Function at 0x140191f70
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
xchg rdi, rbx
mov qword [rsp + 0x10], rdi
xchg rdi, rbx
mov qword [rsp + 8], rcx
push rcx
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
push r13
push r14
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
lea rbp, [rsp - 0x120]
sub rsp, 0x220
xchg r13, rdx
mov rdx, r13
xchg rdx, r13
xchg rdx, rcx
mov r14, rdx
xchg rcx, rdx
xor esi, esi
xchg rsi, r14
mov qword [rcx + 8], r14
xchg r14, rsi
mov qword [rcx + 0x10], rsi
mov dword [rcx + 0x18], esi
call fcn.14017a3a0
sub rax, 0x3e8
mov qword [r14 + 0x28], rax
mov word [r14 + 0x30], si
lea rcx, [r14 + 0x38]
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], rsi
xor r8d, r8d
lea rdx, [0x140001688]
call fcn.140030b40
nop
mov qword [r14 + 0x58], rsi
mov qword [r14 + 0x68], rsi
mov qword [r14 + 0x78], rsi
mov qword [r14 + 0x88], rsi
xchg r9, rsi
mov qword [r14 + 0x98], r9
xchg rsi, r9
xchg rsi, r12
mov qword [r14 + 0xa8], r12
xchg rsi, r12
mov qword [r14 + 0xb8], rsi
mov qword [r14 + 0xc8], rsi
xchg rsi, r13
mov qword [r14 + 0xd8], r13
xchg r13, rsi
xchg rbp, rsi
mov qword [r14 + 0xe8], rbp
xchg rsi, rbp
mov qword [r14 + 0xf8], rsi
mov qword [r14 + 0x108], rsi
call fcn.140199870
xchg r12, rax
mov r9, r12
xchg r12, rax
mov dword [rsp + 0x30], 0x2018d718
xor dword [rsp + 0x30], 0x3236db8a
add dword [rsp + 0x30], 0x234a7122
add dword [rsp + 0x30], 0x42514336
sub dword [rsp + 0x30], 0x52fd5b87
add dword [rsp + 0x30], 0xd22a9193
mov dword [rsp + 0x3c], 0x26cf52d6
xor dword [rsp + 0x3c], 0xb1046ca
add dword [rsp + 0x3c], 0x34a7cfe9
sub dword [rsp + 0x3c], 0x14862795
add dword [rsp + 0x3c], 0x24e1ce6d
sub dword [rsp + 0x3c], 0x20350ad5
sub dword [rsp + 0x3c], 0x10c37fc0
xor dword [rsp + 0x3c], 0xbe99ff29
mov dword [rsp + 0x40], 0x652f9f22
add dword [rsp + 0x40], 0x28fb680
xor dword [rsp + 0x40], 0x3490b05d
xor dword [rsp + 0x40], 0x69639b77
xor dword [rsp + 0x40], 0x67946b6d
add dword [rsp + 0x40], 0xa19ae993
mov dword [rsp + 0x34], 0x7b826750
xor dword [rsp + 0x34], 0x729d2806
add dword [rsp + 0x34], 0x21031434
xor dword [rsp + 0x34], 0x7eeede74
xor dword [rsp + 0x34], 0x36b6294f
add dword [rsp + 0x34], 0x947c6245
mov dword [rsp + 0x44], 0x56cee042
sub dword [rsp + 0x44], 0x48a2c4b3
add dword [rsp + 0x44], 0x15fa30de
add dword [rsp + 0x44], 0x25d332ad
add dword [rsp + 0x44], 0xac8e284
xor dword [rsp + 0x44], 0x1c56f040
add dword [rsp + 0x44], 0xde314cd
add dword [rsp + 0x44], 0xa90758d3
mov dword [rsp + 0x48], 0x487589ed
add dword [rsp + 0x48], 0x2537b0dc
sub dword [rsp + 0x48], 0x2cd96c26
add dword [rsp + 0x48], 0x1b753535
xor dword [rsp + 0x48], 0x440a1d2d
add dword [rsp + 0x48], 0x2828f700
add dword [rsp + 0x48], 0xbecce985
mov word [rsp + 0x38], 0x7303
xor word [rsp + 0x38], 0x5f0c
add word [rsp + 0x38], 0x1575
sub word [rsp + 0x38], 0x2de9
xor word [rsp + 0x38], 0x2bd2
sub word [rsp + 0x38], 0xfdb
add word [rsp + 0x38], 0x947
xor word [rsp + 0x38], 0xc743
mov dword [rsp + 0x4c], 0xd64dc77
xor dword [rsp + 0x4c], 0x5152cd01
sub dword [rsp + 0x4c], 0x441037ca
add dword [rsp + 0x4c], 0x157d8de6
sub dword [rsp + 0x4c], 0x27bb9b5d
xor dword [rsp + 0x4c], 0x16b6ff9e
add dword [rsp + 0x4c], 0x34283465
add dword [rsp + 0x4c], 0xb7fd975e
mov byte [rsp + 0x3a], 5
add byte [rsp + 0x3a], 0x25
sub byte [rsp + 0x3a], 0x12
add byte [rsp + 0x3a], 0x2f
xor byte [rsp + 0x3a], 0x40
add byte [rsp + 0x3a], 0xef
mov dword [rsp + 0x50], 0x484d24d4
add dword [rsp + 0x50], 0xfdab5b1
add dword [rsp + 0x50], 0x20bda3e9
sub dword [rsp + 0x50], 0x4def993f
add dword [rsp + 0x50], 0x1ec2af9e
sub dword [rsp + 0x50], 0x5bc72dd
sub dword [rsp + 0x50], 0x43fb227a
mov edx, esi
nop
movzx eax, word [rsp + rdx*2 + 0x3c]
movzx ecx, byte [rsp + rdx + 0x30]
add cx, ax
mov word [rsp + rdx*2 + 0x3c], cx
mov byte [rsp + rdx + 0x30], 0x24
sub byte [rsp + rdx + 0x30], 0x22
xor byte [rsp + rdx + 0x30], 0x52
xor byte [rsp + rdx + 0x30], 0x39
sub byte [rsp + rdx + 0x30], 0xa
xor byte [rsp + rdx + 0x30], 0x36
xor byte [rsp + rdx + 0x30], 0x72
add byte [rsp + rdx + 0x30], 0x2b
sub byte [rsp + rdx + 0x30], 0x46
inc rdx
cmp rdx, 0xb
jb 0x1401922a5
xor r8d, r8d
lea rdx, [rsp + 0x3c]
xchg rsi, rcx
mov rsi, r9
xchg rcx, rsi
call fcn.14019a8f0
mov qword [r14], rax
xchg r15, rsi
mov rax, r15
xchg rsi, r15
nop word [rax + rax]
mov byte [rsp + rax + 0x3c], 0x1e
sub byte [rsp + rax + 0x3c], 0xd
xor byte [rsp + rax + 0x3c], 1
add byte [rsp + rax + 0x3c], 7
add byte [rsp + rax + 0x3c], 0x64
sub byte [rsp + rax + 0x3c], 0x4c
add byte [rsp + rax + 0x3c], 0x25
sub byte [rsp + rax + 0x3c], 0x54
inc rax
cmp rax, 0x16
jb 0x14019231d
mov word [r14 + 0x20], si
call fcn.140199870
lea rcx, [0x140003e38]
mov qword [rbp - 0x20], rcx
lea rcx, [0x140193cb0]
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x20]
mov qword [rbp + 0x18], rcx
lea r9, [rbp - 0x20]
xchg r8, r14
mov r14, r8
xchg r8, r14
xchg r15, rdx
mov r15, qword [r14]
xchg rdx, r15
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.140198be0
mov word [rbp + 0x20], si
xor edx, edx
mov r8d, 0x388a0b74
add r8d, 0x3cb0b0b6
sub r8d, 0x182d493a
xor r8d, 0x622495b4
sub r8d, 0x14b637bf
sub r8d, 0x54cbe05
xor r8d, 0x2526f17e
lea rcx, [rbp + 0x22]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x76], 0x1e3aff0c
add dword [rsp + 0x76], 0xe205070
add dword [rsp + 0x76], 0x3838f2ae
sub dword [rsp + 0x76], 0x1a35ac5f
xor dword [rsp + 0x76], 0x1f738504
add dword [rsp + 0x76], 0xa1c9e627
mov dword [rbp - 0x70], 0x2289dc66
add dword [rbp - 0x70], 0x3485ba2a
xor dword [rbp - 0x70], 0x6b2c77fb
add dword [rbp - 0x70], 0x81723b7
sub dword [rbp - 0x70], 0x18f5fa60
xor dword [rbp - 0x70], 0x5aa852f1
add dword [rbp - 0x70], 0x5610bf7
add dword [rbp - 0x70], 0x882a9b25
mov dword [rbp - 0x6c], 0x3e14c5e1
xor dword [rbp - 0x6c], 0x727af982
add dword [rbp - 0x6c], 0x721b2f5
xor dword [rbp - 0x6c], 0x13eb1a6
xor dword [rbp - 0x6c], 0x303e4d04
sub dword [rbp - 0x6c], 0x4520a027
xor dword [rbp - 0x6c], 0x786d06d2
add dword [rbp - 0x6c], 0x9a708a70
mov dword [rsp + 0x7a], 0x4a3113fb
sub dword [rsp + 0x7a], 0x93c35cc
add dword [rsp + 0x7a], 0x2bd317b5
xor dword [rsp + 0x7a], 0x7191790
xor dword [rsp + 0x7a], 0x79e1cdea
xor dword [rsp + 0x7a], 0x40a09927
sub dword [rsp + 0x7a], 0x463b5c6b
xor dword [rsp + 0x7a], 0x68299910
add dword [rsp + 0x7a], 0x92a93398
mov dword [rbp - 0x68], 0x24d37dc6
add dword [rbp - 0x68], 0x48c1297f
add dword [rbp - 0x68], 0x11d8fab3
sub dword [rbp - 0x68], 0x7b783cb4
add dword [rbp - 0x68], 0xdd33cba
add dword [rbp - 0x68], 0xeda75d7a
mov dword [rbp - 0x64], 0x5b283cf6
sub dword [rbp - 0x64], 0x193bef78
xor dword [rbp - 0x64], 0x42692a71
add dword [rbp - 0x64], 0x5186c14f
sub dword [rbp - 0x64], 0x18ce6ae3
xor dword [rbp - 0x64], 0x7663fcaa
xor dword [rbp - 0x64], 0x1fa1a2e2
sub dword [rbp - 0x64], 0x2d2d6276
add dword [rbp - 0x64], 0xd6af7e9c
mov dword [rsp + 0x7e], 0x1086d506
xor dword [rsp + 0x7e], 0x2ebbf52d
sub dword [rsp + 0x7e], 0x3bc3fd8e
xor dword [rsp + 0x7e], 0x2762e3f
xor dword [rsp + 0x7e], 0x1b84be4
xor dword [rsp + 0x7e], 0xf741b1b0
mov dword [rbp - 0x60], 0x5372f7fd
xor dword [rbp - 0x60], 0x6fc071a9
sub dword [rbp - 0x60], 0x1f53d7d9
xor dword [rbp - 0x60], 0x5092972b
xor dword [rbp - 0x60], 0x33c6e495
sub dword [rbp - 0x60], 0x2781dc0
xor dword [rbp - 0x60], 0x84e13f7d
mov dword [rbp - 0x5c], 0x5e153f0e
add dword [rbp - 0x5c], 0xb8b495b
xor dword [rbp - 0x5c], 0x4bea485d
add dword [rbp - 0x5c], 0x5a8ecd47
sub dword [rbp - 0x5c], 0x3328b00a
add dword [rbp - 0x5c], 0xb5c12207
mov dword [rbp - 0x7e], 0x53b404bc
sub dword [rbp - 0x7e], 0x4623ec25
add dword [rbp - 0x7e], 0x2a072af2
sub dword [rbp - 0x7e], 0xbd80ea8
sub dword [rbp - 0x7e], 0x27c4195
xor dword [rbp - 0x7e], 0x2e154f7b
add dword [rbp - 0x7e], 0x217da8ef
xor dword [rbp - 0x7e], 0xde2393d0
mov dword [rbp - 0x58], 0x5ad686c0
sub dword [rbp - 0x58], 0x463d8a04
xor dword [rbp - 0x58], 0x19677a44
add dword [rbp - 0x58], 0xaf0c4b9
xor dword [rbp - 0x58], 0x7398c175
xor dword [rbp - 0x58], 0x942575ee
mov dword [rbp - 0x54], 0x5ad817a9
sub dword [rbp - 0x54], 0x21363c05
xor dword [rbp - 0x54], 0x640036be
xor dword [rbp - 0x54], 0x5ecd7092
xor dword [rbp - 0x54], 0x44358f5
xor dword [rbp - 0x54], 0x4f88c372
sub dword [rbp - 0x54], 0x1fb9b93e
xor dword [rbp - 0x54], 0xd79eb3a7
mov dword [rbp - 0x7a], 0x1c6f951d
add dword [rbp - 0x7a], 0x2806d058
add dword [rbp - 0x7a], 0x6260999
sub dword [rbp - 0x7a], 0x20351e38
xor dword [rbp - 0x7a], 0x5b58ace7
sub dword [rbp - 0x7a], 0x5786e6fb
add dword [rbp - 0x7a], 0xa864a0a
add dword [rbp - 0x7a], 0x3c59830e
xor dword [rbp - 0x7a], 0x966e14b8
mov dword [rbp - 0x50], 0x7e1fa9fa
sub dword [rbp - 0x50], 0x114e87f
xor dword [rbp - 0x50], 0x51073d56
sub dword [rbp - 0x50], 0x274a5421
xor dword [rbp - 0x50], 0xf78aed9
xor dword [rbp - 0x50], 0x4c5c5985
xor dword [rbp - 0x50], 0x17dee43e
sub dword [rbp - 0x50], 0x321910f4
add dword [rbp - 0x50], 0xe15854f5
mov dword [rbp - 0x4c], 0x7e598f6d
xor dword [rbp - 0x4c], 0x2eb46d3b
sub dword [rbp - 0x4c], 0x447de1c4
add dword [rbp - 0x4c], 0x643e8782
xor dword [rbp - 0x4c], 0x568506fe
add dword [rbp - 0x4c], 0x3fcbcca2
add dword [rbp - 0x4c], 0x9942a3f2
mov dword [rbp - 0x76], 0x24101722
add dword [rbp - 0x76], 0x3210a8ad
sub dword [rbp - 0x76], 0x244a6c4
sub dword [rbp - 0x76], 0x4b2a452f
add dword [rbp - 0x76], 0x38d9304c
xor dword [rbp - 0x76], 0xb77df2de
mov dword [rbp - 0x48], 0x523a183d
sub dword [rbp - 0x48], 0x4dcb6604
sub dword [rbp - 0x48], 0x41ea193
xor dword [rbp - 0x48], 0x7cb28cf8
xor dword [rbp - 0x48], 0x10cf6e8
sub dword [rbp - 0x48], 0x569e78f1
xor dword [rbp - 0x48], 0xc82a6d1
xor dword [rbp - 0x48], 0xd4f5a829
mov dword [rbp - 0x44], 0x7244b1b7
add dword [rbp - 0x44], 0x321dbdd
xor dword [rbp - 0x44], 0x32b53041
xor dword [rbp - 0x44], 0x1a2d156e
sub dword [rbp - 0x44], 0x1fa15a84
xor dword [rbp - 0x44], 0x3ddcffef
add dword [rbp - 0x44], 0xfbed4d57
xor eax, eax
mov word [rbp - 0x40], ax
xchg rdx, rsi
mov rsi, rdx
xchg rsi, rdx
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 - 0x70]
movzx ecx, byte [rsp + rdx + 0x76]
add cx, ax
mov word [rbp + rdx*2 - 0x70], cx
mov byte [rsp + rdx + 0x76], 0x48
xor byte [rsp + rdx + 0x76], 0x6d
add byte [rsp + rdx + 0x76], 0x3d
add byte [rsp + rdx + 0x76], 0xb
sub byte [rsp + rdx + 0x76], 0x5a
xor byte [rsp + rdx + 0x76], 0x6f
sub byte [rsp + rdx + 0x76], 0x7c
inc rdx
cmp rdx, 0x18
jb 0x1401927ab
mov r8d, 0x47068f31
sub r8d, 0x147a64bc
xor r8d, 0xa32a74a
sub r8d, 0x385016ae
xor r8d, 0x1e4e8ad5
add r8d, 0x59a99b00
xor r8d, 0x669233dc
add r8d, 0x37861bfe
sub r8d, 0x48dec064
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_wsprintfW]
xchg r15, rsi
mov rax, r15
xchg rsi, r15
nop word [rax + rax]
mov byte [rbp + rax - 0x70], 0
add byte [rbp + rax - 0x70], 0x4d
add byte [rbp + rax - 0x70], 0x13
xor byte [rbp + rax - 0x70], 0x70
sub byte [rbp + rax - 0x70], 7
xor byte [rbp + rax - 0x70], 9
inc rax
cmp rax, 0x30
jb 0x14019284b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.140194520
neg al
sbb r15d, r15d
and r15d, 4
movabs rdi, 0x852396aa49a2e
sub rdi, 0x6a6a6b79
add rdi, 0x6d2c1ff5
sub rdi, 0x1091bb60
sub rdi, 0x47c99663
add rdi, 0x55f33582
movabs rbx, 0xc562916d6ce4e
add rbx, 0x3e206283
add rbx, 0x2a5220a0
xor rbx, 0xeef62b
sub rbx, 0xd0293f7
sub rbx, 0x22d7f9d0
add rbx, 0x334c78c3
cmp qword [0x1402160c0], rdi
je 0x140192b02
mov rax, qword [0x1402160d0]
cmp rax, rbx
je 0x140192b02
cmp byte [0x1402170a0], 0
jne 0x140192972
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140193a10]
mov ecx, 0x2e457ff0
sub ecx, 0x932952e
xor ecx, 0x4b1febea
sub ecx, 0x5dceea64
add ecx, 0x211f4fcd
add ecx, 0x24866107
add ecx, 0x47ccd75
sub ecx, 0x5a60950c
call rax
mov ecx, 0x6e5f2f5e
sub ecx, 0x5840d0a9
xor ecx, 0x293d771c
add ecx, 0x21089dc7
sub ecx, 0x3d73bdb4
xor ecx, 0x371aef0c
sub ecx, 0x15a2e6af
call fcn.1401fd260
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x582359773113e6b
sub rax, 0x2a9eb26a
sub rax, 0x2546bbe2
add rax, 0x33046a73
add rax, 0x25be10a9
add rax, 0x75a39fbc
mov rbx, qword [r14 + 0x58]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rdi, rsi
mov rcx, rsi
xchg rsi, rdi
movabs rax, 0x58235923e4e9930
xor rax, 0x435bddcc
sub rax, 0x5e5e1db2
sub rax, 0x161cbab1
add rax, 0x63d5782a
add rax, 0xf39876
xor rax, 0x6a1833f5
add rax, 0x70ca238d
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
mov qword [rbp - 0x38], rcx
lea rdx, [rbp - 0x38]
lea rcx, [0x140217090]
call fcn.140029d60
mov qword [rax], rbx
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x20]
call rdi
movabs rbx, 0xc56294a43a48e
sub rbx, 0x25f53f3a
add rbx, 0x22edcac8
add rbx, 0x1fc33659
sub rbx, 0x14923441
xor rbx, 0x61a39c7c
add rbx, 0x7fffffff
sub rbx, 0x30b51bf1
movabs rdi, 0x852392c69a554
add rdi, 0x75a7291
add rdi, 0x18088a04
xor rdi, 0x2e88a37f
xor rdi, 0x6a501570
add rdi, 0x1d82d1fa
sub rdi, 0x1986e8d8
add rdi, 0x32df4b3c
xor rdi, 0x2f117e2d
jmp 0x140192b7e
movabs rcx, 0x56275008b
sub rcx, 0x25d538d7
xor rcx, 0x2304da8f
xor rcx, 0x7c4205fd
xor rcx, 0x43727c4d
sub rcx, 0x3cac753
sub rcx, 0x1861af06
add rcx, 0x5bcd9843
add rcx, 0x29881239
mov rax, qword [r14 + 0x58]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x20]
call rax
xchg rdx, rax
mov qword [r14 + 8], rdx
xchg rdx, rax
test rax, rax
je 0x140192fa2
mov dword [rbp + 0x170], 0x79982263
sub dword [rbp + 0x170], 0x935cae5
sub dword [rbp + 0x170], 0x5590a043
add dword [rbp + 0x170], 0x4f45bb8a
sub dword [rbp + 0x170], 0x3725417a
xor dword [rbp + 0x170], 0x32f23143
mov dword [rsp + 0x20], 0x521f605a
sub dword [rsp + 0x20], 0x313fbac5
add dword [rsp + 0x20], 0x3f052482
sub dword [rsp + 0x20], 0x457ae63d
add dword [rsp + 0x20], 0xcb66cd9
sub dword [rsp + 0x20], 0x272050af
lea r9, [rbp + 0x170]
mov r8d, 0x5d4b4dcf
sub r8d, 0x28a18d27
add r8d, 0x40049fcd
sub r8d, 0x485c2256
sub r8d, 0x204f52ca
add r8d, 0x626e0faa
xor r8d, 0x300c9106
sub r8d, 0x4d509ec5
sub r8d, 0x112bcd31
xchg rsi, rax
mov rdx, rsi
xchg rsi, rax
lea rcx, [r14 + 0xd8]
call fcn.140193450
mov r15, qword [r14 + 8]
cmp qword [0x1402160c0], rdi
je 0x140192e16
mov rax, qword [0x1402160d0]
cmp rax, rbx
je 0x140192e16
cmp byte [0x1402170a0], 0
jne 0x140192ce2
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140193a10]
mov ecx, 0x76f8be0e
xor ecx, 0x67867f8c
xor ecx, 0x215d629
add ecx, 0x4bae97d5
sub ecx, 0x2737ab37
xor ecx, 0x18a10c09
add ecx, 0x2f50e911
sub ecx, 0xda99faa
sub ecx, 0x50ea51a6
call rax
mov ecx, 0x7b02c615
sub ecx, 0x59b4afe0
add ecx, 0x26c7727c
sub ecx, 0xfcf36f5
sub ecx, 0x3821beb3
sub ecx, 0x249308
call fcn.1401fd260
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
movabs rax, 0x582359631368b94
add rax, 0x2b9610a9
sub rax, 0xe1c6b71
sub rax, 0x2b8fac94
xor rax, 0x74a518c0
add rax, 0x1fc9a2af
sub rax, 0x5e823c08
add rax, 0x4119f8fd
add rax, 0x1098348f
mov rbx, qword [r14 + 0x68]
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
mov rdx, rdi
movabs rax, 0x58235923d4d2975
add rax, 0x8369d8
sub rax, 0x381769c
xor rax, 0x630023eb
add rax, 0x7c8ec66
add rax, 0x172d4699
push rdx
xor edx, eax
push rdx
xor rdx, qword [rsp + 8]
shr rdx, 0x20
ror rax, 0x20
xor edx, eax
ror rax, 0x20
shl rdx, 0x20
xor rdx, qword [rsp]
add rsp, 0x10
xchg r10, rdx
mov qword [rbp - 0x30], r10
xchg rdx, r10
lea rdx, [rbp - 0x30]
lea rcx, [0x140217090]
call fcn.140029d60
mov qword [rax], rbx
mov r8d, 0x652f0b67
add r8d, 0x415201b
add r8d, 0xde3f488
sub r8d, 0x183869de
add r8d, 0x10cd3090
sub r8d, 0x6fbce501
xor r9d, r9d
mov rdx, r13
mov rcx, r15
call rdi
jmp 0x140192eb9
movabs rcx, 0x4219215bc
add rcx, 0x3ca898b5
xor rcx, 0x6909cc1d
xor rcx, 0x7d9b107b
xor rcx, 0x7b1cd535
xor rcx, 0x503b2741
xor rcx, 0x12599601
xor rcx, 0x4b34acb1
sub rcx, 0x26a87761
mov rax, qword [r14 + 0x68]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov r8d, 0x603f7c68
sub r8d, 0x1e1cad94
xor r8d, 0x1765574f
xor r8d, 0x3eb3cc76
sub r8d, 0x1f228dee
sub r8d, 0x4cd1c644
xor r9d, r9d
mov rdx, r13
xchg rsi, rcx
mov rsi, r15
xchg rsi, rcx
call rax
xchg rbp, rax
mov qword [r14 + 0x10], rbp
xchg rbp, rax
test rax, rax
je 0x140192fa2
call fcn.140194520
test al, al
je 0x140192fa2
mov dword [rbp + 0x178], 0x4921f7d2
xor dword [rbp + 0x178], 0x6c67acb
xor dword [rbp + 0x178], 0x60a16fab
add dword [rbp + 0x178], 0x2098cd40
add dword [rbp + 0x178], 0x274ada64
sub dword [rbp + 0x178], 0x772a8a53
mov dword [rsp + 0x20], 0xa8b2271
xor dword [rsp + 0x20], 0x2ebbe558
sub dword [rsp + 0x20], 0x6685f69
add dword [rsp + 0x20], 0x202e6772
add dword [rsp + 0x20], 0x55cdee8
xor dword [rsp + 0x20], 0x719c16ab
add dword [rsp + 0x20], 0x25a64757
sub dword [rsp + 0x20], 0x4ea99ce7
xor dword [rsp + 0x20], 0x9cc6325
lea r9, [rbp + 0x178]
mov r8d, 0x72401137
sub r8d, 0x4af73dab
sub r8d, 0x1484ee33
add r8d, 0x11e1b1a5
add r8d, 0x4fbce9e
add r8d, 0x775fe07
sub r8d, 0x3117632d
mov rdx, qword [r14 + 0x10]
lea rcx, [r14 + 0xd8]
call fcn.140193450
cmp qword [r14 + 8], 0
je 0x140192fb8
cmp qword [r14 + 0x10], 0
jne 0x140192fc2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r14 + 0x18], eax
call fcn.140199870
xchg rcx, r9
mov rcx, rax
xchg r9, rcx
mov dword [rsp + 0x54], 0x30f83ebf
add dword [rsp + 0x54], 0x43e0f421
xor dword [rsp + 0x54], 0x458c4f2e
sub dword [rsp + 0x54], 0x2f2e5605
add dword [rsp + 0x54], 0x79cb6f6f
add dword [rsp + 0x54], 0x7b045fbe
mov dword [rsp + 0x60], 0x3e731e5f
sub dword [rsp + 0x60], 0x22c0a196
add dword [rsp + 0x60], 0x4d690bd1
sub dword [rsp + 0x60], 0x30e72efc
add dword [rsp + 0x60], 0x16e1d5e6
xor dword [rsp + 0x60], 0x3788da91
sub dword [rsp + 0x60], 0x1f728060
add dword [rsp + 0x60], 0xa64c8ab9
mov dword [rsp + 0x64], 0x480cf718
sub dword [rsp + 0x64], 0xdad5bd7
sub dword [rsp + 0x64], 0x3986f217
add dword [rsp + 0x64], 0x7344470d
xor dword [rsp + 0x64], 0x19758a42
sub dword [rsp + 0x64], 0xf19cc5a
add dword [rsp + 0x64], 0x209d283f
add dword [rsp + 0x64], 0x807f2923
mov dword [rsp + 0x58], 0x30db0a3
xor dword [rsp + 0x58], 0x514a2b77
add dword [rsp + 0x58], 0x10ebf007
sub dword [rsp + 0x58], 0x5a325efc
xor dword [rsp + 0x58], 0x63f17407
add dword [rsp + 0x58], 0x8c069e1e
mov dword [rsp + 0x68], 0x5d3fc058
xor dword [rsp + 0x68], 0x20c1cc44
sub dword [rsp + 0x68], 0x2c036d5
sub dword [rsp + 0x68], 0x494842fa
sub dword [rsp + 0x68], 0x26fd7fb1
add dword [rsp + 0x68], 0x29d8b1ad
add dword [rsp + 0x68], 0xaea3cf3
add dword [rsp + 0x68], 0xecb0dc8
add dword [rsp + 0x68], 0xb0edf076
mov dword [rsp + 0x6c], 0x24e755e
xor dword [rsp + 0x6c], 0x5707c20b
add dword [rsp + 0x6c], 0x1ca0e82c
add dword [rsp + 0x6c], 0x8efd84a
xor dword [rsp + 0x6c], 0x173cf43a
add dword [rsp + 0x6c], 0x91887b47
mov word [rsp + 0x5c], 0x5aa7
sub word [rsp + 0x5c], 0x1ac0
xor word [rsp + 0x5c], 0x1497
xor word [rsp + 0x5c], 0x6828
xor word [rsp + 0x5c], 0x1229
add word [rsp + 0x5c], 0x1b7a
xor word [rsp + 0x5c], 0x9a1d
mov dword [rsp + 0x70], 0x5ba597a4
sub dword [rsp + 0x70], 0x20137599
sub dword [rsp + 0x70], 0x29bf5afc
add dword [rsp + 0x70], 0x4e930f7d
sub dword [rsp + 0x70], 0x3be3bd87
xor dword [rsp + 0x70], 0x114290f0
add dword [rsp + 0x70], 0xea07cb0
add dword [rsp + 0x70], 0xbb15f8d1
xor eax, eax
mov word [rsp + 0x74], ax
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
movzx ecx, word [rsp + rax*2 + 0x60]
movzx edx, byte [rsp + rax + 0x54]
add dx, cx
mov word [rsp + rax*2 + 0x60], dx
mov byte [rsp + rax + 0x54], 0x4a
add byte [rsp + rax + 0x54], 0x24
sub byte [rsp + rax + 0x54], 0x51
add byte [rsp + rax + 0x54], 0x4b
sub byte [rsp + rax + 0x54], 0x45
sub byte [rsp + rax + 0x54], 0x23
inc rax
cmp rax, 0xa
jb 0x1401931a7
xor r8d, r8d
lea rdx, [rsp + 0x60]
xchg r9, rcx
mov r9, rcx
xchg rcx, r9
call fcn.14019a8f0
xchg r15, rax
mov rbx, r15
xchg r15, rax
nop word [rax + rax]
mov byte [rsp + rsi + 0x60], 0x6c
sub byte [rsp + rsi + 0x60], 0x12
sub byte [rsp + rsi + 0x60], 0x10
add byte [rsp + rsi + 0x60], 0
sub byte [rsp + rsi + 0x60], 0x10
xor byte [rsp + rsi + 0x60], 0x47
add byte [rsp + rsi + 0x60], 1
xor byte [rsp + rsi + 0x60], 0x7e
inc rsi
cmp rsi, 0x14
jb 0x14019320b
call fcn.140199870
mov r8d, 0x234dedad
add r8d, 0x7873fd6
add r8d, 0x1fe31f2f
sub r8d, 0x2c297ef6
sub r8d, 0x1c240f18
xor r8d, 0x80277603
mov rdx, rbx
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1401996c0
movabs rcx, 0x83563669d
add rcx, 0x38dd73f7
sub rcx, 0x85929e2
sub rcx, 0x1a9bc891
xor rcx, 0x51e1c0e6
add rcx, 0x2c63466c
xor rcx, 0x13e24f53
add rcx, 0x7fffffff
xor rcx, 0x56b8a46d
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
xchg r10, rax
mov qword [r14 + 0x108], r10
xchg r10, rax
xchg r14, rax
mov r14, rax
xchg r14, rax
mov rbx, qword [rsp + 0x268]
add rsp, 0x220
nop
xchg qword [rsp], r15
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r13
nop
xchg qword [rsp], r12
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
xchg qword [rsp], rsi
add rsp, 8
nop
xchg qword [rsp], rbp
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]