Function at 0x1400f39b0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov rdi, rdx
mov r12, rcx
mov eax, dword [0x141dc8080]
add eax, dword [0x141dc8084]
or eax, 0x8c456cb
cmp eax, 0x31f56531
jne 0x1400f39fd
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
xor ecx, ecx
nop
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
test cl, cl
jne 0x1400f3a00
mov qword [rbp - 0x20], rax
mov eax, dword [0x141dc8088]
sub eax, dword [0x141dc808c]
and eax, 0x501c7d21
add eax, 0x38040b0a
cmp eax, 0xe791d208
ja 0x1400f3a88
mov eax, dword [0x141dc8090]
or eax, dword [0x141dc8094]
imul ecx, eax, 0x2ff9a230
add ecx, 0x7e0d01f4
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
mov rax, qword [rdi]
cmp ecx, 0xb07c3d86
jbe 0x1400f3aa7
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rax, qword [rdi]
jmp 0x1400f3a45
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400f3ab0
cmp rax, 3
jne 0x1400f3ad0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dc8098]
xor edx, edx
div dword [0x141dc809c]
xor eax, 0x26c11ed0
imul rax, rax, 0x1acf2c79
shr rax, 0x3c
or eax, 0xf66b6fe0
cmp eax, 0x6c2e0a3c
jb 0x1400f3ad0
lea rax, [r12 + 0x138]
mov qword [rbp - 0x30], rax
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400f3b10
xor ebx, ebx
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], rdi
mov qword [rbp - 0x38], r8
mov qword [rbp], r14
nop word cs:[rax + rax]
mov eax, dword [0x141dc80a0]
xor edx, edx
div dword [0x141dc80a4]
or eax, 0xff33fffc
imul rax, rax, 0x5aba4f8b
shr rax, 0x3c
cmp eax, 0xbfe0f58c
jbe 0x1400f3b70
sub rsp, 0x20
mov rcx, r12
call fcn.140071b70
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dc80a8]
xor eax, dword [0x141dc80ac]
xor eax, 0x34f540a3
imul esi, eax, 0xc3ca4412
sub rsp, 0x20
mov rcx, r12
call fcn.140071b70
add rsp, 0x20
cmp esi, 0xebbb4a71
je 0x1400f3b70
nop
test bl, bl
jne 0x1400f3ba0
test rax, rax
je 0x1400f3bc0
sub rsp, 0x20
mov rcx, rdx
call rax
add rsp, 0x20
jmp 0x1400f3c90
mov eax, dword [0x141dc80b0]
or eax, dword [0x141dc80b4]
and eax, 0x6440d788
imul eax, eax, 0x9355de2a
cmp eax, 0x1a5f544a
jae 0x1400f3c10
mov rax, qword [r12 + 0x100]
mov rcx, qword [r12 + 0x110]
lock add qword [rcx + 0x1f0], 0x10000
mov qword [r14], rax
mov dword [r14 + 0x10], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dc80b8]
sub eax, dword [0x141dc80bc]
and eax, 0x8a820082
or eax, 0x655d7f4c
imul rax, rax, 0x4e0844c7
mov rcx, qword [r12 + 0x100]
mov rdx, qword [r12 + 0x110]
lock add qword [rdx + 0x1f0], 0x10000
shr rax, 0x3d
mov qword [r14], rcx
mov dword [r14 + 0x10], 0
cmp eax, 0x177c3f6e
ja 0x1400f3c10
mov eax, dword [0x141dc80c0]
and eax, dword [0x141dc80c4]
imul eax, eax, 0x4e85deee
add eax, 0x395bb9ec
cmp eax, 0x2abb2237
jae 0x1400f3d70
jmp 0x1400f4e80
mov eax, dword [0x141dc80d0]
xor eax, dword [0x141dc80d4]
and eax, 0xea5ac343
imul eax, eax, 0xc6886c92
and eax, 0x830f2652
cmp eax, 0x2e04049f
je 0x1400f3d60
nop word [rax + rax]
mov ecx, dword [0x141dc80d8]
sub ecx, dword [0x141dc80dc]
add ecx, 0x45cddc79
or ecx, 0x10149512
and ecx, 0x9a15d532
mov rax, qword [rdi]
cmp ecx, 0x8aeecfad
ja 0x1400f3d60
mov ecx, dword [0x141dc80e0]
mov edx, dword [0x141dc80e4]
add ecx, edx
add ecx, 0x7a871274
and ecx, 0x22580a89
add ecx, 0x89154595
cmp ecx, 0xdac5fc3a
ja 0x1400f3ce9
nop word cs:[rax + rax]
mov ecx, dword [0x141dc80e8]
mov edx, dword [0x141dc80ec]
add ecx, edx
add ecx, 0x446f179c
and ecx, 0xd55732e
cmp ecx, 0xb5897c9b
ja 0x1400f3d20
cmp rax, 3
jne 0x1400f3b30
jmp 0x1400f3aba
mov rax, qword [rdi]
jmp 0x1400f3cc0
mov eax, dword [0x141dc80c8]
xor edx, edx
div dword [0x141dc80cc]
and eax, 0x82090031
or eax, 0x69d6ef4a
imul rcx, rax, 0x6681fee5
shr rcx, 0x3d
mov qword [r14 + 8], 0xffffffffffffffff
mov rax, qword [rdi]
cmp ecx, 0xfdeea3ed
je 0x1400f4e80
cmp rax, 3
je 0x1400f5290
mov ecx, 0xa498eedf
nop dword [rax]
mov eax, dword [0x141dc80f0]
imul eax, dword [0x141dc80f4]
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0xd15c2370
cmp eax, 0xc1711726
je 0x1400f3dc0
mov r9, qword [r12 + 0x118]
test bl, bl
jne 0x1400f4020
nop word cs:[rax + rax]
mov eax, dword [0x141dc80f8]
and eax, dword [0x141dc80fc]
xor eax, 0x20200eb7
and eax, 0x37603ff7
mov r8, qword [r9 + 0x108]
mov rcx, qword [r9 + 0x100]
cmp eax, 0xfa34e0e6
je 0x1400f4020
mov rax, r8
sub rax, rcx
test rax, rax
jle 0x1400f41f0
mov ecx, dword [0x141dc8108]
or ecx, dword [0x141dc810c]
xor ecx, 0x53fd0cf
imul ecx, ecx, 0x374fb0ad
or ecx, 0x380bdf87
cmp ecx, 0xe3caf90d
ja 0x1400f3e3e
movzx ecx, byte [r12 + 0x130]
mov r11d, 0x92cdd34f
mov edx, dword [0x141dc8110]
mov r10d, dword [0x141dc8114]
add edx, r10d
add edx, 0x68695ed8
imul r10, rdx, 0x6e1732a1
shr r10, 0x20
sub edx, r10d
shr edx, 1
add edx, r10d
shr edx, 0x1c
cmp edx, 0x193f7190
ja 0x1400f3e73
nop word [rax + rax]
mov edx, dword [0x141dc8118]
add edx, dword [0x141dc811c]
imul rdx, r11
shr rdx, 0x3b
and edx, 0xfffffffd
cmp edx, 0x7be2d915
je 0x1400f3eb0
test cl, cl
je 0x1400f4080
lea rcx, [r8 - 1]
mov eax, dword [str.d7db]
xor edx, edx
div dword [0x141dc812c]
imul eax, eax, 0xff0f1d0f
xor eax, 0x20095285
add eax, 0x8b23294c
cmp eax, 0x23aefb06
jae 0x1400f3f10
mov qword [r9 + 0x108], rcx
mfence
nop word [rax + rax]
mov eax, dword [0x141dc8130]
and eax, dword [0x141dc8134]
and eax, 0x3413f1ea
xor eax, 0x90dabccb
add eax, 0x8cb3420c
mov qword [r9 + 0x108], rcx
mfence
cmp eax, 0x57cd83bf
ja 0x1400f3f10
mov rdx, qword [r12 + 0x118]
mov r9, qword [rdx + 0x100]
mov rax, rcx
sub rax, r9
js 0x1400f4040
mov r10, qword [r12 + 0x120]
mov rsi, qword [r12 + 0x128]
mov r11d, dword [0x141dc8138]
xor r11d, dword [0x141dc813c]
xor r11d, 0x2210634d
or r11d, 0x5da99c80
mov edi, 0x977ef0d5
imul r11, rdi
shr r11, 0x3f
cmp r11d, 0x8cdd3c99
jbe 0x1400f3fb0
lea r11, [rsi - 1]
and r11, rcx
shl r11, 4
mov rdi, qword [r10 + r11]
mov r11, qword [r10 + r11 + 8]
nop dword [rax]
lea r11, [rsi - 1]
and r11, rcx
shl r11, 4
mov r13, qword [r10 + r11]
mov r11, qword [r10 + r11 + 8]
test bl, bl
jne 0x1400f3fb0
cmp rcx, r9
jne 0x1400f4113
mov rax, rcx
lock cmpxchg qword [rdx + 0x100], r8
sete al
mov edx, dword [0x141dc8148]
sub edx, dword [0x141dc814c]
mov rcx, qword [r12 + 0x118]
imul edx, edx, 0x737e065f
add edx, 0xa0889bbc
cmp edx, 0x5489763c
jae 0x1400f4bb0
jmp 0x1400f4be5
mov rax, qword [r9 + 0x108]
mov rax, qword [r9 + 0x100]
jmp 0x1400f3e00
mov eax, dword [0x141dc8140]
mov ecx, dword [0x141dc8144]
add eax, ecx
add eax, 0xf866c8e1
or eax, 0xb291121d
imul eax, eax, 0x9ad84876
cmp eax, 0x15382c45
jb 0x1400f4040
mov qword [rdx + 0x108], r8
jmp 0x1400f41f0
mov ecx, 1
lock xadd qword [r9 + 0x100], rcx
mov edx, dword [0x141dc8120]
and edx, dword [0x141dc8124]
add edx, 0x74202a5d
mov r9d, 0x85eaecdb
imul rdx, r9
shr rdx, 0x3f
cmp edx, 0x84d8417f
je 0x1400f408e
mov rdx, rcx
not rdx
add r8, rdx
test bl, bl
jne 0x1400f40bf
test r8, r8
js 0x1400f41a4
mov rdx, qword [r12 + 0x120]
mov rsi, qword [r12 + 0x128]
lea r8, [rsi - 1]
and r8, rcx
shl r8, 4
mov r13, qword [rdx + r8]
mov r11, qword [rdx + r8 + 8]
lea rcx, [rsi + 3]
test rsi, rsi
cmovns rcx, rsi
cmp rsi, 0x41
jb 0x1400f4c00
sar rcx, 2
cmp rax, rcx
jle 0x1400f4135
jmp 0x1400f4c00
lea rcx, [rsi + 3]
test rsi, rsi
cmovns rcx, rsi
cmp rsi, 0x41
jb 0x1400f4c00
sar rcx, 2
cmp rax, rcx
jge 0x1400f4c00
mov r14, r11
mov eax, dword [0x141dc8158]
sub eax, dword [0x141dc815c]
xor eax, 0x842ad0df
imul eax, eax, 0xe0ddf0c9
add eax, 0xb9e5f09
cmp eax, 0x543e944a
ja 0x1400f41c8
mov eax, dword [0x141dc8160]
or eax, dword [0x141dc8164]
imul edi, eax, 0xd5d3c042
add edi, 0xcc24b892
xor edi, 0xefda55d5
mov rdx, rsi
shr rdx, 1
lea rcx, [r12 + 0x118]
sub rsp, 0x20
call fcn.1400f6160
add rsp, 0x20
cmp edi, 0x6982012c
ja 0x1400f415b
mov r11, r14
jmp 0x1400f4c00
mov rax, qword [r12 + 0x118]
mov qword [rax + 0x100], rcx
nop word cs:[rax + rax]
mov al, 1
test al, al
je 0x1400f41c0
jmp 0x1400f41f0
mov rdx, rsi
shr rdx, 1
lea rcx, [r12 + 0x118]
sub rsp, 0x20
call fcn.1400f6160
add rsp, 0x20
jmp 0x1400f415b
mov rsi, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x30]
mov r14d, 0x8d30fd67
nop
mov eax, dword [0x141dc8100]
xor edx, edx
div dword [0x141dc8104]
or eax, 0xffdcfe18
imul eax, eax, 0xfda7bb86
and eax, 0x9123bc4a
cmp eax, 0x88e25a1
jb 0x1400f4200
jmp 0x1400f4250
mov eax, dword [0x141dc8170]
and eax, dword [0x141dc8174]
add eax, 0xe17b7951
imul rax, r14
shr rax, 0x3f
cmp eax, 0x93d49dd7
jae 0x1400f4230
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.140072290
add rsp, 0x20
mov rax, qword [rsi]
cmp rax, 2
je 0x1400f4230
test rax, rax
jne 0x1400f4e90
mov r14, qword [r12 + 0x110]
mov rax, qword [r14 + 0x200]
mov qword [rbp - 0x28], rax
mov rdi, qword [r14 + 0x208]
nop
mov eax, dword [0x141dc8188]
sub eax, dword [0x141dc818c]
imul eax, eax, 0x1d662864
and eax, 0xf4b07e10
imul eax, eax, 0xaa91bac0
cmp eax, 0xbe7499e4
ja 0x1400f4290
cmp rdi, 2
jb 0x1400f4650
nop
mov rax, qword [r12 + 0x108]
mov rcx, rax
shr rcx, 0xc
xor rcx, rax
mov rdx, rcx
shl rdx, 0x19
xor rdx, rcx
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
mov qword [r12 + 0x108], rax
movabs rcx, 0x2545f4914f6cdd1d
imul rax, rcx
xor ecx, ecx
mov qword [rbp - 0x10], rcx
xor edx, edx
div rdi
mov r14, rdx
mov rax, rdx
jmp 0x1400f431f
xor r13d, r13d
mov rax, rsi
test r13, r13
jne 0x1400f4ee0
cmp rax, rdi
jae 0x1400f4480
lea rsi, [rax + 1]
mov rcx, qword [r12 + 0x100]
mov edx, dword [0x141dc8190]
imul edx, dword [0x141dc8194]
imul edx, edx, 0x976e9b6c
or edx, 0xac7da2cc
cmp edx, 0x65bca94
jb 0x1400f4334
cmp rcx, rax
je 0x1400f4310
nop word [rax + rax]
mov ecx, dword [0x141dc8198]
sub ecx, dword [0x141dc819c]
and ecx, 0x12030a0
or ecx, 0xf850875c
xor ecx, 0xa1a4bac3
cmp ecx, 0x8490b40b
ja 0x1400f4360
lea rax, [rax + rax*4]
mov rcx, qword [rbp - 0x28]
lea r12, [rcx + rax*8]
add r12, 0x18
test bl, bl
je 0x1400f43b0
sub rsp, 0x20
mov rcx, r15
mov rdx, r12
call fcn.140072290
add rsp, 0x20
nop dword [rax]
mov r13d, dword [0x141dc81a0]
and r13d, dword [0x141dc81a4]
or r13d, 0xe03800
and r13d, 0x6f97a86
sub rsp, 0x20
mov rcx, r15
mov rdx, r12
call fcn.140072290
add rsp, 0x20
cmp r13d, 0xe447e047
je 0x1400f43b0
test bl, bl
jne 0x1400f43e8
mov rax, qword [r15]
test rax, rax
mov r12, qword [rbp - 0x18]
je 0x1400f4310
cmp eax, 1
jne 0x1400f4438
mov r13, qword [r15 + 8]
mov r11, qword [r15 + 0x10]
nop dword [rax]
mov eax, dword [0x141dc81b0]
imul eax, dword [0x141dc81b4]
xor eax, 0x2546422c
add eax, 0x7d27ad36
and eax, 0xb2fc6dde
cmp eax, 0xdc500a8c
je 0x1400f4410
jmp 0x1400f4313
cmp eax, 2
jne 0x1400f5260
nop word cs:[rax + rax]
mov eax, dword [0x141dc81b8]
or eax, dword [0x141dc81bc]
or eax, 0x3ff0f2fb
imul eax, eax, 0x406a3ff3
cmp eax, 0xafe61f76
jb 0x1400f4450
mov al, 1
mov qword [rbp - 0x10], rax
jmp 0x1400f4310
xor esi, esi
jmp 0x1400f449c
mov al, 1
mov qword [rbp - 0x10], rax
nop word [rax + rax]
xor r13d, r13d
test r13, r13
jne 0x1400f4ee0
mov rcx, rsi
mov eax, dword [0x141dc81c0]
or eax, dword [0x141dc81c4]
imul eax, eax, 0xcb25e6c9
add eax, 0x3b8b8e2e
and eax, 0x129faca7
cmp eax, 0x950c1407
ja 0x1400f449f
cmp rcx, r14
je 0x1400f4620
nop dword [rax + rax]
mov eax, dword [0x141dc81c8]
sub eax, dword [0x141dc81cc]
and eax, 0xed78365a
xor eax, 0x5aede53e
add eax, 0xb810e5ea
cmp eax, 0xf8d35da8
ja 0x1400f44d0
lea rsi, [rcx + 1]
mov eax, dword [0x141dc81d0]
xor edx, edx
div dword [0x141dc81d4]
nop word cs:[rax + rax]
mov eax, dword [0x141dc81d8]
and eax, dword [0x141dc81dc]
imul eax, eax, 0xc8a7bb40
add eax, 0xe33dfde0
cmp eax, 0x51cc4d3
jb 0x1400f4510
cmp qword [r12 + 0x100], rcx
je 0x1400f4490
mov eax, dword [0x141dc81e0]
sub eax, dword [0x141dc81e4]
imul eax, eax, 0x3c5f9859
imul rax, rax, 0x5131fef5
shr rax, 0x3e
or eax, 0x6f2e1f1c
cmp eax, 0xac54b3df
je 0x1400f453c
nop word cs:[rax + rax]
test bl, bl
jne 0x1400f4570
cmp rdi, rcx
jbe 0x1400f5340
nop dword [rax]
mov eax, dword [0x141dc81e8]
xor edx, edx
div dword [0x141dc81ec]
or eax, 0xe4945f6c
add eax, 0x96888914
xor eax, 0xe9cb6046
cmp eax, 0x6dd6c102
jb 0x1400f4580
lea rax, [rcx + rcx*4]
mov rcx, qword [rbp - 0x28]
lea rdx, [rcx + rax*8]
add rdx, 0x18
sub rsp, 0x20
mov r13, qword [rbp - 0x20]
mov rcx, r13
call fcn.140072290
add rsp, 0x20
mov rax, qword [r13]
test rax, rax
je 0x1400f4490
cmp eax, 1
jne 0x1400f4484
mov eax, dword [0x141dc81f8]
imul eax, dword [0x141dc81fc]
xor eax, 0x181e9d46
imul eax, eax, 0x90ca5f8b
and eax, 0x17a25e06
cmp eax, 0xd8423800
je 0x1400f45de
mov rax, qword [rbp - 0x20]
mov r13, qword [rax + 8]
mov r11, qword [rax + 0x10]
test r13, r13
je 0x1400f449c
jmp 0x1400f4ee0
mov eax, dword [0x141dc8200]
and eax, dword [0x141dc8204]
imul eax, eax, 0x219a15f6
add eax, 0x12f8542
cmp eax, 0xfcd72b20
ja 0x1400f4620
cmp byte [rbp - 0x10], 0
jne 0x1400f42c0
mov r14, qword [r12 + 0x110]
mov rcx, qword [r14 + 0x80]
mov rdi, qword [r14 + 0x88]
mov rax, rcx
shr rax, 1
mov r12d, eax
and r12d, 0x3f
nop dword [rax + rax]
mov edx, dword [0x141dc8208]
imul edx, dword [0x141dc820c]
xor edx, 0x5d9cad2b
add edx, 0x7a7db043
cmp edx, 0x4bdacec
jb 0x1400f4670
cmp r12d, 0x3f
jne 0x1400f4790
xor r13d, r13d
nop
mov rdi, qword [sym.imp.KERNEL32.dll_SwitchToThread]
test bl, bl
jne 0x1400f46a7
cmp r13d, 6
ja 0x1400f46e0
mov eax, 1
nop word cs:[rax + rax]
pause
mov edx, eax
mov ecx, r13d
shr edx, cl
inc eax
test edx, edx
je 0x1400f46c0
jmp 0x1400f4734
mov eax, dword [0x141dc8210]
or eax, dword [0x141dc8214]
and eax, 0x4a3d1203
cmp eax, 0xb7f81b9f
je 0x1400f4780
nop dword [rax]
mov eax, dword [0x141dc8218]
mov ecx, dword [0x141dc821c]
lea esi, [rax + rcx]
add esi, 0x1bebf28b
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp esi, 0xfb539214
ja 0x1400f4780
nop word [rax + rax]
test bl, bl
jne 0x1400f4730
mov eax, dword [0x141dc8220]
or eax, dword [0x141dc8224]
xor eax, 0x2c020401
and eax, 0xae17142b
cmp eax, 0x12c42f8e
jb 0x1400f4734
cmp r13d, 0xb
adc r13d, 0
mov rcx, qword [r14 + 0x80]
mov rdi, qword [r14 + 0x88]
mov rax, rcx
shr rax, 1
mov r12d, eax
and r12d, 0x3f
cmp r12, 0x3f
je 0x1400f46a0
jmp 0x1400f4790
sub rsp, 0x20
call rdi
add rsp, 0x20
jmp 0x1400f4700
lea rsi, [rcx + 2]
test cl, 1
jne 0x1400f4829
mfence
mov rdx, qword [r14 + 0x100]
mov r8, rdx
shr r8, 1
nop dword [rax]
mov r9d, dword [0x141dc8228]
or r9d, dword [str.F_Q]
imul r9d, r9d, 0x2c9da25c
add r9d, 0x2a91bb53
cmp r9d, 0xd9326fd
jb 0x1400f47b0
cmp rax, r8
je 0x1400f48b0
xor rdx, rcx
xor eax, eax
cmp rdx, 0x7f
seta al
mov edx, dword [0x141dc8230]
and edx, dword [0x141dc8234]
or edx, 0x800008
and edx, 0x820828
cmp edx, 0x62d75551
ja 0x1400f47ea
or rsi, rax
nop dword [rax]
mov eax, dword [0x141dc8238]
or eax, dword [0x141dc823c]
imul eax, eax, 0xa31e31ad
cmp eax, 0xd5c1dc61
je 0x1400f4810
mov eax, dword [0x141dc8240]
and eax, dword [0x141dc8244]
imul eax, eax, 0xbc8f0380
add eax, 0x95559ad7
or eax, 0x3d18dd6b
cmp eax, 0xce9b2f37
jbe 0x1400f4860
mov rax, rcx
lock cmpxchg qword [r14 + 0x80], rsi
nop dword [rax + rax]
mov edx, dword [0x141dc8248]
imul edx, dword [0x141dc824c]
add edx, 0xa1389ee2
xor edx, 0xc0a00208
and edx, 0xc4b1830a
mov rax, rcx
lock cmpxchg qword [r14 + 0x80], rsi
sete al
cmp edx, 0x1d2d311f
jb 0x1400f4860
test al, al
je 0x1400f4650
jmp 0x1400f4cb0
mov r12, qword [rbp - 0x18]
mov rsi, qword [r12 + 0x110]
mov eax, dword [0x141dc8308]
and eax, dword [0x141dc830c]
or eax, 0x85c82399
add eax, 0x754fab15
cmp eax, 0xffe03509
ja 0x1400f48bc
mov r14, qword [rbp]
mov edi, dword [r14 + 0x10]
cmp edi, 0x20
jae 0x1400f4920
mov eax, dword [0x141dc8310]
xor eax, dword [0x141dc8314]
add eax, 0xe893dbd6
or eax, 0x7e761bf0
and eax, 0x7ef65ffc
cmp eax, 0x134098c3
mov r13, qword [sym.imp.KERNEL32.dll_SwitchToThread]
jae 0x1400f4c30
jmp 0x1400f4c61
jne 0x1400f4a97
movabs r8, 0x100000000
mov r9d, 0xafdb10e9
nop word cs:[rax + rax]
test bl, bl
jne 0x1400f4940
nop word cs:[rax + rax]
mov eax, dword [0x141dc8320]
and eax, dword [0x141dc8324]
imul eax, eax, 0xd2b1d400
cmp eax, 0x3e34a1d9
je 0x1400f4950
jmp 0x1400f4980
mov rax, qword [rsi + 0x1f0]
jmp 0x1400f49b0
mov eax, dword [0x141dc8328]
sub eax, dword [0x141dc832c]
xor eax, 0x48212820
or eax, 0xb7da438f
imul rax, r9
shr rax, 0x3f
cmp eax, 0x63f89fd
je 0x1400f4970
nop word cs:[rax + rax]
mov eax, dword [0x141dc8330]
mov ecx, dword [0x141dc8334]
add eax, ecx
add eax, 0x3096eae1
or eax, 0x74b85550
mov rcx, qword [rsi + 0x1f0]
cmp eax, 0x908bb9af
je 0x1400f4970
mov eax, dword [0x141dc8338]
xor edx, edx
div dword [str.X_a]
nop word cs:[rax + rax]
mov eax, dword [0x141dc8340]
sub eax, dword [0x141dc8344]
and eax, 0xcfe8a0a9
imul eax, eax, 0x687c5b6e
add eax, 0x8a3809bc
cmp eax, 0x82fc8632
jb 0x1400f49f0
test rcx, r8
je 0x1400f4ae6
mov eax, dword [0x141dc8348]
sub eax, dword [0x141dc834c]
add eax, 0xf693207c
or eax, 0xe0450120
and eax, 0xe8472368
cmp eax, 0xfdcb8e73
jbe 0x1400f4a50
lea rdx, [rcx + r8]
mov rax, rcx
lock cmpxchg qword [rsi + 0x1f0], rdx
nop
lea r14, [rcx + r8]
mov rax, rcx
lock cmpxchg qword [rsi + 0x1f0], r14
sete al
test bl, bl
jne 0x1400f4a50
mov ecx, dword [0x141dc8350]
or ecx, dword [0x141dc8354]
or ecx, 0xae88c00e
xor ecx, 0xdc2c7cd
add ecx, 0xec51325e
cmp ecx, 0x2b78ca03
jb 0x1400f4a67
test al, al
je 0x1400f4980
jmp 0x1400f4ae9
mov eax, dword [0x141dc8368]
and eax, dword [0x141dc836c]
imul eax, eax, 0x8842f220
or eax, 0x9672c498
imul eax, eax, 0xc94d3a83
cmp eax, 0xe5a92c98
je 0x1400f4b88
lea rcx, [rsi + 0x1d8]
sub rsp, 0x20
mov rdx, r14
mov r8, qword [rbp - 8]
mov r9, r12
call fcn.1400f5790
add rsp, 0x20
test bl, bl
jne 0x1400f4abf
jmp 0x1400f4c76
mov r14, rcx
mov eax, dword [0x141dc8358]
imul eax, dword [0x141dc835c]
xor eax, 0x24940240
and eax, 0x6cfc2341
xor eax, 0x1af836a9
cmp eax, 0x65c18108
jae 0x1400f4b2c
mov rax, r14
shr rax, 0x20
mov rcx, qword [rbp]
mov qword [rcx + 8], rax
inc dword [rcx + 0x10]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
add rsp, 0x20
mov rsi, qword [rbp]
mov r13, qword [sym.imp.KERNEL32.dll_SwitchToThread]
nop word [rax + rax]
mov eax, dword [0x141dc8360]
xor edx, edx
div dword [0x141dc8364]
mov edi, eax
and edi, 0xdc9604a6
add edi, 0xc9823df8
or edi, 0x15cf07db
mov rax, r14
shr rax, 0x20
mov qword [rsi + 8], rax
inc dword [rsi + 0x10]
sub rsp, 0x20
call r13
add rsp, 0x20
cmp edi, 0x80ea3212
jb 0x1400f4b40
jmp 0x1400f4c76
lea rcx, [rsi + 0x1d8]
sub rsp, 0x20
mov rdx, r14
mov r8, qword [rbp - 8]
mov r9, r12
call fcn.1400f5790
add rsp, 0x20
jmp 0x1400f4abf
mov edx, dword [0x141dc8150]
or edx, dword [0x141dc8154]
and edx, 0x8e403673
imul edx, edx, 0xbc741029
mov r9d, 0xcfc4cfcd
imul rdx, r9
shr rdx, 0x3d
mov qword [rcx + 0x108], r8
cmp edx, 0x262ea6bc
jbe 0x1400f4bee
mov qword [rcx + 0x108], r8
jmp 0x1400f4bb0
test al, al
je 0x1400f41f0
nop word cs:[rax + rax]
mov eax, dword [0x141dc8168]
sub eax, dword [0x141dc816c]
or eax, 0x2209b574
add eax, 0x8e684550
cmp eax, 0xe153bd76
ja 0x1400f4c00
test r13, r13
je 0x1400f41f0
jmp 0x1400f4ee0
mov eax, dword [0x141dc8318]
xor eax, dword [0x141dc831c]
imul esi, eax, 0xfae5acd5
xor esi, 0x4040401
and esi, 0x2f0e5501
sub rsp, 0x20
call r13
add rsp, 0x20
cmp esi, 0x78432d23
jbe 0x1400f4c70
sub rsp, 0x20
call r13
add rsp, 0x20
jmp 0x1400f4c30
inc edi
mov dword [r14 + 0x10], edi
mov rdi, qword [rbp - 8]
mov rax, qword [rdi]
nop dword [rax]
mov ecx, dword [0x141dc8370]
imul ecx, dword [0x141dc8374]
imul ecx, ecx, 0xdd7abaf6
or ecx, 0x93df3daf
imul ecx, ecx, 0x35d08968
cmp ecx, 0x3c61055c
jb 0x1400f4c80
jmp 0x1400f3daa
mov eax, dword [0x141dc8250]
and eax, dword [0x141dc8254]
or eax, 0xf7ab7fff
cmp eax, 0x2ccef76b
je 0x1400f4cb0
cmp r12d, 0x3e
jne 0x1400f4e1c
mov rcx, qword [rdi]
test rcx, rcx
jne 0x1400f4d85
xor r13d, r13d
nop word cs:[rax + rax]
cmp r13d, 6
ja 0x1400f4d20
mov eax, 1
nop dword [rax + rax]
pause
mov edx, eax
mov ecx, r13d
shr edx, cl
inc eax
test edx, edx
je 0x1400f4d00
jmp 0x1400f4d30
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
add rsp, 0x20
nop
mov eax, dword [0x141dc8290]
sub eax, dword [0x141dc8294]
imul edx, eax, 0x1bc3bbc1
xor eax, eax
cmp r13d, 0xb
setb cl
cmp edx, 0xc08159d8
je 0x1400f4d30
mov al, cl
mov ecx, dword [0x141dc8298]
imul ecx, dword [0x141dc829c]
or ecx, 0xc531c5fd
and ecx, 0xc53bcdff
cmp ecx, 0x12250dd9
jb 0x1400f4d55
add r13d, eax
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400f4cf0
mov eax, dword [0x141dc82a0]
xor edx, edx
div dword [0x141dc82a4]
add eax, 0x41e57256
and eax, 0x83713b98
cmp eax, 0x2cb621d4
jbe 0x1400f4dd0
mov rax, rsi
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx]
xor r8d, r8d
test rdx, rdx
setne r8b
add rax, r8
add rax, 2
mov qword [r14 + 0x88], rcx
mov qword [r14 + 0x80], rax
nop dword [rax]
mov eax, dword [0x141dc82a8]
add eax, dword [0x141dc82ac]
imul eax, eax, 0xf51cf05b
and eax, 0x1bab5764
xor eax, 0x4035aa4d
mov rdx, rsi
and rdx, 0xfffffffffffffffe
mov r8, qword [rcx]
xor r9d, r9d
test r8, r8
setne r9b
add rdx, r9
add rdx, 2
mov qword [r14 + 0x88], rcx
mov qword [r14 + 0x80], rdx
cmp eax, 0xbfed452a
jae 0x1400f4dd0
mov eax, dword [0x141dc8258]
xor edx, edx
div dword [0x141dc825c]
imul eax, eax, 0x56ce66c7
or eax, 0x408d6421
cmp eax, 0xdfae26c8
je 0x1400f4e1c
lea rsi, [rdi + 8]
lea rax, [r12 + r12*2]
lea r14, [rdi + rax*8]
add r14, 8
mov eax, dword [str.pMB2]
and eax, dword [0x141dc8264]
add eax, 0x6272aac7
xor eax, 0xfaf988e0
add eax, 0x72d56ecc
cmp eax, 0xc60cb8bc
jae 0x1400f4f32
jmp 0x1400f4f55
mov qword [r14 + 8], 0xffffffffffffffff
mov rax, qword [rdi]
jmp 0x1400f3d70
mov r13, qword [rsi + 8]
mov r11, qword [rsi + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dc8178]
sub eax, dword [0x141dc817c]
or eax, 0x2abc935d
add eax, 0x7d3bdbb2
cmp eax, 0x6abc415f
jb 0x1400f4ea0
nop dword [rax]
mov eax, dword [0x141dc8180]
or eax, dword [0x141dc8184]
add eax, 0x8163c2f1
or eax, 0x55fc8bce
cmp eax, 0x8ab2a430
je 0x1400f4ec0
nop dword [rax]
mov rcx, qword [r12 + 0x110]
mov rax, 0xffffffffffff0000
lock xadd qword [rcx + 0x1f0], rax
add rcx, 0x1d8
movzx edx, ax
cmp rdx, 2
mov eax, 2
cmovae rdx, rax
sub rsp, 0x20
mov rsi, r11
call fcn.1400f53b0
mov rcx, rsi
call r13
add rsp, 0x20
mov rdi, qword [rbp - 8]
mov r14, qword [rbp]
jmp 0x1400f3c90
mov eax, dword [0x141dc8268]
xor edx, edx
div dword [0x141dc826c]
add eax, 0x87f173b9
or eax, 0x3ff4f8c2
mov rcx, qword [r14 + 0x10]
cmp eax, 0xbf56ac8e
jne 0x1400f4f60
mov rax, qword [r14 + 0x10]
jmp 0x1400f4f32
test bl, bl
jne 0x1400f4f60
test cl, 1
jne 0x1400f501d
xor r13d, r13d
mov eax, dword [0x141dc8270]
or eax, dword [0x141dc8274]
and eax, 0x30262441
cmp eax, 0xa6d4b8a0
je 0x1400f4f70
cmp r13d, 6
ja 0x1400f4fb1
mov eax, 1
nop word cs:[rax + rax]
pause
mov edx, eax
mov ecx, r13d
shr edx, cl
inc eax
test edx, edx
je 0x1400f4fa0
jmp 0x1400f4fe8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
add rsp, 0x20
nop
mov eax, dword [0x141dc8278]
and eax, dword [0x141dc827c]
and eax, 0xcc7c8a9c
imul rax, rax, 0x2d694ebb
shr rax, 0x3c
or eax, 0xbf0c8398
cmp eax, 0x110b26a1
je 0x1400f4fc0
mov eax, dword [0x141dc8280]
imul eax, dword [0x141dc8284]
imul ecx, eax, 0x345b9417
cmp r13d, 0xb
mov eax, r13d
adc eax, 0
cmp ecx, 0x8a2e64f7
je 0x1400f4fe8
mov rcx, qword [r14 + 0x10]
mov r13d, eax
test cl, 1
je 0x1400f4f70
mov r13, qword [r14]
mov r11, qword [r14 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dc8288]
imul eax, dword [0x141dc828c]
and eax, 0x1c021330
cmp eax, 0x10f5693a
je 0x1400f5030
cmp r12d, 0x3e
je 0x1400f5099
mov rax, qword [r14 + 0x10]
nop word cs:[rax + rax]
mov rcx, rax
or rcx, 2
lock cmpxchg qword [r14 + 0x10], rcx
jne 0x1400f5060
test al, 4
je 0x1400f5220
mov eax, dword [0x141dc82b0]
add eax, dword [0x141dc82b4]
or eax, 0x92657f1b
cmp eax, 0xaa3b116
je 0x1400f5077
nop
test r12, r12
je 0x1400f5133
dec r12
lea rax, [r12 + r12*2]
mov rcx, qword [rsi + rax*8 + 0x10]
test cl, 2
jne 0x1400f50e0
lea rcx, [rsi + rax*8]
add rcx, 0x10
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov rdx, rax
or rdx, 4
lock cmpxchg qword [rcx], rdx
jne 0x1400f50c0
test al, 2
je 0x1400f5220
nop word cs:[rax + rax]
mov eax, dword [0x141dc82d8]
add eax, dword [0x141dc82dc]
xor eax, 0x252a246
add eax, 0xc6f246e5
or eax, 0x10dfd95e
cmp eax, 0x3cc3cdfc
je 0x1400f50e0
nop word cs:[rax + rax]
mov eax, dword [0x141dc82e0]
or eax, dword [0x141dc82e4]
xor eax, 0x1a312f3a
imul eax, eax, 0x50a6ab77
cmp eax, 0x73cd655e
je 0x1400f5110
jmp 0x1400f5090
mov eax, dword [0x141dc82b8]
xor eax, dword [0x141dc82bc]
imul eax, eax, 0x8d41838f
or eax, 0x673f69dd
add eax, 0xadc805e1
cmp eax, 0xc31c90be
ja 0x1400f5187
mov eax, dword [0x141dc82c0]
imul eax, dword [0x141dc82c4]
imul eax, eax, 0x646f9df
add eax, 0x232dd630
imul rax, rax, 0x5b968031
shr rax, 0x3e
mov r12, qword [0x141dd7fe0]
cmp eax, 0x73698341
jbe 0x1400f5190
mov rax, qword [0x141dd7fe0]
jmp 0x1400f5156
mov eax, dword [0x141dc82c8]
sub eax, dword [0x141dc82cc]
add eax, 0x366e9a94
or eax, 0xdad4089
imul eax, eax, 0x58449c98
cmp eax, 0xe9d0fdaa
mov r14, r11
ja 0x1400f51ff
nop word cs:[rax + rax]
mov eax, dword [0x141dc82d0]
add eax, dword [0x141dc82d4]
imul esi, eax, 0xb8057005
add esi, 0xb8299508
xor esi, 0x3d928375
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r11, r14
add rsp, 0x20
cmp esi, 0x992bb674
jb 0x1400f5220
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400f51c0
test bl, bl
jne 0x1400f5220
mov r12, qword [rbp - 0x18]
nop dword [rax + rax]
mov eax, dword [0x141dc82e8]
sub eax, dword [0x141dc82ec]
or eax, 0x3feee75e
imul eax, eax, 0xb124189d
add eax, 0x536385aa
cmp eax, 0xd176e28c
jb 0x1400f5230
jmp 0x1400f4ee0
mov eax, dword [0x141dc81a8]
xor edx, edx
div dword [0x141dc81ac]
add eax, 0x3db2c7a1
xor eax, 0xa0c08008
or eax, 0x583b6aa3
cmp eax, 0x3a0f5655
je 0x1400f5260
jmp 0x1400f536e
mov eax, dword [0x141dc82f0]
or eax, dword [0x141dc82f4]
imul eax, eax, 0xb7d6dbac
add eax, 0x433d65a4
cmp eax, 0x4804149b
jb 0x1400f5290
mov rdi, qword [r12 + 0x110]
mov eax, dword [0x141dc82f8]
or eax, dword [0x141dc82fc]
mov ecx, 0xda3f46ad
imul rcx, rax
shr rcx, 0x3d
and ecx, 0xfffffffc
cmp ecx, 0xfe5cecb7
je 0x1400f5370
lea rsi, [rdi + 0x1d8]
mov ebx, 2
mov r14d, dword [0x141dc8300]
imul r14d, dword [0x141dc8304]
xor r14d, 0x12400000
or r14d, 0x6cbfdfbf
mov rax, 0xffffffffffff0000
lock xadd qword [rdi + 0x1f0], rax
movzx edx, ax
cmp rdx, 2
cmovae rdx, rbx
sub rsp, 0x20
mov rcx, rsi
call fcn.1400f53b0
add rsp, 0x20
cmp r14d, 0x55cd4e96
jb 0x1400f52ea
jmp 0x1400f3aba
ud2
ud2
lea rcx, [rdi + 0x1d8]
mov rax, 0xffffffffffff0000
lock xadd qword [rdi + 0x1f0], rax
movzx eax, ax
cmp rax, 2
mov edx, 2
cmovb rdx, rax
sub rsp, 0x20
call fcn.1400f53b0
add rsp, 0x20
jmp 0x1400f52de