Function at 0x1401e3be0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
lea r14, [rcx + rdx]
nop word cs:[rax + rax]
mov eax, dword [0x1415a9228]
and eax, dword [0x1415a922c]
and eax, 0x7fffffff
xor eax, 0x12ddda5e
add eax, 0x4c757bff
and eax, 0x75778f8f
cmp eax, 0xc8314a90
ja 0x1401e3c00
test rdx, rdx
je 0x1401e3c9d
lea r9, [rcx + 1]
movzx r8d, byte [rcx]
nop word cs:[rax + rax]
mov eax, dword [0x1415a9230]
sub eax, dword [0x1415a9234]
add eax, 0xc04de054
mov edx, eax
not edx
or eax, 0xecfc9163
or edx, 0x13036e9c
and edx, eax
cmp edx, 0x64305dd9
je 0x1401e3c40
test r8b, r8b
js 0x1401e3ca4
nop
mov eax, dword [0x1415a9250]
xor edx, edx
div dword [0x1415a9254]
imul eax, eax, 0x4edfe49a
not eax
or eax, 0xfdeef33e
cmp eax, 0x91ff0b64
jbe 0x1401e3c70
mov r15, r9
mov edx, r8d
jmp 0x1401e4020
xor ebx, ebx
jmp 0x1401e4a4e
mov eax, r8d
and eax, 0x1f
nop word [rax + rax]
mov edx, dword [0x1415a9238]
mov r10d, dword [0x1415a923c]
mov r11d, r10d
not r11d
and r11d, edx
xor r10d, edx
add r10d, edx
sub r10d, r11d
and r10d, 0x2800110
xor r10d, 0x800100
or r10d, 0xed769e42
cmp r10d, 0xce8da922
je 0x1401e3cb0
lea r15, [rcx + 2]
nop word cs:[rax + rax]
mov edx, dword [str.Ea_6]
or edx, dword [0x1415a9244]
or edx, 0xddb66c14
imul edx, edx, 0xa9e36d2d
and edx, 0xb026e73d
cmp edx, 0x8c0c7cb6
jb 0x1401e3d00
mov edx, eax
shl edx, 6
nop dword [rax + rax]
mov r10d, dword [0x1415a9248]
mov r11d, dword [0x1415a924c]
lea esi, [r10 + r11]
add r10d, r11d
add r10d, 0xace37c27
mov r11d, r10d
and r11d, 0x638fe204
xor r10d, 0x9c701dfb
add r10d, esi
add r10d, 0xace37c27
sub r10d, r11d
and r10d, 0xb1ded1a8
cmp r10d, 0x7aa1b6e9
jb 0x1401e3d30
movzx r9d, byte [r9]
mov r10d, r9d
xor r10b, 0xc0
or r9b, 0x3f
and r9b, r10b
movzx r9d, r9b
cmp r8b, 0xdf
jbe 0x1401e4018
lea r15, [rcx + 3]
nop
mov edx, dword [0x1415a9258]
imul edx, dword [0x1415a925c]
mov r10d, edx
or r10d, 0xe1c6becf
xor r10d, 0x23820030
or edx, 0xc074becf
and edx, r10d
not edx
or edx, 0x9c4dd3cf
cmp edx, 0xc828815c
je 0x1401e3da0
movzx edx, byte [rcx + 2]
shl r9d, 6
and dl, 0x3f
movzx edx, dl
mov r10d, edx
and r10d, r9d
add r9d, edx
sub r9d, r10d
mov edx, eax
shl edx, 0xc
or edx, r9d
nop dword [rax]
mov r10d, dword [0x1415a9260]
or r10d, dword [0x1415a9264]
or r10d, 0x1dfac6bc
mov r11d, r10d
xor r11d, 0x5426e48f
add r11d, r10d
and r10d, 0xabd91b70
sub r11d, r10d
or r11d, 0x389cd178
cmp r11d, 0x72885e34
je 0x1401e3e00
cmp r8b, 0xf0
jb 0x1401e3f20
xor edx, edx
nop dword [rax + rax]
test dl, dl
jne 0x1401e3e50
lea r15, [rcx + 4]
and eax, 7
shl eax, 0x12
shl r9d, 6
nop word cs:[rax + rax]
mov edx, dword [0x1415a9268]
or edx, dword [0x1415a926c]
mov r8d, edx
not r8d
and r8d, 0xdb53cbe3
mov r10d, edx
and r10d, 0x24ac341c
imul r10d, r8d
mov r8d, edx
and r8d, 0xdb53cbe3
or edx, 0xdb53cbe3
imul edx, r8d
add edx, r10d
mov r8d, edx
xor r8d, 0xc8f86178
add r8d, edx
and edx, 0x37079e87
sub r8d, edx
cmp r8d, 0xa11458d2
je 0x1401e3e70
movzx ecx, byte [rcx + 3]
mov edx, ecx
not dl
or dl, 0x3f
add dl, cl
inc dl
movzx ecx, dl
mov edx, ecx
and edx, r9d
add r9d, ecx
sub r9d, edx
mov edx, r9d
or edx, eax
nop
mov eax, dword [0x1415a9270]
sub eax, dword [0x1415a9274]
mov ecx, eax
and ecx, 0xdc90333
xor eax, 0x8dc90333
lea eax, [rax + rcx*2]
imul rax, rax, 0x134d0c1b
shr rax, 0x3c
cmp eax, 0x6588eed9
ja 0x1401e3ef0
nop
mov eax, dword [0x1415a9278]
mov ecx, dword [0x1415a927c]
not eax
not ecx
or ecx, eax
mov eax, ecx
not eax
xor ecx, 0x6a2807fe
or eax, 0x6a2807fe
and eax, ecx
mov ecx, eax
not ecx
or ecx, 0x231b7472
add eax, ecx
inc eax
imul rax, rax, 0x346fa4fd
shr rax, 0x3c
cmp eax, 0x3abad245
ja 0x1401e3f20
cmp edx, 0xffff
jbe 0x1401e4020
lea esi, [rdx + 0xff0000]
shr esi, 0xa
nop dword [rax + rax]
mov eax, dword [0x1415a9288]
and eax, dword [0x1415a928c]
imul rax, rax, 0x2102511d
shr rax, 0x3b
not eax
and eax, 0x805e19ac
cmp eax, 0xa861835f
ja 0x1401e3f80
or esi, 0xd800
mov r12d, edx
xor r12d, 0x2000
and r12d, edx
or r12d, 0xdc00
nop
mov eax, dword [0x1415a9290]
mov ecx, dword [0x1415a9294]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
imul rax, rax, 0x46c57a09
shr rax, 0x3a
mov ecx, eax
not ecx
and ecx, 0x15765e4
mov edx, eax
and edx, 0xfffffffb
imul edx, ecx
mov ecx, eax
and ecx, 4
or eax, 0x15765e4
imul eax, ecx
add eax, edx
mov ecx, eax
xor ecx, 0xf56f0efa
and eax, 0x756f0ef8
or eax, ecx
cmp eax, 0xcecb6b57
je 0x1401e3fc0
jmp 0x1401e404e
or edx, r9d
nop dword [rax + rax]
mov eax, dword [str.N5b_wx__b]
and eax, dword [0x1415a9284]
xor eax, 0xb609a459
imul rax, rax, 0x3e18b2b7
shr rax, 0x3d
imul eax, eax, 0x4e9973e0
cmp eax, 0x72651216
je 0x1401e4020
xor r12d, r12d
mov esi, edx
movabs r9, 0x3fffffffffffffff
lea rcx, [r14 + 2]
mov qword [rsp + 0x40], rcx
sub rcx, r15
movabs r11, 0xaaaaaaaaaaaaaaab
mov r10d, 4
nop word cs:[rax + rax]
mov eax, dword [0x1415a9298]
xor edx, edx
div dword [0x1415a929c]
mov r8d, eax
add r8d, 0x7a86dbc
not r8d
and r8d, 0x1886c21a
mov rax, rcx
mul r11
shr rdx, 1
cmp r12w, 1
sbb rdx, 0xffffffffffffffff
lea rdi, [rdx + 1]
cmp rdx, 3
cmovb rdi, r10
cmp r8d, 0xd66d4fa6
je 0x1401e4080
cmp rdi, r9
ja 0x1401e499a
lea rdx, [rdi + rdi]
movzx eax, byte [0x1415acbd0]
xor ecx, ecx
call fcn.1401ac910
test rax, rax
je 0x1401e4964
mov rcx, rax
mov eax, dword [0x1415a92b8]
or eax, dword [0x1415a92bc]
mov edx, eax
not edx
or edx, 0xf9f51bee
add eax, edx
inc eax
mov edx, eax
and edx, 0x28b67031
and eax, 0xa00010
add eax, eax
sub edx, eax
add edx, 0xc6a8811e
cmp edx, 0xdda21d34
jae 0x1401e4130
mov word [rcx], si
nop dword [rax]
mov eax, dword [0x1415a92c0]
xor eax, dword [0x1415a92c4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x3d657ad4
and edx, 0xc29a852b
imul edx, r8d
mov r8d, eax
and r8d, 0xc29a852b
or eax, 0xc29a852b
imul eax, r8d
add eax, edx
and eax, 0x89cba213
xor eax, 0xc14cbca2
mov word [rcx], si
cmp eax, 0x8b515c9e
jb 0x1401e4130
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], 1
mov r8d, 0x84f5b66d
nop word cs:[rax + rax]
mov eax, dword [0x1415a92c8]
xor edx, edx
div dword [0x1415a92cc]
imul rax, r8
shr rax, 0x3f
or eax, 0xf65ffffe
cmp eax, 0xa886dcba
jb 0x1401e41a0
mov esi, 1
mov r13d, 0xd1ac4ee9
lea rbp, [rsp + 0x20]
mov qword [rsp + 0x38], r14
test r12w, r12w
je 0x1401e41f0
nop dword [rax]
xor edi, edi
jmp 0x1401e4588
mov eax, dword [0x1415a92d0]
xor eax, dword [0x1415a92d4]
add eax, 0x60b2dd11
mov edx, eax
and edx, 0x4ee3fe9e
mov r8d, edx
not r8d
and r8d, 0x4f085190
mov r9d, eax
and r9d, 0xe3ae0e
imul r9d, r8d
and eax, 0x4e005090
or edx, 0x4f085190
imul edx, eax
add edx, r9d
cmp edx, 0x19027fcc
jb 0x1401e41f0
cmp r15, r14
je 0x1401e4760
mov eax, dword [0x1415a92d8]
xor edx, edx
div dword [0x1415a92dc]
mov eax, dword [0x1415a92e0]
mov edx, dword [0x1415a92e4]
add eax, edx
add eax, 0xbcfaf5f4
cmp eax, 0x7e760d58
ja 0x1401e4254
movzx eax, byte [r15]
test al, al
js 0x1401e4290
inc r15
mov r9, r15
jmp 0x1401e4580
mov r8d, eax
and r8d, 0x1f
lea r9, [r15 + 2]
movzx r10d, byte [r15 + 1]
and r10d, 0x3f
cmp al, 0xdf
jbe 0x1401e4466
mov edx, dword [0x1415a92e8]
mov r11d, edx
not r11d
or r11d, dword [0x1415a92ec]
add edx, r11d
inc edx
mov r11d, edx
xor r11d, 0xa480400
xor edx, 0x34b007
or r11d, 0x55b7b82f
or edx, 0xaa4847d0
and edx, r11d
mov r11d, edx
not r11d
mov edi, r11d
and edi, 0x7502e5d3
and edx, 0x8afd1a2c
imul edx, edi
mov edi, r11d
and edi, 0x8afd1a2c
or r11d, 0x8afd1a2c
imul r11d, edi
add r11d, edx
cmp r11d, 0x60549e62
je 0x1401e42ac
lea rdx, [r15 + 3]
mov edi, dword [0x1415a92f0]
mov r11d, dword [0x1415a92f4]
mov ebx, edi
xor ebx, r11d
not ebx
and ebx, r11d
add ebx, ebx
sub r11d, ebx
add r11d, edi
mov edi, r11d
not edi
and edi, 0x21000c06
mov ebx, r11d
and ebx, 0xdefff3f9
imul ebx, edi
mov edi, r11d
and edi, 0x21000c06
or r11d, 0x21000c06
imul r11d, edi
add r11d, ebx
and r11d, 0xccf2f818
imul r11d, r11d, 0x3ceb9031
cmp r11d, 0x93f2814
jb 0x1401e4320
movzx r9d, byte [r9]
shl r10d, 6
and r9b, 0x3f
movzx r9d, r9b
or r9d, r10d
cmp al, 0xf0
jb 0x1401e4475
mov eax, dword [0x1415a92f8]
mov edx, dword [0x1415a92fc]
not eax
not edx
and edx, eax
and edx, 0x7fffffff
xor edx, 0x611e4cdb
add edx, 0xbf03247
or edx, 0xbe1cf323
cmp edx, 0x9d6f7f92
je 0x1401e439f
shl r8d, 0x12
movzx r10d, byte [r15 + 3]
add r15, 4
mov eax, dword [0x1415a9300]
xor edx, edx
div dword [0x1415a9304]
mov eax, dword [0x1415a9308]
sub eax, dword [0x1415a930c]
mov edx, eax
not edx
or edx, 0x9e67967c
or eax, 0x61986983
and eax, edx
mov edx, eax
and edx, 0x87932ea
xor eax, 0x887932ea
lea edx, [rax + rdx*2]
mov eax, edx
xor eax, 0x436b6b90
and edx, 0x3c94946f
add edx, edx
sub edx, eax
mov eax, r8d
and eax, 0x1c0000
mov r11d, r9d
shl r11d, 6
mov ebx, r10d
xor bl, 0xc0
and bl, r10b
movzx edi, bl
or edi, r11d
mov r11d, edi
not r11d
or edi, eax
not eax
and eax, r11d
not eax
and eax, edi
cmp edx, 0x3b63c8a6
jb 0x1401e43ec
mov rdx, r15
jmp 0x1401e447f
shl r8d, 6
or r8d, r10d
mov eax, r8d
jmp 0x1401e4580
shl r8d, 0xc
or r9d, r8d
mov eax, r9d
mov r8d, dword [0x1415a9310]
mov r9d, dword [0x1415a9314]
mov r10d, r9d
not r10d
mov r11d, r8d
and r11d, r10d
or r10d, r8d
not r10d
imul r10d, r11d
mov r11d, r8d
and r11d, r9d
or r8d, r9d
imul r8d, r11d
add r8d, r10d
add r8d, 0xdda0e37a
or r8d, 0xde1583aa
add r8d, 0xf9366b30
cmp r8d, 0x9e086adc
jb 0x1401e447f
cmp eax, 0xffff
jbe 0x1401e4573
lea r12d, [rax + 0xff0000]
shr r12d, 0xa
or r12d, 0xd800
nop
mov r8d, dword [0x1415a9318]
mov r9d, r8d
not r9d
or r9d, dword [0x1415a931c]
add r8d, r9d
inc r8d
and r8d, 0xbe32ed6
imul r8d, r8d, 0xd5f9b6e9
or r8d, 0x462c7aa0
cmp r8d, 0x33cae897
jb 0x1401e44f0
mov edi, eax
xor edi, 0x2000
and edi, eax
or edi, 0xdc00
nop dword [rax + rax]
mov eax, dword [0x1415a9320]
mov r8d, dword [0x1415a9324]
mov r9d, eax
and r9d, r8d
xor eax, r8d
lea eax, [rax + r9*2]
add eax, 0xcc11caea
imul rax, r13
shr rax, 0x3f
cmp eax, 0xfa6ec441
ja 0x1401e4540
mov r15, rdx
jmp 0x1401e4588
mov r9, rdx
nop word cs:[rax + rax]
xor edi, edi
mov r15, r9
mov r12d, eax
cmp rsi, qword [rsp + 0x20]
je 0x1401e4650
mov eax, dword [0x1415a9328]
and eax, dword [0x1415a932c]
add eax, 0xcfa90927
mov edx, eax
xor edx, 0x6602f95f
and eax, 0x19fd06a0
add eax, eax
sub eax, edx
mov edx, eax
and edx, 0x6919933f
xor eax, 0x6919933f
lea eax, [rax + rdx*2]
cmp eax, 0xd16aedab
jae 0x1401e45e0
mov word [rcx + rsi*2], r12w
lea rax, [rsi + 1]
mov qword [rsp + 0x30], rax
nop word [rax + rax]
mov eax, dword [0x1415a9330]
add eax, dword [0x1415a9334]
mov edx, eax
not edx
and edx, 0x12880712
mov r8d, eax
and r8d, 0xd77f8ed
imul r8d, edx
mov edx, eax
and edx, 0x12880712
or eax, 0x12880712
imul eax, edx
lea edx, [rax + r8]
add edx, 0x85d6129b
or edx, 0xe0f58d17
lea rax, [rsi + 1]
mov word [rcx + rsi*2], r12w
mov qword [rsp + 0x30], rax
cmp edx, 0xfe0c5714
ja 0x1401e45e0
mov rsi, rax
mov r12d, edi
test r12w, r12w
jne 0x1401e41e0
jmp 0x1401e41f0
mov eax, dword [0x1415a9338]
xor eax, dword [0x1415a933c]
and eax, 0xd4425526
add eax, 0x70573fd1
and eax, 0xc0889415
cmp eax, 0xf63ca91e
ja 0x1401e4650
mov rbx, qword [rsp + 0x40]
sub rbx, r15
mov eax, dword [0x1415a9340]
mov ecx, dword [0x1415a9344]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
or eax, 0xf6573edb
mov ecx, 0xc1492335
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xdbf605dd
movabs r13, 0xaaaaaaaaaaaaaaab
jne 0x1401e46e8
mov rax, rbx
mul r13
shr rdx, 1
cmp di, 1
mov eax, 0
movabs rcx, 0x6b2b0ce0076d95f8
adc rax, rcx
sub rdx, rax
lea r8, [rdx + rcx]
add r8, 2
mov rcx, rbp
mov rdx, rsi
call fcn.1402474d0
mov eax, dword [0x1415a9348]
mov ecx, dword [0x1415a934c]
not eax
not ecx
or ecx, eax
not ecx
imul r14, rcx, 0x2dd4fdcf
shr r14, 0x37
and r14d, 0xffffffd2
or r14d, 0x29dccf21
mov rax, rbx
mul r13
shr rdx, 1
cmp di, 1
mov eax, 2
sbb rax, 0
mov ecx, eax
and ecx, edx
xor rax, rdx
lea r8, [rax + rcx*2]
mov rcx, rbp
mov rdx, rsi
call fcn.1402474d0
cmp r14d, 0x21918a08
je 0x1401e46b3
mov rcx, qword [rsp + 0x28]
mov r14, qword [rsp + 0x38]
mov r13d, 0xd1ac4ee9
jmp 0x1401e4593
mov eax, dword [0x1415a9350]
mov ecx, dword [0x1415a9354]
mov edx, eax
xor edx, ecx
not edx
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov eax, ecx
and eax, 0x68b18bc9
xor ecx, 0x68b18bc9
lea eax, [rcx + rax*2]
imul eax, eax, 0x892aa85f
add eax, 0x1afd92f0
cmp eax, 0xba0a826f
nop word [rax + rax]
mov eax, dword [0x1415a9358]
mov ecx, dword [0x1415a935c]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
add ecx, 0xfc74d910
shr ecx, 3
imul rax, rcx, 0x12c53543
shr rax, 0x37
add eax, 0xec4f37d7
cmp eax, 0x25f8811c
jb 0x1401e47a0
mov r14, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
test rsi, rsi
je 0x1401e495d
nop dword [rax + rax]
mov eax, dword [0x1415a9360]
xor eax, dword [0x1415a9364]
and eax, 0xb4488f70
add eax, 0x77d8b52a
cmp eax, 0x49208990
jb 0x1401e47f0
nop dword [rax]
mov eax, dword [0x1415a9368]
mov ecx, dword [0x1415a936c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
add eax, 0xe80a095a
and eax, 0xbf8a9417
imul rax, rax, 0x6b366633
shr rax, 0x3e
cmp eax, 0x75c07ea6
je 0x1401e4810
mov rax, rsi
shr rax, 0x20
jne 0x1401e4ae9
mov eax, dword [0x1415a9370]
sub eax, dword [0x1415a9374]
mov ecx, eax
and ecx, 0x64872c7e
xor eax, 0x64872c7e
lea eax, [rax + rcx*2]
mov ecx, eax
or ecx, 0x30304302
not eax
and eax, 0x4b8028e9
and ecx, 0x3470d312
or ecx, eax
xor ecx, 0xfbae6fc5
cmp ecx, 0xafc234e2
jae 0x1401e489a
mov rcx, rdi
mov edx, esi
call qword [sym.imp.oleaut32.dll_SysAllocStringLen]
mov r15d, 0xeff96835
mov r12, qword [sym.imp.oleaut32.dll_SysAllocStringLen]
nop word [rax + rax]
mov r13d, dword [0x1415a9378]
or r13d, dword [0x1415a937c]
imul r13, r15
shr r13, 0x3e
add r13d, 0x3cede9b7
mov rcx, rdi
mov edx, esi
call r12
cmp r13d, 0x18dcae29
jb 0x1401e48b0
mov rbx, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415a9380]
mov ecx, eax
not ecx
or ecx, dword [0x1415a9384]
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0x84dda31
add ecx, ecx
sub eax, ecx
add eax, 0x84dda31
mov ecx, eax
and ecx, 0x73ff1319
add ecx, ecx
sub eax, ecx
lea ecx, [rax - 0xc00ece7]
mov edx, ecx
and edx, 0xa4f8ebf5
xor ecx, 0x5b07140a
add eax, ecx
add eax, 0xf3ff1319
sub eax, edx
cmp eax, 0x81b95981
ja 0x1401e48f0
test rbx, rbx
je 0x1401e4ae9
xor eax, eax
test al, al
je 0x1401e4a62
jmp 0x1401e4a70
xor ebx, ebx
jmp 0x1401e4a08
ud2
mov eax, dword [0x1415a92a0]
xor eax, dword [0x1415a92a4]
add eax, 0x2df6dc37
and eax, 0x4153875f
cmp eax, 0x49b8600d
jne 0x1401e49c0
ud2
mov eax, dword [0x1415a92a8]
or eax, dword [0x1415a92ac]
add eax, 0x55c93e31
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x2395670d
and ecx, 0x5c6a98f2
imul ecx, edx
mov edx, eax
and edx, 0x5c6a98f2
or eax, 0x5c6a98f2
imul eax, edx
add eax, ecx
and eax, 0x7855631e
ud2
test r14, r14
je 0x1401e4a4e
mov rcx, qword [0x1415acb98]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x1415a9398]
imul eax, dword [0x1415a939c]
imul eax, eax, 0x82d97b6e
xor eax, 0xfe1b0d31
mov ecx, eax
and ecx, 0xac0c1dd7
or eax, 0xac0c1dd7
add eax, ecx
cmp eax, 0x9c0f8918
ja 0x1401e4a20
mov rax, rbx
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rbx
call fcn.14020db50
xor ecx, ecx
test cl, cl
je 0x1401e4a7b
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysStringLen]
jmp 0x1401e4a62
test eax, eax
jne 0x1401e4a08
mov eax, dword [0x1415a9388]
or eax, dword [0x1415a938c]
mov ecx, eax
and ecx, 0x70792cc3
xor ecx, 0x6adf07c0
and eax, 0x10202803
add eax, eax
sub eax, ecx
not eax
or eax, 0xaac37675
cmp eax, 0x626e5e51
je 0x1401e4ade
mov eax, dword [0x1415a9390]
mov ecx, dword [0x1415a9394]
not ecx
lea esi, [rax + rcx]
add esi, 0xbe418d6b
or esi, 0x14ed97f0
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysFreeString]
cmp esi, 0x287d4b87
jne 0x1401e4ae9
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysFreeString]
jmp 0x1401e4ab0
mov eax, dword [0x1415a93a0]
mov ecx, dword [0x1415a93a4]
not eax
not ecx
and ecx, eax
not ecx
add ecx, 0xa2d75418
or ecx, 0x7981fcb8
add ecx, 0x11a2b735
cmp ecx, 0x9f719ff5
ja 0x1401e4b47
mov eax, dword [0x1415a93a8]
and eax, dword [0x1415a93ac]
mov ecx, eax
xor ecx, 0x2f70b6a
and ecx, eax
add ecx, 0xa035f51c
or ecx, 0xeea5cc2b
ud2
ud2