Function at 0x1400f7340
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
movaps xmmword [rbp - 0x10], xmm6
mov r15, rdx
mov eax, dword [0x140224010]
mov r8d, dword [0x140224014]
mov edx, eax
and edx, r8d
add edx, edx
add eax, r8d
sub eax, edx
and eax, 0x6064c0c
xor eax, 0x101814d
cmp eax, 0x39c1f503
je 0x1400f739c
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
mov r12, rsp
xor eax, eax
test al, al
je 0x1400f73ab
mov eax, 0x10
call fcn.1401516e0
sub rsp, rax
jmp 0x1400f7386
mov eax, dword [0x140224018]
add eax, dword [0x14022401c]
mov r8d, eax
not r8d
and r8d, 0x1cd05153
mov edx, eax
and edx, 0xe32faeac
imul edx, r8d
mov r8d, eax
and r8d, 0x1cd05153
or eax, 0x1cd05153
imul eax, r8d
add eax, edx
mov r8d, eax
not r8d
and r8d, 0x6cda1bac
mov edx, eax
and edx, 0x9325e453
imul edx, r8d
mov r8d, eax
and r8d, 0x6cda1bac
or eax, 0x6cda1bac
imul eax, r8d
add eax, edx
and eax, 0x968a2e0c
cmp eax, 0xe9726861
ja 0x1400f745a
mov eax, dword [0x140224020]
add eax, dword [0x140224024]
mov edx, eax
or edx, 0x8886afc2
xor edx, 0x59c35b7c
or eax, 0xa63ca483
and eax, edx
imul rax, rax, 0x378dde9b
shr rax, 0x3c
mov qword [r12], 0
cmp eax, 0x1ef56b8f
jbe 0x1400f7464
mov qword [r12], 0
jmp 0x1400f741f
mov r14, qword [r15 + 0x10]
mov rax, r14
shr rax, 0x20
je 0x1400f74f2
nop word cs:[rax + rax]
mov eax, dword [0x1402240d0]
mov r9d, dword [0x1402240d4]
mov edx, r9d
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, r9d
or eax, r9d
imul eax, r8d
add eax, edx
add eax, 0x8cf5dfca
or eax, 0x962463b1
cmp eax, 0x5668f50c
je 0x1400f7480
lea rax, str.Js__
mov edx, dword [0x1402240d8]
and edx, dword [0x1402240dc]
mov qword [rcx + 8], rax
imul rax, rdx, 0x53f0e75f
shr rax, 0x3e
cmp eax, 0xa7584b91
jne 0x1400f885d
jmp 0x1400f88ba
mov qword [rbp - 0x20], rcx
sub rsp, 0x20
xor ecx, ecx
mov edx, r14d
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
mov r13, qword [r12]
nop word cs:[rax + rax]
mov eax, dword [0x140224028]
add eax, dword [0x14022402c]
or eax, 0xe43ffe7b
imul eax, eax, 0x574ac965
cmp eax, 0xd91701cb
ja 0x1400f7520
test r13, r13
je 0x1400f7632
js 0x1400f7a21
xor eax, eax
test al, al
je 0x1400f7560
movzx eax, byte [0x14022cb78]
nop word [rax + rax]
mov eax, dword [0x140224048]
xor edx, edx
div dword [0x14022404c]
add eax, 0x1144b99
or eax, 0xbfd5f7bf
movzx ecx, byte [0x14022cb78]
cmp eax, 0x3540a2e5
je 0x1400f7560
xor eax, eax
test al, al
je 0x1400f75a0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.140107940
add rsp, 0x20
nop
mov eax, dword [0x140224050]
mov ecx, dword [0x140224054]
not eax
not ecx
or ecx, eax
not ecx
imul eax, ecx, 0x41cb5171
or eax, 0xbcf72c90
imul esi, eax, 0x27dbb165
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.140107940
add rsp, 0x20
cmp esi, 0x600cc514
jb 0x1400f75a0
mov rdi, rax
test rax, rax
jne 0x1400f7637
mov eax, dword [0x140224058]
mov ecx, dword [str.n_jQ]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0x59a7c890
add eax, 0x2cb46358
or eax, 0x65e0ffd3
cmp eax, 0xa97eb78b
jne 0x1400f7aea
jmp 0x1400f7b15
mov edi, 1
xor eax, eax
nop dword [rax]
mov ecx, dword [0x140224070]
sub ecx, dword [0x140224074]
mov edx, ecx
xor edx, 0xb9fbc8fa
add edx, ecx
and ecx, 0x46043705
sub edx, ecx
mov ecx, edx
and ecx, 0x16a70f2e
xor edx, 0x16a70f2e
mov rbx, r13
sub rbx, 1
cmovb rbx, rax
lea ecx, [rdx + rcx*2]
sbb rbx, 0xffffffffffffffff
cmp ecx, 0xa9ab49a1
je 0x1400f7640
cmp r13, rbx
jbe 0x1400f789b
nop
mov eax, dword [0x140224078]
add eax, dword [0x14022407c]
and eax, 0x9dc06802
cmp eax, 0x4a708560
je 0x1400f7690
nop dword [rax + rax]
mov eax, dword [0x140224080]
mov ecx, dword [0x140224084]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0xa14b1a0f
or eax, 0xa14b1a0f
and eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x6693640d
and ecx, 0x996c9bf2
imul ecx, edx
mov edx, eax
and edx, 0x996c9bf2
or eax, 0x996c9bf2
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0xcaf4bb4d
mov edx, eax
and edx, 0x350b44b2
imul edx, ecx
mov ecx, eax
and ecx, 0xcaf4bb4c
or eax, 0xcaf4bb4d
imul eax, ecx
add eax, edx
cmp eax, 0x288887e8
je 0x1400f76b0
nop dword [rax + rax]
mov eax, dword [0x140224088]
mov ecx, dword [0x14022408c]
not eax
not ecx
or ecx, eax
not ecx
imul eax, ecx, 0xcf3bc1b9
mov ecx, eax
xor ecx, 0x17e07041
xor eax, 0x20028fa8
and eax, 0x33c28fa9
mov edx, ecx
and edx, 0xcc3d7056
imul edx, eax
mov eax, ecx
and eax, 0x33c28fa9
or ecx, 0x33c28fa9
imul ecx, eax
add ecx, edx
cmp ecx, 0x53f1708b
jb 0x1400f7730
test rbx, rbx
je 0x1400f78aa
nop word [rax + rax]
mov eax, dword [0x1402240b8]
mov ecx, dword [0x1402240bc]
not eax
not ecx
or ecx, eax
not ecx
or ecx, 0x3309bac7
mov eax, ecx
xor eax, 0x2448c930
and ecx, 0x5bb736cf
add ecx, ecx
sub ecx, eax
cmp ecx, 0x965cdeb4
je 0x1400f7790
mov r13, r14
mov eax, dword [0x1402240c0]
xor edx, edx
div dword [0x1402240c4]
mov ecx, eax
and ecx, 0x49897259
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xc9897259
mov ecx, eax
xor ecx, 0x1c8363ca
xor eax, 0x4e172bcd
and eax, ecx
cmp eax, 0xc5fcb871
jbe 0x1400f781a
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
mov r9, rbx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapReAlloc]
nop word cs:[rax + rax]
mov eax, dword [0x1402240c8]
mov ecx, dword [0x1402240cc]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0x29e2c268
mov r14d, eax
xor r14d, 0x7de826e8
xor eax, 0x582804a8
and eax, 0x5a2c94b9
add eax, eax
sub r14d, eax
add r14d, 0xda2c94b9
mov rcx, qword [0x14022cb48]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
mov r9, rbx
call rsi
add rsp, 0x20
cmp r14d, 0x7678750d
ja 0x1400f7830
mov rdi, rax
test rax, rax
mov r14, r13
je 0x1400f7ae8
xor eax, eax
test al, al
je 0x1400f7b4c
jmp 0x1400f7b6c
mov eax, dword [0x140224090]
mov ecx, dword [0x140224094]
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
not ecx
add ecx, 0xbddfb202
mov eax, ecx
xor eax, 0xb7b16f90
or ecx, 0x484e906f
and ecx, eax
mov eax, 0x8aeb2ea3
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xbfa5c667
jbe 0x1400f7900
mov rax, qword [0x14022cb48]
nop word cs:[rax + rax]
mov eax, dword [0x140224098]
mov ecx, dword [0x14022409c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
not ecx
or ecx, 0x4de26fa
and ecx, 0xe6fea7fe
mov r13, qword [0x14022cb48]
cmp ecx, 0x291991fd
je 0x1400f7900
mov eax, dword [0x1402240a0]
imul eax, dword [0x1402240a4]
mov ecx, eax
or ecx, 0xec64023c
mov edx, eax
not edx
and edx, 0x11132881
mov r8d, ecx
and r8d, 0x42c8d742
imul r8d, edx
and ecx, 0xbd3728bd
or eax, 0xfd772abd
imul eax, ecx
add eax, r8d
add eax, 0x30c11fff
cmp eax, 0x46bf5062
jae 0x1400f79a0
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov esi, dword [0x1402240a8]
add esi, dword [0x1402240ac]
and esi, 0x204e21d5
add esi, 0x37920572
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rdi
call fcn.14014eed0
add rsp, 0x20
cmp esi, 0x71b53b95
ja 0x1400f79a0
nop word cs:[rax + rax]
mov eax, dword [0x1402240b0]
or eax, dword [0x1402240b4]
or eax, 0x9de4c989
imul eax, eax, 0xfeca9f6c
mov ecx, eax
xor ecx, 0x1e05cfdb
and eax, 0x1e05cfdc
or eax, ecx
cmp eax, 0x4efe7527
jae 0x1400f79e0
mov edi, 1
xor eax, eax
test al, al
je 0x1400f7b4c
jmp 0x1400f7b6c
mov eax, dword [0x140224030]
mov ecx, dword [0x140224034]
mov edx, eax
not edx
and eax, ecx
not ecx
or ecx, edx
not ecx
or ecx, eax
mov eax, ecx
xor eax, 0x60008104
or ecx, 0x1020
and ecx, eax
or ecx, 0x9fff6edb
cmp ecx, 0xc67b35bf
je 0x1400f7aa9
mov eax, dword [0x140224038]
xor edx, edx
div dword [0x14022403c]
add eax, 0x7611d275
mov ecx, eax
not ecx
and ecx, 0x42e0031d
mov edx, eax
and edx, 0xbd1ffce2
imul edx, ecx
mov ecx, eax
and ecx, 0x42e0031d
or eax, 0x42e0031d
imul eax, ecx
add eax, edx
mov ecx, 0xb2c7c26f
imul rcx, rax
shr rcx, 0x3f
ud2
ud2
ud2
mov eax, dword [0x140224060]
sub eax, dword [0x140224064]
and eax, 0x7caff7fd
imul rax, rax, 0x45eb5d7d
shr rax, 0x3d
imul eax, eax, 0x5ac7335c
ud2
ud2
sub rsp, 0x20
xor esi, esi
mov rcx, rdi
mov edx, r14d
xor r8d, r8d
mov r9, r12
call fcn.140150ad0
add rsp, 0x20
test sil, sil
je 0x1400f7b88
sub rsp, 0x20
mov rcx, rdi
mov edx, r14d
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
jmp 0x1400f7b4c
mov qword [rbp - 0x18], r14
test eax, eax
je 0x1400f8487
mov rcx, qword [r15]
mov r12, qword [r15 + 8]
test rcx, rcx
mov r11, qword [rbp - 0x18]
cmove r11, rcx
nop word cs:[rax + rax]
xor edx, edx
test rcx, rcx
setne al
mov r9d, dword [0x1402240e8]
mov r8d, dword [0x1402240ec]
not r9d
mov r10d, r9d
and r10d, r8d
not r10d
or r9d, r8d
and r9d, r10d
mov r8d, r9d
not r8d
and r9d, 0xd41865f9
mov r10d, r8d
and r10d, 0x2be79a06
imul r10d, r9d
mov r9d, r8d
and r9d, 0xd41865f9
or r8d, 0xd41865f9
imul r8d, r9d
add r8d, r10d
mov r9d, r8d
not r9d
mov r10d, r8d
and r10d, 0xb84d4c67
and r9d, 0x47b2b398
imul r9d, r10d
mov r10d, r8d
and r10d, 0x47b2b398
or r8d, 0x47b2b398
imul r8d, r10d
add r8d, r9d
add r8d, 0x51d57ff0
cmp r8d, 0xdcd693e3
ja 0x1400f7bb0
mov dl, al
xor r15d, r15d
mov esi, 0x8cf3cf9f
xorps xmm6, xmm6
xor r14d, r14d
nop word cs:[rax + rax]
cmp qword [rbp - 0x18], 0
je 0x1400f866d
dec qword [rbp - 0x18]
nop
mov eax, dword [0x1402240f0]
mov r8d, dword [0x1402240f4]
mov r9d, eax
and r9d, r8d
or eax, r8d
add eax, r9d
mov r8d, eax
not r8d
and r8d, 0x38d1420f
and eax, 0xc72ebdf0
sub eax, r8d
mov r8d, eax
and r8d, 0xcb4e0628
xor r8d, 0x23fb1c95
and eax, 0x48040228
add eax, eax
sub eax, r8d
cmp eax, 0xdf0000e3
ja 0x1400f7c80
mov eax, dword [0x1402240f8]
mov r8d, dword [0x1402240fc]
mov r9d, r8d
not r9d
mov r10d, eax
and r10d, r9d
or r9d, eax
not r9d
imul r9d, r10d
mov r10d, eax
and r10d, r8d
or eax, r8d
imul eax, r10d
add eax, r9d
mov r8d, eax
not r8d
and r8d, 0xa466fa71
and eax, 0x5b99058e
sub eax, r8d
imul rax, rax, 0x777c5707
shr rax, 0x3e
or eax, 0xd8fefafa
cmp eax, 0x5be9f856
jb 0x1400f7cd0
test r11, r11
je 0x1400f866d
dec r11
nop dword [rax + rax]
mov eax, dword [0x140224120]
mov r8d, dword [0x140224124]
add eax, r8d
add eax, 0xe46f19ee
mov r8d, eax
not r8d
and r8d, 0xd57a9881
mov r9d, eax
and r9d, 0x2a85677e
imul r9d, r8d
mov r8d, eax
and r8d, 0xd57a9881
or eax, 0xd57a9881
imul eax, r8d
add eax, r9d
cmp eax, 0x183f909f
jb 0x1400f7d40
nop dword [rax]
mov eax, dword [0x140224128]
imul eax, dword [0x14022412c]
xor eax, 0xd040cc3
add eax, 0xc94dd29c
mov r8d, eax
not r8d
and r8d, 0x76c99b1e
mov r9d, eax
and r9d, 0x893664e1
imul r9d, r8d
mov r8d, eax
and r8d, 0x76c99b1e
or eax, 0x76c99b1e
imul eax, r8d
add eax, r9d
cmp eax, 0xc597da25
jb 0x1400f7d90
test rdx, rdx
je 0x1400f8706
nop dword [rax + rax]
mov eax, dword [0x140224130]
mov edx, dword [0x140224134]
mov r8d, eax
not r8d
and r8d, edx
not edx
and edx, eax
sub edx, r8d
or edx, 0xb5fa729f
imul rdx, rsi
shr rdx, 0x3f
cmp edx, 0x63bddae0
je 0x1400f7df0
test r14, r14
jne 0x1400f8050
nop dword [rax + rax]
mov eax, dword [0x14022413c]
add eax, dword [0x140224138]
mov edx, eax
xor edx, 0xb89122b7
add edx, eax
and eax, 0x476edd48
sub edx, eax
mov eax, edx
xor eax, 0xc326d9a0
or edx, 0x3cd9265f
and edx, eax
mov eax, edx
xor eax, 0xe96f06e4
and eax, edx
cmp eax, 0x495c7d16
ja 0x1400f7e30
nop dword [rax]
mov eax, dword [0x140224140]
mov edx, dword [0x140224144]
mov r8d, eax
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, eax
mov eax, edx
xor eax, 0xb8b8fe6a
xor edx, 0x41450104
and edx, 0xf1f5876c
mov r8d, eax
and r8d, 0xe0a7893
imul r8d, edx
mov edx, eax
and edx, 0xf1f5876c
or eax, 0xf1f5876c
imul eax, edx
add eax, r8d
mov edx, eax
not edx
and edx, 0x7093bce5
mov r8d, eax
and r8d, 0x8f6c4318
imul r8d, edx
mov edx, eax
and edx, 0x7093bce4
or eax, 0x7093bce5
imul eax, edx
add eax, r8d
cmp eax, 0xde28fa9e
je 0x1400f7e70
test r12, r12
je 0x1400f7f67
mov eax, dword [0x140224148]
add eax, dword [0x14022414c]
mov edx, eax
xor edx, 0x49051118
xor eax, 0x9be7400
or edx, 0x22ae0c5
and edx, eax
not edx
and edx, 0x42bbe5dd
cmp edx, 0xeaab87e8
je 0x1400f7eff
mov eax, r12d
and eax, 7
nop word cs:[rax + rax]
test r15b, r15b
jne 0x1400f7f40
test rax, rax
je 0x1400f7f6f
xor edx, edx
mov r14, rcx
nop
mov r14, qword [r14 + 0x170]
inc rdx
cmp rax, rdx
jne 0x1400f7f50
mov r8, r12
sub r8, rdx
jmp 0x1400f7f75
mov r14, rcx
jmp 0x1400f803e
mov r8, r12
mov r14, rcx
mov eax, dword [0x140224150]
xor edx, edx
div dword [0x140224154]
nop word cs:[rax + rax]
mov eax, dword [0x140224158]
mov ecx, dword [0x14022415c]
mov edx, ecx
not edx
mov r9d, eax
and r9d, edx
or edx, eax
not edx
imul edx, r9d
mov r9d, eax
and r9d, ecx
or eax, ecx
imul eax, r9d
add eax, edx
add eax, 0xca5f5a68
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd74a5373
and ecx, 0x28b5ac8c
imul ecx, edx
mov edx, eax
and edx, 0x28b5ac8c
or eax, 0x28b5ac8c
imul eax, edx
add eax, ecx
imul rax, rax, 0x6e445193
shr rax, 0x3b
cmp eax, 0xa2b131
ja 0x1400f7f90
cmp r12, 8
jb 0x1400f803e
mov rax, qword [r14 + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov r14, qword [rax + 0x170]
add r8, 0xfffffffffffffff8
jne 0x1400f8000
xor r12d, r12d
xor ecx, ecx
nop word cs:[rax + rax]
mov eax, dword [0x140224170]
mov edx, dword [0x140224174]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
xor eax, 0x10108028
or eax, 0xe46d6fd7
cmp eax, 0xb5260042
jb 0x1400f8050
movzx eax, word [r14 + 0x16a]
cmp r12, rax
jae 0x1400f80b0
mov rsi, r12
mov r12, r14
jmp 0x1400f81b2
mov eax, dword [0x140224178]
sub eax, dword [0x14022417c]
or eax, 0xd025b790
add eax, 0x65b4f56c
or eax, 0xea72a45
cmp eax, 0x70ac85c3
ja 0x1400f80b0
mov r12, qword [r14]
test r12, r12
je 0x1400f86a6
mov eax, ecx
and eax, 1
or rcx, 1
add rcx, rax
movzx esi, word [r14 + 0x168]
nop word cs:[rax + rax]
mov eax, dword [0x140224188]
and eax, dword [0x14022418c]
add eax, 0xf0fb3a60
mov edx, eax
not edx
or edx, 0x4e71d87d
or eax, 0x3a358d67
and eax, edx
and eax, 0x7e75dd7f
cmp eax, 0xdecf8595
ja 0x1400f8100
mov r14, r12
cmp si, word [r12 + 0x16a]
jae 0x1400f80b0
mov eax, dword [0x140224180]
mov edx, dword [0x140224184]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
or eax, 0x2a3ec1f2
mov edx, eax
and edx, 0x7f82daaf
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xe009208
and r8d, 0xd1900845
imul r8d, r9d
and eax, 0x718248a7
or edx, 0xf19248e7
imul edx, eax
add edx, r8d
cmp edx, 0xb1617011
je 0x1400f8140
lea rax, [rsi + 1]
test rcx, rcx
mov qword [rbp - 0x30], r11
je 0x1400f8330
test r15b, r15b
jne 0x1400f81c3
mov r14, qword [r12 + rax*8 + 0x170]
mov r8, rcx
dec r8
mov r13, qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
je 0x1400f831e
mov eax, dword [0x140224198]
xor edx, edx
div dword [0x14022419c]
mov eax, dword [0x1402241a0]
mov edx, dword [0x1402241a4]
mov r9d, edx
not r9d
mov r10d, eax
and r10d, r9d
or r9d, eax
not r9d
imul r9d, r10d
mov r10d, eax
and r10d, edx
or eax, edx
imul eax, r10d
add eax, r9d
imul rax, rax, 0x1bf36f0b
shr rax, 0x3b
add eax, 0x7fbd2481
cmp eax, 0x9aa7bb3f
ja 0x1400f81f1
add rcx, 0xfffffffffffffffe
mov rax, r8
not rax
or rax, 7
lea rdx, [r8 + rax]
inc rdx
mov r9d, dword [0x1402241ac]
add r9d, dword [str._v_._]
mov r10d, r9d
xor r10d, 0x3bafce0e
and r10d, r9d
xor r10d, 0xb6db292e
imul r9, r10, 0x2846e51f
shr r9, 0x3d
cmp r9d, 0x783ca540
je 0x1400f824e
test rdx, rdx
je 0x1400f82b0
not rax
xor edx, edx
nop
mov r14, qword [r14 + 0x170]
dec r8
inc rdx
cmp rax, r8
jne 0x1400f8290
nop word cs:[rax + rax]
mov eax, dword [0x1402241b0]
imul eax, dword [0x1402241b4]
imul rax, rax, 0x43557357
shr rax, 0x3d
add eax, 0xeb013c12
and eax, 0x43000414
cmp eax, 0x1384eb69
jb 0x1400f82b0
cmp rcx, 7
jb 0x1400f831e
nop
mov rax, qword [r14 + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov r14, qword [rax + 0x170]
add r8, 0xfffffffffffffff8
jne 0x1400f82e0
xor eax, eax
jmp 0x1400f833a
mov r14, r12
mov r13, qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
mov qword [rbp - 0x28], rax
mov eax, dword [0x1402241b8]
mov ecx, dword [0x1402241bc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0x9ed73423
add eax, 0x65a8c8ca
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2412e86b
and ecx, 0xdbc51404
imul ecx, edx
mov edx, eax
and edx, 0xdbed1484
or eax, 0xdbed1484
adc al, 0xed
fisttp dword [rdi]
scasd eax, dword [rdi]
ret 0xc801
cmp eax, 0xf5c558d3
jne 0x1400f83d0
lea rax, [rsi + rsi*2]
mov r8, qword [r12 + rsi*8 + 8]
mov r9, qword [r12 + rax*8 + 0x60]
mov rax, qword [r12 + rax*8 + 0x70]
sub rsp, 0x40
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, rdi
xor edx, edx
call r13
add rsp, 0x40
nop
mov r15d, dword [0x1402241c0]
mov eax, dword [0x1402241c4]
mov ecx, eax
not ecx
mov edx, r15d
and edx, ecx
or ecx, r15d
not ecx
imul ecx, edx
mov edx, r15d
and edx, eax
or r15d, eax
imul r15d, edx
add r15d, ecx
mov eax, r15d
and eax, 0x96d6be5e
or r15d, 0x96d6be5e
add r15d, eax
mov eax, r15d
and eax, 0xe17aa3e
or r15d, 0xe17aa3e
add r15d, eax
and r15d, 0xde9b1235
lea rax, [rsi + rsi*2]
mov r8, qword [r12 + rsi*8 + 8]
mov r9, qword [r12 + rax*8 + 0x60]
mov rax, qword [r12 + rax*8 + 0x70]
sub rsp, 0x40
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], rax
mov rcx, rdi
xor edx, edx
call r13
add rsp, 0x40
cmp r15d, 0x992d62da
ja 0x1400f83d0
mov edx, 1
mov ecx, 0
test eax, eax
mov r11, qword [rbp - 0x30]
mov r15d, 0
mov esi, 0x8cf3cf9f
mov r12, qword [rbp - 0x28]
jne 0x1400f7c70
mov eax, dword [0x1402241d0]
imul eax, dword [0x1402241d4]
mov ecx, eax
not ecx
mov edx, eax
or edx, 0x322bff4f
mov r8d, edx
and r8d, 0x43964b01
and ecx, 0x8c4000b0
imul ecx, r8d
and edx, 0xbc69b4fe
or eax, 0xbe6bffff
imul eax, edx
add eax, ecx
mov ecx, 0xd26760f3
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x80855f
jbe 0x1400f84e7
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov r14d, dword [0x1402241d8]
sub r14d, dword [0x1402241dc]
mov eax, r14d
not eax
or eax, 0x7ad8966c
or r14d, 0x85276993
and r14d, eax
add r14d, 0xe17347ed
mov eax, r14d
and eax, 0x63da64bc
add eax, eax
sub r14d, eax
add r14d, 0xe3da64bc
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp r14d, 0x5c133d54
ja 0x1400f84f0
cdqe
shl rax, 0x20
movabs rcx, 0x4918da7c70187fef
mov rdx, 0xfffffffffffffffd
and rdx, rcx
xor rdx, rcx
xor rdx, rax
mov rax, qword [rbp - 0x20]
mov qword [rax + 8], rdx
mov qword [rax], 0
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
add rsp, 0x20
mov eax, dword [0x1402241e0]
xor edx, edx
div dword [0x1402241e4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1dd43834
and ecx, 0xe22bc7cb
imul ecx, edx
mov edx, eax
and edx, 0xe22bc7cb
or eax, 0xe22bc7cb
imul eax, edx
add eax, ecx
xor eax, 0xede838d1
cmp eax, 0x1b48ff6
jb 0x1400f8580
test rbx, rbx
je 0x1400f89a0
mov eax, dword [0x1402241e8]
xor edx, edx
div dword [0x1402241ec]
add eax, 0x39dc5dbb
cmp eax, 0x9b38d93
jae 0x1400f85f0
mov rax, qword [0x14022cb48]
nop dword [rax + rax]
mov eax, dword [0x1402241f0]
xor edx, edx
div dword [0x1402241f4]
mov ecx, eax
not ecx
or ecx, 0x471ad956
add ecx, eax
imul eax, ecx, 0x7e62e63f
add eax, 0xdc8a584a
mov rsi, qword [0x14022cb48]
cmp eax, 0xee0dd24b
ja 0x1400f85f0
mov eax, dword [0x1402241f8]
mov ecx, dword [0x1402241fc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0x1c81d008
or eax, 0xa01c2787
xor eax, 0x135f795a
cmp eax, 0xe8d22d99
jbe 0x1400f88f9
jmp 0x1400f893c
mov eax, dword [0x140224100]
and eax, dword [0x140224104]
mov ecx, eax
xor ecx, 3
xor eax, 0x2111040
or ecx, 0x20010840
and ecx, eax
or ecx, 0xddeee7bc
cmp ecx, 0xbf42af5b
mov r9, qword [rbp - 0x20]
jae 0x1400f8761
jmp 0x1400f87a6
ud2
mov eax, dword [0x140224160]
mov ecx, dword [0x140224164]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
shr eax, 2
imul rax, rax, 0x105501
shr rax, 0x32
lea ecx, [rax + 0x31e1364]
add eax, eax
sub eax, ecx
not eax
or eax, 0xf3f6bf19
cmp eax, 0x870f7ba2
jne 0x1400f88c3
invalid
jmp 0x1400f88f5
mov eax, dword [0x140224108]
mov ecx, dword [0x14022410c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
or eax, 0x1121544c
and eax, 0xf5a7fedd
imul eax, eax, 0x7c8695af
mov qword [r9], rdi
cmp eax, 0x7988dde1
jae 0x1400f87ab
mov qword [r9], rdi
jmp 0x1400f8761
mov eax, dword [0x140224114]
mov ecx, eax
xor ecx, ecx
not ecx
and ecx, dword [0x140224110]
xor ecx, eax
mov eax, 0x8bce0d8f
imul rax, rcx
shr rax, 0x3f
not eax
and eax, 0xfd377d53
cmp eax, 0x99a085a8
jb 0x1400f8803
mov eax, dword [0x1402240e0]
xor edx, edx
div dword [0x1402240e4]
or eax, 0x9c008d37
mov r8d, eax
xor r8d, 0xae05f82c
xor eax, 0x41ea00c0
and eax, 0x43eee0ec
mov edx, r8d
and edx, 0x20111210
imul edx, eax
mov eax, r8d
and eax, 0x53ee65cb
or r8d, 0x53eee5ef
imul r8d, eax
add r8d, edx
mov qword [rcx], 0
cmp r8d, 0xc8649d3e
jb 0x1400f89a0
mov qword [rcx], 0
jmp 0x1400f885d
mov eax, dword [0x140224168]
or eax, dword [0x14022416c]
imul eax, eax, 0x9422598d
add eax, 0xc74e0a0a
shr eax, 3
imul rax, rax, 0x8b4783f
shr rax, 0x37
ud2
ud2
mov eax, dword [0x140224200]
imul eax, dword [0x140224204]
or eax, 0xb7feab3b
mov ecx, eax
not ecx
or ecx, 0x653ecf4f
add eax, ecx
inc eax
imul ebx, eax, 0x1e71319b
invalid
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call fcn.14014eed0
add rsp, 0x20
cmp ebx, 0xf6d8636a
jbe 0x1400f8960
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400f88f9
mov eax, dword [0x140224208]
mov ecx, dword [0x14022420c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
mov ecx, eax
not ecx
or eax, 0xaee9894f
or ecx, 0x511676b0
and ecx, eax
not ecx
add ecx, 0x760c19be
cmp ecx, 0x409369cc
jb 0x1400f8960
nop word [rax + rax]
mov eax, dword [0x140224210]
xor edx, edx
div dword [0x140224214]
add eax, 0x75f9dc41
mov ecx, eax
xor ecx, 0x24f42de
and ecx, eax
cmp ecx, 0x10512bed
je 0x1400f89a0
jmp 0x1400f8810