Function at 0x1401003d0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x40], r8
mov r10, rdx
mov eax, dword [0x140224de0]
add eax, dword [0x140224de4]
xor eax, 0x11108800
mov r9d, eax
and r9d, 0x1331995f
mov edx, r9d
not edx
mov r8d, eax
and r8d, 0x12010845
and edx, 0x813eb11a
imul edx, r8d
and eax, 0x130911a
or r9d, 0x813eb11a
imul r9d, eax
add r9d, edx
cmp r9d, 0x7fd743e7
ja 0x140100478
mov eax, dword [0x140224de8]
xor edx, edx
div dword [0x140224dec]
mov edx, eax
not edx
or edx, 0x18000004
xor edx, 0x40000100
and edx, 0x78601b44
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
cmp edx, 0xb73f8ce5
jne 0x140100487
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
jmp 0x14010043c
mov eax, dword [0x140224df0]
xor edx, edx
div dword [0x140224df4]
add eax, 0x7ded6fbc
imul rax, rax, 0x59034e9b
shr rax, 0x3e
xor eax, 0xde6f91e1
neg eax
cmp eax, 0xa3b91d23
jbe 0x1401004d0
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x400
call fcn.1401516e0
sub rsp, rax
nop dword [rax]
mov edx, dword [0x140224df8]
xor edx, dword [0x140224dfc]
mov eax, edx
not eax
or eax, 0x6e75694
or edx, 0xf918a96b
and edx, eax
add edx, 0xea5078ed
mov eax, edx
not eax
or eax, 0x58dc94c8
or edx, 0xa7236b37
and edx, eax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x400
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
cmp edx, 0x54e37e89
je 0x1401004d0
mov qword [rbp - 8], r10
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x10], rcx
mov eax, dword [0x140224e00]
xor edx, edx
div dword [0x140224e04]
mov ecx, 0xaaf495a7
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x12df83f
and eax, 0x12ccf85
cmp eax, 0x9f704114
je 0x140100587
mov qword [r13], 0
mov qword [r13 + 8], 2
mov qword [r13 + 0x10], 0
xor eax, eax
test al, al
je 0x1401005a1
mov qword [r13], 0
mov qword [r13 + 8], 2
mov qword [r13 + 0x10], 0
jmp 0x140100569
mov r14d, 0x200
mov eax, 2
mov qword [rbp], rax
xor eax, eax
mov qword [rbp - 0x28], rax
xor eax, eax
mov qword [rbp - 0x30], rax
xor eax, eax
mov qword [rbp - 0x18], rax
nop word cs:[rax + rax]
cmp r14, 0x201
jae 0x140100600
mov eax, 0x200
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov rbx, r14
jmp 0x1401006e1
mov rax, r14
mov rdx, qword [rbp - 0x18]
xor rax, rdx
mov r8, rdx
not r8
and r8, r14
add r8, r8
sub r8, rax
mov rax, qword [rbp - 0x30]
sub rax, rdx
cmp r8, rax
mov r12, qword [rbp]
jbe 0x1401006b1
sub rsp, 0x20
mov rcx, r13
call fcn.1401504f0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x140224e08]
xor edx, edx
div dword [0x140224e0c]
or eax, 0xdde9d8f5
add eax, 0x7cacd75c
xor eax, 0x38260431
cmp eax, 0x5775f21c
jb 0x140100640
mov rax, qword [r13]
mov qword [rbp - 0x28], rax
nop dword [rax]
mov eax, dword [0x140224e10]
mov ecx, dword [0x140224e14]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0xc09fb40c
xor eax, 0xed245999
cmp eax, 0xf81f0211
jae 0x140100670
mov r12, qword [r13 + 8]
mov rax, qword [rbp - 0x28]
mov ecx, 0xffffffff
cmp rax, rcx
mov ebx, 0xffffffff
cmovb rbx, rax
mov qword [r13 + 0x10], rbx
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x48], rbx
mov qword [rbp], r12
mov qword [rbp - 0x20], r12
mov rax, rbx
mov qword [rbp - 0x18], rbx
mov eax, dword [0x140224e18]
mov ecx, dword [0x140224e1c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x15682888
and eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf8ba2bda
and ecx, 0x745d425
imul ecx, edx
mov edx, eax
and edx, 0x745d425
or eax, 0x745d425
imul eax, edx
add eax, ecx
cmp eax, 0xaf5ba41e
mov r15, qword [sym.imp.KERNEL32.dll_SetLastError]
mov r12, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
je 0x1401007ae
nop
mov eax, dword [0x140224e20]
add eax, dword [0x140224e24]
imul eax, eax, 0x85f19aa5
not eax
or eax, 0xa2a7afc1
mov r14d, eax
not r14d
mov ecx, r14d
and ecx, 0x5d58101c
and eax, 0x820365e3
imul eax, ecx
mov ecx, r14d
and ecx, 0x4022
or r14d, 0x820365e3
imul r14d, ecx
add r14d, eax
sub rsp, 0x20
xor ecx, ecx
call r15
mov rcx, r12
mov edx, ebx
mov r8, rsi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
add rsp, 0x20
cmp r14d, 0x3f017bf2
jne 0x1401007d0
sub rsp, 0x20
xor ecx, ecx
call r15
mov rcx, r12
mov edx, ebx
mov r8, rsi
xor r9d, r9d
call fcn.1401505b0
add rsp, 0x20
jmp 0x140100740
mov edi, eax
test eax, eax
jne 0x140100878
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop dword [rax + rax]
mov ecx, dword [0x140224e28]
sub ecx, dword [0x140224e2c]
mov edx, ecx
xor edx, 0x76469436
and edx, ecx
mov ecx, edx
not ecx
or edx, 0x20ec169
or ecx, 0xfdf13e96
and ecx, edx
xor ecx, 0x79335eca
cmp ecx, 0xdc04c7e4
ja 0x1401007f0
nop word cs:[rax + rax]
mov ecx, dword [0x140224e30]
add ecx, dword [0x140224e34]
mov edx, ecx
xor edx, 0x5e2c7a3
add edx, ecx
and ecx, 0xfa1d385c
sub edx, ecx
mov ecx, edx
not ecx
or edx, 0x58000422
or ecx, 0x22a0a280
and ecx, edx
not ecx
and ecx, 0x7aa0a6a2
cmp ecx, 0xd44ea3c7
ja 0x140100830
test eax, eax
jne 0x140100c01
mov r14d, edi
mov eax, dword [0x140224e70]
or eax, dword [str.Uc6_]
add eax, 0x3b330a08
or eax, 0x8dd86981
imul eax, eax, 0xc87d49ce
cmp eax, 0x90e4da2f
jb 0x14010087b
cmp rbx, r14
jne 0x1401009c0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp eax, 0x7a
jne 0x1401012cd
nop
mov eax, dword [0x140224e80]
xor edx, edx
div dword [0x140224e84]
mov ecx, eax
not ecx
and ecx, 0xed6bdaab
mov edx, eax
and edx, 0x12942554
imul edx, ecx
mov ecx, eax
and ecx, 0xed6bdaab
or eax, 0xed6bdaab
imul eax, ecx
lea ecx, [rax + rdx]
add ecx, 0x7bce790c
add eax, edx
mov edx, ecx
and edx, 0x3d9dbfca
xor ecx, 0xc2624035
add eax, ecx
add eax, 0x7bce790c
sub eax, edx
cmp eax, 0x534a273d
jb 0x1401008c0
lea rax, [rbx + rbx]
mov ecx, dword [0x140224e88]
xor ecx, dword [0x140224e8c]
imul ecx, ecx, 0xdfe87e69
mov edx, ecx
xor edx, 0xf9422bf8
and ecx, 0x6bdd407
add ecx, ecx
sub ecx, edx
add ecx, 0x5d095a3c
cmp rbx, 0x7fffffff
mov r14, rax
mov edx, 0xffffffff
cmova r14, rdx
cmp ecx, 0xb48a2a53
ja 0x140100920
nop word cs:[rax + rax]
mov eax, dword [0x140224e90]
xor edx, edx
div dword [0x140224e94]
add eax, 0x8c8c6e87
mov ecx, eax
not ecx
or ecx, 0x4061048a
and ecx, 0xd47d048a
mov edx, eax
and edx, 0x29823930
or edx, ecx
xor edx, 0x3961293a
and eax, 0xad1c2930
or eax, edx
cmp eax, 0x2c54154f
je 0x140100970
jmp 0x1401005d0
mov eax, dword [0x140224e78]
or eax, dword [0x140224e7c]
imul rax, rax, 0x5d880605
shr rax, 0x3d
add eax, 0x58ebfaba
xor eax, 0x68548a84
cmp eax, 0xd74d83d5
ja 0x1401009c0
cmp rbx, r14
jb 0x1401005d0
cmp qword [rbp - 0x48], r14
jb 0x140101301
mov r8, qword [rbp - 0x40]
mov r12, qword [rbp - 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x140224eb0]
add eax, dword [0x140224eb4]
imul rax, rax, 0x60bd60c5
shr rax, 0x3c
mov ecx, 0xee5a1f4c
sub ecx, eax
add eax, 0x11a5e0b3
mov edx, eax
and edx, 0x1020002b
and ecx, 0x4400a44
imul ecx, edx
mov edx, eax
and edx, 0x185e094
or eax, 0x5c5ead4
imul eax, edx
add eax, ecx
cmp eax, 0x15c48016
jb 0x140100a10
mov r9, qword [r8]
mov r13, qword [r8 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x140224eb8]
mov ecx, dword [0x140224ebc]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0x1f1d6ab4
and ecx, 0x65a5018f
add ecx, 0x207c2e84
cmp ecx, 0xc450e788
ja 0x140100a70
mov rdx, qword [r8 + 0x10]
lea rax, [rdx - 1]
cmp rax, 4
jb 0x1401016c7
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140100ac0
test rdx, rdx
je 0x140101299
movabs rax, 0x7ffffffffffffffb
and rax, rdx
mov rcx, rdx
xor rcx, 0xfffffffffffffffb
lea rax, [rcx + rax*2]
nop word cs:[rax + rax]
mov ecx, dword [0x140224ec0]
add ecx, dword [0x140224ec4]
shr ecx, 1
imul rcx, rcx, 0x46b64399
shr rcx, 0x3d
cmp ecx, 0x1b4a5e99
je 0x140100af0
cmp rax, r14
jne 0x140100c8a
mov qword [rbp - 8], rdx
mov qword [rbp - 0x18], r9
lea rbx, [r13 + 8]
mov eax, dword [0x140224ec8]
mov ecx, dword [0x140224ecc]
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, eax
or ecx, 0x2137af9
sub ecx, eax
or ecx, 0xfaf26d09
imul eax, ecx, 0x81fc768c
cmp eax, 0x919bd3e4
jne 0x140100b70
lea r8, [r14 + r14]
sub rsp, 0x20
mov rcx, r12
mov rdx, rbx
call fcn.1401505f0
add rsp, 0x20
lea rsi, [r14 + r14]
nop word cs:[rax + rax]
mov eax, dword [0x140224ed0]
xor edx, edx
div dword [0x140224ed4]
mov ecx, eax
not ecx
and ecx, 0xc2f7801d
and eax, 0x3d087fe2
sub eax, ecx
mov r15d, eax
not r15d
or eax, 0x9de6af81
or r15d, 0x6219507e
and r15d, eax
not r15d
mov eax, r15d
and eax, 0x4e2ffd81
or r15d, 0x4e2ffd81
add r15d, eax
sub rsp, 0x20
mov rcx, r12
mov rdx, rbx
mov r8, rsi
call fcn.1401505f0
add rsp, 0x20
cmp r15d, 0x7769fbde
jb 0x140100b80
test eax, eax
je 0x140100c97
mov rax, qword [rbp - 0x10]
mov r15, qword [rbp]
mov r9, qword [rbp - 0x18]
jmp 0x1401010f0
movabs rsi, 0x8000000000000000
movabs rdi, 0x5a5f613f00f8a95c
mov eax, dword [0x140224e38]
xor edx, edx
div dword [0x140224e3c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xca87fa7
and ecx, 0xf3578058
imul ecx, edx
mov edx, eax
and edx, 0xf3578058
or eax, 0xf3578058
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x44dc1a3b
mov edx, eax
and edx, 0x3b23e5c0
imul edx, ecx
mov ecx, eax
and ecx, 0x44dc1a38
or eax, 0x44dc1a3b
imul eax, ecx
add eax, edx
or eax, 0xad12d1a0
cmp eax, 0xc23f5a0f
mov r14, qword [rbp - 0x10]
jae 0x14010139f
jmp 0x140101403
mov rax, qword [rbp - 0x10]
mov r15, qword [rbp]
jmp 0x1401010f4
test edi, edi
je 0x140100eae
mov eax, dword [0x140224ee0]
xor edx, edx
div dword [0x140224ee4]
mov ecx, eax
xor ecx, 0x8c0804
or eax, 0x80
and eax, ecx
or eax, 0x60c218
and eax, 0xecca9c
cmp eax, 0x4fc8ee5
jbe 0x140100ce0
movzx eax, byte [0x14022cb78]
nop word cs:[rax + rax]
mov eax, dword [0x140224ee8]
xor edx, edx
div dword [0x140224eec]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa0eb7772
and ecx, 0x5f14888d
imul ecx, edx
mov edx, eax
and edx, 0x5f14888d
or eax, 0x5f14888d
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0x81db32de
xor eax, 0x6dbf9b1a
and eax, ecx
movzx ecx, byte [0x14022cb78]
cmp eax, 0x707752a4
ja 0x140100ce0
mov eax, dword [0x140224ef0]
and eax, dword [0x140224ef4]
imul rcx, rax, 0x155b2743
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0xaa419b7f
mov ecx, 0x8d4bceb3
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xada3c08e
jbe 0x140100d7e
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.140107940
add rsp, 0x20
xor ebx, ebx
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.14014ee50
add rsp, 0x20
test bl, bl
jne 0x140100d80
mov rdi, rax
nop dword [rax]
mov eax, dword [0x140224ef8]
sub eax, dword [0x140224efc]
add eax, 0x3f406bbc
mov ecx, eax
or ecx, 0xd8a13622
not eax
or eax, 0x275ec9dd
and eax, ecx
cmp eax, 0xde847431
ja 0x140100da0
test rdi, rdi
jne 0x140100eb3
mov eax, dword [0x140224f00]
mov ecx, dword [0x140224f04]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0xb3d7535
add ecx, eax
and eax, 0xb3d7535
sub ecx, eax
shr ecx, 1
mov eax, 0xa6992cc9
imul rax, rcx
shr rax, 0x3e
or eax, 0x7a55d94c
cmp eax, 0x9e7aa314
jbe 0x140100e14
ud2
mov eax, dword [0x140224f0c]
add eax, dword [0x140224f08]
mov ecx, eax
and ecx, 0x52e45744
add ecx, ecx
sub eax, ecx
add eax, 0xd2e45744
mov ecx, eax
and ecx, 0x366f1998
or eax, 0x366f1998
add eax, ecx
mov ecx, eax
and ecx, 0x7d89207a
add ecx, ecx
sub eax, ecx
ud2
mov edi, 2
mov qword [rbp - 0x30], r13
mov eax, dword [0x140224f18]
mov ecx, dword [0x140224f1c]
add eax, ecx
add eax, 0x547273a6
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x7ead822f
and ecx, 0x81527dd0
imul ecx, edx
mov edx, eax
and edx, 0x81527dd0
or eax, 0x81527dd0
imul eax, edx
add eax, ecx
cmp eax, 0x174f8635
jae 0x140100f39
sub rsp, 0x20
mov rcx, rdi
mov rdx, qword [rbp - 0x20]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rbx, qword [rbp - 0x38]
mov qword [rbx], r14
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], r14
sub rsp, 0x20
mov rcx, rbx
call fcn.14012eba0
add rsp, 0x20
mov rax, qword [rbx + 8]
mov word [rax + r14*2], 0
lea rax, [r14 + 1]
mov qword [rbp - 8], rax
mov r13, qword [rbp - 0x38]
mov r12, qword [rbp - 0x20]
nop dword [rax]
mov r15d, dword [0x140224f20]
sub r15d, dword [0x140224f24]
add r15d, 0xf6aa0d40
not r15d
or r15d, 0x7b66d7b9
sub rsp, 0x20
mov rcx, rdi
mov rdx, r12
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r13], r14
mov qword [r13 + 8], rdi
mov qword [r13 + 0x10], r14
sub rsp, 0x20
mov rcx, r13
call fcn.1401505d0
add rsp, 0x20
mov rbx, qword [r13 + 8]
mov word [rbx + r14*2], 0
add r15d, 0xc358889d
jae 0x140100f50
mov rdi, qword [r13]
cmp qword [rbp - 0x18], 0
je 0x1401010e2
mov rsi, qword [0x14022cb48]
mov eax, dword [0x140224f28]
mov ecx, dword [0x140224f2c]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
mov ecx, eax
not ecx
or ecx, 0xfab8a602
add eax, ecx
inc eax
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x67c0db90
and ecx, 0x983f246f
imul ecx, edx
mov edx, eax
and edx, 0x983f246f
or eax, 0x983f246f
imul eax, edx
add eax, ecx
mov ecx, 0xa728abe9
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x41e145a7
mov r15, qword [rbp]
mov r12, qword [rbp - 0x30]
jbe 0x140101050
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r12
call fcn.14014eed0
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x140224f30]
and eax, dword [0x140224f34]
xor eax, 0x61b92f34
imul r14d, eax, 0xca1e5f52
add r14d, 0x84da8cb2
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r12
call fcn.14014eed0
add rsp, 0x20
cmp r14d, 0x6e301b58
jb 0x140101050
nop dword [rax]
mov eax, dword [0x140224f38]
mov ecx, dword [0x140224f3c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x32f0f509
and eax, 0x32f0f509
add eax, eax
sub eax, ecx
imul rcx, rax, 0x3cacb873
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul eax, eax, 0x97a81913
cmp eax, 0xbd24d92c
je 0x140101090
mov r9, rdi
mov r13, rbx
mov rax, qword [rbp - 0x10]
jmp 0x1401010f0
mov r9, rdi
mov r13, rbx
mov rax, qword [rbp - 0x10]
mov r15, qword [rbp]
mov rdx, qword [rbp - 8]
mov qword [rax], r9
mov qword [rax + 8], r13
mov qword [rax + 0x10], rdx
cmp qword [rbp - 0x28], 0
je 0x140101240
mov eax, dword [0x140224f40]
mov ecx, dword [0x140224f44]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
imul eax, eax, 0x38d1b49
add eax, 0xa48ba547
xor eax, 0x2a449747
cmp eax, 0xf482b08a
jae 0x140101140
mov rax, qword [0x14022cb48]
nop
mov eax, dword [0x140224f4c]
add eax, dword [0x140224f48]
imul eax, eax, 0x6bc84c6a
mov ecx, eax
xor ecx, 0x8050000c
xor eax, 0x7109d830
and eax, 0x77adfff2
and ecx, 0x8852000c
or ecx, eax
mov rsi, qword [0x14022cb48]
cmp ecx, 0xca6b00f1
jb 0x140101140
xor eax, eax
test al, al
je 0x140101197
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov edi, 0x8539ff63
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov r14d, dword [0x140224f50]
and r14d, dword [0x140224f54]
imul r14, rdi
shr r14, 0x3f
or r14d, 0x32797624
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call rbx
add rsp, 0x20
cmp r14d, 0x34b9bb2d
ja 0x1401011b0
nop dword [rax + rax]
mov eax, dword [0x140224f58]
mov ecx, dword [0x140224f5c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
or ecx, 0x6864fac1
xor ecx, 0x5104058
or eax, 0xfa64be81
and eax, ecx
or eax, 0x60efb3a7
cmp eax, 0xa677f9da
jb 0x1401011f0
nop dword [rax]
mov eax, dword [0x140224f60]
or eax, dword [0x140224f64]
mov ecx, eax
not ecx
and ecx, 0x6880481a
mov edx, eax
and edx, 0x977fb7e5
imul edx, ecx
mov ecx, eax
and ecx, 0x6880481a
or eax, 0x6880481a
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or eax, 0x5591800b
or ecx, 0x80281fb5
and ecx, eax
not ecx
or ecx, 0x2a466040
cmp ecx, 0x2abbaf2a
je 0x140101240
jmp 0x140101609
ud2
mov eax, dword [0x140224e98]
mov ecx, eax
not ecx
or ecx, dword [0x140224e9c]
add eax, ecx
inc eax
imul rax, rax, 0x9e3df65
shr rax, 0x3b
add eax, 0x1c61a15b
cmp eax, 0xfd1ce5e5
jbe 0x14010161a
jmp 0x140101669
mov eax, dword [0x140224f68]
or eax, dword [0x140224f6c]
mov ecx, eax
xor ecx, 0x7da419a8
xor eax, 0x82080251
and eax, 0xbb881279
mov edx, ecx
and edx, 0x4477ed86
imul edx, eax
mov eax, ecx
and eax, 0xbb881279
or ecx, 0xbb881279
imul ecx, eax
add ecx, edx
xor ecx, 0x82a41cb9
cmp ecx, 0x8053d89
jae 0x140101350
ud2
mov eax, dword [0x140224f70]
mov ecx, dword [0x140224f74]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0xab9560d1
imul rax, rax, 0x19abae53
shr rax, 0x3b
or eax, 0x2a02f68c
ud2
mov eax, dword [0x140224e44]
mov ebx, eax
xor ebx, eax
not ebx
and ebx, dword [0x140224e40]
xor ebx, eax
add ebx, 0x9554dca6
or ebx, 0xbb1c488d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
mov rcx, rdi
not rcx
mov rdx, rdi
and rdx, 0xfffffffffffffffd
mov r8d, ecx
and r8d, 2
or r8, rdx
xor rcx, rdi
and rcx, rax
xor r8, rdi
xor r8, rcx
mov qword [r14 + 8], r8
mov qword [r14], rsi
cmp ebx, 0xd760124f
jne 0x140101425
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [r14 + 8], rax
mov qword [r14], rsi
jmp 0x14010139f
cmp qword [rbp - 0x28], 0
mov r8, qword [rbp]
mov rbx, qword [rbp - 0x40]
je 0x140101450
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov ecx, dword [0x140224e48]
mov eax, dword [0x140224e4c]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1c35f4cb
and ecx, 0xe3ca0b34
imul ecx, edx
mov edx, eax
and edx, 0xe3ca0b34
or eax, 0xe3ca0b34
imul eax, edx
add eax, ecx
not eax
mov ecx, eax
or ecx, 0x4464d02b
or eax, 0x4464d02a
and eax, ecx
mov ecx, eax
not ecx
and eax, 0xd7007bce
mov edx, ecx
and edx, 0x289b0411
imul edx, eax
mov eax, ecx
and eax, 0x93002bc4
or ecx, 0xd7007bce
imul ecx, eax
add ecx, edx
cmp ecx, 0x62e9f560
ja 0x140101450
mov rax, qword [rbx]
nop word cs:[rax + rax]
mov ecx, dword [0x140224e50]
and ecx, dword [0x140224e54]
add ecx, 0x775f840
mov edx, ecx
or edx, 0x26b03b3
not ecx
or ecx, 0xfd94fc4c
and ecx, edx
cmp ecx, 0xe9d934b5
je 0x1401014e0
test rax, rax
je 0x140101609
nop word cs:[rax + rax]
mov eax, dword [0x140224e58]
mov ecx, dword [0x140224e5c]
mov edx, eax
not edx
and eax, ecx
not ecx
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0x6915e217
add ecx, 0x6a8a15dd
mov eax, ecx
not eax
and eax, 0x45dd8d53
and ecx, 0xba2272ac
sub ecx, eax
cmp ecx, 0x9878b75
je 0x140101520
mov eax, dword [0x140224e60]
xor edx, edx
div dword [0x140224e64]
and eax, 0xa44666d8
xor eax, 0x163ea734
imul rax, rax, 0x370e01e7
shr rax, 0x3d
cmp eax, 0x6497c73a
jbe 0x1401015a3
mov r8, qword [rbx + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call fcn.14014eed0
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov edi, dword [0x140224e68]
imul edi, dword [0x140224e6c]
mov eax, edi
not eax
mov ecx, edi
or ecx, 0x6d23d7ff
mov edx, ecx
and edx, 0xed76af23
and eax, 0x12880000
imul eax, edx
and ecx, 0x128950dc
or edi, 0x7fabd7ff
imul edi, ecx
add edi, eax
mov r8, qword [rbx + 8]
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
call rsi
add rsp, 0x20
cmp edi, 0xb928cc4b
je 0x1401015b0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x140224ea0]
mov ecx, dword [0x140224ea4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0x395d1455
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd91709de
and ecx, 0x26e8f621
imul ecx, edx
mov edx, eax
and edx, 0x26e8f621
or eax, 0x26e8f621
imul eax, edx
add eax, ecx
imul eax, eax, 0x9f4bbed4
ud2
ud2
ud2