Function at 0x1401016d0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov qword [rbp], rdx
mov eax, dword [0x140224f7c]
mov edx, eax
xor edx, edx
not edx
and edx, dword [0x140224f78]
xor edx, eax
or edx, 0x99460639
add edx, 0x53eb8509
mov eax, 0x98b4c06b
imul rax, rdx
shr rax, 0x3f
cmp eax, 0xde6d13e7
je 0x1401017ab
mov eax, dword [0x140224f80]
mov r9d, dword [0x140224f84]
mov edx, r9d
not edx
mov r10d, eax
and r10d, edx
or edx, eax
not edx
imul edx, r10d
mov r10d, eax
and r10d, r9d
or eax, r9d
imul eax, r10d
add eax, edx
mov edx, 0xc3c2382f
imul rdx, rax
shr rdx, 0x3f
mov eax, edx
or eax, 0xb5296992
not eax
or eax, 0xc5b8bb2
add edx, eax
add edx, 0xb5296992
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x400
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
cmp edx, 0xb6a7911f
jne 0x1401017d7
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x400
call fcn.1401516e0
sub rsp, rax
jmp 0x140101721
mov qword [rbp - 0x20], rax
mov eax, dword [0x140224f88]
imul eax, dword [0x140224f8c]
add eax, 0x9a9ec476
mov edx, eax
xor edx, 0x77eccedf
and eax, 0x8133120
add eax, eax
sub eax, edx
add eax, 0x879fbd15
cmp eax, 0x80058904
jae 0x140101812
mov qword [r13], 0
mov qword [rbp - 0x30], r9
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x38], rcx
nop
mov eax, dword [0x140224f90]
mov ecx, dword [0x140224f94]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
and ecx, 0x42a010a
or ecx, 0xfbd4dcf1
mov qword [r13], 0
cmp ecx, 0xbf50d070
jb 0x140101820
mov qword [r13 + 8], 2
mov qword [r13 + 0x10], 0
mov edi, 0x200
mov eax, 2
mov qword [rbp - 0x10], rax
xor r15d, r15d
mov r12d, 0xffffffff
xor r14d, r14d
xor esi, esi
cmp rdi, 0x201
jae 0x1401018a0
mov eax, 0x200
mov qword [rbp - 8], rax
mov rbx, qword [rbp - 0x20]
jmp 0x140101a27
mov ecx, dword [0x140224f98]
mov edx, dword [0x140224f9c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x8fb10375
and ecx, 0x704efc8a
or ecx, r9d
or eax, r8d
and r8d, 0x8fb10375
and edx, 0x704efc8a
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa4b19b4e
and ecx, 0x5b4e64b1
imul ecx, edx
mov edx, eax
and edx, 0x5b4e64b1
or eax, 0x5b4e64b1
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0x2d4e4205
add ecx, eax
cmp ecx, 0xb6f16bf3
je 0x1401018a0
mov rax, rdi
not rax
and rax, rsi
mov rcx, rsi
not rcx
and rdi, rcx
sub rdi, rax
mov eax, dword [0x140224fa0]
xor edx, edx
div dword [0x140224fa4]
mov eax, dword [0x140224fa8]
imul eax, dword [0x140224fac]
mov edx, eax
not edx
or edx, 0x8019396a
and edx, 0xd0193dea
and eax, 0x204000
or eax, edx
xor eax, 0xeb549ed2
cmp eax, 0xd6d8da8f
ja 0x140101940
mov rax, r14
xor rax, rsi
and rcx, r14
add rcx, rcx
sub rcx, rax
cmp rdi, rcx
ja 0x140101aaa
mov eax, dword [0x140224fb0]
add eax, dword [0x140224fb4]
and eax, 0xa8a684ec
add eax, 0xa1909871
imul rax, rax, 0x362712c1
shr rax, 0x3d
cmp eax, 0x855aedc7
jbe 0x1401019c0
cmp r14, r12
mov eax, 0xffffffff
cmovb rax, r14
mov qword [r13 + 0x10], rax
mov eax, dword [0x140224fb8]
imul eax, dword [0x140224fbc]
mov ecx, eax
xor ecx, 0xbd7d1530
add ecx, eax
and eax, 0x4282eacf
sub ecx, eax
mov eax, ecx
not eax
or eax, 0x42128a50
and eax, 0x629a8a51
mov edx, ecx
and edx, 0x140431a2
or edx, eax
xor edx, 0x99eb2e8c
and ecx, 0x30002081
or ecx, edx
cmp r14, r12
mov esi, 0xffffffff
cmovb rsi, r14
mov qword [r13 + 0x10], rsi
cmp ecx, 0xa75ebc18
jb 0x1401019c0
mov qword [rbp - 8], rsi
mov rbx, qword [rbp - 0x10]
mov rdi, rsi
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rbp]
mov edx, edi
mov r8, rbx
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
add rsp, 0x20
mov r10d, eax
test eax, eax
jne 0x140101bf0
mov dword [rbp - 0x18], r10d
mov qword [rbp - 0x28], rbx
mov eax, dword [0x140224fc8]
mov ecx, dword [0x140224fcc]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0xbe3a4db6
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf103b7f0
and ecx, 0xefc480f
imul ecx, edx
mov edx, eax
and edx, 0xefc480f
or eax, 0xefc480f
imul eax, edx
add eax, ecx
cmp eax, 0xe186f932
jne 0x140101b10
jmp 0x140101d60
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
mov r8, rdi
call fcn.14016b8b0
add rsp, 0x20
mov r14, qword [r13]
mov eax, dword [0x140224fc0]
xor edx, edx
div dword [0x140224fc4]
mov ecx, eax
and ecx, 0xf3222dd1
xor ecx, 0x20000880
xor eax, 0x800
and eax, 0x52022d10
add eax, eax
sub ecx, eax
cmp ecx, 0xf933f596
je 0x140101ac4
mov rax, qword [r13 + 8]
mov qword [rbp - 0x10], rax
nop
test r15b, r15b
jne 0x140101b00
jmp 0x140101988
mov eax, dword [0x140224fd0]
mov ecx, dword [0x140224fd4]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not edx
or edx, ecx
mov ebx, edx
and ebx, 0x4a57cf99
and edx, 0x40100301
add edx, edx
sub ebx, edx
add ebx, 0xc1981347
mov eax, ebx
and eax, 0x28284349
add eax, eax
sub ebx, eax
add ebx, 0x28284349
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp ebx, 0xa81bfaf2
ja 0x140101d60
mov ecx, eax
mov eax, dword [0x140224fd8]
xor edx, edx
div dword [0x140224fdc]
mov edx, 0xe4a0b3d0
sub edx, eax
add eax, 0x1b5f4c2f
and edx, 0x70006800
and eax, 0xd011c0
or eax, edx
cmp eax, 0x7c16f8be
ja 0x140101b6d
mov rbx, qword [rbp - 0x28]
mov r10d, dword [rbp - 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x140224fe0]
xor edx, edx
div dword [0x140224fe4]
xor eax, 0x8892eb37
add eax, 0xbecf704f
imul rax, rax, 0x7be1b79
shr rax, 0x3a
cmp eax, 0x4b72bd1d
je 0x140101bb0
test ecx, ecx
jne 0x1401022f7
nop word cs:[rax + rax]
mov eax, dword [0x140225038]
mov ecx, dword [0x14022503c]
mov edx, eax
not edx
or eax, ecx
not ecx
or ecx, edx
and ecx, eax
and ecx, 0x685f4e41
add ecx, 0xe31c48ab
not ecx
or ecx, 0x2ba2984a
cmp ecx, 0xb3a69978
jb 0x140101bf0
mov r11d, r10d
mov r8d, 0x923d0241
nop dword [rax]
test r15b, r15b
jne 0x140101c30
cmp rdi, r11
jne 0x140101cb0
mov ecx, dword [0x140225048]
mov edx, dword [0x14022504c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x11000080
and ecx, 0x483b5838
or ecx, r9d
or eax, r8d
and r8d, 0x11000080
and edx, 0x483b5838
or edx, r8d
xor edx, ecx
not eax
or eax, edx
or eax, 0xa6c4a747
mov ecx, eax
and ecx, 0xdf62b41
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xdf62b41
imul rax, rax, 0x5504dd93
shr rax, 0x3e
cmp eax, 0xe479946c
jbe 0x140101d80
jmp 0x140101dbf
mov eax, dword [0x140225058]
mov ecx, dword [0x14022505c]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not ecx
and ecx, eax
add ecx, 0x701358b6
or ecx, 0x77250c58
add ecx, 0x4602cac9
cmp ecx, 0x9ad3a02
jb 0x140101cb0
nop word cs:[rax + rax]
mov eax, dword [0x140225060]
xor edx, edx
div dword [0x140225064]
mov ecx, eax
not ecx
and ecx, 0x26e86e95
mov edx, eax
and edx, 0xd917916a
imul edx, ecx
mov ecx, eax
and ecx, 0x26e86e95
or eax, 0x26e86e95
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x13002aba
and eax, 0xecffd545
sub eax, ecx
imul rax, r8
shr rax, 0x3c
cmp eax, 0xd4893521
ja 0x140101cf0
cmp rdi, r11
jae 0x140101e60
mov rdi, r11
jmp 0x140101e30
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
jmp 0x140101b10
mov eax, dword [0x140225050]
xor edx, edx
div dword [0x140225054]
add eax, 0x60660793
mov ecx, eax
and ecx, 0x67aa94e1
xor eax, 0xe7aa94e1
lea ebx, [rax + rcx*2]
add ebx, 0xeae95777
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp ebx, 0xe54b575c
jbe 0x140101dd0
sub rsp, 0x20
call fcn.14014f250
add rsp, 0x20
jmp 0x140101d80
test r15b, r15b
jne 0x140101dd0
cmp eax, 0x7a
jne 0x1401027a2
nop
mov eax, dword [0x140225068]
imul eax, dword [0x14022506c]
cmp eax, 0x447537f
je 0x140101de0
lea rcx, [rdi + rdi]
mov eax, dword [0x140225070]
xor edx, edx
div dword [0x140225074]
nop word cs:[rax + rax]
test r15b, r15b
jne 0x140101e10
cmp rdi, 0x7fffffff
cmova rcx, r12
mov rdi, rcx
nop word cs:[rax + rax]
mov eax, dword [0x140225078]
sub eax, dword [0x14022507c]
add eax, 0xb34c6c43
or eax, 0xd4817ebf
xor eax, 0x633dc5ed
cmp eax, 0x4963d62f
je 0x140101e30
jmp 0x140101880
mov eax, dword [0x140225080]
mov ecx, dword [0x140225084]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
mov r8d, 0x668e09e6
sub r8d, eax
sub r8d, edx
add eax, edx
add eax, 0x9971f619
mov ecx, eax
and ecx, 0x89de2fac
and r8d, 0x7621d053
imul r8d, ecx
mov ecx, eax
and ecx, 0x7621d053
or eax, 0x7621d053
imul eax, ecx
add eax, r8d
xor eax, 0x3c377276
cmp eax, 0xf4cfba24
ja 0x140101e60
cmp qword [rbp - 8], r11
mov r9, qword [rbp - 0x40]
jb 0x14010270e
nop dword [rax]
mov eax, dword [0x140225088]
and eax, dword [0x14022508c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x736ebaba
and ecx, 0x8c914545
imul ecx, edx
mov edx, eax
and edx, 0x8c914545
or eax, 0x8c914545
imul eax, edx
add eax, ecx
add eax, 0x2d87632
mov ecx, eax
xor ecx, 0xc63b0a8
and eax, 0x739c4f57
add eax, eax
sub eax, ecx
cmp eax, 0xce00b4c0
ja 0x140101ee0
mov r12, qword [r9]
mov eax, dword [0x140225090]
xor edx, edx
div dword [0x140225094]
nop word cs:[rax + rax]
mov eax, dword [0x140225098]
mov ecx, dword [0x14022509c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0x83c7b5bf
xor ecx, 0x8a63beed
and ecx, eax
imul rax, rcx, 0x758c493b
shr rax, 0x3e
cmp eax, 0x2574af6
ja 0x140101f50
movabs rcx, 0xdf8e8a10d1002fae
mov rax, rcx
not rax
add rax, rcx
nop
mov ecx, dword [0x1402250a0]
add ecx, dword [0x1402250a4]
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xba612a3c
and edx, 0x459ed5c3
imul edx, r8d
mov r8d, ecx
and r8d, 0x459ed5c3
or ecx, 0x459ed5c3
imul ecx, r8d
add ecx, edx
mov edx, ecx
and edx, 0x2da803ca
add edx, edx
sub ecx, edx
imul ecx, ecx, 0x9b9693aa
cmp ecx, 0x8d8895c0
je 0x140101fa0
mov rdi, qword [r9 + 0x10]
add rax, rdi
cmp rax, 6
jb 0x1401026cb
mov r13, qword [r9 + 8]
mov eax, 0xe6df3ab9
nop
mov ecx, dword [0x1402250a8]
sub ecx, dword [0x1402250ac]
xor ecx, 0x79dcb23c
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x384b03ce
cmp ecx, 0x683ecd71
ja 0x140102010
nop dword [rax + rax]
mov eax, dword [0x1402250b0]
xor edx, edx
div dword [0x1402250b4]
add eax, 0xc37f1837
mov ecx, eax
and ecx, 0x1c4fb1f4
xor eax, 0x9c4fb1f4
lea eax, [rax + rcx*2]
cmp eax, 0xc133dca2
je 0x140102040
test rdi, rdi
je 0x1401027a2
movabs rax, 0xa090f06943e85ff6
mov rcx, rdi
sub rcx, rax
add rax, rcx
add rax, 0xfffffffffffffff9
nop word [rax + rax]
mov ecx, dword [0x1402250c0]
mov edx, dword [0x1402250c4]
mov r8d, edx
not r8d
and r8d, ecx
xor edx, ecx
add edx, ecx
sub edx, r8d
not edx
and edx, 0x68022220
xor edx, 0x306c8288
add edx, 0xe7596dc4
jb 0x140102090
cmp rax, r11
jne 0x14010215d
mov esi, r10d
lea rdx, [r13 + 0xc]
mov qword [rbp], r11
lea r8, [r11 + r11]
sub rsp, 0x20
mov rcx, rbx
mov qword [rbp - 8], r8
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
nop
mov ecx, dword [0x1402250c8]
imul ecx, dword [0x1402250cc]
mov edx, ecx
not edx
and edx, 0xa304ea08
mov r8d, ecx
and r8d, 0x5cfb15f7
imul r8d, edx
mov edx, ecx
and edx, 0xa304ea08
or ecx, 0xa304ea08
imul ecx, edx
add ecx, r8d
mov edx, ecx
not edx
or edx, 0xf7e8d979
add ecx, edx
inc ecx
mov edx, ecx
not edx
or edx, 0x3b92ad0
or ecx, 0xfc46d52f
and ecx, edx
cmp ecx, 0x78171643
je 0x1401020f0
test eax, eax
mov r10, qword [rbp]
je 0x140102355
xor eax, eax
nop
test al, al
jne 0x140102160
mov eax, dword [0x1402250e8]
sub eax, dword [0x1402250ec]
add eax, 0xbe412bcd
mov ecx, eax
and ecx, 0x799a9b00
add ecx, ecx
sub eax, ecx
add eax, 0xf99a9b00
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4539d277
and ecx, 0xbac62d88
imul ecx, edx
mov edx, eax
and edx, 0xbac62d88
or eax, 0xbac62d88
imul eax, edx
add eax, ecx
cmp eax, 0x2f44aeb
jae 0x1401021c0
mov word [r13 + 0xc], 0x43
nop dword [rax + rax]
mov eax, dword [0x1402250f0]
mov ecx, dword [0x1402250f4]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
xor eax, 0x390afecc
add eax, ecx
and ecx, 0x6f50133
sub eax, ecx
imul eax, eax, 0xe9ff5e88
and eax, 0x3e332d40
mov word [r13 + 0xc], 0x43
cmp eax, 0x173068a8
ja 0x1401021c0
xor eax, eax
nop
test al, al
jne 0x140102200
mov rax, qword [rbp - 0x38]
mov qword [rax], r12
mov qword [rax + 8], r13
mov qword [rax + 0x10], rdi
test r14, r14
je 0x140102c60
mov eax, dword [0x140225130]
xor eax, dword [0x140225134]
add eax, 0xc51ff6aa
mov ecx, 0xc251bae7
imul rcx, rax
shr rcx, 0x3b
mov eax, ecx
xor eax, 0x12b5ccf8
or ecx, 7
and ecx, eax
cmp ecx, 0x25bfee8b
jne 0x140102255
mov rax, qword [0x14022cb48]
mov rbx, qword [rbp - 0x10]
nop dword [rax]
mov ecx, dword [0x14022513c]
mov eax, ecx
xor eax, eax
not eax
and eax, dword [0x140225138]
xor eax, ecx
imul rcx, rax, 0x106f9b5f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
add eax, 0x4d719d86
mov ecx, eax
not ecx
and ecx, 0x1206603d
mov edx, eax
and edx, 0x1409102
imul edx, ecx
mov ecx, eax
and ecx, 0x4c310c8d
or eax, 0x5e376cbd
imul eax, ecx
add eax, edx
mov rsi, qword [0x14022cb48]
cmp eax, 0x487eead0
jb 0x140102260
mov eax, dword [0x140225140]
mov ecx, dword [0x140225144]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0xafebddaa
xor eax, 0xb894b87c
add eax, 0x3e915082
cmp eax, 0x1dab427e
jae 0x140102b87
jmp 0x140102bcf
movabs rsi, 0x8000000000000000
mov eax, dword [0x140224fe8]
xor eax, dword [0x140224fec]
mov ecx, 0x548d6b70
sub ecx, eax
add eax, 0xab72948f
mov edx, eax
and edx, 0x6fe6a604
and ecx, 0x901959fb
imul ecx, edx
mov edx, eax
and edx, 0x901959fb
or eax, 0x901959fb
imul eax, edx
add eax, ecx
add eax, 0xf7351a48
cmp eax, 0x2710181c
mov rbx, qword [rbp - 0x38]
jbe 0x1401027a4
jmp 0x1401027f2
mov r9d, esi
nop dword [rax + rax]
mov eax, dword [0x1402250d0]
mov ecx, dword [0x1402250d4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf6d94f4c
and ecx, 0x926b0b3
imul ecx, edx
mov edx, eax
and edx, 0x926b0b3
or eax, 0x926b0b3
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x78d08526
add ecx, ecx
sub eax, ecx
lea ecx, [rax + 0x78d08526]
mov edx, ecx
and edx, 0x455c315b
xor ecx, 0xbaa3cea4
add eax, ecx
add eax, 0x78d08526
sub eax, edx
cmp eax, 0xdd6e98e5
jb 0x140102360
test r9d, r9d
je 0x140102496
mov eax, dword [0x1402250d8]
mov ecx, dword [0x1402250dc]
add eax, ecx
add eax, 0xc9e37881
and eax, 0xabf1ee46
xor eax, 0x8961c000
cmp eax, 0x99ae99c9
jbe 0x14010241b
movzx eax, byte [0x14022cb78]
xor eax, eax
mov rdx, qword [rbp - 8]
nop word cs:[rax + rax]
movzx ecx, byte [0x14022cb78]
test al, al
jne 0x140102430
sub rsp, 0x20
xor ecx, ecx
call fcn.140107940
add rsp, 0x20
mov rdi, rax
test rax, rax
mov r10, qword [rbp]
jne 0x14010249b
ud2
mov edi, 2
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r13
mov rsi, rbx
mov eax, dword [0x1402250f8]
imul eax, dword [0x1402250fc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xbcdf8390
and ecx, 0x43207c6f
imul ecx, edx
mov edx, eax
and edx, 0x43207c6f
or eax, 0x43207c6f
imul eax, edx
add eax, ecx
add eax, 0xd4e27cb6
and eax, 0x9955270d
cmp eax, 0xc8997333
jne 0x140102538
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
mov r8, qword [rbp - 8]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rbx, qword [rbp - 0x30]
mov rax, qword [rbp]
mov qword [rbx], rax
mov qword [rbx + 8], rdi
mov rax, qword [rbp]
mov qword [rbx + 0x10], rax
sub rsp, 0x20
mov rcx, rbx
call fcn.14012eba0
mov r10, qword [rbp]
add rsp, 0x20
mov rax, qword [rbx + 8]
mov word [rax + r10*2], 0
lea rax, [r10 + 1]
mov qword [rbp - 0x18], rax
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 8]
nop dword [rax + rax]
mov eax, dword [0x140225100]
mov ecx, dword [0x140225104]
mov edx, eax
and edx, ecx
xor eax, ecx
lea ebx, [rax + rdx*2]
add ebx, 0xdcac1035
mov eax, ebx
or eax, 0xb359254f
mov ecx, ebx
not ecx
and ecx, 0xca680b0
mov edx, eax
and edx, 0xc1415b40
imul edx, ecx
and eax, 0x3ebea4bf
or ebx, 0xbfffa5ff
imul ebx, eax
add ebx, edx
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp]
mov qword [r12], rax
mov qword [r12 + 8], rdi
mov rax, qword [rbp]
mov qword [r12 + 0x10], rax
sub rsp, 0x20
mov rcx, r12
call fcn.14012eba0
add rsp, 0x20
mov r13, qword [r12 + 8]
mov rax, qword [rbp]
mov word [r13 + rax*2], 0
cmp ebx, 0x95414526
je 0x140102550
mov rdi, qword [r12]
cmp qword [rbp - 0x28], 0
je 0x140102b7b
mov eax, dword [0x140225108]
xor edx, edx
div dword [0x14022510c]
add eax, 0x86a7a7db
mov ecx, eax
not ecx
and ecx, 0xcc827861
and eax, 0x337d879e
sub eax, ecx
mov ecx, 0x88df4d47
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x65402e25
jbe 0x14010263f
mov rax, qword [0x14022cb48]
mov r15, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x140225110]
sub eax, dword [0x140225114]
mov ecx, eax
not ecx
and ecx, 0xe3e16fd2
and eax, 0x1c1e902d
sub eax, ecx
mov rsi, qword [0x14022cb48]
cmp eax, 0xbe6b93e5
je 0x140102650
mov eax, dword [0x140225118]
mov ecx, dword [0x14022511c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0xd5325cbb
mov ecx, eax
not ecx
or ecx, 0x4081400f
and ecx, 0x60d14c2f
mov edx, eax
and edx, 0x30e91d0
or edx, ecx
xor edx, 0x518ba352
and eax, 0x215a8d70
or eax, edx
cmp eax, 0x8acbbdd0
jne 0x140102ad4
jmp 0x140102b13
ud2
mov ecx, dword [0x140225160]
mov eax, dword [0x140225164]
mov edx, eax
not edx
and edx, ecx
xor eax, ecx
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2b7dc608
and ecx, 0xd48239f7
imul ecx, edx
mov edx, eax
and edx, 0xd48239f7
or eax, 0xd48239f7
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0xe28e9f5
and eax, 0x31d7160a
add eax, eax
sub eax, ecx
not eax
and eax, 0x5fbb7770
cmp eax, 0xea78ec33
jbe 0x140102770
ud2
mov eax, dword [0x140225168]
mov ecx, dword [0x14022516c]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0x7982d39d
not ecx
or ecx, 0x31b3bb78
and ecx, 0xb5ffbffc
ud2
ud2
mov edi, dword [0x140224ff0]
xor edi, dword [str.BL_]
mov eax, edi
not eax
and eax, 0x8e7f31cb
and edi, 0x7180ce34
sub edi, eax
add edi, 0x182428cb
xor edi, 0x64da5b07
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
cmp edi, 0x54450174
jae 0x140102811
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
jmp 0x1401027a4
test r14, r14
mov rsi, qword [rbp - 0x40]
je 0x140102930
mov eax, dword [0x140224ff8]
mov ecx, dword [0x140224ffc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
xor ecx, 0x5e46c2f7
xor eax, 0x6edacb16
add eax, ecx
and ecx, 0xcf63f61e
sub eax, ecx
or eax, 0x147b02ef
cmp eax, 0x838216fd
jb 0x1401028bc
mov eax, dword [0x140225000]
sub eax, dword [0x140225004]
mov ecx, eax
xor ecx, 0x11012171
xor eax, 0x6ad0588a
mov edx, eax
and edx, 0xc62ece06
and ecx, 0x39d131f9
imul ecx, edx
mov edx, eax
and edx, 0x39d131f9
or eax, 0x39d131f9
imul eax, edx
add eax, ecx
add eax, 0xc15d30b3
mov rcx, qword [0x14022cb48]
cmp eax, 0x2ec582fa
jbe 0x1401028c5
mov rax, qword [0x14022cb48]
jmp 0x14010286d
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140225008]
mov ecx, dword [0x14022500c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x2f367f02
and ecx, 0xd0c980fd
imul ecx, edx
mov edx, eax
and edx, 0xd0c980fd
or eax, 0xd0c980fd
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x1424fde3
add ecx, ecx
sub eax, ecx
cmp eax, 0x3ea62ed4
je 0x1401028e0
nop dword [rax]
mov eax, dword [0x140225014]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x140225010]
xor ecx, eax
imul rax, rcx, 0x25b3768b
shr rax, 0x3d
not eax
and eax, 0xc200a363
cmp eax, 0x31a29
je 0x140102930
mov rax, qword [rsi]
mov ecx, dword [0x140225018]
mov edx, dword [0x14022501c]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
or ecx, 0x4801000
xor ecx, 0x42610800
and ecx, 0x66e91d00
cmp ecx, 0x143e6b01
jb 0x140102960
test rax, rax
je 0x140102aa0
mov eax, 0x9bbdec55
nop dword [rax]
mov ecx, dword [0x140225020]
sub ecx, dword [0x140225024]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x99b6e001
mov edx, ecx
and edx, 0x404a97ab
xor ecx, 0x404a97ab
lea ecx, [rcx + rdx*2]
cmp ecx, 0x7a5aef37
je 0x1401029c0
mov eax, dword [0x140225028]
mov ecx, dword [0x14022502c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0xe6e372ca
add eax, 0xfcec560d
xor eax, 0xca43e08b
cmp eax, 0xcd441c8d
jbe 0x140102a40
mov rax, qword [0x14022cb48]
nop dword [rax + rax]
mov eax, dword [0x140225030]
and eax, dword [0x140225034]
mov ecx, eax
and ecx, 0x2f149685
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x2f149685
mov edx, eax
xor edx, 0x6842c544
and edx, eax
and edx, 0xebcef5c5
mov r8, qword [rsi + 8]
mov rcx, qword [0x14022cb48]
cmp edx, 0xe880cac3
ja 0x140102a40
sub rsp, 0x20
xor edx, edx
call fcn.14014eed0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x140225040]
and eax, dword [0x140225044]
add eax, 0xbd45f34b
imul rax, rax, 0x605279b5
shr rax, 0x3e
cmp eax, 0x5a847ddf
ja 0x140102aa0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x140225120]
imul eax, dword [0x140225124]
xor eax, 0x28992800
and eax, 0x299b6a04
imul rbx, rax, 0x50ade2cf
shr rbx, 0x3a
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call fcn.14014eed0
add rsp, 0x20
cmp ebx, 0xb3fadc49
jne 0x140102b30
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140102ad4
mov eax, dword [0x140225128]
mov ecx, dword [0x14022512c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
xor ecx, 0x5ce070ba
or eax, 0x231f8f45
and eax, ecx
add eax, 0x45ef405b
or eax, 0xb4a53b2c
cmp eax, 0x8d7d2215
jb 0x140102b30
mov r12, rdi
mov rdi, qword [rbp - 0x18]
jmp 0x140102204
mov eax, dword [0x140225148]
imul eax, dword [0x14022514c]
mov ecx, eax
and ecx, 0xf7b4af
add ecx, ecx
neg ecx
lea edi, [rax + rcx]
add edi, 0xccf7b4af
not edi
or edi, 0xf95a558e
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xb33fffde
jne 0x140102bf0
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140102b87
mov eax, dword [0x140225150]
mov ecx, dword [0x140225154]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0x473499c6
mov edx, eax
and edx, 0xb8cb6639
imul edx, ecx
mov ecx, eax
and ecx, 0x473499c6
or eax, 0x473499c6
imul eax, ecx
add eax, edx
imul eax, eax, 0x398aaccb
add eax, 0x11ac658
cmp eax, 0x192652bf
jb 0x140102bf0
nop word cs:[rax + rax]
mov eax, dword [0x140225158]
mov ecx, dword [0x14022515c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
and eax, 0xbc49a49f
mov edx, eax
not edx
and edx, 0xe3f46bb
mov r8d, ecx
and r8d, 0xb040a004
imul r8d, edx
and ecx, 0xc09049b
or eax, 0xe3f46bb
imul eax, ecx
add eax, r8d
and eax, 0xaa7ff806
cmp eax, 0xadccccda
jae 0x140102c60
jmp 0x140102aa0