Function at 0x14000f8b0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rsi, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141f2dc18]
sub eax, dword [0x141f2dc1c]
imul eax, eax, 0x7244ca8b
xor eax, 0x8bb842c3
cmp eax, 0xb3e81558
ja 0x14000f8d0
nop
mov eax, dword [0x141f2dc20]
imul eax, dword [0x141f2dc24]
add eax, 0x944f5b35
or eax, 0x49025293
add eax, 0xa7c3a47f
cmp eax, 0xc3535dbe
ja 0x14000f8f0
mov r9, qword [rsi + 0x48]
test r9, r9
mov qword [rsp + 0x30], rsi
je 0x140010310
mov rdi, qword [rsi + 0x58]
mov eax, 0x8865df87
nop
mov ecx, dword [0x141f2dc28]
or ecx, dword [0x141f2dc2c]
imul ecx, ecx, 0x9f518020
add ecx, 0x9c559680
mov rdx, rcx
imul rdx, rax
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1a
cmp ecx, 0x450d69aa
ja 0x14000f930
test rdi, rdi
je 0x140010262
xor eax, eax
nop
test al, al
jne 0x14000f970
mov rbx, qword [rsi + 0x40]
movdqa xmm0, xmmword [rbx]
pmovmskb r12d, xmm0
not r12d
lea r15, [rbx + 0x10]
xor r13d, r13d
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14d, 0xa96ec8bd
nop dword [rax + rax]
test r12w, r12w
jne 0x14000fa30
nop word [rax + rax]
mov eax, dword [0x141f2dc38]
xor edx, edx
div dword [0x141f2dc3c]
nop
mov eax, dword [0x141f2dc40]
and eax, dword [0x141f2dc44]
add eax, 0x6a75404d
xor eax, 0x8210410c
or eax, 0x5d659af3
cmp eax, 0x92fd57c1
je 0x14000f9c0
add rbx, 0xffffffffffffea00
movdqa xmm0, xmmword [r15]
add r15, 0x10
pmovmskb r12d, xmm0
cmp r12w, 0xffff
je 0x14000f9b0
nop
mov eax, dword [0x141f2dc30]
imul eax, dword [0x141f2dc34]
add eax, 0x4134fbb2
shr eax, 1
imul rax, rax, 0x2380bbbd
shr rax, 0x3a
and eax, 0xfffffffe
cmp eax, 0x6ad3eace
je 0x14000fa00
not r12d
nop dword [rax]
mov eax, dword [0x141f2dc48]
sub eax, dword [0x141f2dc4c]
and eax, 0x81840131
cmp eax, 0xe7b0a38f
je 0x14000fa30
tzcnt eax, r12d
neg rax
imul rax, rax, 0x160
lea rbp, [rbx + rax]
cmp qword [rbx + rax - 0x148], 0
je 0x14000fae4
mov edx, 0x8d55b78d
test r13b, r13b
jne 0x14000fa6b
mov eax, dword [0x141f2dc50]
imul eax, dword [0x141f2dc54]
mov r8, qword [rbp - 0x140]
and eax, 0x1b13547
add eax, 0x5191e37f
cmp eax, 0xac337cfb
ja 0x14000facd
nop word cs:[rax + rax]
mov eax, dword [0x141f2dc58]
xor eax, dword [0x141f2dc5c]
imul rax, rdx
shr rax, 0x3f
imul eax, eax, 0x834d163c
add eax, 0x1cd5fe44
mov rcx, qword [0x141f49060]
cmp eax, 0x5cd9ede
jae 0x14000fae0
mov rax, qword [0x141f49060]
jmp 0x14000faa0
xor edx, edx
call rsi
lea eax, [r12 - 1]
and eax, r12d
dec rdi
mov qword [rsp + 0x38], rdi
mov rdi, qword [rbp - 0x120]
mov ecx, eax
mov qword [rsp + 0x48], r15
nop word cs:[rax + rax]
mov eax, dword [0x141f2dc60]
imul eax, dword [0x141f2dc64]
add eax, 0x7bc6c56d
and eax, 0xfdede6b9
imul eax, eax, 0x10ea10af
cmp eax, 0xc9e947da
je 0x14000fb10
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x28], rbp
mov r15, qword [rbp - 0x118]
nop word [rax + rax]
mov eax, dword [0x141f2dc68]
xor edx, edx
div dword [0x141f2dc6c]
imul rax, rax, 0x5177bddb
shr rax, 0x3d
imul eax, eax, 0x4b319ff4
cmp eax, 0xb1555456
je 0x14000fb50
test r15, r15
je 0x14000fc95
xor r12d, r12d
nop word cs:[rax + rax]
mov rcx, r12
shl rcx, 5
cmp qword [rdi + rcx], 0
je 0x14000fc52
add rcx, rdi
nop word cs:[rax + rax]
test r13b, r13b
jne 0x14000fbb0
nop word cs:[rax + rax]
mov eax, dword [0x141f2dc70]
xor edx, edx
div dword [0x141f2dc74]
imul eax, eax, 0x77f459b7
add eax, 0xe10b8b74
xor eax, 0xd6838c0c
cmp eax, 0x9441d43
jb 0x14000fbc0
mov eax, dword [0x141f2dc78]
and eax, dword [0x141f2dc7c]
mov rbx, qword [rcx + 8]
add eax, 0x8ba345aa
and eax, 0x5e548aac
cmp eax, 0xfcafbdb
jae 0x14000fc20
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, rbx
call rsi
nop word cs:[rax + rax]
mov eax, dword [0x141f2dc80]
xor edx, edx
div dword [0x141f2dc84]
mov ebp, eax
and ebp, 0x1276728d
add ebp, 0xb8841dec
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, rbx
call rsi
cmp ebp, 0x3a7389b5
jb 0x14000fc20
inc r12
nop word cs:[rax + rax]
mov eax, dword [0x141f2dc88]
and eax, dword [0x141f2dc8c]
imul rcx, rax, 0x13c0b159
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0x49eaf32d
cmp eax, 0x380e2dd9
jb 0x14000fc60
cmp r12, r15
jne 0x14000fb90
mov eax, dword [0x141f2dc90]
xor edx, edx
div dword [0x141f2dc94]
or eax, 0x1ce6df94
imul rax, rax, 0xeb8f75
shr rax, 0x33
cmp eax, 0x53acde0d
je 0x14000fc95
mov rbp, qword [rsp + 0x28]
cmp qword [rbp - 0x128], 0
mov r15d, 0x8777dff3
je 0x14000fd68
mov rbx, qword [0x141f49060]
mov eax, dword [0x141f2dc98]
add eax, dword [0x141f2dc9c]
imul eax, eax, 0x571c25d4
cmp eax, 0x41cf81ed
jne 0x14000fd00
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
nop dword [rax]
mov ebp, dword [0x141f2dca0]
or ebp, dword [0x141f2dca4]
add ebp, 0x26bea504
and ebp, 0x50318725
add ebp, 0xe40e5b57
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0xfe0979e3
ja 0x14000fd00
mov rbp, qword [rsp + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141f2dca8]
add eax, dword [0x141f2dcac]
and eax, 0x98d4e8b
add eax, 0xafc36a7f
imul rax, rax, 0x270abb5
shr rax, 0x38
cmp eax, 0xf2221fcb
je 0x14000fd40
mov eax, dword [0x141f2dcb0]
xor edx, edx
div dword [0x141f2dcb4]
imul rax, r15
shr rax, 0x3a
or eax, 0x1b1
and eax, 0xffffffbb
cmp eax, 0x3af4c7ff
ja 0x14000fd68
mov rax, qword [rbp - 0xf8]
shl rax, 1
test rax, rax
mov r12d, 0xc7ca4dbf
je 0x14000fde5
mov r8, qword [rbp - 0xf0]
mov rcx, qword [0x141f49060]
xor edx, edx
call rsi
nop word cs:[rax + rax]
mov eax, dword [0x141f2dcb8]
xor edx, edx
div dword [0x141f2dcbc]
imul eax, eax, 0x3d057fd8
or eax, 0x40af845
and eax, 0x7bbf8dd
cmp eax, 0x6b8dda93
ja 0x14000fdc0
mov rax, qword [rbp - 0xd8]
nop dword [rax]
mov ecx, dword [0x141f2dcc0]
xor ecx, dword [0x141f2dcc4]
add ecx, 0xf6789a72
xor ecx, 0xa29d597b
imul ecx, ecx, 0x730473e8
cmp ecx, 0xeb168b50
ja 0x14000fdf0
shl rax, 1
test rax, rax
jne 0x14000fe40
mov rdi, qword [rbp - 0x108]
mov rbx, qword [rbp - 0x100]
test rbx, rbx
jne 0x14000fee4
jmp 0x14000ff51
mov eax, dword [0x141f2dcc8]
imul eax, dword [str._knV]
or eax, 0x35d80541
add eax, 0x9566567
xor eax, 0x8ebe1245
cmp eax, 0x2aeaf234
jb 0x14000fe40
mov r8, qword [rbp - 0xd0]
mov eax, dword [0x141f2dcd0]
sub eax, dword [0x141f2dcd4]
imul rax, rax, 0x26f8a5e7
shr rax, 0x3d
or eax, 0xa7239304
cmp eax, 0x9fea87dc
mov edx, 0x94899a3b
jae 0x14000fea0
mov rax, qword [0x141f49060]
nop dword [rax]
mov eax, dword [0x141f2dcd8]
or eax, dword [0x141f2dcdc]
add eax, 0x8d0bf408
imul rax, rdx
shr rax, 0x3e
imul eax, eax, 0x5f482d5e
mov rcx, qword [0x141f49060]
cmp eax, 0xba276604
je 0x14000fea0
xor edx, edx
call rsi
mov rdi, qword [rbp - 0x108]
mov rbx, qword [rbp - 0x100]
test rbx, rbx
je 0x14000ff51
xor r15d, r15d
nop word [rax + rax]
mov eax, dword [str.p7Ed]
sub eax, dword [0x141f2dce4]
add eax, 0xfd18dd32
imul rax, r14
shr rax, 0x3f
imul eax, eax, 0xe3bf8af4
cmp eax, 0x49d692e2
ja 0x14000fef0
mov rax, r15
shl rax, 5
cmp qword [rdi + rax], 0
je 0x14000ff36
add rax, rdi
mov r8, qword [rax + 8]
mov rcx, qword [0x141f49060]
xor edx, edx
call rsi
inc r15
mov eax, dword [0x141f2dce8]
sub eax, dword [0x141f2dcec]
cmp eax, 0x81132e97
je 0x14000ff39
cmp r15, rbx
jne 0x14000fef0
mov eax, dword [0x141f2dcf0]
or eax, dword [0x141f2dcf4]
or eax, 0x5fc50f1b
cmp eax, 0xe48e09d6
je 0x14000ff51
mov rcx, qword [rbp - 0x110]
mov r15, qword [rsp + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141f2dcf8]
xor edx, edx
div dword [0x141f2dcfc]
imul eax, eax, 0x9ffee476
add eax, 0xb17dfd04
and eax, 0xae058a10
cmp eax, 0x567eca24
jb 0x14000ff80
nop word cs:[rax + rax]
mov eax, dword [0x141f2dd00]
or eax, dword [0x141f2dd04]
or eax, 0xef4faf22
and eax, 0xefcfaf3a
cmp eax, 0x59a54ed9
jb 0x14000ffb0
test rcx, rcx
je 0x140010030
mov eax, dword [0x141f2dd08]
imul eax, dword [0x141f2dd0c]
and eax, 0xf9573c55
add eax, 0xacfe5b42
and eax, 0x8b529f87
cmp eax, 0xf4fff092
jbe 0x140010000
mov rax, qword [0x141f49060]
nop dword [rax]
mov eax, dword [0x141f2dd10]
and eax, dword [0x141f2dd14]
add eax, 0x66abaad7
xor eax, 0x1022c181
or eax, 0x2d581e12
mov rcx, qword [0x141f49060]
cmp eax, 0xdeefaad4
je 0x140010000
xor edx, edx
mov r8, rdi
call rsi
test r13b, r13b
jne 0x140010030
mov rax, qword [rbp - 0xc0]
shl rax, 1
test rax, rax
je 0x140010125
mov eax, dword [0x141f2dd18]
xor edx, edx
div dword [0x141f2dd1c]
nop word cs:[rax + rax]
mov eax, dword [0x141f2dd20]
imul eax, dword [0x141f2dd24]
or eax, 0x1b3ed82b
and eax, 0x1b3ef8ab
cmp eax, 0x3d7f1b76
ja 0x140010060
nop
mov eax, dword [0x141f2dd28]
imul eax, dword [0x141f2dd2c]
xor eax, 0xb2d7d448
imul rax, rax, 0x52988425
shr rax, 0x3e
xor eax, 0xe1689527
cmp eax, 0x9b1e1d23
jb 0x140010080
mov rdi, qword [rbp - 0xb8]
mov eax, dword [0x141f2dd30]
xor edx, edx
div dword [0x141f2dd34]
add eax, 0x5b3deaeb
xor eax, 0x81616020
or eax, 0x6c1e8b5a
cmp eax, 0x87a704a7
jae 0x1400100f0
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, rdi
call rsi
nop word cs:[rax + rax]
mov eax, dword [0x141f2dd38]
and eax, dword [0x141f2dd3c]
add eax, 0x8a36375b
imul rax, r12
shr rax, 0x3f
imul ebx, eax, 0xa0e5692a
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, rdi
call rsi
cmp ebx, 0x1c22d768
jb 0x1400100f0
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x50]
mov r12, qword [rsp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141f2dd40]
sub eax, dword [0x141f2dd44]
or eax, 0x392c7902
add eax, 0xe18e06d7
or eax, 0x6bef05c
cmp eax, 0xed6ddc51
ja 0x140010140
mov rax, qword [rbp - 0xa0]
nop dword [rax]
test r13b, r13b
jne 0x140010170
shl rax, 1
test rax, rax
je 0x140010190
mov r8, qword [rbp - 0x98]
mov rcx, qword [0x141f49060]
xor edx, edx
call rsi
nop
test r13b, r13b
jne 0x140010190
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x140010210
lock dec qword [rax]
sete al
nop word cs:[rax + rax]
mov ecx, dword [0x141f2dd48]
or ecx, dword [0x141f2dd4c]
imul rcx, rcx, 0x4cc4ccb1
shr rcx, 0x3d
imul ecx, ecx, 0xd5123c3a
xor ecx, 0x5ddde2a
cmp ecx, 0x6356e0e8
jb 0x1400101b0
test al, al
je 0x140010210
mov rcx, qword [rbp - 0x60]
call fcn.140016900
nop dword [rax + rax]
mov eax, dword [0x141f2dd50]
sub eax, dword [0x141f2dd54]
imul eax, eax, 0xb1365604
or eax, 0xa8c14579
cmp eax, 0xdc0c622f
je 0x1400101f0
nop
mov eax, dword [0x141f2dd58]
sub eax, dword [0x141f2dd5c]
or eax, 0x66bcf7cf
cmp eax, 0xccb75678
je 0x140010210
nop dword [rax + rax]
mov eax, dword [0x141f2dd60]
xor edx, edx
div dword [0x141f2dd64]
imul eax, eax, 0xf476c07f
add eax, 0x788c3ede
cmp eax, 0x58489d6a
jb 0x140010230
test rdi, rdi
jne 0x14000f9a0
mov rsi, qword [rsp + 0x30]
mov r9, qword [rsi + 0x48]
lea r8, [r9 + 1]
mov r10d, 0x160
nop dword [rax]
mov r11d, dword [0x141f2dd68]
or r11d, dword [0x141f2dd6c]
mov rax, r8
mul r10
cmp r11d, 0x8bd4ff84
je 0x140010270
mov rcx, rax
add rax, r9
add rax, 0x11
test rax, rax
je 0x140010310
mov r8, qword [rsi + 0x40]
mov eax, dword [0x141f2dd70]
xor edx, edx
div dword [0x141f2dd74]
xor eax, 0xf940a35d
add eax, 0x47efd8a6
xor eax, 0x67972838
cmp eax, 0xdf1208eb
jbe 0x1400102cb
mov rax, qword [0x141f49060]
sub r8, rcx
nop
mov eax, dword [0x141f2dd78]
sub eax, dword [0x141f2dd7c]
imul rcx, rax, 0x2e0e4d1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
xor eax, 0xf2158d49
add eax, 0x10ba9299
mov rcx, qword [0x141f49060]
cmp eax, 0xb5e6a002
ja 0x1400102d0
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141f2dd80]
xor edx, edx
div dword [0x141f2dd84]
add eax, 0x43509a9a
and eax, 0xc71f7d9b
cmp eax, 0xb9907cbf
je 0x140010310
mov rcx, qword [rsi + 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x141f2dd88]
xor edx, edx
div dword [0x141f2dd8c]
or eax, 0x60010000
xor eax, 0x28202
and eax, 0x62639202
cmp eax, 0x43160e39
jb 0x140010340
shl rcx, 1
test rcx, rcx
je 0x1400103ac
mov eax, dword [0x141f2dd90]
xor edx, edx
div dword [0x141f2dd94]
nop word [rax + rax]
mov eax, dword [0x141f2dd98]
or eax, dword [0x141f2dd9c]
imul eax, eax, 0x302d436
cmp eax, 0xc2fc1d4c
je 0x140010380
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x141f49060]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbp, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x28], rax
nop dword [rax]
mov eax, dword [0x141f2dda0]
xor edx, edx
div dword [0x141f2dda4]
add eax, 0x307f999a
and eax, 0x1983d8d
xor eax, 0x2199ecee
cmp eax, 0x4cfc7c14
ja 0x1400103c0
cmp qword [rsp + 0x28], 0
je 0x1400106b4
xor r15d, r15d
mov r12d, 0xda6f561f
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov qword [rsp + 0x38], rbp
jmp 0x14001041b
cmp rsi, qword [rsp + 0x28]
je 0x1400106b4
imul rax, rsi, 0x70
lea rdi, [rax + rbp]
cmp qword [rbp + rax], 0
je 0x1400104d5
nop
mov eax, dword [0x141f2dda8]
or eax, dword [0x141f2ddac]
or eax, 0x1388ecc8
xor eax, 0x9aecc396
add eax, 0xf36c2e41
cmp eax, 0x6528551d
ja 0x140010430
mov eax, dword [0x141f2ddb0]
sub eax, dword [0x141f2ddb4]
imul eax, eax, 0x7ba1bbcd
or eax, 0x77e30124
imul eax, eax, 0x534b6658
cmp eax, 0xb782b8a5
jbe 0x140010480
mov rax, qword [0x141f49060]
nop dword [rax]
mov rbx, qword [rdi + 8]
mov r14, qword [0x141f49060]
test r15b, r15b
jne 0x140010480
test r15b, r15b
je 0x1400104a0
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
mov eax, dword [0x141f2ddb8]
xor edx, edx
div dword [0x141f2ddbc]
mov ebp, eax
add ebp, 0x87bc7d67
or ebp, 0xe548e8b7
add ebp, 0xfb30e0dd
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
cmp ebp, 0xcd658781
jb 0x1400104a0
inc rsi
mov rax, qword [rdi + 0x18]
nop dword [rax]
mov ecx, dword [0x141f2ddc0]
and ecx, dword [0x141f2ddc4]
add ecx, 0xb5d77d6
imul rcx, r12
shr rcx, 0x3f
cmp ecx, 0xd7bbd9b0
ja 0x1400104e0
test rax, rax
je 0x14001055f
mov rbx, qword [rdi + 0x20]
mov r14, qword [0x141f49060]
mov eax, dword [0x141f2ddc8]
xor edx, edx
div dword [0x141f2ddcc]
xor eax, 0x40000050
or eax, 0x97feffaf
cmp eax, 0x222ce4b4
jae 0x140010540
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
nop dword [rax]
mov ebp, dword [0x141f2ddd0]
or ebp, dword [0x141f2ddd4]
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
cmp ebp, 0xa54552c6
je 0x140010540
mov rax, qword [rdi + 0x48]
shl rax, 1
test rax, rax
je 0x1400105e4
mov rbx, qword [rdi + 0x50]
mov r14, qword [0x141f49060]
mov eax, dword [0x141f2ddd8]
or eax, dword [0x141f2dddc]
imul eax, eax, 0x88df236b
imul rax, rax, 0x2d2e81c1
shr rax, 0x3b
imul eax, eax, 0x106bbd95
cmp eax, 0xd6058c9b
jbe 0x1400105b0
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
nop dword [rax + rax]
mov eax, dword [0x141f2dde0]
mov ecx, dword [0x141f2dde4]
lea ebp, [rax + rcx]
add ebp, 0x4fd1aa9
and ebp, 0x18f4bb91
add ebp, 0xb525d51a
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
cmp ebp, 0xea453e89
ja 0x1400105b0
cmp qword [rdi + 0x30], 0
mov rbp, qword [rsp + 0x38]
je 0x140010410
nop word cs:[rax + rax]
mov eax, dword [0x141f2dde8]
sub eax, dword [0x141f2ddec]
and eax, 0xa020008
cmp eax, 0xd0b7da84
je 0x140010600
mov eax, dword [0x141f2ddf0]
imul eax, dword [0x141f2ddf4]
add eax, 0x172bde29
imul rax, rax, 0x7d4284f
shr rax, 0x38
imul eax, eax, 0x339cc272
cmp eax, 0xc15ac1f
je 0x140010618
mov eax, dword [0x141f2ddf8]
add eax, dword [0x141f2ddfc]
mov rbx, qword [rdi + 0x38]
and eax, 0x2619358
add eax, 0x7412f9ee
cmp eax, 0xcbeb22b7
jbe 0x140010680
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, rbx
call r13
nop word cs:[rax + rax]
mov edi, dword [0x141f2de00]
sub edi, dword [0x141f2de04]
add edi, 0x5f59bf8c
xor edi, 0x5fb8765a
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, rbx
call r13
cmp edi, 0xa8177b61
ja 0x140010680
jmp 0x140010410
mov r14, qword [rsp + 0x30]
mov rax, qword [r14]
nop dword [rax]
mov ecx, dword [0x141f2de08]
add ecx, dword [0x141f2de0c]
imul ecx, ecx, 0x49e5fec8
add ecx, 0xc6dd0018
cmp ecx, 0xe0747e37
ja 0x1400106c0
test rax, rax
je 0x140010770
mov rbx, qword [0x141f49060]
mov eax, dword [0x141f2de10]
xor edx, edx
div dword [0x141f2de14]
imul rax, rax, 0x65da0019
shr rax, 0x3e
xor eax, 0x3be6df77
add eax, 0xb79142b9
cmp eax, 0x4d083b02
jae 0x140010728
mov rcx, rbx
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141f2de18]
add eax, dword [0x141f2de1c]
xor eax, 0x8a014248
or eax, 0x75dc3c37
imul rdi, rax, 0x77d5d535
shr rdi, 0x3e
mov rcx, rbx
xor edx, edx
mov r8, rbp
call rsi
cmp edi, 0x71b4be2e
ja 0x140010730
nop word cs:[rax + rax]
mov eax, dword [0x141f2de20]
xor eax, dword [0x141f2de24]
or eax, 0xfc4874a
imul eax, eax, 0x5004680b
xor eax, 0x2c9e3a54
cmp eax, 0x27f991e7
jb 0x140010770
mov rsi, qword [r14 + 0x90]
nop word [rax + rax]
mov eax, dword [0x141f2de28]
xor eax, dword [0x141f2de2c]
or eax, 0x20220c8
and eax, 0x2a22edd
add eax, 0x82f2006b
cmp eax, 0xb0ba68d7
ja 0x1400107a0
test rsi, rsi
je 0x140010ce0
mov rdi, qword [r14 + 0xa8]
nop word cs:[rax + rax]
mov eax, dword [0x141f2de30]
xor edx, edx
div dword [0x141f2de34]
xor eax, 0x11ac9de8
imul eax, eax, 0xaa9a5212
or eax, 0xebd37988
cmp eax, 0x61c79992
jb 0x1400107e0
nop word cs:[rax + rax]
mov eax, dword [0x141f2de38]
xor eax, dword [0x141f2de3c]
xor eax, 0xa586557a
add eax, 0xef24b1b6
cmp eax, 0x29cfafc6
jb 0x140010810
test rdi, rdi
je 0x14001094d
lea rbx, [rsi + 0x10]
nop word [rax + rax]
mov eax, dword [0x141f2de40]
or eax, dword [0x141f2de44]
and eax, 0x800504
or eax, 0x9b3a7afb
imul eax, eax, 0xb79bf98c
cmp eax, 0xd8ea7747
je 0x140010840
movdqa xmm0, xmmword [rsi]
pmovmskb ecx, xmm0
not ecx
mov r14, qword [sym.imp.pdh.dll_PdhRemoveCounter]
mov r15d, 0xb73cba6f
mov r12, rsi
mov r13, rdi
jmp 0x1400108b0
tzcnt eax, ecx
shl rax, 5
mov rcx, r12
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
mov ecx, ebp
dec r13
je 0x14001094d
mov eax, dword [0x141f2de48]
xor edx, edx
div dword [0x141f2de4c]
nop
mov eax, dword [0x141f2de50]
add eax, dword [0x141f2de54]
and eax, 0x90201810
xor eax, 0x11805240
or eax, 0x424f85af
cmp eax, 0xfbddac91
ja 0x1400108c0
test cx, cx
je 0x140010920
lea ebp, [rcx - 1]
and ebp, ecx
nop dword [rax]
mov eax, dword [0x141f2de58]
imul eax, dword [0x141f2de5c]
or eax, 0x90dd7123
imul rax, r15
shr rax, 0x3e
cmp eax, 0xcf59ab4
je 0x1400108f0
jmp 0x140010890
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
add r12, 0xfffffffffffffe00
add rbx, 0x10
cmp ecx, 0xffff
je 0x140010920
mov eax, 0xfffffffe
sub eax, ecx
not ecx
mov ebp, ecx
and ebp, eax
jmp 0x140010890
mov rbx, qword [rsp + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141f2de60]
xor edx, edx
div dword [0x141f2de64]
or eax, 0x91aba6c
and eax, 0x7d1bba6c
cmp eax, 0xe946f961
je 0x140010960
nop
mov eax, dword [0x141f2de68]
add eax, dword [0x141f2de6c]
imul eax, eax, 0x8370b7c2
add eax, 0x5f5b44d0
cmp eax, 0x49597aa1
jb 0x140010980
mov rcx, qword [rbx + 0xc8]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400109f0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1400109f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov eax, dword [0x141f2de78]
sub eax, dword [0x141f2de7c]
add eax, 0x5c7bbfdd
xor eax, 0xb506b508
or eax, 0xaa140f0
cmp eax, 0x138248ee
jb 0x1400109c0
nop word cs:[rax + rax]
mov eax, dword [0x141f2de70]
or eax, dword [0x141f2de74]
add eax, 0x8a62269
shr eax, 2
imul rax, rax, 0x222e07b3
shr rax, 0x3b
or eax, 0x94d6e1a0
cmp eax, 0xa66708c5
je 0x1400109f0
mov rcx, qword [rbx + 0xc0]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140010a5f
call qword [sym.imp.pdh.dll_PdhCloseQuery]
nop word cs:[rax + rax]
mov eax, dword [0x141f2de80]
xor edx, edx
div dword [0x141f2de84]
or eax, 0xefefb7ef
xor eax, 0x1704af3a
cmp eax, 0xd2a0fe56
jb 0x140010a40
mov rbx, qword [rbx + 0x98]
nop word cs:[rax + rax]
mov eax, dword [0x141f2de88]
xor eax, dword [0x141f2de8c]
add eax, 0x5564e834
or eax, 0xe7ed878a
add eax, 0x175e8f9c
cmp eax, 0x3cb50060
jb 0x140010a70
test rbx, rbx
je 0x140010ce0
nop dword [rax + rax]
mov eax, dword [0x141f2de90]
xor eax, dword [0x141f2de94]
imul eax, eax, 0xcc745bae
and eax, 0x3263866a
imul eax, eax, 0x6eda813b
cmp eax, 0x28daac9
je 0x140010aa0
test rdi, rdi
je 0x140010c20
movdqa xmm0, xmmword [rsi]
pmovmskb r15d, xmm0
mov eax, 0x8846da27
lea r14, [rsi + 0x10]
not r15d
nop word cs:[rax + rax]
mov ecx, dword [0x141f2de98]
sub ecx, dword [0x141f2de9c]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x36656634
cmp ecx, 0xf4f2c49b
ja 0x140010af0
mov r12d, 0xb99b15d5
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
test r15w, r15w
jne 0x140010b51
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r15d, xmm0
add rsi, 0xfffffffffffffe00
add r14, 0x10
cmp r15d, 0xffff
je 0x140010b30
not r15d
tzcnt ecx, r15d
shl rcx, 5
mov rax, rsi
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x140010bce
mov ecx, dword [0x141f2dea0]
and ecx, dword [0x141f2dea4]
imul ecx, ecx, 0xf7686b31
add ecx, 0x11826203
cmp ecx, 0x8efbaf93
ja 0x140010b67
nop word [rax + rax]
mov ecx, dword [0x141f2dea8]
or ecx, dword [0x141f2deac]
imul rdx, rcx, 0x2e03f211
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
or ecx, 0x7486650e
cmp ecx, 0x65603540
jb 0x140010b90
mov r8, qword [rax - 0x18]
mov rcx, qword [0x141f49060]
xor edx, edx
call r13
lea eax, [r15 - 1]
and eax, r15d
mov r15d, eax
dec rdi
mov eax, dword [0x141f2deb0]
xor edx, edx
div dword [0x141f2deb4]
nop dword [rax]
mov eax, dword [0x141f2deb8]
imul eax, dword [0x141f2debc]
and eax, 0xf1189626
imul eax, eax, 0xbe5a5d33
imul rax, r12
shr rax, 0x3d
cmp eax, 0x1285616
ja 0x140010bf0
test rdi, rdi
jne 0x140010b20
mov rax, rbx
shl rax, 5
lea rcx, [rbx + rax]
add rcx, 0x31
nop
mov edx, dword [0x141f2dec0]
and edx, dword [0x141f2dec4]
cmp edx, 0x30b3ba83
je 0x140010c30
test rcx, rcx
mov rcx, qword [rsp + 0x30]
je 0x140010ce0
mov rsi, qword [rcx + 0x90]
sub rsi, rax
mov rdi, qword [0x141f49060]
mov eax, dword [0x141f2dec8]
imul eax, dword [0x141f2decc]
add rsi, 0xffffffffffffffe0
imul eax, eax, 0x3af22fd
or eax, 0xbdecedf2
cmp eax, 0x7dfbc0f9
jae 0x140010c94
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141f2ded0]
xor edx, edx
div dword [0x141f2ded4]
mov ebx, eax
add ebx, 0x3acc7527
and ebx, 0xc2e2fd8d
add ebx, 0x9f88aed
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r14
cmp ebx, 0x8eff49f4
ja 0x140010ca0
nop word cs:[rax + rax]
mov eax, dword [0x141f2ded8]
xor eax, dword [0x141f2dedc]
add eax, 0x5f5bb46d
and eax, 0xbe04a8dc
add eax, 0x5bf125e1
cmp eax, 0x4b5bcaef
jb 0x140010ce0
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret