Function at 0x14008f4e0
Capabilities:
Encode data using base64
Encode data using xor
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
mov rdi, r8
mov r15, rdx
mov qword [rbp - 0x20], rcx
mov eax, dword [0x141dcf398]
add eax, dword [0x141dcf39c]
imul eax, eax, 0x9a18244
cmp eax, 0x2174041c
jne 0x14008f570
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x400
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rcx, rsp
sub rsp, 0x20
mov rdx, r15
mov r8, rdi
call fcn.1400904b0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dcf3a0]
sub eax, dword [0x141dcf3a4]
or eax, 0xd3b84f65
imul esi, eax, 0x49af5d1f
add esi, 0xcb1fb7b
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r14, rsp
mov eax, 0x400
call fcn.1400ef330
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r12, rsp
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r8, rdi
call fcn.1400904b0
add rsp, 0x20
cmp esi, 0x3ce20058
ja 0x14008f570
mov qword [rbp - 0x28], r13
mov qword [rbp - 8], r14
mov rax, qword [r12]
mov r14, qword [r12 + 8]
movabs r12, 0x8000000000000000
cmp rax, r12
jne 0x14008f93c
nop
mov eax, dword [0x141dcf468]
xor edx, edx
div dword [0x141dcf46c]
add eax, 0x1aa573cb
or eax, 0x27d683d
imul eax, eax, 0xb01f33dd
cmp eax, 0x3c7fb0f
jb 0x14008f610
mov eax, dword [0x141dcf470]
xor edx, edx
div dword [0x141dcf474]
nop word cs:[rax + rax]
mov eax, dword [0x141dcf478]
sub eax, dword [0x141dcf47c]
or eax, 0xbadff1db
and eax, 0xbedfffdb
cmp eax, 0x8ec76b6a
jb 0x14008f650
mov ecx, r14d
and ecx, 3
nop word cs:[rax + rax]
mov eax, dword [0x141dcf480]
xor edx, edx
div dword [0x141dcf484]
imul eax, eax, 0x9e8d2617
or eax, 0x1000cb04
and eax, 0x9560fb17
cmp eax, 0x709c6cba
ja 0x14008f680
lea rax, [rcx - 2]
cmp rax, 2
jb 0x140090410
test rcx, rcx
je 0x140090410
cmp ecx, 1
jne 0x14008f97f
lea rbx, [r14 - 1]
nop dword [rax]
mov eax, dword [0x141dcf490]
sub eax, dword [0x141dcf494]
or eax, 0xd5b529de
cmp eax, 0x30597d96
je 0x14008f6d0
mov rax, r14
mov r14, qword [r14 - 1]
mov rsi, qword [rax + 7]
nop word cs:[rax + rax]
mov eax, dword [0x141dcf498]
or eax, dword [0x141dcf49c]
and eax, 0x8e391920
add eax, 0x4e467fa8
cmp eax, 0x5e750c52
jb 0x14008f700
mov rdi, qword [rsi]
test rdi, rdi
je 0x14008f7a0
mov eax, dword [0x141dcf4a0]
xor edx, edx
div dword [0x141dcf4a4]
and eax, 0xc929e53
add eax, 0x406f34da
cmp eax, 0xc62b5a2f
jbe 0x14008f760
sub rsp, 0x20
mov rcx, r14
call rdi
add rsp, 0x20
nop word cs:[rax + rax]
mov r15d, dword [0x141dcf4a8]
and r15d, dword [0x141dcf4ac]
or r15d, 0x73263483
add r15d, 0x1174fc10
or r15d, 0x64de51df
sub rsp, 0x20
mov rcx, r14
call rdi
add rsp, 0x20
cmp r15d, 0xf7658140
ja 0x14008f760
nop dword [rax]
mov eax, dword [0x141dcf4b0]
and eax, dword [0x141dcf4b4]
and eax, 0x4f39bc9c
add eax, 0xeb0ce374
xor eax, 0x6190277
cmp eax, 0xa289ab0d
ja 0x14008f7a0
mov eax, dword [0x141dcf4b8]
xor edx, edx
div dword [0x141dcf4bc]
mov eax, dword [0x141dcf4c0]
imul eax, dword [0x141dcf4c4]
imul eax, eax, 0xe97e1ad3
cmp eax, 0x410e1817
je 0x14008f7d0
cmp qword [rsi + 8], 0
je 0x14008f90a
mov rax, qword [rsi + 0x10]
nop dword [rax]
mov ecx, dword [0x141dcf4c8]
and ecx, dword [0x141dcf4cc]
or ecx, 0xfd8dc49e
imul ecx, ecx, 0x646188a5
add ecx, 0x413f8f7
cmp ecx, 0xa2c47309
jb 0x14008f800
cmp rax, 0x11
jb 0x14008f87c
nop dword [rax]
mov eax, dword [0x141dcf4d0]
imul eax, dword [0x141dcf4d4]
imul eax, eax, 0x3ddd5f32
cmp eax, 0xe2ff3ed9
je 0x14008f830
mov eax, 0xba6cf88f
nop
mov ecx, dword [0x141dcf4d8]
xor ecx, dword [0x141dcf4dc]
imul ecx, ecx, 0xe7b36227
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xf03d3dbd
cmp ecx, 0x18fe0194
jb 0x14008f850
mov r14, qword [r14 - 8]
mov eax, dword [0x141dcf4e0]
or eax, dword [0x141dcf4e4]
xor eax, 0x421c6000
and eax, 0x625c638a
imul eax, eax, 0x1c65fd79
cmp eax, 0x5cd23933
jbe 0x14008f8b9
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [0x141dcf4e8]
xor edi, dword [0x141dcf4ec]
and edi, 0xbcdfc43c
add edi, 0x2fb443f2
imul rax, rdi, 0xe6861d1
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1f
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call rsi
add rsp, 0x20
cmp edi, 0xaf02e305
je 0x14008f8c0
mov rdi, qword [0x141ddb260]
mov eax, dword [0x141dcf4f0]
imul eax, dword [0x141dcf4f4]
imul rax, rax, 0x42ca131d
shr rax, 0x3d
and eax, 1
cmp eax, 0x5615d57f
jbe 0x14009039d
jmp 0x1400903d8
mov qword [rbp], rbx
mov qword [rbp - 0x40], rax
mov rdx, qword [rbp - 8]
mov qword [rdx], 0
mov qword [rdx + 8], 2
mov eax, dword [0x141dcf3a8]
and eax, dword [0x141dcf3ac]
mov ecx, 0xbaeab853
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0xa46f4abe
cmp eax, 0x5d24194a
jne 0x14008f9a8
jmp 0x14008f9da
mov eax, dword [0x141dcf488]
xor edx, edx
div dword [0x141dcf48c]
add eax, 0xc2e9761
or eax, 0xebf7f03c
add eax, 0xcd6778cd
cmp eax, 0x7dc8a2dd
jb 0x14008f97f
jmp 0x14009039b
mov eax, dword [0x141dcf3b0]
mov ecx, dword [0x141dcf3b4]
add eax, ecx
add eax, 0x6479c39f
xor eax, 0x876c4bab
imul rax, rax, 0x364d4377
shr rax, 0x3d
mov qword [rdx + 0x10], 0
cmp eax, 0x45806380
jne 0x14008f9e4
mov qword [rdx + 0x10], 0
jmp 0x14008f9a8
mov r13d, 0x200
mov eax, 2
mov qword [rbp - 0x10], rax
mov ebx, 0xffffffff
xor esi, esi
mov r15d, 0x9e5cc215
xor eax, eax
mov qword [rbp - 0x18], rax
xor r12d, r12d
mov rdi, qword [rbp - 0x28]
mov qword [rbp - 0x30], r14
nop word cs:[rax + rax]
mov eax, dword [0x141dcf3b8]
add eax, dword [0x141dcf3bc]
imul eax, eax, 0x272441f8
or eax, 0xe4f59256
imul rax, rax, 0x79531649
shr rax, 0x3e
cmp eax, 0x8edd1655
ja 0x14008fa20
cmp r13, 0x201
jae 0x14008fa60
mov eax, 0x200
mov qword [rbp - 0x38], rax
jmp 0x14008fb54
sub r13, r12
mov rdx, qword [rbp - 0x18]
mov rax, rdx
sub rax, r12
cmp r13, rax
ja 0x14008faab
mov eax, dword [0x141dcf3c0]
xor eax, dword [0x141dcf3c4]
add eax, 0xe26b0ed6
imul rcx, rax, 0x2efe3309
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x9b57d13f
mov rcx, qword [rbp - 8]
jne 0x14008fd48
jmp 0x14008fd8a
mov eax, dword [0x141dcf3d0]
and eax, dword [0x141dcf3d4]
or eax, 0x401060
xor eax, 0x90000000
and eax, 0x96409060
cmp eax, 0x56e5f238
je 0x14008fb29
mov eax, dword [0x141dcf3d8]
xor edx, edx
div dword [0x141dcf3dc]
imul edi, eax, 0x235bb173
add edi, 0x19484f94
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, qword [rbp - 8]
mov rdx, r12
mov r8, r13
call fcn.1400fe010
add rsp, 0x30
cmp edi, 0x9465853e
ja 0x14008fb29
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rbp - 0x10], rax
jmp 0x14008fa72
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, qword [rbp - 8]
mov rdx, r12
mov r8, r13
call fcn.1400fe010
add rsp, 0x30
jmp 0x14008facd
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
mov qword [rbp - 0x48], rdi
mov rdx, rdi
mov r8d, r13d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
add rsp, 0x20
mov edi, eax
test eax, eax
jne 0x14008fc1c
mov eax, dword [0x141dcf3e0]
xor eax, dword [0x141dcf3e4]
xor eax, 0xd2202814
and eax, 0xf7ba6a1c
xor eax, 0x608e65b
cmp eax, 0x79cb8ecc
jb 0x14008fbe0
mov eax, dword [0x141dcf3e8]
imul eax, dword [0x141dcf3ec]
add eax, 0xc3d0ce56
mov ecx, 0xe983cc2b
imul rax, rcx
shr rax, 0x3c
imul r14d, eax, 0x6e6c9ca0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp r14d, 0xb8253fb7
jbe 0x14008fbf0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x14008fba3
mov ecx, dword [0x141dcf3f0]
sub ecx, dword [0x141dcf3f4]
or ecx, 0xe0020966
and ecx, 0xfa4bbfee
cmp ecx, 0xf14df7ff
je 0x14008fbf0
test eax, eax
mov r14, qword [rbp - 0x30]
jne 0x14008fec8
mov r8d, edi
mov rdx, qword [rbp - 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141dcf408]
add eax, dword [0x141dcf40c]
imul eax, eax, 0x4034282e
add eax, 0x8c8811e7
and eax, 0x17526c2a
cmp eax, 0x85317da
je 0x14008fc30
nop word cs:[rax + rax]
mov eax, dword [0x141dcf410]
add eax, dword [0x141dcf414]
xor eax, 0xc04b4506
imul rax, r15
shr rax, 0x3f
or eax, 0x4e4762ee
cmp eax, 0xdf8e6f79
je 0x14008fc60
cmp r13, r8
jne 0x14008fd0a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rdi, qword [rbp - 0x28]
mov ecx, dword [0x141dcf418]
or ecx, dword [0x141dcf41c]
imul rcx, rcx, 0x1e4c7c6b
shr rcx, 0x3b
add ecx, 0xc8c758ad
cmp ecx, 0x8ac39afa
jb 0x14008fca0
cmp eax, 0x7a
jne 0x14008ffd7
lea rcx, [r13*2]
nop word cs:[rax + rax]
cmp r13, 0x7fffffff
mov rax, rcx
cmova rax, rbx
test sil, sil
jne 0x14008fce0
nop word cs:[rax + rax]
test sil, sil
jne 0x14008fd00
mov r13, rax
jmp 0x14008fd20
jae 0x14008fd9c
mov r13, r8
mov rdi, qword [rbp - 0x28]
nop word [rax + rax]
mov eax, dword [0x141dcf420]
or eax, dword [0x141dcf424]
imul eax, eax, 0xbfd5e264
add eax, 0x6369b3e9
and eax, 0x7e9f3d9c
cmp eax, 0x792ba396
ja 0x14008fd20
jmp 0x14008fa20
mov eax, dword [0x141dcf3c8]
xor eax, dword [0x141dcf3cc]
xor eax, 0x4de9b500
add eax, 0x1a5f7fe1
cmp rdx, rbx
mov r12d, 0xffffffff
cmovb r12, rdx
mov qword [rcx + 0x10], r12
cmp eax, 0x6ddd6c56
jae 0x14008fd8a
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x38], r12
mov rdi, qword [rbp - 0x10]
mov r13, r12
jmp 0x14008fb54
cmp rdx, rbx
mov eax, 0xffffffff
cmovb rax, rdx
mov qword [rcx + 0x10], rax
jmp 0x14008fd48
cmp qword [rbp - 0x38], r8
jb 0x14008fff8
sub rsp, 0x20
mov rcx, qword [rbp]
call fcn.14008bbc0
add rsp, 0x20
mov rbx, qword [rbp - 0x20]
movabs r15, 0x8000000000000000
nop word cs:[rax + rax]
mov eax, dword [0x141dcf430]
xor edx, edx
div dword [0x141dcf434]
imul rax, rax, 0x42e77efd
shr rax, 0x3b
or eax, 0xefe05a11
and eax, 0xefe05a15
cmp eax, 0x6e07897a
jb 0x14008fdd0
cmp qword [rbp - 0x18], 0
je 0x14008fe3d
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dcf438]
xor eax, dword [0x141dcf43c]
add eax, 0x9b2baf54
or eax, 0x1e55e146
cmp eax, 0xc70998c9
jae 0x14008fe20
xor eax, eax
nop
test al, al
jne 0x14008fe40
mov rax, qword [rbp]
cmp qword [rax], r15
jne 0x14008ffc4
mov eax, dword [0x141dcf450]
xor edx, edx
div dword [0x141dcf454]
mov ecx, 0x86bdf63b
nop word cs:[rax + rax]
mov eax, dword [0x141dcf458]
xor edx, edx
div dword [0x141dcf45c]
xor eax, 0xa87dbf35
add eax, 0x11db3179
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xd74bcb38
je 0x14008fe70
mov rax, qword [rbp]
mov r14, qword [rax + 8]
nop
mov eax, dword [0x141dcf460]
add eax, dword [0x141dcf464]
and eax, 0x1400106
or eax, 0xb8ad6c38
imul eax, eax, 0x32ab85ea
cmp eax, 0xc85f059e
ja 0x14008fea0
jmp 0x14008ff99
mov eax, dword [0x141dcf3f8]
or eax, dword [0x141dcf3fc]
xor eax, 0x40088044
and eax, 0x51dd9fcc
add eax, 0x80c1f6e
cmp eax, 0x6b7c7d33
movabs r15, 0x8000000000000000
jbe 0x14008ff15
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp]
mov qword [rcx + 8], rax
mov qword [rcx], r15
mov esi, 0xb679f01f
mov rbx, qword [rbp - 0x20]
mov r12, qword [rbp]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
mov eax, dword [0x141dcf400]
add eax, dword [0x141dcf404]
imul edi, eax, 0xc750c3f4
add edi, 0xec5f9a54
imul rdi, rsi
shr rdi, 0x3e
sub rsp, 0x20
call r13
add rsp, 0x20
mov r14d, eax
shl r14, 0x20
or r14, 2
mov qword [r12 + 8], r14
mov qword [r12], r15
cmp edi, 0xd672b200
je 0x14008ff30
cmp qword [rbp - 0x18], 0
je 0x14008ff99
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dcf530]
and eax, dword [0x141dcf534]
or eax, 0x540176c6
add eax, 0xa91a3a0c
or eax, 0x4644c8c5
cmp eax, 0x52cdb86b
jne 0x140090049
jmp 0x140090064
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
jmp 0x1400902c3
mov eax, dword [0x141dcf428]
and eax, dword [0x141dcf42c]
or eax, 0x73b102cb
cmp eax, 0x987d0177
jne 0x14009038f
jmp 0x140090397
mov eax, dword [0x141dcf440]
or eax, dword [0x141dcf444]
or eax, 0xf85c641a
imul eax, eax, 0x1361fcad
cmp eax, 0x2142fdab
jne 0x140090020
ud2
mov eax, dword [0x141dcf448]
and eax, dword [0x141dcf44c]
add eax, 0x15798c82
xor eax, 0x1901b558
add eax, 0xe8833be1
ud2
mov eax, dword [0x141dcf538]
sub eax, dword [0x141dcf53c]
and eax, 0x5048b
mov qword [rbx], r15
cmp eax, 0x8011909d
jne 0x140090069
mov qword [rbx], r15
jmp 0x140090049
mov eax, r14d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400902c3
test rax, rax
je 0x1400902c3
mov eax, dword [0x141dcf540]
xor edx, edx
div dword [0x141dcf544]
lea rsi, [r14 - 1]
nop dword [rax + rax]
mov eax, dword [0x141dcf548]
sub eax, dword [0x141dcf54c]
imul eax, eax, 0x19377201
add eax, 0x76931cb8
cmp eax, 0x839bb1d6
jb 0x1400900a0
mov rbx, qword [r14 - 1]
mov rdi, qword [r14 + 7]
mov rax, qword [rdi]
nop dword [rax]
mov ecx, dword [0x141dcf550]
mov edx, dword [0x141dcf554]
add ecx, edx
add ecx, 0xb04ec58d
and ecx, 0x28358c
cmp ecx, 0x4e928e6b
ja 0x1400900d0
test rax, rax
je 0x140090137
sub rsp, 0x20
mov rcx, rbx
call rax
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dcf558]
or eax, dword [0x141dcf55c]
imul rcx, rax, 0x3d6a0bd7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xb2d3b569
je 0x140090110
mov rcx, qword [rdi + 8]
mov eax, dword [0x141dcf560]
xor edx, edx
div dword [0x141dcf564]
nop dword [rax]
mov eax, dword [0x141dcf568]
add eax, dword [0x141dcf56c]
imul rax, rax, 0x4ffe76dd
shr rax, 0x3e
add eax, 0x7efd0f9f
or eax, 0xc62e4f0
cmp eax, 0xa4997c07
je 0x140090150
test rcx, rcx
je 0x140090247
mov rax, qword [rdi + 0x10]
nop word cs:[rax + rax]
mov ecx, dword [0x141dcf570]
and ecx, dword [0x141dcf574]
imul ecx, ecx, 0x6e5acd68
add ecx, 0x5575f860
imul rdx, rcx, 0x4e176073
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1e
cmp ecx, 0x513bea53
je 0x140090190
cmp rax, 0x11
jb 0x14009022d
mov eax, 0x845a5cdd
mov ecx, 0xe30cc90f
nop word cs:[rax + rax]
mov edx, dword [0x141dcf578]
and edx, dword [0x141dcf57c]
imul rdx, rax
shr rdx, 0x3b
or edx, 0xbf2e5240
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xe369c8eb
ja 0x1400901e0
mov rbx, qword [rbx - 8]
nop
mov eax, dword [0x141dcf580]
or eax, dword [0x141dcf584]
xor eax, 0x22c48a8a
add eax, 0x43e80227
cmp eax, 0xc3a33145
ja 0x140090210
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dcf588]
xor eax, dword [0x141dcf58c]
xor eax, 0x530635e5
add eax, 0x82a2bd8e
and eax, 0x420ba044
cmp eax, 0xff7ce177
je 0x140090294
mov eax, dword [0x141dcf590]
imul eax, dword [0x141dcf594]
imul eax, eax, 0xc190b07b
add eax, 0xc21cf20f
or eax, 0x42fc87b6
mov rcx, qword [0x141ddb260]
cmp eax, 0x22d107e7
jae 0x14009029d
mov rax, qword [0x141ddb260]
jmp 0x140090269
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dcf598]
add eax, dword [0x141dcf59c]
cmp eax, 0x883a160b
je 0x1400902b0
cmp qword [rbp - 0x40], 0
mov rbx, qword [rbp - 0x30]
je 0x140090494
mov eax, 0xc2b655ad
nop word [rax + rax]
mov ecx, dword [str._rUuD2]
xor ecx, dword [0x141dcf51c]
imul rcx, rax
shr rcx, 0x3c
or ecx, 0x2307f1c6
add ecx, 0xfbe339ee
cmp ecx, 0x2910b563
ja 0x1400902e0
mov eax, dword [0x141dcf520]
xor edx, edx
div dword [0x141dcf524]
add eax, 0x9aa435ff
and eax, 0xe68224c6
cmp eax, 0x6d836c6b
jae 0x140090341
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dcf528]
sub eax, dword [0x141dcf52c]
or eax, 0xc1293e7a
imul rdi, rax, 0x7bca4785
shr rdi, 0x3e
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call rsi
add rsp, 0x20
cmp edi, 0x2024b762
je 0x140090350
jmp 0x140090494
ud2
ud2
ud2
mov eax, dword [0x141dcf4f8]
imul eax, dword [0x141dcf4fc]
add eax, 0xcde9bcf5
imul rsi, rax, 0xa1d36bb
shr rsi, 0x3a
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x5bb59d64
jne 0x1400903f0
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14009039d
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140090400
nop word cs:[rax + rax]
mov eax, dword [0x141dcf500]
and eax, dword [0x141dcf504]
add eax, 0x4847bc10
xor eax, 0x430944a
or eax, 0xeb494b35
cmp eax, 0x8b911d2d
je 0x140090410
mov eax, dword [0x141dcf508]
xor edx, edx
div dword [0x141dcf50c]
add eax, 0x595b6abc
shr eax, 3
imul rax, rax, 0x801c899
shr rax, 0x38
cmp eax, 0xdc8b7422
mov rcx, qword [rbp - 0x20]
ja 0x140090485
mov eax, dword [0x141dcf510]
imul eax, dword [0x141dcf514]
imul eax, eax, 0x454e5f5e
xor eax, 0x3b600201
or eax, 0xc092b9aa
mov qword [rcx], r12
cmp eax, 0x4bb79b25
jae 0x14009048a
mov qword [rcx], r12
jmp 0x14009045e
xor eax, eax
nop dword [rax]
test al, al
jne 0x140090490
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret