Function at 0x14000f190
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rbx, rcx
mov eax, dword [0x141dc19f0]
xor ecx, ecx
xor edx, edx
div dword [0x141dc19f4]
nop word cs:[rax + rax]
test cl, cl
jne 0x14000f1c0
mov rcx, qword [rbx + 0x48]
test rcx, rcx
mov qword [rsp + 0x38], rbx
je 0x14000fd29
nop word cs:[rax + rax]
mov eax, dword [0x141dc19f8]
xor eax, dword [0x141dc19fc]
add eax, 0x3426473a
or eax, 0xeb7efae1
add eax, 0x7c97e2bf
cmp eax, 0x1883a5c7
jb 0x14000f1e0
mov r12, qword [rbx + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dc1a00]
imul eax, dword [0x141dc1a04]
imul eax, eax, 0x5b53c903
add eax, 0x8648adf7
and eax, 0x511e4a07
cmp eax, 0xf7e99744
ja 0x14000f210
test r12, r12
je 0x14000fc45
nop dword [rax]
mov eax, dword [0x141dc1a08]
sub eax, dword [str.n:T]
or eax, 0x42c
xor eax, 0x410801
and eax, 0x80410d2d
cmp eax, 0x4b51cced
ja 0x14000f240
mov rdi, qword [rbx + 0x40]
movdqa xmm0, xmmword [rdi]
pmovmskb ebp, xmm0
not ebp
mov eax, 0xea9243a1
lea rbx, [rdi + 0x10]
nop dword [rax]
mov ecx, dword [0x141dc1a10]
sub ecx, dword [0x141dc1a14]
xor ecx, 0x716c059b
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x707533c9
je 0x14000f280
xor r13d, r13d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15d, 0x8b2411d1
nop word cs:[rax + rax]
test bp, bp
jne 0x14000f348
nop dword [rax]
mov eax, dword [0x141dc1a20]
xor edx, edx
div dword [0x141dc1a24]
mov eax, dword [0x141dc1a28]
add eax, dword [0x141dc1a2c]
or eax, 0x377e0d35
add eax, 0x7faa3bf4
or eax, 0x91ca92c
cmp eax, 0xcc6a8491
ja 0x14000f2de
add rdi, 0xffffffffffffea00
movdqa xmm0, xmmword [rbx]
add rbx, 0x10
pmovmskb ebp, xmm0
cmp bp, 0xffff
je 0x14000f2d0
mov ecx, 0xe155f7f3
nop
mov eax, dword [0x141dc1a18]
add eax, dword [0x141dc1a1c]
or eax, 0x5d341515
imul eax, eax, 0x5736314b
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xc5307ec7
jae 0x14000f320
not ebp
mov qword [rsp + 0x48], rbx
nop dword [rax]
mov eax, dword [0x141dc1a30]
imul eax, dword [0x141dc1a34]
cmp eax, 0xfbe31676
je 0x14000f350
tzcnt eax, ebp
neg rax
imul rax, rax, 0x160
lea rcx, [rdi + rax]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x50], rdi
cmp qword [rdi + rax - 0x148], 0
je 0x14000f430
nop
test r13b, r13b
jne 0x14000f390
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax - 0x140]
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dc1a38]
add eax, dword [0x141dc1a3c]
imul eax, eax, 0x7cd749c1
mov ecx, 0x96c6144b
imul rax, rcx
shr rax, 0x3f
add eax, 0x7413a189
cmp eax, 0xfb0578f1
ja 0x14000f41e
nop word cs:[rax + rax]
mov eax, dword [0x141dc1a40]
mov ecx, dword [0x141dc1a44]
lea r14d, [rax + rcx]
add r14d, 0x1292235b
xor r14d, 0xf436b987
mov eax, 0xdfdc7cff
imul r14, rax
shr r14, 0x3e
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp r14d, 0x2dfbb43a
jbe 0x14000f430
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
jmp 0x14000f3e0
lea eax, [rbp - 1]
and eax, ebp
dec r12
mov ebp, eax
mov eax, dword [0x141dc1a48]
xor edx, edx
div dword [0x141dc1a4c]
nop dword [rax + rax]
mov eax, dword [0x141dc1a50]
and eax, dword [0x141dc1a54]
xor eax, 0xe4b2c6c8
add eax, 0xe6fab2bc
cmp eax, 0x69e5aabe
ja 0x14000f450
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax - 0x120]
mov rbx, qword [rax - 0x118]
test rbx, rbx
je 0x14000f4f0
xor r14d, r14d
jmp 0x14000f498
inc r14
cmp r14, rbx
je 0x14000f4f0
mov rax, r14
shl rax, 5
cmp qword [rdi + rax], 0
je 0x14000f490
add rax, rdi
nop dword [rax]
mov ecx, dword [0x141dc1a58]
add ecx, dword [0x141dc1a5c]
shr ecx, 1
imul rcx, r15
shr rcx, 0x3c
or ecx, 0x3495136e
cmp ecx, 0x3a4ec599
ja 0x14000f4b0
mov r8, qword [rax + 8]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call rsi
jmp 0x14000f490
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0x128]
mov ecx, dword [0x141dc1a60]
and ecx, dword [0x141dc1a64]
imul rcx, rcx, 0x28c47931
shr rcx, 0x3d
imul ecx, ecx, 0xe82a4208
add ecx, 0xc02caa7a
cmp ecx, 0xaa121b4f
jb 0x14000f4fc
nop word [rax + rax]
mov ecx, dword [0x141dc1a68]
imul ecx, dword [0x141dc1a6c]
add ecx, 0x9ec1a40b
and ecx, 0x5f798347
add ecx, 0xacd1ee2b
cmp ecx, 0xd53975e3
ja 0x14000f530
test rax, rax
je 0x14000f5f0
mov eax, dword [0x141dc1a70]
or eax, dword [0x141dc1a74]
or eax, 0x6ab60afe
add eax, 0x787da556
and eax, 0xb4327515
cmp eax, 0x3c355af3
jbe 0x14000f590
mov rax, qword [0x141ddc4e0]
nop dword [rax]
mov eax, dword [0x141dc1a78]
or eax, dword [0x141dc1a7c]
xor eax, 0x7840404
or eax, 0xf8735b79
add eax, 0xfe8b7ca4
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x57446f10
jb 0x14000f590
xor edx, edx
mov r8, rdi
call rsi
mov eax, dword [0x141dc1a80]
add eax, dword [0x141dc1a84]
imul eax, eax, 0x3bf33f8
and eax, 0xa9029ea0
imul eax, eax, 0x96b6c47c
cmp eax, 0xeb2b62a0
ja 0x14000f5c0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1a88]
sub eax, dword [0x141dc1a8c]
imul eax, eax, 0x5d82b4f2
add eax, 0xc184089e
cmp eax, 0xdae79940
ja 0x14000f5f0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0xf8]
nop word [rax + rax]
mov ecx, dword [0x141dc1a90]
and ecx, dword [0x141dc1a94]
imul ecx, ecx, 0xfe341e11
and ecx, 0x67624692
imul rcx, rcx, 0x2bb5df8b
shr rcx, 0x3b
cmp ecx, 0xfab8993
je 0x14000f620
shl rax, 1
test rax, rax
je 0x14000f6a0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1a98]
or eax, dword [0x141dc1a9c]
and eax, 0xc338dbf0
add eax, 0x5580c2d1
xor eax, 0x7167843e
cmp eax, 0x214a34f1
jb 0x14000f660
mov rax, qword [rsp + 0x28]
mov r8, qword [rax - 0xf0]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call rsi
nop dword [rax]
mov eax, dword [0x141dc1aa0]
add eax, dword [0x141dc1aa4]
xor eax, 0x10528400
and eax, 0xb35bd5b0
cmp eax, 0x9073ffb3
je 0x14000f6a0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0xd8]
nop dword [rax]
mov ecx, dword [0x141dc1aa8]
add ecx, dword [0x141dc1aac]
or ecx, 0xe07ba16e
add ecx, 0x7579b771
xor ecx, 0xdf9e2d4a
cmp ecx, 0x16deea55
jb 0x14000f6d0
shl rax, 1
test rax, rax
je 0x14000f787
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax - 0xd0]
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dc1ab0]
and eax, dword [0x141dc1ab4]
xor eax, 0x1ca4fb9f
imul rcx, rax, 0x6765b13
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x4b84d7c1
jbe 0x14000f750
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
nop dword [rax + rax]
mov eax, dword [0x141dc1ab8]
imul eax, dword [0x141dc1abc]
or eax, 0xb9aa7a3
imul r14, rax, 0x55d970a3
shr r14, 0x3d
or r14d, 0xfb2c1ccc
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp r14d, 0xffca7381
ja 0x14000f750
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x30], r12
nop word cs:[rax + rax]
test r13b, r13b
jne 0x14000f7a0
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax - 0x108]
mov rbp, qword [rax - 0x100]
test rbp, rbp
je 0x14000f891
xor r12d, r12d
nop word cs:[rax + rax]
mov eax, dword [0x141dc1ac0]
xor edx, edx
div dword [0x141dc1ac4]
mov eax, dword [0x141dc1ac8]
and eax, dword [0x141dc1acc]
xor eax, 0xbd0c261e
imul eax, eax, 0x45408601
or eax, 0x4c162d9d
cmp eax, 0xb45a2372
ja 0x14000f7de
mov rax, r12
shl rax, 5
cmp qword [rdi + rax], 0
je 0x14000f864
add rax, rdi
mov rbx, qword [rax + 8]
mov r14, qword [0x141ddc4e0]
xor eax, eax
test al, al
je 0x14000f830
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
nop dword [rax]
mov eax, dword [0x141dc1ad0]
xor eax, dword [0x141dc1ad4]
imul r13d, eax, 0x45deeabf
xor r13d, 0x7ab1efa9
add r13d, 0xbeecab47
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
cmp r13d, 0x57088d62
jb 0x14000f830
inc r12
nop word [rax + rax]
mov eax, dword [str.Kw_.]
xor eax, dword [0x141dc1adc]
or eax, 0xcc93b732
cmp eax, 0xbfd510a5
je 0x14000f870
cmp r12, rbp
jne 0x14000f7d0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0x110]
mov ecx, dword [0x141dc1ae0]
and ecx, dword [0x141dc1ae4]
add ecx, 0x15bc64da
and ecx, 0xe07a746e
xor ecx, 0xba0c4c46
cmp ecx, 0x54a3e462
ja 0x14000f89d
mov r12, qword [rsp + 0x30]
nop dword [rax + rax]
mov ecx, dword [0x141dc1ae8]
and ecx, dword [0x141dc1aec]
or ecx, 0xc9f6231e
imul rcx, rcx, 0x524661bf
shr rcx, 0x3e
cmp ecx, 0xcd523d87
je 0x14000f8d0
test rax, rax
mov r13d, 0
je 0x14000f9e0
mov eax, dword [0x141dc1af0]
xor edx, edx
div dword [0x141dc1af4]
and eax, 0x69c72887
imul rax, rax, 0x70014bcd
shr rax, 0x3c
imul eax, eax, 0xa144ad25
cmp eax, 0xb9364d39
mov ecx, 0xc228752f
ja 0x14000f96c
nop word cs:[rax + rax]
mov eax, dword [0x141dc1af8]
and eax, dword [0x141dc1afc]
xor eax, 0x785bc58d
imul rax, rcx
shr rax, 0x3d
or eax, 0x77def63d
mov rbx, qword [0x141ddc4e0]
cmp eax, 0xa406bce2
jne 0x14000f980
mov rax, qword [0x141ddc4e0]
jmp 0x14000f940
mov eax, dword [0x141dc1b00]
and eax, dword [0x141dc1b04]
xor eax, 0xfbbf64d9
add eax, 0xf56c160c
cmp eax, 0xd4a5ab1
jb 0x14000f9d0
nop dword [rax]
mov eax, dword [0x141dc1b08]
add eax, dword [0x141dc1b0c]
imul ebp, eax, 0x76f10f1b
add ebp, 0x7db7e3b6
or ebp, 0x90119235
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0x2c12fd36
jne 0x14000f9e0
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
jmp 0x14000f9a0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0xc0]
shl rax, 1
test rax, rax
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
je 0x14000fa60
nop word cs:[rax + rax]
mov eax, dword [0x141dc1b10]
and eax, dword [0x141dc1b14]
cmp eax, 0x6c7a180a
je 0x14000fa10
mov rax, qword [rsp + 0x28]
mov r8, qword [rax - 0xb8]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call rsi
nop word [rax + rax]
mov eax, dword [0x141dc1b18]
and eax, dword [0x141dc1b1c]
xor eax, 0x60344c0
and eax, 0x5693e4ed
cmp eax, 0xa6a13359
ja 0x14000fa40
nop dword [rax]
mov eax, dword [0x141dc1b20]
or eax, dword [0x141dc1b24]
imul eax, eax, 0x94cf4d5c
add eax, 0x66f1cbec
and eax, 0x23aad9e4
cmp eax, 0x53791abf
ja 0x14000fa60
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0xa0]
shl rax, 1
test rax, rax
je 0x14000fac0
mov rax, qword [rsp + 0x28]
mov r8, qword [rax - 0x98]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call rsi
nop
test r13b, r13b
jne 0x14000fab0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1b28]
add eax, dword [0x141dc1b2c]
imul eax, eax, 0xde7480b0
or eax, 0x10823445
and eax, 0xf99bb545
cmp eax, 0x9fe7f0e0
je 0x14000fac0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax - 0x60]
nop dword [rax]
test r13b, r13b
jne 0x14000faf0
test rax, rax
je 0x14000fbf0
mov ecx, dword [0x141dc1b30]
add ecx, dword [0x141dc1b34]
imul ecx, ecx, 0x5683682a
add ecx, 0x5a2fbb7a
cmp ecx, 0x22f04549
jb 0x14000fb47
nop
mov edx, dword [0x141dc1b38]
sub edx, dword [0x141dc1b3c]
add edx, 0x93d26ed8
or edx, 0x3a206316
lock dec qword [rax]
sete cl
cmp edx, 0xa17b1a61
jae 0x14000fb50
lock dec qword [rax]
jmp 0x14000fb20
mov edx, 0xe64c7daf
nop word cs:[rax + rax]
mov eax, dword [0x141dc1b40]
imul eax, dword [0x141dc1b44]
add eax, 0x2d48832f
imul rax, rdx
shr rax, 0x3d
cmp eax, 0x8ea2718b
je 0x14000fb60
test cl, cl
je 0x14000fbf0
mov eax, dword [0x141dc1b48]
xor edx, edx
div dword [0x141dc1b4c]
and eax, 0x24280014
xor eax, 0x3a33b67f
cmp eax, 0x40c58289
jbe 0x14000fbb0
nop word cs:[rax + rax]
test r13b, r13b
jne 0x14000fbb0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax - 0x60]
call fcn.140016690
nop word cs:[rax + rax]
mov eax, dword [0x141dc1b50]
xor eax, dword [0x141dc1b54]
imul eax, eax, 0x46d04a50
add eax, 0x86cf1c90
cmp eax, 0x3e522519
jb 0x14000fbd0
nop
mov eax, dword [0x141dc1b58]
xor edx, edx
div dword [0x141dc1b5c]
add eax, 0x118fe431
xor eax, 0xd024362e
cmp eax, 0x18090cda
jb 0x14000fbf0
nop
mov eax, dword [0x141dc1b60]
add eax, dword [0x141dc1b64]
imul eax, eax, 0x709fa082
add eax, 0xf2cf17e5
and eax, 0xb571fce1
cmp eax, 0x9b859cee
je 0x14000fc10
test r12, r12
jne 0x14000f2c0
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rbx + 0x48]
lea rax, [rcx + 1]
mov edx, 0x160
mul rdx
add rcx, rax
cmp rcx, 0xffffffffffffffef
je 0x14000fd29
nop
mov ecx, dword [str._vW_]
sub ecx, dword [0x141dc1b6c]
add ecx, 0x1ab36ce
xor ecx, 0xcde14253
add ecx, 0xc7948a2c
cmp ecx, 0x3b7627e8
jb 0x14000fc60
mov rdi, qword [rbx + 0x40]
sub rdi, rax
mov eax, dword [0x141dc1b70]
or eax, dword [0x141dc1b74]
or eax, 0xfffbfeff
cmp eax, 0xa596a6ac
jb 0x14000fcdd
mov esi, dword [0x141dc1b78]
xor esi, dword [0x141dc1b7c]
xor esi, 0x6268407
or esi, 0xf9d03b18
add esi, 0x3ee7fe8b
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0xd3133b4e
jbe 0x14000fd00
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000fca5
mov eax, dword [0x141dc1b80]
add eax, dword [0x141dc1b84]
imul eax, eax, 0xd1cddf5d
imul rax, rax, 0x45b4e8eb
shr rax, 0x3b
or eax, 0x8244d337
cmp eax, 0x56c3dd3
jb 0x14000fd00
mov eax, dword [0x141dc1b88]
xor edx, edx
div dword [0x141dc1b8c]
nop word [rax + rax]
mov eax, dword [0x141dc1b90]
and eax, dword [0x141dc1b94]
or eax, 0x42618cd0
cmp eax, 0x484e4ae1
je 0x14000fd40
mov eax, 0xf824434d
nop dword [rax]
mov ecx, dword [0x141dc1b98]
or ecx, dword [0x141dc1b9c]
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x47ea6cf2
xor ecx, 0xfbd8d19c
cmp ecx, 0x7fc426e9
jb 0x14000fd60
mov rax, qword [rbx + 0x18]
nop dword [rax]
mov ecx, dword [0x141dc1ba0]
and ecx, dword [0x141dc1ba4]
xor ecx, 0x20006002
or ecx, 0xddee8f7d
cmp ecx, 0xa1094d0d
jb 0x14000fd90
shl rax, 1
test rax, rax
je 0x14000fdcb
mov r8, qword [rbx + 0x20]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x28], rax
nop dword [rax + rax]
mov eax, dword [str._bg9]
imul eax, dword [0x141dc1bac]
xor eax, 0x2f42a591
add eax, 0x20076727
and eax, 0xf89c8fe0
cmp eax, 0xb0263e44
je 0x14000fde0
cmp qword [rsp + 0x28], 0
je 0x1400100e7
xor r15d, r15d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r13d, 0xc0c25965
jmp 0x14000fe3b
cmp r15, qword [rsp + 0x28]
je 0x1400100e7
imul rax, r15, 0x70
lea rbp, [rdi + rax]
cmp qword [rdi + rax], 0
je 0x14000fec0
mov rbx, qword [rbp + 8]
mov r14, qword [0x141ddc4e0]
mov eax, dword [0x141dc1bb0]
or eax, dword [0x141dc1bb4]
imul rax, rax, 0x1ae6d24d
shr rax, 0x37
or eax, 0xda1e43d1
xor eax, 0x267e32e4
cmp eax, 0x2b4ad854
jb 0x14000feb0
nop dword [rax]
mov eax, dword [0x141dc1bb8]
imul eax, dword [0x141dc1bbc]
xor eax, 0x80811080
or eax, 0x366ae13d
imul esi, eax, 0xb2bddf62
mov rcx, r14
xor edx, edx
mov r8, rbx
call r12
cmp esi, 0xb463a8e7
jne 0x14000fec0
mov rcx, r14
xor edx, edx
mov r8, rbx
call r12
jmp 0x14000fe80
inc r15
mov eax, dword [0x141dc1bc0]
and eax, dword [0x141dc1bc4]
and eax, 0x6c820408
xor eax, 0x1c020309
cmp eax, 0xae7d7a2d
ja 0x14000fec3
mov eax, dword [0x141dc1bc8]
add eax, dword [0x141dc1bcc]
xor eax, 0x40282084
or eax, 0xaf16cf73
cmp eax, 0x24839fe
je 0x14000fee0
mov rax, qword [rbp + 0x18]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc1bd0]
imul ecx, dword [0x141dc1bd4]
and ecx, 0x36177afa
imul ecx, ecx, 0x2b7c2b8a
or ecx, 0x50b80ad
cmp ecx, 0x19822f7
jb 0x14000ff10
test rax, rax
je 0x14000ffd0
mov eax, dword [0x141dc1bd8]
imul eax, dword [0x141dc1bdc]
imul eax, eax, 0xaadc912a
add eax, 0x4c80f374
cmp eax, 0x9c8d561d
ja 0x14000ff40
mov eax, dword [0x141dc1be0]
add eax, dword [0x141dc1be4]
mov rbx, qword [rbp + 0x20]
imul eax, eax, 0x112ac2e8
add eax, 0x794d0105
cmp eax, 0x6dc2e486
jbe 0x14000ff90
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call r12
mov esi, dword [0x141dc1be8]
add esi, dword [0x141dc1bec]
or esi, 0xa2e07017
add esi, 0x39725130
imul rsi, r13
shr rsi, 0x3e
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call r12
cmp esi, 0xc3da3dd3
ja 0x14000ff90
nop word [rax + rax]
mov eax, dword [0x141dc1bf0]
and eax, dword [0x141dc1bf4]
imul eax, eax, 0x340ee200
cmp eax, 0x1fdd2a74
je 0x14000ffd0
mov eax, dword [0x141dc1bf8]
xor eax, dword [0x141dc1bfc]
and eax, 0x10438e37
imul eax, eax, 0xf37dff2f
add eax, 0x55b8ba9a
cmp eax, 0xf23bfa81
ja 0x14000ffe9
mov rax, qword [rbp + 0x48]
shl rax, 1
test rax, rax
je 0x140010028
mov r8, qword [rbp + 0x50]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call r12
mov rax, qword [rbp + 0x30]
mov ecx, dword [0x141dc1c00]
and ecx, dword [0x141dc1c04]
imul ecx, ecx, 0x9d98ff9b
add ecx, 0xead8c74b
xor ecx, 0x87f7f4be
cmp ecx, 0xea5ced0a
ja 0x14001002c
nop word cs:[rax + rax]
mov ecx, dword [0x141dc1c08]
and ecx, dword [0x141dc1c0c]
cmp ecx, 0xe8debd3b
je 0x140010060
test rax, rax
je 0x14000fe30
mov eax, dword [0x141dc1c10]
or eax, dword [0x141dc1c14]
or eax, 0x5b29a38b
add eax, 0xe97470db
or eax, 0x89fbed69
cmp eax, 0xef80d008
jbe 0x1400100b0
mov rax, qword [0x141ddc4e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc1c18]
sub eax, dword [0x141dc1c1c]
and eax, 0x8e96d507
xor eax, 0xd82e42d1
add eax, 0xc689996e
mov r8, qword [rbp + 0x38]
mov rcx, qword [0x141ddc4e0]
cmp eax, 0xa9aea24
jb 0x1400100b0
xor edx, edx
call r12
jmp 0x14000fe30
mov rbx, qword [rsp + 0x38]
mov rax, qword [rbx]
nop
mov ecx, dword [0x141dc1c20]
and ecx, dword [0x141dc1c24]
imul ecx, ecx, 0xedae9ff9
or ecx, 0xbb7e9ff9
cmp ecx, 0xf7851fda
je 0x1400100f0
test rax, rax
je 0x140010127
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, 0xb509154d
nop dword [rax]
mov ecx, dword [0x141dc1c28]
sub ecx, dword [0x141dc1c2c]
add ecx, 0xf39f61d9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x1a218f5b
ja 0x140010130
mov rsi, qword [rbx + 0x90]
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x140010160
test rsi, rsi
je 0x1400107d8
nop dword [rax]
mov eax, dword [0x141dc1c30]
or eax, dword [0x141dc1c34]
or eax, 0x76fd35d2
imul eax, eax, 0xd84f33a7
imul rax, rax, 0x2e8ed3af
shr rax, 0x3c
cmp eax, 0xbca0c01
ja 0x140010170
nop dword [rax]
mov eax, dword [0x141dc1c38]
and eax, dword [0x141dc1c3c]
or eax, 0x9400400
and eax, 0xde4fe16
add eax, 0x4191c364
cmp eax, 0x1f96d8ee
jb 0x1400101a0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1c40]
or eax, dword [0x141dc1c44]
and eax, 0x37701d91
add eax, 0x96aa1aff
or eax, 0xd9c67066
cmp eax, 0x5861ab02
jb 0x1400101d0
mov rax, qword [rbx + 0xa8]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400103b0
lea rdi, [rsi + 0x10]
movdqa xmm0, xmmword [rsi]
mov eax, dword [0x141dc1c48]
xor edx, edx
div dword [0x141dc1c4c]
pmovmskb ebp, xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1c50]
xor eax, dword [0x141dc1c54]
add eax, 0xd513a726
xor eax, 0x725914c8
cmp eax, 0x593a212
jb 0x140010230
not ebp
nop
mov eax, dword [0x141dc1c58]
xor eax, dword [0x141dc1c5c]
xor eax, 0x5b20795d
add eax, 0x76095e68
and eax, 0x5ffa742e
cmp eax, 0x77978e17
je 0x140010250
xor ebx, ebx
mov r15, qword [sym.imp.pdh.dll_PdhRemoveCounter]
mov r12, rsi
mov rax, qword [rsp + 0x30]
nop word cs:[rax + rax]
mov qword [rsp + 0x28], rax
test bp, bp
je 0x1400102e0
mov eax, dword [0x141dc1c68]
add eax, dword [0x141dc1c6c]
or eax, 0x9cfc62a3
imul eax, eax, 0x6ed96d42
or eax, 0x56e62c45
cmp eax, 0x824a2db6
ja 0x14001029a
lea r14d, [rbp - 1]
and r14d, ebp
nop word cs:[rax + rax]
test bl, bl
jne 0x1400102d0
jmp 0x140010335
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
add r12, 0xfffffffffffffe00
add rdi, 0x10
cmp eax, 0xffff
je 0x1400102e0
mov ecx, dword [0x141dc1c60]
xor ecx, dword [0x141dc1c64]
imul ecx, ecx, 0x19bfaf6d
or ecx, 0xf7879d03
imul rcx, rcx, 0x3880d38f
shr rcx, 0x3d
mov r14d, 0xfffffffe
sub r14d, eax
mov ebp, eax
not ebp
and r14d, ebp
cmp ecx, 0x69445f3c
ja 0x1400102fa
test bl, bl
je 0x140010350
tzcnt eax, ebp
shl rax, 5
mov rcx, r12
sub rcx, rax
mov rcx, qword [rcx - 8]
call r15
nop
mov r13d, dword [0x141dc1c80]
xor r13d, dword [0x141dc1c84]
xor r13d, 0xbd327876
add r13d, 0xd33d559c
and r13d, 0xcda9dcfd
tzcnt eax, ebp
shl rax, 5
mov rcx, r12
sub rcx, rax
mov rcx, qword [rcx - 8]
call r15
cmp r13d, 0xa8639760
ja 0x140010350
mov ebp, r14d
mov rax, qword [rsp + 0x28]
dec rax
jne 0x140010290
nop word cs:[rax + rax]
mov eax, dword [0x141dc1c70]
or eax, dword [0x141dc1c74]
xor eax, 0xa0492c3
or eax, 0xf5b30d38
imul eax, eax, 0xba9ebcd6
cmp eax, 0x94bad568
je 0x1400103b0
mov r14, qword [rsp + 0x38]
nop dword [rax + rax]
mov eax, dword [0x141dc1c78]
xor edx, edx
div dword [0x141dc1c7c]
imul eax, eax, 0x66651789
cmp eax, 0xa88f2354
je 0x1400103e0
mov rcx, qword [r14 + 0xc8]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140010490
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x140010420
test eax, eax
jne 0x140010490
mov eax, dword [0x141dc1c98]
xor edx, edx
div dword [0x141dc1c9c]
add eax, 0xe1ec9a4
and eax, 0xfd8c465c
xor eax, 0xad8d82c3
cmp eax, 0x74ffbfc1
jae 0x140010452
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141dc1ca0]
imul eax, dword [0x141dc1ca4]
imul ebx, eax, 0xe54b4f09
and ebx, 0x202e85f
call rdi
cmp ebx, 0xf6af8d85
jae 0x140010460
nop word cs:[rax + rax]
mov eax, dword [0x141dc1c88]
or eax, dword [0x141dc1c8c]
imul eax, eax, 0x7dac6cd1
add eax, 0x743bd0ad
cmp eax, 0xe27fe45e
ja 0x140010490
mov rcx, qword [r14 + 0xc0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc1c90]
xor eax, dword [0x141dc1c94]
add eax, 0x6b6755be
and eax, 0x716daec4
cmp eax, 0x8f97b103
ja 0x1400104c0
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400104f0
call qword [sym.imp.pdh.dll_PdhCloseQuery]
nop dword [rax]
mov eax, dword [0x141dc1ca8]
sub eax, dword [0x141dc1cac]
add eax, 0xfdde599b
xor eax, 0xd9fcd25d
add eax, 0xef7c0758
cmp eax, 0x42cfead8
jb 0x1400104f0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140010520
mov rax, qword [r14 + 0x98]
test rax, rax
je 0x1400107d8
mov qword [rsp + 0x28], rax
nop dword [rax]
mov eax, dword [0x141dc1cb0]
and eax, dword [0x141dc1cb4]
imul eax, eax, 0x4e07fc0
xor eax, 0x32e9d8f4
add eax, 0x555714e
cmp eax, 0x28794cf6
jb 0x140010540
cmp qword [rsp + 0x30], 0
je 0x14001072a
nop
mov eax, dword [0x141dc1cb8]
xor eax, dword [0x141dc1cbc]
and eax, 0x56a3468a
add eax, 0xc6d4709c
imul rax, rax, 0x2a267bef
shr rax, 0x3d
cmp eax, 0x2c8a7bf9
je 0x140010570
movdqa xmm0, xmmword [rsi]
lea r12, [rsi + 0x10]
pmovmskb r13d, xmm0
not r13d
nop dword [rax + rax]
mov eax, dword [0x141dc1cc0]
xor eax, dword [0x141dc1cc4]
or eax, 0x42294df4
add eax, 0x45e19fe5
cmp eax, 0x56cb9732
jb 0x1400105b0
nop dword [rax]
mov eax, dword [0x141dc1cc8]
mov ecx, dword [0x141dc1ccc]
add eax, ecx
add eax, 0xdfbd477e
or eax, 0x27a7fd91
cmp eax, 0xf9e136ff
je 0x1400105d0
mov bpl, 1
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140010615
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
dec qword [rsp + 0x30]
je 0x14001072a
mov eax, dword [0x141dc1cd0]
or eax, dword [0x141dc1cd4]
and eax, 0xc4c80948
xor eax, 0xe896306c
or eax, 0x321c611
cmp eax, 0xe5c54364
ja 0x140010615
test r13w, r13w
jne 0x140010670
nop dword [rax]
movdqa xmm0, xmmword [r12]
pmovmskb eax, xmm0
add rsi, 0xfffffffffffffe00
add r12, 0x10
cmp eax, 0xffff
je 0x140010640
mov r13d, eax
not r13d
test bpl, bpl
je 0x14001065c
nop word [rax + rax]
mov eax, dword [0x141dc1cd8]
or eax, dword [0x141dc1cdc]
imul rax, rax, 0x57cfb1f
shr rax, 0x3a
imul eax, eax, 0xd97781df
add eax, 0x5c9c7429
cmp eax, 0x23b09fdd
jb 0x140010670
tzcnt ecx, r13d
shl rcx, 5
mov rax, rsi
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x140010600
mov rdi, qword [rax - 0x18]
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dc1ce0]
xor eax, dword [0x141dc1ce4]
and eax, 0x46000188
cmp eax, 0xa7c2a398
je 0x14001071d
nop word cs:[rax + rax]
mov eax, dword [0x141dc1ce8]
or eax, dword [0x141dc1cec]
imul r14, rax, 0x639690f
shr r14, 0x3a
or r14d, 0x61c2071e
xor r14d, 0xbde2cd3c
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp r14d, 0xc1e705f5
jae 0x140010600
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
jmp 0x1400106e0
mov r9, qword [rsp + 0x28]
mov rax, r9
shl rax, 5
lea rcx, [rax + 0x20]
mov edx, 0xd5846f61
add r9, 0x11
nop word cs:[rax + rax]
mov r8d, dword [0x141dc1cf0]
or r8d, dword [0x141dc1cf4]
add r8d, 0x2a035824
imul r8, rdx
shr r8, 0x3e
or r8d, 0x25c8e2dc
cmp r8d, 0x54b66d68
ja 0x140010750
mov r8, qword [rsp + 0x38]
add rcx, r9
nop word cs:[rax + rax]
mov edx, dword [0x141dc1cf8]
sub edx, dword [0x141dc1cfc]
imul edx, edx, 0xad4d383d
add edx, 0x39ef7c39
xor edx, 0x817abb5d
cmp edx, 0x5feddc1a
jb 0x140010790
test rcx, rcx
je 0x1400107d8
mov r8, qword [r8 + 0x90]
sub r8, rax
add r8, 0xffffffffffffffe0
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, 0xa1eda2e7
nop dword [rax]
mov ecx, dword [0x141dc1d00]
and ecx, dword [0x141dc1d04]
add ecx, 0x31532fb1
xor ecx, 0xbd0697d0
shr ecx, 1
imul rcx, rax
shr rcx, 0x39
cmp ecx, 0xaed77706
ja 0x1400107e0
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret