Function at 0x14000f8f0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov r14, rcx
mov eax, 0x9a4b722d
nop dword [rax + rax]
mov ecx, dword [0x141dc0b50]
add ecx, dword [0x141dc0b54]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x415b9217
xor ecx, 0xc54cdddb
cmp ecx, 0x47c86777
jb 0x14000f910
nop dword [rax + rax]
mov eax, dword [0x141dc0b58]
xor edx, edx
div dword [0x141dc0b5c]
xor eax, 0x4be1b86d
imul eax, eax, 0x8d1a285
xor eax, 0xd03ce1cf
cmp eax, 0x5d3f5625
jb 0x14000f940
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b60]
sub eax, dword [0x141dc0b64]
xor eax, 0x8913a452
or eax, 0x70ec0028
xor eax, 0xb2e05c48
cmp eax, 0x9281b6ca
jb 0x14000f970
mov rcx, qword [r14 + 0x48]
test rcx, rcx
mov qword [rsp + 0x30], r14
je 0x140010760
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b68]
add eax, dword [str.ahN8_]
imul rdx, rax, 0x14d6fd3
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
or eax, 0x39cde8a0
xor eax, 0x73b9da9c
cmp eax, 0x8be2f563
ja 0x14000f9b0
mov r12, qword [r14 + 0x58]
test r12, r12
je 0x14001066d
mov eax, dword [0x141dc0b70]
xor edx, edx
div dword [0x141dc0b74]
nop dword [rax]
mov eax, dword [0x141dc0b78]
sub eax, dword [0x141dc0b7c]
xor eax, 0x84a7c070
shr eax, 3
imul rax, rax, 0x27ff0349
shr rax, 0x3a
or eax, 0x5d96b67a
cmp eax, 0x42249ed2
jb 0x14000fa00
mov rdi, qword [r14 + 0x40]
movdqa xmm0, xmmword [rdi]
lea rbx, [rdi + 0x10]
pmovmskb r13d, xmm0
not r13d
nop
mov eax, dword [0x141dc0b80]
and eax, dword [0x141dc0b84]
or eax, 0x7093d0ea
cmp eax, 0x5e56d78d
je 0x14000fa40
mov ecx, 0x9cd83365
xor esi, esi
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebp, 0x9cf3c4f7
nop dword [rax + rax]
mov eax, dword [0x141dc0b88]
or eax, dword [0x141dc0b8c]
imul rax, rcx
shr rax, 0x3f
add eax, 0x65951c01
cmp eax, 0xb209f092
ja 0x14000fa70
test r13w, r13w
jne 0x14000fad3
nop word cs:[rax + rax]
mov eax, dword [0x141dc0b90]
xor edx, edx
div dword [0x141dc0b94]
nop
test sil, sil
jne 0x14000fab0
movdqa xmm0, xmmword [rbx]
pmovmskb r13d, xmm0
add rdi, 0xffffffffffffea00
add rbx, 0x10
cmp r13w, 0xffff
je 0x14000faa0
not r13d
mov qword [rsp + 0x40], rbx
tzcnt eax, r13d
neg rax
imul rax, rax, 0x160
lea rcx, [rdi + rax]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x48], rdi
cmp qword [rdi + rax - 0x148], 0
je 0x14000fb77
mov rax, qword [rsp + 0x20]
mov rdi, qword [rax - 0x140]
mov rbx, qword [0x141ddb9a0]
mov eax, dword [0x141dc0b98]
and eax, dword [0x141dc0b9c]
imul eax, eax, 0x92e6bc92
add eax, 0x4976b52a
cmp eax, 0x695bb5b1
jbe 0x14000fb40
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
nop dword [rax]
mov r14d, dword [0x141dc0ba0]
xor r14d, dword [0x141dc0ba4]
add r14d, 0x56a7bdf3
or r14d, 0x7f112d62
and r14d, 0x7f7f7d6f
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp r14d, 0x651a980
jb 0x14000fb40
lea eax, [r13 - 1]
and eax, r13d
mov qword [rsp + 0x38], rax
dec r12
mov qword [rsp + 0x50], r12
mov rcx, qword [rsp + 0x20]
mov rdi, qword [rcx - 0x120]
mov eax, dword [0x141dc0ba8]
add eax, dword [0x141dc0bac]
and eax, 0x909030d9
imul eax, eax, 0xe7abcdb4
cmp eax, 0x86eca950
je 0x14000fb97
mov rax, qword [rcx - 0x118]
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14000fd00
xor r13d, r13d
nop dword [rax]
mov eax, dword [0x141dc0bb0]
sub eax, dword [0x141dc0bb4]
xor eax, 0x65f19c15
imul eax, eax, 0xdac230f
add eax, 0x734cb3b6
cmp eax, 0x2c825f99
jb 0x14000fbd0
mov rax, r13
shl rax, 5
cmp qword [rdi + rax], 0
je 0x14000fcd3
mov ecx, dword [0x141dc0bb8]
or ecx, dword [0x141dc0bbc]
mov r12, rdi
add rax, rdi
or ecx, 0x15da4df3
and ecx, 0x97fbcdf7
cmp ecx, 0xf0549ecd
ja 0x14000fc84
mov ecx, dword [0x141dc0bc0]
or ecx, dword [0x141dc0bc4]
and ecx, 0x454824
xor ecx, 0x8cdfd5b6
mov rbx, qword [rax + 8]
mov r14, qword [0x141ddb9a0]
cmp ecx, 0x7f000e03
jb 0x14000fc84
mov eax, dword [0x141dc0bc8]
xor eax, dword [0x141dc0bcc]
and eax, 0x9bf8ef68
shr eax, 3
imul rax, rax, 0x2658926b
shr rax, 0x38
imul eax, eax, 0x86a4e781
cmp eax, 0x1d4983c0
jne 0x14000fc8d
jmp 0x14000fce8
mov rcx, qword [0x141ddb9a0]
jmp 0x14000fc2b
mov edi, dword [0x141dc0bd0]
imul edi, dword [0x141dc0bd4]
mov rcx, r14
xor edx, edx
mov r8, rbx
call r15
cmp edi, 0xfe203b31
je 0x14000fce8
mov rdi, r12
mov eax, dword [0x141dc0bd8]
xor eax, dword [0x141dc0bdc]
or eax, 0x10335f2d
imul eax, eax, 0x45cce938
add eax, 0x16b1f045
cmp eax, 0x3c7e550c
ja 0x14000fcb0
inc r13
test sil, sil
jne 0x14000fcd6
cmp r13, qword [rsp + 0x28]
jne 0x14000fbd0
jmp 0x14000fd00
mov rcx, r14
xor edx, edx
mov r8, rbx
call r15
jmp 0x14000fc8d
mov r12, qword [rsp + 0x20]
mov rcx, qword [r12 - 0x128]
mov eax, dword [0x141dc0be0]
xor edx, edx
div dword [0x141dc0be4]
nop dword [rax + rax]
mov eax, dword [0x141dc0be8]
xor edx, edx
div dword [0x141dc0bec]
imul eax, eax, 0x5aef0a50
cmp eax, 0xddab92a9
ja 0x14000fd20
nop dword [rax + rax]
mov eax, dword [0x141dc0bf0]
xor eax, dword [0x141dc0bf4]
or eax, 0xaf714b92
imul eax, eax, 0xb5542478
xor eax, 0x1ee04906
cmp eax, 0xfe70a797
ja 0x14000fd40
test rcx, rcx
mov r13, qword [rsp + 0x38]
je 0x14000fe05
mov rbx, qword [0x141ddb9a0]
mov eax, dword [0x141dc0bf8]
xor edx, edx
div dword [0x141dc0bfc]
imul eax, eax, 0xfff4af7e
add eax, 0xf65c8206
and eax, 0x31d92f44
cmp eax, 0xd4cd4f3e
ja 0x140010220
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c00]
xor edx, edx
div dword [0x141dc0c04]
mov r14d, eax
add r14d, 0x7c1a8698
imul rax, r14, 0xfc4d68f
shr rax, 0x20
sub r14d, eax
shr r14d, 1
add r14d, eax
shr r14d, 0x1e
or r14d, 0xd14fa1c4
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp r14d, 0x12535e2e
jb 0x140010220
nop
test sil, sil
jne 0x14000fe00
mov eax, dword [0x141dc0c08]
or eax, dword [0x141dc0c0c]
xor eax, 0x3027211
or eax, 0x90d48c8e
cmp eax, 0x97b0fe5e
jb 0x14000fe05
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c10]
and eax, dword [0x141dc0c14]
imul eax, eax, 0x95bf7161
shr eax, 3
imul rax, rax, 0x21a58a09
shr rax, 0x36
imul eax, eax, 0x4ef192e0
cmp eax, 0x42748b4d
jb 0x14000fe30
mov rax, qword [r12 - 0xf8]
shl rax, 1
test rax, rax
je 0x14000ff80
mov eax, dword [0x141dc0c18]
add eax, dword [0x141dc0c1c]
imul eax, eax, 0x470cd8f
or eax, 0x444c42
and eax, 0x11745ef7
cmp eax, 0x2b8ae03
jne 0x14000fea0
mov rax, qword [0x141ddb9a0]
nop dword [rax + rax]
mov eax, dword [0x141dc0c20]
add eax, dword [0x141dc0c24]
imul rcx, rax, 0x4bd3e623
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
or eax, 0x3b30129e
add eax, 0x4d68eb2
mov rdi, qword [r12 - 0xf0]
mov rbx, qword [0x141ddb9a0]
cmp eax, 0x803af13b
ja 0x14000fea0
mov eax, dword [0x141dc0c28]
add eax, dword [0x141dc0c2c]
and eax, 0x29bca0f8
add eax, 0x11607bda
and eax, 0x38905b12
cmp eax, 0x5a36426c
jbe 0x14000ff0d
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
mov r12d, 0x9606d775
nop word cs:[rax + rax]
mov r14d, dword [0x141dc0c30]
xor r14d, dword [0x141dc0c34]
or r14d, 0x648c6d65
imul r14, r12
shr r14, 0x3e
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp r14d, 0x1387c662
je 0x14000ff20
mov r12, qword [rsp + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c38]
add eax, dword [0x141dc0c3c]
imul eax, eax, 0x9b5992af
cmp eax, 0x525ba102
je 0x14000ff60
nop dword [rax]
test sil, sil
jne 0x14000ff80
mov rax, qword [r12 - 0xd8]
shl rax, 1
test rax, rax
je 0x140010017
mov eax, dword [0x141dc0c40]
add eax, dword [0x141dc0c44]
imul rax, rax, 0x3b6888d1
shr rax, 0x3b
or eax, 0x2d646315
add eax, 0xd72a3ce1
cmp eax, 0xb9da578f
ja 0x14000ff99
mov rdi, qword [r12 - 0xd0]
mov rbx, qword [0x141ddb9a0]
test sil, sil
je 0x14000ffe0
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
mov eax, dword [0x141dc0c48]
sub eax, dword [0x141dc0c4c]
or eax, 0xfe478fd8
imul r14, rax, 0x2e5f36f5
shr r14, 0x3d
add r14d, 0x1efefabb
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp r14d, 0x9f3811a5
ja 0x14000ffe0
mov rdi, qword [r12 - 0x108]
mov r14, qword [r12 - 0x100]
mov ecx, 0xb243ce1f
mov eax, dword [0x141dc0c50]
and eax, dword [0x141dc0c54]
add eax, 0xe70818ff
xor eax, 0x85b22ca5
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x4df522e9
ja 0x14001002c
test r14, r14
je 0x14001015f
xor r12d, r12d
nop dword [rax]
mov rax, r12
shl rax, 5
cmp qword [rdi + rax], 0
je 0x1400100f4
add rax, rdi
nop word cs:[rax + rax]
mov ecx, dword [0x141dc0c58]
add ecx, dword [0x141dc0c5c]
and ecx, 0x2084a130
xor ecx, 0x6c0a1642
cmp ecx, 0x33435d63
jb 0x140010080
mov rbx, qword [rax + 8]
mov eax, dword [0x141dc0c60]
xor edx, edx
div dword [0x141dc0c64]
imul rax, rax, 0x31e1644b
shr rax, 0x3d
add eax, 0xdcfc24bb
xor eax, 0x15eec938
cmp eax, 0x5ceac010
jae 0x1400100e0
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call r15
nop dword [rax]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call r15
test sil, sil
jne 0x1400100e0
inc r12
nop word [rax + rax]
mov eax, dword [str.t_Q_]
imul eax, dword [0x141dc0c6c]
imul eax, eax, 0xe38fbec5
add eax, 0xcc5df00a
imul rax, rax, 0x3377f6d5
shr rax, 0x37
cmp eax, 0xbdb43b26
je 0x140010100
nop word [rax + rax]
mov eax, dword [0x141dc0c70]
and eax, dword [0x141dc0c74]
add eax, 0xe632d046
imul rax, rbp
shr rax, 0x3e
imul eax, eax, 0x425cd0e7
cmp eax, 0xc4f0e364
je 0x140010130
cmp r12, r14
jne 0x140010060
mov r12, qword [rsp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0c78]
xor eax, dword [0x141dc0c7c]
or eax, 0x90b55562
and eax, 0xb1f7f7e2
cmp eax, 0x1e625b8f
jb 0x140010170
mov rax, qword [rsp + 0x20]
mov rax, qword [rax - 0x110]
nop dword [rax]
mov ecx, dword [0x141dc0c80]
or ecx, dword [0x141dc0c84]
shr ecx, 2
imul rcx, rcx, 0x48204631
shr rcx, 0x3a
imul ecx, ecx, 0x25eaafa5
cmp ecx, 0xf589a94
je 0x1400101a0
nop dword [rax + rax]
mov ecx, dword [0x141dc0c88]
or ecx, dword [0x141dc0c8c]
cmp ecx, 0x14e82194
je 0x1400101d0
test rax, rax
je 0x1400102a0
mov eax, dword [0x141dc0c90]
sub eax, dword [0x141dc0c94]
add eax, 0x9a44d954
xor eax, 0x9408604b
or eax, 0x22761b34
cmp eax, 0x5ef6b74c
jne 0x140010230
jmp 0x140010254
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
jmp 0x14000fdb0
mov eax, dword [0x141dc0c98]
add eax, dword [0x141dc0c9c]
xor eax, 0x797ad8c5
add eax, 0x159704fc
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xb27d5fd8
jae 0x140010260
mov rax, qword [0x141ddb9a0]
jmp 0x140010230
xor edx, edx
mov r8, rdi
call r15
nop dword [rax + rax]
mov eax, dword [0x141dc0ca0]
add eax, dword [0x141dc0ca4]
imul eax, eax, 0xc6b75bb2
add eax, 0x2f442df2
and eax, 0x3b8230a8
cmp eax, 0x21ebbcfd
ja 0x140010270
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ca8]
and eax, dword [0x141dc0cac]
add eax, 0x94b92f11
and eax, 0xdf17548
add eax, 0xa2b9dce0
cmp eax, 0x577d8993
jb 0x1400102a0
mov eax, dword [0x141dc0cb0]
imul eax, dword [0x141dc0cb4]
add eax, 0x4841f7a2
or eax, 0x587edec9
imul eax, eax, 0x8414b92f
cmp eax, 0xa17cedbf
je 0x1400102c2
mov rax, qword [rsp + 0x20]
mov rax, qword [rax - 0xc0]
shl rax, 1
test rax, rax
je 0x14001039b
mov rax, qword [rsp + 0x20]
mov rdi, qword [rax - 0xb8]
mov eax, dword [0x141dc0cb8]
xor eax, dword [0x141dc0cbc]
imul rax, rax, 0x4545c635
shr rax, 0x3e
xor eax, 0x95140083
cmp eax, 0xe9ed63c6
ja 0x140010365
nop dword [rax]
mov eax, dword [0x141dc0cc0]
mov ecx, dword [0x141dc0cc4]
add eax, ecx
add eax, 0xf27a4b76
and eax, 0x9c678b5d
imul ebx, eax, 0x1d68e75
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call r15
cmp ebx, 0xce0891b6
jae 0x140010380
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call r15
jmp 0x140010330
mov eax, dword [0x141dc0cc8]
xor edx, edx
div dword [0x141dc0ccc]
imul eax, eax, 0xd14dbade
cmp eax, 0xf554afef
je 0x140010380
mov rax, qword [rsp + 0x20]
mov rax, qword [rax - 0xa0]
shl rax, 1
test rax, rax
je 0x140010459
mov rax, qword [rsp + 0x20]
mov rdi, qword [rax - 0x98]
test sil, sil
mov ecx, 0x8b932bd3
jne 0x140010600
nop dword [rax]
mov eax, dword [0x141dc0cd0]
add eax, dword [0x141dc0cd4]
imul eax, eax, 0x8b91538
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x7e274be6
mov rbx, qword [0x141ddb9a0]
cmp eax, 0x978ca4c7
ja 0x140010600
mov eax, dword [0x141dc0cd8]
or eax, dword [0x141dc0cdc]
and eax, 0x11412804
xor eax, 0x8f9a6f12
cmp eax, 0x22b8bd6a
jae 0x140010430
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
nop word [rax + rax]
mov eax, dword [0x141dc0ce0]
xor edx, edx
div dword [0x141dc0ce4]
imul r14d, eax, 0xe824b067
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp r14d, 0xec3d53c2
je 0x140010430
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ce8]
and eax, dword [0x141dc0cec]
and eax, 0x1801820a
xor eax, 0xef30b56b
cmp eax, 0xdd0af518
jb 0x140010470
mov rax, qword [rsp + 0x20]
mov rax, qword [rax - 0x60]
test rax, rax
je 0x140010598
mov ecx, dword [0x141dc0cf0]
imul ecx, dword [0x141dc0cf4]
or ecx, 0x14550262
and ecx, 0x55574e6a
imul ecx, ecx, 0xfb426cef
cmp ecx, 0x971e6edc
jne 0x1400104d0
lock dec qword [rax]
nop word [rax + rax]
mov ecx, dword [0x141dc0cf8]
sub ecx, dword [0x141dc0cfc]
or ecx, 0xeabf3605
add ecx, 0x92757692
imul rdx, rcx, 0x5d48dfbb
shr rdx, 0x3b
lock dec qword [rax]
sete cl
cmp edx, 0xbfee0d06
ja 0x1400104d0
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d00]
xor eax, dword [0x141dc0d04]
imul eax, eax, 0xcf410bf8
add eax, 0xb147f199
cmp eax, 0xfb1bfad8
ja 0x140010510
test cl, cl
je 0x140010598
mov eax, dword [0x141dc0d08]
xor edx, edx
div dword [0x141dc0d0c]
add eax, 0xc0459a3f
or eax, 0x4b7554ac
cmp eax, 0xf10c1a08
jbe 0x140010560
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d10]
imul eax, dword [0x141dc0d14]
xor eax, 0x1353c6b4
imul eax, eax, 0xaa2eb08
imul rax, rax, 0x343126d1
shr rax, 0x3d
cmp eax, 0x29d2d9c2
je 0x140010560
mov rax, qword [rsp + 0x20]
mov rcx, qword [rax - 0x60]
call fcn.140017190
mov eax, dword [0x141dc0d18]
xor edx, edx
div dword [0x141dc0d1c]
mov ecx, 0x9cd83365
nop dword [rax + rax]
mov eax, dword [0x141dc0d20]
imul eax, dword [0x141dc0d24]
xor eax, 0x20004000
or eax, 0xdfbf2fe7
cmp eax, 0x4d9bb647
jb 0x1400105b0
nop
mov eax, dword [0x141dc0d28]
xor eax, dword [0x141dc0d2c]
or eax, 0xc520d62d
imul eax, eax, 0xd1dd2193
add eax, 0x18e9fc48
cmp eax, 0x337d9e60
jb 0x1400105d0
test r12, r12
jne 0x14000fa70
jmp 0x14001060c
mov rax, qword [0x141ddb9a0]
jmp 0x1400103d0
mov r14, qword [rsp + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d30]
sub eax, dword [0x141dc0d34]
and eax, 0xd2ba7fba
imul eax, eax, 0x6cbfc6a3
add eax, 0x5cbbcf67
cmp eax, 0xa82034a0
jb 0x140010620
mov rcx, qword [r14 + 0x48]
nop word [rax + rax]
mov eax, dword [0x141dc0d38]
or eax, dword [0x141dc0d3c]
or eax, 0xfbfcffbc
xor eax, 0xc14ddf2
cmp eax, 0x648b3d58
jb 0x140010650
lea rax, [rcx + 1]
mov edx, 0x160
mul rdx
add rcx, rax
cmp rcx, 0xffffffffffffffef
je 0x140010760
mov rdi, qword [r14 + 0x40]
neg rax
mov ecx, dword [0x141dc0d40]
imul ecx, dword [0x141dc0d44]
and ecx, 0xd7cd7095
mov edx, 0xa0b97b15
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xc066b646
ja 0x1400106e7
mov ecx, dword [0x141dc0d48]
xor ecx, dword [0x141dc0d4c]
or ecx, 0xb7bf0930
xor ecx, 0xbec7d55a
imul rcx, rcx, 0x62f403b1
shr rcx, 0x39
mov rbx, qword [0x141ddb9a0]
cmp ecx, 0xd97c9d23
jne 0x1400106f0
mov rcx, qword [0x141ddb9a0]
jmp 0x1400106b5
add rdi, rax
mov eax, dword [0x141dc0d50]
sub eax, dword [0x141dc0d54]
xor eax, 0x1483df32
add eax, 0x409bca0c
and eax, 0x9ee7c0f6
cmp eax, 0xfa508dea
jbe 0x140010723
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov ebp, dword [0x141dc0d58]
sub ebp, dword [0x141dc0d5c]
and ebp, 0xf7f75c60
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0xdcd1c14a
je 0x140010730
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d60]
imul eax, dword [0x141dc0d64]
and eax, 0x4b72d771
imul eax, eax, 0xee1284d5
add eax, 0xeb732c57
cmp eax, 0xf6d2d78e
ja 0x140010760
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d68]
imul eax, dword [0x141dc0d6c]
imul eax, eax, 0x26537801
add eax, 0x79ebee9b
cmp eax, 0xfe20cfc0
ja 0x140010790
mov rax, qword [r14 + 0x18]
shl rax, 1
test rax, rax
je 0x140010802
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400107c0
mov r8, qword [r14 + 0x20]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dc0d70]
or eax, dword [0x141dc0d74]
or eax, 0xbe9b73af
xor eax, 0x51167631
add eax, 0xc238972b
cmp eax, 0x9ef9ce17
jb 0x1400107e0
mov rdi, qword [r14 + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d78]
add eax, dword [0x141dc0d7c]
imul eax, eax, 0xb48b9947
add eax, 0x75296ac
cmp eax, 0xe1469a75
ja 0x140010810
mov rsi, qword [r14 + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0d80]
and eax, dword [0x141dc0d84]
add eax, 0x58c3ef68
or eax, 0x60b097b1
cmp eax, 0xd908ce24
je 0x140010840
test rsi, rsi
je 0x140010b5b
xor r14d, r14d
mov r12d, 0xeada36cb
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
xor ebp, ebp
nop dword [rax + rax]
imul rax, rbp, 0x70
lea r15, [rdi + rax]
cmp qword [rdi + rax], 0
je 0x1400108d4
mov eax, dword [0x141dc0d88]
add eax, dword [0x141dc0d8c]
mov rbx, qword [r15 + 8]
imul eax, eax, 0xda5772bb
add eax, 0x24744225
cmp eax, 0x58d25fef
jbe 0x1400108c0
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call r13
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call r13
test r14b, r14b
jne 0x1400108c0
inc rbp
mov eax, dword [0x141dc0d90]
imul eax, dword [0x141dc0d94]
imul rax, r12
shr rax, 0x3f
add eax, 0xd7231ba5
imul rax, rax, 0xbdf24eb
shr rax, 0x38
cmp eax, 0x9c6a79f
ja 0x1400108d7
mov rax, qword [r15 + 0x18]
nop word [rax + rax]
mov ecx, dword [0x141dc0d98]
add ecx, dword [0x141dc0d9c]
imul ecx, ecx, 0x28b1dfb5
imul rcx, rcx, 0x6104a0b
shr rcx, 0x3a
or ecx, 0xd74f21da
cmp ecx, 0xc5d33ddf
jb 0x140010910
test rax, rax
je 0x1400109fe
mov eax, dword [0x141dc0da0]
and eax, dword [0x141dc0da4]
imul eax, eax, 0xbe5f1abb
add eax, 0xfa18314
cmp eax, 0x24b8aef
jb 0x140010944
mov eax, dword [0x141dc0da8]
sub eax, dword [0x141dc0dac]
mov rbx, qword [r15 + 0x20]
and eax, 0x4826c41
imul eax, eax, 0xa9b019b5
cmp eax, 0xbf14fd71
jne 0x1400109a0
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call r13
nop word cs:[rax + rax]
mov eax, dword [0x141dc0db0]
xor eax, dword [0x141dc0db4]
and eax, 0x5806b9b6
imul r12d, eax, 0x2caa2985
xor r12d, 0x14d31f12
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call r13
cmp r12d, 0xc5a1365e
ja 0x1400109a0
mov r12d, 0xeada36cb
nop dword [rax]
mov eax, dword [0x141dc0db8]
and eax, dword [0x141dc0dbc]
and eax, 0x56ac081
imul eax, eax, 0x3e9f2aa3
cmp eax, 0xc9a9a7b7
ja 0x1400109e0
mov eax, dword [0x141dc0dc0]
add eax, dword [str._YU2]
imul rax, rax, 0x7d2aba17
shr rax, 0x3c
add eax, 0x4d7acba3
xor eax, 0xeaa07a4e
cmp eax, 0x105ebc9c
jb 0x1400109fe
mov rax, qword [r15 + 0x48]
shl rax, 1
test rax, rax
je 0x140010a80
nop word cs:[rax + rax]
mov eax, dword [0x141dc0dc8]
imul eax, dword [0x141dc0dcc]
imul eax, eax, 0xf2ca3ea6
and eax, 0x65bbee5a
imul eax, eax, 0xb66462f1
cmp eax, 0x7db56404
ja 0x140010a40
mov r8, qword [r15 + 0x50]
mov rcx, qword [0x141ddb9a0]
xor edx, edx
call r13
nop word cs:[rax + rax]
mov eax, dword [0x141dc0dd0]
xor eax, dword [0x141dc0dd4]
or eax, 0xf7ca15df
mov ecx, 0x910f0a1b
imul rax, rcx
shr rax, 0x3c
cmp eax, 0xe0819f72
ja 0x140010a80
mov rax, qword [r15 + 0x30]
nop dword [rax]
mov ecx, dword [0x141dc0dd8]
and ecx, dword [0x141dc0ddc]
imul ecx, ecx, 0xfa8e2f95
and ecx, 0x8182809
cmp ecx, 0x9c14395a
je 0x140010ab0
test rax, rax
je 0x140010b19
mov r8, qword [r15 + 0x38]
test r14b, r14b
je 0x140010af0
mov rax, qword [0x141ddb9a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0de0]
sub eax, dword [0x141dc0de4]
add eax, 0x6978a38a
or eax, 0xe7ed7f9b
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x2ee9150f
jb 0x140010af0
xor edx, edx
call r13
mov eax, dword [0x141dc0de8]
xor edx, edx
div dword [0x141dc0dec]
mov eax, dword [str.O___t]
xor edx, edx
div dword [0x141dc0df4]
imul rax, rax, 0x36f28107
shr rax, 0x3c
imul eax, eax, 0x8db25ad5
or eax, 0x836442f2
cmp eax, 0x2b388ef8
je 0x140010b27
cmp rbp, rsi
jne 0x140010880
mov r14, qword [rsp + 0x30]
mov rax, qword [r14]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc0df8]
imul ecx, dword [0x141dc0dfc]
add ecx, 0xbd6a5d50
or ecx, 0xa603c5d
imul ecx, ecx, 0x10a81749
cmp ecx, 0x6bdde11a
ja 0x140010b70
test rax, rax
je 0x140010c40
mov rbx, qword [0x141ddb9a0]
mov eax, dword [0x141dc0e00]
sub eax, dword [0x141dc0e04]
xor eax, 0x2430008
or eax, 0x61386f34
xor eax, 0xdeaac00c
cmp eax, 0xb6843d6a
jbe 0x140010bd7
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov ebp, dword [0x141dc0e08]
sub ebp, dword [0x141dc0e0c]
xor ebp, 0x40180040
or ebp, 0xa7a57fad
xor ebp, 0x8012fb31
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0x7bbd2ada
ja 0x140010be0
mov eax, dword [0x141dc0e10]
or eax, dword [0x141dc0e14]
imul rax, rax, 0x72b45fdb
shr rax, 0x3e
or eax, 0xc69341ca
cmp eax, 0x51545044
jb 0x140010c10
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e18]
or eax, dword [0x141dc0e1c]
xor eax, 0xc42a120a
or eax, 0x3294a0e5
cmp eax, 0x2dc38609
jb 0x140010c40
mov rsi, qword [r14 + 0x90]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140010c70
test rsi, rsi
je 0x140011390
nop dword [rax]
mov eax, dword [0x141dc0e20]
add eax, dword [0x141dc0e24]
imul eax, eax, 0xcffc3f82
xor eax, 0x8d343912
shr eax, 1
imul rax, rax, 0x10a62027
shr rax, 0x3b
cmp eax, 0xb562ea57
ja 0x140010c80
nop dword [rax + rax]
mov eax, dword [0x141dc0e28]
xor eax, dword [0x141dc0e2c]
and eax, 0x17097a1b
add eax, 0x582d36cb
or eax, 0x5cd652b5
cmp eax, 0xd0b69a5d
ja 0x140010cb0
mov rax, qword [r14 + 0xa8]
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140010e52
lea rdi, [rsi + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dc0e30]
imul eax, dword [0x141dc0e34]
or eax, 0x28bde76b
and eax, 0xeebde76b
cmp eax, 0x23af07de
je 0x140010cf0
movdqa xmm0, xmmword [rsi]
pmovmskb r13d, xmm0
not r13d
mov r14, qword [sym.imp.pdh.dll_PdhRemoveCounter]
mov r15, rsi
mov r12, qword [rsp + 0x28]
jmp 0x140010d3c
mov r13d, ebp
dec r12
je 0x140010e52
mov eax, dword [0x141dc0e38]
or eax, dword [0x141dc0e3c]
imul eax, eax, 0xcda89f3d
cmp eax, 0x11d2ec1d
je 0x140010d3c
test r13w, r13w
je 0x140010d70
lea ebp, [r13 - 1]
jmp 0x140010dde
mov eax, dword [0x141dc0e48]
imul eax, dword [0x141dc0e4c]
add eax, 0x7a964f55
or eax, 0xabef268b
cmp eax, 0xa7d838fa
je 0x140010d70
add r15, 0xfffffffffffffe00
movdqa xmm0, xmmword [rdi]
add rdi, 0x10
pmovmskb r13d, xmm0
cmp r13w, 0xffff
je 0x140010d70
nop dword [rax]
mov eax, dword [0x141dc0e40]
xor eax, dword [0x141dc0e44]
imul eax, eax, 0xd4d7b3b4
xor eax, 0xc14200
or eax, 0x623ebdfb
cmp eax, 0x40ea48ea
je 0x140010db0
mov ebp, 0xfffffffe
sub ebp, r13d
not r13d
and ebp, r13d
mov eax, dword [0x141dc0e58]
sub eax, dword [0x141dc0e5c]
and eax, 0x231a63aa
imul eax, eax, 0xc0f80171
cmp eax, 0x95886001
je 0x140010e3a
nop
mov ebx, dword [0x141dc0e60]
or ebx, dword [0x141dc0e64]
add ebx, 0xa03a499e
or ebx, 0x784833f
tzcnt eax, r13d
shl rax, 5
mov rcx, r15
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
cmp ebx, 0x6cf46ab4
jne 0x140010d30
tzcnt eax, r13d
shl rax, 5
mov rcx, r15
sub rcx, rax
mov rcx, qword [rcx - 8]
call r14
jmp 0x140010e00
mov r15, qword [rsp + 0x30]
mov rcx, qword [r15 + 0xc8]
nop
mov eax, dword [0x141dc0e50]
add eax, dword [str.Zc:Bt]
xor eax, 0x2504e122
imul rax, rax, 0x4cea84ad
shr rax, 0x3e
or eax, 0x620146c6
cmp eax, 0x8c20cfbf
ja 0x140010e60
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140010f30
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
mov ecx, dword [0x141dc0e78]
sub ecx, dword [0x141dc0e7c]
imul ecx, ecx, 0x9d1e12ab
add ecx, 0xaaaf31f
shr ecx, 2
imul rcx, rcx, 0x708a2ed7
shr rcx, 0x3a
cmp ecx, 0x1586291e
ja 0x140010ea0
test eax, eax
jne 0x140010f30
mov eax, dword [0x141dc0e80]
xor eax, dword [0x141dc0e84]
add eax, 0x2c6c8ac7
imul rax, rax, 0x5a419a71
shr rax, 0x3e
cmp eax, 0xe16a8b5f
jne 0x140010efb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e88]
or eax, dword [0x141dc0e8c]
imul ebx, eax, 0x6037bd50
call rdi
cmp ebx, 0x98f18b12
jbe 0x140010f10
nop dword [rax]
mov eax, dword [0x141dc0e68]
sub eax, dword [0x141dc0e6c]
xor eax, 0x80182201
or eax, 0x6008088
and eax, 0x8718a2e9
cmp eax, 0x1ede205c
ja 0x140010f30
nop word cs:[rax + rax]
mov eax, dword [0x141dc0e70]
imul eax, dword [0x141dc0e74]
imul rax, rax, 0x382a8595
shr rax, 0x3d
or eax, 0x12000
cmp eax, 0xe71c41b6
je 0x140010f60
mov rdi, qword [r15 + 0xc0]
lea rax, [rdi + 1]
cmp rax, 2
jb 0x140011010
mov eax, dword [0x141dc0e90]
or eax, dword [0x141dc0e94]
imul eax, eax, 0x3aa4c6ac
imul rax, rax, 0x505386b7
shr rax, 0x3d
cmp eax, 0x19a8496a
jne 0x140010fc2
mov rcx, rdi
call qword [sym.imp.pdh.dll_PdhCloseQuery]
mov r14, qword [sym.imp.pdh.dll_PdhCloseQuery]
xor ebp, ebp
nop dword [rax + rax]
mov rcx, rdi
call r14
test bpl, bpl
jne 0x140010fd0
mov eax, 0xd960db83
mov ecx, dword [0x141dc0e98]
sub ecx, dword [0x141dc0e9c]
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0xb5c343f2
cmp ecx, 0x8bdfac2a
jb 0x140010fe0
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ea0]
and eax, dword [0x141dc0ea4]
shr eax, 5
imul rax, rax, 0x80407d
shr rax, 0x32
imul eax, eax, 0x63853790
or eax, 0x5ad5c1cd
cmp eax, 0xc4517991
ja 0x140011010
nop dword [rax]
mov eax, dword [0x141dc0ea8]
sub eax, dword [0x141dc0eac]
add eax, 0xe5724536
or eax, 0x5d6a806b
imul eax, eax, 0xb86c012d
cmp eax, 0xc72dc6d0
je 0x140011040
mov rdi, qword [r15 + 0x98]
test rdi, rdi
je 0x140011390
cmp qword [rsp + 0x28], 0
je 0x14001127c
nop
mov eax, dword [0x141dc0eb0]
and eax, dword [0x141dc0eb4]
imul eax, eax, 0x86e1285e
or eax, 0xbe6fff2d
and eax, 0xfe7fff3d
cmp eax, 0x10ad868a
je 0x140011080
movdqa xmm0, xmmword [rsi]
pmovmskb r15d, xmm0
lea r14, [rsi + 0x10]
not r15d
nop word cs:[rax + rax]
mov eax, dword [0x141dc0eb8]
xor edx, edx
div dword [0x141dc0ebc]
or eax, 0x7bd1ae16
imul rax, rax, 0x73cf0735
shr rax, 0x3e
imul eax, eax, 0x9258ee
cmp eax, 0x5e5247ad
je 0x1400110c0
mov r12d, 0xe141d05b
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test r15w, r15w
jne 0x140011160
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ec0]
sub eax, dword [0x141dc0ec4]
add eax, 0x7259ec11
and eax, 0x5294e374
add eax, 0x27acbf43
cmp eax, 0x7acfce22
ja 0x140011110
add rsi, 0xfffffffffffffe00
movdqa xmm0, xmmword [r14]
add r14, 0x10
pmovmskb r15d, xmm0
cmp r15w, 0xffff
je 0x140011110
not r15d
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ec8]
sub eax, dword [0x141dc0ecc]
xor eax, 0x4dc1430
imul rax, r12
shr rax, 0x3f
cmp eax, 0x2b6fea3c
je 0x140011160
tzcnt ecx, r15d
shl rcx, 5
mov rax, rsi
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x140011226
mov ecx, dword [0x141dc0ed0]
xor ecx, dword [0x141dc0ed4]
imul ecx, ecx, 0x27bfc3c5
or ecx, 0xbbbf4d0b
xor ecx, 0xad50ced7
cmp ecx, 0x3d9984c2
jb 0x14001119a
mov ecx, dword [0x141dc0ed8]
sub ecx, dword [0x141dc0edc]
imul rcx, rcx, 0x3fcb5c8f
shr rcx, 0x3c
imul ecx, ecx, 0x7e5b727c
xor ecx, 0xf4c72442
cmp ecx, 0xd1035bfd
jb 0x140011270
nop
mov edx, dword [0x141dc0ee0]
or edx, dword [0x141dc0ee4]
add edx, 0x629e98ee
or edx, 0xb0000e49
and edx, 0xf1652fef
mov r8, qword [rax - 0x18]
mov rcx, qword [0x141ddb9a0]
cmp edx, 0xf6e319a0
je 0x140011270
xor edx, edx
call r13
lea eax, [r15 - 1]
and eax, r15d
dec qword [rsp + 0x28]
mov r15d, eax
nop word cs:[rax + rax]
mov eax, dword [0x141dc0ee8]
add eax, dword [0x141dc0eec]
xor eax, 0xa0a004c
or eax, 0xf0b56fb3
cmp eax, 0x9fc71b89
jb 0x140011240
cmp qword [rsp + 0x28], 0
jne 0x140011100
jmp 0x14001127c
mov rcx, qword [0x141ddb9a0]
jmp 0x1400111f0
mov rcx, rdi
shl rcx, 5
lea rax, [rcx + 0x20]
add rdi, 0x11
nop dword [rax + rax]
mov edx, dword [0x141dc0ef0]
xor edx, dword [0x141dc0ef4]
and edx, 0xa0106c00
or edx, 0x5f6e0395
xor edx, 0x6236fc0c
cmp edx, 0x7a0f493d
jb 0x140011290
add rax, rdi
mov r8, qword [rsp + 0x30]
je 0x140011390
mov eax, dword [0x141dc0ef8]
xor edx, edx
div dword [0x141dc0efc]
nop word cs:[rax + rax]
mov eax, dword [0x141dc0f00]
xor edx, edx
div dword [0x141dc0f04]
add eax, 0x7bbc9bb1
xor eax, 0x118001
or eax, 0xb9c621e6
cmp eax, 0xa2982c30
je 0x1400112e0
mov rsi, qword [r8 + 0x90]
sub rsi, rcx
add rsi, 0xffffffffffffffe0
mov eax, dword [0x141dc0f08]
xor edx, edx
div dword [str._nsx]
xor eax, 0xf0c9c61
add eax, 0x6168a223
or eax, 0x463052db
cmp eax, 0x165cbcaf
je 0x14001136e
mov eax, dword [0x141dc0f10]
mov ecx, dword [0x141dc0f14]
add eax, ecx
add eax, 0x49155b5d
imul rdi, rax, 0x10116031
shr rdi, 0x3c
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, 0xc845905d
jne 0x140011390
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140011336
mov eax, dword [0x141dc0f18]
xor edx, edx
div dword [0x141dc0f1c]
imul rax, rax, 0x5e939d65
shr rax, 0x3d
or eax, 0x2c3d7b14
cmp eax, 0x3865cda8
je 0x140011390
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret