Function at 0x1401474b0
Capabilities:
Encode data using base64
Encode data using xor
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x488
mov r15, rcx
movabs r12, 0x8000000000000000
lea rcx, [rsp + 0x88]
call fcn.140148cb0
mov r10, qword [rsp + 0x88]
mov r9, qword [rsp + 0x90]
cmp r10, r12
jne 0x140147683
nop word cs:[rax + rax]
mov eax, dword [0x14159c580]
xor edx, edx
div dword [0x14159c584]
add eax, 0x4b4de13e
imul rax, rax, 0x5c3423df
shr rax, 0x3d
add eax, 0xb08a99ba
cmp eax, 0xdf625c64
ja 0x140147500
xor eax, eax
nop dword [rax]
test al, al
jne 0x140147530
mov eax, r9d
and eax, 3
cmp rax, 2
jg 0x140147650
cmp eax, 1
jne 0x140148bbc
lea rbx, [r9 - 1]
nop word cs:[rax + rax]
mov eax, dword [0x14159c590]
imul eax, dword [0x14159c594]
mov ecx, eax
not ecx
or eax, 0xfff5bb
or ecx, 0xff000a44
and ecx, eax
cmp ecx, 0xa05b37d4
je 0x140147560
mov eax, 0xd1f07f2f
nop dword [rax + rax]
mov ecx, dword [0x14159c598]
mov edx, dword [0x14159c59c]
mov r8d, ecx
xor r8d, edx
not edx
and edx, ecx
add edx, edx
sub edx, r8d
mov ecx, edx
not ecx
or ecx, 0xd4250c22
or edx, 0x2bdaf3dd
and edx, ecx
imul rdx, rax
shr rdx, 0x3e
or edx, 0xa9c2878
cmp edx, 0xbe618b
jb 0x140147590
mov r14, qword [r9 - 1]
mov rsi, qword [r9 + 7]
nop dword [rax + rax]
mov eax, dword [0x14159c5a0]
mov ecx, dword [0x14159c5a4]
xor ecx, eax
not ecx
and ecx, eax
and ecx, 0xba019e14
imul rax, rcx, 0x3a7d3d87
shr rax, 0x3d
or eax, 0xbb96660a
cmp eax, 0x1e672fee
jb 0x1401475e0
mov rdi, qword [rsi]
test rdi, rdi
je 0x140148980
mov eax, dword [0x14159c5a8]
add eax, dword [0x14159c5ac]
mov ecx, 0x81ea187d
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x387c513a
cmp ecx, 0xd8c7073a
jbe 0x14014890c
jmp 0x140148931
mov eax, dword [0x14159c588]
xor edx, edx
div dword [0x14159c58c]
mov ecx, eax
not ecx
or eax, 0xa43adde0
or ecx, 0x5bc5221f
and ecx, eax
not ecx
imul eax, ecx, 0xfa312cd9
cmp eax, 0x43f0e8a4
je 0x140147650
jmp 0x140148bbc
mov eax, dword [0x14159c430]
mov ecx, dword [0x14159c434]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
and eax, 0x8300472
cmp eax, 0xd5767fd3
je 0x1401476c9
mov qword [rsp + 0x38], 0
xor eax, eax
test al, al
je 0x1401476d4
mov qword [rsp + 0x38], 0
jmp 0x1401476ba
mov eax, dword [0x14159c438]
mov ecx, dword [0x14159c43c]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
xor eax, 0xa47f933
add eax, ecx
and ecx, 0x15b806cc
sub eax, ecx
or eax, 0x6dfc2344
and eax, 0x7fff7ff4
cmp eax, 0x6b9f26b
jae 0x14014771a
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x48], 0
xor eax, eax
nop dword [rax]
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x48], 0
test al, al
jne 0x140147720
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x30], r9
nop word cs:[rax + rax]
mov eax, dword [0x14159c440]
sub eax, dword [0x14159c444]
and eax, 0x5239bb35
imul eax, eax, 0x5e06d471
add eax, 0x7964364f
cmp eax, 0x5d14263b
jb 0x140147750
mov r13d, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
mov esi, 0xffffffff
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
mov r15, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea rbx, [rsp + 0x38]
xor r9d, r9d
xor r12d, r12d
nop word cs:[rax + rax]
cmp r13, 0x201
jae 0x1401477e0
mov qword [rsp + 0x20], r9
mov eax, 0x200
mov qword [rsp + 0x60], rax
lea rbp, [rsp + 0x88]
jmp 0x14014790b
mov eax, dword [0x14159c448]
sub eax, dword [0x14159c44c]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x70a448a9
and ecx, 0x8f5bb756
imul ecx, edx
mov edx, eax
and edx, 0x8f5bb756
or eax, 0x8f5bb756
imul eax, edx
add eax, ecx
and eax, 0xf88706b6
imul rax, rax, 0x4979703d
shr rax, 0x3e
cmp eax, 0x6b3b9629
ja 0x1401477e0
mov rcx, r13
not rcx
and rcx, r12
mov rax, r12
not rax
and r13, rax
sub r13, rcx
mov ecx, dword [0x14159c450]
sub ecx, dword [0x14159c454]
or ecx, 0xc7e0eae0
add ecx, 0xfae9b975
cmp ecx, 0x2185b541
jb 0x14014783f
mov rcx, r9
xor rcx, r12
and rax, r9
add rax, rax
sub rax, rcx
cmp r13, rax
ja 0x140147cca
mov eax, dword [0x14159c458]
sub eax, dword [0x14159c45c]
xor eax, 0xc2397d44
imul rax, rax, 0x58011021
shr rax, 0x3d
cmp eax, 0x63b61d11
jne 0x1401478b0
cmp r9, rsi
mov eax, 0xffffffff
cmovb rax, r9
mov qword [rsp + 0x48], rax
nop dword [rax + rax]
mov eax, dword [0x14159c460]
or eax, dword [0x14159c464]
imul rax, rax, 0x65c18c95
shr rax, 0x3e
lea ecx, [rax + 0x14b41650]
imul ecx, ecx, 0xb02a000
or eax, 0x3ffebed6
imul eax, eax, 0x20480886
add eax, ecx
cmp r9, rsi
mov r12d, 0xffffffff
cmovb r12, r9
mov qword [rsp + 0x48], r12
cmp eax, 0xf8ba4371
jae 0x1401478b0
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x60], r12
mov rbp, qword [rsp + 0x28]
mov r13, r12
mov eax, dword [0x14159c488]
mov ecx, dword [0x14159c48c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
xor ecx, 0x46c9000
and ecx, eax
and ecx, 0x7d7c9aea
add ecx, 0xb9aed153
cmp ecx, 0x2298eac5
jae 0x140147951
xor ecx, ecx
call r14
mov rcx, qword [rsp + 0x30]
mov rdx, rbp
mov r8d, r13d
call r15
mov rsi, qword [rsp + 0x30]
mov rbx, r14
mov rdi, r15
nop dword [rax]
mov eax, dword [0x14159c490]
xor edx, edx
div dword [0x14159c494]
mov r14d, eax
xor eax, 0x10004
or r14d, 0x15000010
and r14d, eax
or r14d, 0xeafeffeb
xor ecx, ecx
call rbx
mov rcx, rsi
mov rdx, rbp
mov r8d, r13d
call rdi
cmp r14d, 0xb0e82fea
jb 0x140147960
mov r15d, eax
test eax, eax
jne 0x140147a17
mov eax, dword [0x14159c498]
mov ecx, dword [0x14159c49c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
or eax, 0x50e3fce8
mov ecx, eax
not ecx
or ecx, 0xb479924e
add eax, ecx
inc eax
or eax, 0x432f5e03
cmp eax, 0x531e1849
je 0x140147c20
nop word cs:[rax + rax]
call sub.KERNEL32.dll_GetLastError
xor ecx, ecx
test cl, cl
jne 0x140147c20
test eax, eax
jne 0x140147e65
mov r15d, r15d
mov ecx, 0xc5d92567
nop
mov eax, dword [0x14159c4c8]
xor eax, dword [0x14159c4cc]
and eax, 0xca795eda
imul rax, rcx
shr rax, 0x3f
add eax, 0xd42c3d45
cmp eax, 0x26e17a3d
jb 0x140147a20
nop word cs:[rax + rax]
mov eax, dword [0x14159c4d0]
and eax, dword [0x14159c4d4]
mov ecx, eax
not ecx
and ecx, 0xb12a9a27
mov edx, eax
and edx, 0x4ed565d8
imul edx, ecx
mov ecx, eax
and ecx, 0xb12a9a27
or eax, 0xb12a9a27
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x24c33ffb
and ecx, 0xdb3cc004
imul ecx, edx
mov edx, eax
and edx, 0xdb3cc004
or eax, 0xdb3cc004
imul eax, edx
add eax, ecx
not eax
or eax, 0x2ad15f91
cmp eax, 0xd685e303
jb 0x140147a50
cmp r13, r15
jne 0x140147c40
