Function at 0x1400d9cf0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp], xmm8
movdqa xmmword [rbp - 0x10], xmm7
movdqa xmmword [rbp - 0x20], xmm6
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x78], r8
mov rdi, rdx
mov eax, dword [0x141dd9688]
imul eax, dword [0x141dd968c]
add eax, 0x13f6bbe6
imul rdx, rax, 0x5b4d6e6f
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1c
cmp eax, 0x3460002c
ja 0x1400d9da2
mov eax, dword [0x141dd9690]
or eax, dword [0x141dd9694]
and eax, 0x101890d0
imul edx, eax, 0x9d1d8c18
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rbx, rsp
cmp edx, 0x3a1472d3
jne 0x1400d9dd0
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
jmp 0x1400d9d53
mov eax, dword [0x141dd9698]
sub eax, dword [0x141dd969c]
xor eax, 0x43000a0
and eax, 0x4b0bbe4
add eax, 0x37060b68
cmp eax, 0xad7a5d63
ja 0x1400d9dd0
mov r15, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
test rax, rax
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x58], r12
je 0x1400d9e75
add rax, r15
mov qword [rbp - 0x38], rax
lea r10, [r15 + 1]
nop word [rax + rax]
mov eax, dword [0x141dd96a0]
xor edx, edx
div dword [0x141dd96a4]
xor eax, 0x3b47ee06
add eax, 0x7d4ef06f
cmp eax, 0x6538cf20
jb 0x1400d9e20
movzx eax, byte [r15]
test al, al
mov qword [rbp - 0x30], rbx
js 0x1400d9ed7
nop
mov ecx, dword [0x141dd96a8]
sub ecx, dword [0x141dd96ac]
imul ecx, ecx, 0xcacc189c
add ecx, 0x4d8a44d8
cmp ecx, 0xf429fbf0
ja 0x1400d9e50
jmp 0x1400da060
mov eax, dword [0x141dd96e0]
and eax, dword [0x141dd96e4]
or eax, 0x1c4f1f4
add eax, 0xf13e075c
or eax, 0xf8aaee8c
cmp eax, 0x8d38b1a2
jae 0x1400d9ea0
mov qword [rbx], 0
nop
mov eax, dword [0x141dd96e8]
and eax, dword [0x141dd96ec]
imul eax, eax, 0xfcd0cf2e
mov qword [rbx], 0
cmp eax, 0xb3b93a68
je 0x1400d9ea0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], 0
xor esi, esi
jmp 0x1400da724
mov ecx, eax
and ecx, 0x1f
lea r10, [r15 + 2]
mov edx, ecx
shl edx, 6
xor r8d, r8d
nop dword [rax + rax]
test r8b, r8b
jne 0x1400d9ef0
movzx r8d, byte [r15 + 1]
and r8d, 0x3f
cmp al, 0xdf
jbe 0x1400d9fc8
nop word cs:[rax + rax]
mov edx, dword [0x141dd96b0]
and edx, dword [0x141dd96b4]
and edx, 0x60874669
add edx, 0x35ecb8d1
xor edx, 0x3b828c7d
cmp edx, 0xf1974ead
ja 0x1400d9f10
movzx edx, byte [r15 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp al, 0xf0
jb 0x1400d9fd2
mov eax, 0x9f514f37
lea r10, [r15 + 4]
and ecx, 7
shl ecx, 0x12
shl edx, 6
nop
mov r8d, dword [0x141dd96b8]
and r8d, dword [0x141dd96bc]
add r8d, 0x735521ca
imul r8, rax
shr r8, 0x3f
cmp r8d, 0x59ee2500
je 0x1400d9f60
movzx r8d, byte [r15 + 3]
and r8d, 0x3f
or edx, ecx
mov eax, edx
or eax, r8d
nop word cs:[rax + rax]
mov ecx, dword [0x141dd96c0]
add ecx, dword [0x141dd96c4]
or ecx, 0x6610436b
add ecx, 0x2bc7221f
and ecx, 0xabf30086
cmp ecx, 0xf4764ca1
ja 0x1400d9fa0
jmp 0x1400d9fe0
or edx, r8d
mov eax, edx
jmp 0x1400da060
lea r10, [r15 + 3]
shl ecx, 0xc
or edx, ecx
mov eax, edx
nop dword [rax]
mov ecx, dword [0x141dd96c8]
and ecx, dword [0x141dd96cc]
or ecx, 0xc9792eaf
add ecx, 0x91a962b5
cmp ecx, 0xc8bc73a2
ja 0x1400d9fe0
cmp eax, 0xffff
jbe 0x1400da060
lea esi, [rax + 0xff0000]
shr esi, 0xa
or esi, 0xd800
and eax, 0x3ff
or eax, 0xdc00
mov r13d, eax
nop word cs:[rax + rax]
mov eax, dword [0x141dd96d8]
or eax, dword [0x141dd96dc]
add eax, 0x6b550e83
imul rax, rax, 0x2dceca01
shr rax, 0x3c
add eax, 0x9d53aa76
cmp eax, 0xa0980c7b
jae 0x1400da030
jmp 0x1400da08c
mov ecx, dword [0x141dd96d0]
imul ecx, dword [0x141dd96d4]
xor ecx, 0x24908c88
or ecx, 0xd16b7214
add ecx, 0x61332f8e
cmp ecx, 0xddc2fa2d
ja 0x1400da060
xor r13d, r13d
mov esi, eax
movabs r9, 0x3fffffffffffffff
mov rax, qword [rbp - 0x38]
lea rcx, [rax + 2]
mov qword [rbp - 0x40], rcx
mov rbx, r10
sub rcx, r10
movabs r11, 0xaaaaaaaaaaaaaaab
mov r10d, 4
nop dword [rax + rax]
mov eax, dword [0x141dd96f0]
xor edx, edx
div dword [0x141dd96f4]
mov r8d, eax
xor r8d, 0x854080c0
or r8d, 0x303e663d
mov rax, rcx
mul r11
shr rdx, 1
cmp r13w, 1
sbb rdx, 0xffffffffffffffff
lea rdi, [rdx + 1]
cmp rdx, 3
cmovb rdi, r10
cmp r8d, 0x8a166272
je 0x1400da0c0
cmp rdi, r9
ja 0x1400dab5d
mov eax, dword [0x141dd9708]
and eax, dword [0x141dd970c]
imul eax, eax, 0x3bac55a0
add eax, 0x52457500
and eax, 0xd7721ee0
cmp eax, 0x8deb9987
jbe 0x1400da139
movzx eax, byte [0x141ddc4f8]
lea r8, [rdi + rdi]
nop dword [rax]
mov eax, dword [0x141dd9710]
xor edx, edx
div dword [0x141dd9714]
imul eax, eax, 0x73bcb04e
or eax, 0xb01e6466
add eax, 0x9805728b
movzx ecx, byte [0x141ddc4f8]
cmp eax, 0x2976a4d2
jb 0x1400da140
sub rsp, 0x20
xor ecx, ecx
mov rdx, r8
call fcn.1400c0a10
add rsp, 0x20
mov rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd9718]
add eax, dword [0x141dd971c]
imul rax, rax, 0x73be4557
shr rax, 0x3c
cmp eax, 0xe02bd68a
je 0x1400da190
test rcx, rcx
je 0x1400dabb1
xor eax, eax
test al, al
movabs r10, 0xaaaaaaaaaaaaaaab
je 0x1400da1d0
mov word [rcx], si
mov qword [r14], rdi
nop dword [rax]
mov eax, dword [0x141dd9720]
or eax, dword [0x141dd9724]
imul eax, eax, 0xd4d3b5a2
or eax, 0xdca055e9
imul rax, rax, 0x6b41de87
shr rax, 0x3e
mov word [rcx], si
mov qword [r14], rdi
cmp eax, 0xc5982d14
ja 0x1400da1d0
mov eax, dword [0x141dd9728]
xor edx, edx
div dword [0x141dd972c]
imul eax, eax, 0xc9ac21cf
add eax, 0xa2e0a774
xor eax, 0x5bf83c10
cmp eax, 0x5e9352fe
jae 0x1400da228
mov qword [r14 + 8], rcx
mov rdi, rbx
nop dword [rax + rax]
mov eax, dword [0x141dd9730]
or eax, dword [0x141dd9734]
xor eax, 0xee2226c6
imul rax, rax, 0x2c42d855
shr rax, 0x3d
or eax, 0x5258477c
mov qword [r14 + 8], rcx
cmp eax, 0xf21f4298
ja 0x1400da230
mov eax, dword [0x141dd9738]
add eax, dword [0x141dd973c]
and eax, 0x3058d039
cmp eax, 0x8702312f
jne 0x1400da280
mov qword [r14 + 0x10], 1
nop dword [rax]
mov eax, dword [0x141dd9740]
and eax, dword [0x141dd9744]
and eax, 0x43802b0c
mov qword [r14 + 0x10], 1
cmp eax, 0x4ab50ba8
je 0x1400da280
mov esi, 1
mov r12d, 0xbbe20a85
mov ebx, 0x9597b439
mov eax, dword [0x141dd9748]
xor edx, edx
div dword [0x141dd974c]
imul eax, eax, 0x9f5509ea
or eax, 0x43e1e164
cmp eax, 0xd16f2b5c
ja 0x1400da2b0
test r13w, r13w
je 0x1400da2e0
xor r15d, r15d
jmp 0x1400da570
mov eax, dword [0x141dd9750]
xor eax, dword [0x141dd9754]
imul eax, eax, 0x5bf891fe
imul rax, r12
shr rax, 0x3f
imul eax, eax, 0x5a04dc31
cmp eax, 0x1cdf1532
ja 0x1400da2e0
cmp rdi, qword [rbp - 0x38]
mov eax, 0
je 0x1400da6d7
nop word cs:[rax + rax]
test al, al
jne 0x1400da320
lea r9, [rdi + 1]
movzx r8d, byte [rdi]
nop dword [rax]
mov eax, dword [0x141dd9758]
xor edx, edx
div dword [0x141dd975c]
or eax, 0xff597e1e
imul eax, eax, 0x32cd1b84
cmp eax, 0x233c4fb4
je 0x1400da330
test r8b, r8b
js 0x1400da3a0
mov eax, dword [0x141dd9770]
imul eax, dword [0x141dd9774]
imul eax, eax, 0x7705562e
cmp eax, 0xac1a307d
je 0x1400da355
nop
mov eax, dword [0x141dd9778]
add eax, dword [0x141dd977c]
xor eax, 0x44b68497
add eax, 0xf7fff3ae
or eax, 0x7264bc77
cmp eax, 0x29b4cbc0
jb 0x1400da370
jmp 0x1400da540
mov eax, dword [0x141dd9760]
and eax, dword [0x141dd9764]
imul eax, eax, 0x9a4a04f0
add eax, 0xcd0d0afe
cmp eax, 0xbc015bc3
ja 0x1400da3a0
mov r10d, r8d
and r10d, 0x1f
lea r9, [rdi + 2]
movzx r11d, byte [rdi + 1]
nop
mov eax, dword [0x141dd9768]
imul eax, dword [0x141dd976c]
add eax, 0xe867ef09
or eax, 0x53005aae
add eax, 0xfafa4e69
cmp eax, 0xf8c4412f
ja 0x1400da3d0
and r11d, 0x3f
cmp r8b, 0xdf
jbe 0x1400da4b8
mov eax, dword [0x141dd9780]
xor edx, edx
div dword [0x141dd9784]
nop
mov eax, dword [0x141dd9788]
xor edx, edx
div dword [0x141dd978c]
imul rax, rax, 0x3453c097
shr rax, 0x39
cmp eax, 0xc037f80b
je 0x1400da410
lea r9, [rdi + 3]
movzx eax, byte [rdi + 2]
shl r11d, 6
and eax, 0x3f
nop
mov edx, dword [0x141dd9790]
imul edx, dword [0x141dd9794]
add edx, 0x10fd2f95
xor edx, 0x40035060
or edx, 0xbeeca38b
cmp edx, 0xb9ea3af1
jb 0x1400da440
or r11d, eax
cmp r8b, 0xf0
jb 0x1400da4ce
movzx eax, byte [rdi + 3]
add rdi, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and eax, 0x3f
mov edx, dword [0x141dd9798]
sub edx, dword [0x141dd979c]
xor edx, 0x904601e0
or edx, 0x8012011
and edx, 0xd847a3f1
cmp edx, 0xf310736a
je 0x1400da487
or r11d, eax
or r11d, r10d
mov r9, rdi
jmp 0x1400da4d5
shl r10d, 6
or r10d, r11d
mov r8d, r10d
movabs r10, 0xaaaaaaaaaaaaaaab
jmp 0x1400da540
shl r10d, 0xc
or r11d, r10d
mov r8d, r11d
cmp r11d, 0xffff
movabs r10, 0xaaaaaaaaaaaaaaab
mov edx, 0xdf20a85d
jbe 0x1400da540
mov eax, dword [0x141dd97a8]
add eax, dword [0x141dd97ac]
imul eax, eax, 0x5817d628
imul rax, rdx
shr rax, 0x3f
cmp eax, 0x9dc86d3
je 0x1400da4f0
lea r13d, [r8 + 0xff0000]
shr r13d, 0xa
or r13d, 0xd800
and r8d, 0x3ff
xor eax, eax
movzx r15d, r8w
or r15d, 0xdc00
test al, al
jne 0x1400da52c
mov rdi, r9
jmp 0x1400da570
mov eax, dword [0x141dd97a0]
and eax, dword [0x141dd97a4]
imul eax, eax, 0xc27dae24
add eax, 0x8459fdab
xor eax, 0xe8208297
xor r15d, r15d
cmp eax, 0xe8079a5d
ja 0x1400da540
mov rdi, r9
mov r13d, r8d
nop dword [rax]
mov eax, dword [0x141dd97b0]
add eax, dword [0x141dd97b4]
imul eax, eax, 0x15c77990
imul rax, rax, 0x3e6b73b3
shr rax, 0x3d
cmp eax, 0xb21177cf
ja 0x1400da570
cmp rsi, qword [r14]
jne 0x1400da636
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rdi
sub rax, rdi
mul r10
mov rdi, rdx
shr rdi, 1
cmp r15w, 1
sbb rdi, 0
mov eax, dword [0x141dd97c8]
imul eax, dword [0x141dd97cc]
add rdi, 2
or eax, 0xde7faffd
add eax, 0xa7ec2e4e
cmp eax, 0xd911ce7
jb 0x1400da6ad
mov ebx, dword [0x141dd97d0]
and ebx, dword [0x141dd97d4]
or ebx, 0xbfff7fff
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r14
mov rdx, rsi
mov r8, rdi
call fcn.1400fe550
add rsp, 0x30
cmp ebx, 0xcf8e466d
jae 0x1400da5e0
mov rcx, qword [r14 + 8]
mov rdi, qword [rbp - 0x28]
movabs r10, 0xaaaaaaaaaaaaaaab
mov ebx, 0x9597b439
mov eax, dword [0x141dd97b8]
or eax, dword [0x141dd97bc]
imul eax, eax, 0x41a47f73
imul rax, rbx
shr rax, 0x3e
cmp eax, 0x5c2f0b6f
jne 0x1400da670
mov word [rcx + rsi*2], r13w
lea rax, [rsi + 1]
mov qword [r14 + 0x10], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd97c0]
or eax, dword [0x141dd97c4]
xor eax, 0x4b07d7b6
imul edx, eax, 0xaed7b3ae
or edx, 0xb07d1774
lea rax, [rsi + 1]
mov word [rcx + rsi*2], r13w
mov qword [r14 + 0x10], rax
cmp edx, 0xeb1496b3
jbe 0x1400da670
mov rsi, rax
mov r13d, r15d
jmp 0x1400da2b0
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r14
mov rdx, rsi
mov r8, rdi
call fcn.1400fe550
add rsp, 0x30
jmp 0x1400da5e0
mov rsi, qword [r14 + 0x10]
mov rax, qword [rbp - 0x30]
mov qword [rax + 0x10], rsi
movdqu xmm0, xmmword [r14]
movdqu xmmword [rax], xmm0
mov rdi, qword [rbp - 0x50]
mov eax, dword [0x141dd97d8]
and eax, dword [0x141dd97dc]
and eax, 0x70bbd990
imul rax, rax, 0x556fe339
shr rax, 0x3d
or eax, 0xa454bc7c
cmp eax, 0xcab796c9
ja 0x1400da6f0
mov rbx, qword [rbp - 0x30]
mov rax, qword [rbx]
cmp rsi, rax
jne 0x1400da737
sub rsp, 0x20
mov rcx, rbx
call fcn.1400dbaf0
add rsp, 0x20
mov rax, qword [rbx]
mov qword [rbp - 0x70], rax
mov rax, qword [rbx + 8]
mov qword [rbp - 0x30], rax
mov word [rax + rsi*2], 0
cmp qword [rdi + 0x18], 0
je 0x1400da95d
mov r14, qword [rbp - 0x50]
mov rcx, qword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
mov rax, qword [rbp - 0x48]
mov rsi, qword [rax + 8]
mov r9, qword [rax + 0x10]
sub rsp, 0x20
mov r8, rsi
mov qword [rbp - 0x28], r9
call fcn.1400c1f70
add rsp, 0x20
mov r10, rax
mov r13, qword [r14]
mov rbx, qword [r14 + 8]
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm6, xmm0, 0
mov eax, dword [0x141dd97e0]
and eax, dword [0x141dd97e4]
imul rcx, rax, 0x513047eb
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x7e03a479
je 0x1400da7a0
mov qword [rbp - 0x40], rsi
xor r11d, r11d
pcmpeqd xmm7, xmm7
xor eax, eax
mov qword [rbp - 0x38], rax
mov r8, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x40]
and r10, rbx
movdqu xmm8, xmmword [r13 + r10]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm6
pmovmskb r12d, xmm0
test r12d, r12d
je 0x1400da937
nop word cs:[rax + rax]
tzcnt ecx, r12d
add rcx, r10
and rcx, rbx
shl rcx, 5
mov rax, r13
sub rax, rcx
cmp r8, qword [rax - 0x10]
jne 0x1400da8d0
mov rsi, r10
mov r14, qword [rax - 0x18]
mov eax, dword [0x141dd97e8]
xor eax, dword [0x141dd97ec]
cmp eax, 0xf83d8f77
je 0x1400da893
nop dword [rax]
mov r15d, dword [0x141dd97f0]
xor r15d, dword [0x141dd97f4]
add r15d, 0x3f36d11e
or r15d, 0x49100c26
and r15d, 0xcf170f36
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
call sub.VCRUNTIME140.dll_memcmp
mov r8, qword [rbp - 0x28]
add rsp, 0x20
cmp r15d, 0xffe5782e
jne 0x1400da8b0
sub rsp, 0x20
mov rcx, rdi
mov rdx, r14
call sub.VCRUNTIME140.dll_memcmp
mov r8, qword [rbp - 0x28]
add rsp, 0x20
jmp 0x1400da850
test eax, eax
mov r10, rsi
mov r11d, 0
je 0x1400daa30
nop word cs:[rax + rax]
mov eax, dword [0x141dd97f8]
xor edx, edx
div dword [0x141dd97fc]
imul eax, eax, 0x9c192620
and eax, 0xffd774c0
add eax, 0xd98af9c1
cmp eax, 0x2fae2647
jb 0x1400da8d0
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
test r11b, r11b
jne 0x1400da900
nop word cs:[rax + rax]
mov eax, dword [0x141dd9800]
xor eax, dword [0x141dd9804]
or eax, 0x7321dccd
add eax, 0x5bb04d52
cmp eax, 0xdf45a88f
ja 0x1400da910
test r12w, r12w
jne 0x1400da810
pcmpeqb xmm8, xmm7
pmovmskb eax, xmm8
test eax, eax
jne 0x1400da95d
mov rax, qword [rbp - 0x38]
add r10, rax
add r10, 0x10
add rax, 0x10
mov qword [rbp - 0x38], rax
jmp 0x1400da7e0
mov eax, dword [0x141dd9808]
and eax, dword [0x141dd980c]
add eax, 0x1c109331
or eax, 0x6543935f
cmp eax, 0x149c6c15
mov rbx, qword [rbp - 0x50]
mov r15, qword [rbp - 0x58]
mov r14, qword [rbp - 0x30]
jae 0x1400da9a8
mov qword [r15], 0
mov rcx, qword [rbx + 0x30]
sub rsp, 0x20
mov rdx, r14
xor r8d, r8d
mov r9, r15
call qword [sym.imp.pdh.dll_PdhAddEnglishCounterW]
add rsp, 0x20
mov rsi, qword [sym.imp.pdh.dll_PdhAddEnglishCounterW]
nop
mov eax, dword [0x141dd9810]
or eax, dword [0x141dd9814]
and eax, 0xc7f3d8b7
imul eax, eax, 0x573ef464
imul rdi, rax, 0x6c569fbd
shr rdi, 0x3d
mov qword [r15], 0
mov rcx, qword [rbx + 0x30]
sub rsp, 0x20
mov rdx, r14
xor r8d, r8d
mov r9, r15
call rsi
add rsp, 0x20
cmp edi, 0x6c65a6d4
ja 0x1400da9b0
test eax, eax
je 0x1400daa8c
mov eax, dword [0x141dd9930]
and eax, dword [0x141dd9934]
imul eax, eax, 0x6c1aa9e0
or eax, 0xf574e666
and eax, 0xfd7ee766
cmp eax, 0xc1fccc1f
je 0x1400daa00
nop word cs:[rax + rax]
mov eax, dword [0x141dd9818]
add eax, dword [0x141dd981c]
imul eax, eax, 0xa49f5ba0
or eax, 0x15ef5c4d
cmp eax, 0xfa804a9d
ja 0x1400daa30
cmp qword [rbp - 0x70], 0
mov r12, qword [rbp - 0x68]
mov rbx, qword [rbp - 0x30]
je 0x1400dac53
mov eax, dword [str.fUD_]
add eax, dword [0x141dd993c]
or eax, 0x1000002
xor eax, 0x840081
and eax, 0x9b840883
cmp eax, 0x3521d5c5
jne 0x1400dabb3
jmp 0x1400dabdd
xor eax, eax
nop
test al, al
jne 0x1400daa90
mov rax, qword [rbp - 0x48]
mov r12, qword [rax + 8]
mov eax, dword [0x141dd9820]
xor edx, edx
div dword [0x141dd9824]
mov eax, 0xae431d79
nop
mov ecx, dword [0x141dd9828]
add ecx, dword [0x141dd982c]
or ecx, 0x51db108f
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xc13e6cba
cmp ecx, 0xc298eda8
je 0x1400daab0
nop dword [rax + rax]
mov eax, dword [0x141dd9830]
sub eax, dword [0x141dd9834]
xor eax, 0x34001260
and eax, 0x7c79926b
cmp eax, 0xc92484be
ja 0x1400daae0
mov rax, qword [rbp - 0x48]
mov rsi, qword [rax + 0x10]
test rsi, rsi
js 0x1400dabb1
nop
mov eax, dword [0x141dd9838]
xor edx, edx
div dword [0x141dd983c]
add eax, 0x653800eb
cmp eax, 0xa233565f
ja 0x1400dab10
test rsi, rsi
je 0x1400dab52
mov eax, dword [0x141dd9840]
xor edx, edx
div dword [0x141dd9844]
or eax, 0xdb52f64b
cmp eax, 0x671054b8
jne 0x1400dad95
jmp 0x1400dadc8
mov r14d, 1
jmp 0x1400dae5b
mov eax, dword [0x141dd96f8]
sub eax, dword [0x141dd96fc]
or eax, 0x20aa6171
add eax, 0x7a9e1b50
mov ecx, 0xed5633bb
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0xedae58ca
ja 0x1400dabad
mov eax, dword [0x141dd9700]
or eax, dword [0x141dd9704]
and eax, 0xe25b7e27
xor eax, 0x12ff9e39
imul eax, eax, 0x72a3543c
ud2
ud2
ud2
mov eax, dword [str._Et_n]
xor eax, dword [0x141dd9944]
imul eax, eax, 0x576d8927
or eax, 0x8fbf494c
and eax, 0x8fff5f4c
mov rsi, qword [0x141ddc4e0]
cmp eax, 0xfbf00747
jne 0x1400dabe6
mov rax, qword [0x141ddc4e0]
jmp 0x1400dabb3
mov eax, dword [0x141dd9948]
imul eax, dword [0x141dd994c]
xor eax, 0xd138e328
imul eax, eax, 0xfeb2a79d
cmp eax, 0xb1095025
ja 0x1400dac3b
mov edi, dword [0x141dd9950]
sub edi, dword [0x141dd9954]
xor edi, 0x2000093
or edi, 0xf5ffff64
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xe9026d2c
jae 0x1400dac53
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400dac05
mov rax, qword [rbp - 0x48]
mov rcx, qword [rax]
mov eax, dword [0x141dd9958]
xor edx, edx
div dword [str.8_6k]
nop dword [rax + rax]
mov eax, dword [0x141dd9960]
imul eax, dword [0x141dd9964]
and eax, 0x4b530e83
add eax, 0xe5192399
and eax, 0xb74a030e
cmp eax, 0xe368c506
ja 0x1400dac70
nop word cs:[rax + rax]
mov eax, dword [0x141dd9968]
mov edx, dword [0x141dd996c]
add eax, edx
add eax, 0xfc452834
or eax, 0xa53d29dd
and eax, 0xa73d2bdf
cmp eax, 0xa3aef8e9
jb 0x1400daca0
test rcx, rcx
je 0x1400db710
mov eax, dword [0x141dd9970]
xor edx, edx
div dword [0x141dd9974]
nop dword [rax + rax]
mov eax, dword [0x141dd9978]
and eax, dword [0x141dd997c]
and eax, 0x4707fffd
imul rax, rax, 0x64b65009
shr rax, 0x39
add eax, 0x2b7f14e
cmp eax, 0x151b1475
ja 0x1400dace0
mov rax, qword [rbp - 0x48]
mov rsi, qword [rax + 8]
mov eax, dword [0x141dd9980]
and eax, dword [0x141dd9984]
or eax, 0x4477028d
imul eax, eax, 0xbf36b09b
add eax, 0x81fef96b
cmp eax, 0xc6f1c7e9
jb 0x1400dad79
mov eax, dword [0x141dd9988]
xor edx, edx
div dword [0x141dd998c]
imul edi, eax, 0xb8450b35
add edi, 0xe545b8f5
or edi, 0x16b6c490
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x7699aa42
ja 0x1400db710
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400dad33
mov edi, dword [0x141dd9848]
and edi, dword [0x141dd984c]
and edi, 0x6f30dd53
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0a10
add rsp, 0x20
cmp edi, 0x1c733a50
jne 0x1400dade3
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0a10
add rsp, 0x20
jmp 0x1400dad95
mov r14, rax
mov eax, 0xab8a364d
nop dword [rax + rax]
mov ecx, dword [0x141dd9850]
add ecx, dword [0x141dd9854]
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x1e9e8793
or ecx, 0xae8ede65
cmp ecx, 0xead2b427
ja 0x1400dadf0
test r14, r14
je 0x1400dabb1
nop word cs:[rax + rax]
mov eax, dword [0x141dd9858]
xor edx, edx
div dword [0x141dd985c]
xor eax, 0x334084e0
imul eax, eax, 0x4950b9a9
imul rax, rax, 0x27dbce2f
shr rax, 0x3a
cmp eax, 0x343c53da
jae 0x1400dae30
mov eax, dword [0x141dd9860]
imul eax, dword [0x141dd9864]
xor eax, 0x5316cfe4
mov ecx, 0xf30453c5
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x4cfe793d
cmp ecx, 0xd64c4d4
jae 0x1400daeb9
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rcx, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
sub rsp, 0x20
mov r8, r14
mov r9, rsi
call fcn.1400c1f70
add rsp, 0x20
mov r13, rbx
mov qword [rbp - 0x28], r12
mov eax, dword [0x141dd9868]
and eax, dword [0x141dd986c]
imul r12d, eax, 0x97e69c8d
sub rsp, 0x20
mov rcx, r14
mov rdx, qword [rbp - 0x28]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp - 0x58]
mov rdi, qword [rax]
mov r15, qword [r13 + 0x20]
mov rbx, qword [r13 + 0x28]
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
mov r8, r14
mov r9, rsi
call fcn.1400c1f70
add rsp, 0x20
cmp r12d, 0x14142a9a
je 0x1400daec0
mov r11, rax
cmp qword [r13 + 0x10], 0
mov r12, r13
je 0x1400db3c0
mov r15, qword [r12]
mov eax, 0xc0f6f743
mov r8, rsi
nop dword [rax + rax]
mov ecx, dword [0x141dd9870]
sub ecx, dword [0x141dd9874]
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xd9799f1d
imul rcx, rcx, 0x7097a279
shr rcx, 0x3c
cmp ecx, 0x9331ea62
ja 0x1400daf40
mov r10, qword [r12 + 8]
mov rcx, r11
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm6, xmm0, 0
xor esi, esi
pcmpeqd xmm7, xmm7
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x38], rsi
nop word [rax + rax]
mov eax, dword [0x141dd9878]
or eax, dword [0x141dd987c]
and eax, 0xfe05b4a
imul eax, eax, 0xedbc78e7
add eax, 0x87233738
cmp eax, 0xdfa206f5
ja 0x1400dafb0
and r11, r10
movdqu xmm8, xmmword [r15 + r11]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm6
pmovmskb r13d, xmm0
nop word [rax + rax]
test r13w, r13w
je 0x1400db100
nop word [rax + rax]
mov eax, dword [0x141dd9880]
add eax, dword [str.VMN]
imul eax, eax, 0xa9e44f2e
and eax, 0xd7e0c750
xor eax, 0x73b408e5
cmp eax, 0xba511c91
jb 0x1400db000
tzcnt eax, r13d
add rax, r11
and rax, r10
shl rax, 5
mov rbx, r15
sub rbx, rax
cmp r8, qword [rbx - 0x10]
jne 0x1400db09f
mov r15, r10
mov rdi, r11
mov rcx, r14
mov r12, r9
mov rdx, qword [rbx - 0x18]
sub rsp, 0x20
mov rsi, r8
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
nop
mov ecx, dword [0x141dd9888]
imul ecx, dword [0x141dd988c]
and ecx, 0xc731114
add ecx, 0xdac25b9f
and ecx, 0xf943787
cmp ecx, 0x23f0397a
ja 0x1400db060
test eax, eax
mov r9, r12
mov r11, rdi
mov r10, r15
mov r15, qword [rbp - 0x28]
mov r8, rsi
je 0x1400db248
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
mov eax, dword [0x141dd9898]
or eax, dword [0x141dd989c]
add eax, 0xfe573d1f
and eax, 0xf80a8588
imul eax, eax, 0x6f678310
cmp eax, 0x8dd07c44
ja 0x1400db0a9
nop dword [rax]
mov eax, dword [0x141dd98a0]
imul eax, dword [0x141dd98a4]
or eax, 0x3f6ab8b1
imul rax, rax, 0x30c6d633
shr rax, 0x3c
or eax, 0xd51a1095
cmp eax, 0x9c9f836e
je 0x1400db0d0
jmp 0x1400daff0
mov eax, dword [0x141dd9890]
imul eax, dword [0x141dd9894]
add eax, 0xb26ba32f
xor eax, 0x20f7b1bd
add eax, 0x4b1e939c
cmp eax, 0xe4f10195
ja 0x1400db100
cmp qword [rbp - 0x40], 1
mov eax, 1
mov qword [rbp - 0x40], rax
mov r13, qword [rbp - 0x30]
je 0x1400db19d
mov eax, dword [0x141dd98a8]
mov ecx, dword [0x141dd98ac]
add eax, ecx
add eax, 0x2e14274
or eax, 0x15d055f0
add eax, 0x20282365
cmp eax, 0xdc595af6
ja 0x1400db137
pmovmskb eax, xmm8
xor ecx, ecx
test ax, ax
setne cl
mov qword [rbp - 0x40], rcx
tzcnt r9d, eax
add r9, r11
and r9, r10
nop word [rax + rax]
mov eax, dword [0x141dd98b0]
add eax, dword [0x141dd98b4]
xor eax, 0xe4e52eb7
add eax, 0xf0b7362f
cmp eax, 0x1e317149
jb 0x1400db180
pcmpeqb xmm8, xmm7
pmovmskb eax, xmm8
test eax, eax
jne 0x1400db289
mov eax, dword [0x141dd98b8]
xor edx, edx
div dword [0x141dd98bc]
mov rsi, qword [rbp - 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd98c0]
xor eax, dword [0x141dd98c4]
add eax, 0x87cdffac
xor eax, 0x5b68d823
cmp eax, 0x96c3d27e
ja 0x1400db1d0
add rsi, 0x10
nop word cs:[rax + rax]
mov eax, dword [0x141dd98c8]
or eax, dword [0x141dd98cc]
or eax, 0x1979e6a1
add eax, 0x751b7d10
cmp eax, 0x2439df83
jb 0x1400db200
add r11, rsi
mov eax, dword [0x141dd98d0]
sub eax, dword [0x141dd98d4]
and eax, 0xd39d5480
imul eax, eax, 0x7d195ff5
xor eax, 0x3c840715
cmp eax, 0xe2c5670f
ja 0x1400db220
jmp 0x1400dafa3
mov rax, qword [rbp - 0x60]
mov qword [rbx - 8], rax
test r8, r8
mov r12, qword [rbp - 0x68]
mov r13, qword [rbp - 0x30]
je 0x1400db480
mov eax, dword [0x141dd98e0]
imul eax, dword [0x141dd98e4]
imul eax, eax, 0x847a7dab
add eax, 0x880bef63
cmp eax, 0x8f3f666b
jbe 0x1400db3e9
jmp 0x1400db41e
movzx eax, byte [r15 + r9]
test al, al
js 0x1400db2c7
movdqa xmm0, xmmword [r15]
pmovmskb eax, xmm0
tzcnt r9d, eax
mov eax, dword [0x141dd98d8]
or eax, dword [0x141dd98dc]
xor eax, 0x76b14b98
add eax, 0x4870d8b3
xor eax, 0xae3f7f79
cmp eax, 0xec36e909
ja 0x1400db2a0
movzx eax, byte [r15 + r9]
mov ecx, dword [0x141dd98f8]
sub ecx, dword [0x141dd98fc]
imul ecx, ecx, 0xa445a415
add ecx, 0xc5c9d740
or ecx, 0x310d86f5
cmp ecx, 0xc536d49
jae 0x1400db33a
mov ecx, eax
and cl, 1
movzx ecx, cl
mov rdx, qword [rbp - 0x50]
sub qword [rdx + 0x10], rcx
lea rcx, [r9 - 0x10]
and rcx, r10
mov r11, qword [rbp - 0x58]
mov byte [r15 + r9], r11b
mov byte [rcx + r15 + 0x10], r11b
inc qword [rdx + 0x18]
mov rcx, r9
shl rcx, 5
mov rdx, r15
sub rdx, rcx
neg rcx
mov qword [r15 + rcx - 0x20], r8
mov qword [rdx - 0x18], r14
mov qword [rdx - 0x10], r8
mov rcx, qword [rbp - 0x60]
mov qword [rdx - 8], rcx
and al, 1
movzx eax, al
lea rcx, [r9 - 0x10]
and rcx, r10
mov rdx, r9
shl rdx, 5
mov rsi, r15
sub rsi, rdx
neg rdx
mov r12, qword [rbp - 0x68]
mov r10, qword [rbp - 0x50]
mov rdi, qword [rbp - 0x58]
mov r11, qword [rbp - 0x60]
mov rbx, r9
nop dword [rax]
mov r9d, dword [0x141dd9900]
and r9d, dword [0x141dd9904]
add r9d, 0x53d5340f
sub qword [r10 + 0x10], rax
imul r9, r9, 0x24025255
shr r9, 0x3d
mov byte [r15 + rbx], dil
mov byte [rcx + r15 + 0x10], dil
inc qword [r10 + 0x18]
mov qword [r15 + rdx - 0x20], r8
mov qword [rsi - 0x18], r14
mov qword [rsi - 0x10], r8
mov qword [rsi - 8], r11
cmp r9d, 0xf87ca839
ja 0x1400db370
jmp 0x1400db480
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r15, r11
mov r8, rbx
call fcn.140100c70
mov r11, r15
add rsp, 0x20
xor eax, eax
nop
test al, al
jne 0x1400db3e0
jmp 0x1400daf2c
mov eax, dword [0x141dd98e8]
xor edx, edx
div dword [0x141dd98ec]
imul eax, eax, 0xb6935560
or eax, 0xa3c5af58
shr eax, 2
imul rax, rax, 0x829b26f
shr rax, 0x39
mov rsi, qword [0x141ddc4e0]
cmp eax, 0x40044d54
jne 0x1400db427
mov rax, qword [0x141ddc4e0]
jmp 0x1400db3e9
mov eax, dword [0x141dd98f0]
xor eax, dword [0x141dd98f4]
xor eax, 0x8020064
or eax, 0xd5f5cd9b
xor eax, 0xe014d327
cmp eax, 0x4a244c26
ja 0x1400db465
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov al, 1
test al, al
jne 0x1400db480
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400db449
mov eax, dword [0x141dd9908]
add eax, dword [0x141dd990c]
imul eax, eax, 0x33166865
add eax, 0x56b059da
cmp eax, 0xb8f079e2
ja 0x1400db480
mov r14, qword [rbp - 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x141dd9910]
or eax, dword [0x141dd9914]
cmp eax, 0xb5be8d54
je 0x1400db4b0
mov eax, 0xbd7ecbc5
nop dword [rax + rax]
mov ecx, dword [0x141dd9918]
xor ecx, dword [0x141dd991c]
add ecx, 0x7f6d1c29
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xd973ac8f
ja 0x1400db4d0
cmp qword [rbp - 0x70], 0
je 0x1400db583
mov rsi, qword [0x141ddc4e0]
xor eax, eax
test al, al
je 0x1400db520
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov ebx, dword [0x141dd9920]
imul ebx, dword [0x141dd9924]
xor ebx, 0x7920b342
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call rdi
add rsp, 0x20
cmp ebx, 0x70646587
ja 0x1400db530
nop dword [rax]
mov eax, dword [0x141dd9928]
and eax, dword [0x141dd992c]
imul eax, eax, 0x733e84c5
xor eax, 0x79c1fb05
add eax, 0xb7c46e51
cmp eax, 0xe09b655b
ja 0x1400db560
mov rax, qword [r14]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd9990]
or ecx, dword [0x141dd9994]
and ecx, 0xc0c080
xor ecx, 0x18fc477f
cmp ecx, 0xea8e26ea
ja 0x1400db590
shl rax, 1
test rax, rax
je 0x1400db693
nop dword [rax]
mov eax, dword [0x141dd9998]
xor edx, edx
div dword [0x141dd999c]
or eax, 0x49298488
and eax, 0x5d3986ea
add eax, 0x23fd149e
cmp eax, 0x8142389f
ja 0x1400db5c0
mov eax, dword [0x141dd99a0]
xor eax, dword [0x141dd99a4]
add eax, 0xcdcc12e3
xor eax, 0x8c59cf35
cmp eax, 0x6e213349
jae 0x1400db61c
mov r8, qword [r14 + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov edi, dword [0x141dd99a8]
imul edi, dword [0x141dd99ac]
or edi, 0xeaeadeb7
add edi, 0x7fc4cc5
mov r8, qword [r14 + 8]
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call rsi
add rsp, 0x20
cmp edi, 0x56f55e68
ja 0x1400db630
nop dword [rax + rax]
mov eax, dword [0x141dd99b0]
xor eax, dword [0x141dd99b4]
imul eax, eax, 0x4caf98f1
add eax, 0xd6db013b
and eax, 0xf4069183
cmp eax, 0x47094fa5
ja 0x1400db670
mov rcx, qword [rbp - 0x48]
mov rax, qword [rcx + 0x10]
mov qword [r14 + 0x10], rax
movdqu xmm0, xmmword [rcx]
movdqu xmmword [r14], xmm0
nop dword [rax + rax]
mov eax, dword [0x141dd99b8]
xor eax, dword [0x141dd99bc]
imul eax, eax, 0x52c7c496
add eax, 0x72a4f5ba
and eax, 0x2b8e1f82
cmp eax, 0xc5348dff
ja 0x1400db6b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd99c0]
imul eax, dword [0x141dd99c4]
add eax, 0xe777aa66
xor eax, 0xad9641c5
imul eax, eax, 0x872b045c
cmp eax, 0x6928c16f
ja 0x1400db6e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd99c8]
and eax, dword [0x141dd99cc]
add eax, 0x4726b2f
xor eax, 0x67b4772d
cmp eax, 0x100da6de
jb 0x1400db710
mov rcx, qword [r12]
mov eax, dword [0x141dd99d0]
xor edx, edx
div dword [0x141dd99d4]
nop
mov eax, dword [0x141dd99d8]
imul eax, dword [0x141dd99dc]
imul eax, eax, 0x7bd95160
add eax, 0x4b24f620
cmp eax, 0x66741011
jb 0x1400db740
test rcx, rcx
mov r8, qword [rbp - 0x80]
je 0x1400db77f
mov rcx, qword [0x141ddc4e0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
movaps xmm6, xmmword [rbp - 0x20]
movaps xmm7, xmmword [rbp - 0x10]
movaps xmm8, xmmword [rbp]
lea rsp, [rbp + 0x18]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret