Function at 0x2b36ae1e0
Capabilities:
Accept command line arguments
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x668
call fcn.2b3656500
mov ebx, eax
call fcn.2b365a730
test ebx, ebx
je 0x2b36ae20b
test eax, eax
je 0x2b36b0bbd
mov ecx, 0x18
call fcn.2b37469f0
pxor xmm0, xmm0
movabs rdx, 0x4b503f414e41405b
mov dword [rsp + 0x180], 0x21554e
movups xmmword [rax], xmm0
movdqa xmm0, xmmword [str.__QNNAJP__ANA_PKA8ZSqcpqZNs_jgaZBmuljm_b]
mov qword [rsp + 0x98], rax
mov qword [rax + 0x10], 0
movabs rax, 0x504a414e4e513f21
mov qword [rsp + 0x340], rax
xor eax, eax
mov qword [rsp + 0x348], rdx
mov dword [rsp + 0x350], 0x21554e
movaps xmmword [rsp + 0x170], xmm0
nop dword [rax + rax]
movzx edx, byte [rsp + rax + 0x340]
add edx, 4
mov byte [rsp + rax + 0x340], dl
add rax, 1
cmp rax, 0x13
jne 0x2b36ae280
lea rax, [rsp + 0x460]
lea rbp, [rsp + 0x450]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x450], rax
lea rax, [rsp + 0x340]
mov rcx, rax
mov qword [rsp + 0x58], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x2f0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36b00b9
cmp rax, 1
jne 0x2b36ae75b
movzx eax, byte [rsp + 0x340]
mov byte [rsp + 0x460], al
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x458], rbx
lea rsi, [rsp + 0x480]
mov byte [rax + rbx], 0
mov dword [rsp + 0x2c0], 0x5d705d60
mov byte [rsp + 0x2c4], 0
movzx edi, byte [rsp + 0x2c0]
mov dword [rsp + 0xa8], 0x5d705d60
add edi, 4
mov byte [rsp + 0xac], 0
mov byte [rsp + 0x2c0], dil
movzx eax, byte [rsp + 0x2c1]
mov qword [rsp + 0x470], rsi
add eax, 4
mov byte [rsp + 0x2c1], al
movzx eax, byte [rsp + 0x2c2]
add eax, 4
mov byte [rsp + 0x2c2], al
movzx eax, byte [rsp + 0x2c3]
add eax, 4
mov byte [rsp + 0x2c3], al
lea rax, [rsp + 0x2c0]
mov rcx, rax
mov qword [rsp + 0x90], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x2f0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36b0061
cmp rax, 1
jne 0x2b36b0050
mov byte [rsp + 0x480], dil
mov rax, rsi
mov qword [rsp + 0x478], rbx
pxor xmm0, xmm0
mov ecx, 0x40
mov byte [rax + rbx], 0
mov qword [rsp + 0x1c0], 0
movaps xmmword [rsp + 0x1b0], xmm0
call fcn.2b37469f0
mov r12, qword [rsp + 0x450]
lea rcx, [rax + 0x10]
lea rdi, [rax + 0x40]
mov rbx, qword [rsp + 0x458]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x1b0], rax
mov qword [rax], rcx
mov rax, r12
add rax, rbx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x1c0], rdi
je 0x2b36ae442
test r12, r12
je 0x2b36b0aee
mov qword [rsp + 0x2f0], rbx
cmp rbx, 0xf
ja 0x2b36b0130
cmp rbx, 1
je 0x2b36b0109
test rbx, rbx
jne 0x2b36b015a
mov rax, qword [rsp + 0x50]
mov qword [rax + 8], rbx
lea r13, [rax + 0x20]
mov byte [rcx + rbx], 0
mov r12, qword [rsp + 0x470]
lea rcx, [rax + 0x30]
mov rbx, qword [rsp + 0x478]
mov qword [rax + 0x20], rcx
mov rax, r12
add rax, rbx
je 0x2b36ae4a1
test r12, r12
je 0x2b36b0af3
mov qword [rsp + 0x2f0], rbx
cmp rbx, 0xf
ja 0x2b36b017a
cmp rbx, 1
jne 0x2b36b011b
movzx eax, byte [r12]
mov rdi, qword [rsp + 0x50]
mov byte [rdi + 0x30], al
mov rax, qword [rsp + 0x50]
mov qword [rax + 0x28], rbx
mov rax, qword [rsp + 0x60]
mov byte [rcx + rbx], 0
mov rcx, qword [rsp + 0x470]
mov qword [rsp + 0x1b8], rax
cmp rcx, rsi
je 0x2b36ae502
mov rax, qword [rsp + 0x480]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov rcx, qword [rsp + 0x450]
cmp rcx, qword [rsp + 0x48]
je 0x2b36ae522
mov rax, qword [rsp + 0x460]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov ecx, 0x40
mov qword [rsp + 0x300], 0
call fcn.2b37469f0
lea rcx, [rax + 0x10]
movq xmm0, rax
lea rdi, [rax + 0x40]
mov r15, rax
mov qword [rax], rcx
mov rax, qword [rsp + 0x50]
punpcklqdq xmm0, xmm0
mov qword [rsp + 0x300], rdi
mov r12, qword [rax]
mov rbx, qword [rax + 8]
movaps xmmword [rsp + 0x2f0], xmm0
mov rax, r12
add rax, rbx
je 0x2b36ae57c
test r12, r12
je 0x2b36b0b55
mov qword [rsp + 0x450], rbx
cmp rbx, 0xf
ja 0x2b36b0248
cmp rbx, 1
je 0x2b36b0229
test rbx, rbx
jne 0x2b36b0268
mov rax, qword [rsp + 0x50]
mov qword [r15 + 8], rbx
lea r13, [r15 + 0x20]
mov byte [rcx + rbx], 0
lea rcx, [r15 + 0x30]
mov r12, qword [rax + 0x20]
mov rbx, qword [rax + 0x28]
mov qword [r15 + 0x20], rcx
mov rax, r12
add rax, rbx
je 0x2b36ae5d3
test r12, r12
je 0x2b36b0b58
mov qword [rsp + 0x450], rbx
cmp rbx, 0xf
ja 0x2b36b0283
cmp rbx, 1
jne 0x2b36b0237
movzx eax, byte [r12]
mov byte [r15 + 0x30], al
mov qword [r15 + 0x28], rbx
mov byte [rcx + rbx], 0
mov ecx, 0x60
mov qword [rsp + 0x2f8], rdi
call fcn.2b37469f0
mov dword [rax + 8], 0
mov r14, rax
lea rax, [rax + 0x20]
pxor xmm0, xmm0
mov qword [rsp + 0x70], rax
mov ecx, 0x40
mov qword [r14 + 0x10], rax
lea rax, [0x2b375aa10]
mov qword [r14], rax
lea rax, [r14 + 0x50]
mov qword [r14 + 0x18], 0
mov byte [r14 + 0x20], 0
mov qword [r14 + 0x30], 0
mov dword [r14 + 0x38], 0
mov byte [r14 + 0x3c], 0
mov qword [r14 + 0x40], rax
mov qword [r14 + 0x48], 0
mov byte [r14 + 0x50], 0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x350], 0
movaps xmmword [rsp + 0x340], xmm0
call fcn.2b37469f0
movq xmm0, rax
mov qword [rsp + 0x78], rax
mov r12, rax
mov rsi, r15
punpcklqdq xmm0, xmm0
lea rax, [rax + 0x40]
mov qword [rsp + 0x350], rax
movaps xmmword [rsp + 0x340], xmm0
jmp 0x2b36ae6ee
cmp rbx, 1
jne 0x2b36ae770
movzx eax, byte [r13]
mov byte [r12 + 0x10], al
add rsi, 0x20
mov qword [r12 + 8], rbx
add r12, 0x20
mov byte [rcx + rbx], 0
cmp rdi, rsi
je 0x2b36ae780
mov r13, qword [rsi]
mov rbx, qword [rsi + 8]
lea rcx, [r12 + 0x10]
mov qword [r12], rcx
mov rax, r13
add rax, rbx
je 0x2b36ae70f
test r13, r13
je 0x2b36b0b64
mov qword [rsp + 0x450], rbx
cmp rbx, 0xf
jbe 0x2b36ae6c0
xor r8d, r8d
mov rdx, rbp
mov rcx, r12
call fcn.2b3733d80
mov qword [r12], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [r12 + 0x10], rax
mov r8, rbx
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x450]
mov rcx, qword [r12]
jmp 0x2b36ae6d4
test rax, rax
jne 0x2b36b0b70
mov rax, qword [rsp + 0x48]
jmp 0x2b36ae301
test rbx, rbx
je 0x2b36ae6d4
jmp 0x2b36ae73f
mov rdx, qword [rsp + 0x58]
mov rcx, rbp
mov qword [rsp + 0x348], r12
call fcn.2b36acba0
mov rcx, qword [r14 + 0x40]
mov rax, qword [rsp + 0x450]
mov r8, qword [rsp + 0x458]
cmp rax, qword [rsp + 0x48]
je 0x2b36b02c0
mov rdx, qword [rsp + 0x460]
movq xmm0, r8
movq xmm1, rdx
punpcklqdq xmm0, xmm1
cmp qword [rsp + 0x68], rcx
je 0x2b36b0435
mov r9, qword [r14 + 0x50]
mov qword [r14 + 0x40], rax
mov qword [r14 + 0x48], r8
mov qword [r14 + 0x50], rdx
test rcx, rcx
je 0x2b36b043e
mov qword [rsp + 0x450], rcx
mov qword [rsp + 0x460], r9
mov qword [rsp + 0x458], 0
mov byte [rcx], 0
mov rcx, qword [rsp + 0x450]
cmp rcx, qword [rsp + 0x48]
je 0x2b36ae82d
mov rax, qword [rsp + 0x460]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov rbx, qword [rsp + 0x348]
mov r12, qword [rsp + 0x340]
cmp rbx, r12
je 0x2b36ae879
nop word [rax + rax]
mov rcx, qword [r12]
lea rax, [r12 + 0x10]
cmp rcx, rax
je 0x2b36aff18
mov rax, qword [r12 + 0x10]
add r12, 0x20
lea rdx, [rax + 1]
call fcn.2b37469b0
cmp rbx, r12
jne 0x2b36ae848
mov r12, qword [rsp + 0x340]
test r12, r12
je 0x2b36ae891
mov rdx, qword [rsp + 0x350]
mov rcx, r12
sub rdx, r12
call fcn.2b37469b0
mov rbx, r15
nop dword [rax]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x2b36aff00
mov rax, qword [rbx + 0x10]
add rbx, 0x20
lea rdx, [rax + 1]
call fcn.2b37469b0
cmp rdi, rbx
jne 0x2b36ae898
mov edx, 0x40
mov rcx, r15
mov edi, 0x71
mov r12d, 0x71
call fcn.2b37469b0
mov rax, qword [0x2b374eb50]
movabs rdx, 0x5a61676a60734e5a
movdqa xmm0, xmmword [0x2b374eb40]
mov word [rsp + 0x208], di
mov qword [rsp + 0x200], rax
movabs rax, 0x71706371535a3841
mov qword [rsp + 0x340], rax
movabs rax, 0x625f6d6a6c756d42
mov qword [rsp + 0x348], rdx
mov qword [rsp + 0x350], rax
xor eax, eax
mov word [rsp + 0x358], r12w
movaps xmmword [rsp + 0x1f0], xmm0
nop
movzx edx, byte [rsp + rax + 0x340]
add edx, 2
mov byte [rsp + rax + 0x340], dl
add rax, 1
cmp rax, 0x19
jne 0x2b36ae940
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x450], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x2f0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36b01d9
cmp rax, 1
jne 0x2b36b01c6
movzx eax, byte [rsp + 0x340]
mov byte [rsp + 0x460], al
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x458], rbx
pxor xmm0, xmm0
mov ecx, 0x20
mov byte [rax + rbx], 0
mov qword [rsp + 0x1e0], 0
movaps xmmword [rsp + 0x1d0], xmm0
call fcn.2b37469f0
mov r12, qword [rsp + 0x450]
mov r15, rax
lea rsi, [rax + 0x20]
mov qword [rsp + 0x1d0], rax
mov rbx, qword [rsp + 0x458]
lea rax, [rax + 0x10]
mov qword [rsp + 0x1e0], rsi
mov qword [rsp + 0x78], rax
mov qword [r15], rax
mov rax, r12
add rax, rbx
je 0x2b36aea18
test r12, r12
je 0x2b36b0b7a
mov qword [rsp + 0x2f0], rbx
cmp rbx, 0xf
ja 0x2b36aff60
cmp rbx, 1
jne 0x2b36aff48
movzx eax, byte [r12]
mov byte [r15 + 0x10], al
mov rax, qword [rsp + 0x78]
mov qword [r15 + 8], rbx
mov qword [rsp + 0x1d8], rsi
mov byte [rax + rbx], 0
mov rcx, qword [rsp + 0x450]
cmp rcx, qword [rsp + 0x48]
je 0x2b36aea78
mov rax, qword [rsp + 0x460]
lea rdx, [rax + 1]
call fcn.2b37469b0
nop word [rax + rax]
pxor xmm0, xmm0
mov ecx, 0x20
movups xmmword [rsp + 0x2f8], xmm0
call fcn.2b37469f0
mov r12, qword [r15]
mov r13, rax
lea rsi, [rax + 0x20]
movq xmm0, rax
mov rbx, qword [r15 + 8]
lea rax, [rax + 0x10]
punpcklqdq xmm0, xmm0
mov qword [rsp + 0x300], rsi
mov qword [rsp + 0x80], rax
mov qword [r13], rax
mov rax, r12
add rax, rbx
movaps xmmword [rsp + 0x2f0], xmm0
je 0x2b36aead6
test r12, r12
je 0x2b36b0ba5
mov qword [rsp + 0x450], rbx
cmp rbx, 0xf
ja 0x2b36affc0
cmp rbx, 1
jne 0x2b36affa0
movzx eax, byte [r12]
mov byte [r13 + 0x10], al
mov rax, qword [rsp + 0x80]
mov qword [r13 + 8], rbx
mov ecx, 0x60
mov byte [rax + rbx], 0
mov qword [rsp + 0x2f8], rsi
call fcn.2b37469f0
mov dword [rax + 8], 0
mov r12, rax
lea rax, [rax + 0x20]
pxor xmm0, xmm0
mov qword [rsp + 0x70], rax
lea rsi, [r12 + 0x50]
mov ecx, 0x20
mov qword [r12 + 0x10], rax
lea rax, [0x2b375aa10]
mov qword [r12 + 0x18], 0
mov byte [r12 + 0x20], 0
mov qword [r12 + 0x30], 0
mov dword [r12 + 0x38], 0
mov byte [r12 + 0x3c], 0
mov qword [r12], rax
mov qword [r12 + 0x40], rsi
mov qword [r12 + 0x48], 0
mov byte [r12 + 0x50], 0
mov qword [rsp + 0x350], 0
movaps xmmword [rsp + 0x340], xmm0
call fcn.2b37469f0
mov rdi, rax
lea rax, [rax + 0x20]
mov rbx, qword [r13 + 8]
mov qword [rsp + 0x68], rax
movq xmm0, rdi
lea rcx, [rdi + 0x10]
mov qword [rsp + 0x350], rax
mov rax, qword [r13]
punpcklqdq xmm0, xmm0
mov qword [rdi], rcx
mov rdx, rax
mov qword [rsp + 0x88], rax
add rdx, rbx
movaps xmmword [rsp + 0x340], xmm0
je 0x2b36aebef
test rax, rax
je 0x2b36b0bb1
mov qword [rsp + 0x450], rbx
cmp rbx, 0xf
ja 0x2b36b0010
cmp rbx, 1
jne 0x2b36b0000
mov rax, qword [rsp + 0x88]
movzx eax, byte [rax]
mov byte [rdi + 0x10], al
mov rax, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x58]
mov qword [rdi + 8], rbx
mov byte [rcx + rbx], 0
mov rcx, rbp
mov qword [rsp + 0x348], rax
call fcn.2b36acba0
mov rcx, qword [r12 + 0x40]
mov rax, qword [rsp + 0x450]
mov r8, qword [rsp + 0x458]
cmp rax, qword [rsp + 0x48]
je 0x2b36b0382
mov rdx, qword [rsp + 0x460]
movq xmm0, r8
movq xmm2, rdx
punpcklqdq xmm0, xmm2
cmp rsi, rcx
je 0x2b36b08d7
mov r9, qword [r12 + 0x50]
mov qword [r12 + 0x40], rax
mov qword [r12 + 0x48], r8
mov qword [r12 + 0x50], rdx
test rcx, rcx
je 0x2b36b08e2
mov qword [rsp + 0x450], rcx
mov qword [rsp + 0x460], r9
mov qword [rsp + 0x458], 0
mov byte [rcx], 0
mov rcx, qword [rsp + 0x450]
cmp rcx, qword [rsp + 0x48]
je 0x2b36aecd6
mov rax, qword [rsp + 0x460]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov rbx, qword [rsp + 0x348]
mov r12, qword [rsp + 0x340]
cmp rbx, r12
je 0x2b36aed21
nop dword [rax + rax]
mov rcx, qword [r12]
lea rax, [r12 + 0x10]
cmp rcx, rax
je 0x2b36aff30
mov rax, qword [r12 + 0x10]
add r12, 0x20
lea rdx, [rax + 1]
call fcn.2b37469b0
cmp rbx, r12
jne 0x2b36aecf0
mov r12, qword [rsp + 0x340]
test r12, r12
je 0x2b36aed39
mov rdx, qword [rsp + 0x350]
mov rcx, r12
sub rdx, r12
call fcn.2b37469b0
mov rcx, qword [r13]
cmp qword [rsp + 0x80], rcx
je 0x2b36aed54
mov rax, qword [r13 + 0x10]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov edx, 0x20
mov rcx, r13
call fcn.2b37469b0
mov rax, qword [r14]
lea rdx, [0x2b36adbc0]
mov rax, qword [rax]
cmp rax, rdx
jne 0x2b36b0908
xor eax, eax
mov ecx, 0x1e
mov r13, qword [r14 + 0x40]
lea r12, [r14 + 0x38]
lea rdi, [rsp + 0x350]
mov qword [rsp + 0x340], 0
lea rdx, [rsp + 0x10c]
mov qword [rsp + 0x348], 0
rep stosq qword [rdi], rax
mov rax, qword [0x2b374ea60]
mov dword [rsp + 0xf8], 0x3f626c
lea rcx, [rsp + 0x118]
mov qword [rsp + 0xf0], rax
movabs rax, 0x636e6e3f66725f4e
mov qword [rsp + 0x10c], rax
mov dword [rsp + 0x114], 0x3f626c
movzx eax, byte [rsp + 0x10c]
add eax, 2
mov dword [rdi], 0
mov byte [rsp + 0x10c], al
movzx eax, byte [rsp + 0x10d]
add eax, 2
mov byte [rsp + 0x10d], al
movzx eax, byte [rsp + 0x10e]
add eax, 2
mov byte [rsp + 0x10e], al
movzx eax, byte [rsp + 0x10f]
add eax, 2
mov byte [rsp + 0x10f], al
movzx eax, byte [rsp + 0x110]
add eax, 2
mov byte [rsp + 0x110], al
movzx eax, byte [rsp + 0x111]
add eax, 2
mov byte [rsp + 0x111], al
movzx eax, byte [rsp + 0x112]
add eax, 2
mov byte [rsp + 0x112], al
movzx eax, byte [rsp + 0x113]
add eax, 2
mov byte [rsp + 0x113], al
movzx eax, byte [rsp + 0x114]
add eax, 2
mov byte [rsp + 0x114], al
movzx eax, byte [rsp + 0x115]
add eax, 2
mov byte [rsp + 0x115], al
movzx eax, byte [rsp + 0x116]
add eax, 2
mov byte [rsp + 0x116], al
mov rax, qword [0x2b374ea68]
mov dword [rsp + 0xe8], 0x97979f
mov qword [rsp + 0xe0], rax
movabs rax, 0xd5928b9a8c9793a8
mov qword [rsp + 0x118], rax
mov dword [rsp + 0x120], 0x97979f
movzx eax, byte [rsp + 0x118]
xor eax, 0xfffffffb
mov byte [rsp + 0x118], al
movzx eax, byte [rsp + 0x119]
xor eax, 0xfffffffb
mov byte [rsp + 0x119], al
movzx eax, byte [rsp + 0x11a]
xor eax, 0xfffffffb
mov byte [rsp + 0x11a], al
movzx eax, byte [rsp + 0x11b]
xor eax, 0xfffffffb
mov byte [rsp + 0x11b], al
movzx eax, byte [rsp + 0x11c]
xor eax, 0xfffffffb
mov byte [rsp + 0x11c], al
movzx eax, byte [rsp + 0x11d]
xor eax, 0xfffffffb
mov byte [rsp + 0x11d], al
movzx eax, byte [rsp + 0x11e]
xor eax, 0xfffffffb
mov byte [rsp + 0x11e], al
movzx eax, byte [rsp + 0x11f]
xor eax, 0xfffffffb
mov byte [rsp + 0x11f], al
movzx eax, byte [rsp + 0x120]
xor eax, 0xfffffffb
mov byte [rsp + 0x120], al
movzx eax, byte [rsp + 0x121]
xor eax, 0xfffffffb
mov byte [rsp + 0x121], al
movzx eax, byte [rsp + 0x122]
xor eax, 0xfffffffb
mov byte [rsp + 0x122], al
call fcn.2b3656120
mov rdi, qword [rsp + 0x58]
mov rdx, r13
mov rcx, rdi
call rax
mov rax, qword [rsp + 0x48]
mov rcx, rdi
mov qword [rsp + 0x450], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x2f0], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36b03bf
cmp rax, 1
jne 0x2b36b02fb
movzx edx, byte [rsp + 0x340]
mov byte [rsp + 0x460], dl
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x458], rax
lea rcx, [rsp + 0x160]
mov byte [rdx + rax], 0
mov rax, qword [0x2b374ea70]
lea rdx, [rsp + 0x124]
mov dword [rsp + 0x108], 0xb89c95
mov r13, qword [rsp + 0x450]
mov qword [rsp + 0x100], rax
movabs rax, 0x90bf9c8d989c8bba
mov qword [rsp + 0x124], rax
mov dword [rsp + 0x12c], 0xb89c95
movzx eax, byte [rsp + 0x124]
xor eax, 0xfffffff9
mov byte [rsp + 0x124], al
movzx eax, byte [rsp + 0x125]
xor eax, 0xfffffff9
mov byte [rsp + 0x125], al
movzx eax, byte [rsp + 0x126]
xor eax, 0xfffffff9
mov byte [rsp + 0x126], al
movzx eax, byte [rsp + 0x127]
xor eax, 0xfffffff9
mov byte [rsp + 0x127], al
movzx eax, byte [rsp + 0x128]
xor eax, 0xfffffff9
mov byte [rsp + 0x128], al
movzx eax, byte [rsp + 0x129]
xor eax, 0xfffffff9
mov byte [rsp + 0x129], al
movzx eax, byte [rsp + 0x12a]
xor eax, 0xfffffff9
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x12b]
xor eax, 0xfffffff9
mov byte [rsp + 0x12b], al
movzx eax, byte [rsp + 0x12c]
xor eax, 0xfffffff9
mov byte [rsp + 0x12c], al
movzx eax, byte [rsp + 0x12d]
xor eax, 0xfffffff9
mov byte [rsp + 0x12d], al
movzx eax, byte [rsp + 0x12e]
xor eax, 0xfffffff9
mov byte [rsp + 0x12e], al
mov rax, qword [0x2b374ea78]
mov qword [rsp + 0x150], rax
movabs rax, 0xc8c9969f94889f91
mov dword [rsp + 0x158], 0x96969ed4
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0x96969ed4
mov byte [rsp + 0x16c], 0
movzx eax, byte [rsp + 0x160]
mov byte [rsp + 0x15c], 0
xor eax, 0xfffffffa
mov byte [rsp + 0x160], al
movzx eax, byte [rsp + 0x161]
xor eax, 0xfffffffa
mov byte [rsp + 0x161], al
movzx eax, byte [rsp + 0x162]
xor eax, 0xfffffffa
mov byte [rsp + 0x162], al
movzx eax, byte [rsp + 0x163]
xor eax, 0xfffffffa
mov byte [rsp + 0x163], al
movzx eax, byte [rsp + 0x164]
xor eax, 0xfffffffa
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
xor eax, 0xfffffffa
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
xor eax, 0xfffffffa
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
xor eax, 0xfffffffa
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
xor eax, 0xfffffffa
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
xor eax, 0xfffffffa
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
xor eax, 0xfffffffa
mov byte [rsp + 0x16a], al
movzx eax, byte [rsp + 0x16b]
xor eax, 0xfffffffa
mov byte [rsp + 0x16b], al
call fcn.2b3656120
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov r8d, 1
mov rcx, r13
mov dword [rsp + 0x28], pe_nt_image_headers64
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call rax
mov rcx, rax
mov rdx, r12
call fcn.2b368c990
mov qword [r14 + 0x30], rax
mov r8, qword [rsp + 0x450]
mov rcx, rax
cmp r8, qword [rsp + 0x48]
je 0x2b36af2bd
mov rax, qword [rsp + 0x460]
mov rcx, r8
lea rdx, [rax + 1]
call fcn.2b37469b0
mov rcx, qword [r14 + 0x30]
test rcx, rcx
setne byte [r14 + 0x3c]
movdqa xmm0, xmmword [0x2b374eb60]
mov byte [rsp + 0x2b0], 0
movabs rax, 0xcd98cb9acac5ca98
movabs rdx, 0xcb9fc8cfcd9d9ac8
mov qword [rsp + 0x340], rax
movabs rax, 0xce9ec5c8cccacecb
mov qword [rsp + 0x348], rdx
movabs rdx, 0xc9c59e999dc89dc9
mov qword [rsp + 0x350], rax
xor eax, eax
mov qword [rsp + 0x358], rdx
movaps xmmword [rsp + 0x290], xmm0
movdqa xmm0, xmmword [0x2b374eb70]
mov byte [rsp + 0x360], 0
movaps xmmword [rsp + 0x2a0], xmm0
nop
movzx edx, byte [rsp + rax + 0x340]
xor edx, 0xfffffffc
mov byte [rsp + rax + 0x340], dl
add rax, 1
cmp rax, 0x20
jne 0x2b36af340
movdqa xmm0, xmmword [str._434_c4a0463455ab8_44a77424ac_e26_a532505e2553c34c6___eb14ca51e_]
mov byte [rsp + 0x330], 0
movabs rax, 0x613463603433342f
movabs rdx, 0x6135353433363430
mov qword [rsp + 0x450], rax
movabs rax, 0x3737613434603862
movaps xmmword [rsp + 0x2f0], xmm0
movdqa xmm0, xmmword [0x2b374eb90]
mov qword [rsp + 0x458], rdx
movabs rdx, 0x3265606361343234
mov qword [rsp + 0x460], rax
movabs rax, 0x3035323335612f36
mov qword [rsp + 0x468], rdx
movabs rdx, 0x3363333535326535
movaps xmmword [rsp + 0x300], xmm0
movdqa xmm0, xmmword [0x2b374eba0]
mov qword [rsp + 0x470], rax
movabs rax, 0x6265602f2f366334
mov qword [rsp + 0x478], rdx
movabs rdx, 0x6065313561633431
mov qword [rsp + 0x480], rax
xor eax, eax
mov qword [rsp + 0x488], rdx
movaps xmmword [rsp + 0x310], xmm0
movdqa xmm0, xmmword [0x2b374ebb0]
mov byte [rsp + 0x490], 0
movaps xmmword [rsp + 0x320], xmm0
nop
movzx edx, byte [rsp + rax + 0x450]
add edx, 1
mov byte [rsp + rax + 0x450], dl
add rax, 1
cmp rax, 0x40
jne 0x2b36af440
mov edx, dword [r14 + 0x38]
mov r9, qword [rsp + 0x58]
mov r8, rbp
call fcn.2b367e490
mov edx, dword [r14 + 0x38]
mov rcx, qword [r14 + 0x30]
mov r9d, 0x72
mov r8d, 0xffffffff
call fcn.2b36798b0
mov r14, rax
mov ebx, 0xffff8d81
movabs rax, 0x959897909e908b96
movabs rdx, 0x9595988d8a9790a6
mov esi, 0xffff8d81
mov qword [rsp + 0x450], rax
xor eax, eax
movdqa xmm0, xmmword [0x2b374ebc0]
mov qword [rsp + 0x458], rdx
mov dword [rsp + 0x1a0], 0x8dd78b9c
mov dword [rsp + 0x460], 0x8dd78b9c
mov word [rsp + 0x1a4], bx
mov word [rsp + 0x464], si
mov byte [rsp + 0x1a6], 0
mov byte [rsp + 0x466], 0
movaps xmmword [rsp + 0x190], xmm0
nop
movzx edx, byte [rsp + rax + 0x450]
xor edx, 0xfffffff9
mov byte [rsp + rax + 0x450], dl
add rax, 1
cmp rax, 0x16
jne 0x2b36af500
mov rdx, rbp
mov rcx, r14
call fcn.2b3677c50
test eax, eax
jne 0x2b36af860
lea rdx, [rsp + 0x140]
lea r8, [rsp + 0x160]
mov rcx, r14
call fcn.2b36788c0
mov rcx, qword [rsp + 0x140]
mov edx, 0xa
call sub.msvcrt.dll_strchr
mov rcx, r14
mov byte [rax], 0
mov rdx, qword [rsp + 0x140]
call fcn.2b3677c50
mov rax, qword [0x2b374ebe0]
mov r10d, 0xffffa48b
movabs rdx, 0xa49b91949a8da8a4
mov r11d, 0xffffa48b
movdqa xmm0, xmmword [0x2b374ebd0]
mov byte [rsp + 0x22a], 0
mov qword [rsp + 0x220], rax
movabs rax, 0x8b8a9d8bada4c2bb
mov qword [rsp + 0x450], rax
movabs rax, 0x9c999794968f97bc
mov qword [rsp + 0x458], rdx
mov word [rsp + 0x228], r10w
mov qword [rsp + 0x460], rax
xor eax, eax
mov word [rsp + 0x468], r11w
mov byte [rsp + 0x46a], 0
movaps xmmword [rsp + 0x210], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x450]
xor edx, 0xfffffff8
mov byte [rsp + rax + 0x450], dl
add rax, 1
cmp rax, 0x1a
jne 0x2b36af5f8
lea rax, [rsp + 0x240]
mov rcx, rbp
lea r12, [rsp + 0x230]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x230], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x340], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36b082d
cmp rax, 1
jne 0x2b36b081a
movzx eax, byte [rsp + 0x450]
mov byte [rsp + 0x240], al
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x238], rbx
lea rdi, [rsp + 0x260]
mov byte [rax + rbx], 0
mov r12, qword [rsp + 0x230]
mov rbx, qword [rsp + 0x238]
mov qword [rsp + 0x250], rdi
mov rax, r12
mov r13, qword [rsp + 0x140]
add rax, rbx
je 0x2b36af6b1
test r12, r12
je 0x2b36b0b15
mov qword [rsp + 0x450], rbx
cmp rbx, 0xf
ja 0x2b36b0889
cmp rbx, 1
jne 0x2b36b0878
movzx eax, byte [r12]
mov byte [rsp + 0x260], al
mov rax, rdi
mov qword [rsp + 0x258], rbx
mov rcx, r13
mov byte [rax + rbx], 0
call sub.msvcrt.dll_strlen
mov r8, rax
movabs rax, 0x3fffffffffffffff
sub rax, qword [rsp + 0x258]
cmp r8, rax
ja 0x2b36b0b09
lea rcx, [rsp + 0x250]
mov rdx, r13
call fcn.2b3733c40
mov rcx, qword [rsp + 0x160]
mov edx, 4
call sub.msvcrt.dll_calloc
mov rdx, qword [rsp + 0x250]
mov r8, qword [rsp + 0x258]
mov rcx, rax
mov r12, rax
call sub.msvcrt.dll_mbstowcs
mov rdx, qword [rsp + 0x250]
mov rcx, r14
call fcn.2b3678a70
mov dword [rsp + 0x450], 0x958f91d2
mov rdx, rbp
mov rcx, qword [rsp + 0x250]
mov byte [rsp + 0x454], 0
movzx eax, byte [rsp + 0x450]
mov dword [rsp + 0xb0], 0x958f91d2
xor eax, 0xfffffffc
mov byte [rsp + 0xb4], 0
mov byte [rsp + 0x450], al
movzx eax, byte [rsp + 0x451]
xor eax, 0xfffffffc
mov byte [rsp + 0x451], al
movzx eax, byte [rsp + 0x452]
xor eax, 0xfffffffc
mov byte [rsp + 0x452], al
movzx eax, byte [rsp + 0x453]
xor eax, 0xfffffffc
mov byte [rsp + 0x453], al
call fcn.2b3687760
xor esi, esi
xor ebx, ebx
test eax, eax
je 0x2b36b0460
mov rcx, qword [rsp + 0x250]
cmp rcx, rdi
je 0x2b36af803
mov rax, qword [rsp + 0x260]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov rcx, qword [rsp + 0x230]
cmp rcx, qword [rsp + 0x70]
je 0x2b36af823
mov rax, qword [rsp + 0x240]
lea rdx, [rax + 1]
call fcn.2b37469b0
cmp rbx, rsi
je 0x2b36af860
xor r12d, r12d
nop dword [rax + rax]
mov rcx, qword [rbx]
mov rdx, r12
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
mov rdx, r12
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rbx]
mov rdx, r12
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r12, qword [rbx]
add rbx, 8
cmp rsi, rbx
jne 0x2b36af830
movdqa xmm0, xmmword [str.custom_installer]
movabs rax, 0x695f6d6f74737563
movabs rdx, 0x72656c6c6174736e
mov dword [rsp + 0x240], 0x6578652e
mov qword [rsp + 0x450], rax
xor eax, eax
mov qword [rsp + 0x458], rdx
mov byte [rsp + 0x244], 0
mov dword [rsp + 0x460], 0x6578652e
mov byte [rsp + 0x464], 0
movaps xmmword [rsp + 0x230], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x450]
mov byte [rsp + rax + 0x450], dl
add rax, 1
cmp rax, 0x14
jne 0x2b36af8c0
mov rdx, rbp
mov rcx, r14
call fcn.2b3677c50
lea rdx, [rsp + 0xb8]
lea r8, [rsp + 0xc0]
mov rcx, r14
call fcn.2b36788c0
movdqa xmm0, xmmword [0x2b374ec00]
mov ecx, 0x5f
mov r8d, 0x5f
movabs rax, 0x4c675f6e6d734d1f
movabs rdx, 0x6d736d561f6e6969
mov qword [rsp + 0x450], rax
movabs rax, 0x665e562c2d675f6e
mov qword [rsp + 0x458], rdx
movabs rdx, 0x725f286e6d696266
mov qword [rsp + 0x460], rax
xor eax, eax
mov qword [rsp + 0x468], rdx
movaps xmmword [rsp + 0x2c0], xmm0
movdqa xmm0, xmmword [0x2b374ec10]
mov word [rsp + 0x2e0], cx
mov word [rsp + 0x470], r8w
movaps xmmword [rsp + 0x2d0], xmm0
nop word [rax + rax]
movzx edx, byte [rsp + rax + 0x450]
add edx, 6
mov byte [rsp + rax + 0x450], dl
add rax, 1
cmp rax, 0x21
jne 0x2b36af988
lea rax, [rsp + 0x280]
mov rcx, rbp
lea r12, [rsp + 0x270]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x270], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x340], rax
mov rbx, rax
cmp rax, 0xf
ja 0x2b36b0337
cmp rax, 1
jne 0x2b36b0324
movzx eax, byte [rsp + 0x450]
mov byte [rsp + 0x280], al
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x278], rbx
mov edx, 4
mov rdi, rbp
mov byte [rax + rbx], 0
mov rbx, qword [rsp + 0x278]
mov rcx, rbx
call sub.msvcrt.dll_calloc
mov rdx, qword [rsp + 0x270]
mov r8, rbx
mov rcx, rax
mov r12, rax
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x41
movabs rdx, 0x685f6768696c6370
rep stosq qword [rdi], rax
mov rax, qword [0x2b374ec30]
movdqa xmm0, xmmword [0x2b374ec20]
mov qword [rsp + 0x260], rax
mov eax, 0x51
mov word [rsp + 0x268], ax
movabs rax, 0x683f5e685b6a723f
mov qword [rsp + 0x340], rax
movabs rax, 0x6d6168636c6e4d6e
mov qword [rsp + 0x348], rdx
mov edx, 0x51
mov qword [rsp + 0x350], rax
xor eax, eax
mov word [rsp + 0x358], dx
movaps xmmword [rsp + 0x250], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x340]
add edx, 6
mov byte [rsp + rax + 0x340], dl
add rax, 1
cmp rax, 0x19
jne 0x2b36afab8
mov rax, qword [0x2b374ea28]
mov rdi, qword [rsp + 0x58]
lea r13, [rsp + 0x160]
mov dword [rsp + 0x138], 0x92929ad0
mov rcx, r13
mov byte [rsp + 0x13c], 0
mov qword [rsp + 0x130], rax
mov rdx, rdi
movabs rax, 0xcccd929b908c9b95
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0x92929ad0
mov byte [rsp + 0x16c], 0
movzx eax, byte [rsp + 0x160]
xor eax, 0xfffffffe
mov byte [rsp + 0x160], al
movzx eax, byte [rsp + 0x161]
xor eax, 0xfffffffe
mov byte [rsp + 0x161], al
movzx eax, byte [rsp + 0x162]
xor eax, 0xfffffffe
mov byte [rsp + 0x162], al
movzx eax, byte [rsp + 0x163]
xor eax, 0xfffffffe
mov byte [rsp + 0x163], al
movzx eax, byte [rsp + 0x164]
xor eax, 0xfffffffe
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
xor eax, 0xfffffffe
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
xor eax, 0xfffffffe
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
xor eax, 0xfffffffe
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
xor eax, 0xfffffffe
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
xor eax, 0xfffffffe
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
xor eax, 0xfffffffe
mov byte [rsp + 0x16a], al
movzx eax, byte [rsp + 0x16b]
xor eax, 0xfffffffe
mov byte [rsp + 0x16b], al
call fcn.2b3656120
mov r8d, 0x104
mov rdx, rbp
mov rcx, r12
call rax
mov rax, qword [rsp + 0xc0]
mov r8, rbp
mov rdx, rbp
xor ecx, ecx
mov r9, qword [rsp + 0xb8]
mov dword [rsp + 0x20], eax
call fcn.2b368c0e0
mov rax, qword [0x2b374ec38]
mov rdx, r13
mov rcx, rdi
mov dword [rsp + 0xd8], 0x6e6e60
mov dword [rsp + 0x148], 0x97979fd5
mov qword [rsp + 0xd0], rax
movabs rax, 0x5e6a6d4b6f647340
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], 0x6e6e60
movzx eax, byte [rsp + 0x160]
mov byte [rsp + 0x14c], 0
add eax, 5
mov byte [rsp + 0x160], al
movzx eax, byte [rsp + 0x161]
add eax, 5
mov byte [rsp + 0x161], al
movzx eax, byte [rsp + 0x162]
add eax, 5
mov byte [rsp + 0x162], al
movzx eax, byte [rsp + 0x163]
add eax, 5
mov byte [rsp + 0x163], al
movzx eax, byte [rsp + 0x164]
add eax, 5
mov byte [rsp + 0x164], al
movzx eax, byte [rsp + 0x165]
add eax, 5
mov byte [rsp + 0x165], al
movzx eax, byte [rsp + 0x166]
add eax, 5
mov byte [rsp + 0x166], al
movzx eax, byte [rsp + 0x167]
add eax, 5
mov byte [rsp + 0x167], al
movzx eax, byte [rsp + 0x168]
add eax, 5
mov byte [rsp + 0x168], al
movzx eax, byte [rsp + 0x169]
add eax, 5
mov byte [rsp + 0x169], al
movzx eax, byte [rsp + 0x16a]
add eax, 5
mov byte [rsp + 0x16a], al
mov rax, qword [0x2b374eb20]
mov qword [rsp + 0x140], rax
movabs rax, 0xc9c8979e95899e90
mov qword [rsp + 0x340], rax
mov dword [rsp + 0x348], 0x97979fd5
mov byte [rsp + 0x34c], 0
movzx eax, byte [rsp + 0x340]
xor eax, 0xfffffffb
mov byte [rsp + 0x340], al
movzx eax, byte [rsp + 0x341]
xor eax, 0xfffffffb
mov byte [rsp + 0x341], al
movzx eax, byte [rsp + 0x342]
xor eax, 0xfffffffb
mov byte [rsp + 0x342], al
movzx eax, byte [rsp + 0x343]
xor eax, 0xfffffffb
mov byte [rsp + 0x343], al
movzx eax, byte [rsp + 0x344]
xor eax, 0xfffffffb
mov byte [rsp + 0x344], al
movzx eax, byte [rsp + 0x345]
xor eax, 0xfffffffb
mov byte [rsp + 0x345], al
movzx eax, byte [rsp + 0x346]
xor eax, 0xfffffffb
mov byte [rsp + 0x346], al
movzx eax, byte [rsp + 0x347]
xor eax, 0xfffffffb
mov byte [rsp + 0x347], al
movzx eax, byte [rsp + 0x348]
xor eax, 0xfffffffb
mov byte [rsp + 0x348], al
movzx eax, byte [rsp + 0x349]
xor eax, 0xfffffffb
mov byte [rsp + 0x349], al
movzx eax, byte [rsp + 0x34a]
xor eax, 0xfffffffb
mov byte [rsp + 0x34a], al
movzx eax, byte [rsp + 0x34b]
xor eax, 0xfffffffb
mov byte [rsp + 0x34b], al
call fcn.2b3656120
xor ecx, ecx
call rax
mov rcx, qword [rsp + 0x270]
cmp rcx, qword [rsp + 0x68]
je 0x2b36afe85
mov rax, qword [rsp + 0x280]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov rcx, qword [r15]
cmp qword [rsp + 0x78], rcx
je 0x2b36afe9c
mov rax, qword [r15 + 0x10]
lea rdx, [rax + 1]
call fcn.2b37469b0
mov edx, 0x20
mov rcx, r15
call fcn.2b37469b0
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rbx]
lea rax, [rbx + 0x10]
cmp rcx, rax
je 0x2b36b0310
mov rax, qword [rbx + 0x10]
add rbx, 0x20
lea rdx, [rax + 1]
call fcn.2b37469b0
cmp qword [rsp + 0x60], rbx
jne 0x2b36afeae
mov rcx, qword [rsp + 0x50]
mov edx, 0x40
call fcn.2b37469b0
mov eax, 1
add rsp, 0x668
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
add rbx, 0x20
cmp rdi, rbx
jne 0x2b36ae898
jmp 0x2b36ae8be
add r12, 0x20
cmp rbx, r12
jne 0x2b36ae848
jmp 0x2b36ae871
add r12, 0x20
cmp rbx, r12
jne 0x2b36aecf0
jmp 0x2b36aed19
test rbx, rbx
jne 0x2b36b0d62
mov rax, qword [rsp + 0x78]
jmp 0x2b36aea42
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
mov rcx, r15
call fcn.2b3733d80
mov qword [r15], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [r15 + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x2f0]
mov rax, qword [r15]
jmp 0x2b36aea42
test rbx, rbx
jne 0x2b36b0b86
mov rax, qword [rsp + 0x80]
jmp 0x2b36aeb03
xor r8d, r8d
mov rdx, rbp
mov rcx, r13
call fcn.2b3733d80
mov qword [r13], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [r13 + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x450]
mov rax, qword [r13]
jmp 0x2b36aeb03
test rbx, rbx
je 0x2b36aec19
jmp 0x2b36b0030
xor r8d, r8d
mov rdx, rbp
mov rcx, rdi
call fcn.2b3733d80
mov qword [rdi], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [rdi + 0x10], rax
mov rdx, qword [rsp + 0x88]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x450]
mov rcx, qword [rdi]
jmp 0x2b36aec19
test rax, rax
jne 0x2b36b0b93
mov rax, rsi
jmp 0x2b36ae3ce
lea rcx, [rsp + 0x470]
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
call fcn.2b3733d80
mov qword [rsp + 0x470], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x480], rax
mov rdx, qword [rsp + 0x90]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x470]
jmp 0x2b36ae3ce
mov rcx, rbp
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
call fcn.2b3733d80
mov qword [rsp + 0x450], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x460], rax
mov rdx, qword [rsp + 0x58]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x450]
jmp 0x2b36ae301
movzx eax, byte [r12]
mov rdi, qword [rsp + 0x50]
mov byte [rdi + 0x10], al
jmp 0x2b36ae467
test rbx, rbx
je 0x2b36ae4ca
jmp 0x2b36b01a5
mov rdi, qword [rsp + 0x50]
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
mov rcx, rdi
call fcn.2b3733d80
mov qword [rdi], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rdi + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x2f0]
mov rcx, qword [rax]
jmp 0x2b36ae467
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
mov rcx, r13
call fcn.2b3733d80
mov rdi, qword [rsp + 0x50]
mov rcx, rax
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rdi + 0x30], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x2f0]
mov rcx, qword [rax + 0x20]
jmp 0x2b36ae4ca
test rax, rax
jne 0x2b36b0b9b
mov rax, qword [rsp + 0x48]
jmp 0x2b36ae9a6
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
mov rcx, rbp
call fcn.2b3733d80
mov qword [rsp + 0x450], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x460], rax
mov rdx, qword [rsp + 0x58]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x2f0]
mov rax, qword [rsp + 0x450]
jmp 0x2b36ae9a6
movzx eax, byte [r12]
mov byte [r15 + 0x10], al
jmp 0x2b36ae5a1
test rbx, rbx
je 0x2b36ae5f8
jmp 0x2b36b02a4
xor r8d, r8d
mov rdx, rbp
mov rcx, r15
call fcn.2b3733d80
mov qword [r15], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [r15 + 0x10], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x450]
mov rcx, qword [r15]
jmp 0x2b36ae5a1
xor r8d, r8d
mov rdx, rbp
mov rcx, r13
call fcn.2b3733d80
mov qword [r15 + 0x20], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [r15 + 0x30], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x450]
mov rcx, qword [r15 + 0x20]
jmp 0x2b36ae5f8
test r8, r8
je 0x2b36b02e5
cmp r8, 1
je 0x2b36b0a7a
mov rdx, qword [rsp + 0x48]
call sub.msvcrt.dll_memcpy
mov r8, qword [rsp + 0x458]
mov rcx, qword [r14 + 0x40]
mov qword [r14 + 0x48], r8
mov byte [rcx + r8], 0
mov rcx, qword [rsp + 0x450]
jmp 0x2b36ae7fe
test rax, rax
jne 0x2b36b0aff
mov rdx, qword [rsp + 0x48]
jmp 0x2b36af013
add rbx, 0x20
cmp qword [rsp + 0x60], rbx
jne 0x2b36afeae
jmp 0x2b36afed6
test rax, rax
jne 0x2b36b0b3f
mov rax, qword [rsp + 0x68]
jmp 0x2b36af9fc
mov rdx, qword [rsp + 0x58]
xor r8d, r8d
mov rcx, r12
call fcn.2b3733d80
mov qword [rsp + 0x270], rax
mov rcx, rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x280], rax
mov r8, rbx
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x340]
mov rax, qword [rsp + 0x270]
jmp 0x2b36af9fc
test r8, r8
je 0x2b36b03a8
cmp r8, 1
je 0x2b36b0aa5
mov rdx, qword [rsp + 0x48]
call sub.msvcrt.dll_memcpy
mov r8, qword [rsp + 0x458]
mov rcx, qword [r12 + 0x40]
mov qword [r12 + 0x48], r8
mov byte [rcx + r8], 0
mov rcx, qword [rsp + 0x450]
jmp 0x2b36aeca7
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
mov rcx, rbp
call fcn.2b3733d80
mov rdx, qword [rsp + 0x2f0]
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x460], rdx
cmp ebx, 8
jae 0x2b36b0916
test bl, 4
jne 0x2b36b0ac1
test ebx, ebx
je 0x2b36b0420
movzx edx, byte [rsp + 0x340]
mov byte [rax], dl
test bl, 2
je 0x2b36b0420
mov rdi, qword [rsp + 0x58]
mov ecx, ebx
movzx edx, word [rdi + rcx - 2]
mov word [rax + rcx - 2], dx
mov rax, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x450]
jmp 0x2b36af013
mov qword [r14 + 0x40], rax
movups xmmword [r14 + 0x48], xmm0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x450], rax
lea rax, [rsp + 0x460]
mov qword [rsp + 0x48], rax
mov rcx, rax
jmp 0x2b36ae7fe
lea rax, [rsp + 0x280]
lea r13, [rsp + 0x270]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x270], rax
test r12, r12
je 0x2b36b094e
mov rcx, r12
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rbx, rsi
sar rbx, 1
mov qword [rsp + 0x450], rbx
cmp rsi, 0xe
ja 0x2b36b0996
mov rcx, qword [rsp + 0x270]
mov rax, rbx
cmp rbx, 1
je 0x2b36b09f7
test rbx, rbx
je 0x2b36b04df
mov r8, rsi
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x270]
xor r9d, r9d
mov qword [rsp + 0x278], rax
lea r12, [0x2b374ea1a]
mov word [rcx + rax*2], r9w
lea rax, [rsp + 0x2d0]
mov rcx, r12
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x2c0], rax
call sub.msvcrt.dll_wcslen
lea rsi, [rax + rax]
mov rbx, rsi
sar rbx, 1
mov qword [rsp + 0x450], rbx
cmp rsi, 0xe
ja 0x2b36b09c4
mov rcx, qword [rsp + 0x2c0]
mov rax, rbx
cmp rbx, 1
je 0x2b36b098a
test rbx, rbx
je 0x2b36b0567
mov r8, rsi
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x2c0]
xor edx, edx
mov qword [rsp + 0x2c8], rax
mov word [rcx + rax*2], dx
mov ecx, 0x40
call fcn.2b37469f0
xor esi, esi
mov r12, rax
mov qword [rax + 0x10], 0
xor r13d, r13d
mov word [rax + 0x18], si
mov rsi, qword [rsp + 0x278]
mov qword [rax + 8], 0
lea rax, [0x2b375aa80]
mov qword [r12], rax
lea rax, [r12 + 0x30]
lea rbx, [rsi + rsi]
mov qword [rsp + 0x88], rax
mov qword [r12 + 0x20], rax
mov rax, qword [rsp + 0x270]
mov word [r12 + 0x30], r13w
lea r13, [rsp + 0x350]
mov rsi, rax
mov qword [rsp + 0x340], r13
add rsi, rbx
mov qword [rsp + 0x90], rax
mov qword [r12 + 0x28], 0
je 0x2b36b0604
test rax, rax
je 0x2b36b0b49
mov rsi, rbx
mov rcx, r13
sar rsi, 1
mov qword [rsp + 0x450], rsi
mov rax, rsi
cmp rbx, 0xe
ja 0x2b36b095a
cmp rsi, 1
je 0x2b36b0a04
test rsi, rsi
je 0x2b36b0651
mov rdx, qword [rsp + 0x90]
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x340]
xor ebx, ebx
mov qword [rsp + 0x348], rax
mov word [rcx + rax*2], bx
lea rbx, [0x2b374ea1c]
mov rcx, rbx
call sub.msvcrt.dll_wcslen
mov r8, rax
movabs rax, 0x1fffffffffffffff
sub rax, qword [rsp + 0x348]
cmp r8, rax
ja 0x2b36b0b21
mov rcx, qword [rsp + 0x58]
mov rdx, rbx
call fcn.2b37374a0
mov r8, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2c0]
mov rcx, qword [rsp + 0x58]
call fcn.2b37374a0
mov rsi, qword [rsp + 0x48]
lea rdx, [rax + 0x10]
mov qword [rsp + 0x450], rsi
mov rcx, qword [rax]
cmp rcx, rdx
je 0x2b36b0a17
mov qword [rsp + 0x450], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x460], rcx
mov rcx, qword [rax + 8]
xor r11d, r11d
mov qword [rsp + 0x458], rcx
mov qword [rax], rdx
mov rcx, qword [r12 + 0x20]
mov qword [rax + 8], 0
mov word [rax + 0x10], r11w
mov rax, qword [rsp + 0x450]
cmp rax, qword [rsp + 0x48]
je 0x2b36b0a29
movdqu xmm0, xmmword [rsp + 0x458]
cmp qword [rsp + 0x88], rcx
je 0x2b36b0a95
mov rdx, qword [r12 + 0x30]
mov qword [r12 + 0x20], rax
movups xmmword [r12 + 0x28], xmm0
test rcx, rcx
je 0x2b36b0783
mov qword [rsp + 0x450], rcx
mov qword [rsp + 0x460], rdx
mov qword [rsp + 0x458], 0
xor r9d, r9d
mov word [rcx], r9w
cmp rcx, qword [rsp + 0x48]
je 0x2b36b0783
mov rax, qword [rsp + 0x460]
lea rdx, [rax + rax + 2]
call fcn.2b37469b0
mov rcx, qword [rsp + 0x340]
cmp rcx, r13
je 0x2b36b07a2
mov rax, qword [rsp + 0x350]
lea rdx, [rax + rax + 2]
call fcn.2b37469b0
mov rcx, qword [rsp + 0x98]
lea r8, [rsp + 0xc8]
xor edx, edx
mov qword [rsp + 0xc8], r12
call fcn.2b3730800
mov rcx, qword [rsp + 0x2c0]
cmp rcx, qword [rsp + 0x80]
je 0x2b36b07e5
mov rax, qword [rsp + 0x2d0]
lea rdx, [rax + rax + 2]
call fcn.2b37469b0
mov rcx, qword [rsp + 0x270]
cmp rcx, qword [rsp + 0x68]
je 0x2b36b0806
mov rax, qword [rsp + 0x280]
lea rdx, [rax + rax + 2]
call fcn.2b37469b0
mov rax, qword [rsp + 0x98]
mov rbx, qword [rax]
mov rsi, qword [rax + 8]
jmp 0x2b36af7e5
test rax, rax
jne 0x2b36b0b35
mov rax, qword [rsp + 0x70]
jmp 0x2b36af66c
mov rdx, qword [rsp + 0x58]
xor r8d, r8d
mov rcx, r12
call fcn.2b3733d80
mov qword [rsp + 0x230], rax
mov rcx, rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x240], rax
mov r8, rbx
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x340]
mov rax, qword [rsp + 0x230]
jmp 0x2b36af66c
test rbx, rbx
jne 0x2b36b0b2d
mov rax, rdi
jmp 0x2b36af6dc
lea rcx, [rsp + 0x250]
xor r8d, r8d
mov rdx, rbp
call fcn.2b3733d80
mov qword [rsp + 0x250], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x260], rax
mov r8, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x450]
mov rax, qword [rsp + 0x250]
jmp 0x2b36af6dc
mov qword [r12 + 0x40], rax
movups xmmword [r12 + 0x48], xmm0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x450], rax
lea rax, [rsp + 0x460]
mov qword [rsp + 0x48], rax
mov rcx, rax
jmp 0x2b36aeca7
mov rcx, r14
call rax
mov rcx, qword [r14 + 0x30]
jmp 0x2b36af2c5
mov rdx, qword [rsp + 0x340]
lea rdi, [rax + 8]
and rdi, 0xfffffffffffffff8
mov qword [rax], rdx
mov rsi, qword [rsp + 0x58]
mov edx, ebx
mov rcx, qword [rsi + rdx - 8]
mov qword [rax + rdx - 8], rcx
sub rax, rdi
lea ecx, [rbx + rax]
sub rsi, rax
shr ecx, 3
rep movsq qword [rdi], qword [rsi]
jmp 0x2b36b0420
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
mov rcx, qword [rsp + 0x58]
xor r8d, r8d
mov rdx, rbp
call fcn.2b3737610
mov qword [rsp + 0x340], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x350], rax
jmp 0x2b36b0622
xor r8d, r8d
mov word [rcx], r8w
jmp 0x2b36b0567
xor r8d, r8d
mov rdx, rbp
mov rcx, r13
call fcn.2b3737610
mov qword [rsp + 0x270], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x280], rax
jmp 0x2b36b04b5
mov rcx, qword [rsp + 0x90]
xor r8d, r8d
mov rdx, rbp
call fcn.2b3737610
mov qword [rsp + 0x2c0], rax
mov rcx, rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x2d0], rax
jmp 0x2b36b053d
movzx edx, word [r12]
mov word [rcx], dx
jmp 0x2b36b04df
mov rsi, qword [rsp + 0x90]
movzx edx, word [rsi]
mov word [rcx], dx
jmp 0x2b36b0651
movdqu xmm3, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x460], xmm3
jmp 0x2b36b06e4
mov r8, qword [rsp + 0x458]
mov rax, qword [rsp + 0x48]
test r8, r8
je 0x2b36b0a65
cmp r8, 1
je 0x2b36b0ade
add r8, r8
mov rdx, rax
call sub.msvcrt.dll_memcpy
mov r8, qword [rsp + 0x458]
mov rcx, qword [r12 + 0x20]
mov rax, qword [rsp + 0x450]
xor r10d, r10d
mov qword [r12 + 0x28], r8
mov word [rcx + r8*2], r10w
mov rcx, rax
jmp 0x2b36b0757
movzx eax, byte [rsp + 0x460]
mov byte [rcx], al
mov r8, qword [rsp + 0x458]
mov rcx, qword [r14 + 0x40]
jmp 0x2b36b02e5
mov qword [r12 + 0x20], rax
movups xmmword [r12 + 0x28], xmm0
jmp 0x2b36b0783
movzx eax, byte [rsp + 0x460]
mov byte [rcx], al
mov r8, qword [rsp + 0x458]
mov rcx, qword [r12 + 0x40]
jmp 0x2b36b03a8
mov edx, dword [rsp + 0x340]
mov ecx, ebx
mov dword [rax], edx
mov rdi, qword [rsp + 0x58]
mov edx, dword [rdi + rcx - 4]
mov dword [rax + rcx - 4], edx
jmp 0x2b36b0420
movzx edx, word [rsp + 0x460]
mov word [rcx], dx
jmp 0x2b36b0a65
mov r13, qword [rsp + 0x50]
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
mov rax, qword [rsp + 0x48]
jmp 0x2b36b03ea
lea rcx, [0x2b374ea04]
call fcn.2b3747ab0
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
lea rcx, [0x2b374ea04]
call fcn.2b3747ab0
mov rcx, rdi
jmp 0x2b36b08b7
mov rcx, qword [rsp + 0x70]
jmp 0x2b36b0858
mov rcx, qword [rsp + 0x68]
jmp 0x2b36b0362
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
mov r13, r15
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
mov rcx, qword [rsp + 0x48]
jmp 0x2b36b00e7
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
mov rcx, qword [rsp + 0x80]
jmp 0x2b36affe1
mov rcx, rsi
jmp 0x2b36b0094
mov rcx, qword [rsp + 0x48]
jmp 0x2b36b0207
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
lea rcx, [0x2b374e9b0]
call fcn.2b37479c0
movdqa xmm0, xmmword [0x2b374eb10]
mov ecx, 0x13
xor eax, eax
lea rdi, [rsp + 0x340]
mov byte [rsp + 0x302], 0
lea rsi, [rsp + 0x2f0]
mov word [rsp + 0x300], 0xb89c
mov qword [rsp + 0x58], rdi
movaps xmmword [rsp + 0x2f0], xmm0
rep movsb byte [rdi], byte [rsi]
movzx edx, byte [rsp + rax + 0x340]
xor edx, 0xfffffff9
mov byte [rsp + rax + 0x340], dl
add rax, 1
cmp rax, 0x12
jne 0x2b36b0bfd
mov rax, qword [0x2b374eb20]
mov byte [rsp + 0x29c], 0
lea rdi, [rsp + 0x2c0]
lea rsi, [rsp + 0x290]
mov dword [rsp + 0x298], 0x97979fd5
mov ecx, 0xd
mov rdx, qword [rsp + 0x58]
lea r12, [rsp + 0x450]
mov qword [rsp + 0x290], rax
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x2c0]
movzx eax, byte [rsp + 0x2c0]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c0], al
movzx eax, byte [rsp + 0x2c1]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c1], al
movzx eax, byte [rsp + 0x2c2]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c2], al
movzx eax, byte [rsp + 0x2c3]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c3], al
movzx eax, byte [rsp + 0x2c4]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c4], al
movzx eax, byte [rsp + 0x2c5]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c5], al
movzx eax, byte [rsp + 0x2c6]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c6], al
movzx eax, byte [rsp + 0x2c7]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c7], al
movzx eax, byte [rsp + 0x2c8]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c8], al
movzx eax, byte [rsp + 0x2c9]
xor eax, 0xfffffffb
mov byte [rsp + 0x2c9], al
movzx eax, byte [rsp + 0x2ca]
xor eax, 0xfffffffb
mov byte [rsp + 0x2ca], al
movzx eax, byte [rsp + 0x2cb]
xor eax, 0xfffffffb
mov byte [rsp + 0x2cb], al
call fcn.2b3656120
mov rdx, r12
xor ecx, ecx
mov r8d, 0x104
call rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rcx, r12
mov rdx, rax
call fcn.2b36600b0
mov rcx, qword [rsp + 0x78]
jmp 0x2b36aff85