Function at 0x140001850
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Enumerate gui resources
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140026040]
xor rax, rsp
mov qword [rbp], rax
mov r15, r9
mov r12, r8
mov dword [rbp - 0x20], edx
mov ebx, 4
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov eax, dword [rbx]
cmp dword [0x140027db0], eax
jle 0x1400018ca
lea rcx, [0x140027db0]
call fcn.1400031fc
cmp dword [0x140027db0], 0xffffffff
jne 0x1400018ca
lea rax, [rbp - 0x20]
mov qword [0x140027da8], rax
lea rcx, [0x140027db0]
call fcn.140003190
mov eax, dword [rbx]
cmp dword [0x140027dc0], eax
jle 0x140001900
lea rcx, [0x140027dc0]
call fcn.1400031fc
cmp dword [0x140027dc0], 0xffffffff
jne 0x140001900
lea rax, [rbp - 0x20]
mov qword [0x140027db8], rax
lea rcx, [0x140027dc0]
call fcn.140003190
lea rcx, [0x140027da8]
call fcn.1400029b0
test al, al
je 0x140001a73
movdqa xmm1, xmmword [0x1400228d0]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x140022890]
movdqu xmmword [rsp + 0x50], xmm2
mov cl, 0x39
mov dl, 0x35
mov r9b, 0x33
mov r10b, 0x25
movzx r11d, r10b
mov bl, 0x1f
mov dil, 0x32
mov sil, 0x6c
mov r14b, 0x76
mov r15b, 0x73
movzx r12d, dil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], r8b
xor byte [rsp + 0x43], r8b
xor byte [rsp + 0x44], r8b
xor byte [rsp + 0x45], r8b
xor byte [rsp + 0x46], r8b
xor byte [rsp + 0x47], r8b
xor byte [rsp + 0x48], r8b
xor byte [rsp + 0x49], r8b
xor byte [rsp + 0x4a], r8b
xor byte [rsp + 0x4b], r8b
xor byte [rsp + 0x4c], r8b
xor byte [rsp + 0x4d], r8b
xor byte [rsp + 0x4e], r8b
xor byte [rsp + 0x4f], r8b
movd eax, xmm2
xor al, r8b
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], r8b
xor byte [rsp + 0x52], r8b
xor byte [rsp + 0x53], r8b
xor byte [rsp + 0x54], r8b
xor byte [rsp + 0x55], r8b
xor byte [rsp + 0x56], r8b
xor byte [rsp + 0x57], r8b
xor byte [rsp + 0x58], r8b
xor byte [rsp + 0x59], r8b
xor byte [rsp + 0x5a], r8b
xor byte [rsp + 0x5b], r8b
xor byte [rsp + 0x5c], r8b
xor byte [rsp + 0x5d], r8b
xor byte [rsp + 0x5e], r8b
xor byte [rsp + 0x5f], r8b
xor cl, r8b
mov byte [rsp + 0x60], cl
xor dl, r8b
mov byte [rsp + 0x61], dl
xor r9b, r8b
mov byte [rsp + 0x62], r9b
xor r10b, r8b
mov byte [rsp + 0x63], r10b
xor r11b, r8b
mov byte [rsp + 0x64], r11b
xor bl, r8b
mov byte [rsp + 0x65], bl
xor dil, r8b
mov byte [rsp + 0x66], dil
xor sil, r8b
mov byte [rsp + 0x67], sil
xor r14b, r8b
mov byte [rsp + 0x68], r14b
xor r15b, r8b
mov byte [rsp + 0x69], r15b
xor r12b, r8b
mov byte [rsp + 0x6a], r12b
mov byte [rsp + 0x6b], 0
mov edx, dword [rbp - 0x20]
lea rcx, [rsp + 0x41]
call fcn.140001010
mov al, 1
jmp 0x140002981
mov rax, qword [0x140027db8]
mov ecx, dword [rax]
mov dword [rbp - 0x10], ecx
xor esi, esi
mov dword [rbp - 0xc], esi
lea rdx, [rbp - 0x10]
lea rcx, [0x140001280]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x140001aaa
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c41434b
mov r13d, dword [rbp - 0xc]
je 0x140001aad
mov r13d, esi
test r13d, r13d
jne 0x140001c1c
movdqa xmm1, xmmword [0x140022930]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x1400228b0]
movdqu xmmword [rsp + 0x50], xmm2
mov cl, 0x38
mov dl, 0x3e
mov r8b, 0x3f
mov r10b, 0x71
mov r11b, 0x32
movzx ebx, dl
movzx edi, r8b
mov sil, 0x25
mov r14b, 0x34
mov r15b, 0x29
movzx r12d, sil
mov r13b, 0x5b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], r9b
xor byte [rsp + 0x43], r9b
xor byte [rsp + 0x44], r9b
xor byte [rsp + 0x45], r9b
xor byte [rsp + 0x46], r9b
xor byte [rsp + 0x47], r9b
xor byte [rsp + 0x48], r9b
xor byte [rsp + 0x49], r9b
xor byte [rsp + 0x4a], r9b
xor byte [rsp + 0x4b], r9b
xor byte [rsp + 0x4c], r9b
xor byte [rsp + 0x4d], r9b
xor byte [rsp + 0x4e], r9b
xor byte [rsp + 0x4f], r9b
movd eax, xmm2
xor al, r9b
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], r9b
xor byte [rsp + 0x52], r9b
xor byte [rsp + 0x53], r9b
xor byte [rsp + 0x54], r9b
xor byte [rsp + 0x55], r9b
xor byte [rsp + 0x56], r9b
xor byte [rsp + 0x57], r9b
xor byte [rsp + 0x58], r9b
xor byte [rsp + 0x59], r9b
xor byte [rsp + 0x5a], r9b
xor byte [rsp + 0x5b], r9b
xor byte [rsp + 0x5c], r9b
xor byte [rsp + 0x5d], r9b
xor byte [rsp + 0x5e], r9b
xor byte [rsp + 0x5f], r9b
xor cl, r9b
mov byte [rsp + 0x60], cl
xor dl, r9b
mov byte [rsp + 0x61], dl
xor r8b, r9b
mov byte [rsp + 0x62], r8b
xor r10b, r9b
mov byte [rsp + 0x63], r10b
xor r11b, r9b
mov byte [rsp + 0x64], r11b
xor bl, r9b
mov byte [rsp + 0x65], bl
xor dil, r9b
mov byte [rsp + 0x66], dil
xor sil, r9b
mov byte [rsp + 0x67], sil
xor r14b, r9b
mov byte [rsp + 0x68], r14b
xor r15b, r9b
mov byte [rsp + 0x69], r15b
xor r12b, r9b
mov byte [rsp + 0x6a], r12b
xor r13b, r9b
mov byte [rsp + 0x6b], r13b
mov byte [rsp + 0x6c], 0
lea rcx, [rsp + 0x41]
call fcn.140001010
jmp 0x14000297f
mov qword [rbp - 0x18], rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140001cb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140001cb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140001cb1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140001c90
cmp r8d, 0x4105fc56
je 0x140001cbb
test r9d, r9d
jne 0x140001c70
mov rax, qword [rax]
jmp 0x140001c40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r10
mov r8d, dword [rbp - 0x20]
xor edx, edx
mov ecx, 0x1fffff
call r9
mov qword [rbp - 0x18], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14000279f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140001d86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140001d86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140001d81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140001d60
cmp r8d, 0xaeb6049c
je 0x140001d8b
test r9d, r9d
jne 0x140001d40
mov rax, qword [rax]
jmp 0x140001d10
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, r15
xor edx, edx
mov rcx, qword [rbp - 0x18]
call r10
mov r14, rax
test rax, rax
jne 0x140001ef2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call qword [sym.imp.ntdll.dll_RtlGetLastNtStatus]
mov edx, eax
movdqa xmm0, xmmword [str._V_]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400227f0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x1400228f0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x140022800]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [str._bA_K]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140022a30]
movdqa xmmword [rbp - 0x40], xmm1
xor eax, eax
mov byte [rbp - 0x30], al
nop dword [rax]
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x80], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7d], al
add rsi, 0x13
cmp rsi, 0x5f
jb 0x140001e30
mov byte [rbp - 0x30], 0
jmp 0x140002968
movdqa xmm1, xmmword [0x1400228a0]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [str._44g77.__g_4__56_1OL]
movdqu xmmword [rsp + 0x50], xmm2
mov dl, 0x7d
mov r8b, 0x67
mov r9b, 0x77
mov r10b, 0x3f
mov r11b, 0x62
mov bl, 0x37
mov dil, 0x4d
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
xor dl, cl
mov byte [rsp + 0x60], dl
xor r8b, cl
mov byte [rsp + 0x61], r8b
xor r9b, cl
mov byte [rsp + 0x62], r9b
xor r10b, cl
mov byte [rsp + 0x63], r10b
xor r11b, cl
mov byte [rsp + 0x64], r11b
xor bl, cl
mov byte [rsp + 0x65], bl
xor dil, cl
mov byte [rsp + 0x66], dil
mov byte [rsp + 0x67], 0
mov rdx, r14
lea rcx, [rsp + 0x41]
call fcn.140001010
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140002086
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002086
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002081
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140002060
cmp r8d, 0x43e32f32
je 0x14000208b
test r9d, r9d
jne 0x140002040
mov rax, qword [rax]
jmp 0x140002010
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov qword [rsp + 0x20], rsi
mov r9, r15
mov r8, r12
mov rdx, r14
mov rcx, qword [rbp - 0x18]
call r10
test eax, eax
jns 0x140002260
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call qword [sym.imp.ntdll.dll_RtlGetLastNtStatus]
mov edx, eax
movdqa xmm0, xmmword [0x140022a00]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x140022960]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140022990]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [str.gETlASTnTsTATUS]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400229e0]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x4f525265
mov dword [rbp - 0x3c], 0x10001a52
mov dword [rbp - 0x38], 0x18100558
mov word [rbp - 0x34], 0x2a58
xor eax, eax
mov byte [rbp - 0x32], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x80], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x71], al
add rsi, 0x1f
cmp rsi, 0x5d
jb 0x140002132
mov byte [rbp - 0x32], 0
jmp 0x140002968
mov qword [rbp - 8], rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x1400022f6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400022f6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r11]
add rcx, r11
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400022f1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1400022d0
cmp r8d, 0xd435861d
je 0x1400022fb
test r9d, r9d
jne 0x1400022b0
mov rax, qword [rax]
jmp 0x140002280
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r8d, r13d
xor edx, edx
lea ecx, [rdx + 0x10]
call r10
mov qword [rbp - 8], rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14000262b
mov r10, qword [0x140027da0]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9, r14
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rax
call r10
test eax, eax
jns 0x140002556
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call qword [sym.imp.ntdll.dll_RtlGetLastNtStatus]
mov edx, eax
movdqa xmm0, xmmword [0x1400229b0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400229a0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140022a80]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x140022900]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x140022a40]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x72323a2f
mov word [rbp - 0x3c], 0
nop dword [rax]
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x80], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x70], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6d], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6c], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6b], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6a], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x69], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x68], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x67], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x66], al
add rsi, 0x2a
cmp rsi, 0x54
jb 0x1400023c0
mov byte [rbp - 0x3b], 0
lea rcx, [rsp + 0x71]
jmp 0x140002788
movdqa xmm1, xmmword [0x140022980]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x1400227e0]
movdqu xmmword [rsp + 0x50], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
mov byte [rsp + 0x5f], 0
lea rcx, [rsp + 0x41]
call fcn.140001010
nop
lea rcx, [rbp - 8]
call fcn.140001260
nop
lea rcx, [rbp - 0x18]
call fcn.140001260
jmp 0x140002981
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call qword [sym.imp.ntdll.dll_RtlGetLastNtStatus]
mov edx, eax
movdqa xmm0, xmmword [0x1400228c0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x140022820]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140022a10]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x140022830]
movdqa xmmword [rbp - 0x60], xmm1
mov dword [rbp - 0x50], 0x50180518
mov dword [rbp - 0x4c], 0x4f125a4a
mov dword [rbp - 0x48], 0x6012525a
xor eax, eax
mov byte [rbp - 0x44], al
nop word [rax + rax]
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x80], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x77], al
add rsi, 0x19
cmp rsi, 0x4b
jb 0x140002690
mov byte [rbp - 0x44], 0
lea rcx, [rsp + 0x71]
mov r8d, ebx
call fcn.140001010
nop
lea rcx, [rbp - 8]
call fcn.140001260
jmp 0x140002976
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call qword [sym.imp.ntdll.dll_RtlGetLastNtStatus]
mov edx, eax
movdqa xmm0, xmmword [0x140022a70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400229d0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140022920]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400229c0]
movdqa xmmword [rbp - 0x60], xmm1
mov dword [rbp - 0x50], 0x667b6666
mov dword [rbp - 0x4c], 0x6c24342e
mov dword [rbp - 0x48], 0x6c2c2431
mov word [rbp - 0x44], 0x1e
nop
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + rsi + 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x80], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7d], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7c], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7b], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x7a], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x79], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x78], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x77], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x76], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x75], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x74], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x73], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x72], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x71], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x70], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6f], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6e], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6d], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6c], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6b], al
movzx eax, byte [rsp + 0x70]
xor byte [rbp + rsi - 0x6a], al
add rsi, 0x26
cmp rsi, 0x4c
jb 0x140002800
mov byte [rbp - 0x43], 0
mov r8d, ebx
lea rcx, [rsp + 0x71]
call fcn.140001010
nop
lea rcx, [rbp - 0x18]
call fcn.140001260
xor al, al
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.140003170
mov rbx, qword [rsp + 0x150]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret