Function at 0x1400cf740
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
mov qword [rbp - 0x20], r8
mov r11, rdx
mov eax, dword [0x1402207e0]
xor edx, edx
div dword [0x1402207e4]
mov rsi, rcx
mov ecx, eax
xor ecx, 0xe1004a
xor eax, 0xe51c6d81
mov edx, eax
and edx, 0x5b0ed7b5
and ecx, 0xa4f1284a
imul ecx, edx
mov edx, eax
and edx, 0xa4f1284a
or eax, 0xa4f1284a
imul eax, edx
add eax, ecx
xor eax, 0xf78752a6
cmp eax, 0xad15b354
jbe 0x1400cf7f0
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov eax, 0x40
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x250
call fcn.1401516e0
sub rsp, rax
nop word [rax + rax]
mov eax, dword [0x1402207e8]
mov ecx, dword [0x1402207ec]
mov edx, eax
not edx
or eax, ecx
not ecx
or ecx, edx
and ecx, eax
add ecx, 0x7eeb3ee2
and ecx, 0x6c540d0c
add ecx, 0xb60c36f3
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r12, rsp
mov eax, 0x40
call fcn.1401516e0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
mov eax, 0x250
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
cmp ecx, 0x430aa7ab
jb 0x1400cf7f0
mov ecx, dword [0x1402207f0]
mov edx, dword [0x1402207f4]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r10d, eax
and r10d, 0xeed7bc0f
and ecx, 0x112843f0
or ecx, r10d
or eax, r8d
and r8d, 0xeed7bc0f
and edx, 0x112843f0
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
or ecx, 0x17e70195
or eax, 0xe818fe6a
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0xb6e000d
mov edx, eax
and edx, 0xf491fff2
imul edx, ecx
mov ecx, eax
and ecx, 0xb6e000d
or eax, 0xb6e000d
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x79cbb60a
mov edx, eax
and edx, 0x863449f5
imul edx, ecx
mov ecx, eax
and ecx, 0x79cbb60a
or eax, 0x79cbb60a
imul eax, ecx
add eax, edx
movabs rcx, 0x700000000
cmp eax, 0xd74fd3cc
jne 0x1400cf960
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov rax, rsp
mov qword [rax + 0x14], rcx
mov dword [rax + 0x20], 0
mov word [rax + 0x24], 0
nop word cs:[rax + rax]
mov eax, dword [0x1402207f8]
xor eax, dword [0x1402207fc]
xor eax, 0xe4d96e20
imul rax, rax, 0x55cddca7
shr rax, 0x3e
imul edx, eax, 0xee93f5a9
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov rdi, rsp
mov eax, 0x30
call fcn.1401516e0
sub rsp, rax
mov r8, rsp
mov qword [r8 + 0x14], rcx
mov dword [r8 + 0x20], 0
mov word [r8 + 0x24], 0
cmp edx, 0x26c5d8db
je 0x1400cf960
mov dword [r8 + 0x1c], 0
mov qword [r8 + 8], 0
mov qword [r8], 1
mov dword [rbp - 4], r9d
mov eax, r9d
or eax, 0x2000000
mov dword [r8 + 0x10], eax
sub rsp, 0x20
mov qword [rbp - 0x18], r11
mov rcx, r11
mov rdx, qword [rbp - 0x20]
call fcn.1400c20b0
add rsp, 0x20
mov qword [rbp], rdx
test rax, rax
je 0x1400cfe42
mov r8, qword [rbp - 0x20]
nop dword [rax]
mov eax, dword [0x1402208e8]
sub eax, dword [0x1402208ec]
mov ecx, eax
xor ecx, 0xc3c6dbd1
or eax, 0x3c39242e
and eax, ecx
imul eax, eax, 0x4dcb0915
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc270b58
and ecx, 0xf3d8f4a7
imul ecx, edx
mov edx, eax
and edx, 0xf3d8f4a7
or eax, 0xf3d8f4a7
imul eax, edx
add eax, ecx
cmp eax, 0xf49175e3
ja 0x1400cfa10
mov rax, qword [rbp]
mov rcx, rax
xor rcx, 0xfffffffffffffffc
or rax, 3
and rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x1402208f0]
mov edx, dword [0x1402208f4]
mov r9d, ecx
and r9d, edx
or ecx, edx
add ecx, r9d
and ecx, 0xe0b1d006
add ecx, 0x36843603
and ecx, 0xe1b3f40f
xor ecx, 0x8c829c2
add ecx, 0x3a79fd49
jae 0x1400cfa80
cmp rax, 2
jb 0x1400cfdab
jne 0x1400cfd40
mov rcx, qword [rbp]
shr rcx, 0x20
nop
mov eax, dword [0x140220908]
and eax, dword [0x14022090c]
mov edx, eax
xor edx, 0xb8e652e5
add edx, eax
and eax, 0x4719ad1a
sub edx, eax
add edx, 0xb26f6cb7
xor edx, 0x6a0398c3
cmp edx, 0xf060eb1d
je 0x1400cfad0
nop word cs:[rax + rax]
mov eax, dword [0x140220910]
sub eax, dword [0x140220914]
mov edx, eax
xor edx, 0x3908ebf
add edx, eax
and eax, 0xfc6f7140
sub edx, eax
mov eax, edx
not eax
or eax, 0xd9915a91
add eax, edx
inc eax
mov edx, eax
not edx
and edx, 0x2f2c1ef7
mov r9d, eax
and r9d, 0xd0d3e108
imul r9d, edx
mov edx, eax
and edx, 0x2f2c1ef7
or eax, 0x2f2c1ef7
imul eax, edx
add eax, r9d
cmp eax, 0xe40700ad
je 0x1400cfb10
nop dword [rax]
mov eax, dword [0x140220918]
xor edx, edx
div dword [0x14022091c]
imul eax, eax, 0xd4f014d5
xor eax, 0x48be098e
add eax, 0xed30156e
cmp eax, 0x58fc8aa3
ja 0x1400cfb70
cmp ecx, 5
je 0x1400cfba3
cmp ecx, 0x20
jne 0x1400cfdab
mov qword [rbp - 0x10], rsi
nop word [rax + rax]
mov eax, dword [0x140220938]
mov ecx, dword [0x14022093c]
mov edx, eax
and edx, ecx
or eax, ecx
mov r9d, 0x1e73aa4e
sub r9d, edx
sub r9d, eax
add eax, edx
add eax, 0xe18c55b1
mov ecx, eax
and ecx, 0x26f517b5
and r9d, 0xd90ae84a
imul r9d, ecx
mov ecx, eax
and ecx, 0xd90ae84a
or eax, 0xd90ae84a
imul eax, ecx
add eax, r9d
shr eax, 2
imul rax, rax, 0x5166becb
shr rax, 0x3a
cmp eax, 0xab5508ad
ja 0x1400cfbb0
xor eax, eax
test al, al
je 0x1400cfc30
sub rsp, 0x20
mov rcx, r14
mov rdx, qword [rbp - 0x18]
mov rsi, r8
call fcn.1400be980
mov r8, rsi
add rsp, 0x20
mov r12, qword [rbp - 0x18]
nop word cs:[rax + rax]
mov ebx, dword [0x140220940]
or ebx, dword [0x140220944]
add ebx, 0xc9d345b3
xor ebx, 0x83080cc9
or ebx, 0x7071d316
sub rsp, 0x20
mov rcx, r14
mov rdx, r12
mov rsi, r8
call fcn.1400be980
mov r8, rsi
add rsp, 0x20
cmp ebx, 0x2c12ebb2
jb 0x1400cfc40
mov rsi, qword [r14]
mov r12, qword [r14 + 8]
movabs rax, 0x8000000000000000
cmp rsi, rax
jne 0x1400cfe75
nop dword [rax]
mov eax, dword [0x140220948]
xor eax, dword [0x14022094c]
add eax, 0xecfa3c2e
cmp eax, 0xc821a028
ja 0x1400cfca0
mov r13, r12
mov rsi, qword [rbp - 0x10]
nop
mov eax, dword [0x140220950]
mov ecx, dword [0x140220954]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0xda28748a
mov edx, eax
and edx, 0x25d78b75
imul edx, ecx
mov ecx, eax
and ecx, 0xda28748a
or eax, 0xda28748a
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0x8c20100
xor eax, 0x553420e2
and eax, 0xd53c24e2
and ecx, 0x2ac3db1c
or ecx, eax
cmp ecx, 0xd5716100
je 0x1400cfcc0
jmp 0x1400d075f
mov eax, dword [0x1402208fc]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1402208f8]
xor ecx, eax
and ecx, 0x70d72a44
add ecx, 0x408ef277
cmp ecx, 0xac471a88
ja 0x1400cfd40
nop dword [rax + rax]
mov eax, dword [0x140220904]
add eax, dword [0x140220900]
mov ecx, eax
not ecx
and ecx, 0x736004e2
and eax, 0x8c9ffb1d
sub eax, ecx
mov ecx, eax
not ecx
or ecx, 0xcea22b2b
add ecx, eax
imul eax, ecx, 0xe141932c
add eax, 0xe141932c
cmp eax, 0xa500cdbb
jbe 0x1400cfd70
mov eax, dword [0x140220920]
xor edx, edx
div dword [0x140220924]
nop dword [rax]
mov eax, dword [0x140220928]
add eax, dword [0x14022092c]
or eax, 0x8eb3a9a4
mov ecx, eax
xor ecx, 0x6cf4f9f0
and ecx, eax
add ecx, 0xac7c6673
cmp ecx, 0x7f302857
ja 0x1400cfdc0
mov rax, qword [rbp]
mov qword [rsi + 8], rax
mov eax, dword [0x140220930]
xor edx, edx
div dword [0x140220934]
shr eax, 4
imul rax, rax, 0x11e70825
shr rax, 0x38
or eax, 0x499b8606
xor eax, 0x26e566b4
mov ecx, eax
and ecx, 0x4168a003
imul ecx, ecx, 0x810d0c
or eax, 0x2e974dbc
imul eax, eax, 0x2e1640b0
add eax, ecx
cmp eax, 0x63251f9a
jae 0x1400d0749
jmp 0x1400d0756
mov eax, dword [0x140220800]
xor eax, dword [0x140220804]
and eax, 0xf06c300a
add eax, 0x94987875
mov ecx, eax
not ecx
and ecx, 0x1849688
and eax, 0xf4786856
sub eax, ecx
cmp eax, 0x230e0a2e
jne 0x1400cfea8
jmp 0x1400cff08
mov eax, dword [0x140220958]
xor eax, dword [0x14022095c]
or eax, 0xc0200020
mov ecx, eax
and ecx, 0xe0a0b3a0
and eax, 0x60208380
add eax, eax
sub ecx, eax
cmp ecx, 0xb3034d0f
jne 0x1400d0815
jmp 0x1400d0869
mov eax, dword [0x140220808]
xor eax, dword [0x14022080c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xe2b023c1
and ecx, 0x1d4fdc3e
imul ecx, edx
mov edx, eax
and edx, 0x1d4fdc3e
or eax, 0x1d4fdc3e
imul eax, edx
add eax, ecx
mov ecx, 0xc618b967
imul rcx, rax
shr rcx, 0x3e
and ecx, 0xfffffffe
xorps xmm0, xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx], xmm0
mov dword [rbx + 0x30], 0
cmp ecx, 0x75c69eef
jne 0x1400cff1f
xorps xmm0, xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx], xmm0
mov dword [rbx + 0x30], 0
jmp 0x1400cfea8
mov eax, dword [0x140220810]
xor eax, dword [0x140220814]
and eax, 0x1435b1ba
cmp eax, 0xa612196c
mov r14, qword [rbp]
je 0x1400cff79
mov edi, dword [0x140220818]
add edi, dword [0x14022081c]
not edi
or edi, 0xcfabfd18
mov eax, edi
xor eax, 0x625a7a3c
xor edi, 0xb42002c3
and edi, eax
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
call fcn.1401506b0
add rsp, 0x20
cmp edi, 0x2910394d
jae 0x1400cff90
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
add rsp, 0x20
jmp 0x1400cff3b
mov ecx, dword [0x140220820]
mov edx, dword [0x140220824]
xor edx, ecx
not edx
and edx, ecx
mov ecx, edx
xor ecx, 0xec7da194
and ecx, edx
add ecx, 0x3413a42c
or ecx, 0x793d01df
cmp ecx, 0x6f161142
jb 0x1400cff90
test eax, eax
je 0x1400d0155
mov eax, dword [0x140220828]
xor edx, edx
div dword [0x14022082c]
mov eax, 0x9bb8f69d
nop dword [rax + rax]
mov ecx, dword [0x140220830]
xor ecx, dword [str.sp_gF]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x5d0cc4c4
imul rcx, rcx, 0x35923cf9
shr rcx, 0x3c
cmp ecx, 0x1d99eddd
je 0x1400cffe0
mov eax, dword [rbx]
nop
mov ecx, dword [0x140220838]
mov edx, dword [0x14022083c]
mov r8d, ecx
and r8d, edx
add r8d, r8d
add ecx, edx
sub ecx, r8d
lea edx, [rcx + 0x3c6cab7f]
mov r8d, edx
and r8d, 0xb15b41f7
xor edx, 0x4ea4be08
add ecx, edx
add ecx, 0x3c6cab7f
sub ecx, r8d
cmp ecx, 0x38396c28
je 0x1400d0010
nop word cs:[rax + rax]
mov ecx, dword [0x140220840]
sub ecx, dword [0x140220844]
and ecx, 0x9ffac27a
mov edx, ecx
xor edx, 0x60806b7
or edx, 0x59e3c808
xor ecx, 0x59238800
or ecx, 0x861c07f7
and ecx, edx
add ecx, 0x8326f1c7
jae 0x1400d0060
xor ecx, ecx
test eax, 0x400
je 0x1400d0392
mov eax, dword [0x140220870]
or eax, dword [0x140220874]
mov ecx, 0xd496690d
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xeaa3b87b
imul rax, rcx, 0x587ecbc7
shr rax, 0x3d
cmp eax, 0x92857874
jbe 0x1400d00e0
mov dword [r12], 0
nop dword [rax]
mov eax, dword [0x140220878]
mov ecx, dword [0x14022087c]
mov r8d, 0x3a3b878
sub r8d, eax
sub r8d, ecx
add eax, ecx
add eax, 0xfc5c4787
and r8d, 0xd0ce3c9
and eax, 0xf2f31c36
or eax, r8d
xor eax, 0xdb9ee61e
mov dword [r12], 0
cmp eax, 0xddd3ee9e
jb 0x1400d00e0
mov eax, dword [0x140220880]
and eax, dword [str.gG3rD]
add eax, 0x6424ac6c
mov ecx, eax
xor ecx, 0x17afb38f
xor eax, 0x88404040
or eax, 0x71141cbd
add eax, ecx
inc eax
cmp eax, 0x49c05e39
jbe 0x1400d01b0
jmp 0x1400d0203
mov eax, dword [0x140220848]
imul eax, dword [0x14022084c]
mov ecx, 0x55b66161
sub ecx, eax
add eax, 0xaa499e9e
and ecx, 0x82fc6fee
mov edx, eax
and edx, 0x7d039011
imul edx, ecx
mov ecx, eax
and ecx, 0x82fc6fee
or eax, 0x82fc6fee
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xb2df4169
and eax, 0xb2df4168
or eax, ecx
cmp eax, 0x9a4d189e
jae 0x1400d04f3
jmp 0x1400d0527
mov eax, dword [0x140220888]
mov ecx, eax
not ecx
or ecx, dword [0x14022088c]
add ecx, eax
imul edi, ecx, 0xb3a8d2b5
add edi, 0x1aa6bd98
or edi, 0xd24bf5a4
mov dword [r12 + 4], 0
sub rsp, 0x20
mov rcx, r14
mov edx, 9
mov r8, r12
mov r9d, 8
call fcn.1401506d0
add rsp, 0x20
cmp edi, 0x17a3426c
jae 0x1400d022c
mov dword [r12 + 4], 0
sub rsp, 0x20
mov rcx, r14
mov edx, 9
mov r8, r12
mov r9d, 8
call fcn.1401506d0
add rsp, 0x20
jmp 0x1400d01b0
xor ecx, ecx
nop
test cl, cl
jne 0x1400d0230
test eax, eax
jne 0x1400d02db
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 2
mov eax, 0xb307aa77
nop word cs:[rax + rax]
mov ecx, dword [0x1402208b8]
imul ecx, dword [0x1402208bc]
or ecx, 0xef2d5205
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x5a2478c7
cmp ecx, 0xcbe62667
ja 0x1400d0270
jmp 0x1400d0600
mov eax, dword [0x1402208a0]
mov edx, dword [0x1402208a4]
mov r8d, eax
and r8d, edx
not eax
not edx
or edx, eax
not edx
or edx, r8d
mov eax, edx
and eax, 0x1e0953ac
add eax, eax
neg eax
add eax, edx
add eax, 0x1e0953ac
and eax, 0x90078800
cmp eax, 0xf84e30db
jbe 0x1400d0300
mov eax, dword [r12]
not eax
or eax, 0xfffffbff
xor ecx, ecx
cmp eax, 0xffffffff
je 0x1400d02a0
mov ecx, dword [r12 + 4]
jmp 0x1400d02a0
mov eax, dword [0x1402208a8]
xor edx, edx
div dword [0x1402208ac]
imul eax, eax, 0xf2278168
imul rax, rax, 0x10492af
shr rax, 0x38
add eax, 0x699a619b
cmp eax, 0x3099494a
jb 0x1400d0300
nop dword [rax + rax]
mov eax, dword [0x1402208b0]
mov edx, dword [0x1402208b4]
mov r8d, eax
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, eax
or edx, 0x9d9b41ee
imul eax, edx, 0x6e152cac
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x59de6734
and edx, 0xa62198ca
imul edx, r8d
mov r8d, eax
and r8d, 0xa62198c8
or eax, 0xa62198ca
imul eax, r8d
add eax, edx
cmp eax, 0x52e3f3e
je 0x1400d0330
mov eax, dword [rbx]
mov edx, dword [0x140220890]
sub edx, dword [0x140220894]
xor edx, 0x2797f909
imul r8, rdx, 0x47f34f2b
shr r8, 0x20
sub edx, r8d
shr edx, 1
add edx, r8d
mov r8d, edx
shr r8d, 0x1e
not r8d
and r8d, 0xe9d1ac0a
bt edx, 0x1e
sbb r8d, 0
neg r8d
cmp r8d, 0x5944004b
jbe 0x1400d0450
mov r8d, dword [rbx + 0x24]
mov r9d, dword [rbx + 0x1c]
mov edx, dword [rbx + 0x20]
shl rdx, 0x20
or rdx, r8
mov r8d, dword [rbx + 0x28]
mov r10d, dword [rbx + 0x30]
mov r11d, dword [rbx + 0x2c]
shl r11, 0x20
not r11
not r10
and r10, r11
not r10
mov qword [rsi], 1
mov qword [rsi + 8], r10
mov dword [rsi + 0x10], 1
mov dword [rsi + 0x14], r9d
mov dword [rsi + 0x18], 1
mov dword [rsi + 0x1c], r8d
movups xmm0, xmmword [rbx + 4]
movups xmmword [rsi + 0x20], xmm0
mov r8, qword [rbx + 0x14]
mov qword [rsi + 0x30], r8
mov qword [rsi + 0x38], rdx
mov dword [rsi + 0x40], 0
mov dword [rsi + 0x4c], eax
mov dword [rsi + 0x50], ecx
nop dword [rax]
mov edx, dword [0x140220898]
add edx, dword [0x14022089c]
and edx, 0x2552009b
add edx, 0xdf0a9372
mov r10d, dword [rbx + 0x24]
mov r9d, dword [rbx + 0x1c]
mov r8d, dword [rbx + 0x20]
shl r8, 0x20
or r8, r10
mov r10d, dword [rbx + 0x30]
mov r11d, dword [rbx + 0x2c]
shl r11, 0x20
mov rdi, r11
not rdi
or r11, r10
not r10
and r10, rdi
not r10
and r10, r11
mov r11d, dword [rbx + 0x28]
mov qword [rsi], 1
mov qword [rsi + 8], r10
mov dword [rsi + 0x10], 1
mov dword [rsi + 0x14], r9d
mov dword [rsi + 0x18], 1
mov dword [rsi + 0x1c], r11d
movups xmm0, xmmword [rbx + 4]
movups xmmword [rsi + 0x20], xmm0
mov r9, qword [rbx + 0x14]
mov qword [rsi + 0x30], r9
mov qword [rsi + 0x38], r8
mov dword [rsi + 0x40], 0
mov dword [rsi + 0x4c], eax
mov dword [rsi + 0x50], ecx
cmp edx, 0x3ff52e03
jbe 0x1400d0450
jmp 0x1400d066f
mov eax, dword [0x140220850]
xor eax, dword [0x140220854]
or eax, 0xbefffff7
mov edi, 0x8f5ffbd7
imul rdi, rax
shr rdi, 0x3d
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp edi, 0xf78dc914
jbe 0x1400d0537
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400d04f3
shl rax, 0x20
or rax, 2
nop
mov ecx, dword [0x140220858]
or ecx, dword [0x14022085c]
add ecx, 0x3b1a0838
mov edx, ecx
not edx
or edx, 0x45a3321
or ecx, 0xf2ff734a
and ecx, edx
and ecx, 0xf6ff736b
cmp ecx, 0x604b69d2
je 0x1400d0540
mov ecx, dword [0x140220860]
or ecx, dword [0x140220864]
mov edx, ecx
xor edx, 0x8910080
or ecx, 0xb4000e0a
and ecx, edx
mov edx, ecx
not edx
or edx, 0x42061061
and edx, 0x721718e3
and ecx, 0x8c800608
sub ecx, edx
cmp ecx, 0x31e52edd
jbe 0x1400d05c0
mov qword [rsi + 8], rax
mov qword [rsi], 2
nop dword [rax]
mov ecx, dword [0x140220868]
mov edx, dword [0x14022086c]
mov r8d, ecx
and r8d, edx
xor ecx, edx
lea ecx, [rcx + r8*2]
imul ecx, ecx, 0x2ec717fc
or ecx, 0x1cdfc95c
imul ecx, ecx, 0x40697218
mov qword [rsi + 8], rax
mov qword [rsi], 2
cmp ecx, 0x8196c365
ja 0x1400d05c0
nop dword [rax]
mov eax, dword [0x1402208c0]
xor edx, edx
div dword [0x1402208c4]
xor eax, 0x9328c024
or eax, 0x445331da
cmp eax, 0x827ebc62
je 0x1400d0600
nop
mov eax, dword [0x1402208c8]
mov ecx, dword [0x1402208cc]
not eax
not ecx
and ecx, eax
not ecx
imul eax, ecx, 0x29ac9bf6
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf0e70e1a
and ecx, 0xf18f1e5
imul ecx, edx
mov edx, eax
and edx, 0xf18f1e4
or eax, 0xf18f1e5
imul eax, edx
add eax, ecx
not eax
or eax, 0x7d9a3db3
cmp eax, 0xfddc933
jb 0x1400d0620
mov eax, dword [0x1402208d0]
add eax, dword [0x1402208d4]
imul eax, eax, 0x9fba067b
xor eax, 0x3efe9b8f
add eax, 0xd3730131
cmp eax, 0xc5fe91c1
ja 0x1400d06e9
mov esi, dword [0x1402208d8]
sub esi, dword [0x1402208dc]
mov eax, esi
not eax
and eax, 0x5ec94278
mov ecx, esi
and ecx, 0xa136bd87
imul ecx, eax
mov eax, esi
and eax, 0x5ec94278
or esi, 0x5ec94278
imul esi, eax
add esi, ecx
or esi, 0x577ba2c9
add esi, 0x3552ce32
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp esi, 0x5d8aee2b
jae 0x1400d06fc
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400d0692
mov ecx, 0xdd4efdd9
nop word cs:[rax + rax]
mov eax, dword [0x1402208e0]
xor edx, edx
div dword [0x1402208e4]
mov edx, eax
xor edx, 0xefd1beaf
xor eax, 0xc7bbbcef
add eax, edx
and edx, 0xd795fdbf
sub eax, edx
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xabf298a4
je 0x1400d0710
jmp 0x1400d07d0
mov qword [rsi], 2
mov al, 1
test al, al
jne 0x1400d07d0
mov qword [rsi], 2
jmp 0x1400d0749
xor eax, eax
test al, al
je 0x1400d0770
mov qword [rsi + 8], r13
mov qword [rsi], 2
mov eax, dword [0x140220990]
sub eax, dword [0x140220994]
imul eax, eax, 0x4ee80ccb
mov ecx, eax
not ecx
and ecx, 0xdf3f7f1c
mov edx, eax
and edx, 0x20c080e3
imul edx, ecx
mov ecx, eax
and ecx, 0xdf3f7f1c
or eax, 0xdf3f7f1c
imul eax, ecx
add eax, edx
not eax
or eax, 0x571a5c6f
mov qword [rsi + 8], r13
mov qword [rsi], 2
cmp eax, 0xfdd47658
jae 0x1400d0770
nop word cs:[rax + rax]
mov eax, dword [0x140220960]
mov ebx, dword [0x140220964]
not eax
not ebx
or ebx, eax
not ebx
and ebx, 0x4b879aac
add ebx, 0xc111c7d4
or ebx, 0x92868b37
mov rax, qword [r14 + 0x10]
mov qword [r13], rsi
mov qword [r13 + 8], r12
mov qword [r13 + 0x10], rax
sub rsp, 0x20
mov rcx, rdi
mov rdx, r13
mov r8b, 1
call fcn.1400c32b0
add rsp, 0x20
cmp ebx, 0x87edc060
jae 0x1400d0891
mov rax, qword [r14 + 0x10]
mov qword [r13], rsi
mov qword [r13 + 8], r12
mov qword [r13 + 0x10], rax
sub rsp, 0x20
mov rcx, rdi
mov rdx, r13
mov r8b, 1
call fcn.1400c32b0
add rsp, 0x20
jmp 0x1400d0815
mov r14, qword [rdi]
mov r13, qword [rdi + 8]
mov rsi, qword [rbp - 0x10]
nop dword [rax]
mov eax, dword [0x140220968]
or eax, dword [0x14022096c]
xor eax, 0x947dde7d
imul rax, rax, 0x61149445
shr rax, 0x3e
or eax, 0x9cecd12c
cmp eax, 0x652ee8c2
jb 0x1400d08a0
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400d075f
nop dword [rax + rax]
mov eax, dword [0x140220970]
mov ecx, dword [0x140220974]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
add eax, 0x8f7d900b
or eax, 0x47e1033a
cmp eax, 0x857dd180
je 0x1400d08e0
mov eax, dword [0x140220978]
imul eax, dword [0x14022097c]
add eax, 0x4a020433
mov ecx, eax
not ecx
or ecx, 0xc45842e0
and ecx, 0xcd5842f0
mov edx, eax
and edx, 0x20a60806
or edx, ecx
xor edx, 0x559d6468
and eax, 0x8840010
or eax, edx
cmp eax, 0x43e7c734
je 0x1400d09b4
mov r12d, dword [0x140220980]
add r12d, dword [0x140220984]
mov eax, r12d
and eax, 0x2dd6460e
add eax, eax
sub r12d, eax
add r12d, 0x1864b4f2
not r12d
or r12d, 0x59042b75
sub rsp, 0x20
mov r8d, 0x250
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, r13
mov rdx, r15
call fcn.1401506f0
add rsp, 0x20
cmp r12d, 0x1ee73268
jae 0x1400d09d9
sub rsp, 0x20
mov r8d, 0x250
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, r13
mov rdx, r15
call fcn.1401506f0
add rsp, 0x20
jmp 0x1400d095c
mov rdi, rax
nop dword [rax]
mov eax, dword [0x140220988]
xor eax, dword [0x14022098c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xdf2fb3ab
and ecx, 0x20d04c54
imul ecx, edx
mov edx, eax
and edx, 0x20d04c54
or eax, 0x20d04c54
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x336b52bc
xor eax, 0x336b52bc
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x75935154
and ecx, 0x8a6caeaa
imul ecx, edx
mov edx, eax
and edx, 0x8a6caea8
or eax, 0x8a6caeaa
imul eax, edx
add eax, ecx
cmp eax, 0x42233d05
jb 0x1400d09e0
cmp rdi, 0xffffffffffffffff
je 0x1400d0a8e
mov eax, dword [0x140220998]
imul eax, dword [0x14022099c]
mov ecx, eax
xor ecx, 0x5b38943f
add ecx, eax
and eax, 0x24c76bc0
sub ecx, eax
imul eax, ecx, 0x370a4c99
not eax
or eax, 0xaa94dee2
add eax, 0x61e05899
jb 0x1400d0ac4
jmp 0x1400d0b2a
mov eax, dword [0x1402209c0]
mov ecx, dword [0x1402209c4]
add eax, ecx
add eax, 0x52e1ab27
mov ecx, eax
and ecx, 0x52cafaab
or eax, 0x52cafaab
add eax, ecx
cmp eax, 0x99132117
mov r9, qword [rbp]
jbe 0x1400d0ef2
jmp 0x1400d0f52
mov eax, dword [0x1402209a0]
mov ecx, dword [0x1402209a4]
not eax
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
mov ecx, 0xd5f9a059
imul rcx, rax
shr rcx, 0x3e
mov eax, ecx
not eax
and eax, 0x68848246
mov edx, ecx
and edx, 1
imul edx, eax
mov eax, ecx
and eax, 0xfffffffe
or ecx, 0x68848246
imul ecx, eax
lea ebx, [rcx + rdx]
add ebx, 0x2571f842
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
add rsp, 0x20
cmp ebx, 0xa4774416
jbe 0x1400d0b3d
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
add rsp, 0x20
jmp 0x1400d0ac4
mov ecx, dword [r15]
mov eax, 0xb066c20f
mov r10d, dword [rbp - 4]
nop dword [rax]
mov edx, dword [0x1402209a8]
mov r8d, dword [0x1402209ac]
mov r9d, edx
not r9d
or edx, r8d
not r8d
and r8d, r9d
not r8d
and r8d, edx
and r8d, 0xcb17a1f7
add r8d, 0x24df9e8a
imul r8, rax
shr r8, 0x3d
cmp r8d, 0x2b48c600
ja 0x1400d0b50
movups xmm0, xmmword [r15 + 4]
movsd xmm1, qword [r15 + 0x14]
mov eax, dword [0x1402209b0]
xor edx, edx
div dword [0x1402209b4]
nop word [rax + rax]
mov eax, dword [0x1402209b8]
or eax, dword [0x1402209bc]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x62d0af7a
and edx, 0x9d2f5085
imul edx, r8d
mov r8d, eax
and r8d, 0x9d2f5085
or eax, 0x9d2f5085
imul eax, r8d
add eax, edx
or eax, 0x1e708c2
add eax, 0x619ff433
cmp eax, 0x7e581e1e
ja 0x1400d0bb0
mov eax, dword [r15 + 0x1c]
mov r8d, dword [r15 + 0x20]
xor edx, edx
test ecx, 0x400
je 0x1400d0c84
mov edx, dword [r15 + 0x24]
test r10d, r10d
sete r9b
mov r10d, edx
shr r10d, 0x1d
and r10d, 1
mov r11d, r9d
xor r11b, r10b
or r9b, r10b
xor r9b, 1
or r9b, r11b
nop word cs:[rax + rax]
mov r10d, dword [0x1402209e8]
mov r11d, dword [0x1402209ec]
mov edi, r10d
and edi, r11d
xor r10d, r11d
lea r10d, [r10 + rdi*2]
add r10d, 0x99445f31
mov r11d, r10d
xor r11d, 0xc5ed641a
or r10d, 0x3a129be5
and r10d, r11d
cmp r10d, 0x20ca2b55
jb 0x1400d0c40
test r9b, r9b
je 0x1400d0cd8
shl rax, 0x20
mov r9, rax
not r9
or rax, r8
not r8
and r8, r9
not rax
or rax, r8
not rax
mov r8d, dword [0x1402209f0]
or r8d, dword [0x1402209f4]
add r8d, 0x7b131706
xor r8d, 0x481895df
mov r9d, 0xaadd79f1
imul r9, r8
shr r9, 0x3f
cmp r9d, 0x43400978
jne 0x1400d0d20
jmp 0x1400d0da6
mov eax, dword [0x140220a20]
sub eax, dword [0x140220a24]
mov rcx, qword [rbp]
mov qword [rsi + 8], rcx
mov ecx, eax
xor ecx, 0xe154d825
and eax, 0x1eab27da
add eax, eax
sub eax, ecx
mov ecx, eax
not ecx
or ecx, 0xf0ff9be
add eax, ecx
inc eax
and eax, 0x6ffcd9e4
cmp eax, 0xcb0e7130
jbe 0x1400d108f
jmp 0x1400d10f8
mov r8d, dword [0x1402209f8]
or r8d, dword [0x1402209fc]
mov r9d, r8d
not r9d
and r9d, 0x272fe028
mov r10d, r8d
and r10d, 0xd8d01fd7
imul r10d, r9d
mov r9d, r8d
and r9d, 0x272fe028
or r8d, 0x272fe028
imul r8d, r9d
add r8d, r10d
xor r8d, 0xd98716c0
add r8d, 0x30f1ab4c
mov qword [rsi], 0
mov dword [rsi + 0x10], 0
mov dword [rsi + 0x18], 0
movups xmmword [rsi + 0x20], xmm0
movlps qword [rsi + 0x30], xmm1
mov qword [rsi + 0x38], rax
mov dword [rsi + 0x40], 0
mov dword [rsi + 0x4c], ecx
mov dword [rsi + 0x50], edx
cmp r8d, 0x966abeab
jbe 0x1400d0dd9
mov qword [rsi], 0
mov dword [rsi + 0x10], 0
mov dword [rsi + 0x18], 0
movups xmmword [rsi + 0x20], xmm0
movlps qword [rsi + 0x30], xmm1
mov qword [rsi + 0x38], rax
mov dword [rsi + 0x40], 0
mov dword [rsi + 0x4c], ecx
mov dword [rsi + 0x50], edx
jmp 0x1400d0d20
test r14, r14
je 0x1400d07d0
mov eax, dword [0x140220a00]
mov ecx, dword [0x140220a04]
add eax, ecx
add eax, 0x61dbe67f
mov ecx, eax
not ecx
and ecx, 0xb4c72be0
mov edx, eax
and edx, 0x4b38d41f
imul edx, ecx
mov ecx, eax
and ecx, 0xb4c72be0
or eax, 0xb4c72be0
imul eax, ecx
add eax, edx
xor eax, 0x9e134a97
cmp eax, 0x5ebe223e
jbe 0x1400d0e30
mov rax, qword [0x14022cb48]
nop
mov eax, dword [0x140220a08]
add eax, dword [0x140220a0c]
or eax, 0x80000000
and eax, 0x800c8a08
mov rsi, qword [0x14022cb48]
cmp eax, 0xa4d27df6
ja 0x1400d0e30
mov eax, dword [0x140220a10]
xor edx, edx
div dword [0x140220a14]
add eax, 0xc083ac1f
imul rcx, rax, 0x17ae01b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x98d39088
cmp eax, 0x9b4bd9f6
ja 0x1400d0eda
mov eax, dword [0x140220a18]
xor edx, edx
div dword [0x140220a1c]
mov ecx, eax
xor ecx, 0x1ed7194e
and eax, 0x6128e6b1
add eax, eax
sub eax, ecx
xor eax, 0xae2567ab
mov edi, 0x8064ae2b
imul rdi, rax
shr rdi, 0x3f
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x671401de
jne 0x1400d07d0
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d0e87
mov ecx, dword [0x140220a28]
mov eax, dword [0x140220a2c]
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
sub eax, edx
mov ecx, eax
not ecx
and ecx, 0x827dcc1e
mov edx, eax
and edx, 0x7d8233e1
imul edx, ecx
mov ecx, eax
and ecx, 0x827dcc1e
or eax, 0x827dcc1e
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x9f2ce989
add eax, ecx
inc eax
mov ecx, 0xbdbc7ca3
imul rcx, rax
shr rcx, 0x3f
mov qword [rsi], 2
cmp ecx, 0xa51b0c15
jbe 0x1400d1101
mov qword [rsi], 2
jmp 0x1400d108f
test r14, r14
je 0x1400d07d0
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400d07d0