Function at 0x1400162b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov qword [rbp + 0xf8], 0xfffffffffffffffe
mov qword [rsp + 0x440], rbx
mov rax, qword [0x1401c3e90]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov r12, rdx
mov r13, rcx
mov qword [rbp + 0x100], rdx
xor esi, esi
mov dword [rsp + 0x30], esi
mov edx, dword [0x1401cbd80]
lea r8d, [rdx + 2]
lea eax, [rdx + 1]
imul r8d, eax
imul r8d, edx
mov eax, 0xb21642c9
imul r8d
add edx, r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub r8d, edx
cmp r8d, 8
jne 0x140016361
mov eax, 0xda
mov r8d, 0x2b
test r8d, r8d
je 0x140016358
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x140016343
add eax, r8d
mov dword [0x1401cbd80], eax
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea r8, [r13 + 0x38]
lea rdx, [0x140155c20]
lea rcx, [rbp + 0x20]
call fcn.14001ca10
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
or rdi, 0xffffffffffffffff
lock add dword [rdx + 0x10], edi
jg 0x1400163bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.AND_b
test rdx, 0xffffffffffff0000
jne 0x140016408
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016419
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400025b0
jmp 0x140016419
mov r8d, 7
lea rcx, [rsp + 0x78]
call fcn.1400022c0
nop
lea r8, [0x140155c38]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x30]
call fcn.14001c930
nop
lea r8, [r13 + 0x48]
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016471
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001648a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400164a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401cbd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 0xb
jne 0x14001650c
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x141
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rdi
mov rcx, rax
call fcn.1400d0cc8
mov rcx, rax
call fcn.1400d272c
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.AND_ib
test rdx, 0xffffffffffff0000
jne 0x140016555
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016565
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400025b0
jmp 0x140016565
mov r8d, 8
lea rcx, [rbp - 0x68]
call fcn.1400022c0
nop
lea r8, [0x140155c38]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.14001c930
nop
lea r8, [r13 + 0x48]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400165b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400165cf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400165e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [0x1401cbd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 0xc
jne 0x140016635
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
shr edx, 6
lea eax, [rdx + rdx*4]
shl eax, 4
sub ecx, eax
lea eax, [rcx + 1]
mov dword [0x1401cbd80], eax
lea r8, [r13 + 0x50]
lea rdx, str.AND_verifier
lea rcx, [rbp + 0xc0]
call fcn.14001ca10
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001667a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401cbd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
mov r15d, 1
cmp ecx, 0xb
jne 0x1400166b9
test r8d, r8d
cmove r8d, r15d
mov dword [0x1401cbd80], r8d
lea r8, [r13 + 0x80]
lea rdx, str.AND_ver
lea rcx, [rbp - 0x10]
call fcn.14001ca10
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400166fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401cbd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xf
jne 0x1400167ca
mov edx, esi
nop
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, r8d
mov eax, edx
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
add r8d, eax
inc edx
cmp edx, 0x100
jl 0x140016730
mov dword [0x1401cbd80], r8d
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.4_11
test rdx, 0xffffffffffff0000
jne 0x140016813
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14001681d
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400025b0
jmp 0x14001681d
lea rcx, [rbp - 0x78]
call fcn.140003350
nop
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x140155ca8]
test rdx, 0xffffffffffff0000
jne 0x140016868
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016873
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400025b0
jmp 0x140016873
lea rcx, [rsp + 0x58]
call fcn.140003350
nop
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x80]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400168b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400168d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400168e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, str.AND_insta
test rdx, 0xffffffffffff0000
jne 0x140016934
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016945
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400025b0
jmp 0x140016945
mov r8d, 0xb
lea rcx, [rsp + 0x68]
call fcn.1400022c0
nop
lea r8, str.lltime
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xf0]
call fcn.14001c930
nop
lea r8, [r13 + 0x90]
mov rdx, rax
lea rcx, [rbp]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001699d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400169b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400169d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x90]
call fcn.1400529e0
nop
mov r8, rax
lea rdx, str.AND_os
lea rcx, [rbp + 0x10]
call fcn.14001ca10
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016a1e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016a39
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, str.AND_bro
test rdx, 0xffffffffffff0000
jne 0x140016a82
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016a92
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1400025b0
jmp 0x140016a92
mov r8d, 9
lea rcx, [rbp - 0x58]
call fcn.1400022c0
nop
lea r8, str.wser
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0xd0]
call fcn.14001c930
nop
lea r8, [0x1401cc5c8]
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016ae9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016b05
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016b1d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [0x1401cc5c8]
movzx eax, word [rcx]
cmp ax, word [0x140155d14]
jne 0x140016b4e
movzx eax, word [rcx + 2]
cmp ax, word [0x140155d16]
jne 0x140016b4e
movzx eax, word [rcx + 4]
cmp ax, word [0x140155d18]
jne 0x140016b4e
mov eax, esi
jmp 0x140016b53
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x140016b72
lea rcx, [rbp + 0xe8]
call fcn.14004fde0
mov r14, rax
mov dword [rsp + 0x30], r15d
jmp 0x140016b86
lea rcx, [rbp + 0x40]
call fcn.140051320
mov r14, rax
mov dword [rsp + 0x30], 2
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, str.AND_brow
test rdx, 0xffffffffffff0000
jne 0x140016bd1
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016be2
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400025b0
jmp 0x140016be2
mov r8d, 0xa
lea rcx, [rsp + 0x40]
call fcn.1400022c0
nop
lea r8, [0x140155d20]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xa0]
call fcn.14001c930
nop
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016c36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016c52
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016c6c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, dword [rsp + 0x30]
test al, 2
je 0x140016c97
and eax, 0xfffffffd
mov dword [rsp + 0x30], eax
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016c93
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140016cbd
and eax, 0xfffffffe
mov dword [rsp + 0x30], eax
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016cbd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, dword [0x1401cbd80]
imul ecx, ecx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 6
jne 0x140016cf8
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea rcx, [rbp + 0xb0]
call fcn.1400526b0
nop
mov r8, rax
lea rdx, str.AND_ffver
lea rcx, [rbp + 0x50]
call fcn.14001ca10
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016d44
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016d5f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401cbd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0x16
jne 0x140016dca
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rdi
mov rcx, rax
call fcn.1400d0cc8
mov rcx, rax
call fcn.1400d272c
mov rcx, qword [0x1401cc5c8]
movzx eax, word [rcx]
cmp ax, word [0x140155d14]
jne 0x140016dfb
movzx eax, word [rcx + 2]
cmp ax, word [0x140155d16]
jne 0x140016dfb
movzx eax, word [rcx + 4]
cmp ax, word [0x140155d18]
jne 0x140016dfb
mov eax, esi
jmp 0x140016e00
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x140016e37
lea rcx, [rbp - 0x28]
call fcn.140051320
nop
mov ebx, dword [rsp + 0x30]
or ebx, 4
mov dword [rsp + 0x30], ebx
mov r8, rax
lea rdx, str.AND_chromever
lea rcx, [rbp - 0x38]
call fcn.14001ca10
nop
or ebx, 8
jmp 0x140016e63
lea rcx, [rbp - 0x40]
call fcn.14004fde0
nop
mov ebx, dword [rsp + 0x30]
or ebx, 0x10
mov dword [rsp + 0x30], ebx
mov r8, rax
lea rdx, str.AND_iever
lea rcx, [rbp + 0x60]
call fcn.14001ca10
nop
or ebx, 0x20
mov dword [rsp + 0x30], ebx
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
test bl, 0x20
je 0x140016ea1
and ebx, 0xffffffdf
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016e9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0x30]
test bl, 0x10
je 0x140016ec9
and ebx, 0xffffffef
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016ec5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0x30]
test bl, 8
je 0x140016ef1
and ebx, 0xfffffff7
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016eed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rsp + 0x30]
test bl, 4
je 0x140016f15
and ebx, 0xfffffffb
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016f15
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [r13 + 0x98]
lea rcx, [rbp + 8]
call fcn.1400296f0
mov r15, rax
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str.AND_src
test rdx, 0xffffffffffff0000
jne 0x140016f73
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140016f84
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400025b0
jmp 0x140016f84
mov r8d, 9
lea rcx, [rsp + 0x48]
call fcn.1400022c0
nop
lea r8, [0x140155db0]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 8]
call fcn.14001c930
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016fd5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140016fee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017008
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017020
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [r13 + 0x98]
lea rcx, [rbp + 0x38]
call fcn.1400296f0
mov r14, rax
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, str.AND_cam
test rdx, 0xffffffffffff0000
jne 0x14001707e
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14001708f
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1400025b0
jmp 0x14001708f
mov r8d, 9
lea rcx, [rsp + 0x50]
call fcn.1400022c0
nop
lea r8, str.paign
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x28]
call fcn.14001c930
nop
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400170e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400170f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017113
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001712b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, str.AND_subiddefau
test rdx, 0xffffffffffff0000
jne 0x140017176
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140017187
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400025b0
jmp 0x140017187
mov r8d, 0x11
lea rcx, [rsp + 0x60]
call fcn.1400022c0
nop
lea r8, str.lt_subid
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x48]
call fcn.14001c930
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400171c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400171e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.AND_zdatade
test rdx, 0xffffffffffff0000
jne 0x14001722c
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14001723d
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400025b0
jmp 0x14001723d
mov r8d, 0xe
lea rcx, [rsp + 0x70]
call fcn.1400022c0
nop
lea r8, str.fault_z
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x68]
call fcn.14001c930
nop
lea r8, [0x140155e38]
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.14001c930
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017292
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400172ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400172c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, str.AND_iep
test rdx, 0xffffffffffff0000
jne 0x14001730d
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14001731d
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400025b0
jmp 0x14001731d
mov r8d, 9
lea rcx, [rbp - 0x80]
call fcn.1400022c0
nop
lea r8, [0x140155e88]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x98]
call fcn.14001c930
nop
lea r8, str.files
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.14001c930
mov rbx, rax
call fcn.14001fb40
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp + 0x78]
call fcn.1400234a0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001738e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400173aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400173c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400173de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.AND_chprofiles
test rdx, 0xffffffffffff0000
jne 0x140017427
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140017431
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400025b0
jmp 0x140017431
lea rcx, [rbp - 0x70]
call fcn.140003350
nop
call fcn.14001f6c0
mov r8d, eax
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xa8]
call fcn.1400234a0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017478
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017490
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, str.AND_ffprofiles
test rdx, 0xffffffffffff0000
jne 0x1400174d9
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x1400174e3
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400025b0
jmp 0x1400174e3
lea rcx, [rbp - 0x60]
call fcn.140003350
nop
call fcn.14001f7f0
mov r8d, eax
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xb8]
call fcn.1400234a0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001752a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017542
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, [0x140155ed8]
test rdx, 0xffffffffffff0000
jne 0x14001758b
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14001759b
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400025b0
jmp 0x14001759b
mov r8d, 0xd
lea rcx, [rbp - 0x50]
call fcn.1400022c0
nop
lea r8, [0x140155ed4]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xd8]
call fcn.14001c930
nop
lea r8, [r13 + 0xe0]
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.140010500
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.140010fc0
nop
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400175f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140017614
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001762c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401cbd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0x13
jne 0x140017683
lea rcx, [rbp + 0x110]
nop dword [rax]
mov eax, dword [rcx]
imul eax, eax, 0xbd
add r8d, eax
inc esi
lea rcx, [rcx + 4]
movsxd rax, esi
cmp rax, 0x1d0
jb 0x140017660
mov dword [0x1401cbd80], r8d
lea rdx, [rsp + 0x38]
mov rcx, r12
call fcn.1400293b0
or dword [rsp + 0x30], 0x40
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400176af
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov rax, r12
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.1400d1680
mov rbx, qword [rsp + 0x440]
add rsp, 0x3f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret