Function at 0x1401cc810
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x28], rdx
mov qword [rbp + 0x88], rcx
mov eax, dword [0x1415a6f90]
xor edx, edx
div dword [0x1415a6f94]
add eax, 0xebc04647
mov ecx, eax
not ecx
and ecx, 0x98280767
mov edx, eax
and edx, 0x67d7f898
imul edx, ecx
mov ecx, eax
and ecx, 0x98280767
or eax, 0x98280767
imul eax, ecx
add eax, edx
imul rax, rax, 0x5644bc6f
shr rax, 0x3c
cmp eax, 0xbddcfde0
jne 0x1401cc8c0
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415a6f98]
sub eax, dword [0x1415a6f9c]
mov r10d, eax
xor r10d, 0x269bee09
and r10d, eax
mov eax, r10d
not eax
mov edx, r10d
and edx, 0xd46a4ca0
and eax, 0x2b95b35f
imul eax, edx
mov edx, r10d
and edx, 0x2b95b35f
or r10d, 0x2b95b35f
imul r10d, edx
add r10d, eax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rcx, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rax, rsp
cmp r10d, 0xacdc5b33
je 0x1401cc8c0
mov qword [rbp - 0x60], r11
mov qword [rbp + 0x18], r8
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x40], rcx
mov qword [rbp + 0x70], r9
mov qword [rbp - 0x50], rdx
mov eax, dword [0x1415a6fa0]
xor eax, dword [0x1415a6fa4]
add eax, 0xeaa73036
mov r9d, eax
not r9d
mov edx, eax
or edx, 0x12f99ae4
and r9d, 0x80006402
mov r8d, edx
and r8d, 0x7dee0b39
imul r8d, r9d
and edx, 0x8211f4c6
or eax, 0x92f9fee6
imul eax, edx
add eax, r8d
cmp eax, 0x7fdc4057
jbe 0x1401ccae0
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x210
call fcn.14020e090
sub rsp, rax
mov eax, 0x2b0
call fcn.14020e090
sub rsp, rax
mov eax, 0x470
call fcn.14020e090
sub rsp, rax
mov eax, 0x410
call fcn.14020e090
sub rsp, rax
mov eax, 0x2d0
call fcn.14020e090
sub rsp, rax
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
nop dword [rax]
mov eax, dword [0x1415a6fac]
mov r8d, eax
xor r8d, eax
not r8d
and r8d, dword [0x1415a6fa8]
xor r8d, eax
mov eax, r8d
not eax
mov edx, r8d
and edx, 0x2faf9472
and eax, 0x10506b8d
imul eax, edx
mov edx, r8d
and edx, 0x10506b8d
or r8d, 0x10506b8d
imul r8d, edx
add r8d, eax
and r8d, 0x2a124860
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r11, rsp
mov eax, 0x210
call fcn.14020e090
sub rsp, rax
mov rdx, rsp
mov eax, 0x2b0
call fcn.14020e090
sub rsp, rax
mov r10, rsp
mov eax, 0x470
call fcn.14020e090
sub rsp, rax
mov r13, rsp
mov eax, 0x410
call fcn.14020e090
sub rsp, rax
mov r9, rsp
mov eax, 0x2d0
call fcn.14020e090
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rax, rsp
cmp r8d, 0x55133666
ja 0x1401ccae0
mov qword [rbp], rax
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x20], rcx
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x10], r9
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x38], r10
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x28], rdi
mov qword [rbp - 8], r11
mov qword [rbp + 0x40], rdx
mov eax, dword [0x1415a6fb4]
add eax, dword [0x1415a6fb0]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2d628a25
and ecx, 0xd29d75da
imul ecx, edx
mov edx, eax
and edx, 0xd29d75da
or eax, 0xd29d75da
imul eax, edx
add eax, ecx
add eax, 0x4b1ea48f
not eax
and eax, 0x969b8a08
cmp eax, 0xa2a8620e
jbe 0x1401ccda5
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov qword [rbp - 0x48], r14
mov r13, qword [rbp + 0x70]
nop dword [rax]
mov eax, dword [0x1415a6fb8]
mov edx, dword [0x1415a6fbc]
mov ecx, eax
and ecx, edx
not ecx
not eax
not edx
or edx, eax
and edx, ecx
mov ecx, edx
not ecx
and edx, 0x491ed1fa
mov eax, ecx
and eax, 0xb6e12e05
imul eax, edx
mov edx, ecx
and edx, 0x491ed1fa
or ecx, 0x491ed1fa
imul ecx, edx
add ecx, eax
mov eax, ecx
not eax
and eax, 0x2e19771d
and ecx, 0xd1e688e2
sub ecx, eax
and ecx, 0xf473149b
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r8, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rax, rsp
cmp ecx, 0x23348aa0
jb 0x1401ccdb0
mov qword [rbp - 0x20], r9
mov qword [rbp + 0x68], r8
mov qword [rbp + 0x78], rdx
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x28]
cmp byte [rax], 0
je 0x1401ccf53
mov qword [r12], 0
mov qword [rsi], 0
mov qword [rdi], 0
mov qword [r15], 0
mov qword [rbx], 0
mov qword [r14], 0
mov rax, qword [rbp + 0x88]
mov r8, qword [rax + 0xf8]
test r8, r8
je 0x1401cd702
mov qword [rbp + 8], r14
mov eax, dword [0x1415a6fd0]
mov ecx, dword [0x1415a6fd4]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0x4101041
and ecx, eax
and ecx, 0xc4141451
cmp ecx, 0x9dad6de4
mov r14, r8
jbe 0x1401cd5fb
jmp 0x1401cd63d
mov r12, qword [rbp + 0x88]
mov r14, qword [rbp + 0x40]
mov r15, qword [rbp + 0x28]
mov rbx, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x1415a6fc0]
xor eax, dword [0x1415a6fc4]
or eax, 0xaaf738f1
imul rax, rax, 0x26035e57
shr rax, 0x3d
or eax, 0x795aa5b0
cmp eax, 0xf45e8b54
ja 0x1401ccf70
movzx ecx, byte [r15 + 1]
nop dword [rax]
mov eax, dword [0x1415a6fc8]
xor edx, edx
div dword [0x1415a6fcc]
xor eax, 0x714684ca
cmp eax, 0x9f62a256
je 0x1401ccfa0
test cl, cl
je 0x1401cd07e
mov eax, 0xa9b151cd
nop word [rax + rax]
mov ecx, dword [0x1415a7058]
mov edx, dword [0x1415a705c]
xor edx, ecx
not edx
and edx, ecx
add edx, 0x9fe4dc7e
imul rdx, rax
shr rdx, 0x3f
not edx
and edx, 0xdbc6ed79
cmp edx, 0x9800390b
jb 0x1401ccfd0
mov rsi, qword [r12 + 0xf8]
test rsi, rsi
je 0x1401cde00
nop word cs:[rax + rax]
mov eax, dword [0x1415a7060]
xor eax, dword [0x1415a7064]
add eax, 0xf1ca1ece
or eax, 0xc1a4c979
cmp eax, 0x649b0d1
je 0x1401cd020
mov eax, dword [0x1415a706c]
not eax
add eax, dword [0x1415a7068]
imul eax, eax, 0x6ac912ec
add eax, 0x6ac912ec
mov ecx, eax
xor ecx, 0x903814
xor eax, 0xa293fd7c
and ecx, 0x58b83a94
add ecx, ecx
sub ecx, eax
cmp ecx, 0x37e5fa75
jne 0x1401cdcdc
jmp 0x1401cdd22
movzx ecx, byte [r15 + 2]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7048]
mov edx, dword [0x1415a704c]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
add eax, 0xe7493cd1
or eax, 0x43d79a1c
cmp eax, 0xa4a07a08
je 0x1401cd090
nop word cs:[rax + rax]
mov eax, dword [0x1415a7050]
xor edx, edx
div dword [0x1415a7054]
xor eax, 0x7643bf66
add eax, 0x43792ebd
mov edx, eax
xor edx, 0x37877b13
and edx, eax
cmp edx, 0x369d417b
je 0x1401cd0e0
test cl, cl
mov r8, qword [rbp + 0x100]
je 0x1401cd240
mov eax, dword [0x1415a7d20]
xor edx, edx
div dword [0x1415a7d24]
nop word [rax + rax]
mov eax, dword [0x1415a7d28]
xor eax, dword [0x1415a7d2c]
mov ecx, eax
or ecx, 0x703b502b
xor ecx, 0xa6b25
or eax, 0xfff594da
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0x8dc8a9b5
mov edx, eax
and edx, 0x62251640
imul edx, ecx
mov ecx, eax
and ecx, 0x9dd0a99e
or eax, 0x9dd8a9bf
imul eax, ecx
add eax, edx
cmp eax, 0x481fcd3
jb 0x1401cd130
mov eax, dword [0x1415a7d30]
sub eax, dword [0x1415a7d34]
mov rcx, qword [rbp + 0x108]
mov qword [r12 + 0xe8], rcx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x9cf6b9a6
and ecx, 0x63094659
imul ecx, edx
mov edx, eax
and edx, 0x63094659
or eax, 0x63094659
imul eax, edx
add eax, ecx
add eax, 0x8dbf8d62
shr eax, 2
imul rax, rax, 0x25ca1af1
shr rax, 0x3a
cmp eax, 0x2c4ed064
jbe 0x1401cd1f0
mov qword [r12 + 0xf0], r8
nop word cs:[rax + rax]
mov eax, dword [0x1415a7d38]
mov ecx, dword [0x1415a7d3c]
mov edx, eax
not edx
or edx, ecx
not ecx
or ecx, eax
and ecx, edx
mov eax, ecx
not eax
xor ecx, 0x1deb964f
and ecx, eax
mov eax, ecx
and eax, 0x16f1a614
add eax, eax
neg eax
add eax, ecx
add eax, 0x16f1a614
or eax, 0x28a88879
mov qword [r12 + 0xf0], r8
cmp eax, 0xa6b17b7d
ja 0x1401cd1f0
nop word [rax + rax]
mov eax, dword [0x1415a7098]
add eax, dword [0x1415a709c]
mov ecx, eax
not ecx
and ecx, 0x6208b397
mov edx, eax
and edx, 0x9df74c68
imul edx, ecx
mov ecx, eax
and ecx, 0x6208b397
or eax, 0x6208b397
imul eax, ecx
add eax, edx
add eax, 0x1a25799a
imul rax, rax, 0x6afdcd83
shr rax, 0x3c
cmp eax, 0x4195ce14
ja 0x1401cd240
movzx ecx, byte [r15 + 3]
nop
mov eax, dword [0x1415a70a0]
xor edx, edx
div dword [0x1415a70a4]
mov edx, eax
not edx
and edx, 0xc88bc088
mov r8d, eax
and r8d, 0x37743f77
imul r8d, edx
mov edx, eax
and edx, 0xc88bc088
or eax, 0xc88bc088
imul eax, edx
add eax, r8d
mov edx, eax
not edx
and edx, 0xe6f15202
mov r8d, eax
and r8d, 0x190eadf8
imul r8d, edx
mov edx, eax
and edx, 0xe6f15200
or eax, 0xe6f15202
imul eax, edx
add eax, r8d
xor eax, 0x4a4df895
cmp eax, 0xd0a0aa5c
ja 0x1401cd290
movabs rdi, 0x8000000000000000
mov rax, qword [r12 + 0xf8]
test rax, rax
je 0x1401ce240
nop dword [rax + rax]
mov r8d, dword [0x1415a70a8]
mov r9d, dword [0x1415a70ac]
mov edx, r8d
not edx
mov r10d, r9d
not r10d
mov r11d, edx
and r11d, 0x10908a80
and r8d, 0xc021002e
or r8d, r11d
or edx, r10d
and r10d, 0x10908a80
and r9d, 0xc021002e
or r9d, r10d
xor r9d, r8d
not edx
or edx, r9d
mov r8d, edx
xor r8d, 0x40900202
or r8d, 0x2f4e7551
xor edx, 0x100108ac
xor r8d, 0x7e137fbd
and edx, 0x50110aac
add edx, edx
sub edx, r8d
cmp edx, 0x3cd6ef9f
jb 0x1401cd320
mov rsi, qword [rax + 0x10]
mov eax, 0x863f9287
nop word cs:[rax + rax]
mov edx, dword [0x1415a70b0]
or edx, dword [0x1415a70b4]
shr edx, 1
imul rdx, rax
shr rdx, 0x3c
not edx
and edx, 0x20000007
xor edx, 0x41002109
or edx, 0x12014e10
cmp edx, 0xaebb389c
ja 0x1401cd3b0
cmp cl, 1
jg 0x1401cd400
jne 0x1401ce240
jmp 0x1401cd48c
mov eax, dword [0x1415a70b8]
xor edx, edx
div dword [0x1415a70bc]
add eax, 0x60a83dca
xor eax, 0xb6f4bbad
cmp eax, 0x486b9646
jb 0x1401cd400
mov rax, qword [r12 + 0x80]
nop word [rax + rax]
mov ecx, dword [0x1415a70c0]
sub ecx, dword [0x1415a70c4]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x550af807
and edx, 0xaaf507f8
imul edx, r8d
mov r8d, ecx
and r8d, 0xaaf507f8
or ecx, 0xaaf507f8
imul ecx, r8d
add ecx, edx
imul rcx, rcx, 0x4fb3a4fb
shr rcx, 0x3e
or ecx, 0x1b66b87c
cmp ecx, 0x33d0bafa
je 0x1401cd430
cmp rax, rdi
jne 0x1401ce240
mov eax, dword [0x1415a70c8]
mov ecx, dword [0x1415a70cc]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0xfa5d047
mov eax, ecx
not eax
and eax, 0x54a56847
and ecx, 0xab5a97b8
sub ecx, eax
cmp ecx, 0x667f1e30
jne 0x1401cd4e3
mov r8, qword [rbp + 0x68]
mov qword [r8], 0
sub rsp, 0x20
mov rcx, rsi
mov edx, 8
call fcn.14020da40
add rsp, 0x20
mov rdi, qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov r8, qword [rbp + 0x68]
nop
mov eax, dword [0x1415a70d4]
mov ebx, eax
xor ebx, eax
not ebx
and ebx, dword [0x1415a70d0]
xor ebx, eax
mov eax, ebx
not eax
and eax, 0x313c4305
mov ecx, ebx
and ecx, 0xcec3bcfa
imul ecx, eax
mov eax, ebx
and eax, 0x313c4305
or ebx, 0x313c4305
imul ebx, eax
add ebx, ecx
mov eax, ebx
and eax, 0x5431b2f2
add eax, eax
sub ebx, eax
add ebx, 0x5431b2f2
xor ebx, 0xfa585072
mov qword [r8], 0
sub rsp, 0x20
mov rcx, rsi
mov edx, 8
mov r8, qword [rbp + 0x68]
call rdi
mov r8, qword [rbp + 0x68]
add rsp, 0x20
cmp ebx, 0x59235d51
jb 0x1401cd4f0
test eax, eax
je 0x1401ce1a3
mov eax, 0xa68aa14d
nop word [rax + rax]
mov ecx, dword [0x1415a70d8]
mov edx, dword [0x1415a70dc]
add ecx, edx
add ecx, 0xeabfc2d2
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x62f06d1b
cmp ecx, 0xe523bde9
ja 0x1401cd580
mov rdi, qword [r8]
lea rax, [rdi + 1]
cmp rax, 2
jb 0x1401ce1b0
mov eax, dword [0x1415a70e0]
xor edx, edx
div dword [0x1415a70e4]
xor eax, 0x793e84ed
add eax, 0x352be6e8
imul rcx, rax, 0xb861633
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xfcd8a8
mov rbx, qword [rbp + 0x78]
jbe 0x1401cde49
jmp 0x1401cde9c
mov r13d, dword [0x1415a6fd8]
imul r13d, dword [0x1415a6fdc]
add r13d, 0xd6133247
mov rcx, qword [r8 + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rdx, r12
mov r8, r12
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov r8, r14
add rsp, 0x30
cmp r13d, 0xd868f3ee
jae 0x1401cd662
mov rcx, qword [r8 + 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov rdx, r12
mov r8, r12
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov r8, r14
add rsp, 0x30
jmp 0x1401cd5fb
mov r13, qword [rbp + 0x70]
mov r14, qword [rbp + 8]
nop word [rax + rax]
mov ecx, dword [0x1415a6fe0]
or ecx, dword [0x1415a6fe4]
mov edx, ecx
not edx
or edx, 0x9420100
or ecx, 0x14a52e80
and edx, 0x94a0109
and ecx, 0x96a56e80
sub ecx, edx
cmp ecx, 0x938ba76e
ja 0x1401cd670
test eax, eax
jne 0x1401cd702
mov eax, dword [0x1415a6fe8]
sub eax, dword [0x1415a6fec]
add eax, 0x65fb4932
mov ecx, eax
not ecx
or ecx, 0x20141944
and ecx, 0xac145b7d
and eax, 0x1e0a482
or eax, ecx
cmp eax, 0xd950eb5d
jbe 0x1401cd6e2
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
xor r12d, r12d
nop word cs:[rax + rax]
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
test r12b, r12b
jne 0x1401cd6f0
mov eax, dword [0x1415a6ff0]
mov ecx, dword [0x1415a6ff4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0x21a9cc5
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x21a9cc5
mov ecx, eax
not ecx
and ecx, 0x3a659896
mov edx, eax
and edx, 0x59a6769
imul edx, ecx
mov ecx, eax
and ecx, 0x3a659896
or eax, 0x3a659896
imul eax, ecx
add eax, edx
and eax, 0x39c1adf8
cmp eax, 0xa022337a
ja 0x1401cd7c0
mov eax, dword [0x1415a6ff8]
mov ecx, dword [0x1415a6ffc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xc4837df8
xor eax, 0x2524164
mov r12d, 0xb1d292fb
imul r12, rax
shr r12, 0x3f
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.14020d8a0
add rsp, 0x20
cmp r12d, 0xfcdbd4f1
jbe 0x1401cd7e0
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
add rsp, 0x20
jmp 0x1401cd75e
mov ecx, dword [0x1415a7000]
mov edx, dword [0x1415a7004]
mov r8d, ecx
and r8d, edx
add r8d, r8d
add ecx, edx
sub ecx, r8d
xor ecx, 0xecd3b11b
imul ecx, ecx, 0x9a1c1202
xor ecx, 0x9de97201
cmp ecx, 0xa4245c4
jb 0x1401cd7e0
test eax, eax
mov r15, qword [rbp + 0x88]
jne 0x1401cd830
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop dword [rax]
mov ecx, dword [0x1415a7008]
mov edx, dword [0x1415a700c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xdbb882b
and ecx, 0xf24477d4
or ecx, r9d
or eax, r8d
and r8d, 0xdbb882b
and edx, 0xf24477d4
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
and ecx, 0x592e32
xor eax, 0x592e32
lea eax, [rax + rcx*2]
or eax, 0xc05a43bf
imul eax, eax, 0x20442df
cmp eax, 0x6726d964
jb 0x1401cd830
mov rcx, qword [rsi]
mov r8, qword [rdi]
mov rax, qword [rbx]
mov rbx, qword [rbp + 0x18]
nop word cs:[rax + rax]
mov edx, dword [0x1415a7010]
mov r9d, dword [0x1415a7014]
mov r10d, edx
xor r10d, r9d
not r9d
and r9d, edx
add r9d, r9d
sub r9d, r10d
and r9d, 0x166d0fba
xor r9d, 0x16650e3a
add r9d, 0x42ed89b7
cmp r9d, 0x73b7dfbe
ja 0x1401cd8b0
mov r9d, dword [r14]
mov edx, dword [r14 + 4]
shl rdx, 0x20
or rdx, r9
mov r10, qword [r15 + 0x110]
xor r9d, r9d
cmp rax, r10
cmovb r10, r9
mov r11, rax
not r11
and r11, r10
not r10
and r10, rax
sub r10, r11
mov rsi, qword [r15 + 0x118]
cmp rdx, rsi
cmovb rsi, r9
mov r9, rdx
not r9
and r9, rsi
not rsi
and rsi, rdx
sub rsi, r9
mov r11, qword [r15 + 0x100]
mov r9, qword [r15 + 0x108]
mov qword [r15 + 0x108], r8
mov qword [r15 + 0x100], rcx
mov qword [r15 + 0x118], rdx
mov qword [r15 + 0x110], rax
add rsi, r10
mov r10, 0xffffffffffffffff
cmovae r10, rsi
test r10, r10
je 0x1401cda19
xor eax, eax
cmp rcx, r11
cmovae rax, r11
sub rcx, rax
mov eax, dword [0x1415a7018]
mov edx, dword [0x1415a701c]
mov r11d, eax
and r11d, edx
or eax, edx
add eax, r11d
imul rax, rax, 0x72886df3
shr rax, 0x3d
imul eax, eax, 0x5fbd0bf9
mov edx, eax
not edx
mov r11d, eax
and r11d, 0xf8610c15
and edx, 0x79ef3ea
imul edx, r11d
mov r11d, eax
and r11d, 0x79ef3ea
or eax, 0x79ef3ea
imul eax, r11d
add eax, edx
cmp eax, 0x5cb544ef
jbe 0x1401cdbbe
xor eax, eax
cmp r8, r9
cmovae rax, r9
mov rdx, r8
not rdx
and rdx, rax
not rax
and rax, r8
sub rax, rdx
test r10, r10
js 0x1401cdb25
cvtsi2ss xmm0, r10
jmp 0x1401cdb3e
mov eax, dword [0x1415a7028]
mov ecx, dword [0x1415a702c]
add eax, ecx
add eax, 0xefcbe143
xor eax, 0xcbcce897
add eax, 0x9bda673c
cmp eax, 0x28dec5ee
jae 0x1401cda48
mov dword [r15 + 0x150], 0
mov eax, 0x8489d10f
nop dword [rax]
mov ecx, dword [0x1415a7030]
mov edx, dword [0x1415a7034]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xe6afdc9
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x3ed23fe0
and edx, 0x812dc01f
imul edx, r8d
mov r8d, ecx
and r8d, 0x12dc01f
or ecx, 0x812dc01f
imul ecx, r8d
add ecx, edx
mov dword [r15 + 0x150], 0
cmp ecx, 0x9a786979
jb 0x1401cda50
mov eax, dword [0x1415a7038]
xor edx, edx
div dword [0x1415a703c]
and eax, 0x2040030
imul eax, eax, 0x61a19c42
cmp eax, 0x429da1c1
ja 0x1401cdad0
mov eax, dword [0x1415a7040]
xor edx, edx
div dword [0x1415a7044]
imul eax, eax, 0x2177f720
add eax, 0x5704800f
mov ecx, eax
and ecx, 0x4559816c
xor eax, 0xc559817c
lea eax, [rax + rcx*2]
cmp eax, 0x4eb86c8e
ja 0x1401cdaf0
jmp 0x1401ccf53
mov rdx, r10
shr rdx, 1
mov r11d, r10d
and r11d, 1
or r11, rdx
cvtsi2ss xmm0, r11
addss xmm0, xmm0
add rax, rcx
mov rdx, 0xffffffffffffffff
cmovae rdx, rax
test rdx, rdx
js 0x1401cdb83
cvtsi2ss xmm1, rdx
divss xmm1, xmm0
mulss xmm1, dword [0x14024a280]
test rbx, rbx
jns 0x1401cdba9
mov rax, rbx
shr rax, 1
mov edx, ebx
and edx, 1
or rdx, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
jmp 0x1401cdbb1
mov rax, rdx
shr rax, 1
and edx, 1
or rdx, rax
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
divss xmm1, xmm0
mulss xmm1, dword [0x14024a280]
test rbx, rbx
js 0x1401cdb67
xorps xmm0, xmm0
cvtsi2ss xmm0, rbx
mulss xmm1, xmm0
movss dword [r15 + 0x150], xmm1
mov r11, r10
xorps xmm0, xmm0
cvtsi2ss xmm0, r10
shr r11, 1
mov rsi, 0xffffffffffffffff
mov rdi, rbx
shr rdi, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, rbx
movss xmm2, dword [0x14024a280]
jmp 0x1401cdc1d
movaps xmm5, xmm1
add eax, 0x89cabc6f
and eax, 0x59425772
divss xmm4, xmm3
mulss xmm4, xmm2
mulss xmm4, xmm5
movss dword [r14 + 0x150], xmm4
cmp eax, 0xf1f80a33
jne 0x1401ccf53
mov eax, dword [0x1415a7020]
xor edx, edx
div dword [0x1415a7024]
cmp r8, r9
mov edx, 0
cmovae rdx, r9
test r10, r10
js 0x1401cdc50
movaps xmm3, xmm0
jmp 0x1401cdc65
mov ebx, r10d
and ebx, 1
or rbx, r11
xorps xmm3, xmm3
cvtsi2ss xmm3, rbx
addss xmm3, xmm3
mov r14, qword [rbp + 0x88]
mov rbx, r8
sub rbx, rdx
add rbx, rcx
cmovb rbx, rsi
test rbx, rbx
js 0x1401cdca0
xorps xmm4, xmm4
cvtsi2ss xmm4, rbx
mov rdx, qword [rbp + 0x18]
test rdx, rdx
jns 0x1401cdbf0
jmp 0x1401cdcc5
mov rdx, rbx
shr rdx, 1
and ebx, 1
or rbx, rdx
xorps xmm4, xmm4
cvtsi2ss xmm4, rbx
addss xmm4, xmm4
mov rdx, qword [rbp + 0x18]
test rdx, rdx
jns 0x1401cdbf0
and edx, 1
or rdx, rdi
xorps xmm5, xmm5
cvtsi2ss xmm5, rdx
addss xmm5, xmm5
jmp 0x1401cdbf3
mov eax, dword [0x1415a7070]
sub eax, dword [0x1415a7074]
imul edi, eax, 0xcc3fa96b
mov eax, edi
not eax
and eax, 0xf08b9664
and edi, 0xf74699b
sub edi, eax
xor edi, 0x57feab14
mov rcx, qword [rsi + 0x10]
sub rsp, 0x20
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
cmp edi, 0xbed7bdb5
jae 0x1401cdd40
mov rcx, qword [rsi + 0x10]
sub rsp, 0x20
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
add rsp, 0x20
jmp 0x1401cdcdc
mov ecx, dword [0x1415a7078]
mov edx, dword [0x1415a707c]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
add ecx, 0x35c8b4a6
imul rcx, rcx, 0x5ab5b813
shr rcx, 0x3b
cmp ecx, 0xd2ab2a4f
ja 0x1401cdd40
test eax, eax
je 0x1401cddf0
nop word cs:[rax + rax]
mov eax, dword [0x1415a7080]
mov ecx, dword [0x1415a7084]
add eax, ecx
add eax, 0xe469824e
xor eax, 0x4178ad98
imul eax, eax, 0x4c6ae40e
cmp eax, 0x97e14a64
je 0x1401cdd80
nop word cs:[rax + rax]
mov eax, dword [0x1415a7088]
mov ecx, dword [0x1415a708c]
add eax, ecx
add eax, 0x6571988d
and eax, 0x4c56c2d1
cmp eax, 0x8b350351
ja 0x1401cddb0
movups xmm0, xmmword [r12 + 0x140]
movups xmmword [r12 + 0x130], xmm0
movups xmm0, xmmword [rbx + 0x18]
movups xmmword [r12 + 0x140], xmm0
jmp 0x1401cde00
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415a7090]
mov ecx, dword [0x1415a7094]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0x462c1e6a
mov ecx, eax
xor ecx, 0xad1ac2ed
and eax, 0x52e53d12
add eax, eax
sub eax, ecx
add eax, 0xaf1fe098
cmp eax, 0x3754f210
jb 0x1401cde00
mov al, 1
nop word [rax + rax]
test al, al
je 0x1401cde40
jmp 0x1401cd07e
mov eax, dword [0x1415a70e8]
or eax, dword [0x1415a70ec]
not eax
and eax, 0x456706f8
xor eax, 0xf242e3ec
mov esi, 0x8918b753
imul rsi, rax
shr rsi, 0x3f
mov dword [rbx], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rdi
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call fcn.14020d8d0
add rsp, 0x30
cmp esi, 0x7462da4d
jbe 0x1401cdec4
mov dword [rbx], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rdi
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call fcn.14020d8d0
add rsp, 0x30
jmp 0x1401cde49
mov r15, r13
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1401cded0
test eax, eax
jne 0x1401cdf50
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov ecx, eax
xor ecx, 0x7ff80000
and ecx, eax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov eax, dword [0x1415a70f0]
xor edx, edx
div dword [0x1415a70f4]
nop dword [rax + rax]
mov eax, dword [0x1415a70f8]
and eax, dword [0x1415a70fc]
mov edx, eax
and edx, 0x2363ae1c
add edx, edx
neg edx
add eax, edx
add eax, 0x47125a36
or eax, 0x234880f4
cmp eax, 0x9c10628c
je 0x1401cdf10
cmp ecx, 0x8007007a
mov rbx, qword [rbp + 0x78]
jne 0x1401ce0a5
nop dword [rax + rax]
mov eax, dword [0x1415a7118]
xor eax, dword [0x1415a711c]
imul eax, eax, 0xa4ecf0fb
mov ecx, eax
and ecx, 0x149104bb
xor eax, 0x149104bb
lea eax, [rax + rcx*2]
cmp eax, 0x2d4f5753
je 0x1401cdf50
mov esi, dword [rbx]
mov eax, dword [0x1415a7120]
xor edx, edx
div dword [0x1415a7124]
mov ecx, eax
xor ecx, 0xec5bc1cc
xor eax, 0xf629b2f5
add eax, ecx
and ecx, 0xe58d8cc6
sub eax, ecx
cmp eax, 0xdccee77b
jne 0x1401cdfc0
sub rsp, 0x20
call fcn.14020d500
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415a712c]
add eax, dword [0x1415a7128]
not eax
or eax, 0x212437ca
mov r14d, eax
xor r14d, 0x8194801
xor eax, 0x40008000
and eax, 0x638082e0
and r14d, 0x9c5f5815
sub r14d, eax
sub rsp, 0x20
call fcn.14020d500
add rsp, 0x20
cmp r14d, 0x1fe4a11a
jb 0x1401cdfc0
mov rbx, rax
inc rax
nop dword [rax]
mov ecx, dword [0x1415a7134]
mov edx, ecx
xor edx, ecx
not edx
and edx, dword [0x1415a7130]
xor edx, ecx
or edx, 0xcbc52839
imul ecx, edx, 0x20cbdedd
cmp ecx, 0xa5f1728c
je 0x1401ce010
cmp rax, 1
ja 0x1401ce066
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
xor eax, eax
mov r14, qword [rbp + 0x40]
nop word cs:[rax + rax]
test al, al
jne 0x1401ce060
jmp 0x1401ce0a5
mov eax, dword [0x1415a7138]
add eax, dword [0x1415a713c]
mov ecx, eax
not ecx
or ecx, 0x80243a04
and ecx, 0xf527be14
and eax, 0x8000ca
or eax, ecx
mov ecx, eax
and ecx, 0x44223298
add ecx, ecx
sub eax, ecx
cmp eax, 0xdbc2ddf9
jne 0x1401cf4e9
jmp 0x1401cf553
mov eax, dword [0x1415a7100]
sub eax, dword [0x1415a7104]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x18cc01f9
and ecx, 0xe733fe06
imul ecx, edx
mov edx, eax
and edx, 0xe733fe06
or eax, 0xe733fe06
imul eax, edx
add eax, ecx
imul rax, rax, 0x645748b
shr rax, 0x39
cmp eax, 0x75135678
je 0x1401ce121
mov esi, dword [0x1415a7108]
add esi, dword [0x1415a710c]
or esi, 0xf038f951
add esi, 0xd95599a3
and esi, 0xca8c429a
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp esi, 0x3479bb31
jne 0x1401ce134
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1401ce0ea
mov r13, r15
nop word [rax + rax]
mov ecx, dword [0x1415a7110]
mov edx, dword [0x1415a7114]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
mov edx, ecx
and edx, 0xb13425e8
and ecx, 0x11140440
xor edx, 0x9d149e46
lea ecx, [rdx + rcx*2]
imul rcx, rcx, 0x4451bbb3
shr rcx, 0x3e
cmp ecx, 0xda533b52
ja 0x1401ce140
test eax, eax
mov r15, qword [rbp + 0x28]
jne 0x1401ce1b0
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
mov eax, dword [0x1415a7188]
mov ecx, dword [0x1415a718c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul eax, eax, 0xc49c8bc2
mov ecx, 0x97468273
sub ecx, eax
and ecx, 0xed92dabd
cmp ecx, 0x5b248b2
je 0x1401ce1b0
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1415a7190]
or eax, dword [0x1415a7194]
not eax
or eax, 0xf2822a28
and eax, 0xf2832bf9
mov ecx, eax
or ecx, 0x5527363e
sub ecx, eax
cmp ecx, 0x7e0d973a
je 0x1401ce210
nop word [rax + rax]
mov eax, dword [0x1415a7210]
sub eax, dword [0x1415a7214]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x332f2201
and ecx, 0xccd0ddfe
imul ecx, edx
mov edx, eax
and edx, 0xccd0ddfe
or eax, 0xccd0ddfe
imul eax, edx
add eax, ecx
imul eax, eax, 0x319d33cb
mov ecx, eax
and ecx, 0x798e58a4
xor eax, 0xf98e58a4
lea eax, [rax + rcx*2]
cmp eax, 0x806c0cc1
je 0x1401ce240
movzx r11d, byte [r15 + 4]
movzx ebx, byte [r15 + 5]
movzx esi, byte [r15 + 6]
movzx r15d, byte [r15 + 7]
cmp r15b, 1
jg 0x1401ce2b5
jne 0x1401ce3c0
jmp 0x1401ce690
mov eax, dword [0x1415a7218]
xor edx, edx
div dword [0x1415a721c]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7220]
xor edx, edx
div dword [0x1415a7224]
xor eax, 0x84122860
or eax, 0x796d539f
cmp eax, 0xca3c70d3
jb 0x1401ce2d0
mov rax, qword [r12 + 0x40]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a7228]
mov edx, dword [0x1415a722c]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
add ecx, 0x60f20e06
mov edx, ecx
xor edx, 0xfc524f15
and ecx, 0x3adb0ea
add ecx, ecx
sub ecx, edx
mov edx, ecx
xor edx, 0x901e0724
and edx, ecx
cmp edx, 0xb0872e82
je 0x1401ce300
nop dword [rax + rax]
mov ecx, dword [0x1415a7230]
sub ecx, dword [0x1415a7234]
mov edx, ecx
not edx
and edx, 0x3887854b
mov r8d, ecx
and r8d, 0x7787ab4
imul r8d, edx
mov edx, ecx
and edx, 0x3887854b
or ecx, 0x3887854b
imul ecx, edx
add ecx, r8d
mov edx, ecx
and edx, 0x20804832
or edx, 0x1f3b84cd
or ecx, 0x1f3b84cd
and ecx, edx
cmp ecx, 0x94f0d646
ja 0x1401ce360
test rax, rax
je 0x1401ce690
nop
mov eax, dword [0x1415a7238]
xor edx, edx
div dword [0x1415a723c]
add eax, 0xb9e0d29c
xor eax, 0x82287085
or eax, 0x6d95033a
cmp eax, 0xd08479c1
ja 0x1401ce3c0
test sil, sil
jle 0x1401ce48e
cmp sil, 2
jl 0x1401ce690
jne 0x1401ceb80
nop dword [rax]
mov eax, dword [0x1415a7248]
mov ecx, dword [0x1415a724c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
and eax, 0x87c817ba
xor eax, 0xe241e0fb
and ecx, 0x5881700
add ecx, ecx
sub ecx, eax
mov eax, ecx
xor eax, 0x8b59aa97
or ecx, 0x34a65528
and ecx, eax
cmp ecx, 0xf5953b83
ja 0x1401ce400
mov rax, qword [r12 + 0x58]
nop word [rax + rax]
mov ecx, dword [0x1415a7250]
xor ecx, dword [0x1415a7254]
imul ecx, ecx, 0x95f2921f
add ecx, 0x5a6bad1c
imul rdx, rcx, 0x9868f2d
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1d
cmp ecx, 0xed2cffa1
ja 0x1401ce450
test rax, rax
jne 0x1401ce494
jmp 0x1401ce690
jne 0x1401ceb80
mov eax, 0xcf05fef3
nop dword [rax]
mov ecx, dword [0x1415a7258]
and ecx, dword [0x1415a725c]
xor ecx, 0x857eb76c
imul rcx, rax
shr rcx, 0x3f
not ecx
and ecx, 0x5b50eebd
neg ecx
cmp ecx, 0xca9d46f6
ja 0x1401ce4a0
cmp r11b, 1
jg 0x1401ce4e0
je 0x1401ce690
jmp 0x1401ce56c
mov eax, dword [0x1415a7260]
or eax, dword [0x1415a7264]
add eax, 0x46b55698
mov ecx, eax
not ecx
and ecx, 0x71df6d37
mov edx, eax
and edx, 0x8e2092c8
imul edx, ecx
mov ecx, eax
and ecx, 0x71df6d37
or eax, 0x71df6d37
imul eax, ecx
add eax, edx
xor eax, 0xeb830c8f
cmp eax, 0x9601d2df
ja 0x1401ce4e0
nop word cs:[rax + rax]
mov eax, dword [0x1415a7268]
xor edx, edx
div dword [0x1415a726c]
xor eax, 0x2a59aa60
shr eax, 2
imul rax, rax, 0x227d5407
shr rax, 0x3b
imul eax, eax, 0x285b9478
cmp eax, 0x9be5332b
ja 0x1401ce530
cmp qword [r12 + 0x98], rdi
je 0x1401ce690
test bl, bl
jle 0x1401ceef4
cmp bl, 2
jl 0x1401ce690
jne 0x1401ceefa
nop word cs:[rax + rax]
mov eax, dword [str.3y6A]
xor edx, edx
div dword [0x1415a727c]
add eax, 0x1ac65eae
mov ecx, eax
xor ecx, 0x20510038
xor eax, 0x11ac5480
and eax, 0x51ac5f82
and ecx, 0xae53a07d
or ecx, eax
cmp ecx, 0xae1ce716
ja 0x1401ce590
mov rax, qword [r12 + 0xb8]
nop dword [rax]
mov ecx, dword [0x1415a7280]
mov edx, dword [0x1415a7284]
not ecx
not edx
or edx, ecx
mov ecx, edx
not ecx
mov r8d, ecx
and r8d, 0x384a5579
and edx, 0xc7b5aa86
imul edx, r8d
mov r8d, ecx
and r8d, 0xc7b5aa86
or ecx, 0xc7b5aa86
imul ecx, r8d
add ecx, edx
mov edx, ecx
xor edx, 0x3302008
or ecx, 0xa4040080
and ecx, edx
not ecx
or ecx, 0x58cbdf76
cmp ecx, 0x89931c36
je 0x1401ce5d0
mov ecx, dword [0x1415a7288]
mov edx, dword [0x1415a728c]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
mov edx, ecx
xor edx, 0x408c3007
and edx, 0x409c764f
xor ecx, 0xa1524e78
lea ecx, [rcx + rdx*2]
mov edx, ecx
xor edx, 0xe567e423
and ecx, 0x1a981bdc
add ecx, ecx
sub ecx, edx
cmp ecx, 0xabec97d0
jb 0x1401ce630
cmp rax, rdi
jne 0x1401cf220
nop word cs:[rax + rax]
mov eax, dword [0x1415a7290]
xor edx, edx
div dword [0x1415a7294]
add eax, 0x1b9e674
xor eax, 0xf78a7ef0
cmp eax, 0x1081d2f6
jb 0x1401ce690
mov rcx, qword [r12 + 0xf8]
nop word [rax + rax]
mov edx, dword [0x1415a7298]
mov r8d, dword [0x1415a729c]
mov eax, edx
not eax
mov r9d, r8d
not r9d
mov r10d, eax
and r10d, 0x140b4304
and edx, 0xa3502c80
or edx, r10d
or eax, r9d
and r9d, 0x140b4304
and r8d, 0xa3502c80
or r8d, r9d
xor r8d, edx
not eax
or eax, r8d
or eax, 0x48a4907b
mov edx, eax
xor edx, 0x893e18a4
and edx, eax
cmp edx, 0xec0b3819
je 0x1401ce6c0
mov eax, 0x9724f919
nop word cs:[rax + rax]
mov edx, dword [0x1415a72a0]
add edx, dword [0x1415a72a4]
imul edx, edx, 0x67f1b060
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0xe72cdd2e
je 0x1401ce730
test rcx, rcx
je 0x1401cf220
mov byte [rbp + 0x18], r15b
nop
mov eax, dword [str.Lm_ZD]
xor edx, edx
div dword [0x1415a72ac]
add eax, 0xace0d701
imul rax, rax, 0x3048efc3
shr rax, 0x3d
mov edx, eax
xor edx, 0xa25ccd1b
add edx, eax
cmp edx, 0xda57ddf3
ja 0x1401ce760
mov byte [rbp + 0x68], sil
mov byte [rbp - 0x20], r11b
mov r15, qword [rcx + 0x10]
mov eax, dword [0x1415a72b0]
mov ecx, dword [0x1415a72b4]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
xor ecx, 0x47c920ed
and ecx, eax
mov eax, ecx
and eax, 0x4c18bc7d
xor ecx, 0xcc18bc7d
lea eax, [rcx + rax*2]
xor eax, 0xcb05457f
cmp eax, 0x5d7bdd08
jae 0x1401ce801
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r15
mov edx, 0x1a
mov r8, qword [rbp + 0x90]
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov r8, qword [rbp + 0x90]
nop dword [rax + rax]
mov eax, dword [0x1415a72b8]
sub eax, dword [0x1415a72bc]
mov ecx, eax
not ecx
or ecx, 0xcbd26153
lea esi, [rax + rcx]
inc esi
mov eax, esi
not eax
and eax, 0x43786ede
mov ecx, esi
and ecx, 0xbc879121
imul ecx, eax
mov eax, esi
and eax, 0x43786ede
or esi, 0x43786ede
imul esi, eax
add esi, ecx
or esi, 0x40e0cfec
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r15
mov edx, 0x1a
mov r9d, 8
call fcn.14020b7b0
mov r8, qword [rbp + 0x90]
add rsp, 0x30
cmp esi, 0x46f97ca4
jb 0x1401ce810
test eax, eax
js 0x1401cf1f0
mov byte [rbp + 0x78], bl
mov rdx, qword [r8]
nop dword [rax + rax]
mov eax, dword [0x1415a72c4]
add eax, dword [0x1415a72c0]
imul eax, eax, 0xddcee202
cmp eax, 0x82622621
je 0x1401ce8a0
test rdx, rdx
mov rsi, qword [rbp - 0x68]
je 0x1401cebb9
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x470
mov rcx, r15
mov r8, rsi
call fcn.14020d950
add rsp, 0x30
mov ecx, eax
mov r8d, 0xb22418cb
mov eax, dword [0x1415a77e8]
xor edx, edx
div dword [0x1415a77ec]
imul rax, r8
shr rax, 0x3f
or eax, 0xbebb7f9e
cmp eax, 0xdc2286a3
ja 0x1401ce8f0
nop word cs:[rax + rax]
mov eax, dword [0x1415a77f0]
mov edx, dword [0x1415a77f4]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
imul rdx, rax, 0x4174083
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
add eax, 0x8de1a511
and eax, 0x8c0851a
cmp eax, 0xde6967cd
ja 0x1401ce920
test ecx, ecx
movabs rdi, 0x8000000000000000
je 0x1401cee85
nop dword [rax + rax]
mov ecx, dword [0x1415a7800]
mov edx, dword [0x1415a7804]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xdebd6707
and ecx, 0x214298f8
or ecx, r9d
or eax, r8d
and r8d, 0xdebd6707
and edx, 0x214298f8
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0xb25d2c3b
or eax, 0x4da2d3c4
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0x261eb125
add eax, ecx
inc eax
or eax, 0xbeabca2c
cmp eax, 0x4c54fc70
jb 0x1401ce990
mov esi, dword [rsi + 0x10]
mov eax, dword [0x1415a7808]
mov ecx, dword [0x1415a780c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0xf1aa13cc
imul rax, rax, 0x3d2c3981
shr rax, 0x3d
or eax, 0xe30fb244
cmp eax, 0x56594c9e
jae 0x1401cea55
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r15
mov rdx, rsi
mov r8, qword [rbp - 0x38]
call fcn.14020d950
add rsp, 0x30
mov rdi, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13, qword [rbp - 0x38]
mov eax, dword [0x1415a7810]
mov ecx, dword [0x1415a7814]
mov edx, eax
or edx, ecx
not edx
not eax
not ecx
and ecx, eax
or ecx, edx
not ecx
mov ebx, ecx
and ebx, 0x56c31fb6
and ecx, 0x2830f84
xor ebx, 0x2a70f85
or ebx, ecx
add ebx, 0xe4899664
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2a4
mov rcx, r15
mov rdx, rsi
mov r8, r13
call rdi
add rsp, 0x30
cmp ebx, 0x82437608
ja 0x1401cea60
mov qword [rbp + 0x90], r15
test eax, eax
je 0x1401cef37
movabs rdi, 0x8000000000000000
mov r13, qword [rbp + 0x70]
mov r8, qword [rbp - 0x38]
movzx r9d, byte [rbp + 0x68]
nop dword [rax + rax]
mov eax, dword [0x1415a7828]
and eax, dword [0x1415a782c]
add eax, 0x2b64f91a
mov ecx, eax
xor ecx, 0xa813de89
xor eax, 0x52ac0014
and eax, 0x7abdcc15
mov edx, ecx
and edx, 0x854233ea
imul edx, eax
mov eax, ecx
and eax, 0x7abdcc15
or ecx, 0x7abdcc15
imul ecx, eax
add ecx, edx
cmp ecx, 0x8a713832
je 0x1401ceaf0
movzx eax, word [r8 + 0x24]
mov qword [rbp + 0x80], rax
mov eax, dword [r8 + 0x28]
mov qword [rbp + 0x60], rax
mov r15d, dword [r8 + 0x44]
movzx r14d, word [r8 + 0x40]
mov eax, dword [r8 + 0x48]
mov qword [rbp + 0x48], rax
cmp byte [rbp + 0x18], 1
jg 0x1401cf037
je 0x1401cf084
jmp 0x1401d3730
mov eax, dword [0x1415a7240]
mov ecx, dword [0x1415a7244]
mov edx, eax
or edx, ecx
not eax
not ecx
and ecx, eax
not ecx
and ecx, edx
xor ecx, 0x57d3b301
add ecx, 0xb3f286ad
or ecx, 0x2ee9754
cmp ecx, 0xc0bf5a15
je 0x1401ceb80
jmp 0x1401cfd0a
mov qword [rbp], rdx
xor eax, eax
nop
test al, al
jne 0x1401cebc0
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, r15
xor edx, edx
mov r8, qword [rbp + 0x20]
mov r9d, 0x30
call fcn.14020b7b0
add rsp, 0x30
movzx esi, byte [rbp + 0x68]
nop dword [rax]
mov ecx, dword [0x1415a72c8]
mov edx, dword [0x1415a72cc]
not ecx
not edx
mov r8d, ecx
or r8d, edx
and edx, ecx
not edx
and edx, r8d
add edx, 0x8e12a951
cmp edx, 0xe2710c9d
ja 0x1401cebf0
test eax, eax
movabs rdi, 0x8000000000000000
js 0x1401cee50
mov rbx, qword [rbp - 0x30]
mov rcx, qword [rbp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x1415a72d8]
xor edx, edx
div dword [0x1415a72dc]
add eax, 0x1cb63bde
and eax, 0x3127d290
cmp eax, 0x1305d7d7
je 0x1401cec40
mov rdx, qword [rcx + 8]
mov rax, qword [rcx + 0x28]
xor ecx, ecx
test rax, rax
setne cl
mov qword [r12], rcx
mov qword [r12 + 8], rax
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x2c8
mov rcx, r15
mov r8, rbx
call fcn.14020d950
add rsp, 0x30
test eax, eax
je 0x1401cf0e4
mov rdx, qword [rbx + 0x20]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 0x410
mov rcx, r15
mov r8, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
nop word [rax + rax]
mov ecx, dword [0x1415a72e4]
add ecx, dword [0x1415a72e0]
mov edx, ecx
not edx
or edx, 0xeade1e95
add ecx, edx
inc ecx
mov edx, ecx
xor edx, 0x6e32d509
xor ecx, 0x26001009
and ecx, 0x378012db
add ecx, ecx
sub edx, ecx
cmp edx, 0xcff52be5
je 0x1401cecd0
test eax, eax
je 0x1401cf189
mov qword [rbp + 0x90], r15
mov rcx, qword [rbp - 0x10]
movzx eax, word [rcx + 0x38]
mov qword [rbp + 0x20], rax
mov rax, qword [rcx + 0x40]
mov qword [rbp - 0x30], rax
mov rbx, qword [rcx + 0x80]
movzx eax, byte [rbp + 0x18]
test al, al
jle 0x1401cf49d
mov rdi, qword [rcx + 0x78]
movzx r14d, word [rcx + 0x70]
cmp al, 2
mov r15, qword [rbp - 0x70]
jl 0x1401cede3
jne 0x1401cf4a3
nop dword [rax + rax]
mov eax, dword [0x1415a7308]
sub eax, dword [0x1415a730c]
add eax, 0xa526e4c
and eax, 0x49f58e8e
add eax, 0xc66546cb
cmp eax, 0xa036585c
jb 0x1401ced60
mov rcx, qword [r12 + 0x40]
nop word [rax + rax]
mov eax, dword [0x1415a7310]
xor edx, edx
div dword [0x1415a7314]
and eax, 0x9d9ca4d6
add eax, 0xb8ed51c3
mov edx, eax
not edx
and edx, 0xfd9801e8
mov r8d, eax
and r8d, 0x265b617
imul r8d, edx
mov edx, eax
and edx, 0xfd9841c8
or eax, 0xfd9841e8
imul eax, edx
add eax, r8d
cmp eax, 0x5dd3c230
je 0x1401ced90
test rcx, rcx
jne 0x1401d0961
lea r13, [r12 + 0x30]
mov eax, dword [0x1415a7318]
imul eax, dword [str.DjD_]
mov ecx, eax
and ecx, 0x224204fb
xor eax, 0x224204fb
lea eax, [rax + rcx*2]
mov ecx, eax
or ecx, 0x51f2e4b8
mov edx, eax
not edx
and edx, 0x800c1b04
mov r8d, ecx
and r8d, 0x6fe3c4cb
imul r8d, edx
and ecx, 0x901c3b34
or eax, 0xd1feffbc
imul eax, ecx
add eax, r8d
cmp eax, 0xd9fe6751
jbe 0x1401cfd0c
jmp 0x1401cfd4c
mov eax, dword [0x1415a72d0]
mov ecx, dword [0x1415a72d4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0x74fa3f25
imul rax, rax, 0x26823bfb
shr rax, 0x3c
add eax, 0x6dbdaa82
cmp eax, 0xc83944e3
jae 0x1401cee50
jmp 0x1401cf1f0
mov eax, dword [0x1415a7818]
and eax, dword [0x1415a781c]
and eax, 0x4881200c
add eax, 0xf529c560
cmp eax, 0x45a8e7a7
jae 0x1401ceeb0
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop
mov eax, dword [0x1415a7820]
mov esi, dword [0x1415a7824]
mov ecx, eax
xor ecx, esi
not esi
and esi, eax
add esi, esi
sub esi, ecx
or esi, 0x20451609
xor esi, 0xcb56c8d7
add esi, 0x3c9b61c5
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
cmp esi, 0xef7c7cec
jae 0x1401ceeb0
jmp 0x1401cf000
je 0x1401cf220
mov eax, dword [0x1415a7270]
mov ecx, dword [0x1415a7274]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0xaff88c42
mov ecx, eax
xor ecx, 0x67621240
and ecx, eax
shr ecx, 4
imul rax, rcx, 0x143216a9
shr rax, 0x37
cmp eax, 0xe2489b75
ja 0x1401ceefa
jmp 0x1401cfd0a
mov eax, dword [str.0_jf]
or eax, dword [0x1415a7ce4]
or eax, 0x9f54c440
mov ecx, 0xa9c1b601
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x4b8a6ffa
movabs rdi, 0x8000000000000000
mov r13, qword [rbp + 0x70]
jbe 0x1401cef80
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415a7ce8]
mov ecx, dword [0x1415a7cec]
lea esi, [rcx + rax]
add esi, 0x679759cb
mov eax, esi
xor eax, 0x386c6c14
or esi, 0xc79393eb
and esi, eax
mov eax, esi
and eax, 0xe9e33e8a
or esi, 0xe9e33e8a
add esi, eax
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
cmp esi, 0x8ec75f1e
je 0x1401cef80
nop dword [rax + rax]
mov eax, dword [0x1415a7cf0]
xor edx, edx
div dword [0x1415a7cf4]
xor eax, 0x44e4799c
mov ecx, eax
and ecx, 0x2bfa5428
or eax, 0x2bfa5428
add eax, ecx
or eax, 0xdc6840db
cmp eax, 0x23d40468
jb 0x1401cefd0
nop
mov eax, dword [0x1415a7cf8]
imul eax, dword [0x1415a7cfc]
xor eax, 0x916f0f56
imul rax, rax, 0x6729c279
shr rax, 0x3c
not eax
mov ecx, eax
or ecx, 0xfffffffc
or eax, 0x9481b18c
and eax, ecx
cmp eax, 0x667d84a8
je 0x1401cf000
jmp 0x1401cf1f0
mov rax, qword [r12 + 0x40]
nop dword [rax]
mov ecx, dword [0x1415a7830]
mov edx, dword [0x1415a7834]
mov r8d, edx
and r8d, ecx
add ecx, edx
sub ecx, r8d
or ecx, 0x229eb116
mov edx, ecx
xor edx, 0x4410868
and edx, ecx
and edx, 0x54650a69
or edx, 0xab8af496
cmp edx, 0x3e5b60f0
jb 0x1401cf040
test rax, rax
jne 0x1401d3730
lea rbx, [r12 + 0x30]
mov eax, dword [0x1415a7838]
xor edx, edx
div dword [0x1415a783c]
mov ecx, eax
not ecx
and ecx, 0x8f29e57d
mov edx, eax
and edx, 0x70d61a82
imul edx, ecx
mov ecx, eax
and ecx, 0x8f29e57d
or eax, 0x8f29e57d
imul eax, ecx
add eax, edx
imul rax, rax, 0x2ec83823
shr rax, 0x3d
mov ecx, eax
xor ecx, 0x4e5cdd01
lea eax, [rcx + rax*2]
cmp eax, 0x6a85aede
jne 0x1401d2b3d
jmp 0x1401d2b71
mov eax, dword [0x1415a72e8]
mov ecx, dword [0x1415a72ec]
add eax, ecx
add eax, 0x42badfa6
mov ecx, eax
xor ecx, 0x340d6463
or eax, 0xcbf29b9c
and eax, ecx
cmp eax, 0x2472ab6d
jae 0x1401cf120
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415a72f0]
xor eax, dword [0x1415a72f4]
mov ecx, eax
not ecx
or ecx, 0xd925046a
add eax, ecx
inc eax
imul rax, rax, 0x1d758df9
shr rax, 0x3c
imul esi, eax, 0x77a21850
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0x843a5e43
ja 0x1401cf120
mov eax, dword [0x1415a72f8]
xor edx, edx
div dword [0x1415a72fc]
mov ecx, eax
not ecx
or ecx, 0x855f046f
add ecx, eax
imul eax, ecx, 0x3986741c
cmp eax, 0xa08755dc
je 0x1401cf160
jmp 0x1401cf196
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1401cf1a0
nop word cs:[rax + rax]
mov eax, dword [0x1415a77f8]
add eax, dword [0x1415a77fc]
mov ecx, eax
xor ecx, 0x924b69f3
xor eax, 0x5b41604
and ecx, 0xe80aa10a
and eax, 0x17f55ef5
sub eax, ecx
add eax, 0x5d6eac8f
cmp eax, 0x62553f2b
jb 0x1401cf1b0
nop word cs:[rax + rax]
mov eax, dword [0x1415a7d00]
mov ecx, dword [0x1415a7d04]
add eax, ecx
add eax, 0xb86e77b
xor eax, 0x3943aa33
imul eax, eax, 0x1c6aa2fc
cmp eax, 0x7a161311
jb 0x1401cf1f0
nop word cs:[rax + rax]
mov eax, dword [0x1415a7d08]
xor edx, edx
div dword [0x1415a7d0c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x67a26082
and ecx, 0x985d9f7d
imul ecx, edx
mov edx, eax
and edx, 0x985d9f7d
or eax, 0x985d9f7d
imul eax, edx
add eax, ecx
imul rax, rax, 0x376ae1f7
shr rax, 0x3d
or eax, 0x417240ea
cmp eax, 0x2b7570fc
je 0x1401cf220
mov rax, qword [rbp + 0x28]
movzx eax, byte [rax + 8]
lea rbx, [r12 + 0x60]
nop dword [rax]
mov ecx, dword [0x1415a7d10]
or ecx, dword [0x1415a7d14]
mov edx, ecx
not edx
or edx, 0x22c60e0b
add ecx, edx
inc ecx
or ecx, 0x33c82b3f
add ecx, 0xbae8e204
cmp ecx, 0x616eb77e
jb 0x1401cf280
xor ecx, ecx
test cl, cl
jne 0x1401cf2b0
test al, al
jle 0x1401d5a30
cmp al, 2
jl 0x1401cf340
jne 0x1401cf4d1
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401cf2d0
mov rax, qword [rbx]
nop word [rax + rax]
mov ecx, dword [0x1415a7d18]
xor ecx, dword [0x1415a7d1c]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xda1ee20
and edx, 0xf25e11df
imul edx, r8d
mov r8d, ecx
and r8d, 0xf25e11df
or ecx, 0xf25e11df
imul ecx, r8d
add ecx, edx
imul rcx, rcx, 0x1ae8a669
shr rcx, 0x3c
not ecx
and ecx, 0xaa4ed48d
neg ecx
cmp ecx, 0x5265d999
jb 0x1401cf2e0
cmp rax, rdi
jne 0x1401d5a30
mov eax, dword [0x1415a7d40]
mov ecx, dword [0x1415a7d44]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0x71919478
add eax, 0x8ae343cd
and eax, 0x5145b704
cmp eax, 0xbe7dea2a
ja 0x1401cf340
mov rcx, qword [r12 + 0xf8]
nop word [rax + rax]
mov eax, dword [0x1415a7d48]
or eax, dword [0x1415a7d4c]
imul eax, eax, 0x2f84f069
or eax, 0x80009054
and eax, 0x8954f05e
cmp eax, 0x5381344b
jb 0x1401cf390
mov eax, 0xe4c45e0b
nop dword [rax + rax]
mov edx, dword [0x1415a7d50]
or edx, dword [0x1415a7d54]
mov r8d, edx
not r8d
mov r9d, edx
and r9d, 0x5d60bc36
and r8d, 0xa29f43c9
imul r8d, r9d
mov r9d, edx
and r9d, 0xa29f43c9
or edx, 0xa29f43c9
imul edx, r9d
add edx, r8d
imul rdx, rax
shr rdx, 0x3f
xor edx, 0xb9287c9d
neg edx
cmp edx, 0xa530eff4
ja 0x1401cf3c0
test rcx, rcx
je 0x1401cf491
nop dword [rax + rax]
mov eax, dword [0x1415a7d70]
xor edx, edx
div dword [0x1415a7d74]
mov edx, eax
xor edx, 0x88f45477
add edx, eax
and eax, 0x770bab88
sub edx, eax
mov eax, edx
not eax
or eax, 0x5c7e7ba7
add eax, edx
inc eax
xor eax, 0xfb59ea18
cmp eax, 0x894e2bd3
je 0x1401cf420
mov rsi, qword [rcx + 0x10]
mov eax, dword [0x1415a7d78]
mov ecx, dword [0x1415a7d7c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
and ecx, 0xbc3fec80
add ecx, 0xd6fc4743
cmp ecx, 0xf7642d4e
jbe 0x1401d5b62
jmp 0x1401d5bea
mov rax, qword [rbp - 0x18]
mov qword [rax], rdi
jmp 0x1401d5db0
je 0x1401d0961
mov eax, dword [0x1415a7300]
imul eax, dword [0x1415a7304]
add eax, 0xfd92d944
imul rax, rax, 0x1be5d147
shr rax, 0x3b
or eax, 0xf4761b50
cmp eax, 0x91bff898
je 0x1401cf4a3
jmp 0x1401cfd0a
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401cf4e0
jmp 0x1401cfd0a
mov r14d, dword [0x1415a7140]
xor r14d, dword [0x1415a7144]
add r14d, 0x28a15c93
mov eax, r14d
not eax
and eax, 0x2869b31
mov ecx, r14d
and ecx, 0x7d7964ce
imul ecx, eax
mov eax, r14d
and eax, 0x2869b31
or r14d, 0x2869b31
imul r14d, eax
add r14d, ecx
and r14d, 0x6287bb29
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
cmp r14d, 0x567f3eba
jbe 0x1401cf571
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
jmp 0x1401cf4e9
mov r13, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415a7148]
add eax, dword [0x1415a714c]
and eax, 0xe6d15f64
imul eax, eax, 0xb76368b7
cmp eax, 0xa819552a
je 0x1401cf580
test r13, r13
mov r14, qword [rbp + 0x40]
mov rbx, qword [rbp + 0x78]
je 0x1401ce0a5
mov eax, dword [0x1415a7150]
xor eax, dword [0x1415a7154]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3d80bc72
and ecx, 0xc27f438d
imul ecx, edx
mov edx, eax
and edx, 0xc27f438d
or eax, 0xc27f438d
imul eax, edx
add eax, ecx
mov ecx, eax
or ecx, 0x6e60f00b
xor ecx, 0xea5a1dee
or eax, 0x15a5e211
and eax, ecx
cmp eax, 0xccf7b125
ja 0x1401cf668
mov eax, dword [0x1415a7158]
imul eax, dword [0x1415a715c]
not eax
or eax, 0x40202280
mov esi, eax
not esi
mov ecx, esi
or ecx, 0xb9100172
mov edx, ecx
and edx, 0x3a43903c
and eax, 0x448c4c81
imul eax, edx
and ecx, 0x859c4d43
or esi, 0xfd9c4df3
imul esi, ecx
add esi, eax
mov r9d, dword [rbx]
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rdi
mov edx, 1
mov r8, r13
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
cmp esi, 0x7f43ef10
jae 0x1401cf690
mov r9d, dword [rbx]
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, rdi
mov edx, 1
mov r8, r13
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
jmp 0x1401cf5fe
mov ecx, dword [0x1415a7160]
mov edx, dword [0x1415a7164]
mov r8d, ecx
and r8d, edx
not r8d
not ecx
not edx
or edx, ecx
and edx, r8d
not edx
imul ecx, edx, 0x9e37ce57
mov edx, ecx
and edx, 0x9fa9da3
xor ecx, 0x9fa9da3
lea ecx, [rcx + rdx*2]
cmp ecx, 0xd0a505ad
je 0x1401cf690
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1401cf6e0
test eax, eax
je 0x1401cf844
mov eax, dword [0x1415a7170]
xor edx, edx
div dword [0x1415a7174]
nop word [rax + rax]
mov eax, dword [0x1415a717c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415a7178]
xor ecx, eax
and ecx, 0xf0a0c727
mov eax, ecx
not eax
mov edx, ecx
or edx, 0x8fd08a0b
mov r8d, edx
and r8d, 0x6aa00027
and eax, 0x100455d0
imul eax, r8d
and edx, 0x9550cf08
or ecx, 0x9fd4dfdb
imul ecx, edx
add ecx, eax
cmp ecx, 0xf2a0e41d
ja 0x1401cf700
mov rdx, qword [r13]
sub rsp, 0x20
mov rsi, qword [rbp]
mov rcx, rsi
call fcn.14020d900
add rsp, 0x20
mov rsi, qword [rsi]
nop dword [rax]
mov eax, dword [0x1415a7180]
mov ecx, dword [0x1415a7184]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
and eax, 0x316f5d10
mov ecx, eax
xor ecx, 0xa7f96340
or eax, 0x10061c10
and eax, ecx
add eax, 0x8d94b903
cmp eax, 0xc3f93f4b
ja 0x1401cf770
movabs rax, 0x8000000000000000
cmp rsi, rax
jne 0x1401cf7f0
mov eax, dword [0x1415a71e0]
xor edx, edx
div dword [str._ymUay]
imul rax, rax, 0x1535a1f3
shr rax, 0x3b
add eax, 0xcf79e78f
cmp eax, 0xb4fefec7
jae 0x1401cfb7f
jmp 0x1401cfbe4
mov eax, dword [0x1415a7198]
mov ecx, dword [0x1415a719c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
and eax, 0x19c17fe
add eax, 0xcfefff3f
and eax, 0x29091d9
cmp eax, 0x775fd6f
ja 0x1401cf7f0
mov rax, qword [rbp]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov rax, qword [r12 + 0x80]
test rax, rax
js 0x1401cf8cb
jne 0x1401cf8de
jmp 0x1401cf97e
sub rsp, 0x20
call fcn.14020b260
mov rcx, r13
call fcn.1401d6050
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415a7168]
or eax, dword [0x1415a716c]
add eax, 0x2f3c9148
mov ecx, eax
not ecx
and ecx, 0x82df26a6
mov edx, eax
and edx, 0x7d20d959
imul edx, ecx
mov ecx, eax
and ecx, 0x82df26a6
or eax, 0x82df26a6
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa878af24
and ecx, 0x578750db
imul ecx, edx
mov edx, eax
and edx, 0x578750da
or eax, 0x578750db
imul eax, edx
add eax, ecx
cmp eax, 0xe42327be
jae 0x1401cf860
jmp 0x1401ce0a5
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1401cf97e
mov eax, 0xddd689ff
mov ecx, dword [0x1415a71a0]
or ecx, dword [0x1415a71a4]
mov edx, ecx
not edx
and edx, 0x7aae8b4a
mov r8d, ecx
and r8d, 0x855174b5
imul r8d, edx
mov edx, ecx
and edx, 0x7aae8b4a
or ecx, 0x7aae8b4a
imul ecx, edx
add ecx, r8d
mov edx, ecx
not edx
and edx, 0x2c5caf4
and ecx, 0xfd3a350a
sub ecx, edx
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xf827f47b
ja 0x1401cf8e3
mov r8, qword [r12 + 0x88]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415a71a8]
sub eax, dword [0x1415a71ac]
and eax, 0xa05849
xor eax, 0x805841
or eax, 0x211aa3a2
cmp eax, 0x38260875
ja 0x1401cf95c
mov eax, dword [0x1415a71b0]
mov ecx, dword [0x1415a71b4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul eax, eax, 0x21d395d4
xor eax, 0x22124852
shr eax, 1
imul rax, rax, 0x2aa130df
shr rax, 0x39
cmp eax, 0x35db09c
jbe 0x1401cf9d0
mov qword [r12 + 0x80], rsi
mov qword [r12 + 0x88], r14
nop word cs:[rax + rax]
mov eax, dword [0x1415a71b8]
xor eax, dword [0x1415a71bc]
mov ecx, eax
not ecx
and ecx, 0xd8c5d0f5
and eax, 0x273a2f0a
sub eax, ecx
add eax, 0xd7bfa6d7
mov qword [r12 + 0x80], rsi
mov qword [r12 + 0x88], r14
cmp eax, 0x9cb0e930
jb 0x1401cf9d0
mov qword [r12 + 0x90], rbx
sub rsp, 0x20
mov rcx, r13
call fcn.14020d920
add rsp, 0x20
mov eax, dword [0x1415a71c0]
mov ecx, dword [0x1415a71c4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0x2a6c25d7
add eax, 0xbd954731
and eax, 0x23d006bb
cmp eax, 0xa893c10b
jbe 0x1401cfa73
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov r13, r15
mov r14, qword [rbp + 0x40]
nop word [rax + rax]
mov eax, dword [0x1415a71c8]
xor eax, dword [0x1415a71cc]
mov ecx, eax
and ecx, 0xd8f7e12
and eax, 0x4891a10
xor ecx, 0xb4899ab5
lea esi, [rcx + rax*2]
mov eax, esi
not eax
mov ecx, esi
and ecx, 0xa8888eb4
and eax, 0x5777714a
imul eax, ecx
mov ecx, esi
and ecx, 0x57377043
or esi, 0x5777714b
imul esi, ecx
add esi, eax
sub rsp, 0x20
mov rcx, rdi
call fcn.14020b150
add rsp, 0x20
cmp esi, 0x18042e5b
je 0x1401cfa80
test eax, eax
mov r15, qword [rbp + 0x28]
jne 0x1401cfb4c
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov eax, dword [0x1415a71d0]
mov ecx, dword [0x1415a71d4]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add eax, ecx
add eax, 0xb16b70fc
mov ecx, eax
xor ecx, 0x4016bee1
xor eax, 0x1448010c
and eax, 0x544e0b4d
mov edx, ecx
and edx, 0xabb1f4b2
imul edx, eax
mov eax, ecx
and eax, 0x544e0b4d
or ecx, 0x544e0b4d
imul ecx, eax
add ecx, edx
cmp ecx, 0x18eda16
je 0x1401cfaf6
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1415a71d8]
xor edx, edx
div dword [0x1415a71dc]
add eax, 0x9c18d6f6
cmp eax, 0x69f85486
jbe 0x1401cfb60
jmp 0x1401ce240
mov eax, dword [0x1415a71e8]
mov ecx, dword [0x1415a71ec]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x2142a852
xor eax, 0x9ebc1601
or ecx, 0xc49943ac
and ecx, eax
mov esi, 0xfc1ade2b
imul rsi, rcx
shr rsi, 0x3d
sub rsp, 0x20
mov rcx, r13
call fcn.14020d920
add rsp, 0x20
cmp esi, 0xd1475fcc
jne 0x1401cfbf6
sub rsp, 0x20
mov rcx, r13
call fcn.14020d920
add rsp, 0x20
jmp 0x1401cfb7f
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
test eax, eax
mov r13, r15
mov r15, qword [rbp + 0x28]
movabs rdi, 0x8000000000000000
jne 0x1401cfcc0
mov eax, dword [0x1415a71f0]
xor edx, edx
div dword [0x1415a71f4]
add eax, 0x28162205
or eax, 0x377bb6bf
and eax, 0xfffff6ff
cmp eax, 0xb409b4e3
je 0x1401cfc7f
mov eax, dword [0x1415a71f8]
mov esi, dword [0x1415a71fc]
mov ecx, eax
xor ecx, esi
not ecx
and ecx, esi
add ecx, ecx
sub esi, ecx
add esi, eax
or esi, 0x1c1b460
and esi, 0x41c9b579
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
cmp esi, 0x5ad78a9b
jbe 0x1401cfc8e
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
jmp 0x1401cfc44
mov eax, dword [0x1415a7200]
imul eax, dword [str.__faI]
mov ecx, eax
and ecx, 0x7bce52f
xor eax, 0x87bce52f
lea eax, [rax + rcx*2]
and eax, 0xc04b9709
add eax, 0x423d6c13
cmp eax, 0xec297618
ja 0x1401cfc8e
nop dword [rax]
mov eax, dword [0x1415a7208]
sub eax, dword [0x1415a720c]
and eax, 0xc44195d1
imul eax, eax, 0x644b40e6
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x128bf5c2
and ecx, 0xed740a3c
imul ecx, edx
mov edx, eax
and edx, 0xed740a3c
or eax, 0xed740a3c
imul eax, edx
add eax, ecx
cmp eax, 0xeaad1f84
ja 0x1401cfcc0
jmp 0x1401ce240
ud2
mov eax, dword [0x1415a7320]
sub eax, dword [0x1415a7324]
shr eax, 2
imul rax, rax, 0x2749993b
shr rax, 0x3b
mov ecx, eax
not ecx
and ecx, 0xbb1bb38d
xor ecx, 0xd7f64d30
or ecx, eax
add ecx, 0x73307df9
mov eax, dword [0x1415acbc0]
cmp ecx, 0xb3962317
jae 0x1401cfd60
mov eax, dword [0x1415acbc0]
jmp 0x1401cfd0c
mov ecx, dword [0x1415a7328]
or ecx, dword [0x1415a732c]
add ecx, 0xafb76f69
not ecx
and ecx, 0x7cf60163
cmp ecx, 0x24986257
jb 0x1401cfd60
nop word cs:[rax + rax]
mov ecx, dword [0x1415a7330]
and ecx, dword [0x1415a7334]
xor ecx, 0x20010a
or ecx, 0x44408044
and ecx, 0x5c70e17f
cmp ecx, 0x6ae8f3a4
ja 0x1401cfd90
cmp eax, 4
je 0x1401cfe00
mov eax, dword [0x1415a7338]
and eax, dword [0x1415a733c]
imul eax, eax, 0x77d83ec6
add eax, 0xb66d6b5c
or eax, 0x9923822f
cmp eax, 0xb0be1fe
jae 0x1401cfdeb
sub rsp, 0x20
call fcn.14020da60
add rsp, 0x20
xor esi, esi
sub rsp, 0x20
call fcn.1402445a0
add rsp, 0x20
test sil, sil
jne 0x1401cfded
nop
mov eax, dword [0x1415a7340]
xor edx, edx
div dword [0x1415a7344]
add eax, 0x4053b098
or eax, 0xd11496f0
mov ecx, eax
xor ecx, 0x8fef1ba4
and eax, 0x7010e45b
add eax, eax
sub eax, ecx
cmp eax, 0x99fdb89f
ja 0x1401cfe00
movzx eax, byte [0x1415acbc4]
mov ecx, 0x9fc5be65
nop dword [rax]
mov edx, dword [0x1415a7348]
or edx, dword [0x1415a734c]
mov r8d, edx
and r8d, 0x3279ea0f
add r8d, r8d
mov r9d, edx
sub r9d, r8d
neg r8d
add edx, r8d
add edx, 0xb279ea0f
not edx
or edx, 0x93dcda9e
add edx, r9d
add edx, 0xb279ea10
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0x7e5e541e
ja 0x1401cfe40
nop dword [rax]
mov ecx, dword [0x1415a7350]
or ecx, dword [0x1415a7354]
mov edx, ecx
and edx, 0x1c0eb704
add edx, edx
neg edx
add ecx, edx
add ecx, 0x9c0eb704
mov edx, ecx
or edx, 0xec697aca
not ecx
and ecx, 0x828411
mov r8d, edx
and r8d, 0x1b346126
or r8d, ecx
xor r8d, 0x16c6885d
and edx, 0xf20d1684
or edx, r8d
cmp edx, 0xab13a5c
jb 0x1401cfe90
test al, al
mov qword [rbp + 8], rbx
je 0x1401d0109
sub rsp, 0x20
mov r15, qword [rbp + 0x38]
mov rcx, r15
mov rdx, qword [rbp + 0x90]
call fcn.14020d980
add rsp, 0x20
mov rdi, qword [r12 + 0x38]
mov rsi, qword [r12 + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7430]
mov ecx, dword [0x1415a7434]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
xor ecx, 0xb4bbf136
and eax, 0x4b440ec9
add eax, eax
sub eax, ecx
xor eax, 0x8e5638bd
cmp eax, 0x6cfd15f7
jb 0x1401cff20
test rsi, rsi
je 0x1401cfff5
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1401cff8e
mov eax, ebx
and eax, 1
or rbx, 1
add rbx, rax
cmp rbx, rsi
je 0x1401cfff5
mov eax, dword [0x1415a7438]
mov ecx, dword [0x1415a743c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
add ecx, 0xc7802cf7
mov eax, ecx
xor eax, 0xed17f728
and ecx, 0x12e808d7
add ecx, ecx
sub ecx, eax
imul eax, ecx, 0x6c8974a6
cmp eax, 0xcaa768f5
jb 0x1401cff8e
mov rax, rbx
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1401cff7d
add rax, rdi
mov r8, qword [rax + 8]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
jmp 0x1401cff7d
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1401d0000
mov rax, qword [r13]
movzx esi, byte [rbp + 0x68]
mov rbx, qword [rbp + 8]
mov ecx, dword [0x1415a7440]
mov edx, dword [0x1415a7444]
mov r8d, ecx
xor r8d, edx
not edx
and edx, ecx
add edx, edx
sub edx, r8d
mov ecx, edx
not ecx
or ecx, 0x60b14241
and ecx, 0x6cf54665
and edx, 0x9000b890
sub edx, ecx
add edx, 0xa54faf28
cmp edx, 0xe7f3878b
ja 0x1401d0010
test rax, rax
je 0x1401d00ad
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call fcn.14020ae70
add rsp, 0x20
mov eax, 0xa1c7f7bd
mov ecx, dword [0x1415a7448]
mov edx, dword [0x1415a744c]
mov r8d, ecx
and r8d, edx
xor ecx, edx
lea ecx, [rcx + r8*2]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x7a033cce
imul rcx, rcx, 0x58be30b1
shr rcx, 0x3c
cmp ecx, 0x7eb35f3b
je 0x1401d0074
mov eax, dword [0x1415a7450]
mov ecx, eax
not ecx
or ecx, dword [0x1415a7454]
add eax, ecx
inc eax
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfed198aa
and ecx, 0x12e6755
imul ecx, edx
mov edx, eax
and edx, 0x12e6755
or eax, 0x12e6755
imul eax, edx
add eax, ecx
xor eax, 0xe8053e52
mov ecx, eax
and ecx, 0x29d20649
add ecx, ecx
sub eax, ecx
cmp eax, 0x5d2c3dc0
jne 0x1401d08cf
jmp 0x1401d0917
mov eax, dword [0x1415a7358]
sub eax, dword [0x1415a735c]
imul eax, eax, 0xb33722c0
or eax, 0x37a3da42
mov ecx, eax
and ecx, 0x77044d82
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x77044d97
cmp eax, 0x14f8245e
jae 0x1401d0157
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp + 0x90]
mov r8, rdi
mov r9, r14
call fcn.1401d72e0
add rsp, 0x20
mov rbx, qword [rbp + 0x90]
mov eax, dword [0x1415a7360]
mov ecx, dword [0x1415a7364]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and ecx, 0x4997502a
mov edx, eax
and edx, 0xb668afd5
or edx, ecx
xor edx, 0xe1921126
and eax, 0xa805410c
or eax, edx
imul rax, rax, 0x4b6139c1
shr rax, 0x3e
imul esi, eax, 0x41f00b80
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
mov r8, rdi
mov r9, r14
call fcn.1401d72e0
add rsp, 0x20
cmp esi, 0x9f9fa1e
ja 0x1401d015e
mov eax, dword [0x1415a7368]
add eax, dword [0x1415a736c]
mov ecx, eax
xor ecx, 0xc2c99ac8
add ecx, eax
and eax, 0x3d366537
sub ecx, eax
mov eax, ecx
or eax, 0x399b262c
mov edx, ecx
not edx
and edx, 0x60050d0
mov r8d, eax
and r8d, 0xd9ed890f
imul r8d, edx
and eax, 0x261276f0
or ecx, 0x3f9b76fc
imul ecx, eax
add ecx, r8d
cmp ecx, 0x40510878
jb 0x1401d01c3
mov rsi, qword [r15]
mov ecx, 0xb1ae67e5
movabs r8, 0x8000000000000000
mov eax, dword [0x1415a7370]
xor edx, edx
div dword [0x1415a7374]
imul rax, rcx
shr rax, 0x3b
add eax, 0x321f27b8
shr eax, 1
imul rax, rax, 0x4903997d
shr rax, 0x3c
cmp eax, 0xfcc667d8
ja 0x1401d022a
cmp rsi, r8
jne 0x1401d02a7
mov eax, dword [str._xeY]
sub eax, dword [0x1415a739c]
imul eax, eax, 0x3b28e7c0
mov ecx, eax
xor ecx, 0xf15fd2ac
and eax, 0xf15fd280
or eax, ecx
imul rcx, rax, 0x826dc95
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x8a9e802d
mov r8, qword [rbp + 0x60]
jbe 0x1401d0395
jmp 0x1401d0406
mov rdi, qword [r15 + 8]
sub rsp, 0x20
mov rcx, qword [rbp + 0x60]
mov rdx, rdi
call fcn.1401d78f0
add rsp, 0x20
mov eax, dword [0x1415a7378]
mov ecx, dword [0x1415a737c]
add eax, ecx
add eax, 0x956e239d
and eax, 0x59f76a9a
cmp eax, 0xe5184574
ja 0x1401d02bf
test rsi, rsi
je 0x1401d0498
mov eax, dword [0x1415a7384]
add eax, dword [0x1415a7380]
imul eax, eax, 0xc47c428c
add eax, 0x6d0db0aa
mov ecx, eax
and ecx, 0xfffffffc
xor ecx, 0x3a444d4f
and eax, 0x3a444d4c
or eax, ecx
cmp eax, 0x5d77578b
jb 0x1401d0345
mov eax, dword [0x1415a7388]
imul eax, dword [0x1415a738c]
add eax, 0xeb411bbd
mov edx, 0xaacdac9f
imul rdx, rax
shr rdx, 0x3c
mov rcx, qword [0x1415acb98]
cmp edx, 0xb082d11a
jne 0x1401d034e
mov rax, qword [0x1415acb98]
jmp 0x1401d0317
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xd419fe15
mov ecx, dword [0x1415a7390]
or ecx, dword [0x1415a7394]
or ecx, 0x54367d91
imul rcx, rax
shr rcx, 0x3d
not ecx
and ecx, 0xec446d3f
cmp ecx, 0xb96fa287
je 0x1401d0366
jmp 0x1401d0498
mov eax, dword [0x1415a73a0]
xor eax, dword [0x1415a73a4]
mov ecx, eax
not ecx
and ecx, 0x7766ce67
mov edx, eax
and edx, 0x8993198
imul edx, ecx
mov ecx, eax
and ecx, 0x7766ce67
or eax, 0x7766ce67
imul eax, ecx
add eax, edx
mov ecx, eax
or ecx, 0x8e1e19e2
not eax
and eax, 0xc02001
mov edx, ecx
and edx, 0xf129c63c
or edx, eax
xor edx, 0x7064c698
and ecx, 0x7eb2ff5b
or ecx, edx
mov qword [r8], 0
mov qword [r8 + 8], 8
cmp ecx, 0xbad124e8
jne 0x1401d041a
mov qword [r8], 0
mov qword [r8 + 8], 8
jmp 0x1401d0395
mov eax, dword [0x1415a73a8]
mov ecx, dword [0x1415a73ac]
add eax, ecx
add eax, 0x36054cdd
mov ecx, eax
not ecx
or ecx, 0xb0bb5cd4
or eax, 0x4f44a32b
and eax, ecx
cmp eax, 0x9797140e
ja 0x1401d046c
mov eax, dword [0x1415a73b0]
xor edx, edx
div dword [0x1415a73b4]
add eax, 0xc4f966d6
xor eax, 0x8e16687b
mov qword [r8 + 0x10], 0
cmp eax, 0x35bead2
jae 0x1401d0476
mov qword [r8 + 0x10], 0
jmp 0x1401d0445
mov eax, dword [0x1415a73b8]
sub eax, dword [0x1415a73bc]
add eax, 0xcf6d8e58
and eax, 0x251e1b5b
add eax, 0x2418665a
cmp eax, 0x62672f53
ja 0x1401d0476
xor eax, eax
test al, al
jne 0x1401d049a
mov rdi, qword [r12 + 0x38]
mov r15, qword [r12 + 0x40]
mov eax, dword [0x1415a73c0]
add eax, dword [0x1415a73c4]
mov ecx, eax
and ecx, 0x2de5f0f6
and eax, 0x9c010d6
mov edx, ecx
xor edx, 0xf62fef29
add edx, ecx
sub edx, eax
mov eax, edx
xor eax, 0xa49401f2
or edx, 0x5b6bfe0d
and edx, eax
cmp edx, 0xd876829d
ja 0x1401d04a8
test r15, r15
je 0x1401d0690
xor ebx, ebx
xor esi, esi
nop word cs:[rax + rax]
mov eax, dword [0x1415a73c8]
xor eax, dword [0x1415a73cc]
and eax, 0xd7af8143
imul eax, eax, 0x4aa94181
add eax, 0x7dbd439
cmp eax, 0x3eb2055d
ja 0x1401d0500
mov rcx, rsi
shl rcx, 5
cmp qword [rdi + rcx], 0
je 0x1401d0639
add rcx, rdi
mov eax, dword [0x1415a73d0]
xor edx, edx
div dword [0x1415a73d4]
nop word cs:[rax + rax]
mov eax, dword [0x1415a73d8]
imul eax, dword [0x1415a73dc]
mov edx, eax
and edx, 0x49b0b065
xor eax, 0xc9b0b065
lea eax, [rax + rdx*2]
imul eax, eax, 0x86aad755
add eax, 0xcb712d9c
cmp eax, 0xf7c06e91
ja 0x1401d0550
mov r14, qword [rcx + 8]
mov eax, dword [0x1415a73e0]
xor edx, edx
div dword [0x1415a73e4]
mov ecx, eax
and ecx, 0x745e85f4
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x745e85f4
xor eax, 0xdbb1d710
add eax, 0xb947f14b
cmp eax, 0x35adc4e4
jb 0x1401d0684
mov r12, qword [0x1415acb98]
test bl, bl
jne 0x1401d0684
mov eax, dword [0x1415a73e8]
xor eax, dword [0x1415a73ec]
mov ecx, eax
not ecx
or ecx, 0x3334332b
xor ecx, 0x48ba9009
and eax, 0x488a8000
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0x9bbbc084
and ecx, eax
cmp ecx, 0x568c4482
jne 0x1401d0620
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r14
call fcn.14020ae70
add rsp, 0x20
test bl, bl
jne 0x1401d0620
inc rsi
nop dword [rax]
mov eax, dword [0x1415a73f0]
mov ecx, dword [0x1415a73f4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul rax, rax, 0x24a3bee9
shr rax, 0x3b
or eax, 0x334c925d
xor eax, 0x857d2e47
cmp eax, 0xdb48c0c5
ja 0x1401d0640
cmp rsi, r15
mov r12, qword [rbp + 0x88]
jne 0x1401d0500
jmp 0x1401d0690
mov rax, qword [0x1415acb98]
jmp 0x1401d05b9
mov rax, qword [r13]
mov ecx, dword [0x1415a73f8]
and ecx, dword [0x1415a73fc]
mov edx, ecx
xor edx, 0x1017adac
add edx, ecx
and ecx, 0xefe85253
sub edx, ecx
mov ecx, edx
not ecx
and ecx, 0x2d4d6633
and edx, 0xd2b299cc
sub edx, ecx
cmp edx, 0xdf6d15d9
je 0x1401d0694
test rax, rax
movzx esi, byte [rbp + 0x68]
mov rbx, qword [rbp + 8]
je 0x1401d0832
mov eax, dword [0x1415a7400]
mov ecx, dword [0x1415a7404]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0xbc06a9b5
xor eax, 0x41204242
or ecx, 0x71266af6
or eax, 0x8ed99509
and eax, ecx
imul eax, eax, 0xd20400ff
cmp eax, 0x37d5c971
jbe 0x1401d0723
mov rax, qword [0x1415acb98]
mov eax, dword [0x1415a7408]
imul eax, dword [0x1415a740c]
and eax, 0x20e8a008
add eax, 0x37e81381
mov r14, qword [0x1415acb98]
cmp eax, 0xd8946ed2
ja 0x1401d0723
mov eax, dword [0x1415a7410]
xor edx, edx
div dword [0x1415a7414]
mov ecx, eax
not ecx
or eax, 0x8670e18a
or ecx, 0x798f1e75
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xd1d6a437
and ecx, 0x2e295bc8
imul ecx, edx
mov edx, eax
and edx, 0x2e295bc8
or eax, 0x2e295bc8
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xb280eda0
and ecx, 0x4d7f125d
imul ecx, edx
mov edx, eax
and edx, 0x4d7f1258
or eax, 0x4d7f125d
imul eax, edx
add eax, ecx
cmp eax, 0xeabebfa
ja 0x1401d0810
mov eax, dword [0x1415a741c]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x1415a7418]
xor ecx, eax
mov eax, ecx
and eax, 0x3ea53847
add eax, eax
neg eax
add eax, ecx
add eax, 0xbea53847
mov esi, eax
xor esi, 0xdc41224
and esi, eax
or esi, 0x903aa1d3
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xb058c182
jae 0x1401d0828
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401d07bc
xor eax, eax
movzx esi, byte [rbp + 0x68]
test al, al
jne 0x1401d082e
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [r13], xmm0
mov eax, dword [0x1415a7420]
add eax, dword [0x1415a7424]
mov ecx, eax
xor ecx, 0x98cb0d2e
xor eax, 0x24248011
and eax, 0x24ad8d31
mov edx, ecx
and edx, 0xdb5272ce
imul edx, eax
mov eax, ecx
and eax, 0x24ad8d31
or ecx, 0x24ad8d31
imul ecx, eax
add ecx, edx
imul rax, rcx, 0x6610c0b
shr rax, 0x3a
cmp eax, 0xab22f76d
je 0x1401d0846
mov r13, qword [rbp + 0x70]
mov eax, dword [0x1415a7428]
mov ecx, dword [0x1415a742c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
or ecx, 0xbf66c585
add eax, ecx
inc eax
xor eax, 0x62f9cc5a
add eax, 0x39e8722
cmp eax, 0x67cc5967
jbe 0x1401d0897
jmp 0x1401d0961
mov eax, dword [0x1415a7458]
xor edx, edx
div dword [0x1415a745c]
imul eax, eax, 0x8eb72ad7
mov ecx, eax
not ecx
or ecx, 0x2021011
and ecx, 0x4692b81b
and eax, 0x984d4704
or eax, ecx
xor eax, 0x89e11d6d
mov rcx, qword [r15 + 0x10]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [r15]
movups xmmword [r13], xmm0
cmp eax, 0x8ce7dbfc
jae 0x1401d092a
mov rax, qword [r15 + 0x10]
mov qword [r13 + 0x10], rax
movups xmm0, xmmword [r15]
movups xmmword [r13], xmm0
jmp 0x1401d08cf
mov r13, qword [rbp + 0x70]
nop
mov eax, dword [0x1415a7460]
sub eax, dword [0x1415a7464]
add eax, 0x2f818cc0
and eax, 0x92c8b850
imul rcx, rax, 0x13365c5b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x1827d60f
ja 0x1401d0930
lea r9, [r12 + 0x48]
mov eax, 0x82caeddd
nop dword [rax + rax]
mov ecx, dword [0x1415a7468]
mov edx, dword [0x1415a746c]
mov r8d, ecx
and r8d, edx
xor ecx, edx
lea ecx, [rcx + r8*2]
add ecx, 0x91743051
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xfbb46e73
and edx, 0x44b918c
imul edx, r8d
mov r8d, ecx
and r8d, 0x44b918c
or ecx, 0x44b918c
imul ecx, r8d
add ecx, edx
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xae73b18c
je 0x1401d0970
test sil, sil
mov r14, qword [rbp + 0x40]
mov eax, esi
movabs rsi, 0x8000000000000000
jle 0x1401d0ac9
cmp al, 2
movzx r8d, byte [rbp + 0x78]
jl 0x1401d0a32
jne 0x1401d0ad4
nop word cs:[rax + rax]
mov eax, dword [0x1415a7478]
xor edx, edx
div dword [0x1415a747c]
imul rax, rax, 0x1415c265
shr rax, 0x3c
imul eax, eax, 0x87d33e26
cmp eax, 0xa1d616a0
ja 0x1401d0a00
cmp qword [r12 + 0x58], 0
jne 0x1401d1b34
mov qword [rbp + 0x38], r9
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1401d0a40
sub rsp, 0x20
mov r9d, 0x30
mov rcx, qword [rbp + 0x90]
mov rdx, rbx
mov rdi, qword [rbp + 0x80]
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add rsp, 0x20
nop dword [rax]
mov ecx, dword [0x1415a7480]
mov edx, dword [0x1415a7484]
add ecx, edx
add ecx, 0x3d4be0a
mov edx, ecx
xor edx, 0x71c94329
and edx, ecx
cmp edx, 0xb73fb620
je 0x1401d0a70
test rax, rax
je 0x1401d0afd
mov rsi, rbx
xor eax, eax
test al, al
jne 0x1401d0aa0
mov rax, qword [rdi]
mov qword [rbp + 0x60], rax
mov rdi, qword [rdi + 0x18]
xor eax, eax
test al, al
mov r15, qword [rbp + 0x90]
mov rbx, qword [rbp + 0x50]
je 0x1401d0b6f
jmp 0x1401d0bea
movzx r8d, byte [rbp + 0x78]
je 0x1401d1b34
mov eax, dword [0x1415a7470]
sub eax, dword [0x1415a7474]
add eax, 0x45f3c92
not eax
or eax, 0xc540880
and eax, 0x2ed67ad0
cmp eax, 0x1749052c
je 0x1401d0ad4
jmp 0x1401cfd0a
xor eax, eax
test al, al
jne 0x1401d0aff
mov eax, dword [0x1415a7488]
mov ecx, dword [0x1415a748c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xc1ef22bd
and ecx, 0x3e10dd42
imul ecx, edx
mov edx, eax
and edx, 0x3e10dd42
or eax, 0x3e10dd42
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0x81183285
and ecx, 0x85183e85
mov edx, eax
and edx, 0x7a43c168
or edx, ecx
xor edx, 0x58ba411c
and eax, 0x5c024d08
or eax, edx
cmp eax, 0x586b2390
jbe 0x1401d0b03
jmp 0x1401d0c70
mov eax, dword [0x1415a7490]
mov ecx, dword [0x1415a7494]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
or ecx, 0x423aa2d6
not eax
and eax, 0x10441009
mov edx, ecx
and edx, 0xed814d26
or edx, eax
xor edx, 0x3d52d168
and ecx, 0x2f2c63b1
or ecx, edx
mov r14d, ecx
xor r14d, 0x54ad8462
add r14d, ecx
and ecx, 0xab527b9d
sub r14d, ecx
mov r9, qword [rbp + 0x60]
sub r9, rsi
add r9, rdi
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, rsi
call fcn.14020d9a0
add rsp, 0x20
cmp r14d, 0x9013d479
jae 0x1401d0c1f
mov r9, qword [rbp + 0x60]
sub r9, rsi
movabs rcx, 0x59ccad91e6f2bc64
add r9, rcx
add r9, rdi
sub r9, rcx
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, rsi
call fcn.1401d72e0
add rsp, 0x20
jmp 0x1401d0b6f
mov rcx, qword [rbx]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7498]
and eax, dword [0x1415a749c]
xor eax, 0x200000
or eax, 0x82c11602
and eax, 0x82e11f0a
cmp eax, 0x51ab3d64
je 0x1401d0c30
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x1401d118e
nop word cs:[rax + rax]
mov eax, dword [0x1415a74a0]
mov ecx, dword [0x1415a74a4]
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
xor eax, 0x1bb750c2
and eax, ecx
imul eax, eax, 0x41e69960
and eax, 0x2c0f5040
cmp eax, 0x8c2db777
ja 0x1401d0c70
mov r14, qword [r12 + 0x50]
mov eax, dword [0x1415a74a8]
xor edx, edx
div dword [0x1415a74ac]
nop word cs:[rax + rax]
mov eax, dword [0x1415a74b4]
add eax, dword [0x1415a74b0]
or eax, 0x24200205
and eax, 0xa57b7b87
add eax, 0xa08cd708
cmp eax, 0x9706f534
jb 0x1401d0cc0
mov rax, qword [r12 + 0x58]
mov qword [rbp + 0x80], rax
nop
mov eax, dword [0x1415a74b8]
mov ecx, dword [0x1415a74bc]
xor ecx, eax
not ecx
and ecx, eax
add ecx, 0xa41e25f4
and ecx, 0xad0ed40
cmp ecx, 0x6e4cf1
je 0x1401d0cf0
cmp qword [rbp + 0x80], 0
je 0x1401d0f31
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, r13
mov eax, dword [0x1415a74c0]
mov ecx, dword [0x1415a74c4]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0x6f2082cb
xor ecx, 0xfb8faa15
add ecx, 0x301bb86d
cmp ecx, 0xafc59333
jb 0x1401d0d30
mov rax, rdi
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1401d0ec5
add rax, r14
nop word cs:[rax + rax]
mov ecx, dword [0x1415a74c8]
add ecx, dword [0x1415a74cc]
mov edx, ecx
not edx
and edx, 0x5ff337b6
mov r8d, ecx
and r8d, 0xa00cc849
imul r8d, edx
mov edx, ecx
and edx, 0x5ff337b6
or ecx, 0x5ff337b6
imul ecx, edx
add ecx, r8d
add ecx, 0xe9a65d79
mov edx, ecx
not edx
and edx, 0x81e13192
and ecx, 0x7e1ece6c
sub ecx, edx
cmp ecx, 0xb4d3e9d9
jb 0x1401d0d80
mov r15, qword [rax + 8]
mov r12, qword [0x1415acb98]
mov eax, dword [0x1415a74d0]
xor edx, edx
div dword [0x1415a74d4]
mov ecx, eax
xor ecx, 0x28478da2
or eax, 0xd7b8725d
and eax, ecx
mov ecx, eax
xor ecx, 0x2ebaf930
and ecx, eax
shr ecx, 4
imul rax, rcx, 0xae3d445
shr rax, 0x36
cmp eax, 0xf7ee2bdd
jbe 0x1401d0e40
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call fcn.14020ae70
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415a74d8]
xor edx, edx
div dword [0x1415a74dc]
mov r13d, eax
not eax
and eax, 0x7ea89173
mov ecx, r13d
and ecx, 0x81576e8c
imul ecx, eax
mov eax, r13d
and eax, 0x7ea89173
or r13d, 0x7ea89173
imul r13d, eax
add r13d, ecx
mov eax, r13d
not eax
and eax, 0x1b3306fd
mov ecx, r13d
and ecx, 0xe4ccf902
imul ecx, eax
mov eax, r13d
and eax, 0x1b3306fd
or r13d, 0x1b3306fd
imul r13d, eax
add r13d, ecx
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call rbx
add rsp, 0x20
cmp r13d, 0x9c753d68
je 0x1401d0e40
inc rdi
mov eax, dword [0x1415a74e0]
xor edx, edx
div dword [0x1415a74e4]
mov r13, rsi
mov r12, qword [rbp + 0x88]
mov eax, dword [0x1415a74e8]
or eax, dword [0x1415a74ec]
add eax, 0xc927218b
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x65b4d62d
and ecx, 0x9a4b29d2
imul ecx, edx
mov edx, eax
and edx, 0x9a4b29d2
or eax, 0x9a4b29d2
imul eax, edx
add eax, ecx
add eax, 0x411d8341
cmp eax, 0x5df3e575
jb 0x1401d0ee0
cmp rdi, qword [rbp + 0x80]
jne 0x1401d0d2d
mov eax, dword [0x1415a74f0]
xor edx, edx
div dword [0x1415a74f4]
nop
mov eax, dword [0x1415a74f8]
imul eax, dword [0x1415a74fc]
imul eax, eax, 0x44ce2321
shr eax, 2
imul rax, rax, 0x4d59f8f9
shr rax, 0x3c
cmp eax, 0xa3a34249
je 0x1401d0f40
mov rax, qword [rbp + 0x38]
mov rax, qword [rax]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1401d0f80
mov ecx, 0xbc99bd23
nop dword [rax]
mov edx, dword [0x1415a7504]
mov r8d, edx
xor r8d, r8d
not r8d
and r8d, dword [0x1415a7500]
xor r8d, edx
add r8d, 0xc5bbba5c
imul r8, rcx
shr r8, 0x3e
or r8d, 0xe0de575c
cmp r8d, 0x1edcb11a
jb 0x1401d0f90
test rax, rax
je 0x1401d1074
mov rdi, qword [0x1415acb98]
mov eax, dword [0x1415a7508]
mov ecx, dword [0x1415a750c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x514d5fd
xor eax, 0x4cbc9296
add eax, ecx
and ecx, 0xb657b894
sub eax, ecx
or eax, 0x575777ee
cmp eax, 0x3bb1bd5
jae 0x1401d103b
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call fcn.14020ae70
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [str._we]
and eax, dword [0x1415a7514]
imul ebx, eax, 0x82f7caea
add ebx, 0xe8cccbe3
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call rsi
add rsp, 0x20
cmp ebx, 0xfc77e7fe
ja 0x1401d1042
mov qword [r12 + 0x48], 0
mov qword [r12 + 0x50], 8
mov eax, dword [0x1415a7518]
imul eax, dword [0x1415a751c]
shr eax, 6
imul rax, rax, 0x4015d3d
shr rax, 0x33
mov ecx, eax
not ecx
or ecx, 0x34248a5d
add ecx, eax
cmp ecx, 0x7c5d39c8
jne 0x1401d10be
mov qword [r12 + 0x58], 0
mov r14, qword [rbp + 0x40]
movabs rsi, 0x8000000000000000
movzx r8d, byte [rbp + 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7520]
xor edx, edx
div dword [0x1415a7524]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa8248277
and ecx, 0x57db7d88
imul ecx, edx
mov edx, eax
and edx, 0x57db7d88
or eax, 0x57db7d88
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x4c1824e1
xor eax, 0x47090c
and ecx, 0x6f18b4e1
and eax, 0x90e74b1c
or eax, ecx
mov qword [r12 + 0x58], 0
cmp eax, 0x40240f19
ja 0x1401d10e0
nop
mov eax, dword [str._rr_V]
imul eax, dword [0x1415a752c]
add eax, 0x6f616f68
mov ecx, eax
xor ecx, 0x1b5a9c38
xor eax, 0x84246207
and eax, 0x8474ee07
mov edx, ecx
and edx, 0x7b8b11f8
imul edx, eax
mov eax, ecx
and eax, 0x8474ee07
or ecx, 0x8474ee07
imul ecx, eax
add ecx, edx
cmp ecx, 0xfcf1d11d
je 0x1401d1140
jmp 0x1401d1b2a
mov qword [rbp + 0x60], rcx
mov rax, qword [rbx + 8]
mov qword [rbp + 0x80], rax
mov r15, qword [rbx + 0x10]
mov r14, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
mov eax, dword [0x1415a7530]
mov ecx, dword [0x1415a7534]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x726e22e4
and eax, 0x8d91dd1b
imul eax, edx
mov edx, ecx
and edx, 0x8d91dd1b
or ecx, 0x8d91dd1b
imul ecx, edx
add ecx, eax
imul rax, rcx, 0x79f15f9b
shr rax, 0x3e
lea ecx, [rax + 0x546de24c]
add eax, eax
sub eax, ecx
cmp eax, 0x1fdf79b
je 0x1401d1237
mov eax, dword [0x1415a7538]
mov ecx, eax
not ecx
or ecx, dword [0x1415a753c]
add eax, ecx
add eax, 0x648c8a9c
xor eax, 0x2418530
and eax, 0x8a439df6
mov qword [r12 + 0x58], 0
cmp eax, 0xd2f94e63
jbe 0x1401d1242
mov qword [r12 + 0x58], 0
jmp 0x1401d1206
test rsi, rsi
je 0x1401d13b7
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x1415a7558]
mov ecx, eax
not ecx
or ecx, dword [0x1415a755c]
add eax, ecx
inc eax
imul rax, rax, 0x53d908e9
shr rax, 0x3c
add eax, 0xf95c8da2
not eax
and eax, 0x6a3325f
or eax, 0xc9180880
cmp eax, 0x8d42b320
je 0x1401d1254
mov rax, rdi
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1401d1317
add rax, r14
mov ecx, dword [0x1415a7560]
add ecx, dword [0x1415a7564]
mov edx, ecx
xor edx, 0x8800110c
or edx, 0x1516c010
xor ecx, 0x2000400
and ecx, 0x2410400
and edx, 0xbd96d31c
sub edx, ecx
cmp edx, 0x13f02165
jb 0x1401d12a0
mov r8, qword [rax + 8]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415a7568]
mov ecx, dword [0x1415a756c]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0x3de97ffb
imul eax, ecx, 0x4cdfe97
cmp eax, 0xd2f16c91
je 0x1401d12f0
inc rdi
nop word [rax + rax]
mov eax, dword [0x1415a7570]
xor edx, edx
div dword [0x1415a7574]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x8034b69f
and ecx, 0x7fcb4960
imul ecx, edx
mov edx, eax
and edx, 0x7fcb4960
or eax, 0x7fcb4960
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x6f21f4a9
mov edx, eax
and edx, 0x90de0b40
imul edx, ecx
mov ecx, eax
and ecx, 0x6f21f4a0
or eax, 0x6f21f4a9
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x1056ba0a
mov edx, eax
and edx, 0xefa945e0
imul edx, ecx
mov ecx, eax
and ecx, 0x1056ba00
or eax, 0x1056ba0a
imul eax, ecx
add eax, edx
cmp eax, 0x7a7db2aa
ja 0x1401d1320
cmp rdi, rsi
jne 0x1401d1254
mov eax, dword [0x1415a7540]
mov ecx, dword [0x1415a7544]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
imul rax, rax, 0xe8c7a29
shr rax, 0x39
mov ecx, eax
xor ecx, 2
and ecx, eax
add ecx, 0xbbe1021d
cmp ecx, 0x71cbcee
jb 0x1401d13b7
mov rsi, qword [rbp + 0x10]
mov r10, qword [rbp + 0x80]
lea r13, [r10 + r15*2]
xor eax, eax
test al, al
jne 0x1401d1400
mov eax, dword [0x1415a7548]
xor edx, edx
div dword [0x1415a754c]
mov eax, dword [0x1415a7550]
mov ecx, dword [0x1415a7554]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
and ecx, 0xfe126ba
add ecx, 0x5d57ef49
cmp ecx, 0x6d0b309b
ja 0x1401d1412
xor edi, edi
mov r9d, 0x82ec0ee3
movabs r11, 0x6f953125164e2493
mov ebx, 0x80828e03
xor ecx, ecx
mov qword [rbp + 0x50], r15
mov eax, dword [0x1415a7578]
xor edx, edx
div dword [str.tE5]
mov eax, dword [0x1415a7580]
mov edx, dword [0x1415a7584]
xor edx, eax
not edx
and edx, eax
xor edx, 0x85001430
or edx, 0x2a6fe3cd
imul rdx, r9
shr rdx, 0x3e
cmp edx, 0xdce2771e
ja 0x1401d1469
cmp rcx, r15
je 0x1401d19a5
lea r15, [r10 + rcx*2]
xor r12d, r12d
mov rax, r15
cmp word [rax], 0
je 0x1401d155e
nop word cs:[rax + rax]
mov edx, dword [0x1415a7588]
xor edx, dword [0x1415a758c]
mov r8d, edx
not r8d
or r8d, 0x23d60da7
add edx, r8d
inc edx
mov r8d, edx
not r8d
and r8d, 0x592193e2
mov r9d, edx
and r9d, 0xa6de6c1d
imul r9d, r8d
mov r8d, edx
and r8d, 0x592193e2
or edx, 0x592193e2
imul edx, r8d
add edx, r9d
xor edx, 0x20e64350
cmp edx, 0xd1dc6b83
ja 0x1401d14c0
add rax, 2
inc r12
nop word cs:[rax + rax]
mov edx, dword [0x1415a7590]
sub edx, dword [0x1415a7594]
add edx, 0x35c02dd1
xor edx, 0xa190c4bb
cmp edx, 0x8b2ce749
je 0x1401d1530
cmp rax, r13
jne 0x1401d14aa
jmp 0x1401d19a5
mov eax, dword [0x1415a75b0]
xor edx, edx
div dword [0x1415a75b4]
and eax, 0x58aae34c
add eax, 0x45e57fe3
not eax
and eax, 0xebf08498
cmp eax, 0x900c056b
jb 0x1401d155e
lea r9, [r12 + r11]
add r9, rcx
sub r9, r11
cmp r9, rcx
jb 0x1401d1f9a
mov eax, dword [0x1415a75e0]
mov ecx, dword [0x1415a75e4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x38c158d1
xor eax, 0xb1161972
cmp eax, 0x812b6376
jb 0x1401d1597
cmp r9, qword [rbp + 0x50]
ja 0x1401d1fe9
mov qword [rbp - 0x10], r9
mov eax, dword [0x1415a7600]
xor edx, edx
div dword [0x1415a7604]
imul rax, rbx
shr rax, 0x3e
or eax, 0xd64ff7be
cmp eax, 0xb5de0999
jb 0x1401d15e2
lea rax, [r15 + r12*2]
mov ecx, dword [0x1415a7608]
mov edx, dword [0x1415a760c]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
mov edx, ecx
or edx, 0x1139663
not ecx
or ecx, 0x1eec699c
and ecx, edx
not ecx
imul ecx, ecx, 0x1839c537
or ecx, 0xe9d3c3c1
cmp ecx, 0x5dc28f0d
jb 0x1401d1608
mov rcx, r15
cmp rcx, rax
je 0x1401d19a5
movzx edx, word [rcx]
add rcx, 2
nop word cs:[rax + rax]
mov r8d, dword [0x1415a7628]
add r8d, dword [0x1415a762c]
and r8d, 0x90122022
lea r9d, [r8 + 0x2001028d]
not r8d
and r9d, 0x300322af
and r8d, 0x80100010
or r8d, r9d
cmp r8d, 0x9f89de8b
je 0x1401d1680
cmp dx, 0x3d
jne 0x1401d1664
mov eax, dword [0x1415a7630]
xor eax, dword [0x1415a7634]
add eax, 0xa44373cc
imul rax, rax, 0x5d0c9739
shr rax, 0x3d
or eax, 0xf5fe0744
cmp eax, 0x26848f8b
jne 0x1401d16fd
sub rsp, 0x20
mov rcx, rsi
mov rdx, r15
mov r8, r12
call fcn.14013f9c0
add rsp, 0x20
mov rbx, rsi
mov eax, dword [0x1415a7638]
mov ecx, dword [0x1415a763c]
mov esi, eax
and esi, ecx
or eax, ecx
not esi
and esi, eax
mov eax, esi
not eax
and eax, 0x6b192eb8
and esi, 0x94e6d147
sub esi, eax
add esi, 0xd822921d
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x29fcd2e9
and eax, 0xd6032d16
imul eax, ecx
mov ecx, esi
and ecx, 0xd6032d16
or esi, 0xd6032d16
imul esi, ecx
add esi, eax
sub rsp, 0x20
mov rcx, rbx
mov rdx, r15
mov r8, r12
call fcn.14013f9c0
add rsp, 0x20
cmp esi, 0x40b028e0
jb 0x1401d1700
mov rax, qword [rbp + 0x38]
mov rax, qword [rax]
mov ecx, dword [0x1415a7640]
mov edx, dword [0x1415a7644]
mov r8d, ecx
not r8d
and r8d, edx
not r8d
not edx
and edx, ecx
not edx
and edx, r8d
not edx
add edx, 0x804d9934
imul rcx, rdx, 0x3895c077
shr rcx, 0x3d
imul ecx, ecx, 0x9ab554ff
cmp ecx, 0x55fd2e2b
ja 0x1401d1779
cmp rdi, rax
mov r15, qword [rbp + 0x88]
mov rsi, qword [rbp + 0x10]
mov r10, qword [rbp + 0x80]
mov r9d, 0x82ec0ee3
movabs r11, 0x6f953125164e2493
mov ebx, 0x80828e03
jne 0x1401d18ba
mov eax, dword [0x1415a7648]
mov ecx, dword [0x1415a764c]
not eax
not ecx
or ecx, eax
xor ecx, 0x40000
or ecx, 0x39eadffb
cmp ecx, 0x84b8bb40
mov rbx, qword [rbp + 0x38]
je 0x1401d1990
mov eax, dword [0x1415a7654]
add eax, dword [0x1415a7650]
mov ecx, eax
not ecx
or ecx, 0x1634a70b
add eax, ecx
inc eax
mov esi, eax
xor esi, 0x7daf66b
and esi, eax
add esi, 0x85c07be1
sub rsp, 0x20
mov rcx, rbx
call fcn.1401d8ea0
add rsp, 0x20
cmp esi, 0x8a9a2519
jb 0x1401d1990
mov r14, qword [r15 + 0x50]
mov eax, dword [0x1415a7658]
mov ecx, dword [0x1415a765c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0x14484173
cmp eax, 0xb30a3b91
je 0x1401d1863
mov rsi, qword [rbp + 0x10]
mov r10, qword [rbp + 0x80]
mov r9d, 0x82ec0ee3
movabs r11, 0x6f953125164e2493
mov ebx, 0x80828e03
mov eax, dword [0x1415a7660]
sub eax, dword [0x1415a7664]
mov ecx, eax
not ecx
or ecx, 0x682c40
and ecx, 0x2e82ee1
and eax, 0x3d17901c
sub eax, ecx
and eax, 0xb702c19f
cmp eax, 0x73256687
jbe 0x1401d190a
mov rax, rdi
shl rax, 5
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [r14 + rax + 0x10], xmm1
movups xmmword [r14 + rax], xmm0
lea rax, [rdi + 1]
mov qword [r15 + 0x58], rax
mov eax, dword [0x1415a7668]
mov ecx, dword [0x1415a766c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul ecx, eax, 0x395be6a6
add ecx, 0xea8b22c6
and ecx, 0x3cc8b272
mov rdx, rdi
shl rdx, 5
lea rax, [rdi + 1]
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [r14 + rdx + 0x10], xmm1
movups xmmword [r14 + rdx], xmm0
mov qword [r15 + 0x58], rax
cmp ecx, 0x303c0bcd
ja 0x1401d190a
mov rdx, qword [rbp - 0x10]
inc rdx
mov rdi, rax
mov rcx, rdx
mov r15, qword [rbp + 0x50]
cmp rdx, r15
jbe 0x1401d145b
jmp 0x1401d201b
sub rsp, 0x20
mov rcx, rbx
call fcn.1401d8ea0
add rsp, 0x20
jmp 0x1401d1819
mov eax, dword [0x1415a75b8]
mov ecx, dword [0x1415a75bc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul eax, eax, 0x9cbbfabb
add eax, 0x4cccb1cb
or eax, 0xf9b1e94e
cmp eax, 0x269061ff
jb 0x1401d19a5
mov r12, qword [rbp + 0x88]
mov r14, qword [rbp + 0x40]
movabs rsi, 0x8000000000000000
mov eax, dword [0x1415a75c4]
add eax, dword [0x1415a75c0]
mov ecx, eax
not ecx
and ecx, 0x3c67e3f
mov edx, eax
and edx, 0xfc3981c0
imul edx, ecx
mov ecx, eax
and ecx, 0x3c67e3f
or eax, 0x3c67e3f
imul eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x901a79c7
and eax, 0x121944
xor ecx, 0x84d39b4c
lea eax, [rcx + rax*2]
cmp eax, 0xcf3e0066
ja 0x1401d19fd
cmp qword [rbp + 0x60], 0
movzx r8d, byte [rbp + 0x78]
je 0x1401d1b2a
mov eax, dword [0x1415a75c8]
and eax, dword [0x1415a75cc]
mov ecx, 0xb2050fcb
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x514210ec
imul eax, ecx, 0x8f6bbc4c
cmp eax, 0xa0c77b43
jbe 0x1401d1a90
mov rax, qword [0x1415acb98]
mov ebx, r8d
mov eax, dword [0x1415a75d0]
mov ecx, dword [0x1415a75d4]
mov r8d, 0x3016f931
sub r8d, eax
sub r8d, ecx
add eax, ecx
add eax, 0xcfe906ce
mov ecx, eax
and ecx, 0x12ce8655
and r8d, 0xed3179aa
imul r8d, ecx
mov ecx, eax
and ecx, 0xed3179aa
or eax, 0xed3179aa
imul eax, ecx
add eax, r8d
mov ecx, eax
xor ecx, 0x3358d4ad
and eax, 0x3358d4ac
or eax, ecx
mov rcx, qword [0x1415acb98]
cmp eax, 0x2324ff8a
je 0x1401d1a93
sub rsp, 0x20
xor edx, edx
mov r8, r10
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r8d, ebx
mov eax, dword [0x1415a75d8]
add eax, dword [0x1415a75dc]
not eax
or eax, 0x8a011606
and eax, 0xba01164e
cmp eax, 0x7470d18d
jb 0x1401d1b0b
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401d1b30
lea r9, [r12 + 0x98]
mov eax, dword [0x1415a7670]
xor edx, edx
div dword [0x1415a7674]
lea r10, [r12 + 0xb8]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7678]
or eax, dword [0x1415a767c]
imul rax, rax, 0x6ab770ab
shr rax, 0x3a
xor eax, 0xb3aa34a6
imul eax, eax, 0xe911d1
cmp eax, 0xbb95a2e8
je 0x1401d1b60
cmp byte [rbp - 0x20], 1
mov r15, qword [rbp + 0x90]
jg 0x1401d1bed
jne 0x1401d1c1d
nop dword [rax]
mov eax, dword [0x1415a7680]
mov ecx, dword [0x1415a7684]
not ecx
add eax, ecx
add eax, 0x8986b2
mov ecx, eax
not ecx
and ecx, 0x4b7b57eb
mov edx, eax
and edx, 0xb484a814
imul edx, ecx
mov ecx, eax
and ecx, 0x4b7b57eb
or eax, 0x4b7b57eb
imul eax, ecx
add eax, edx
or eax, 0x79ea6389
cmp eax, 0x652b473b
je 0x1401d1ba0
mov sil, 1
jmp 0x1401d1c20
cmp qword [r9], rsi
sete sil
nop word cs:[rax + rax]
mov eax, dword [0x1415a7688]
imul eax, dword [0x1415a768c]
not eax
or eax, 0xe7e4f792
cmp eax, 0xb0827bec
je 0x1401d1c00
jmp 0x1401d1c20
xor esi, esi
nop
mov eax, dword [0x1415a7690]
mov ecx, dword [0x1415a7694]
add eax, ecx
add eax, 0x870d7315
mov ecx, eax
not ecx
and ecx, 0xdd309a5c
mov edx, eax
and edx, 0x22cf65a3
imul edx, ecx
mov ecx, eax
and ecx, 0xdd309a5c
or eax, 0xdd309a5c
imul eax, ecx
add eax, edx
add eax, 0xb122ebd0
cmp eax, 0x52161b9f
jb 0x1401d1c20
test r8b, r8b
jle 0x1401d1d0c
cmp r8b, 2
jl 0x1401d1d5c
jne 0x1401d1ed0
mov rcx, qword [r10]
movabs r8, 0x8000000000000000
nop dword [rax]
mov eax, dword [0x1415a7698]
mov edx, dword [0x1415a769c]
not eax
not edx
or edx, eax
not edx
add edx, 0x60e0ce6d
and edx, 0xc8d121cb
xor edx, 0x1e7b14ce
cmp rcx, r8
sete al
cmp edx, 0xeac65341
ja 0x1401d1c90
nop word cs:[rax + rax]
mov ecx, dword [0x1415a76a0]
mov edx, dword [0x1415a76a4]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, ecx
and edx, 0xc2c6a6b7
xor edx, 0x3d3fdddf
add edx, 0x42268f7d
cmp edx, 0x9738c5b0
jb 0x1401d1cd0
jmp 0x1401d1d14
jne 0x1401d1ed0
xor eax, eax
lea ecx, [rsi + rax]
and al, sil
sub cl, al
nop dword [rax]
mov eax, dword [0x1415a76a8]
imul eax, dword [0x1415a76ac]
mov edx, eax
xor edx, 0xcb911885
and edx, eax
mov eax, edx
and eax, 0x7a79bd78
xor edx, 0xfa79bd78
lea eax, [rdx + rax*2]
xor eax, 0xfdaae8e5
cmp eax, 0xd2fe10cf
ja 0x1401d1d20
test cl, 1
je 0x1401d2afe
mov r15, qword [rbp + 0x20]
mov ecx, r15d
shr ecx, 1
mov eax, dword [0x1415a76b0]
add eax, dword [0x1415a76b4]
mov rdx, rcx
mov qword [rbp + 0x10], rcx
lea r13, [rcx + 1]
imul eax, eax, 0x73eb8072
add eax, 0x6a5176
cmp eax, 0x467aced2
jbe 0x1401d1d95
movzx eax, byte [0x1415acbd0]
mov qword [rbp + 0x50], r10
lea r12, [r13*2]
nop word cs:[rax + rax]
mov eax, dword [0x1415a76b8]
mov ecx, dword [0x1415a76bc]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
imul rax, rcx, 0x2202a9cb
shr rax, 0x3b
imul eax, eax, 0xfbb1bb51
not eax
or eax, 0x4d3f759e
movzx ecx, byte [0x1415acbd0]
add eax, 0xdd623aba
jae 0x1401d1db0
mov qword [rbp + 0x80], r9
mov eax, dword [0x1415a76c0]
add eax, dword [0x1415a76c4]
xor eax, 0x2cf17de0
shr eax, 2
imul rax, rax, 0x9177639
shr rax, 0x37
imul eax, eax, 0x28dd0e12
cmp eax, 0x51f59c3f
jbe 0x1401d1e33
sub rsp, 0x20
xor ecx, ecx
mov rdx, r12
call fcn.1401ac910
add rsp, 0x20
mov ebx, 0xd80c2b0d
nop dword [rax + rax]
mov r14d, dword [0x1415a76c8]
and r14d, dword [0x1415a76cc]
add r14d, 0xa7b10559
imul r14, rbx
shr r14, 0x3d
or r14d, 0x61b7f1b0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r12
call fcn.1401ac910
add rsp, 0x20
cmp r14d, 0xf630d1fc
ja 0x1401d1e40
mov rdi, rax
test rax, rax
je 0x1401d1edb
xor eax, eax
mov r12, qword [rbp + 0x88]
mov r9, qword [rbp - 0x40]
mov r14, qword [rbp - 0x30]
nop dword [rax + rax]
test al, al
jne 0x1401d1ea0
mov eax, dword [0x1415a76e8]
or eax, dword [0x1415a76ec]
imul rax, rax, 0x6b882087
shr rax, 0x3b
add eax, 0x628754d5
cmp eax, 0x2701cf9c
jae 0x1401d21d3
jmp 0x1401d220c
xor eax, eax
test al, al
jne 0x1401d1ed2
jmp 0x1401cfd0a
mov eax, dword [0x1415a76d0]
mov ecx, dword [0x1415a76d4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
not ecx
or eax, 0x60043088
or ecx, 0x8a100061
and ecx, eax
mov eax, ecx
or eax, 0x4e30a06
not ecx
and eax, 0xc6e71a06
and ecx, 0x281020e9
or ecx, eax
cmp ecx, 0xc41fdd29
jbe 0x1401d1f22
ud2
mov eax, dword [0x1415a76d8]
mov ecx, dword [0x1415a76dc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul eax, eax, 0x6dbb17f1
and eax, 0x6b8b7d14
add eax, 0xaa2e32ed
ud2
mov eax, dword [0x1415a75e8]
xor edx, edx
div dword [0x1415a75ec]
mov ecx, eax
not ecx
and ecx, 0x6562e790
mov edx, eax
and edx, 0x9a9d186f
imul edx, ecx
mov ecx, eax
and ecx, 0x6562e790
or eax, 0x6562e790
imul eax, ecx
add eax, edx
add eax, 0x95981d54
or eax, 0x42959b18
cmp eax, 0x84962e3d
jae 0x1401d20ec
jmp 0x1401d2132
mov eax, dword [0x1415a7610]
xor eax, dword [0x1415a7614]
imul rax, rax, 0x33d7d33b
shr rax, 0x3d
imul eax, eax, 0x23b43dee
and eax, 0x22ef5b62
cmp eax, 0xe5eca1bf
jne 0x1401d2173
jmp 0x1401d219e
mov eax, dword [0x1415a7598]
mov ecx, dword [0x1415a759c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0xaea9c89f
mov ecx, eax
xor ecx, 0x41808af1
xor eax, 0x1001210e
or ecx, 0x9813310e
or eax, 0x67eccef1
and eax, ecx
cmp eax, 0x97a83ccc
je 0x1401d208e
mov eax, dword [0x1415a75a0]
xor edx, edx
div dword [0x1415a75a4]
add eax, 0x2e5b30f7
xor eax, 0x4da0de4f
ud2
ud2
mov eax, dword [0x1415a75f0]
or eax, dword [0x1415a75f4]
add eax, 0x22791ac2
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x5f2f816
and ecx, 0xfa0d07e9
imul ecx, edx
mov edx, eax
and edx, 0xfa0d07e9
or eax, 0xfa0d07e9
imul eax, edx
add eax, ecx
add eax, 0x7c127a39
ud2
ud2
mov eax, dword [0x1415a7618]
imul eax, dword [0x1415a761c]
imul rax, rax, 0x66bb8039
shr rax, 0x3e
add eax, 0x73f5ff17
and eax, 0x62e4390e
ud2
ud2
mov eax, dword [0x1415a76f0]
xor eax, dword [0x1415a76f4]
or eax, 0x1793352d
mov ecx, eax
and ecx, 0x1ec27086
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x1ec27086
not eax
or eax, 0x4fa51e11
mov qword [r9], 0
add eax, 0x7b727978
jae 0x1401d2215
mov qword [r9], 0
jmp 0x1401d21d3
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x38], rsi
mov eax, dword [0x1415a76f8]
mov ecx, dword [0x1415a76fc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
or eax, 0x29a51b8c
shr eax, 1
mov ecx, 0xbfac3a43
imul rcx, rax
shr rcx, 0x3c
or ecx, 0xa23c5922
cmp ecx, 0x16c9a244
jne 0x1401d2291
sub rsp, 0x30
mov qword [rsp + 0x20], r9
mov rcx, qword [rbp + 0x90]
mov rdx, r14
mov r8, rdi
mov r9, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r9, qword [rbp - 0x40]
add rsp, 0x30
mov rbx, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13, r15
mov r15, qword [rbp + 0x90]
mov rsi, r14
nop word cs:[rax + rax]
mov r14d, dword [0x1415a7700]
sub r14d, dword [0x1415a7704]
sub rsp, 0x30
mov qword [rsp + 0x20], r9
mov rcx, r15
mov rdx, rsi
mov r8, rdi
mov r9, r13
call rbx
mov r9, qword [rbp - 0x40]
add rsp, 0x30
cmp r14d, 0x56b04cde
je 0x1401d22b0
test eax, eax
je 0x1401d24cb
mov rax, qword [r9]
mov r14, qword [rbp + 0x40]
movzx ebx, byte [rbp + 0x78]
nop dword [rax]
mov ecx, dword [0x1415a7708]
mov edx, dword [0x1415a770c]
mov r8d, ecx
and r8d, edx
add r8d, r8d
add ecx, edx
sub ecx, r8d
or ecx, 0xff3fbfff
cmp ecx, 0x9f5c23dd
jb 0x1401d2300
cmp rax, qword [rbp + 0x20]
mov r8, qword [rbp + 0x60]
jne 0x1401d2514
nop word cs:[rax + rax]
mov eax, dword [0x1415a771c]
add eax, dword [0x1415a7718]
imul eax, eax, 0x727f7da5
mov ecx, eax
or ecx, 0x28004201
not eax
and eax, 0x6c039a6
and ecx, 0x682fc209
or ecx, eax
cmp ecx, 0xd5300385
je 0x1401d2340
mov rax, qword [rbp + 0x10]
mov word [rdi + rax*2], 0
mov eax, dword [0x1415a7720]
xor edx, edx
div dword [0x1415a7724]
lea rsi, [rdi + r8*2]
nop dword [rax]
mov eax, dword [0x1415a7728]
xor edx, edx
div dword [0x1415a772c]
mov ecx, eax
not ecx
or ecx, 0xa012044
and ecx, 0x9f172cd6
and eax, 0x40c01028
or eax, ecx
cmp eax, 0x8380ac39
je 0x1401d2390
xor ecx, ecx
mov r9, rdi
nop word cs:[rax + rax]
mov eax, dword [0x1415a7730]
mov edx, dword [0x1415a7734]
mov r10d, eax
not r10d
and r10d, edx
mov r11d, edx
not r11d
and r11d, eax
imul r11d, r10d
mov r10d, eax
and r10d, edx
or eax, edx
imul eax, r10d
add eax, r11d
mov edx, eax
not edx
and edx, 0xf9423691
mov r10d, eax
and r10d, 0x6bdc96e
imul r10d, edx
mov edx, eax
and edx, 0xf9423691
or eax, 0xf9423691
imul eax, edx
add eax, r10d
imul rax, rax, 0x2c1ca41b
shr rax, 0x3b
or eax, 0xd8fa295b
cmp eax, 0xb9ad590
jb 0x1401d23d0
cmp word [r9], 0
je 0x1401d25aa
add r9, 2
mov eax, dword [0x1415a7738]
xor edx, edx
div dword [0x1415a773c]
mov eax, dword [0x1415a7740]
mov edx, dword [0x1415a7744]
add eax, edx
add eax, 0x32d551ce
mov edx, eax
xor edx, 0xab98f746
and eax, 0x546708b9
add eax, eax
sub eax, edx
add eax, 0xbda4880a
cmp eax, 0xbecc41f5
ja 0x1401d2460
inc rcx
nop word cs:[rax + rax]
mov eax, dword [0x1415a7748]
or eax, dword [0x1415a774c]
add eax, 0xf0633b1e
or eax, 0xffed8bf6
cmp eax, 0x158951e5
jb 0x1401d24a0
cmp r9, rsi
jne 0x1401d23d0
jmp 0x1401d25ec
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
mov r14, qword [rbp + 0x40]
nop dword [rax]
mov eax, dword [0x1415a7710]
mov ecx, dword [0x1415a7714]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x7633b7c3
or eax, 0x7633b7c3
and eax, ecx
add eax, 0x6415226
and eax, 0x79b02565
cmp eax, 0x8babd3e0
jae 0x1401d24e0
mov eax, dword [0x1415a7758]
or eax, dword [0x1415a775c]
add eax, 0xd254dabb
or eax, 0xe5ea6478
add eax, 0x62ba13a4
cmp eax, 0x65277bb1
jbe 0x1401d253d
mov rax, qword [0x1415acb98]
mov r15, qword [rbp + 0x90]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7760]
xor edx, edx
div dword [0x1415a7764]
mov ecx, eax
and ecx, 0x264fa2f0
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x4f2d6703
xor eax, 0xc3e5e381
mov rsi, qword [0x1415acb98]
cmp eax, 0x99738ad6
ja 0x1401d2550
mov eax, dword [0x1415a7768]
sub eax, dword [0x1415a776c]
or eax, 0x10000548
and eax, 0x16204748
cmp eax, 0xd6cb6232
jbe 0x1401d2903
jmp 0x1401d2942
mov eax, 0xf799c375
mov edx, 0xb06450a3
mov r8d, dword [0x1415a7750]
sub r8d, dword [0x1415a7754]
imul r8, rax
shr r8, 0x3e
or r8d, 0x1f20428c
xor r8d, 0xffa0d421
imul r8, rdx
shr r8, 0x3f
cmp r8d, 0xc9d40151
je 0x1401d25b4
mov r8, rcx
sub rsp, 0x20
mov r15, qword [rbp + 0x48]
mov rcx, r15
mov rdx, rdi
call fcn.14013f9c0
add rsp, 0x20
mov rsi, qword [r15 + 8]
mov r8, qword [r15 + 0x10]
sub rsp, 0x20
mov ecx, ebx
mov rdx, rsi
mov r9, qword [rbp + 0x50]
call fcn.1401d9360
add rsp, 0x20
cmp byte [rbp + 0x38], 0
je 0x1401d27f9
mov eax, dword [0x1415a7790]
or eax, dword [0x1415a7794]
mov ecx, eax
xor ecx, 0x25002260
xor eax, 0x1010
or eax, 0x104ec005
and eax, 0xd26edc17
and ecx, 0x258023e0
or ecx, eax
cmp ecx, 0x370ea453
mov r15, qword [rbp + 0x90]
mov rsi, qword [rbp - 0x80]
mov rdx, qword [rbp + 0x48]
jae 0x1401d267b
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rbx, qword [rbp + 0x80]
mov eax, dword [0x1415a7798]
xor eax, dword [0x1415a779c]
mov ecx, eax
not ecx
or eax, 0x5c1b23bc
or ecx, 0x23e4dc43
and ecx, eax
not ecx
add ecx, 0xc1f27244
or ecx, 0x8b3ae7d3
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp ecx, 0xe6115df4
je 0x1401d2682
mov rax, qword [rbx]
test rax, rax
js 0x1401d28eb
je 0x1401d26f0
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415a77a0]
imul eax, dword [0x1415a77a4]
or eax, 0x3d07cbdb
xor eax, 0x76172996
mov ecx, eax
and ecx, 0x88e224
add ecx, ecx
sub eax, ecx
cmp eax, 0xfb841692
jne 0x1401d2728
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov eax, 0xf7945019
mov edx, dword [0x1415a77a8]
mov r8d, dword [0x1415a77ac]
mov ecx, edx
not ecx
mov r9d, r8d
not r9d
mov r10d, ecx
and r10d, 0xc00d57a
and edx, 0xf3ff2a85
or edx, r10d
or ecx, r9d
and r9d, 0xc00d57a
and r8d, 0xf3ff2a85
or r8d, r9d
xor r8d, edx
not ecx
or ecx, r8d
add ecx, 0x738e90b3
imul rcx, rax
shr rcx, 0x3d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xfffffffd
and edx, 0x6e65aab2
imul edx, r8d
mov r8d, ecx
and r8d, 2
or ecx, 0x6e65aab2
imul ecx, r8d
add ecx, edx
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
cmp ecx, 0xe90b3d41
je 0x1401d272d
xor eax, eax
test al, al
jne 0x1401d27c5
mov eax, dword [0x1415a77b0]
sub eax, dword [0x1415a77b4]
mov ecx, eax
or ecx, 0xac42460
not eax
and eax, 0xa0021a00
and ecx, 0x1fc42562
sub ecx, eax
cmp ecx, 0x4abf2b37
je 0x1401d27c9
jmp 0x1401d2880
xor eax, eax
mov r15, qword [rbp + 0x90]
test al, al
jne 0x1401d2802
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov ecx, dword [0x1415a77b8]
xor ecx, dword [0x1415a77bc]
mov edx, ecx
not edx
and edx, 0x4a8cab93
and ecx, 0xb573546c
sub ecx, edx
cmp ecx, 0x60f74e38
je 0x1401d280d
test rax, rax
je 0x1401d2880
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call fcn.14020ae70
add rsp, 0x20
mov eax, dword [0x1415a77c0]
add eax, dword [str.wG]
or eax, 0x795ed07f
imul rax, rax, 0x55de2933
shr rax, 0x3e
cmp eax, 0x1e771631
ja 0x1401d2851
nop word cs:[rax + rax]
mov eax, dword [0x1415a77c8]
and eax, dword [0x1415a77cc]
and eax, 0xc4a30768
mov ecx, eax
not ecx
or ecx, 0x739f404f
add eax, ecx
inc eax
shr eax, 4
imul rax, rax, 0x11f7679
shr rax, 0x34
cmp eax, 0x43a1148
ja 0x1401d2880
mov rsi, qword [0x1415acb98]
mov eax, dword [0x1415a77d0]
mov ecx, dword [0x1415a77d4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
or eax, 0x40010144
and eax, 0x41810945
cmp eax, 0x6f90f290
jbe 0x1401d2a8f
jmp 0x1401d2ae7
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1401d26d1
jmp 0x1401d26f0
mov eax, dword [0x1415a7770]
and eax, dword [0x1415a7774]
mov ebx, 0xa29b3861
imul rbx, rax
shr rbx, 0x3e
not ebx
and ebx, 0xaa08402b
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x11be8758
jae 0x1401d2959
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call fcn.14020ae70
add rsp, 0x20
jmp 0x1401d2903
mov rbx, qword [rbp + 0x80]
mov rax, qword [rbx]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a7778]
add ecx, dword [0x1415a777c]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x76d76f4d
and edx, 0x892890b2
imul edx, r8d
mov r8d, ecx
and r8d, 0x892890b2
or ecx, 0x892890b2
imul ecx, r8d
add ecx, edx
mov edx, ecx
not edx
and edx, 0xeb33afac
and ecx, 0x14cc5052
sub ecx, edx
mov edx, ecx
and edx, 0x5463fdba
add edx, edx
neg edx
add ecx, edx
add ecx, 0x5463fdba
cmp ecx, 0xc64251
jb 0x1401d2970
test rax, rax
movabs rdi, 0x8000000000000000
js 0x1401d29eb
jne 0x1401d29f0
jmp 0x1401d2a65
cmp rax, rdi
je 0x1401d2a65
mov eax, dword [0x1415a7780]
add eax, dword [0x1415a7784]
mov ecx, eax
not ecx
and ecx, 0x1360c749
mov edx, eax
and edx, 0x2c9f38b6
imul edx, ecx
mov ecx, eax
and ecx, 0x1360c749
or eax, 0x1360c749
imul eax, ecx
add eax, edx
not eax
or eax, 0xc8379a5e
cmp eax, 0x82bfa065
je 0x1401d29f0
mov r8, qword [r12 + 0xa0]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor esi, esi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
test sil, sil
jne 0x1401d2a60
mov qword [rbx], rdi
nop dword [rax + rax]
mov eax, dword [0x1415a7788]
xor eax, dword [0x1415a778c]
xor eax, 0x69480280
or eax, 0x9693bd23
cmp eax, 0xb2b737a
jbe 0x1401d2a70
jmp 0x1401d2afe
mov eax, dword [0x1415a77d8]
mov ecx, dword [0x1415a77dc]
mov edx, eax
or edx, ecx
not eax
not ecx
and ecx, eax
not ecx
and ecx, edx
mov eax, ecx
xor eax, 0x91c40b0c
xor ecx, 0x46118033
or ecx, 0xb8ae7dc4
add eax, ecx
inc eax
mov ebx, eax
xor ebx, 0x6cac32a5
and ebx, eax
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call fcn.14020ae70
add rsp, 0x20
cmp ebx, 0xbb1d52e1
jne 0x1401d2afe
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call fcn.14020ae70
add rsp, 0x20
jmp 0x1401d2a8f
mov r13, qword [rbp + 0x70]
mov rsi, qword [rbp - 0x68]
mov rdx, qword [rbp]
nop word [rax + rax]
mov eax, dword [0x1415a77e0]
sub eax, dword [0x1415a77e4]
or eax, 0xa864cf21
xor eax, 0x5f557a31
imul rax, rax, 0x4e26be01
shr rax, 0x3e
cmp eax, 0xf06a3c0a
je 0x1401d2b10
jmp 0x1401ce8c6
mov eax, dword [0x1415a7840]
xor edx, edx
div dword [0x1415a7844]
xor eax, 0xcf44943d
imul rcx, rax, 0x7d135ff1
shr rcx, 0x3e
not ecx
and ecx, 0x8aeb1c91
mov eax, dword [0x1415acbc0]
cmp ecx, 0x6edfbb09
jae 0x1401d2b79
mov eax, dword [0x1415acbc0]
jmp 0x1401d2b3d
mov ecx, 0xbd9248d7
nop
mov edx, dword [0x1415a7848]
or edx, dword [0x1415a784c]
not edx
and edx, 0x10d9a1be
mov r8d, edx
not r8d
xor edx, 0x2108bbad
and r8d, 0x2108bbad
add r8d, r8d
sub r8d, edx
imul r8, rcx
shr r8, 0x3f
cmp r8d, 0x6f427633
je 0x1401d2b80
cmp eax, 4
je 0x1401d2c32
xor eax, eax
test al, al
jne 0x1401d2c23
mov eax, dword [0x1415a7850]
sub eax, dword [0x1415a7854]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x78780ecb
and ecx, 0x8787f134
imul ecx, edx
mov edx, eax
and edx, 0x8787f134
or eax, 0x8787f134
imul eax, edx
add eax, ecx
add eax, 0x699d38f7
mov esi, 0xee1a6eed
imul rsi, rax
shr rsi, 0x3f
sub rsp, 0x20
call fcn.1402445a0
add rsp, 0x20
cmp esi, 0x328bbd63
jne 0x1401d2c32
sub rsp, 0x20
call fcn.1402445a0
add rsp, 0x20
jmp 0x1401d2bc9
movzx eax, byte [0x1415acbc4]
nop dword [rax]
mov ecx, dword [0x1415a7858]
mov edx, dword [0x1415a785c]
lea r8d, [rcx + rdx]
add ecx, edx
add ecx, 0x84c40238
mov edx, ecx
and edx, 0x92603654
xor ecx, 0x6d9fc9ab
add ecx, r8d
add ecx, 0x84c40238
sub ecx, edx
imul ecx, ecx, 0xf73068f3
cmp ecx, 0xcdd9bc30
je 0x1401d2c40
test al, al
mov qword [rbp + 0x50], rbx
je 0x1401d2d1f
nop dword [rax + rax]
mov eax, dword [0x1415a7918]
mov ecx, dword [0x1415a791c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
xor eax, 0xbc5d3a17
add eax, 0xca253537
shr eax, 7
imul rax, rax, 0x204b19f
shr rax, 0x30
cmp eax, 0x8b2d0b39
je 0x1401d2c90
mov eax, dword [0x1415a7920]
or eax, dword [0x1415a7924]
add eax, 0xf5b44d3
mov ecx, eax
not ecx
or ecx, 0x28d563ea
and eax, 0x7289010
xor ecx, 0xd0572d8d
lea eax, [rcx + rax*2]
cmp eax, 0xa2358ddf
mov rdi, qword [rbp - 0x58]
mov rbx, qword [rbp + 0x90]
jbe 0x1401d339c
jmp 0x1401d33e8
mov eax, dword [0x1415a7860]
xor edx, edx
div dword [0x1415a7864]
nop dword [rax]
mov eax, dword [0x1415a786c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415a7868]
xor ecx, eax
add ecx, 0x30bc8b99
mov eax, ecx
not eax
and eax, 0x650d94ef
mov edx, ecx
and edx, 0x9af26b10
imul edx, eax
mov eax, ecx
and eax, 0x650d94ef
or ecx, 0x650d94ef
imul ecx, eax
add ecx, edx
xor ecx, 0xe96bb61a
cmp ecx, 0xb963748e
ja 0x1401d2d30
sub rsp, 0x20
mov rbx, qword [rbp + 0x30]
mov rcx, rbx
mov rdx, qword [rbp + 0x90]
mov r8, r15
mov r9, r14
call fcn.1401d72e0
add rsp, 0x20
mov rsi, qword [rbx]
cmp rsi, rdi
jne 0x1401d2dfc
mov r8, qword [rbp + 0x58]
mov qword [r8], 0
mov eax, dword [0x1415a78a0]
xor edx, edx
div dword [str.wRzHs]
mov ecx, eax
not ecx
and ecx, 0x29f0a33e
mov edx, eax
and edx, 0x160f5cc1
imul edx, ecx
mov ecx, eax
and ecx, 0x29f0a33e
or eax, 0x29f0a33e
imul eax, ecx
add eax, edx
and eax, 0x31022224
cmp eax, 0xaed7dd7
jne 0x1401d2f9e
jmp 0x1401d2fda
mov r14, qword [rbx + 8]
sub rsp, 0x20
mov rcx, qword [rbp + 0x58]
mov rdx, r14
call fcn.14020d9c0
add rsp, 0x20
mov eax, dword [0x1415a7870]
xor edx, edx
div dword [0x1415a7874]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7878]
xor edx, edx
div dword [0x1415a787c]
and eax, 0xdb7f513c
imul eax, eax, 0x51e6eef
mov ecx, eax
and ecx, 0x4f5a7834
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xcf5a7835
cmp eax, 0xc5f44af2
jb 0x1401d2e30
test rsi, rsi
je 0x1401d2ff0
mov eax, dword [0x1415a7880]
mov ecx, dword [0x1415a7884]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0xea1de912
mov eax, ecx
and eax, 0x7c4bd59e
add eax, eax
sub ecx, eax
add ecx, 0x7c4bd59e
mov eax, 0xaab4ca77
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xec7450f9
jbe 0x1401d2eb2
mov rax, qword [0x1415acb98]
mov eax, dword [0x1415a7888]
or eax, dword [0x1415a788c]
add eax, 0xd881b8ff
xor eax, 0x7bc22330
mov r15, qword [0x1415acb98]
cmp eax, 0x2fc26c56
jb 0x1401d2eb2
mov eax, dword [0x1415a7890]
xor eax, dword [0x1415a7894]
and eax, 0x81001420
mov ecx, eax
xor ecx, 0x2e47f2be
or eax, 0x81000400
and eax, ecx
cmp eax, 0x451e4ff3
jbe 0x1401d2f13
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov esi, 0xb013ed85
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [0x1415a7898]
mov eax, dword [0x1415a789c]
mov edx, ecx
xor edx, eax
not edx
and edx, eax
add edx, edx
sub eax, edx
add eax, ecx
imul rax, rsi
shr rax, 0x3e
mov ecx, eax
not ecx
and ecx, 0xd8ef9846
and eax, 1
lea ebx, [rcx + rax]
xor ebx, 0x3be71f5f
or ebx, eax
or ecx, 0x6020
and ecx, 0x267062
mov eax, ebx
and eax, 0xc1088319
imul eax, ecx
mov ecx, ebx
and ecx, 0x22000402
or ebx, 0x22267462
imul ebx, ecx
add ebx, eax
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0x8d8feed3
jae 0x1401d2f1f
jmp 0x1401d2ff0
mov eax, dword [0x1415a78a8]
mov ecx, dword [0x1415a78ac]
mov edx, ecx
not edx
or edx, eax
not eax
or eax, ecx
and eax, edx
not eax
imul eax, eax, 0xfe880fe5
add eax, 0x23bce897
mov qword [r8 + 8], 8
mov qword [r8 + 0x10], 0
cmp eax, 0x34f5f058
jae 0x1401d2ff0
mov qword [r8 + 8], 8
mov qword [r8 + 0x10], 0
jmp 0x1401d2f9e
mov eax, dword [0x1415a78b0]
and eax, dword [0x1415a78b4]
add eax, 0xcc9ee22c
and eax, 0xc4200b3e
imul eax, eax, 0xb6594e2f
cmp eax, 0xc47e1df5
ja 0x1401d2ff0
nop word cs:[rax + rax]
mov eax, dword [0x1415a78b8]
or eax, dword [0x1415a78bc]
xor eax, 0x961abec2
imul eax, eax, 0x2387c0ab
mov ecx, eax
not ecx
and ecx, 0xe51e667e
mov edx, eax
and edx, 0x1ae19981
imul edx, ecx
mov ecx, eax
and ecx, 0xe51e667e
or eax, 0xe51e667e
imul eax, ecx
add eax, edx
cmp eax, 0x63135aa3
ja 0x1401d3020
mov r14, qword [r12 + 0x38]
mov rsi, qword [r12 + 0x40]
nop
mov eax, dword [0x1415a78c0]
xor edx, edx
div dword [0x1415a78c4]
add eax, 0x28c229ad
mov ecx, eax
and ecx, 0x54a82450
xor eax, 0xd4a82450
lea eax, [rax + rcx*2]
mov ecx, eax
and ecx, 0xcb72cb
add ecx, ecx
sub eax, ecx
add eax, 0xcb72cb
cmp eax, 0x8c3d3474
jb 0x1401d3070
test rsi, rsi
je 0x1401d31f4
xor edi, edi
mov ebx, 0xa581c81f
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x1415a78c8]
add eax, dword [0x1415a78cc]
or eax, 0xfec904ec
add eax, 0xdffdf844
mov rcx, rax
imul rcx, rbx
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x18
cmp eax, 0x758a2e8e
je 0x1401d30d0
mov rax, rdi
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1401d3161
add rax, r14
mov r8, qword [rax + 8]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call r15
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415a78d0]
add eax, dword [0x1415a78d4]
imul eax, eax, 0x3a94dddf
mov ecx, eax
not ecx
and ecx, 0x5f761d5c
and eax, 0xa089e2a3
sub eax, ecx
not eax
or eax, 0xd781aea
cmp eax, 0x31aeed74
jb 0x1401d3130
mov eax, edi
and eax, 1
or rdi, 1
add rdi, rax
mov eax, dword [0x1415a78d8]
xor edx, edx
div dword [0x1415a78dc]
nop dword [rax + rax]
mov eax, dword [0x1415a78e0]
sub eax, dword [0x1415a78e4]
imul rax, rax, 0x68d0a749
shr rax, 0x3e
or eax, 0x8616000
cmp eax, 0x9d31ae7f
ja 0x1401d3180
nop word cs:[rax + rax]
mov eax, dword [0x1415a78e8]
mov ecx, dword [0x1415a78ec]
mov edx, eax
and edx, ecx
not edx
not eax
not ecx
or ecx, eax
and ecx, edx
mov eax, ecx
xor eax, 0x638a51
xor ecx, 0xa001008
and ecx, 0x4b00758e
and eax, 0xb4ff8a71
sub eax, ecx
cmp eax, 0xf7d7623b
je 0x1401d31b0
cmp rdi, rsi
jne 0x1401d30d0
mov rbx, qword [rbp + 0x50]
mov rax, qword [rbx]
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov ecx, dword [0x1415a78f0]
add ecx, dword [0x1415a78f4]
or ecx, 0x40020008
and ecx, 0x40422009
cmp ecx, 0x70d036c0
ja 0x1401d3210
test rax, rax
je 0x1401d32e5
mov eax, dword [str.ADp_]
add eax, dword [0x1415a78fc]
mov ecx, eax
xor ecx, 0x8835e5cd
or eax, 0x77ca1a32
and eax, ecx
add eax, 0x572cb644
cmp eax, 0xd6f98a37
ja 0x1401d32b7
mov eax, dword [0x1415a7900]
mov ecx, eax
not ecx
or ecx, dword [0x1415a7904]
add eax, ecx
add eax, 0xc4fe70ea
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x66e23e9f
and ecx, 0x991dc160
imul ecx, edx
mov edx, eax
and edx, 0x991dc160
or eax, 0x991dc160
imul eax, edx
add eax, ecx
imul rax, rax, 0xa307fa9
shr rax, 0x3b
mov rcx, qword [0x1415acb98]
cmp eax, 0xae0ea8e7
jbe 0x1401d32c0
mov rax, qword [0x1415acb98]
jmp 0x1401d3260
sub rsp, 0x20
xor esi, esi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
test sil, sil
jne 0x1401d32e0
mov eax, dword [str.1__5]
or eax, dword [0x1415a790c]
add eax, 0x8b82f85
mov ecx, eax
not ecx
and ecx, 0x8a465ca0
mov edx, eax
and edx, 0x75b9a35f
imul edx, ecx
mov ecx, eax
and ecx, 0x8a465ca0
or eax, 0x8a465ca0
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xd982496e
mov edx, eax
and edx, 0x267db680
imul edx, ecx
mov ecx, eax
and ecx, 0xd9824960
or eax, 0xd982496e
imul eax, ecx
add eax, edx
cmp eax, 0xe88347d9
mov r8, qword [rbp + 0x58]
movzx r9d, byte [rbp + 0x68]
je 0x1401d338b
mov eax, dword [0x1415a7910]
xor edx, edx
div dword [0x1415a7914]
xor eax, 0x40820100
or eax, 0x220aa00
and eax, 0x42a2eb0c
mov rcx, qword [r8 + 0x10]
mov qword [rbx + 0x10], rcx
movups xmm0, xmmword [r8]
movups xmmword [rbx], xmm0
cmp eax, 0xeeb5f90f
jbe 0x1401d3730
mov rax, qword [r8 + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [r8]
movups xmmword [rbx], xmm0
jmp 0x1401d3354
mov eax, dword [str._nu4ca]
imul eax, dword [0x1415a792c]
mov ecx, eax
and ecx, 0x49d6e8ee
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xc9d6e8ee
imul rsi, rax, 0x5fdc46e9
shr rsi, 0x3d
or esi, 0xe6c5daac
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
call fcn.14020d980
add rsp, 0x20
cmp esi, 0xdaf14eaa
jae 0x1401d33fd
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
call fcn.1401d86a0
add rsp, 0x20
jmp 0x1401d339c
mov r14, qword [r12 + 0x38]
mov rsi, qword [r12 + 0x40]
test rsi, rsi
je 0x1401d35a0
xor eax, eax
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor ebx, ebx
jmp 0x1401d3431
inc rbx
cmp rbx, rsi
mov eax, 0
je 0x1401d35a0
test al, al
jne 0x1401d3431
mov rax, rbx
shl rax, 5
cmp qword [r14 + rax], 0
je 0x1401d3420
add rax, r14
mov ecx, dword [0x1415a7930]
sub ecx, dword [0x1415a7934]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x2af1bf2d
and edx, 0x550e40d2
imul edx, r8d
mov r8d, ecx
and r8d, 0x550e40d2
or ecx, 0x550e40d2
imul ecx, r8d
add ecx, edx
add ecx, 0x70595362
or ecx, 0x874f0710
cmp ecx, 0x5bfa1f1c
mov r9d, 0xd9f5435f
je 0x1401d3530
nop
mov edx, dword [0x1415a7938]
mov ecx, dword [0x1415a793c]
mov r8d, edx
not r8d
and r8d, ecx
not r8d
not ecx
and ecx, edx
not ecx
and ecx, r8d
not ecx
imul rcx, r9
shr rcx, 0x3f
or ecx, 0x95d0894
mov edx, ecx
and edx, 0x84c0015
add edx, edx
sub ecx, edx
mov r15, qword [rax + 8]
mov r12, qword [0x1415acb98]
cmp ecx, 0x369b0dab
je 0x1401d3530
mov eax, dword [0x1415a7944]
xor eax, dword [0x1415a7940]
mov ecx, eax
and ecx, 0x71875369
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x71875369
imul rax, rax, 0x40bc5173
shr rax, 0x39
or eax, 0x4036f50
cmp eax, 0x3f952ced
jbe 0x1401d3540
jmp 0x1401d3587
mov rcx, qword [0x1415acb98]
jmp 0x1401d34a0
mov edi, dword [str.Okn]
and edi, dword [0x1415a794c]
mov eax, edi
not eax
or eax, 0x60100
and eax, 0x890e1963
and edi, 0x5060c680
sub edi, eax
add edi, 0xa21f7fe4
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call r13
add rsp, 0x20
cmp edi, 0x9b1ccf1d
jbe 0x1401d3420
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, r15
call r13
add rsp, 0x20
jmp 0x1401d3540
mov eax, dword [0x1415a7950]
mov ecx, eax
not ecx
or ecx, dword [0x1415a7954]
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0x4be289bb
add ecx, ecx
sub eax, ecx
add eax, 0x4be289bb
mov ecx, eax
xor ecx, 0x5b0a08f2
xor eax, 0x4a18001
and eax, 0x5ca380a1
mov edx, ecx
and edx, 0xa35c7f5e
imul edx, eax
mov eax, ecx
and eax, 0x5ca380a1
or ecx, 0x5ca380a1
imul ecx, eax
add ecx, edx
cmp ecx, 0xed07b05d
je 0x1401d35a0
mov rbx, qword [rbp + 0x50]
cmp qword [rbx], 0
mov r13, qword [rbp + 0x70]
mov r12, qword [rbp + 0x88]
movabs rdi, 0x8000000000000000
je 0x1401d36c9
mov r15, qword [0x1415acb98]
mov eax, dword [0x1415a7958]
mov ecx, dword [0x1415a795c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
or eax, 0x5603f9eb
not ecx
and ecx, 0xa1880600
mov edx, eax
and edx, 0x58740015
or edx, ecx
xor edx, 0x82a1d566
and eax, 0x252a2a8c
or eax, edx
mov ecx, 0x91606575
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x9472e01e
ja 0x1401d36b1
mov esi, dword [0x1415a7960]
sub esi, dword [0x1415a7964]
add esi, 0xc1c8ca46
or esi, 0x742fe822
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0xba23122b
jae 0x1401d36c9
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401d367b
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx + 0x10]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rcx]
movups xmmword [rbx], xmm0
nop dword [rax + rax]
mov eax, dword [0x1415a7968]
mov ecx, dword [0x1415a796c]
not ecx
add eax, ecx
add eax, 0xa4416c65
and eax, 0xe49ce90f
cmp eax, 0xb9a78401
je 0x1401d36e0
movzx r9d, byte [rbp + 0x68]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7970]
mov ecx, dword [0x1415a7974]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
cmp ecx, 0x5df25c9
je 0x1401d3710
lea r8, [r12 + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7978]
sub eax, dword [0x1415a797c]
or eax, 0x5558b4e5
add eax, 0x7f29057e
not eax
or eax, 0x7c21d042
cmp eax, 0x1423d5cd
jb 0x1401d3740
mov eax, 0xe7ae7f09
mov rbx, qword [rbp - 0x78]
mov r15, qword [rbp + 0x48]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a7980]
xor ecx, dword [0x1415a7984]
imul rcx, rax
shr rcx, 0x3d
add ecx, 0xecd79815
and ecx, 0x6c548015
cmp ecx, 0x4801a21f
je 0x1401d3780
test r9b, r9b
jle 0x1401d3845
cmp r9b, 2
jl 0x1401d3800
jne 0x1401d384b
nop dword [rax]
mov eax, dword [0x1415a7990]
xor edx, edx
div dword [0x1415a7994]
add eax, 0xd361b73b
or eax, 0x8e281497
cmp eax, 0x51c31476
jb 0x1401d37c0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401d37f0
cmp qword [r12 + 0x58], 0
jne 0x1401d49e0
mov qword [rbp + 0x58], r8
nop word cs:[rax + rax]
mov eax, dword [0x1415a7998]
sub eax, dword [0x1415a799c]
imul eax, eax, 0xbb5e6180
or eax, 0x90481000
and eax, 0x9a6c1000
cmp eax, 0x4264084e
jb 0x1401d3810
xor eax, eax
test al, al
mov r14, qword [rbp + 0x90]
je 0x1401d3898
jmp 0x1401d38fd
je 0x1401d49e0
mov eax, dword [0x1415a7988]
mov ecx, dword [0x1415a798c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
xor eax, 0x3ce508a1
imul rax, rax, 0x58c8d7b7
shr rax, 0x3e
or eax, 0x8ac524d8
cmp eax, 0xe27b84ff
ja 0x1401d384b
jmp 0x1401cfd0a
mov esi, dword [0x1415a79a0]
mov eax, dword [0x1415a79a4]
mov ecx, esi
not ecx
and ecx, eax
mov edx, eax
not edx
and edx, esi
imul edx, ecx
mov ecx, esi
and ecx, eax
or esi, eax
imul esi, ecx
add esi, edx
xor esi, 0x96414224
and esi, 0x974942ac
mov eax, esi
xor eax, 0x27c2e661
or esi, 0x9009008c
and esi, eax
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r14
mov rdx, r15
mov r8, rbx
call fcn.14020d9e0
add rsp, 0x20
cmp esi, 0xce90794a
jne 0x1401d391e
sub rsp, 0x20
mov r9d, 0x30
mov rcx, r14
mov rdx, r15
mov r8, rbx
call fcn.14020d9e0
add rsp, 0x20
jmp 0x1401d3898
test rax, rax
je 0x1401d4670
mov eax, dword [0x1415a79a8]
xor edx, edx
div dword [0x1415a79ac]
nop word cs:[rax + rax]
mov eax, dword [0x1415a79b0]
xor edx, edx
div dword [0x1415a79b4]
mov ecx, eax
or ecx, 0xf282929c
mov edx, eax
not edx
mov r8d, ecx
and r8d, 0x775d944e
and edx, 0x8206921
imul edx, r8d
and ecx, 0x88a26bb1
or eax, 0xfaa2fbbd
imul eax, ecx
add eax, edx
or eax, 0x5b5e97c0
cmp eax, 0xd60043e4
je 0x1401d3940
mov rax, qword [rbx]
sub rax, r15
movabs r12, 0x9fcb7a93bb99c604
sub rax, r12
add r12, qword [rbx + 0x18]
add r12, rax
lea rax, [rdi - 3]
cmp r12, rax
ja 0x1401cfd0a
mov r14, r12
shr r14, 1
lea rbx, [r14 + 1]
mov eax, dword [0x1415a79b8]
mov ecx, dword [0x1415a79bc]
lea edx, [rax + rcx]
add eax, ecx
add eax, 0x838036e8
mov ecx, 0x7c7fc917
sub ecx, edx
and ecx, 0x47ef9b1a
and eax, 0xb81064e5
sub eax, ecx
imul rax, rax, 0x1713a575
shr rax, 0x3c
cmp eax, 0x51e69441
jbe 0x1401d39fe
movzx eax, byte [0x1415acbd0]
lea r13, [rbx + rbx]
nop word cs:[rax + rax]
mov eax, dword [0x1415a79c4]
not eax
add eax, dword [0x1415a79c0]
imul eax, eax, 0x8a694adf
add eax, 0x8122f88c
movzx ecx, byte [0x1415acbd0]
cmp eax, 0x162f46b9
jb 0x1401d3a10
mov eax, dword [0x1415a79c8]
mov ecx, dword [0x1415a79cc]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0x5cf10916
mov ecx, eax
xor ecx, 0x98a275e3
and eax, 0x675d8a1c
add eax, eax
sub eax, ecx
mov ecx, eax
or ecx, 0x1c3817ee
not eax
or eax, 0xe3c7e811
and eax, ecx
cmp eax, 0xcbcec394
je 0x1401d3ab1
mov esi, dword [0x1415a79d0]
and esi, dword [0x1415a79d4]
and esi, 0x9139c828
xor esi, 0x114008
add esi, 0x9e94aa84
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.1401ac910
add rsp, 0x20
cmp esi, 0x422ca8e7
jae 0x1401d3ac5
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.14020ae90
add rsp, 0x20
jmp 0x1401d3a79
mov r15, rax
test rax, rax
je 0x1401d44ec
mov r13, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x1415a79e8]
mov ecx, dword [0x1415a79ec]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x4af6645d
xor eax, 0x84410a3
or eax, 0xe72be75c
cmp eax, 0xddbc03ba
je 0x1401d3ae0
mov rax, qword [rbp - 0x50]
mov qword [rax], 0
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x48]
mov r8, r15
mov r9, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
mov ecx, 0x808f16f7
nop word cs:[rax + rax]
mov edx, dword [0x1415a79f0]
add edx, dword [0x1415a79f4]
imul rdx, rcx
shr rdx, 0x3f
imul edx, edx, 0xf2147a34
cmp edx, 0xdc199c6e
je 0x1401d3b60
test eax, eax
je 0x1401d4300
nop word [rax + rax]
mov eax, dword [0x1415a79f8]
or eax, dword [0x1415a79fc]
add eax, 0x810f567c
imul rax, rax, 0x574e2637
shr rax, 0x3d
imul eax, eax, 0xd06ebf8c
cmp eax, 0xf1fb9b40
ja 0x1401d3b90
mov rax, qword [rbp - 0x50]
mov rax, qword [rax]
mov ecx, dword [0x1415a7a00]
mov edx, dword [0x1415a7a04]
mov r8d, ecx
xor r8d, edx
not r8d
or ecx, edx
and ecx, r8d
imul ecx, ecx, 0x29f77993
mov edx, ecx
xor edx, 0x40220802
and edx, ecx
and edx, 0x66635c93
cmp edx, 0x978a495c
je 0x1401d3bc0
cmp rax, r12
mov r12, qword [rbp + 0x88]
jne 0x1401d43b0
mov eax, dword [0x1415a7a40]
mov ecx, dword [0x1415a7a44]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
and ecx, 0x1018e185
or eax, 0x1018e185
add eax, ecx
imul rcx, rax, 0xe8ae76b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
mov ecx, eax
not ecx
and ecx, 0x93aa83bc
and eax, 3
sub eax, ecx
cmp eax, 0xd10492ae
jne 0x1401d3c80
mov word [r15 + r14*2], 0
nop word cs:[rax + rax]
mov eax, dword [0x1415a7a48]
sub eax, dword [0x1415a7a4c]
mov ecx, eax
or ecx, 0x900e0604
not eax
or eax, 0x8108000
and eax, ecx
not eax
and eax, 0x981e8604
mov word [r15 + r14*2], 0
cmp eax, 0xb3644667
ja 0x1401d3c80
mov eax, 0x8d683a27
nop word [rax + rax]
mov ecx, dword [0x1415a7a54]
add ecx, dword [0x1415a7a50]
imul rcx, rax
shr rcx, 0x3f
not ecx
and ecx, 0x66ab722f
xor ecx, 0xc36237c8
cmp ecx, 0x7dd21aaa
jb 0x1401d3cc0
nop word [rax + rax]
mov eax, dword [0x1415a7a58]
and eax, dword [0x1415a7a5c]
add eax, 0xa2efe28d
xor eax, 0x3b0a6a45
imul eax, eax, 0xba139c48
cmp eax, 0xd46df525
ja 0x1401d3cf0
cmp rbx, rdi
je 0x1401d4670
mov qword [rbp + 0x30], rbx
xor eax, eax
test al, al
jne 0x1401d3d22
mov rbx, qword [r12 + 0x50]
mov rsi, qword [r12 + 0x58]
mov qword [r12 + 0x58], 0
test rsi, rsi
je 0x1401d3dd9
xor edi, edi
xor r14d, r14d
mov eax, dword [0x1415a7ac0]
mov ecx, dword [0x1415a7ac4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0x6bd87484
or eax, 0x7e2ff9ef
cmp eax, 0xdec4602d
je 0x1401d3d47
mov rax, r14
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1401d3d99
add rax, rbx
mov r8, qword [rax + 8]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call fcn.14020ae70
add rsp, 0x20
inc r14
test dil, dil
jne 0x1401d3d9c
nop word cs:[rax + rax]
mov eax, dword [0x1415a7ac8]
add eax, dword [0x1415a7acc]
imul eax, eax, 0xbefa2a72
not eax
or eax, 0xd5a5bb0d
cmp eax, 0x72757026
je 0x1401d3db0
cmp r14, rsi
jne 0x1401d3d47
mov rax, qword [rbp + 0x30]
lea r13, [r15 + rax*2]
mov eax, dword [0x1415a7ab8]
mov ecx, dword [0x1415a7abc]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
or ecx, 0x2b002a9d
lea eax, [rcx - 0x3d34b648]
not eax
or eax, 0x2ef1c538
add eax, ecx
add eax, 0xc2cb49b9
cmp eax, 0x6132269e
ja 0x1401d3de1
xor eax, eax
test al, al
jne 0x1401d3e1c
xor eax, eax
test al, al
jne 0x1401d3e22
xor r11d, r11d
movabs r9, 0xd5a091c8bc20f183
xor ecx, ecx
cmp rcx, qword [rbp + 0x30]
je 0x1401d443e
lea rsi, [r15 + rcx*2]
xor r12d, r12d
mov rax, rsi
cmp word [rax], 0
je 0x1401d3ef3
nop word cs:[rax + rax]
mov edx, dword [0x1415a7ad0]
mov r8d, edx
not r8d
or r8d, dword [0x1415a7ad4]
add edx, r8d
inc edx
xor edx, 0x22284921
and edx, 0x66b8db25
imul edx, edx, 0xa6b19f1a
cmp edx, 0xbe237255
ja 0x1401d3e60
add rax, 2
mov edx, r12d
and edx, 1
xor r12, 1
lea r12, [r12 + rdx*2]
nop word cs:[rax + rax]
mov edx, dword [0x1415a7ad8]
imul edx, dword [0x1415a7adc]
add edx, 0x6a319ae2
mov r8d, edx
and r8d, 0xc9ec4c5
xor r8d, 0xc1e8480
and edx, 0xc1e8480
or edx, r8d
cmp edx, 0x28d4869d
ja 0x1401d3eb0
cmp rax, r13
jne 0x1401d3e49
jmp 0x1401d443e
mov eax, dword [0x1415a7ae8]
xor edx, edx
div dword [0x1415a7aec]
mov eax, dword [0x1415a7af0]
xor edx, edx
div dword [str.Z_aI_jO]
xor eax, 0xf4192b1d
mov edx, eax
and edx, 0x83ae7c6f
or eax, 0x83ae7c6f
add eax, edx
xor eax, 0xb50b1a41
cmp eax, 0xc31bc26d
ja 0x1401d3f01
mov r14, r12
sub r14, r9
add r14, rcx
add r14, r9
cmp r14, rcx
jb 0x1401d44f4
mov eax, dword [0x1415a7b08]
mov ecx, dword [0x1415a7b0c]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0xc27972ae
or ecx, 0x44266ba0
add ecx, 0x785a9494
cmp ecx, 0x14f8d5ac
jb 0x1401d3f44
cmp r14, qword [rbp + 0x30]
ja 0x1401cfd0a
lea rax, [rsi + r12*2]
mov rcx, rsi
cmp rcx, rax
je 0x1401d443e
nop dword [rax]
mov edx, dword [0x1415a7b18]
mov r8d, dword [0x1415a7b1c]
mov r9d, edx
xor r9d, r8d
not r8d
and r8d, edx
add r8d, r8d
sub r8d, r9d
mov edx, r8d
xor edx, 0x7fe4a3a6
xor r8d, 0x2f642728
add r8d, edx
and edx, 0xaf7f7b71
sub r8d, edx
mov edx, r8d
and edx, 0x711553c3
add edx, edx
sub r8d, edx
cmp r8d, 0xacaddf29
je 0x1401d3f90
movzx edx, word [rcx]
add rcx, 2
nop dword [rax]
mov r9d, dword [0x1415a7b20]
mov r8d, dword [0x1415a7b24]
mov r10d, r9d
xor r10d, r8d
not r10d
and r10d, r8d
add r10d, r10d
sub r8d, r10d
add r8d, r9d
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0x1ec0f62f
and r9d, 0xe13f09d0
imul r9d, r10d
mov r10d, r8d
and r10d, 0xe13f09d0
or r8d, 0xe13f09d0
imul r8d, r10d
add r8d, r9d
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0xbb59950
and r9d, 0x44a66a5
imul r9d, r10d
mov r10d, r8d
and r10d, 0x44a66a0
or r8d, 0x44a66a5
imul r8d, r10d
add r8d, r9d
or r8d, 0xf3a84127
cmp r8d, 0x2b73aa16
jb 0x1401d3ff0
cmp dx, 0x3d
jne 0x1401d3f83
mov qword [rbp + 0x48], r11
mov eax, dword [0x1415a7b28]
mov ecx, dword [0x1415a7b2c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0x3d97cc48
xor eax, 0x32809b9a
cmp eax, 0xef6e5464
mov rdi, rsi
ja 0x1401d4124
mov eax, dword [0x1415a7b30]
xor edx, edx
div dword [0x1415a7b34]
and eax, 0xb54e7866
lea ecx, [rax - 0x13e56b07]
not ecx
or ecx, 0x75a0a062
lea esi, [rax + rcx]
add esi, 0xec1a94fa
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rdi
mov r8, r12
call fcn.14020d000
add rsp, 0x20
cmp esi, 0xa7693abf
jbe 0x1401d413d
sub rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov rdx, rdi
mov r8, r12
call fcn.14020d000
add rsp, 0x20
jmp 0x1401d40db
mov rax, qword [rbp + 0x58]
mov rax, qword [rax]
mov rdi, qword [rbp + 0x88]
mov r11, qword [rbp + 0x48]
movabs r9, 0xd5a091c8bc20f183
mov ecx, dword [0x1415a7b38]
xor ecx, dword [0x1415a7b3c]
mov edx, ecx
not edx
or edx, 0x502020
or ecx, 0x1208004
and ecx, edx
or ecx, 0xfe8f5fdb
cmp ecx, 0x2d6f2b70
je 0x1401d4159
cmp r11, rax
jne 0x1401d4272
mov eax, dword [0x1415a7b40]
mov ecx, dword [0x1415a7b44]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
xor ecx, 0xb1a8363f
xor eax, 0x4e0380c0
and eax, 0x5e0ba6c5
mov edx, ecx
and edx, 0xa1f4593a
or edx, eax
xor edx, 0xf0b2a47c
and ecx, 0xaeb902b9
or ecx, edx
mov eax, ecx
xor eax, 0x3443c50e
add eax, ecx
and ecx, 0xcbbc3af1
sub eax, ecx
cmp eax, 0x8fb2c15b
jae 0x1401d41f7
sub rsp, 0x20
mov rcx, qword [rbp + 0x58]
call fcn.1401d8ea0
add rsp, 0x20
mov rbx, qword [rbp + 0x58]
mov eax, dword [0x1415a7b48]
xor eax, dword [0x1415a7b4c]
or eax, 0x557ddb23
mov ecx, eax
xor ecx, 0xeb5b7ab0
and ecx, eax
mov eax, ecx
and eax, 0x2026a547
xor ecx, 0xe07ead67
lea esi, [rcx + rax*2]
sub rsp, 0x20
mov rcx, rbx
call fcn.14020da00
add rsp, 0x20
cmp esi, 0xbaaab084
je 0x1401d41fb
mov r11, qword [rbp + 0x48]
movabs r9, 0xd5a091c8bc20f183
mov eax, dword [0x1415a7b50]
sub eax, dword [0x1415a7b54]
and eax, 0x903c04c4
xor eax, 0x90020604
or eax, 0x67c1e012
cmp eax, 0xf57daba1
je 0x1401d424c
mov rbx, qword [rdi + 0x50]
mov rax, r11
shl rax, 5
mov rcx, qword [rbp - 0x28]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbx + rax + 0x10], xmm1
movups xmmword [rbx + rax], xmm0
inc r11
mov qword [rdi + 0x58], r11
mov eax, r14d
and eax, 1
xor r14, 1
lea rcx, [r14 + rax*2]
cmp rcx, qword [rbp + 0x30]
jbe 0x1401d3e35
ud2
xor eax, eax
test al, al
je 0x1401d4313
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov r12, qword [rbp + 0x88]
nop word [rax + rax]
mov eax, dword [str.iJ_]
mov ecx, dword [0x1415a7a0c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0x6bf66a8c
add ecx, ecx
neg ecx
lea esi, [rax + rcx]
add esi, 0x6bf66a8c
mov eax, esi
and eax, 0x1c4250f6
add eax, eax
sub esi, eax
add esi, 0x5c4250f6
or esi, 0xdae5b79a
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
cmp esi, 0xbcb933c7
jb 0x1401d4320
nop word [rax + rax]
mov eax, dword [0x1415a7a10]
mov ecx, dword [0x1415a7a14]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0x9be05b1
and ecx, 0xebc2c92a
cmp ecx, 0xd3389f5a
ja 0x1401d4380
nop dword [rax]
mov eax, dword [0x1415a7a18]
mov ecx, dword [0x1415a7a1c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0x1ef47038
mov ecx, eax
not ecx
or ecx, 0xb37da4c
add eax, ecx
inc eax
imul rax, rax, 0x4cfe39e1
shr rax, 0x3d
cmp eax, 0xa9df6e8c
ja 0x1401d43b0
mov eax, dword [0x1415a7a20]
mov ecx, dword [0x1415a7a24]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
and eax, 0x5187b17b
or ecx, 0x5187b17b
add ecx, eax
mov eax, ecx
and eax, 0x5c8bf552
add eax, eax
sub ecx, eax
add ecx, 0x5c8bf552
mov eax, 0xc72d43b9
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xbbca4d8d
jbe 0x1401d4566
jmp 0x1401d458a
mov rbx, qword [0x1415acb98]
mov eax, dword [0x1415a7af8]
xor edx, edx
div dword [0x1415a7afc]
mov ecx, eax
xor ecx, 0x286e8ca8
add ecx, eax
and eax, 0xd7917357
sub ecx, eax
imul rax, rcx, 0x388a3df9
shr rax, 0x3d
imul eax, eax, 0x51005d7c
cmp eax, 0x2f94a001
jne 0x1401d4491
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call fcn.14020ae70
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13, qword [rbp + 0x70]
mov r12, qword [rbp + 0x88]
mov eax, dword [0x1415a7b00]
xor edx, edx
div dword [0x1415a7b04]
imul edi, eax, 0x95d22689
or edi, 0xae2751d4
add edi, 0xa8ff2ca4
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call rsi
add rsp, 0x20
cmp edi, 0xa8fa70a5
movabs rdi, 0x8000000000000000
jae 0x1401d44a3
jmp 0x1401d49e0
xor eax, eax
test al, al
je 0x1401d4503
jmp 0x1401d452f
xor eax, eax
test al, al
je 0x1401d4e24
jmp 0x1401d4e5a
mov eax, dword [0x1415a79d8]
mov ecx, dword [0x1415a79dc]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0x7309d5fb
add eax, 0x944a2b11
or eax, 0x2ce01a3a
ud2
ud2
mov eax, dword [0x1415a7a28]
and eax, dword [0x1415a7a2c]
and eax, 0x11542408
xor eax, 0x64e7c4b9
mov rbx, qword [0x1415acb98]
cmp eax, 0xf450f9f
jae 0x1401d4593
mov rax, qword [0x1415acb98]
jmp 0x1401d4566
mov eax, dword [0x1415a7a30]
xor edx, edx
div dword [0x1415a7a34]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0xf7fd3679
mov r8d, edx
and r8d, 0x22b03227
and ecx, 0x802c980
imul ecx, r8d
and edx, 0xdd4fcdd8
or eax, 0xfffffff9
imul eax, edx
add eax, ecx
add eax, 0x2b39fea9
cmp eax, 0xbf8d62af
ja 0x1401d4653
mov eax, dword [0x1415a7a38]
mov ecx, dword [0x1415a7a3c]
not eax
not ecx
and ecx, eax
not ecx
shr ecx, 2
imul rax, rcx, 0x48211c81
shr rax, 0x36
mov ecx, eax
or ecx, 0x6185f73
not eax
or eax, 0xf9e7a08c
and eax, ecx
mov esi, eax
not esi
mov ecx, esi
and ecx, 0xd9e50082
and eax, 0x2101c7d
imul eax, ecx
mov ecx, esi
and ecx, 0x2002a07d
or esi, 0x2212bc7d
imul esi, ecx
add esi, eax
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x195327c6
ja 0x1401d4670
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401d45db
mov eax, dword [0x1415a7a60]
xor edx, edx
div dword [0x1415a7a64]
mov ecx, eax
xor ecx, 0xe6b53409
xor eax, 0x10000860
and eax, 0xd2101869
mov edx, ecx
and edx, 0x2defe796
imul edx, eax
mov eax, ecx
and eax, 0xd2101869
or ecx, 0xd2101869
imul ecx, eax
add ecx, edx
or ecx, 0x40a4d53f
cmp ecx, 0xff77dbba
ja 0x1401d4670
mov rbx, qword [r12 + 0x50]
mov eax, dword [str.Ui]
mov ecx, dword [0x1415a7a6c]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0x1f3538f4
mov eax, ecx
xor eax, 0x573b63b7
or ecx, 0xa8c49c48
and ecx, eax
imul rax, rcx, 0x541f2605
shr rax, 0x3d
cmp eax, 0x80079f0e
ja 0x1401d46c0
mov rsi, qword [r12 + 0x58]
test rsi, rsi
je 0x1401d4810
xor edi, edi
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7a70]
mov ecx, dword [0x1415a7a74]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0x37bafbb
mov edx, eax
and edx, 0x845044
imul edx, ecx
mov ecx, eax
and ecx, 0x37bafbb
or eax, 0x37bafbb
imul eax, ecx
add eax, edx
or eax, 0xfc6a98e7
cmp eax, 0x54510cf
je 0x1401d4720
mov rax, rdi
shl rax, 5
cmp qword [rbx + rax], 0
je 0x1401d47c3
add rax, rbx
mov r8, qword [rax + 8]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call r14
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415a7a78]
xor eax, dword [0x1415a7a7c]
cmp eax, 0x2a529a67
je 0x1401d47b0
inc rdi
nop word cs:[rax + rax]
mov eax, dword [0x1415a7a80]
xor edx, edx
div dword [0x1415a7a84]
mov ecx, eax
not ecx
or ecx, 0x5cfbc236
and eax, 0x20003cc0
xor ecx, 0x437c410d
lea eax, [rcx + rax*2]
and eax, 0x738fffeb
xor eax, 0x22238449
cmp eax, 0x1f2de4eb
je 0x1401d47d0
cmp rdi, rsi
jne 0x1401d4720
mov rsi, qword [rbp + 0x58]
mov rax, qword [rsi]
nop word [rax + rax]
mov ecx, dword [0x1415a7a88]
sub ecx, dword [0x1415a7a8c]
imul ecx, ecx, 0xed5f9557
and ecx, 0x3582ba51
cmp ecx, 0xc0fac335
ja 0x1401d4820
movabs rdi, 0x8000000000000000
nop word [rax + rax]
mov ecx, dword [0x1415a7a90]
sub ecx, dword [0x1415a7a94]
not ecx
or ecx, 0xedaf4274
mov edx, ecx
not edx
and ecx, 0x98d8d989
mov r8d, edx
and r8d, 0x2002402
imul r8d, ecx
mov ecx, edx
and ecx, 0x10509989
or edx, 0x98d8d989
imul edx, ecx
add edx, r8d
cmp edx, 0xedb03533
je 0x1401d4850
test rax, rax
je 0x1401d48ef
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.14020ae70
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415a7a98]
imul eax, dword [0x1415a7a9c]
or eax, 0x90d44000
mov ecx, eax
and ecx, 0xb0d64856
and eax, 0x10020844
xor ecx, 0x5822ab44
lea eax, [rcx + rax*2]
cmp eax, 0x62aff46a
jb 0x1401d48c0
mov qword [rsi], 0
mov eax, dword [0x1415a7aa0]
sub eax, dword [0x1415a7aa4]
mov ecx, 0xafd23479
imul rcx, rax
shr rcx, 0x3f
lea eax, [rcx - 0x5d3b3fde]
not ecx
and ecx, 0x5c030119
imul ecx, ecx, 0x2ec4
imul eax, eax, 0xfec7efff
add eax, ecx
cmp eax, 0x313941e5
jb 0x1401d4992
mov ecx, dword [0x1415a7aa8]
mov eax, dword [0x1415a7aac]
mov edx, ecx
not edx
and ecx, eax
not eax
or eax, edx
not eax
or eax, ecx
mov ecx, eax
or ecx, 0x646c9fe9
mov edx, eax
not edx
and edx, 0x1a114000
mov r8d, ecx
and r8d, 0x21e638be
imul r8d, edx
and ecx, 0x1e19c741
or eax, 0x3e7ddfe9
imul eax, ecx
add eax, r8d
or eax, 0xc1a86217
mov qword [r12 + 0x50], 8
cmp eax, 0x6cbbfe72
jae 0x1401d499d
mov qword [r12 + 0x50], 8
jmp 0x1401d4932
mov eax, dword [0x1415a7ab0]
sub eax, dword [0x1415a7ab4]
or eax, 0x1b0a196b
and eax, 0xdb8a39fb
add eax, 0x1eecb5c7
cmp eax, 0x61af5f9b
jb 0x1401d49ce
mov qword [r12 + 0x58], 0
xor eax, eax
test al, al
je 0x1401d49e0
mov qword [r12 + 0x58], 0
jmp 0x1401d49bf
mov eax, dword [0x1415a7b58]
and eax, dword [0x1415a7b5c]
or eax, 0x15446a09
add eax, 0x9a4af468
and eax, 0x3ffc23d0
cmp eax, 0x5e884439
ja 0x1401d49e0
lea r14, [r12 + 0x98]
movzx eax, byte [rbp - 0x20]
test al, al
movzx r8d, byte [rbp + 0x78]
jle 0x1401d4a52
cmp al, 2
mov r12, qword [rbp - 0x60]
jge 0x1401d4a61
nop
mov eax, dword [0x1415a7b68]
add eax, dword [0x1415a7b6c]
imul eax, eax, 0x835b9580
add eax, 0xe51510a
mov ecx, eax
xor ecx, 0x31265ea8
or eax, 0xced9a102
and eax, ecx
cmp eax, 0x259e6e11
ja 0x1401d4a20
mov r10b, 1
jmp 0x1401d4a94
mov r12, qword [rbp - 0x60]
jne 0x1401d4d15
xor r10d, r10d
jmp 0x1401d4a94
jne 0x1401d4d15
mov eax, dword [0x1415a7b70]
xor ecx, ecx
xor edx, edx
div dword [0x1415a7b74]
nop word [rax + rax]
test cl, cl
jne 0x1401d4a80
cmp qword [r14], rdi
sete r10b
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401d4a90
mov rax, qword [rbp + 0x88]
lea r11, [rax + 0xb8]
cmp r8b, 1
jg 0x1401d4ac0
je 0x1401d4b83
xor eax, eax
jmp 0x1401d4b78
mov eax, dword [0x1415a7b78]
mov ecx, dword [0x1415a7b7c]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0xfbf6305a
mov eax, ecx
not eax
and eax, 0xb906d592
mov edx, ecx
and edx, 0x46f92a6d
imul edx, eax
mov eax, ecx
and eax, 0xb906d592
or ecx, 0xb906d592
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0xb3a0d3f3
cmp eax, 0xd8532306
ja 0x1401d4ac0
mov rcx, qword [r11]
mov eax, dword [0x1415a7b80]
imul eax, dword [0x1415a7b84]
shr eax, 1
imul rdx, rax, 0x229bea33
shr rdx, 0x3c
or edx, 0xe4ae9cbc
cmp rcx, rdi
sete al
cmp edx, 0xae02dd09
jb 0x1401d4b10
nop
mov ecx, dword [0x1415a7b88]
mov edx, dword [0x1415a7b8c]
not ecx
not edx
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0x50044403
xor edx, 0xac08105c
or edx, ecx
or edx, 0x3f3aba0
add edx, 0xd77894e
cmp edx, 0x1a14119b
jb 0x1401d4b40
or al, r10b
cmp al, 1
jne 0x1401d59f5
mov qword [rbp + 0x30], r11
mov dword [rbp + 0x48], r10d
nop dword [rax + rax]
mov eax, dword [0x1415a7b90]
xor eax, dword [0x1415a7b94]
add eax, 0x4420a7b8
mov ecx, eax
xor ecx, 0xf41582b4
and ecx, eax
xor ecx, 0x26a1f60c
cmp ecx, 0xb822c4a7
je 0x1401d4b90
mov rsi, qword [rbp + 0x80]
shr esi, 1
mov eax, dword [0x1415a7b98]
or eax, dword [0x1415a7b9c]
lea r15, [rsi*2 + 2]
imul eax, eax, 0x2816ff85
mov ecx, eax
xor ecx, 0x512da639
or eax, 0xaed259c6
and eax, ecx
add eax, 0x40d1bf22
cmp eax, 0xad1db270
jbe 0x1401d4c10
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call fcn.14020ae90
add rsp, 0x20
mov qword [rbp + 0x50], rsi
lea rax, [rsi + 1]
mov qword [rbp + 0x38], rax
nop dword [rax]
mov eax, dword [0x1415a7ba0]
or eax, dword [0x1415a7ba4]
imul edi, eax, 0x92e11f55
add edi, 0x797baf6d
mov eax, edi
not eax
and eax, 0x15b97611
mov ecx, edi
and ecx, 0xea4689ee
imul ecx, eax
mov eax, edi
and eax, 0x15b97611
or edi, 0x15b97611
imul edi, eax
add edi, ecx
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call fcn.14020ae90
add rsp, 0x20
cmp edi, 0x27ef81e6
jb 0x1401d4c20
mov qword [rbp + 0x58], r14
mov rbx, rax
xor eax, eax
mov r14, qword [rbp + 0x90]
nop
test al, al
jne 0x1401d4c90
test rbx, rbx
je 0x1401d4d49
nop dword [rax]
mov eax, dword [0x1415a7bc0]
xor edx, edx
div dword [0x1415a7bc4]
and eax, 0xda029170
lea ecx, [rax - 0x73a083cd]
mov edx, ecx
and edx, 0x3c3c4482
xor ecx, 0xc2c3bb71
add eax, ecx
add eax, 0x8c5f7c33
sub eax, edx
cmp eax, 0x12f20608
je 0x1401d4ca0
mov eax, dword [0x1415a7bc8]
and eax, dword [0x1415a7bcc]
imul eax, eax, 0x8495faa7
mov ecx, eax
xor ecx, 0xc0d40215
and ecx, eax
or ecx, 0x3d2bdde0
cmp ecx, 0xadf976cb
mov r15, qword [rbp + 0x80]
mov rsi, qword [rbp + 0x60]
jne 0x1401d4e5e
jmp 0x1401d4eab
mov eax, dword [0x1415a7b60]
imul eax, dword [0x1415a7b64]
and eax, 0x8c696c57
mov ecx, eax
or ecx, 0x1299c11
not eax
or eax, 0xee440108
and eax, ecx
or eax, 0x109262e6
cmp eax, 0x15fa9f14
jb 0x1401d4d15
jmp 0x1401cfd0a
mov eax, dword [0x1415a7ba8]
xor edx, edx
div dword [0x1415a7bac]
mov ecx, eax
xor ecx, 0x10e28401
xor eax, 0xae1530f6
or ecx, 0x65095b7c
and ecx, eax
mov eax, ecx
not eax
or ecx, 0x81e7dfaf
or eax, 0x7e182050
and eax, ecx
add eax, 0x55d609fd
jae 0x1401d4d86
ud2
mov eax, 0xa1cd8aa1
mov ecx, dword [0x1415a7bb0]
mov edx, dword [0x1415a7bb4]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xb2161405
and edx, 0x4de9ebfa
imul edx, r8d
mov r8d, ecx
and r8d, 0x4de9ebfa
or ecx, 0x4de9ebfa
imul ecx, r8d
add ecx, edx
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xe120edfc
ud2
mov eax, dword [0x1415a7b10]
or eax, dword [0x1415a7b14]
mov ecx, eax
xor ecx, 0x73252bf1
and eax, 0xcdad40e
add eax, eax
sub eax, ecx
add eax, 0x1584ae76
not eax
or eax, 0xa38c8cc5
ud2
ud2
mov eax, dword [0x1415a7bd0]
and eax, dword [0x1415a7bd4]
imul edi, eax, 0xd174639a
xor edi, 0xd9e04812
or edi, 0x22071769
mov qword [r12], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r14
mov rdx, rsi
mov r8, rbx
mov r9, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rsp, 0x30
cmp edi, 0x3b053730
jae 0x1401d4ed3
mov qword [r12], 0
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, r14
mov rdx, rsi
mov r8, rbx
mov r9, r15
call fcn.14020d950
add rsp, 0x30
jmp 0x1401d4e5e
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1401d4ee0
test eax, eax
movabs rdi, 0x8000000000000000
mov r14, qword [rbp + 0x58]
je 0x1401d4f79
nop word [rax + rax]
mov eax, dword [0x1415a7bd8]
mov ecx, dword [0x1415a7bdc]
not ecx
add eax, ecx
add eax, 0x40b20b80
mov ecx, eax
not ecx
or ecx, 0x5f08614d
and eax, 0x919e80
xor ecx, 0xf766413a
lea eax, [rcx + rax*2]
cmp eax, 0x374ccc33
je 0x1401d4f00
mov r10, qword [rbp + 0x80]
cmp qword [r12], r10
jne 0x1401d4f90
mov eax, dword [0x1415a7be0]
xor eax, dword [0x1415a7be4]
shr eax, 4
imul rax, rax, 0x1074279b
shr rax, 0x38
add eax, 0xb012beff
or eax, 0xfbdb6f62
cmp eax, 0x27467faa
mov rdx, qword [rbp + 0x50]
jae 0x1401d50fc
jmp 0x1401d5137
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415a7c28]
sub eax, dword [0x1415a7c2c]
mov ecx, eax
xor ecx, 0x2a05000
xor eax, 0x5d43adf5
mov edx, eax
and edx, 0xbc1f83af
and ecx, 0x43e07c50
imul ecx, edx
mov edx, eax
and edx, 0x43e07c50
or eax, 0x43e07c50
imul eax, edx
add eax, ecx
xor eax, 0xe45a9f77
cmp eax, 0x4f16a576
ja 0x1401d4f90
mov eax, dword [0x1415a7c30]
and eax, dword [0x1415a7c34]
imul eax, eax, 0x37a2889
mov ecx, eax
xor ecx, 0x5bb38578
or eax, 0xa44c7a87
and eax, ecx
cmp eax, 0xf6c84e30
jne 0x1401d5020
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415a7c38]
mov ecx, dword [0x1415a7c3c]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0x80cfcd5a
mov eax, ecx
not eax
and eax, 0x2da2b0a2
mov edx, ecx
and edx, 0xd25d4f5d
imul edx, eax
mov eax, ecx
and eax, 0x2da2b0a2
or ecx, 0x2da2b0a2
imul ecx, eax
lea esi, [rcx + rdx]
add esi, 0x3bb11bf9
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call fcn.14020ae70
add rsp, 0x20
cmp esi, 0x507da9c6
jb 0x1401d5020
mov rax, qword [r14]
test rax, rax
js 0x1401d5097
jne 0x1401d50a0
jmp 0x1401d59a5
cmp rax, rdi
je 0x1401d59a5
mov rax, qword [rbp + 0x88]
mov rsi, qword [rax + 0xa0]
mov eax, dword [0x1415a7c40]
sub eax, dword [0x1415a7c44]
add eax, 0xfb6f7cf2
mov ecx, eax
not ecx
and ecx, 0x7e36bbe7
mov edx, eax
and edx, 0x81c94418
imul edx, ecx
mov ecx, eax
and ecx, 0x7e36bbe7
or eax, 0x7e36bbe7
imul eax, ecx
add eax, edx
imul eax, eax, 0x8202f53c
cmp eax, 0x613a850
jae 0x1401d58a4
jmp 0x1401d5939
mov eax, dword [str.b_e_n]
xor eax, dword [0x1415a7bec]
mov ecx, 0xbcbae19f
imul rcx, rax
shr rcx, 0x3f
not ecx
and ecx, 0xa2038241
or ecx, 0x46c3014
xor ecx, 0xb16c3ba6
mov word [rbx + rdx*2], 0
cmp ecx, 0x42480f6a
jbe 0x1401d513f
mov word [rbx + rdx*2], 0
jmp 0x1401d50fc
mov eax, dword [0x1415a7bf0]
xor edx, edx
div dword [0x1415a7bf4]
nop dword [rax]
mov eax, dword [0x1415a7bf8]
and eax, dword [0x1415a7bfc]
or eax, 0xaa311180
and eax, 0xbab313e8
imul rax, rax, 0x254c4199
shr rax, 0x3c
cmp eax, 0xddf8f267
ja 0x1401d5150
nop dword [rax + rax]
mov eax, dword [str.:4_h]
mov ecx, dword [0x1415a7c04]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x64761fe0
imul rax, rax, 0xdd3297
shr rax, 0x37
or eax, 0xf0ce2fe2
cmp eax, 0xe59eb657
jb 0x1401d5180
and r10d, 0xfffffffe
neg r10
xor ecx, ecx
xor edi, edi
nop word cs:[rax + rax]
cmp word [rbx + rdi*2], 0
je 0x1401d5269
mov eax, dword [0x1415a7c08]
xor edx, edx
div dword [0x1415a7c0c]
mov eax, dword [0x1415a7c10]
mov edx, dword [0x1415a7c14]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
add eax, 0x2a60407e
or eax, 0xfb98bf21
imul rax, rax, 0x1ae1a5e7
shr rax, 0x3c
cmp eax, 0x70d32437
je 0x1401d51f9
nop word cs:[rax + rax]
test cl, cl
jne 0x1401d5250
add r10, 2
inc rdi
cmp r10, 2
jne 0x1401d51e0
mov rdi, qword [rbp + 0x38]
mov eax, dword [0x1415a7c18]
mov ecx, dword [0x1415a7c1c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0x16a677f1
xor eax, 0x16a677f1
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
and ecx, 0x8a2f600e
mov edx, eax
and edx, 0x75d09ff1
imul edx, ecx
mov ecx, eax
and ecx, 0x8a2f600e
or eax, 0x8a2f600e
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x63cb3834
mov edx, eax
and edx, 0x9c34c7ca
imul edx, ecx
mov ecx, eax
and ecx, 0x63cb3834
or eax, 0x63cb3834
imul eax, ecx
add eax, edx
cmp eax, 0x85b86089
jbe 0x1401d5319
sub rsp, 0x20
mov rsi, qword [rbp - 8]
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.14020d000
add rsp, 0x20
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
sub rsp, 0x20
movzx ecx, byte [rbp + 0x78]
mov r9, qword [rbp + 0x30]
call fcn.1401d9360
add rsp, 0x20
mov r12, qword [rbp - 8]
movzx r14d, byte [rbp + 0x78]
mov r15, qword [rbp + 0x30]
nop word cs:[rax + rax]
mov r13d, dword [0x1415a7c20]
and r13d, dword [0x1415a7c24]
mov eax, r13d
xor eax, 0x12da3281
and r13d, 0x6d25cd7e
add r13d, r13d
sub r13d, eax
and r13d, 0xf9c908f6
mov eax, 0x914c7d85
imul r13, rax
shr r13, 0x3d
sub rsp, 0x20
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call fcn.14013f9c0
add rsp, 0x20
mov rsi, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
sub rsp, 0x20
mov ecx, r14d
mov rdx, rsi
mov r9, r15
call fcn.14020da20
add rsp, 0x20
cmp r13d, 0xffd2f6cc
ja 0x1401d5330
cmp byte [rbp + 0x48], 0
je 0x1401d546a
mov eax, dword [0x1415a7c60]
sub eax, dword [0x1415a7c64]
mov ecx, eax
not ecx
or ecx, 0x83d18441
and ecx, 0x97d1c4c3
and eax, 0x1204
or eax, ecx
cmp eax, 0x5c1eef67
mov r13, qword [rbp + 0x70]
mov rdx, qword [rbp - 0x48]
movabs r8, 0x8000000000000000
mov r9, qword [rbp - 8]
jne 0x1401d5400
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
mov r10, qword [rbp + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x1415a7c68]
add eax, dword [0x1415a7c6c]
mov ecx, eax
and ecx, 0xeef34930
or eax, 0xeef34930
add eax, ecx
mov ecx, eax
and ecx, 0x7fae928c
add ecx, ecx
sub eax, ecx
add eax, 0x1c0c8de4
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
cmp eax, 0xcc79ebd8
ja 0x1401d5410
mov rax, qword [r10]
test rax, rax
js 0x1401d55c4
jne 0x1401d55cd
jmp 0x1401d5729
mov rax, qword [rbp - 8]
mov rax, qword [rax]
mov r13, qword [rbp + 0x70]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a7ca8]
sub ecx, dword [0x1415a7cac]
and ecx, 0x9a4f1430
imul ecx, ecx, 0x80bb691b
add ecx, 0xa7c7b0ff
cmp ecx, 0xa16f04a1
jb 0x1401d5480
nop word cs:[rax + rax]
mov ecx, dword [str.P_n48]
sub ecx, dword [0x1415a7cb4]
mov edx, ecx
not edx
and edx, 0x5cd8d09e
mov r8d, ecx
and r8d, 0xa3272f61
imul r8d, edx
mov edx, ecx
and edx, 0x5cd8d09e
or ecx, 0x5cd8d09e
imul ecx, edx
add ecx, r8d
mov edx, ecx
xor edx, 0x50200b00
xor ecx, 0x8717f0fc
or edx, 0xa9da943e
and edx, ecx
cmp edx, 0xe8174f66
ja 0x1401d54b0
test rax, rax
je 0x1401d5804
mov eax, dword [0x1415a7cb8]
xor eax, dword [0x1415a7cbc]
or eax, 0x1ba97feb
add eax, 0x25005783
mov ecx, eax
and ecx, 0x44b280d6
xor eax, 0xdcb2a0d6
lea eax, [rax + rcx*2]
cmp eax, 0x9d7044dd
jae 0x1401d5543
mov rax, qword [0x1415acb98]
mov eax, dword [0x1415a7cc0]
sub eax, dword [0x1415a7cc4]
mov ecx, eax
xor ecx, 0xe1182c
xor eax, 0x8184300
and eax, 0x5a1c6702
and ecx, 0xa5e398fd
add eax, ecx
add eax, 0x9fe0af17
mov rcx, qword [0x1415acb98]
cmp eax, 0xdf60fc94
ja 0x1401d5543
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call fcn.14020ae70
add rsp, 0x20
mov eax, dword [0x1415a7cc8]
sub eax, dword [0x1415a7ccc]
add eax, 0x5b43b77
imul rcx, rax, 0x208413f3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0xea8cc40
cmp eax, 0x686c0c41
je 0x1401d558e
jmp 0x1401d5804
cmp rax, r8
je 0x1401d5729
mov eax, dword [0x1415a7c70]
add eax, dword [0x1415a7c74]
mov ecx, eax
and ecx, 0x1e1b8f89
add ecx, ecx
sub eax, ecx
add eax, 0x1e1b8f89
mov ecx, eax
not ecx
or ecx, 0x6b075bfb
or eax, 0x94f8a404
and eax, ecx
cmp eax, 0xc325ec9c
je 0x1401d55cd
mov eax, dword [0x1415a7c78]
mov ecx, dword [0x1415a7c7c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
and eax, 0xf47a5e0e
mov edx, eax
not edx
and edx, 0x56135671
mov r8d, ecx
and r8d, 0x2068080e
imul r8d, edx
and ecx, 0x54125600
or eax, 0x56135671
imul eax, ecx
add eax, r8d
or eax, 0x8bf4554a
cmp eax, 0x1771e4fd
jae 0x1401d567b
mov rax, qword [rbp + 0x88]
mov r8, qword [rax + 0xa0]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [rbp + 0x88]
mov eax, dword [0x1415a7c80]
mov ecx, dword [0x1415a7c84]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x954aef5f
and eax, 0x6ab510a0
or eax, r9d
or edx, r8d
and r8d, 0x954aef5f
and ecx, 0x6ab510a0
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
imul edi, edx, 0x870ea10e
add edi, 0xaa8ae0b0
mov r8, qword [r14 + 0xa0]
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
call rsi
add rsp, 0x20
cmp edi, 0xeb04980d
ja 0x1401d5689
mov rdx, qword [rbp - 0x48]
mov r10, qword [rbp + 0x58]
mov eax, dword [0x1415a7c88]
or eax, dword [str._7_]
imul rax, rax, 0x8d2d4b7
shr rax, 0x3b
mov ecx, eax
xor ecx, 0x2b605397
add ecx, eax
cmp ecx, 0x3d67665
je 0x1401d5700
mov eax, dword [0x1415a7c90]
or eax, dword [0x1415a7c94]
and eax, 0xf61f4a90
xor eax, 0x290cd96f
imul rax, rax, 0x47012f7
shr rax, 0x3a
cmp eax, 0xcc73ebe5
jne 0x1401d5770
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmmword [r10], xmm0
nop word cs:[rax + rax]
mov eax, dword [str.8VU_]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415a7c98]
xor ecx, eax
add ecx, 0x18be86a5
mov eax, ecx
xor eax, 0x485d8e53
xor ecx, 0x2bdb84cd
and ecx, eax
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmmword [r10], xmm0
cmp ecx, 0x38058fc3
jb 0x1401d5770
nop word cs:[rax + rax]
mov eax, dword [0x1415a7ca0]
mov ecx, dword [0x1415a7ca4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0x20c20
and eax, 0x20420
add eax, eax
sub ecx, eax
cmp ecx, 0x82d3bfa5
je 0x1401d57c0
mov rsi, qword [0x1415acb98]
mov eax, dword [0x1415a7cd0]
xor eax, dword [0x1415a7cd4]
add eax, 0x33eb5710
mov ecx, eax
not ecx
and ecx, 0x1b4a6f17
mov edx, eax
and edx, 0xe4b590e8
imul edx, ecx
mov ecx, eax
and ecx, 0x1b4a6f17
or eax, 0x1b4a6f17
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x258b7198
add eax, ecx
inc eax
cmp eax, 0xd35ec9a
jbe 0x1401d5870
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov edi, dword [0x1415a7cd8]
add edi, dword [0x1415a7cdc]
and edi, 0x5dc03549
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.14020ae70
add rsp, 0x20
cmp edi, 0x9aa9ef69
je 0x1401d5870
jmp 0x1401d59f5
mov edi, dword [0x1415a7c48]
mov eax, dword [0x1415a7c4c]
mov ecx, edi
not ecx
and ecx, eax
mov edx, eax
not edx
and edx, edi
imul edx, ecx
mov ecx, edi
and ecx, eax
or edi, eax
imul edi, ecx
add edi, edx
mov eax, edi
not eax
or eax, 0x430488e
and eax, 0x6cbdc9be
mov ecx, edi
and ecx, 0x21201
or ecx, eax
xor ecx, 0xc0823d1c
and edi, 0x280f9020
or edi, ecx
mov eax, edi
not eax
mov ecx, edi
and ecx, 0xc08535a3
and eax, 0x284a8a10
imul eax, ecx
mov ecx, edi
and ecx, 0x2c3ac210
or edi, 0x2c7aca10
imul edi, ecx
add edi, eax
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xdead0f83
jbe 0x1401d5958
mov rcx, qword [0x1415acb98]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401d58a4
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1415a7c54]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x1415a7c50]
xor ecx, eax
mov eax, ecx
and eax, 0xf32870a
xor ecx, 0xf32870a
lea eax, [rcx + rax*2]
or eax, 0x84bbddab
add eax, 0xceea4437
cmp eax, 0x2453fa47
jb 0x1401d5970
mov qword [r14], rdi
nop dword [rax + rax]
mov eax, dword [0x1415a7c58]
xor eax, dword [0x1415a7c5c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x575a4c82
and ecx, 0xa8a5b37d
imul ecx, edx
mov edx, eax
and edx, 0xa8a5b37d
or eax, 0xa8a5b37d
imul eax, edx
add eax, ecx
imul eax, eax, 0x6fd4e34d
add eax, 0x27b70347
cmp eax, 0x7c62dc61
jbe 0x1401d59b0
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1401d5a00
xor eax, eax
mov r12, qword [rbp + 0x88]
mov r14, qword [rbp + 0x40]
movabs rdi, 0x8000000000000000
nop dword [rax + rax]
test al, al
jne 0x1401d5a20
jmp 0x1401cf220
mov eax, dword [0x1415a7d5c]
add eax, dword [0x1415a7d58]
mov ecx, eax
and ecx, 0x5841becc
add ecx, ecx
sub eax, ecx
add eax, 0xd16988ca
or eax, 0x359c216c
cmp eax, 0x7f3b4dee
ja 0x1401d5a30
mov rax, qword [r12 + 0x120]
mov ecx, dword [0x1415a7d60]
mov edx, dword [0x1415a7d64]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
mov edx, ecx
and edx, 0x6d932e8d
add edx, edx
sub ecx, edx
lea edx, [rcx + 0x6d932e8d]
mov r8d, edx
and r8d, 0x76add91d
xor edx, 0x895226e2
add ecx, edx
add ecx, 0x6d932e8d
sub ecx, r8d
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xfe3f5891
and edx, 0x1c0a76e
imul edx, r8d
mov r8d, ecx
and r8d, 0x1c0a76e
or ecx, 0x1c0a76e
imul ecx, r8d
add ecx, edx
cmp ecx, 0x524f0db0
jb 0x1401d5b2f
mov ecx, dword [str.d]
xor ecx, dword [0x1415a7d6c]
imul ecx, ecx, 0xb9504432
or ecx, 0xf946849d
add ecx, 0x4d24ca65
xor edx, edx
mov r8, r13
sub r8, rax
cmovae rdx, r8
mov qword [r12 + 0x128], rdx
cmp ecx, 0xe776910d
jbe 0x1401d5b45
xor ecx, ecx
mov rdx, r13
sub rdx, rax
cmovae rcx, rdx
mov qword [r12 + 0x128], rcx
jmp 0x1401d5af5
mov byte [r12 + 0x154], 1
lea rsp, [rbp + 0x98]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x1415a7d80]
mov ecx, dword [0x1415a7d84]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
or ecx, 0x9f21adac
mov edx, eax
not edx
and edx, 0x60505003
mov r8d, ecx
and r8d, 0x94afabf8
imul r8d, edx
and ecx, 0x6b505407
or eax, 0xff71fdaf
imul eax, ecx
add eax, r8d
mov edi, 0xafcda8a1
imul rdi, rax
shr rdi, 0x3f
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14021c2d0
mov rcx, rsi
xor edx, edx
mov r8, r14
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
cmp edi, 0xc1ecfb97
jbe 0x1401d5c20
sub rsp, 0x20
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14021c2d0
mov rcx, rsi
xor edx, edx
mov r8, r14
mov r9d, 0x105
call qword [sym.imp.psapi.dll_GetModuleFileNameExW]
add rsp, 0x20
jmp 0x1401d5b62
mov eax, dword [0x1415a7d88]
mov ecx, dword [0x1415a7d8c]
add eax, ecx
add eax, 0xae9215f8
imul rax, rax, 0x657fcac5
shr rax, 0x3e
cmp eax, 0xc18ebea7
ja 0x1401d5c20
xor r9d, r9d
xor ecx, ecx
movabs rdi, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1415a7d90]
xor edx, edx
div dword [0x1415a7d94]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xfe8dc49f
and edx, 0x1723b60
imul edx, r8d
mov r8d, eax
and r8d, 0x1723b60
or eax, 0x1723b60
imul eax, r8d
add eax, edx
or eax, 0x792d2916
imul rax, rax, 0x2473be55
shr rax, 0x3c
cmp eax, 0x6a2d0282
je 0x1401d5c60
cmp word [r14 + rcx*2], 0
je 0x1401d5d6c
cmp word [r14 + rcx*2 + 2], 0
je 0x1401d5d69
lea r8, [rcx + 2]
movzx eax, word [r14 + rcx*2 + 4]
nop word cs:[rax + rax]
test r9b, r9b
jne 0x1401d5ce0
test ax, ax
je 0x1401d5d70
nop
mov eax, dword [0x1415a7d98]
xor eax, dword [0x1415a7d9c]
and eax, 0xe602504
imul rdx, rax, 0x5664734d
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
cmp eax, 0xe5c23962
ja 0x1401d5cf0
mov eax, ecx
and eax, 3
or rcx, 3
add rcx, rax
nop dword [rax + rax]
mov eax, dword [str.k__rI__]
mov edx, dword [0x1415a7da4]
add eax, edx
add eax, 0xe9446d1e
xor eax, 0x900101e
add eax, 0x47537172
cmp eax, 0x48fea09b
jb 0x1401d5d30
cmp rcx, 0x105
jne 0x1401d5c60
mov r8d, 0x105
jmp 0x1401d5d93
inc rcx
mov r8, rcx
nop
mov eax, dword [0x1415a7da8]
sub eax, dword [0x1415a7dac]
imul eax, eax, 0x5fb564bc
and eax, 0xeffbfa40
add eax, 0xef36272e
cmp eax, 0x12a48197
jb 0x1401d5d70
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
mov rdx, r14
call fcn.14020d000
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415a7db0]
xor eax, dword [0x1415a7db4]
and eax, 0x1fffffff
add eax, 0xbcfebfff
or eax, 0xefff7bdf
cmp eax, 0xa8f9bc45
jb 0x1401d5db0
mov rax, qword [rbx]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a7db8]
mov edx, dword [0x1415a7dbc]
not ecx
not edx
or edx, ecx
xor edx, 0x4220028a
or edx, 0xa158b954
imul rcx, rdx, 0xa9b1f29
shr rcx, 0x20
sub edx, ecx
shr edx, 1
add edx, ecx
shr edx, 0x1e
cmp edx, 0x8191c5a7
je 0x1401d5de0
test rax, rax
js 0x1401d5e26
jne 0x1401d5e2f
jmp 0x1401d5f65
cmp rax, rdi
je 0x1401d5f65
xor eax, eax
test al, al
jne 0x1401d5e74
mov eax, dword [0x1415a7dc0]
imul eax, dword [0x1415a7dc4]
not eax
and eax, 0x4b6ea437
xor eax, 0xf85d6e5
mov ecx, eax
and ecx, 0xf897260
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x9f997b68
mov rsi, qword [r12 + 0x68]
mov rdi, qword [0x1415acb98]
cmp eax, 0xe9949ce5
jbe 0x1401d5e7d
mov rax, qword [0x1415acb98]
jmp 0x1401d5e35
mov eax, dword [0x1415a7dc8]
mov ecx, dword [0x1415a7dcc]
add eax, ecx
add eax, 0x4765eb07
imul rax, rax, 0x23e696ef
shr rax, 0x3d
cmp eax, 0x3815975f
ja 0x1401d5efa
mov eax, dword [0x1415a7dd0]
xor edx, edx
div dword [0x1415a7dd4]
mov ecx, eax
xor ecx, 0x5ee7faf5
or eax, 0xa118050a
and eax, ecx
mov r14d, eax
not r14d
or r14d, 0x44815081
and eax, 0xa90aa104
and r14d, 0x54b15ccb
or r14d, eax
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0x21d9c6a5
jne 0x1401d5f20
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401d5ea2
mov eax, dword [0x1415a7dd8]
mov ecx, dword [0x1415a7ddc]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and ecx, 0x16105994
mov edx, eax
and edx, 0xe9efa66b
imul edx, ecx
mov ecx, eax
and ecx, 0x16105994
or eax, 0x16105994
imul eax, ecx
add eax, edx
and eax, 0x9b3c1da8
cmp eax, 0xfe671dd6
je 0x1401d5f20
mov rax, qword [rbp - 0x18]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
nop word [rax + rax]
mov eax, dword [0x1415a7de0]
mov ecx, dword [0x1415a7de4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
and eax, 0xc0319008
or eax, 0x2bc667e1
imul eax, eax, 0x319d91af
cmp eax, 0x89d1718
jb 0x1401d5f80
nop dword [rax]
mov ecx, dword [0x1415a7de8]
mov edx, dword [0x1415a7dec]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x8c0f157c
and ecx, 0x73f0ea83
or ecx, r9d
or eax, r8d
and r8d, 0x8c0f157c
and edx, 0x73f0ea83
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
xor ecx, 0xf67555be
xor eax, 0x808a240
and eax, 0xbe0de3d0
mov edx, ecx
and edx, 0x41f21c2f
imul edx, eax
mov eax, ecx
and eax, 0xbe0de3d0
or ecx, 0xbe0de3d0
imul ecx, eax
add ecx, edx
mov eax, ecx
xor eax, 0xd65416b8
or ecx, 0x29abe940
and ecx, eax
cmp ecx, 0x5d23326a
je 0x1401d5fb0
jmp 0x1401d5a30