Function at 0x140197a40
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
movaps xmmword [rbp - 0x10], xmm6
mov r15, rdx
mov rsi, rcx
xor eax, eax
test al, al
je 0x140197a80
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415a2798]
or eax, dword [0x1415a279c]
xor eax, 0x6a43088
or eax, 0xf84b4774
mov ecx, eax
not ecx
and eax, 0x5ba9aefe
mov edx, ecx
and edx, 0x4141001
imul edx, eax
mov eax, ecx
and eax, 0x3a0a88a
or ecx, 0x5ba9aefe
imul ecx, eax
add ecx, edx
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r12, rsp
cmp ecx, 0xf35dc597
ja 0x140197a80
mov qword [r12], 0
mov rdx, qword [r15 + 0x10]
mov rax, rdx
shr rax, 0x20
je 0x140197b03
lea rax, [0x141578c20]
mov qword [rsi + 8], rax
xor eax, eax
test al, al
je 0x140198e52
jmp 0x140198e89
sub rsp, 0x20
xor ecx, ecx
mov rdi, rdx
xor r8d, r8d
mov r9, r12
call fcn.14020d3a0
add rsp, 0x20
mov r14, qword [r12]
mov eax, 0xb4c0c0cf
nop word cs:[rax + rax]
mov ecx, dword [0x1415a27a0]
mov edx, dword [0x1415a27a4]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
or ecx, 0xc6d08ebd
add ecx, 0xc6a7c063
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x9db38b01
ja 0x140197b30
test r14, r14
mov qword [rbp - 0x20], rsi
je 0x140197dc5
nop word [rax + rax]
mov eax, dword [0x1415a27ac]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x1415a27a8]
xor ecx, eax
mov eax, ecx
and eax, 0x33fb30d2
add eax, eax
neg eax
add eax, ecx
add eax, 0x33fb30d2
or eax, 0xbf5c6f07
imul eax, eax, 0x66af13bf
cmp eax, 0x19ffb1d0
jb 0x140197b90
test r14, r14
js 0x1401980fb
mov eax, dword [str.1V__t]
imul eax, dword [0x1415a27c4]
imul rax, rax, 0x6b799aeb
shr rax, 0x3e
imul eax, eax, 0xadff380d
cmp eax, 0xdac094cb
jne 0x140197bfd
movzx eax, byte [0x1415acbd0]
mov eax, 0x9c44d949
nop word cs:[rax + rax]
mov ecx, dword [0x1415a27c8]
mov edx, dword [0x1415a27cc]
not ecx
not edx
or edx, ecx
not edx
or edx, 0x210a9437
imul rdx, rax
shr rdx, 0x3f
imul ecx, edx, 0x83abd394
movzx edx, byte [0x1415acbd0]
cmp ecx, 0x82ba6524
ja 0x140197c10
mov eax, dword [0x1415a27d0]
xor eax, dword [0x1415a27d4]
mov ecx, eax
xor ecx, 0xa7d3448
and ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x41f83150
and eax, 0xbe07ceaf
imul eax, edx
mov edx, ecx
and edx, 0xbe07ceaf
or ecx, 0xbe07ceaf
imul ecx, edx
add ecx, eax
imul eax, ecx, 0xb613199
cmp eax, 0xd1f2ba4b
jne 0x140197cb0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call fcn.14020ae90
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415a27d8]
mov ecx, eax
not ecx
or ecx, dword [0x1415a27dc]
add eax, ecx
inc eax
mov ecx, eax
xor ecx, 0x7b449e92
and eax, 0x4bb616d
add eax, eax
sub eax, ecx
mov esi, eax
and esi, 0x4e6a35d6
mov ecx, esi
not ecx
mov edx, eax
and edx, 0xa4a3190
and ecx, 0x45b0c46e
imul ecx, edx
and eax, 0x44200446
or esi, 0x45b0c46e
imul esi, eax
add esi, ecx
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call fcn.14020ae90
add rsp, 0x20
cmp esi, 0x653dcc75
ja 0x140197cb0
mov r13, rax
nop
mov eax, dword [0x1415a27e0]
mov ecx, dword [0x1415a27e4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
or eax, 0x300400
or ecx, 0x80086
and ecx, eax
not ecx
or ecx, 0x4000009
and ecx, 0x438048f
or ecx, 0xfac7fa60
cmp ecx, 0x5887ac12
je 0x140197d20
test r13, r13
mov rsi, rdi
jne 0x140197dce
ud2
mov r13d, 1
mov rsi, rdi
xor eax, eax
mov ecx, dword [0x1415a27f0]
sub ecx, dword [0x1415a27f4]
imul rcx, rcx, 0x24a70829
shr rcx, 0x3c
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0xfffffffe
and edx, 0x23958a09
imul edx, r8d
mov r8d, ecx
and r8d, 1
or ecx, 0x23958a09
imul ecx, r8d
add ecx, edx
mov rbx, r14
sub rbx, 1
cmovb rbx, rax
sbb rbx, 0xffffffffffffffff
cmp ecx, 0x26bd0b11
je 0x140197dd0
cmp r14, rbx
jbe 0x1401980b6
nop
mov eax, dword [0x1415a27f8]
mov ecx, dword [0x1415a27fc]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
add eax, 0xbe44db44
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xda5cc842
and ecx, 0x25a337bd
imul ecx, edx
mov edx, eax
and edx, 0x25a337bd
or eax, 0x25a337bd
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or eax, 0x3e5f11c9
or ecx, 0xc1a0ee36
and ecx, eax
cmp ecx, 0x5abd7779
je 0x140197e30
test rbx, rbx
je 0x1401980be
mov qword [rbp - 0x18], r15
mov eax, dword [0x1415a2828]
or eax, dword [0x1415a282c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xcbcffa39
and ecx, 0x343005c6
imul ecx, edx
mov edx, eax
and edx, 0x343005c6
or eax, 0x343005c6
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x5c4305da
mov edx, eax
and edx, 0xa3bcfa24
imul edx, ecx
mov ecx, eax
and ecx, 0x5c4305da
or eax, 0x5c4305da
imul eax, ecx
add eax, edx
cmp eax, 0x237f5803
jne 0x140197f00
mov rax, qword [0x1415acb98]
nop
mov eax, dword [0x1415a2830]
mov ecx, dword [0x1415a2834]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x3164caad
and eax, 0xe65bf887
xor eax, 0x20510085
mov r15, qword [0x1415acb98]
cmp eax, 0x272608d
jb 0x140197f00
mov eax, dword [0x1415a283c]
add eax, dword [0x1415a2838]
mov ecx, eax
not ecx
and ecx, 0x4e5ea629
mov edx, eax
and edx, 0xb1a159d6
imul edx, ecx
mov ecx, eax
and ecx, 0x4e5ea629
or eax, 0x4e5ea629
imul eax, ecx
add eax, edx
add eax, 0xe57df21b
mov ecx, eax
xor ecx, 0x1ac2563c
or eax, 0xe53da9c3
and eax, ecx
cmp eax, 0x790521bc
jbe 0x140197fb0
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r13
mov r9, rbx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
add rsp, 0x20
mov eax, dword [0x1415a2840]
xor edx, edx
div dword [0x1415a2844]
mov edi, eax
or edi, 0x34fabf0b
add edi, 0x7d13189a
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r13
mov r9, rbx
call fcn.14020b280
add rsp, 0x20
cmp edi, 0xf041db87
ja 0x140197fb0
mov r14, rax
nop
mov eax, dword [0x1415a2848]
xor edx, edx
div dword [0x1415a284c]
mov ecx, eax
not ecx
or ecx, 0x6471bf62
add eax, ecx
inc eax
not eax
or eax, 0xa64c6d0a
cmp eax, 0x17f40ea2
je 0x140197ff0
test r14, r14
mov r15, qword [rbp - 0x18]
jne 0x1401982d7
mov eax, dword [0x1415a2850]
xor eax, dword [0x1415a2854]
or eax, 0x55eab9de
mov ecx, 0xb2948049
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xaa0e8942
jbe 0x14019804f
ud2
xor eax, eax
ud2
mov r14, r13
jmp 0x1401982d7
mov eax, dword [0x1415a2800]
sub eax, dword [0x1415a2804]
mov ecx, eax
and ecx, 0x2e31df13
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xdf13fd3a
mov ecx, 0x85ab46f3
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xe4dcf9c0
jbe 0x140198186
jmp 0x1401981c7
mov eax, dword [0x1415a27b0]
and eax, dword [0x1415a27b4]
imul rax, rax, 0x77197811
shr rax, 0x3a
mov ecx, eax
not ecx
or eax, 0x63058b58
or ecx, 0x61000912
and ecx, eax
and ecx, 0x63058b5a
cmp ecx, 0x968d9556
jbe 0x140198140
ud2
mov eax, dword [0x1415a27b8]
mov ecx, dword [0x1415a27bc]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
or eax, 0x1080602
and ecx, 0x2824c010
xor eax, 0x2824c010
or eax, ecx
and eax, 0x293dc696
ud2
mov eax, dword [0x1415a2808]
or eax, dword [0x1415a280c]
mov ecx, eax
not ecx
and ecx, 0x773f4dd1
mov edx, eax
and edx, 0x88c0b22e
imul edx, ecx
mov ecx, eax
and ecx, 0x773f4dd1
or eax, 0x773f4dd1
imul eax, ecx
add eax, edx
mov r14, qword [0x1415acb98]
cmp eax, 0x5182d9ed
jne 0x1401981d0
mov rax, qword [0x1415acb98]
jmp 0x140198186
mov eax, dword [0x1415a2810]
mov ecx, dword [0x1415a2814]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0x150628b5
mov eax, ecx
not eax
and eax, 0xf220a970
mov edx, ecx
and edx, 0xddf568f
imul edx, eax
mov eax, ecx
and eax, 0xf220a970
or ecx, 0xf220a970
imul ecx, eax
add ecx, edx
cmp ecx, 0x6c588003
je 0x140198280
mov eax, dword [0x1415a2818]
mov ecx, dword [0x1415a281c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
lea esi, [rax + rdx]
add esi, 0xe01f637c
add eax, edx
mov ecx, 0x1fe09c83
sub ecx, eax
and ecx, 0xb3d2825f
and esi, 0x4c2d7da0
or esi, ecx
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x967478e6
jae 0x1401982a0
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140198218
mov eax, dword [0x1415a2820]
mov ecx, dword [0x1415a2824]
not ecx
add eax, ecx
add eax, 0x1cc8c297
imul rax, rax, 0x540ee885
shr rax, 0x3d
not eax
and eax, 0xbb46f4eb
cmp eax, 0xdf670f72
je 0x1401982a0
mov r14d, 1
mov rsi, rdi
sub rsp, 0x20
mov rcx, r14
mov edx, esi
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
test eax, eax
je 0x140198c1e
mov eax, dword [0x1415a2868]
xor edx, edx
div dword [0x1415a286c]
mov eax, 0xbbe07f7b
nop dword [rax + rax]
mov ecx, dword [0x1415a2870]
add ecx, dword [0x1415a2874]
imul rcx, rax
shr rcx, 0x3f
mov edx, ecx
not edx
and edx, 0x2229591b
xor edx, 0x45edb4b2
or edx, ecx
imul rcx, rdx, 0x52e8718b
shr rcx, 0x3d
cmp ecx, 0x6f4b1305
je 0x140198310
mov rcx, qword [r15]
mov rdi, qword [r15 + 8]
mov eax, dword [0x1415a2878]
xor edx, edx
div dword [0x1415a287c]
add eax, 0xef797324
mov edx, eax
or edx, 0x22f30641
mov r8d, eax
not r8d
and r8d, 0x104e924
mov r9d, edx
and r9d, 0xded914da
imul r9d, r8d
and edx, 0x2126eb25
or eax, 0x23f7ef65
imul eax, edx
add eax, r9d
test rcx, rcx
mov rdx, rsi
cmove rdx, rcx
cmp eax, 0x41a29ed4
je 0x140198350
mov qword [rbp - 0x18], rsi
mov r12, rdx
mov eax, 0x822ebcf7
nop word cs:[rax + rax]
xor r8d, r8d
test rcx, rcx
setne dl
mov r10d, dword [0x1415a2880]
mov r11d, dword [0x1415a2884]
mov r9d, r10d
not r9d
mov esi, r11d
not esi
mov r15d, r9d
and r15d, 0xf0097d0d
and r10d, 0xff682f2
or r10d, r15d
or r9d, esi
and esi, 0xf0097d0d
and r11d, 0xff682f2
or r11d, esi
xor r11d, r10d
not r9d
or r9d, r11d
imul r9, rax
shr r9, 0x3f
lea r10d, [r9 + 0x20023c92]
imul r10d, r10d, 0xcd004000
or r9d, 0xef12fd96
imul r9d, r9d, 0x2108104
add r9d, r10d
cmp r9d, 0xc79f2746
je 0x1401983c0
mov r8b, dl
xor r11d, r11d
xorps xmm6, xmm6
xor r13d, r13d
mov r15, r12
mov rsi, qword [rbp - 0x18]
nop dword [rax]
mov eax, dword [0x1415a2888]
xor edx, edx
div dword [0x1415a288c]
or eax, 0x8080890
and eax, 0x1c1988d0
mov edx, eax
or edx, 0xe0e70d
not eax
or eax, 0xff171072
and eax, edx
cmp eax, 0xb5992f7b
ja 0x140198460
test rsi, rsi
je 0x140198cd8
dec rsi
nop dword [rax]
mov eax, dword [0x1415a2890]
imul eax, dword [0x1415a2894]
and eax, 0xa46269e5
imul rax, rax, 0x555c1497
shr rax, 0x39
mov edx, eax
and edx, 1
xor eax, 0x5367fe21
lea eax, [rax + rdx*2]
cmp eax, 0xb29abe8
je 0x1401984a0
test r15, r15
je 0x140198cd8
nop word [rax + rax]
mov eax, dword [0x1415a28b0]
mov edx, dword [0x1415a28b4]
mov r9d, eax
not r9d
and r9d, edx
mov r10d, edx
not r10d
and r10d, eax
imul r10d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r10d
add eax, 0x1531c16d
mov edx, eax
xor edx, 0x9c6ee5a7
xor eax, 0x2111810
and eax, 0x92771d35
mov r9d, edx
and r9d, 0x6d88e2ca
imul r9d, eax
mov eax, edx
and eax, 0x92771d35
or edx, 0x92771d35
imul edx, eax
add edx, r9d
cmp edx, 0x276e73b0
jb 0x1401984e0
mov qword [rbp - 0x18], rsi
dec r15
mov edx, dword [0x1415a28b8]
mov eax, dword [0x1415a28bc]
mov r9d, edx
xor r9d, eax
not eax
and eax, edx
add eax, eax
sub eax, r9d
mov edx, eax
xor edx, 0xcc6c851e
xor eax, 0x20024041
and edx, 0xdbd9bea0
and eax, 0x2426415f
sub eax, edx
mov edx, eax
not edx
mov r9d, eax
and r9d, 0xba29efbc
and edx, 0x45d61043
imul edx, r9d
mov r9d, eax
and r9d, 0x45d61043
or eax, 0x45d61043
imul eax, r9d
add eax, edx
cmp eax, 0xb2ae07d6
ja 0x140198558
nop word cs:[rax + rax]
mov eax, dword [0x1415a28c0]
mov edx, eax
not edx
or edx, dword [0x1415a28c4]
add eax, edx
inc eax
mov edx, eax
and edx, 0x58beaab
xor edx, 0xa60a0
and eax, 0xa60a0
or eax, edx
add eax, 0x11243f07
cmp eax, 0x2f37c512
ja 0x1401985d0
test r8, r8
je 0x140198d5b
test r11b, r11b
jne 0x14019860e
test r13, r13
jne 0x140198870
mov eax, dword [0x1415a28c8]
mov edx, dword [0x1415a28cc]
mov r8d, eax
and r8d, edx
xor eax, edx
lea eax, [rax + r8*2]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xbfaadc8a
and edx, 0x40552375
imul edx, r8d
mov r8d, eax
and r8d, 0x40552375
or eax, 0x40552375
imul eax, r8d
add eax, edx
or eax, 0x5b1d43b7
add eax, 0x45fae697
cmp eax, 0x9ac6b0cb
jb 0x14019861c
mov r8d, 0x9eb315bd
nop dword [rax + rax]
mov eax, dword [0x1415a28d0]
xor edx, edx
div dword [0x1415a28d4]
xor eax, 0x802396eb
imul eax, eax, 0xb1071d89
add eax, 0x8e8c4771
cmp eax, 0x9575eb6d
ja 0x140198680
nop word cs:[rax + rax]
mov eax, dword [0x1415a28d8]
mov edx, eax
not edx
or edx, dword [0x1415a28dc]
add eax, edx
inc eax
or eax, 0xfb1ccfc4
imul rax, r8
shr rax, 0x3f
mov edx, eax
xor edx, 0x593f3e5b
lea eax, [rdx + rax*2]
cmp eax, 0x12f564c8
jb 0x1401986b0
test rdi, rdi
je 0x140198860
mov eax, dword [0x1415a28e0]
add eax, dword [0x1415a28e4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0xd307c033
and edx, 0x2cf83fcc
imul edx, r8d
mov r8d, eax
and r8d, 0x2cf83fcc
or eax, 0x2cf83fcc
imul eax, r8d
add eax, edx
mov edx, eax
not edx
and edx, 0x7d832ab
mov r8d, eax
and r8d, 0xf827cd54
imul r8d, edx
mov edx, eax
and edx, 0x7d832a8
or eax, 0x7d832ab
imul eax, edx
add eax, r8d
xor eax, 0x1b91efce
cmp eax, 0xc0fee27d
ja 0x1401986ec
mov eax, edi
and eax, 7
nop word cs:[rax + rax]
mov edx, dword [0x1415a28e8]
sub edx, dword [0x1415a28ec]
mov r8d, edx
not r8d
or r8d, 0x1feaf24a
or edx, 0xe0150db5
and edx, r8d
imul edx, edx, 0xf300a27d
xor edx, 0xeb41deb4
cmp edx, 0x96e40912
ja 0x140198770
mov rdx, rdi
mov r13, rcx
test rax, rax
je 0x14019880f
xor ecx, ecx
nop word cs:[rax + rax]
mov r8d, dword [0x1415a28f0]
xor r8d, dword [0x1415a28f4]
xor r8d, 0x2355ef89
imul r9, r8, 0x30941df3
shr r9, 0x20
sub r8d, r9d
shr r8d, 1
add r8d, r9d
shr r8d, 0x1f
or r8d, 0x8aad380
cmp r8d, 0x23e0066f
je 0x1401987c0
dec rdx
inc rcx
mov r13, qword [r13 + 0x170]
cmp rcx, rax
jne 0x1401987c0
cmp rdi, 8
jb 0x140198863
nop word cs:[rax + rax]
mov rax, qword [r13 + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov r13, qword [rax + 0x170]
add rdx, 0xfffffffffffffff8
jne 0x140198820
jmp 0x140198863
mov r13, rcx
xor edi, edi
xor ecx, ecx
nop word [rax + rax]
mov eax, dword [0x1415a2910]
mov edx, dword [0x1415a2914]
not edx
mov r8d, eax
or r8d, edx
and edx, eax
not edx
and edx, r8d
not edx
add edx, 0xef6d6df8
imul rax, rdx, 0x331185b
shr rax, 0x39
cmp eax, 0x565f297d
je 0x140198870
movzx eax, word [r13 + 0x16a]
cmp rdi, rax
jae 0x1401988c0
mov rsi, rdi
mov r12, r13
jmp 0x140198954
mov r12, qword [r13]
test r12, r12
je 0x140198d29
inc rcx
movzx esi, word [r13 + 0x168]
nop dword [rax + rax]
mov eax, dword [0x1415a2920]
xor edx, edx
div dword [0x1415a2924]
or eax, 0xccc3bf4c
mov edx, eax
and edx, 0x75722724
add edx, edx
neg edx
add eax, edx
add eax, 0xf5722724
not eax
or eax, 0x653b5f06
cmp eax, 0xfa451684
je 0x1401988e0
mov r13, r12
cmp si, word [r12 + 0x16a]
jae 0x1401988c0
mov eax, dword [0x1415a2918]
xor edx, edx
div dword [0x1415a291c]
imul eax, eax, 0x48660bca
mov edx, eax
xor edx, 0xde5c5bc2
and eax, 0x21a3a43c
add eax, eax
sub eax, edx
imul eax, eax, 0xb6a15b07
cmp eax, 0x89d211e
je 0x140198922
lea rdi, [rsi + 1]
test rcx, rcx
je 0x140198b97
mov eax, dword [0x1415a2940]
mov edx, dword [0x1415a2944]
mov r8d, eax
and r8d, edx
not eax
not edx
or edx, eax
not edx
or edx, r8d
and edx, 0xd87b69ef
mov eax, 0xf88a3b41
imul rdx, rax
shr rdx, 0x3d
cmp edx, 0xf07340fb
je 0x140198961
mov eax, dword [0x1415a2948]
xor eax, dword [0x1415a294c]
imul eax, eax, 0x14dae59
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x18c3691f
and edx, 0xe73c96e0
imul edx, r8d
mov r8d, eax
and r8d, 0xe73c96e0
or eax, 0xe73c96e0
imul eax, r8d
add eax, edx
cmp eax, 0xeedcaea
je 0x140198999
mov rax, rcx
mov r13, qword [r12 + rdi*8 + 0x170]
dec rax
je 0x140198b8e
mov edx, dword [0x1415a2950]
mov r8d, dword [0x1415a2954]
not edx
not r8d
and r8d, edx
not r8d
imul rdx, r8, 0x697174a1
shr rdx, 0x3d
add edx, 0x159a63c2
mov r8d, edx
not r8d
or r8d, 0x100221c2
or edx, 0xbffaefcd
and edx, r8d
cmp edx, 0x7ff561b7
jb 0x1401989f3
add rcx, 0xfffffffffffffffe
mov edx, dword [0x1415a2958]
imul edx, dword [0x1415a295c]
imul edx, edx, 0xb74810a4
add edx, 0xb1808faf
mov r8d, edx
xor r8d, 0x694d451f
and edx, 0x16b2bae0
add edx, edx
sub edx, r8d
cmp edx, 0xa058d22a
je 0x140198a3e
mov edx, eax
and edx, 7
je 0x140198aeb
mov qword [rbp - 0x28], r15
mov r8, 0xffffffffffffffff
xor r9d, r9d
mov r10, rax
nop dword [rax]
mov r11d, dword [0x1415a2960]
mov r15d, dword [0x1415a2964]
not r11d
mov edi, r11d
and edi, r15d
not edi
or r11d, r15d
and r11d, edi
not r11d
add r11d, 0xab949edc
not r11d
and r11d, 0xd469efdb
cmp r11d, 0x21a5b95c
je 0x140198a90
inc r9
mov r13, qword [r13 + 0x170]
dec r8
dec r10
cmp rdx, r9
jne 0x140198a90
sub rax, r9
mov r15, qword [rbp - 0x28]
xor r11d, r11d
cmp rcx, 7
jb 0x140198b8e
nop word cs:[rax + rax]
mov ecx, dword [0x1415a2968]
xor ecx, dword [0x1415a296c]
add ecx, 0x5ce301b7
mov edx, ecx
not edx
and edx, 0x65312efe
mov r8d, ecx
and r8d, 0x9aced101
imul r8d, edx
mov edx, ecx
and edx, 0x65312efe
or ecx, 0x65312efe
imul ecx, edx
add ecx, r8d
or ecx, 0x721c16e0
cmp ecx, 0xd3bbd1a2
je 0x140198b00
mov rcx, qword [r13 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r13, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x140198b00
xor edi, edi
test r11b, r11b
je 0x140198bd0
jmp 0x140198b9f
mov r13, r12
test r11b, r11b
je 0x140198bd0
lea rax, [rsi + rsi*2]
mov r8, qword [r12 + rsi*8 + 8]
mov r9, qword [r12 + rax*8 + 0x60]
mov rax, qword [r12 + rax*8 + 0x70]
sub rsp, 0x40
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
add rsp, 0x40
nop
lea rax, [rsi + rsi*2]
mov r8, qword [r12 + rsi*8 + 8]
mov r9, qword [r12 + rax*8 + 0x60]
mov rax, qword [r12 + rax*8 + 0x70]
sub rsp, 0x40
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, r14
xor edx, edx
call fcn.14020d3e0
xor r11d, r11d
add rsp, 0x40
test r11b, r11b
jne 0x140198bd0
mov r8d, 1
mov ecx, 0
test eax, eax
mov rsi, qword [rbp - 0x18]
jne 0x140198460
sub rsp, 0x20
call fcn.14020b260
add rsp, 0x20
mov ecx, eax
shl rcx, 0x20
mov eax, dword [0x1415a2970]
xor edx, edx
div dword [0x1415a2974]
or rcx, 2
nop word cs:[rax + rax]
mov eax, dword [0x1415a2978]
mov edx, dword [0x1415a297c]
mov r8d, eax
and r8d, edx
or eax, edx
add eax, r8d
add eax, 0xc8ff34d
mov edx, eax
or edx, 0xc86a9402
xor edx, 0x8834817e
or eax, 0x77cb7e81
and eax, edx
cmp eax, 0xbe2d33d3
je 0x140198c50
mov rax, qword [rbp - 0x20]
mov qword [rax + 8], rcx
mov qword [rax], 0
sub rsp, 0x20
mov rcx, r14
call fcn.14020d420
add rsp, 0x20
test rbx, rbx
je 0x140199040
mov eax, dword [0x1415a2980]
and eax, dword [0x1415a2984]
add eax, 0x42396a9d
not eax
or eax, 0xd83f348e
cmp eax, 0x2dc59873
jae 0x140198f1a
jmp 0x140198f65
mov eax, dword [0x1415a289c]
add eax, dword [0x1415a2898]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xcd83e247
and ecx, 0x327c1db8
imul ecx, edx
mov edx, eax
and edx, 0x327c1db8
or eax, 0x327c1db8
imul eax, edx
add eax, ecx
or eax, 0x20907447
add eax, 0x2ef2ef7d
cmp eax, 0x9f22805a
mov rcx, qword [rbp - 0x20]
jae 0x140198de4
jmp 0x140198e14
mov eax, dword [0x1415a2928]
xor eax, dword [0x1415a292c]
imul eax, eax, 0xa54547cb
mov ecx, eax
and ecx, 0x4426614c
xor eax, 0x4426614c
lea eax, [rax + rcx*2]
cmp eax, 0xeee0dfe
jne 0x140198e92
jmp 0x140198eca
mov eax, dword [0x1415a28f8]
add eax, dword [0x1415a28fc]
imul eax, eax, 0x60f44f55
or eax, 0x793530a2
imul rax, rax, 0x52551c11
shr rax, 0x3e
cmp eax, 0x27c64114
jbe 0x140198d90
ud2
mov eax, dword [0x1415a2900]
mov ecx, dword [0x1415a2904]
add eax, ecx
add eax, 0x94718560
or eax, 0x9afba3c8
mov ecx, eax
xor ecx, 0xf163ae96
and ecx, eax
ud2
mov eax, dword [str._Xd_a]
imul eax, dword [0x1415a28a4]
or eax, 0x8fea3ba5
and eax, 0xbfee3bfd
imul rax, rax, 0x52d91819
shr rax, 0x3d
mov qword [rcx], r14
mov qword [rcx + 8], rbx
cmp eax, 0x1b2d786a
jbe 0x140198e20
mov qword [rcx], r14
mov qword [rcx + 8], rbx
jmp 0x140198de4
mov eax, dword [0x1415a28a8]
sub eax, dword [0x1415a28ac]
add eax, 0x2866748c
and eax, 0xc900501
cmp eax, 0xe6e4d639
jae 0x140198e20
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x1415a2860]
mov ecx, dword [0x1415a2864]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
imul eax, ecx, 0x8ee602c
add eax, 0x6cc99454
mov qword [rsi], 0
cmp eax, 0x89ae6ed6
ja 0x140199040
mov qword [rsi], 0
jmp 0x140198e52
mov eax, dword [0x1415a2930]
mov ecx, dword [0x1415a2934]
mov edx, eax
or edx, ecx
not edx
not eax
not ecx
and ecx, eax
or ecx, edx
not ecx
or ecx, 0x20400402
xor ecx, 0x20024482
or ecx, 0xd7b9b97d
ud2
ud2
mov eax, dword [str.G_Tx_r]
add eax, dword [0x1415a298c]
or eax, 0x14cab44e
add eax, 0x10956009
mov ecx, eax
not ecx
and ecx, 0x12ae3da8
mov edx, eax
and edx, 0xed514257
imul edx, ecx
mov ecx, eax
and ecx, 0x12a43da8
or eax, 0x12ae3da8
imul eax, ecx
add eax, edx
mov rsi, qword [0x1415acb98]
cmp eax, 0x722afc2c
jbe 0x140198f6e
mov rax, qword [0x1415acb98]
jmp 0x140198f1a
mov eax, dword [0x1415a2990]
add eax, dword [0x1415a2994]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x68459d83
and ecx, 0x97ba627c
imul ecx, edx
mov edx, eax
and edx, 0x97ba627c
or eax, 0x97ba627c
imul eax, edx
add eax, ecx
add eax, 0x4f0354cd
xor eax, 0xb917be55
cmp eax, 0x4e42e9eb
jae 0x140198fc8
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x1415a2998]
mov ecx, dword [0x1415a299c]
lea ebx, [rax + rcx]
add ebx, 0x53e25dd0
xor ebx, 0x8005201c
or ebx, 0x4b9ac041
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp ebx, 0xeff989
je 0x140198fd0
nop dword [rax + rax]
mov eax, dword [0x1415a29a0]
or eax, dword [0x1415a29a4]
add eax, 0xb3a0e199
mov ecx, eax
not ecx
and ecx, 0x526b8fff
and eax, 0xad947000
sub eax, ecx
add eax, 0xee500e63
cmp eax, 0x3b3d2a37
jb 0x140199010
nop
mov eax, dword [0x1415a29a8]
xor edx, edx
div dword [0x1415a29ac]
and eax, 0x10b638e7
add eax, 0x86571404
or eax, 0x73378c59
cmp eax, 0xda825a9f
je 0x140199040
nop word cs:[rax + rax]
mov eax, dword [0x1415a29b0]
xor eax, dword [0x1415a29b4]
mov ecx, eax
and ecx, 0x9538d987
and eax, 0x81289001
sub ecx, eax
add ecx, 0x83abb209
or ecx, 0x7640a590
cmp ecx, 0xf75f93
jb 0x140199070
jmp 0x140198e3d