Function at 0x14001b5d0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov r14, rcx
mov eax, 0xbc1e08b7
nop dword [rax + rax]
mov ecx, dword [0x1415acce8]
mov edx, dword [0x1415accec]
mov r8d, ecx
and r8d, edx
or ecx, edx
add ecx, r8d
mov edx, ecx
not edx
or ecx, 0x10204d28
or edx, 0xefdfb2d7
and edx, ecx
not edx
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x32436b50
je 0x14001b5f0
nop dword [rax + rax]
mov eax, dword [0x1415accf0]
sub eax, dword [0x1415accf4]
mov ecx, eax
not ecx
and ecx, 0x61d476ce
mov edx, eax
and edx, 0x9e2b8931
imul edx, ecx
mov ecx, eax
and ecx, 0x61d476ce
or eax, 0x61d476ce
imul eax, ecx
add eax, edx
xor eax, 0x81645a5b
imul rax, rax, 0x2efe9fe5
shr rax, 0x3d
cmp eax, 0x64c49aeb
je 0x14001b630
mov rax, qword [r14]
nop dword [rax]
mov ecx, dword [0x1415accf8]
imul ecx, dword [0x1415accfc]
add ecx, 0x3dc7fdac
or ecx, 0x40603b10
and ecx, 0x4879bb14
cmp ecx, 0x71eb477b
ja 0x14001b680
test rax, rax
je 0x14001b6f9
nop dword [rax]
mov eax, dword [0x1415acd00]
xor eax, dword [0x1415acd04]
mov ecx, eax
and ecx, 0x2b41f513
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xab41f513
imul rax, rax, 0x25b1e261
shr rax, 0x3c
or eax, 0xb36024d0
cmp eax, 0x15e616ed
je 0x14001b6b0
mov r8, qword [r14 + 8]
mov rcx, qword [0x1415d3918]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [r14 + 0x28]
mov rsi, qword [r14 + 0x30]
test rsi, rsi
je 0x14001b7d0
xor ebx, ebx
jmp 0x14001b71c
inc rbx
cmp rbx, rsi
je 0x14001b7d0
mov eax, dword [0x1415acd08]
xor edx, edx
div dword [0x1415acd0c]
nop word [rax + rax]
mov eax, dword [0x1415acd10]
mov ecx, dword [0x1415acd14]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and ecx, 0x16eee143
mov edx, eax
and edx, 0xe9111ebc
imul edx, ecx
mov ecx, eax
and ecx, 0x16eee143
or eax, 0x16eee143
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2474051f
and ecx, 0xdb8bfae0
imul ecx, edx
mov edx, eax
and edx, 0xdb8bfae0
or eax, 0xdb8bfae0
imul eax, edx
add eax, ecx
add eax, 0x7123a7ba
cmp eax, 0x32c6ae3
jb 0x14001b730
lea rax, [rbx + rbx*4]
cmp qword [rdi + rax*8 + 8], 0
je 0x14001b710
lea rax, [rdi + rax*8]
mov r8, qword [rax + 0x10]
mov rcx, qword [0x1415d3918]
xor edx, edx
call fcn.140219910
jmp 0x14001b710
mov eax, dword [0x1415acd18]
sub eax, dword [0x1415acd1c]
mov ecx, eax
and ecx, 0x2e7152a4
xor eax, 0xae7152a4
lea eax, [rax + rcx*2]
imul rax, rax, 0x28d2e897
shr rax, 0x3d
imul eax, eax, 0xe6783dee
cmp eax, 0x814570c9
je 0x14001b7d0
mov rax, qword [r14 + 0x20]
nop dword [rax + rax]
mov ecx, dword [0x1415acd20]
xor ecx, dword [0x1415acd24]
mov edx, ecx
and edx, 0xca426ed
xor ecx, 0x2ca426ed
lea ecx, [rcx + rdx*2]
or ecx, 0xd2fde6ab
mov edx, ecx
and edx, 0x38f8a5ec
xor ecx, 0xb8f8a5ec
lea ecx, [rcx + rdx*2]
cmp ecx, 0x8d3dde8c
je 0x14001b810
test rax, rax
je 0x14001b960
xor eax, eax
test al, al
jne 0x14001b89a
mov eax, dword [0x1415acd28]
xor eax, dword [0x1415acd2c]
mov ecx, eax
and ecx, 0x2de6ae6
and eax, 0x5c00e6
sub ecx, eax
add ecx, 0xc5d01e6
mov eax, ecx
and eax, 0x8327f12
xor ecx, 0x48327f12
lea eax, [rcx + rax*2]
mov rbx, qword [0x1415d3918]
cmp eax, 0x450c20fd
jae 0x14001b8a3
mov rax, qword [0x1415d3918]
jmp 0x14001b85b
mov eax, dword [0x1415acd30]
imul eax, dword [0x1415acd34]
and eax, 0xc1007021
add eax, 0x717b1e18
cmp eax, 0xa5b9b5ff
jbe 0x14001b8d0
mov rcx, rbx
xor edx, edx
mov r8, rdi
call fcn.140219910
nop
mov esi, dword [0x1415acd38]
imul esi, dword [0x1415acd3c]
add esi, 0xfd63e976
mov eax, esi
not eax
and eax, 0xa935416a
mov ecx, esi
and ecx, 0x56cabe95
imul ecx, eax
mov eax, esi
and eax, 0xa935416a
or esi, 0xa935416a
imul esi, eax
add esi, ecx
mov eax, esi
and eax, 0x19926990
add eax, eax
sub esi, eax
add esi, 0x19926991
mov rcx, rbx
xor edx, edx
mov r8, rdi
call fcn.140219910
cmp esi, 0xd951b0bb
ja 0x14001b8d0
nop
mov eax, dword [0x1415acd40]
sub eax, dword [0x1415acd44]
mov ecx, eax
and ecx, 0x13d2c2dc
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xd3d2c2dc
and eax, 0x40a80ab0
cmp eax, 0x204030a5
ja 0x14001b930
nop dword [rax + rax]
mov eax, dword [0x1415acd48]
mov ecx, dword [0x1415acd4c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
imul eax, ecx, 0x218e0cac
xor eax, 0x5c3bf40c
cmp eax, 0x27452cc6
jb 0x14001b960
mov eax, dword [0x1415acd50]
xor edx, edx
div dword [0x1415acd54]
nop dword [rax + rax]
mov eax, dword [0x1415acd58]
and eax, dword [0x1415acd5c]
mov ecx, eax
not ecx
and ecx, 0xd55a5afc
mov edx, eax
and edx, 0x2aa5a503
imul edx, ecx
mov ecx, eax
and ecx, 0xd55a5afc
or eax, 0xd55a5afc
imul eax, ecx
add eax, edx
cmp eax, 0xe8a90fb5
je 0x14001b9a0
nop word [rax + rax]
mov eax, dword [0x1415acd60]
imul eax, dword [0x1415acd64]
imul rax, rax, 0xdd59a1
shr rax, 0x35
add eax, 0xbca19ece
cmp eax, 0xaff3804c
jb 0x14001b9e0
mov r15, qword [r14 + 0x88]
test r15, r15
je 0x14001c9c7
mov eax, dword [0x1415acd68]
xor edx, edx
div dword [0x1415acd6c]
nop word cs:[rax + rax]
mov eax, dword [0x1415acd70]
sub eax, dword [0x1415acd74]
mov ecx, eax
not ecx
and ecx, 0x16a211
mov edx, eax
and edx, 0x1fe95dee
imul edx, ecx
mov ecx, eax
and ecx, 0x16a211
or eax, 0x16a211
imul eax, ecx
add eax, edx
or eax, 0xe2f7e39f
cmp eax, 0x715f3903
jb 0x14001ba30
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14001ba80
mov r12, qword [r14 + 0x98]
mov r13, qword [r14 + 0x90]
test r12, r12
mov qword [rsp + 0x20], r14
je 0x14001c650
mov eax, dword [0x1415acd78]
mov ecx, dword [0x1415acd7c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0xa9b39c0e
add eax, ecx
and ecx, 0x564c63f1
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xb012d566
and ecx, 0x4fed2a99
imul ecx, edx
mov edx, eax
and edx, 0x4fed2a99
or eax, 0x4fed2a99
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x9160b8b2
or eax, 0x6e9f474d
and eax, ecx
cmp eax, 0xc8f8e521
ja 0x14001baa0
xor ebp, ebp
mov r14d, 0xa819f5b9
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, r15
xor r15d, r15d
nop dword [rax + rax]
mov eax, dword [0x1415acdc8]
xor edx, edx
div dword [0x1415acdcc]
xor eax, 0x5ba3addb
add eax, 0xf50e6237
and eax, 0x495480aa
cmp eax, 0xcfd23c87
ja 0x14001bb20
test r15, r15
je 0x14001bb70
movzx eax, word [r15 + 0x3d2]
cmp r13, rax
jae 0x14001be70
mov r14, r13
mov rdi, r15
jmp 0x14001befa
mov eax, dword [0x1415acdd0]
add eax, dword [0x1415acdd4]
mov ecx, eax
xor ecx, 0xb134e2de
or eax, 0x4ecb1d21
and eax, ecx
mov ecx, eax
xor ecx, 0xd2205422
xor eax, 0x215ba858
mov edx, eax
and edx, 0x2c952bdd
and ecx, 0xd36ad422
imul ecx, edx
mov edx, eax
and edx, 0xd36ad422
or eax, 0xd36ad422
imul eax, edx
add eax, ecx
cmp eax, 0x2301aa1
jb 0x14001bb70
nop word cs:[rax + rax]
mov eax, dword [0x1415acdd8]
and eax, dword [0x1415acddc]
add eax, 0x95c9d715
mov ecx, eax
not ecx
or ecx, 0x87dc1500
or eax, 0x7823eaff
and eax, ecx
imul rax, rax, 0x6634d86d
shr rax, 0x3e
cmp eax, 0x1152515b
je 0x14001bbd0
test r13, r13
je 0x14001bdad
mov eax, dword [0x1415acde0]
mov ecx, dword [0x1415acde4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rax, rax, 0x5b8cd1cb
shr rax, 0x3d
xor eax, 0xb6be3a49
cmp eax, 0x9789b887
jb 0x14001bc0d
mov ecx, r13d
and ecx, 7
mov eax, dword [0x1415acde8]
xor edx, edx
div dword [0x1415acdec]
nop word cs:[rax + rax]
mov eax, dword [0x1415acdf0]
add eax, dword [0x1415acdf4]
imul rax, rax, 0x31e912ef
shr rax, 0x3d
mov edx, eax
xor edx, 0xd768a98f
and edx, eax
cmp edx, 0xe1e5ad9c
je 0x14001bc70
nop dword [rax]
mov eax, dword [0x1415acdf8]
xor edx, edx
div dword [0x1415acdfc]
add eax, 0xc4dc71ce
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x7231c1c9
and edx, 0xdce3e36
imul edx, r8d
mov r8d, eax
and r8d, 0xdce3e36
or eax, 0xdce3e36
imul eax, r8d
add eax, edx
or eax, 0xba2fd749
cmp eax, 0xc2b328e8
jb 0x14001bca0
mov rax, r13
test rcx, rcx
je 0x14001bdb5
and rax, 0xfffffffffffffff8
nop dword [rax]
mov edx, dword [0x1415ace00]
xor edx, dword [0x1415ace04]
xor edx, 0x9bb13dfa
add edx, 0xce2c6bd5
xor edx, 0x6a898100
cmp edx, 0xe035dffa
je 0x14001bd00
neg rcx
mov rdx, 0xffffffffffffffff
xor r8d, r8d
mov r15, rbx
xor r9d, r9d
nop dword [rax]
mov r10d, dword [0x1415ace08]
imul r10d, dword [0x1415ace0c]
mov r11d, r10d
not r11d
mov edi, r10d
or edi, 0xff4687ea
mov ebx, edi
and ebx, 0x3f0d2c27
and r11d, 0xb05010
imul r11d, ebx
and edi, 0xc0f2d3d8
or r10d, 0xfff6d7fa
imul r10d, edi
add r10d, r11d
imul r10, r14
shr r10, 0x39
cmp r10d, 0xb19b02f7
ja 0x14001bd40
inc r9
mov r15, qword [r15 + 0x3d8]
dec r8
inc rdx
cmp rcx, r8
jne 0x14001bd40
jmp 0x14001bdc0
mov r15, rbx
jmp 0x14001be4e
mov r15, rbx
nop dword [rax + rax]
mov ecx, dword [0x1415ace10]
mov edx, dword [0x1415ace14]
mov r8d, ecx
and r8d, edx
xor ecx, edx
lea ecx, [rcx + r8*2]
mov edx, ecx
not edx
and edx, 0x1272b25
and ecx, 0xed8d4da
sub ecx, edx
mov edx, ecx
or edx, 0x304e0468
not ecx
and edx, 0x31ee3569
and ecx, 0xe108886
or ecx, edx
cmp ecx, 0x2ad0e87d
jb 0x14001bdc0
cmp r13, 8
jb 0x14001be4e
mov rcx, qword [r15 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r15, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14001be10
xor r13d, r13d
xor ebx, ebx
movzx eax, word [r15 + 0x3d2]
cmp r13, rax
jb 0x14001bb5a
nop word cs:[rax + rax]
mov rdi, qword [r15 + 0x160]
test rdi, rdi
je 0x14001c98d
movzx r14d, word [r15 + 0x3d0]
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, r15
call rsi
inc rbx
mov r15, rdi
cmp r14w, word [rdi + 0x3d2]
jae 0x14001be70
nop word cs:[rax + rax]
mov eax, dword [0x1415ace28]
sub eax, dword [0x1415ace2c]
not eax
and eax, 0x36714c40
mov ecx, eax
xor ecx, 0x6041282
xor eax, 0xb92a496d
mov edx, eax
and edx, 0x99714529
and ecx, 0x26041ac2
imul ecx, edx
mov edx, eax
and edx, 0x260a0844
or eax, 0x260e1ac6
imul eax, edx
add eax, ecx
cmp eax, 0xf16df5d4
je 0x14001beb0
mov eax, r14d
and eax, 1
mov rcx, r14
xor rcx, 1
lea r13, [rcx + rax*2]
test rbx, rbx
je 0x14001c098
mov eax, dword [0x1415ace30]
and eax, dword [0x1415ace34]
mov ecx, eax
xor ecx, 0xc6249c24
or eax, 0x39db63db
and eax, ecx
mov ecx, eax
and ecx, 0x59ae9127
xor eax, 0x59ae9127
lea eax, [rax + rcx*2]
mov ecx, eax
xor ecx, 0xf0e6ce9c
and eax, 0xf193163
add eax, eax
sub eax, ecx
cmp eax, 0x5fa3b6de
jb 0x14001bf14
mov r15, qword [rdi + r13*8 + 0x3d8]
mov rcx, rbx
dec rcx
je 0x14001c093
nop dword [rax + rax]
mov eax, dword [0x1415ace38]
xor edx, edx
div dword [0x1415ace3c]
mov edx, eax
xor edx, 0xe47da88c
and edx, eax
add edx, 0x61dd6394
cmp edx, 0xc7d7175f
ja 0x14001bf70
mov eax, ecx
and eax, 7
je 0x14001c00b
lea ecx, [rbx - 1]
movzx ecx, cl
and ecx, 7
xor edx, edx
xor r8d, r8d
nop dword [rax + rax]
mov r9d, dword [0x1415ace40]
or r9d, dword [0x1415ace44]
xor r9d, 0x3e381900
add r9d, 0xf6fa0515
imul r9, r9, 0x28ce5401
shr r9, 0x3c
cmp r9d, 0x1a9b781d
ja 0x14001bfb0
inc r8
mov r15, qword [r15 + 0x3d8]
dec rdx
cmp rcx, r8
jne 0x14001bfb0
not rax
mov rcx, rbx
movabs rdx, 0x83ab9859ea4fc981
sub rcx, rdx
add rcx, rax
add rcx, rdx
add rbx, 0xfffffffffffffffe
cmp rbx, 7
jb 0x14001c093
nop word cs:[rax + rax]
mov eax, dword [0x1415ace48]
mov edx, dword [0x1415ace4c]
mov r8d, edx
and r8d, eax
add eax, edx
sub eax, r8d
mov edx, eax
not edx
or edx, 0x64dc4921
and edx, 0x6cde59a1
and eax, 0x90000210
or eax, edx
cmp eax, 0xde71f727
je 0x14001c020
mov rax, qword [r15 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r15, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14001c020
xor r13d, r13d
jmp 0x14001c09b
mov r15, rdi
dec r12
nop
mov eax, dword [0x1415ace54]
not eax
add eax, dword [0x1415ace50]
imul eax, eax, 0xea96efa5
add eax, 0xea96efa5
mov ecx, eax
not ecx
and ecx, 0x7e09f097
mov edx, eax
and edx, 0x81f60f68
imul edx, ecx
mov ecx, eax
and ecx, 0x7e09f097
or eax, 0x7e09f097
imul eax, ecx
add eax, edx
add eax, 0x3e5aa448
cmp eax, 0xa5115222
ja 0x14001c0a0
imul rax, r14, 0x38
lea rbx, [rdi + rax]
add rbx, 0x168
cmp qword [rdi + rax + 0x168], 0
je 0x14001c1a4
mov eax, dword [0x1415ace58]
xor eax, dword [0x1415ace5c]
mov ecx, eax
xor ecx, 0x1200a02
xor eax, 0x83ec8a23
and ecx, 0x19323ada
add ecx, ecx
sub ecx, eax
imul rax, rcx, 0x4d850e1
shr rax, 0x3a
cmp eax, 0x2ea4bb8c
ja 0x14001c3dc
mov eax, dword [0x1415ace60]
or eax, dword [0x1415ace64]
not eax
or eax, 0x4318108
mov edx, eax
not edx
mov ecx, edx
or ecx, 0xd0cc4e70
mov r8d, ecx
and r8d, 0xa3c25645
and eax, 0xc21a082
imul eax, r8d
and ecx, 0x580c28b2
or edx, 0xdcedeef2
imul edx, ecx
add edx, eax
mov r8, qword [rbx + 8]
mov rcx, qword [0x1415d3918]
cmp edx, 0x8334de80
jb 0x14001c3dc
xor edx, edx
call fcn.140219910
test bpl, bpl
jne 0x14001c1a4
mov eax, dword [0x1415ace68]
add eax, dword [0x1415ace6c]
imul eax, eax, 0x19bbee30
imul rax, rax, 0x2c485743
shr rax, 0x3d
cmp eax, 0xb774e80a
ja 0x14001c1a9
mov rbp, r12
mov rax, qword [rbx + 0x20]
nop word cs:[rax + rax]
mov ecx, dword [0x1415ace70]
mov edx, dword [0x1415ace74]
mov r8d, ecx
not r8d
and r8d, edx
not edx
and edx, ecx
sub edx, r8d
add edx, 0x2c7a4049
mov ecx, edx
and ecx, 0x3f42ab57
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x2422b53
and r8d, 0xfd11c0ac
imul r8d, r9d
and edx, 0x3d008004
or ecx, 0xfd11c0ac
imul ecx, edx
add ecx, r8d
cmp ecx, 0x1a37cf41
jb 0x14001c1e0
test rax, rax
je 0x14001c304
mov rbx, qword [rbx + 0x28]
mov eax, dword [0x1415ace78]
sub eax, dword [0x1415ace7c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xcb40124b
and ecx, 0x34bfedb4
imul ecx, edx
mov edx, eax
and edx, 0x34bfedb4
or eax, 0x34bfedb4
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x29412808
xor ecx, 0x29412000
and eax, 0x29412000
or eax, ecx
or eax, 0xd6bed7f7
cmp eax, 0x80b5fece
jae 0x14001c2b0
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rbx
call rsi
nop
mov eax, dword [0x1415ace80]
mov ecx, dword [0x1415ace84]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
lea r12d, [rax + r8]
add r12d, 0x53b6075f
and r12d, 0xd9b7b9da
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rbx
call fcn.140219910
cmp r12d, 0x4ace8634
jb 0x14001c2b0
mov eax, dword [0x1415ace88]
mov ecx, dword [0x1415ace8c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0xbc60124e
mov ecx, eax
not ecx
or ecx, 0x4fa1a3a0
or eax, 0xb05e5c5f
and eax, ecx
mov ecx, eax
and ecx, 0x2aff0745
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xaaff0745
cmp eax, 0xd851d749
jb 0x14001c304
shl r14, 5
add rdi, r14
mov r12, rbp
xor ebp, ebp
nop dword [rax]
mov eax, dword [0x1415ace90]
xor edx, edx
div dword [0x1415ace94]
xor eax, 0x7c7959c4
imul eax, eax, 0x4de8d002
cmp eax, 0x733941b
je 0x14001c370
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x1415ace98]
xor ecx, dword [0x1415ace9c]
and ecx, 0x212bc1e0
add ecx, 0xcc81379
mov edx, ecx
xor edx, 0xd555e473
or ecx, 0x28aa1388
and ecx, edx
cmp ecx, 0xb05f3092
ja 0x14001c3a0
test rax, rax
js 0x14001c3e8
jne 0x14001c400
jmp 0x14001c53c
mov rax, qword [0x1415d3918]
jmp 0x14001c143
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14001c53c
nop dword [rax + rax]
mov eax, dword [0x1415acea0]
add eax, dword [0x1415acea4]
imul eax, eax, 0xddd2e1d3
mov ecx, eax
not ecx
and ecx, 0x98a9a189
mov edx, eax
and edx, 0x67565e76
imul edx, ecx
mov ecx, eax
and ecx, 0x98a9a189
or eax, 0x98a9a189
imul eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x2a19d1e2
add ecx, ecx
sub eax, ecx
cmp eax, 0x7920be58
je 0x14001c400
mov eax, dword [0x1415acea8]
xor eax, dword [0x1415aceac]
not eax
or eax, 0x776ff2c
mov ecx, eax
not ecx
and eax, 0x1a03a2d9
mov edx, ecx
and edx, 0xe0880002
imul edx, eax
mov eax, ecx
and eax, 0x180100d1
or ecx, 0x1a03a2d9
imul ecx, eax
add ecx, edx
xor ecx, 0xc8ee3834
add ecx, 0x356d2e9b
jae 0x14001c4a0
mov rax, qword [0x1415d3918]
nop word [rax + rax]
mov eax, dword [0x1415aceb0]
or eax, dword [0x1415aceb4]
and eax, 0x5a0a0422
xor eax, 0x400a0002
mov rbx, qword [rdi + 8]
mov r14, qword [0x1415d3918]
cmp eax, 0x19fa8d35
je 0x14001c4a0
mov eax, dword [0x1415aceb8]
xor eax, dword [0x1415acebc]
and eax, 0x1fffffff
add eax, 0xbf77c27e
or eax, 0xe951b64b
cmp eax, 0x969bce65
jae 0x14001c500
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
nop word cs:[rax + rax]
mov eax, dword [0x1415acec0]
mov ecx, dword [0x1415acec4]
add eax, ecx
add eax, 0xdfc3a513
mov edi, eax
and edi, 0xcb938967
and eax, 0x130044
add eax, eax
sub edi, eax
add edi, 0x243b0444
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
cmp edi, 0x1b638ab3
jb 0x14001c500
mov eax, dword [0x1415acec8]
sub eax, dword [0x1415acecc]
add eax, 0xd3eb058a
mov ecx, eax
or ecx, 0x8825456
and ecx, 0x4ec27477
or eax, 0x6ff3fc7f
add eax, ecx
cmp eax, 0xae8c978f
je 0x14001c53c
mov r14d, 0xa819f5b9
nop
mov eax, dword [0x1415aced0]
xor eax, dword [0x1415aced4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x353bb0fe
and ecx, 0xcac44f01
imul ecx, edx
mov edx, eax
and edx, 0xcac44f01
or eax, 0xcac44f01
imul eax, edx
add eax, ecx
add eax, 0x690fa807
imul rax, rax, 0x20dcd699
shr rax, 0x3d
cmp eax, 0xdcd43cae
ja 0x14001c570
mov ebx, 0
test r12, r12
jne 0x14001bb20
mov r14, qword [rsp + 0x20]
nop dword [rax]
mov eax, dword [0x1415ace18]
xor edx, edx
div dword [0x1415ace1c]
mov ecx, eax
xor ecx, 0x660ae32b
or eax, 0x19f51cd4
and eax, ecx
add eax, 0x21182642
or eax, 0x8eb5f2c3
cmp eax, 0x1ef43d95
je 0x14001c5d0
mov rax, qword [r15 + 0x160]
test rax, rax
je 0x14001c84d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov rbx, rax
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, r15
call rsi
mov rax, qword [rbx + 0x160]
mov r15, rbx
test rax, rax
jne 0x14001c620
jmp 0x14001c850
mov eax, dword [0x1415acd80]
mov ecx, dword [0x1415acd84]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x90002020
and eax, 0x140
or eax, r9d
or edx, r8d
and r8d, 0x90002020
and ecx, 0x140
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
and edx, 0x90002160
xor edx, 0x90000020
or edx, 0x6fcf0a97
cmp edx, 0x5c168be8
je 0x14001c650
nop dword [rax + rax]
mov eax, dword [0x1415acd88]
sub eax, dword [0x1415acd8c]
or eax, 0x26ee01c8
mov ecx, eax
and ecx, 0x7df29872
xor eax, 0x7df29872
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
or ecx, 0x3b9c5b42
add eax, ecx
inc eax
cmp eax, 0xd168c917
ja 0x14001c6b0
test r13, r13
je 0x14001c5c8
mov rax, r13
not rax
or rax, 7
lea rcx, [rax + r13]
inc rcx
mov eax, dword [0x1415acd90]
mov edx, dword [0x1415acd94]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
mov edx, eax
not edx
mov r8d, eax
or r8d, 0x957358f2
mov r9d, r8d
and r9d, 0x497abea2
and edx, 0x2284010d
imul edx, r9d
and r8d, 0xb685415d
or eax, 0xb7f759ff
imul eax, r8d
add eax, edx
cmp eax, 0xde5ea64a
je 0x14001c700
test rcx, rcx
je 0x14001c8aa
mov eax, dword [0x1415acd98]
xor edx, edx
div dword [0x1415acd9c]
mov rax, r13
xor rax, 7
and rax, r13
nop dword [rax]
mov edx, dword [0x1415acda0]
and edx, dword [0x1415acda4]
add edx, 0xb7acd095
imul rdx, rdx, 0x3e3c8687
shr rdx, 0x3d
not edx
and edx, 0x604798f3
xor edx, 0x1edce5b
cmp edx, 0xcd69e08a
ja 0x14001c790
nop word cs:[rax + rax]
mov edx, dword [0x1415acda8]
add edx, dword [0x1415acdac]
imul edx, edx, 0x111fd6ea
mov r8d, edx
and r8d, 0xf161c054
and edx, 0x10010044
mov r9d, r8d
xor r9d, 0xe966f091
add r9d, r8d
sub r9d, edx
cmp r9d, 0x152a0a3d
jb 0x14001c7d0
xor edx, edx
nop dword [rax]
mov r8d, dword [0x1415acdb0]
xor r8d, dword [0x1415acdb4]
xor r8d, 0x5e09962b
add r8d, 0x605b3b4e
or r8d, 0xb48a35f7
cmp r8d, 0xcd80a7ce
jb 0x14001c810
inc rdx
mov r15, qword [r15 + 0x3d8]
cmp rdx, rcx
jne 0x14001c810
jmp 0x14001c8b0
mov rbx, r15
mov eax, dword [0x1415ace20]
mov ecx, dword [0x1415ace24]
not eax
not ecx
and ecx, eax
not ecx
mov eax, 0x9dff3631
imul rax, rcx
shr rax, 0x3c
mov ecx, eax
and ecx, 3
mov edx, ecx
not edx
mov r8d, eax
and r8d, 1
and edx, 0xc3a6b4aa
imul edx, r8d
and eax, 2
or ecx, 0xc3a6b4aa
imul ecx, eax
add ecx, edx
cmp ecx, 0xb24ba326
je 0x14001c9b4
jmp 0x14001c99c
mov rax, r13
nop dword [rax]
mov ecx, dword [0x1415acdb8]
sub ecx, dword [0x1415acdbc]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xdf9b64ea
and edx, 0x20649b15
imul edx, r8d
mov r8d, ecx
and r8d, 0x20649b15
or ecx, 0x20649b15
imul ecx, r8d
add ecx, edx
xor ecx, 0x28ec1c72
imul ecx, ecx, 0xebc1d2b
cmp ecx, 0x74eb3a9f
je 0x14001c8b0
cmp r13, 8
jb 0x14001c5c8
nop dword [rax + rax]
mov ecx, dword [0x1415acdc0]
mov edx, dword [0x1415acdc4]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, ecx
imul ecx, edx, 0xdf0d9bf3
add ecx, 0x22ccc4b2
or ecx, 0x74002d0b
cmp ecx, 0x23d02b0b
jb 0x14001c910
mov rcx, qword [r15 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r15, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14001c910
jmp 0x14001c5c8
mov edx, 8
mov rcx, r15
call fcn.140104d50
ud2
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov al, 1
test al, al
jne 0x14001c9c7
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rbx
call fcn.140219910
jmp 0x14001c99c
mov eax, 0xb7f74169
nop dword [rax]
mov ecx, dword [0x1415aced8]
mov edx, dword [0x1415acedc]
add ecx, edx
add ecx, 0xdff1f5ae
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0x9e7ed7da
cmp ecx, 0x7c3774a
jb 0x14001c9d0
mov rax, qword [r14 + 0x38]
nop
mov ecx, dword [0x1415acee0]
mov edx, dword [0x1415acee4]
add ecx, edx
add ecx, 0x9618e531
or ecx, 0xf74e577a
imul rcx, rcx, 0x3747da5
shr rcx, 0x39
cmp ecx, 0xb22c50a0
ja 0x14001ca00
test rax, rax
js 0x14001ca39
jne 0x14001ca4c
jmp 0x14001caf3
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14001caf3
mov eax, dword [0x1415acee8]
xor edx, edx
div dword [0x1415aceec]
mov eax, 0xc038fed5
nop
mov ecx, dword [0x1415acef0]
mov edx, dword [0x1415acef4]
not ecx
not edx
or edx, ecx
not edx
imul rdx, rax
shr rdx, 0x3b
imul ecx, edx, 0x33d8177f
or ecx, 0x342fa4d2
cmp ecx, 0xe58ceb27
je 0x14001ca60
mov r8, qword [r14 + 0x40]
mov rcx, qword [0x1415d3918]
xor edx, edx
call fcn.140219910
nop word cs:[rax + rax]
mov eax, dword [0x1415acefc]
add eax, dword [0x1415acef8]
and eax, 0xc9e9cbf4
mov ecx, eax
xor ecx, 0x9309655b
xor eax, 0x606202a4
and eax, 0x616242b4
mov edx, ecx
and edx, 0x88898d40
or edx, eax
xor edx, 0xaacbab71
and ecx, 0xd9a9c9ce
or ecx, edx
cmp ecx, 0x44e78e9b
jb 0x14001cab0
mov eax, dword [0x1415acf00]
xor edx, edx
div dword [0x1415acf04]
nop word cs:[rax + rax]
mov eax, dword [0x1415acf08]
sub eax, dword [0x1415acf0c]
shr eax, 1
imul rax, rax, 0x61ab4b49
mov rcx, rax
shr rcx, 0x3b
not ecx
and ecx, 0xe0d4b7be
bt rax, 0x3b
mov eax, 0
adc eax, 0xbdd43f16
sub eax, ecx
cmp eax, 0x303bb8b
jb 0x14001cb10
nop dword [rax]
mov eax, dword [0x1415acf10]
xor edx, edx
div dword [0x1415acf14]
add eax, 0xcdefcbbf
imul rax, rax, 0x51646e7d
shr rax, 0x3d
imul eax, eax, 0x6175ffc0
cmp eax, 0x6c7a14b6
jb 0x14001cb50
mov eax, dword [r14 + 0x58]
nop
mov ecx, dword [0x1415acf18]
xor ecx, dword [0x1415acf1c]
add ecx, 0x86d1024f
mov edx, ecx
xor edx, 0x5f128071
or ecx, 0xa0ed7f8e
and ecx, edx
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x2026a27b
and edx, 0xdfd95d84
imul edx, r8d
mov r8d, ecx
and r8d, 0xdfd95d84
or ecx, 0xdfd95d84
imul ecx, r8d
add ecx, edx
cmp ecx, 0xb96ed729
jb 0x14001cb80
cmp eax, 6
jge 0x14001cbe7
cmp eax, 4
jge 0x14001cbf0
jmp 0x14001cc70
je 0x14001cc70
nop dword [rax]
mov eax, dword [0x1415acf20]
mov ecx, dword [0x1415acf24]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
or ecx, 0x18477326
or eax, 0xe7b88cd9
and eax, ecx
imul eax, eax, 0xfe84ac56
imul rax, rax, 0x4fbccb19
shr rax, 0x3e
cmp eax, 0x687feb38
ja 0x14001cbf0
mov rdi, qword [r14 + 0x60]
mov eax, dword [0x1415acf28]
mov ecx, dword [0x1415acf2c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
imul eax, eax, 0x979872b3
add eax, 0x599c99d3
cmp eax, 0x67263626
ja 0x14001dd3b
jmp 0x14001dd28
mov eax, dword [0x1415acf30]
xor edx, edx
div dword [0x1415acf34]
and eax, 0xda96c886
add eax, 0x9d2c24d2
mov ecx, eax
not ecx
and ecx, 0x6a46088c
mov edx, eax
and edx, 0x91b8e542
imul edx, ecx
mov ecx, eax
and ecx, 0x6e46089c
or eax, 0x6e46089c
imul eax, ecx
add eax, edx
cmp eax, 0x50778ddd
jb 0x14001cc70
nop word cs:[rax + rax]
mov eax, dword [0x1415acf38]
add eax, dword [0x1415acf3c]
or eax, 0xe304f3a7
mov ecx, eax
and ecx, 0x83d7396
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x83d7396
and eax, 0x9d9c9e90
cmp eax, 0x41c62c60
jb 0x14001ccc0
mov eax, dword [r14 + 0x68]
nop word cs:[rax + rax]
mov ecx, dword [0x1415acf40]
mov edx, dword [0x1415acf44]
not ecx
not edx
mov r8d, ecx
or r8d, edx
not r8d
and edx, ecx
or edx, r8d
not edx
lea ecx, [rdx + 0x74bf68c9]
mov r8d, ecx
and r8d, 0x70b347a7
xor ecx, 0xf4cb858
add ecx, edx
add ecx, 0x74bf68c9
sub ecx, r8d
or ecx, 0xa4ff6ab4
cmp ecx, 0x4f9bcac6
jb 0x14001cd00
cmp eax, 6
jge 0x14001cd5b
cmp eax, 4
jl 0x14001cdc0
jmp 0x14001cd60
je 0x14001cdc0
nop dword [rax]
mov eax, dword [0x1415acf48]
xor edx, edx
div dword [0x1415acf4c]
mov ecx, eax
xor ecx, 0x36204121
xor eax, 0x49cfa0d4
or ecx, 0x89163e4a
and ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x360b2a0
and eax, 0xfc9f4d5f
imul eax, edx
mov edx, ecx
and edx, 0xfc9f4d5f
or ecx, 0xfc9f4d5f
imul ecx, edx
add ecx, eax
cmp ecx, 0x7609879
jb 0x14001cd60
mov rcx, qword [r14 + 0x70]
call fcn.140219b10
nop dword [rax + rax]
mov eax, dword [0x1415acf50]
and eax, dword [0x1415acf54]
mov ecx, eax
and ecx, 0x34a6acf9
xor eax, 0x34a6acf9
lea eax, [rax + rcx*2]
not eax
and eax, 0x4205a7ed
cmp eax, 0x5896f391
je 0x14001cdc0
xor eax, eax
nop dword [rax]
test al, al
jne 0x14001cdf0
mov eax, dword [r14 + 0x78]
nop dword [rax + rax]
mov ecx, dword [0x1415acf58]
mov edx, dword [0x1415acf5c]
not ecx
not edx
mov r8d, ecx
or r8d, edx
and edx, ecx
not edx
and edx, r8d
imul ecx, edx, 0x299c0ae6
and ecx, 0x37feff04
imul rcx, rcx, 0x2f3f223d
shr rcx, 0x39
cmp ecx, 0xb6b31af5
ja 0x14001ce00
cmp eax, 6
jge 0x14001ce48
cmp eax, 4
jge 0x14001ce50
jmp 0x14001ceb4
je 0x14001ceb4
nop word [rax + rax]
mov eax, dword [0x1415acf60]
or eax, dword [0x1415acf64]
imul eax, eax, 0xa7188b75
not eax
or eax, 0xd5651f2a
and eax, 0xfdeddfaf
cmp eax, 0x8d171989
jb 0x14001ce50
mov rcx, qword [r14 + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word cs:[rax + rax]
mov eax, dword [0x1415acf68]
add eax, dword [0x1415acf6c]
mov ecx, eax
and ecx, 0x307015bf
add ecx, ecx
sub eax, ecx
add eax, 0x145fbe49
cmp eax, 0xb184dab3
jb 0x14001ce90
mov eax, 0x85c9455d
nop dword [rax]
mov ecx, dword [0x1415acf70]
sub ecx, dword [0x1415acf74]
xor ecx, 0x5441a0
or ecx, 0xd0ab3e0f
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x2371acfe
ja 0x14001cec0
mov rdi, qword [r14 + 0xa8]
nop
mov eax, dword [0x1415acf7c]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415acf78]
xor ecx, eax
mov eax, ecx
or eax, 0xe007400
and eax, 0xeb5752a
or ecx, 0xffd7dee
add ecx, eax
or ecx, 0xf2a01a33
cmp ecx, 0xd82ae192
jb 0x14001cef0
test rdi, rdi
je 0x14001dce0
mov eax, 0xacf80f5d
nop word cs:[rax + rax]
mov ecx, dword [0x1415acf80]
sub ecx, dword [0x1415acf84]
mov edx, ecx
not edx
or ecx, 0x6fbf2f7f
or edx, 0xdfe3ffcf
and edx, ecx
not edx
imul rdx, rax
shr rdx, 0x3a
cmp edx, 0x816e4cc0
ja 0x14001cf40
mov rbx, qword [r14 + 0xb0]
mov r11, qword [r14 + 0xb8]
test r11, r11
je 0x14001d9e0
mov eax, 0xb5940291
nop dword [rax]
mov ecx, dword [0x1415acf88]
mov edx, dword [0x1415acf8c]
xor edx, ecx
not edx
and edx, ecx
add edx, 0x232018f5
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0xf557476a
je 0x14001cf90
nop dword [rax + rax]
mov eax, dword [0x1415acf90]
and eax, dword [0x1415acf94]
not eax
and eax, 0x3416808b
cmp eax, 0xe5fdb15f
je 0x14001cfc0
xor r14d, r14d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebp, 0xb8fa5e2b
mov rsi, rdi
xor edi, edi
nop
mov eax, dword [0x1415acfd0]
sub eax, dword [0x1415acfd4]
mov ecx, eax
and ecx, 0x43534c6a
or eax, 0x43534c6a
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x8abae171
mov edx, eax
and edx, 0x75451e8e
imul edx, ecx
mov ecx, eax
and ecx, 0x8abae171
or eax, 0x8abae171
imul eax, ecx
add eax, edx
cmp eax, 0xdea8176a
je 0x14001cff0
test rdi, rdi
jne 0x14001d30b
mov eax, dword [0x1415acfd8]
add eax, dword [0x1415acfdc]
mov ecx, eax
not ecx
and ecx, 0xdeb32072
mov edx, eax
and edx, 0x214cdf8d
imul edx, ecx
mov ecx, eax
and ecx, 0xdeb32072
or eax, 0xdeb32072
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0xba552eb8
and eax, 0x45aad146
sub eax, ecx
imul rax, rax, 0x26b9b20b
shr rax, 0x38
cmp eax, 0x59bf5703
ja 0x14001d042
test rbx, rbx
je 0x14001d245
mov ecx, ebx
and ecx, 7
mov eax, dword [0x1415acfe0]
xor edx, edx
div dword [0x1415acfe4]
nop word cs:[rax + rax]
mov eax, dword [0x1415acfe8]
mov edx, dword [0x1415acfec]
mov r8d, eax
and r8d, edx
add r8d, r8d
add eax, edx
sub eax, r8d
and eax, 0x24b714b7
add eax, 0x68ae0149
mov edx, eax
not edx
and edx, 0x86116a36
mov r8d, eax
and r8d, 0x61ee15c9
imul r8d, edx
mov edx, eax
and edx, 0x8c110236
or eax, 0x8e116a36
imul eax, edx
add eax, r8d
cmp eax, 0xf78576c4
ja 0x14001d0c0
nop word cs:[rax + rax]
mov eax, dword [0x1415acff0]
mov edx, dword [0x1415acff4]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
add eax, 0xf8dcf4c1
mov edx, eax
xor edx, 0xa9597e39
and edx, eax
cmp edx, 0xa66849fa
je 0x14001d120
mov rax, rbx
test rcx, rcx
je 0x14001d24d
and rax, 0xfffffffffffffff8
nop dword [rax + rax]
mov edx, dword [0x1415acff8]
or edx, dword [str.iiQe]
or edx, 0x251bf074
mov r8d, edx
xor r8d, 0x9c3171f3
and edx, 0x63ce8e0c
add edx, edx
sub edx, r8d
mov r8d, edx
not r8d
and r8d, 0x7f694388
and edx, 0x8096bc77
sub edx, r8d
cmp edx, 0xa112b50
jb 0x14001d180
mov rdi, rsi
xor edx, edx
nop word [rax + rax]
mov r8d, dword [0x1415ad000]
imul r8d, dword [0x1415ad004]
imul r8d, r8d, 0xda118b44
add r8d, 0x8a8a9074
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0x55d80ec8
and r9d, 0xaa27f137
imul r9d, r10d
mov r10d, r8d
and r10d, 0xaa27f134
or r8d, 0xaa27f137
imul r8d, r10d
add r8d, r9d
cmp r8d, 0x9bb66ce1
ja 0x14001d1d0
mov r8d, edx
and r8d, 1
or rdx, 1
add rdx, r8
mov rdi, qword [rdi + 0x170]
cmp rdx, rcx
jne 0x14001d1d0
jmp 0x14001d250
mov rdi, rsi
jmp 0x14001d307
mov rdi, rsi
mov ecx, dword [0x1415ad008]
sub ecx, dword [0x1415ad00c]
imul ecx, ecx, 0xc49b60d9
add ecx, 0x667268b8
cmp ecx, 0xa6b90957
ja 0x14001d250
cmp rbx, 8
jb 0x14001d307
nop word [rax + rax]
mov ecx, dword [0x1415ad010]
mov edx, dword [str._UP]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
imul ecx, ecx, 0x179c2ff0
add ecx, 0x68d917b6
cmp ecx, 0x920aa209
jb 0x14001d280
mov rcx, qword [rdi + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rdi, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14001d280
xor ebx, ebx
xor esi, esi
dec r11
mov eax, dword [0x1415ad038]
xor edx, edx
div dword [0x1415ad03c]
and eax, 0x3bb313f
add eax, 0xc6f1cb4f
and eax, 0x5ca7a9c
cmp eax, 0x92576ff2
je 0x14001d30e
mov qword [rsp + 0x20], r11
movzx eax, word [rdi + 0x16a]
cmp rbx, rax
jae 0x14001d350
mov r13, rbx
mov r15, rdi
jmp 0x14001d4b0
mov eax, dword [0x1415ad040]
xor eax, dword [0x1415ad044]
imul eax, eax, 0xd302dd19
add eax, 0x5f36de68
mov ecx, eax
xor ecx, 0x1956b664
and eax, 0x66a9499b
add eax, eax
sub eax, ecx
cmp eax, 0xe36eeeee
je 0x14001d350
mov r15, qword [rdi]
test r15, r15
je 0x14001dd19
mov eax, dword [0x1415ad078]
mov ecx, dword [str.II]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xe666fb2b
mov ecx, eax
or ecx, 0x1021450
not eax
and eax, 0x14f14088
and ecx, 0xe902b674
or ecx, eax
cmp ecx, 0xbc83afdd
je 0x14001d38b
mov eax, dword [0x1415ad080]
sub eax, dword [0x1415ad084]
add eax, 0x30989831
imul rax, rbp
shr rax, 0x3f
or eax, 0x3b98a670
cmp eax, 0xfbd84259
jbe 0x14001d40e
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rdi
call r12
inc rsi
nop word cs:[rax + rax]
movzx r13d, word [rdi + 0x168]
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rdi
call fcn.140219910
test r14b, r14b
jne 0x14001d420
nop
mov eax, dword [0x1415ad088]
sub eax, dword [0x1415ad08c]
and eax, 0xe04022
add eax, 0xbd17875f
cmp eax, 0x48ad1b41
jb 0x14001d440
mov rdi, r15
cmp r13w, word [r15 + 0x16a]
jae 0x14001d350
nop
mov eax, dword [0x1415ad048]
xor eax, dword [0x1415ad04c]
imul rcx, rax, 0x3ace473d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul eax, eax, 0x11534a96
add eax, 0x78a95db8
cmp eax, 0x389e679c
jb 0x14001d470
nop word cs:[rax + rax]
mov eax, dword [0x1415ad050]
and eax, dword [0x1415ad054]
add eax, 0x463fb866
xor eax, 0xae363c9
add eax, 0x2fb2122c
cmp eax, 0x253960cb
jb 0x14001d4b0
test rsi, rsi
je 0x14001d622
mov rdi, qword [r15 + r13*8 + 0x178]
mov rax, rsi
not rax
lea rcx, [rax + rsi*2]
nop dword [rax]
mov eax, dword [0x1415ad058]
or eax, dword [0x1415ad05c]
imul rax, rax, 0x3b49bfb
shr rax, 0x38
mov edx, eax
not edx
and edx, 0x2cfa6785
and eax, 0xfffffffe
sub eax, edx
add eax, 0x5c2979dd
cmp eax, 0xef1d8972
ja 0x14001d4f0
test rcx, rcx
je 0x14001d62b
mov eax, dword [0x1415ad060]
xor edx, edx
div dword [0x1415ad064]
mov eax, dword [0x1415ad068]
sub eax, dword [0x1415ad06c]
add eax, 0xaaa7d1e4
and eax, 0xc504920e
cmp eax, 0xe3c0fc64
ja 0x14001d539
lea rax, [rsi - 2]
mov rdx, rcx
xor rdx, 0xfffffffffffffff8
and rdx, rcx
mov r8d, dword [0x1415ad070]
and r8d, dword [0x1415ad074]
mov r9d, 0xb982014f
imul r8, r9
shr r8, 0x3e
or r8d, 0xddca9925
imul r8, r8, 0x3c8d2d91
shr r8, 0x3d
cmp r8d, 0x3f7a7cbe
ja 0x14001d564
nop dword [rax + rax]
test r14b, r14b
jne 0x14001d5a0
test rdx, rdx
je 0x14001d5cf
mov rcx, rdx
xor r8d, r8d
mov rdi, qword [rdi + 0x170]
inc r8
dec rcx
jne 0x14001d5b0
not rdx
mov rcx, rsi
and rcx, rdx
xor rdx, rsi
lea rcx, [rdx + rcx*2]
cmp rax, 7
mov r8d, 0xad5fafab
jb 0x14001d61e
nop dword [rax + rax]
mov rax, qword [rdi + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rdi, qword [rax + 0x170]
add rcx, 0xfffffffffffffff8
jne 0x14001d5e0
xor ebx, ebx
jmp 0x14001d633
lea rbx, [r13 + 1]
mov rdi, r15
jmp 0x14001d62d
xor ebx, ebx
mov r8d, 0xad5fafab
mov eax, dword [0x1415ad090]
xor edx, edx
div dword [0x1415ad094]
mov eax, dword [0x1415ad098]
xor edx, edx
div dword [0x1415ad09c]
imul rax, r8
shr rax, 0x3f
imul eax, eax, 0xc5795db1
imul rax, rax, 0x20defc93
shr rax, 0x3c
cmp eax, 0x71a5537d
je 0x14001d641
lea rax, [r13*2]
add rax, r13
mov rsi, qword [r15 + rax*8 + 0x60]
mov r15, qword [r15 + rax*8 + 0x68]
mov rax, qword [r15]
test rax, rax
je 0x14001d6d0
mov rcx, rsi
call rax
nop word cs:[rax + rax]
mov eax, dword [0x1415ad0a0]
mov ecx, dword [0x1415ad0a4]
not ecx
add eax, ecx
add eax, 0xffad050b
mov ecx, eax
and ecx, 0x2f07deed
add ecx, ecx
sub eax, ecx
add eax, 0x5a8d826c
cmp eax, 0x690e3a0e
jb 0x14001d6a0
nop dword [rax]
mov eax, dword [str.RiQI_]
sub eax, dword [0x1415ad0ac]
xor eax, 0x440620
or eax, 0xefbbe90f
cmp eax, 0x9c8ee4aa
je 0x14001d6d0
mov rax, qword [r15 + 8]
nop word cs:[rax + rax]
mov ecx, dword [0x1415ad0b0]
mov edx, dword [0x1415ad0b4]
mov r8d, ecx
not r8d
mov r9d, edx
not r9d
mov r10d, r8d
and r10d, 0xd167c9d9
and ecx, 0x2e983626
or ecx, r10d
or r8d, r9d
and r9d, 0xd167c9d9
and edx, 0x2e983626
or edx, r9d
xor edx, ecx
not r8d
or r8d, edx
mov ecx, r8d
not ecx
or ecx, 0x44768cb2
add ecx, r8d
imul ecx, ecx, 0x51b517f0
add ecx, 0x51b517f0
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x60ff0b00
and edx, 0x9f00f4fc
imul edx, r8d
mov r8d, ecx
and r8d, 0x9f00f4f0
or ecx, 0x9f00f4fc
imul ecx, r8d
add ecx, edx
cmp ecx, 0x75e1af4a
jb 0x14001d700
mov rcx, qword [r15 + 0x10]
mov edx, dword [str.A3__]
mov r8d, dword [0x1415ad0bc]
mov r9d, edx
not r9d
and edx, r8d
not r8d
or r8d, r9d
not r8d
or r8d, edx
and r8d, 0x197b2338
add r8d, 0x65e96cc9
and r8d, 0xfffffff8
xor r8d, 0x9a766408
add r8d, 0x72ed9631
jae 0x14001d79e
test rax, rax
je 0x14001d8fc
cmp rcx, 0x11
jb 0x14001d864
mov eax, dword [0x1415ad0c0]
xor edx, edx
div dword [0x1415ad0c4]
nop
mov eax, dword [0x1415ad0c8]
xor edx, edx
div dword [0x1415ad0cc]
and eax, 0x781be5f7
add eax, 0x82ccf28e
mov ecx, eax
not ecx
and ecx, 0x55200161
and eax, 0xa8dfee9e
sub eax, ecx
cmp eax, 0x5c38e1d7
ja 0x14001d800
mov eax, dword [0x1415ad0d0]
or eax, dword [0x1415ad0d4]
mov ecx, eax
or ecx, 0x400000
not eax
or eax, 0x1b400a
and eax, 0xa09f602e
and ecx, 0x1400211
sub ecx, eax
cmp ecx, 0x68616f3d
je 0x14001d830
mov rsi, qword [rsi - 8]
mov eax, dword [0x1415ad0d8]
mov ecx, dword [0x1415ad0dc]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
add ecx, 0x3585759
or ecx, 0x41fcd8ba
cmp ecx, 0xd2f87175
jae 0x14001d8b0
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rsi
call fcn.140219910
nop word cs:[rax + rax]
mov eax, dword [0x1415ad0e0]
xor eax, dword [0x1415ad0e4]
imul rax, rax, 0x1e503e5f
shr rax, 0x3c
lea ecx, [rax + 0x92000]
not eax
and eax, 0x48840a59
imul eax, eax, 0x820215a6
imul r15d, ecx, 0xca8f3fff
add r15d, eax
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rsi
call r12
cmp r15d, 0x374b1eb3
jb 0x14001d8b0
mov eax, dword [0x1415ad0ec]
add eax, dword [0x1415ad0e8]
or eax, 0xfbfcffde
cmp eax, 0x5b3f579f
je 0x14001d8fc
mov esi, 0
mov r11, qword [rsp + 0x20]
test r11, r11
jne 0x14001cff0
nop word [rax + rax]
mov eax, dword [0x1415ad018]
or eax, dword [0x1415ad01c]
or eax, 0x9f3d2fa7
imul rax, rax, 0x5daaf463
shr rax, 0x3d
cmp eax, 0xff5ecacd
ja 0x14001d930
mov rax, qword [rdi]
test rax, rax
je 0x14001dc18
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rsi, rax
test bl, bl
je 0x14001d990
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rdi
call r14
nop word cs:[rax + rax]
mov ebp, dword [0x1415ad020]
or ebp, dword [0x1415ad024]
add ebp, 0x5a2d5162
or ebp, 0x432983c6
add ebp, 0x15ffd843
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rdi
call r14
cmp ebp, 0x30db02b
jb 0x14001d990
mov rax, qword [rsi]
mov rdi, rsi
test rax, rax
jne 0x14001d970
jmp 0x14001dc1b
mov eax, dword [0x1415acf98]
sub eax, dword [0x1415acf9c]
mov ecx, eax
xor ecx, 0x189140
xor eax, 0x10a2221c
and eax, 0x59a36e9f
and ecx, 0xa65c9160
sub ecx, eax
shr ecx, 1
imul rax, rcx, 0x44ad3bed
shr rax, 0x3c
cmp eax, 0x3f262016
je 0x14001d9e0
nop word [rax + rax]
mov eax, dword [0x1415acfa0]
mov ecx, dword [0x1415acfa4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0xa5e3d9d1
imul rax, rax, 0xd7bb191
shr rax, 0x3a
mov ecx, eax
not ecx
mov edx, eax
and edx, 1
and ecx, 0x4fac767a
imul ecx, edx
mov edx, eax
and edx, 0xfffffffe
or eax, 0x4fac767a
imul eax, edx
add eax, ecx
cmp eax, 0xddd00c0e
ja 0x14001da20
test rbx, rbx
je 0x14001d930
mov r8, rbx
xor r8, 0xfffffffffffffff8
and r8, rbx
nop word cs:[rax + rax]
mov eax, dword [0x1415acfa8]
mov ecx, dword [0x1415acfac]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
imul rax, rax, 0x98b9d0f
shr rax, 0x39
or eax, 0x2002b2
and eax, 0x2002b3
cmp eax, 0x135deb30
ja 0x14001daa0
mov eax, dword [0x1415acfb0]
xor edx, edx
div dword [0x1415acfb4]
cmp eax, 0x3dd9d3d5
je 0x14001dad0
mov rcx, rbx
test r8, r8
je 0x14001db86
and rcx, 0xfffffffffffffff8
nop word cs:[rax + rax]
mov eax, dword [0x1415acfb8]
xor edx, edx
div dword [0x1415acfbc]
and eax, 0x983232fe
cmp eax, 0x2eebd1ff
je 0x14001db00
xor eax, eax
nop dword [rax]
mov edx, dword [0x1415acfc0]
mov r9d, dword [0x1415acfc4]
add edx, r9d
add edx, 0xef43ccd8
mov r9d, edx
not r9d
mov r10d, edx
or r10d, 0x7a110825
mov r11d, r10d
and r11d, 0xea49b398
and r9d, 0x5a64442
imul r9d, r11d
and r10d, 0x15b64c67
or edx, 0x7fb74c67
imul edx, r10d
add edx, r9d
cmp edx, 0x9af2fd75
jb 0x14001db20
inc rax
mov rdi, qword [rdi + 0x170]
cmp rax, r8
jne 0x14001db20
cmp rbx, 8
jb 0x14001d930
mov r8d, 0xadde9491
nop word cs:[rax + rax]
mov eax, dword [0x1415acfc8]
xor edx, edx
div dword [0x1415acfcc]
mov edx, eax
xor edx, 0xbbf08546
add edx, eax
and eax, 0x440f7ab9
sub edx, eax
imul rdx, r8
shr rdx, 0x3e
add edx, 0x489bf99d
cmp edx, 0x90b2c7c4
ja 0x14001dba0
mov rax, qword [rdi + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rdi, qword [rax + 0x170]
add rcx, 0xfffffffffffffff8
jne 0x14001dba0
jmp 0x14001d930
mov rsi, rdi
mov eax, dword [0x1415ad028]
mov ecx, dword [0x1415ad02c]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0x743e91be
and ecx, 0x8ba2d160
add ecx, 0xa004f598
cmp ecx, 0xd081753d
jbe 0x14001dc5a
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rsi
call fcn.140219910
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebx, dword [0x1415ad030]
mov eax, dword [0x1415ad034]
mov ecx, eax
not ecx
mov edx, ebx
and edx, ecx
or ecx, ebx
not ecx
imul ecx, edx
mov edx, ebx
and edx, eax
or ebx, eax
imul ebx, edx
add ebx, ecx
mov eax, ebx
and eax, 0x5a6228a
add eax, eax
sub ebx, eax
add ebx, 0xcda6228a
and ebx, 0xab2a658
mov eax, ebx
xor eax, 0xf007c7f5
or ebx, 0xab02008
and ebx, eax
mov rcx, qword [0x1415d3918]
xor edx, edx
mov r8, rsi
call rdi
cmp ebx, 0x534cdcbe
je 0x14001dc70
nop word cs:[rax + rax]
mov eax, dword [0x1415ad0f0]
and eax, dword [0x1415ad0f4]
add eax, 0x27fd4be8
or eax, 0x65103ad8
mov ecx, eax
xor ecx, 0xaf45dcd3
and ecx, eax
cmp ecx, 0xc2354a15
ja 0x14001dce0
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov edx, 8
mov rcx, rdi
call fcn.140104d50
ud2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
test al, al
je 0x14001cc70
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001dd28