Function at 0x14010be33
Capabilities:
Encrypt data using chaskey

Disassembly:
push rax
pushf
mov eax, 0x41dc9dc7
pushf
not eax
add eax, 0x9c0faa7c
xor eax, 0xdd6f79d2
rol eax, 0x78
popf
pushf
not eax
add eax, 0xff097702
xor eax, 0x98821a8c
rol eax, 0xbb
popf
cmp eax, 0x29
jne 0x14010be70
popf
pop rax
jmp 0x14010d796
cmp eax, 0
jne 0x14010be7f
popf
pop rax
jmp 0x14010c113
cmp eax, 3
jne 0x14010be8e
popf
pop rax
jmp 0x14010c2d6
cmp eax, 1
jne 0x14010be9d
popf
pop rax
jmp 0x14010c1dd
cmp eax, 0xd
jne 0x14010beac
popf
pop rax
jmp 0x14010c877
cmp eax, 0x1a
jne 0x14010bebb
popf
pop rax
jmp 0x14010d0d3
cmp eax, 0xe
jne 0x14010beca
popf
pop rax
jmp 0x14010c91b
cmp eax, 0xb
jne 0x14010bed9
popf
pop rax
jmp 0x14010c7f4
cmp eax, 0x19
jne 0x14010bee8
popf
pop rax
jmp 0x14010d03e
cmp eax, 8
jne 0x14010bef7
popf
pop rax
jmp 0x14010c652
cmp eax, 0x2a
jne 0x14010bf06
popf
pop rax
jmp 0x14010d7e1
cmp eax, 0x17
jne 0x14010bf15
popf
pop rax
jmp 0x14010cf08
cmp eax, 0x1c
jne 0x14010bf24
popf
pop rax
jmp 0x14010d1d1
cmp eax, 0x12
jne 0x14010bf33
popf
pop rax
jmp 0x14010cb97
cmp eax, 0x18
jne 0x14010bf42
popf
pop rax
jmp 0x14010cfad
cmp eax, 0x2b
jne 0x14010bf51
popf
pop rax
jmp 0x14010d844
cmp eax, 0x1b
jne 0x14010bf60
popf
pop rax
jmp 0x14010d13e
cmp eax, 0x2d
jne 0x14010bf6f
popf
pop rax
jmp 0x14010d943
cmp eax, 0x23
jne 0x14010bf7e
popf
pop rax
jmp 0x14010d50b
cmp eax, 0x25
jne 0x14010bf8d
popf
pop rax
jmp 0x14010d5a7
cmp eax, 0xf
jne 0x14010bf9c
popf
pop rax
jmp 0x14010ca20
cmp eax, 0x13
jne 0x14010bfab
popf
pop rax
jmp 0x14010cc55
cmp eax, 0x15
jne 0x14010bfba
popf
pop rax
jmp 0x14010cdd4
cmp eax, 0x24
jne 0x14010bfc9
popf
pop rax
jmp 0x14010d543
cmp eax, 0x1e
jne 0x14010bfd8
popf
pop rax
jmp 0x14010d2a8
cmp eax, 0xc
jne 0x14010bfe7
popf
pop rax
jmp 0x14010c840
cmp eax, 0x26
jne 0x14010bff6
popf
pop rax
jmp 0x14010d64c
cmp eax, 0x27
jne 0x14010c005
popf
pop rax
jmp 0x14010d6b2
cmp eax, 0x1f
jne 0x14010c014
popf
pop rax
jmp 0x14010d2f4
cmp eax, 0x10
jne 0x14010c023
popf
pop rax
jmp 0x14010cacb
cmp eax, 0x2c
jne 0x14010c032
popf
pop rax
jmp 0x14010d8f8
cmp eax, 9
jne 0x14010c041
popf
pop rax
jmp 0x14010c71a
cmp eax, 4
jne 0x14010c050
popf
pop rax
jmp 0x14010c3a6
cmp eax, 0x16
jne 0x14010c05f
popf
pop rax
jmp 0x14010ce7b
cmp eax, 0x28
jne 0x14010c06e
popf
pop rax
jmp 0x14010d705
cmp eax, 0xa
jne 0x14010c07d
popf
pop rax
jmp 0x14010c76b
cmp eax, 0x22
jne 0x14010c08c
popf
pop rax
jmp 0x14010d41e
cmp eax, 0x14
jne 0x14010c09b
popf
pop rax
jmp 0x14010cd3d
cmp eax, 7
jne 0x14010c0aa
popf
pop rax
jmp 0x14010c609
cmp eax, 5
jne 0x14010c0b9
popf
pop rax
jmp 0x14010c44b
cmp eax, 2
jne 0x14010c0c8
popf
pop rax
jmp 0x14010c2a1
cmp eax, 0x20
jne 0x14010c0d7
popf
pop rax
jmp 0x14010d33e
cmp eax, 0x1d
jne 0x14010c0e6
popf
pop rax
jmp 0x14010d20f
cmp eax, 0x11
jne 0x14010c0f5
popf
pop rax
jmp 0x14010cb29
cmp eax, 6
jne 0x14010c104
popf
pop rax
jmp 0x14010c574
cmp eax, 0x21
jne 0x14010c113
popf
pop rax
jmp 0x14010d3e6
push rbp
push r14
push r15
sub rsp, 0x60
lea rbp, [rsp + 0x50]
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], r13
mov rax, qword [0x1400a21c0]
xor rax, rbp
mov qword [rbp], rax
movsxd rdi, r9d
mov rsi, r8
mov r15d, edx
mov r13, rcx
test r9d, r9d
jle 0x14010c197
push rax
pushf
mov eax, 0x67dec149
pushf
not eax
add eax, 0xcc58ec77
xor eax, 0xfbb6a2a6
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8051addb
xor eax, 0xaed5b753
rol eax, 0xff
popf
pushf
not eax
add eax, 0xf80e5fcd
xor eax, 0xd0c6163e
rol eax, 0xcb
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x9c50bd42
pushf
not eax
add eax, 0xea155a83
xor eax, 0x8f3cc30a
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xfcd8a494
xor eax, 0xd3091510
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xc6e9cf70
xor eax, 0xbd683926
rol eax, 0xc8
popf
jmp 0x14010be61
mov rdx, rdi
mov rcx, r8
call fcn.1402ca692
cmp eax, edi
lea edi, [rax + 1]
jl 0x14010c248
push rax
pushf
mov eax, 0xb90654e3
pushf
not eax
add eax, 0xb2d7547c
xor eax, 0xdbdfc61e
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xacc109fa
xor eax, 0xb8e786ac
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf076dc9f
xor eax, 0xa5ba36cf
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xc4fa2524
xor eax, 0xb3f3acde
rol eax, 6
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x47171a76
pushf
not eax
add eax, 0xedf9e983
xor eax, 0xf01c2993
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x80e9ab7f
xor eax, 0xa294e51d
rol eax, 0x11
popf
pushf
not eax
add eax, 0xf92fd7bc
xor eax, 0x90f9839a
rol eax, 0x53
popf
pushf
not eax
add eax, 0xf3f2e022
xor eax, 0x8d19564a
rol eax, 7
popf
jmp 0x14010be61
mov edi, eax
push rax
pushf
mov eax, 0xbd597bea
pushf
not eax
add eax, 0xc995768f
xor eax, 0xca6ba1ee
rol eax, 0x26
popf
pushf
not eax
add eax, 0x8272c41c
xor eax, 0xee9bf16a
rol eax, 0x8a
popf
jmp 0x14010be61
neg dword [rbp + 0x68]
mov r9d, edi
mov ecx, dword [rbp + 0x60]
mov r8, rsi
sbb edx, edx
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
and edx, 8
jmp 0x14010c2f3
inc edx
jmp 0x14010c2f6
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r14, eax
test eax, eax
je 0x14010c34d
push rax
pushf
mov eax, 0x34e58e44
pushf
not eax
add eax, 0xd4734cb3
xor eax, 0x94a8efa3
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x809450e8
xor eax, 0xb56e33c0
rol eax, 0x33
popf
pushf
not eax
add eax, 0xd28d3d68
xor eax, 0xf07233c3
rol eax, 0x56
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x5f37aea0
pushf
not eax
add eax, 0xda7e6b48
xor eax, 0xf26767f2
rol eax, 0x31
popf
pushf
not eax
add eax, 0xad16ed18
xor eax, 0xc0c6e091
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xf88fadf1
xor eax, 0x9d4e2c4a
rol eax, 0xb
popf
pushf
not eax
add eax, 0x8d522047
xor eax, 0xb32a9dd6
rol eax, 0xda
popf
jmp 0x14010be61
mov rdx, r14
add rdx, rdx
lea rcx, [rdx + 0x10]
cmp rdx, rcx
sbb rdx, rdx
and rdx, rcx
je 0x14010c3f2
push rax
pushf
mov eax, 0xc18cd015
pushf
not eax
add eax, 0xfc65341c
xor eax, 0xdb1daa52
rol eax, 0xea
popf
pushf
not eax
add eax, 0xdd88714c
xor eax, 0xc34f1dc4
rol eax, 8
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xfb9e2c8a
pushf
not eax
add eax, 0xaafd858e
xor eax, 0x9b33eeb2
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa56ac1de
xor eax, 0xf70c637f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xe71765ea
xor eax, 0x8b148dba
rol eax, 0x98
popf
pushf
not eax
add eax, 0xbb65455f
xor eax, 0xc3932779
rol eax, 0xe4
popf
jmp 0x14010be61
movabs rcx, 0xdcf9749d746326ca
pushf
not rcx
add rcx, 0x6b0aae18
xor rcx, 0x5c4107d1
rol rcx, 0x34
popf
pushf
not rcx
add rcx, 0x722dd824
xor rcx, 0x47ff4ef2
rol rcx, 0x5d
popf
pushf
not rcx
add rcx, 0x7d00ddb4
xor rcx, 0x545123c1
rol rcx, 0x2e
popf
pushf
not rcx
add rcx, 0x6f419ecd
xor rcx, 0x4d843bcd
rol rcx, 0xdf
popf
cmp rdx, 0x400
ja 0x14010c51b
push rax
pushf
mov eax, 0xbe2b93d1
pushf
not eax
add eax, 0x81546769
xor eax, 0x9c6a1d29
rol eax, 0x40
popf
pushf
not eax
add eax, 0xf5a12c19
xor eax, 0xe1cfbac6
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xdb666f5c
xor eax, 0xe429c3c6
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf7726582
xor eax, 0xcb3262a1
rol eax, 0x6f
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xdbe6ccf9
pushf
not eax
add eax, 0x83570811
xor eax, 0xad9876ea
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xd09bcb1b
xor eax, 0xb79a1477
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8f677bb0
xor eax, 0x8b5d449c
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xaec6880d
xor eax, 0x8beb5ba8
rol eax, 0x45
popf
jmp 0x14010be61
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x14010c5d6
push rax
pushf
mov eax, 0x3203bd71
pushf
not eax
add eax, 0xf8a0f140
xor eax, 0xbeb08bdb
rol eax, 0xed
popf
pushf
not eax
add eax, 0xe4e3c3b8
xor eax, 0xd4b2e5b4
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xab5b0d80
xor eax, 0xb26fb2a7
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xe4d4fa67
xor eax, 0x83d50a5e
rol eax, 0x3b
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xcd1e6236
pushf
not eax
add eax, 0x95409802
xor eax, 0xaf53c63e
rol eax, 0x99
popf
pushf
not eax
add eax, 0xc3022f7c
xor eax, 0xd8b34b94
rol eax, 0x6c
popf
jmp 0x14010be61
mov rax, rcx
push rax
pushf
mov eax, 0x6fd86fa3
pushf
not eax
add eax, 0xfb538454
xor eax, 0xe6645bfa
rol eax, 5
popf
pushf
not eax
add eax, 0xfcf0213c
xor eax, 0xc4815da4
rol eax, 0x84
popf
pushf
not eax
add eax, 0xa87d3601
xor eax, 0xd0068157
rol eax, 0xf7
popf
jmp 0x14010be61
and rax, 0xfffffffffffffff0
call fcn.14022fed3
sub rsp, rax
lea rbx, [rsp + 0x50]
test rbx, rbx
je 0x14010c6c1
push rax
pushf
mov eax, 0x38df84d1
pushf
not eax
add eax, 0x86f6190c
xor eax, 0xc7b1d92b
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xd63ce820
xor eax, 0x9710a49b
rol eax, 0x93
popf
pushf
not eax
add eax, 0xbb1c4a41
xor eax, 0xaf87b9e5
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xdfe04ccc
xor eax, 0x80b7d25e
rol eax, 0x1f
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x129360e6
pushf
not eax
add eax, 0x85448eee
xor eax, 0x963a9d80
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x845433ff
xor eax, 0xb9652eaa
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xd8f92168
xor eax, 0xc8721b38
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xd2669778
xor eax, 0x8c5673fa
rol eax, 0x4a
popf
jmp 0x14010be61
mov dword [rbx], 0xcccc
jmp 0x14010c840
mov rcx, rdx
call fcn.140155ca3
mov rbx, rax
test rax, rax
je 0x14010c7ae
push rax
pushf
mov eax, 0xa5064f89
pushf
not eax
add eax, 0xc4531e68
xor eax, 0x99df0d77
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xf0047bc8
xor eax, 0xa0f5d5bb
rol eax, 0xdf
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xfcaaf468
pushf
not eax
add eax, 0xc7610824
xor eax, 0xd92d8e6d
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8b16e8ad
xor eax, 0xc61cc89f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa65ce4fc
xor eax, 0xb1592a60
rol eax, 0xc4
popf
jmp 0x14010be61
mov dword [rax], 0xdddd
push rax
pushf
mov eax, 0x15d7d8fa
pushf
not eax
add eax, 0xd3891e02
xor eax, 0xebe67c64
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xc1f5a9f4
xor eax, 0xb82053c5
rol eax, 0xe
popf
pushf
not eax
add eax, 0x969b87e9
xor eax, 0xf25acce6
rol eax, 0x9c
popf
jmp 0x14010be61
add rbx, 0x10
push rax
pushf
mov eax, 0x7f21f6de
pushf
not eax
add eax, 0xce0b4126
xor eax, 0xd7b6f9f7
rol eax, 0x17
popf
pushf
not eax
add eax, 0x824524d7
xor eax, 0xb3f874fd
rol eax, 0x47
popf
jmp 0x14010be61
test rbx, rbx
je 0x14010c8c2
push rax
pushf
mov eax, 0xb69142ca
pushf
not eax
add eax, 0xfddf0825
xor eax, 0xf4a98fe7
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf613a8aa
xor eax, 0xc8f7481a
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xbf634712
xor eax, 0xfeb3925b
rol eax, 0x1c
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x9dc9e062
pushf
not eax
add eax, 0x9fb9441b
xor eax, 0x9b412401
rol eax, 0x39
popf
pushf
not eax
add eax, 0x9f4e4a02
xor eax, 0xd94b5cc4
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xfb2ac332
xor eax, 0x99b003d4
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xc65172e8
xor eax, 0xd019f3a6
rol eax, 0x30
popf
jmp 0x14010be61
mov ecx, dword [rbp + 0x60]
mov r9d, edi
mov dword [rsp + 0x28], r14d
mov r8, rsi
mov edx, 0x75566f0
pushf
not edx
add edx, 0xc92f52e7
xor edx, 0x9928ed5d
rol edx, 0xaf
popf
pushf
not edx
add edx, 0x8cd4ee4a
xor edx, 0xf559145b
rol edx, 0xc6
popf
pushf
not edx
add edx, 0xf4b80ed6
xor edx, 0xe4532c14
rol edx, 0x4c
popf
pushf
not edx
add edx, 0xad1dc97c
xor edx, 0x951da8a4
rol edx, 0xdb
popf
mov qword [rsp + 0x20], rbx
jmp 0x14010c988
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edi, edi
test eax, eax
jne 0x14010c9c7
push rax
pushf
mov eax, 0x3c5e909f
pushf
not eax
add eax, 0x8bf662b9
xor eax, 0xa16829e2
rol eax, 0x84
popf
pushf
not eax
add eax, 0xcff5aa23
xor eax, 0xdff5d664
rol eax, 0x56
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x773c8a72
pushf
not eax
add eax, 0x841335ff
xor eax, 0xeae177f5
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xa6d543b5
xor eax, 0xff247e1e
rol eax, 8
popf
pushf
not eax
add eax, 0x9cc71234
xor eax, 0xf94677b2
rol eax, 0x53
popf
pushf
not eax
add eax, 0x8a18cff5
xor eax, 0xa7709922
rol eax, 0x3f
popf
jmp 0x14010be61
lea rcx, [rbx - 0x10]
cmp dword [rcx], 0xdddd
jne 0x14010ca85
push rax
pushf
mov eax, 0x11ad24be
pushf
not eax
add eax, 0xeb20c5d8
xor eax, 0x86877c56
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x93626ed6
xor eax, 0xe7eec3d5
rol eax, 0xee
popf
pushf
not eax
add eax, 0xb3d32fc7
xor eax, 0xe812e95e
rol eax, 0x44
popf
pushf
not eax
add eax, 0xcec830da
xor eax, 0xc5cab03d
rol eax, 0x60
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xceac918b
pushf
not eax
add eax, 0xd1129445
xor eax, 0xebc44f2f
rol eax, 0xac
popf
pushf
not eax
add eax, 0xa4c211ae
xor eax, 0xe45eb07c
rol eax, 0x65
popf
pushf
not eax
add eax, 0xfea8e17d
xor eax, 0x96e67389
rol eax, 8
popf
jmp 0x14010be61
call fcn.14028bc9d
push rax
pushf
mov eax, 0x9b02beb
pushf
not eax
add eax, 0xdea7f777
xor eax, 0xaa6f6e32
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x9c716277
xor eax, 0xee637d62
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xd457765d
xor eax, 0x82d8670a
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xe5ac2ae6
xor eax, 0x994961c3
rol eax, 0xee
popf
jmp 0x14010be61
xor eax, eax
mov rcx, qword [rbp]
xor rcx, rbp
call fcn.14021cfd0
mov rbx, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x40]
mov r13, qword [rbp + 0x48]
lea rsp, [rbp + 0x10]
pop r15
pop r14
pop rbp
ret
mov qword [rsp + 0x40], rdi
mov r9d, r14d
mov qword [rsp + 0x38], rdi
mov r8, rbx
mov qword [rsp + 0x30], rdi
mov edx, r15d
mov dword [rsp + 0x28], edi
mov rcx, r13
mov qword [rsp + 0x20], rdi
jmp 0x14010cbbc
call qword [sym.imp.KERNEL32.dll_LCMapStringEx]
movsxd rsi, eax
test eax, eax
je 0x14010cbfc
push rax
pushf
mov eax, 0x3691ba87
pushf
not eax
add eax, 0x8d984ef4
xor eax, 0xa4f63617
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf28f2162
xor eax, 0xf152f8c3
rol eax, 0xaa
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xbc6f72f3
pushf
not eax
add eax, 0xb4179c60
xor eax, 0xfb885646
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xd4a43942
xor eax, 0xae80a92f
rol eax, 0x62
popf
pushf
not eax
add eax, 0x9cc0ef83
xor eax, 0xe9556cce
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xaaefec4e
xor eax, 0xb7329f76
rol eax, 0x1b
popf
jmp 0x14010be61
mov edx, 0xbacacb5a
pushf
not edx
add edx, 0xe40987ec
xor edx, 0x8b6e5e5d
rol edx, 0xc1
popf
pushf
not edx
add edx, 0xe6f9b68f
xor edx, 0xc0ddb3c8
rol edx, 0x5b
popf
pushf
not edx
add edx, 0xad6dcbb5
xor edx, 0xc259799a
rol edx, 0xca
popf
test edx, r15d
je 0x14010cce4
push rax
pushf
mov eax, 0x345f19d1
pushf
not eax
add eax, 0x928c543b
xor eax, 0xa887638e
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xde84fa42
xor eax, 0xd2d891c4
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xef535aa0
xor eax, 0xd5750a7c
rol eax, 0xd2
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x73be1ef4
pushf
not eax
add eax, 0xa5a77227
xor eax, 0xf49bfd60
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x8b3f960d
xor eax, 0x9f949310
rol eax, 0x36
popf
pushf
not eax
add eax, 0xf91f3e90
xor eax, 0xdc6d1622
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xb16a5acc
xor eax, 0x8c812607
rol eax, 0x32
popf
jmp 0x14010be61
mov eax, dword [rbp + 0x58]
test eax, eax
je 0x14010cd7b
push rax
pushf
mov eax, 0xcdfd753f
pushf
not eax
add eax, 0x82819451
xor eax, 0xa62407cd
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x99cc8409
xor eax, 0xedc96886
rol eax, 0xc5
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x4bfa461b
pushf
not eax
add eax, 0xa01fe2ee
xor eax, 0xca472cb3
rol eax, 0x18
popf
pushf
not eax
add eax, 0xe393d666
xor eax, 0xea1accd4
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x94285e58
xor eax, 0xfe56f085
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb94952c0
xor eax, 0x90c3ef82
rol eax, 0x9e
popf
jmp 0x14010be61
cmp esi, eax
jg 0x14010ce22
push rax
pushf
mov eax, 0xfc91699a
pushf
not eax
add eax, 0xc011f99d
xor eax, 0xdc73963f
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xbd515dad
xor eax, 0xe7053af1
rol eax, 0x19
popf
pushf
not eax
add eax, 0xba67e045
xor eax, 0xf0086eee
rol eax, 0x76
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x6392118
pushf
not eax
add eax, 0xf29168b8
xor eax, 0x92e17f9d
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xcea1df9d
xor eax, 0xfa827f9b
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb825ef03
xor eax, 0xa0a22e27
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x8b0b36e3
xor eax, 0xb357578c
rol eax, 0x73
popf
jmp 0x14010be61
mov qword [rsp + 0x40], rdi
mov r9d, r14d
mov qword [rsp + 0x38], rdi
mov r8, rbx
mov qword [rsp + 0x30], rdi
mov edx, r15d
mov dword [rsp + 0x28], eax
mov rcx, r13
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
jmp 0x14010cea4
call qword [sym.imp.KERNEL32.dll_LCMapStringEx]
jmp 0x14010d7e1
mov rcx, rsi
add rcx, rcx
lea rax, [rcx + 0x10]
cmp rcx, rax
sbb rcx, rcx
and rcx, rax
je 0x14010cf7a
push rax
pushf
mov eax, 0xd415f250
pushf
not eax
add eax, 0xc4069863
xor eax, 0xc4cb55d2
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x9c547136
xor eax, 0xc6ab8b5e
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x83172360
xor eax, 0xd5626d5f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xe499ff0a
xor eax, 0xff91c029
rol eax, 0xf3
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x20104391
pushf
not eax
add eax, 0x848a1a28
xor eax, 0xc26ea46a
rol eax, 0x61
popf
pushf
not eax
add eax, 0x9702422b
xor eax, 0xcad35c3b
rol eax, 2
popf
jmp 0x14010be61
cmp rcx, rdx
ja 0x14010cfe5
push rax
pushf
mov eax, 0xe4eab76b
pushf
not eax
add eax, 0xc51b0793
xor eax, 0xe73a72bc
rol eax, 0xef
popf
pushf
not eax
add eax, 0xe0fc136a
xor eax, 0xcfaf1fe4
rol eax, 0xd4
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x78929a1a
pushf
not eax
add eax, 0xe5cbb8d6
xor eax, 0x8754938d
rol eax, 0xad
popf
pushf
not eax
add eax, 0xc0e02918
xor eax, 0xbdacf1a5
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xedea86bf
xor eax, 0xc3050f3c
rol eax, 0x45
popf
pushf
not eax
add eax, 0xf71a7a48
xor eax, 0xafe14a94
rol eax, 0x13
popf
jmp 0x14010be61
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x14010d08d
push rax
pushf
mov eax, 0xcd1157e2
pushf
not eax
add eax, 0x9bb94036
xor eax, 0xfbac612b
rol eax, 0x76
popf
pushf
not eax
add eax, 0xecb5cd15
xor eax, 0xa3470e29
rol eax, 0x28
popf
pushf
not eax
add eax, 0x9ae9b5ae
xor eax, 0xab631a80
rol eax, 0xb2
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x9c0efb2c
pushf
not eax
add eax, 0xe91c0c98
xor eax, 0xc8f037d7
rol eax, 0xd
popf
pushf
not eax
add eax, 0xf76eb45a
xor eax, 0xb6c271e8
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xb307f98a
xor eax, 0x8886c017
rol eax, 0x8d
popf
jmp 0x14010be61
movabs rax, 0xe3e5a88006fb12b7
pushf
not rax
add rax, 0x516707b9
xor rax, 0x4a6bf5d0
rol rax, 0x58
popf
pushf
not rax
add rax, 0x570afa61
xor rax, 0x7a111f89
rol rax, 0xbd
popf
push rax
pushf
mov eax, 0x5edc6c86
pushf
not eax
add eax, 0xc36ee0d2
xor eax, 0xe94cc2e9
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf8438710
xor eax, 0x951aa924
rol eax, 0xe8
popf
jmp 0x14010be61
and rax, 0xfffffffffffffff0
call fcn.14022fed3
sub rsp, rax
lea rdi, [rsp + 0x50]
test rdi, rdi
je 0x14010d19e
push rax
pushf
mov eax, 0xb3e23303
pushf
not eax
add eax, 0xfa2e94dc
xor eax, 0xa8db615f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x8d2b2e69
xor eax, 0xe4f12212
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xc586d917
xor eax, 0xd36d0fc0
rol eax, 0x35
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x8b345cd2
pushf
not eax
add eax, 0x90c55e71
xor eax, 0xac50a49d
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd33b6a9e
xor eax, 0xce075bf6
rol eax, 0x6c
popf
jmp 0x14010be61
mov dword [rdi], 0xcccc
jmp 0x14010d2f4
call fcn.140155ca3
mov rdi, rax
test rax, rax
je 0x14010d24f
push rax
pushf
mov eax, 0x4167ceda
pushf
not eax
add eax, 0xef6dc499
xor eax, 0xf5b38e4b
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xf37f87f7
xor eax, 0xe491e8f9
rol eax, 0xe6
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x9dbced5a
pushf
not eax
add eax, 0xf5a3b198
xor eax, 0xc773799d
rol eax, 0x89
popf
pushf
not eax
add eax, 0xcfe19fc0
xor eax, 0x99762a90
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xf5a6c4fb
xor eax, 0x9b62650f
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x87e71423
xor eax, 0x89e0d5ab
rol eax, 0x30
popf
jmp 0x14010be61
mov dword [rax], 0xdddd
push rax
pushf
mov eax, 0x4830e12a
pushf
not eax
add eax, 0xe5bbf3ad
xor eax, 0x9aa588cf
rol eax, 0x94
popf
pushf
not eax
add eax, 0xf52c611b
xor eax, 0xb1447011
rol eax, 0x97
popf
pushf
not eax
add eax, 0xf54892d6
xor eax, 0xe4d9f306
rol eax, 0xb4
popf
jmp 0x14010be61
add rdi, 0x10
push rax
pushf
mov eax, 0x9228939c
pushf
not eax
add eax, 0xdb8eb37e
xor eax, 0xec0a796b
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xe68dda8e
xor eax, 0xbc0d3767
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xc6455b93
xor eax, 0xc44853ad
rol eax, 0xb7
popf
jmp 0x14010be61
test rdi, rdi
je 0x14010d38d
push rax
pushf
mov eax, 0x102ce06b
pushf
not eax
add eax, 0x8f1efcac
xor eax, 0xbfe877a3
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x90f51c9a
xor eax, 0xe8606ae9
rol eax, 8
popf
pushf
not eax
add eax, 0xa29fb84e
xor eax, 0x80128d2e
rol eax, 4
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x78e4f8fa
pushf
not eax
add eax, 0xa7ef4347
xor eax, 0x8813fb43
rol eax, 0x17
popf
pushf
not eax
add eax, 0x9ed21305
xor eax, 0x89599270
rol eax, 0x53
popf
pushf
not eax
add eax, 0x921d67e1
xor eax, 0x94b274d7
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe4a079cc
xor eax, 0x86ac7def
rol eax, 0xc9
popf
jmp 0x14010be61
and qword [rsp + 0x40], 0
mov r9d, r14d
and qword [rsp + 0x38], 0
mov r8, rbx
and qword [rsp + 0x30], 0
mov edx, r15d
mov dword [rsp + 0x28], esi
mov rcx, r13
mov qword [rsp + 0x20], rdi
jmp 0x14010d40e
call qword [sym.imp.KERNEL32.dll_LCMapStringEx]
xor ecx, ecx
test eax, eax
jne 0x14010d5a7
lea rcx, [rdi - 0x10]
mov edi, 0x534724d7
pushf
not edi
add edi, 0xb2327ab7
xor edi, 0x98340d38
rol edi, 0x93
popf
pushf
not edi
add edi, 0xcc91743b
xor edi, 0x8ac5c325
rol edi, 0x17
popf
pushf
not edi
add edi, 0x91128ead
xor edi, 0xe7e3e9d1
rol edi, 0x82
popf
pushf
not edi
add edi, 0xa0d42b82
xor edi, 0xba2fa252
rol edi, 0x20
popf
cmp dword [rcx], edi
jne 0x14010d4c5
push rax
pushf
mov eax, 0x620864df
pushf
not eax
add eax, 0xca53167c
xor eax, 0xc173d062
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x904c7ea2
xor eax, 0xba91ff09
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xecc68479
xor eax, 0x802d4e35
rol eax, 0x87
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xd5531ee
pushf
not eax
add eax, 0xdc9af2b0
xor eax, 0xc047a277
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x8d171f61
xor eax, 0xc44513e7
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xb43cbaa9
xor eax, 0xa7bbe04b
rol eax, 0x53
popf
jmp 0x14010be61
call fcn.14028bc9d
push rax
pushf
mov eax, 0x928b6bab
pushf
not eax
add eax, 0xffdaed82
xor eax, 0xa7a3cdf1
rol eax, 0x71
popf
pushf
not eax
add eax, 0x806a211e
xor eax, 0xe818cb45
rol eax, 0x34
popf
jmp 0x14010be61
lea rcx, [rbx - 0x10]
cmp dword [rcx], edi
jmp 0x14010d844
mov eax, dword [rbp + 0x58]
xor edx, edx
mov qword [rsp + 0x38], rcx
mov r9d, esi
mov qword [rsp + 0x30], rcx
mov r8, rdi
test eax, eax
jne 0x14010d619
push rax
pushf
mov eax, 0xb6388d8
pushf
not eax
add eax, 0xb0ae1f52
xor eax, 0xd00e4f5d
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf9dc8a0a
xor eax, 0xeed58886
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xd2a705ae
xor eax, 0xb9a5e662
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x87e4d2c6
xor eax, 0x8b94d84f
rol eax, 0xad
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0xa4e6a86a
pushf
not eax
add eax, 0x9a02cb9f
xor eax, 0x8186adb8
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x87359c86
xor eax, 0xa3ef6238
rol eax, 0xe6
popf
jmp 0x14010be61
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
jmp 0x14010d705
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
push rax
pushf
mov eax, 0x6a85cc8f
pushf
not eax
add eax, 0xcb37348e
xor eax, 0x896c419f
rol eax, 0x22
popf
pushf
not eax
add eax, 0xeefd1135
xor eax, 0xda9b0bdb
rol eax, 2
popf
pushf
not eax
add eax, 0xfec9c814
xor eax, 0x9e7bd639
rol eax, 0x69
popf
jmp 0x14010be61
mov ecx, dword [rbp + 0x60]
jmp 0x14010d709
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rcx, [rdi - 0x10]
mov esi, eax
cmp dword [rcx], 0xdddd
jne 0x14010d763
push rax
pushf
mov eax, 0xb05c5ffb
pushf
not eax
add eax, 0xe9b09241
xor eax, 0x9eb1879d
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x82d32ab2
xor eax, 0xece2e6ef
rol eax, 0x35
popf
pushf
not eax
add eax, 0xa7e856d0
xor eax, 0xc84253aa
rol eax, 0x93
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x713b8ce2
pushf
not eax
add eax, 0x9e5a1303
xor eax, 0x803beaa0
rol eax, 7
popf
pushf
not eax
add eax, 0x91b715b1
xor eax, 0xff00d50e
rol eax, 0x3f
popf
jmp 0x14010be61
call fcn.14028bc9d
push rax
pushf
mov eax, 0x5f8b58e4
pushf
not eax
add eax, 0xba6cdcea
xor eax, 0xf142f9e9
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x917d2b45
xor eax, 0x8c9ab68c
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xf0b06018
xor eax, 0xe5d3ccac
rol eax, 0xd7
popf
jmp 0x14010be61
lea rcx, [rbx - 0x10]
cmp dword [rcx], 0xdddd
push rax
pushf
mov eax, 0x80991f4
pushf
not eax
add eax, 0xca212424
xor eax, 0xf6e1db9e
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xb29cbfca
xor eax, 0xfb28b8ac
rol eax, 3
popf
pushf
not eax
add eax, 0xc168ebc2
xor eax, 0xee283681
rol eax, 0x49
popf
pushf
not eax
add eax, 0xdf055f27
xor eax, 0xdf70ff5f
rol eax, 0xc5
popf
jmp 0x14010be61
jne 0x14010d89f
push rax
pushf
mov eax, 0x77e31060
pushf
not eax
add eax, 0x9799e868
xor eax, 0xc7adbe2c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x8133ce46
xor eax, 0xbc1ea31f
rol eax, 0xec
popf
pushf
not eax
add eax, 0xfc3d1444
xor eax, 0xa508d968
rol eax, 0x55
popf
pushf
not eax
add eax, 0x96f30bb5
xor eax, 0x9292604e
rol eax, 0x1e
popf
jmp 0x14010be61
push rax
pushf
mov eax, 0x605955d3
pushf
not eax
add eax, 0x843b41e3
xor eax, 0xd210bcf8
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xb9c79ead
xor eax, 0xdfaa194b
rol eax, 0x31
popf
pushf
not eax
add eax, 0xfa8f340a
xor eax, 0xe3d9329a
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8ebde5aa
xor eax, 0xe36b75a8
rol eax, 0xbc
popf
jmp 0x14010be61
call fcn.14028bc9d
push rax
pushf
mov eax, 0xc862f611
pushf
not eax
add eax, 0xcb899a17
xor eax, 0x9eb12b9a
rol eax, 0x24
popf
pushf
not eax
add eax, 0x9bdf9567
xor eax, 0xb331d26f
rol eax, 0xad
popf
pushf
not eax
add eax, 0xa8d10cff
xor eax, 0xbfb0bef9
rol eax, 0xc0
popf
jmp 0x14010be61
mov eax, esi
jmp 0x14010cb2b