Function at 0x140034540
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x278
movups xmmword [rsp + 0x250], xmm6
movups xmmword [rsp + 0x260], xmm7
mov dword [rsp + 0x200], 0x14
mov rsi, rdx
mov r8d, dword [rsp + 0x200]
mov ebx, ecx
mov edx, dword [rsp + 0x200]
mov r9d, dword [rsp + 0x200]
xor ecx, ecx
lea rdi, [rsp + 0x204]
mov eax, dword [rsp + 0x200]
mov word [rsp + 0x82], cx
xor r8d, 0x2d
lea rbp, [rsp + 0x200]
add r9d, 2
add edx, 1
mov ecx, dword [rsp + 0x200]
movzx r8d, r8w
add eax, 3
xor ax, word [0x140122382]
movzx r9d, r9w
xor edx, 0x70
movzx eax, ax
movzx edx, dx
add ecx, 4
xor cx, word [0x140122384]
shl rax, 0x10
mov word [rsp + 0x80], cx
mov ecx, ebx
or rax, r9
shl rax, 0x10
or rax, rdx
shl rax, 0x10
or rax, r8
xor r8d, r8d
mov qword [rsp + 0x204], rax
mov qword [rsp + 0x78], rax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x20c], eax
movzx eax, word [rsp + 0x204]
mov edx, dword [rsp + 0x200]
xor eax, edx
mov word [rsp + 0x204], ax
movzx edx, word [rsp + 0x206]
mov eax, dword [rsp + 0x200]
add eax, 1
xor eax, edx
mov word [rsp + 0x206], ax
movzx edx, word [rsp + 0x208]
mov eax, dword [rsp + 0x200]
add eax, 2
xor eax, edx
mov word [rsp + 0x208], ax
movzx edx, word [rsp + 0x20a]
mov eax, dword [rsp + 0x200]
add eax, 3
xor eax, edx
mov word [rsp + 0x20a], ax
movzx edx, word [rsp + 0x20c]
mov eax, dword [rsp + 0x200]
add eax, 4
xor eax, edx
mov rdx, rsi
mov word [rsp + 0x20c], ax
mov word [rsp + 0x20e], r8w
mov r8, rdi
call fcn.1400343b0
mov r9d, 0xb
xor r10d, r10d
mov ecx, ebx
mov qword [rsp + 0x38], rax
movzx eax, word [0x140122388]
mov r8, rbp
mov word [rsp + 0xac], r9w
mov dword [rsp + 0xa8], 0x780038
lea edx, [rax + 0xb]
movzx eax, word [0x14012238a]
mov word [rsp + 0xae], dx
mov rdx, rsi
mov word [rsp + 0xb2], r10w
add eax, 0xb
mov word [rsp + 0xb0], ax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x200], rax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x208], eax
movzx eax, word [rsp + 0x200]
sub eax, 0xb
mov word [rsp + 0x200], ax
movzx eax, word [rsp + 0x202]
sub eax, 0xb
mov word [rsp + 0x202], ax
movzx eax, word [rsp + 0x204]
sub eax, 0xb
mov word [rsp + 0x204], ax
movzx eax, word [rsp + 0x206]
sub eax, 0xb
mov word [rsp + 0x206], ax
movzx eax, word [rsp + 0x208]
sub eax, 0xb
xor r12d, r12d
xor r14d, r14d
mov word [rsp + 0x208], ax
call fcn.1400343b0
xor r11d, r11d
mov dword [rsp + 0x200], 0x7c
mov ecx, dword [rsp + 0x200]
mov r13, rax
mov r8d, dword [rsp + 0x200]
mov r9d, dword [rsp + 0x200]
mov word [rsp + 0x92], r11w
mov eax, dword [rsp + 0x200]
xor ecx, 0x2d
mov edx, dword [rsp + 0x200]
add r9d, 2
add r8d, 1
movzx ecx, cx
add eax, 3
movzx r9d, r9w
xor r8d, 0x6c
add edx, 4
xor ax, word [0x14012238e]
movzx r8d, r8w
xor dx, word [0x140122390]
movzx eax, ax
mov word [rsp + 0x90], dx
shl rax, 0x10
or rax, r9
shl rax, 0x10
or rax, r8
mov r8, rdi
shl rax, 0x10
or rax, rcx
mov ecx, ebx
mov qword [rsp + 0x204], rax
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x20c], eax
movzx eax, word [rsp + 0x204]
mov edx, dword [rsp + 0x200]
xor eax, edx
mov word [rsp + 0x204], ax
movzx edx, word [rsp + 0x206]
mov eax, dword [rsp + 0x200]
add eax, 1
xor eax, edx
mov word [rsp + 0x206], ax
movzx edx, word [rsp + 0x208]
mov eax, dword [rsp + 0x200]
add eax, 2
xor eax, edx
mov word [rsp + 0x208], ax
movzx edx, word [rsp + 0x20a]
mov eax, dword [rsp + 0x200]
add eax, 3
xor eax, edx
mov word [rsp + 0x20a], ax
movzx edx, word [rsp + 0x20c]
mov eax, dword [rsp + 0x200]
add eax, 4
xor eax, edx
mov rdx, rsi
mov word [rsp + 0x20c], ax
mov word [rsp + 0x20e], r12w
call fcn.1400343b0
mov dword [rsp + 0x200], 0x11
mov ecx, dword [rsp + 0x200]
mov qword [rsp + 0x40], rax
mov r8d, dword [rsp + 0x200]
mov r9d, dword [rsp + 0x200]
mov eax, dword [rsp + 0x200]
xor ecx, 0x2d
mov word [rsp + 0xa2], r14w
mov edx, dword [rsp + 0x200]
movzx ecx, cx
add edx, 4
xor dx, word [0x140122396]
add r8d, 1
add eax, 3
xor ax, word [0x140122394]
add r9d, 2
xor r8d, 0x73
mov word [rsp + 0xa0], dx
movzx eax, ax
movzx r9d, r9w
movzx r8d, r8w
xor r15d, r15d
shl rax, 0x10
or rax, r9
shl rax, 0x10
or rax, r8
mov r8, rdi
shl rax, 0x10
or rax, rcx
mov ecx, ebx
mov qword [rsp + 0x204], rax
mov qword [rsp + 0x98], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x20c], eax
movzx eax, word [rsp + 0x204]
mov edx, dword [rsp + 0x200]
xor eax, edx
mov word [rsp + 0x204], ax
movzx edx, word [rsp + 0x206]
mov eax, dword [rsp + 0x200]
add eax, 1
xor eax, edx
mov word [rsp + 0x206], ax
movzx edx, word [rsp + 0x208]
mov eax, dword [rsp + 0x200]
add eax, 2
xor eax, edx
mov word [rsp + 0x208], ax
movzx edx, word [rsp + 0x20a]
mov eax, dword [rsp + 0x200]
add eax, 3
xor eax, edx
mov word [rsp + 0x20a], ax
movzx edx, word [rsp + 0x20c]
mov eax, dword [rsp + 0x200]
add eax, 4
xor eax, edx
mov rdx, rsi
mov word [rsp + 0x20c], ax
mov word [rsp + 0x20e], r15w
call fcn.1400343b0
mov dword [rsp + 0x150], 0x6007e
movabs rdx, 0x6b007a007b0073
mov qword [rsp + 0x48], rax
movzx eax, word [str.__sd_killer_off]
movd xmm0, eax
movzx eax, word [0x1401223ac]
pinsrw xmm0, word [0x1401223aa], 1
movd xmm3, eax
movzx eax, word [0x1401223b0]
pinsrw xmm3, word [0x1401223ae], 1
movd xmm1, eax
movzx eax, word [0x1401223b4]
punpckldq xmm0, xmm3
pinsrw xmm1, word [0x1401223b2], 1
movd xmm2, eax
movzx eax, word [0x1401223b8]
pinsrw xmm2, word [0x1401223b6], 1
add eax, 6
punpckldq xmm1, xmm2
mov word [rsp + 0x164], ax
punpcklqdq xmm0, xmm1
xor eax, eax
paddw xmm0, xmmword [0x140122490]
mov word [rsp + 0x166], ax
movdqu xmm1, xmmword [str.3tu3szkuuuuuuuuXX]
movabs rax, 0x33007500740033
mov qword [rsp + 0x200], rax
movups xmmword [rsp + 0x154], xmm0
mov rax, qword [rsp + 0x160]
movdqu xmm4, xmmword [rsp + 0x150]
mov qword [rsp + 0x208], rdx
movups xmmword [rsp + 0x140], xmm1
movups xmmword [rsp + 0x210], xmm4
mov qword [rsp + 0x220], rax
xor eax, eax
movzx edx, word [rsp + rax*2 + 0x200]
sub edx, 6
mov word [rsp + rax*2 + 0x200], dx
add rax, 1
cmp rax, 0x13
jne 0x140034b20
mov r8, rbp
mov rdx, rsi
mov ecx, ebx
call fcn.140034490
test al, al
je 0x140034b55
mov byte [0x14015b2e0], 1
movzx eax, word [str.__exit_safe_boot]
xor edx, edx
movzx ecx, word [0x1401223e0]
mov dword [rsp + 0x200], 0x75
mov word [rsp + 0x1ae], dx
movzx edx, word [0x1401223dc]
movd xmm0, eax
movzx eax, word [0x1401223cc]
xor ecx, 0x75
pinsrw xmm0, word [0x1401223ca], 1
mov word [rsp + 0x1a8], cx
movd xmm3, eax
movzx eax, word [0x1401223d0]
pinsrw xmm3, word [0x1401223ce], 1
movd xmm1, eax
movzx eax, word [0x1401223d4]
punpckldq xmm0, xmm3
pinsrw xmm1, word [0x1401223d2], 1
movd xmm2, eax
movzx eax, word [0x1401223de]
pinsrw xmm2, word [0x1401223d6], 1
shl rax, 0x10
punpckldq xmm1, xmm2
movdqu xmm2, xmmword [0x1401224c0]
or rax, rdx
movzx edx, word [0x1401223da]
punpcklqdq xmm0, xmm1
movq xmm1, qword [0x1401224b0]
shl rax, 0x10
pxor xmm0, xmmword [0x1401224b0]
movups xmmword [rsp + 0x170], xmm2
movdqu xmm2, xmmword [0x1401224d0]
or rax, rdx
movzx edx, word [0x1401223d8]
shl rax, 0x10
movups xmmword [rsp + 0x180], xmm2
or rax, rdx
movzx edx, word [0x1401223e2]
movups xmmword [rsp + 0x190], xmm0
movq xmm5, rax
movzx eax, word [0x1401223e4]
xor edx, 0x75
pxor xmm1, xmm5
xor eax, 0x75
mov word [rsp + 0x1aa], dx
movabs rdx, 0x19001c001e0058
mov word [rsp + 0x1ac], ax
movabs rax, 0x11000600580058
mov qword [rsp + 0x204], rax
movabs rax, 0x58000700100019
mov qword [rsp + 0x20c], rdx
movabs rdx, 0x7500130013001a
mov qword [rsp + 0x214], rax
xor eax, eax
mov qword [rsp + 0x21c], rdx
movq qword [rsp + 0x1a0], xmm1
movups xmmword [rsp + 0x224], xmm0
movdqu xmm4, xmmword [rsp + 0x1a0]
movups xmmword [rsp + 0x234], xmm4
nop word [rax + rax]
movzx edx, word [rsp + rax*2 + 0x204]
mov ecx, dword [rsp + 0x200]
xor edx, ecx
mov word [rsp + rax*2 + 0x204], dx
add rax, 1
cmp rax, 0x1f
jne 0x140034ce0
xor eax, eax
mov r8, rdi
mov rdx, rsi
mov ecx, ebx
mov word [rsp + 0x242], ax
call fcn.140034490
test al, al
jne 0x140035aa9
movzx r15d, word [0x1401223ea]
movzx eax, word [0x1401223ee]
xor r14d, r14d
mov dword [rsp + 0x200], 0x1e
movdqu xmm0, xmmword [0x1401224e0]
movzx r12d, word [0x1401223f0]
mov word [rsp + 0x1f2], r14w
movzx ecx, word [0x1401223f6]
movzx r14d, word [0x1401223ec]
xor r15d, 0x1e
xor eax, 0x1e
movzx edx, word [0x1401223f8]
mov word [rsp + 0x50], ax
xor r12d, 0x1e
mov word [rsp + 0x1d2], r15w
movzx r10d, word [0x1401223fa]
xor r14d, 0x1e
xor ecx, 0x1e
movzx r15d, word [rsp + 0x50]
movzx r9d, word [0x1401223fc]
movups xmmword [rsp + 0x1b0], xmm0
xor edx, 0x1e
movzx eax, word [0x140122408]
movdqu xmm0, xmmword [0x1401224f0]
xor r10d, 0x1e
mov word [rsp + 0x58], cx
xor r9d, 0x1e
movzx r11d, word [str.verbose]
mov word [rsp + 0x5a], dx
mov word [rsp + 0x5c], r10w
movzx ebp, word [0x1401223f2]
xor eax, 0x1e
mov word [rsp + 0x5e], r9w
movzx r10d, word [0x1401223fe]
xor r11d, 0x1e
mov word [rsp + 0x1d4], r14w
movzx r9d, word [0x140122400]
xor ebp, 0x1e
mov word [rsp + 0x1d6], r15w
movzx r8d, word [0x140122402]
xor r10d, 0x1e
movzx ecx, word [0x140122404]
movzx edx, word [0x140122406]
xor r9d, 0x1e
mov word [rsp + 0x1d0], 0x1e
movups xmmword [rsp + 0x1c0], xmm0
xor r8d, 0x1e
mov word [rsp + 0x1d8], r12w
xor edx, 0x1e
xor ecx, 0x1e
movzx r14d, word [rsp + 0x58]
mov word [rsp + 0x1dc], r11w
movzx r15d, word [rsp + 0x5a]
mov word [rsp + 0x1de], r14w
movzx r11d, word [rsp + 0x5e]
mov word [rsp + 0x1f0], ax
movzx r14d, word [rsp + 0x5c]
movabs rax, 0x66007b00330033
mov qword [rsp + 0x204], rax
movabs rax, 0x33007b0078007f
mov word [rsp + 0x1ee], dx
movabs rdx, 0x6d0033006a0077
mov qword [rsp + 0x20c], rdx
movabs rdx, 0x6a00710071007c
mov qword [rsp + 0x214], rax
mov eax, dword [rsp + 0x1f0]
mov word [rsp + 0x1da], bp
movdqu xmm5, xmmword [rsp + 0x1d0]
mov word [rsp + 0x1e0], r15w
mov word [rsp + 0x1e2], r14w
mov word [rsp + 0x1e4], r11w
mov word [rsp + 0x1e6], r10w
mov word [rsp + 0x1e8], r9w
mov word [rsp + 0x1ea], r8w
mov word [rsp + 0x1ec], cx
movdqu xmm4, xmmword [rsp + 0x1e0]
mov qword [rsp + 0x21c], rdx
movups xmmword [rsp + 0x224], xmm5
movups xmmword [rsp + 0x234], xmm4
mov dword [rsp + 0x244], eax
xor eax, eax
nop dword [rax]
movzx edx, word [rsp + rax*2 + 0x204]
mov ecx, dword [rsp + 0x200]
xor edx, ecx
mov word [rsp + rax*2 + 0x204], dx
add rax, 1
cmp rax, 0x21
jne 0x140034f58
xor r12d, r12d
mov r8, rdi
mov rdx, rsi
mov ecx, ebx
mov word [rsp + 0x246], r12w
call fcn.140034490
test al, al
jne 0x140035a9f
movzx edx, word [0x1401223f0]
mov edi, 7
xor ebp, ebp
mov ecx, ebx
movzx eax, word [0x1401223f2]
mov word [rsp + 0xb8], di
xor r11d, r11d
lea r8, [rsp + 0xf4]
mov dword [rsp + 0xb4], 0x71002a
xor edx, 7
xor eax, 7
mov word [rsp + 0xba], dx
mov word [rsp + 0xbc], ax
mov rax, qword [rsp + 0xb4]
mov dword [rsp + 0xf0], 7
mov word [rsp + 0xbe], r11w
mov qword [rsp + 0xf4], rax
mov eax, dword [rsp + 0xbc]
mov dword [rsp + 0xfc], eax
movzx eax, word [rsp + 0xf4]
mov edx, dword [rsp + 0xf0]
xor eax, edx
mov word [rsp + 0xf4], ax
movzx eax, word [rsp + 0xf6]
mov edx, dword [rsp + 0xf0]
xor eax, edx
mov word [rsp + 0xf6], ax
movzx eax, word [rsp + 0xf8]
mov edx, dword [rsp + 0xf0]
xor eax, edx
mov word [rsp + 0xf8], ax
movzx eax, word [rsp + 0xfa]
mov edx, dword [rsp + 0xf0]
xor eax, edx
mov word [rsp + 0xfa], ax
movzx eax, word [rsp + 0xfc]
mov edx, dword [rsp + 0xf0]
xor eax, edx
mov rdx, rsi
mov word [rsp + 0xfc], ax
mov word [rsp + 0xfe], bp
call fcn.140034490
test al, al
jne 0x140035a80
movzx eax, word [0x140122404]
xor r10d, r10d
mov dword [rsp + 0x210], 0x7006c
movabs rdx, 0x7a007600690079
mov word [rsp + 0x226], r10w
movd xmm0, eax
movzx eax, word [0x140122408]
pinsrw xmm0, word [0x140122406], 1
movd xmm3, eax
movzx eax, word [str.local]
pinsrw xmm3, word [0x14012240a], 1
movd xmm1, eax
movzx eax, word [0x140122410]
punpckldq xmm0, xmm3
pinsrw xmm1, word [0x14012240e], 1
movd xmm2, eax
movzx eax, word [0x140122414]
pinsrw xmm2, word [0x140122412], 1
punpckldq xmm1, xmm2
add eax, 7
punpcklqdq xmm0, xmm1
paddw xmm0, xmmword [0x140122500]
mov word [rsp + 0x224], ax
movabs rax, 0x6c007d00340034
mov qword [rsp + 0x110], rax
movdqu xmm1, xmmword [0x140122510]
movups xmmword [rsp + 0x214], xmm0
mov rax, qword [rsp + 0x220]
movdqu xmm6, xmmword [rsp + 0x210]
mov qword [rsp + 0x118], rdx
movups xmmword [rsp + 0x200], xmm1
movups xmmword [rsp + 0x120], xmm6
mov qword [rsp + 0x130], rax
xor eax, eax
nop word [rax + rax]
movzx edx, word [rsp + rax*2 + 0x110]
sub edx, 7
mov word [rsp + rax*2 + 0x110], dx
add rax, 1
cmp rax, 0x13
jne 0x1400351a0
lea r8, [rsp + 0x110]
mov rdx, rsi
mov ecx, ebx
call fcn.140034490
test al, al
jne 0x140035a80
test r13, r13
je 0x1400359f8
xor ecx, ecx
movzx edi, word [str.local]
movabs r12, 0xffffffffffff
movzx r9d, word [0x14012240e]
and rcx, r12
movzx r8d, word [0x140122410]
movabs rbp, 0xffffffff0000ffff
mov rax, qword [0x140122520]
mov rdx, rcx
xor r9d, 0x17
mov dword [rsp + 0x110], 0x17
movq xmm7, qword [str.lstrcmpWkernel32.dll]
mov dx, di
movzx r9d, r9w
xor r8d, 0x17
movabs rdi, 0xffff0000ffffffff
xor dx, 0x17
shl r9, 0x10
movzx r8d, r8w
mov qword [rsp + 0x114], rax
mov rcx, rdx
shl r8, 0x20
mov byte [rsp + 0xd8], 0
lea rbx, [rsp + 0xf0]
and rcx, rbp
lea rsi, [rsp + 0x114]
movq qword [rsp + 0xd0], xmm7
lea r14, [rsp + 0x110]
or rcx, r9
xor r9d, r9d
and rcx, rdi
or rcx, r8
mov qword [rsp + 0x11c], rcx
movzx eax, word [rsp + 0x114]
mov rcx, rbx
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x114], ax
movzx eax, word [rsp + 0x116]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x116], ax
movzx eax, word [rsp + 0x118]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x11a]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11a], ax
movzx eax, word [rsp + 0x11c]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11c], ax
movzx eax, word [rsp + 0x11e]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11e], ax
movzx eax, word [rsp + 0x120]
mov edx, dword [rsp + 0x110]
xor eax, edx
lea rdx, [rsp + 0xd0]
mov word [rsp + 0x120], ax
mov word [rsp + 0x122], r9w
mov byte [rsp + 0xfc], 0
mov r15d, dword [0x140122480]
movq xmm6, qword [0x140122478]
mov dword [rsp + 0xf8], r15d
movq qword [rsp + 0xf0], xmm6
call fcn.140002660
mov rdx, rsi
mov rcx, r13
call rax
test eax, eax
je 0x140035ab8
movzx eax, word [0x14012241e]
movzx edx, word [0x14012241c]
xor r8d, r8d
mov rcx, rbx
movq xmm0, qword [0x140122528]
mov word [rsp + 0xe6], r8w
mov dword [rsp + 0xd8], 0x40070
shl rax, 0x10
or rax, rdx
movzx edx, word [0x14012241a]
shl rax, 0x10
or rax, rdx
movzx edx, word [0x140122418]
shl rax, 0x10
or rax, rdx
mov rdx, qword [str.psgeEEEE_.056E]
movq xmm5, rax
movzx eax, word [str.backups]
paddw xmm0, xmm5
mov qword [rsp + 0xd0], rdx
add eax, 4
mov word [rsp + 0xe4], ax
movq qword [rsp + 0xdc], xmm0
movdqu xmm5, xmmword [rsp + 0xd0]
mov rax, qword [rsp + 0xe0]
movups xmmword [rsp + 0x110], xmm5
mov qword [rsp + 0x120], rax
movzx eax, word [rsp + 0x110]
sub eax, 4
mov word [rsp + 0x110], ax
movzx eax, word [rsp + 0x112]
sub eax, 4
mov word [rsp + 0x112], ax
movzx eax, word [rsp + 0x114]
sub eax, 4
mov word [rsp + 0x114], ax
movzx eax, word [rsp + 0x116]
sub eax, 4
mov word [rsp + 0x116], ax
movzx eax, word [rsp + 0x118]
sub eax, 4
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x11a]
sub eax, 4
mov word [rsp + 0x11a], ax
movzx eax, word [rsp + 0x11c]
sub eax, 4
mov word [rsp + 0x11c], ax
movzx eax, word [rsp + 0x11e]
sub eax, 4
mov word [rsp + 0x11e], ax
movzx eax, word [rsp + 0x120]
mov byte [rsp + 0xc8], 0
sub eax, 4
mov byte [rsp + 0xfc], 0
mov word [rsp + 0x120], ax
movzx eax, word [rsp + 0x122]
mov dword [rsp + 0xf8], r15d
movq qword [rsp + 0xc0], xmm7
sub eax, 4
mov word [rsp + 0x122], ax
movzx eax, word [rsp + 0x124]
movq qword [rsp + 0xf0], xmm6
sub eax, 4
mov word [rsp + 0x124], ax
lea rax, [rsp + 0xc0]
mov rdx, rax
mov qword [rsp + 0x50], rax
call fcn.140002660
mov rdx, r14
mov rcx, r13
call rax
test eax, eax
je 0x140035a90
xor eax, eax
movzx r14d, word [0x140122422]
mov dword [rsp + 0x110], 6
and rax, r12
mov r10d, dword [rsp + 0x110]
mov edx, dword [rsp + 0x110]
mov r9, rax
mov ecx, dword [rsp + 0x110]
mov eax, dword [rsp + 0x110]
add edx, 1
mov r11d, dword [rsp + 0x110]
xor r10d, 0x6e
add ecx, 2
add eax, 3
xor edx, 0x65
movzx r10d, r10w
xor ecx, 0x74
movzx eax, ax
lea r12d, [r11 + 4]
movzx edx, dx
movzx ecx, cx
shl rax, 0x10
mov r11d, dword [rsp + 0x110]
mov r9w, r12w
or rax, rcx
xor r9w, word [str.backups]
shl rax, 0x10
add r11d, 5
or rax, rdx
xor r14d, r11d
mov r11d, dword [rsp + 0x110]
shl rax, 0x10
movzx r14d, r14w
or rax, r10
add r11d, 6
shl r14, 0x10
xor r11w, word [0x140122424]
mov r8, rax
mov rax, r9
movzx r11d, r11w
and rax, rbp
shl r11, 0x20
mov qword [rsp + 0x114], r8
or rax, r14
and rax, rdi
or rax, r11
mov qword [rsp + 0x11c], rax
movzx eax, word [rsp + 0x114]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x114], ax
movzx edx, word [rsp + 0x116]
mov eax, dword [rsp + 0x110]
add eax, 1
xor eax, edx
mov word [rsp + 0x116], ax
movzx edx, word [rsp + 0x118]
mov eax, dword [rsp + 0x110]
add eax, 2
xor eax, edx
mov word [rsp + 0x118], ax
movzx edx, word [rsp + 0x11a]
mov eax, dword [rsp + 0x110]
add eax, 3
xor eax, edx
mov word [rsp + 0x11a], ax
movzx edx, word [rsp + 0x11c]
mov eax, dword [rsp + 0x110]
add eax, 4
xor ecx, ecx
xor eax, edx
mov word [rsp + 0x11c], ax
movzx edx, word [rsp + 0x11e]
mov eax, dword [rsp + 0x110]
add eax, 5
xor eax, edx
mov word [rsp + 0x11e], ax
movzx edx, word [rsp + 0x120]
mov eax, dword [rsp + 0x110]
mov byte [rsp + 0xc8], 0
mov byte [rsp + 0xfc], 0
add eax, 6
mov dword [rsp + 0xf8], r15d
movq qword [rsp + 0xc0], xmm7
xor eax, edx
mov rdx, qword [rsp + 0x50]
mov word [rsp + 0x120], ax
mov word [rsp + 0x122], cx
mov rcx, rbx
movq qword [rsp + 0xf0], xmm6
call fcn.140002660
mov rdx, rsi
mov rcx, r13
call rax
test eax, eax
je 0x140035ad6
xor eax, eax
movzx edx, word [0x140122434]
movq xmm0, qword [0x140122538]
mov dword [rsp + 0x110], 0x45
mov word [rsp + 0x10e], ax
movzx eax, word [0x140122436]
movzx ecx, word [0x140122438]
movdqu xmm1, xmmword [0x140122540]
shl rax, 0x10
or rax, rdx
movzx edx, word [0x140122432]
xor ecx, 0x45
movups xmmword [rsp + 0xf0], xmm1
shl rax, 0x10
mov word [rsp + 0x108], cx
or rax, rdx
movzx edx, word [str.bcdedit__deletevalue_default_safeboot]
shl rax, 0x10
or rax, rdx
movzx edx, word [0x14012243a]
movq xmm4, rax
movzx eax, word [0x14012243c]
pxor xmm0, xmm4
xor edx, 0x45
xor eax, 0x45
mov word [rsp + 0x10a], dx
movabs rdx, 0x45003600350030
mov word [rsp + 0x10c], ax
movabs rax, 0x2e002600240027
movq qword [rsp + 0x100], xmm0
movdqu xmm4, xmmword [rsp + 0x100]
mov qword [rsp + 0x114], rax
mov qword [rsp + 0x11c], rdx
movups xmmword [rsp + 0x124], xmm4
movzx eax, word [rsp + 0x114]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x114], ax
movzx eax, word [rsp + 0x116]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x116], ax
movzx eax, word [rsp + 0x118]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x118], ax
movzx eax, word [rsp + 0x11a]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11a], ax
movzx eax, word [rsp + 0x11c]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11c], ax
movzx eax, word [rsp + 0x11e]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x11e], ax
movzx eax, word [rsp + 0x120]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x120], ax
movzx eax, word [rsp + 0x122]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x122], ax
movzx eax, word [rsp + 0x124]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x124], ax
movzx eax, word [rsp + 0x126]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x126], ax
movzx eax, word [rsp + 0x128]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x128], ax
movzx eax, word [rsp + 0x12a]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x12a], ax
movzx eax, word [rsp + 0x12c]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x12c], ax
movzx eax, word [rsp + 0x12e]
mov edx, dword [rsp + 0x110]
xor eax, edx
mov word [rsp + 0x12e], ax
movzx eax, word [rsp + 0x130]
mov edx, dword [rsp + 0x110]
xor eax, edx
xor edx, edx
mov word [rsp + 0x130], ax
mov rcx, qword [rsp + 0x50]
mov word [rsp + 0x132], dx
lea rdx, [rsp + 0x68]
mov byte [rsp + 0x70], 0
mov byte [rsp + 0xcc], 0
mov dword [rsp + 0xc8], r15d
movq qword [rsp + 0x68], xmm7
movq qword [rsp + 0xc0], xmm6
call fcn.140002660
mov rdx, rsi
mov rcx, r13
call rax
test eax, eax
je 0x140035ac7
nop dword [rax + rax]
mov rdi, qword [rsp + 0x38]
test rdi, rdi
je 0x140035a31
mov ecx, 0xe
call fcn.14000bcc0
mov rcx, rdi
call sub.msvcrt.dll_wcslen
mov r8, qword [0x14015b308]
mov r9, rdi
xor edx, edx
mov qword [rsp + 0x20], rax
lea rcx, [0x14015b300]
call fcn.1400f2e60
cmp qword [rsp + 0x48], 0
je 0x140035a40
xor ecx, ecx
call fcn.14000bd30
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x140035a53
mov rcx, rax
call fcn.14000c790
nop
movups xmm6, xmmword [rsp + 0x250]
movups xmm7, xmmword [rsp + 0x260]
mov eax, 1
add rsp, 0x278
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140014c70
jmp 0x1400351d7
mov ecx, 0xb
call fcn.14000bcc0
jmp 0x1400359f8
call fcn.14000bb60
jmp 0x140034f9c
call fcn.14000bb80
jmp 0x140034d22
mov ecx, 0xa
call fcn.14000bcc0
jmp 0x1400359f8
mov ecx, 0xd
call fcn.14000bcc0
jmp 0x1400359f8
mov ecx, 0xc
call fcn.14000bcc0
jmp 0x1400359f8