Function at 0x140228060
Capabilities:
Encode data using base64
Encode data using xor
Generate random numbers via rtlgenrandom
Generate random numbers via winapi

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
movaps xmmword [rbp - 0x10], xmm6
mov eax, dword [0x141596670]
sub eax, dword [0x141596674]
mov ecx, eax
xor ecx, 0x83fcb5bf
add ecx, eax
and eax, 0x7c034a40
sub ecx, eax
xor ecx, 0xed5b27bf
imul rax, rcx, 0x65204d
shr rax, 0x35
cmp eax, 0xd1fa6117
ja 0x140228119
mov eax, dword [0x141596678]
mov ecx, dword [0x14159667c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov eax, ecx
not eax
and eax, 0x6fa7969c
and ecx, 0x90586963
sub ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x1ea7746d
and eax, 0x61588b92
imul eax, edx
mov edx, ecx
and edx, 0x61588b92
or ecx, 0x61588b92
imul ecx, edx
add ecx, eax
and ecx, 0x63db4f42
xor eax, eax
call fcn.14020e090
sub rsp, rax
mov rdx, rsp
cmp ecx, 0x1bf5427f
jne 0x140228125
xor eax, eax
call fcn.14020e090
sub rsp, rax
jmp 0x1402280ae
xor eax, eax
test al, al
je 0x140228160
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov eax, 0x40
call fcn.14020e090
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x141596680]
mov ecx, eax
not ecx
or ecx, dword [0x141596684]
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0x57a7ccfc
xor eax, 0xd7a7ccfc
lea eax, [rax + rcx*2]
imul eax, eax, 0x2d187dad
mov ecx, eax
and ecx, 0x56928848
add ecx, ecx
neg ecx
add ecx, eax
add ecx, 0xd6928848
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.14020e090
sub rsp, rax
mov r9, rsp
mov eax, 0x40
call fcn.14020e090
sub rsp, rax
mov rax, rsp
cmp ecx, 0x2b071af2
jb 0x140228160
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x28], rdx
mov eax, dword [0x141596688]
mov ecx, dword [0x14159668c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
mov ecx, eax
and ecx, 0xcb88d0ff
or eax, 0xcb88d0ff
add eax, ecx
mov ecx, eax
not ecx
or ecx, 0x88140
and ecx, 0xa86d817c
and eax, 0x14104683
or eax, ecx
cmp eax, 0xe54479a1
jbe 0x140228292
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov eax, 0x40
call fcn.14020e090
sub rsp, rax
mov eax, 0x40
call fcn.14020e090
sub rsp, rax
xorps xmm0, xmm0
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx], xmm0
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x20
mov r9d, 2
call qword [sym.imp.bcrypt.dll_BCryptGenRandom]
add rsp, 0x20
xorps xmm6, xmm6
nop word cs:[rax + rax]
mov edi, dword [0x141596690]
or edi, dword [0x141596694]
and edi, 0x6062b331
add edi, 0xebeb62e5
mov eax, edi
not eax
and eax, 0xa2909230
mov ecx, edi
and ecx, 0x456765c3
imul ecx, eax
mov eax, edi
and eax, 0xaa889234
or edi, 0xaa989234
imul edi, eax
add edi, ecx
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.14020e090
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.14020e090
sub rsp, rax
mov r14, rsp
mov eax, 0x40
call fcn.14020e090
sub rsp, rax
mov r13, rsp
mov eax, 0x40
call fcn.14020e090
sub rsp, rax
mov rsi, rsp
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15], xmm6
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
mov r8d, 0x20
mov r9d, 2
call qword [sym.imp.bcrypt.dll_BCryptGenRandom]
add rsp, 0x20
cmp edi, 0x4dc66343
je 0x1402282a0
mov ebx, eax
mov qword [rbp - 0x38], r14
cmp eax, 0xc0000000
jb 0x140228453
sub rsp, 0x20
mov rcx, r15
mov edx, 0x20
call qword [sym.imp.ADVAPI32.dll_SystemFunction036]
add rsp, 0x20
mov ecx, eax
nop dword [rax + rax]
mov eax, dword [0x141596698]
xor edx, edx
div dword [0x14159669c]
imul rdx, rax, 0x8ca8127
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1e
imul eax, eax, 0x21ec0029
cmp eax, 0x11181a75
je 0x140228390
test cl, cl
jne 0x140228453
add ebx, 0x80000000
nop dword [rax]
mov eax, dword [0x1415966a0]
xor edx, edx
div dword [0x1415966a4]
mov ecx, eax
and ecx, 0x2100ac3a
xor eax, 0x2100ac3a
lea eax, [rax + rcx*2]
or eax, 0xb14fbca3
add eax, 0xd31d7c4f
cmp eax, 0x925b03ed
ja 0x1402283d0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140228410
nop word cs:[rax + rax]
mov eax, dword [0x1415966a8]
sub eax, dword [0x1415966ac]
mov ecx, eax
xor ecx, 0x190d6fa0
add ecx, eax
and eax, 0x6f2905f
sub ecx, eax
and ecx, 0x18208845
cmp ecx, 0x2440e399
ja 0x140228420
test ebx, ebx
jne 0x1402285a3
mov ecx, dword [0x1415966c8]
mov edx, dword [0x1415966cc]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0x46950803
and ecx, 0x30428010
or ecx, r9d
or eax, r8d
and r8d, 0x46950803
and edx, 0x30428010
or edx, r8d
xor edx, ecx
not eax
or eax, edx
or eax, 0x892877ec
add eax, 0x569814a3
imul rax, rax, 0x27fd139b
shr rax, 0x3d
cmp eax, 0xa6bd1959
jbe 0x1402284c5
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
mov rbx, rsi
add rbx, 0x10
nop dword [rax]
mov eax, dword [0x1415966d0]
mov ecx, dword [0x1415966d4]
mov edx, eax
and edx, ecx
not eax
not ecx
or ecx, eax
not ecx
or ecx, edx
imul rax, rcx, 0x5cdfb0a1
shr rax, 0x3c
imul eax, eax, 0x6cf90120
xor eax, 0x3ab255f9
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
cmp eax, 0x9bb1919e
ja 0x1402284d0
nop dword [rax + rax]
mov eax, dword [0x1415966d8]
xor edx, edx
div dword [0x1415966dc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xf8b554d5
and ecx, 0x74aab2a
imul ecx, edx
mov edx, eax
and edx, 0x74aab2a
or eax, 0x74aab2a
imul eax, edx
add eax, ecx
imul rax, rax, 0x419bada7
shr rax, 0x3e
or eax, 0xf05d5964
cmp eax, 0x77e551d3
jb 0x140228520
mov eax, dword [0x1415966e0]
or eax, dword [0x1415966e4]
add eax, 0x31fd1cea
shr eax, 1
mov ecx, 0x9233b809
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x4e5dcf1c
cmp ecx, 0xc2c166ed
jbe 0x1402286e9
jmp 0x140228711
mov eax, dword [0x1415966b0]
mov ecx, dword [0x1415966b4]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
and eax, 0x2b3e1b23
add eax, eax
sub ecx, eax
imul eax, ecx, 0x42db00fd
add eax, 0x13a8918d
cmp eax, 0x68b60d31
ja 0x14022861d
mov eax, dword [0x1415966b8]
sub eax, dword [0x1415966bc]
mov ecx, eax
and ecx, 0x4732431
xor eax, 0x84732431
lea eax, [rax + rcx*2]
imul esi, eax, 0x3d9d18ea
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1401ac910
add rsp, 0x20
cmp esi, 0xd55bb8fc
jne 0x14022863a
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1401ac910
add rsp, 0x20
jmp 0x1402285d8
mov ecx, dword [0x1415966c0]
mov edx, dword [0x1415966c4]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
mov edx, ecx
not edx
and edx, 0x7a800
mov r8d, ecx
and r8d, 0x7857ff
imul r8d, edx
mov edx, ecx
and edx, 0x7a800
or ecx, 0x7a800
imul ecx, edx
add ecx, r8d
or ecx, 0xb91cbf4c
and ecx, 0xb97fff4c
cmp ecx, 0x27cee1bd
jb 0x14022863a
test rax, rax
jne 0x1402286b2
ud2
mov dword [rax], ebx
mov eax, dword [str.U_L]
or eax, dword [0x14159675c]
add eax, 0xc135ab75
imul rcx, rax, 0xe41e209
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xf9ad6de9
jbe 0x140228b9a
jmp 0x140228bbf
mov eax, dword [0x1415966e8]
xor edx, edx
div dword [0x1415966ec]
not eax
or eax, 0x216ecb4e
and eax, 0xf3efdfee
mov rcx, qword [0x1415acbb8]
cmp eax, 0x14bab57b
jne 0x14022871a
mov rax, qword [0x1415acbb8]
jmp 0x1402286e9
test rcx, rcx
jne 0x140228791
mov eax, dword [0x1415966f0]
and eax, dword [0x1415966f4]
or eax, 0x16c1a4eb
and eax, 0x96e5a4eb
cmp eax, 0xb62c7ed9
ja 0x14022877f
mov eax, dword [0x1415966f8]
mov ecx, dword [0x1415966fc]
not eax
not ecx
and ecx, eax
not ecx
or ecx, 0xde2fd7da
mov eax, ecx
not eax
or eax, 0x612954d0
lea edi, [rcx + rax]
inc edi
or edi, 0x46c59ee7
sub rsp, 0x20
call fcn.14023b9f0
add rsp, 0x20
cmp edi, 0xb205db48
jbe 0x14022878e
sub rsp, 0x20
call fcn.14023b9f0
add rsp, 0x20
jmp 0x14022873c
mov rcx, rax
mov eax, dword [0x141596700]
xor edx, edx
div dword [0x141596704]
mov rax, rcx
xor rax, 0xffffffffffffbfff
or rcx, 0x4000
and rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141596708]
mov edx, dword [0x14159670c]
mov r8d, eax
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, eax
imul r9d, r8d
mov r8d, eax
and r8d, edx
or eax, edx
imul eax, r8d
add eax, r9d
or eax, 0xc77073e3
lea edx, [rax - 0x29c65e1a]
not edx
or edx, 0x99a0c03b
add eax, edx
add eax, 0xd639a1e7
cmp eax, 0xaeb0f27a
ja 0x1402287c0
test rcx, rcx
je 0x1402288b1
sub rsp, 0x20
lea r8, [0x141578750]
mov rcx, rbx
mov rdx, r12
call fcn.14010dee0
add rsp, 0x20
mov r9, qword [rbp - 0x30]
nop dword [rax]
mov eax, dword [0x141596728]
mov ecx, dword [0x14159672c]
mov edx, ecx
not edx
mov r8d, eax
and r8d, edx
or edx, eax
not edx
imul edx, r8d
mov r8d, eax
and r8d, ecx
or eax, ecx
imul eax, r8d
add eax, edx
not eax
or eax, 0x1a328000
mov ecx, eax
not ecx
mov edx, ecx
or edx, 0x858c5c74
and eax, 0x2a00000a
mov r8d, edx
and r8d, 0xc1cd2bb5
imul r8d, eax
and edx, 0x2400544a
or ecx, 0xaf8c5c7e
imul ecx, edx
add ecx, r8d
cmp ecx, 0xc7381e60
ja 0x140228840
jmp 0x1402289a6
mov r9, qword [rbp - 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141596710]
add eax, dword [0x141596714]
or eax, 0xcfd19848
mov ecx, eax
and ecx, 0x488c242
add ecx, ecx
neg ecx
add eax, ecx
add eax, 0xb488c242
not eax
or eax, 0xf3a31427
cmp eax, 0xf6d420d7
jb 0x1402288c0
movaps xmm0, xmmword [r12]
movaps xmm1, xmmword [r12 + 0x10]
mov eax, dword [0x141596718]
mov ecx, dword [0x14159671c]
not eax
not ecx
or ecx, eax
not ecx
add ecx, 0x24706e11
mov eax, ecx
xor eax, 0xe5d9db20
xor ecx, 0x18200491
and ecx, 0xb9799491
mov edx, eax
and edx, 0x46866b6e
imul edx, ecx
mov ecx, eax
and ecx, 0xb9799491
or eax, 0xb9799491
imul eax, ecx
add eax, edx
cmp eax, 0x625a019d
je 0x140228995
mov eax, dword [0x141596720]
mov ecx, dword [0x141596724]
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
add eax, 0xcc0b21e8
mov ecx, eax
xor ecx, 0x22084904
and ecx, 0x3349fda5
xor eax, 0xd151b6b9
lea eax, [rax + rcx*2]
movaps xmmword [rsi + 0x10], xmm0
movaps xmmword [rsi + 0x20], xmm1
xorps xmm2, xmm2
movaps xmmword [rsi + 0x30], xmm2
cmp eax, 0xbbb70d0a
jbe 0x1402289a6
movaps xmmword [rsi + 0x10], xmm0
movaps xmmword [rsi + 0x20], xmm1
xorps xmm2, xmm2
movaps xmmword [rsi + 0x30], xmm2
jmp 0x14022894e
mov eax, dword [0x141596730]
add eax, dword [0x141596734]
imul rcx, rax, 0x1c795f73
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xcb9c0cdf
mov r8, qword [rbp - 0x38]
jne 0x140228a20
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmm2, xmmword [rbx + 0x20]
movaps xmmword [r8 + 0x20], xmm2
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
movups xmmword [r9 + 0x28], xmm2
movups xmmword [r9 + 0x18], xmm1
movups xmmword [r9 + 8], xmm0
mov rax, qword [r9 + 0x30]
mov qword [r13 + 0x30], rax
movups xmm0, xmmword [r9 + 0x20]
movups xmmword [r13 + 0x20], xmm0
movups xmm0, xmmword [r9 + 0x10]
movups xmmword [r13 + 0x10], xmm0
movups xmm0, xmmword [r9]
movups xmmword [r13], xmm0
nop
mov eax, dword [0x141596738]
and eax, dword [0x14159673c]
mov ecx, eax
xor ecx, 0x4271df7c
add ecx, eax
and eax, 0xbd8e2083
sub ecx, eax
mov eax, ecx
not eax
mov edx, ecx
and edx, 0x4a539568
and eax, 0xb5ac6a97
imul eax, edx
mov edx, ecx
and edx, 0xb5ac6a97
or ecx, 0xb5ac6a97
imul ecx, edx
add eax, ecx
add eax, 0xa8de340e
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmm2, xmmword [rbx + 0x20]
movaps xmmword [r8 + 0x20], xmm2
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
movups xmmword [r9 + 0x28], xmm2
movups xmmword [r9 + 0x18], xmm1
movups xmmword [r9 + 8], xmm0
mov rcx, qword [r9 + 0x30]
mov qword [r13 + 0x30], rcx
movups xmm0, xmmword [r9 + 0x20]
movups xmmword [r13 + 0x20], xmm0
movups xmm0, xmmword [r9 + 0x10]
movups xmmword [r13 + 0x10], xmm0
movups xmm0, xmmword [r9]
movups xmmword [r13], xmm0
cmp eax, 0x43d45509
ja 0x140228a20
movzx eax, byte [0x1415acbd0]
sub rsp, 0x20
mov edx, 0x170
xor ecx, ecx
call fcn.1401ac910
add rsp, 0x20
test rax, rax
je 0x140228b0a
mov rcx, rax
mov eax, dword [0x141596770]
add eax, dword [0x141596774]
xor eax, 0x804f8416
or eax, 0x49905be8
cmp eax, 0xcb207c08
jne 0x140228c0d
jmp 0x140228c69
mov eax, dword [0x141596740]
sub eax, dword [0x141596744]
xor eax, 0x25e67af2
imul rax, rax, 0x713ddb1f
shr rax, 0x3e
cmp eax, 0x90fa9a84
ja 0x140228b60
mov eax, dword [0x141596748]
mov ecx, dword [0x14159674c]
add eax, ecx
add eax, 0x623ff037
imul rcx, rax, 0x1898d4f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
and eax, 5
ud2
ud2
mov eax, dword [0x141596760]
imul eax, dword [0x141596764]
or eax, 0x794db35
add eax, 0x5ad6146f
xor eax, 0x99a1da8e
ud2
ud2
mov eax, dword [0x141596778]
xor eax, dword [0x14159677c]
mov edx, eax
not edx
and edx, 0xa4cb1171
mov r8d, eax
and r8d, 0x5b34ee8e
imul r8d, edx
mov edx, eax
and edx, 0xa4cb1171
or eax, 0xa4cb1171
imul eax, edx
add eax, r8d
mov edx, eax
not edx
or edx, 0x28100a40
and edx, 0x29770ac8
and eax, 0xd4081123
or eax, edx
mov qword [rcx], 1
cmp eax, 0x8fe439e3
jbe 0x140228c72
mov qword [rcx], 1
jmp 0x140228c0d
mov eax, dword [0x141596780]
xor eax, dword [0x141596784]
cmp eax, 0x570a6b8b
je 0x140228d64
mov eax, dword [0x141596788]
mov edx, dword [0x14159678c]
xor edx, eax
not edx
and edx, eax
add edx, 0x3593b0f
mov eax, 0xf1d1476d
imul rax, rdx
shr rax, 0x3f
mov qword [rcx + 8], 1
xorps xmm0, xmm0
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx + 0x20], xmm0
movaps xmmword [rcx + 0x30], xmm0
movaps xmmword [rcx + 0x40], xmm0
movaps xmmword [rcx + 0x50], xmm0
movaps xmmword [rcx + 0x60], xmm0
movaps xmmword [rcx + 0x70], xmm0
movaps xmmword [rcx + 0x80], xmm0
movaps xmmword [rcx + 0x90], xmm0
movaps xmmword [rcx + 0xa0], xmm0
movaps xmmword [rcx + 0xb0], xmm0
movaps xmmword [rcx + 0xc0], xmm0
movaps xmmword [rcx + 0xd0], xmm0
movaps xmmword [rcx + 0xe0], xmm0
movaps xmmword [rcx + 0xf0], xmm0
movaps xmmword [rcx + 0x100], xmm0
mov qword [rcx + 0x110], 0x40
mov rdx, qword [r13 + 0x30]
mov qword [rcx + 0x148], rdx
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmm2, xmmword [r13 + 0x20]
movups xmmword [rcx + 0x138], xmm2
movups xmmword [rcx + 0x128], xmm1
movups xmmword [rcx + 0x118], xmm0
mov qword [rcx + 0x150], 0x10000
cmp eax, 0xd5790868
jbe 0x140228e14
mov qword [rcx + 8], 1
xorps xmm0, xmm0
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx + 0x20], xmm0
movaps xmmword [rcx + 0x30], xmm0
movaps xmmword [rcx + 0x40], xmm0
movaps xmmword [rcx + 0x50], xmm0
movaps xmmword [rcx + 0x60], xmm0
movaps xmmword [rcx + 0x70], xmm0
movaps xmmword [rcx + 0x80], xmm0
movaps xmmword [rcx + 0x90], xmm0
movaps xmmword [rcx + 0xa0], xmm0
movaps xmmword [rcx + 0xb0], xmm0
movaps xmmword [rcx + 0xc0], xmm0
movaps xmmword [rcx + 0xd0], xmm0
movaps xmmword [rcx + 0xe0], xmm0
movaps xmmword [rcx + 0xf0], xmm0
movaps xmmword [rcx + 0x100], xmm0
mov qword [rcx + 0x110], 0x40
mov rax, qword [r13 + 0x30]
mov qword [rcx + 0x148], rax
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmm2, xmmword [r13 + 0x20]
movups xmmword [rcx + 0x138], xmm2
movups xmmword [rcx + 0x128], xmm1
movups xmmword [rcx + 0x118], xmm0
mov qword [rcx + 0x150], 0x10000
jmp 0x140228c89
xor eax, eax
test al, al
jne 0x140228e91
mov eax, dword [0x141596790]
xor edx, edx
div dword [0x141596794]
or eax, 0xd8f4c4ab
mov edx, 0xb7d8d4a7
imul rdx, rax
mov qword [rcx + 0x158], 0x10000
mov qword [rcx + 0x160], 0
mov eax, dword [0x1415acbd4]
mov r8, qword gs:[0x58]
mov r8, qword [r8 + rax*8]
mov rax, qword [r8 + 0x18]
mov rbx, qword [r8 + 0x20]
mov qword [r8 + 0x18], 1
mov qword [r8 + 0x20], rcx
shr rdx, 0x3e
add edx, 0xdefefc51
cmp edx, 0x52833026
jae 0x140228ed1
mov qword [rcx + 0x158], 0x10000
mov qword [rcx + 0x160], 0
mov eax, dword [0x1415acbd4]
mov rdx, qword gs:[0x58]
mov rax, qword [rdx + rax*8]
mov qword [rax + 0x18], 1
mov qword [rax + 0x20], rcx
jmp 0x140228e1a
test rax, rax
jle 0x140229080
cmp eax, 1
jne 0x1402293a0
nop word cs:[rax + rax]
mov eax, dword [0x1415967e0]
xor edx, edx
div dword [0x1415967e4]
mov ecx, eax
xor ecx, 0xc8a9ab50
xor eax, 0x375654af
mov edx, eax
and edx, 0xff1fb0bc
and ecx, 0xe04f43
imul ecx, edx
mov edx, eax
and edx, 0xe04f43
or eax, 0xe04f43
imul eax, edx
add eax, ecx
imul eax, eax, 0xc8e7c20f
cmp eax, 0x39e73419
jb 0x140228ef0
dec qword [rbx]
jne 0x1402293a0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140228f50
mov eax, dword [0x1415967e8]
and eax, dword [0x1415967ec]
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xc0c8b229
and ecx, 0x3f374dd6
imul ecx, edx
mov edx, eax
and edx, 0x3f374dd6
or eax, 0x3f374dd6
imul eax, edx
add eax, ecx
add eax, 0xcfcab5ef
cmp eax, 0xbd5da2c2
jbe 0x140228fa0
dec qword [rbx + 8]
nop word [rax + rax]
mov ecx, dword [0x1415967f0]
sub ecx, dword [0x1415967f4]
or ecx, 0x86e031a3
add ecx, 0x76131c37
mov eax, ecx
not eax
mov edx, ecx
and edx, 0xc0e30ab6
and eax, 0x3b1cd548
imul eax, edx
mov edx, ecx
and edx, 0x3f1cd548
or ecx, 0x3f1cd548
imul ecx, edx
add ecx, eax
mov rax, qword [rbx + 8]
dec rax
mov qword [rbx + 8], rax
cmp ecx, 0x773a18c6
jb 0x140228fa0
nop word cs:[rax + rax]
mov ecx, dword [str._dAC]
mov edx, dword [0x1415967fc]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
add ecx, 0xe4d75288
mov edx, ecx
xor edx, 0x72eef03f
and ecx, 0xd110fc0
add ecx, ecx
sub ecx, edx
cmp ecx, 0xc297b100
ja 0x140229000
test rax, rax
jne 0x1402293a0
mov rsi, qword [0x1415acb98]
mov eax, dword [0x141596800]
xor edx, edx
div dword [0x141596804]
cmp eax, 0x25831cbf
jne 0x1402294e9
jmp 0x14022952e
mov eax, dword [0x141596798]
mov ecx, dword [0x14159679c]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
or eax, 0x601121
and eax, 0x717f91b1
add eax, 0x249978f9
cmp eax, 0x572b363d
ja 0x140229080
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x40]
nop dword [rax + rax]
mov ecx, dword [0x1415967a0]
mov edx, dword [0x1415967a4]
mov r8d, ecx
xor r8d, edx
not r8d
and r8d, edx
add r8d, r8d
sub edx, r8d
add edx, ecx
mov ecx, edx
and ecx, 0xd32e9e88
mov r8d, ecx
not r8d
mov r9d, edx
and r9d, 0x51220c08
and r8d, 0xaa9cd2f1
imul r8d, r9d
and edx, 0x820c9280
or ecx, 0xaa9cd2f1
imul ecx, edx
add ecx, r8d
mov edx, ecx
xor edx, 0xdf4b4405
and ecx, 0x20b4bbf8
add ecx, ecx
sub ecx, edx
cmp ecx, 0x48956388
jb 0x1402290e0
test rax, rax
jne 0x1402293d7
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x40], 0xffffffffffffffff
mov rcx, qword [0x140249638]
mov rsi, qword [rax + 0x58]
cmp rsi, qword [rax + 0x48]
jne 0x14022928f
mov eax, dword [0x1415967b8]
sub eax, dword [0x1415967bc]
mov ecx, eax
not ecx
or eax, 0xb52c0880
or ecx, 0x424400
and ecx, 0x4a536640
mov edx, eax
and edx, 0x5000830
or edx, ecx
xor edx, 0x6894263b
and eax, 0x922900f0
or eax, edx
cmp eax, 0x1d858b40
jae 0x1402291e0
sub rsp, 0x20
call fcn.14013c580
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x1415967c4]
add eax, dword [0x1415967c0]
mov ecx, eax
not ecx
and ecx, 0x841597d7
and eax, 0x7bea6828
sub eax, ecx
or eax, 0x45cb8602
imul edi, eax, 0x1f06f33a
sub rsp, 0x20
call fcn.14020c880
add rsp, 0x20
cmp edi, 0x23c024d8
jb 0x1402291e0
nop dword [rax]
mov eax, dword [0x1415967c8]
mov ecx, dword [0x1415967cc]
mov edx, ecx
and edx, eax
add eax, ecx
sub eax, edx
mov ecx, eax
and ecx, 0xf0215207
mov edx, ecx
not edx
mov r8d, eax
and r8d, 0xf0215200
and edx, 0x15601a7
imul edx, r8d
and eax, 7
or ecx, 0x15601a7
imul ecx, eax
add ecx, edx
or ecx, 0x6bae74f3
cmp ecx, 0xb0393dc8
jb 0x140229220
mov eax, dword [0x1415acbd4]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x40]
inc rax
jmp 0x140229291
xor eax, eax
mov ecx, dword [0x1415967d0]
mov edx, dword [0x1415967d4]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
add ecx, 0x8518ba6e
or ecx, 0x6370346c
xor ecx, 0x611fa9e9
cmp ecx, 0xa03710d4
jbe 0x140229326
mov ecx, dword [0x1415acbd4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov rdx, qword [rcx + 0x50]
mov r8, rsi
shl r8, 4
lea r9, [rcx + 0x18]
mov qword [rdx + r8], r9
lea r9, [0x14010d3e0]
mov qword [rdx + r8 + 8], r9
lea rdx, [rsi + 1]
mov qword [rcx + 0x58], rdx
mov qword [rcx + 0x40], rax
mov rcx, rsi
shl rcx, 4
inc rsi
lea rdx, [0x14010d3e0]
nop word [rax + rax]
mov r8d, dword [0x1415967d8]
sub r8d, dword [str.e5_e]
mov r9d, dword [0x1415acbd4]
mov r10, qword gs:[0x58]
mov r9, qword [r10 + r9*8]
mov r10, qword [r9 + 0x50]
lea r11, [r9 + 0x18]
mov qword [r10 + rcx], r11
or r8d, 0xff55b4ff
add r8d, 0xdd92d1d9
mov qword [r10 + rcx + 8], rdx
mov qword [r9 + 0x58], rsi
mov qword [r9 + 0x40], rax
cmp r8d, 0xa11c0ac8
jb 0x140229340
nop
mov eax, dword [0x141596818]
or eax, dword [0x14159681c]
mov ecx, eax
and ecx, 0xbddad47d
or eax, 0xbddad47d
add eax, ecx
cmp eax, 0xde88a59e
je 0x1402293a0
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rax, qword [rbp - 0x18]
mov dword [rax], 0
mov byte [rax + 4], 0
lea rax, [0x141578f28]
mov rcx, qword [rbp - 0x20]
mov qword [rcx], rax
mov qword [rcx + 8], 1
mov eax, dword [0x1415967a8]
mov ecx, dword [0x1415967ac]
mov edx, eax
and edx, ecx
or eax, ecx
not eax
or eax, edx
xor eax, 0x1e35f072
mov ecx, 0xa7161ba5
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xb0235c35
cmp ecx, 0xbd1b7732
jbe 0x140229464
mov rax, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
mov qword [rdx + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rdx + 0x18], xmm0
sub rsp, 0x20
mov rcx, qword [rbp - 0x18]
call fcn.140135e00
mov rcx, rax
call fcn.140136320
add rsp, 0x20
mov ecx, 7
int 0x29
xorps xmm6, xmm6
mov rdi, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x20]
mov r14, qword [rbp - 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x1415967b0]
and eax, dword [0x1415967b4]
add eax, 0xbb0f9147
shr eax, 2
imul rsi, rax, 0x90f2de7
shr rsi, 0x33
mov qword [rbx + 0x10], rdi
movups xmmword [rbx + 0x18], xmm6
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
call fcn.14020bfe0
mov rcx, rax
call fcn.140136320
add rsp, 0x20
mov ecx, 7
int 0x29
cmp esi, 0xdf9ae11b
je 0x140229480
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1402294e0
jmp 0x1402286b0
mov eax, dword [0x141596808]
imul eax, dword [0x14159680c]
mov ecx, 0x9ca4caaf
imul rcx, rax
shr rcx, 0x3e
not ecx
and ecx, 0xebfba423
imul edi, ecx, 0xb5698b3e
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call fcn.14020ae70
add rsp, 0x20
cmp edi, 0xb90a0d8c
jae 0x140229550
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1402294e9
mov eax, dword [0x141596814]
xor eax, dword [str.__tx]
or eax, 0x96a3e87a
add eax, 0xc529aa79
mov ecx, eax
xor ecx, 0x268cc3dc
and eax, 0x59713c23
add eax, eax
sub eax, ecx
cmp eax, 0x59a579e1
jb 0x140229550
jmp 0x1402293a0