mov eax, dword [0x14159c4d8]
xor edx, edx
div dword [0x14159c4dc]
or eax, 0x3df8b1b6
cmp eax, 0x162c217c
jne 0x140147ae0
call sub.KERNEL32.dll_GetLastError
mov r14, rbx
mov r15, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
nop word [rax + rax]
mov eax, dword [0x14159c4e0]
imul eax, dword [0x14159c4e4]
mov ecx, eax
and ecx, 0x38dac590
add ecx, ecx
mov edx, eax
sub edx, ecx
neg ecx
add eax, ecx
add eax, 0xb8dac590
mov ecx, eax
and ecx, 0x6fa01173
xor eax, 0x905fee8c
lea ebp, [rax + rdx]
add ebp, 0xb8dac590
sub ebp, ecx
call sub.KERNEL32.dll_GetLastError
cmp ebp, 0x21bee4d8
je 0x140147af0
cmp eax, 0x7a
jne 0x140148041
mov eax, dword [0x14159c4e8]
xor edx, edx
div dword [0x14159c4ec]
mov esi, 0xffffffff
mov r9, qword [rsp + 0x20]
lea rbx, [rsp + 0x38]
nop
mov eax, dword [0x14159c4f0]
mov ecx, dword [0x14159c4f4]
add eax, ecx
add eax, 0x8d987e25
not eax
or eax, 0x8338cb1f
cmp eax, 0x4637bfb0
je 0x140147b60
lea rax, [r13*2]
nop dword [rax]
mov edx, dword [0x14159c4f8]
or edx, dword [0x14159c4fc]
mov ecx, edx
not ecx
and ecx, 0x80566857
mov r8d, edx
and r8d, 0x7fa997a8
imul r8d, ecx
mov ecx, edx
and ecx, 0x80566857
or edx, 0x80566857
imul edx, ecx
add edx, r8d
xor edx, 0xfebc03e1
cmp r13, 0x7fffffff
mov rcx, rax
cmova rcx, rsi
cmp edx, 0x9ac4fd36
jb 0x140147b90
nop word cs:[rax + rax]
mov eax, dword [str.2A_h_Q]
imul eax, dword [0x14159c504]
add eax, 0x5bbb1913
or eax, 0x95094356
add eax, 0x1cc3cad3
cmp eax, 0x3fbb2801
jb 0x140147bf0
mov r13, rcx
jmp 0x140147c70
call sub.KERNEL32.dll_GetLastError
call sub.KERNEL32.dll_GetLastError
xor ecx, ecx
test cl, cl
jne 0x140147c20
jmp 0x140147a0f
jae 0x140147e18
mov r13, r15
mov esi, 0xffffffff
mov r14, rbx
mov r15, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r9, qword [rsp + 0x20]
lea rbx, [rsp + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x14159c508]
xor eax, dword [0x14159c50c]
mov ecx, eax
not ecx
or eax, 0xb8654605
or ecx, 0x479ab9fa
and ecx, eax
mov eax, ecx
not eax
mov edx, eax
or edx, 0xee7dcefd
and ecx, 0x1822100
mov r8d, edx
and r8d, 0x30281a9a
imul r8d, ecx
and edx, 0xcfd7e565
or eax, 0xefffeffd
imul eax, edx
add eax, r8d
cmp eax, 0x3a7b6318
jb 0x140147c70
jmp 0x1401477b0
mov eax, dword [0x14159c468]
imul eax, dword [0x14159c46c]
mov ecx, eax
not ecx
and ecx, 0x50264a60
mov edx, eax
and edx, 0xafd9b59f
imul edx, ecx
mov ecx, eax
and ecx, 0x50264a60
or eax, 0x50264a60
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
or ecx, 0x6cad1873
xor ecx, 0x9f852c9
and eax, 0x1504280
add eax, eax
sub eax, ecx
cmp eax, 0x48dbaf56
jae 0x140147d2c
mov rcx, rbx
mov rdx, r12
mov r8, r13
call fcn.140238e30
mov eax, dword [0x14159c470]
xor edx, edx
div dword [0x14159c474]
add eax, 0x8d8fa7eb
mov ecx, eax
not ecx
and ecx, 0x9db9262e
mov edx, eax
and edx, 0x6246d9d1
imul edx, ecx
mov ecx, eax
and ecx, 0x9db9262e
or eax, 0x9db9262e
imul eax, ecx
add eax, edx
imul rdi, rax, 0x3c6d8a0f
shr rdi, 0x3d
mov rcx, rbx
mov rdx, r12
mov r8, r13
call fcn.140238e30
cmp edi, 0xee685e63
ja 0x140147d1e
nop word [rax + rax]
mov eax, dword [0x14159c478]
mov ecx, dword [0x14159c47c]
add eax, ecx
add eax, 0xfd23ea8d
or eax, 0x7327679e
mov ecx, eax
xor ecx, 0x13452476
and ecx, eax
cmp ecx, 0xab4eda98
jb 0x140147d90
mov r9, qword [rsp + 0x38]
mov eax, dword [0x14159c484]
add eax, dword [0x14159c480]
mov ecx, eax
xor ecx, 0xe54c5ebe
and ecx, eax
add ecx, 0x1b91ae84
mov eax, ecx
not eax
and eax, 0xc370cf21
mov edx, ecx
and edx, 0x3c8f30de
imul edx, eax
mov eax, ecx
and eax, 0xc370cf21
or ecx, 0xc370cf21
imul ecx, eax
add ecx, edx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x28], rax
cmp ecx, 0xff4d33df
ja 0x140147dbf
jmp 0x140147877
cmp qword [rsp + 0x60], r15
jb 0x140148492
mov eax, dword [0x14159c520]
xor edx, edx
div dword [0x14159c524]
imul rax, rax, 0x65937fc7
shr rax, 0x3e
add eax, 0x75f4d8c9
cmp eax, 0x9ce19408
mov r12, qword [rsp + 0x30]
movabs r13, 0x8000000000000000
mov rbx, qword [rsp + 0x28]
jbe 0x140148494
jmp 0x1401484e8
mov eax, dword [0x14159c4a0]
mov ecx, dword [0x14159c4a4]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0x1826b724
mov ecx, eax
xor ecx, 0x75f31f33
or eax, 0x8a0ce0cc
and eax, ecx
add eax, 0xb0bd4837
cmp eax, 0xaea5e2b
movabs r13, 0x8000000000000000
jae 0x140147ebc
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], r13
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x14159c4a8]
xor edx, edx
div dword [0x14159c4ac]
mov ecx, eax
xor ecx, 0xe08b38cd
xor eax, 0x9008120
and eax, 0x6908a9a9
mov edx, ecx
and edx, 0x96f75656
imul edx, eax
mov eax, ecx
and eax, 0x6908a9a9
or ecx, 0x6908a9a9
imul ecx, eax
lea ebx, [rcx + rdx]
add ebx, 0x9ee27418
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
lea rsi, [rax*2 + 2]
sub rsi, rax
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], r13
cmp ebx, 0x2619b539
jb 0x140147ed0
test rdi, rdi
je 0x140148074
mov eax, dword [0x14159c4b0]
xor edx, edx
div dword [0x14159c4b4]
mov ecx, eax
xor ecx, 0x9a4ca166
and eax, 0x65b35e99
add eax, eax
sub eax, ecx
xor eax, 0xe10d01f7
mov ecx, eax
and ecx, 0x12e05444
add ecx, ecx
sub eax, ecx
cmp eax, 0xd2c6037
jne 0x140147f81
mov rax, qword [0x1415acb98]
mov r8, qword [rsp + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x14159c4b8]
mov edx, dword [0x14159c4bc]
not eax
not edx
and edx, eax
not edx
add edx, 0x580ddf67
mov eax, edx
not eax
mov ecx, edx
and ecx, 0xcd92d143
and eax, 0x326d2ebc
imul eax, ecx
mov ecx, edx
and ecx, 0x326d2ebc
or edx, 0x326d2ebc
imul edx, ecx
add edx, eax
or edx, 0x446ff0e8
mov rcx, qword [0x1415acb98]
cmp edx, 0xb50c6d0a
je 0x140147f90
xor edx, edx
call fcn.14020ae70
nop dword [rax]
mov eax, dword [0x14159c4c0]
mov ecx, dword [0x14159c4c4]
not eax
not ecx
or ecx, eax
or ecx, 0x6fa26f5c
mov eax, ecx
xor eax, 0xe458d2bb
xor ecx, 0x10050000
and ecx, 0x3055109a
mov edx, eax
and edx, 0x828a8c25
imul edx, ecx
mov ecx, eax
and ecx, 0x197531c2
or eax, 0x397531da
imul eax, ecx
add eax, edx
cmp eax, 0x136f1b7f
je 0x140147ff0
jmp 0x140148074
mov eax, dword [0x14159c510]
mov ecx, dword [0x14159c514]
mov edx, eax
not edx
and eax, ecx
not ecx
and ecx, edx
not eax
not ecx
and ecx, eax
and ecx, 0x6389b991
cmp ecx, 0x98b2e66d
jne 0x14014842e
jmp 0x14014848e
mov rax, qword [rsp + 0x58]
mov qword [rax], r13
mov rax, rsi
not rax
or rax, 3
add rax, rsi
inc rax
cmp rax, 2
jg 0x140148177
cmp rax, 1
mov r13, qword [rsp + 0x50]
jne 0x1401487c0
lea rdi, [rsi - 1]
mov rbx, qword [rsi - 1]
nop dword [rax]
mov eax, dword [0x14159c650]
xor eax, dword [0x14159c654]
mov ecx, eax
not ecx
and ecx, 0x33d2153f
and eax, 0xcc2deac0
sub eax, ecx
mov ecx, eax
and ecx, 0x2cbd0455
xor eax, 0x2cbd0455
lea eax, [rax + rcx*2]
or eax, 0x6abb0b1
cmp eax, 0x33709fc6
jb 0x1401480b0
mov rsi, qword [rsi + 7]
mov r15, qword [rsi]
mov eax, 0xf6c2b3ef
nop word cs:[rax + rax]
mov ecx, dword [0x14159c658]
mov edx, dword [0x14159c65c]
not ecx
not edx
or edx, ecx
not edx
imul rdx, rax
shr rdx, 0x3c
imul ecx, edx, 0x813ea14d
xor ecx, 0x37b24d5a
cmp ecx, 0xe0c832e9
ja 0x140148100
test r15, r15
je 0x140148243
mov eax, dword [0x14159c660]
mov ecx, dword [0x14159c664]
not eax
not ecx
and ecx, eax
not ecx
imul rax, rcx, 0x132119ed
shr rax, 0x3b
mov ecx, eax
not ecx
or ecx, 0xe2818c4e
add eax, ecx
inc eax
and eax, 0xf6b78580
cmp eax, 0x52cb08a9
jne 0x1401481ea
jmp 0x14014823b
mov r13, qword [rsp + 0x50]
nop dword [rax]
mov eax, dword [0x14159c640]
mov ecx, dword [0x14159c644]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
and eax, 0x947eb013
or ecx, 0x947eb013
add eax, ecx
add eax, 0x318432de
imul rax, rax, 0x7cced7ed
shr rax, 0x3e
cmp eax, 0x861532c0
ja 0x140148180
nop
mov eax, dword [0x14159c648]
mov ecx, dword [0x14159c64c]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
or eax, 0x79fef212
and eax, 0x79fef232
cmp eax, 0x26c1f7a9
je 0x1401481c0
jmp 0x1401487c0
mov eax, dword [0x14159c668]
xor edx, edx
div dword [0x14159c66c]
mov r14d, eax
and eax, 0xbac794aa
or r14d, 0xbac794aa
add r14d, eax
imul rax, r14, 0x15d6a67f
shr rax, 0x20
sub r14d, eax
shr r14d, 1
add r14d, eax
shr r14d, 0x1f
not r14d
and r14d, 0xa7a3b1c1
mov rcx, rbx
call r15
cmp r14d, 0x3c14a662
jae 0x140148243
mov rcx, rbx
call r15
jmp 0x1401481ea
mov rcx, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
nop dword [rax + rax]
mov edx, dword [0x14159c670]
sub edx, dword [0x14159c674]
and edx, 0x36808800
imul rdx, rdx, 0x2f521ed7
shr rdx, 0x3b
cmp edx, 0xf927d7fb
je 0x140148250
test rcx, rcx
je 0x1401482bc
nop word [rax + rax]
mov ecx, dword [0x14159c678]
imul ecx, dword [0x14159c67c]
or ecx, 0x4b844004
and ecx, 0xcf856a1d
cmp ecx, 0xde02cfdb
je 0x140148280
cmp rax, 0x11
jb 0x1401482ab
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rbx
call fcn.14020ae70
mov rbx, qword [0x1415acb98]
mov eax, dword [0x14159c680]
and eax, dword [0x14159c684]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xdc24922
and ecx, 0xf23db6dd
imul ecx, edx
mov edx, eax
and edx, 0xf23db6dd
or eax, 0xf23db6dd
imul eax, edx
add eax, ecx
add eax, 0x4ba6437a
xor eax, 0xe54c55d3
cmp eax, 0x384042eb
jbe 0x140148315
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x14159c688]
mov ebp, dword [0x14159c68c]
mov ecx, eax
xor ecx, ebp
not ebp
and ebp, eax
add ebp, ebp
sub ebp, ecx
mov eax, ebp
not eax
mov ecx, ebp
and ecx, 0x95f27811
and eax, 0x6a0d87ee
imul eax, ecx
mov ecx, ebp
and ecx, 0x6a0d87ee
or ebp, 0x6a0d87ee
imul ebp, ecx
add ebp, eax
mov eax, ebp
not eax
and eax, 0xde0613b0
and ebp, 0x21f9ec4e
sub ebp, eax
mov eax, ebp
xor eax, 0x56744c21
and ebp, 0x56744c20
or ebp, eax
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0x9924771b
ja 0x140148320
nop word cs:[rax + rax]
mov eax, dword [str.YA1n]
mov ecx, dword [0x14159c694]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
and ecx, 0x419bce39
mov edx, eax
and edx, 0xbe6431c6
imul edx, ecx
mov ecx, eax
and ecx, 0x419bce39
or eax, 0x419bce39
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa7185791
and ecx, 0x58e7a86e
imul ecx, edx
mov edx, eax
and edx, 0x58e7a86e
or eax, 0x58e7a86e
imul eax, edx
add eax, ecx
add eax, 0xf8e82fdd
cmp eax, 0xbad3354f
ja 0x1401483a0
jmp 0x1401487c0
mov eax, dword [0x14159c518]
mov ecx, dword [0x14159c51c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
or ecx, 0x80200124
and ecx, 0xc8782be4
mov edx, eax
and edx, 0x14068412
or edx, ecx
xor edx, 0xa1ddfa86
and eax, 0x48048042
or eax, edx
add eax, 0x8e19e270
ud2
ud2
ud2
mov esi, dword [0x14159c528]
imul esi, dword [0x14159c52c]
mov eax, esi
not eax
mov ecx, esi
and ecx, 0x76ee05b8
and eax, 0x911fa47
imul eax, ecx
mov ecx, esi
and ecx, 0x911fa47
or esi, 0x911fa47
imul esi, ecx
add esi, eax
not esi
and esi, 0x40560140
lea rcx, [rsp + 0x68]
mov rdx, rbp
mov r8, r15
call fcn.14013f9c0
cmp esi, 0x3d487165
jae 0x1401484fa
lea rcx, [rsp + 0x68]
mov rdx, rbp
mov r8, r15
call fcn.14013f9c0
jmp 0x140148494
mov r8, qword [rsp + 0x20]
nop
mov eax, dword [0x14159c530]
mov ecx, dword [0x14159c534]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
add ecx, 0x4989b102
not ecx
and ecx, 0xaa920c61
cmp ecx, 0x896dccbb
je 0x140148500
nop
mov eax, dword [0x14159c538]
xor edx, edx
div dword [str.__r9]
add eax, 0x18d128b9
or eax, 0x7723440b
imul rax, rax, 0x4936b1e5
shr rax, 0x3b
cmp eax, 0x557f6ac3
ja 0x140148530
test r8, r8
je 0x140148700
mov eax, dword [0x14159c540]
sub eax, dword [0x14159c544]
mov ecx, eax
and ecx, 0x39526624
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0x30506400
and edx, 0x4daa1b6d
imul edx, r8d
and eax, 0x9020224
or ecx, 0x4daa1b6d
imul ecx, eax
lea eax, [rcx + rdx]
add eax, 0x4ddd93bd
cmp eax, 0x6774c65f
jae 0x1401485b3
mov rax, qword [0x1415acb98]
mov eax, 0xbd15c335
nop dword [rax + rax]
mov ecx, dword [0x14159c548]
mov edx, dword [0x14159c54c]
mov r8d, ecx
and r8d, edx
xor ecx, edx
lea ecx, [rcx + r8*2]
add ecx, 0x60806ab2
imul rcx, rax
shr rcx, 0x37
mov r14, qword [0x1415acb98]
cmp ecx, 0xeaf96bce
ja 0x1401485c0
mov eax, dword [0x14159c550]
and eax, dword [0x14159c554]
add eax, 0xfaf1c306
mov ecx, eax
not ecx
or ecx, 0x5140880
and ecx, 0x3d9ce8c1
and eax, 0x80611302
or eax, ecx
cmp eax, 0xab0cba06
jne 0x140148631
mov rcx, r14
xor edx, edx
mov r8, rbx
call fcn.14020ae70
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x14159c558]
mov ecx, dword [0x14159c55c]
xor ecx, eax
not ecx
and ecx, eax
mov eax, ecx
and eax, 0x59d9f1db
xor ecx, 0x59d9f1db
lea eax, [rcx + rax*2]
mov edi, eax
xor edi, 0xd307a190
and edi, eax
mov eax, edi
and eax, 0x6f4b014f
add eax, eax
sub edi, eax
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
cmp edi, 0x5c9d036c
je 0x140148640
nop dword [rax]
mov ecx, dword [0x14159c560]
mov edx, dword [0x14159c564]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xba513eca
and ecx, 0x45aec135
or ecx, r9d
or eax, r8d
and r8d, 0xba513eca
and edx, 0x45aec135
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
and ecx, 0x2142a5f1
or eax, 0x2142a5f1
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x9122fa87
and eax, 0x6edd0578
sub eax, ecx
add eax, 0xb7081db3
cmp eax, 0xd13a6ac
ja 0x140148690
nop
mov eax, dword [0x14159c568]
imul eax, dword [0x14159c56c]
add eax, 0xa4126ca5
mov ecx, eax
xor ecx, 0xd6d147c3
and eax, 0x292eb83c
add eax, eax
sub eax, ecx
cmp eax, 0xb22f0cbe
ja 0x140148700
nop word [rax + rax]
mov eax, dword [0x14159c570]
mov ecx, dword [0x14159c574]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0x6932b3f0
and ecx, 0xe45c63c8
cmp ecx, 0xe4ff4ce0
ja 0x140148730
cmp qword [rsp + 0x68], r13
jne 0x1401487a4
mov rsi, qword [rsp + 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x14159c578]
and eax, dword [0x14159c57c]
lea ecx, [rax + 0x59099779]
not ecx
or ecx, 0x37add485
add eax, ecx
add eax, 0x5909977a
not eax
or eax, 0xb7a18a78
cmp eax, 0xfcd4a8d0
jb 0x140148770
jmp 0x140148074
movups xmm0, xmmword [rsp + 0x68]
movups xmm1, xmmword [rsp + 0x78]
mov rax, qword [rsp + 0x58]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov r13, qword [rsp + 0x50]
nop
mov eax, dword [0x14159c618]
or eax, dword [0x14159c61c]
or eax, 0x6518076e
mov ecx, eax
xor ecx, 0x8f949293
and ecx, eax
mov eax, ecx
not eax
or eax, 0x33dc92bc
add eax, ecx
inc eax
cmp eax, 0xcc8966d
jb 0x1401487c0
test r13, r13
je 0x140148c59
nop dword [rax + rax]
mov eax, dword [0x14159c620]
sub eax, dword [0x14159c624]
mov ecx, eax
or ecx, 0xf9740dac
not eax
and eax, 0x4019213
mov edx, ecx
and edx, 0x4a8a6040
or edx, eax
xor edx, 0x15aa0e49
and ecx, 0xa0df91f6
or ecx, edx
mov eax, ecx
not eax
or ecx, 0xd85858e5
or eax, 0x27a7a71a
and eax, ecx
cmp eax, 0xba65c68
jb 0x140148800
xor eax, eax
test al, al
je 0x140148860
mov rax, qword [0x1415acb98]
nop dword [rax + rax]
mov eax, dword [0x14159c628]
sub eax, dword [0x14159c62c]
and eax, 0x296010c8
xor eax, 0x1401000
mov rdi, qword [0x1415acb98]
cmp eax, 0x95f49d9a
ja 0x140148860
mov eax, dword [0x14159c630]
xor edx, edx
div dword [0x14159c634]
xor eax, 0x3c8a2c00
shr eax, 6
imul rax, rax, 0x437dc29
shr rax, 0x34
or eax, 0xededdb2
cmp eax, 0x61844a17
jbe 0x1401488c0
mov rcx, rdi
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x14159c638]
or eax, dword [0x14159c63c]
mov ecx, eax
or ecx, 0x1a90433e
and ecx, 0x1ad2e3bf
or eax, 0xbfd3efff
add eax, ecx
mov esi, eax
xor esi, 0x76ab8b2c
add esi, eax
and eax, 0x88547093
sub esi, eax
mov rcx, rdi
xor edx, edx
mov r8, r12
call fcn.14020ae70
cmp esi, 0x47867a26
jbe 0x1401488c0
jmp 0x140148c59
mov ebp, dword [0x14159c5b0]
xor ebp, dword [0x14159c5b4]
add ebp, 0xed9b5acf
or ebp, 0xf9efaff8
mov rcx, r14
call rdi
cmp ebp, 0x75856289
jae 0x140148940
mov rcx, r14
call rdi
jmp 0x14014890c
mov eax, dword [0x14159c5b8]
mov ecx, dword [0x14159c5bc]
mov edx, eax
not edx
or eax, ecx
not ecx
and ecx, edx
not ecx
and ecx, eax
imul eax, ecx, 0xde3e9e50
mov ecx, eax
and ecx, 0xcf0eda60
xor ecx, 0xbfa6687d
and eax, 0x40089200
add eax, eax
sub eax, ecx
cmp eax, 0xc09660f6
je 0x140148940
nop
mov eax, dword [0x14159c5c0]
mov ecx, dword [0x14159c5c4]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0x3d1dbc00
or ecx, 0x3d5823d2
imul rax, rcx, 0x753a62f1
shr rax, 0x3d
cmp eax, 0x34ceb931
je 0x140148980
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
nop word [rax + rax]
mov edx, dword [0x14159c5c8]
mov r8d, dword [0x14159c5cc]
not edx
not r8d
or r8d, edx
xor r8d, 0x4000
and r8d, 0x1014000
cmp r8d, 0x3ecc2ba3
ja 0x1401489c0
nop dword [rax]
mov edx, dword [0x14159c5d0]
imul edx, dword [0x14159c5d4]
mov r8d, edx
xor r8d, 0xb52f65e
add r8d, edx
and edx, 0x74ad09a1
sub r8d, edx
imul edx, r8d, 0x72717489
or edx, 0x917abadb
cmp edx, 0x3a58f47b
je 0x1401489f0
test rax, rax
je 0x140148ae4
mov eax, dword [0x14159c5d8]
xor edx, edx
div dword [0x14159c5dc]
nop
mov eax, dword [0x14159c5e0]
add eax, dword [0x14159c5e4]
imul eax, eax, 0xbf3aa7c8
add eax, 0x5cc81839
or eax, 0x735c6779
cmp eax, 0xe0d02947
jb 0x140148a40
cmp rcx, 0x11
jb 0x140148ad2
nop dword [rax]
mov eax, dword [0x14159c5e8]
mov ecx, dword [0x14159c5ec]
add eax, ecx
add eax, 0x9e14ee03
or eax, 0x44a18000
and eax, 0x6ea5b202
cmp eax, 0xb5e47f31
ja 0x140148a70
mov r14, qword [r14 - 8]
nop dword [rax + rax]
mov eax, dword [0x14159c5f0]
add eax, dword [0x14159c5f4]
mov ecx, eax
and ecx, 0x6ce91660
xor eax, 0xece91660
lea eax, [rax + rcx*2]
mov ecx, eax
xor ecx, 0xffd12c39
or eax, 0x2ed3c6
and eax, ecx
cmp eax, 0x58fd2106
je 0x140148aa0
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x14159c5f8]
mov ecx, dword [0x14159c5fc]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x61b8743a
and ecx, 0x9e478bc5
imul ecx, edx
mov edx, eax
and edx, 0x9e478bc5
or eax, 0x9e478bc5
imul eax, edx
add eax, ecx
or eax, 0x7b4f5fbf
cmp eax, 0xcb581012
ja 0x140148b50
mov rcx, qword [0x1415acb98]
xor eax, eax
test al, al
je 0x140148b59
mov rax, qword [0x1415acb98]
jmp 0x140148b43
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x14159c600]
add eax, dword [0x14159c604]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x1d986ce0
and ecx, 0xe267931f
imul ecx, edx
mov edx, eax
and edx, 0xe267931f
or eax, 0xe267931f
imul eax, edx
add eax, ecx
imul rax, rax, 0x21db44f
shr rax, 0x39
not eax
and eax, 0xf3b877eb
cmp eax, 0xf7ba5c3f
je 0x140148b70
mov eax, dword [str._4_r]
and eax, dword [0x14159c60c]
mov ecx, eax
and ecx, 0x5f3f052f
xor eax, 0x5f3f052f
lea eax, [rax + rcx*2]
xor eax, 0x1346cb7b
add eax, 0xd7dfaf44
cmp eax, 0x7f1b6502
jb 0x140148c54
mov eax, dword [0x14159c610]
mov ecx, dword [0x14159c614]
add eax, ecx
add eax, 0x43b6b241
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x774d97a2
and ecx, 0x88b2685d
imul ecx, edx
mov edx, eax
and edx, 0x88b2685d
or eax, 0x88b2685d
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x42b16f0d
mov edx, eax
and edx, 0xbd4e90f2
imul edx, ecx
mov ecx, eax
and ecx, 0x42b16f0d
or eax, 0x42b16f0d
imul eax, ecx
add eax, edx
mov qword [r15], r12
cmp eax, 0x95378088
jbe 0x140148c59
mov qword [r15], r12
jmp 0x140148be9
mov eax, 0xbf7315f5
nop
mov ecx, dword [0x14159c698]
mov edx, dword [0x14159c69c]
mov r8d, ecx
and r8d, edx
or ecx, edx
add ecx, r8d
or ecx, 0x7f9b4868
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x5056fc03
cmp ecx, 0x53fb0290
ja 0x140148c60
add rsp, 0x488
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret