Function at 0x14000d600
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rbx, rcx
cmp qword [rcx], 0
je 0x14000d684
mov eax, dword [0x141dc1658]
xor eax, dword [0x141dc165c]
mov rdi, qword [rbx + 8]
and eax, 0xf0560241
add eax, 0x6c3302ea
cmp eax, 0x6f60351e
ja 0x14000d670
mov eax, dword [0x141dc1660]
xor eax, dword [0x141dc1664]
xor eax, 0xd1104cc1
or eax, 0xcacb332
imul esi, eax, 0x1caeac54
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0xb2ce801a
jbe 0x14000d684
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000d63a
mov rdi, qword [rbx + 0x28]
mov eax, 0xd042c30d
nop dword [rax]
mov ecx, dword [0x141dc1668]
xor ecx, dword [0x141dc166c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xbbd61e42
xor ecx, 0xff0010f4
cmp ecx, 0x376356d
jb 0x14000d690
mov qword [rsp + 0x30], rbx
mov rsi, qword [rbx + 0x30]
test rsi, rsi
je 0x14000d7c0
xor r15d, r15d
mov r12d, 0xbc8119c3
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000d6ec
inc r15
cmp r15, rsi
je 0x14000d7c0
lea rax, [r15 + r15*4]
cmp qword [rdi + rax*8 + 8], 0
je 0x14000d6e0
mov ecx, dword [0x141dc1670]
imul ecx, dword [0x141dc1674]
imul ecx, ecx, 0xf6176ab3
add ecx, 0x6360b642
cmp ecx, 0x47731986
jae 0x14000d720
mov rcx, qword [0x141ddc4e0]
lea rax, [rdi + rax*8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc1678]
sub ecx, dword [0x141dc167c]
or ecx, 0xadf4af5f
and ecx, 0xaff6af7f
mov rbx, qword [rax + 0x10]
mov r14, qword [0x141ddc4e0]
cmp ecx, 0xb708c51e
ja 0x14000d730
mov eax, dword [0x141dc1680]
mov ecx, dword [0x141dc1684]
add eax, ecx
add eax, 0xaad8771f
and eax, 0x34c1001c
cmp eax, 0xb6f16725
ja 0x14000d7ab
nop word [rax + rax]
mov ebp, dword [0x141dc1688]
or ebp, dword [0x141dc168c]
imul rbp, r12
shr rbp, 0x3f
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
cmp ebp, 0x96578271
jne 0x14000d6e0
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
jmp 0x14000d780
mov eax, dword [0x141dc1690]
add eax, dword [0x141dc1694]
and eax, 0x440c20
imul eax, eax, 0x552565d4
cmp eax, 0x3fab45b8
ja 0x14000d7c0
mov r15, qword [rsp + 0x30]
mov rax, qword [r15 + 0x20]
nop word [rax + rax]
mov ecx, dword [0x141dc1698]
or ecx, dword [0x141dc169c]
and ecx, 0x2c3ed7cd
imul ecx, ecx, 0xbb979b57
imul rcx, rcx, 0x766149e9
shr rcx, 0x3d
cmp ecx, 0x7eca636e
ja 0x14000d7f0
nop dword [rax + rax]
mov ecx, dword [0x141dc16a0]
imul ecx, dword [0x141dc16a4]
imul ecx, ecx, 0x8e58ef72
add ecx, 0x205f9386
cmp ecx, 0x48379489
jb 0x14000d820
test rax, rax
je 0x14000d880
mov rbx, qword [0x141ddc4e0]
xor eax, eax
test al, al
je 0x14000d861
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r14
test sil, sil
jne 0x14000d870
mov eax, dword [0x141dc16a8]
mov ecx, dword [0x141dc16ac]
add eax, ecx
add eax, 0x5388aa6a
xor eax, 0xc824fc9b
cmp eax, 0x6bef6e01
jb 0x14000d880
mov rbx, qword [r15 + 0x88]
nop word cs:[rax + rax]
mov eax, dword [0x141dc16b0]
or eax, dword [0x141dc16b4]
and eax, 0xa055fc64
xor eax, 0x24528ab4
cmp eax, 0xa9456355
ja 0x14000d8b0
test rbx, rbx
je 0x14000e250
mov rcx, qword [r15 + 0x90]
mov rsi, qword [r15 + 0x98]
mov eax, dword [0x141dc16b8]
xor edx, edx
div dword [0x141dc16bc]
nop word cs:[rax + rax]
mov eax, dword [0x141dc16c0]
sub eax, dword [0x141dc16c4]
xor eax, 0x7a1ff79d
add eax, 0x3f3e8e95
cmp eax, 0x20d2fe6f
jb 0x14000d900
test rsi, rsi
mov r15, rcx
je 0x14000df50
nop dword [rax]
mov eax, dword [0x141dc16c8]
and eax, dword [0x141dc16cc]
add eax, 0xa08cd64
cmp eax, 0x1e8da8f3
ja 0x14000d930
nop dword [rax + rax]
mov eax, dword [0x141dc16d0]
xor eax, dword [0x141dc16d4]
and eax, 0xe568ede
add eax, 0xe2186cc2
or eax, 0x7037d220
cmp eax, 0x45783425
jb 0x14000d950
xor r13d, r13d
mov r14, rbx
xor ebx, ebx
jmp 0x14000d98f
mov r14d, 0
test rsi, rsi
je 0x14000e13e
test rbx, rbx
je 0x14000d9b0
movzx eax, word [rbx + 0x3d2]
cmp r15, rax
jae 0x14000db9a
mov r12, r15
mov rdi, rbx
jmp 0x14000dbf5
mov ecx, 0xe2417285
nop word cs:[rax + rax]
mov eax, dword [str.hdG]
xor eax, dword [0x141dc172c]
and eax, 0xa7c0a1eb
xor eax, 0x1add3a88
imul rax, rcx
shr rax, 0x3f
cmp eax, 0xf573ea96
je 0x14000d9c0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1730]
sub eax, dword [0x141dc1734]
add eax, 0xd39718c8
or eax, 0x2e1c15ee
xor eax, 0x6b34f445
cmp eax, 0x572f2b7e
ja 0x14000d9f0
nop word cs:[rax + rax]
mov eax, dword [0x141dc1738]
sub eax, dword [0x141dc173c]
add eax, 0x453b4e27
xor eax, 0x25aa667b
cmp eax, 0xca4655e
jb 0x14000da20
test r15, r15
je 0x14000db07
nop word cs:[rax + rax]
mov eax, dword [0x141dc1740]
imul eax, dword [0x141dc1744]
and eax, 0x34e9980b
imul eax, eax, 0x39fd0be4
cmp eax, 0x38f63d74
je 0x14000da50
mov ecx, r15d
and ecx, 7
nop word cs:[rax + rax]
mov eax, dword [0x141dc1748]
add eax, dword [0x141dc174c]
or eax, 0xcfacb74a
shr eax, 1
imul rax, rax, 0x1886efe7
shr rax, 0x3a
or eax, 0xd3785614
cmp eax, 0xc18a8e3b
jb 0x14000da80
mov rax, r15
test rcx, rcx
je 0x14000db0c
and rax, 0xfffffffffffffff8
mov rbx, r14
xor edx, edx
nop dword [rax + rax]
mov r8d, dword [0x141dc1750]
imul r8d, dword [0x141dc1754]
add r8d, 0x64d65082
or r8d, 0xa331bbc6
and r8d, 0xebfdfbde
cmp r8d, 0xeba65ba1
ja 0x14000dac0
inc rdx
mov rbx, qword [rbx + 0x3d8]
cmp rdx, rcx
jne 0x14000dac0
cmp r15, 8
jae 0x14000db20
jmp 0x14000db84
mov rbx, r14
jmp 0x14000db84
mov rbx, r14
cmp r15, 8
jb 0x14000db84
nop word cs:[rax + rax]
mov ecx, dword [0x141dc1758]
add ecx, dword [0x141dc175c]
xor ecx, 0x48a040e2
or ecx, 0x3742990d
add ecx, 0x3e7480a7
cmp ecx, 0x1d99ee30
jb 0x14000db20
mov rcx, qword [rbx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rbx, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000db20
xor r15d, r15d
xor r14d, r14d
movzx eax, word [rbx + 0x3d2]
cmp r15, rax
jb 0x14000d9a4
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov rdi, qword [rbx + 0x160]
test rdi, rdi
je 0x14000edba
movzx r12d, word [rbx + 0x3d0]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call r15
inc r14
mov rbx, rdi
cmp r12w, word [rdi + 0x3d2]
jae 0x14000dbb0
nop word [rax + rax]
test r13b, r13b
jne 0x14000dbf0
test r14, r14
je 0x14000dd30
mov rbx, qword [rdi + r12*8 + 0x3e0]
lea rcx, [r14 - 1]
mov eax, dword [0x141dc1780]
xor edx, edx
div dword [0x141dc1784]
nop dword [rax + rax]
mov eax, dword [0x141dc1788]
or eax, dword [0x141dc178c]
or eax, 0xb582f0b3
imul eax, eax, 0xa05a3155
cmp eax, 0xb209045d
je 0x14000dc20
test rcx, rcx
je 0x14000dd01
lea rax, [r14 - 2]
mov edx, ecx
and edx, 7
mov r8d, dword [0x141dc1790]
sub r8d, dword [0x141dc1794]
imul r8d, r8d, 0xec3f8bba
and r8d, 0x1a30a10
cmp r8d, 0xb7faa6a1
je 0x14000dc50
test rdx, rdx
je 0x14000dc95
mov rcx, rdx
nop dword [rax]
mov rbx, qword [rbx + 0x3d8]
dec rcx
jne 0x14000dc80
not rdx
add r14, rdx
mov rcx, r14
cmp rax, 7
jb 0x14000dd01
nop dword [rax + rax]
mov eax, dword [0x141dc1798]
and eax, dword [0x141dc179c]
and eax, 0xf6d6bcd2
imul eax, eax, 0x5a698f30
add eax, 0x3aef0710
cmp eax, 0x71a1b47a
jb 0x14000dca0
mov rax, qword [rbx + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rbx, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14000dca0
xor r15d, r15d
imul rax, r12, 0x38
lea rcx, [rdi + rax]
add rcx, 0x168
cmp qword [rdi + rax + 0x168], 0
jne 0x14000dd56
jmp 0x14000ddf5
lea r15, [r12 + 1]
mov rbx, rdi
imul rax, r12, 0x38
lea rcx, [rdi + rax]
add rcx, 0x168
cmp qword [rdi + rax + 0x168], 0
je 0x14000ddf5
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rcx
mov r15, qword [rcx + 8]
mov r14, qword [0x141ddc4e0]
mov eax, dword [0x141dc17a0]
imul eax, dword [0x141dc17a4]
imul eax, eax, 0x106b1d30
add eax, 0xde73c267
xor eax, 0x9188d5b
cmp eax, 0xf659b4b7
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
ja 0x14000ddd0
nop dword [rax + rax]
mov eax, dword [0x141dc17a8]
xor eax, dword [0x141dc17ac]
imul esi, eax, 0x8dcbdd0f
add esi, 0x16b0d2f1
and esi, 0xf85fd043
mov rcx, r14
xor edx, edx
mov r8, r15
call rbp
cmp esi, 0x904b6519
jbe 0x14000dde0
mov rcx, r14
xor edx, edx
mov r8, r15
call rbp
jmp 0x14000dda0
mov rsi, qword [rsp + 0x28]
mov r15, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
nop
test r13b, r13b
jne 0x14000ddf0
dec rsi
mov eax, dword [0x141dc17b0]
xor eax, dword [0x141dc17b4]
add eax, 0x71bebcc9
xor eax, 0x88406611
or eax, 0x373b98a2
cmp eax, 0x9fc54195
jb 0x14000ddf8
mov eax, dword [0x141dc17b8]
sub eax, dword [0x141dc17bc]
xor eax, 0x1e41102e
or eax, 0xe198afd0
xor eax, 0x6d4ac693
cmp eax, 0x9054b064
jb 0x14000de1a
cmp qword [rcx + 0x20], 0
je 0x14000deb5
mov eax, dword [0x141dc17c0]
xor edx, edx
div dword [0x141dc17c4]
nop word cs:[rax + rax]
mov eax, dword [0x141dc17c8]
add eax, dword [0x141dc17cc]
imul eax, eax, 0x1d45716
cmp eax, 0xd2a7340a
je 0x14000de60
mov r8, qword [rcx + 0x28]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dc17d0]
xor edx, edx
div dword [0x141dc17d4]
imul eax, eax, 0x733efb2c
add eax, 0x83f2d946
and eax, 0xcd895cd4
cmp eax, 0xb8e56156
ja 0x14000de90
shl r12, 5
lea r9, [rdi + r12]
mov rcx, qword [rdi + r12]
nop word cs:[rax + rax]
mov eax, dword [0x141dc17d8]
xor edx, edx
div dword [0x141dc17dc]
imul eax, eax, 0xb21c8a45
cmp eax, 0xcf12802
je 0x14000ded0
shl rcx, 1
test rcx, rcx
je 0x14000d980
test r13b, r13b
je 0x14000df10
mov rax, qword [0x141ddc4e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc17e0]
add eax, dword [0x141dc17e4]
xor eax, 0x1c023008
or eax, 0xe259cbe2
mov r8, qword [r9 + 8]
mov rcx, qword [0x141ddc4e0]
cmp eax, 0x1dd8b701
je 0x14000df10
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000d980
mov eax, dword [0x141dc16d8]
add eax, dword [0x141dc16dc]
imul rax, rax, 0x680f58d7
shr rax, 0x3e
imul eax, eax, 0x6baa8d92
cmp eax, 0xbfac2a00
ja 0x14000df50
mov ecx, 0xb4d7537b
nop dword [rax]
mov eax, dword [0x141dc16e0]
xor edx, edx
div dword [0x141dc16e4]
or eax, 0x3886403
and eax, 0xaf987c03
imul rax, rcx
shr rax, 0x3b
cmp eax, 0x60a831b2
je 0x14000df80
test r15, r15
je 0x14000e13e
mov eax, dword [0x141dc16e8]
xor edx, edx
div dword [0x141dc16ec]
nop
mov eax, dword [0x141dc16f0]
xor edx, edx
div dword [0x141dc16f4]
or eax, 0xea24000
and eax, 0x2ea2c000
cmp eax, 0xa212ca19
ja 0x14000dfc0
mov r8d, r15d
and r8d, 7
nop word cs:[rax + rax]
mov eax, dword [0x141dc16f8]
sub eax, dword [0x141dc16fc]
and eax, 0x1a02c118
add eax, 0xc513b6fa
cmp eax, 0xbb972d12
jb 0x14000dff0
nop dword [rax]
mov eax, dword [0x141dc1700]
or eax, dword [0x141dc1704]
imul rax, rax, 0x331fb733
shr rax, 0x3c
or eax, 0xb0655ce4
imul eax, eax, 0xbffb103d
cmp eax, 0x8465463
jb 0x14000e010
mov rcx, r15
test r8, r8
je 0x14000e0d0
and rcx, 0xfffffffffffffff8
xor r9d, r9d
nop dword [rax]
mov eax, dword [0x141dc1708]
add eax, dword [0x141dc170c]
or eax, 0xad1591cb
imul eax, eax, 0xbfc36ee2
add eax, 0x6306b75
cmp eax, 0xe2d85fe2
ja 0x14000e050
nop word cs:[rax + rax]
mov eax, dword [0x141dc1710]
xor edx, edx
div dword [0x141dc1714]
mov eax, dword [0x141dc1718]
mov edx, dword [0x141dc171c]
add eax, edx
add eax, 0xb22ace4c
and eax, 0xda12b2fe
imul eax, eax, 0xcff68c88
cmp eax, 0x24eab85d
jb 0x14000e08e
mov rbx, qword [rbx + 0x3d8]
inc r9
dec r8
jne 0x14000e080
nop word cs:[rax + rax]
mov eax, dword [0x141dc1720]
and eax, dword [0x141dc1724]
add eax, 0x1943c775
xor eax, 0x8eda07d9
add eax, 0xefd788dc
cmp eax, 0x77893687
jb 0x14000e0d0
cmp r15, 8
jb 0x14000e13e
nop dword [rax + rax]
mov rax, qword [rbx + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rbx, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x14000e100
mov rax, qword [rbx + 0x160]
test rax, rax
je 0x14000e1d5
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r15, qword [rsp + 0x30]
jmp 0x14000e16f
mov rax, qword [rsi + 0x160]
mov rbx, rsi
test rax, rax
je 0x14000e1dd
mov rsi, rax
mov eax, dword [0x141dc1760]
xor eax, dword [0x141dc1764]
imul eax, eax, 0x476addb7
cmp eax, 0xdaf386bf
je 0x14000e1c5
nop dword [rax + rax]
mov eax, dword [0x141dc1768]
add eax, dword [0x141dc176c]
imul r14, rax, 0x2845c961
shr r14, 0x3d
or r14d, 0x3f208e94
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call rdi
cmp r14d, 0xb453bd67
jbe 0x14000e160
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call rdi
jmp 0x14000e190
mov rsi, rbx
mov r15, qword [rsp + 0x30]
mov eax, dword [0x141dc1770]
mov ecx, dword [0x141dc1774]
add eax, ecx
add eax, 0xab61f241
and eax, 0x4000c830
cmp eax, 0x11da9cdf
jbe 0x14000e20e
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebx, dword [0x141dc1778]
add ebx, dword [0x141dc177c]
xor ebx, 0x5b8fdce
add ebx, 0x67848268
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call rdi
cmp ebx, 0x97ed6037
jbe 0x14000e220
nop
mov eax, dword [0x141dc17e8]
imul eax, dword [0x141dc17ec]
add eax, 0xcb6de4d5
xor eax, 0x93fd4d7c
imul eax, eax, 0xaf1780a6
cmp eax, 0x2e8abc15
jb 0x14000e250
nop word cs:[rax + rax]
mov eax, dword [0x141dc17f0]
sub eax, dword [0x141dc17f4]
xor eax, 0x12048046
and eax, 0x132684c6
add eax, 0xf3791ffb
cmp eax, 0xc64f6feb
ja 0x14000e280
mov rax, qword [r15 + 0x38]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc17f8]
add ecx, dword [0x141dc17fc]
or ecx, 0xb8f4ffc
imul ecx, ecx, 0x8a32623f
or ecx, 0xcf461c14
cmp ecx, 0xa98e5a27
jb 0x14000e2b0
shl rax, 1
test rax, rax
je 0x14000e370
mov rdi, qword [r15 + 0x40]
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dc1800]
sub eax, dword [0x141dc1804]
add eax, 0x4a2bed12
or eax, 0x28310844
and eax, 0x3cb1afee
cmp eax, 0xbc74baf2
jbe 0x14000e31d
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc1808]
add eax, dword [0x141dc180c]
imul rax, rax, 0x154e240b
shr rax, 0x39
imul ebp, eax, 0xd75780d
add ebp, 0x4b3456d
mov rcx, rbx
xor edx, edx
mov r8, rdi
call rsi
cmp ebp, 0x97e8a174
ja 0x14000e330
nop word cs:[rax + rax]
mov eax, dword [0x141dc1810]
or eax, dword [0x141dc1814]
add eax, 0x82e2f899
cmp eax, 0x1a9fad7a
jb 0x14000e370
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x14000e390
mov eax, dword [r15 + 0x58]
cmp eax, 4
jae 0x14000e49c
nop word cs:[rax + rax]
mov eax, dword [0x141dc1818]
xor eax, dword [0x141dc181c]
imul eax, eax, 0xece48c21
and eax, 0xd6327547
cmp eax, 0x111b29c5
je 0x14000e3b0
nop
mov eax, dword [0x141dc1820]
or eax, dword [0x141dc1824]
xor eax, 0x6943d2e2
add eax, 0x7092ff01
cmp eax, 0x8d57246b
jb 0x14000e3d0
mov eax, dword [r15 + 0x68]
cmp eax, 4
jae 0x14000e4b4
mov ecx, dword [r15 + 0x78]
mov r8d, 0xa97e9f5d
nop word cs:[rax + rax]
mov eax, dword [0x141dc1838]
xor edx, edx
div dword [0x141dc183c]
imul eax, eax, 0x3c56a3f1
imul rax, r8
shr rax, 0x3e
add eax, 0x1f37f4dd
cmp eax, 0x3d91324a
ja 0x14000e410
cmp ecx, 4
jb 0x14000e547
cmp ecx, 6
je 0x14000e547
nop word [rax + rax]
mov eax, dword [0x141dc1840]
or eax, dword [0x141dc1844]
add eax, 0xf68f597a
imul rax, rax, 0xc3d03c9
shr rax, 0x3a
cmp eax, 0xe7a97c69
ja 0x14000e450
mov eax, dword [0x141dc1848]
xor eax, dword [0x141dc184c]
mov rdi, qword [r15 + 0x80]
xor eax, 0x80413008
and eax, 0x81417f0a
cmp eax, 0x683724e3
jae 0x14000e513
jmp 0x14000e53c
cmp eax, 6
je 0x14000e3b0
mov rcx, qword [r15 + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000e3b0
cmp eax, 6
je 0x14000e3fa
nop dword [rax]
mov eax, dword [0x141dc1828]
sub eax, dword [0x141dc182c]
or eax, 0xbc0d9cfd
imul rax, rax, 0x3647625f
shr rax, 0x3a
cmp eax, 0x2544beea
je 0x14000e4c0
mov rcx, qword [r15 + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
mov eax, dword [0x141dc1830]
and eax, dword [0x141dc1834]
and eax, 0xb02568e1
imul eax, eax, 0x598ef721
cmp eax, 0xe73c06cf
je 0x14000e4f0
jmp 0x14000e3fa
mov eax, dword [0x141dc1850]
imul eax, dword [0x141dc1854]
imul rsi, rax, 0x2fe8335f
shr rsi, 0x3d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0x2572a4f7
jne 0x14000e547
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000e513
mov eax, 0xb457e091
nop dword [rax]
mov ecx, dword [0x141dc1858]
imul ecx, dword [0x141dc185c]
imul rcx, rax
shr rcx, 0x3b
xor ecx, 0xd3b4c668
add ecx, 0x8ccd55a7
cmp ecx, 0xfc8bfcbf
ja 0x14000e550
mov eax, dword [0x141dc1860]
xor edx, edx
div dword [0x141dc1864]
nop word [rax + rax]
mov eax, dword [0x141dc1868]
or eax, dword [0x141dc186c]
or eax, 0x40a40de1
and eax, 0xe7fc1ff5
xor eax, 0xc368fc9e
cmp eax, 0xbac867f
jb 0x14000e590
mov rbx, qword [r15 + 0xa8]
test rbx, rbx
je 0x14000ebcb
nop word cs:[rax + rax]
mov eax, dword [0x141dc1870]
or eax, dword [0x141dc1874]
and eax, 0x101001
cmp eax, 0x26ec8eae
ja 0x14000e5d0
nop dword [rax + rax]
mov eax, dword [0x141dc1878]
imul eax, dword [0x141dc187c]
add eax, 0xbc2b987f
or eax, 0x8011830
and eax, 0x2b2d1f39
cmp eax, 0x2904fb63
ja 0x14000e5f0
mov rax, qword [r15 + 0xb8]
mov r12, qword [r15 + 0xb0]
test rax, rax
je 0x14000ebdc
mov r15, rax
nop dword [rax]
mov eax, dword [0x141dc1880]
add eax, dword [0x141dc1884]
or eax, 0xede0da86
imul rcx, rax, 0x1991fac9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
or eax, 0xf775d9b8
cmp eax, 0x9b040be6
jbe 0x14000e630
xor r14d, r14d
mov r13d, 0xa6ad242d
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, rbx
xor ebx, ebx
nop word cs:[rax + rax]
test rbx, rbx
je 0x14000e6a0
movzx eax, word [rbx + 0x16a]
cmp r12, rax
jae 0x14000e7c0
jmp 0x14000e7af
test r12, r12
je 0x14000e726
mov edx, 0x99d312af
nop
test r14b, r14b
jne 0x14000e6b0
nop word cs:[rax + rax]
mov eax, dword [0x141dc18a0]
imul eax, dword [0x141dc18a4]
xor eax, 0xb62cf8e1
add eax, 0x4cb02a4e
mov rcx, rax
imul rcx, rdx
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
cmp eax, 0x4e95ebc1
ja 0x14000e6c0
mov rax, r12
test r12b, 7
je 0x14000e72b
and rax, 0xfffffffffffffff8
nop
test r14b, r14b
jne 0x14000e700
mov ecx, r12d
and ecx, 7
mov rbx, rsi
xor edx, edx
test r14b, r14b
jne 0x14000e710
mov rbx, qword [rbx + 0x170]
inc rdx
dec rcx
jne 0x14000e710
jmp 0x14000e730
mov rbx, rsi
jmp 0x14000e79e
mov rbx, rsi
nop
mov ecx, dword [0x141dc18a8]
imul ecx, dword [0x141dc18ac]
add ecx, 0x9f740547
cmp ecx, 0x92a51e8b
jb 0x14000e730
cmp r12, 8
jb 0x14000e79e
nop word cs:[rax + rax]
mov rcx, qword [rbx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rbx, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000e760
xor r12d, r12d
xor esi, esi
movzx eax, word [rbx + 0x16a]
cmp r12, rax
jae 0x14000e7c0
mov rdi, rbx
jmp 0x14000e853
mov eax, dword [0x141dc18c8]
xor edx, edx
div dword [0x141dc18cc]
or eax, 0xea7b0797
add eax, 0xf0a575d8
and eax, 0xa1a4b5ed
cmp eax, 0xaa1c7fb9
ja 0x14000e7c0
mov rdi, qword [rbx]
test rdi, rdi
je 0x14000edba
mov eax, dword [0x141dc18f8]
imul eax, dword [0x141dc18fc]
or eax, 0x4e6489dc
imul eax, eax, 0xa385c069
or eax, 0x9868d486
cmp eax, 0x3905b666
jb 0x14000e7f0
inc rsi
movzx r12d, word [rbx + 0x168]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call rbp
mov rbx, rdi
cmp r12w, word [rdi + 0x16a]
jae 0x14000e7c0
nop word [rax + rax]
mov eax, dword [0x141dc18d0]
or eax, dword [0x141dc18d4]
cmp eax, 0xc06c4601
je 0x14000e840
test rsi, rsi
je 0x14000e960
mov eax, dword [0x141dc18d8]
add eax, dword [0x141dc18dc]
shr eax, 1
imul rax, rax, 0x231d8b57
shr rax, 0x3a
xor eax, 0x20c15e51
cmp eax, 0xb00db5dd
ja 0x14000e85c
lea rcx, [rsi - 1]
mov rbx, qword [rdi + r12*8 + 0x178]
mov eax, dword [0x141dc18e0]
xor eax, dword [0x141dc18e4]
imul rax, rax, 0x6ea153cd
shr rax, 0x3d
cmp eax, 0x469f616c
je 0x14000e88d
test rcx, rcx
je 0x14000e953
mov rax, rcx
and rax, 7
je 0x14000e8d5
mov rcx, rax
mov rbx, qword [rbx + 0x170]
dec rcx
jne 0x14000e8c0
not rax
add rax, rsi
mov rcx, rax
add rsi, 0xfffffffffffffffe
mov eax, dword [0x141dc18e8]
xor edx, edx
div dword [0x141dc18ec]
mov eax, dword [0x141dc18f0]
and eax, dword [0x141dc18f4]
imul eax, eax, 0x62f9cf8
add eax, 0x4fdd0a10
cmp eax, 0xe9f7e880
ja 0x14000e8e7
cmp rsi, 7
jb 0x14000e953
nop dword [rax + rax]
test r14b, r14b
jne 0x14000e910
mov rax, qword [rbx + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rax, qword [rax + 0x170]
mov rbx, qword [rax + 0x170]
add rcx, 0xfffffffffffffff8
jne 0x14000e910
xor eax, eax
mov qword [rsp + 0x28], rax
jmp 0x14000e96d
lea rax, [r12 + 1]
mov qword [rsp + 0x28], rax
mov rbx, rdi
dec r15
mov eax, dword [0x141dc1900]
imul eax, dword [0x141dc1904]
and eax, 0xe8c6d28
imul eax, eax, 0x18827190
add eax, 0x155bfe10
cmp eax, 0x7b933aa4
jb 0x14000e970
lea rax, [r12 + r12*2]
mov rsi, qword [rdi + rax*8 + 0x60]
mov rdi, qword [rdi + rax*8 + 0x68]
mov r12, qword [rdi]
test r12, r12
je 0x14000ea44
mov rbp, r15
mov eax, dword [0x141dc1908]
and eax, dword [0x141dc190c]
imul eax, eax, 0x7692fdee
add eax, 0x3063ae8c
xor eax, 0x3328b424
cmp eax, 0x126e0db0
jb 0x14000ebc0
nop dword [rax + rax]
mov eax, dword [0x141dc1910]
xor eax, dword [0x141dc1914]
imul r15d, eax, 0x9528cdaa
xor r15d, 0x37a583dd
add r15d, 0x75284e2a
mov rcx, rsi
call r12
cmp r15d, 0xaabeaa6c
ja 0x14000ebc0
mov r15, rbp
nop word [rax + rax]
mov eax, dword [0x141dc1918]
xor edx, edx
div dword [0x141dc191c]
or eax, 0x7e14a90f
add eax, 0x90e90f86
xor eax, 0xe5522385
cmp eax, 0x1c651e1c
jb 0x14000ea20
mov eax, dword [0x141dc1920]
xor edx, edx
div dword [0x141dc1924]
mov ecx, 0xbf1ad2d5
mov eax, dword [0x141dc1928]
sub eax, dword [0x141dc192c]
add eax, 0x662ae9c7
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x1c0aa638
je 0x14000ea57
cmp qword [rdi + 8], 0
mov rbp, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [rsp + 0x28]
je 0x14000eb50
mov rax, qword [rdi + 0x10]
mov ecx, dword [0x141dc1930]
imul ecx, dword [0x141dc1934]
cmp ecx, 0x16eb6b1f
je 0x14000ea92
nop word [rax + rax]
mov ecx, dword [0x141dc1938]
imul ecx, dword [0x141dc193c]
xor ecx, 0x100a82
or ecx, 0xef21952d
and ecx, 0xef37ffff
cmp ecx, 0x55b29f53
je 0x14000eab0
cmp rax, 0x11
jb 0x14000eb3d
nop dword [rax]
mov eax, dword [0x141dc1940]
sub eax, dword [0x141dc1944]
and eax, 0x100ac386
cmp eax, 0xa1e9d34f
je 0x14000eae0
mov eax, dword [0x141dc1948]
xor edx, edx
div dword [0x141dc194c]
xor eax, 0xaba380cb
or eax, 0x144c5734
cmp eax, 0x213d95b7
jb 0x14000eaf8
mov rsi, qword [rsi - 8]
nop dword [rax + rax]
mov eax, dword [0x141dc1950]
and eax, dword [0x141dc1954]
add eax, 0xaf1241f
xor eax, 0x765bba27
cmp eax, 0xbe1db5b4
ja 0x14000eb20
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call rbp
nop dword [rax + rax]
mov eax, dword [0x141dc1958]
or eax, dword [0x141dc195c]
add eax, 0x52561cb0
imul rax, r13
shr rax, 0x3e
or eax, 0x144e65d0
cmp eax, 0x9def3564
ja 0x14000eb50
nop word cs:[rax + rax]
mov eax, dword [0x141dc1960]
add eax, dword [0x141dc1964]
imul rcx, rax, 0x210cc86f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xce766732
je 0x14000eb80
mov esi, 0
test r15, r15
jne 0x14000e680
jmp 0x14000ece0
mov rcx, rsi
call r12
jmp 0x14000e9e0
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test r12, r12
je 0x14000ece0
mov ecx, r12d
and ecx, 7
nop dword [rax + rax]
mov eax, dword [0x141dc1888]
mov edx, dword [0x141dc188c]
add eax, edx
add eax, 0x67707da6
xor eax, 0xf22b95b2
imul eax, eax, 0x8ec8228a
cmp eax, 0x6794739d
jb 0x14000ebf0
mov rax, r12
test rcx, rcx
je 0x14000ec40
and rax, 0xfffffffffffffff8
nop word cs:[rax + rax]
mov rbx, qword [rbx + 0x170]
dec rcx
jne 0x14000ec30
nop dword [rax]
mov ecx, dword [0x141dc1890]
add ecx, dword [0x141dc1894]
and ecx, 0x5ff8c010
add ecx, 0x158a2391
and ecx, 0x795883b1
cmp ecx, 0x5f1bb5b7
ja 0x14000ec40
cmp r12, 8
jb 0x14000ece0
nop dword [rax]
mov ecx, dword [0x141dc1898]
sub ecx, dword [0x141dc189c]
imul ecx, ecx, 0xa51b51f7
and ecx, 0xe64b72ac
imul ecx, ecx, 0xc86a3447
cmp ecx, 0xc3e6782e
je 0x14000ec70
mov rcx, qword [rbx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rbx, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000ec70
nop word cs:[rax + rax]
mov eax, dword [0x141dc18b0]
xor edx, edx
div dword [0x141dc18b4]
imul eax, eax, 0xdc119b1
add eax, 0x9c28cd28
and eax, 0xc11776a1
cmp eax, 0x7849456d
je 0x14000ece0
mov rax, qword [rbx]
test rax, rax
je 0x14000ed94
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000ed2b
mov rax, qword [rsi]
mov rbx, rsi
test rax, rax
je 0x14000ed97
mov ecx, dword [str.AIa]
sub ecx, dword [0x141dc18bc]
mov rsi, rax
imul eax, ecx, 0x5b56d2e7
and eax, 0x4ca04810
cmp eax, 0xf067193e
ja 0x14000ed84
nop dword [rax]
mov ebp, dword [0x141dc18c0]
xor ebp, dword [0x141dc18c4]
add ebp, 0xae95bb6
xor ebp, 0x9ce5fc76
add ebp, 0xcb452e43
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call rdi
cmp ebp, 0x5bb9517f
jae 0x14000ed20
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call rdi
jmp 0x14000ed50
mov rsi, rbx
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
mov edx, 8
mov rcx, rbx
call fcn.140039be0
ud2