Function at 0x14000f320
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov qword [rsp + 0x28], rcx
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x14000f340
mov rax, qword [rsp + 0x28]
mov r8, qword [rax + 0x48]
test r8, r8
je 0x14000fee9
mov rax, qword [rsp + 0x28]
mov r14, qword [rax + 0x58]
nop
mov eax, dword [0x141dc3a00]
xor eax, dword [0x141dc3a04]
add eax, 0x725df800
or eax, 0x81416190
and eax, 0x87db6bb2
cmp eax, 0x9cf28262
ja 0x14000f360
mov eax, 0xc0a6037d
nop word [rax + rax]
mov ecx, dword [0x141dc3a08]
and ecx, dword [0x141dc3a0c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x20e6f77a
cmp ecx, 0x2bb1a885
ja 0x14000f390
test r14, r14
je 0x14000fe70
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax + 0x40]
movdqa xmm0, xmmword [rcx]
pmovmskb r15d, xmm0
not r15d
mov eax, dword [0x141dc3a10]
xor eax, dword [0x141dc3a14]
imul eax, eax, 0x8ff68c05
shr eax, 1
imul rax, rax, 0x5156a38b
shr rax, 0x3d
add eax, 0xe7937395
cmp eax, 0xd12d7167
jb 0x14000f3d0
lea r13, [rcx + 0x10]
nop
mov eax, dword [0x141dc3a18]
or eax, dword [0x141dc3a1c]
and eax, 0xee886f9f
xor eax, 0xc7a28099
imul eax, eax, 0x36133922
cmp eax, 0xb6dc7173
ja 0x14000f400
xor esi, esi
mov r12d, 0x95514653
nop dword [rax + rax]
mov eax, dword [0x141dc3a20]
xor edx, edx
div dword [0x141dc3a24]
and eax, 0xe7b39b72
xor eax, 0xff2e62f6
imul eax, eax, 0xe17d9336
cmp eax, 0x176debcb
jb 0x14000f430
test r15w, r15w
jne 0x14000f4b0
nop dword [rax + rax]
mov eax, dword [0x141dc3a28]
xor edx, edx
div dword [0x141dc3a2c]
mov eax, dword [0x141dc3a30]
add eax, dword [0x141dc3a34]
xor eax, 0xb19471fd
add eax, 0xc3310151
and eax, 0x9a50869e
cmp eax, 0x7bde2bf6
ja 0x14000f46e
add rcx, 0xffffffffffffea00
movdqa xmm0, xmmword [r13]
add r13, 0x10
pmovmskb r15d, xmm0
cmp r15w, 0xffff
je 0x14000f460
not r15d
mov eax, dword [str.j_]
xor eax, dword [0x141dc3a3c]
imul rax, rax, 0x3f597dd7
shr rax, 0x3a
add eax, 0x3dd8c33b
cmp eax, 0x897151e4
ja 0x14000f4b0
tzcnt eax, r15d
neg rax
imul rax, rax, 0x160
lea rbp, [rcx + rax]
mov qword [rsp + 0x48], rcx
cmp qword [rcx + rax - 0x148], 0
je 0x14000f5a2
mov eax, dword [0x141dc3a40]
add eax, dword [0x141dc3a44]
and eax, 0x45caeaaf
add eax, 0xbe76e0da
cmp eax, 0x324e7218
jae 0x14000f51e
mov rax, qword [0x141dde6e0]
mov ecx, 0x97b51ac7
nop word cs:[rax + rax]
mov eax, dword [0x141dc3a48]
sub eax, dword [0x141dc3a4c]
imul rax, rcx
shr rax, 0x3e
xor eax, 0x118fa48a
imul eax, eax, 0xe8905690
mov rdi, qword [rbp - 0x140]
mov rbx, qword [0x141dde6e0]
cmp eax, 0x40304c26
je 0x14000f530
mov eax, dword [0x141dc3a50]
and eax, dword [0x141dc3a54]
add eax, 0xfbb6b2f3
xor eax, 0x8035ea42
imul eax, eax, 0x6650500e
cmp eax, 0x52c5dc42
jb 0x14000f82a
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test sil, sil
jne 0x14000f82a
lea eax, [r15 - 1]
and eax, r15d
dec r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x40], rax
mov eax, dword [0x141dc3a58]
xor edx, edx
div dword [0x141dc3a5c]
mov eax, dword [0x141dc3a60]
and eax, dword [0x141dc3a64]
imul rax, rax, 0x61b43899
shr rax, 0x3d
and eax, 1
or eax, 0x952559e0
cmp eax, 0x2d0b5878
jb 0x14000f5c4
mov rax, qword [rbp - 0x120]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
mov rdi, qword [rbp - 0x118]
test rdi, rdi
je 0x14000f6d0
mov rax, qword [rsp + 0x38]
lea rbp, [rax + 8]
nop word cs:[rax + rax]
cmp qword [rbp - 8], 0
je 0x14000f6a0
mov rbx, qword [rbp]
mov r14, qword [0x141dde6e0]
mov eax, dword [0x141dc3a68]
and eax, dword [0x141dc3a6c]
imul eax, eax, 0xce68e3e0
and eax, 0xf31418e0
imul rax, rax, 0x7a2c89
shr rax, 0x36
cmp eax, 0xc7ecc45f
je 0x14000f6c0
nop dword [rax + rax]
mov eax, dword [0x141dc3a70]
xor eax, dword [0x141dc3a74]
add eax, 0x679d7025
imul r15, rax, 0x526bbcaf
shr r15, 0x3e
add r15d, 0x60831007
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r15d, 0xcad66095
ja 0x14000f6c0
nop word [rax + rax]
test sil, sil
jne 0x14000f6a0
add rbp, 0x20
dec rdi
jne 0x14000f620
jmp 0x14000f6d0
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000f660
mov eax, dword [0x141dc3a78]
xor edx, edx
div dword [0x141dc3a7c]
mov r14, qword [rsp + 0x30]
nop word cs:[rax + rax]
test sil, sil
jne 0x14000f6f0
cmp qword [r14 - 0x128], 0
je 0x14000f792
mov eax, dword [0x141dc3a80]
xor eax, dword [0x141dc3a84]
imul eax, eax, 0xd344c648
cmp eax, 0x891a027b
jne 0x14000f730
mov rax, qword [0x141dde6e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3a88]
xor eax, dword [0x141dc3a8c]
and eax, 0x4f937e16
add eax, 0x78e2bb60
or eax, 0x2059204f
mov rcx, qword [0x141dde6e0]
cmp eax, 0x415ae206
jb 0x14000f730
xor edx, edx
mov r8, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3a90]
sub eax, dword [0x141dc3a94]
and eax, 0xdad600fa
add eax, 0xc1a31bc6
or eax, 0x21918f7b
cmp eax, 0xcc41f2bf
ja 0x14000f770
mov rax, qword [r14 - 0xf8]
nop dword [rax]
mov ecx, dword [0x141dc3a98]
add ecx, dword [0x141dc3a9c]
or ecx, 0xbb7f3fe5
xor ecx, 0xd9c102c7
cmp ecx, 0xde7e595e
ja 0x14000f7a0
shl rax, 1
test rax, rax
je 0x14000f87a
mov eax, dword [0x141dc3aa0]
xor edx, edx
div dword [0x141dc3aa4]
mov eax, dword [0x141dc3aa8]
imul eax, dword [0x141dc3aac]
add eax, 0xe8c2b8fa
and eax, 0x2e2d0771
cmp eax, 0x117f7756
je 0x14000f7da
mov rdi, qword [r14 - 0xf0]
mov rbx, qword [0x141dde6e0]
mov eax, dword [0x141dc3ab0]
mov ecx, dword [0x141dc3ab4]
add eax, ecx
add eax, 0x9f53d890
xor eax, 0xc18bdf00
cmp eax, 0xb1c5e803
jbe 0x14000f83d
jmp 0x14000f90d
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000f58b
mov ebp, dword [0x141dc3ab8]
sub ebp, dword [0x141dc3abc]
xor ebp, 0x29ed6005
add ebp, 0xd322eda8
xor ebp, 0xa2d2ea6e
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebp, 0x68bb1f24
mov r14, qword [rsp + 0x30]
ja 0x14000f90d
mov eax, dword [0x141dc3ac0]
imul eax, dword [0x141dc3ac4]
imul rax, rax, 0x30ddfd6d
shr rax, 0x3b
and eax, 0xfffffffc
cmp eax, 0x510316d9
je 0x14000f87a
nop dword [rax]
mov eax, dword [0x141dc3ac8]
imul eax, dword [0x141dc3acc]
add eax, 0x667ba323
imul rax, rax, 0x6cef4315
shr rax, 0x3e
cmp eax, 0xade03c63
ja 0x14000f8a0
mov rax, qword [r14 - 0xd8]
shl rax, 1
test rax, rax
je 0x14000f960
mov rdi, qword [r14 - 0xd0]
mov rbx, qword [0x141dde6e0]
mov eax, dword [0x141dc3ad0]
add eax, dword [0x141dc3ad4]
or eax, 0xf6fefc95
imul rax, rax, 0x2c4aaa1d
shr rax, 0x3b
cmp eax, 0xfb3e8f85
jne 0x14000f920
jmp 0x14000fbc3
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000f83d
mov eax, dword [0x141dc3ad8]
xor edx, edx
div dword [0x141dc3adc]
imul ebp, eax, 0x77356361
add ebp, 0x8dd46106
or ebp, 0xcbd6f0ae
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebp, 0x7b7ca7e4
mov r14, qword [rsp + 0x30]
jb 0x14000fbc3
nop
mov eax, dword [0x141dc3ae0]
xor eax, dword [0x141dc3ae4]
add eax, 0x5c13fa9c
imul rax, r12
shr rax, 0x3f
imul eax, eax, 0xc0cfd6d4
cmp eax, 0x4842d0a6
je 0x14000f960
mov rax, qword [r14 - 0x108]
mov qword [rsp + 0x38], rax
mov eax, dword [0x141dc3ae8]
imul eax, dword [0x141dc3aec]
or eax, 0x23fbcb40
cmp eax, 0x10cd1df4
je 0x14000f992
mov rbp, qword [r14 - 0x100]
test rbp, rbp
je 0x14000fa40
mov rax, qword [rsp + 0x38]
lea rdi, [rax + 8]
xor r15d, r15d
jmp 0x14000f9dc
add rdi, 0x20
inc r15
dec rbp
je 0x14000fa40
cmp qword [rdi - 8], 0
je 0x14000f9d0
test sil, sil
jne 0x14000f9e3
mov rbx, qword [rdi]
mov r14, qword [0x141dde6e0]
test sil, sil
jne 0x14000fa2c
nop word [rax + rax]
mov r12d, dword [0x141dc3af0]
and r12d, dword [0x141dc3af4]
add r12d, 0xce93587e
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r12d, 0x9f723bb
jae 0x14000f9d0
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000fa00
mov eax, dword [str.Q_]
and eax, dword [0x141dc3afc]
imul eax, eax, 0x563a29cb
add eax, 0xb3ef2140
cmp eax, 0xe7bbb44b
ja 0x14000fa40
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax - 0x110]
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
mov r12d, 0x95514653
mov r8d, 0x8a1e865f
mov ebp, 0xb5e3b297
mov eax, dword [0x141dc3b00]
xor edx, edx
div dword [0x141dc3b04]
add eax, 0xbdfae50a
xor eax, 0xef917a83
imul rax, r8
shr rax, 0x3f
cmp eax, 0xbe51f58e
ja 0x14000fa85
test rcx, rcx
je 0x14000fb30
mov eax, dword [0x141dc3b08]
imul eax, dword [0x141dc3b0c]
and eax, 0x3b21d20e
imul eax, eax, 0xe9fcdeca
cmp eax, 0x9390764d
jne 0x14000fae0
mov rax, qword [0x141dde6e0]
nop word [rax + rax]
mov rcx, qword [0x141dde6e0]
test sil, sil
jne 0x14000fae0
xor edx, edx
mov r8, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dc3b10]
xor edx, edx
div dword [0x141dc3b14]
imul eax, eax, 0x23adae5
add eax, 0x3fe73c8c
or eax, 0x7fa8e1c0
cmp eax, 0x9124856f
ja 0x14000fb00
nop word cs:[rax + rax]
mov eax, dword [0x141dc3b18]
xor edx, edx
div dword [0x141dc3b1c]
imul eax, eax, 0xb26c9080
add eax, 0xe3b3a08a
cmp eax, 0xb35c1032
ja 0x14000fb30
mov rax, qword [rsp + 0x30]
mov rax, qword [rax - 0xc0]
nop dword [rax]
mov ecx, dword [0x141dc3b20]
imul ecx, dword [0x141dc3b24]
cmp ecx, 0x2073858b
je 0x14000fb60
shl rax, 1
test rax, rax
je 0x14000fc17
nop word cs:[rax + rax]
mov eax, dword [0x141dc3b28]
and eax, dword [0x141dc3b2c]
or eax, 0xbef5f58f
add eax, 0x642896b8
cmp eax, 0xa4d84399
ja 0x14000fb90
mov rax, qword [rsp + 0x30]
mov rdi, qword [rax - 0xb8]
test sil, sil
je 0x14000fbd6
jmp 0x14000fd5e
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000f920
mov eax, dword [0x141dc3b30]
imul eax, dword [0x141dc3b34]
imul eax, eax, 0x48e64150
add eax, 0x3c985340
imul rbx, rax, 0x7feb2d49
shr rbx, 0x3e
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0x70fdedaa
ja 0x14000fd5e
mov rax, qword [rsp + 0x30]
mov rax, qword [rax - 0xa0]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc3b38]
add ecx, dword [0x141dc3b3c]
imul ecx, ecx, 0x230418a3
cmp ecx, 0x126fa081
je 0x14000fc30
shl rax, 1
test rax, rax
je 0x14000fcd0
mov rax, qword [rsp + 0x30]
mov r8, qword [rax - 0x98]
mov eax, dword [0x141dc3b40]
xor eax, dword [0x141dc3b44]
imul rax, rax, 0x61113609
shr rax, 0x3e
or eax, 0xfc437ea8
cmp eax, 0xb973057
jae 0x14000fc90
mov rax, qword [0x141dde6e0]
nop dword [rax + rax]
mov eax, dword [0x141dc3b48]
xor edx, edx
div dword [0x141dc3b4c]
imul rax, rax, 0x19fa64e1
shr rax, 0x3c
imul eax, eax, 0x2d540e4a
add eax, 0xca6f7916
mov rcx, qword [0x141dde6e0]
cmp eax, 0xbae066ed
jb 0x14000fc90
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dc3b50]
xor eax, dword [0x141dc3b54]
or eax, 0x20000588
xor eax, 0x2800008a
or eax, 0x46ffd274
cmp eax, 0xb6b312a2
je 0x14000fcd0
mov rax, qword [rsp + 0x30]
mov rax, qword [rax - 0x60]
nop dword [rax + rax]
mov ecx, dword [0x141dc3b58]
sub ecx, dword [0x141dc3b5c]
imul rcx, rbp
shr rcx, 0x3f
imul ecx, ecx, 0x3c44c826
add ecx, 0x6fe0e873
cmp ecx, 0xd83f2d2d
ja 0x14000fd00
test rax, rax
mov r8, qword [rsp + 0x30]
je 0x14000fe2d
mov ecx, dword [0x141dc3b60]
xor ecx, dword [str.__Jtx]
imul ecx, ecx, 0xe5a6408
and ecx, 0xcfd56510
add ecx, 0x1fe07607
cmp ecx, 0x84ee1c25
jae 0x14000fd75
jmp 0x14000fd9b
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000fbd6
mov ecx, dword [0x141dc3b68]
add ecx, dword [0x141dc3b6c]
imul rdx, rcx, 0x7863189d
shr rdx, 0x3a
lock dec qword [rax]
sete cl
cmp edx, 0xa4adedf3
jne 0x14000fda1
lock dec qword [rax]
jmp 0x14000fd75
test cl, cl
je 0x14000fe2d
mov eax, dword [0x141dc3b70]
xor eax, dword [0x141dc3b74]
add eax, 0xca64476c
mov ecx, 0x996b9125
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x8925ba6f
je 0x14000fdf3
mov eax, dword [0x141dc3b78]
mov ecx, dword [0x141dc3b7c]
add eax, ecx
add eax, 0x1f2fce86
xor eax, 0xccaf7664
imul eax, eax, 0xfbb60331
cmp eax, 0xf3e8578f
jbe 0x14000fdf5
jmp 0x14000fdce
mov eax, dword [0x141dc3b80]
and eax, dword [0x141dc3b84]
mov rdi, qword [r8 - 0x60]
imul eax, eax, 0x2bf3f064
and eax, 0x5ff47164
cmp eax, 0x5a4ba1a4
jne 0x14000fe20
mov rcx, rdi
call fcn.140017320
nop
mov rcx, rdi
call fcn.140017320
test sil, sil
jne 0x14000fe20
mov ecx, 0x8b1071ad
mov eax, dword [0x141dc3b88]
or eax, dword [0x141dc3b8c]
or eax, 0xd590aea6
shr eax, 1
imul rax, rcx
shr rax, 0x3e
or eax, 0xbc5923a6
cmp eax, 0xabf5629f
je 0x14000fe32
test r14, r14
mov rcx, qword [rsp + 0x48]
jne 0x14000f430
mov rax, qword [rsp + 0x28]
mov r8, qword [rax + 0x48]
mov eax, dword [0x141dc3b90]
xor edx, edx
div dword [0x141dc3b94]
lea rcx, [r8 + 1]
mov r9d, 0x160
xor r10d, r10d
nop dword [rax + rax]
mov rax, rcx
mul r9
test r10b, r10b
jne 0x14000fe90
lea rcx, [r8 + rax]
add rcx, 0x11
test rcx, rcx
je 0x14000fee9
neg rax
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x14000feb0
mov rcx, qword [rsp + 0x28]
add rax, qword [rcx + 0x40]
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dc3b98]
or eax, dword [0x141dc3b9c]
imul eax, eax, 0x7a0dad39
cmp eax, 0xd4bc8489
je 0x14000fed0
mov eax, 0xa71cdea1
nop
mov ecx, dword [0x141dc3ba0]
xor ecx, dword [0x141dc3ba4]
or ecx, 0xee4f3284
shr ecx, 1
imul rcx, rax
shr rcx, 0x3b
cmp ecx, 0x51f4c11d
je 0x14000fef0
nop word cs:[rax + rax]
mov eax, dword [0x141dc3ba8]
xor eax, dword [0x141dc3bac]
xor eax, 0x9bb6bcfb
imul rax, rax, 0x65fe884d
shr rax, 0x3d
cmp eax, 0x993145d8
je 0x14000ff20
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x18]
shl rax, 1
test rax, rax
je 0x14001000a
mov eax, 0xd32bade9
nop dword [rax]
mov ecx, dword [0x141dc3bb0]
xor ecx, dword [0x141dc3bb4]
imul rcx, rax
shr rcx, 0x3c
add ecx, 0xd34c380a
or ecx, 0x90b0ad7a
cmp ecx, 0xd5b376db
je 0x14000ff60
mov eax, dword [0x141dc3bb8]
or eax, dword [0x141dc3bbc]
mov rcx, qword [rsp + 0x28]
mov rdi, qword [rcx + 0x20]
add eax, 0x4e07b02
and eax, 0xe1d551e6
cmp eax, 0x7d40bff0
jne 0x14000ffc0
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dc3bc0]
xor edx, edx
div dword [0x141dc3bc4]
add eax, 0xac9d3e9a
imul rbx, rax, 0x44f64ce1
shr rbx, 0x3e
add ebx, 0x6d1d8b7
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rdi
call rsi
cmp ebx, 0x68258b2a
ja 0x14000ffd0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 8]
mov qword [rsp + 0x30], rax
nop dword [rax + rax]
mov eax, dword [0x141dc3bc8]
or eax, dword [0x141dc3bcc]
add eax, 0xab2deb8e
xor eax, 0xe16cd3f0
shr eax, 3
imul rax, rax, 0x229001dd
shr rax, 0x3a
cmp eax, 0xbe8c0f1
ja 0x140010020
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140010379
xor r15d, r15d
mov r13d, 0x97c143d7
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
xor r12d, r12d
nop word cs:[rax + rax]
mov eax, dword [0x141dc3bd0]
imul eax, dword [0x141dc3bd4]
and eax, 0xc182a0c
or eax, 0xe063d553
imul eax, eax, 0x40ce07dc
cmp eax, 0x4fd2bd72
jb 0x140010080
imul rax, r12, 0x70
mov rcx, qword [rsp + 0x30]
lea rsi, [rcx + rax]
cmp qword [rcx + rax], 0
je 0x14001011d
mov rbx, qword [rsi + 8]
mov r14, qword [0x141dde6e0]
mov eax, dword [0x141dc3bd8]
and eax, dword [0x141dc3bdc]
and eax, 0x2b3fad6f
imul rax, rax, 0x289a3f1d
shr rax, 0x3a
cmp eax, 0x5a001958
jbe 0x1400100f0
mov rcx, r14
xor edx, edx
mov r8, rbx
call rbp
mov eax, dword [0x141dc3be0]
mov ecx, dword [0x141dc3be4]
lea edi, [rax + rcx]
add edi, 0xa3dc43ca
and edi, 0x2522
mov rcx, r14
xor edx, edx
mov r8, rbx
call rbp
cmp edi, 0xcb3b5b2a
ja 0x1400100f0
inc r12
mov ecx, 0x8e4025a1
nop word cs:[rax + rax]
mov eax, dword [0x141dc3be8]
or eax, dword [0x141dc3bec]
xor eax, 0x6d620a12
or eax, 0x28c756c
imul eax, eax, 0xaf89af41
cmp eax, 0x9a6f5677
je 0x140010130
mov eax, dword [0x141dc3bf0]
sub eax, dword [0x141dc3bf4]
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x6d1cbc2
and eax, 0x454efac
cmp eax, 0xbf27bbd6
ja 0x140010153
mov rax, qword [rsi + 0x18]
mov ecx, dword [0x141dc3bf8]
and ecx, dword [0x141dc3bfc]
xor ecx, 0xc0000000
or ecx, 0x39d7df7f
cmp ecx, 0x274f54c4
jb 0x14001017d
test rax, rax
je 0x140010200
mov eax, dword [0x141dc3c00]
xor edx, edx
div dword [0x141dc3c04]
test r15b, r15b
jne 0x1400101b0
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x141dde6e0]
xor edx, edx
call rbp
nop word cs:[rax + rax]
mov eax, dword [0x141dc3c08]
imul eax, dword [0x141dc3c0c]
add eax, 0xabec88b5
imul rax, rax, 0x5bb0bd1b
shr rax, 0x3b
imul eax, eax, 0xf0eb3520
cmp eax, 0xf5bddbef
ja 0x1400101d0
nop word [rax + rax]
mov eax, dword [0x141dc3c10]
and eax, dword [0x141dc3c14]
imul eax, eax, 0x56e91fc6
imul rax, r13
shr rax, 0x3e
and eax, 0xfffffffe
cmp eax, 0x8e0901ad
ja 0x140010200
mov eax, dword [0x141dc3c18]
or eax, dword [0x141dc3c1c]
imul eax, eax, 0xcba4cc65
xor eax, 0x92c990f9
add eax, 0xf0f694f3
cmp eax, 0x39d984ef
ja 0x140010224
mov rax, qword [rsi + 0x48]
nop dword [rax + rax]
mov ecx, dword [0x141dc3c20]
or ecx, dword [0x141dc3c24]
or ecx, 0x1a204302
and ecx, 0x1a29630b
cmp ecx, 0xc118837c
je 0x140010250
shl rax, 1
test rax, rax
je 0x1400102f0
mov eax, dword [0x141dc3c28]
and eax, dword [0x141dc3c2c]
or eax, 0xc4c18200
and eax, 0xc4c1f680
cmp eax, 0x1358b909
jne 0x1400102a0
mov rax, qword [0x141dde6e0]
nop dword [rax]
mov eax, dword [0x141dc3c30]
and eax, dword [0x141dc3c34]
imul eax, eax, 0x9d076d88
add eax, 0x896341b4
mov r8, qword [rsi + 0x50]
mov rcx, qword [0x141dde6e0]
cmp eax, 0x70d6b8d0
ja 0x1400102a0
xor edx, edx
call rbp
nop dword [rax]
mov eax, dword [0x141dc3c38]
xor eax, dword [0x141dc3c3c]
or eax, 0xb3a5da72
and eax, 0xbfb7ff73
cmp eax, 0x3f0dc458
jb 0x1400102d0
nop dword [rax]
mov eax, dword [0x141dc3c40]
sub eax, dword [0x141dc3c44]
or eax, 0x6ddf9dff
imul eax, eax, 0xeea654c5
cmp eax, 0x5f6c3a41
je 0x1400102f0
mov rax, qword [rsi + 0x30]
mov ecx, dword [0x141dc3c48]
and ecx, dword [0x141dc3c4c]
add ecx, 0x510f5f10
and ecx, 0x81cd77b
cmp ecx, 0xbbd0ca88
ja 0x140010312
test rax, rax
je 0x140010350
mov r8, qword [rsi + 0x38]
mov rcx, qword [0x141dde6e0]
xor edx, edx
call rbp
nop word cs:[rax + rax]
mov eax, dword [0x141dc3c50]
and eax, dword [0x141dc3c54]
or eax, 0x617092b
imul eax, eax, 0x6e6fb4ac
cmp eax, 0x40c4de44
je 0x140010350
cmp r12, qword [rsp + 0x38]
jne 0x140010080
mov eax, dword [0x141dc3c58]
xor edx, edx
div dword [0x141dc3c5c]
mov eax, 0x94cbcf73
nop dword [rax]
mov ecx, dword [0x141dc3c60]
xor ecx, dword [0x141dc3c64]
add ecx, 0xca150555
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x68df9207
ja 0x140010390
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
nop word [rax + rax]
mov ecx, dword [0x141dc3c68]
or ecx, dword [0x141dc3c6c]
or ecx, 0x598e4035
imul rcx, rcx, 0x721e8799
shr rcx, 0x3e
imul ecx, ecx, 0x563fb130
cmp ecx, 0xac9fafd5
ja 0x1400103c0
test rax, rax
je 0x140010440
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3c70]
or eax, dword [0x141dc3c74]
xor eax, 0x7b1a1e07
add eax, 0x68abd3b3
imul rax, rax, 0x553d8fb7
shr rax, 0x3e
cmp eax, 0x1452d348
je 0x140010410
nop dword [rax + rax]
mov eax, dword [0x141dc3c78]
add eax, dword [0x141dc3c7c]
xor eax, 0xd0f41588
or eax, 0x240ba817
cmp eax, 0xfb0606e4
je 0x140010440
mov rax, qword [rsp + 0x28]
mov rsi, qword [rax + 0x90]
test rsi, rsi
je 0x140010b70
nop word cs:[rax + rax]
mov eax, dword [0x141dc3c80]
sub eax, dword [0x141dc3c84]
imul eax, eax, 0x17b4f758
add eax, 0xb4a7fa20
or eax, 0xae3c554e
cmp eax, 0x51b6001a
jb 0x140010480
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0xa8]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140010630
lea rdi, [rsi + 0x10]
movdqa xmm0, xmmword [rsi]
pmovmskb r13d, xmm0
not r13d
nop dword [rax]
mov eax, dword [0x141dc3c88]
xor edx, edx
div dword [0x141dc3c8c]
or eax, 0xb274a945
add eax, 0xfe3b6966
cmp eax, 0x67b63c35
jb 0x1400104d0
mov r14, qword [sym.imp.pdh.dll_PdhRemoveCounter]
mov r15, rsi
mov r12, qword [rsp + 0x30]
jmp 0x14001050c
mov r13d, ebp
dec r12
je 0x140010630
test r13w, r13w
je 0x140010550
lea ebp, [r13 - 1]
and ebp, r13d
nop dword [rax]
mov eax, dword [0x141dc3c98]
xor edx, edx
div dword [0x141dc3c9c]
add eax, 0xe7f21891
or eax, 0x6316043e
cmp eax, 0x659ee213
je 0x140010520
jmp 0x1400105a0
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
add r15, 0xfffffffffffffe00
add rdi, 0x10
cmp eax, 0xffff
je 0x140010550
mov ecx, dword [0x141dc3c90]
and ecx, dword [0x141dc3c94]
add ecx, 0xf5a1219f
xor ecx, 0x5126befc
add ecx, 0x50dcb2a4
mov ebp, 0xfffffffe
sub ebp, eax
mov r13d, eax
not r13d
and ebp, r13d
cmp ecx, 0xbb31a706
jb 0x14001056a
mov eax, dword [0x141dc3cc0]
imul eax, dword [0x141dc3cc4]
imul eax, eax, 0x5e401812
or eax, 0x63739ad4
add eax, 0x70a6f086
cmp eax, 0x6ce2ec4a
ja 0x140010613
nop word cs:[rax + rax]
mov eax, dword [0x141dc3cc8]
xor eax, dword [0x141dc3ccc]
add eax, 0x547f80a5
xor eax, 0x5159b9a8
imul rbx, rax, 0x10b3572f
shr rbx, 0x39
tzcnt eax, r13d
shl rax, 5
mov rcx, r15
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
cmp ebx, 0x6ba919af
jne 0x140010500
tzcnt eax, r13d
shl rax, 5
mov rcx, r15
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
jmp 0x1400105d0
mov eax, dword [0x141dc3ca0]
xor edx, edx
div dword [0x141dc3ca4]
imul eax, eax, 0xe59e543d
or eax, 0x3c1e6a20
and eax, 0x7d5fee72
cmp eax, 0xfcdb1372
je 0x140010630
mov eax, dword [0x141dc3ca8]
xor edx, edx
div dword [0x141dc3cac]
mov r13, qword [rsp + 0x30]
mov eax, 0xb04eb783
nop dword [rax]
mov ecx, dword [0x141dc3cb0]
imul ecx, dword [0x141dc3cb4]
add ecx, 0x9506a481
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xf9309afc
ja 0x140010670
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax + 0xc8]
mov ecx, 0xa5134fbd
nop word cs:[rax + rax]
mov eax, dword [0x141dc3cb8]
xor edx, edx
div dword [0x141dc3cbc]
xor eax, 0x3ea96296
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xe96dcc0c
je 0x1400106b0
lea rax, [rdi + 1]
cmp rax, 2
jb 0x140010784
mov eax, dword [0x141dc3cd0]
and eax, dword [0x141dc3cd4]
add eax, 0x91933e53
and eax, 0x5e052753
cmp eax, 0xcdc37278
ja 0x1400106e0
mov eax, dword [0x141dc3cd8]
xor edx, edx
div dword [0x141dc3cdc]
or eax, 0x9effa9ce
add eax, 0x9c0e1be3
or eax, 0x6f84710c
cmp eax, 0x7a3db7
jae 0x14001072a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, 0x8dc81225
mov r15, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word [rax + rax]
mov ebx, dword [0x141dc3ce0]
sub ebx, dword [0x141dc3ce4]
or ebx, 0x1fa23ec4
imul rbx, r14
shr rbx, 0x3f
mov rcx, rdi
call r15
cmp ebx, 0x88e08405
ja 0x140010740
test eax, eax
jne 0x140010784
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov al, 1
nop word cs:[rax + rax]
test al, al
je 0x140010780
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax + 0xc0]
lea rax, [rdi + 1]
cmp rax, 2
jb 0x1400107f0
xor eax, eax
test al, al
jne 0x1400107af
mov rcx, rdi
call qword [sym.imp.pdh.dll_PdhCloseQuery]
xor eax, eax
test al, al
je 0x1400107ba
mov rcx, rdi
call qword [sym.imp.pdh.dll_PdhCloseQuery]
jmp 0x1400107a0
mov eax, 0xa785eba9
nop
mov ecx, dword [0x141dc3ce8]
and ecx, dword [0x141dc3cec]
add ecx, 0x97cd35b1
xor ecx, 0xfc3a867c
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x259c3bfd
ja 0x1400107c0
nop dword [rax + rax]
mov eax, dword [0x141dc3cf0]
or eax, dword [0x141dc3cf4]
add eax, 0x81191a4
cmp eax, 0x2b76f2a0
jb 0x1400107f0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x98]
test rax, rax
je 0x140010b70
mov qword [rsp + 0x38], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc3cf8]
xor eax, dword [0x141dc3cfc]
add eax, 0xcb865873
imul rax, rax, 0x48757ba9
shr rax, 0x3e
imul eax, eax, 0xbd597214
cmp eax, 0xe06a1201
ja 0x140010830
test r13, r13
je 0x140010a4c
mov eax, 0x84507275
nop word [rax + rax]
mov ecx, dword [0x141dc3d00]
sub ecx, dword [0x141dc3d04]
imul rcx, rcx, 0x4ae41f11
shr rcx, 0x3e
add ecx, 0x6b5b9dc9
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x2123622e
je 0x140010870
movdqa xmm0, xmmword [rsi]
pmovmskb r12d, xmm0
not r12d
lea r14, [rsi + 0x10]
xor ebp, ebp
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3d08]
or eax, dword [0x141dc3d0c]
or eax, 0xdfff7fff
and eax, 0xdfffffff
cmp eax, 0x2d804d22
jb 0x1400108c0
test r12w, r12w
jne 0x140010954
nop word cs:[rax + rax]
mov eax, dword [0x141dc3d18]
or eax, dword [0x141dc3d1c]
imul eax, eax, 0x71a33815
and eax, 0x10402f9f
cmp eax, 0x1f8f8cd5
je 0x1400108f0
add rsi, 0xfffffffffffffe00
movdqa xmm0, xmmword [r14]
add r14, 0x10
pmovmskb eax, xmm0
cmp ax, 0xffff
je 0x1400108f0
mov ecx, dword [0x141dc3d10]
or ecx, dword [0x141dc3d14]
add ecx, 0xd46645d5
or ecx, 0x512a98c1
imul ecx, ecx, 0xa4d1c88a
mov r12d, eax
not r12d
cmp ecx, 0x18081c9
jb 0x140010928
mov rdi, r13
nop word [rax + rax]
test bpl, bpl
jne 0x140010960
tzcnt eax, r12d
shl rax, 5
mov r13, rsi
sub r13, rax
cmp qword [r13 - 0x20], 0
je 0x1400109e7
mov eax, dword [0x141dc3d20]
xor edx, edx
div dword [0x141dc3d24]
xor eax, 0xecd85f77
add eax, 0xe9942526
cmp eax, 0xb4f02ef6
jae 0x1400109b0
mov r8, qword [r13 - 0x18]
mov rcx, qword [0x141dde6e0]
xor edx, edx
call r15
nop word [rax + rax]
mov ebx, dword [0x141dc3d28]
imul ebx, dword [0x141dc3d2c]
add ebx, 0xab069f00
or ebx, 0x9b858cf8
add ebx, 0x8b970b49
mov r8, qword [r13 - 0x18]
mov rcx, qword [0x141dde6e0]
xor edx, edx
call r15
cmp ebx, 0x447f9969
jb 0x1400109b0
lea eax, [r12 - 1]
and eax, r12d
mov r13, rdi
dec r13
mov r12d, eax
nop dword [rax + rax]
mov eax, dword [0x141dc3d30]
and eax, dword [0x141dc3d34]
cmp eax, 0xab7df36b
je 0x140010a00
nop word cs:[rax + rax]
mov eax, dword [0x141dc3d38]
imul eax, dword [0x141dc3d3c]
add eax, 0xfd9bc0de
xor eax, 0x91546a2
and eax, 0xebf547a6
cmp eax, 0xe4db6bea
ja 0x140010a20
test r13, r13
jne 0x1400108c0
mov rcx, qword [rsp + 0x38]
mov rax, rcx
shl rax, 5
add rcx, rax
add rcx, 0x31
nop
mov edx, dword [0x141dc3d40]
or edx, dword [0x141dc3d44]
xor edx, 0xce604923
imul edx, edx, 0xaa689b0e
and edx, 0x823301e0
cmp edx, 0x977a1188
ja 0x140010a60
test rcx, rcx
je 0x140010b70
mov rcx, qword [rsp + 0x28]
mov rsi, qword [rcx + 0x90]
sub rsi, rax
add rsi, 0xffffffffffffffe0
mov eax, dword [0x141dc3d48]
imul eax, dword [0x141dc3d4c]
imul rax, rax, 0x351e9383
shr rax, 0x3d
imul eax, eax, 0xec8ea8e0
add eax, 0x91e2acb9
cmp eax, 0x7c98cb06
jb 0x140010af0
mov eax, dword [0x141dc3d50]
sub eax, dword [0x141dc3d54]
and eax, 0x861402
add eax, 0x92d74ce4
mov rdi, qword [0x141dde6e0]
cmp eax, 0xf2bfafe8
jbe 0x140010af9
mov rax, qword [0x141dde6e0]
jmp 0x140010acc
mov eax, dword [str.lx_]
xor edx, edx
div dword [0x141dc3d5c]
add eax, 0x996346d
and eax, 0x76478175
add eax, 0xc047f6f7
cmp eax, 0x6181721a
jae 0x140010b2b
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc3d60]
xor edx, edx
div dword [0x141dc3d64]
mov ebx, eax
and ebx, 0x48260021
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r14
cmp ebx, 0x9fa779b5
je 0x140010b40
nop dword [rax]
mov eax, dword [0x141dc3d68]
add eax, dword [0x141dc3d6c]
or eax, 0x9161e416
shr eax, 1
imul rax, rax, 0x27d14b03
shr rax, 0x3c
imul eax, eax, 0xb6b3c68
cmp eax, 0x3641d61c
ja 0x140010b70
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret