Function at 0x140001250
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
sub rsp, 0x28
lea r10, [0x140028660]
mov r9d, ecx
mov r8d, 0x6e
nop dword [rax]
nop dword [rax + rax]
movzx edx, r8w
lea r10, [r10 + 2]
sub r8w, 0x61
cmp r8w, 0x19
lea eax, [rdx + 0x20]
cmova edx, eax
imul eax, edx, 0x1000193
xor r9d, eax
movzx eax, word [r10]
movzx r8d, ax
test ax, ax
jne 0x140001270
and r9d, 0xfffffffc
cmp r9d, 0xd54c7cf4
jne 0x140001ca2
mov qword [rsp + 0x30], rbx
xor ebx, ebx
mov qword [rsp + 0x38], rbp
mov r10d, ebx
mov qword [rsp + 0x40], rsi
mov ebp, 2
mov qword [rsp + 0x20], rdi
mov esi, 0x135
mov edi, 0xffffffff
mov dword [0x14004a1c0], ecx
mov r8d, edi
mov r9d, esi
mov r11d, ebp
nop word [rax + rax]
lea eax, [r9 + 7]
add r9d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r9d
lea r9d, [rax + rax*2]
lea eax, [r8 + 1]
add r9d, r9d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x1400012f0
lea ecx, [r8 + 7]
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r9d
mov r8d, ecx
test ecx, ecx
jle 0x14000135b
test cl, 1
jne 0x14000135b
mov eax, ecx
inc r10d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001346
mov eax, r8d
imul r10d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r10d, eax
jne 0x14000137b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x14000137e
mov rax, rbx
lea rcx, [0x140028698]
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x1400013a0
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x14000140b
test cl, 1
jne 0x14000140b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x1400013f6
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x14000142b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x14000142e
mov rax, rbx
lea rcx, str.kernel32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001450
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x1400014bb
test cl, 1
jne 0x1400014bb
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x1400014a6
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x1400014db
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x1400014de
mov rax, rbx
lea rcx, str.user32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001500
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x14000156b
test cl, 1
jne 0x14000156b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001556
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x14000158b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x14000158e
mov rax, rbx
lea rcx, str.winhttp.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x1400015b0
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x14000161b
test cl, 1
jne 0x14000161b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001606
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x14000163b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x14000163e
mov rax, rbx
lea rcx, str.advapi32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001660
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x1400016cb
test cl, 1
jne 0x1400016cb
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x1400016b6
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x1400016eb
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x1400016ee
mov rax, rbx
lea rcx, str.SspiCli.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001710
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x14000177b
test cl, 1
jne 0x14000177b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001766
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x14000179b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x14000179e
mov rax, rbx
lea rcx, str.Shell32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x1400017c0
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x14000182b
test cl, 1
jne 0x14000182b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001816
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x14000184b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x14000184e
mov rax, rbx
lea rcx, str.Ole32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001870
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x1400018db
test cl, 1
jne 0x1400018db
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x1400018c6
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x1400018fb
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x1400018fe
mov rax, rbx
lea rcx, str.OleAut32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001920
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x14000198b
test cl, 1
jne 0x14000198b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001976
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x1400019ab
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x1400019ae
mov rax, rbx
lea rcx, str.Rpcrt4.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x1400019d0
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x140001a3b
test cl, 1
jne 0x140001a3b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001a26
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x140001a5b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x140001a5e
mov rax, rbx
lea rcx, str.Crypt32.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001a80
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x140001aeb
test cl, 1
jne 0x140001aeb
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001ad6
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x140001b0b
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x140001b0e
mov rax, rbx
lea rcx, str.Shlwapi.dll
call rax
test rax, rax
je 0x140001c82
mov r10d, esi
mov r8d, edi
mov r11d, ebp
mov r9d, ebx
nop dword [rax]
lea eax, [r10 + 7]
add r10d, 0x13
cdq
lea ecx, [r8 + 2]
sub eax, edx
sar eax, 1
add eax, r11d
lea r11d, [r8 + 1]
add eax, r10d
lea r10d, [rax + rax*2]
lea eax, [r8 + 1]
add r10d, r10d
cmp eax, 3
mov r8d, 6
cmovne r8d, ecx
cmp r8d, 0xd
jl 0x140001b30
lea ecx, [r8 + 7]
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub r11d, eax
lea ecx, [rcx + r11*2]
add ecx, r10d
mov r8d, ecx
test ecx, ecx
jle 0x140001b9b
test cl, 1
jne 0x140001b9b
mov eax, ecx
inc r9d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001b86
mov eax, r8d
imul r9d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r9d, eax
jne 0x140001bbb
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
jmp 0x140001bbe
mov rax, rbx
lea rcx, str.Version.dll
call rax
test rax, rax
je 0x140001c82
mov r8d, ebx
lea eax, [rsi + 7]
add esi, 0x13
cdq
lea ecx, [rdi + 2]
sub eax, edx
sar eax, 1
add eax, ebp
lea ebp, [rdi + 1]
add eax, esi
lea esi, [rax + rax*2]
lea eax, [rdi + 1]
add esi, esi
cmp eax, 3
mov edi, 6
cmovne edi, ecx
cmp edi, 0xd
jl 0x140001bd3
mov eax, esi
cdq
sub eax, edx
sar eax, 1
sub ebp, eax
lea ecx, [rbp*2 + 7]
add ecx, edi
add ecx, esi
mov r9d, ecx
test ecx, ecx
jle 0x140001c35
nop dword [rax + rax]
test cl, 1
jne 0x140001c35
mov eax, ecx
inc r8d
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
test eax, eax
jg 0x140001c20
mov eax, r9d
imul r8d, ecx
cdq
sub eax, edx
sar eax, 1
cmp r8d, eax
jne 0x140001c56
mov edx, 0x67
lea ecx, [rdx - 0x66]
call section..text
mov rbx, rax
lea rcx, str.Dbghelp.dll
call rbx
test rax, rax
je 0x140001c82
mov eax, 1
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x20]
add rsp, 0x28
ret
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Runtime_error_occurred
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x140001c69
xor r9d, r9d
lea r8, str.Runtime_error_occurred
lea rdx, str.Updater
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add rsp, 0x28
ret