Function at 0x1400b5f80
Capabilities:
Create pipe
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x10], xmm6
mov r8d, edx
mov qword [rbp - 0x18], rcx
mov eax, dword [0x141dd0ef8]
xor edx, edx
div dword [0x141dd0efc]
imul eax, eax, 0xd37be574
xor eax, 0xb72cd433
add eax, 0xe9512ae9
cmp eax, 0x2bed6ee4
jae 0x1400b6040
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
xor ecx, ecx
nop word cs:[rax + rax]
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rdi, rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
test cl, cl
jne 0x1400b6050
mov qword [rbp - 0x50], rdx
mov eax, dword [0x141dd0f00]
xor edx, edx
div dword [0x141dd0f04]
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x80], r11
mov qword [rbp - 0x48], r9
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f08]
imul eax, dword [0x141dd0f0c]
imul eax, eax, 0x85315d64
cmp eax, 0x71934369
je 0x1400b6120
mov qword [rbp - 8], r10
mov byte [rbp + 0xf], r8b
movzx eax, r8b
mov ecx, 0x40080002
sub ecx, eax
mov dword [rbp - 0x2c], ecx
mov ebx, 8
mov dil, 1
xorps xmm6, xmm6
xor eax, eax
mov qword [rbp - 0x40], rax
nop word cs:[rax + rax]
mov dword [rbp - 0x34], ebx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add rsp, 0x20
mov r15, qword [rbp - 0x78]
mov dword [r15], eax
mov rax, qword [0x141dd7fc8]
test rax, rax
mov r14, qword [rbp - 0x10]
mov r13, qword [rbp - 0x60]
jne 0x1400b629d
mov eax, dword [0x141dd0f10]
or eax, dword [0x141dd0f14]
or eax, 0xda109e80
add eax, 0x30aea2c1
cmp eax, 0x741f0f4b
jbe 0x1400b61e3
movups xmmword [r12], xmm6
sub rsp, 0x20
mov edx, 0x10
mov rcx, r12
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
mov rax, qword [r12]
mov qword [0x141dd7fc8], rax
mov rbx, qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
nop word [rax + rax]
mov eax, dword [0x141dd0f18]
or eax, dword [0x141dd0f1c]
imul esi, eax, 0x9a586168
add esi, 0xe8098860
movups xmmword [r12], xmm6
sub rsp, 0x20
mov edx, 0x10
mov rcx, r12
call rbx
add rsp, 0x20
mov rax, qword [r12]
mov qword [0x141dd7fc8], rax
cmp esi, 0x710e270
jb 0x1400b61f0
mov eax, dword [0x141dd0f20]
and eax, dword [0x141dd0f24]
imul eax, eax, 0xedfe268e
cmp eax, 0xc572837
jne 0x1400b6252
mov rax, qword [0x141dd7fc8]
xor edx, edx
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0f28]
imul ecx, dword [0x141dd0f2c]
and ecx, 0x12fb308e
add ecx, 0x2a108737
mov rax, qword [0x141dd7fc8]
cmp ecx, 0x3033d659
ja 0x1400b6260
nop dword [rax + rax]
test dl, dl
jne 0x1400b6290
test rax, rax
je 0x1400b61a0
mov eax, 1
lock xadd qword [0x141dd7fc8], rax
mov rcx, qword [rbp - 0x80]
mov qword [rcx], rax
mov rax, qword [rbp - 0x70]
mov qword [rax], r15
lea rdx, [0x140055330]
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rcx
lea rcx, [0x140053630]
mov qword [rax + 0x18], rcx
mov rdx, qword [rbp - 0x68]
lea rcx, [0x141db66b8]
mov qword [rdx], rcx
mov qword [rdx + 8], 2
mov qword [rdx + 0x20], 0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 2
sub rsp, 0x20
mov rcx, r13
call fcn.1400378f0
add rsp, 0x20
cmp qword [rbp - 0x20], 0
sete al
or dil, al
test dil, 1
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
jne 0x1400b63a2
nop dword [rax]
mov eax, dword [0x141dd1080]
xor eax, dword [0x141dd1084]
or eax, 0xdffdcfea
cmp eax, 0x9d0f2f95
je 0x1400b6330
mov rbx, qword [0x141dd7fe0]
xor eax, eax
test al, al
je 0x1400b6370
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
nop word [rax + rax]
mov esi, dword [0x141dd1088]
sub esi, dword [0x141dd108c]
xor esi, 0xed375b72
add esi, 0x8ba9e85a
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
cmp esi, 0xdab3ae14
jb 0x1400b6370
mov rax, qword [rbp - 0x40]
lea r11d, [rax + 1]
mov eax, dword [0x141dd0f30]
xor edx, edx
div dword [0x141dd0f34]
nop dword [rax + rax]
mov eax, dword [0x141dd0f38]
and eax, dword [0x141dd0f3c]
and eax, 0xe9838f2b
imul eax, eax, 0x40decea5
add eax, 0x4bc4de52
cmp eax, 0xecdaa203
ja 0x1400b63c0
mov r9, qword [r13]
mov rcx, qword [r13 + 8]
mov r10, qword [r13 + 0x10]
lea rax, [rcx + r10]
mov qword [rbp - 0x28], rax
nop word [rax + rax]
mov eax, dword [0x141dd0f40]
xor edx, edx
div dword [0x141dd0f44]
or eax, 0xac3fc236
imul eax, eax, 0x87d7a946
cmp eax, 0xb9f3a1ee
ja 0x1400b6400
test r10, r10
mov qword [rbp - 0x10], rcx
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x58], r10
mov dword [rbp - 0x30], r11d
je 0x1400b64f0
xor eax, eax
test al, al
jne 0x1400b643b
lea r13, [rcx + 1]
movzx r15d, byte [rcx]
mov eax, dword [0x141dd0f48]
xor edx, edx
div dword [0x141dd0f4c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f50]
xor eax, dword [0x141dd0f54]
xor eax, 0x7899b3ab
imul rax, rax, 0x2a1e58a1
shr rax, 0x3b
cmp eax, 0x9873b643
je 0x1400b6460
test r15b, r15b
js 0x1400b6510
nop dword [rax]
mov eax, dword [0x141dd0f58]
sub eax, dword [0x141dd0f5c]
add eax, 0x1d5f3be7
and eax, 0x54013d5
add eax, 0x39b09130
cmp eax, 0x11b726fb
jb 0x1400b6490
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f60]
imul eax, dword [0x141dd0f64]
or eax, 0x45063793
add eax, 0xb0d039e7
and eax, 0xa99f6926
cmp eax, 0x248ee734
je 0x1400b64c0
jmp 0x1400b66b0
mov r14d, 4
mov ebx, 8
xor edi, edi
xor r13d, r13d
xor r15d, r15d
xor eax, eax
jmp 0x1400b673d
mov ecx, r15d
and ecx, 0x1f
mov r8, qword [rbp - 0x10]
movzx eax, byte [r8 + 1]
and eax, 0x3f
cmp r15b, 0xdf
jbe 0x1400b65ed
nop dword [rax]
mov edx, dword [0x141dd0f68]
sub edx, dword [0x141dd0f6c]
add edx, 0x29ffaa10
xor edx, 0xe7bd0862
shr edx, 1
imul rdx, rdx, 0x4c9f30e3
shr rdx, 0x3b
cmp edx, 0xc7a59ba4
ja 0x1400b6530
lea r13, [r8 + 3]
movzx r8d, byte [r8 + 2]
shl eax, 6
and r8d, 0x3f
or r8d, eax
cmp r15b, 0xf0
jb 0x1400b65fe
mov eax, dword [0x141dd0f70]
xor edx, edx
div dword [0x141dd0f74]
mov eax, dword [0x141dd0f78]
xor edx, edx
div dword [0x141dd0f7c]
add eax, 0xc913e557
xor eax, 0xd46e182
cmp eax, 0x6ed69bb3
jb 0x1400b6588
mov rax, qword [rbp - 0x10]
add rax, 4
mov edx, dword [0x141dd0f80]
xor edx, dword [0x141dd0f84]
add edx, 0x54510ed3
and edx, 0x9f7eac6f
cmp edx, 0x2d0ea9b9
ja 0x1400b65af
movzx r15d, byte [r13]
and ecx, 7
shl ecx, 0x12
shl r8d, 6
and r15d, 0x3f
or r15d, r8d
or r15d, ecx
mov r13, rax
jmp 0x1400b6607
lea r13, [r8 + 2]
shl ecx, 6
or ecx, eax
mov r15d, ecx
jmp 0x1400b66b0
shl ecx, 0xc
or r8d, ecx
mov r15d, r8d
mov eax, dword [0x141dd0f88]
xor edx, edx
div dword [0x141dd0f8c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f90]
sub eax, dword [0x141dd0f94]
and eax, 0x2082eb8f
add eax, 0x414563d7
or eax, 0x26bb5ea7
cmp eax, 0xefc30d33
ja 0x1400b6620
cmp r15d, 0xffff
jbe 0x1400b66b0
lea ecx, [r15 + 0xff0000]
shr ecx, 0xa
mov eax, dword [0x141dd0fa0]
xor edx, edx
div dword [0x141dd0fa4]
mov eax, dword [0x141dd0fa8]
xor edx, edx
div dword [0x141dd0fac]
imul eax, eax, 0xc1246cb1
xor eax, 0x4b96008c
add eax, 0xf786e34c
cmp eax, 0x4f8ffbeb
ja 0x1400b6663
movzx ecx, cx
or ecx, 0xd800
and r15d, 0x3ff
or r15d, 0xdc00
mov eax, 2
mov edi, r15d
mov r15d, ecx
jmp 0x1400b66d7
mov eax, dword [0x141dd0f98]
sub eax, dword [0x141dd0f9c]
shr eax, 1
imul rax, rax, 0x44d91b27
shr rax, 0x3c
cmp eax, 0xe8255e66
je 0x1400b66b0
xor edi, edi
mov eax, 1
mov ecx, dword [0x141dd0fb0]
or ecx, dword [str.9Z]
imul ecx, ecx, 0x38f231e1
mov rdx, qword [rbp - 0x28]
sub rdx, r13
add rdx, 3
mov r8, 0xffffffffffffffff
cmovb rdx, r8
shr rdx, 2
lea r14, [rdx + rax]
inc r14
add rdx, rax
cmp rdx, 3
mov edx, 4
cmovb r14, rdx
cmp ecx, 0xe550e4e4
je 0x1400b66d7
movabs rax, 0x3fffffffffffffff
cmp r14, rax
ja 0x1400b720f
lea rbx, [r14 + r14]
mov ax, 1
mov qword [rbp], rax
mov eax, dword [0x141dd0fc0]
xor edx, edx
div dword [0x141dd0fc4]
imul eax, eax, 0xf3eccbb2
or eax, 0x797d65d9
add eax, 0x4b8550af
cmp eax, 0xd2cbfacd
jbe 0x1400b6780
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400beea0
add rsp, 0x20
nop
mov eax, dword [0x141dd0fc8]
xor edx, edx
div dword [0x141dd0fcc]
xor eax, 0x86080002
and eax, 0xd7080833
imul esi, eax, 0x831d821f
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400beea0
add rsp, 0x20
cmp esi, 0x2b255698
jb 0x1400b6780
mov r9, rax
test rax, rax
je 0x1400b7239
mov eax, dword [0x141dd0fd8]
or eax, dword [0x141dd0fdc]
add eax, 0xaa367a7b
and eax, 0x97faad60
cmp eax, 0x5255e960
mov rcx, qword [rbp - 8]
mov r8d, 0x8b2ebe13
jb 0x1400b6835
nop word cs:[rax + rax]
mov eax, dword [0x141dd0fe0]
and eax, dword [0x141dd0fe4]
add eax, 0x81584024
or eax, 0x9010020
and eax, 0xd09cca5
mov word [r9], r15w
mov qword [rcx], r14
mov qword [rcx + 8], r9
mov qword [rcx + 0x10], 1
cmp eax, 0xdb523065
jne 0x1400b6850
mov word [r9], r15w
mov qword [rcx], r14
mov qword [rcx + 8], r9
mov qword [rcx + 0x10], 1
jmp 0x1400b6800
mov ebx, 1
jmp 0x1400b686e
mov edi, eax
mov word [r9 + rbx*2], r14w
inc rbx
mov qword [rcx + 0x10], rbx
test r13, r13
je 0x1400b6940
mov eax, dword [0x141dd0fe8]
add eax, dword [0x141dd0fec]
and eax, 0x400889c2
cmp eax, 0x6b7be4bb
je 0x1400b6877
test di, di
je 0x1400b68b0
xor eax, eax
mov r14d, edi
cmp rbx, qword [rcx]
jne 0x1400b6860
jmp 0x1400b6b50
mov eax, dword [0x141dd0ff0]
sub eax, dword [0x141dd0ff4]
xor eax, 0x28402800
and eax, 0x28c9b801
cmp eax, 0xd4b2e46b
je 0x1400b68b0
nop dword [rax]
mov eax, dword [0x141dd0ff8]
sub eax, dword [0x141dd0ffc]
shr eax, 1
imul rax, r8
shr rax, 0x3e
imul eax, eax, 0xa8699ce7
xor eax, 0xfdadc2f8
cmp eax, 0x5755a103
jb 0x1400b68d0
cmp r13, qword [rbp - 0x28]
je 0x1400b6940
movzx r10d, byte [r13]
test r10b, r10b
js 0x1400b69b5
inc r13
nop
mov eax, dword [0x141dd1008]
xor edx, edx
div dword [0x141dd100c]
xor eax, 0x283ce36d
imul eax, eax, 0xc3da156
or eax, 0x3e2c2d9a
cmp eax, 0x8df54a68
jbe 0x1400b6910
mov rdi, r13
mov r8d, r10d
jmp 0x1400b6afb
mov eax, dword [0x141dd1040]
and eax, dword [0x141dd1044]
or eax, 0x723640a5
and eax, 0x72b644f5
add eax, 0xaaf2888a
cmp eax, 0x5ca4aa21
ja 0x1400b6940
mov eax, dword [0x141dd1048]
xor edx, edx
div dword [0x141dd104c]
imul rax, rax, 0x65e84995
shr rax, 0x3e
cmp eax, 0x6881f4f8
je 0x1400b6962
mov r15, qword [rcx]
cmp word [rbp], 1
jne 0x1400b6c70
xor r14d, r14d
mov r13d, 0
mov eax, 0
mov qword [rbp], rax
mov esi, 0
cmp rbx, r15
jne 0x1400b6862
jmp 0x1400b6bc1
mov r11d, r10d
and r11d, 0x1f
lea rdi, [r13 + 2]
movzx esi, byte [r13 + 1]
mov r8d, r11d
shl r8d, 6
and esi, 0x3f
or r8d, esi
mov eax, dword [0x141dd1000]
or eax, dword [0x141dd1004]
add eax, 0xa94fb926
cmp eax, 0xe6fbdade
ja 0x1400b69d2
cmp r10b, 0xdf
jbe 0x1400b6afb
xor eax, eax
test al, al
jne 0x1400b69f6
nop word [rax + rax]
mov eax, dword [0x141dd1010]
xor edx, edx
div dword [str.oc_vm]
add eax, 0xaa7a02af
or eax, 0x4bb87013
cmp eax, 0x9451548c
je 0x1400b6a00
movzx r8d, byte [r13 + 2]
shl esi, 6
and r8d, 0x3f
or r8d, esi
cmp r10b, 0xf0
jb 0x1400b6a5a
movzx eax, byte [r13 + 3]
add r13, 4
and r11d, 7
shl r11d, 0x12
shl r8d, 6
and eax, 0x3f
or eax, r8d
or eax, r11d
mov rdi, r13
mov r8d, eax
jmp 0x1400b6a68
add r13, 3
shl r11d, 0xc
or r8d, r11d
mov rdi, r13
mov eax, dword [0x141dd1018]
sub eax, dword [0x141dd101c]
and eax, 0x20090200
cmp eax, 0x18aeb9b1
je 0x1400b6a68
cmp r8d, 0xffff
jbe 0x1400b6afb
mov rcx, qword [rbp - 8]
mov eax, dword [0x141dd1030]
sub eax, dword [0x141dd1034]
add eax, 0x3591724b
cmp eax, 0x8244a4d5
ja 0x1400b6a8d
lea r14d, [r8 + 0xff0000]
shr r14d, 0xa
or r14d, 0xd800
and r8d, 0x3ff
mov edx, dword [0x141dd1038]
add edx, dword [0x141dd103c]
or edx, 0xd6a739f1
add edx, 0x65fc683b
movzx eax, r8w
or eax, 0xdc00
cmp edx, 0x1af03f3d
jb 0x1400b6abe
mov r13, rdi
mov r8d, 0x8b2ebe13
cmp rbx, qword [rcx]
jne 0x1400b6860
jmp 0x1400b6b50
mov eax, dword [0x141dd1020]
xor edx, edx
div dword [0x141dd1024]
mov rcx, qword [rbp - 8]
nop dword [rax]
mov eax, dword [0x141dd1028]
xor eax, dword [0x141dd102c]
xor eax, 0x25f534e9
imul eax, eax, 0x823d1c02
cmp eax, 0x50d35d95
jb 0x1400b6b10
xor eax, eax
mov r13, rdi
mov r14d, r8d
mov r8d, 0x8b2ebe13
cmp rbx, qword [rcx]
jne 0x1400b6860
nop word cs:[rax + rax]
mov edx, dword [0x141dd1050]
add edx, dword [0x141dd1054]
xor edx, 0x7a1f69d3
imul edx, edx, 0xf98934e2
add edx, 0x8309d280
cmp edx, 0xb9b3033b
ja 0x1400b6b50
mov edx, dword [0x141dd1058]
or edx, dword [0x141dd105c]
xor edx, 0xeb6657a6
add edx, 0xd275228d
mov rsi, qword [rbp - 0x28]
sub rsi, r13
add rsi, 3
mov r8, 0xffffffffffffffff
cmovb rsi, r8
shr rsi, 2
cmp ax, 1
sbb rsi, 0xffffffffffffffff
cmp edx, 0x6464fe02
jb 0x1400b6b76
movzx edx, word [rbp]
add rsi, rdx
mov edi, eax
mov eax, dword [0x141dd1060]
add eax, dword [0x141dd1064]
xor eax, 0x10142123
and eax, 0x72bea5f3
cmp eax, 0x3c8248d3
je 0x1400b6c3e
mov eax, dword [0x141dd1068]
or eax, dword [0x141dd106c]
imul r15d, eax, 0x6ab21052
add r15d, 0xe2003e50
and r15d, 0x28dde1f2
lea r8, [rsi + 1]
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rdx, rbx
call fcn.1400faca0
mov rcx, qword [rbp - 8]
add rsp, 0x30
cmp r15d, 0xe053c253
ja 0x1400b6bde
mov r9, qword [rcx + 8]
mov r8d, 0x8b2ebe13
jmp 0x1400b6862
lea r8, [rsi + 1]
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rdx, rbx
call fcn.1400faca0
mov rcx, qword [rbp - 8]
add rsp, 0x30
jmp 0x1400b6bde
mov eax, dword [0x141dd1070]
xor eax, dword [0x141dd1074]
imul eax, eax, 0x47c4f540
add eax, 0xfd15ca87
or eax, 0xf269d55
cmp eax, 0x1d44487e
mov edi, dword [rbp - 0x2c]
mov ebx, dword [rbp - 0x34]
jne 0x1400b6cdb
mov rcx, qword [rcx + 8]
sub rsp, 0x40
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000
mov dword [rsp + 0x20], 0x10000
mov edx, edi
mov r8d, ebx
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov rcx, qword [rbp - 8]
add rsp, 0x40
mov r14, qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
nop word cs:[rax + rax]
mov eax, dword [0x141dd1078]
mov edx, dword [0x141dd107c]
lea esi, [rax + rdx]
add esi, 0xb6456f8c
or esi, 0xfe6f7af9
mov r13, qword [rcx + 8]
sub rsp, 0x40
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000
mov dword [rsp + 0x20], 0x10000
mov rcx, r13
mov edx, edi
mov r8d, ebx
mov r9d, 1
call r14
mov rcx, qword [rbp - 8]
add rsp, 0x40
cmp esi, 0x229d987
je 0x1400b6cf0
cmp rax, 0xffffffffffffffff
mov qword [rbp], rax
jne 0x1400b6ef0
mov eax, dword [0x141dd10c8]
sub eax, dword [0x141dd10cc]
xor eax, 0x91d20c
add eax, 0x90979c74
or eax, 0xfe0cab89
cmp eax, 0xae93dccb
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
jae 0x1400b6da0
sub rsp, 0x20
call rdi
add rsp, 0x20
nop word cs:[rax + rax]
mov esi, dword [0x141dd10d0]
sub esi, dword [0x141dd10d4]
and esi, 0x45ad126a
add esi, 0x49aa92bf
and esi, 0x4c9017b5
sub rsp, 0x20
call rdi
add rsp, 0x20
cmp esi, 0xc602720f
ja 0x1400b6da0
mov edx, dword [rbp - 0x30]
cmp edx, 0xa
jge 0x1400b70e0
mov ecx, dword [0x141dd1110]
and ecx, dword [0x141dd1114]
imul ecx, ecx, 0x42491bbc
add ecx, 0xd8c6db20
and ecx, 0x948d9c00
cmp ecx, 0xc094b99a
ja 0x1400b6ddc
cmp eax, 5
jne 0x1400b6e10
mov eax, edx
mov qword [rbp - 0x40], rax
jmp 0x1400b6e23
test ebx, ebx
je 0x1400b70e0
xor ebx, ebx
cmp eax, 0x57
jne 0x1400b70e0
xor edi, edi
test r15, r15
je 0x1400b6170
mov eax, dword [0x141dd1130]
and eax, dword [0x141dd1134]
imul eax, eax, 0xbddfb614
add eax, 0x31e015c7
and eax, 0xe5ff92a6
cmp eax, 0x3002c1c3
mov r8d, 0xac982af3
je 0x1400b6ee0
nop dword [rax + rax]
mov eax, dword [0x141dd1138]
xor edx, edx
div dword [0x141dd113c]
imul rax, r8
bt rax, 0x3d
mov eax, 0
adc eax, 0x959be8ff
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x5066a9f2
jb 0x1400b6ee0
sub rsp, 0x20
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd1140]
xor edi, edi
xor edx, edx
div dword [0x141dd1144]
xor eax, 0x4000136
or eax, 0xbb563e48
imul eax, eax, 0xbe8b2241
cmp eax, 0xc361db9
jbe 0x1400b6eb0
jmp 0x1400b6170
mov rax, qword [0x141dd7fe0]
jmp 0x1400b6e60
mov eax, dword [str.D3_n_]
sub eax, dword [0x141dd1094]
or eax, 0xc0600
and eax, 0x204d4710
xor eax, 0xa2615760
cmp eax, 0xd295fb09
ja 0x1400b6ef0
test r15, r15
je 0x1400b6fe9
mov eax, dword [0x141dd1098]
xor eax, dword [0x141dd109c]
or eax, 0x6b81d159
add eax, 0xa50018
mov ecx, 0xe8dc3da9
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xbea6edd1
jne 0x1400b6f50
mov rax, qword [0x141dd7fe0]
nop dword [rax]
mov eax, dword [0x141dd10a0]
or eax, dword [0x141dd10a4]
mov rsi, qword [0x141dd7fe0]
cmp eax, 0x1dc98fb6
je 0x1400b6f50
mov eax, dword [0x141dd10a8]
and eax, dword [0x141dd10ac]
imul eax, eax, 0xe438868b
xor eax, 0xb8234ced
cmp eax, 0x8206f376
jae 0x1400b6f9e
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov edi, dword [0x141dd10b0]
and edi, dword [0x141dd10b4]
add edi, 0xccc5668b
xor edi, 0x362102
and edi, 0x83b6e932
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r13
call r14
add rsp, 0x20
cmp edi, 0x7e3e1365
jb 0x1400b6fb0
mov r8, qword [rbp - 0x48]
mov dword [r8 + 0x10], 0
mov eax, dword [0x141dd10b8]
add eax, dword [0x141dd10bc]
and eax, 0x80806193
xor eax, 0x800001ab
or eax, 0x336f1a44
cmp eax, 0x1c9546b9
jae 0x1400b701e
mov dword [r8], 0
mov eax, 0x80716b4f
mov r15, qword [rbp - 0x10]
movzx r9d, byte [rbp + 0xf]
mov rdx, qword [rbp - 0x58]
mov ecx, dword [0x141dd10c0]
or ecx, dword [0x141dd10c4]
imul ecx, ecx, 0x35ba19b8
add ecx, 0x35c21274
imul rcx, rax
shr rcx, 0x3f
mov dword [r8], 0
cmp ecx, 0xb3eae59
ja 0x1400b7030
xorps xmm0, xmm0
movups xmmword [r8 + 0x14], xmm0
mov word [r8 + 0x24], 0
mov byte [r8 + 0x21], r9b
xor r9b, 1
mov byte [r8 + 0x20], r9b
mov rax, qword [rbp - 0x50]
mov dword [rax], 0x18
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov qword [r8 + 8], rax
sub rsp, 0x20
mov rcx, r15
call fcn.1400913c0
add rsp, 0x20
test rax, rax
je 0x1400b713d
mov eax, dword [0x141dd10f0]
and eax, dword [0x141dd10f4]
imul eax, eax, 0x8d34a94d
add eax, 0xabe852ea
and eax, 0xaf85e0ff
cmp eax, 0x39102f03
mov rcx, qword [rbp - 0x18]
jb 0x1400b7270
jmp 0x1400b725f
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp - 0x18]
mov qword [rcx + 8], rax
mov qword [rcx], 1
mov rsi, 0xffffffffffffffff
test r15, r15
je 0x1400b7134
mov eax, dword [0x141dd1118]
or eax, dword [0x141dd111c]
xor eax, 0xdaf318e1
imul rax, rax, 0x98c0323
shr rax, 0x3a
or eax, 0x7b377a0
cmp eax, 0xf22c5b9f
ja 0x1400b72b7
jmp 0x1400b7283
mov r15, qword [rbp - 0x10]
jmp 0x1400b7300
mov rax, qword [rbp - 0x18]
mov rcx, qword [rbp]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdx
mov qword [rax], 0
nop word cs:[rax + rax]
mov eax, dword [0x141dd10d8]
add eax, dword [0x141dd10dc]
or eax, 0xe1519302
imul eax, eax, 0x80fd305d
add eax, 0x6db733d2
cmp eax, 0xdaaf5bb8
ja 0x1400b7160
mov rcx, qword [rbp - 0x20]
nop word [rax + rax]
mov eax, dword [0x141dd10e0]
and eax, dword [0x141dd10e4]
add eax, 0x1cd539e6
imul rax, rax, 0x3384b819
shr rax, 0x3d
or eax, 0x67e70f0
cmp eax, 0x2e3097c7
je 0x1400b7190
test rcx, rcx
je 0x1400b7363
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd10e8]
imul eax, dword [0x141dd10ec]
imul eax, eax, 0x7270d982
add eax, 0x8dd9f54d
imul rax, rax, 0x5b87fbd5
shr rax, 0x3e
cmp eax, 0x435fc3a0
jae 0x1400b71e0
jmp 0x1400b7363
ud2
mov eax, dword [0x141dd0fd0]
or eax, dword [0x141dd0fd4]
xor eax, 0x8044e081
and eax, 0xc0dce4ff
cmp eax, 0x2bbb7f80
je 0x1400b7382
jmp 0x1400b737a
mov qword [rcx + 8], rdx
mov qword [rcx], 1
xor eax, eax
test al, al
je 0x1400b727d
mov qword [rcx + 8], rdx
mov qword [rcx], 1
jmp 0x1400b725f
mov rsi, qword [rbp]
jmp 0x1400b7300
mov eax, dword [0x141dd1120]
or eax, dword [0x141dd1124]
mov edx, 0x83b12a63
imul rdx, rax
shr rdx, 0x3f
add edx, 0x25af8969
and edx, 0x2428880b
mov rcx, qword [0x141dd7fe0]
cmp edx, 0x6e947dd
jae 0x1400b72c0
mov rax, qword [0x141dd7fe0]
jmp 0x1400b7283
sub rsp, 0x20
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd1128]
xor eax, dword [0x141dd112c]
imul eax, eax, 0xca926b92
cmp eax, 0xbabed102
je 0x1400b72e0
mov r15, qword [rbp - 0x10]
nop dword [rax]
mov eax, dword [0x141dd10f8]
mov ecx, dword [0x141dd10fc]
add eax, ecx
add eax, 0x2a61b847
or eax, 0x8b555c2a
add eax, 0xaceff056
cmp eax, 0xf405dc37
ja 0x1400b7300
cmp qword [rbp - 0x20], 0
je 0x1400b73c0
mov r14, qword [0x141dd7fe0]
mov eax, dword [0x141dd1100]
imul eax, dword [0x141dd1104]
mov ecx, 0xf1186bf3
imul rcx, rax
shr rcx, 0x3d
and ecx, 2
or ecx, 0xfa5280c1
cmp ecx, 0xcc00a153
jb 0x1400b73a3
jmp 0x1400b7386
movaps xmm6, xmmword [rbp + 0x10]
lea rsp, [rbp + 0x28]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2
ud2
sub rsp, 0x20
xor edi, edi
mov rcx, r14
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test dil, dil
je 0x1400b73c0
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400b7386
mov eax, dword [0x141dd1108]
imul eax, dword [0x141dd110c]
cmp eax, 0xb4c48c3e
je 0x1400b73c0
cmp qword [rbp], 0xffffffffffffffff
je 0x1400b7363
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x1400b7363