Function at 0x14000f8a0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rsi, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b40]
sub eax, dword [0x141dc0b44]
imul eax, eax, 0x8df286bc
or eax, 0x97d9089
and eax, 0xfb7fd9ad
cmp eax, 0xddf6356
je 0x14000f8c0
mov eax, dword [0x141dc0b48]
xor edx, edx
div dword [0x141dc0b4c]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b50]
mov ecx, dword [0x141dc0b54]
add eax, ecx
add eax, 0x33ee794d
or eax, 0x585ff955
and eax, 0xf8dffd5f
cmp eax, 0x2a5238a3
jb 0x14000f900
mov r8, qword [rsi + 0x48]
test r8, r8
mov qword [rsp + 0x38], rsi
je 0x1400104c0
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b58]
imul eax, dword [0x141dc0b5c]
imul rax, rax, 0x606e2e5b
shr rax, 0x3c
add eax, 0xba716c2f
shr eax, 1
imul rax, rax, 0x60561475
shr rax, 0x3c
cmp eax, 0xd724ac92
je 0x14000f940
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b60]
and eax, dword [0x141dc0b64]
add eax, 0xc6a0b128
shr eax, 2
imul rax, rax, 0x439f5327
shr rax, 0x3c
or eax, 0x1f1c9d26
cmp eax, 0x92d2995c
ja 0x14000f980
mov r12, qword [rsi + 0x58]
test r12, r12
je 0x14001040e
mov eax, dword [0x141dc0b68]
xor edx, edx
div dword [0x141dc0b6c]
mov eax, 0xc0130ed1
nop dword [rax + rax]
mov ecx, dword [0x141dc0b70]
sub ecx, dword [0x141dc0b74]
shr ecx, 1
imul rcx, rax
shr rcx, 0x3a
imul ecx, ecx, 0xf8e12293
add ecx, 0x85bbfe0e
cmp ecx, 0x7ee9efdc
ja 0x14000f9d0
mov r15, qword [rsi + 0x40]
movdqa xmm0, xmmword [r15]
pmovmskb ebp, xmm0
not ebp
nop dword [rax]
mov eax, dword [0x141dc0b78]
imul eax, dword [0x141dc0b7c]
and eax, 0xb3a46cff
imul eax, eax, 0x101d2cef
add eax, 0x53e43e29
cmp eax, 0x56d8361b
ja 0x14000fa10
lea r13, [r15 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dc0b80]
sub eax, dword [0x141dc0b84]
add eax, 0x4051a294
or eax, 0x9cca5e57
cmp eax, 0xe8cb167c
je 0x14000fa40
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000fa79
test r12, r12
je 0x14001039e
test bp, bp
jne 0x14000faa0
nop
movdqa xmm0, xmmword [r13]
pmovmskb ebp, xmm0
add r15, 0xffffffffffffea00
add r13, 0x10
cmp ebp, 0xffff
je 0x14000fa80
not ebp
nop
mov eax, dword [0x141dc0b88]
add eax, dword [0x141dc0b8c]
cmp eax, 0xb940a6cd
je 0x14000faa0
tzcnt eax, ebp
neg rax
imul rax, rax, 0x160
lea rdi, [r15 + rax]
cmp qword [r15 + rax - 0x148], 0
je 0x14000fb7e
mov eax, dword [0x141dc0b90]
imul eax, dword [0x141dc0b94]
add eax, 0xefef899e
xor eax, 0x98a0603
cmp eax, 0xa8645659
ja 0x14000fad4
mov eax, dword [0x141dc0b98]
xor eax, dword [0x141dc0b9c]
or eax, 0x21009203
and eax, 0x25019603
cmp eax, 0x484a9f1e
ja 0x14000fb43
nop
mov esi, dword [0x141dc0ba0]
add esi, dword [0x141dc0ba4]
xor esi, 0x50008
or esi, 0x7b50f7d7
mov r8, qword [rdi - 0x140]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
cmp esi, 0xd94cab2a
jbe 0x14000fb60
mov r8, qword [rdi - 0x140]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
jmp 0x14000fb10
mov eax, dword [0x141dc0ba8]
sub eax, dword [0x141dc0bac]
imul eax, eax, 0x4317d429
add eax, 0xf51106e5
cmp eax, 0xd43a5d82
jb 0x14000fb60
lea eax, [rbp - 1]
and eax, ebp
dec r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov eax, dword [0x141dc0bb0]
or eax, dword [0x141dc0bb4]
add eax, 0xb46ea2f9
xor eax, 0x2514a3f4
imul eax, eax, 0xfa576e9b
cmp eax, 0x7c68cce8
ja 0x14000fb90
mov rax, rdi
mov rdi, qword [rdi - 0x120]
mov qword [rsp + 0x30], rax
mov rbp, qword [rax - 0x118]
test rbp, rbp
je 0x14000fceb
xor esi, esi
nop word cs:[rax + rax]
mov rcx, rsi
shl rcx, 5
cmp qword [rdi + rcx], 0
je 0x14000fc87
add rcx, rdi
mov eax, dword [0x141dc0bb8]
xor edx, edx
div dword [0x141dc0bbc]
add eax, 0xea5a97ab
imul rax, rax, 0x185edcab
shr rax, 0x3c
cmp eax, 0xc38d97ac
ja 0x14000fbf5
mov rbx, qword [rcx + 8]
mov eax, dword [0x141dc0bc0]
xor eax, dword [0x141dc0bc4]
and eax, 0x59ea6f5a
imul eax, eax, 0x636ccfb2
and eax, 0x7267551c
cmp eax, 0x139cf7aa
jne 0x14000fc50
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call r14
mov eax, dword [0x141dc0bc8]
sub eax, dword [0x141dc0bcc]
xor eax, 0x718f3420
imul r12d, eax, 0x9d71a89c
xor r12d, 0x931258de
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call r14
cmp r12d, 0xb2c1e1e9
jb 0x14000fc50
inc rsi
mov eax, dword [0x141dc0bd0]
xor edx, edx
div dword [str._:P5Uy9]
mov eax, dword [0x141dc0bd8]
sub eax, dword [0x141dc0bdc]
xor eax, 0xfa870fe7
add eax, 0x28acf56
cmp eax, 0xe774b200
ja 0x14000fc98
nop word cs:[rax + rax]
mov eax, dword [0x141dc0be0]
and eax, dword [0x141dc0be4]
add eax, 0x76776fe
or eax, 0xa9010490
and eax, 0xfb5144f1
cmp eax, 0xe3109eba
je 0x14000fcc0
cmp rsi, rbp
jne 0x14000fbe0
mov rax, qword [rsp + 0x30]
cmp qword [rax - 0x128], 0
je 0x14000fd09
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call r14
xor eax, eax
test al, al
jne 0x14000fd0b
mov rsi, qword [rsp + 0x30]
mov rax, qword [rsi - 0xf8]
nop dword [rax + rax]
mov ecx, dword [0x141dc0be8]
sub ecx, dword [0x141dc0bec]
cmp ecx, 0xe771e48f
je 0x14000fd20
shl rax, 1
test rax, rax
je 0x14000fdb0
mov eax, dword [0x141dc0bf0]
xor eax, dword [str.___a]
shr eax, 1
mov ecx, 0x98fa6923
imul rax, rcx
shr rax, 0x3e
or eax, 0xf4b1b8cc
xor eax, 0x634cf20c
cmp eax, 0xfd270741
ja 0x140010130
nop dword [rax]
mov eax, dword [0x141dc0bf8]
xor eax, dword [0x141dc0bfc]
and eax, 0x14080410
imul eax, eax, 0x73b5cf2f
mov r8, qword [rsi - 0xf0]
mov rcx, qword [0x141ddb260]
cmp eax, 0x795c8dc1
jb 0x140010130
xor edx, edx
call r14
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c00]
xor eax, dword [0x141dc0c04]
add eax, 0x64355d80
xor eax, 0x5f12af82
cmp eax, 0xd27a303b
ja 0x14000fdb0
mov eax, dword [0x141dc0c08]
sub eax, dword [0x141dc0c0c]
shr eax, 2
imul rax, rax, 0xa32a521
shr rax, 0x39
imul eax, eax, 0x95c1bd7d
cmp eax, 0xa72fe2f9
ja 0x14000fdcd
mov rax, qword [rsi - 0xd8]
shl rax, 1
test rax, rax
je 0x14000fe40
mov r8, qword [rsi - 0xd0]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c10]
add eax, dword [0x141dc0c14]
imul eax, eax, 0x99e4e46e
cmp eax, 0x7b5a9287
je 0x14000fe20
nop dword [rax]
mov eax, dword [0x141dc0c18]
and eax, dword [0x141dc0c1c]
add eax, 0xe631c9d3
and eax, 0x53d5415a
xor eax, 0x8cbd4ebf
cmp eax, 0xb385409
jb 0x14000fe40
mov eax, dword [0x141dc0c20]
xor edx, edx
div dword [0x141dc0c24]
mov eax, dword [0x141dc0c28]
or eax, dword [0x141dc0c2c]
or eax, 0x2ff7ff3d
cmp eax, 0x6cef4f0e
je 0x14000fe70
mov rdi, qword [rsi - 0x108]
mov rsi, qword [rsi - 0x100]
test rsi, rsi
je 0x14000ff30
lea r12, [rdi + 8]
jmp 0x14000feb9
add r12, 0x20
dec rsi
je 0x14000ff30
cmp qword [r12 - 8], 0
je 0x14000feb0
mov rbx, qword [r12]
mov eax, dword [0x141dc0c30]
imul eax, dword [str.an_u]
or eax, 0xe33c5ed7
add eax, 0x9d83036
xor eax, 0x4d3d5fc0
cmp eax, 0xa1c022da
jb 0x14000ff17
nop dword [rax + rax]
mov eax, dword [0x141dc0c38]
xor edx, edx
div dword [0x141dc0c3c]
mov ebp, eax
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call r14
cmp ebp, 0x7d37d1b0
jne 0x14000feb0
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call r14
jmp 0x14000fef0
mov r12, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x40]
nop word [rax + rax]
mov eax, dword [0x141dc0c40]
or eax, dword [0x141dc0c44]
or eax, 0xe8e3d3aa
xor eax, 0x2f2c2ff1
add eax, 0x16bf17c6
cmp eax, 0x9d818598
jb 0x14000ff40
mov rax, qword [rsp + 0x30]
cmp qword [rax - 0x110], 0
je 0x14000ffdc
mov rbx, qword [0x141ddb260]
mov eax, dword [0x141dc0c48]
xor edx, edx
div dword [0x141dc0c4c]
or eax, 0x609bd621
imul eax, eax, 0xcfd6139c
or eax, 0x904be3a4
cmp eax, 0x580df10c
jne 0x14000ffb0
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r14
nop dword [rax + rax]
mov eax, dword [0x141dc0c50]
imul eax, dword [0x141dc0c54]
imul esi, eax, 0xc5ab9c41
add esi, 0x923f280c
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r14
cmp esi, 0x4bdc70a0
jb 0x14000ffb0
mov esi, 0x9b9f2d3b
mov rdi, qword [rsp + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c58]
sub eax, dword [0x141dc0c5c]
or eax, 0xc4f04c08
add eax, 0x1facf315
cmp eax, 0xd373c6d9
jb 0x14000fff0
mov rax, qword [rdi - 0xc0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc0c60]
add ecx, dword [0x141dc0c64]
xor ecx, 0x2a000d00
or ecx, 0xc1f6a0f4
shr ecx, 2
imul rcx, rcx, 0x4118e1d3
shr rcx, 0x3b
cmp ecx, 0x6b41d565
je 0x140010020
shl rax, 1
test rax, rax
je 0x140010090
mov r8, qword [rdi - 0xb8]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
nop dword [rax]
mov eax, dword [0x141dc0c68]
add eax, dword [0x141dc0c6c]
imul eax, eax, 0x9ca2aa88
add eax, 0xef1507e0
cmp eax, 0x49dab24b
jb 0x140010070
nop
mov eax, dword [0x141dc0c70]
xor eax, dword [0x141dc0c74]
imul rax, rsi
shr rax, 0x3f
imul eax, eax, 0xadfac50f
add eax, 0xce94d33f
cmp eax, 0xd099944
jb 0x140010090
mov rax, qword [rdi - 0xa0]
nop dword [rax]
mov ecx, dword [0x141dc0c78]
mov edx, dword [0x141dc0c7c]
add ecx, edx
add ecx, 0x1c158764
xor ecx, 0xd3b105bb
cmp ecx, 0xbc3b7bc1
ja 0x1400100c0
shl rax, 1
test rax, rax
je 0x14001017d
mov eax, dword [0x141dc0c80]
xor edx, edx
div dword [0x141dc0c84]
shr eax, 2
imul rax, rax, 0x41511bc5
shr rax, 0x39
imul eax, eax, 0x572ff776
and eax, 0x25daf1f2
cmp eax, 0xe5045dc5
jbe 0x140010140
jmp 0x1400102b0
mov rax, qword [0x141ddb260]
jmp 0x14000fd70
mov esi, dword [0x141dc0c88]
sub esi, dword [0x141dc0c8c]
add esi, 0x4ab051a1
or esi, 0x88420059
and esi, 0xa94eaad9
mov r8, qword [rdi - 0x98]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
cmp esi, 0x94de832e
ja 0x1400102b0
xor eax, eax
nop
test al, al
jne 0x140010180
mov eax, dword [0x141dc0c90]
xor edx, edx
div dword [0x141dc0c94]
imul eax, eax, 0x50461950
add eax, 0x1320e760
mov ecx, 0x85f83873
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x8c76b870
ja 0x140010184
mov rcx, qword [rdi - 0x60]
test rcx, rcx
je 0x14000fa70
mov eax, dword [0x141dc0c98]
xor edx, edx
div dword [0x141dc0c9c]
and eax, 0x1ecef3de
add eax, 0xb137b3a2
or eax, 0x1547c99d
cmp eax, 0x3b98b9be
jae 0x1400101f0
lock dec qword [rcx]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ca0]
mov edx, dword [0x141dc0ca4]
add edx, eax
add edx, 0x972372c8
xor edx, 0x16ab1fd2
mov rax, 0xffffffffffffffff
lock xadd qword [rcx], rax
cmp edx, 0x746281df
ja 0x1400101f0
mov ecx, dword [0x141dc0ca8]
xor ecx, dword [0x141dc0cac]
imul ecx, ecx, 0x3d2a8490
add ecx, 0x6c49ccb0
and ecx, 0xacb78d0
cmp ecx, 0x544d826b
ja 0x14001021e
nop word cs:[rax + rax]
mov ecx, dword [0x141dc0cb0]
and ecx, dword [0x141dc0cb4]
or ecx, 0x15a88bdd
add ecx, 0xb47175b8
or ecx, 0xcb9ea894
cmp ecx, 0x95487608
je 0x140010250
cmp rax, 1
jne 0x14000fa70
mov eax, dword [0x141dc0cb8]
mov ecx, dword [0x141dc0cbc]
add eax, ecx
add eax, 0x71cfbea8
or eax, 0x96de3b96
and eax, 0x9fdf3ffe
cmp eax, 0xa952edd1
jbe 0x1400102d0
jmp 0x1400102f5
mov r8, qword [rdi - 0x98]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
jmp 0x140010140
mov eax, dword [0x141dc0cc0]
or eax, dword [0x141dc0cc4]
mov ecx, 0x9b0d18ef
imul rax, rcx
shr rax, 0x3f
add eax, 0xfed3d7f9
cmp eax, 0x260cac25
jae 0x140010300
jmp 0x1400102d0
mov rdi, qword [rdi - 0x60]
mov eax, dword [0x141dc0cc8]
xor edx, edx
div dword [0x141dc0ccc]
or eax, 0xe228d3ae
imul eax, eax, 0x9dbbbcc9
xor eax, 0xa9b80376
cmp eax, 0x84f60003
jbe 0x140010340
mov rcx, rdi
call fcn.140016dc0
nop word cs:[rax + rax]
mov eax, dword [0x141dc0cd0]
mov ecx, dword [0x141dc0cd4]
lea esi, [rax + rcx]
add esi, 0x57b3783
or esi, 0xd414a7c2
mov rcx, rdi
call fcn.140016dc0
cmp esi, 0x47aa0014
je 0x140010340
nop dword [rax + rax]
mov eax, dword [0x141dc0cd8]
xor eax, dword [0x141dc0cdc]
imul eax, eax, 0x90c9dc0d
xor eax, 0x7e7dbcc3
imul rax, rax, 0x2e6dc51d
shr rax, 0x3b
cmp eax, 0x71771bb0
ja 0x140010370
jmp 0x14000fa70
mov eax, dword [0x141dc0ce0]
xor edx, edx
div dword [0x141dc0ce4]
mov rsi, qword [rsp + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ce8]
mov ecx, dword [str._nT_]
add eax, ecx
add eax, 0x28f1b6cb
or eax, 0x3e238469
cmp eax, 0x4db1ce8d
je 0x1400103c0
mov r8, qword [rsi + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0cf0]
or eax, dword [0x141dc0cf4]
imul eax, eax, 0x51dedfb3
add eax, 0x4f4a57df
cmp eax, 0xe8e48b24
ja 0x1400103f0
lea rcx, [r8 + 1]
mov r9d, 0x160
xor r10d, r10d
nop dword [rax + rax]
mov rax, rcx
mul r9
test r10b, r10b
jne 0x140010420
lea rcx, [r8 + rax]
add rcx, 0x11
test rcx, rcx
je 0x1400104c0
nop dword [rax]
mov ecx, dword [0x141dc0cf8]
and ecx, dword [0x141dc0cfc]
add ecx, 0xe19dc477
cmp ecx, 0x635f3357
jb 0x140010440
mov ecx, dword [0x141dc0d00]
xor ecx, dword [0x141dc0d04]
mov r8, qword [rsi + 0x40]
imul ecx, ecx, 0x966825c9
add ecx, 0xa713ea8c
cmp ecx, 0x29bc1daa
jb 0x14001049f
mov ecx, dword [0x141dc0d08]
or ecx, dword [0x141dc0d0c]
imul edx, ecx, 0x6e7ab82e
mov rcx, qword [0x141ddb260]
cmp edx, 0xe8daec6c
jne 0x1400104a8
mov rcx, qword [0x141ddb260]
jmp 0x14001047e
sub r8, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d10]
xor edx, edx
div dword [0x141dc0d14]
imul eax, eax, 0x5d74b9ee
or eax, 0x41215510
and eax, 0x4121d514
cmp eax, 0x8a316df8
je 0x1400104c0
mov rax, qword [rsi + 0x18]
nop dword [rax]
mov ecx, dword [0x141dc0d18]
and ecx, dword [0x141dc0d1c]
imul ecx, ecx, 0x25363d2d
cmp ecx, 0x76f753e2
je 0x1400104f0
shl rax, 1
test rax, rax
je 0x140010560
mov ecx, 0x8581ee2b
nop word [rax + rax]
mov eax, dword [0x141dc0d20]
xor edx, edx
div dword [0x141dc0d24]
add eax, 0xd2514fe2
imul rax, rcx
shr rax, 0x3c
and eax, 0xfffffffa
cmp eax, 0x4854afff
ja 0x140010520
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x141ddb260]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dc0d28]
and eax, dword [0x141dc0d2c]
or eax, 0xdfdfffff
cmp eax, 0xd471c77f
jb 0x140010560
mov rdi, qword [rsi + 8]
mov rsi, qword [rsi + 0x10]
test rsi, rsi
je 0x1400107dc
xor ebx, ebx
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15d, 0x9156a79d
mov r12d, 0x9a2ca10b
nop
imul rax, rbx, 0x70
lea r13, [rdi + rax]
cmp qword [rdi + rax], 0
je 0x140010608
mov eax, dword [0x141dc0d30]
xor edx, edx
div dword [0x141dc0d34]
nop dword [rax]
mov eax, dword [0x141dc0d38]
xor eax, dword [0x141dc0d3c]
add eax, 0xab4babbf
or eax, 0x8d074098
cmp eax, 0x64c1cd7c
jb 0x1400105c0
mov r8, qword [r13 + 8]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
nop dword [rax]
mov eax, dword [0x141dc0d40]
xor eax, dword [0x141dc0d44]
add eax, 0x14a2a092
cmp eax, 0x5f656df9
ja 0x1400105f0
inc rbx
mov eax, dword [0x141dc0d48]
mov ecx, dword [0x141dc0d4c]
add eax, ecx
add eax, 0x1c4377d
and eax, 0x4ff42a39
cmp eax, 0xff4ffb00
ja 0x14001060b
mov eax, dword [0x141dc0d50]
or eax, dword [0x141dc0d54]
imul eax, eax, 0x5423ee2a
xor eax, 0x560c6e11
imul eax, eax, 0xed6bb655
cmp eax, 0xc81d43d
je 0x14001062a
cmp qword [r13 + 0x18], 0
je 0x14001068b
mov eax, dword [0x141dc0d58]
sub eax, dword [0x141dc0d5c]
imul rax, r12
shr rax, 0x3f
or eax, 0x874162f4
imul eax, eax, 0xefea3ab2
cmp eax, 0xe60f9e3d
je 0x140010655
mov r8, qword [r13 + 0x20]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
mov rax, qword [r13 + 0x48]
shl rax, 1
test rax, rax
je 0x140010720
mov eax, dword [0x141dc0d60]
and eax, dword [0x141dc0d64]
imul rax, r15
shr rax, 0x3e
add eax, 0x3e2a0b2e
cmp eax, 0x46d78b62
ja 0x14001069b
mov eax, dword [str.PaPK0]
sub eax, dword [0x141dc0d6c]
add eax, 0x1ef1d011
or eax, 0xae93fede
cmp eax, 0x93e5bd7c
je 0x1400107d0
nop dword [rax]
mov eax, dword [0x141dc0d70]
and eax, dword [0x141dc0d74]
xor eax, 0x880a1
or eax, 0xf6e41f5e
xor eax, 0x43d75f1b
mov r8, qword [r13 + 0x50]
mov rcx, qword [0x141ddb260]
cmp eax, 0xdf29924e
ja 0x1400107d0
xor edx, edx
call r14
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d78]
add eax, dword [0x141dc0d7c]
imul eax, eax, 0xd43cc038
add eax, 0x3ffb2f38
cmp eax, 0x9c914fb6
jb 0x140010720
cmp qword [r13 + 0x30], 0
je 0x140010784
mov r8, qword [r13 + 0x38]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r14
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d80]
imul eax, dword [0x141dc0d84]
and eax, 0x3fc5ba1e
imul eax, eax, 0x6921975f
xor eax, 0x115d72b2
cmp eax, 0xd7407221
ja 0x140010760
mov eax, dword [0x141dc0d88]
xor edx, edx
div dword [0x141dc0d8c]
mov eax, dword [0x141dc0d90]
xor edx, edx
div dword [0x141dc0d94]
add eax, 0xdfd82380
imul rcx, rax, 0x59eba6b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0xf3c33e90
cmp eax, 0x30a53d5d
je 0x140010792
cmp rbx, rsi
jne 0x1400105a0
jmp 0x1400107dc
mov rax, qword [0x141ddb260]
jmp 0x1400106e0
mov rbx, qword [rsp + 0x38]
cmp qword [rbx], 0
je 0x140010872
mov eax, dword [0x141dc0d98]
imul eax, dword [0x141dc0d9c]
or eax, 0x5e299afb
imul eax, eax, 0x8424fe16
or eax, 0xb6527284
cmp eax, 0x1b1b1d8f
jb 0x140010834
mov eax, dword [0x141dc0da0]
sub eax, dword [0x141dc0da4]
imul eax, eax, 0x9a39260b
add eax, 0x2dc35ac
mov rcx, qword [0x141ddb260]
cmp eax, 0xe4956d0a
jbe 0x14001083d
mov rax, qword [0x141ddb260]
jmp 0x14001080f
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dc0da8]
xor eax, dword [0x141dc0dac]
or eax, 0x4484080
xor eax, 0x8010800
and eax, 0xc494882
cmp eax, 0x4c797d61
je 0x140010850
mov eax, 0xc57e9b7b
nop word [rax + rax]
mov ecx, dword [0x141dc0db0]
sub ecx, dword [0x141dc0db4]
imul rcx, rax
shr rcx, 0x3b
or ecx, 0x800dac50
and ecx, 0x800dac52
cmp ecx, 0x4e38b02e
je 0x140010880
nop dword [rax + rax]
mov eax, dword [0x141dc0db8]
or eax, dword [0x141dc0dbc]
cmp eax, 0x67394b8b
je 0x1400108b0
mov rsi, qword [rbx + 0x90]
test rsi, rsi
je 0x140010e50
nop word cs:[rax + rax]
mov eax, dword [0x141dc0dc0]
or eax, dword [0x141dc0dc4]
or eax, 0x47012b01
and eax, 0xc721ab09
add eax, 0x64b509ee
cmp eax, 0x67b30940
ja 0x1400108e0
nop word cs:[rax + rax]
mov eax, dword [0x141dc0dc8]
xor eax, dword [0x141dc0dcc]
add eax, 0x351fafaa
and eax, 0x282e05c0
cmp eax, 0x328029da
ja 0x140010910
nop dword [rax]
mov eax, dword [0x141dc0dd0]
add eax, dword [0x141dc0dd4]
and eax, 0x68000118
xor eax, 0x7b92421b
cmp eax, 0x1fd7816c
jb 0x140010930
mov rax, qword [rbx + 0xa8]
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140010b73
lea rdi, [rsi + 0x10]
movdqa xmm0, xmmword [rsi]
pmovmskb r14d, xmm0
not r14d
nop word cs:[rax + rax]
mov eax, dword [0x141dc0dd8]
mov ecx, dword [0x141dc0ddc]
add eax, ecx
add eax, 0xd3d8f9d5
xor eax, 0xa106595b
cmp eax, 0x32952fec
jb 0x140010980
mov eax, 0x989c0c79
nop word cs:[rax + rax]
mov ecx, dword [0x141dc0de0]
add ecx, dword [0x141dc0de4]
imul ecx, ecx, 0x7b85a281
add ecx, 0x503f69c1
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xff0a34b8
ja 0x1400109b0
mov r12, qword [sym.imp.pdh.dll_PdhRemoveCounter]
mov r13d, 0xc1ac7905
mov rbp, rsi
mov rax, qword [rsp + 0x28]
nop dword [rax]
test r14w, r14w
mov qword [rsp + 0x30], rax
je 0x140010a90
mov eax, dword [0x141dc0df0]
xor edx, edx
div dword [0x141dc0df4]
nop dword [rax]
mov eax, dword [0x141dc0df8]
add eax, dword [0x141dc0dfc]
and eax, 0xf42286b3
cmp eax, 0x9d4895f
je 0x140010a10
lea r15d, [r14 - 1]
nop dword [rax]
mov eax, dword [0x141dc0e00]
or eax, dword [0x141dc0e04]
imul eax, eax, 0x64248012
xor eax, 0xb554bce0
cmp eax, 0xced90624
jb 0x140010a30
and r15d, r14d
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e08]
sub eax, dword [0x141dc0e0c]
imul rax, r13
shr rax, 0x3e
or eax, 0xb13d5b56
imul rax, rax, 0x705eeb57
shr rax, 0x3e
cmp eax, 0x652a0c6b
jae 0x140010a60
jmp 0x140010add
movdqa xmm0, xmmword [rdi]
pmovmskb r14d, xmm0
add rbp, 0xfffffffffffffe00
add rdi, 0x10
cmp r14d, 0xffff
je 0x140010a90
nop dword [rax]
mov eax, dword [0x141dc0de8]
imul eax, dword [0x141dc0dec]
add eax, 0x7cf0cc83
xor eax, 0x243e2bb1
cmp eax, 0x7053fe53
ja 0x140010ab0
mov r15d, 0xfffffffe
sub r15d, r14d
not r14d
and r15d, r14d
mov eax, dword [0x141dc0e10]
or eax, dword [0x141dc0e14]
and eax, 0x2ee80032
imul eax, eax, 0xb73f757
mov ecx, 0xccb201a9
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x85c456ea
jbe 0x140010b20
tzcnt eax, r14d
shl rax, 5
mov rcx, rbp
sub rcx, rax
mov rcx, qword [rcx - 8]
call r12
nop
mov eax, dword [0x141dc0e18]
xor edx, edx
div dword [0x141dc0e1c]
imul eax, eax, 0x58abb6bd
or eax, 0x4cfd0e6b
imul rbx, rax, 0x7c2cc8a1
shr rbx, 0x3d
tzcnt eax, r14d
shl rax, 5
mov rcx, rbp
sub rcx, rax
mov rcx, qword [rcx - 8]
call r12
cmp ebx, 0xc99c4f37
je 0x140010b20
mov r14d, r15d
mov rax, qword [rsp + 0x30]
dec rax
jne 0x1400109f0
mov r13, qword [rsp + 0x38]
mov rdi, qword [r13 + 0xc8]
lea rax, [rdi + 1]
cmp rax, 2
jb 0x140010bba
mov eax, dword [0x141dc0e20]
xor eax, dword [0x141dc0e24]
imul rax, rax, 0x2e8a67a5
shr rax, 0x3c
or eax, 0x38c2df8e
xor eax, 0xd9ee7f9b
cmp eax, 0x8ff1798a
jae 0x140010e8a
jmp 0x140010e99
xor eax, eax
nop dword [rax]
test al, al
jne 0x140010bc0
mov rcx, qword [r13 + 0xc0]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140010c10
call qword [sym.imp.pdh.dll_PdhCloseQuery]
nop dword [rax + rax]
mov eax, dword [0x141dc0e48]
xor edx, edx
div dword [0x141dc0e4c]
imul eax, eax, 0x9c8d4163
add eax, 0xef27f70c
or eax, 0x4b81e43c
cmp eax, 0x43b5e04f
je 0x140010be0
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e50]
sub eax, dword [0x141dc0e54]
xor eax, 0xd8001142
and eax, 0xdc141352
cmp eax, 0xa1bf8b0f
je 0x140010c10
nop dword [rax]
mov eax, dword [0x141dc0e58]
imul eax, dword [0x141dc0e5c]
or eax, 0xd7f767f5
imul rax, rax, 0x5e4aa9f7
shr rax, 0x3c
cmp eax, 0x52b2a8af
ja 0x140010c30
mov rdi, qword [r13 + 0x98]
test rdi, rdi
je 0x140010e50
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e60]
xor edx, edx
div dword [0x141dc0e64]
add eax, 0x5bddadbe
or eax, 0xa5b775df
and eax, 0xe7bf7dff
cmp eax, 0xcd4b7a1e
jb 0x140010c70
cmp qword [rsp + 0x28], 0
je 0x140010db2
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140010cb0
movdqa xmm0, xmmword [rsi]
pmovmskb r12d, xmm0
not r12d
lea rbx, [rsi + 0x10]
xor ebp, ebp
mov r14d, 0x9cbedc59
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
test r12w, r12w
jne 0x140010d13
nop word cs:[rax + rax]
test bpl, bpl
jne 0x140010cf0
movdqa xmm0, xmmword [rbx]
pmovmskb r12d, xmm0
add rsi, 0xfffffffffffffe00
add rbx, 0x10
cmp r12w, 0xffff
je 0x140010cf0
not r12d
tzcnt eax, r12d
shl rax, 5
mov rcx, rsi
sub rcx, rax
cmp qword [rcx - 0x20], 0
je 0x140010d70
mov eax, dword [0x141dc0e68]
xor edx, edx
div dword [0x141dc0e6c]
mov eax, dword [0x141dc0e70]
sub eax, dword [0x141dc0e74]
and eax, 0x9ef2471d
imul rax, rax, 0x38f50f81
shr rax, 0x3a
imul eax, eax, 0xcfbeb1c1
cmp eax, 0x27f80f0a
je 0x140010d37
mov r8, qword [rcx - 0x18]
mov rcx, qword [0x141ddb260]
xor edx, edx
call r15
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
dec qword [rsp + 0x28]
mov eax, dword [0x141dc0e78]
xor eax, dword [0x141dc0e7c]
imul eax, eax, 0xb6c79881
xor eax, 0x336124ac
imul rax, r14
shr rax, 0x3e
cmp eax, 0x744f4712
ja 0x140010d80
cmp qword [rsp + 0x28], 0
jne 0x140010ce0
mov rax, rdi
shl rax, 5
add rdi, rax
cmp rdi, 0xffffffffffffffcf
je 0x140010e50
mov ecx, 0x991f5511
nop dword [rax + rax]
mov edx, dword [0x141dc0e80]
sub edx, dword [0x141dc0e84]
and edx, 0x33b7487d
xor edx, 0x7b16b191
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0xc1503a9
ja 0x140010dd0
mov r8, qword [r13 + 0x90]
sub r8, rax
add r8, 0xffffffffffffffe0
mov rcx, qword [0x141ddb260]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e88]
and eax, dword [0x141dc0e8c]
shr eax, 2
imul rax, rax, 0x487d0265
shr rax, 0x39
imul eax, eax, 0x5865d64e
and eax, 0x34ef6680
cmp eax, 0x4bff6715
ja 0x140010e20
nop dword [rax]
mov eax, dword [0x141dc0e90]
imul eax, dword [0x141dc0e94]
xor eax, 0x55a243e
imul rax, rax, 0x7960f107
shr rax, 0x3d
xor eax, 0x8ce16741
cmp eax, 0x1b256844
jb 0x140010e50
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
test cl, cl
je 0x140010eb0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140010e8a
mov ecx, dword [0x141dc0e28]
and ecx, dword [0x141dc0e2c]
and ecx, 0x5cfa38d7
imul ecx, ecx, 0xa91792d1
and ecx, 0x7516af89
cmp ecx, 0xada7d945
ja 0x140010eb0
test eax, eax
jne 0x140010bba
mov eax, dword [str.v3B]
xor edx, edx
div dword [0x141dc0e34]
imul eax, eax, 0xc5e4bec4
cmp eax, 0x463eb433
je 0x140010f23
mov eax, dword [0x141dc0e38]
or eax, dword [0x141dc0e3c]
add eax, 0x7964a69b
xor eax, 0x5b4fd88
imul edi, eax, 0x4d22c8d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0x5b64bb72
jne 0x140010f30
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140010ef9
mov eax, dword [0x141dc0e40]
sub eax, dword [0x141dc0e44]
xor eax, 0x5ff817ae
add eax, 0x13680ab8
cmp eax, 0xa1487c59
jae 0x140010f30
jmp 0x140010bba