Function at 0x180001f90
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x248
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1c0], 0xfffffffffffffffe
mov r15, rcx
cmp byte [0x180060c42], 0
jne 0x1800020a6
mov rdx, qword [0x18005f3f0]
movabs rax, 0xc3b41583b86d0539
add rax, rdx
movabs rcx, 0xc3b41583b86d0551
add rcx, rdx
xor edx, edx
lea r8, [0x180060c3d]
movzx r9d, byte [rcx + rdx]
mov r11d, r9d
not r11b
movzx r10d, byte [rax + rdx]
mov ebx, r11d
and bl, 9
mov esi, r9d
and sil, 0xc0
and r11b, 0x10
or r11b, sil
or bl, 0xc2
or r11b, 0x2d
mov esi, r9d
and sil, 0x26
xor sil, bl
xor sil, r11b
xor sil, 0x2f
mov r11d, r9d
xor r11b, 0x26
xor r9b, 0xd9
or r9b, r11b
not r9b
or r9b, sil
mov r11d, r10d
and r11b, 0x20
mov ebx, r10d
and bl, 2
or r11b, 0x42
xor r11b, bl
mov ebx, r10d
and bl, 4
or bl, r11b
mov r11d, r10d
and r11b, 0xd9
or r11b, 2
xor r11b, bl
mov ebx, r10d
xor bl, 0x26
xor r10b, 0xd9
or r10b, bl
xor r11b, 0x66
mov ebx, r11d
xor bl, r10b
or r11b, r10b
not r11b
or r11b, bl
xor r11b, r9b
mov byte [rdx + r8], r11b
inc rdx
cmp rdx, 5
jne 0x180001ff0
mov byte [0x180060c42], 1
movabs rax, 0xc3b41583b86d0457
mov rbx, qword [0x18005f3f8]
add rbx, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0xb0], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800036df
mov rdi, rax
cmp rax, 0xf
ja 0x180002118
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], 0xf
lea rcx, [rbp + 0xa0]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0xa0
jmp 0x180002209
mov rax, rdi
xor rax, 0xf
mov rcx, rdi
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rdi
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rdi
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
lea rax, [rbp - 0x60]
cmp rsi, 0xfff
jb 0x1800021c9
lea rcx, [rsi + 0x28]
mov byte [rbp + 0x1be], 1
mov qword [rbp + 0x180], rax
call fcn.18004a3a8
mov r14, 0xffffffffffffffd8
sub r14, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and r14, r8
or r14, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, r14
xor r14, r8
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x1800021e3
lea rcx, [rsi + 1]
mov byte [rbp + 0x1be], 1
mov qword [rbp + 0x180], rax
call fcn.18004a3a8
mov r14, rax
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
cmp byte [0x180060c26], 0
jne 0x1800022d0
mov rdx, qword [0x18005f3f0]
movabs rax, 0xc3b41583b86d046a
add rax, rdx
movabs rcx, 0xc3b41583b86d0484
add rcx, rdx
xor edx, edx
lea r8, [0x180060c20]
nop word cs:[rax + rax]
movzx r10d, byte [rcx + rdx]
movzx r9d, byte [rax + rdx]
mov r11d, r9d
not r11b
mov ebx, r9d
xor bl, 0x32
and bl, r11b
mov r11d, r10d
xor r11b, 0x44
mov esi, r9d
and sil, 0x45
mov edi, ebx
and dil, 0x75
xor dil, sil
and bl, 2
or bl, dil
mov esi, r9d
and sil, 0x88
or sil, 0x45
xor sil, bl
mov ebx, r9d
xor bl, 0x88
xor r9b, 0x77
or r9b, bl
not r9b
or r9b, sil
xor r10b, 0xbb
and r11b, r10b
and r11b, 0xcc
or r11b, r10b
xor r11b, r9b
xor r11b, 0xcc
mov byte [rdx + r8], r11b
inc rdx
cmp rdx, 6
jne 0x180002250
mov byte [0x180060c26], 1
mov rbx, qword [0x18005f400]
movabs rax, 0xc3b41583b86d0457
add rbx, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x140], xmm0
movaps xmmword [rbp + 0x150], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1800036f6
mov rdi, rax
cmp rax, 0xf
ja 0x180002342
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], 0xf
lea rcx, [rbp + 0x140]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0x140
jmp 0x18000242f
mov rax, rdi
xor rax, 0xf
mov rcx, rdi
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rdi
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rdi
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
cmp rsi, 0xfff
jb 0x1800023ef
lea rcx, [rsi + 0x28]
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1a0], rax
call fcn.18004a3a8
mov r14, 0xffffffffffffffd8
sub r14, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and r14, r8
or r14, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, r14
xor r14, r8
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x180002409
lea rcx, [rsi + 1]
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1a0], rax
call fcn.18004a3a8
mov r14, rax
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
lea r14, [rbp + 0x160]
movabs rcx, 0xc3b41583b86d04a2
add rcx, qword [0x18005f3f0]
call fcn.1800465d0
mov rbx, qword [0x18005f408]
movabs rax, 0xc3b41583b86d0457
add rbx, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
movaps xmmword [rbp + 0x170], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x180003709
mov rdi, rax
cmp rax, 0xf
ja 0x1800024a5
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x178], 0xf
jmp 0x180002573
mov rax, rdi
xor rax, 0xf
mov rcx, rdi
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rdi
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rdi
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
cmp rsi, 0xfff
jb 0x18000254b
lea rcx, [rsi + 0x28]
mov qword [rbp + 0x1a0], r14
call fcn.18004a3a8
mov r14, 0xffffffffffffffd8
sub r14, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and r14, r8
or r14, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, r14
xor r14, r8
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x18000255e
lea rcx, [rsi + 1]
mov qword [rbp + 0x1a0], r14
call fcn.18004a3a8
mov r14, rax
mov qword [rbp + 0x160], r14
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x178], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
lea rax, [rbp + 0x140]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x180]
mov qword [rbp + 0x18], rax
mov byte [rbp + 0x1ba], 1
lea rdi, [rbp - 0x60]
mov qword [rbp + 0x48], rdi
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x10]
lea r8, [rbp + 0x1ae]
call fcn.180001c40
mov byte [rbp + 0x1bf], 1
mov qword [rbp + 0x188], rdi
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x60]
mov rcx, rdi
call fcn.180003e90
cmp byte [0x180060c48], 0
jne 0x180002874
mov rax, qword [0x18005f3f0]
movabs rcx, 0xc3b41583b86d0582
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d0568
movzx r8d, byte [rax + rdx]
mov edx, ecx
and dl, 0x2b
or dl, 4
mov r9d, ecx
and r9b, 0x44
xor r9b, dl
mov edx, ecx
and dl, 0x90
or dl, r9b
xor dl, r8b
not cl
or cl, r8b
not r8b
xor dl, 0xfb
or dl, r8b
mov r8d, edx
not r8b
mov r9d, r8d
and r9b, 2
mov r10d, edx
and r10b, 0x24
or r10b, r9b
and dl, 0x80
and r8b, 0x59
or r8b, dl
or r10b, 0x80
or r8b, 2
xor r8b, r10b
xor r8b, cl
xor r8b, 0xd9
mov byte [0x180060c43], r8b
movabs rcx, 0xc3b41583b86d0583
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d0569
movzx r8d, byte [rax + rdx]
mov edx, ecx
and dl, 0x2b
or dl, 4
mov r9d, ecx
and r9b, 0x44
xor r9b, dl
mov edx, ecx
and dl, 0x90
or dl, r9b
xor dl, r8b
not cl
or cl, r8b
not r8b
xor dl, 0xfb
or dl, r8b
mov r8d, edx
not r8b
mov r9d, r8d
and r9b, 2
mov r10d, edx
and r10b, 0x24
or r10b, r9b
and dl, 0x80
and r8b, 0x59
or r8b, dl
or r10b, 0x80
or r8b, 2
xor r8b, r10b
xor r8b, cl
xor r8b, 0xd9
mov byte [0x180060c44], r8b
movabs rcx, 0xc3b41583b86d0584
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d056a
movzx r8d, byte [rax + rdx]
mov edx, ecx
and dl, 0x2b
or dl, 4
mov r9d, ecx
and r9b, 0x44
xor r9b, dl
mov edx, ecx
and dl, 0x90
or dl, r9b
xor dl, r8b
not cl
or cl, r8b
not r8b
xor dl, 0xfb
or dl, r8b
mov r8d, edx
not r8b
mov r9d, r8d
and r9b, 2
mov r10d, edx
and r10b, 0x24
or r10b, r9b
and dl, 0x80
and r8b, 0x59
or r8b, dl
or r10b, 0x80
or r8b, 2
xor r8b, r10b
xor r8b, cl
xor r8b, 0xd9
mov byte [0x180060c45], r8b
movabs rcx, 0xc3b41583b86d0585
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d056b
movzx r8d, byte [rax + rdx]
mov edx, ecx
and dl, 0x2b
or dl, 4
mov r9d, ecx
and r9b, 0x44
xor r9b, dl
mov edx, ecx
and dl, 0x90
or dl, r9b
xor dl, r8b
not cl
or cl, r8b
not r8b
xor dl, 0xfb
or dl, r8b
mov r8d, edx
not r8b
mov r9d, r8d
and r9b, 2
mov r10d, edx
and r10b, 0x24
or r10b, r9b
and dl, 0x80
and r8b, 0x59
or r8b, dl
or r10b, 0x80
or r8b, 2
xor r8b, r10b
xor r8b, cl
xor r8b, 0xd9
mov byte [0x180060c46], r8b
movabs rcx, 0xc3b41583b86d0586
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d056c
movzx edx, byte [rax + rdx]
mov eax, ecx
and al, 0x2b
or al, 4
mov r8d, ecx
and r8b, 0x44
xor r8b, al
mov eax, ecx
and al, 0x90
or al, r8b
xor al, dl
not cl
or cl, dl
not dl
xor al, 0xfb
or al, dl
mov edx, eax
not dl
mov r8d, edx
and r8b, 2
mov r9d, eax
and r9b, 0x24
or r9b, r8b
and al, 0x80
and dl, 0x59
or dl, al
or r9b, 0x80
or dl, 2
xor dl, r9b
xor dl, cl
xor dl, 0xd9
mov byte [0x180060c47], dl
mov byte [0x180060c48], 1
mov rbx, qword [0x18005f410]
movabs rax, 0xc3b41583b86d0457
add rbx, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0xc0], xmm0
movaps xmmword [rbp + 0xd0], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x180003715
mov rdi, rax
cmp rax, 0xf
ja 0x1800028e6
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], 0xf
lea rcx, [rbp + 0xc0]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0xc0
jmp 0x1800029db
mov rax, rdi
xor rax, 0xf
mov rcx, rdi
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rdi
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rdi
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
cmp rsi, 0xfff
jb 0x180002997
lea rcx, [rsi + 0x28]
mov byte [rbp + 0x1bf], 1
lea rax, [rbp - 0x28]
mov qword [rbp + 0x188], rax
call fcn.18004a3a8
mov r14, 0xffffffffffffffd8
sub r14, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and r14, r8
or r14, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, r14
xor r14, r8
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x1800029b5
lea rcx, [rsi + 1]
mov byte [rbp + 0x1bf], 1
lea rax, [rbp - 0x28]
mov qword [rbp + 0x188], rax
call fcn.18004a3a8
mov r14, rax
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
cmp byte [0x180060c34], 0
jne 0x180002a9e
mov rax, qword [0x18005f3f0]
movabs rcx, 0xc3b41583b86d04db
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d04f1
xor cl, byte [rax + rdx]
mov byte [0x180060c2f], cl
movabs rcx, 0xc3b41583b86d04dc
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d04f2
xor cl, byte [rax + rdx]
mov byte [0x180060c30], cl
movabs rcx, 0xc3b41583b86d04dd
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d04f3
xor cl, byte [rax + rdx]
mov byte [0x180060c31], cl
movabs rcx, 0xc3b41583b86d04de
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d04f4
xor cl, byte [rax + rdx]
mov byte [0x180060c32], cl
movabs rcx, 0xc3b41583b86d04df
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d04f5
xor cl, byte [rax + rdx]
mov byte [0x180060c33], cl
mov byte [0x180060c34], 1
mov rbx, qword [0x18005f418]
movabs rax, 0xc3b41583b86d0457
add rbx, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0xf0], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x18000372c
mov rdi, rax
cmp rax, 0xf
ja 0x180002b10
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], 0xf
lea rcx, [rbp + 0xe0]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, rbp
add rdi, 0xe0
jmp 0x180002bfd
mov rax, rdi
xor rax, 0xf
mov rcx, rdi
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rdi
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rdi
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
cmp rsi, 0xfff
jb 0x180002bbd
lea rcx, [rsi + 0x28]
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x1b0], rax
call fcn.18004a3a8
mov r14, 0xffffffffffffffd8
sub r14, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and r14, r8
or r14, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, r14
xor r14, r8
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x180002bd7
lea rcx, [rsi + 1]
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x1b0], rax
call fcn.18004a3a8
mov r14, rax
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
lea r14, [rbp + 0x100]
movabs rcx, 0xc3b41583b86d0507
add rcx, qword [0x18005f3f0]
call fcn.1800466b0
mov rbx, qword [0x18005f420]
movabs rax, 0xc3b41583b86d0457
add rbx, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x100], xmm0
movaps xmmword [rbp + 0x110], xmm0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x18000373f
mov rdi, rax
cmp rax, 0xf
ja 0x180002c73
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], 0xf
jmp 0x180002d41
mov rax, rdi
xor rax, 0xf
mov rcx, rdi
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rdi
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rdi
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
cmp rsi, 0xfff
jb 0x180002d19
lea rcx, [rsi + 0x28]
mov qword [rbp + 0x1b0], r14
call fcn.18004a3a8
mov r14, 0xffffffffffffffd8
sub r14, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and r14, r8
or r14, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, r14
xor r14, r8
and r14, rdx
mov qword [r14 - 8], rax
jmp 0x180002d2c
lea rcx, [rsi + 1]
mov qword [rbp + 0x1b0], r14
call fcn.18004a3a8
mov r14, rax
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
lea rdi, [rbp + 0x120]
cmp byte [0x180060c4d], 0
jne 0x180002edd
mov rax, qword [0x18005f3f0]
movabs rcx, 0xc3b41583b86d05b6
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d05a6
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r9d, ecx
xor r9b, 0xdb
mov r10d, ecx
and r10b, 0x6f
xor cl, 0xb4
and cl, r9b
mov r9d, edx
xor r9b, 0x24
xor dl, 0xb4
and dl, r9b
xor r10b, 0x24
or r10b, cl
and r8b, 0x90
or r8b, dl
xor r8b, r10b
mov byte [0x180060c49], r8b
movabs rcx, 0xc3b41583b86d05b7
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d05a7
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r9d, ecx
xor r9b, 0xdb
mov r10d, ecx
and r10b, 0x6f
xor cl, 0xb4
and cl, r9b
mov r9d, edx
xor r9b, 0x24
xor dl, 0xb4
and dl, r9b
xor r10b, 0x24
or r10b, cl
and r8b, 0x90
or r8b, dl
xor r8b, r10b
mov byte [0x180060c4a], r8b
movabs rcx, 0xc3b41583b86d05b8
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d05a8
movzx edx, byte [rax + rdx]
mov r8d, edx
not r8b
mov r9d, ecx
xor r9b, 0xdb
mov r10d, ecx
and r10b, 0x6f
xor cl, 0xb4
and cl, r9b
mov r9d, edx
xor r9b, 0x24
xor dl, 0xb4
and dl, r9b
xor r10b, 0x24
or r10b, cl
and r8b, 0x90
or r8b, dl
xor r8b, r10b
mov byte [0x180060c4b], r8b
movabs rcx, 0xc3b41583b86d05b9
movzx ecx, byte [rax + rcx]
movabs rdx, 0xc3b41583b86d05a9
movzx eax, byte [rax + rdx]
mov edx, eax
not dl
mov r8d, ecx
xor r8b, 0xdb
mov r9d, ecx
and r9b, 0x6f
xor cl, 0xb4
and cl, r8b
mov r8d, eax
xor r8b, 0x24
xor al, 0xb4
and al, r8b
xor r9b, 0x24
or r9b, cl
and dl, 0x90
or dl, al
xor dl, r9b
mov byte [0x180060c4c], dl
mov byte [0x180060c4d], 1
mov r14, qword [0x18005f428]
movabs rax, 0xc3b41583b86d0457
add r14, rax
xorps xmm0, xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi], xmm0
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x18000374b
mov rbx, rax
cmp rax, 0xf
ja 0x180002f2c
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], 0xf
jmp 0x180002ffa
mov rax, rbx
xor rax, 0xf
mov rcx, rbx
and rcx, 0xfffffffffffffff0
or rcx, 8
xor rcx, rbx
mov rdx, rcx
xor rdx, 0xfffffffffffffff7
xor rcx, 8
mov r8, rbx
xor r8, 0xfffffffffffffff0
and r8, rcx
and rcx, rax
and rdx, rax
or rdx, r8
xor rdx, rcx
cmp rdx, 0x17
mov esi, 0x16
cmovae rsi, rdx
cmp rsi, 0xfff
jb 0x180002fd2
lea rcx, [rsi + 0x28]
mov qword [rbp + 0x1b0], rdi
call fcn.18004a3a8
mov rdi, 0xffffffffffffffd8
sub rdi, rax
mov rcx, rax
add rcx, 0x27
movabs rdx, 0x3c21826532d101c2
and rdx, rcx
movabs r8, 0xc3de7d9acd2efe3d
and rdi, r8
or rdi, rdx
movabs rdx, 0x3c21826532d101dd
xor rdx, rcx
xor rdx, rdi
xor rdi, r8
and rdi, rdx
mov qword [rdi - 8], rax
jmp 0x180002fe5
lea rcx, [rsi + 1]
mov qword [rbp + 0x1b0], rdi
call fcn.18004a3a8
mov rdi, rax
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], rsi
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, rdi
mov byte [rbx], 0
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x140]
mov qword [rbp + 0x28], rax
mov byte [rbp + 0x1bc], 1
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x20]
lea r8, [rbp + 0x1af]
call fcn.180001c40
mov byte [rbp + 0x1bd], 1
lea rdx, [rbp + 0xc0]
lea r8, [rbp + 0x80]
lea rcx, [rbp - 0x28]
call fcn.180003e90
xorps xmm0, xmm0
movaps xmmword [rbp + 0x190], xmm0
mov ecx, 0x58
call fcn.18004a3a8
mov rdi, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x190], rax
lea rcx, [rbp + 0x190]
lea r8, [rbp - 0x60]
mov rdx, rax
call fcn.1800207b0
lea rcx, [rbp + 0x190]
mov rdx, rdi
lea r8, [rbp - 0x28]
call fcn.1800207b0
mov esi, 0x38
mov edi, 0x58
movabs r14, 0x1b467d30fd4a73f0
nop dword [rax]
lea rcx, [rsi + rbp]
add rcx, 0xffffffffffffffa0
call fcn.180004010
test rsi, rsi
mov eax, 0xe8
cmove rax, rdi
add rax, qword [0x18005f430]
movabs rcx, 0xc3b41583b86d0457
mov rax, qword [rcx + rax]
add rax, r14
jmp rax
mov byte [rbp + 0x1be], 1
lea rax, [rbp - 0x60]
mov qword [rbp + 0x180], rax
call fcn.180019a20
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1a0], rax
call fcn.180019a20
mov qword [rbp + 0x1a0], r14
call fcn.180019a20
mov byte [rbp + 0x1bf], 1
lea rax, [rbp - 0x28]
mov qword [rbp + 0x188], rax
call fcn.180019a20
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x1b0], rax
call fcn.180019a20
mov qword [rbp + 0x1b0], r14
call fcn.180019a20
mov qword [rbp + 0x1b0], rdi
call fcn.180019a20
int3