Function at 0x1401a5a40
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x478
mov r14, rdx
mov eax, dword [0x1415a3910]
or eax, dword [0x1415a3914]
mov r9d, eax
not r9d
and r9d, 0x9f2f7d70
mov edx, eax
and edx, 0x60d0828f
imul edx, r9d
mov r9d, eax
and r9d, 0x9f2f7d70
or eax, 0x9f2f7d70
imul eax, r9d
add eax, edx
mov edx, eax
xor edx, 0xbda55a9c
add edx, eax
and eax, 0x425aa560
sub edx, eax
or edx, 0x2c1f0c36
cmp edx, 0x9acce836
jb 0x1401a5adc
mov eax, dword [0x1415a3918]
add eax, dword [0x1415a391c]
imul eax, eax, 0x167dd702
xor eax, 0xa480c311
imul eax, eax, 0x3e94601f
mov qword [rsp + 0x38], 0
cmp eax, 0x815808f1
jbe 0x1401a5ae7
mov qword [rsp + 0x38], 0
jmp 0x1401a5aaf
mov eax, dword [0x1415a3920]
mov r9d, dword [0x1415a3924]
mov edx, eax
not edx
and edx, r9d
not r9d
and r9d, eax
sub r9d, edx
xor r9d, 0x2bf755db
add r9d, 0xf66ebab8
xor r9d, 0x8cbb2811
cmp r9d, 0x7dc42d0a
jae 0x1401a5b34
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x50], rcx
nop
mov eax, dword [0x1415a3928]
xor eax, dword [0x1415a392c]
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x48], 0
cmp eax, 0x3522f3b5
je 0x1401a5b40
mov r13d, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
mov esi, 0xffffffff
xor eax, eax
mov qword [rsp + 0x30], rax
xor ebx, ebx
nop word cs:[rax + rax]
cmp r13, 0x201
jae 0x1401a5bb0
mov edi, 0x200
lea rbp, [rsp + 0x78]
mov r12, r13
jmp 0x1401a5d24
mov eax, dword [0x1415a3930]
xor edx, edx
div dword [0x1415a3934]
mov r8d, 0xb523fffb
mov eax, dword [0x1415a3938]
mov ecx, dword [0x1415a393c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0xb951277
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xb951277
imul rax, r8
shr rax, 0x3b
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfffffff0
and ecx, 0x86c55aef
imul ecx, edx
mov edx, eax
and edx, 0xf
or eax, 0x86c55aef
imul eax, edx
add eax, ecx
cmp eax, 0x970db875
ja 0x1401a5bc4
sub r13, rbx
mov r8, qword [rsp + 0x30]
mov eax, dword [0x1415a3940]
mov ecx, dword [0x1415a3944]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xd7342d63
and ecx, 0x28cbd29c
imul ecx, edx
mov edx, eax
and edx, 0x28cbd29c
or eax, 0x28cbd29c
imul eax, edx
add eax, ecx
imul eax, eax, 0x57d52bf0
cmp eax, 0x780dc339
je 0x1401a5c23
mov rcx, r8
not rcx
and rcx, rbx
mov rax, rbx
not rax
and rax, r8
sub rax, rcx
mov rbp, qword [rsp + 0x28]
nop word cs:[rax + rax]
mov ecx, dword [0x1415a3948]
add ecx, dword [0x1415a394c]
and ecx, 0xdaaa713d
add ecx, 0xf8346e4b
mov edx, ecx
xor edx, 0xfe47f544
or ecx, 0xb80abb
and ecx, edx
cmp ecx, 0x556ec6ad
ja 0x1401a5c90
cmp r13, rax
jbe 0x1401a5d00
mov eax, dword [0x1415a3950]
add eax, dword [0x1415a3954]
mov ecx, eax
xor ecx, 0x29bf030
xor eax, 0x8891900a
and eax, ecx
and eax, 0xcedbf53a
cmp eax, 0x26eb0daf
lea r15, [rsp + 0x38]
jae 0x1401a6140
jmp 0x1401a6250
cmp r8, rsi
mov ebx, 0xffffffff
mov rax, r8
mov qword [rsp + 0x30], r8
cmovb rbx, r8
mov qword [rsp + 0x48], rbx
mov rdi, rbx
mov qword [rsp + 0x28], rbp
mov r12, rbx
mov eax, dword [0x1415a3970]
mov ecx, dword [0x1415a3974]
mov edx, eax
not edx
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x5102146
and eax, 0xb2005401
or eax, r9d
or edx, r8d
and r8d, 0x5102146
and ecx, 0xb2005401
or ecx, r8d
xor ecx, eax
not edx
or edx, ecx
or edx, 0x48ef8ab8
add edx, 0xb3bbdb17
imul rax, rdx, 0x2d452d9b
shr rax, 0x3c
cmp eax, 0x2616a218
jbe 0x1401a5da0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
mov edx, r12d
mov r8, rbp
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
nop dword [rax]
mov eax, dword [0x1415a3978]
sub eax, dword [0x1415a397c]
add eax, 0x4e445044
mov r13d, eax
xor r13d, 0x353cb597
and r13d, eax
mov eax, r13d
and eax, 0xc7c194
add eax, eax
sub r13d, eax
xor ecx, ecx
call fcn.14020bc80
mov rcx, r14
mov edx, r12d
mov r8, rbp
xor r9d, r9d
call fcn.14020ce10
cmp r13d, 0xcb249c69
je 0x1401a5da0
mov r15d, eax
test eax, eax
jne 0x1401a5ef0
mov eax, dword [0x1415a3980]
mov ecx, dword [0x1415a3984]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0x597f7000
xor eax, 0x913276c
cmp eax, 0xd3cca639
ja 0x1401a6130
nop word cs:[rax + rax]
mov eax, dword [0x1415a3988]
imul eax, dword [0x1415a398c]
or eax, 0xb31654ba
imul r13, rax, 0x18fc88b5
shr r13, 0x3c
call fcn.14020b260
cmp r13d, 0xa729e3f5
je 0x1401a6130
mov ecx, eax
nop word cs:[rax + rax]
mov eax, dword [0x1415a3990]
xor edx, edx
div dword [0x1415a3994]
add eax, 0x4fd7056a
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x30d9450c
and edx, 0xcf26baf3
imul edx, r8d
mov r8d, eax
and r8d, 0xcf26baf3
or eax, 0xcf26baf3
imul eax, r8d
add eax, edx
mov edx, eax
not edx
and edx, 0xb1f5e04b
mov r8d, eax
and r8d, 0x4e0a1fb4
imul r8d, edx
mov edx, eax
and edx, 0xb1f5e04b
or eax, 0xb1f5e04b
imul eax, edx
add eax, r8d
cmp eax, 0x66c44d64
je 0x1401a5e70
test ecx, ecx
jne 0x1401a6618
nop word [rax + rax]
mov eax, dword [0x1415a39cc]
mov ecx, eax
xor ecx, eax
not ecx
and ecx, dword [0x1415a39c8]
xor ecx, eax
xor ecx, 0x5eff626c
add ecx, 0x1669ebd4
cmp ecx, 0x31e2d7b6
jb 0x1401a5ef0
mov r13d, r15d
mov eax, dword [0x1415a39d0]
mov ecx, dword [0x1415a39d4]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x14c8250e
add ecx, eax
and eax, 0x14c8250e
sub ecx, eax
xor ecx, 0x234b5cb7
imul rax, rcx, 0x464ac3f7
shr rax, 0x3e
cmp eax, 0xb1ffc973
ja 0x1401a5f1b
cmp r12, r13
jne 0x1401a60d0
mov eax, dword [0x1415a39d8]
imul eax, dword [0x1415a39dc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x50b96767
and ecx, 0xaf469898
imul ecx, edx
mov edx, eax
and edx, 0xaf469898
or eax, 0xaf469898
imul eax, edx
add eax, ecx
mov ecx, 0x856405e1
imul rax, rcx
shr rax, 0x3d
add eax, 0x517ea0ce
cmp eax, 0x17b6a0ee
jae 0x1401a5fc0
call fcn.14020b260
nop word cs:[rax + rax]
mov eax, dword [0x1415a39e0]
mov ecx, dword [0x1415a39e4]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
lea edi, [rax + rdx]
add edi, 0x64dd68f9
mov eax, edi
xor eax, 0x650ed638
or edi, 0x9af129c7
and edi, eax
add edi, 0x2c87189
call sub.KERNEL32.dll_GetLastError
cmp edi, 0x418a8d1c
ja 0x1401a5fc0
nop word cs:[rax + rax]
mov ecx, dword [0x1415a39e8]
mov edx, dword [0x1415a39ec]
mov r8d, ecx
and r8d, edx
not ecx
not edx
or edx, ecx
not edx
or edx, r8d
and edx, 0xfbc2acfd
mov ecx, edx
not ecx
or ecx, 0xed0f7832
add ecx, edx
imul ecx, ecx, 0x41e426fd
add ecx, 0x41e426fd
cmp ecx, 0x72c92edc
jb 0x1401a6020
cmp eax, 0x7a
jne 0x1401a66d7
lea rcx, [r12 + r12]
mov eax, dword [0x1415a39f8]
xor edx, edx
div dword [0x1415a39fc]
add eax, 0x87154d13
or eax, 0x62676f94
add eax, 0x9f5c9e14
cmp r12, 0x7fffffff
mov r13, rcx
cmova r13, rsi
cmp eax, 0x1c7cda72
jb 0x1401a6070
nop word cs:[rax + rax]
mov eax, dword [0x1415a3a00]
add eax, dword [0x1415a3a04]
and eax, 0xcdccc1f7
cmp eax, 0x200beadb
je 0x1401a60b0
jmp 0x1401a5b90
mov eax, dword [0x1415a39f0]
or eax, dword [0x1415a39f4]
imul eax, eax, 0x4101a233
add eax, 0xd3b2b836
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4d4bc28f
and ecx, 0xb2b43d70
imul ecx, edx
mov edx, eax
and edx, 0xb2b43d70
or eax, 0xb2b43d70
imul eax, edx
add eax, ecx
cmp eax, 0xf1a7dd12
je 0x1401a60d0
cmp r12, r13
jb 0x1401a5b90
jmp 0x1401a6263
call sub.KERNEL32.dll_GetLastError
jmp 0x1401a5e30
mov eax, dword [0x1415a3958]
mov ecx, dword [0x1415a395c]
xor ecx, eax
not ecx
and ecx, eax
xor ecx, 0xac163ea
imul rax, rcx, 0x36560c7b
shr rax, 0x3b
imul edi, eax, 0xb4a6db28
mov rcx, r15
mov rdx, rbx
mov r8, r13
call fcn.14020cdf0
cmp edi, 0xa301a373
ja 0x1401a6250
mov eax, dword [0x1415a3960]
mov ecx, dword [0x1415a3964]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x17cef185
and ecx, 0x68310e7a
imul ecx, edx
mov edx, eax
and edx, 0x68310e7a
or eax, 0x68310e7a
imul eax, edx
add eax, ecx
add eax, 0xe1c8fe75
not eax
and eax, 0x654227bc
cmp eax, 0xdf5f24a5
ja 0x1401a6183
mov r8, qword [rsp + 0x38]
mov eax, dword [0x1415a3968]
mov ecx, dword [0x1415a396c]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
and ecx, 0x2a9b285b
add ecx, ecx
sub eax, ecx
add eax, 0xaa9b285b
mov ecx, eax
xor ecx, 0x3037b541
xor eax, 0x20071101
and eax, 0x6bcf138d
add eax, eax
sub ecx, eax
add ecx, 0xebcf138d
cmp ecx, 0xafa409c8
jae 0x1401a61ee
mov rbp, qword [rsp + 0x40]
jmp 0x1401a5d00
mov rcx, r15
mov rdx, rbx
mov r8, r13
call fcn.14020cdf0
jmp 0x1401a6140
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401a6270
cmp rdi, r13
mov r8, qword [rsp + 0x58]
jb 0x1401a69a1
mov rsi, qword [r8]
nop word cs:[rax + rax]
mov eax, dword [0x1415a3a10]
mov ecx, dword [0x1415a3a14]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
not eax
or eax, 0xbc5519c6
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x41006229
and eax, 0x32ab9d56
imul eax, edx
mov edx, ecx
and edx, 0x2aa8410
or ecx, 0x32ab9d56
imul ecx, edx
add eax, ecx
add eax, 0x5e54d179
cmp eax, 0x3a71b5c1
jb 0x1401a6290
mov rdi, qword [r8 + 0x10]
lea rax, [rdi - 1]
cmp rax, 6
jb 0x1401a6710
mov rbx, qword [r8 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x1415a3a18]
mov ecx, dword [0x1415a3a1c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
xor eax, 0x244449f3
add eax, 0xa11f64f6
cmp eax, 0xddcbc4db
jb 0x1401a6300
test rdi, rdi
je 0x1401a6759
mov ecx, 0xa91586db
lea rax, [rdi - 7]
nop
mov edx, dword [0x1415a3a30]
xor edx, dword [0x1415a3a34]
add edx, 0x2590fb50
mov r8d, edx
not r8d
mov r9d, edx
and r9d, 0xe67b4463
and r8d, 0x1984bb9c
imul r8d, r9d
mov r9d, edx
and r9d, 0x1984bb9c
or edx, 0x1984bb9c
imul edx, r9d
add edx, r8d
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xdcd6e502
ja 0x1401a6350
cmp rax, r13
jne 0x1401a63c8
lea rdx, [rbx + 0xc]
lea r14, [r13*2]
mov rcx, rbp
mov r8, r14
call fcn.14020b2c0
test eax, eax
je 0x1401a65a0
xor eax, eax
mov r15, qword [rsp + 0x28]
nop
test al, al
jne 0x1401a63d0
mov eax, dword [0x1415a3a70]
add eax, dword [0x1415a3a74]
mov ecx, eax
not ecx
or eax, 0x7c77a7f2
or ecx, 0x8388580d
and ecx, eax
mov eax, ecx
not eax
and eax, 0x5436ba94
xor ecx, 0x2bc9456b
lea eax, [rcx + rax*2]
imul rax, rax, 0x292f15b9
shr rax, 0x3d
cmp eax, 0x17fe2e6a
jbe 0x1401a6420
mov word [rbx + 0xc], 0x43
nop dword [rax + rax]
mov eax, dword [0x1415a3a78]
mov ecx, dword [0x1415a3a7c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x72086042
xor ecx, 0x1f51b25
or eax, 0x8ca68798
and eax, ecx
xor eax, 0xb4644749
mov word [rbx + 0xc], 0x43
cmp eax, 0x2e4dbecf
jb 0x1401a6420
nop
mov eax, dword [0x1415a3a80]
mov ecx, dword [0x1415a3a84]
mov edx, eax
or edx, ecx
not edx
not eax
not ecx
and ecx, eax
or ecx, edx
not ecx
imul rax, rcx, 0x4e135327
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1e
add ecx, 0x3c5ff007
cmp ecx, 0x43f3dfb6
ja 0x1401a6460
mov rax, qword [rsp + 0x50]
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
cmp qword [rsp + 0x30], 0
je 0x1401a6c60
mov eax, dword [0x1415a3a90]
mov ecx, dword [0x1415a3a94]
not eax
not ecx
or ecx, eax
not ecx
imul eax, ecx, 0x3ebe9bb5
add eax, 0x3bd4366d
mov ecx, eax
not ecx
and ecx, 0xe98e5f8a
mov edx, eax
and edx, 0x1671a075
imul edx, ecx
mov ecx, eax
and ecx, 0xe98e5f8a
or eax, 0xe98e5f8a
imul eax, ecx
add eax, edx
cmp eax, 0xfd1372b3
jbe 0x1401a6510
mov rax, qword [0x1415acb98]
nop
mov eax, dword [0x1415a3a98]
xor edx, edx
div dword [0x1415a3a9c]
not eax
mov ecx, eax
or ecx, 0xf9fcb08b
or eax, 0x2004300b
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0xd9f88080
and eax, 0x2003570
mov edx, ecx
and edx, 0x453ca04
or edx, eax
xor edx, 0xc3807f07
and ecx, 0x18284af4
or ecx, edx
mov rsi, qword [0x1415acb98]
cmp ecx, 0x2e7be83d
je 0x1401a6510
mov eax, dword [0x1415a3aa0]
imul eax, dword [0x1415a3aa4]
imul eax, eax, 0x4f175103
add eax, 0x5ebf159c
or eax, 0xdefd90e0
cmp eax, 0x5eb5ebaa
jae 0x1401a6be4
jmp 0x1401a6c1c
mov eax, dword [0x1415a3a50]
and eax, dword [0x1415a3a54]
mov ecx, eax
and ecx, 0xc3c29992
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x40428182
and edx, 0x839c3e78
imul edx, r8d
and eax, 0x83801810
or ecx, 0x839c3e78
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0x6a4de284
cmp eax, 0x523078cf
jb 0x1401a65a0
test r15d, r15d
je 0x1401a66cc
mov eax, dword [0x1415a3a58]
add eax, dword [0x1415a3a5c]
xor eax, 0x10080004
or eax, 0xedf7aff9
cmp eax, 0x52385d58
jae 0x1401a6a85
jmp 0x1401a6ac8
movabs rsi, 0x8000000000000000
mov ecx, dword [0x1415a3998]
mov edx, dword [0x1415a399c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x5cd4a82e
and ecx, 0xa32b57d1
or ecx, r9d
or eax, r8d
and r8d, 0x5cd4a82e
and edx, 0xa32b57d1
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xcd6d74fc
and ecx, 0x32928b03
imul ecx, edx
mov edx, eax
and edx, 0x32928b03
or eax, 0x32928b03
imul eax, edx
add eax, ecx
imul rax, rax, 0x562d320b
shr rax, 0x3a
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xfffffffd
and ecx, 0x23760a22
imul ecx, edx
mov edx, eax
and edx, 2
or eax, 0x23760a22
imul eax, edx
add eax, ecx
cmp eax, 0xbdf01ef4
mov rbx, qword [rsp + 0x50]
jne 0x1401a67c6
jmp 0x1401a6840
mov r15d, 2
jmp 0x1401a6b30
mov eax, dword [0x1415a3a08]
mov ecx, dword [0x1415a3a0c]
add eax, ecx
add eax, 0xc35e9f46
mov ecx, 0xf3ca286d
imul rcx, rax
shr rcx, 0x3e
not ecx
or ecx, 0xa3a3baa5
cmp ecx, 0x71ac686d
jae 0x1401a6995
jmp 0x1401a699d
mov eax, dword [0x1415a3a20]
or eax, dword [0x1415a3a24]
mov ecx, eax
not ecx
and ecx, 0xbb7130c1
and eax, 0x448ecf3e
sub eax, ecx
mov ecx, eax
xor ecx, 0x8711c588
and ecx, eax
mov eax, ecx
xor eax, 0xfe4b954d
and ecx, 0x1b46ab2
add ecx, ecx
sub ecx, eax
cmp ecx, 0xda299f2b
jne 0x1401a69a3
jmp 0x1401a69ab
mov eax, dword [0x1415a3a38]
mov ecx, dword [0x1415a3a3c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
add eax, 0x79e1fce7
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x7e869df8
and ecx, 0x81796207
imul ecx, edx
mov edx, eax
and edx, 0x81796207
or eax, 0x81796207
imul eax, edx
add eax, ecx
add eax, 0x905f326b
cmp eax, 0x1ab99391
jae 0x1401a69fd
jmp 0x1401a6a45
mov eax, dword [0x1415a39a0]
mov ecx, dword [0x1415a39a4]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
imul edi, eax, 0xe574fe01
add edi, 0x2c94bb5c
mov eax, edi
not eax
and eax, 0xe13a39ec
mov ecx, edi
and ecx, 0x1ec5c613
imul ecx, eax
mov eax, edi
and eax, 0xe13a39ec
or edi, 0xe13a39ec
imul edi, eax
add edi, ecx
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
movabs rcx, 0xffffffff00000000
xor rcx, rax
not rax
and rax, 0xfffffffffffffffd
or rax, rcx
not rax
mov qword [rbx + 8], rax
mov qword [rbx], rsi
cmp edi, 0xd5cd453
jne 0x1401a6859
call fcn.14020b260
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
jmp 0x1401a67c6
cmp qword [rsp + 0x30], 0
mov r8, qword [rsp + 0x28]
je 0x1401a6875
mov rcx, qword [0x1415acb98]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rsp + 0x58]
nop word [rax + rax]
mov eax, dword [0x1415a39a8]
add eax, dword [0x1415a39ac]
imul rax, rax, 0x8808e6b
shr rax, 0x3a
imul eax, eax, 0x94e133f2
cmp eax, 0xac7e4c37
ja 0x1401a6880
cmp qword [r8], 0
je 0x1401a6981
mov eax, 0xe14f43f3
nop word cs:[rax + rax]
mov ecx, dword [0x1415a39b0]
xor ecx, dword [0x1415a39b4]
mov edx, ecx
not edx
or ecx, 0x11628e3c
or edx, 0xd8202fb8
and edx, ecx
not edx
or edx, 0x269d5042
shr edx, 1
imul rdx, rax
shr rdx, 0x3c
cmp edx, 0x3e7a6dcb
je 0x1401a68c0
mov rsi, qword [r8 + 8]
mov eax, dword [0x1415a39b8]
xor edx, edx
div dword [0x1415a39bc]
imul rcx, rax, 0x3a867c0b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0xd5fcd438
cmp eax, 0x846b0829
jbe 0x1401a6940
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rsi
call fcn.14020ae70
nop dword [rax]
mov eax, dword [0x1415a39c0]
add eax, dword [0x1415a39c4]
or eax, 0x32c7a7e1
imul eax, eax, 0x4d720080
mov edi, eax
xor edi, 0xf8880b2b
add edi, eax
and eax, 0x777f480
sub edi, eax
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rsi
call fcn.14020ae70
cmp edi, 0x926575d1
je 0x1401a6940
add rsp, 0x478
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
ud2
ud2
ud2
ud2
mov eax, dword [0x1415a3a40]
xor edx, edx
div dword [0x1415a3a44]
mov ecx, eax
not ecx
and ecx, 0xdd440db
mov edx, eax
and edx, 0xf22bbf24
imul edx, ecx
mov ecx, eax
and ecx, 0xdd440db
or eax, 0xdd440db
imul eax, ecx
add eax, edx
xor eax, 0x5b13250
and eax, 0x9ff57e58
ud2
ud2
mov eax, dword [0x1415a3a60]
xor edx, edx
div dword [0x1415a3a64]
or eax, 0xf4ff7001
mov edi, eax
xor edi, 0x44da5b03
add edi, eax
and eax, 0x3b25a4fc
sub edi, eax
or edi, 0x9266bf6f
movzx eax, byte [0x1415acbd0]
xor ecx, ecx
mov rdx, r14
call fcn.1401ac910
cmp edi, 0xb6d28304
jne 0x1401a6adb
movzx eax, byte [0x1415acbd0]
xor ecx, ecx
mov rdx, r14
call fcn.1401ac910
jmp 0x1401a6a85
mov r15, rax
nop
mov eax, dword [0x1415a3a68]
mov ecx, dword [0x1415a3a6c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
or ecx, 0x3468420e
mov eax, ecx
xor eax, 0xd09a8262
add eax, ecx
and ecx, 0x2f657d9d
sub eax, ecx
mov ecx, eax
xor ecx, 0xf4c3ae5e
and eax, 0xb3c51a1
add eax, eax
sub eax, ecx
cmp eax, 0x78cc5ccb
ja 0x1401a6ae0
test r15, r15
je 0x1401a69a1
mov rcx, r15
mov rdx, rbp
mov r8, r14
call fcn.14021bb50
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r13
lea rcx, [rsp + 0x60]
call fcn.140130ea0
mov rdi, qword [rsp + 0x68]
mov word [rdi + r13*2], 0
inc r13
mov r14, qword [rsp + 0x60]
test rsi, rsi
je 0x1401a6bd1
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [rsp + 0x28]
nop word [rax + rax]
mov eax, dword [0x1415a3a88]
mov ecx, dword [0x1415a3a8c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
xor eax, 0x5cdf86ce
imul eax, eax, 0xc911ddbc
imul rax, rax, 0x47a25fcf
shr rax, 0x3e
cmp eax, 0x549172f1
ja 0x1401a6b90
mov rsi, r14
mov rbx, rdi
mov rdi, r13
jmp 0x1401a649e
mov rsi, r14
mov rbx, rdi
mov rdi, r13
mov r15, qword [rsp + 0x28]
jmp 0x1401a649e
mov eax, dword [0x1415a3aa8]
imul eax, dword [0x1415a3aac]
xor eax, 0x368040
or eax, 0xffc92eaf
imul rdi, rax, 0x7f800407
shr rdi, 0x3e
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, 0xab15ebd8
jbe 0x1401a6c2b
mov rcx, rsi
xor edx, edx
mov r8, r15
call fcn.14020ae70
jmp 0x1401a6be4
mov ecx, 0xe81666e5
mov eax, dword [0x1415a3ab0]
xor edx, edx
div dword [0x1415a3ab4]
imul rax, rcx
shr rax, 0x3e
xor eax, 0xecb952e9
imul eax, eax, 0xbda2aa4e
cmp eax, 0xf0c32765
je 0x1401a6c30
nop dword [rax + rax]
mov eax, dword [0x1415a3ab8]
and eax, dword [0x1415a3abc]
mov ecx, eax
and ecx, 0x2d06bbdd
xor eax, 0xad06bbdd
lea eax, [rax + rcx*2]
mov ecx, eax
not ecx
or ecx, 0x8fedf9e
add eax, ecx
inc eax
or eax, 0x278cece0
cmp eax, 0xe47cbfd
jb 0x1401a6c60
jmp 0x1401a6981