Function at 0x140150d00
Capabilities:
Encode data using base64
Encode data using xor
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov rdi, r8
mov r15, rdx
mov r12, rcx
mov eax, dword [0x1415c2e18]
mov ecx, dword [0x1415c2e1c]
not eax
not ecx
or ecx, eax
not ecx
mov eax, ecx
and eax, 0x740c6546
and ecx, 0x80400
add ecx, ecx
sub eax, ecx
add eax, 0x82291481
cmp eax, 0x729edfcc
jae 0x140150d83
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x400
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov ecx, 0xac6a9f3d
nop dword [rax + rax]
mov eax, dword [0x1415c2e20]
xor edx, edx
div dword [0x1415c2e24]
mov edx, eax
and edx, 0x225134b5
xor eax, 0xa25134b5
lea edx, [rax + rdx*2]
mov eax, edx
not eax
and eax, 0xc05bbb
mov r8d, edx
and r8d, 0xff3fa444
imul r8d, eax
mov eax, edx
and eax, 0xc05bbb
or edx, 0xc05bbb
imul edx, eax
add edx, r8d
imul rdx, rcx
shr rdx, 0x3e
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
mov eax, 0x400
call fcn.14021cf50
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.14021cf50
sub rsp, rax
mov rsi, rsp
cmp edx, 0x3cb53103
ja 0x140150d90
mov qword [rbp - 0x40], r9
mov qword [rbp], r8
mov eax, dword [0x1415c2e28]
or eax, dword [str._XW]
mov ecx, eax
xor ecx, 0xce12d7b6
and ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0xf96d4140
and eax, 0x692bebf
imul eax, edx
mov edx, ecx
and edx, 0x692bebf
or ecx, 0x692bebf
imul ecx, edx
add ecx, eax
mov eax, 0xc53d78c3
imul rax, rcx
shr rax, 0x3e
cmp eax, 0xb832b188
jbe 0x140150e9b
sub rsp, 0x20
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.140152310
add rsp, 0x20
movabs r13, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x1415c2e30]
mov ecx, dword [0x1415c2e34]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ebx, eax
xor ebx, 0xe8156ea0
xor eax, 0x4ea8112
and eax, 0x4cfbe392
mov ecx, ebx
and ecx, 0xb3041c6d
or ecx, eax
xor ecx, 0x676f5138
and ebx, 0x2b94b2aa
or ebx, ecx
xor ebx, 0xea9f7d9
sub rsp, 0x20
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.140152310
add rsp, 0x20
cmp ebx, 0xfed1ac46
ja 0x140150eb0
mov r10, qword [rsi]
xor eax, eax
nop
test al, al
jne 0x140150f30
mov r9, qword [rsi + 8]
cmp r10, r13
jne 0x1401512b3
mov rax, r9
not rax
or rax, 3
add rax, r9
inc rax
mov ecx, 0xd8bc93ef
nop word cs:[rax + rax]
mov edx, dword [0x1415c2f40]
add edx, dword [0x1415c2f44]
mov r8d, edx
and r8d, 0x71dcc5c
add r8d, r8d
sub edx, r8d
add edx, 0x71dcc5c
xor edx, 0x76cb597b
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0x4f9f7371
ja 0x140150f60
cmp rax, 2
jg 0x140151240
cmp rax, 1
jne 0x1401521f0
lea rbx, [r9 - 1]
mov rdi, qword [r9 - 1]
mov rsi, qword [r9 + 7]
mov eax, 0x947d3cb1
nop dword [rax]
mov ecx, dword [0x1415c2f58]
imul ecx, dword [0x1415c2f5c]
imul rcx, rcx, 0x47dc336d
shr rcx, 0x3e
mov edx, ecx
xor edx, 0xe89c605b
add edx, ecx
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0xfb29d8c6
ja 0x140150fc0
mov rax, qword [rsi]
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x140151000
test rax, rax
je 0x140151061
sub rsp, 0x20
mov rcx, rdi
call rax
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415c2f60]
mov ecx, dword [0x1415c2f64]
add eax, ecx
add eax, 0xa185cb43
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd614aa5b
and ecx, 0x29eb55a4
imul ecx, edx
mov edx, eax
and edx, 0x29eb55a4
or eax, 0x29eb55a4
imul eax, edx
add eax, ecx
cmp eax, 0xf7343d9b
ja 0x140151020
mov rax, qword [rsi + 8]
mov ecx, 0xdd347fb1
nop word [rax + rax]
mov edx, dword [0x1415c2f68]
add edx, dword [0x1415c2f6c]
imul rdx, rcx
shr rdx, 0x3e
mov r8d, edx
not r8d
or r8d, 0xe7006c5
add edx, r8d
inc edx
and edx, 0x2097e98a
cmp edx, 0x91737cc
je 0x140151070
test rax, rax
je 0x1401511f6
mov rax, qword [rsi + 0x10]
nop word cs:[rax + rax]
mov ecx, dword [0x1415c2f70]
mov edx, dword [0x1415c2f74]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
mov edx, ecx
or edx, 0xd8edaa35
mov r8d, ecx
not r8d
and r8d, 0x510518a
mov r9d, edx
and r9d, 0xaa42a454
imul r9d, r8d
and edx, 0x55bd5bab
or ecx, 0xddfdfbbf
imul ecx, edx
add ecx, r9d
imul rcx, rcx, 0x156e5959
shr rcx, 0x3a
cmp ecx, 0xbd8b42bc
ja 0x1401510c0
nop dword [rax]
mov ecx, dword [0x1415c2f78]
xor ecx, dword [0x1415c2f7c]
or ecx, 0x7d7a4e8d
add ecx, 0x4e5fdacf
mov edx, ecx
not edx
or ecx, 0x2105d7c2
or edx, 0xfef02c31
and edx, ecx
add edx, 0xa87c0586
jae 0x140151140
cmp rax, 0x11
jb 0x1401511dc
nop dword [rax + rax]
mov eax, dword [0x1415c2f80]
xor edx, edx
div dword [0x1415c2f84]
add eax, 0x2e0a78bc
cmp eax, 0xc445b84e
ja 0x140151180
mov rdi, qword [rdi - 8]
nop
mov eax, dword [0x1415c2f88]
xor edx, edx
div dword [0x1415c2f8c]
xor eax, 0xfd5e6f3f
imul rcx, rax, 0x3c3a7135
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
mov ecx, eax
not ecx
or ecx, 0xb319835
add eax, ecx
inc eax
cmp eax, 0x211737f
ja 0x1401511a0
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x1415c2f90]
add eax, dword [0x1415c2f94]
mov ecx, 0x8bf126d1
imul rcx, rax
shr rcx, 0x3e
mov eax, ecx
not eax
or eax, 0x2c0f9151
add eax, ecx
inc eax
or eax, 0x14e99767
cmp eax, 0x9f4b47df
jbe 0x1401520a3
jmp 0x1401520fd
mov eax, dword [0x1415c2f48]
mov ecx, dword [0x1415c2f4c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0xa86c40e
add eax, 0x7755bc7d
and eax, 0x1c865871
cmp eax, 0xc59794f
je 0x140151240
nop word cs:[rax + rax]
mov eax, dword [0x1415c2f50]
sub eax, dword [0x1415c2f54]
imul eax, eax, 0xb58775b7
or eax, 0x21cc61f
cmp eax, 0x94cb146e
je 0x140151290
jmp 0x1401521f0
mov eax, dword [0x1415c2e38]
and eax, dword [0x1415c2e3c]
xor eax, 0x71460762
add eax, 0x3284c6e3
cmp eax, 0x9ff54958
jae 0x1401512e0
mov qword [r14], 0
nop word [rax + rax]
mov eax, dword [0x1415c2e40]
imul eax, dword [0x1415c2e44]
add eax, 0x8bb3415f
mov ecx, eax
and ecx, 0x46cea2fe
xor eax, 0xc6cea2fe
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa0a46dc6
and ecx, 0x5f5b9239
imul ecx, edx
mov edx, eax
and edx, 0x5f5b9239
or eax, 0x5f5b9239
imul eax, edx
add eax, ecx
mov qword [r14], 0
cmp eax, 0x7a6e8b8a
je 0x1401512e0
mov eax, dword [0x1415c2e48]
mov ecx, dword [0x1415c2e4c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
or ecx, 0x2b1fa8e1
and ecx, 0x2b9fa8e9
and eax, 0x200
or eax, ecx
cmp eax, 0xb788f682
jbe 0x140151390
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], 0
mov qword [rbp - 0x38], r10
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x20], r12
nop dword [rax]
mov eax, dword [0x1415c2e50]
mov ecx, dword [0x1415c2e54]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0xa15b37fd
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], 0
cmp eax, 0x5661eadb
jb 0x1401513a0
mov r13d, 0x200
mov eax, 2
mov qword [rbp - 8], rax
xor esi, esi
mov ebx, 0x8e65526f
xor eax, eax
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [rbp - 0x30], rax
xor edi, edi
nop dword [rax]
cmp r13, 0x201
jae 0x140151430
mov eax, 0x200
mov qword [rbp - 0x28], rax
mov r15, qword [rbp - 0x40]
mov r12, r13
jmp 0x1401514b6
mov eax, dword [0x1415c2e58]
add eax, dword [0x1415c2e5c]
or eax, 0x6f8bfbfd
add eax, 0x960ad7b0
cmp eax, 0x21f3335c
ja 0x140151430
sub r13, rdi
mov eax, dword [0x1415c2e60]
sub eax, dword [0x1415c2e64]
imul eax, eax, 0x14a174e7
mov ecx, eax
xor ecx, 0x110a0aea
and ecx, eax
mov eax, ecx
not eax
or eax, 0x445828ec
add eax, ecx
cmp eax, 0xadb2ed10
je 0x140151450
mov rax, qword [rbp - 0x30]
sub rax, rdi
cmp r13, rax
ja 0x140151606
mov rax, qword [rbp - 0x10]
mov ecx, 0xffffffff
cmp rax, rcx
mov edi, 0xffffffff
cmovb rdi, rax
mov qword [r14 + 0x10], rdi
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdi
mov r15, qword [rbp - 8]
mov r12, rdi
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rbp - 0x18]
mov rdx, r15
mov r8d, r12d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
add rsp, 0x20
mov r13d, eax
test eax, eax
jne 0x140151500
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
nop word [rax + rax]
test sil, sil
jne 0x1401514f0
test eax, eax
jne 0x140151943
nop dword [rax]
mov eax, dword [0x1415c2ea0]
add eax, dword [0x1415c2ea4]
mov ecx, eax
not ecx
or eax, 0x1b08c208
or ecx, 0x80400091
and ecx, eax
or ecx, 0x64b73d66
mov eax, ecx
and eax, 0x5e3b9386
xor ecx, 0xde3b9386
lea eax, [rcx + rax*2]
cmp eax, 0x6336ed43
je 0x140151500
mov r13d, r13d
nop dword [rax]
mov eax, dword [0x1415c2ea8]
sub eax, dword [0x1415c2eac]
add eax, 0x17a2355c
mov ecx, eax
xor ecx, 0x121979fa
xor eax, 0x6d468601
and eax, 0x6d56a699
mov edx, ecx
and edx, 0x92a95966
or edx, eax
xor edx, 0x43b0a1a
and ecx, 0x696dac83
or ecx, edx
cmp ecx, 0x7e5aa292
jb 0x140151540
cmp r12, r13
jne 0x1401515c0
mov eax, dword [0x1415c2eb0]
sub eax, dword [0x1415c2eb4]
mov ecx, eax
not ecx
or ecx, 0x3fa7f172
or eax, 0xc0580e8d
and eax, ecx
imul eax, eax, 0x6eda65d2
add eax, 0xb4fe396
cmp eax, 0xd792bfb2
jae 0x140151700
jmp 0x140151712
mov eax, dword [0x1415c2ec0]
imul eax, dword [0x1415c2ec4]
mov ecx, eax
not ecx
or ecx, 0x29cf5f0b
xor ecx, 0xce23f3b5
and eax, 0x4620a0b4
add eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0xbe13a644
and ecx, eax
cmp ecx, 0x5d8ec35c
ja 0x1401515c0
cmp r12, r13
jb 0x140151410
jmp 0x1401517fd
mov eax, dword [0x1415c2e68]
mov ecx, dword [0x1415c2e6c]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
and ecx, 0xcb98137c
add ecx, 0x290b8635
and ecx, 0xdfba1ffc
xor ecx, 0x92064fe
cmp ecx, 0x6dfb3515
jne 0x140151656
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
mov r8, r13
call fcn.140247fa0
add rsp, 0x20
mov eax, dword [0x1415c2e70]
sub eax, dword [0x1415c2e74]
mov ecx, eax
not ecx
or eax, 0xf4350beb
or ecx, 0xbcaf414
and ecx, eax
not ecx
mov eax, ecx
add eax, 0xd9910365
not eax
or eax, 0xbd18b08f
lea r15d, [rcx + rax]
add r15d, 0xd9910365
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
mov r8, r13
call fcn.140247fa0
add rsp, 0x20
cmp r15d, 0x964c348
je 0x140151640
mov rax, qword [r14]
mov qword [rbp - 0x10], rax
nop word cs:[rax + rax]
mov eax, dword [0x1415c2e78]
sub eax, dword [0x1415c2e7c]
or eax, 0xf70b998f
mov ecx, eax
and ecx, 0x39a499b3
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xb9a499b3
xor eax, 0x93d0f222
add eax, 0xa261cf65
jae 0x1401516c0
mov rax, qword [r14 + 8]
mov qword [rbp - 8], rax
jmp 0x14015148e
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
test sil, sil
je 0x140151730
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
jmp 0x140151700
mov ecx, dword [0x1415c2eb8]
add ecx, dword [0x1415c2ebc]
mov edx, ecx
and edx, 0x2b10ddb
add edx, edx
sub ecx, edx
add ecx, 0x82b10ddb
mov edx, ecx
xor edx, 0x9028010a
and edx, ecx
or edx, 0x6657fcf4
cmp edx, 0xa3ff1036
ja 0x140151730
cmp eax, 0x7a
jne 0x14015199e
nop
mov eax, dword [0x1415c2ec8]
xor eax, dword [0x1415c2ecc]
add eax, 0xfe6177c2
imul rax, rbx
shr rax, 0x3d
mov ecx, eax
not ecx
or ecx, 0x35a905f4
add eax, ecx
inc eax
cmp eax, 0x928b3e30
ja 0x140151770
lea r13, [r12 + r12]
mov eax, dword [0x1415c2ed0]
xor edx, edx
div dword [0x1415c2ed4]
mov eax, dword [0x1415c2ed8]
xor edx, edx
div dword [0x1415c2edc]
mov ecx, eax
and ecx, 0x13c4003
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0x13c4003
imul rax, rax, 0x155ef0f9
shr rax, 0x3c
add eax, 0x95257201
cmp eax, 0x4278a5e2
jb 0x1401517b0
cmp r12, 0x7fffffff
mov eax, 0xffffffff
cmova r13, rax
jmp 0x140151410
cmp qword [rbp - 0x28], r13
jb 0x1401519f7
mov eax, dword [0x1415c2ee8]
mov ecx, dword [0x1415c2eec]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0xd21f2cce
cmp eax, 0x683905dc
mov rdi, qword [rbp]
mov r14, qword [rbp - 8]
jne 0x140151860
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
mov r8, r13
call fcn.14014ae90
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415c2ef0]
xor edx, edx
div dword [0x1415c2ef4]
imul rsi, rax, 0x42410da9
shr rsi, 0x3d
mov eax, esi
not eax
lea ecx, [rsi - 0x1023c5b8]
mov edx, ecx
and edx, 0xa20c1a02
and eax, 0x10030015
imul eax, edx
and ecx, 0x4dd02049
or esi, 0xffdf3a5d
imul esi, ecx
add esi, eax
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
mov r8, r13
call fcn.14014ae90
add rsp, 0x20
cmp esi, 0xa37f0f1
jb 0x140151860
mov rbx, qword [rbp - 0x20]
movabs r15, 0x8000000000000000
mov eax, dword [0x1415c2ef8]
xor edx, edx
div dword [0x1415c2efc]
add eax, 0xab17c72c
xor eax, 0xf333e49e
cmp eax, 0xd3930d5e
ja 0x1401518d0
cmp qword [rbp - 0x10], 0
je 0x140151ba8
xor eax, eax
test al, al
je 0x140151910
mov rax, qword [0x1415d3918]
nop word [rax + rax]
mov eax, dword [0x1415c2f00]
sub eax, dword [0x1415c2f04]
or eax, 0x72ed9a98
add eax, 0xa4a7161b
mov rdi, qword [0x1415d3918]
cmp eax, 0x6cd84b0c
jb 0x140151910
xor eax, eax
test al, al
je 0x140151b0f
jmp 0x140151b5c
mov eax, dword [0x1415c2e84]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415c2e80]
xor ecx, eax
add ecx, 0xc756d0fa
mov eax, ecx
not eax
and eax, 0xbc7a6622
mov edx, ecx
and edx, 0x438599dd
imul edx, eax
mov eax, ecx
and eax, 0xbc7a6622
or ecx, 0xbc7a6622
imul ecx, eax
add ecx, edx
cmp ecx, 0x62431bd5
movabs r15, 0x8000000000000000
mov rdi, qword [rbp]
jbe 0x140151a06
jmp 0x140151a57
mov eax, dword [0x1415c2ee0]
sub eax, dword [0x1415c2ee4]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa8ac9371
and ecx, 0x57536c8e
imul ecx, edx
mov edx, eax
and edx, 0x57536c8e
or eax, 0x57536c8e
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x372345d6
add ecx, ecx
sub eax, ecx
add eax, 0xb72345d7
xor eax, 0x8867623b
cmp eax, 0x2c34bd00
jae 0x140151ff3
jmp 0x140151ffb
xor eax, eax
test al, al
je 0x140152001
jmp 0x140152045
mov eax, dword [0x1415c2e88]
xor edx, edx
div dword [0x1415c2e8c]
mov ecx, eax
not ecx
or ecx, 0xfcfacc2f
add eax, ecx
add eax, 0x6d74a44f
imul rsi, rax, 0xbb9aec9
shr rsi, 0x3b
sub rsp, 0x20
call fcn.14021a080
add rsp, 0x20
mov r14d, eax
shl r14, 0x20
or r14, 2
mov qword [rdi + 8], r14
mov qword [rdi], r15
cmp esi, 0xa11bbed5
jbe 0x140151a75
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [rdi + 8], rax
mov qword [rdi], r15
jmp 0x140151a06
cmp qword [rbp - 0x10], 0
mov rbx, qword [rbp - 0x20]
je 0x140151aa0
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 8]
call fcn.140219910
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x1415c2e90]
xor edx, edx
div dword [0x1415c2e94]
mov ecx, eax
not ecx
or ecx, 0x63c80209
add eax, ecx
inc eax
mov ecx, eax
xor ecx, 0x921b5bdb
and eax, 0x6de4a424
add eax, eax
sub eax, ecx
add eax, 0xe012c0c5
cmp eax, 0x3dd35060
jb 0x140151aa0
nop dword [rax]
mov eax, dword [0x1415c2e98]
mov ecx, dword [0x1415c2e9c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
add eax, 0x96fa20a8
xor eax, 0x69011c1a
add eax, 0x13ee7e2
cmp eax, 0x94086248
ja 0x140151ae0
jmp 0x140151c70
mov eax, dword [0x1415c2f08]
mov ecx, dword [0x1415c2f0c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
and eax, 0x687ac4f2
xor ecx, 0x97853b0d
lea eax, [rcx + rax*2]
imul esi, eax, 0xc721d057
xor esi, 0x439cc01a
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call fcn.140219910
add rsp, 0x20
cmp esi, 0x4eddfaa3
jbe 0x140151b80
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140151b0f
mov eax, dword [0x1415c2f10]
xor eax, dword [0x1415c2f14]
add eax, 0x5ddc0168
imul rax, rax, 0x6bc0ac5b
shr rax, 0x3e
xor eax, 0x1523e62b
cmp eax, 0xa150ef1c
ja 0x140151b80
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x140151bb0
mov rax, qword [rbp]
mov rax, qword [rax]
nop dword [rax + rax]
mov ecx, dword [0x1415c2f28]
sub ecx, dword [0x1415c2f2c]
imul rdx, rcx, 0x307e59a5
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1e
or ecx, 0xec8068a0
cmp ecx, 0x740d8abf
jb 0x140151bc0
cmp rax, r15
jne 0x140151e95
mov eax, 0x947c56fb
nop dword [rax]
mov ecx, dword [0x1415c2f30]
sub ecx, dword [0x1415c2f34]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x2a4300a
mov edx, ecx
xor edx, 0x1d54a1b9
add edx, ecx
and ecx, 0x2ab5e46
sub edx, ecx
cmp edx, 0xf6363b96
ja 0x140151c00
nop word cs:[rax + rax]
mov eax, dword [0x1415c2f38]
mov ecx, dword [0x1415c2f3c]
not eax
not ecx
and ecx, eax
not ecx
and ecx, 0x114c3c3d
xor ecx, 0xe141b3aa
cmp ecx, 0xab0fdb96
jbe 0x140151c40
mov rax, qword [rbp]
mov r14, qword [rax + 8]
mov qword [rbx], r15
mov eax, r14d
and eax, 3
cmp rax, 2
jg 0x140151e67
cmp eax, 1
mov r15, qword [rbp - 0x18]
jne 0x140151eab
lea rsi, [r14 - 1]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140151ca0
mov rdi, qword [r14 - 1]
mov ecx, 0xa624571d
nop dword [rax]
mov eax, dword [0x1415c2fe0]
xor edx, edx
div dword [0x1415c2fe4]
imul rax, rcx
shr rax, 0x3f
or eax, 0xbf5fa78c
cmp eax, 0x8f4b5a26
jb 0x140151cb0
mov rbx, qword [r14 + 7]
mov rax, qword [rbx]
test rax, rax
je 0x140151d21
sub rsp, 0x20
mov rcx, rdi
call rax
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415c2fe8]
xor eax, dword [0x1415c2fec]
mov ecx, eax
xor ecx, 0x389aa806
add ecx, eax
and eax, 0x476557f9
sub ecx, eax
xor ecx, 0x400c84bc
or ecx, 0xafd33a43
cmp ecx, 0x460d5da
jb 0x140151cf0
mov r8, qword [rbx + 8]
mov rcx, qword [rbx + 0x10]
mov r9d, 0x8721a111
nop
mov eax, dword [0x1415c2ff0]
xor edx, edx
div dword [0x1415c2ff4]
shr eax, 1
imul rax, r9
shr rax, 0x3e
xor eax, 0x64879317
mov edx, eax
neg edx
dec eax
and eax, 0x44829017
imul eax, eax, 0x192800c8
and edx, 0x82506c23
imul edx, edx, 0xdffafcff
add edx, eax
cmp edx, 0xfdb044f
jb 0x140151d30
test r8, r8
je 0x140151f42
xor eax, eax
nop
test al, al
jne 0x140151d80
cmp rcx, 0x11
jb 0x140151e32
nop
mov eax, dword [0x1415c2ff8]
mov ecx, dword [0x1415c2ffc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
imul rcx, rax, 0x311b1513
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x5685697e
je 0x140151d90
mov rdi, qword [rdi - 8]
nop dword [rax + rax]
mov eax, dword [0x1415c3000]
mov ecx, dword [0x1415c3004]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0xeeeb18c8
mov edx, ecx
not edx
and edx, 0x3ed0fc46
mov r8d, eax
and r8d, 0xc02b0088
imul r8d, edx
and eax, 0x2ec01840
or ecx, 0x3ed0fc46
imul ecx, eax
add ecx, r8d
imul eax, ecx, 0x7774029e
cmp eax, 0xe07032a9
ja 0x140151de0
mov eax, dword [0x1415c3008]
mov ecx, dword [0x1415c300c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x921f5acf
and eax, 0x121f5acf
add eax, eax
sub eax, ecx
cmp eax, 0xf9412c2f
jne 0x140151ee3
jmp 0x140151f27
mov r15, qword [rbp - 0x18]
nop dword [rax + rax]
mov eax, dword [0x1415c2fdc]
add eax, dword [0x1415c2fd8]
imul rax, rax, 0x13164647
shr rax, 0x3b
or eax, 0x26437321
cmp eax, 0x8e3a6eca
je 0x140151e70
jmp 0x140151eab
mov rax, qword [rbp]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov r15, qword [rbp - 0x18]
cmp qword [rbp - 0x38], 0
je 0x1401522ed
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x140151ec0
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1401522ed
mov ebx, dword [0x1415c3010]
mov eax, dword [0x1415c3014]
mov ecx, ebx
xor ecx, eax
not ecx
or ebx, eax
and ebx, ecx
add ebx, 0x70a91b90
or ebx, 0xb9fff5c6
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x95cfc7b2
jne 0x140151f42
mov rcx, qword [0x1415d3918]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call fcn.140219910
add rsp, 0x20
jmp 0x140151ee3
mov eax, dword [0x1415c3018]
xor edx, edx
div dword [0x1415c301c]
or eax, 0xd4c8f545
imul rax, rax, 0x2c3129b7
shr rax, 0x3d
or eax, 0xf8f5c6ce
xor eax, 0x434b9120
cmp eax, 0xa54ee9b8
jb 0x140151fc7
mov ecx, dword [0x1415c3020]
mov eax, dword [0x1415c3024]
xor eax, ecx
not eax
and eax, ecx
mov ecx, eax
xor ecx, 0x5408c32d
xor eax, 0x449fcdc1
and eax, ecx
mov ecx, eax
not ecx
and ecx, 0xc625fcd3
mov edx, eax
and edx, 0x39da032c
imul edx, ecx
mov ecx, eax
and ecx, 0xc625fcd3
or eax, 0xc625fcd3
imul eax, ecx
add eax, edx
mov rcx, qword [0x1415d3918]
cmp eax, 0x8dd33560
jae 0x140151fd0
mov rax, qword [0x1415d3918]
jmp 0x140151f71
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp qword [rbp - 0x38], 0
jne 0x140151eb6
jmp 0x1401522ed
ud2
ud2
mov eax, dword [0x1415c2f18]
mov ecx, dword [0x1415c2f1c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul eax, eax, 0x811bf02c
xor eax, 0x10800420
or eax, 0x2f4512d4
ud2
ud2
mov eax, dword [0x1415c2f98]
mov ecx, dword [0x1415c2f9c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
and eax, 0x93555cad
mov ecx, eax
xor ecx, 0x54404436
or eax, 0x83151889
and eax, ecx
mov ecx, eax
and ecx, 0x11500c81
add ecx, ecx
sub eax, ecx
mov rsi, qword [0x1415d3918]
cmp eax, 0xa44cd3ed
jne 0x140152106
mov rax, qword [0x1415d3918]
jmp 0x1401520a3
mov eax, dword [0x1415c2fa0]
mov ecx, dword [0x1415c2fa4]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
not eax
or eax, 0x28880540
and ecx, 0x1426096
and eax, 0xea9d0740
or eax, ecx
mov ecx, eax
not ecx
xor eax, 0x3e12cbf5
or ecx, 0x1612cab5
and ecx, eax
cmp ecx, 0x681f210
jae 0x140152170
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x1415c2fa8]
xor edx, edx
div dword [0x1415c2fac]
imul edi, eax, 0xb89eb703
add edi, 0xc0aace84
and edi, 0x3284602d
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.140219910
add rsp, 0x20
cmp edi, 0xb9c791d3
ja 0x140152170
nop dword [rax]
mov eax, dword [0x1415c2fb0]
mov ecx, dword [0x1415c2fb4]
mov edx, eax
not edx
or edx, ecx
not ecx
or ecx, eax
not ecx
not edx
or edx, ecx
or edx, 0x40010950
and edx, 0x4a271976
imul eax, edx, 0xa12397d2
cmp eax, 0xed017403
je 0x1401521b0
nop word cs:[rax + rax]
mov eax, dword [0x1415c2fb8]
sub eax, dword [0x1415c2fbc]
imul eax, eax, 0x9b4d8feb
cmp eax, 0x9b118560
je 0x1401521f0
mov eax, dword [0x1415c2fc0]
add eax, dword [0x1415c2fc4]
mov ecx, eax
not ecx
and ecx, 0x905cba3c
mov edx, eax
and edx, 0x6fa345c3
imul edx, ecx
mov ecx, eax
and ecx, 0x905cba3c
or eax, 0x905cba3c
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xee0338b9
add ecx, eax
and eax, 0x11fcc744
sub ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x1e99257c
and eax, 0xe166da83
imul eax, edx
mov edx, ecx
and edx, 0xe166da81
or ecx, 0xe166da83
imul ecx, edx
add ecx, eax
cmp ecx, 0x431fc6f4
jb 0x1401522ac
mov eax, dword [0x1415c2fc8]
sub eax, dword [0x1415c2fcc]
add eax, 0x89e89ddf
shr eax, 3
imul rax, rax, 0x475cac3
shr rax, 0x36
imul eax, eax, 0xf5c30157
mov qword [r12], r13
cmp eax, 0xfcfdb1bf
jbe 0x1401522c0
mov qword [r12], r13
jmp 0x14015227c
mov eax, dword [0x1415c2fd0]
add eax, dword [0x1415c2fd4]
imul rax, rax, 0x281abeeb
shr rax, 0x3b
or eax, 0x92074440
xor eax, 0x16014211
or eax, 0x21d080ae
cmp eax, 0x3340afbc
jbe 0x1401522c0
xor eax, eax
nop
test al, al
jne 0x1401522f0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret