Function at 0x140001b67
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1288
call fcn.1400091a0
sub rsp, rax
movaps xmmword [rsp + 0x1270], xmm7
movaps xmmword [rsp + 0x1260], xmm6
call qword [sym.imp.kernel32.dll_IsDebuggerPresent]
test eax, eax
je 0x140001cdc
and dword [rsp + 0xb0], 0
mov byte [rsp + 0x60], 0
lea rdx, [0x14000b340]
lea rsi, [rsp + 0x120]
mov r8d, 9
mov rcx, rsi
call fcn.14000395c
mov rdi, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006231
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, rdi
call fcn.140003fc1
lea rdx, [0x14000b35e]
lea rdi, [rsp + 0x120]
mov r8d, 0x12
mov rcx, rdi
call fcn.14000395c
mov r14, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
mov rcx, rbx
mov rdx, r14
call fcn.140006732
mov rsi, rax
mov rcx, qword [rdi]
mov rdx, r14
call fcn.140003fc1
test rsi, rsi
je 0x140001c3a
lea r9, [rsp + 0x60]
mov ecx, 0x13
mov dl, 1
xor r8d, r8d
call rsi
lea rdx, [0x14000b340]
lea rsi, [rsp + 0x120]
mov r8d, 9
mov rcx, rsi
call fcn.14000395c
mov rdi, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006231
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, rdi
call fcn.140003fc1
lea rdx, [0x14000b370]
lea rdi, [rsp + 0x120]
mov r8d, 0x10
mov rcx, rdi
call fcn.14000395c
mov r14, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
mov rcx, rbx
mov rdx, r14
call fcn.140006732
mov rsi, rax
mov rcx, qword [rdi]
mov rdx, r14
call fcn.140003fc1
test rsi, rsi
je 0x140001cdc
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
mov ecx, 0xc00002b4
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
call fcn.1400014cb
movups xmm6, xmmword [0x1400104a0]
lea rsi, [rsp + 0x140]
movaps xmmword [rsi - 0x20], xmm6
movups xmm7, xmmword [0x1400104b0]
movaps xmmword [rsi - 0x10], xmm7
mov qword [rsi], rax
mov qword [rsi + 8], rdx
lea rcx, [rsp + 0x120]
mov edx, pe_nt_image_headers64
mov r8, rsi
call fcn.140001b5c
mov r15d, 0x10
lea r12, [0x14000b8c0]
lea r14, [0x140001b09]
mov r8b, byte [r15 + r12 - 0x10]
mov rbx, qword [r15 + r12 - 8]
mov r13, qword [r15 + r12]
mov byte [rsp + 0x80], r8b
mov rcx, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x148]
call fcn.140001574
mov rdi, rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x60], rax
mov edx, 1
lea rbp, [rsp + 0x120]
mov rcx, rbp
mov r8, rsi
call fcn.140001b5c
lea rax, [rsp + 0x60]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rbp
mov rcx, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x20], r14
mov r8, rdi
lea r9, [rsp + 0xb0]
call fcn.14000198a
mov rcx, qword [rsp + 0x120]
test rax, rax
je 0x140001e1a
movzx eax, byte [rcx + rdx]
and eax, 1
sub qword [rsp + 0x130], rax
mov al, byte [rsp + 0x80]
shr rdi, 0x39
lea r8, [rdx - 0x10]
and r8, qword [rsp + 0x128]
mov byte [rcx + rdx], dil
mov byte [rcx + r8 + 0x10], dil
inc qword [rsp + 0x138]
mov r8, qword [rsp + 0x120]
neg rdx
imul rdx, rdx, 0x18
lea rcx, [r8 + rdx]
mov byte [r8 + rdx - 0x18], al
jmp 0x140001e24
neg rdx
imul rax, rdx, 0x18
add rcx, rax
mov qword [rcx - 0x10], rbx
mov qword [rcx - 8], r13
add r15, 0x18
cmp r15, 0x1810
jne 0x140001d2f
lea rdi, [rsp + 0x140]
mov r13, qword [rdi - 0x20]
mov rax, qword [rdi - 0x18]
mov r15, qword [rdi - 8]
mov qword [rsp + 0x118], rax
lea rsi, [r13 + rax + 1]
movdqa xmm0, xmmword [r13]
pmovmskb ebx, xmm0
not ebx
lea r14, [r13 + 0x10]
call fcn.1400014cb
movaps xmmword [rdi - 0x20], xmm6
movaps xmmword [rdi - 0x10], xmm7
mov qword [rdi], rax
mov qword [rdi + 8], rdx
lea rcx, [rsp + 0x120]
mov rdx, r15
mov r8, rdi
call fcn.140001b51
lea r12, [rsp + 0xc8]
mov qword [rsp + 0xf8], r13
mov qword [r12 - 0x18], r13
mov qword [r12 - 0x10], r14
mov qword [r12 - 8], rsi
mov word [r12], bx
lea r14, [rsp + 0x78]
lea rsi, [rsp + 0x60]
mov rcx, r12
call fcn.1400014d7
cmp rax, 1
je 0x140001f0e
test r15, r15
je 0x140002011
mov rax, qword [rsp + 0xb8]
movdqa xmm0, xmmword [rax]
pmovmskb ecx, xmm0
not ecx
mov word [rsp + 0xc8], cx
add qword [rsp + 0xb0], 0xfffffffffffffe80
add rax, 0x10
mov qword [rsp + 0xb8], rax
jmp 0x140001ec3
mov rax, qword [rsp + 0xb0]
neg rdx
imul rcx, rdx, 0x18
mov bl, byte [rax + rcx - 0x18]
mov r8, qword [rax + rcx - 0x10]
mov r9, qword [rax + rcx - 8]
mov qword [rsp + 0x80], r8
mov qword [rsp + 0x88], r9
mov rcx, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x148]
call fcn.1400014f4
mov rbp, rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x78], rax
mov edx, 1
lea r13, [rsp + 0x120]
mov rcx, r13
mov r8, rdi
call fcn.140001b51
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r13
mov rcx, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x128]
lea rax, [0x140001b27]
mov qword [rsp + 0x20], rax
mov r8, rbp
mov r9, rsi
call fcn.14000198a
mov rcx, qword [rsp + 0x120]
test rax, rax
je 0x140001ffe
movdqu xmm0, xmmword [rsp + 0x80]
movzx eax, byte [rcx + rdx]
and eax, 1
sub qword [rsp + 0x130], rax
shr rbp, 0x39
lea rax, [rdx - 0x10]
and rax, qword [rsp + 0x128]
mov byte [rcx + rdx], bpl
mov byte [rcx + rax + 0x10], bpl
inc qword [rsp + 0x138]
neg rdx
imul rax, rdx, 0x18
movdqu xmmword [rcx + rax - 0x18], xmm0
jmp 0x140002005
neg rdx
imul rax, rdx, 0x18
mov byte [rcx + rax - 8], bl
dec r15
jmp 0x140001ec3
lea rax, [rsp + 0x1260]
movdqa xmm0, xmmword [rax - 0x1140]
movaps xmm1, xmmword [rax - 0x1130]
movaps xmm2, xmmword [rax - 0x1120]
lea rcx, [0x14000b422]
mov qword [rax - 0x1140], rcx
mov r13d, 5
mov qword [rax - 0x1138], r13
lea rcx, [0x14000b67c]
mov qword [rax - 0x1130], rcx
mov r12, rcx
mov ecx, 8
mov qword [rax - 0x1128], rcx
lea rdx, [0x14000b551]
mov qword [rax - 0x1120], rdx
mov r9d, 6
mov qword [rax - 0x1118], r9
lea rdx, [0x14000b4b8]
mov qword [rax - 0x1110], rdx
mov edx, 7
mov qword [rax - 0x1108], rdx
lea r10, [0x14000b46b]
mov qword [rax - 0x1100], r10
mov r10d, 9
mov qword [rax - 0x10f8], r10
lea r10, [0x14000b4a8]
mov qword [rax - 0x10f0], r10
mov esi, 4
mov qword [rax - 0x10e8], rsi
lea r14, [0x14000b40b]
mov qword [rax - 0x10e0], r14
mov qword [rax - 0x10d8], rsi
lea r10, [0x14000b807]
mov qword [rax - 0x10d0], r10
mov qword [rax - 0x10c8], rdx
mov qword [rax - 0x10c0], r10
mov qword [rax - 0x10b8], rdx
mov qword [rax - 0x10b0], r10
mov qword [rax - 0x10a8], rdx
lea r10, [0x14000b6aa]
mov qword [rax - 0x10a0], r10
mov qword [rax - 0x1098], rcx
lea r8, [0x14000b647]
mov qword [rax - 0x1090], r8
mov qword [rax - 0x1088], rdx
mov qword [rax - 0x1080], r10
mov qword [rax - 0x1078], rcx
lea r10, [0x14000b64e]
mov qword [rax - 0x1070], r10
mov rbp, r10
mov qword [rax - 0x1068], r9
lea r11, [0x14000b641]
mov qword [rax - 0x1060], r11
mov rdi, r11
mov qword [rax - 0x1058], r9
mov qword [rax - 0x1050], r8
mov qword [rax - 0x1048], rdx
lea r11, [0x14000b62c]
mov qword [rax - 0x1040], r11
mov qword [rax - 0x1038], rdx
mov r8d, 7
mov qword [rax - 0x1030], r12
mov qword [rax - 0x1028], rcx
lea r15, [0x14000b85d]
mov qword [rax - 0x1020], r15
mov qword [rax - 0x1018], r13
lea r11, [0x14000b3a8]
mov qword [rax - 0x1010], r11
mov qword [rax - 0x1008], r9
lea r11, [0x14000b739]
mov qword [rax - 0x1000], r11
mov qword [rax - 0xff8], rcx
mov qword [rax - 0xff0], r12
mov qword [rax - 0xfe8], rcx
lea rdx, [0x14000b527]
mov qword [rax - 0xfe0], rdx
mov qword [rax - 0xfd8], rsi
mov qword [rax - 0xfd0], rdi
mov qword [rax - 0xfc8], r9
lea rbx, [0x14000b762]
mov qword [rax - 0xfc0], rbx
mov r11d, 0xa
mov qword [rax - 0xfb8], r11
mov qword [rax - 0xfb0], r12
mov qword [rax - 0xfa8], rcx
mov qword [rax - 0xfa0], rdx
mov qword [rax - 0xf98], rsi
mov qword [rax - 0xf90], rdi
mov qword [rax - 0xf88], r9
lea r10, [0x14000b795]
mov qword [rax - 0xf80], r10
mov qword [rax - 0xf78], rsi
mov qword [rax - 0xf70], r12
mov qword [rax - 0xf68], rcx
mov qword [rax - 0xf60], rdx
mov qword [rax - 0xf58], rsi
mov qword [rax - 0xf50], rdi
mov qword [rax - 0xf48], r9
lea r10, [0x14000b8bb]
mov qword [rax - 0xf40], r10
mov qword [rax - 0xf38], r13
mov qword [rax - 0xf30], r12
mov qword [rax - 0xf28], rcx
mov qword [rax - 0xf20], rdx
mov qword [rax - 0xf18], rsi
lea rbx, [0x14000b6fa]
mov qword [rax - 0xf10], rbx
mov qword [rax - 0xf08], rsi
mov qword [rax - 0xf00], rbp
mov qword [rax - 0xef8], r9
mov qword [rax - 0xef0], r12
mov qword [rax - 0xee8], rcx
lea rbx, [0x14000b7c1]
mov qword [rax - 0xee0], rbx
mov qword [rax - 0xed8], r13
lea rbx, [0x14000b58f]
mov qword [rax - 0xed0], rbx
mov qword [rax - 0xec8], rcx
lea rbx, [0x14000b674]
mov qword [rax - 0xec0], rbx
mov qword [rax - 0xeb8], rsi
mov qword [rax - 0xeb0], rbx
mov qword [rax - 0xea8], rsi
lea r11, [0x14000b65d]
mov qword [rax - 0xea0], r11
mov ebp, 9
mov qword [rax - 0xe98], rbp
mov r11, r15
mov qword [rax - 0xe90], r15
mov qword [rax - 0xe88], r13
lea r15, [0x14000b3dd]
mov qword [rax - 0xe80], r15
mov qword [rax - 0xe78], rcx
mov qword [rax - 0xe70], r12
mov qword [rax - 0xe68], rcx
mov qword [rax - 0xe60], r11
mov qword [rax - 0xe58], r13
mov qword [rax - 0xe50], r14
mov qword [rax - 0xe48], rsi
lea r11, [0x14000b5c4]
mov qword [rax - 0xe40], r11
mov qword [rax - 0xe38], rcx
lea r11, [0x14000b81b]
mov qword [rax - 0xe30], r11
mov qword [rax - 0xe28], r8
lea rbx, [0x14000b75c]
mov qword [rax - 0xe20], rbx
mov qword [rax - 0xe18], r9
lea rdi, [0x14000b6c7]
mov qword [rax - 0xe10], rdi
mov qword [rax - 0xe08], rsi
lea rbx, [0x14000b7fd]
mov qword [rax - 0xe00], rbx
mov qword [rax - 0xdf8], rsi
lea rbx, [0x14000b875]
mov qword [rax - 0xdf0], rbx
mov qword [rax - 0xde8], r13
mov qword [rax - 0xde0], r10
mov qword [rax - 0xdd8], r13
lea r14, [0x14000b6aa]
mov qword [rax - 0xdd0], r14
mov qword [rax - 0xdc8], rcx
lea rdi, [0x14000b403]
mov qword [rax - 0xdc0], rdi
mov rbx, rdi
mov qword [rax - 0xdb8], rcx
mov qword [rax - 0xdb0], r15
mov qword [rax - 0xda8], rcx
lea rdi, [0x14000b7cc]
mov qword [rax - 0xda0], rdi
mov qword [rax - 0xd98], rsi
mov qword [rax - 0xd90], r14
mov r8, r14
mov qword [rax - 0xd88], rcx
lea r14, [0x14000b801]
mov qword [rax - 0xd80], r14
mov qword [rax - 0xd78], r9
mov qword [rax - 0xd70], rbx
mov qword [rax - 0xd68], rcx
lea rbx, [0x14000b4c3]
mov qword [rax - 0xd60], rbx
mov edi, 3
mov qword [rax - 0xd58], rdi
lea rbx, [0x14000b486]
mov qword [rax - 0xd50], rbx
mov qword [rax - 0xd48], rbp
lea rdi, [0x14000b641]
mov qword [rax - 0xd40], rdi
mov qword [rax - 0xd38], r9
mov qword [rax - 0xd30], r8
mov qword [rax - 0xd28], rcx
lea r8, [0x14000b647]
mov qword [rax - 0xd20], r8
mov r8d, 7
mov qword [rax - 0xd18], r8
mov qword [rax - 0xd10], r12
mov qword [rax - 0xd08], rcx
mov qword [rax - 0xd00], rdx
mov qword [rax - 0xcf8], rsi
mov qword [rax - 0xcf0], rdi
mov qword [rax - 0xce8], r9
mov rdi, r10
mov qword [rax - 0xce0], r10
mov qword [rax - 0xcd8], r13
mov qword [rax - 0xcd0], rdx
mov qword [rax - 0xcc8], rsi
lea r10, [0x14000b6a4]
mov qword [rax - 0xcc0], r10
mov qword [rax - 0xcb8], r9
mov qword [rax - 0xcb0], r11
mov qword [rax - 0xca8], r8
mov qword [rax - 0xca0], r12
mov qword [rax - 0xc98], rcx
mov qword [rax - 0xc90], r14
mov qword [rax - 0xc88], r9
lea r10, [0x14000b3b1]
mov qword [rax - 0xc80], r10
mov rbp, r10
mov qword [rax - 0xc78], r13
mov qword [rax - 0xc70], rdx
mov qword [rax - 0xc68], rsi
lea r10, [0x14000b565]
mov qword [rax - 0xc60], r10
mov qword [rax - 0xc58], rsi
lea r10, [0x14000b53a]
mov qword [rax - 0xc50], r10
mov r11, r10
mov qword [rax - 0xc48], rsi
lea r10, [0x14000b807]
mov qword [rax - 0xc40], r10
mov qword [rax - 0xc38], r8
mov qword [rax - 0xc30], r10
mov qword [rax - 0xc28], r8
mov qword [rax - 0xc20], r10
mov qword [rax - 0xc18], r8
mov qword [rax - 0xc10], r12
mov qword [rax - 0xc08], rcx
lea r10, [0x14000b54a]
mov qword [rax - 0xc00], r10
mov r8d, 3
mov qword [rax - 0xbf8], r8
lea rbx, [0x14000b40b]
mov qword [rax - 0xbf0], rbx
mov qword [rax - 0xbe8], rsi
lea r10, [0x14000b6ef]
mov qword [rax - 0xbe0], r10
mov qword [rax - 0xbd8], r13
lea r10, [0x14000b72d]
mov qword [rax - 0xbd0], r10
mov qword [rax - 0xbc8], r13
mov qword [rax - 0xbc0], r12
mov qword [rax - 0xbb8], rcx
mov qword [rax - 0xbb0], r14
mov qword [rax - 0xba8], r9
mov qword [rax - 0xba0], rbp
mov qword [rax - 0xb98], r13
lea r8, [0x14000b64e]
mov qword [rax - 0xb90], r8
mov qword [rax - 0xb88], r9
mov qword [rax - 0xb80], rdx
mov qword [rax - 0xb78], rsi
mov qword [rax - 0xb70], r12
mov qword [rax - 0xb68], rcx
lea r10, [0x14000b795]
mov qword [rax - 0xb60], r10
mov qword [rax - 0xb58], rsi
lea r8, [0x14000b69b]
mov qword [rax - 0xb50], r8
mov qword [rax - 0xb48], r13
mov qword [rax - 0xb40], rdx
mov qword [rax - 0xb38], rsi
lea r8, [0x14000b6b2]
mov qword [rax - 0xb30], r8
mov qword [rax - 0xb28], r13
mov qword [rax - 0xb20], rdi
mov qword [rax - 0xb18], r13
lea r8, [0x14000b678]
mov qword [rax - 0xb10], r8
mov qword [rax - 0xb08], rsi
mov qword [rax - 0xb00], r14
mov qword [rax - 0xaf8], r9
mov qword [rax - 0xaf0], rbp
mov qword [rax - 0xae8], r13
lea r10, [0x14000b4bf]
mov qword [rax - 0xae0], r10
mov qword [rax - 0xad8], rsi
lea r10, [0x14000b62c]
mov qword [rax - 0xad0], r10
mov r8d, 7
mov qword [rax - 0xac8], r8
mov qword [rax - 0xac0], r12
mov qword [rax - 0xab8], rcx
lea r10, [0x14000b40f]
mov qword [rax - 0xab0], r10
mov qword [rax - 0xaa8], r8
mov qword [rax - 0xaa0], r15
mov qword [rax - 0xa98], rcx
lea rdi, [0x14000b6aa]
mov qword [rax - 0xa90], rdi
mov qword [rax - 0xa88], rcx
mov qword [rax - 0xa80], rdx
mov qword [rax - 0xa78], rsi
lea r10, [0x14000b84d]
mov qword [rax - 0xa70], r10
mov qword [rax - 0xa68], rsi
mov qword [rax - 0xa60], r11
mov qword [rax - 0xa58], rsi
mov qword [rax - 0xa50], r12
mov qword [rax - 0xa48], rcx
mov qword [rax - 0xa40], r14
mov qword [rax - 0xa38], r9
lea r10, [0x14000b39c]
mov qword [rax - 0xa30], r10
mov qword [rax - 0xa28], rsi
lea r10, [0x14000b65d]
mov qword [rax - 0xa20], r10
mov r11d, 9
mov qword [rax - 0xa18], r11
lea r10, [0x14000b85d]
mov qword [rax - 0xa10], r10
mov qword [rax - 0xa08], r13
mov qword [rax - 0xa00], r15
mov qword [rax - 0x9f8], rcx
mov qword [rax - 0x9f0], r12
mov qword [rax - 0x9e8], rcx
mov qword [rax - 0x9e0], r10
mov qword [rax - 0x9d8], r13
mov qword [rax - 0x9d0], rbx
mov qword [rax - 0x9c8], rsi
lea r10, [0x14000b5c4]
mov qword [rax - 0x9c0], r10
mov qword [rax - 0x9b8], rcx
mov qword [rax - 0x9b0], rdi
mov qword [rax - 0x9a8], rcx
lea r10, [0x14000b403]
mov qword [rax - 0x9a0], r10
mov qword [rax - 0x998], rcx
mov qword [rax - 0x990], r15
mov qword [rax - 0x988], rcx
lea rbx, [0x14000b7cc]
mov qword [rax - 0x980], rbx
mov qword [rax - 0x978], rsi
mov qword [rax - 0x970], rdi
mov qword [rax - 0x968], rcx
mov qword [rax - 0x960], r14
mov qword [rax - 0x958], r9
mov qword [rax - 0x950], r10
mov qword [rax - 0x948], rcx
lea r10, [0x14000b83b]
mov qword [rax - 0x940], r10
mov qword [rax - 0x938], r13
lea r10, [0x14000b4ca]
mov qword [rax - 0x930], r10
mov qword [rax - 0x928], rsi
lea r10, [0x14000b6eb]
mov qword [rax - 0x920], r10
mov r14, r10
mov qword [rax - 0x918], rsi
lea r10, [0x14000b467]
mov qword [rax - 0x910], r10
mov qword [rax - 0x908], rsi
lea r10, [0x14000b666]
mov qword [rax - 0x900], r10
mov qword [rax - 0x8f8], r9
lea rbx, [0x14000b7f8]
mov qword [rax - 0x8f0], rbx
mov qword [rax - 0x8e8], r13
mov qword [rax - 0x8e0], r10
mov qword [rax - 0x8d8], r9
lea rbx, [0x14000b8a2]
mov qword [rax - 0x8d0], rbx
mov r15d, 3
mov qword [rax - 0x8c8], r15
lea r10, [0x14000b7e6]
mov qword [rax - 0x8c0], r10
mov qword [rax - 0x8b8], rsi
lea r10, [0x14000b692]
mov qword [rax - 0x8b0], r10
mov qword [rax - 0x8a8], r11
lea r10, [0x14000b831]
mov qword [rax - 0x8a0], r10
mov r10d, 0xa
mov qword [rax - 0x898], r10
lea r10, [0x14000b3ae]
mov qword [rax - 0x890], r10
mov qword [rax - 0x888], r15
mov r12d, 3
mov qword [rax - 0x880], r14
mov qword [rax - 0x878], rsi
lea r10, [0x14000b394]
mov qword [rax - 0x870], r10
mov qword [rax - 0x868], rsi
lea r8, [0x14000b628]
mov qword [rax - 0x860], r8
mov r15d, 1
mov qword [rax - 0x858], r15
lea r11, [0x14000b69b]
mov qword [rax - 0x850], r11
mov qword [rax - 0x848], r13
mov r10, rdx
mov qword [rax - 0x840], rdx
mov qword [rax - 0x838], rsi
lea rbp, [0x14000b6b2]
mov qword [rax - 0x830], rbp
mov qword [rax - 0x828], r13
mov qword [rax - 0x820], rbx
mov qword [rax - 0x818], r12
lea r12, [0x14000b678]
mov qword [rax - 0x810], r12
mov qword [rax - 0x808], rsi
lea r14, [0x14000b801]
mov qword [rax - 0x800], r14
mov qword [rax - 0x7f8], r9
lea r8, [0x14000b3b1]
mov qword [rax - 0x7f0], r8
mov qword [rax - 0x7e8], r13
lea rbx, [0x14000b732]
mov qword [rax - 0x7e0], rbx
mov edx, 7
mov qword [rax - 0x7d8], rdx
lea rdi, [0x14000b6aa]
mov qword [rax - 0x7d0], rdi
mov qword [rax - 0x7c8], rcx
mov qword [rax - 0x7c0], r10
mov qword [rax - 0x7b8], rsi
lea rbx, [0x14000b7d0]
mov qword [rax - 0x7b0], rbx
mov ebx, 5
mov qword [rax - 0x7a8], rbx
lea rdx, [0x14000b67c]
mov qword [rax - 0x7a0], rdx
mov qword [rax - 0x798], rcx
mov qword [rax - 0x790], r11
mov qword [rax - 0x788], rbx
mov qword [rax - 0x780], r10
mov qword [rax - 0x778], rsi
mov qword [rax - 0x770], rbp
mov qword [rax - 0x768], rbx
lea rbx, [0x14000b780]
mov qword [rax - 0x760], rbx
mov qword [rax - 0x758], rcx
mov qword [rax - 0x750], r12
mov qword [rax - 0x748], rsi
mov qword [rax - 0x740], r14
mov qword [rax - 0x738], r9
mov qword [rax - 0x730], r8
mov qword [rax - 0x728], r13
mov qword [rax - 0x720], rdi
mov qword [rax - 0x718], rcx
mov qword [rax - 0x710], r10
mov qword [rax - 0x708], rsi
lea rbx, [0x14000b7f5]
mov qword [rax - 0x700], rbx
mov r10d, 3
mov qword [rax - 0x6f8], r10
lea r10, [0x14000b53a]
mov qword [rax - 0x6f0], r10
mov qword [rax - 0x6e8], rsi
mov qword [rax - 0x6e0], rdx
mov r10, rdx
mov qword [rax - 0x6d8], rcx
mov qword [rax - 0x6d0], r14
mov qword [rax - 0x6c8], r9
mov qword [rax - 0x6c0], r8
mov qword [rax - 0x6b8], r13
mov qword [rax - 0x6b0], rdi
mov qword [rax - 0x6a8], rcx
lea r8, [0x14000b628]
mov qword [rax - 0x6a0], r8
mov qword [rax - 0x698], r15
mov qword [rax - 0x690], rdi
mov qword [rax - 0x688], rcx
mov qword [rax - 0x680], r8
mov qword [rax - 0x678], r15
lea rbx, [0x14000b60a]
mov qword [rax - 0x670], rbx
mov qword [rax - 0x668], rsi
lea r11, [0x14000b622]
mov qword [rax - 0x660], r11
mov qword [rax - 0x658], r9
lea rbx, [0x14000b61b]
mov qword [rax - 0x650], rbx
mov edx, 7
mov qword [rax - 0x648], rdx
mov qword [rax - 0x640], rdi
mov qword [rax - 0x638], rcx
mov qword [rax - 0x630], r8
mov qword [rax - 0x628], r15
mov qword [rax - 0x620], rdi
mov qword [rax - 0x618], rcx
mov qword [rax - 0x610], r11
mov rbp, r11
mov qword [rax - 0x608], r9
mov qword [rax - 0x600], rdi
mov qword [rax - 0x5f8], rcx
mov qword [rax - 0x5f0], rbx
mov qword [rax - 0x5e8], rdx
mov qword [rax - 0x5e0], r10
mov qword [rax - 0x5d8], rcx
lea r14, [0x14000b551]
mov qword [rax - 0x5d0], r14
mov qword [rax - 0x5c8], r9
lea r14, [0x14000b48f]
mov qword [rax - 0x5c0], r14
mov r11d, 0xa
mov qword [rax - 0x5b8], r11
lea r11, [0x14000b8bb]
mov qword [rax - 0x5b0], r11
mov qword [rax - 0x5a8], r13
mov qword [rax - 0x5a0], rdi
mov qword [rax - 0x598], rcx
lea r11, [0x14000b641]
mov qword [rax - 0x590], r11
mov qword [rax - 0x588], r9
lea r14, [0x14000b40f]
mov qword [rax - 0x580], r14
mov qword [rax - 0x578], rdx
lea r11, [0x14000b4ca]
mov qword [rax - 0x570], r11
mov qword [rax - 0x568], rsi
mov qword [rax - 0x560], r8
mov qword [rax - 0x558], r15
mov qword [rax - 0x550], rdi
mov qword [rax - 0x548], rcx
mov qword [rax - 0x540], rbp
mov qword [rax - 0x538], r9
mov qword [rax - 0x530], rbx
mov qword [rax - 0x528], rdx
mov r12, r10
mov qword [rax - 0x520], r10
mov qword [rax - 0x518], rcx
lea r8, [0x14000b527]
mov qword [rax - 0x510], r8
mov qword [rax - 0x508], rsi
lea r10, [0x14000b7b1]
mov qword [rax - 0x500], r10
mov qword [rax - 0x4f8], r9
lea r10, [0x14000b4a1]
mov qword [rax - 0x4f0], r10
mov qword [rax - 0x4e8], rdx
lea r10, [0x14000b629]
mov qword [rax - 0x4e0], r10
mov ebx, 3
mov qword [rax - 0x4d8], rbx
mov qword [rax - 0x4d0], r14
mov qword [rax - 0x4c8], rdx
mov qword [rax - 0x4c0], r14
mov qword [rax - 0x4b8], rdx
mov qword [rax - 0x4b0], r14
mov qword [rax - 0x4a8], rdx
lea r10, [0x14000b60e]
mov qword [rax - 0x4a0], r10
mov qword [rax - 0x498], rbx
mov qword [rax - 0x490], r12
mov qword [rax - 0x488], rcx
lea rbx, [0x14000b57f]
mov qword [rax - 0x480], rbx
mov qword [rax - 0x478], r13
lea r11, [0x14000b801]
mov qword [rax - 0x470], r11
mov qword [rax - 0x468], r9
lea rbp, [0x14000b807]
mov qword [rax - 0x460], rbp
mov qword [rax - 0x458], rdx
mov qword [rax - 0x450], rbp
mov qword [rax - 0x448], rdx
mov qword [rax - 0x440], rbp
mov qword [rax - 0x438], rdx
mov qword [rax - 0x430], rbp
mov qword [rax - 0x428], rdx
mov qword [rax - 0x420], rbp
mov qword [rax - 0x418], rdx
mov qword [rax - 0x410], rbp
mov qword [rax - 0x408], rdx
mov qword [rax - 0x400], rbp
mov qword [rax - 0x3f8], rdx
mov qword [rax - 0x3f0], r12
mov qword [rax - 0x3e8], rcx
lea r10, [0x14000b520]
mov qword [rax - 0x3e0], r10
mov qword [rax - 0x3d8], r13
mov qword [rax - 0x3d0], r10
mov qword [rax - 0x3c8], r13
mov qword [rax - 0x3c0], r11
mov qword [rax - 0x3b8], r9
mov qword [rax - 0x3b0], r11
mov qword [rax - 0x3a8], r9
mov qword [rax - 0x3a0], rbp
mov qword [rax - 0x398], rdx
mov qword [rax - 0x390], rbp
mov qword [rax - 0x388], rdx
mov qword [rax - 0x380], rdi
mov qword [rax - 0x378], rcx
mov qword [rax - 0x370], rbx
mov qword [rax - 0x368], r13
lea r10, [0x14000b85d]
mov qword [rax - 0x360], r10
mov qword [rax - 0x358], r13
mov qword [rax - 0x350], r8
mov qword [rax - 0x348], rsi
lea r8, [0x14000b704]
mov qword [rax - 0x340], r8
mov qword [rax - 0x338], r13
lea r10, [0x14000b53e]
mov qword [rax - 0x330], r10
mov qword [rax - 0x328], rcx
mov qword [rax - 0x320], r14
mov qword [rax - 0x318], rdx
lea rbp, [0x14000b3a0]
mov qword [rax - 0x310], rbp
mov r10d, 3
mov qword [rax - 0x308], r10
lea r11, [0x14000b579]
mov qword [rax - 0x300], r11
mov qword [rax - 0x2f8], r9
lea r13, [0x14000b46b]
mov qword [rax - 0x2f0], r13
mov r13d, 9
mov qword [rax - 0x2e8], r13
lea r13, [0x14000b59b]
mov qword [rax - 0x2e0], r13
mov qword [rax - 0x2d8], r9
lea r13, [0x14000b5f9]
mov qword [rax - 0x2d0], r13
mov qword [rax - 0x2c8], rsi
lea r13, [0x14000b62c]
mov qword [rax - 0x2c0], r13
mov qword [rax - 0x2b8], rdx
mov qword [rax - 0x2b0], rdi
mov qword [rax - 0x2a8], rcx
mov qword [rax - 0x2a0], rbx
mov r8d, 5
mov qword [rax - 0x298], r8
lea rbx, [0x14000b5e8]
mov qword [rax - 0x290], rbx
mov qword [rax - 0x288], r8
lea rbx, [0x14000b4f9]
mov qword [rax - 0x280], rbx
mov qword [rax - 0x278], rsi
lea rbx, [0x14000b571]
mov qword [rax - 0x270], rbx
mov qword [rax - 0x268], rsi
lea rbx, [0x14000b4d6]
mov qword [rax - 0x260], rbx
mov qword [rax - 0x258], rsi
mov qword [rax - 0x250], r14
mov r13, r14
mov qword [rax - 0x248], rdx
mov qword [rax - 0x240], rbp
mov qword [rax - 0x238], r10
mov r14d, 3
mov qword [rax - 0x230], r12
mov qword [rax - 0x228], rcx
lea rbx, [0x14000b551]
mov qword [rax - 0x220], rbx
mov qword [rax - 0x218], r9
lea rbx, [0x14000b3f7]
mov qword [rax - 0x210], rbx
mov qword [rax - 0x208], r8
lea rbx, [0x14000b889]
mov qword [rax - 0x200], rbx
mov qword [rax - 0x1f8], rdx
lea rbx, [0x14000b81b]
mov qword [rax - 0x1f0], rbx
mov qword [rax - 0x1e8], rdx
lea rbx, [0x14000b7ef]
mov qword [rax - 0x1e0], rbx
mov qword [rax - 0x1d8], rsi
lea rbx, [0x14000b6c7]
mov qword [rax - 0x1d0], rbx
mov qword [rax - 0x1c8], rsi
lea rbx, [0x14000b7dc]
mov qword [rax - 0x1c0], rbx
mov qword [rax - 0x1b8], r9
lea rbx, [0x14000b565]
mov qword [rax - 0x1b0], rbx
mov qword [rax - 0x1a8], rsi
lea rbx, [0x14000b427]
mov qword [rax - 0x1a0], rbx
mov qword [rax - 0x198], 0xb
lea rbx, [0x14000b4ca]
mov qword [rax - 0x190], rbx
mov qword [rax - 0x188], rsi
lea rbx, [0x14000b6eb]
mov qword [rax - 0x180], rbx
mov qword [rax - 0x178], rsi
lea rbx, [0x14000b7f3]
mov qword [rax - 0x170], rbx
mov qword [rax - 0x168], 2
mov qword [rax - 0x160], r11
mov qword [rax - 0x158], r9
lea rbx, [0x14000b684]
mov qword [rax - 0x150], rbx
mov qword [rax - 0x148], r9
lea rbx, [0x14000b7ac]
mov qword [rax - 0x140], rbx
mov qword [rax - 0x138], r8
lea rbx, [0x14000b6fa]
mov qword [rax - 0x130], rbx
mov qword [rax - 0x128], rsi
lea r10, [0x14000b704]
mov qword [rax - 0x120], r10
mov qword [rax - 0x118], r8
lea r11, [0x14000b71a]
mov qword [rax - 0x110], r11
mov qword [rax - 0x108], r8
lea rsi, [0x14000b807]
mov qword [rax - 0x100], rsi
mov qword [rax - 0xf8], rdx
lea r11, [0x14000b622]
mov qword [rax - 0xf0], r11
mov qword [rax - 0xe8], r9
mov qword [rax - 0xe0], rdi
mov qword [rax - 0xd8], rcx
lea r11, [0x14000b534]
mov qword [rax - 0xd0], r11
mov qword [rax - 0xc8], r9
lea r11, [0x14000b38c]
mov qword [rax - 0xc0], r11
mov qword [rax - 0xb8], r9
mov qword [rax - 0xb0], r13
mov qword [rax - 0xa8], rdx
mov qword [rax - 0xa0], rbp
mov qword [rax - 0x98], r14
lea r10, [0x14000b750]
mov qword [rax - 0x90], r10
mov qword [rax - 0x88], rdx
lea r11, [0x14000b75c]
mov qword [rax - 0x80], r11
mov qword [rax - 0x78], r9
lea r11, [0x14000b711]
mov qword [rax - 0x70], r11
mov qword [rax - 0x68], r8
mov qword [rax - 0x60], r10
mov qword [rax - 0x58], rdx
lea r8, [0x14000b86a]
mov qword [rax - 0x50], r8
mov qword [rax - 0x48], r9
lea r9, [0x14000b739]
mov qword [rax - 0x40], r9
mov qword [rax - 0x38], rcx
lea r8, [0x14000b6d5]
mov qword [rax - 0x30], r8
mov qword [rax - 0x28], 0xc
mov qword [rax - 0x20], r9
mov qword [rax - 0x18], rcx
mov qword [rax - 0x10], rsi
mov qword [rax - 8], rdx
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x120]
mov qword [rcx], rdx
mov qword [rcx + 8], rax
lea rax, [rsp + 0xb0]
mov qword [rcx + 0x10], rax
movdqa xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xd0], xmm2
call fcn.14000105e
test al, 1
je 0x1400034d4
mov ebx, edx
lea rdi, [rsp + 0xe0]
mov edx, 8
mov rcx, rdi
call fcn.140001364
mov rax, qword [rdi + 8]
mov byte [rax], bl
mov qword [rdi + 0x10], 1
mov rax, qword [rsp + 0x90]
lea rbx, [rsp + 0x60]
mov qword [rbx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rbx], xmm0
mov rcx, rbx
call fcn.14000105e
test al, 1
je 0x1400034dc
mov ebp, edx
mov rsi, qword [rsp + 0xf0]
cmp rsi, qword [rsp + 0xe0]
jne 0x1400034bb
mov edx, 1
mov rcx, rdi
call fcn.140003db8
mov rax, qword [rsp + 0xe8]
mov byte [rax + rsi], bpl
inc rsi
mov qword [rsp + 0xf0], rsi
jmp 0x14000348e
xor r9d, r9d
xor r12d, r12d
jmp 0x1400034f4
mov r9, qword [rsp + 0xe0]
mov r15, qword [rsp + 0xe8]
mov r12, qword [rsp + 0xf0]
xor ecx, ecx
mov eax, 0xff
xor edx, edx
mov qword [rsp + 0x110], r9
test cl, 1
jne 0x140003530
test r12, r12
je 0x14000395a
mov ebx, edx
mov ecx, edx
inc cl
movzx edx, cl
cmove edx, eax
sete cl
mov r8b, byte [r15]
xor r8b, bl
cmp r8b, 0xfc
jne 0x140003505
jmp 0x140003532
xor ebx, ebx
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov rdx, r12
call fcn.140001364
mov rcx, rsi
mov rdx, r12
call fcn.140003db8
mov r14, qword [rsi + 8]
mov rdi, qword [rsi + 0x10]
test r12, r12
je 0x140003571
xor eax, eax
mov cl, byte [r15 + rax]
xor cl, bl
mov byte [r14 + rdi], cl
inc rdi
inc rax
cmp r12, rax
jne 0x14000355c
lea rsi, [rsp + 0x60]
mov rax, qword [rsi]
mov qword [rsp + 0x108], rax
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov r13, rax
and qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], rdi
lea rdx, [0x140010518]
mov r8d, 9
mov rcx, rsi
call fcn.1400060e8
mov rbp, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rbp
call fcn.140006231
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, rbp
call fcn.140003fc1
lea rdx, [0x140010564]
lea rsi, [rsp + 0x60]
mov r8d, 0x17
mov rcx, rsi
call fcn.1400060e8
mov r12, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
mov rcx, rbx
mov rdx, r12
call fcn.140006732
mov rbp, rax
mov rcx, qword [rsi]
mov rdx, r12
call fcn.140003fc1
test rbp, rbp
mov qword [rsp + 0x100], r13
je 0x140003646
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
lea rsi, [rsp + 0xa0]
lea r9, [rsp + 0xa8]
mov rcx, r13
mov rdx, rsi
xor r8d, r8d
call rbp
mov r13, qword [rsi]
jmp 0x140003649
xor r13d, r13d
and qword [rsp + 0x78], 0
lea rdx, [0x140010518]
lea rsi, [rsp + 0x60]
mov r8d, 9
mov rcx, rsi
call fcn.1400060e8
mov rbx, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rbx
call fcn.140006231
mov r12, rax
mov rcx, qword [rsi]
mov rdx, rbx
call fcn.140003fc1
lea rdx, [0x140010550]
lea rbx, [rsp + 0x60]
mov r8d, 0x14
mov rcx, rbx
call fcn.1400060e8
mov rbp, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
mov rcx, r12
mov rdx, rbp
call fcn.140006732
mov rsi, rax
mov rcx, qword [rbx]
mov rdx, rbp
call fcn.140003fc1
test rsi, rsi
mov rbp, r13
mov r13, qword [rsp + 0x100]
je 0x1400036ea
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov rdx, rbp
mov r8, r14
mov r9, rdi
call rsi
and dword [rsp + 0x9c], 0
lea rdx, [0x140010518]
lea rsi, [rsp + 0x60]
mov r8d, 9
mov rcx, rsi
call fcn.1400060e8
mov rdi, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006231
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, rdi
call fcn.140003fc1
lea rdx, [0x14001057b]
lea rsi, [rsp + 0x60]
mov r8d, 0x16
mov rcx, rsi
call fcn.1400060e8
mov r12, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
mov rcx, rbx
mov rdx, r12
call fcn.140006732
mov rdi, rax
mov rcx, qword [rsi]
mov rdx, r12
call fcn.140003fc1
test rdi, rdi
je 0x140003792
lea rax, [rsp + 0x9c]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0xa0]
lea r8, [rsp + 0xa8]
mov rcx, r13
mov r9d, 0x20
call rdi
and qword [rsp + 0x80], 0
lea rdx, [0x140010518]
lea rsi, [rsp + 0x60]
mov r8d, 9
mov rcx, rsi
call fcn.1400060e8
mov rdi, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006231
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, rdi
call fcn.140003fc1
lea rdx, [0x1400105aa]
lea rsi, [rsp + 0x60]
mov r8d, 0x10
mov rcx, rsi
call fcn.1400060e8
mov r12, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
mov rcx, rbx
mov rdx, r12
call fcn.140006732
mov rdi, rax
mov rcx, qword [rsi]
mov rdx, r12
call fcn.140003fc1
test rdi, rdi
je 0x140003848
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x20], rbp
and dword [rsp + 0x30], 0
and qword [rsp + 0x28], 0
lea rcx, [rsp + 0x80]
mov edx, 0x1fffff
xor r8d, r8d
mov r9, r13
call rdi
lea rdx, [0x14000b340]
lea rsi, [rsp + 0x60]
mov r8d, 9
mov rcx, rsi
call fcn.14000395c
mov rdi, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006231
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, rdi
call fcn.140003fc1
lea rdx, [0x14000b349]
lea rdi, [rsp + 0x60]
mov r8d, 0x15
mov rcx, rdi
call fcn.14000395c
mov r12, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
mov rcx, rbx
mov rdx, r12
call fcn.140006732
mov rsi, rax
mov rcx, qword [rdi]
mov rdx, r12
call fcn.140003fc1
test rsi, rsi
je 0x1400038ca
mov rcx, r13
mov dl, 1
xor r8d, r8d
call rsi
mov rcx, qword [rsp + 0x108]
mov rdx, r14
call fcn.140003fc1
mov rcx, qword [rsp + 0x110]
mov rdx, r15
call fcn.140003fc1
mov rdx, qword [rsp + 0xb8]
test rdx, rdx
je 0x140003910
mov rcx, qword [rsp + 0xb0]
mov r8d, 0x18
mov r9d, 0x10
call fcn.1400015fa
mov rdx, qword [rsp + 0x118]
test rdx, rdx
je 0x140003936
mov r8d, 0x18
mov r9d, 0x10
mov rcx, qword [rsp + 0xf8]
call fcn.1400015fa
movaps xmm6, xmmword [rsp + 0x1260]
movaps xmm7, xmmword [rsp + 0x1270]
add rsp, 0x1288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2