Function at 0x140191ae0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
xchg r10, rbx
mov qword [rsp + 0x10], r10
xchg r10, rbx
xchg rcx, r12
mov qword [rsp + 8], r12
xchg r12, rcx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
push 0x337e8629
mov qword [rsp], r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
lea rbp, [rsp - 0x120]
sub rsp, 0x220
xchg r15, r13
mov r15, rdx
xchg r13, r15
xchg r14, rcx
mov rcx, r14
xchg rcx, r14
xor esi, esi
xchg rsi, rbx
mov qword [rcx + 8], rbx
xchg rbx, rsi
mov qword [rcx + 0x10], rsi
mov dword [rcx + 0x18], esi
call fcn.140179f90
add rax, 0x4f0ece58
sub rax, 0x4f0ed240
mov qword [r14 + 0x28], rax
mov word [r14 + 0x30], si
lea rcx, [r14 + 0x38]
xorps xmm0, xmm0
xchg rdx, rcx
movups xmmword [rdx], xmm0
xchg rdx, rcx
mov qword [rcx + 0x10], rsi
xchg r15, rsi
mov qword [rcx + 0x18], r15
xchg r15, rsi
xor r8d, r8d
lea rdx, [0x140001688]
call fcn.140030d10
nop
mov qword [r14 + 0x58], rsi
xchg rsi, r12
mov qword [r14 + 0x68], r12
xchg rsi, r12
xchg r9, rsi
mov qword [r14 + 0x78], r9
xchg rsi, r9
xchg rcx, rsi
mov qword [r14 + 0x88], rcx
xchg rcx, rsi
xchg rsi, r10
mov qword [r14 + 0x98], r10
xchg r10, rsi
mov qword [r14 + 0xa8], rsi
xchg rsi, r8
mov qword [r14 + 0xb8], r8
xchg rsi, r8
xchg r8, rsi
mov qword [r14 + 0xc8], r8
xchg r8, rsi
mov qword [r14 + 0xd8], rsi
mov qword [r14 + 0xe8], rsi
mov qword [r14 + 0xf8], rsi
xchg rbp, rsi
mov qword [r14 + 0x108], rbp
xchg rbp, rsi
call fcn.140199430
xchg r9, rax
mov rax, r9
xchg r9, rax
mov dword [rsp + 0x30], 0x5c00d68d
add dword [rsp + 0x30], 0x123e758c
xor dword [rsp + 0x30], 0x7d9822b9
xor dword [rsp + 0x30], 0x1aacb304
add dword [rsp + 0x30], 0x27e002fe
sub dword [rsp + 0x30], 0x2b282021
xor dword [rsp + 0x30], 0x71b4cf4
xor dword [rsp + 0x30], 0xf42e7a83
mov dword [rsp + 0x3c], 0x3ebbfb95
add dword [rsp + 0x3c], 0x25f50b69
sub dword [rsp + 0x3c], 0x38f56b03
sub dword [rsp + 0x3c], 0x126c5136
add dword [rsp + 0x3c], 0x3586e87d
xor dword [rsp + 0x3c], 0xb1a5cc23
mov dword [rsp + 0x40], 0xdb3a855
xor dword [rsp + 0x40], 0x358f4776
xor dword [rsp + 0x40], 0x2b46b7e2
add dword [rsp + 0x40], 0x5037dd3b
xor dword [rsp + 0x40], 0x51ddfb93
sub dword [rsp + 0x40], 0x28eb9de5
xor dword [rsp + 0x40], 0x48dc8a87
sub dword [rsp + 0x40], 0x1d4ea8b0
add dword [rsp + 0x40], 0xdb68ee1b
mov dword [rsp + 0x34], 0x4036fa24
add dword [rsp + 0x34], 0x13302c09
sub dword [rsp + 0x34], 0x51467550
xor dword [rsp + 0x34], 0x17fb8759
sub dword [rsp + 0x34], 0x14fc7ac0
add dword [rsp + 0x34], 0xf6183a32
mov dword [rsp + 0x44], 0x56905647
add dword [rsp + 0x44], 0x26994f43
xor dword [rsp + 0x44], 0x26a8871
xor dword [rsp + 0x44], 0x760e19f
sub dword [rsp + 0x44], 0x73e85070
add dword [rsp + 0x44], 0x619b3d6
add dword [rsp + 0x44], 0xf529cfb4
mov dword [rsp + 0x48], 0x36741811
add dword [rsp + 0x48], 0x7396d35
xor dword [rsp + 0x48], 0x1ca417c2
sub dword [rsp + 0x48], 0x1d1ef4ce
add dword [rsp + 0x48], 0x6907f51d
sub dword [rsp + 0x48], 0x6631b076
add dword [rsp + 0x48], 0xf8781d1d
mov word [rsp + 0x38], 0x2344
add word [rsp + 0x38], 0x24be
sub word [rsp + 0x38], 0xaae
add word [rsp + 0x38], 0x8e7
sub word [rsp + 0x38], 0x1e73
xor word [rsp + 0x38], 0x4ee0
xor word [rsp + 0x38], 0x67bd
add word [rsp + 0x38], 0xe861
mov dword [rsp + 0x4c], 0x2b47e48c
add dword [rsp + 0x4c], 0x3eab049
xor dword [rsp + 0x4c], 0x27117c22
add dword [rsp + 0x4c], 0x72b28407
sub dword [rsp + 0x4c], 0x5891471d
add dword [rsp + 0x4c], 0x4cc65ef7
sub dword [rsp + 0x4c], 0x37dbdc06
add dword [rsp + 0x4c], 0xc847569c
mov byte [rsp + 0x3a], 0x1d
xor byte [rsp + 0x3a], 0x32
add byte [rsp + 0x3a], 0x4d
xor byte [rsp + 0x3a], 0x64
add byte [rsp + 0x3a], 0x24
add byte [rsp + 0x3a], 0xba
mov dword [rsp + 0x50], 0x1598c276
add dword [rsp + 0x50], 0x5c6e2656
sub dword [rsp + 0x50], 0x5fa3dfd6
add dword [rsp + 0x50], 0x1906b894
sub dword [rsp + 0x50], 0x15e4be23
add dword [rsp + 0x50], 0x5fdbe81c
sub dword [rsp + 0x50], 0x6340146a
xor dword [rsp + 0x50], 0x3b769560
sub dword [rsp + 0x50], 0x29554303
mov edx, esi
nop
movzx eax, word [rsp + rdx*2 + 0x3c]
movzx ecx, byte [rsp + rdx + 0x30]
add cx, ax
mov word [rsp + rdx*2 + 0x3c], cx
mov byte [rsp + rdx + 0x30], 0x29
xor byte [rsp + rdx + 0x30], 0x66
add byte [rsp + rdx + 0x30], 0x1a
add byte [rsp + rdx + 0x30], 0x12
sub byte [rsp + rdx + 0x30], 0x32
add byte [rsp + rdx + 0x30], 0x28
sub byte [rsp + rdx + 0x30], 0x71
inc rdx
cmp rdx, 0xb
jb 0x140191e6a
xor r8d, r8d
lea rdx, [rsp + 0x3c]
xchg r9, r11
mov rcx, r11
xchg r11, r9
call fcn.14019a4c0
xchg r13, rax
mov qword [r14], r13
xchg r13, rax
xchg rsi, r13
mov rax, r13
xchg r13, rsi
nop word [rax + rax]
mov byte [rsp + rax + 0x3c], SHCreateMemStream
add byte [rsp + rax + 0x3c], 0x1a
add byte [rsp + rax + 0x3c], 0x19
add byte [rsp + rax + 0x3c], 0x3c
xor byte [rsp + rax + 0x3c], 1
sub byte [rsp + rax + 0x3c], 0x6e
add byte [rsp + rax + 0x3c], 0x18
sub byte [rsp + rax + 0x3c], 0x11
xor byte [rsp + rax + 0x3c], 0x14
inc rax
cmp rax, 0x16
jb 0x140191edc
mov word [r14 + 0x20], si
call fcn.140199430
lea rcx, [0x140003e38]
xchg r11, rcx
mov qword [rbp - 0x20], r11
xchg r11, rcx
lea rcx, [0x140193910]
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x20]
xchg rcx, r11
mov qword [rbp + 0x18], r11
xchg r11, rcx
lea r9, [rbp - 0x20]
xchg r8, r13
mov r13, r14
xchg r8, r13
xchg rdx, r15
mov r15, qword [r14]
xchg rdx, r15
xchg rbp, rax
mov rcx, rbp
xchg rbp, rax
call fcn.140198780
mov word [rbp + 0x20], si
xor edx, edx
mov r8d, 0x26df8173
add r8d, 0xa5a19a
sub r8d, 0x646b7fd
sub r8d, 0x11fc174e
add r8d, 0x2be08c3d
add r8d, 0x127ed07f
sub r8d, 0x4da1af80
lea rcx, [rbp + 0x22]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x76], 0x7aaa1a40
sub dword [rsp + 0x76], 0xa86984c
sub dword [rsp + 0x76], 0x284f22c2
sub dword [rsp + 0x76], 0x362a07e3
add dword [rsp + 0x76], 0x40f77bbb
sub dword [rsp + 0x76], 0x37ff812e
xor dword [rsp + 0x76], 0xec54a72a
mov dword [rbp - 0x70], 0x305445d6
add dword [rbp - 0x70], 0x5bbd278
add dword [rbp - 0x70], 0x1f9b45a9
sub dword [rbp - 0x70], 0x22f77d83
sub dword [rbp - 0x70], 0x96f217f
add dword [rbp - 0x70], 0x2212db4b
add dword [rbp - 0x70], 0x2dc3b5e
sub dword [rbp - 0x70], 0x464e7297
xor dword [rbp - 0x70], 0xf89d9c48
mov dword [rbp - 0x6c], 0x2423bcd8
add dword [rbp - 0x6c], 0x1bb29c3a
xor dword [rbp - 0x6c], 0x34dce5ca
add dword [rbp - 0x6c], 0x68eaa79
add dword [rbp - 0x6c], 0x6505aff4
add dword [rbp - 0x6c], 0x88d4e82c
mov dword [rsp + 0x7a], 0x71376f5c
sub dword [rsp + 0x7a], 0x6d057e62
xor dword [rsp + 0x7a], 0x27d467eb
add dword [rsp + 0x7a], 0x2609f6f8
add dword [rsp + 0x7a], 0x2391e4a5
add dword [rsp + 0x7a], 0x89758448
mov dword [rbp - 0x68], 0x2f7f98f1
add dword [rbp - 0x68], 0x41fcb3ce
sub dword [rbp - 0x68], 0x21d4d1f4
xor dword [rbp - 0x68], 0x487f8175
add dword [rbp - 0x68], 0x3b51116b
xor dword [rbp - 0x68], 0x512c34d0
add dword [rbp - 0x68], 0xed69c57f
mov dword [rbp - 0x64], 0x1d109beb
xor dword [rbp - 0x64], 0x258f3d30
add dword [rbp - 0x64], 0x23a43ec8
xor dword [rbp - 0x64], 0x479a412e
add dword [rbp - 0x64], 0x344b93ff
add dword [rbp - 0x64], 0xaf5cc6cd
mov dword [rsp + 0x7e], 0x6a427ffa
xor dword [rsp + 0x7e], 0x280b9be9
sub dword [rsp + 0x7e], 0x24a4dd2f
xor dword [rsp + 0x7e], 0x1c3f80b0
add dword [rsp + 0x7e], 0x58588def
add dword [rsp + 0x7e], 0x9d03e2b3
mov dword [rbp - 0x60], 0x701c0e22
add dword [rbp - 0x60], 0x870bb67
sub dword [rbp - 0x60], 0x222619f9
xor dword [rbp - 0x60], 0x48bc406d
add dword [rbp - 0x60], 0x31a4dca7
add dword [rbp - 0x60], 0xaef432d4
mov dword [rbp - 0x5c], 0x142f4f0b
sub dword [rbp - 0x5c], 0xb007b15
xor dword [rbp - 0x5c], 0x31b63ec
add dword [rbp - 0x5c], 0x203ba527
sub dword [rbp - 0x5c], 0x3547e
add dword [rbp - 0x5c], 0x1d7a0acf
xor dword [rbp - 0x5c], 0x6e3297c7
xor dword [rbp - 0x5c], 0x7f69ffef
add dword [rbp - 0x5c], 0xa8be9bbe
mov dword [rbp - 0x7e], 0x14ca25bf
add dword [rbp - 0x7e], 0xe57d6f8
add dword [rbp - 0x7e], 0x49c0c5f9
sub dword [rbp - 0x7e], 0x1187ae6
xor dword [rbp - 0x7e], 0x1618b2c3
sub dword [rbp - 0x7e], 0x114d9c62
xor dword [rbp - 0x7e], 0x5bf46071
xor dword [rbp - 0x7e], 0x17e1e275
xor dword [rbp - 0x7e], 0xd6662c55
mov dword [rbp - 0x58], 0x36b291f8
xor dword [rbp - 0x58], 0x20cb5265
add dword [rbp - 0x58], 0x67a57b0e
sub dword [rbp - 0x58], 0x3659fadb
add dword [rbp - 0x58], 0x2d3d6872
sub dword [rbp - 0x58], 0x6621d176
add dword [rbp - 0x58], 0x1819cf
add dword [rbp - 0x58], 0x301ef912
xor dword [rbp - 0x58], 0xc05a1287
mov dword [rbp - 0x54], 0x4e96d47
xor dword [rbp - 0x54], 0x397c11ef
add dword [rbp - 0x54], 0x32470a36
xor dword [rbp - 0x54], 0x43dadd62
add dword [rbp - 0x54], 0x1f08751e
xor dword [rbp - 0x54], 0xb47d2fac
mov dword [rbp - 0x7a], 0x591149a6
xor dword [rbp - 0x7a], 0x1d47b5cf
sub dword [rbp - 0x7a], 0x2bec0d47
sub dword [rbp - 0x7a], 0x8c5060c
xor dword [rbp - 0x7a], 0x56027aeb
xor dword [rbp - 0x7a], 0x4dff86fd
add dword [rbp - 0x7a], 0xe29ee1f6
mov dword [rbp - 0x50], 0x5dbd5fae
sub dword [rbp - 0x50], 0x28537d73
add dword [rbp - 0x50], 0x2799cc09
add dword [rbp - 0x50], 0x10643dde
xor dword [rbp - 0x50], 0x1820b008
xor dword [rbp - 0x50], 0x619f37bf
sub dword [rbp - 0x50], 0x63dc1bc
add dword [rbp - 0x50], 0xf0de5596
mov dword [rbp - 0x4c], 0x67724c82
sub dword [rbp - 0x4c], 0x3694ddd8
add dword [rbp - 0x4c], 0x2a8d773f
sub dword [rbp - 0x4c], 0x4b8611e1
add dword [rbp - 0x4c], 0x907cd54
add dword [rbp - 0x4c], 0x141c2d19
sub dword [rbp - 0x4c], 0x1190423b
add dword [rbp - 0x4c], 0xe3c17344
mov dword [rbp - 0x76], 0x71bf2a4c
sub dword [rbp - 0x76], 0x15993c12
sub dword [rbp - 0x76], 0x421bfc65
add dword [rbp - 0x76], 0x511206e1
xor dword [rbp - 0x76], 0x34d238a0
add dword [rbp - 0x76], 0x972d36e0
mov dword [rbp - 0x48], 0x66247e12
xor dword [rbp - 0x48], 0x2635c4c0
sub dword [rbp - 0x48], 0x27f6cc5c
add dword [rbp - 0x48], 0x2d0bb3e9
xor dword [rbp - 0x48], 0x7fbb6ef0
sub dword [rbp - 0x48], 0xed9a3af
xor dword [rbp - 0x48], 0x27ad4138
add dword [rbp - 0x48], 0xf2cf9705
mov dword [rbp - 0x44], 0x48925c9c
xor dword [rbp - 0x44], 0x6060f683
xor dword [rbp - 0x44], 0x4acd1e94
xor dword [rbp - 0x44], 0x4607def3
add dword [rbp - 0x44], 0x1c0a019c
sub dword [rbp - 0x44], 0x597fdd4
add dword [rbp - 0x44], 0x1ada7609
xor dword [rbp - 0x44], 0x376d78ab
add dword [rbp - 0x44], 0x9c85624d
xor eax, eax
mov word [rbp - 0x40], ax
mov rdx, rsi
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 - 0x70]
movzx ecx, byte [rsp + rdx + 0x76]
add cx, ax
mov word [rbp + rdx*2 - 0x70], cx
mov byte [rsp + rdx + 0x76], 0xa
add byte [rsp + rdx + 0x76], 0x50
sub byte [rsp + rdx + 0x76], 8
xor byte [rsp + rdx + 0x76], 0xd
sub byte [rsp + rdx + 0x76], 0x49
add byte [rsp + rdx + 0x76], 0x4d
sub byte [rsp + rdx + 0x76], 0x63
inc rdx
cmp rdx, 0x18
jb 0x14019236c
mov r8d, 0x736b718a
xor r8d, 0x7e86d438
add r8d, 0x1963bcff
xor r8d, 0x2119dfa7
xor r8d, 0x2738ecbe
sub r8d, 0x21705176
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_wsprintfW]
xchg rdx, rsi
mov rax, rdx
xchg rdx, rsi
nop word [rax + rax]
mov byte [rbp + rax - 0x70], 0x4d
sub byte [rbp + rax - 0x70], 0x37
add byte [rbp + rax - 0x70], 0x22
sub byte [rbp + rax - 0x70], 0xd
add byte [rbp + rax - 0x70], 0x18
add byte [rbp + rax - 0x70], 0x27
xor byte [rbp + rax - 0x70], 0x6a
inc rax
cmp rax, 0x30
jb 0x1401923f7
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.140194150
neg al
sbb r15d, r15d
and r15d, 4
movabs rdi, 0x8523976cebe40
xor rdi, 0x721218d4
xor rdi, 0x58ef2e36
sub rdi, 0x31001c92
add rdi, 0x18725cad
xor rdi, 0x1deb6cbe
sub rdi, 0x71e9f91
xor rdi, 0x55e1be4d
add rdi, 0x682c782a
movabs rbx, 0xc56297871174a
xor rbx, 0x75d5ef5
sub rbx, 0x381679a5
sub rbx, 0x519abe3
sub rbx, 0x3f140843
add rbx, 0x7fffffff
xor rbx, 0x1f189a5
cmp qword [0x1402160c0], rdi
je 0x1401926b4
mov rax, qword [0x1402160d0]
cmp rax, rbx
je 0x1401926b4
cmp byte [0x1402170a0], 0
jne 0x140192532
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140193660]
mov ecx, 0x1c6358d8
xor ecx, 0x26bbc39c
add ecx, 0x255c07e1
xor ecx, 0x685ef8e2
xor ecx, 0x266c475f
sub ecx, 0x1ae1569d
xor ecx, 0x1324c5fa
call rax
mov ecx, 0x488b0c20
xor ecx, 0x6c8877dc
add ecx, 0x372c072f
xor ecx, 0x2b92c05b
sub ecx, 0x3c6c73ba
sub ecx, 0x2194cf93
sub ecx, 0x12bc0022
call fcn.1401fd050
mov rdi, rax
movabs rax, 0x582359762908065
sub rax, 0x4b07b2ba
xor rax, 0x2c23274d
xor rax, 0x1336b78f
sub rax, 0x1e98cf3b
add rax, 0x7fffffff
xor rax, 0x7b9564da
xchg rbx, rdi
mov rdi, qword [r14 + 0x58]
xchg rdi, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
or rbx, qword [rsp]
add rsp, 0x10
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
movabs rax, 0x58235925e0c6a37
add rax, 0xd80170
sub rax, 0x51ce1578
add rax, 0x9810e30
sub rax, 0x3a2cb01
add rax, 0x16a275f8
xor rax, 0x2b859dbe
add rax, 0xced44d3
add rax, 0x69459a9e
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
mov qword [rbp - 0x38], rcx
lea rdx, [rbp - 0x38]
lea rcx, [0x140217090]
call fcn.140029e40
mov qword [rax], rbx
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x20]
call rdi
movabs rbx, 0xc562918d468af
xor rbx, 0x14ee57ea
add rbx, 0x3428aa0c
sub rbx, 0x280603e6
xor rbx, 0x59840746
add rbx, 0x4140b029
movabs rdi, 0x8523970fceacb
sub rdi, 0x48d1ff97
xor rdi, 0x1fdb566e
xor rdi, 0x7459f2a9
sub rdi, 0x2e262743
add rdi, 0x2d0539ae
add rdi, 0x2876d00b
jmp 0x140192734
movabs rcx, 0x56a02850c
sub rcx, 0x5cc27d77
add rcx, 0x48eea076
sub rcx, 0x3e3b51a6
xor rcx, 0x709c71eb
sub rcx, 0x3d9ce611
xor rcx, 0x6af4e373
sub rcx, 0x289abe9b
add rcx, 0x6f48b53b
xchg rdi, rax
mov rdi, qword [r14 + 0x58]
xchg rdi, rax
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x20]
call rax
xchg rbx, rax
mov qword [r14 + 8], rbx
xchg rbx, rax
test rax, rax
je 0x140192b76
mov dword [rbp + 0x170], 0x64855314
add dword [rbp + 0x170], 0x447fa6d
xor dword [rbp + 0x170], 0x4595c757
xor dword [rbp + 0x170], 0x11f9ea5b
add dword [rbp + 0x170], 0x10643cd7
add dword [rbp + 0x170], 0x11214031
sub dword [rbp + 0x170], 0x5e26dd8d
mov dword [rsp + 0x20], 0x321f321a
xor dword [rsp + 0x20], 0x7e3cc90d
add dword [rsp + 0x20], 0xe43aa18
xor dword [rsp + 0x20], 0x405d973e
add dword [rsp + 0x20], 0x1fb0b396
sub dword [rsp + 0x20], 0x11c9a29
sub dword [rsp + 0x20], 0x38ce4b7a
lea r9, [rbp + 0x170]
mov r8d, 0x52360027
xor r8d, 0x7debbf5e
add r8d, 0x2784eff8
add r8d, 0x8c797a4
xor r8d, 0x3184a4d6
add r8d, 0x83dec1c
sub r8d, 0x3d9bd14f
add r8d, 0x3697e61a
sub r8d, 0x52e8e4a7
xchg r9, rax
mov rdx, r9
xchg r9, rax
lea rcx, [r14 + 0xd8]
call fcn.140193070
mov r15, qword [r14 + 8]
cmp qword [0x1402160c0], rdi
je 0x1401929ff
mov rax, qword [0x1402160d0]
cmp rax, rbx
je 0x1401929ff
cmp byte [0x1402170a0], 0
jne 0x140192898
push rax
xor eax, ebx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rbx, 0x20
xor eax, ebx
ror rbx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
lea rdx, [0x140193660]
mov ecx, 0x3760e05d
add ecx, 0x44386ba7
sub ecx, 0x70660ea7
xor ecx, 0x4212dda7
xor ecx, 0x2598f8bd
sub ecx, 0x6cb91846
call rax
mov ecx, 0x48b119e5
sub ecx, 0x252f367c
xor ecx, 0x1fd95c6a
add ecx, 0x3b6c0f9b
sub ecx, 0x34501162
sub ecx, 0x2d3a4db6
sub ecx, 0x10abc7d
xor ecx, 0x16bf39b8
sub ecx, 0x3908ab0
call fcn.1401fd050
xchg rbp, rdi
mov rbp, rax
xchg rdi, rbp
movabs rax, 0x58235960418e029
add rax, 0x243d6149
add rax, 0x2d2e8e20
add rax, 0x12f96c6e
sub rax, 0x2681247a
add rax, 0x1d066283
sub rax, 0x4fc2f82f
add rax, 0x67ab922a
sub rax, 0xc6ce2d9
xchg r13, rbx
mov r13, qword [r14 + 0x68]
xchg r13, rbx
push rbx
xor ebx, eax
push rbx
xor rbx, qword [rsp + 8]
shr rbx, 0x20
ror rax, 0x20
xor ebx, eax
ror rax, 0x20
shl rbx, 0x20
xor rbx, qword [rsp]
add rsp, 0x10
xchg r14, rdx
mov r14, rdi
xchg r14, rdx
movabs rax, 0x58235923ad196f1
add rax, 0x3b679d91
sub rax, 0x3d12d827
sub rax, 0x27254fa8
sub rax, 0xe69f629
xor rax, 0x7bd264d3
push rdx
xor edx, eax
push rdx
xor rdx, qword [rsp + 8]
shr rdx, 0x20
ror rax, 0x20
xor edx, eax
ror rax, 0x20
shl rdx, 0x20
or rdx, qword [rsp]
add rsp, 0x10
xchg rdx, r15
mov qword [rbp - 0x30], r15
xchg rdx, r15
lea rdx, [rbp - 0x30]
lea rcx, [0x140217090]
call fcn.140029e40
mov qword [rax], rbx
mov r8d, 0x9a7b95a
add r8d, 0x53cea745
xor r8d, 0x164ac299
sub r8d, 0x2d845daf
add r8d, 0x190ebd1b
add r8d, 0x161ce957
sub r8d, 0x4ce3e90e
xor r9d, r9d
xchg rsi, r13
mov rdx, rsi
xchg r13, rsi
xchg rcx, r8
mov r8, r15
xchg r8, rcx
call rdi
jmp 0x140192a94
movabs rcx, 0x4459207f4
xor rcx, 0x23febce7
xor rcx, 0x7e471077
add rcx, 0x379f1a44
xor rcx, 0x5106b986
xor rcx, 0x5823a327
sub rcx, 0x34b59b97
mov rax, qword [r14 + 0x68]
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov r8d, 0xa3fa90
xor r8d, 0x4ae2c9c5
sub r8d, 0x44763f00
xor r8d, 0xcd13264
add r8d, 0x1d19fa63
sub r8d, 0x2635bed9
xor r9d, r9d
mov rdx, r13
xchg rdi, rcx
mov rdi, r15
xchg rcx, rdi
call rax
mov qword [r14 + 0x10], rax
test rax, rax
je 0x140192b76
call fcn.140194150
test al, al
je 0x140192b76
mov dword [rbp + 0x178], 0x7e1fa421
xor dword [rbp + 0x178], 0x26517862
xor dword [rbp + 0x178], 0x676b4564
sub dword [rbp + 0x178], 0x1bb2a741
sub dword [rbp + 0x178], 0x19ef4416
xor dword [rbp + 0x178], 0x983add3
mov dword [rsp + 0x20], 0x580e17be
sub dword [rsp + 0x20], 0x20fe2dee
sub dword [rsp + 0x20], 0x2242aaa1
add dword [rsp + 0x20], 0x36820620
sub dword [rsp + 0x20], 0x24ef921e
sub dword [rsp + 0x20], 0xbe700c4
sub dword [rsp + 0x20], 0x1a78b269
lea r9, [rbp + 0x178]
mov r8d, 0x5df9b9e9
sub r8d, 0x17adfdce
sub r8d, 0x24a07048
add r8d, 0x58983325
sub r8d, 0xc829253
xor r8d, 0x51cb4f5e
add r8d, 0x1467e450
sub r8d, 0x507387d5
xchg rdx, r12
mov r12, qword [r14 + 0x10]
xchg rdx, r12
lea rcx, [r14 + 0xd8]
call fcn.140193070
cmp qword [r14 + 8], 0
je 0x140192b8c
cmp qword [r14 + 0x10], 0
jne 0x140192b96
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r14 + 0x18], eax
call fcn.140199430
xchg r12, rax
mov r9, r12
xchg r12, rax
mov dword [rsp + 0x54], 0x5e998866
xor dword [rsp + 0x54], 0x6b26ae56
add dword [rsp + 0x54], 0x45613d7a
xor dword [rsp + 0x54], 0x593eb48f
xor dword [rsp + 0x54], 0xb9afdd0
xor dword [rsp + 0x54], 0x2c671aba
xor dword [rsp + 0x54], 0x35380957
add dword [rsp + 0x54], 0xc61bbdde
mov dword [rsp + 0x60], 0x7be80b6a
sub dword [rsp + 0x60], 0x64fc804f
xor dword [rsp + 0x60], 0x361a3f9d
xor dword [rsp + 0x60], 0x6587baed
xor dword [rsp + 0x60], 0x25619903
add dword [rsp + 0x60], 0x185c570b
xor dword [rsp + 0x60], 0x4c82df51
xor dword [rsp + 0x60], 0x7db210ac
add dword [rsp + 0x60], 0xb635dde0
mov dword [rsp + 0x64], 0x79fa385f
xor dword [rsp + 0x64], 0x5a159eb2
add dword [rsp + 0x64], 0xbfc5dcf
add dword [rsp + 0x64], 0x3e9a8be6
xor dword [rsp + 0x64], 0x290fada1
add dword [rsp + 0x64], 0xb7e2c27a
mov dword [rsp + 0x58], 0x6e3ae9a5
sub dword [rsp + 0x58], 0x378efe72
add dword [rsp + 0x58], 0x5ea44b4
xor dword [rsp + 0x58], 0x7e3d13a9
xor dword [rsp + 0x58], 0x2fe316c4
sub dword [rsp + 0x58], 0x5528f8db
add dword [rsp + 0x58], 0x4dc06a0a
xor dword [rsp + 0x58], 0x11a9bde8
add dword [rsp + 0x58], 0x8280d0a5
mov dword [rsp + 0x68], 0x132fe63f
add dword [rsp + 0x68], 0x66fde11f
sub dword [rsp + 0x68], 0x1b14a014
xor dword [rsp + 0x68], 0x5efa4d3f
add dword [rsp + 0x68], 0x205cbdb0
sub dword [rsp + 0x68], 0x21a0a197
add dword [rsp + 0x68], 0x18d5344b
sub dword [rsp + 0x68], 0x194391a8
xor dword [rsp + 0x68], 0xff42d64b
mov dword [rsp + 0x6c], 0x394a98cd
add dword [rsp + 0x6c], 0x3362e563
sub dword [rsp + 0x6c], 0x44fd316f
add dword [rsp + 0x6c], 0x4e3eb9ba
xor dword [rsp + 0x6c], 0x5bb9cf46
sub dword [rsp + 0x6c], 0x198cae80
sub dword [rsp + 0x6c], 0x6f3ff46
add dword [rsp + 0x6c], 0xf198e3c1
mov word [rsp + 0x5c], 0x2db1
add word [rsp + 0x5c], 0xf8
xor word [rsp + 0x5c], 0x7f58
xor word [rsp + 0x5c], 0x37b0
xor word [rsp + 0x5c], 0x12ff
xor word [rsp + 0x5c], 0x18a1
xor word [rsp + 0x5c], 0x6ce3
xor word [rsp + 0x5c], 0xf60a
mov dword [rsp + 0x70], 0x362b9b0
add dword [rsp + 0x70], 0x6a33409d
sub dword [rsp + 0x70], 0x6508fc3
add dword [rsp + 0x70], 0xec1be66
xor dword [rsp + 0x70], 0x4c9f239d
add dword [rsp + 0x70], 0xc4def409
xor eax, eax
mov word [rsp + 0x74], ax
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
movzx ecx, word [rsp + rax*2 + 0x60]
movzx edx, byte [rsp + rax + 0x54]
add dx, cx
mov word [rsp + rax*2 + 0x60], dx
mov byte [rsp + rax + 0x54], 0x78
sub byte [rsp + rax + 0x54], 0x16
xor byte [rsp + rax + 0x54], 0
sub byte [rsp + rax + 0x54], 0x18
xor byte [rsp + rax + 0x54], 0x41
xor byte [rsp + rax + 0x54], 8
add byte [rsp + rax + 0x54], 0x71
sub byte [rsp + rax + 0x54], 0x5b
xor byte [rsp + rax + 0x54], 0x19
inc rax
cmp rax, 0xa
jb 0x140192da0
xor r8d, r8d
lea rdx, [rsp + 0x60]
xchg rcx, rbp
mov rbp, r9
xchg rcx, rbp
call fcn.14019a4c0
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
nop word [rax + rax]
mov byte [rsp + rsi + 0x60], 0x26
add byte [rsp + rsi + 0x60], 0x46
sub byte [rsp + rsi + 0x60], 0x30
sub byte [rsp + rsi + 0x60], 0x32
sub byte [rsp + rsi + 0x60], 5
add byte [rsp + rsi + 0x60], 0x67
sub byte [rsp + rsi + 0x60], 0x6c
inc rsi
cmp rsi, 0x14
jb 0x140192e13
call fcn.140199430
mov r8d, 0x14c6244a
add r8d, 0x3bff436
xor r8d, 0x79c59d3f
xor r8d, 0x10465821
sub r8d, 0x171591de
sub r8d, 0x32605e5
add r8d, 0x827290d
add r8d, 0x235c59bf
mov rdx, rbx
xchg rdi, rax
mov rcx, rdi
xchg rdi, rax
call fcn.140199270
movabs rcx, 0x85f33d5e1
sub rcx, 0xa86799d
add rcx, 0x900755f
add rcx, 0x173611b1
xor rcx, 0x3ccbb089
sub rcx, 0x3058dcff
add rcx, 0x4840b757
add rcx, 0x224755fd
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
xchg r8, rax
mov qword [r14 + 0x108], r8
xchg r8, rax
mov rax, r14
mov rbx, qword [rsp + 0x268]
add rsp, 0x220
nop
xchg qword [rsp], r15
add rsp, 8
nop
add rsp, 8
mov r14, qword [rsp - 8]
push rbx
xchg qword [rsp + 8], r13
pop rbx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r12
push rcx
push rdx
push rbx
push rdx
push rax
push rax
push rbx
xchg qword [rsp + 0x38], rdi
add rsp, 0x40
push rax
push rax
push rcx
push rcx
push rax
push rdx
push rdx
push rbx
xchg qword [rsp + 0x40], rsi
add rsp, 0x48
nop
add rsp, 8
mov rbp, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]