Function at 0x140015f50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x140058040]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r13, rdx
mov edi, ecx
mov dword [rsp + 0x3c], ecx
xor r15d, r15d
mov dword [rsp + 0x38], r15d
mov r12d, 1
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.advapi32.dll:
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov edx, 0xdedc9aff
mov rcx, rax
call fcn.1400116e0
nop
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1b0], r15
mov r9d, 0xf
mov qword [rbp + 0x1b8], r9
mov byte [rbp + 0x1a0], r15b
mov dword [rsp + 0x38], 8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x18]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14001602a
mov rax, qword [rbp - 0x48]
mov r8, qword [rax]
test r8, r8
je 0x14001602a
mov rax, qword [rbp - 0x68]
mov rdx, qword [rax]
cmp r8, qword [rbp - 0x20]
cmovb r8, qword [rbp - 0x20]
sub r8, rdx
jmp 0x14001605b
test cl, 4
jne 0x140016051
mov rax, qword [rbp - 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140016051
mov rax, qword [rbp - 0x70]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x38]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x14001605b
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140016073
lea rcx, [rbp + 0x1a0]
call fcn.140013e70
mov r9, qword [rbp + 0x1b8]
lea rdx, [rbp + 0x1a0]
cmp r9, 0x10
cmovae rdx, qword [rbp + 0x1a0]
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x1400160fc
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400160f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017541
call fcn.14001c90c
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x70], r14
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x78]
call fcn.1400111e0
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x6c], edx
lea rsi, vtable.std::ios_base.0
mov qword [rbp - 8], rsi
lea rcx, [rbp - 8]
call fcn.14001c47c
nop
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.is_elevated:
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov rbx, rax
call fcn.1400189f0
movzx edx, al
mov rcx, rbx
call fcn.140011d10
nop
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1b0], r15
mov r9d, 0xf
mov qword [rbp + 0x1b8], r9
mov byte [rbp + 0x1a0], 0
mov dword [rsp + 0x38], 0x24
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x18]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140016201
mov rax, qword [rbp - 0x48]
mov r8, qword [rax]
test r8, r8
je 0x140016201
mov rax, qword [rbp - 0x68]
mov rdx, qword [rax]
cmp r8, qword [rbp - 0x20]
cmovb r8, qword [rbp - 0x20]
sub r8, rdx
jmp 0x140016232
test cl, 4
jne 0x140016228
mov rax, qword [rbp - 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140016228
mov rax, qword [rbp - 0x70]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x38]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140016232
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x14001624a
lea rcx, [rbp + 0x1a0]
call fcn.140013e70
mov r9, qword [rbp + 0x1b8]
lea rdx, [rbp + 0x1a0]
cmp r9, 0x10
cmovae rdx, qword [rbp + 0x1a0]
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x1400162d3
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400162cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017547
call fcn.14001c90c
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x70], r14
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x78]
call fcn.1400111e0
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x6c], edx
mov qword [rbp - 8], rsi
lea rcx, [rbp - 8]
call fcn.14001c47c
nop
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.fi_SetServiceStatus:
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov rdx, qword [0x14005cca8]
mov rcx, rax
call fcn.1400118f0
nop
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1b0], r15
mov r9d, 0xf
mov qword [rbp + 0x1b8], r9
mov byte [rbp + 0x1a0], 0
mov dword [rsp + 0x38], 0x94
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x18]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1400163c6
mov rax, qword [rbp - 0x48]
mov r8, qword [rax]
test r8, r8
je 0x1400163c6
mov rax, qword [rbp - 0x68]
mov rdx, qword [rax]
cmp r8, qword [rbp - 0x20]
cmovb r8, qword [rbp - 0x20]
sub r8, rdx
jmp 0x1400163f7
test cl, 4
jne 0x1400163ed
mov rax, qword [rbp - 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400163ed
mov rax, qword [rbp - 0x70]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x38]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x1400163f7
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x14001640f
lea rcx, [rbp + 0x1a0]
call fcn.140013e70
mov r9, qword [rbp + 0x1b8]
mov r14d, 0x54
lea rdx, [rbp + 0x1a0]
cmp r9, 0x10
cmovae rdx, qword [rbp + 0x1a0]
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x14001649e
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016498
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001754d
call fcn.14001c90c
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x78]
call fcn.1400111e0
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x6c], edx
mov qword [rbp - 8], rsi
lea rcx, [rbp - 8]
call fcn.14001c47c
nop
mov rsi, 0xffffffffffffffff
cmp edi, 6
jl 0x14001658a
mov rdx, qword [r13 + 8]
mov qword [rbp + 0x1a0], r15
mov edi, 0xf
mov qword [rbp + 0x1b8], rdi
mov r8d, 6
mov qword [rbp + 0x1b0], r8
mov eax, dword [str.append]
mov dword [rbp + 0x1a0], eax
movzx eax, word [0x140044274]
mov word [rbp + 0x1a4], ax
mov byte [rbp + 0x1a6], 0
lea r14d, [rsi + 0x56]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140016560
lea rcx, [rbp + 0x1a0]
mov rbx, qword [rbp + 0x1a0]
cmp r8, rax
jne 0x140016598
call fcn.14001eaa0
test eax, eax
jne 0x140016598
mov r15b, 1
jmp 0x14001659b
mov rdi, qword [rbp + 0x1b8]
mov rbx, qword [rbp + 0x1a0]
xor r15b, r15b
test r14b, 1
je 0x1400165dc
and r14d, 0xfffffffe
cmp rdi, 0x10
jb 0x1400165dc
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400165d4
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017583
mov rcx, rbx
call fcn.14001c90c
mov edi, 0x539
test r15b, r15b
je 0x1400170fc
mov rdx, qword [r13 + 0x10]
mov rbx, qword [r13 + 0x18]
mov r14, qword [r13 + 0x20]
mov r15, qword [r13 + 0x28]
xor eax, eax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], al
mov r8, rsi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140016620
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x40]
call fcn.1400187f0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x14001668a
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016685
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017553
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], al
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400166c0
mov rdx, rbx
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x180]
call fcn.140018d00
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x14001672d
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016728
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017559
call fcn.14001c90c
mov rax, qword [rsp + 0x60]
cmp qword [rsp + 0x58], rax
jne 0x1400167d6
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.____Could_not_read_input_file
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov rcx, rax
mov rdx, rbx
call fcn.14000faf0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140016783
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
jmp 0x140016ac8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], al
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x140016810
mov rdx, r14
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x180]
call fcn.140018d00
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x14001687d
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016878
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001755f
call fcn.14001c90c
mov rax, qword [rsp + 0x60]
cmp qword [rsp + 0x58], rax
jne 0x140016906
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.____Could_not_read_target_file
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov rcx, rax
mov rdx, r14
call fcn.14000faf0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400168cf
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rcx, rax
call fcn.140010340
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
xor r14d, r14d
jmp 0x140016a7e
mov edx, edi
mov r9, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
cmp r8, r9
je 0x140016939
nop word [rax + rax]
xor byte [r8], dl
mov ecx, edx
shl ecx, 0x18
mov eax, edx
shr eax, 8
mov edx, ecx
xor edx, eax
inc r8
cmp r8, r9
jne 0x140016920
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1a0]
call fcn.140018480
nop
xor r14d, r14d
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], r14b
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x140016980
mov rdx, r15
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x180]
call fcn.140019490
test al, al
sete bl
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x1400169f3
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400169ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017565
call fcn.14001c90c
test bl, bl
je 0x140016b7d
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.____Could_not_write_output_file
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov rcx, rax
mov rdx, r15
call fcn.14000faf0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140016a41
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rcx, rax
call fcn.140010340
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
nop
lea rcx, [rbp + 0x1a0]
call fcn.140011300
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140016ac8
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016ab5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001756b
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140016b14
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016aff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017571
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140016b50
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016b4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017577
call fcn.14001c90c
mov eax, r12d
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.14001ca20
mov rbx, qword [rsp + 0x320]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rbp + 0x1a0]
call fcn.140011300
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140016bd4
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016bc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001756b
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140016c1e
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016c0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017571
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r14
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140016c5a
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016c55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017577
call fcn.14001c90c
mov r15d, dword [rsp + 0x3c]
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.___Main_called
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov edx, r15d
mov rcx, rax
call fcn.1400114d0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140016ca5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
mov edx, 0x445941d9
mov ecx, 0xd4250f59
call fcn.14001b4d0
mov rbx, rax
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.proc:
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov rdx, rbx
mov rcx, rax
call fcn.140011b00
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140016d4b
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140016dc4
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016dbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001757d
call fcn.14001c90c
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
mov edx, r12d
lea rcx, [rbp + 0x90]
call fcn.140010740
nop
lea rdx, str.addr:
lea rcx, [rbp + 0x90]
call fcn.14000faf0
mov rdx, qword [0x14005ccd0]
mov rcx, rax
call fcn.140011b00
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x90]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140016e1e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140015d10
movzx edx, al
mov rcx, rbx
call fcn.140015730
mov rcx, rbx
call fcn.1400151b0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140016e97
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016e91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001759b
call fcn.14001c90c
nop
lea rcx, [rbp + 0x90]
call fcn.140011f20
mov edx, 0x889e0512
lea rcx, [rbp + 0x78]
call fcn.140018880
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r14
mov rdx, qword [r13]
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
inc rsi
cmp byte [rdx + rsi], 0
jne 0x140016ee2
mov r8, rsi
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x180]
call fcn.140018d00
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140016f4d
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016f48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400175a1
call fcn.14001c90c
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x60]
call fcn.1400185f0
mov ebx, eax
cmp eax, 0xffffffff
je 0x1400174af
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140018670
nop
mov edx, r12d
lea rcx, [rbp + 0x90]
call fcn.140010740
nop
lea rdx, str.___Found_embedded_marker:
lea rcx, [rbp + 0x90]
call fcn.14000faf0
mov edx, ebx
mov rcx, rax
call fcn.1400114d0
mov rcx, rax
lea rdx, str.__Size:
call fcn.14000faf0
mov rdx, qword [rsp + 0x28]
sub rdx, qword [rsp + 0x20]
mov rcx, rax
call fcn.140011b00
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x90]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140016fe4
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rcx, rax
call fcn.140010340
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rbp + 0x90]
call fcn.140011f20
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
cmp r8, rdx
je 0x140017053
nop dword [rax]
nop dword [rax + rax]
xor byte [r8], dil
mov ecx, edi
shl ecx, 0x18
mov eax, edi
shr eax, 8
mov edi, ecx
xor edi, eax
inc r8
cmp r8, rdx
jne 0x140017030
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
sub rdx, r8
mov rcx, r8
call fcn.140019ee0
test rax, rax
jne 0x14001749c
mov edx, r12d
lea rcx, [rbp + 0x90]
call fcn.140010740
nop
lea rdx, str.____Could_not_load_as_library:
lea rcx, [rbp + 0x90]
call fcn.14000faf0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call fcn.1400116e0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x90]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400170bb
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rcx, rax
call fcn.140010340
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rbp + 0x90]
call fcn.140011f20
nop
lea rcx, [rsp + 0x20]
call fcn.140011300
jmp 0x1400174b2
mov r15d, dword [rsp + 0x3c]
cmp r15d, 3
jl 0x140017158
mov rbx, qword [r13 + 8]
xor eax, eax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], 0xf
lea r8d, [rax + 5]
lea rdx, str.check
lea rcx, [rbp + 0x180]
call fcn.140013e70
or r14d, 2
mov rdx, rbx
lea rcx, [rbp + 0x180]
call fcn.14000fda0
test al, al
je 0x140017158
mov bl, 1
jmp 0x14001715a
xor bl, bl
test r14b, 2
je 0x1400171a1
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x1400171a1
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001719c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017583
call fcn.14001c90c
xor r14d, r14d
test bl, bl
je 0x140016c5f
mov rdx, qword [r13 + 0x10]
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], r14b
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x1400171d3
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x40]
call fcn.1400187f0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x14001723d
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017238
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017589
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov rdx, qword [r13]
mov qword [rbp + 0x180], r14
movdqa xmm0, xmmword [0x140044470]
movdqu xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], 0
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x140017270
lea rcx, [rbp + 0x180]
call fcn.140013e70
nop
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x180]
call fcn.140018d00
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1400185f0
mov ebx, eax
cmp eax, 0xffffffff
je 0x1400173d8
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x1a0]
call fcn.140018670
nop
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.___Marker_found__Offset:
lea rcx, [rsp + 0x70]
call fcn.14000faf0
mov edx, ebx
mov rcx, rax
call fcn.1400114d0
mov rcx, rax
lea rdx, str.__Size:
call fcn.14000faf0
mov rdx, qword [rbp + 0x1a8]
sub rdx, qword [rbp + 0x1a0]
mov rcx, rax
call fcn.140011b00
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140017340
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rcx, rax
call fcn.140010340
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
nop
lea rcx, [rbp + 0x1a0]
call fcn.140011300
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x1400173c7
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400173b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001758f
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x40]
call fcn.140011300
xor eax, eax
jmp 0x140016b53
mov edx, r12d
lea rcx, [rsp + 0x70]
call fcn.140010740
nop
lea rdx, str.____Marker_not_found
lea rcx, [rsp + 0x70]
call fcn.14000faf0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x70]
call fcn.140015b80
nop
cmp qword [rax + 0x18], 0x10
jb 0x140017413
mov rax, qword [rax]
mov rdx, rax
lea rcx, [0x14005d040]
call fcn.14000faf0
mov rcx, rax
call fcn.140010340
nop
lea rcx, [rbp + 0x180]
call fcn.140011180
nop
lea rcx, [rsp + 0x70]
call fcn.140011f20
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14001748d
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001747a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017595
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x40]
call fcn.140011300
jmp 0x140016c5f
mov rcx, rax
call fcn.140019e60
nop
lea rcx, [rsp + 0x20]
call fcn.140011300
mov r12d, r14d
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x1400174f4
mov rdx, qword [rbp + 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400174e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017535
call fcn.14001c90c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r14
mov rcx, qword [rbp + 0x78]
test rcx, rcx
je 0x140016b50
mov rdx, qword [rbp + 0x88]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016b4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001753b
jmp 0x140016b4b
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
int3
call fcn.14002324c
int3
call fcn.14002324c
nop
call fcn.14002324c
nop
call fcn.14002324c
int3