Function at 0x140001880
Capabilities:
Encode data using xor

Disassembly:
push r15
mov eax, 0x11508
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.140006180
sub rsp, rax
xor ecx, ecx
mov qword [rsp + 0x58], 0xffffffffce873480
lea rdx, [rsp + 0x58]
call fcn.140004c75
lea rdi, [rsp + 0x60]
xor edx, edx
mov r8d, 0x208
mov rcx, rdi
call sub.msvcrt.dll_memset
mov eax, dword [0x140209060]
lea rcx, [0x14000db40]
movdqa xmm0, xmmword [0x140209050]
movaps xmmword [rsp + 0x1500], xmm0
mov dword [rsp + 0x1510], eax
call fcn.140006310
lea rcx, [0x14000db20]
cmp byte [rax], 0
mov rbx, rax
je 0x140002a6a
call fcn.140006310
mov rbp, rax
cmp byte [rbp + 0x14], 0
je 0x140001934
movabs rax, 0xf3abab9595cfcfbf
mov byte [rbp + 0x14], 0
xor qword [rbp], rax
movabs rax, 0x4f4fb7b7d5d5f3
xor dword [rbp + 0x10], 0x95cfcfbf
xor qword [rbp + 8], rax
mov eax, dword [0x140209080]
mov r11d, 0xffffab95
movdqa xmm0, xmmword [0x140209070]
lea rcx, [0x14000db00]
mov word [rsp + 0x1514], r11w
movaps xmmword [rsp + 0x1500], xmm0
mov dword [rsp + 0x1510], eax
call fcn.140006310
lea rcx, [0x14000dae0]
mov rsi, rax
call fcn.140006310
cmp byte [rsi], 0
mov rbx, rax
jne 0x1400019bf
mov byte [rax + 0x16], 1
xor r8d, r8d
mov rax, qword [rsp + 0x1500]
mov rdx, rbx
lea rcx, [0x14000b6a0]
mov qword [rbx], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbx + 8], rax
mov rax, qword [rsp + 0x150e]
mov qword [rbx + 0xe], rax
mov byte [rsi], 1
call fcn.140005a50
cmp byte [rbx + 0x16], 0
je 0x1400019f1
movabs rax, 0xf3abab9595cfcfbf
mov byte [rbx + 0x16], 0
xor qword [rbx], rax
movabs rax, 0x4f4fb7b7d5d5f3
xor dword [rbx + 0x10], 0x95cfcfbf
xor qword [rbx + 8], rax
xor word [rbx + 0x14], 0xab95
mov rcx, rbx
mov r14, qword [sym.imp.msvcrt.dll__wgetenv]
call r14
lea r12, [rsp + 0x270]
mov r8, rbp
mov rcx, rdi
mov rdx, rax
call fcn.140003c60
xor edx, edx
mov r8d, 0x208
mov rcx, r12
call sub.msvcrt.dll_memset
movdqa xmm0, xmmword [0x140209090]
mov r10d, 0x941
mov word [rsp + 0x1510], r10w
lea rcx, [0x14000db80]
movaps xmmword [rsp + 0x1500], xmm0
call fcn.140006310
lea rcx, [0x14000db60]
mov rsi, rax
call fcn.140006310
cmp byte [rsi], 0
mov rbx, rax
jne 0x140001aa1
mov byte [rax + 0x12], 1
mov r9d, 0x941
xor r8d, r8d
mov rdx, rbx
mov rax, qword [rsp + 0x1500]
mov word [rbx + 0x10], r9w
lea rcx, [0x14000b880]
mov qword [rbx], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbx + 8], rax
mov byte [rsi], 1
call fcn.140005a50
cmp byte [rbx + 0x12], 0
je 0x140001acc
movabs rax, 0xa77373fbfb090941
mov byte [rbx + 0x12], 0
xor qword [rbx], rax
movabs rax, 0x29297b7b4545a7
xor word [rbx + 0x10], 0x941
xor qword [rbx + 8], rax
mov r8, rbx
mov rdx, rdi
lea rbx, [rsp + 0x480]
mov rcx, r12
call fcn.140003c60
xor edx, edx
mov r8d, 0x208
mov rcx, rbx
call sub.msvcrt.dll_memset
mov rax, qword [0x1402090e0]
mov r8d, 0xffff8107
movdqa xmm0, xmmword [0x1402090a0]
lea rcx, [0x14000dbc0]
mov word [rsp + 0x154c], r8w
movaps xmmword [rsp + 0x1500], xmm0
movdqa xmm0, xmmword [0x1402090b0]
mov qword [rsp + 0x1540], rax
mov eax, dword [0x1402090e8]
movaps xmmword [rsp + 0x1510], xmm0
movdqa xmm0, xmmword [0x1402090c0]
movaps xmmword [rsp + 0x1520], xmm0
movdqa xmm0, xmmword [0x1402090d0]
mov dword [rsp + 0x1548], eax
movaps xmmword [rsp + 0x1530], xmm0
call fcn.140006310
lea rcx, [0x14000dba0]
cmp byte [rax], 0
mov rbp, rax
je 0x140002990
call fcn.140006310
mov rsi, rax
cmp byte [rsi + 0x4e], 0
je 0x140001bc2
movabs r8, 0x8107f5017dbbf511
xor eax, eax
nop word cs:[rax + rax]
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [rsi + rax*2], dx
add rax, 1
cmp rax, 0x27
jne 0x140001ba0
mov byte [rsi + 0x4e], 0
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140003c60
lea rsi, [rsp + 0x1500]
mov r8d, 0xa2
lea rdx, [0x14000c020]
mov rcx, rsi
call sub.msvcrt.dll_memcpy
lea rcx, [0x14000dc00]
call fcn.140006310
lea rcx, [0x14000dbe0]
cmp byte [rax], 0
mov r13, rax
je 0x140002a2e
call fcn.140006310
mov rbp, rax
cmp byte [rbp + 0xa2], 0
je 0x140001c56
movabs r8, 0x779d037fcf83bfcb
xor eax, eax
nop dword [rax]
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [rbp + rax*2], dx
add rax, 1
cmp rax, 0x51
jne 0x140001c30
mov byte [rbp + 0xa2], 0
mov r9, rbp
mov r8, rbx
mov rdx, rdi
mov qword [rsp + 0x20], rbx
mov ecx, 1
call fcn.1400035c0
mov r8d, 0x130
mov rcx, rsi
lea rdx, [0x14000c0e0]
call sub.msvcrt.dll_memcpy
lea rcx, [0x14000dc40]
call fcn.140006310
lea rcx, [0x14000dc20]
cmp byte [rax], 0
mov r13, rax
je 0x140002b1d
call fcn.140006310
mov rbp, rax
cmp byte [rbp + 0x130], 0
je 0x140001ce8
movabs r8, 0x8373ad4dbdc90b71
xor eax, eax
nop
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [rbp + rax*2], dx
add rax, 1
cmp rax, 0x98
jne 0x140001cc0
mov byte [rbp + 0x130], 0
mov r9, rbp
xor ecx, ecx
mov r8, r12
mov qword [rsp + 0x20], r12
lea r13, [rsp + 0x690]
mov rdx, rdi
call fcn.1400035c0
xor edx, edx
mov r8d, 0x208
mov rcx, r13
call sub.msvcrt.dll_memset
xor ecx, ecx
mov r8d, 0x104
mov rdx, r13
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rbp, [rsp + 0x8a0]
xor edx, edx
mov r8d, 0x208
mov rcx, rbp
call sub.msvcrt.dll_memset
mov eax, dword [0x140209120]
mov ecx, 0xffffb555
movdqa xmm0, xmmword [0x1402090f0]
mov word [rsp + 0x1534], cx
lea rcx, [0x14000dcc0]
movaps xmmword [rsp + 0x1500], xmm0
movdqa xmm0, xmmword [0x140209100]
mov dword [rsp + 0x1530], eax
movaps xmmword [rsp + 0x1510], xmm0
movdqa xmm0, xmmword [0x140209110]
movaps xmmword [rsp + 0x1520], xmm0
call fcn.140006310
cmp byte [rax], 0
je 0x140002b59
lea rcx, [0x14000dca0]
call fcn.140006310
mov r15, rax
cmp byte [r15 + 0x36], 0
je 0x140001de4
movabs r8, 0x7d410717b555f99b
xor eax, eax
nop
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [r15 + rax*2], dx
add rax, 1
cmp rax, 0x1b
jne 0x140001dc0
mov byte [r15 + 0x36], 0
mov rax, qword [0x140209140]
mov edx, 0x717
movdqa xmm0, xmmword [0x140209130]
lea rcx, [0x14000dc80]
mov word [rsp + 0x1518], dx
movaps xmmword [rsp + 0x1500], xmm0
mov qword [rsp + 0x1510], rax
call fcn.140006310
lea rcx, [0x14000dc60]
mov qword [rsp + 0x48], rax
call fcn.140006310
mov r8, qword [rsp + 0x48]
mov rdx, rax
cmp byte [r8], 0
jne 0x140001e88
mov byte [rax + 0x1a], 1
mov rax, qword [rsp + 0x1500]
lea rcx, [0x14000b700]
mov qword [rsp + 0x48], rdx
mov qword [rdx], rax
mov rax, qword [rsp + 0x1508]
mov qword [rdx + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rdx + 0x10], rax
mov eax, 0x717
mov word [rdx + 0x18], ax
mov byte [r8], 1
xor r8d, r8d
call fcn.140005a50
mov rdx, qword [rsp + 0x48]
cmp byte [rdx + 0x1a], 0
je 0x140001eb7
movabs rax, 0x17b5b55555f9f99b
mov byte [rdx + 0x1a], 0
movabs rcx, 0x7d7d4141070717
xor qword [rdx], rax
xor qword [rdx + 8], rcx
xor qword [rdx + 0x10], rax
xor word [rdx + 0x18], 0x717
mov rcx, rdx
call r14
mov r8, r15
mov rcx, rbp
mov rdx, rax
call fcn.140003c60
mov r8d, 0x6e2
mov rcx, rsi
lea rdx, [0x14000c220]
call sub.msvcrt.dll_memcpy
lea rcx, [0x14000dd00]
call fcn.140006310
lea rcx, [0x14000dce0]
mov r15, rax
call fcn.140006310
cmp byte [r15], 0
mov r9, rax
jne 0x140001f3c
mov r8d, 0x6e2
mov rdx, rsi
mov rcx, rax
mov byte [rax + 0x6e2], 1
call sub.msvcrt.dll_memcpy
mov byte [r15], 1
xor r8d, r8d
lea rcx, [0x14000b870]
mov rdx, rax
mov qword [rsp + 0x48], rax
call fcn.140005a50
mov r9, qword [rsp + 0x48]
cmp byte [r9 + 0x6e2], 0
je 0x140001f81
movabs r8, 0x73c5e5572545d7f1
xor eax, eax
nop word [rax + rax]
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [r9 + rax*2], dx
add rax, 1
cmp rax, 0x371
jne 0x140001f58
mov byte [r9 + 0x6e2], 0
mov r8, rbx
mov rdx, rdi
mov ecx, 1
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
lea r15, [rsp + 0xab0]
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbx
call fcn.1400035c0
xor edx, edx
mov r8d, 0x208
mov rcx, r15
call sub.msvcrt.dll_memset
mov rax, qword [0x140209160]
lea rcx, [0x14000dd40]
movdqa xmm0, xmmword [0x140209150]
movaps xmmword [rsp + 0x1500], xmm0
mov qword [rsp + 0x1510], rax
mov eax, 0x1cb
mov word [rsp + 0x1518], ax
call fcn.140006310
cmp byte [rax], 0
je 0x140002ab2
lea rcx, [0x14000dd20]
call fcn.140006310
mov rdx, rax
cmp byte [rdx + 0x1a], 0
je 0x14000203c
movabs rax, 0xcb3d3db5b53f3f77
mov byte [rdx + 0x1a], 0
movabs rcx, 0x101b9b90101cb
xor qword [rdx], rax
xor qword [rdx + 8], rcx
xor qword [rdx + 0x10], rax
xor word [rdx + 0x18], 0x1cb
mov r8, rdx
mov rcx, r15
mov rdx, rdi
call fcn.140003c60
mov rdx, rbp
mov rcx, r13
call sub.msvcrt.dll__wcsicmp
test eax, eax
jne 0x140002be3
lea rbx, [rsp + 0xcc0]
xor edx, edx
mov r8d, 0x208
mov rcx, rbx
call sub.msvcrt.dll_memset
mov rax, qword [0x140209180]
lea rcx, [0x14000ddc0]
movdqa xmm0, xmmword [0x140209170]
movaps xmmword [rsp + 0x1500], xmm0
mov qword [rsp + 0x1510], rax
call fcn.140006310
lea rcx, [0x14000dda0]
mov r13, rax
call fcn.140006310
cmp byte [r13], 0
mov rbp, rax
jne 0x1400020f8
mov byte [rax + 0x18], 1
xor r8d, r8d
mov rax, qword [rsp + 0x1500]
mov rdx, rbp
lea rcx, [0x14000b6b0]
mov qword [rbp], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rbp + 0x10], rax
mov byte [r13], 1
call fcn.140005a50
cmp byte [rbp + 0x18], 0
je 0x140002122
movabs rax, 0xb90707c3c34b4bcd
mov byte [rbp + 0x18], 0
movabs rdx, 0x1b1bb3b37171b9
xor qword [rbp], rax
xor qword [rbp + 8], rdx
xor qword [rbp + 0x10], rax
mov r8, rbp
mov rdx, r15
lea rbp, [0x14000e020]
mov rcx, rbx
call fcn.140003c60
mov edx, dword [0x14001ce20]
mov rcx, rbp
call fcn.140001730
movdqa xmm0, xmmword [str.kq3]
lea rcx, [0x14000de00]
mov rax, qword [0x1402091c0]
movaps xmmword [rsp + 0x1500], xmm0
movdqa xmm0, xmmword [0x1402091a0]
movsxd r13, dword [0x14001ce20]
movaps xmmword [rsp + 0x1510], xmm0
movdqa xmm0, xmmword [str.Dq_]
mov qword [rsp + 0x1530], rax
mov eax, 0xffffdf29
movaps xmmword [rsp + 0x1520], xmm0
mov word [rsp + 0x1538], ax
call fcn.140006310
cmp byte [rax], 0
je 0x14000285d
lea rcx, [0x14000dde0]
call fcn.140006310
mov r10, rax
cmp byte [r10 + 0x3a], 0
je 0x1400021f4
movabs r8, 0xd53df29ffdb7137
xor eax, eax
nop
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [r10 + rax*2], dx
add rax, 1
cmp rax, 0x1d
jne 0x1400021d0
mov byte [r10 + 0x3a], 0
mov rcx, r10
mov r9, r15
mov r8, r13
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov rdx, rbp
mov dword [rsp + 0x30], 1
lea r13, [rsp + 0xed0]
call fcn.140001560
xor edx, edx
mov r8d, 0x208
mov rcx, r13
call sub.msvcrt.dll_memset
mov rax, qword [0x1402091e0]
lea rcx, [0x14000de80]
movdqa xmm0, xmmword [0x1402091d0]
movaps xmmword [rsp + 0x1500], xmm0
mov qword [rsp + 0x1510], rax
mov eax, dword [0x1402091e8]
mov dword [rsp + 0x1518], eax
call fcn.140006310
lea rcx, [0x14000de60]
cmp byte [rax], 0
mov rbp, rax
je 0x140002cdc
call fcn.140006310
mov rbx, rax
cmp byte [rbx + 0x1c], 0
je 0x1400022b2
movabs rax, 0x59dfdf59597b7b8d
mov byte [rbx + 0x1c], 0
movabs rdx, 0xbbbb5555ffff59
xor qword [rbx], rax
xor qword [rbx + 8], rdx
xor qword [rbx + 0x10], rax
xor dword [rbx + 0x18], 0x55ffff59
mov rax, qword [0x140209200]
mov r11d, 0xffffff59
movdqa xmm0, xmmword [0x1402091f0]
lea rcx, [0x14000de40]
mov word [rsp + 0x1518], r11w
movaps xmmword [rsp + 0x1500], xmm0
mov qword [rsp + 0x1510], rax
call fcn.140006310
lea rcx, [0x14000de20]
mov r15, rax
call fcn.140006310
cmp byte [r15], 0
mov rbp, rax
jne 0x14000234d
mov byte [rax + 0x1a], 1
mov r10d, 0xffffff59
xor r8d, r8d
mov rdx, rbp
mov rax, qword [rsp + 0x1500]
mov word [rbp + 0x18], r10w
lea rcx, [0x14000b6d0]
mov qword [rbp], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rbp + 0x10], rax
mov byte [r15], 1
call fcn.140005a50
cmp byte [rbp + 0x1a], 0
je 0x14000237d
movabs rax, 0x59dfdf59597b7b8d
mov byte [rbp + 0x1a], 0
movabs rdx, 0xbbbb5555ffff59
xor qword [rbp], rax
xor qword [rbp + 8], rdx
xor qword [rbp + 0x10], rax
xor word [rbp + 0x18], 0xff59
mov rcx, rbp
call r14
mov r8, rbx
mov rcx, r13
lea r14, [rsp + 0x10e0]
mov rdx, rax
call fcn.140003c60
xor edx, edx
mov r8d, 0x208
mov rcx, r14
call sub.msvcrt.dll_memset
movdqa xmm0, xmmword [0x140209210]
mov r9d, 0xffff8351
mov word [rsp + 0x1510], r9w
lea rcx, [0x14000dec0]
movaps xmmword [rsp + 0x1500], xmm0
call fcn.140006310
lea rcx, [0x14000dea0]
mov rbp, rax
call fcn.140006310
cmp byte [rbp], 0
mov rbx, rax
jne 0x140002428
mov byte [rax + 0x12], 1
mov r8d, 0xffff8351
mov rax, qword [rsp + 0x1500]
mov rdx, rbx
mov word [rbx + 0x10], r8w
lea rcx, [0x14000b890]
xor r8d, r8d
mov qword [rbx], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbx + 8], rax
mov byte [rbp], 1
call fcn.140005a50
cmp byte [rbx + 0x12], 0
je 0x140002453
movabs rax, 0x2945454d4d838351
mov byte [rbx + 0x12], 0
xor qword [rbx], rax
movabs rax, 0x5f5febeb818129
xor word [rbx + 0x10], 0x8351
xor qword [rbx + 8], rax
mov r8, rbx
mov rcx, r14
lea rbx, [0x14001ce40]
mov rdx, r13
call fcn.140003c60
mov edx, dword [0x140020710]
mov rcx, rbx
call fcn.140001730
mov r8d, dword [0x140020710]
mov rdx, rbx
mov rcx, r14
call fcn.1400042c0
mov r8, r13
mov rdx, r12
mov rcx, rdi
call fcn.140003680
lea rcx, [0x14000df00]
mov r14d, eax
call fcn.140006310
lea rcx, [0x14000dee0]
cmp byte [rax], 0
mov rbx, rax
je 0x140002ca9
call fcn.140006310
mov r15, rax
cmp byte [r15 + 8], 0
je 0x1400024e2
movq xmm0, qword [r15]
mov byte [r15 + 8], 0
movq xmm1, qword [0x140209220]
pxor xmm0, xmm1
movq qword [r15], xmm0
movdqa xmm0, xmmword [0x140209230]
mov ecx, 0xffffc51d
mov eax, dword [0x140209270]
mov word [rsp + 0x1544], cx
lea rcx, [0x14000df40]
movaps xmmword [rsp + 0x1500], xmm0
movdqa xmm0, xmmword [0x140209240]
movaps xmmword [rsp + 0x1510], xmm0
movdqa xmm0, xmmword [0x140209250]
mov dword [rsp + 0x1540], eax
movaps xmmword [rsp + 0x1520], xmm0
movdqa xmm0, xmmword [0x140209260]
movaps xmmword [rsp + 0x1530], xmm0
call fcn.140006310
lea rcx, [0x14000df20]
mov rbx, rax
call fcn.140006310
cmp byte [rbx], 0
mov rbp, rax
jne 0x1400025e8
mov byte [rax + 0x46], 1
xor r8d, r8d
mov rax, qword [rsp + 0x1500]
mov rdx, rbp
lea rcx, [0x14000b790]
mov qword [rbp], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rbp + 0x10], rax
mov rax, qword [rsp + 0x1518]
mov qword [rbp + 0x18], rax
mov rax, qword [rsp + 0x1520]
mov qword [rbp + 0x20], rax
mov rax, qword [rsp + 0x1528]
mov qword [rbp + 0x28], rax
mov rax, qword [rsp + 0x1530]
mov qword [rbp + 0x30], rax
mov rax, qword [rsp + 0x1538]
mov qword [rbp + 0x38], rax
mov rax, qword [rsp + 0x153e]
mov qword [rbp + 0x3e], rax
mov byte [rbx], 1
call fcn.140005a50
cmp byte [rbp + 0x46], 0
je 0x140002623
movabs r8, 0x530d433bc51ddfb3
xor eax, eax
nop word [rax + rax]
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [rbp + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x140002600
mov byte [rbp + 0x46], 0
mov rax, qword [0x140209290]
mov edx, 0x433b
movdqa xmm0, xmmword [0x140209280]
lea rcx, [0x14000df80]
mov word [rsp + 0x1518], dx
movaps xmmword [rsp + 0x1500], xmm0
mov qword [rsp + 0x1510], rax
call fcn.140006310
lea rcx, [0x14000df60]
mov rbx, rax
call fcn.140006310
cmp byte [rbx], 0
mov r13, rax
jne 0x1400026b9
mov byte [rax + 0x1a], 1
xor r8d, r8d
mov rax, qword [rsp + 0x1500]
mov rdx, r13
lea rcx, [0x14000b6f0]
mov qword [r13], rax
mov rax, qword [rsp + 0x1508]
mov qword [r13 + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [r13 + 0x10], rax
mov eax, 0x433b
mov word [r13 + 0x18], ax
mov byte [rbx], 1
call fcn.140005a50
cmp byte [r13 + 0x1a], 0
je 0x1400026ec
movabs rax, 0x3bc5c51d1ddfdfb3
mov byte [r13 + 0x1a], 0
movabs rdx, 0x53530d0d43433b
xor qword [r13], rax
xor qword [r13 + 8], rdx
xor qword [r13 + 0x10], rax
xor word [r13 + 0x18], 0x433b
mov r8d, 0xefe
mov rcx, rsi
lea rdx, [0x14000c920]
call sub.msvcrt.dll_memcpy
lea rcx, [0x14000dfc0]
call fcn.140006310
lea rcx, [0x14000dfa0]
mov rbx, rax
call fcn.140006310
cmp byte [rbx], 0
mov r12, rax
jne 0x140002751
mov r8d, 0xefe
mov rdx, rsi
mov rcx, rax
mov byte [rax + 0xefe], 1
call sub.msvcrt.dll_memcpy
mov byte [rbx], 1
xor r8d, r8d
mov rdx, r12
lea rcx, [0x14000b740]
call fcn.140005a50
cmp byte [r12 + 0xefe], 0
je 0x14000279a
movabs r8, 0x530d433bc51ddfb3
xor eax, eax
nop dword [rax + rax]
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [r12 + rax*2], dx
add rax, 1
cmp rax, 0x77f
jne 0x140002770
mov byte [r12 + 0xefe], 0
mov edx, dword [0x14020c034]
lea rcx, [0x14020c030]
call fcn.140001730
mov edx, dword [0x140207120]
lea rcx, [0x140020720]
call fcn.140001730
lea rcx, [0x14000e000]
call fcn.140006310
lea rcx, [0x14000dfe0]
mov qword [rsp + 0x48], rax
call fcn.140006310
mov rdx, qword [rsp + 0x48]
mov rbx, rax
cmp byte [rdx], 0
jne 0x14000280b
mov byte [rax + 8], 1
mov rax, qword [0x140209298]
xor r8d, r8d
lea rcx, [0x14000b7c0]
mov qword [rbx], rax
mov byte [rdx], 1
mov rdx, rbx
call fcn.140005a50
cmp byte [rbx + 8], 0
je 0x140002829
movq xmm0, qword [rbx]
mov byte [rbx + 8], 0
movq xmm1, qword [0x1402092a0]
pxor xmm0, xmm1
movq qword [rbx], xmm0
mov rcx, rbx
mov rdx, r15
call sub.msvcrt.dll__wcsicmp
test eax, eax
mov ebx, eax
jne 0x140002900
test r14b, r14b
jne 0x140002900
xor eax, eax
add rsp, 0x11508
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x14000dde0]
mov qword [rsp + 0x48], rax
call fcn.140006310
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov byte [rax + 0x3a], 1
lea rcx, [0x14000b780]
mov r10, rax
mov rax, qword [rsp + 0x1500]
mov qword [rsp + 0x48], r10
mov qword [r10], rax
mov rax, qword [rsp + 0x1508]
mov qword [r10 + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [r10 + 0x10], rax
mov rax, qword [rsp + 0x1518]
mov qword [r10 + 0x18], rax
mov rax, qword [rsp + 0x1520]
mov qword [r10 + 0x20], rax
mov rax, qword [rsp + 0x1528]
mov qword [r10 + 0x28], rax
mov rax, qword [rsp + 0x1530]
mov qword [r10 + 0x30], rax
mov eax, 0xffffdf29
mov word [r10 + 0x38], ax
mov byte [rdx], 1
mov rdx, r10
call fcn.140005a50
mov r10, qword [rsp + 0x48]
jmp 0x1400021bc
lea r14, [rsp + 0x12f0]
xor edx, edx
mov r8d, 0x208
mov rcx, r14
call sub.msvcrt.dll_memset
mov r8, r13
mov rdx, rdi
mov rcx, r14
call fcn.140003c60
xor edx, edx
mov r8d, 0xfffe
mov rcx, rsi
call sub.msvcrt.dll_memset
mov r8, r12
mov rdx, r14
mov rcx, rsi
call fcn.140003c60
test ebx, ebx
jne 0x140002980
movsxd r8, dword [0x14020c034]
lea rdx, [0x14020c030]
mov dword [rsp + 0x30], 1
mov r9, r14
mov rcx, rbp
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rsi
call fcn.140001560
jmp 0x140002847
movsxd r8, dword [0x140207120]
lea rdx, [0x140020720]
jmp 0x140002956
call fcn.140006310
lea rcx, [0x14000b7a0]
xor r8d, r8d
mov rsi, rax
mov byte [rax + 0x4e], 1
mov rax, qword [rsp + 0x1500]
mov rdx, rsi
mov qword [rsi], rax
mov rax, qword [rsp + 0x1508]
mov qword [rsi + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rsi + 0x10], rax
mov rax, qword [rsp + 0x1518]
mov qword [rsi + 0x18], rax
mov rax, qword [rsp + 0x1520]
mov qword [rsi + 0x20], rax
mov rax, qword [rsp + 0x1528]
mov qword [rsi + 0x28], rax
mov rax, qword [rsp + 0x1530]
mov qword [rsi + 0x30], rax
mov rax, qword [rsp + 0x1538]
mov qword [rsi + 0x38], rax
mov rax, qword [rsp + 0x1540]
mov qword [rsi + 0x40], rax
mov rax, qword [rsp + 0x1546]
mov qword [rsi + 0x46], rax
mov byte [rbp], 1
call fcn.140005a50
jmp 0x140001b84
call fcn.140006310
mov rdx, rsi
mov r8d, 0xa2
mov rbp, rax
mov rcx, rax
mov byte [rax + 0xa2], 1
call sub.msvcrt.dll_memcpy
mov byte [r13], 1
xor r8d, r8d
mov rdx, rbp
lea rcx, [0x14000b860]
call fcn.140005a50
jmp 0x140001c14
call fcn.140006310
lea rcx, [0x14000b690]
xor r8d, r8d
mov rbp, rax
mov byte [rax + 0x14], 1
mov rax, qword [rsp + 0x1500]
mov rdx, rbp
mov qword [rbp], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbp + 8], rax
mov eax, dword [rsp + 0x1510]
mov dword [rbp + 0x10], eax
mov byte [rbx], 1
call fcn.140005a50
jmp 0x140001907
lea rcx, [0x14000dd20]
mov qword [rsp + 0x48], rax
call fcn.140006310
mov r8, qword [rsp + 0x48]
lea rcx, [0x14000b6c0]
mov rdx, rax
mov byte [rax + 0x1a], 1
mov rax, qword [rsp + 0x1500]
mov qword [rsp + 0x48], rdx
mov qword [rdx], rax
mov rax, qword [rsp + 0x1508]
mov qword [rdx + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rdx + 0x10], rax
mov eax, 0x1cb
mov word [rdx + 0x18], ax
mov byte [r8], 1
xor r8d, r8d
call fcn.140005a50
mov rdx, qword [rsp + 0x48]
jmp 0x14000200d
call fcn.140006310
mov rdx, rsi
mov r8d, 0x130
mov rbp, rax
mov rcx, rax
mov byte [rax + 0x130], 1
call sub.msvcrt.dll_memcpy
mov byte [r13], 1
xor r8d, r8d
mov rdx, rbp
lea rcx, [0x14000b730]
call fcn.140005a50
jmp 0x140001caa
lea rcx, [0x14000dca0]
mov qword [rsp + 0x48], rax
call fcn.140006310
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov byte [rax + 0x36], 1
lea rcx, [0x14000b770]
mov r15, rax
mov rax, qword [rsp + 0x1500]
mov qword [r15], rax
mov rax, qword [rsp + 0x1508]
mov qword [r15 + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [r15 + 0x10], rax
mov rax, qword [rsp + 0x1518]
mov qword [r15 + 0x18], rax
mov rax, qword [rsp + 0x1520]
mov qword [r15 + 0x20], rax
mov rax, qword [rsp + 0x1528]
mov qword [r15 + 0x28], rax
mov rax, qword [rsp + 0x152e]
mov qword [r15 + 0x2e], rax
mov byte [rdx], 1
mov rdx, r15
call fcn.140005a50
jmp 0x140001dac
lea rdx, [rsp + 0x12f0]
mov rcx, r13
call fcn.140004110
mov r8d, dword [rsp + 0x12f0]
mov rcx, rbp
mov rdx, rax
call fcn.1400042c0
mov r8d, 0x1f4
mov rcx, rsi
lea rdx, [0x14000d820]
call sub.msvcrt.dll_memcpy
lea rcx, [0x14000dd80]
call fcn.140006310
lea rcx, [0x14000dd60]
cmp byte [rax], 0
mov r13, rax
je 0x140002d30
call fcn.140006310
mov r12, rax
cmp byte [r12 + 0x1f4], 0
je 0x140002c8a
movabs r8, 0x717f5d0f8b9d9be7
xor eax, eax
nop dword [rax]
mov rcx, rax
mov rdx, r8
and ecx, 7
shl rcx, 3
shr rdx, cl
xor word [r12 + rax*2], dx
add rax, 1
cmp rax, 0xfa
jne 0x140002c60
mov byte [r12 + 0x1f4], 0
mov qword [rsp + 0x28], rbp
mov r9, r12
mov r8, rbx
mov rdx, rdi
mov qword [rsp + 0x20], rbx
xor ecx, ecx
call fcn.1400035c0
jmp 0x140002847
call fcn.140006310
lea rcx, [0x14000b7d0]
xor r8d, r8d
mov r15, rax
mov byte [rax + 8], 1
movabs rax, 0x3bc5c56f1db2dfcb
mov qword [r15], rax
mov rdx, r15
mov byte [rbx], 1
call fcn.140005a50
jmp 0x1400024c0
call fcn.140006310
lea rcx, [0x14000b710]
xor r8d, r8d
mov rbx, rax
mov byte [rax + 0x1c], 1
mov rax, qword [rsp + 0x1500]
mov rdx, rbx
mov qword [rbx], rax
mov rax, qword [rsp + 0x1508]
mov qword [rbx + 8], rax
mov rax, qword [rsp + 0x1510]
mov qword [rbx + 0x10], rax
mov eax, dword [rsp + 0x1518]
mov dword [rbx + 0x18], eax
mov byte [rbp], 1
call fcn.140005a50
jmp 0x140002282
call fcn.140006310
mov rdx, rsi
mov r8d, 0x1f4
mov r12, rax
mov rcx, rax
mov byte [rax + 0x1f4], 1
call sub.msvcrt.dll_memcpy
mov byte [r13], 1
xor r8d, r8d
mov rdx, r12
lea rcx, [0x14000b760]
call fcn.140005a50
jmp 0x140002c42