx, 0x7080484a
or eax, 0xf9a2696f
imul eax, ecx
add eax, r8d
imul eax, eax, 0x572c924a
lea rcx, [r15 + 0x18]
mov qword [rbx], rcx
cmp eax, 0x9398e8b4
jbe 0x140171a2f
lea rax, [r15 + 0x18]
mov qword [rbx], rax
jmp 0x1401719ce
mov qword [rbx + 8], 0
sub rsp, 0x20
lea rdx, [0x141578800]
mov rcx, rbx
mov r8, rdi
call fcn.1400b0510
add rsp, 0x20
mov rcx, qword [rbx + 8]
test al, al
je 0x140171f11
xor eax, eax
nop
test al, al
jne 0x140171a60
test rcx, rcx
je 0x1401721ef
mov eax, 0xa0305b1d
nop word cs:[rax + rax]
mov edx, dword [0x14159f478]
mov r8d, dword [0x14159f47c]
mov r9d, r8d
not r9d
mov r10d, edx
and r10d, r9d
or r9d, edx
not r9d
imul r9d, r10d
mov r10d, edx
and r10d, r8d
or edx, r8d
imul edx, r10d
add edx, r9d
imul rdx, rax
shr rdx, 0x3f
not edx
and edx, 0xc00c8481
cmp edx, 0x87bf05f9
je 0x140171a80
nop dword [rax + rax]
mov eax, dword [0x14159f480]
mov edx, dword [0x14159f484]
mov r8d, edx
not r8d
and r8d, eax
xor edx, eax
add edx, eax
sub edx, r8d
imul eax, edx, 0xd49abb93
mov edx, eax
xor edx, 0x75fe14c4
and eax, 0xa01eb3b
add eax, eax
sub eax, edx
add eax, 0x430e055a
cmp eax, 0xf0e11359
ja 0x140171ad0
mov eax, ecx
and eax, 3
nop word cs:[rax + rax]
mov r8d, dword [0x14159f488]
mov r9d, dword [0x14159f48c]
mov edx, r8d
not edx
mov r10d, r9d
not r10d
mov r11d, edx
and r11d, 0xe5b9fdec
and r8d, 0x1a460213
or r8d, r11d
or edx, r10d
and r10d, 0xe5b9fdec
and r9d, 0x1a460213
or r9d, r10d
xor r9d, r8d
not edx
or edx, r9d
add edx, 0xb544f6a0
mov r8d, edx
and r8d, 0x1299ce76
add r8d, r8d
sub edx, r8d
cmp edx, 0xd28b8c0d
je 0x140171b20
cmp rax, 2
jg 0x1401720d7
cmp eax, 1
jne 0x14017279f
lea rdi, [rcx - 1]
nop
mov eax, dword [0x14159f4a0]
mov edx, dword [0x14159f4a4]
add eax, edx
add eax, 0x872843e5
mov edx, eax
xor edx, 0x63339439
xor eax, 0x14846a42
or eax, 0xaa6b81b5
add eax, edx
cmp eax, 0x1026c46b
je 0x140171ba0
mov rbx, qword [rcx - 1]
mov r14, qword [rcx + 7]
mov rax, qword [r14]
test rax, rax
je 0x140171c50
sub rsp, 0x20
mov rcx, rbx
call rax
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x14159f4a8]
xor edx, edx
div dword [0x14159f4ac]
mov ecx, eax
not ecx
and ecx, 0x22d3da85
and eax, 0xdd2c257a
sub eax, ecx
add eax, 0x1f593a61
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x6cc719c0
and ecx, 0x9338e63f
imul ecx, edx
mov edx, eax
and edx, 0x9338e63f
or eax, 0x9338e63f
imul eax, edx
add eax, ecx
cmp eax, 0x33befcbe
jb 0x140171bf0
nop word cs:[rax + rax]
mov eax, dword [0x14159f4b0]
mov ecx, dword [0x14159f4b4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
and ecx, 0x744a9656
or eax, 0x744a9656
add eax, ecx
add eax, 0x60b8ae86
or eax, 0x9de28c09
cmp eax, 0x3c35917e
je 0x140171c50
cmp qword [r14 + 8], 0
je 0x140171d9d
mov rcx, qword [r14 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x14159f4b8]
xor edx, edx
div dword [0x14159f4bc]
imul eax, eax, 0x8e252319
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x11e90747
and edx, 0xee16f8b8
imul edx, r8d
mov r8d, eax
and r8d, 0xee16f8b8
or eax, 0xee16f8b8
imul eax, r8d
add eax, edx
imul rdx, rax, 0x5dedb15
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
cmp eax, 0x7f938416
ja 0x140171cb0
cmp rcx, 0x11
jb 0x140171d84
mov ecx, 0xae8ef57f
nop word [rax + rax]
mov eax, dword [0x14159f4c0]
xor edx, edx
div dword [0x14159f4c4]
or eax, 0xfe6cb77f
imul rax, rcx
shr rax, 0x3f
add eax, 0x63cdba0b
cmp eax, 0x6ffccaee
ja 0x140171d20
nop word [rax + rax]
mov eax, dword [0x14159f4c8]
mov ecx, dword [str._ei]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
and eax, 0xade6b8c7
xor eax, 0xf8a3fecc
add eax, 0x79d3ae9b
cmp eax, 0xc5e362c9
ja 0x140171d50
mov rbx, qword [rbx - 8]
xor eax, eax
test al, al
jne 0x140171d80
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.14020ae70
add rsp, 0x20
mov eax, dword [0x14159f4d0]
mov ecx, dword [0x14159f4d4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x77f84d90
mov edx, eax
and edx, 0x8807b26f
imul edx, ecx
mov ecx, eax
and ecx, 0x77f84d90
or eax, 0x77f84d90
imul eax, ecx
add eax, edx
imul rcx, rax, 0x39003281
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
lea ecx, [rax + rax]
sub eax, ecx
cmp eax, 0x513b1c9b
jne 0x140171e20
mov rax, qword [0x1415acb98]
nop word [rax + rax]
mov eax, dword [0x14159f4d8]
xor edx, edx
div dword [0x14159f4dc]
mov ecx, eax
not ecx
and ecx, 0x1c307d3
and eax, 0xfe3cf82c
sub eax, ecx
add eax, 0x66cdd301
xor eax, 0xc9ae4963
mov rbx, qword [0x1415acb98]
cmp eax, 0x798c3562
jb 0x140171e20
mov eax, dword [0x14159f4e0]
add eax, dword [0x14159f4e4]
imul rax, rax, 0x5ec2a8d1
shr rax, 0x3d
add eax, 0xd36c54cb
cmp eax, 0xd775da6e
jbe 0x140171e90
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x14159f4e8]
mov ecx, dword [0x14159f4ec]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
lea r12d, [rax + rdx]
add r12d, 0xe6fe0e0d
mov eax, r12d
not eax
and eax, 0xc1b29833
and r12d, 0x3e4d67cc
sub r12d, eax
xor r12d, 0x50402a69
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r14
add rsp, 0x20
cmp r12d, 0xc52b5711
jb 0x140171ea0
jmp 0x14017279f
mov eax, 0xd87783ff
nop word cs:[rax + rax]
mov edx, dword [0x14159f3ec]
add edx, dword [0x14159f3e8]
imul rdx, rax
shr rdx, 0x3f
mov r8d, edx
add r8d, r8d
neg r8d
add edx, r8d
add edx, 0x6ce35a27
or edx, 0xbc29fe17
cmp edx, 0x8261c236
jb 0x140171f20
test rcx, rcx
je 0x14017279f
nop dword [rax]
mov eax, dword [0x14159f3f0]
and eax, dword [0x14159f3f4]
or eax, 0x711ac503
add eax, 0x6cb1764b
mov edx, eax
not edx
and edx, 0x6fa92dc
mov r8d, eax
and r8d, 0xf9056d20
imul r8d, edx
mov edx, eax
and edx, 0x6f812de
or eax, 0x6fa92de
imul eax, edx
add eax, r8d
cmp eax, 0xd8db2296
ja 0x140171f60
mov eax, ecx
and eax, 3
nop dword [rax]
mov edx, dword [0x14159f3f8]
mov r8d, dword [0x14159f3fc]
mov r9d, edx
not r9d
and r9d, r8d
mov r10d, r8d
not r10d
and r10d, edx
imul r10d, r9d
mov r9d, edx
and r9d, r8d
or edx, r8d
imul edx, r9d
add edx, r10d
mov r8d, edx
not r8d
mov r9d, edx
and r9d, 0xb6537
and r8d, 0xfff49ac8
imul r8d, r9d
mov r9d, edx
and r9d, 0xfff49ac8
or edx, 0xfff49ac8
imul edx, r9d
add edx, r8d
mov r8d, edx
xor r8d, 0x48a87ac6
and edx, 0x37578538
add edx, edx
sub edx, r8d
xor edx, 0xee53bee1
cmp edx, 0x985550c6
jb 0x140171fb0
cmp rax, 2
jg 0x140172148
cmp eax, 1
jne 0x14017279f
lea rdi, [rcx - 1]
mov rbx, qword [rcx - 1]
mov r14, qword [rcx + 7]
mov r12, qword [r14]
nop
mov eax, dword [0x14159f420]
xor edx, edx
div dword [0x14159f424]
imul eax, eax, 0x76bf6c57
or eax, 0x19c33f88
imul rax, rax, 0x47b57dc7
shr rax, 0x3e
cmp eax, 0x71021880
je 0x140172060
test r12, r12
je 0x140172591
mov eax, dword [str.ZK]
sub eax, dword [0x14159f42c]
mov ecx, eax
xor ecx, 0x92e6216c
and eax, 0x6d19de93
add eax, eax
sub eax, ecx
imul eax, eax, 0x5edc677e
mov ecx, eax
and ecx, 0x77f2ea7e
xor eax, 0xf7f2ea7f
lea eax, [rax + rcx*2]
cmp eax, 0x1b19dde4
je 0x140172581
jmp 0x14017251a
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401720e0
mov eax, 0xe4fe6f65
nop dword [rax]
mov ecx, dword [0x14159f490]
mov edx, dword [0x14159f494]
add ecx, edx
add ecx, 0x362929e3
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x19acf3e1
je 0x1401720f0
nop word cs:[rax + rax]
mov eax, dword [0x14159f498]
and eax, dword [0x14159f49c]
imul eax, eax, 0x6aa696cd
or eax, 0x8e165fe0
add eax, 0xaaff13e0
cmp eax, 0xc124facd
ja 0x140172120
jmp 0x14017279f
mov eax, dword [0x14159f400]
xor edx, edx
div dword [0x14159f404]
nop word cs:[rax + rax]
mov eax, dword [0x14159f408]
xor edx, edx
div dword [0x14159f40c]
add eax, 0x6e80f61c
shr eax, 2
imul rax, rax, 0x813848f
shr rax, 0x38
add eax, 0xe6763be
cmp eax, 0xcd326b3c
ja 0x140172160
mov eax, dword [0x14159f410]
xor edx, edx
div dword [0x14159f414]
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401721a0
mov eax, 0xb9e0d605
nop dword [rax]
mov ecx, dword [0x14159f41c]
mov edx, ecx
xor edx, edx
not edx
and edx, dword [0x14159f418]
xor edx, ecx
mov ecx, edx
or ecx, 0x22cc1c12
and ecx, 0x2aeefc12
or edx, 0xabeffd3e
add edx, ecx
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x6a5d1667
je 0x1401721b0
jmp 0x14017279f
mov ecx, dword [0x14159f468]
mov eax, dword [0x14159f46c]
mov edx, ecx
and edx, eax
not ecx
not eax
and eax, ecx
not edx
not eax
and eax, edx
mov ecx, eax
not ecx
and ecx, 0xe23ae139
mov edx, eax
and edx, 0x1dc51ec6
imul edx, ecx
mov ecx, eax
and ecx, 0xe23ae139
or eax, 0xe23ae139
imul eax, ecx
add eax, edx
mov ecx, 0xb14777c3
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xf7f65ea0
je 0x140172aba
jmp 0x140172a68
mov eax, dword [0x14159f5e0]
mov edx, dword [0x14159f5e4]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
lea edx, [rax + r8]
add edx, 0xcbd0f937
mov eax, edx
not eax
mov r8d, edx
and r8d, 0x294e499
and eax, 0xfd6b1b66
imul eax, r8d
mov r8d, edx
and r8d, 0xfd6b1b66
or edx, 0xfd6b1b66
imul edx, r8d
add edx, eax
mov eax, edx
xor eax, 0xe323c875
or edx, 0x1cdc378a
and edx, eax
mov rax, 0xffffffffffffffff
lock xadd qword [rcx], rax
cmp edx, 0xbb7cfd34
jbe 0x1401722e1
lock dec qword [rcx]
jmp 0x140172250
mov edx, 0x8be935a5
nop word cs:[rax + rax]
mov r8d, dword [0x14159f5e8]
or r8d, dword [0x14159f5ec]
imul r8, rdx
shr r8, 0x3f
imul r8d, r8d, 0x8d4f7f6b
add r8d, 0xf03dbbc9
cmp r8d, 0x4140fff1
jb 0x1401722f0
cmp rax, 1
jne 0x1401723a6
mov eax, dword [0x14159f5f0]
mov edx, dword [0x14159f5f4]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
imul rax, rax, 0xfee9a15
shr rax, 0x3b
cmp eax, 0x34e66aaf
jne 0x140172370
nop word [rax + rax]
mov eax, dword [0x14159f5f8]
imul eax, dword [0x14159f5fc]
imul rax, rax, 0x7ebb27cd
shr rax, 0x3e
add eax, 0x28c898f3
and eax, 0x4800a3
cmp eax, 0xa520fde7
ja 0x140172370
sub rsp, 0x20
call fcn.140132cf0
add rsp, 0x20
mov eax, dword [0x14159f604]
add eax, dword [0x14159f600]
or eax, 0xedd7eef5
add eax, 0x41ee2615
cmp eax, 0x7f166e61
jbe 0x1401723d0
mov rax, qword [0x1415acb70]
nop word [rax + rax]
mov ecx, dword [0x14159f608]
add ecx, dword [0x14159f60c]
xor ecx, 0x3573ac3d
add ecx, 0x4dd1d142
mov rax, qword [0x1415acb70]
cmp ecx, 0x56cb960e
ja 0x1401723d0
cmp rbx, rax
jne 0x14017248e
mov r15d, dword [0x1415acb78]
nop word [rax + rax]
mov eax, dword [0x14159f638]
or eax, dword [0x14159f63c]
add eax, 0xc9997ef2
imul rax, rax, 0x36903d79
shr rax, 0x3b
mov ecx, eax
not ecx
and ecx, 0x3350b533
and eax, 0xfffffffc
sub eax, ecx
cmp eax, 0xc2c89fe3
je 0x140172410
nop word cs:[rax + rax]
mov eax, dword [0x14159f640]
xor edx, edx
div dword [0x14159f644]
or eax, 0xb799d129
add eax, 0xa542f85e
mov ecx, eax
not ecx
or ecx, 0x2478d39a
or eax, 0xdb872c45
and eax, ecx
cmp eax, 0x389f7550
jb 0x140172450
cmp r15d, 0xffffffff
je 0x1401724be
inc r15d
jmp 0x140172e75
mov eax, dword [0x14159f610]
imul eax, dword [0x14159f614]
shr eax, 2
imul rax, rax, 0x4109c899
shr rax, 0x3c
or eax, 0xd1b7624c
cmp eax, 0x5cbbeb88
je 0x140172cbc
jmp 0x140172c64
ud2
mov eax, dword [str.7FH]
mov ecx, dword [0x14159f434]
mov edx, eax
and edx, ecx
or eax, ecx
lea r13d, [rdx + rax]
add r13d, 0xb666dfc3
mov eax, r13d
not eax
and eax, 0x7a6ba754
mov ecx, r13d
and ecx, 0x859458ab
imul ecx, eax
mov eax, r13d
and eax, 0x7a6ba754
or r13d, 0x7a6ba754
imul r13d, eax
add r13d, ecx
and r13d, 0xbcb01f0c
sub rsp, 0x20
mov rcx, rbx
call r12
add rsp, 0x20
cmp r13d, 0x6673578e
jae 0x140172591
sub rsp, 0x20
mov rcx, rbx
call r12
add rsp, 0x20
jmp 0x14017251a
mov rax, qword [r14 + 8]
mov rcx, qword [r14 + 0x10]
mov edx, 0xd138852b
nop
mov r8d, dword [0x14159f438]
add r8d, dword [0x14159f43c]
imul r8, rdx
shr r8, 0x3e
imul r8d, r8d, 0xb3166b0f
add r8d, 0xd11812c1
cmp r8d, 0x25d6d07
jb 0x1401725a0
test rax, rax
je 0x14017272d
nop word cs:[rax + rax]
mov eax, dword [0x14159f440]
xor edx, edx
div dword [0x14159f444]
add eax, 0x1f735b9d
mov edx, eax
and edx, 0xe005db11
mov r8d, edx
not r8d
and r8d, 0xc8dedafb
mov r9d, eax
and r9d, 0x20010100
imul r9d, r8d
and eax, 0xc004da11
or edx, 0xc8dedafb
imul edx, eax
add edx, r9d
cmp edx, 0x30d396e
jb 0x1401725e0
cmp rcx, 0x11
jb 0x14017267d
mov eax, dword [0x14159f448]
and eax, dword [0x14159f44c]
and eax, 0xc04a5dc0
add eax, 0xb7a2db7c
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x41e9a7c8
and ecx, 0x88165800
imul ecx, edx
mov edx, eax
and edx, 0xb6065834
or eax, 0xbe165834
imul eax, edx
add eax, ecx
cmp eax, 0x95f462ae
ja 0x140172635
mov rbx, qword [rbx - 8]
mov eax, dword [0x14159f450]
mov ecx, dword [0x14159f454]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
add eax, 0x5c95280a
imul rax, rax, 0x137fb577
shr rax, 0x37
mov ecx, eax
not ecx
and ecx, 0x76ba996d
mov edx, eax
and edx, 0x12
imul edx, ecx
mov ecx, eax
and ecx, 0xffffffed
or eax, 0x76ba996d
imul eax, ecx
add eax, edx
cmp eax, 0xd5dab506
ja 0x140172711
mov r14d, dword [0x14159f458]
xor r14d, dword [0x14159f45c]
xor r14d, 0xf705bc0d
add r14d, 0x6de8124a
or r14d, 0x41c52c1b
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x8b8ca23e
jne 0x14017272d
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401726cb
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x14159f460]
or eax, dword [0x14159f464]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x690cb05d
and ecx, 0x96f34fa2
imul ecx, edx
mov edx, eax
and edx, 0x96f34fa2
or eax, 0x96f34fa2
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x34412604
xor eax, 0x34412604
lea eax, [rax + rcx*2]
or eax, 0x508847ec
cmp eax, 0x3b80735e
je 0x140172750
mov ecx, dword [0x14159f4f0]
mov edx, dword [0x14159f4f4]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x592956e2
and ecx, 0xa6d6a91d
or ecx, r9d
or eax, r8d
and r8d, 0x592956e2
and edx, 0xa6d6a91d
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1a4f51eb
and ecx, 0xe5b0ae14
imul ecx, edx
mov edx, eax
and edx, 0xe5b0ae14
or eax, 0xe5b0ae14
imul eax, edx
add eax, ecx
imul rax, rax, 0x35b3ba7b
shr rax, 0x3d
mov ecx, eax
xor ecx, 0x52b9525b
add ecx, eax
cmp ecx, 0x6ac9e7c0
ja 0x14017284d
mov eax, dword [0x14159f4f8]
xor ecx, ecx
xor edx, edx
div dword [0x14159f4fc]
and eax, 0x2a7ef38c
xor eax, 0x224a8100
add eax, 0xd6aa1010
xchg byte [rsi], cl
cmp eax, 0x1365bbc0
jae 0x140172853
xor eax, eax
xchg byte [rsi], al
jmp 0x140172825
mov eax, dword [0x14159f500]
xor edx, edx
div dword [0x14159f504]
nop word cs:[rax + rax]
mov eax, dword [0x14159f508]
mov edx, dword [0x14159f50c]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
xor eax, 0xd034d50d
add eax, 0xfd12e65e
xor eax, 0x33edffb6
cmp eax, 0xa5a61fea
ja 0x140172870
nop word [rax + rax]
mov eax, dword [0x14159f510]
mov edx, dword [str._u_uq]
xor edx, eax
not edx
and edx, eax
imul eax, edx, 0x84927e73
mov edx, eax
or edx, 0x81c48400
not eax
and eax, 0x203048d2
and edx, 0x81cf8404
or edx, eax
xor edx, 0xd9ecc3fa
cmp edx, 0xe4d3e11d
ja 0x1401728c0
cmp cl, 2
jne 0x1401729d0
mov eax, dword [0x14159f518]
mov ecx, dword [0x14159f51c]
not eax
not ecx
or ecx, eax
not ecx
and ecx, 0xed4077af
add ecx, 0x36bf5b10
mov eax, ecx
xor eax, 0x2a568de8
or ecx, 0xd5a97217
and ecx, eax
cmp ecx, 0xb32143b
jae 0x14017294e
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
mov rdi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
nop word cs:[rax + rax]
mov eax, dword [0x14159f520]
sub eax, dword [0x14159f524]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x15729dd1
and ecx, 0xea8d622e
imul ecx, edx
mov edx, eax
and edx, 0xea8d622e
or eax, 0xea8d622e
imul eax, edx
lea ebx, [rax + rcx]
add ebx, 0x4db7466
imul rax, rbx, 0x33d223bb
shr rax, 0x20
sub ebx, eax
shr ebx, 1
add ebx, eax
shr ebx, 0x1f
sub rsp, 0x20
mov rcx, rsi
call rdi
add rsp, 0x20
cmp ebx, 0x23258382
ja 0x140172960
nop word cs:[rax + rax]
mov eax, dword [0x14159f528]
imul eax, dword [0x14159f52c]
mov ecx, eax
and ecx, 0xe9ddb59f
and eax, 0x4844101b
add eax, eax
sub ecx, eax
add ecx, 0xf8842635
cmp ecx, 0x4430d233
jb 0x1401729d0
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x68]
mov eax, dword [0x14159f530]
mov edx, dword [0x14159f534]
mov r8d, edx
not r8d
and r8d, eax
xor edx, eax
add edx, eax
sub edx, r8d
mov eax, 0xc64971a3
imul rax, rdx
shr rax, 0x3f
lea edx, [rax + 0x20448a0]
not eax
and eax, 0x1101509
imul eax, eax, 0xac638246
imul edx, edx, 0xaf77dfef
add edx, eax
cmp edx, 0x3abd76b9
jb 0x140172b01
jmp 0x140172ac0
mov eax, dword [0x14159f470]
mov ecx, dword [0x14159f474]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and ecx, 0x84184879
mov edx, eax
and edx, 0x7be7b786
imul edx, ecx
mov ecx, eax
and ecx, 0x84184879
or eax, 0x84184879
imul eax, ecx
add eax, edx
imul rax, rax, 0x33acceb9
shr rax, 0x3d
add eax, 0xe02b7695
ud2
ud2
ud2
mov eax, dword [0x14159f538]
sub eax, dword [0x14159f53c]
mov edx, 0xc5cb66c9
imul rdx, rax
mov eax, dword [0x1415acbd4]
mov r8, qword gs:[0x58]
mov rax, qword [r8 + rax*8]
shr rdx, 0x3a
or edx, 0xbcdfff77
mov qword [rax + 0x68], r15
cmp edx, 0x59600a75
jne 0x140172b1d
mov eax, dword [0x1415acbd4]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov qword [rax + 0x68], r15
jmp 0x140172ac0
test rcx, rcx
je 0x140172c20
mov r8, 0xffffffffffffffff
lock xadd qword [rcx], r8
nop word cs:[rax + rax]
mov eax, dword [0x14159f540]
xor edx, edx
div dword [0x14159f544]
and eax, 0xcacd0d9a
cmp eax, 0x45930d9
je 0x140172b40
cmp r8, 1
jne 0x140172c20
mov eax, dword [0x14159f548]
add eax, dword [0x14159f54c]
mov edx, 0xc74a55e9
imul rdx, rax
shr rdx, 0x3c
and edx, 0xfffffffa
or edx, 0x48d22441
cmp edx, 0xd27ad2a5
jbe 0x140172b90
nop
mov eax, dword [0x14159f550]
mov edx, dword [0x14159f554]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
mov edx, eax
xor edx, 0x5238ac11
xor eax, 0x2dc353ee
or edx, 0xa0040002
and edx, eax
or edx, 0x54a9cff4
cmp edx, 0xd3e45db9
ja 0x140172b90
sub rsp, 0x20
call fcn.14020cb70
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14159f558]
imul eax, dword [0x14159f55c]
cmp eax, 0x67a1c9cb
je 0x140172c00
nop word cs:[rax + rax]
mov eax, dword [0x14159f728]
add eax, dword [0x14159f72c]
imul rax, rax, 0x68efdc2f
shr rax, 0x3e
imul eax, eax, 0x695de4c5
mov ecx, eax
xor ecx, 0xfacf829f
or eax, 0x5307d60
and eax, ecx
cmp eax, 0x8ad3567f
ja 0x140172c20
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x14159f618]
mov ecx, eax
not ecx
or ecx, dword [0x14159f61c]
lea edx, [rax + rcx]
inc edx
mov eax, edx
not eax
or eax, 0x22008880
and eax, 0x23108ca8
mov ecx, edx
and ecx, 0x41044
or ecx, eax
xor ecx, 0x22000c6a
and edx, 0x1100040
or edx, ecx
or edx, 0xdcaa6311
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x1415acb7c], cl
sete cl
cmp edx, 0x8b435a75
jae 0x140172cca
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x1415acb7c], cl
jmp 0x140172c64
mov eax, dword [0x14159f620]
xor edx, edx
div dword [0x14159f624]
nop dword [rax + rax]
mov eax, dword [0x14159f628]
xor edx, edx
div dword [0x14159f62c]
add eax, 0xc8a63a8b
mov edx, eax
not edx
and edx, 0x2371b110
mov r8d, eax
and r8d, 0x5c8e4eef
imul r8d, edx
mov edx, eax
and edx, 0x2371b110
or eax, 0x2371b110
imul eax, edx
add eax, r8d
or eax, 0xa9284443
cmp eax, 0xa187005c
jb 0x140172ce0
mov eax, 0x9109829f
nop
mov edx, dword [0x14159f630]
mov r8d, dword [0x14159f634]
not edx
not r8d
mov r9d, edx
or r9d, r8d
and r8d, edx
not r8d
and r8d, r9d
or r8d, 0x5d2d89b1
mov edx, r8d
and edx, 0x48b77467
xor r8d, 0x48b77467
lea edx, [r8 + rdx*2]
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x461a41e0
ja 0x140172d30
test cl, cl
je 0x1401732a1
mov ecx, dword [0x14159f650]
mov eax, dword [0x14159f654]
mov edx, eax
not edx
and edx, ecx
xor eax, ecx
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
and ecx, 0x782d9429
mov edx, eax
and edx, 0x87d26bd6
imul edx, ecx
mov ecx, eax
and ecx, 0x782d9429
or eax, 0x782d9429
imul eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x40992728
xor eax, 0x40992728
lea eax, [rax + rcx*2]
add eax, 0xd0f07c15
cmp eax, 0x74717540
jae 0x140172df0
mov qword [0x1415acb70], rbx
nop word cs:[rax + rax]
mov eax, dword [0x14159f658]
mov ecx, dword [0x14159f65c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0x18765578
and ecx, 0xb1d7d2b9
imul rax, rcx, 0x302683f
shr rax, 0x39
mov qword [0x1415acb70], rbx
cmp eax, 0x9819cd65
je 0x140172df0
nop dword [rax]
mov eax, dword [0x14159f660]
mov ecx, dword [0x14159f664]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x5dbbdd2
or ecx, 0xfa24422d
and ecx, eax
add ecx, 0xcfe3569f
imul rax, rcx, 0x6bafc8cf
shr rax, 0x3e
cmp eax, 0x3a1466f7
jae 0x140172e30
mov r15d, 1
mov eax, dword [0x14159f670]
and eax, dword [str.v76.]
not eax
and eax, 0x31edfed0
mov ecx, eax
not ecx
and ecx, 0x14e8b8aa
xor eax, 0xb174755
lea eax, [rax + rcx*2]
or eax, 0xdd1f4ac3
lea r12, [0x1415acb70]
cmp eax, 0xca6ef761
jae 0x140172edc
mov dword [0x1415acb78], r15d
mov qword [r14], r12
mov qword [rsi], r14
mov qword [rsi + 8], 0
sub rsp, 0x20
lea rdx, [0x1415787d0]
mov rcx, rsi
mov r8, rdi
call fcn.1400b0510
add rsp, 0x20
lea rbx, [0x1415787d0]
nop word cs:[rax + rax]
mov eax, dword [0x14159f678]
mov ecx, dword [0x14159f67c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and eax, 0x2676013b
xor ecx, 0xd989fec4
lea r13d, [rcx + rax*2]
add r13d, 0xc9ee2a29
mov dword [0x1415acb78], r15d
mov qword [r14], r12
mov qword [rsi], r14
mov qword [rsi + 8], 0
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.1400b0510
add rsp, 0x20
cmp r13d, 0xceeaabdb
jb 0x140172ef0
mov rbx, qword [rsi + 8]
test al, al
je 0x140172fc0
nop dword [rax + rax]
mov eax, dword [0x14159f6e0]
sub eax, dword [0x14159f6e4]
add eax, 0xb0e9da46
mov ecx, eax
not ecx
and ecx, 0xc4ade4f5
mov edx, eax
and edx, 0x3b521b0a
imul edx, ecx
mov ecx, eax
and ecx, 0xc4ade4f5
or eax, 0xc4ade4f5
imul eax, ecx
add eax, edx
not eax
or eax, 0x5eb83c22
cmp eax, 0xed025d49
ja 0x140172f60
test rbx, rbx
jne 0x140173439
jmp 0x140172abe
mov eax, dword [0x14159f680]
xor eax, dword [0x14159f684]
mov ecx, eax
and ecx, 0xb5227e95
and eax, 0x34004611
xor ecx, 0xf419c71b
lea eax, [rcx + rax*2]
or eax, 0x6ee6a11
cmp eax, 0x853d19b4
jb 0x140172fc0
test rbx, rbx
je 0x140173257
nop word [rax + rax]
mov eax, dword [0x14159f688]
or eax, dword [0x14159f68c]
add eax, 0xa0736e54
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfa3f50d3
and ecx, 0x5c0af2c
imul ecx, edx
mov edx, eax
and edx, 0x5c0af2c
or eax, 0x5c0af2c
imul eax, edx
add eax, ecx
cmp eax, 0x631c3e6d
je 0x140173000
mov eax, ebx
and eax, 3
nop word cs:[rax + rax]
mov ecx, dword [0x14159f690]
mov edx, dword [0x14159f694]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
xor edx, 0xb41ca01a
add edx, 0x2a25a5e9
mov ecx, edx
xor ecx, 0x147908f3
and ecx, edx
cmp ecx, 0x8ce47573
jb 0x140173050
cmp rax, 2
jg 0x14017325e
cmp eax, 1
jne 0x140173257
lea rsi, [rbx - 1]
nop word cs:[rax + rax]
mov eax, dword [0x14159f6a0]
sub eax, dword [0x14159f6a4]
add eax, 0xbfc16ed5
not eax
or eax, 0x5c7e7fdf
cmp eax, 0x875e0edb
je 0x1401730b0
mov rdi, qword [rbx - 1]
mov rbx, qword [rbx + 7]
mov rax, qword [rbx]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1401730e0
test rax, rax
je 0x140173144
sub rsp, 0x20
mov rcx, rdi
call rax
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14159f6a8]
xor eax, dword [0x14159f6ac]
mov ecx, eax
and ecx, 0x77a19f17
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x77a19f17
imul rcx, rax, 0x13a1dcdd
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
lea ecx, [rax + 0x4451dd74]
add eax, eax
sub eax, ecx
cmp eax, 0x3cf4ec2c
jb 0x140173100
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
nop dword [rax]
mov edx, dword [0x14159f6b0]
imul edx, dword [0x14159f6b4]
mov r8d, edx
and r8d, 0x2b7bcc0f
xor edx, 0xab7bcc0f
lea edx, [rdx + r8*2]
add edx, 0xdb62c52e
xor edx, 0x700affd8
cmp edx, 0xfea14095
ja 0x140173150
test rcx, rcx
je 0x140173248
nop
mov ecx, dword [0x14159f6bc]
mov edx, ecx
xor edx, ecx
not edx
and edx, dword [0x14159f6b8]
xor edx, ecx
mov ecx, edx
and ecx, 0x4440041
mov r8d, ecx
not r8d
and r8d, 0x270af2fe
mov r9d, edx
and r9d, 0x440001
imul r9d, r8d
and edx, 0x4000040
or ecx, 0x270af2fe
imul ecx, edx
add ecx, r9d
cmp ecx, 0xd51d019b
ja 0x140173190
nop word cs:[rax + rax]
mov ecx, dword [0x14159f6c0]
or ecx, dword [0x14159f6c4]
imul ecx, ecx, 0x266b9e69
mov edx, ecx
not edx
or ecx, 0x2a00400
or edx, 0x180079c0
and edx, ecx
not edx
or edx, 0xe55f823f
cmp edx, 0x2c1fbec7
jb 0x1401731f0
cmp rax, 0x11
jb 0x14017322e
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor eax, eax
test al, al
jne 0x140173382
jmp 0x14017330c
xor ebx, ebx
jmp 0x140173439
mov eax, 0xabef1ca1
xor ebx, ebx
nop word cs:[rax + rax]
mov ecx, dword [0x14159f698]
mov edx, dword [0x14159f69c]
not ecx
not edx
or edx, ecx
not edx
imul rdx, rax
shr rdx, 0x3d
not edx
or edx, 0xd2eb2225
cmp edx, 0xb24fbcde
jbe 0x140173270
jmp 0x140173439
sub rsp, 0x20
lea rcx, [0x1415acb7c]
call fcn.1402393c0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14159f648]
sub eax, dword [str.Xpw]
mov ecx, eax
xor ecx, 0x93f2a865
add ecx, eax
and eax, 0x6c0d579a
sub ecx, eax
mov eax, ecx
and eax, 0x105c9946
add eax, eax
neg eax
add eax, ecx
add eax, 0x905c9946
mov ecx, eax
not ecx
or ecx, 0xed57853a
or eax, 0x12a87ac5
and eax, ecx
cmp eax, 0x1409719a
je 0x1401732c0
jmp 0x140172d84
mov ecx, dword [0x14159f6c8]
mov edx, dword [0x14159f6cc]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xa7d5e384
and ecx, 0x582a1c7b
or ecx, r9d
or eax, r8d
and r8d, 0xa7d5e384
and edx, 0x582a1c7b
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0xea42f38
and eax, 0x715bd0c7
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x41889a72
or eax, 0xbe77658d
and eax, ecx
imul eax, eax, 0xafacaf48
mov rdi, qword [0x1415acb98]
cmp eax, 0xfd9b9852
jbe 0x14017338b
mov rax, qword [0x1415acb98]
jmp 0x14017330c
mov eax, dword [0x14159f6d0]
or eax, dword [0x14159f6d4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8383c0cc
and ecx, 0x7c7c3f33
imul ecx, edx
mov edx, eax
and edx, 0x7c7c3f33
or eax, 0x7c7c3f33
imul eax, edx
add eax, ecx
add eax, 0x50b890a4
cmp eax, 0x5ceec0a
jae 0x1401733e0
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r15d, 0xa31eca37
xor ebx, ebx
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov r13d, dword [0x14159f6dc]
add r13d, dword [0x14159f6d8]
mov rax, r13
imul rax, r15
shr rax, 0x20
sub r13d, eax
shr r13d, 1
add r13d, eax
shr r13d, 0x1b
or r13d, 0xfbedaefd
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r12
add rsp, 0x20
cmp r13d, 0x84167336
jb 0x1401733f0
mov eax, dword [0x14159f6e8]
xor edx, edx
div dword [0x14159f6ec]
mov ecx, eax
and ecx, 0x9325a2dd
xor ecx, 0x325020d
and eax, 0x325020d
or eax, ecx
mov ecx, eax
not ecx
or eax, 0xc02015ef
or ecx, 0x3fdfea10
and ecx, eax
add ecx, 0xa320c492
jae 0x140173486
mov rsi, qword [r14]
mov eax, dword [rsi + 8]
dec eax
mov dword [rsi + 8], eax
xor ecx, ecx
test cl, cl
je 0x14017348e
mov rax, qword [r14]
dec dword [rax + 8]
jmp 0x140173475
test eax, eax
jne 0x1401735bd
mov eax, dword [0x14159f6f0]
xor edx, edx
div dword [0x14159f6f4]
mov ecx, eax
or ecx, 0xff317825
not eax
or eax, 0xce87da
and eax, ecx
xor eax, 0xd295701a
cmp eax, 0x4e8cb681
ja 0x140173510
mov eax, dword [0x14159f6f8]
or eax, dword [0x14159f6fc]
mov ecx, eax
xor ecx, 0x32fe0c38
xor eax, 0x8c001085
and eax, 0xae5c1485
mov edx, ecx
and edx, 0x51a3eb7a
imul edx, eax
mov eax, ecx
and eax, 0xae5c1485
or ecx, 0xae5c1485
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0xa9bacdae
mov qword [rsi], 0
cmp eax, 0x58e6d26d
jbe 0x140173519
mov qword [rsi], 0
jmp 0x1401734c1
xor eax, eax
xchg byte [rsi + 0xc], al
cmp al, 2
jne 0x1401735bd
add rsi, 0xc
mov eax, dword [0x14159f700]
or eax, dword [0x14159f704]
mov ecx, 0xa706881d
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x87027f7f
xor eax, 0xbce98eb
cmp eax, 0x139ca869
jne 0x140173570
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x14159f708]
mov ecx, dword [0x14159f70c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, 0x392550fd
sub eax, ecx
or eax, 0xc85baaf
lea edi, [rax + rcx]
add edi, 0xc6daaf03
xor edi, 0x232634e0
sub rsp, 0x20
mov rcx, rsi
call fcn.14020c960
add rsp, 0x20
cmp edi, 0x88e490f2
je 0x140173570
mov eax, 0xf8bccb45
nop word cs:[rax + rax]
mov ecx, dword [0x14159f710]
add ecx, dword [0x14159f714]
mov edx, ecx
not edx
or edx, 0xbc12d640
add ecx, edx
inc ecx
imul rcx, rax
shr rcx, 0x39
mov edx, ecx
not edx
or edx, 0x785e69d4
add ecx, edx
inc ecx
cmp ecx, 0xc1887784
ja 0x1401735d0
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x140173610
nop word cs:[rax + rax]
mov eax, dword [0x14159f718]
or eax, dword [0x14159f71c]
add eax, 0x84e92fbf
mov ecx, eax
and ecx, 0x7875a764
xor eax, 0xf875a764
lea eax, [rax + rcx*2]
xor eax, 0xf666bd47
cmp eax, 0x7c2d145
jb 0x140173620
test rbx, rbx
je 0x140172c20
ud2