Function at 0x14010f9e0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
cmp byte [0x1408a68bd], 0
jne 0x140110dfe
lea rcx, [rbp + 0x48]
call fcn.14010e7b0
mov ecx, dword [rax]
xor ecx, 0xc6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xor edi, edi
mov esi, edi
movabs r15, 0xb2f4fc0794908cf3
movabs r14, 0x101010101010101
lea r12, [0x140000000]
movabs r13, 0x2aaaaaaaaaaaaaab
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fa60
imul rbx, rcx, 0x64
jmp 0x14010fad0
cmp rbx, 0x16e3600
jne 0x14010fab2
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010facd
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rbx
cqo
idiv rcx
mov rax, rdx
cqo
movzx edx, dx
add rax, rdx
movzx eax, ax
sub rax, rdx
inc rax
xor rax, 0x10
shl rax, 0xa
or rax, r14
mov qword [rsi + r12 + 0x8a6940], rax
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fb27
imul rbx, rcx, 0x64
jmp 0x14010fb97
cmp rbx, 0x16e3600
jne 0x14010fb79
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010fb94
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rbx
cqo
idiv rcx
mov rax, rdx
cqo
and edx, 0x1ffff
add rax, rdx
and eax, 0x1ffff
sub rax, rdx
inc rax
xor rax, 0x20
shl rax, 0xb
or rax, r14
mov qword [rsi + r12 + 0x8a69c0], rax
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fbf3
imul rbx, rcx, 0x64
jmp 0x14010fc63
cmp rbx, 0x16e3600
jne 0x14010fc45
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010fc60
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rbx
cqo
idiv rcx
mov rcx, rdx
mov rax, r13
imul rdx
sar rdx, 0xf
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*2]
shl rax, 0x10
sub rcx, rax
inc rcx
xor rcx, 0x40
shl rcx, 0xc
or rcx, r14
mov qword [rsi + r12 + 0x8a6a40], rcx
add rsi, 8
cmp rsi, 0x80
jb 0x14010fa41
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fcdc
imul rbx, rcx, 0x64
jmp 0x14010fd4c
cmp rbx, 0x16e3600
jne 0x14010fd2e
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010fd49
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14010fd60
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a68cc], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fd92
imul rbx, rcx, 0x64
jmp 0x14010fe02
cmp rbx, 0x16e3600
jne 0x14010fde4
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010fdff
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14010fe16
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a68cd], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fe48
imul rbx, rcx, 0x64
jmp 0x14010feb8
cmp rbx, 0x16e3600
jne 0x14010fe9a
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010feb5
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14010fecc
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a68ce], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010fefe
imul rbx, rcx, 0x64
jmp 0x14010ff6e
cmp rbx, 0x16e3600
jne 0x14010ff50
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14010ff6b
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14010ff82
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a68cf], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14010ffb4
imul rbx, rcx, 0x64
jmp 0x140110024
cmp rbx, 0x16e3600
jne 0x140110006
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x140110021
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140110038
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac0], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14011006a
imul rbx, rcx, 0x64
jmp 0x1401100da
cmp rbx, 0x16e3600
jne 0x1401100bc
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x1401100d7
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1401100ee
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac1], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x140110120
imul rbx, rcx, 0x64
jmp 0x140110190
cmp rbx, 0x16e3600
jne 0x140110172
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14011018d
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1401101a4
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac2], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x1401101d6
imul rbx, rcx, 0x64
jmp 0x140110246
cmp rbx, 0x16e3600
jne 0x140110228
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x140110243
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14011025a
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac3], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14011028c
imul rbx, rcx, 0x64
jmp 0x1401102fc
cmp rbx, 0x16e3600
jne 0x1401102de
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x1401102f9
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140110310
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac4], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x140110342
imul rbx, rcx, 0x64
jmp 0x1401103b2
cmp rbx, 0x16e3600
jne 0x140110394
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x1401103af
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1401103c6
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac5], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x1401103f8
imul rbx, rcx, 0x64
jmp 0x140110468
cmp rbx, 0x16e3600
jne 0x14011044a
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x140110465
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14011047c
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac6], dl
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x1401104ae
imul rbx, rcx, 0x64
jmp 0x14011051e
cmp rbx, 0x16e3600
jne 0x140110500
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x14011051b
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x140110532
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [0x1408a6ac7], dl
mov esi, edi
lea r14, [0x1408a6ac8]
nop
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x14011056f
imul rbx, rcx, 0x64
jmp 0x1401105df
cmp rbx, 0x16e3600
jne 0x1401105c1
mov rax, r15
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
imul rax, r8, 0x3b9aca00
jmp 0x1401105dc
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rbx, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1401105f3
dec eax
or eax, 0xfffffff0
inc eax
inc al
movzx ecx, al
mov rax, rbx
cqo
idiv rcx
mov byte [r14], dl
inc esi
inc r14
cmp esi, 0xc
jb 0x140110550
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [str.92:6], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b4d], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b4e], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b4f], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b5c], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b5d], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [reloc.WS2_32.dll_gethostname], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b5f], r8b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
xor byte [0x140713b6c], r8b
mov ecx, 0x18
call fcn.14022485c
test rax, rax
je 0x1401107cb
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
jmp 0x1401107ce
mov rax, rdi
mov qword [0x1408a6930], rax
mov ecx, 0x18
call fcn.14022485c
test rax, rax
je 0x1401107f1
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
jmp 0x1401107f4
mov rax, rdi
mov qword [0x1408a6938], rax
cmp qword [0x1408a6930], rdi
je 0x140110dfe
test rax, rax
je 0x140110dfe
lea rcx, [rbp + 0x48]
call fcn.14010e7b0
movzx ecx, byte [rax]
xor byte [reloc.WS2_32.dll_gethostname], cl
lea rax, [fcn.1400caf50]
mov qword [rbp + 0x48], rax
lea rax, [fcn.1400cafd0]
mov qword [rbp + 0x50], rax
lea rax, [fcn.1400cb080]
mov qword [rbp + 0x58], rax
lea rax, [fcn.1400cb130]
mov qword [rbp + 0x60], rax
lea rax, [fcn.1400cb200]
mov qword [rbp - 0x38], rax
lea rax, [fcn.1400cb2d0]
mov qword [rbp - 0x30], rax
lea rax, [fcn.1400cb3c0]
mov qword [rbp - 0x28], rax
lea rax, [fcn.1400cb4b0]
mov qword [rbp - 0x20], rax
lea rax, [0x1400cb5b0]
mov qword [rbp - 0x18], rax
mov edx, edi
lea rcx, [0x140713b6d]
mov r8, rcx
movzx r9d, byte [rbp + 0x4f]
movzx r10d, byte [rbp + 0x4e]
movzx r11d, byte [rbp + 0x4d]
movzx ebx, byte [rbp + 0x4c]
movzx esi, byte [rbp + 0x4b]
movzx r14d, byte [rbp + 0x4a]
movzx r15d, byte [rbp + 0x49]
movzx r12d, byte [rbp + 0x48]
nop dword [rax + rax]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x1401108c0
mov byte [rbp + 0x4f], r9b
mov byte [rbp + 0x4e], r10b
mov byte [rbp + 0x4d], r11b
mov byte [rbp + 0x4c], bl
mov byte [rbp + 0x4b], sil
mov byte [rbp + 0x4a], r14b
mov byte [rbp + 0x49], r15b
mov byte [rbp + 0x48], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp + 0x57]
movzx r10d, byte [rbp + 0x56]
movzx r11d, byte [rbp + 0x55]
movzx ebx, byte [rbp + 0x54]
movzx esi, byte [rbp + 0x53]
movzx r14d, byte [rbp + 0x52]
movzx r15d, byte [rbp + 0x51]
movzx r12d, byte [rbp + 0x50]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x140110930
mov byte [rbp + 0x57], r9b
mov byte [rbp + 0x56], r10b
mov byte [rbp + 0x55], r11b
mov byte [rbp + 0x54], bl
mov byte [rbp + 0x53], sil
mov byte [rbp + 0x52], r14b
mov byte [rbp + 0x51], r15b
mov byte [rbp + 0x50], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp + 0x5f]
movzx r10d, byte [rbp + 0x5e]
movzx r11d, byte [rbp + 0x5d]
movzx ebx, byte [rbp + 0x5c]
movzx esi, byte [rbp + 0x5b]
movzx r14d, byte [rbp + 0x5a]
movzx r15d, byte [rbp + 0x59]
movzx r12d, byte [rbp + 0x58]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x1401109a0
mov byte [rbp + 0x5f], r9b
mov byte [rbp + 0x5e], r10b
mov byte [rbp + 0x5d], r11b
mov byte [rbp + 0x5c], bl
mov byte [rbp + 0x5b], sil
mov byte [rbp + 0x5a], r14b
mov byte [rbp + 0x59], r15b
mov byte [rbp + 0x58], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp + 0x67]
movzx r10d, byte [rbp + 0x66]
movzx r11d, byte [rbp + 0x65]
movzx ebx, byte [rbp + 0x64]
movzx esi, byte [rbp + 0x63]
movzx r14d, byte [rbp + 0x62]
movzx r15d, byte [rbp + 0x61]
movzx r12d, byte [rbp + 0x60]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x140110a10
mov byte [rbp + 0x67], r9b
mov byte [rbp + 0x66], r10b
mov byte [rbp + 0x65], r11b
mov byte [rbp + 0x64], bl
mov byte [rbp + 0x63], sil
mov byte [rbp + 0x62], r14b
mov byte [rbp + 0x61], r15b
mov byte [rbp + 0x60], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp - 0x31]
movzx r10d, byte [rbp - 0x32]
movzx r11d, byte [rbp - 0x33]
movzx ebx, byte [rbp - 0x34]
movzx esi, byte [rbp - 0x35]
movzx r14d, byte [rbp - 0x36]
movzx r15d, byte [rbp - 0x37]
movzx r12d, byte [rbp - 0x38]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x140110a80
mov byte [rbp - 0x31], r9b
mov byte [rbp - 0x32], r10b
mov byte [rbp - 0x33], r11b
mov byte [rbp - 0x34], bl
mov byte [rbp - 0x35], sil
mov byte [rbp - 0x36], r14b
mov byte [rbp - 0x37], r15b
mov byte [rbp - 0x38], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp - 0x29]
movzx r10d, byte [rbp - 0x2a]
movzx r11d, byte [rbp - 0x2b]
movzx ebx, byte [rbp - 0x2c]
movzx esi, byte [rbp - 0x2d]
movzx r14d, byte [rbp - 0x2e]
movzx r15d, byte [rbp - 0x2f]
movzx r12d, byte [rbp - 0x30]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x140110af0
mov byte [rbp - 0x29], r9b
mov byte [rbp - 0x2a], r10b
mov byte [rbp - 0x2b], r11b
mov byte [rbp - 0x2c], bl
mov byte [rbp - 0x2d], sil
mov byte [rbp - 0x2e], r14b
mov byte [rbp - 0x2f], r15b
mov byte [rbp - 0x30], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp - 0x21]
movzx r10d, byte [rbp - 0x22]
movzx r11d, byte [rbp - 0x23]
movzx ebx, byte [rbp - 0x24]
movzx esi, byte [rbp - 0x25]
movzx r14d, byte [rbp - 0x26]
movzx r15d, byte [rbp - 0x27]
movzx r12d, byte [rbp - 0x28]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x140110b60
mov byte [rbp - 0x21], r9b
mov byte [rbp - 0x22], r10b
mov byte [rbp - 0x23], r11b
mov byte [rbp - 0x24], bl
mov byte [rbp - 0x25], sil
mov byte [rbp - 0x26], r14b
mov byte [rbp - 0x27], r15b
mov byte [rbp - 0x28], r12b
mov edx, edi
mov r8, rcx
movzx r9d, byte [rbp - 0x19]
movzx r10d, byte [rbp - 0x1a]
movzx r11d, byte [rbp - 0x1b]
movzx ebx, byte [rbp - 0x1c]
movzx esi, byte [rbp - 0x1d]
movzx r14d, byte [rbp - 0x1e]
movzx r15d, byte [rbp - 0x1f]
movzx r12d, byte [rbp - 0x20]
movzx eax, byte [r8]
xor r12b, al
xor r15b, al
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
inc edx
lea r8, [r8 + 1]
cmp edx, 1
jb 0x140110bd0
mov byte [rbp - 0x19], r9b
mov byte [rbp - 0x1a], r10b
mov byte [rbp - 0x1b], r11b
mov byte [rbp - 0x1c], bl
mov byte [rbp - 0x1d], sil
mov byte [rbp - 0x1e], r14b
mov byte [rbp - 0x1f], r15b
mov byte [rbp - 0x20], r12b
movzx edx, byte [rbp - 0x11]
movzx r8d, byte [rbp - 0x12]
movzx r9d, byte [rbp - 0x13]
movzx r10d, byte [rbp - 0x14]
movzx r11d, byte [rbp - 0x15]
movzx ebx, byte [rbp - 0x16]
movzx esi, byte [rbp - 0x17]
movzx r14d, byte [rbp - 0x18]
nop word [rax + rax]
movzx eax, byte [rcx]
xor r14b, al
xor sil, al
xor bl, al
xor r11b, al
xor r10b, al
xor r9b, al
xor r8b, al
xor dl, al
inc edi
lea rcx, [rcx + 1]
cmp edi, 1
jb 0x140110c40
mov byte [rbp - 0x11], dl
mov byte [rbp - 0x12], r8b
mov byte [rbp - 0x13], r9b
mov byte [rbp - 0x14], r10b
mov byte [rbp - 0x15], r11b
mov byte [rbp - 0x16], bl
mov byte [rbp - 0x17], sil
mov byte [rbp - 0x18], r14b
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110ca1
mov rax, qword [rbp + 0x48]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110caa
lea r8, [rbp + 0x48]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110cc9
mov rax, qword [rbp + 0x50]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110cd2
lea r8, [rbp + 0x50]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110cf1
mov rax, qword [rbp + 0x58]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110cfa
lea r8, [rbp + 0x58]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110d19
mov rax, qword [rbp + 0x60]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110d22
lea r8, [rbp + 0x60]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110d41
mov rax, qword [rbp - 0x38]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110d4a
lea r8, [rbp - 0x38]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110d69
mov rax, qword [rbp - 0x30]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110d72
lea r8, [rbp - 0x30]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110d91
mov rax, qword [rbp - 0x28]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110d9a
lea r8, [rbp - 0x28]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110db9
mov rax, qword [rbp - 0x20]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140110dc2
lea r8, [rbp - 0x20]
call fcn.1400d33f0
mov rcx, qword [0x1408a6938]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140110dea
mov rax, qword [rbp - 0x18]
mov qword [rdx], rax
add qword [rcx + 8], 8
mov byte [0x1408a68bd], 1
mov al, 1
jmp 0x140110e00
lea r8, [rbp - 0x18]
call fcn.1400d33f0
mov byte [0x1408a68bd], 1
mov al, 1
jmp 0x140110e00
xor al, al
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret