Function at 0x140148200
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
mov qword [rbp], 0xfffffffffffffffe
cmp dword [0x1406df718], 0xa
jl 0x140148237
mov eax, dword [0x1406df714]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1401489bc
mov eax, dword [0x1406f0bf0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bf4], 0xa
setl al
or al, cl
mov ecx, dword [0x1406f0bf8]
mov edx, dword [0x1406f0bfc]
jne 0x14014827d
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
cmp edx, 0xa
jl 0x140148279
test ebx, ebx
jne 0x1401489a0
mov byte [rbp - 0x10], 0x86
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
cmp edx, 0xa
jl 0x140148293
test ebx, ebx
jne 0x140148990
mov byte [rbp - 0x10], 0x86
test al, al
je 0x14014826c
mov byte [rbp - 0xf], 0xa5
mov qword [rbp - 0xe], 0
mov qword [rbp - 8], 0
mov r10d, dword [0x1406f0c00]
mov r9d, dword [0x1406f0c04]
nop dword [rax]
cmp r9d, 0xa
jl 0x1401482e0
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x14014830e
nop word cs:[rax + rax]
nop dword [rax]
call fcn.1400a65f0
mov rbx, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r9d, dword [0x1406f0c04]
cmp r9d, 0xa
jl 0x140148320
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140148320
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x1401482e0
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete dl
cmp dword [0x1406f0c14], 0xa
mov r15, qword [rax]
setl r8b
or r8b, dl
xor eax, eax
jmp 0x1401483db
lea ecx, [rax + 0xb7]
and ecx, r14d
lea edx, [r14 + rax]
add edx, 0xb7
add ecx, ecx
sub edx, ecx
add dl, 0xff
mov byte [rbp + rax - 0x10], dl
movzx ecx, dl
not r15
add r15, rax
sub r15, rcx
mov rax, r15
mov r15, rdi
lea ecx, [rax + 0x9c]
lea edx, [rax + r14]
add edx, 0x9c
and ecx, r14d
add ecx, ecx
sub edx, ecx
add dl, 0xbc
mov byte [rbp + rax - 0x10], dl
sub rax, rbx
add rbx, 1
mov dl, byte [rbp + rax - 0x12]
add rax, 0xfffffffffffffffe
movzx ecx, dl
add rcx, r15
add rax, rcx
add rax, 1
cmp rax, 0x10
jae 0x140148620
cmp rbx, rax
ja 0x140148600
mov dl, byte [rbp + rax - 0x10]
movzx r14d, dl
lea rdi, [r15 + 1]
cmp rbx, rdi
jae 0x140148440
cmp r15, rax
ja 0x140148630
lea rsi, [rbx + r15]
cmp rsi, rax
jbe 0x140148490
lea rcx, [r15 + 5]
cmp rbx, rcx
jne 0x1401484bb
lea ecx, [rax + 0x8e]
lea edx, [rax + r14]
add edx, 0x8e
and ecx, r14d
add ecx, ecx
sub edx, ecx
add dl, 0x1e
mov rbx, rsi
jmp 0x14014851d
je 0x1401483c4
lea rsi, [r15 + 2]
cmp rbx, rsi
je 0x140148397
lea rsi, [r15 + 3]
cmp rbx, rsi
jne 0x140148528
nop dword [rax]
test r11b, r11b
je 0x140148460
lea rsi, [rax + 0xa1]
and esi, r14d
add rsi, rsi
lea rdx, [rax + r14]
add rdx, 0xa1
sub rdx, rsi
add rbx, r15
mov dil, 0x99
jmp 0x1401484f7
cmp rbx, rdi
jne 0x1401484cd
test r8b, r8b
je 0x140148970
lea ecx, [rax + 0x23]
and ecx, r14d
lea edx, [rax + r14]
add edx, 0x23
add ecx, ecx
sub edx, ecx
add dl, 0xb
mov byte [rbp + rax - 0x10], dl
mov rdi, rbx
jmp 0x140148534
lea rcx, [r15 + 4]
cmp rbx, rcx
je 0x1401483c4
jmp 0x1401482c0
lea rcx, [r15 + 3]
cmp rbx, rcx
jne 0x140148540
lea rcx, [rax + 0xb9]
lea rdx, [rax + r14]
add rdx, 0xb9
and ecx, r14d
add rcx, rcx
sub rdx, rcx
mov dil, 0xf1
mov rbx, rsi
add dl, dil
lea ecx, [rax + 0xed]
and ecx, r14d
lea esi, [r14 + rax]
add esi, 0xed
add ecx, ecx
sub esi, ecx
add sil, dl
add sil, 0x85
mov byte [rbp + rax - 0x10], sil
movzx ecx, dl
not rcx
jmp 0x1401483ca
lea rsi, [r15 + 7]
cmp rbx, rsi
jne 0x140148568
mov rdi, r15
add rax, 0xffffffffffffffff
mov r15, rdi
jmp 0x1401483cd
lea rcx, [r15 + 5]
cmp rbx, rcx
jne 0x140148596
lea ecx, [rax + 0x83]
lea edx, [rax + r14]
add edx, 0x83
and ecx, r14d
add ecx, ecx
sub edx, ecx
add dl, 0x6b
mov rbx, rsi
jmp 0x14014851d
cmp r15, rax
ja 0x140148630
lea rsi, [r15 + 5]
cmp rbx, rsi
jne 0x1401485e0
lea esi, [rax + 0x85]
lea edx, [rax + r14]
add edx, 0x85
and esi, r14d
add esi, esi
sub edx, esi
add dl, 0x5d
jmp 0x14014851d
lea rcx, [r15 + 4]
cmp rbx, rcx
je 0x140148367
lea rcx, [r15 + 2]
cmp rbx, rcx
je 0x1401483c4
lea rcx, [r15 + 6]
cmp rbx, rcx
je 0x140148534
lea ecx, [rax + 0xe5]
and ecx, r14d
add ecx, ecx
lea edx, [rax + r14]
add edx, 0xe5
sub edx, ecx
add dl, 0xbd
mov byte [rbp + rax - 0x10], dl
jmp 0x1401483cd
lea rsi, [r15 + 6]
cmp rbx, rsi
jne 0x1401483fe
jmp 0x140148367
mov eax, 0x11c9ac1
cmp dword [0x1406f0c18], 0xa
jge 0x140148642
jmp 0x1401489a2
xor eax, eax
cmp dword [0x1406f0c18], 0xa
jge 0x140148642
jmp 0x1401489a2
mov eax, 0x15099dc
cmp dword [0x1406f0c18], 0xa
jl 0x1401489a2
mov ecx, dword [0x1406f0c1c]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1401489a2
cmp r9d, 0xa
jl 0x140148670
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x14014869e
nop word [rax + rax]
call fcn.1400a65f0
mov r15, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r9d, dword [0x1406f0c04]
cmp r9d, 0xa
jl 0x1401486b0
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x1401486b0
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140148670
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov r14, qword [rax]
setl r8b
or r8b, cl
xor eax, eax
jmp 0x14014876c
lea edx, [rax + 0xb7]
and edx, ecx
lea esi, [rcx + rax]
add esi, 0xb7
add edx, edx
sub esi, edx
add sil, 0xff
mov byte [rbp + rax - 0x10], sil
movzx edx, sil
not r14
add r14, rax
sub r14, rdx
mov rax, r14
mov r14, rbx
lea edx, [rax + 0x9c]
lea esi, [rax + rcx]
add esi, 0x9c
and edx, ecx
add edx, edx
sub esi, edx
add sil, 0xbc
mov byte [rbp + rax - 0x10], sil
sub rax, r15
add r15, 1
mov dl, byte [rbp + rax - 0x12]
add rax, 0xfffffffffffffffe
movzx ecx, dl
add rcx, r14
add rax, rcx
add rax, 1
cmp rax, 0x10
jae 0x1401482c0
mov dl, byte [rbp + rax - 0x10]
movzx ecx, dl
cmp r15, rax
ja 0x1401482c0
lea rbx, [r14 + 1]
cmp r15, rbx
jae 0x1401487d0
cmp r14, rax
ja 0x1401482c0
lea rsi, [r15 + r14]
cmp rsi, rax
jbe 0x140148820
lea rdi, [r14 + 5]
cmp r15, rdi
jne 0x140148848
lea edi, [rax + 0x8e]
lea edx, [rax + rcx]
add edx, 0x8e
and edi, ecx
add edi, edi
sub edx, edi
add dl, 0x1e
mov r15, rsi
jmp 0x1401488a1
je 0x140148755
lea rsi, [r14 + 2]
cmp r15, rsi
je 0x140148728
lea rsi, [r14 + 3]
cmp r15, rsi
jne 0x1401488ac
nop dword [rax]
test r11b, r11b
je 0x1401487f0
lea rsi, [rax + 0xa1]
and esi, ecx
add rsi, rsi
lea rdx, [rax + rcx]
add rdx, 0xa1
sub rdx, rsi
add r15, r14
mov bl, 0x99
jmp 0x140148882
cmp r15, rbx
jne 0x14014885a
test r8b, r8b
je 0x140148980
lea edx, [rax + 0x23]
and edx, ecx
add ecx, eax
add ecx, 0x23
add edx, edx
sub ecx, edx
add cl, 0xb
mov byte [rbp + rax - 0x10], cl
mov rbx, r15
jmp 0x1401488b8
lea rcx, [r14 + 4]
cmp r15, rcx
je 0x140148755
jmp 0x140148657
lea rdi, [r14 + 3]
cmp r15, rdi
jne 0x1401488c4
lea rdi, [rax + 0xb9]
lea rdx, [rax + rcx]
add rdx, 0xb9
and edi, ecx
add rdi, rdi
sub rdx, rdi
mov bl, 0xf1
mov r15, rsi
add dl, bl
lea esi, [rax + 0xed]
and esi, ecx
add ecx, eax
add ecx, 0xed
add esi, esi
sub ecx, esi
add cl, dl
add cl, 0x85
mov byte [rbp + rax - 0x10], cl
movzx ecx, dl
not rcx
jmp 0x14014875b
lea rsi, [r14 + 7]
cmp r15, rsi
jne 0x1401488ea
mov rbx, r14
add rax, 0xffffffffffffffff
mov r14, rbx
jmp 0x14014875e
lea rdi, [r14 + 5]
cmp r15, rdi
jne 0x140148916
lea edi, [rax + 0x83]
lea edx, [rax + rcx]
add edx, 0x83
and edi, ecx
add edi, edi
sub edx, edi
add dl, 0x6b
mov r15, rsi
jmp 0x1401488a1
cmp r14, rax
ja 0x1401482c0
lea rsi, [r14 + 5]
cmp r15, rsi
jne 0x14014895d
lea esi, [rax + 0x85]
lea edx, [rax + rcx]
add edx, 0x85
and esi, ecx
add esi, esi
sub edx, esi
add dl, 0x5d
jmp 0x1401488a1
lea rsi, [r14 + 4]
cmp r15, rsi
je 0x1401486f7
lea rsi, [r14 + 2]
cmp r15, rsi
je 0x140148755
lea rdx, [r14 + 6]
cmp r15, rdx
je 0x1401488b8
lea edx, [rax + 0xe5]
and edx, ecx
add edx, edx
add ecx, eax
add ecx, 0xe5
sub ecx, edx
add cl, 0xbd
mov byte [rbp + rax - 0x10], cl
jmp 0x14014875e
lea rsi, [r14 + 6]
cmp r15, rsi
jne 0x14014878e
jmp 0x1401486f7
jmp 0x140148970
jmp 0x140148980
jmp 0x140148990
jmp 0x1401489a0
cmp dword [0x1406df718], 0xa
jl 0x1401489fa
mov ecx, dword [0x1406df714]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1401489fa
mov eax, dword [0x1406f0bf0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f0bf4], 0xa
setl al
or al, cl
mov ecx, dword [0x1406f0bf8]
mov edx, dword [0x1406f0bfc]
jne 0x140148abe
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
jmp 0x140148aad
lea rsi, [rax + rbp]
add rsi, 0xfffffffffffffff0
lea rdi, [rbp - 0x30]
mov rcx, rdi
call fcn.1400abec0
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rdi
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
mov r8, qword [rbp - 0x18]
cmp r8, 0x10
jb 0x140148a3f
mov rdx, qword [rbp - 0x30]
add r8, 1
lea rcx, [rbp - 0x30]
call fcn.14017a700
cmp dword [0x1406f0a30], 0xa
jl 0x140148a62
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140148a62
nop dword [rax]
jmp 0x140148a60
cmp dword [0x1406df718], 0xa
jl 0x140148a82
mov eax, dword [0x1406df714]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140148a82
nop dword [rax]
jmp 0x140148a80
mov eax, dword [0x1406f1700]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f1704], 0xa
setl al
or al, cl
cmp al, 1
jne 0x1401491d0
jmp 0x1401491b2
cmp edx, 0xa
jl 0x140148aba
test ebx, ebx
jne 0x1401491b0
mov byte [rbp - 0x10], 0x86
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
cmp edx, 0xa
jl 0x140148ad4
test ebx, ebx
jne 0x1401491a0
mov byte [rbp - 0x10], 0x86
test al, al
je 0x140148aad
mov byte [rbp - 0xf], 0xa5
mov qword [rbp - 0xe], 0
mov qword [rbp - 8], 0
mov r10d, dword [0x1406f0c00]
mov r9d, dword [0x1406f0c04]
nop
cmp r9d, 0xa
jl 0x140148b20
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x140148b4e
nop word cs:[rax + rax]
nop dword [rax]
call fcn.1400a65f0
mov r14, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r9d, dword [0x1406f0c04]
cmp r9d, 0xa
jl 0x140148b60
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140148b60
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140148b20
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov rdx, qword [rax]
setl r8b
or r8b, cl
xor eax, eax
jmp 0x140148c20
lea ecx, [rax + 0xb7]
and ecx, r15d
lea esi, [r15 + rax]
add esi, 0xb7
add ecx, ecx
sub esi, ecx
add sil, 0xff
mov byte [rbp + rax - 0x10], sil
movzx ecx, sil
not rdx
add rdx, rax
sub rdx, rcx
mov rax, rdx
mov rdx, rdi
lea ecx, [rax + 0x9c]
lea esi, [rax + r15]
add esi, 0x9c
and ecx, r15d
add ecx, ecx
sub esi, ecx
add sil, 0xbc
mov byte [rbp + rax - 0x10], sil
sub rax, r14
add r14, 1
mov bl, byte [rbp + rax - 0x12]
add rax, 0xfffffffffffffffe
movzx ecx, bl
add rcx, rdx
add rax, rcx
add rax, 1
cmp rax, 0x10
jae 0x140148e40
cmp r14, rax
ja 0x140148e40
mov bl, byte [rbp + rax - 0x10]
movzx r15d, bl
lea rdi, [rdx + 1]
cmp r14, rdi
jae 0x140148c80
cmp rdx, rax
ja 0x140148e40
lea rsi, [r14 + rdx]
cmp rsi, rax
jbe 0x140148cd0
lea rcx, [rdx + 5]
cmp r14, rcx
jne 0x140148cfb
lea ecx, [rax + 0x8e]
lea edi, [rax + r15]
add edi, 0x8e
and ecx, r15d
add ecx, ecx
sub edi, ecx
add dil, 0x1e
mov r14, rsi
jmp 0x140148d5c
je 0x140148c09
lea rsi, [rdx + 2]
cmp r14, rsi
je 0x140148bda
lea rsi, [rdx + 3]
cmp r14, rsi
jne 0x140148d68
nop dword [rax]
test r11b, r11b
je 0x140148ca0
lea rsi, [rax + 0xa1]
and esi, r15d
add rsi, rsi
lea rdi, [rax + r15]
add rdi, 0xa1
sub rdi, rsi
add r14, rdx
mov bl, 0x99
jmp 0x140148d36
cmp r14, rdi
jne 0x140148d0d
test r8b, r8b
je 0x140149180
lea ecx, [rax + 0x23]
and ecx, r15d
lea edx, [rax + r15]
add edx, 0x23
add ecx, ecx
sub edx, ecx
add dl, 0xb
mov byte [rbp + rax - 0x10], dl
mov rdi, r14
jmp 0x140148d74
lea rcx, [rdx + 4]
cmp r14, rcx
je 0x140148c09
jmp 0x140148b00
lea rcx, [rdx + 3]
cmp r14, rcx
jne 0x140148d80
lea rcx, [rax + 0xb9]
lea rdi, [rax + r15]
add rdi, 0xb9
and ecx, r15d
add rcx, rcx
sub rdi, rcx
mov bl, 0xf1
mov r14, rsi
add dil, bl
lea ecx, [rax + 0xed]
and ecx, r15d
lea esi, [r15 + rax]
add esi, 0xed
add ecx, ecx
sub esi, ecx
add sil, dil
add sil, 0x85
mov byte [rbp + rax - 0x10], sil
movzx ecx, dil
not rcx
jmp 0x140148c0f
lea rsi, [rdx + 7]
cmp r14, rsi
jne 0x140148da9
mov rdi, rdx
add rax, 0xffffffffffffffff
mov rdx, rdi
jmp 0x140148c12
lea rcx, [rdx + 5]
cmp r14, rcx
jne 0x140148dd8
lea ecx, [rax + 0x83]
lea edi, [rax + r15]
add edi, 0x83
and ecx, r15d
add ecx, ecx
sub edi, ecx
add dil, 0x6b
mov r14, rsi
jmp 0x140148d5c
cmp rdx, rax
ja 0x140148e40
lea rsi, [rdx + 5]
cmp r14, rsi
jne 0x140148e24
lea esi, [rax + 0x85]
lea edi, [rax + r15]
add edi, 0x85
and esi, r15d
add esi, esi
sub edi, esi
add dil, 0x5d
jmp 0x140148d5c
lea rcx, [rdx + 4]
cmp r14, rcx
je 0x140148ba7
lea rcx, [rdx + 2]
cmp r14, rcx
je 0x140148c09
lea rcx, [rdx + 6]
cmp r14, rcx
je 0x140148d74
lea ecx, [rax + 0xe5]
and ecx, r15d
add ecx, ecx
lea esi, [rax + r15]
add esi, 0xe5
sub esi, ecx
add sil, 0xbd
mov byte [rbp + rax - 0x10], sil
jmp 0x140148c12
lea rsi, [rdx + 6]
cmp r14, rsi
jne 0x140148c43
jmp 0x140148ba7
cmp dword [0x1406f0c18], 0xa
jl 0x140148237
mov eax, dword [0x1406f0c1c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140148237
cmp r9d, 0xa
jl 0x140148e80
lea eax, [r10 - 1]
imul eax, r10d
and eax, 1
jne 0x140148eae
nop word cs:[rax + rax]
nop
call fcn.1400a65f0
mov r15, qword [rax]
call fcn.1400a6600
mov r10d, dword [0x1406f0c00]
mov r9d, dword [0x1406f0c04]
cmp r9d, 0xa
jl 0x140148ec0
lea ecx, [r10 - 1]
imul ecx, r10d
and ecx, 1
je 0x140148ec0
call fcn.1400a65f0
call fcn.1400a6600
jmp 0x140148e80
mov ecx, dword [0x1406f0c08]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c0c], 0xa
setl r11b
or r11b, cl
mov ecx, dword [0x1406f0c10]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406f0c14], 0xa
mov r14, qword [rax]
setl r8b
or r8b, cl
xor eax, eax
jmp 0x140148f7c
lea edx, [rax + 0xb7]
and edx, ecx
lea esi, [rcx + rax]
add esi, 0xb7
add edx, edx
sub esi, edx
add sil, 0xff
mov byte [rbp + rax - 0x10], sil
movzx edx, sil
not r14
add r14, rax
sub r14, rdx
mov rax, r14
mov r14, rbx
lea edx, [rax + 0x9c]
lea esi, [rax + rcx]
add esi, 0x9c
and edx, ecx
add edx, edx
sub esi, edx
add sil, 0xbc
mov byte [rbp + rax - 0x10], sil
sub rax, r15
add r15, 1
mov dl, byte [rbp + rax - 0x12]
add rax, 0xfffffffffffffffe
movzx ecx, dl
add rcx, r14
add rax, rcx
add rax, 1
cmp rax, 0x10
jae 0x140148b00
mov dl, byte [rbp + rax - 0x10]
movzx ecx, dl
cmp r15, rax
ja 0x140148b00
lea rbx, [r14 + 1]
cmp r15, rbx
jae 0x140148fe0
cmp r14, rax
ja 0x140148b00
lea rsi, [r15 + r14]
cmp rsi, rax
jbe 0x140149030
lea rdi, [r14 + 5]
cmp r15, rdi
jne 0x140149058
lea edi, [rax + 0x8e]
lea edx, [rax + rcx]
add edx, 0x8e
and edi, ecx
add edi, edi
sub edx, edi
add dl, 0x1e
mov r15, rsi
jmp 0x1401490b1
je 0x140148f65
lea rsi, [r14 + 2]
cmp r15, rsi
je 0x140148f38
lea rsi, [r14 + 3]
cmp r15, rsi
jne 0x1401490bc
nop dword [rax]
test r11b, r11b
je 0x140149000
lea rsi, [rax + 0xa1]
and esi, ecx
add rsi, rsi
lea rdx, [rax + rcx]
add rdx, 0xa1
sub rdx, rsi
add r15, r14
mov bl, 0x99
jmp 0x140149092
cmp r15, rbx
jne 0x14014906a
test r8b, r8b
je 0x140149190
lea edx, [rax + 0x23]
and edx, ecx
add ecx, eax
add ecx, 0x23
add edx, edx
sub ecx, edx
add cl, 0xb
mov byte [rbp + rax - 0x10], cl
mov rbx, r15
jmp 0x1401490c8
lea rcx, [r14 + 4]
cmp r15, rcx
je 0x140148f65
jmp 0x140148e62
lea rdi, [r14 + 3]
cmp r15, rdi
jne 0x1401490d4
lea rdi, [rax + 0xb9]
lea rdx, [rax + rcx]
add rdx, 0xb9
and edi, ecx
add rdi, rdi
sub rdx, rdi
mov bl, 0xf1
mov r15, rsi
add dl, bl
lea esi, [rax + 0xed]
and esi, ecx
add ecx, eax
add ecx, 0xed
add esi, esi
sub ecx, esi
add cl, dl
add cl, 0x85
mov byte [rbp + rax - 0x10], cl
movzx ecx, dl
not rcx
jmp 0x140148f6b
lea rsi, [r14 + 7]
cmp r15, rsi
jne 0x1401490fa
mov rbx, r14
add rax, 0xffffffffffffffff
mov r14, rbx
jmp 0x140148f6e
lea rdi, [r14 + 5]
cmp r15, rdi
jne 0x140149126
lea edi, [rax + 0x83]
lea edx, [rax + rcx]
add edx, 0x83
and edi, ecx
add edi, edi
sub edx, edi
add dl, 0x6b
mov r15, rsi
jmp 0x1401490b1
cmp r14, rax
ja 0x140148b00
lea rsi, [r14 + 5]
cmp r15, rsi
jne 0x14014916d
lea esi, [rax + 0x85]
lea edx, [rax + rcx]
add edx, 0x85
and esi, ecx
add esi, esi
sub edx, esi
add dl, 0x5d
jmp 0x1401490b1
lea rsi, [r14 + 4]
cmp r15, rsi
je 0x140148f07
lea rsi, [r14 + 2]
cmp r15, rsi
je 0x140148f65
lea rdx, [r14 + 6]
cmp r15, rdx
je 0x1401490c8
lea edx, [rax + 0xe5]
and edx, ecx
add edx, edx
add ecx, eax
add ecx, 0xe5
sub ecx, edx
add cl, 0xbd
mov byte [rbp + rax - 0x10], cl
jmp 0x140148f6e
lea rsi, [r14 + 6]
cmp r15, rsi
jne 0x140148f9e
jmp 0x140148f07
jmp 0x140149180
jmp 0x140149190
jmp 0x1401491a0
jmp 0x1401491b0
cmp dword [0x1406f0dd4], 0xa
jl 0x1401491cc
mov ecx, dword [0x1406f0dd0]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
jne 0x140149200
test al, al
jne 0x140149202
cmp dword [0x1406f0dd4], 0xa
jl 0x1401491b2
mov ecx, dword [0x1406f0dd0]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1401491b2
nop word [rax + rax]
jmp 0x1401491f0
jmp 0x140149200
cmp dword [0x1406e0b24], 0xa
jl 0x140149222
mov eax, dword [0x1406e0b20]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140149222
nop dword [rax]
jmp 0x140149220
mov rbx, qword [0x1406eef30]
test rbx, rbx
je 0x14014927d
xor eax, eax
lea rcx, [0x140179af0]
lea rdx, [0x1406eef30]
cmp rbx, rcx
je 0x140149251
add eax, 1
mov rbx, qword [rdx + rax*8]
test rbx, rbx
jne 0x14014923e
jmp 0x14014927d
mov eax, eax
lea rcx, [0x1406ef250]
mov rsi, qword [rcx + rax*8]
test rsi, rsi
je 0x14014927d
mov edx, dword [0x1406e0b28]
mov eax, dword [0x1406e0b2c]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
jmp 0x140149308
mov edx, 0x1f4
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
je 0x1401492b3
lea rdx, [0x140179af0]
mov r8d, 0x1f4
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1406eef28]
lea rax, [0x1406eef30]
lea rcx, [0x140179af0]
mov qword [rax + rdx*8], rcx
mov ebx, dword [0x1406e0b28]
mov eax, dword [0x1406e0b2c]
lea ecx, [rbx - 1]
imul ecx, ebx
and ecx, 1
cmp eax, 0xa
jl 0x1401492f2
test ecx, ecx
je 0x1401492f2
nop word [rax + rax]
jmp 0x1401492f0
lea rbx, [0x1406ef250]
mov qword [rbx + rdx*8], rsi
add rdx, 1
mov qword [0x1406eef28], rdx
test ecx, ecx
je 0x140149311
cmp eax, 9
jg 0x140149334
lea rcx, [0x14014c5b0]
call rsi
cmp dword [0x1406e0b2c], 0xa
jl 0x14014933f
mov eax, dword [0x1406e0b28]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x14014933f
lea rcx, [0x14014c5b0]
call rsi
jmp 0x140149311
mov ecx, 0x3e8
call fcn.140122740
mov al, 1
add rsp, 0x58
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret