Function at 0x14000d8d0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x638
xor edx, edx
movzx r8d, word [0x14012017e]
movabs rax, 0xffffffffffff
movabs r9, 0xffffffff0000ffff
and rdx, rax
movzx eax, word [0x14012017c]
mov rbx, rdx
xor r8d, 0x6b
movzx edx, word [0x140120180]
mov bx, ax
movzx r8d, r8w
xor bx, 0x6b
shl r8, 0x10
xor edx, 0x6b
mov rax, rbx
movzx edx, dx
and rax, r9
shl rdx, 0x20
mov qword [rsp + 0x680], rcx
mov rcx, qword [0x1401202c8]
or rax, r8
lea rsi, [rsp + 0xc4]
movabs r8, 0xffff0000ffffffff
mov dword [rsp + 0xc0], 0x6b
and rax, r8
mov qword [rsp + 0xc4], rcx
mov rcx, rsi
or rax, rdx
mov qword [rsp + 0xcc], rax
movzx eax, word [rsp + 0xc4]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xc4], ax
movzx eax, word [rsp + 0xc6]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xc6], ax
movzx eax, word [rsp + 0xc8]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xc8], ax
movzx eax, word [rsp + 0xca]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xca], ax
movzx eax, word [rsp + 0xcc]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xcc], ax
movzx eax, word [rsp + 0xce]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xce], ax
movzx eax, word [rsp + 0xd0]
mov edx, dword [rsp + 0xc0]
xor eax, edx
mov word [rsp + 0xd0], ax
xor eax, eax
mov word [rsp + 0xd2], ax
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0x4d0], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x460], rdi
cmp rbx, 0xe
ja 0x14000fbc2
mov rcx, qword [rsp + 0x4d0]
cmp rdi, 1
jne 0x14000faa4
movzx eax, word [rsp + 0xc4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r13d, r13d
mov qword [rsp + 0x4d8], rax
xor r14d, r14d
mov word [rcx + rdx], r13w
mov dword [rsp + 0x1a0], 0x34
mov edx, dword [rsp + 0x1a0]
mov word [rsp + 0x176], r14w
mov edi, dword [rsp + 0x1a0]
mov r8d, dword [rsp + 0x1a0]
mov esi, dword [rsp + 0x1a0]
xor edx, 0x77
mov eax, dword [rsp + 0x1a0]
add edi, 1
movd xmm0, edx
mov ebp, dword [rsp + 0x1a0]
mov ecx, dword [rsp + 0x1a0]
add r8d, 2
add esi, 3
xor edi, 0x69
mov ebx, dword [rsp + 0x1a0]
add eax, 4
xor esi, 0x6e
add ebp, 5
xor r8d, 0x6e
xor eax, 0x74
pinsrw xmm0, edi, 1
add ecx, 6
mov r11d, dword [rsp + 0x1a0]
add ebx, 7
movd xmm3, r8d
movd xmm2, eax
mov r10d, dword [rsp + 0x1a0]
pinsrw xmm3, esi, 1
pinsrw xmm2, ebp, 1
mov r9d, dword [rsp + 0x1a0]
xor cx, word [str.temp]
xor bx, word [0x14012018a]
add r11d, 8
movd xmm1, ecx
add r10d, 9
punpckldq xmm0, xmm3
add r9d, 0xa
xor r11w, word [0x14012018c]
xor r10w, word [0x14012018e]
pinsrw xmm1, ebx, 1
xor r9w, word [0x140120190]
punpckldq xmm2, xmm1
lea rsi, [rsp + 0x1a4]
mov word [rsp + 0x170], r11w
mov word [rsp + 0x172], r10w
punpcklqdq xmm0, xmm2
mov rcx, rsi
mov word [rsp + 0x174], r9w
mov rax, qword [rsp + 0x170]
movups xmmword [rsp + 0x1a4], xmm0
mov qword [rsp + 0x1b4], rax
movzx eax, word [rsp + 0x1a4]
mov edx, dword [rsp + 0x1a0]
movups xmmword [rsp + 0x160], xmm0
xor eax, edx
mov word [rsp + 0x1a4], ax
movzx edx, word [rsp + 0x1a6]
mov eax, dword [rsp + 0x1a0]
add eax, 1
xor eax, edx
mov word [rsp + 0x1a6], ax
movzx edx, word [rsp + 0x1a8]
mov eax, dword [rsp + 0x1a0]
add eax, 2
xor eax, edx
mov word [rsp + 0x1a8], ax
movzx edx, word [rsp + 0x1aa]
mov eax, dword [rsp + 0x1a0]
add eax, 3
xor eax, edx
mov word [rsp + 0x1aa], ax
movzx edx, word [rsp + 0x1ac]
mov eax, dword [rsp + 0x1a0]
add eax, 4
xor eax, edx
mov word [rsp + 0x1ac], ax
movzx edx, word [rsp + 0x1ae]
mov eax, dword [rsp + 0x1a0]
add eax, 5
xor eax, edx
xor r15d, r15d
mov word [rsp + 0x1ae], ax
movzx edx, word [rsp + 0x1b0]
mov eax, dword [rsp + 0x1a0]
add eax, 6
xor eax, edx
mov word [rsp + 0x1b0], ax
movzx edx, word [rsp + 0x1b2]
mov eax, dword [rsp + 0x1a0]
add eax, 7
xor eax, edx
mov word [rsp + 0x1b2], ax
movzx edx, word [rsp + 0x1b4]
mov eax, dword [rsp + 0x1a0]
add eax, 8
xor eax, edx
mov word [rsp + 0x1b4], ax
movzx edx, word [rsp + 0x1b6]
mov eax, dword [rsp + 0x1a0]
add eax, 9
xor eax, edx
mov word [rsp + 0x1b6], ax
movzx edx, word [rsp + 0x1b8]
mov eax, dword [rsp + 0x1a0]
add eax, 0xa
xor eax, edx
mov word [rsp + 0x1b8], ax
lea rax, [rsp + 0x500]
mov word [rsp + 0x1ba], r15w
mov qword [rsp + 0x4f0], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x460], rdi
cmp rbx, 0xe
ja 0x14000fd0b
mov rcx, qword [rsp + 0x4f0]
cmp rdi, 1
jne 0x14000ffa4
movzx eax, word [rsp + 0x1a4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x4f8], rax
xor edi, edi
mov ebp, 8
xor r12d, r12d
movzx eax, word [0x140120198]
mov word [rcx + rdx], di
lea rsi, [rsp + 0xe0]
movzx edx, word [0x140120196]
mov rcx, rsi
movq xmm0, qword [0x1401202d0]
mov word [rsp + 0x108], bp
mov word [rsp + 0x112], r12w
shl rax, 0x10
or rax, rdx
movzx edx, word [0x140120194]
shl rax, 0x10
or rax, rdx
movzx edx, word [str.thumb]
shl rax, 0x10
or rax, rdx
movq xmm5, rax
mov rax, qword [0x1401202d8]
paddw xmm0, xmm5
mov qword [rsp + 0x100], rax
movq qword [rsp + 0x10a], xmm0
movdqu xmm5, xmmword [rsp + 0x100]
mov eax, dword [rsp + 0x110]
movups xmmword [rsp + 0xe0], xmm5
mov dword [rsp + 0xf0], eax
movzx eax, word [rsp + 0xe0]
sub eax, 8
mov word [rsp + 0xe0], ax
movzx eax, word [rsp + 0xe2]
sub eax, 8
mov word [rsp + 0xe2], ax
movzx eax, word [rsp + 0xe4]
sub eax, 8
mov word [rsp + 0xe4], ax
movzx eax, word [rsp + 0xe6]
sub eax, 8
mov word [rsp + 0xe6], ax
movzx eax, word [rsp + 0xe8]
sub eax, 8
mov word [rsp + 0xe8], ax
movzx eax, word [rsp + 0xea]
sub eax, 8
mov word [rsp + 0xea], ax
movzx eax, word [rsp + 0xec]
sub eax, 8
mov word [rsp + 0xec], ax
movzx eax, word [rsp + 0xee]
sub eax, 8
mov word [rsp + 0xee], ax
movzx eax, word [rsp + 0xf0]
sub eax, 8
mov word [rsp + 0xf0], ax
lea rax, [rsp + 0x520]
mov qword [rsp + 0x510], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x460], rdi
cmp rbx, 0xe
ja 0x14000fdc3
mov rcx, qword [rsp + 0x510]
cmp rdi, 1
jne 0x14000ffd4
movzx eax, word [rsp + 0xe0]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r11d, r11d
mov qword [rsp + 0x518], rax
xor ebx, ebx
mov word [rcx + rdx], r11w
mov dword [rsp + 0x1c0], 0x51
mov eax, dword [rsp + 0x1c0]
mov edi, dword [rsp + 0x1c0]
mov r8d, dword [rsp + 0x1c0]
mov word [rsp + 0x196], bx
mov esi, dword [rsp + 0x1c0]
mov edx, dword [rsp + 0x1c0]
xor eax, 0x74
mov ebp, dword [rsp + 0x1c0]
mov ecx, dword [rsp + 0x1c0]
add edi, 1
movd xmm0, eax
mov ebx, dword [rsp + 0x1c0]
add edx, 4
add esi, 3
xor edi, 0x68
add r8d, 2
xor edx, 0x62
add ecx, 6
xor esi, 0x6d
xor cx, word [str._Recycle.Bin]
add ebp, 5
movd xmm2, edx
add ebx, 7
mov r11d, dword [rsp + 0x1c0]
xor r8d, 0x75
movd xmm1, ecx
mov r10d, dword [rsp + 0x1c0]
xor bx, word [0x1401201a0]
movd xmm3, r8d
pinsrw xmm0, edi, 1
mov r9d, dword [rsp + 0x1c0]
pinsrw xmm3, esi, 1
pinsrw xmm1, ebx, 1
add r11d, 8
add r10d, 9
xor r11w, word [0x1401201a2]
add r9d, 0xa
punpckldq xmm0, xmm3
xor r10w, word [0x1401201a4]
xor r9w, word [0x1401201a6]
pinsrw xmm2, ebp, 1
mov word [rsp + 0x190], r11w
mov word [rsp + 0x192], r10w
punpckldq xmm2, xmm1
mov word [rsp + 0x194], r9w
punpcklqdq xmm0, xmm2
mov rax, qword [rsp + 0x190]
movups xmmword [rsp + 0x1c4], xmm0
mov qword [rsp + 0x1d4], rax
movzx eax, word [rsp + 0x1c4]
mov edx, dword [rsp + 0x1c0]
movups xmmword [rsp + 0x180], xmm0
xor eax, edx
mov word [rsp + 0x1c4], ax
movzx edx, word [rsp + 0x1c6]
mov eax, dword [rsp + 0x1c0]
add eax, 1
xor eax, edx
mov word [rsp + 0x1c6], ax
movzx edx, word [rsp + 0x1c8]
mov eax, dword [rsp + 0x1c0]
add eax, 2
xor eax, edx
mov word [rsp + 0x1c8], ax
movzx edx, word [rsp + 0x1ca]
mov eax, dword [rsp + 0x1c0]
add eax, 3
xor eax, edx
mov word [rsp + 0x1ca], ax
movzx edx, word [rsp + 0x1cc]
mov eax, dword [rsp + 0x1c0]
add eax, 4
xor eax, edx
mov word [rsp + 0x1cc], ax
movzx edx, word [rsp + 0x1ce]
mov eax, dword [rsp + 0x1c0]
add eax, 5
xor eax, edx
xor esi, esi
mov word [rsp + 0x1ce], ax
movzx edx, word [rsp + 0x1d0]
mov eax, dword [rsp + 0x1c0]
add eax, 6
xor eax, edx
mov word [rsp + 0x1d0], ax
movzx edx, word [rsp + 0x1d2]
mov eax, dword [rsp + 0x1c0]
add eax, 7
xor eax, edx
mov word [rsp + 0x1d2], ax
movzx edx, word [rsp + 0x1d4]
mov eax, dword [rsp + 0x1c0]
add eax, 8
xor eax, edx
mov word [rsp + 0x1d4], ax
movzx edx, word [rsp + 0x1d6]
mov eax, dword [rsp + 0x1c0]
add eax, 9
xor eax, edx
mov word [rsp + 0x1d6], ax
movzx edx, word [rsp + 0x1d8]
mov eax, dword [rsp + 0x1c0]
add eax, 0xa
xor eax, edx
mov word [rsp + 0x1d8], ax
lea rax, [rsp + 0x540]
mov word [rsp + 0x1da], si
lea rsi, [rsp + 0x1c4]
mov rcx, rsi
mov qword [rsp + 0x530], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x460], rdi
cmp rbx, 0xe
ja 0x14000fd67
mov rcx, qword [rsp + 0x530]
cmp rdi, 1
jne 0x14000ffcc
movzx eax, word [rsp + 0x1c4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x538], rax
movzx eax, word [str._RECYCLE.BIN]
xor r8d, r8d
xor r10d, r10d
mov word [rcx + rdx], r8w
movzx edx, word [0x1401201cc]
mov r9d, 9
mov word [rsp + 0x348], r9w
movd xmm0, eax
movzx eax, word [0x1401201bc]
pinsrw xmm0, word [0x1401201ba], 1
mov word [rsp + 0x362], r10w
movd xmm3, eax
movzx eax, word [0x1401201c0]
pinsrw xmm3, word [0x1401201be], 1
movd xmm1, eax
movzx eax, word [0x1401201c4]
punpckldq xmm0, xmm3
pinsrw xmm1, word [0x1401201c2], 1
movd xmm2, eax
movzx eax, word [0x1401201ce]
pinsrw xmm2, word [0x1401201c6], 1
shl rax, 0x10
punpckldq xmm1, xmm2
movdqu xmm2, xmmword [0x1401202f0]
or rax, rdx
movzx edx, word [0x1401201ca]
punpcklqdq xmm0, xmm1
movq xmm1, qword [0x1401202e0]
shl rax, 0x10
paddw xmm0, xmmword [0x1401202e0]
movups xmmword [rsp + 0x330], xmm2
or rax, rdx
movzx edx, word [0x1401201c8]
shl rax, 0x10
movups xmmword [rsp + 0x34a], xmm0
or rax, rdx
movabs rdx, 0x6e0075006c0082
movq xmm5, rax
mov rax, qword [0x140120300]
paddw xmm1, xmm5
mov qword [rsp + 0x340], rax
movabs rax, 0x6c006e005b002d
movdqu xmm5, xmmword [rsp + 0x340]
mov qword [rsp + 0x2b0], rax
movq qword [rsp + 0x35a], xmm1
mov eax, dword [rsp + 0x360]
movdqu xmm4, xmmword [rsp + 0x350]
mov qword [rsp + 0x2b8], rdx
movups xmmword [rsp + 0x2c0], xmm5
movups xmmword [rsp + 0x2d0], xmm4
mov dword [rsp + 0x2e0], eax
xor eax, eax
nop word [rax + rax]
movzx edx, word [rsp + rax*2 + 0x2b0]
sub edx, 9
mov word [rsp + rax*2 + 0x2b0], dx
add rax, 1
cmp rax, 0x19
jne 0x14000e360
lea rsi, [rsp + 0x2b0]
lea rax, [rsp + 0x560]
mov rcx, rsi
mov qword [rsp + 0x550], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x460], rdi
cmp rbx, 0xe
ja 0x14000ff33
mov rcx, qword [rsp + 0x550]
cmp rdi, 1
jne 0x14000ff97
movzx eax, word [rsp + 0x2b0]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x558], rax
xor eax, eax
mov word [rcx + rdx], ax
xor edx, edx
mov dword [rsp + 0x3b0], 0x6b
mov eax, dword [rsp + 0x3b0]
mov word [rsp + 0x3a2], dx
mov r14d, dword [rsp + 0x3b0]
mov r11d, dword [rsp + 0x3b0]
mov r13d, dword [rsp + 0x3b0]
mov r8d, dword [rsp + 0x3b0]
mov r12d, dword [rsp + 0x3b0]
add r14d, 1
mov r15d, dword [rsp + 0x3b0]
add r11d, 2
add r13d, 3
mov ebx, dword [rsp + 0x3b0]
mov esi, dword [rsp + 0x3b0]
add r8d, 4
add r12d, 5
movd xmm4, r11d
mov edi, dword [rsp + 0x3b0]
mov dword [rsp + 0x44], ebx
pinsrw xmm4, r13d, 1
mov ecx, dword [rsp + 0x3b0]
mov edx, dword [rsp + 0x3b0]
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x3c], edi
mov dword [rsp + 0x34], edx
mov edx, dword [rsp + 0x3b0]
mov ebp, dword [rsp + 0x3b0]
mov r10d, dword [rsp + 0x3b0]
mov dword [rsp + 0x38], ecx
mov edi, dword [rsp + 0x3b0]
mov ecx, dword [rsp + 0x3b0]
add edx, 0xc
mov esi, dword [rsp + 0x3b0]
add r10d, 0xe
add ebp, 0xd
movd xmm1, edx
mov r9d, dword [rsp + 0x3b0]
mov ebx, dword [rsp + 0x3b0]
add edi, 0xf
add ecx, 0x10
xor r10w, word [0x1401201d4]
xor di, word [0x1401201d6]
add esi, 0x11
xor bp, word [0x1401201d2]
add r9d, 0x12
movd xmm3, r10d
add ebx, 0x13
xor cx, word [str.System_Volume_Information]
pinsrw xmm3, edi, 1
xor r9w, word [0x1401201dc]
xor si, word [0x1401201da]
xor bx, word [0x1401201de]
movd xmm0, ecx
movd xmm2, r9d
pinsrw xmm1, ebp, 1
pinsrw xmm0, esi, 1
pinsrw xmm2, ebx, 1
punpckldq xmm1, xmm3
lea esi, [r15 + 6]
mov ebx, dword [rsp + 0x3b0]
punpckldq xmm0, xmm2
movdqa xmm2, xmm1
movzx r15d, word [rsp + 0x44]
movd xmm3, esi
mov r10d, dword [rsp + 0x3b0]
punpcklqdq xmm2, xmm0
movd xmm0, eax
movzx eax, word [rsp + 0x34]
mov r9d, dword [rsp + 0x3b0]
movd xmm1, r8d
add ebx, 0x14
lea edi, [r15 + 7]
mov ecx, dword [rsp + 0x3b0]
mov edx, dword [rsp + 0x3b0]
add r10d, 0x15
pinsrw xmm3, edi, 1
movzx r8d, word [rsp + 0x38]
xor bx, word [0x1401201e0]
add r9d, 0x16
pinsrw xmm0, r14d, 1
add ecx, 0x17
xor r10w, word [0x1401201e2]
add edx, 0x18
xor r9w, word [0x1401201e4]
xor cx, word [0x1401201e6]
xor dx, word [0x1401201e8]
shl rax, 0x10
pinsrw xmm1, r12d, 1
or rax, r8
punpckldq xmm1, xmm3
movzx r8d, word [rsp + 0x3c]
punpckldq xmm0, xmm4
shl rax, 0x10
punpcklqdq xmm0, xmm1
pxor xmm0, xmmword [str._RECYCLE_b_t_n_v.BINpukvz_aeeeeeeeeOiu]
movq xmm3, qword [0x140120328]
or rax, r8
movzx r8d, word [rsp + 0x40]
movups xmmword [rsp + 0x388], xmm2
shl rax, 0x10
movdqa xmm1, xmm0
movups xmmword [rsp + 0x370], xmm0
movq xmm0, qword [0x140120320]
or rax, r8
mov word [rsp + 0x398], bx
movq xmm5, rax
mov word [rsp + 0x39e], cx
paddw xmm0, xmm5
mov word [rsp + 0x3a0], dx
mov word [rsp + 0x39a], r10w
mov word [rsp + 0x39c], r9w
pxor xmm0, xmm3
movups xmmword [rsp + 0x3b4], xmm1
movq qword [rsp + 0x380], xmm0
movdqu xmm4, xmmword [rsp + 0x380]
movups xmmword [rsp + 0x3c4], xmm4
mov eax, dword [rsp + 0x3a0]
movdqu xmm5, xmmword [rsp + 0x390]
movups xmmword [rsp + 0x3d4], xmm5
mov dword [rsp + 0x3e4], eax
xor eax, eax
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x3b4]
mov edx, dword [rsp + 0x3b0]
add edx, eax
xor edx, ecx
mov word [rsp + rax*2 + 0x3b4], dx
add rax, 1
cmp rax, 0x19
jne 0x14000e6b8
xor eax, eax
lea rsi, [rsp + 0x3b4]
mov word [rsp + 0x3e6], ax
mov rcx, rsi
lea rax, [rsp + 0x580]
mov qword [rsp + 0x570], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x460], rdi
cmp rbx, 0xe
ja 0x14000fed7
mov rcx, qword [rsp + 0x570]
cmp rdi, 1
jne 0x14000ff8f
movzx eax, word [rsp + 0x3b4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x578], rax
xor eax, eax
mov word [rcx + rdx], ax
xor eax, eax
mov dword [rsp + 0x460], 0x4d
mov r13d, dword [rsp + 0x460]
mov word [rsp + 0x456], ax
mov r12d, dword [rsp + 0x460]
mov ebp, dword [rsp + 0x460]
mov edi, dword [rsp + 0x460]
mov r14d, dword [rsp + 0x460]
mov r15d, dword [rsp + 0x460]
mov eax, dword [rsp + 0x460]
mov ebx, dword [rsp + 0x460]
mov esi, dword [rsp + 0x460]
mov ecx, dword [rsp + 0x460]
mov dword [rsp + 0xac], eax
mov edx, dword [rsp + 0x460]
mov dword [rsp + 0xa8], ebx
mov r11d, dword [rsp + 0x460]
mov r10d, dword [rsp + 0x460]
mov r9d, dword [rsp + 0x460]
mov dword [rsp + 0xa0], ecx
mov r8d, dword [rsp + 0x460]
mov eax, dword [rsp + 0x460]
mov dword [rsp + 0x9c], edx
mov ebx, dword [rsp + 0x460]
mov dword [rsp + 0x98], r11d
mov dword [rsp + 0x94], r10d
mov dword [rsp + 0x90], r9d
mov dword [rsp + 0x8c], r8d
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x84], ebx
mov dword [rsp + 0xa4], esi
mov esi, dword [rsp + 0x460]
mov ecx, dword [rsp + 0x460]
mov edx, dword [rsp + 0x460]
mov r11d, dword [rsp + 0x460]
mov r10d, dword [rsp + 0x460]
mov dword [rsp + 0x80], esi
mov r9d, dword [rsp + 0x460]
mov r8d, dword [rsp + 0x460]
mov dword [rsp + 0x7c], ecx
mov eax, dword [rsp + 0x460]
mov ebx, dword [rsp + 0x460]
mov dword [rsp + 0x78], edx
movzx esi, word [0x140120212]
movzx ecx, word [0x140120214]
mov dword [rsp + 0x74], r11d
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0x460]
mov dword [rsp + 0x60], ebx
movzx ebx, word [0x140120210]
add eax, 0x1a
xor ax, word [str.Boot]
mov dword [rsp + 0x70], r10d
mov word [rsp + 0x34], ax
mov eax, dword [rsp + 0x460]
mov dword [rsp + 0x6c], r9d
add eax, 0x1b
xor ax, word [0x14012020e]
mov dword [rsp + 0x68], r8d
mov word [rsp + 0x38], ax
mov eax, dword [rsp + 0x460]
add eax, 0x1c
xor ebx, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x3c], bx
add eax, 0x1d
xor esi, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x40], si
add eax, 0x1e
xor ecx, eax
mov word [rsp + 0x44], cx
mov eax, dword [rsp + 0x460]
movzx edx, word [str.Windows]
movzx r11d, word [0x140120218]
add eax, 0x1f
movzx r10d, word [0x14012021a]
movzx r9d, word [0x14012021c]
xor edx, eax
mov eax, dword [rsp + 0x460]
movzx r8d, word [0x14012021e]
movzx ebx, word [0x140120222]
movzx esi, word [0x140120224]
mov word [rsp + 0x4a], dx
add eax, 0x20
movzx ecx, word [str.Trend_Micro]
movzx edx, word [0x140120228]
xor r11d, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x4c], r11w
movzx r11d, word [0x14012022a]
add eax, 0x21
xor r10d, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x4e], r10w
add eax, 0x22
xor r9d, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x50], r9w
add eax, 0x23
xor r8d, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x52], r8w
add eax, 0x24
xor ax, word [0x140120220]
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0x460]
add eax, 0x25
xor ebx, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x56], bx
add eax, 0x26
xor esi, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x58], si
add eax, 0x27
xor ecx, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x5a], cx
add eax, 0x28
xor edx, eax
mov eax, dword [rsp + 0x460]
mov word [rsp + 0x5c], dx
add eax, 0x29
add r15d, 5
add edi, 3
add r14d, 4
xor r11d, eax
xor r15d, 0x6d
xor edi, 0x74
xor r14d, 0x65
mov word [rsp + 0x5e], r11w
add r12d, 1
add ebp, 2
xor r13d, 0x53
mov word [rsp + 0x3fa], r15w
xor r12d, 0x79
xor ebp, 0x73
movzx r15d, word [rsp + 0xac]
mov word [rsp + 0x3f6], di
mov esi, dword [rsp + 0x460]
lea edi, [r15 + 6]
mov ebx, dword [rsp + 0x460]
movzx r15d, word [rsp + 0xa8]
mov word [rsp + 0x3f8], r14w
mov r11d, dword [rsp + 0x460]
xor edi, 0x20
add esi, 0x2a
mov r10d, dword [rsp + 0x460]
mov r9d, dword [rsp + 0x460]
mov r8d, dword [rsp + 0x460]
add ebx, 0x2b
mov word [rsp + 0x3fc], di
mov ecx, dword [rsp + 0x460]
lea edi, [r15 + 7]
mov edx, dword [rsp + 0x460]
add r11d, 0x2c
mov eax, dword [rsp + 0x460]
add r10d, 0x2d
add r9d, 0x2e
movzx r14d, word [rsp + 0xa4]
xor si, word [0x14012022c]
xor bx, word [0x14012022e]
add r8d, 0x2f
add ecx, 0x30
xor r11w, word [0x140120230]
xor r10w, word [0x140120232]
add edx, 0x31
add eax, 0x32
xor r9w, word [0x140120234]
xor ax, word [0x14012023c]
mov word [rsp + 0x3f0], r13w
xor r8w, word [0x140120236]
xor cx, word [0x140120238]
mov word [rsp + 0x3f2], r12w
xor dx, word [0x14012023a]
xor edi, 0x56
movzx r15d, word [rsp + 0xa0]
mov word [rsp + 0x3f4], bp
mov word [rsp + 0x3fe], di
lea edi, [r14 + 8]
xor edi, 0x6f
mov word [rsp + 0x400], di
lea edi, [r15 + 9]
xor edi, 0x6c
mov word [rsp + 0x402], di
movzx r14d, word [rsp + 0x9c]
movzx r15d, word [rsp + 0x98]
lea edi, [r14 + 0xa]
movzx r14d, word [rsp + 0x94]
xor edi, 0x75
mov word [rsp + 0x404], di
lea edi, [r15 + 0xb]
movzx r15d, word [rsp + 0x90]
xor edi, 0x6d
mov word [rsp + 0x406], di
lea edi, [r14 + 0xc]
movzx r14d, word [rsp + 0x8c]
xor edi, 0x65
mov word [rsp + 0x408], di
lea edi, [r15 + 0xd]
movzx r15d, word [rsp + 0x88]
xor edi, 0x20
mov word [rsp + 0x40a], di
lea edi, [r14 + 0xe]
movzx r14d, word [rsp + 0x84]
xor edi, 0x49
mov word [rsp + 0x40c], di
lea edi, [r15 + 0xf]
movzx r15d, word [rsp + 0x80]
xor edi, 0x6e
mov word [rsp + 0x40e], di
lea edi, [r14 + 0x10]
movzx r14d, word [rsp + 0x7c]
xor edi, 0x66
mov word [rsp + 0x410], di
lea edi, [r15 + 0x11]
movzx r15d, word [rsp + 0x78]
xor edi, 0x6f
mov word [rsp + 0x412], di
lea edi, [r14 + 0x12]
movzx r14d, word [rsp + 0x74]
xor edi, 0x72
mov word [rsp + 0x414], di
lea edi, [r15 + 0x13]
movzx r15d, word [rsp + 0x70]
xor edi, 0x6d
mov word [rsp + 0x416], di
lea edi, [r14 + 0x14]
movzx r14d, word [rsp + 0x6c]
xor edi, 0x61
mov word [rsp + 0x418], di
lea edi, [r15 + 0x15]
movzx r15d, word [rsp + 0x68]
xor edi, 0x74
mov word [rsp + 0x41a], di
lea edi, [r14 + 0x16]
movzx r14d, word [rsp + 0x64]
xor edi, 0x69
mov word [rsp + 0x41c], di
lea edi, [r15 + 0x17]
movzx r15d, word [rsp + 0x60]
xor edi, 0x6f
mov word [rsp + 0x41e], di
lea edi, [r14 + 0x18]
xor edi, 0x6e
mov word [rsp + 0x420], di
lea edi, [r15 + 0x19]
mov word [rsp + 0x422], di
movzx edi, word [rsp + 0x34]
mov word [rsp + 0x424], di
movzx edi, word [rsp + 0x38]
mov word [rsp + 0x426], di
movzx edi, word [rsp + 0x3c]
mov word [rsp + 0x428], di
movzx edi, word [rsp + 0x40]
mov word [rsp + 0x42a], di
movzx edi, word [rsp + 0x44]
mov word [rsp + 0x42c], di
movzx edi, word [rsp + 0x4a]
mov word [rsp + 0x42e], di
movzx edi, word [rsp + 0x4c]
mov word [rsp + 0x430], di
movzx edi, word [rsp + 0x4e]
mov word [rsp + 0x432], di
movzx edi, word [rsp + 0x50]
mov word [rsp + 0x434], di
movzx edi, word [rsp + 0x52]
mov word [rsp + 0x436], di
movzx edi, word [rsp + 0x54]
mov word [rsp + 0x438], di
movzx edi, word [rsp + 0x56]
mov word [rsp + 0x43a], di
movzx edi, word [rsp + 0x58]
mov word [rsp + 0x43c], di
movzx edi, word [rsp + 0x5a]
mov word [rsp + 0x43e], di
movzx edi, word [rsp + 0x5c]
mov word [rsp + 0x440], di
movzx edi, word [rsp + 0x5e]
mov word [rsp + 0x442], di
mov word [rsp + 0x444], si
movdqu xmm4, xmmword [rsp + 0x3f0]
movdqu xmm5, xmmword [rsp + 0x400]
mov word [rsp + 0x446], bx
movups xmmword [rsp + 0x464], xmm4
movdqu xmm4, xmmword [rsp + 0x410]
movups xmmword [rsp + 0x474], xmm5
movdqu xmm5, xmmword [rsp + 0x420]
movups xmmword [rsp + 0x484], xmm4
movdqu xmm4, xmmword [rsp + 0x430]
movups xmmword [rsp + 0x494], xmm5
mov word [rsp + 0x448], r11w
mov word [rsp + 0x44a], r10w
mov word [rsp + 0x44c], r9w
mov word [rsp + 0x44e], r8w
movdqu xmm5, xmmword [rsp + 0x440]
mov word [rsp + 0x450], cx
mov word [rsp + 0x452], dx
mov word [rsp + 0x454], ax
mov rax, qword [rsp + 0x450]
movups xmmword [rsp + 0x4a4], xmm4
movups xmmword [rsp + 0x4b4], xmm5
mov qword [rsp + 0x4c4], rax
xor eax, eax
nop
movzx ecx, word [rsp + rax*2 + 0x464]
mov edx, dword [rsp + 0x460]
add edx, eax
xor edx, ecx
mov word [rsp + rax*2 + 0x464], dx
add rax, 1
cmp rax, 0x33
jne 0x14000ee90
xor eax, eax
lea rsi, [rsp + 0x464]
mov word [rsp + 0x4ca], ax
mov rcx, rsi
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x590], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x2f0], rdi
cmp rbx, 0xe
ja 0x14000fe7b
mov rcx, qword [rsp + 0x590]
cmp rdi, 1
jne 0x14000ffc4
movzx eax, word [rsp + 0x464]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r13d, r13d
mov qword [rsp + 0x598], rax
xor r14d, r14d
mov word [rcx + rdx], r13w
mov dword [rsp + 0x140], 0x2c
mov eax, dword [rsp + 0x140]
mov word [rsp + 0x132], r14w
mov esi, dword [rsp + 0x140]
mov r8d, dword [rsp + 0x140]
mov ebx, dword [rsp + 0x140]
xor eax, 0x42
mov ecx, dword [rsp + 0x140]
add esi, 1
movd xmm0, eax
mov r11d, dword [rsp + 0x140]
mov edx, dword [rsp + 0x140]
add r8d, 2
add ebx, 3
xor esi, 0x6f
xor r8d, 0x6f
add ecx, 4
xor ebx, 0x74
add r11d, 5
movd xmm3, r8d
movd xmm2, ecx
pinsrw xmm0, esi, 1
add edx, 6
mov r10d, dword [rsp + 0x140]
xor dx, word [0x140120218]
pinsrw xmm3, ebx, 1
lea rsi, [rsp + 0x144]
mov r9d, dword [rsp + 0x140]
movd xmm1, edx
punpckldq xmm0, xmm3
mov rcx, rsi
xor r11w, word [str.Windows]
add r10d, 7
xor r10w, word [0x14012021a]
add r9d, 8
pinsrw xmm2, r11d, 1
xor r9w, word [0x14012021c]
mov word [rsp + 0x130], r9w
pinsrw xmm1, r10d, 1
mov eax, dword [rsp + 0x130]
punpckldq xmm2, xmm1
punpcklqdq xmm0, xmm2
movups xmmword [rsp + 0x144], xmm0
mov dword [rsp + 0x154], eax
movzx eax, word [rsp + 0x144]
mov edx, dword [rsp + 0x140]
movups xmmword [rsp + 0x120], xmm0
xor eax, edx
mov word [rsp + 0x144], ax
movzx edx, word [rsp + 0x146]
mov eax, dword [rsp + 0x140]
add eax, 1
xor eax, edx
mov word [rsp + 0x146], ax
movzx edx, word [rsp + 0x148]
mov eax, dword [rsp + 0x140]
add eax, 2
xor eax, edx
mov word [rsp + 0x148], ax
movzx edx, word [rsp + 0x14a]
mov eax, dword [rsp + 0x140]
add eax, 3
xor eax, edx
mov word [rsp + 0x14a], ax
movzx edx, word [rsp + 0x14c]
mov eax, dword [rsp + 0x140]
add eax, 4
xor eax, edx
mov word [rsp + 0x14c], ax
movzx edx, word [rsp + 0x14e]
mov eax, dword [rsp + 0x140]
add eax, 5
xor eax, edx
mov word [rsp + 0x14e], ax
movzx edx, word [rsp + 0x150]
mov eax, dword [rsp + 0x140]
add eax, 6
xor eax, edx
mov word [rsp + 0x150], ax
movzx edx, word [rsp + 0x152]
mov eax, dword [rsp + 0x140]
add eax, 7
xor eax, edx
xor r15d, r15d
mov word [rsp + 0x152], ax
movzx edx, word [rsp + 0x154]
mov eax, dword [rsp + 0x140]
add eax, 8
xor eax, edx
mov word [rsp + 0x154], ax
lea rax, [rsp + 0x5c0]
mov word [rsp + 0x156], r15w
mov qword [rsp + 0x5b0], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x2f0], rdi
cmp rbx, 0xe
ja 0x14000fe1f
mov rcx, qword [rsp + 0x5b0]
cmp rdi, 1
jne 0x14000ffbc
movzx eax, word [rsp + 0x144]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x5b8], rax
xor ebp, ebp
movzx eax, word [0x14012022c]
xor r12d, r12d
mov word [rcx + rdx], bp
movzx edx, word [0x14012022a]
lea rsi, [rsp + 0x1e0]
shl rax, 0x10
movdqu xmm1, xmmword [0x140120330]
movq xmm0, qword [0x1401203d0]
mov word [rsp + 0x21e], r12w
or rax, rdx
movzx edx, word [0x140120228]
shl rax, 0x10
movups xmmword [rsp + 0x200], xmm1
or rax, rdx
movzx edx, word [str.Trend_Micro]
shl rax, 0x10
or rax, rdx
movq xmm4, rax
movzx eax, word [0x14012022e]
paddw xmm0, xmm4
lea ecx, [rax + 7]
movzx eax, word [0x140120230]
mov word [rsp + 0x218], cx
mov rcx, rsi
movq qword [rsp + 0x210], xmm0
lea edx, [rax + 7]
movzx eax, word [0x140120232]
mov word [rsp + 0x21a], dx
movabs rdx, 0x7007a007e0076
add eax, 7
mov word [rsp + 0x21c], ax
movdqu xmm5, xmmword [rsp + 0x210]
movabs rax, 0x6b00750070005e
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], rdx
movups xmmword [rsp + 0x1f0], xmm5
movzx eax, word [rsp + 0x1e0]
sub eax, 7
mov word [rsp + 0x1e0], ax
movzx eax, word [rsp + 0x1e2]
sub eax, 7
mov word [rsp + 0x1e2], ax
movzx eax, word [rsp + 0x1e4]
sub eax, 7
mov word [rsp + 0x1e4], ax
movzx eax, word [rsp + 0x1e6]
sub eax, 7
mov word [rsp + 0x1e6], ax
movzx eax, word [rsp + 0x1e8]
sub eax, 7
mov word [rsp + 0x1e8], ax
movzx eax, word [rsp + 0x1ea]
sub eax, 7
mov word [rsp + 0x1ea], ax
movzx eax, word [rsp + 0x1ec]
sub eax, 7
mov word [rsp + 0x1ec], ax
movzx eax, word [rsp + 0x1ee]
sub eax, 7
mov word [rsp + 0x1ee], ax
movzx eax, word [rsp + 0x1f0]
sub eax, 7
mov word [rsp + 0x1f0], ax
movzx eax, word [rsp + 0x1f2]
sub eax, 7
mov word [rsp + 0x1f2], ax
movzx eax, word [rsp + 0x1f4]
sub eax, 7
mov word [rsp + 0x1f4], ax
movzx eax, word [rsp + 0x1f6]
sub eax, 7
mov word [rsp + 0x1f6], ax
movzx eax, word [rsp + 0x1f8]
sub eax, 7
mov word [rsp + 0x1f8], ax
movzx eax, word [rsp + 0x1fa]
sub eax, 7
mov word [rsp + 0x1fa], ax
movzx eax, word [rsp + 0x1fc]
sub eax, 7
mov word [rsp + 0x1fc], ax
lea rax, [rsp + 0x5e0]
mov qword [rsp + 0x5d0], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x2f0], rdi
cmp rbx, 0xe
ja 0x14000fcaf
mov rcx, qword [rsp + 0x5d0]
cmp rdi, 1
jne 0x14000ff9c
movzx eax, word [rsp + 0x1e0]
mov edx, 2
mov word [rcx], ax
mov eax, 1
mov qword [rsp + 0x5d8], rax
movzx eax, word [str.perflogs]
xor esi, esi
xor edi, edi
mov word [rcx + rdx], si
movzx ecx, word [0x14012024e]
movd xmm0, eax
movzx eax, word [0x140120242]
pinsrw xmm0, word [0x140120240], 1
mov word [rsp + 0x2ae], di
movzx edx, word [str..exe]
xor ecx, 0x1b
mov r8, qword [0x140120360]
mov dword [rsp + 0x2f0], 0x1b
movd xmm3, eax
movzx eax, word [0x140120246]
pinsrw xmm3, word [0x140120244], 1
mov word [rsp + 0x2a8], cx
xor edx, 0x1b
mov qword [rsp + 0x290], r8
movd xmm1, eax
movzx eax, word [0x14012024a]
punpckldq xmm0, xmm3
pinsrw xmm1, word [0x140120248], 1
mov word [rsp + 0x2aa], dx
movabs rdx, 0x720056003b007f
movd xmm2, eax
movzx eax, word [0x140120252]
pinsrw xmm2, word [0x14012024c], 1
punpckldq xmm1, xmm2
xor eax, 0x1b
punpcklqdq xmm0, xmm1
pxor xmm0, xmmword [0x140120340]
mov word [rsp + 0x2ac], ax
movabs rax, 0x75007e0069004f
movdqu xmm1, xmmword [0x140120350]
mov qword [rsp + 0x2f4], rax
xor eax, eax
movups xmmword [rsp + 0x298], xmm0
movdqu xmm4, xmmword [rsp + 0x290]
movdqu xmm5, xmmword [rsp + 0x2a0]
mov qword [rsp + 0x2fc], rdx
movups xmmword [rsp + 0x280], xmm1
movups xmmword [rsp + 0x304], xmm4
movups xmmword [rsp + 0x314], xmm5
nop word [rax + rax]
movzx edx, word [rsp + rax*2 + 0x2f4]
mov ecx, dword [rsp + 0x2f0]
xor edx, ecx
mov word [rsp + rax*2 + 0x2f4], dx
add rax, 1
cmp rax, 0x17
jne 0x14000f528
lea rsi, [rsp + 0x2f4]
xor ebx, ebx
lea rax, [rsp + 0x600]
mov rcx, rsi
mov word [rsp + 0x322], bx
mov qword [rsp + 0x5f0], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0x250], rdi
cmp rbx, 0xe
ja 0x14000fc53
mov rcx, qword [rsp + 0x5f0]
cmp rdi, 1
jne 0x14000ffb4
movzx eax, word [rsp + 0x2f4]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r9d, r9d
mov qword [rsp + 0x5f8], rax
xor r10d, r10d
mov word [rcx + rdx], r9w
mov dword [rsp + 0x250], 0x14
mov edx, dword [rsp + 0x250]
mov r15d, dword [rsp + 0x250]
mov ebx, dword [rsp + 0x250]
mov word [rsp + 0x242], r10w
mov r14d, dword [rsp + 0x250]
mov r8d, dword [rsp + 0x250]
mov r13d, dword [rsp + 0x250]
add ebx, 2
add r15d, 1
mov r11d, dword [rsp + 0x250]
mov eax, dword [rsp + 0x250]
add r8d, 4
add r14d, 3
movd xmm4, ebx
add r11d, 6
add r13d, 5
pinsrw xmm4, r14d, 1
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x250]
mov r12d, dword [rsp + 0x250]
mov r10d, dword [rsp + 0x250]
mov ebp, dword [rsp + 0x250]
mov ecx, dword [rsp + 0x250]
add eax, 8
mov edi, dword [rsp + 0x250]
add r10d, 0xa
add r12d, 9
movd xmm1, eax
mov r9d, dword [rsp + 0x250]
add ecx, 0xc
mov esi, dword [rsp + 0x250]
add ebp, 0xb
xor r10w, word [0x140120252]
xor cx, word [0x140120256]
add edi, 0xd
add r9d, 0xe
xor r9w, word [str..dll]
add esi, 0xf
xor di, word [0x140120258]
xor si, word [0x14012025c]
xor r12w, word [str..exe]
movd xmm3, r10d
xor bp, word [0x140120254]
movd xmm0, ecx
movd xmm2, r9d
mov eax, dword [rsp + 0x250]
pinsrw xmm2, esi, 1
pinsrw xmm3, ebp, 1
movzx esi, word [rsp + 0x34]
pinsrw xmm0, edi, 1
pinsrw xmm1, r12d, 1
punpckldq xmm0, xmm2
movd xmm2, r8d
add eax, 0x10
punpckldq xmm1, xmm3
lea ecx, [rsi + 7]
movd xmm3, r11d
xor ax, word [0x14012025e]
punpcklqdq xmm1, xmm0
movd xmm0, edx
pinsrw xmm3, ecx, 1
pinsrw xmm0, r15d, 1
pinsrw xmm2, r13d, 1
lea rsi, [rsp + 0x254]
punpckldq xmm0, xmm4
punpckldq xmm2, xmm3
mov rcx, rsi
punpcklqdq xmm0, xmm2
pxor xmm0, xmmword [str.perflogs_v_v_v_v9p]
movups xmmword [rsp + 0x220], xmm0
mov word [rsp + 0x240], ax
mov eax, dword [rsp + 0x240]
movups xmmword [rsp + 0x254], xmm0
movups xmmword [rsp + 0x264], xmm1
mov dword [rsp + 0x274], eax
movzx eax, word [rsp + 0x254]
mov edx, dword [rsp + 0x250]
movups xmmword [rsp + 0x230], xmm1
xor eax, edx
mov word [rsp + 0x254], ax
movzx edx, word [rsp + 0x256]
mov eax, dword [rsp + 0x250]
add eax, 1
xor eax, edx
mov word [rsp + 0x256], ax
movzx edx, word [rsp + 0x258]
mov eax, dword [rsp + 0x250]
add eax, 2
xor eax, edx
mov word [rsp + 0x258], ax
movzx edx, word [rsp + 0x25a]
mov eax, dword [rsp + 0x250]
add eax, 3
xor eax, edx
mov word [rsp + 0x25a], ax
movzx edx, word [rsp + 0x25c]
mov eax, dword [rsp + 0x250]
add eax, 4
xor r11d, r11d
xor eax, edx
mov word [rsp + 0x25c], ax
movzx edx, word [rsp + 0x25e]
mov eax, dword [rsp + 0x250]
add eax, 5
xor eax, edx
mov word [rsp + 0x25e], ax
movzx edx, word [rsp + 0x260]
mov eax, dword [rsp + 0x250]
add eax, 6
xor eax, edx
mov word [rsp + 0x260], ax
movzx edx, word [rsp + 0x262]
mov eax, dword [rsp + 0x250]
add eax, 7
xor eax, edx
mov word [rsp + 0x262], ax
movzx edx, word [rsp + 0x264]
mov eax, dword [rsp + 0x250]
add eax, 8
xor eax, edx
mov word [rsp + 0x264], ax
movzx edx, word [rsp + 0x266]
mov eax, dword [rsp + 0x250]
add eax, 9
xor eax, edx
mov word [rsp + 0x266], ax
movzx edx, word [rsp + 0x268]
mov eax, dword [rsp + 0x250]
add eax, 0xa
xor eax, edx
mov word [rsp + 0x268], ax
movzx edx, word [rsp + 0x26a]
mov eax, dword [rsp + 0x250]
add eax, 0xb
xor eax, edx
mov word [rsp + 0x26a], ax
movzx edx, word [rsp + 0x26c]
mov eax, dword [rsp + 0x250]
add eax, 0xc
xor eax, edx
mov word [rsp + 0x26c], ax
movzx edx, word [rsp + 0x26e]
mov eax, dword [rsp + 0x250]
add eax, 0xd
xor eax, edx
mov word [rsp + 0x26e], ax
movzx edx, word [rsp + 0x270]
mov eax, dword [rsp + 0x250]
add eax, 0xe
xor eax, edx
mov word [rsp + 0x270], ax
movzx edx, word [rsp + 0x272]
mov eax, dword [rsp + 0x250]
add eax, 0xf
xor eax, edx
mov word [rsp + 0x272], ax
movzx edx, word [rsp + 0x274]
mov eax, dword [rsp + 0x250]
add eax, 0x10
xor eax, edx
mov word [rsp + 0x274], ax
lea rax, [rsp + 0x620]
mov word [rsp + 0x276], r11w
mov qword [rsp + 0x610], rax
call sub.msvcrt.dll_wcslen
lea rbx, [rax + rax]
mov rdi, rbx
sar rdi, 1
mov qword [rsp + 0xb8], rdi
cmp rbx, 0xe
ja 0x14000fbf7
mov rcx, qword [rsp + 0x610]
cmp rdi, 1
jne 0x14000ffac
movzx eax, word [rsp + 0x254]
mov edx, 2
mov word [rcx], ax
mov eax, 1
xor r8d, r8d
mov qword [rsp + 0x618], rax
mov word [rcx + rdx], r8w
mov ecx, 0x160
call fcn.14010abf0
mov rdi, qword [rsp + 0x28]
mov r13, rax
mov rbx, rax
lea r14, [rsp + 0xb8]
jmp 0x14000fa37
cmp rbp, 1
jne 0x14000fa80
movzx eax, word [r12]
mov word [rbx + 0x10], ax
mov eax, 2
mov qword [rbx + 8], rdx
xor edx, edx
add rdi, 0x20
add rbx, 0x20
mov word [rcx + rax], dx
lea rax, [rsp + 0x630]
cmp rdi, rax
je 0x14000fad0
mov rax, qword [rdi + 8]
lea rcx, [rbx + 0x10]
mov r12, qword [rdi]
mov qword [rbx], rcx
lea rsi, [rax + rax]
mov rbp, rsi
sar rbp, 1
mov qword [rsp + 0xb8], rbp
mov rdx, rbp
cmp rsi, 0xe
jbe 0x14000fa00
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400f5560
mov rdx, qword [rsp + 0xb8]
mov qword [rbx], rax
mov rcx, rax
mov qword [rbx + 0x10], rdx
test rbp, rbp
je 0x14000fa9b
mov rdx, r12
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rbx]
lea rax, [rdx + rdx]
jmp 0x14000fa14
mov rax, rdi
test rdi, rdi
je 0x14000fac7
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x4d0]
lea rdx, [rax + rax]
jmp 0x14000da9e
mov rdi, qword [rsp + 0x28]
lea rsi, [rsp + 0x610]
jmp 0x14000fafa
mov rax, qword [rsi + 0x10]
lea rdx, [rax + rax + 2]
call fcn.14010abb0
lea rax, [rsi - 0x20]
cmp rdi, rsi
je 0x14000fb10
mov rsi, rax
mov rcx, qword [rsi]
lea rax, [rsi + 0x10]
cmp rcx, rax
jne 0x14000fae0
lea rax, [rsi - 0x20]
cmp rdi, rsi
jne 0x14000faf7
nop
cmp r13, rbx
je 0x14000ffdc
mov rdi, qword [rsp + 0x680]
mov rsi, r13
jmp 0x14000fb3d
add rsi, 0x20
cmp rbx, rsi
je 0x14000fbbb
mov rdx, qword [rsi]
mov r9, qword [rsi + 8]
xor r8d, r8d
mov rcx, rdi
call fcn.140074970
cmp rax, 0xffffffffffffffff
je 0x14000fb30
xor edi, edi
mov rsi, r13
nop word [rax + rax]
mov rcx, qword [rsi]
lea rax, [rsi + 0x10]
cmp rcx, rax
je 0x14000fbb0
mov rax, qword [rsi + 0x10]
add rsi, 0x20
lea rdx, [rax + rax + 2]
call fcn.14010abb0
cmp rbx, rsi
jne 0x14000fb60
mov edx, 0x160
mov rcx, r13
call fcn.14010abb0
mov eax, edi
add rsp, 0x638
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
add rsi, 0x20
cmp rbx, rsi
jne 0x14000fb60
jmp 0x14000fb83
mov edi, 1
jmp 0x14000fb57
mov rcx, qword [rsp + 0x28]
lea rdx, [rsp + 0x460]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x4d0], rax
mov rcx, rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x4e0], rax
jmp 0x14000faa7
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x610]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x610], rax
mov rcx, rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x620], rax
test rdi, rdi
je 0x14000fc4a
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x610]
lea rdx, [rax + rax]
jmp 0x14000f9c8
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x5f0]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x5f0], rax
mov rcx, rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x600], rax
test rdi, rdi
je 0x14000fca6
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x250]
mov rcx, qword [rsp + 0x5f0]
lea rdx, [rax + rax]
jmp 0x14000f5b8
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x5d0]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x5d0], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x5e0], rax
test rdi, rdi
je 0x14000fd02
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x5d0]
lea rdx, [rax + rax]
jmp 0x14000f3f6
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x4f0]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x4f0], rax
mov rcx, rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x500], rax
test rdi, rdi
je 0x14000fd5e
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x4f0]
lea rdx, [rax + rax]
jmp 0x14000dd7a
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x530]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x530], rax
mov rcx, rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x540], rax
test rdi, rdi
je 0x14000fdba
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x530]
lea rdx, [rax + rax]
jmp 0x14000e200
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x510]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x510], rax
mov rcx, rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x520], rax
test rdi, rdi
je 0x14000fe16
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x510]
lea rdx, [rax + rax]
jmp 0x14000df28
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x5b0]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x5b0], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x5c0], rax
test rdi, rdi
je 0x14000fe72
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x5b0]
lea rdx, [rax + rax]
jmp 0x14000f196
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x590]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x590], rax
mov rcx, rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x5a0], rax
test rdi, rdi
je 0x14000fece
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x590]
lea rdx, [rax + rax]
jmp 0x14000ef22
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x570]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x570], rax
mov rcx, rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x580], rax
test rdi, rdi
je 0x14000ff2a
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x570]
lea rdx, [rax + rax]
jmp 0x14000e74a
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x550]
xor r8d, r8d
call fcn.1400f5560
mov qword [rsp + 0x550], rax
mov rcx, rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x560], rax
test rdi, rdi
je 0x14000ff86
mov r8, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x550]
lea rdx, [rax + rax]
jmp 0x14000e3e0
mov rax, rdi
jmp 0x14000ff0a
mov rax, rdi
jmp 0x14000ff66
mov rax, rdi
jmp 0x14000fce2
mov rax, rdi
jmp 0x14000fd3e
mov rax, rdi
jmp 0x14000fc2a
mov rax, rdi
jmp 0x14000fc86
mov rax, rdi
jmp 0x14000fe52
mov rax, rdi
jmp 0x14000feae
mov rax, rdi
jmp 0x14000fd9a
mov rax, rdi
jmp 0x14000fdf6
mov edi, 1
jmp 0x14000fb83