Function at 0x140236ac0
Capabilities:
Encode data using base64
Encode data using xor
Generate random numbers via rtlgenrandom
Generate random numbers via winapi

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
movaps xmmword [rbp - 0x10], xmm6
mov eax, dword [0x1415bcfc0]
mov ecx, dword [0x1415bcfc4]
not eax
not ecx
and ecx, eax
mov eax, ecx
xor eax, 0xc1821004
xor ecx, 0x3e04edc9
mov edx, ecx
and edx, 0x34796733
and eax, 0xcb8698cc
imul eax, edx
mov edx, ecx
and edx, 0xcb8698cc
or ecx, 0xcb8698cc
imul ecx, edx
add eax, ecx
add eax, 0xe35ba07d
cmp eax, 0x63808a89
jb 0x140236bd3
mov ecx, dword [0x1415bcfc8]
add ecx, dword [0x1415bcfcc]
mov eax, ecx
xor eax, 0x46288851
and ecx, 0x39d777ae
add ecx, ecx
sub ecx, eax
add ecx, 0x92eaca77
xor eax, eax
call fcn.14021cf50
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x40
call fcn.14021cf50
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov r12, rsp
mov eax, 0x40
call fcn.14021cf50
sub rsp, rax
mov r13, rsp
cmp ecx, 0x484a5053
jbe 0x140236c3d
xor eax, eax
call fcn.14021cf50
sub rsp, rax
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x40
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov eax, 0x40
call fcn.14021cf50
sub rsp, rax
jmp 0x140236b2b
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x30], rdx
mov eax, dword [0x1415bcfd0]
mov ecx, dword [0x1415bcfd4]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, 0x968501c9
imul rcx, rax
shr rcx, 0x3f
not ecx
mov eax, ecx
and eax, 0x64f2d735
and ecx, 0x4432d525
add ecx, ecx
sub eax, ecx
add eax, 0x5d32f5af
cmp eax, 0x429b49ea
ja 0x140236cab
mov eax, 0x40
call fcn.14021cf50
sub rsp, rax
mov rdi, rsp
xorps xmm0, xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14], xmm0
xor eax, eax
test al, al
je 0x140236cc6
mov eax, 0x40
call fcn.14021cf50
sub rsp, rax
xorps xmm0, xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14], xmm0
jmp 0x140236c89
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
mov r8d, 0x20
mov r9d, 2
call qword [sym.imp.bcrypt.dll_BCryptGenRandom]
add rsp, 0x20
cmp eax, 0xc0000000
jb 0x140236e5d
mov dword [rbp - 0x24], eax
mov qword [rbp - 0x38], rdi
mov eax, dword [0x1415bcfd8]
xor eax, dword [0x1415bcfdc]
shr eax, 1
mov ecx, 0x84a77133
imul rcx, rax
shr rcx, 0x3c
mov eax, ecx
and eax, 2
add eax, eax
neg eax
add eax, ecx
add eax, 0x5b68103a
xor eax, 0x5ae570d9
cmp eax, 0xd78f476b
jne 0x140236d44
sub rsp, 0x20
mov rcx, r14
mov edx, 0x20
call qword [sym.imp.ADVAPI32.dll_SystemFunction036]
add rsp, 0x20
mov rsi, qword [sym.imp.ADVAPI32.dll_SystemFunction036]
nop dword [rax + rax]
mov eax, dword [0x1415bcfe0]
mov ecx, dword [0x1415bcfe4]
lea edi, [rax + rcx]
add edi, 0xc1641686
or edi, 0x64bfcbe
sub rsp, 0x20
mov rcx, r14
mov edx, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x8d25f840
ja 0x140236d50
mov ecx, eax
nop word [rax + rax]
mov eax, dword [0x1415bcfe8]
xor edx, edx
div dword [0x1415bcfec]
add eax, 0x49f1742c
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x9ea9d247
and edx, 0x61562db8
imul edx, r8d
mov r8d, eax
and r8d, 0x61562db8
or eax, 0x61562db8
imul eax, r8d
add eax, edx
imul rax, rax, 0x38f8baed
shr rax, 0x3d
cmp eax, 0x13b2b7b2
ja 0x140236d90
test cl, cl
mov rdi, qword [rbp - 0x38]
mov r8d, dword [rbp - 0x24]
jne 0x140236e5d
add r8d, 0x80000000
nop word cs:[rax + rax]
mov eax, dword [0x1415bcff0]
mov ecx, dword [0x1415bcff4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0xb8640d2a
or eax, 0x98794cad
cmp eax, 0x5008af48
jb 0x140236e00
nop word [rax + rax]
mov eax, dword [0x1415bcff8]
add eax, dword [0x1415bcffc]
and eax, 0x12321e0a
add eax, 0xb772cff9
not eax
or eax, 0x91a3a0a9
cmp eax, 0xa97b2781
je 0x140236e30
test r8d, r8d
jne 0x140236ef7
mov eax, 0x9236d9bd
nop word cs:[rax + rax]
mov ecx, dword [0x1415bd000]
or ecx, dword [0x1415bd004]
imul ecx, ecx, 0xe00589d0
or ecx, 0x86dc6119
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc4868944
ja 0x140236e70
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov r14, rdi
add r14, 0x10
mov rcx, qword [0x1415d3938]
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x140236ec0
test rcx, rcx
jne 0x14023700e
mov eax, dword [0x1415bd008]
or eax, dword [0x1415bd00c]
xor eax, 0x9f018df2
imul eax, eax, 0xa01532ee
not eax
or eax, 0x22f02f07
cmp eax, 0xbba72cb6
jbe 0x140236f65
jmp 0x140236fb7
mov esi, r8d
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
test rax, rax
je 0x140236f63
mov dword [rax], esi
mov eax, dword [0x1415bd048]
xor edx, edx
div dword [0x1415bd04c]
add eax, 0x1bc19329
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xeba4ba73
and ecx, 0x145b458c
imul ecx, edx
mov edx, eax
and edx, 0x145b458c
or eax, 0x145b458c
imul eax, edx
add eax, ecx
imul eax, eax, 0x94f5a8c1
cmp eax, 0x7612e14c
je 0x140236f1c
ud2
mov eax, dword [0x1415bd010]
mov ecx, eax
not ecx
or ecx, dword [0x1415bd014]
lea esi, [rax + rcx]
inc esi
mov eax, esi
and eax, 0x5230cc37
add eax, eax
sub esi, eax
add esi, 0x5230cc37
mov eax, esi
and eax, 0x891fcec
add eax, eax
sub esi, eax
add esi, 0x891fcec
or esi, 0xdd74de1d
sub rsp, 0x20
call fcn.140219b70
add rsp, 0x20
cmp esi, 0xd6488d46
jae 0x140236fc6
sub rsp, 0x20
call fcn.140219b70
add rsp, 0x20
jmp 0x140236f65
mov rcx, rax
nop dword [rax]
mov eax, dword [0x1415bd018]
xor edx, edx
div dword [0x1415bd01c]
mov edx, eax
and edx, 0x61715932
or eax, 0x61715932
add eax, edx
mov edx, eax
and edx, 0x9e33de5f
or eax, 0x9e33de5f
add eax, edx
imul rax, rax, 0x7e9f579
shr rax, 0x39
cmp eax, 0x9a4f4fa3
je 0x140236fd0
and ecx, 0x4000
nop word cs:[rax + rax]
mov eax, dword [0x1415bd020]
xor edx, edx
div dword [0x1415bd024]
mov edx, eax
not edx
and edx, 0x4d3dccc5
mov r8d, eax
and r8d, 0xb2c2333a
imul r8d, edx
mov edx, eax
and edx, 0x4d3dccc5
or eax, 0x4d3dccc5
imul eax, edx
add eax, r8d
mov edx, eax
and edx, 0x7484b527
xor eax, 0xf484b527
lea eax, [rax + rdx*2]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x128106f3
and edx, 0xed7ef90c
imul edx, r8d
mov r8d, eax
and r8d, 0xed7ef90c
or eax, 0xed7ef90c
imul eax, r8d
add eax, edx
cmp eax, 0x2ecba6a1
je 0x140237020
test rcx, rcx
je 0x140237100
mov eax, dword [0x1415bd030]
xor eax, dword [0x1415bd034]
mov ecx, eax
not ecx
and ecx, 0xddd11ebd
mov edx, eax
and edx, 0x222ee142
imul edx, ecx
mov ecx, eax
and ecx, 0xddd11ebd
or eax, 0xddd11ebd
imul eax, ecx
add eax, edx
imul eax, eax, 0xfc069135
mov ecx, 0xb8903ea3
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x33599dc4
jbe 0x140237162
jmp 0x140237182
mov eax, dword [0x1415bd028]
add eax, dword [0x1415bd02c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4d31b6b1
and ecx, 0xb2ce494e
imul ecx, edx
mov edx, eax
and edx, 0xb2ce494e
or eax, 0xb2ce494e
imul eax, edx
add eax, ecx
xor eax, 0x9e79e77a
imul rax, rax, 0x21819bf1
shr rax, 0x3c
cmp eax, 0x9e97c0a6
je 0x140237100
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmmword [rdi + 0x10], xmm0
movaps xmmword [rdi + 0x20], xmm1
xorps xmm0, xmm0
movaps xmmword [rdi + 0x30], xmm0
jmp 0x14023719e
sub rsp, 0x20
lea r8, [0x14159e8e8]
mov rcx, r14
mov rdx, rbx
call fcn.1401194c0
add rsp, 0x20
xor eax, eax
test al, al
je 0x14023719e
sub rsp, 0x20
lea r8, [0x14159e8e8]
mov rcx, r14
mov rdx, rbx
call fcn.1401194c0
add rsp, 0x20
jmp 0x140237162
movaps xmm0, xmmword [r14]
movaps xmm1, xmmword [r14 + 0x10]
movaps xmm2, xmmword [r14 + 0x20]
movaps xmmword [r12 + 0x20], xmm2
movaps xmmword [r12 + 0x10], xmm1
movaps xmmword [r12], xmm0
mov eax, dword [0x1415bd038]
sub eax, dword [0x1415bd03c]
imul rax, rax, 0x6158a329
shr rax, 0x39
mov ecx, eax
and ecx, 8
xor eax, 0x2d601888
or eax, ecx
or eax, 0x809a2234
cmp eax, 0x18184014
jne 0x14023724c
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [r15 + 0x28], xmm2
movups xmmword [r15 + 0x18], xmm1
movups xmmword [r15 + 8], xmm0
mov rax, qword [r15 + 0x30]
mov qword [r13 + 0x30], rax
movups xmm0, xmmword [r15 + 0x20]
movups xmmword [r13 + 0x20], xmm0
movups xmm0, xmmword [r15 + 0x10]
movups xmmword [r13 + 0x10], xmm0
movups xmm0, xmmword [r15]
movups xmmword [r13], xmm0
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x170
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
xor edi, edi
nop
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [r15 + 0x28], xmm2
movups xmmword [r15 + 0x18], xmm1
movups xmmword [r15 + 8], xmm0
mov rax, qword [r15 + 0x30]
mov qword [r13 + 0x30], rax
movups xmm0, xmmword [r15 + 0x20]
movups xmmword [r13 + 0x20], xmm0
movups xmm0, xmmword [r15 + 0x10]
movups xmmword [r13 + 0x10], xmm0
movups xmm0, xmmword [r15]
movups xmmword [r13], xmm0
movzx eax, byte [0x1415d3950]
sub rsp, 0x20
mov edx, 0x170
xor ecx, ecx
call fcn.140219830
add rsp, 0x20
test dil, dil
jne 0x140237250
mov rcx, rax
test rax, rax
je 0x14023752f
xor eax, eax
test al, al
je 0x140237388
mov qword [rcx], 1
mov qword [rcx + 8], 1
xorps xmm0, xmm0
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx + 0x20], xmm0
movaps xmmword [rcx + 0x30], xmm0
movaps xmmword [rcx + 0x40], xmm0
movaps xmmword [rcx + 0x50], xmm0
movaps xmmword [rcx + 0x60], xmm0
movaps xmmword [rcx + 0x70], xmm0
movaps xmmword [rcx + 0x80], xmm0
movaps xmmword [rcx + 0x90], xmm0
movaps xmmword [rcx + 0xa0], xmm0
movaps xmmword [rcx + 0xb0], xmm0
movaps xmmword [rcx + 0xc0], xmm0
movaps xmmword [rcx + 0xd0], xmm0
movaps xmmword [rcx + 0xe0], xmm0
movaps xmmword [rcx + 0xf0], xmm0
movaps xmmword [rcx + 0x100], xmm0
mov qword [rcx + 0x110], 0x40
mov rax, qword [r13 + 0x30]
mov qword [rcx + 0x148], rax
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmm2, xmmword [r13 + 0x20]
movups xmmword [rcx + 0x138], xmm2
movups xmmword [rcx + 0x128], xmm1
movups xmmword [rcx + 0x118], xmm0
mov qword [rcx + 0x150], 0x10000
mov qword [rcx + 0x158], 0x10000
xorps xmm0, xmm0
nop dword [rax + rax]
mov eax, dword [0x1415bd050]
xor eax, dword [0x1415bd054]
mov edx, eax
and edx, 0x232ec298
add edx, edx
neg edx
add eax, edx
add eax, 0x632ec298
xor eax, 0xa260800
or eax, 0xa4512078
mov qword [rcx], 1
mov qword [rcx + 8], 1
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx + 0x20], xmm0
movaps xmmword [rcx + 0x30], xmm0
movaps xmmword [rcx + 0x40], xmm0
movaps xmmword [rcx + 0x50], xmm0
movaps xmmword [rcx + 0x60], xmm0
movaps xmmword [rcx + 0x70], xmm0
movaps xmmword [rcx + 0x80], xmm0
movaps xmmword [rcx + 0x90], xmm0
movaps xmmword [rcx + 0xa0], xmm0
movaps xmmword [rcx + 0xb0], xmm0
movaps xmmword [rcx + 0xc0], xmm0
movaps xmmword [rcx + 0xd0], xmm0
movaps xmmword [rcx + 0xe0], xmm0
movaps xmmword [rcx + 0xf0], xmm0
movaps xmmword [rcx + 0x100], xmm0
mov qword [rcx + 0x110], 0x40
movups xmm1, xmmword [r13]
movups xmm2, xmmword [r13 + 0x10]
movups xmm3, xmmword [r13 + 0x20]
movups xmmword [rcx + 0x118], xmm1
movups xmmword [rcx + 0x128], xmm2
movups xmmword [rcx + 0x138], xmm3
mov rdx, qword [r13 + 0x30]
mov qword [rcx + 0x148], rdx
mov qword [rcx + 0x150], 0x10000
mov qword [rcx + 0x158], 0x10000
cmp eax, 0xeab4f952
jb 0x140237390
mov eax, dword [0x1415bd058]
add eax, dword [0x1415bd05c]
mov edx, eax
not edx
and edx, 0x923e40c4
and eax, 0x6dc1bf3b
sub eax, edx
mov edx, eax
xor edx, 0x804b0884
and edx, eax
or edx, 0x7ea45723
cmp edx, 0xd2417ac2
jbe 0x1402374c0
mov qword [rcx + 0x160], 0
nop
mov eax, dword [0x1415bd060]
sub eax, dword [0x1415bd064]
xor eax, 0x3db28d6c
imul rax, rax, 0x64c9f6bd
shr rax, 0x3e
mov qword [rcx + 0x160], 0
cmp eax, 0xd8608e05
ja 0x1402374c0
mov eax, dword [0x1415bd068]
mov edx, dword [0x1415bd06c]
mov r8d, eax
not r8d
or eax, edx
not edx
or edx, r8d
not edx
not eax
or eax, edx
xor eax, 0x5b44be20
add eax, 0x36d5fd1c
mov edx, eax
and edx, 0x376bbf84
add edx, edx
sub eax, edx
cmp eax, 0x73132c81
jne 0x140237575
jmp 0x1402375cd
ud2
mov eax, dword [0x1415bd070]
xor edx, edx
div dword [0x1415bd074]
mov edx, dword [0x1415d3954]
mov r8, qword gs:[0x58]
mov r8, qword [r8 + rdx*8]
mov rdx, qword [r8 + 0x18]
mov rbx, qword [r8 + 0x20]
mov qword [r8 + 0x18], 1
mov qword [r8 + 0x20], rcx
add eax, 0x408c559c
xor eax, 0x5e10f5a3
imul eax, eax, 0xf86e5724
cmp eax, 0xb9fa95f1
jne 0x1402375f4
mov eax, dword [0x1415d3954]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov qword [rax + 0x18], 1
mov qword [rax + 0x20], rcx
jmp 0x140237575
test rdx, rdx
jle 0x140237700
cmp edx, 1
jne 0x140237d20
nop word cs:[rax + rax]
mov eax, dword [0x1415bd0e0]
imul eax, dword [0x1415bd0e4]
imul rax, rax, 0x3751ae95
shr rax, 0x3a
imul eax, eax, 0xd1458a3
cmp eax, 0x7aa1f741
ja 0x140237610
mov rcx, qword [rbx]
dec rcx
mov eax, dword [0x1415bd0e8]
and eax, dword [0x1415bd0ec]
imul eax, eax, 0x80d96038
add eax, 0x24f9bc10
imul rax, rax, 0x74b5a32d
shr rax, 0x3e
cmp eax, 0xa83aa479
jne 0x140237670
mov qword [rbx], rcx
nop word [rax + rax]
mov eax, dword [0x1415bd0f0]
xor edx, edx
div dword [0x1415bd0f4]
xor eax, 0x303909b0
shr eax, 4
imul rax, rax, 0x13e08947
shr rax, 0x38
or eax, 0x579f2064
mov qword [rbx], rcx
cmp eax, 0xd0c26129
je 0x140237670
test rcx, rcx
jne 0x140237d20
nop dword [rax]
mov eax, dword [0x1415bd0f8]
mov ecx, dword [0x1415bd0fc]
add eax, ecx
add eax, 0xc0596a46
xor eax, 0x33d39497
cmp eax, 0x9f2d78f6
je 0x1402376b0
mov rax, qword [rbx + 8]
mov ecx, dword [0x1415bd100]
imul ecx, dword [0x1415bd104]
dec rax
and ecx, 0x25cebcdd
add ecx, 0xa896c301
cmp ecx, 0xad1bbf5a
jae 0x14023791c
jmp 0x14023794e
mov eax, dword [0x1415bd078]
xor eax, dword [0x1415bd07c]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x8181b814
mov r8d, edx
and r8d, 0x21831a6
and ecx, 0x7c664649
imul ecx, r8d
and edx, 0xfde7ce59
or eax, 0xfde7fe5d
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x7c37f55f
mov edx, eax
and edx, 0x83c80aa0
imul edx, ecx
mov ecx, eax
and ecx, 0x7c37f55f
or eax, 0x7c37f55f
imul eax, ecx
add eax, edx
cmp eax, 0x8448e901
je 0x140237700
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x40]
mov eax, dword [0x1415bd080]
xor edx, edx
div dword [0x1415bd084]
nop word cs:[rax + rax]
mov eax, dword [0x1415bd088]
or eax, dword [0x1415bd08c]
or eax, 0xeeaf767a
add eax, 0x201d442d
xor eax, 0xbb90906d
cmp eax, 0x15d0857d
jb 0x1402377a0
test rcx, rcx
jne 0x1402377f0
mov eax, dword [0x1415bd090]
sub eax, dword [0x1415bd094]
xor eax, 0x5440c390
and eax, 0x7440c390
cmp eax, 0xd5183d75
jne 0x140237a9f
jmp 0x140237aca
mov eax, dword [0x1415bd0a0]
xor eax, dword [0x1415bd0a4]
mov ecx, eax
xor ecx, 0x410c7fc
and ecx, eax
add ecx, 0xa0bbb740
cmp ecx, 0xb31a939c
jb 0x1402377f0
mov rax, qword [rbp - 0x18]
mov dword [rax], 0
mov byte [rax + 4], 0
lea rax, [0x14159f0c0]
mov rcx, qword [rbp - 0x20]
mov qword [rcx], rax
mov qword [rcx + 8], 1
mov eax, dword [0x1415bd0a8]
sub eax, dword [0x1415bd0ac]
mov ecx, eax
xor ecx, 0x6fcd7731
add ecx, eax
and eax, 0x103288ce
sub ecx, eax
mov eax, ecx
or eax, 0x3281b007
not ecx
and ecx, 0x8120600
and eax, 0x73c9b0bf
sub eax, ecx
cmp eax, 0x8cd13a03
jbe 0x1402378a5
mov rax, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x20]
mov qword [rdx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rdx + 0x18], xmm0
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
call fcn.140142c60
mov rcx, rax
call fcn.140143250
add rsp, 0x20
mov ecx, 7
int 0x29
xorps xmm6, xmm6
mov rdi, qword [rbp - 0x30]
mov rbx, qword [rbp - 0x20]
mov r14, qword [rbp - 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x1415bd0b0]
add eax, dword [0x1415bd0b4]
or eax, 0xb5e0854
shr eax, 2
imul rsi, rax, 0x28ca15d
shr rsi, 0x36
or esi, 0x97ab1e98
mov qword [rbx + 0x10], rdi
movups xmmword [rbx + 0x18], xmm6
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
call fcn.14021b6a0
mov rcx, rax
call fcn.14021acc0
add rsp, 0x20
mov ecx, 7
int 0x29
cmp esi, 0x4708183d
jb 0x1402378c0
jmp 0x140236f63
mov ecx, dword [0x1415bd108]
and ecx, dword [0x1415bd10c]
shr ecx, 3
imul rcx, rcx, 0x106ab1c7
shr rcx, 0x39
imul ecx, ecx, 0xa84d3441
add ecx, 0x1b4cfe90
mov qword [rbx + 8], rax
cmp ecx, 0xaf739b4
jae 0x140237954
mov qword [rbx + 8], rax
jmp 0x14023791c
test rax, rax
jne 0x140237d20
mov eax, dword [0x1415bd110]
or eax, dword [0x1415bd114]
imul eax, eax, 0x9d96a44b
or eax, 0x9fff776a
cmp eax, 0x92f1e38f
jae 0x140237982
mov rax, qword [0x1415d3918]
mov eax, 0xba6c6535
nop word [rax + rax]
mov ecx, dword [0x1415bd118]
xor ecx, dword [0x1415bd11c]
add ecx, 0x49639035
imul rcx, rax
shr rcx, 0x3f
not ecx
and ecx, 0x10809caf
mov rsi, qword [0x1415d3918]
cmp ecx, 0x8b78311a
je 0x140237990
mov eax, dword [0x1415bd120]
sub eax, dword [0x1415bd124]
and eax, 0x96a2f837
add eax, 0x99aa6c3e
or eax, 0x6151703f
cmp eax, 0x83b6ca3c
jne 0x1402379f9
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14d, dword [0x1415bd128]
and r14d, dword [0x1415bd12c]
mov eax, r14d
not eax
and eax, 0x7475d0c9
mov ecx, r14d
and ecx, 0xb8a2f36
imul ecx, eax
mov eax, r14d
and eax, 0x7475d0c9
or r14d, 0x7475d0c9
imul r14d, eax
add r14d, ecx
not r14d
or r14d, 0x82020150
and r14d, 0xe30201fc
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call rdi
add rsp, 0x20
cmp r14d, 0xbfb1f9a6
ja 0x140237a00
nop word cs:[rax + rax]
mov eax, dword [0x1415bd130]
imul eax, dword [0x1415bd134]
mov ecx, eax
not ecx
or ecx, 0xac74e7d
add eax, ecx
add eax, 0xdd5d7e6f
and eax, 0x1876f043
cmp eax, 0x91de3567
ja 0x140237a70
jmp 0x140237d20
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x40], 0xffffffffffffffff
mov rcx, qword [0x140258638]
xor ecx, ecx
test cl, cl
je 0x140237af1
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x40], 0xffffffffffffffff
mov rax, qword [0x140258638]
jmp 0x140237a9f
mov rsi, qword [rax + 0x58]
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x48]
nop word cs:[rax + rax]
mov ecx, dword [0x1415bd098]
mov edx, ecx
not edx
or edx, dword [0x1415bd09c]
add ecx, edx
inc ecx
mov edx, ecx
not edx
or ecx, 0x8026a62
or edx, 0xe0ac8180
and edx, 0xf4ac8185
mov r8d, ecx
and r8d, 0x123028
or r8d, edx
xor r8d, 0x419c1814
and ecx, 0x1c105243
or ecx, r8d
cmp ecx, 0x5713ff31
jb 0x140237b20
cmp rsi, rax
jne 0x140237c3e
sub rsp, 0x20
call fcn.140147fa0
add rsp, 0x20
mov eax, dword [0x1415d3954]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x40]
mov eax, dword [0x1415bd0b8]
xor edx, edx
div dword [0x1415bd0bc]
inc rcx
mov eax, dword [0x1415bd0c0]
mov edx, dword [0x1415bd0c4]
mov r8d, edx
not r8d
mov r9d, eax
and r9d, r8d
or r8d, eax
not r8d
imul r8d, r9d
mov r9d, eax
and r9d, edx
or eax, edx
imul eax, r9d
add eax, r8d
or eax, 0xbf8cbe73
imul eax, eax, 0x38aac3ad
cmp eax, 0x42dc577c
jb 0x140237bb0
nop word cs:[rax + rax]
mov eax, dword [0x1415bd0c8]
xor edx, edx
div dword [0x1415bd0cc]
mov edx, eax
xor edx, 0x8280c01
xor eax, 0x41010110
and eax, 0xe1571394
and edx, 0x1ea8ec6b
or edx, eax
xor edx, 0xd3d30bbb
add edx, 0x5207cc67
cmp edx, 0xf6ad5ded
ja 0x140237c00
jmp 0x140237c40
xor ecx, ecx
mov eax, dword [0x1415bd0d0]
and eax, dword [0x1415bd0d4]
add eax, 0xe51ec74d
and eax, 0x44000e53
cmp eax, 0x78601060
jbe 0x140237ca7
mov eax, dword [0x1415d3954]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov rdx, qword [rax + 0x50]
mov r8, rsi
shl r8, 4
lea r9, [rax + 0x18]
mov qword [rdx + r8], r9
lea r9, [0x140118990]
mov qword [rdx + r8 + 8], r9
lea rdx, [rsi + 1]
mov qword [rax + 0x58], rdx
mov qword [rax + 0x40], rcx
mov r8, rsi
shl r8, 4
inc rsi
lea r9, [0x140118990]
nop dword [rax + rax]
mov eax, dword [0x1415bd0d8]
xor edx, edx
div dword [0x1415bd0dc]
mov edx, dword [0x1415d3954]
mov r10, qword gs:[0x58]
mov rdx, qword [r10 + rdx*8]
mov r10, qword [rdx + 0x50]
lea r11, [rdx + 0x18]
mov qword [r10 + r8], r11
or eax, 0xc61c1a08
and eax, 0xd69d5fc8
xor eax, 0x731fe0cb
mov qword [r10 + r8 + 8], r9
mov qword [rdx + 0x58], rsi
mov qword [rdx + 0x40], rcx
cmp eax, 0x37be9cbd
jb 0x140237cc0
nop dword [rax]
mov eax, dword [0x1415bd138]
mov ecx, dword [0x1415bd13c]
add eax, ecx
add eax, 0xf05a846b
mov ecx, eax
and ecx, 0x30b5b7d0
add ecx, ecx
sub eax, ecx
add eax, 0xb0b5b7d0
imul rax, rax, 0x2109077b
shr rax, 0x3d
cmp eax, 0xb6590491
je 0x140237d20
nop word cs:[rax + rax]
mov eax, dword [0x1415bd140]
imul eax, dword [0x1415bd144]
or eax, 0x3ae3f614
add eax, 0x2439f3a5
mov ecx, eax
not ecx
and ecx, 0x256e0837
mov edx, eax
and edx, 0xda11d3c8
imul edx, ecx
mov ecx, eax
and ecx, 0x252c2837
or eax, 0x256e2837
imul eax, ecx
add eax, edx
cmp eax, 0xf671e86c
ja 0x140237d60
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret