Function at 0x140191760
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
push 0x6aba9643
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
push r8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
xchg rdx, r13
mov rdx, r13
xchg rdx, r13
xchg rcx, r8
mov r14, r8
xchg r8, rcx
xor esi, esi
xchg rsi, r12
mov qword [rcx + 8], r12
xchg r12, rsi
xchg rsi, rdx
mov qword [rcx + 0x10], rdx
xchg rsi, rdx
mov dword [rcx + 0x18], esi
call fcn.140179940
add rax, 0x2ae824c7
sub rax, 0x2ae828af
mov qword [r14 + 0x28], rax
mov word [r14 + 0x30], si
lea rcx, [r14 + 0x38]
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xchg rdi, rsi
mov qword [rcx + 0x10], rdi
xchg rsi, rdi
xchg r11, rsi
mov qword [rcx + 0x18], r11
xchg rsi, r11
xor r8d, r8d
lea rdx, [0x140001688]
call fcn.140030b50
nop
mov qword [r14 + 0x58], rsi
xchg rsi, rbp
mov qword [r14 + 0x68], rbp
xchg rsi, rbp
mov qword [r14 + 0x78], rsi
mov qword [r14 + 0x88], rsi
xchg r11, rsi
mov qword [r14 + 0x98], r11
xchg rsi, r11
mov qword [r14 + 0xa8], rsi
xchg rsi, rdx
mov qword [r14 + 0xb8], rdx
xchg rsi, rdx
mov qword [r14 + 0xc8], rsi
xchg r15, rsi
mov qword [r14 + 0xd8], r15
xchg rsi, r15
xchg rsi, rcx
mov qword [r14 + 0xe8], rcx
xchg rcx, rsi
xchg r8, rsi
mov qword [r14 + 0xf8], r8
xchg rsi, r8
mov qword [r14 + 0x108], rsi
call fcn.1401990f0
mov r9, rax
mov dword [rsp + 0x30], 0x40f08e1d
xor dword [rsp + 0x30], 0x18623e6a
xor dword [rsp + 0x30], 0x4342ab22
add dword [rsp + 0x30], 0x39167718
add dword [rsp + 0x30], 0x22911169
xor dword [rsp + 0x30], 0x27b6035d
xor dword [rsp + 0x30], 0xa637567d
mov dword [rsp + 0x3c], 0x54911a9
add dword [rsp + 0x3c], 0x2d9bb3c2
add dword [rsp + 0x3c], 0x46ac6417
sub dword [rsp + 0x3c], 0x76e95f4d
xor dword [rsp + 0x3c], 0x779b09cc
sub dword [rsp + 0x3c], 0x6ee2c758
xor dword [rsp + 0x3c], 0x344ead37
xor dword [rsp + 0x3c], 0x47ed5894
add dword [rsp + 0x3c], 0x8979f65f
mov dword [rsp + 0x40], 0x509fc18a
sub dword [rsp + 0x40], 0x35176ced
add dword [rsp + 0x40], 0x39631e08
xor dword [rsp + 0x40], 0x298ebc8b
sub dword [rsp + 0x40], 0x31b14fbd
xor dword [rsp + 0x40], 0x6124c616
sub dword [rsp + 0x40], 0xdded54e
add dword [rsp + 0x40], 0x4f509623
add dword [rsp + 0x40], 0x9370863c
mov dword [rsp + 0x34], 0x3db5da31
add dword [rsp + 0x34], 0x1c1adc2d
sub dword [rsp + 0x34], 0x309d30d6
add dword [rsp + 0x34], 0x4008c078
sub dword [rsp + 0x34], 0xe5fcb4
xor dword [rsp + 0x34], 0x3fe8a0e
sub dword [rsp + 0x34], 0x275d694
add dword [rsp + 0x34], 0x167a991f
add dword [rsp + 0x34], 0x77497129
mov dword [rsp + 0x44], 0x59579990
xor dword [rsp + 0x44], 0xa1aa5b0
sub dword [rsp + 0x44], 0x4a4298ce
add dword [rsp + 0x44], 0x711580ac
sub dword [rsp + 0x44], 0x2e360a80
sub dword [rsp + 0x44], 0x3e91e638
add dword [rsp + 0x44], 0x4322e505
xor dword [rsp + 0x44], 0xaf05e735
mov dword [rsp + 0x48], 0x431d1f66
sub dword [rsp + 0x48], 0x1b8b464e
add dword [rsp + 0x48], 0x8d0bde7
add dword [rsp + 0x48], 0x325371e4
add dword [rsp + 0x48], 0x1644402d
sub dword [rsp + 0x48], 0x3dd82f7d
sub dword [rsp + 0x48], 0x157beef3
add dword [rsp + 0x48], 0xd992d4da
mov word [rsp + 0x38], 0x40b1
sub word [rsp + 0x38], 0x222f
xor word [rsp + 0x38], 0x380a
xor word [rsp + 0x38], 0x2bde
add word [rsp + 0x38], 0x55d6
sub word [rsp + 0x38], 0x5801
xor word [rsp + 0x38], 0xfddd
mov dword [rsp + 0x4c], 0x3058f6da
sub dword [rsp + 0x4c], 0xaaae3d4
xor dword [rsp + 0x4c], 0x377aacf3
xor dword [rsp + 0x4c], 0x5255b6a4
add dword [rsp + 0x4c], 0x2ae69b21
add dword [rsp + 0x4c], 0x940f5afc
mov byte [rsp + 0x3a], 0x12
add byte [rsp + 0x3a], 0x69
sub byte [rsp + 0x3a], 0x4e
xor byte [rsp + 0x3a], 0x39
xor byte [rsp + 0x3a], 0x4c
sub byte [rsp + 0x3a], 1
add byte [rsp + 0x3a], 0x9f
mov dword [rsp + 0x50], 0x3cf1631b
add dword [rsp + 0x50], 0x1584fb31
xor dword [rsp + 0x50], 0xa114dea
sub dword [rsp + 0x50], 0xa12aa1d
sub dword [rsp + 0x50], 0x39660d05
sub dword [rsp + 0x50], 0x14ed5d0e
mov edx, esi
nop
movzx eax, word [rsp + rdx*2 + 0x3c]
movzx ecx, byte [rsp + rdx + 0x30]
add cx, ax
mov word [rsp + rdx*2 + 0x3c], cx
mov byte [rsp + rdx + 0x30], 0x33
xor byte [rsp + rdx + 0x30], 0x26
sub byte [rsp + rdx + 0x30], 0x13
add byte [rsp + rdx + 0x30], 0x51
sub byte [rsp + rdx + 0x30], 0xc
sub byte [rsp + rdx + 0x30], 0x34
sub byte [rsp + rdx + 0x30], 0x13
inc rdx
cmp rdx, 0xb
jb 0x140191aea
xor r8d, r8d
lea rdx, [rsp + 0x3c]
xchg rcx, r10
mov r10, r9
xchg r10, rcx
call fcn.14019a240
mov qword [r14], rax
mov rax, rsi
nop word [rax + rax]
mov byte [rsp + rax + 0x3c], 0x17
add byte [rsp + rax + 0x3c], 0x36
xor byte [rsp + rax + 0x3c], 0x4b
add byte [rsp + rax + 0x3c], 0x38
sub byte [rsp + rax + 0x3c], 0x1b
xor byte [rsp + rax + 0x3c], 0xe
sub byte [rsp + rax + 0x3c], 0x2d
inc rax
cmp rax, 0x16
jb 0x140191b52
mov word [r14 + 0x20], si
call fcn.1401990f0
lea rcx, [0x140003e38]
mov qword [rbp - 0x20], rcx
lea rcx, [0x140193540]
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x20]
xchg rcx, r14
mov qword [rbp + 0x18], r14
xchg rcx, r14
lea r9, [rbp - 0x20]
xchg r14, r8
mov r14, r8
xchg r8, r14
mov rdx, qword [r14]
xchg rcx, rdx
mov rdx, rax
xchg rcx, rdx
call fcn.140198420
mov word [rbp + 0x20], si
xor edx, edx
mov r8d, 0x16c080f2
add r8d, 0x1200ee7e
add r8d, 0x1e3b5642
add r8d, 0x2718afd6
sub r8d, 0x2b84c36e
xor r8d, 0x2511f2bb
xor r8d, 0x6781405f
lea rcx, [rbp + 0x22]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x76], 0x797afb01
xor dword [rsp + 0x76], 0x22ae2fe6
add dword [rsp + 0x76], 0xd4e9238
sub dword [rsp + 0x76], 0x1939fcf5
add dword [rsp + 0x76], 0x258337a6
sub dword [rsp + 0x76], 0x46d4fd81
xor dword [rsp + 0x76], 0x634668c9
xor dword [rsp + 0x76], 0xbb273a70
mov dword [rbp - 0x70], 0x58d85a1e
sub dword [rbp - 0x70], 0x548c2e82
add dword [rbp - 0x70], 0x1ccdc119
add dword [rbp - 0x70], 0x1fca6947
add dword [rbp - 0x70], 0x85d0c70
xor dword [rbp - 0x70], 0xb6399d23
mov dword [rbp - 0x6c], 0x6d29612e
sub dword [rbp - 0x6c], 0x6fc39aa
add dword [rbp - 0x6c], 0x45cf18
sub dword [rbp - 0x6c], 0x22902579
xor dword [rbp - 0x6c], 0x28a48467
sub dword [rbp - 0x6c], 0x6b2fdf70
add dword [rbp - 0x6c], 0x14001ba1
xor dword [rbp - 0x6c], 0xeb656e04
mov dword [rsp + 0x7a], 0x1ed917ba
add dword [rsp + 0x7a], 0x88bb0f1
xor dword [rsp + 0x7a], 0x23de1ac1
xor dword [rsp + 0x7a], 0x6f70adcf
xor dword [rsp + 0x7a], 0x162837a2
sub dword [rsp + 0x7a], 0x73262104
add dword [rsp + 0x7a], 0x3dc4b0c4
xor dword [rsp + 0x7a], 0x918b5a5
add dword [rsp + 0x7a], 0xb55e9494
mov dword [rbp - 0x68], 0x2f306de4
xor dword [rbp - 0x68], 0x494535d5
add dword [rbp - 0x68], 0x12452283
xor dword [rbp - 0x68], 0x37caa97d
sub dword [rbp - 0x68], 0x32917717
xor dword [rbp - 0x68], 0x4e1e99a1
xor dword [rbp - 0x68], 0xadae3a6b
mov dword [rbp - 0x64], 0x49b111c1
sub dword [rbp - 0x64], 0x98bb678
sub dword [rbp - 0x64], 0x333bf3cf
add dword [rbp - 0x64], 0x1b8e16cc
add dword [rbp - 0x64], 0x1b50537f
add dword [rbp - 0x64], 0x2e3c9854
add dword [rbp - 0x64], 0x8d7d9540
mov dword [rsp + 0x7e], 0x3ad7bdf
add dword [rsp + 0x7e], 0x6242385d
sub dword [rsp + 0x7e], 0x58b6d5e9
xor dword [rsp + 0x7e], 0x725d32b7
sub dword [rsp + 0x7e], 0x78730e05
xor dword [rsp + 0x7e], 0xf0042829
mov dword [rbp - 0x60], 0x4175c86
add dword [rbp - 0x60], 0x7b0782a5
sub dword [rbp - 0x60], 0x5ff6423c
add dword [rbp - 0x60], 0x13a1cabf
sub dword [rbp - 0x60], 0x136785b3
add dword [rbp - 0x60], 0x5dd8e846
sub dword [rbp - 0x60], 0x8882546
add dword [rbp - 0x60], 0x8ac05a7d
mov dword [rbp - 0x5c], 0x444be032
add dword [rbp - 0x5c], 0x13892da9
add dword [rbp - 0x5c], 0x1dc579f7
sub dword [rbp - 0x5c], 0x35c3ce8
sub dword [rbp - 0x5c], 0x10af968a
xor dword [rbp - 0x5c], 0x6d26ed72
add dword [rbp - 0x5c], 0xff3de6c
xor dword [rbp - 0x5c], 0xe3edc806
mov dword [rbp - 0x7e], 0x32b62cb3
xor dword [rbp - 0x7e], 0x54fbb2a0
xor dword [rbp - 0x7e], 0x41111442
xor dword [rbp - 0x7e], 0x55549c26
sub dword [rbp - 0x7e], 0x2eca6b14
sub dword [rbp - 0x7e], 0x3bb213ae
add dword [rbp - 0x7e], 0xef6b5f41
mov dword [rbp - 0x58], 0x47d7b7f1
sub dword [rbp - 0x58], 0x41180c55
sub dword [rbp - 0x58], 0x5def213
add dword [rbp - 0x58], 0x7e1a65be
xor dword [rbp - 0x58], 0x632bb957
xor dword [rbp - 0x58], 0x5a44a881
add dword [rbp - 0x58], 0x1fcf3af0
add dword [rbp - 0x58], 0x97eab5a9
mov dword [rbp - 0x54], 0x57874d22
xor dword [rbp - 0x54], 0x7d9f7a44
sub dword [rbp - 0x54], 0x7d94c5f
add dword [rbp - 0x54], 0x5ceb41bc
xor dword [rbp - 0x54], 0x13d4935b
add dword [rbp - 0x54], 0x92753fde
mov dword [rbp - 0x7a], 0x641f0f0
xor dword [rbp - 0x7a], 0x7712719e
xor dword [rbp - 0x7a], 0x37da8a7d
sub dword [rbp - 0x7a], 0x1befabb5
xor dword [rbp - 0x7a], 0x53c04277
sub dword [rbp - 0x7a], 0x5ee0afca
add dword [rbp - 0x7a], 0xc11f26a
add dword [rbp - 0x7a], 0xd06c972d
mov dword [rbp - 0x50], 0x29b3e1a0
add dword [rbp - 0x50], 0x23085557
add dword [rbp - 0x50], 0x298c0f5e
xor dword [rbp - 0x50], 0x5e0042de
xor dword [rbp - 0x50], 0x6c26ede4
xor dword [rbp - 0x50], 0x12ec2db8
sub dword [rbp - 0x50], 0x1305731d
xor dword [rbp - 0x50], 0x48cb339
add dword [rbp - 0x50], 0xb7871cec
mov dword [rbp - 0x4c], 0x67b7df64
xor dword [rbp - 0x4c], 0x4b13c33d
add dword [rbp - 0x4c], 0x6c69f0a
sub dword [rbp - 0x4c], 0x271b30cd
add dword [rbp - 0x4c], 0xc61f30f
add dword [rbp - 0x4c], 0x5f28ce86
add dword [rbp - 0x4c], 0x875fb353
mov dword [rbp - 0x76], 0x318b0366
add dword [rbp - 0x76], 0x333c65b3
add dword [rbp - 0x76], 0xbc55442
add dword [rbp - 0x76], 0xce401fa
sub dword [rbp - 0x76], 0x467de412
xor dword [rbp - 0x76], 0x7f17d138
xor dword [rbp - 0x76], 0xbf13fc8d
mov dword [rbp - 0x48], 0x4b1c303d
sub dword [rbp - 0x48], 0x11725567
add dword [rbp - 0x48], 0x37ee2c2d
xor dword [rbp - 0x48], 0x2a99424f
xor dword [rbp - 0x48], 0x57e482ad
add dword [rbp - 0x48], 0x1ae10b06
add dword [rbp - 0x48], 0x3cfdc3d5
xor dword [rbp - 0x48], 0x9bfc6981
mov dword [rbp - 0x44], 0x67138888
sub dword [rbp - 0x44], 0x4e656817
add dword [rbp - 0x44], 0x28972a4c
sub dword [rbp - 0x44], 0x2cbcc87c
add dword [rbp - 0x44], 0x6175fd3e
sub dword [rbp - 0x44], 0x14a2df73
sub dword [rbp - 0x44], 0x51c23bc1
add dword [rbp - 0x44], 0x12edc4f1
xor dword [rbp - 0x44], 0xdde9d613
xor eax, eax
mov word [rbp - 0x40], ax
xchg rsi, rdx
mov rsi, rdx
xchg rsi, rdx
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 - 0x70]
movzx ecx, byte [rsp + rdx + 0x76]
add cx, ax
mov word [rbp + rdx*2 - 0x70], cx
mov byte [rsp + rdx + 0x76], 0x58
xor byte [rsp + rdx + 0x76], 0x4c
add byte [rsp + rdx + 0x76], 0x49
sub byte [rsp + rdx + 0x76], 4
sub byte [rsp + rdx + 0x76], 0x3a
sub byte [rsp + rdx + 0x76], 0x15
add byte [rsp + rdx + 0x76], 0x23
sub byte [rsp + rdx + 0x76], 0x2d
inc rdx
cmp rdx, 0x18
jb 0x140191ff4
mov r8d, 0x1d78dbdd
xor r8d, 0x227542b3
add r8d, 0x2ccf23ca
xor r8d, 0x472eb048
xor r8d, 0x638a2615
add r8d, 0x2527e1bb
xor r8d, 0x4986e7f9
sub r8d, 0x3d26eaa7
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, rsi
nop word [rax + rax]
mov byte [rbp + rax - 0x70], 0x1c
add byte [rbp + rax - 0x70], 0x28
add byte [rbp + rax - 0x70], 0x2d
sub byte [rbp + rax - 0x70], 0x5b
xor byte [rbp + rax - 0x70], 0x78
add byte [rbp + rax - 0x70], 1
sub byte [rbp + rax - 0x70], 0x6f
inc rax
cmp rax, 0x30
jb 0x14019208c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.140193da0
neg al
sbb r15d, r15d
and r15d, 4
movabs rdi, 0x85239363f5e26
add rdi, 0x1d31affd
add rdi, 0xebcab6a
add rdi, 0x8926f73
sub rdi, 0x104a3734
xor rdi, 0x210ba6f5
sub rdi, 0x108024d0
movabs rbx, 0xc56292c66164b
add rbx, 0x191309e9
xor rbx, 0x33cf7c2b
sub rbx, 0x73d0a7b
sub rbx, 0x3f5a7215
xor rbx, 0x1b5469a
add rbx, 0x3329487
add rbx, 0x4e3b64ba
cmp qword [0x1402160c0], rdi
je 0x14019235d
mov rax, qword [0x1402160d0]
cmp rax, rbx
je 0x14019235d
cmp byte [0x1402170a0], 0
jne 0x1401921c6
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x1401932d0]
mov ecx, 0x2b0e83ae
sub ecx, 0x6fe4216
add ecx, 0x2f43a50b
sub ecx, 0x49f2c1bd
add ecx, 0x36ec95b0
sub ecx, 0x18e3bec3
add ecx, 0x16e5bb99
xor ecx, 0x3e4fb76d
call rax
mov ecx, 0x16077c9a
sub ecx, 0x12ceccab
add ecx, 0x29076b78
add ecx, 0x3c44f4d2
sub ecx, 0x3bb13f68
add ecx, 0x4f5e381e
sub ecx, 0x18e72f35
sub ecx, 0x3461e6a4
xor ecx, 0x2ee8f317
call fcn.1401fcb4c
mov rdi, rax
movabs rax, 0x5823597344ed420
sub rax, 0x1bd57f3f
add rax, 0x26cd59f2
add rax, 0x3de460f2
xor rax, 0x7054832b
add rax, 0x7fffffff
add rax, 0x64125e0a
xchg r11, rbx
mov r11, qword [r14 + 0x58]
xchg rbx, r11
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
mov rcx, rdi
movabs rax, 0x582359208135444
add rax, 0x6140fb02
sub rax, 0x2ddd203a
xor rax, 0x4f64344d
sub rax, 0x2977720b
xor rax, 0x527a33f4
add rax, 0x5f63d797
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
xchg rcx, rsi
mov qword [rbp - 0x38], rsi
xchg rcx, rsi
lea rdx, [rbp - 0x38]
lea rcx, [0x140217090]
call fcn.140029e00
mov qword [rax], rbx
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x20]
call rdi
movabs rbx, 0xc562918ac62a6
xor rbx, 0x2e6200b5
add rbx, 0x29c3df78
xor rbx, 0x430c0a4c
xor rbx, 0x3e84dfa2
xor rbx, 0x54cd58e1
add rbx, 0x4d2307e
add rbx, 0x76ed484
add rbx, 0x7fffffff
sub rbx, 0x52ff3f2f
movabs rdi, 0x852392de5ab1d
add rdi, 0xabb5380
add rdi, 0x2b822451
xor rdi, 0x7bfb5dfe
add rdi, 0x4f676060
sub rdi, 0x441ad07
jmp 0x1401923c8
movabs rcx, 0x564336db6
add rcx, 0x151ce8f1
sub rcx, 0x2a503c99
sub rcx, 0x2cf24d08
xor rcx, 0x18f2b0c0
add rcx, 0x4ed51ae8
xchg rdx, rax
mov rdx, qword [r14 + 0x58]
xchg rdx, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x20]
call rax
xchg rdi, rax
mov qword [r14 + 8], rdi
xchg rdi, rax
test rax, rax
je 0x140192824
mov dword [rbp + 0x170], 0x7dbb64e4
sub dword [rbp + 0x170], 0x654ee8e
sub dword [rbp + 0x170], 0x34906d00
xor dword [rbp + 0x170], 0x6fbf040b
add dword [rbp + 0x170], 0x426ff8fb
xor dword [rbp + 0x170], 0x38a51f66
xor dword [rbp + 0x170], 0x7ab3a955
xor dword [rbp + 0x170], 0x2dcfb063
mov dword [rsp + 0x20], 0x42dd0ca2
sub dword [rsp + 0x20], 0x2738b02e
sub dword [rsp + 0x20], 0x4a19584
add dword [rsp + 0x20], 0x30651120
xor dword [rsp + 0x20], 0x6f14732a
xor dword [rsp + 0x20], 0x121bf26a
sub dword [rsp + 0x20], 0x3a68594c
lea r9, [rbp + 0x170]
mov r8d, 0x9e226b1
xor r8d, 0x1b5376c6
xor r8d, 0x4fa6ab82
xor r8d, 0x710e5844
add r8d, 0x11e7aadf
add r8d, 0x22765f14
xor r8d, 0x74fc6e28
xor r8d, 0x5bcc0127
sub r8d, 0x4f47c2a8
xchg rbx, rax
mov rdx, rbx
xchg rbx, rax
lea rcx, [r14 + 0xd8]
call fcn.140192cf0
mov r15, qword [r14 + 8]
cmp qword [0x1402160c0], rdi
je 0x14019269c
mov rax, qword [0x1402160d0]
cmp rax, rbx
je 0x14019269c
cmp byte [0x1402170a0], 0
jne 0x140192542
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x1401932d0]
mov ecx, 0x25a51164
xor ecx, 0x4348740d
xor ecx, 0x26597d36
sub ecx, 0x139da395
xor ecx, 0x5eae8b9
sub ecx, 0xdb93eca
xor ecx, 0x308b2476
xor ecx, 0x2bc879de
call rax
mov ecx, 0x410a9f34
sub ecx, 0xec2f0fe
sub ecx, 0x1d991523
xor ecx, 0x7a36e93e
xor ecx, 0x12c92355
sub ecx, 0x148b7576
xor ecx, 0x67c5de03
call fcn.1401fcb4c
xchg rdx, rax
mov rdi, rdx
xchg rdx, rax
movabs rax, 0x58235966fea65e1
sub rax, 0x49be0c53
add rax, 0x54b5a605
sub rax, 0x577fe9d6
add rax, 0x2e2b512a
add rax, 0x18f1ca44
xchg rbx, rcx
mov rcx, qword [r14 + 0x68]
xchg rbx, rcx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
mov rdx, rdi
movabs rax, 0x58235923da1751d
xor rax, 0xedc4c26
add rax, 0x18c6e9f4
add rax, 0x10b807a5
sub rax, 0x2e2bb280
xor rax, 0xfb93e17
add rax, 0x274bc962
add rax, 0x1cb2d6d4
xor rax, 0x1d229420
push rdx
xor edx, eax
push rdx
xor rdx, qword [rsp + 8]
shr rdx, 0x20
ror rax, 0x20
xor edx, eax
ror rax, 0x20
shl rdx, 0x20
xor rdx, qword [rsp]
add rsp, 0x10
xchg rdx, r8
mov qword [rbp - 0x30], r8
xchg r8, rdx
lea rdx, [rbp - 0x30]
lea rcx, [0x140217090]
call fcn.140029e00
xchg rdi, rbx
mov qword [rax], rdi
xchg rbx, rdi
mov r8d, 0x17188fc0
add r8d, 0x64d7c705
sub r8d, 0x57a6207b
add r8d, 0x11e82b57
sub r8d, 0x85da4a1
add r8d, 0x31aa436d
xor r8d, 0x394179cf
xor r8d, 0x663e7819
xor r9d, r9d
xchg rdx, r12
mov r12, r13
xchg r12, rdx
mov rcx, r15
call rdi
jmp 0x140192737
movabs rcx, 0x46fdced86
add rcx, 0x51d6b88
sub rcx, 0x2eb408f5
add rcx, 0x2495f95
sub rcx, 0x18234bff
sub rcx, 0x1e32203d
mov rax, qword [r14 + 0x68]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov r8d, 0x52e354b0
xor r8d, 0x50230ff2
xor r8d, 0x437af5c9
sub r8d, 0x2b60162c
xor r8d, 0x76301709
xor r8d, 0x3e4a50f2
sub r8d, 0x5e20dde9
xor r9d, r9d
xchg r13, rdx
mov r13, rdx
xchg rdx, r13
xchg rbx, r15
mov rcx, rbx
xchg r15, rbx
call rax
xchg r15, rax
mov qword [r14 + 0x10], r15
xchg r15, rax
test rax, rax
je 0x140192824
call fcn.140193da0
test al, al
je 0x140192824
mov dword [rbp + 0x178], 0x6d8d13f6
sub dword [rbp + 0x178], 0x69cdfe15
add dword [rbp + 0x178], 0x2968e583
sub dword [rbp + 0x178], 0x21c84027
xor dword [rbp + 0x178], 0x45a199f5
add dword [rbp + 0x178], 0x97b417f
xor dword [rbp + 0x178], 0x77211c99
sub dword [rbp + 0x178], 0x2f5878db
mov dword [rsp + 0x20], 0x44613fba
add dword [rsp + 0x20], 0x2df4c92e
sub dword [rsp + 0x20], 0x2ba105ba
sub dword [rsp + 0x20], 0x7ba9e0a
xor dword [rsp + 0x20], 0x47a892c1
xor dword [rsp + 0x20], 0x71ddf302
xor dword [rsp + 0x20], 0x88f04e3
lea r9, [rbp + 0x178]
mov r8d, 0x171015dc
add r8d, 0x3b3d8c64
add r8d, 0x3c9945
sub r8d, 0x51d29798
xor r8d, 0x60d3c2c3
sub r8d, 0x2d496ec7
xor r8d, 0x331af211
mov rdx, qword [r14 + 0x10]
lea rcx, [r14 + 0xd8]
call fcn.140192cf0
cmp qword [r14 + 8], 0
je 0x14019283a
cmp qword [r14 + 0x10], 0
jne 0x140192844
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r14 + 0x18], eax
call fcn.1401990f0
mov r9, rax
mov dword [rsp + 0x54], 0x505468c7
xor dword [rsp + 0x54], 0x52344b56
add dword [rsp + 0x54], 0x61419f8e
add dword [rsp + 0x54], 0xdd48a94
xor dword [rsp + 0x54], 0x21ed4fba
add dword [rsp + 0x54], 0x1788291f
sub dword [rsp + 0x54], 0x42c72cc5
xor dword [rsp + 0x54], 0xd3ad0895
mov dword [rsp + 0x60], 0x12e00bc0
add dword [rsp + 0x60], 0x39c99f17
sub dword [rsp + 0x60], 0xfb62f94
xor dword [rsp + 0x60], 0x44da9481
sub dword [rsp + 0x60], 0x69368ab5
add dword [rsp + 0x60], 0x6abdd41e
xor dword [rsp + 0x60], 0x67b8b55a
add dword [rsp + 0x60], 0x2fca12ac
add dword [rsp + 0x60], 0xb1a56051
mov dword [rsp + 0x64], 0x7a074954
sub dword [rsp + 0x64], 0x68d51f48
add dword [rsp + 0x64], 0x6e60009d
sub dword [rsp + 0x64], 0x683ebedd
add dword [rsp + 0x64], 0x2e386732
add dword [rsp + 0x64], 0xb9e02c7f
mov dword [rsp + 0x58], 0x55eb612f
sub dword [rsp + 0x58], 0x9c57167
add dword [rsp + 0x58], 0x78c90cc
sub dword [rsp + 0x58], 0x49c47aec
xor dword [rsp + 0x58], 0x4070cbe3
add dword [rsp + 0x58], 0xad5828ab
mov dword [rsp + 0x68], 0x563e11df
add dword [rsp + 0x68], 0x217359ee
sub dword [rsp + 0x68], 0x2670d616
sub dword [rsp + 0x68], 0x1218fec0
add dword [rsp + 0x68], 0x2c28e588
sub dword [rsp + 0x68], 0x9f0892c
add dword [rsp + 0x68], 0x83ab133
xor dword [rsp + 0x68], 0x96e95bfc
mov dword [rsp + 0x6c], 0x799cc2f5
xor dword [rsp + 0x6c], 0x25859e3c
add dword [rsp + 0x6c], 0x39c08ba
sub dword [rsp + 0x6c], 0xbb90feb
xor dword [rsp + 0x6c], 0x19d27577
add dword [rsp + 0x6c], 0xb540de49
mov word [rsp + 0x5c], 0x5d8b
sub word [rsp + 0x5c], 0x8b3
sub word [rsp + 0x5c], 0x380c
add word [rsp + 0x5c], 0x36c8
sub word [rsp + 0x5c], 0x8bb
sub word [rsp + 0x5c], 0x2fe6
add word [rsp + 0x5c], 0x3ae8
add word [rsp + 0x5c], 0xa11b
mov dword [rsp + 0x70], 0x593bef3f
xor dword [rsp + 0x70], 0x2abff0a9
sub dword [rsp + 0x70], 0x603c62fc
xor dword [rsp + 0x70], 0x14cc14b9
xor dword [rsp + 0x70], 0x689df29b
xor dword [rsp + 0x70], 0x5609df39
sub dword [rsp + 0x70], 0x334eb74
add dword [rsp + 0x70], 0xc98c6569
xor eax, eax
mov word [rsp + 0x74], ax
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
movzx ecx, word [rsp + rax*2 + 0x60]
movzx edx, byte [rsp + rax + 0x54]
add dx, cx
mov word [rsp + rax*2 + 0x60], dx
mov byte [rsp + rax + 0x54], 0x12
xor byte [rsp + rax + 0x54], 0x29
sub byte [rsp + rax + 0x54], 0x14
add byte [rsp + rax + 0x54], 0x3e
sub byte [rsp + rax + 0x54], 0x4b
sub byte [rsp + rax + 0x54], 0xb
xor byte [rsp + rax + 0x54], 0x11
xor byte [rsp + rax + 0x54], 3
sub byte [rsp + rax + 0x54], 0x1d
inc rax
cmp rax, 0xa
jb 0x140192a2a
xor r8d, r8d
lea rdx, [rsp + 0x60]
xchg r9, rbx
mov rcx, rbx
xchg rbx, r9
call fcn.14019a240
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
nop word [rax + rax]
mov byte [rsp + rsi + 0x60], SHCreateMemStream
add byte [rsp + rsi + 0x60], 0x59
xor byte [rsp + rsi + 0x60], 0x2d
add byte [rsp + rsi + 0x60], 0x2d
xor byte [rsp + rsi + 0x60], 0x29
sub byte [rsp + rsi + 0x60], 0x1b
add byte [rsp + rsi + 0x60], 0x36
sub byte [rsp + rsi + 0x60], 0x7a
inc rsi
cmp rsi, 0x14
jb 0x140192a9d
call fcn.1401990f0
mov r8d, 0x55884d06
xor r8d, 0x67052437
xor r8d, 0x187e7e3c
add r8d, 0x211da543
sub r8d, 0x6d8abec
sub r8d, 0x36d5d332
xor r8d, 0x8c2ff595
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
xchg r15, rax
mov rcx, r15
xchg r15, rax
call fcn.140198f30
movabs rcx, 0x8691b0369
sub rcx, 0x5a828e60
add rcx, 0x25f0df60
xor rcx, 0x28b915b7
add rcx, 0x494a20f1
xor rcx, 0x6290dc3
add rcx, 0x7fffffff
sub rcx, 0x60fbead9
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
xchg r12, rax
mov qword [r14 + 0x108], r12
xchg r12, rax
mov rax, r14
mov rbx, qword [rsp + 0x268]
add rsp, 0x220
nop
mov r15, qword [rsp]
add rsp, 8
push rax
push rax
push rdx
push rax
push rcx
push rcx
xchg qword [rsp + 0x30], r14
pop rcx
pop rcx
pop rax
pop rdx
pop rax
pop rax
add rsp, 8
push rax
push rcx
push rdx
push rbx
push rbx
push rbx
push rdx
xchg qword [rsp + 0x38], r13
add rsp, 0x40
push rcx
push rbx
push rax
push rdx
push rax
push rax
xchg qword [rsp + 0x30], r12
pop rax
pop rax
pop rdx
pop rax
pop rbx
pop rcx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
mov rsi, qword [rsp - 8]
push rax
push rdx
push rcx
push rax
push rcx
push rcx
push rax
xchg qword [rsp + 0x38], rbp
add rsp, 0x40
nop
add rsp, 8
jmp qword [rsp - 8]