Function at 0x14000d040
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3c8
mov ecx, 5
call fcn.14002ddb0
lea rax, [0x141ce997b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x6797dde653cffe56
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006db0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x141d069e0]
mov edx, 0x1d
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x7daa362b
mov edx, esi
shr edx, 8
movabs rcx, 0xb081f8836ce3ce75
xor rdi, rcx
movabs rcx, 0x360f1e3162473edf
xor r14, rcx
movabs rcx, 0xce4fa45d96e61197
xor r15, rcx
xor bl, 0x1c
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], sil
shr esi, 0x18
mov byte [rax + 0x1b], sil
mov word [rax + 0x19], dx
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x48]
mov r8d, 0x1d
mov qword [rsp + 0x320], rax
mov rdx, rax
call fcn.140031f90
cmp dword [rsp + 0x48], 2
jne 0x1400106ed
mov rsi, qword [rsp + 0x50]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000d194
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000d15b
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000d182
cmp qword [rbx + 0x10], 0x11
jb 0x14000d170
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141cf14b4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x210d300483df4bb0
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400072a0
movabs rcx, 0xe1169bc1dc03b2cc
xor rcx, qword [rax]
movabs rdx, 0x27b9a9287fbafc36
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0xa6
mov qword [rsp + 0x188], rcx
mov qword [rsp + 0x190], rdx
mov byte [rsp + 0x198], al
lea rax, [rsp + 0x199]
lea rcx, [rsp + 0x188]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rdi, [rsp + 0x48]
mov rdx, rdi
call fcn.140008590
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x1a0], 0
mov rsi, qword [rsp + 0x128]
lea r15, [rsp + 0x1a0]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, eax
test eax, eax
je 0x14000d42c
mov rdi, rbx
shl rdi, 0x20
or rdi, 2
cmp qword [rsp + 0x120], 0
je 0x14000d2cd
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebx, ebx
je 0x14000d445
lea rax, [0x141ce6858]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x93501bdb27e4dae4
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006ce0
movabs rcx, 0xbb49f23612668d14
xor rcx, qword [rax]
movabs rdx, 0xe5b138824e16691
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x3d
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov byte [rsp + 0x1b0], al
lea rax, [rsp + 0x1b1]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rsi, [rsp + 0x48]
mov rdx, rsi
call fcn.140008590
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x128]
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebp, eax
mov rsi, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
je 0x14000d3ca
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
jne 0x1400106eb
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000d448
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000d3f1
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000d418
cmp qword [r14 + 0x10], 0x11
jb 0x14000d406
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000d448
mov rdi, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
jne 0x14000d2bb
jmp 0x14000d2cd
mov rsi, rdi
lea rax, [0x141cf3902]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc9d39459d8434dca
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006b70
mov ecx, 0xcb3a1018
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 4
mov dword [rsp + 0x1a0], ecx
mov byte [rsp + 0x1a4], al
lea rax, [rsp + 0x1a5]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.140008590
mov dword [rsp + 0x218], 0x800
mov dword [rsp + 0x188], 0
movzx eax, byte [0x141d069e0]
mov ebx, 0x800
mov edx, 0x800
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov r14, rax
mov qword [rsp + 0x48], 0x800
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0
mov r15, qword [rsp + 0x128]
xor r13d, r13d
mov r12, qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rdi, rbx
sub rdi, r13
nop word cs:[rax + rax]
lea rax, [rsp + 0x218]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, rsi
mov rdx, r15
xor r8d, r8d
lea r9, [rsp + 0x188]
call r12
cmp eax, 0xea
jne 0x14000d5a7
mov r8d, dword [rsp + 0x218]
cmp rdi, r8
jae 0x14000d540
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0x48]
mov rdx, r13
call fcn.140055e00
mov rbx, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
jmp 0x14000d52d
mov ebp, eax
test eax, eax
jne 0x14000d5d9
mov r12d, dword [rsp + 0x218]
mov qword [rsp + 0x58], r12
mov r13d, dword [rsp + 0x188]
cmp r13d, 0xb
jbe 0x14000d605
movabs rbp, 0xde00000002
test rbx, rbx
jne 0x14000d5e6
jmp 0x14000d5f8
shl rbp, 0x20
or rbp, 2
test rbx, rbx
je 0x14000d5f8
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rbx, 0x8000000000000000
mov r14, rbp
cmp qword [rsp + 0x120], 0
je 0x14000d622
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp rbx, rax
jne 0x14000d646
mov r15, r14
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x120]
jmp 0x14000d6ad
mov bpl, 1
cmp r13b, 5
je 0x14000d65c
movzx eax, r13b
cmp eax, 4
jne 0x1400106c3
cmp r12, 4
lea r13, [rsp + 0x120]
jne 0x14000d67b
xor ebp, ebp
lea r12, [rsp + 0x1a0]
test rbx, rbx
jne 0x14000d692
jmp 0x14000d6a4
movabs r15, 0xd00000002
lea r12, [rsp + 0x1a0]
test rbx, rbx
je 0x14000d6a4
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test bpl, bpl
je 0x1400106f2
mov eax, r15d
and eax, 3
cmp eax, 1
jne 0x14000d706
mov r14, qword [r15 - 1]
mov rdi, qword [r15 + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000d6cd
mov rcx, r14
call rax
dec r15
cmp qword [rdi + 8], 0
je 0x14000d6f4
cmp qword [rdi + 0x10], 0x11
jb 0x14000d6e2
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141cf209b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xb9cb9c120c432858
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007b40
movabs rcx, 0x56fa1bd450c14dea
xor rcx, qword [rax]
movabs rdx, 0x8fe906e4a592b394
xor rdx, qword [rax + 8]
movabs r8, 0x7d54d7d2498ffebe
xor r8, qword [rax + 0x10]
movabs r9, 0x823b9116127264a5
xor r9, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
xor al, 0x5a
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov byte [rsp + 0x140], al
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], 0x21
mov qword [rsp + 0x188], r12
lea rax, [0x1400042f0]
mov qword [rsp + 0x190], rax
lea rax, [0x1400596d8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.140032860
lea rax, [0x141cf2ec0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xfc2c400bee8833be
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007b10
mov ecx, 0xe832ef5e
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xf2
mov dword [rsp + 0x48], ecx
mov byte [rsp + 0x4c], al
lea r9, [0x1400596c0]
lea rdx, [rsp + 0x48]
mov r8d, 5
mov rcx, rsi
call fcn.140007da0
test rax, rax
jne 0x1400106eb
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000d88b
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [0x141cee9f9]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xff17700a5c08bf96
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400069e0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov ecx, esi
shr ecx, 8
xor cl, 0xd1
xor sil, 0xae
movabs rdx, 0x4b470958430eed0f
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce8042]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x32a5dd3953367bb
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.1400076d0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x141d069e0]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0xa5607154
movabs rax, 0xfcef8d746ac2609c
xor rbx, rax
movabs rax, 0xd49be5d726180c1
xor r14, rax
movabs rax, 0x3edc47f0e1064da9
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.14003cfc0
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 5
call fcn.14002ddb0
lea rax, [0x141ceaaa3]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x432ed4ae69bb95d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007c40
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov ecx, esi
shr ecx, 8
xor cl, 7
xor sil, 0xbf
movabs rdx, 0xa7d096da49322330
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce8015]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xb7f59a802cf5a181
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007d10
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141d069e0]
mov edx, 0x15
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
lea rcx, [rsp + 0x68]
xor bl, 0xcb
xor edi, 0xb38a760e
mov eax, edi
shr eax, 8
movabs rdx, 0x93cdf9b319c02ded
xor r14, rdx
movabs rdx, 0x7ce87de7e7da4a4e
xor r15, rdx
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov byte [rsi + 0x10], dil
shr edi, 0x18
mov byte [rsi + 0x13], dil
mov word [rsi + 0x11], ax
mov byte [rsi + 0x14], bl
call fcn.14003cfc0
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 5
call fcn.14002ddb0
lea rax, [0x141ce4da5]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x740c95bfe7808b90
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006960
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d069e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov r15, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0xe2
mov ecx, esi
shr ecx, 8
xor cl, 0xde
xor sil, 0x3c
movabs rdx, 0x123999337001d630
xor rdi, rdx
mov qword [r15], rdi
mov byte [r15 + 8], sil
mov byte [r15 + 9], cl
mov byte [r15 + 0xa], al
lea rax, [0x141ceccf8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x535c504f0d5aa733
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006bd0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov r12, rax
xor esi, 0x54264034
movabs rax, 0x284957ee0bbc34bb
xor rdi, rax
xor bl, 0xa4
mov qword [r12], rdi
mov dword [r12 + 8], esi
mov byte [r12 + 0xc], bl
lea rax, [0x141ce6f62]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xaf8038318eeb0826
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400076b0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov r13, rax
xor esi, 0x46110602
movabs rax, 0xacb05dc67ebbdfa1
xor rdi, rax
mov qword [r13], rdi
mov dword [r13 + 8], esi
lea rax, [0x141cf1190]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa1ac13ee7097c8ba
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006c80
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x9a02a198
movabs rcx, 0x65566656341ec2b2
xor rdi, rcx
add bl, 0x80
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2d8], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cf2739]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xb0e1d4a2dd0fc9f8
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007700
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov edx, esi
shr edx, 8
xor dl, 0xf5
xor sil, 0x5e
movabs rcx, 0x98c8af757dccf09
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2d0], rax
mov byte [rax + 9], dl
lea rax, [0x141cedae9]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc12d15b1a8be4869
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007c10
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov edx, esi
shr edx, 8
xor dl, 0xdc
xor sil, 0xc2
movabs rcx, 0x7ffe12581dbfcb34
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2c8], rax
mov byte [rax + 9], dl
lea rax, [0x141ce5198]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x5cf9132a7136bc29
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007590
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x4590830f
movabs rcx, 0x38891392cda6a554
xor rdi, rcx
xor bl, 0x17
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cf4218]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xd57cf0511c4c9555
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400071c0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x371acb6a
movabs rcx, 0x639f2172821c4ad
xor rdi, rcx
xor bl, 0x71
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2b8], rax
mov byte [rax + 0xc], bl
lea rax, [0x141ce8225]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x36c703bcdde0ead
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400077f0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d069e0]
mov edx, 0xf
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x35
mov ecx, esi
shr ecx, 8
xor cl, 0x42
not sil
xor edi, 0x476b1393
movabs rdx, 0x300b05ac90b86e99
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x2b0], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141cf1686]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x44963384db3a9c67
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007250
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x141d069e0]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x21c1972f
movabs rcx, 0x9e9d32ab90ac65c1
xor rdi, rcx
movabs rcx, 0x72ff55c2501b94c3
xor rbx, rcx
movabs rcx, 0xdaa93e162216d858
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x2a8], rax
mov dword [rax + 0x18], esi
lea rax, [0x141cf2bae]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x2235047b7475dcd
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007970
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x141d069e0]
mov edx, 0x19
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov r14, rax
movabs rax, 0xb07cce13b224f601
xor rsi, rax
movabs rax, 0x9f1ac184274a464
xor rdi, rax
movabs rax, 0xe13f19e5aa104049
xor rbx, rax
xor bpl, 0x4c
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x141cf074d]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1eacaacc7e474bf2
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400067f0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov edx, esi
shr edx, 8
xor dl, 0x3e
xor sil, 0xa8
movabs rcx, 0xbc7472b9dbf0c067
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2a0], rax
mov byte [rax + 9], dl
lea rax, [0x141ce7b14]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1b347d79cb670557
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006ec0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x61116202
movabs rcx, 0xb7e523883ab2e1cd
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x298], rax
mov dword [rax + 8], esi
lea rax, [0x141cec74c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf295d6760bfad70a
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006a20
mov rsi, qword [rax]
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rdi, rax
movabs rax, 0x22932320fef108d5
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x141cf3524]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf6787da385f35a23
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007060
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 9
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov qword [rsp + 0x290], rdi
xor bl, 6
movabs rcx, 0x9a3b31c74a1d88a3
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x288], rax
mov byte [rax + 8], bl
lea rax, [0x141ceab35]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa04a212370e673e0
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006ae0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 9
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor bl, 0xf4
movabs rcx, 0xda2fc24787e16361
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x280], rax
mov byte [rax + 8], bl
lea rax, [0x141ce7825]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x80476478ee0865b5
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400074d0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x2ca00864
movabs rcx, 0x53410d9d76ab6719
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x278], rax
mov dword [rax + 8], esi
lea rax, [0x141ce8ee3]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xe55da395b214e2a9
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007a70
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d069e0]
mov edx, 0xf
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x77
mov ecx, esi
shr ecx, 8
xor cl, 0x61
xor sil, 0xe7
xor edi, 0x4f4606c8
movabs rdx, 0xab875ff4d76d4e20
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x270], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141ce76e9]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x9573ed1fc04b58cf
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006830
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rbp, rax
xor esi, 0xb30df44
movabs rax, 0x4a97b91e6cced92b
xor rdi, rax
mov qword [rbp], rdi
mov dword [rbp + 8], esi
lea rax, [0x141ced24b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x6b87b053c38ea112
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006d70
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d069e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x2c
mov ecx, esi
shr ecx, 8
xor cl, 0x73
xor sil, 0xa
movabs rdx, 0x356b0ef5a590ced
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x268], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141ceec05]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x80da10ff2fb4762d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400068a0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d069e0]
mov edx, 0x11
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
movabs rcx, 0xae7853fff0b2c406
xor rsi, rcx
movabs rcx, 0x88385d0ab2adb67b
xor rdi, rcx
xor bl, 0x7c
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x260], rax
mov byte [rax + 0x10], bl
lea rax, [0x141ceabc6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x2ce24de9bbe04d0c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006910
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rdx, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0x8e
movzx eax, al
mov byte [rdx + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x9d
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0x2b
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0xa785bc4d
mov dword [rdx], esi
shr rax, 0x20
mov qword [rsp + 0x258], rdx
mov word [rdx + 4], ax
lea rax, [0x141cedb06]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc9bfbe083d524b1d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006990
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0xb300f11d
movabs rcx, 0xb76ba77f2ab223f9
xor rdi, rcx
xor bl, 0xc
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x250], rax
mov byte [rax + 0xc], bl
lea rax, [0x141ceeb3f]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7b5de2cd380169d3
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400071a0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d069e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x19
mov ecx, esi
shr ecx, 8
xor cl, 7
xor sil, 0x7c
movabs rdx, 0x3ff02551f3fab91d
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x248], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141ce6942]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xb4e9a6b574fe2e36
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007890
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
xor esi, 0x6ff4baa4
movabs rcx, 0x38962069d0393272
xor rdi, rcx
xor bl, 0x74
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x240], rax
mov byte [rax + 0xc], bl
lea rax, [0x141ce638b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x8a8d5a2664c8d81d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007110
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d069e0]
mov edx, 0x12
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
movabs rcx, 0xf7bbd7a5f9bc6d0b
xor rsi, rcx
movabs rcx, 0xcf4607b374dcad6b
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x11
xor bl, 0x42
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x238], rax
mov byte [rax + 0x11], cl
lea rax, [0x141ce4ad7]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x28a45ece7d57bf1c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007400
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xde
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x4b
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0x30
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x4a8f9161
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x141d069e0]
mov edx, 0x1b0
xor ecx, ecx
mov rsi, r8
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rcx, rax
mov qword [rsp + 0x310], r15
mov qword [rax], r15
mov qword [rax + 8], 0xb
mov qword [rsp + 0x308], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xd
mov qword [rsp + 0x300], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], 0xc
mov rax, qword [rsp + 0x2d8]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], 0xd
mov rax, qword [rsp + 0x2d0]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xa
mov rax, qword [rsp + 0x2c8]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xa
mov rax, qword [rsp + 0x2c0]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x2b8]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xd
mov rax, qword [rsp + 0x2b0]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xf
mov rax, qword [rsp + 0x2a8]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x1c
mov qword [rsp + 0x2f0], r14
mov qword [rcx + 0xa0], r14
mov qword [rcx + 0xa8], 0x19
mov rax, qword [rsp + 0x2a0]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x298]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xc
mov rax, qword [rsp + 0x290]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 8
mov rax, qword [rsp + 0x288]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 9
mov rax, qword [rsp + 0x280]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 9
mov rax, qword [rsp + 0x278]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0xc
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x110], rax
mov qword [rcx + 0x118], 0xf
mov qword [rsp + 0x2f8], rbp
mov qword [rcx + 0x120], rbp
mov qword [rcx + 0x128], 0xc
mov rax, qword [rsp + 0x268]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xb
mov rax, qword [rsp + 0x260]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 0x11
mov rax, qword [rsp + 0x258]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 7
mov rax, qword [rsp + 0x250]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 0xd
mov rax, qword [rsp + 0x248]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xb
mov rax, qword [rsp + 0x240]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xd
mov rax, qword [rsp + 0x238]
mov qword [rcx + 0x190], rax
mov qword [rcx + 0x198], 0x12
mov qword [rsp + 0x2e8], rsi
mov qword [rcx + 0x1a0], rsi
mov qword [rsp + 0x2e0], rcx
mov qword [rcx + 0x1a8], 7
lea rax, [0x141cea90c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1cc45ffb40ac285a
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006f90
movabs rcx, 0xd10c2fe336f8c878
xor rcx, qword [rax]
movabs rdx, 0x545043aacafcd6fb
xor rdx, qword [rax + 8]
movabs r8, 0xb1281533d8809ab8
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x74
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov qword [rsp + 0x1b0], r8
mov byte [rsp + 0x1b8], al
mov dword [rsp + 0x230], 0x41888887
lea rax, [0x141cf1015]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x28b88b74830e5616
mov qword [rsp + 0x48], rax
lea r12, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006880
mov rcx, qword [rax]
mov qword [rsp + 0x318], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x210], rcx
mov rbx, qword [rax + 0x10]
mov rbp, qword [rax + 0x18]
mov r13, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x11f], al
movzx eax, byte [0x141d069e0]
mov edx, 0x49
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
movabs rcx, 0x3eeff2f240fd73f3
xor rsi, rcx
movabs rcx, 0x46c264b907eed9f1
xor rdi, rcx
movabs rcx, 0x75cb2b8c2917e08f
xor r14, rcx
movabs rcx, 0xbc5e7400a984ee20
xor r15, rcx
movabs rcx, 0x8f0e85f88171c622
xor r13, rcx
movabs rcx, 0x76fadcd2d4108c5f
xor rbp, rcx
movabs rcx, 0x38068f48751ba6af
xor rbx, rcx
movabs rcx, 0x474ec0e6e07abfe5
mov rdx, qword [rsp + 0x210]
xor rdx, rcx
movabs rcx, 0xd27fe07d1269ec2b
mov r8, qword [rsp + 0x318]
xor r8, rcx
movzx ecx, byte [rsp + 0x11f]
xor cl, 0xea
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x218], 0x49
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 0x49
xor edi, edi
movabs rbx, 0xffffffff7fffffff
jmp 0x14000f041
add rdi, 0x10
cmp rdi, 0x1b0
je 0x14000f30f
mov rax, qword [rsp + 0x2e0]
add rax, rdi
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x120], rax
lea rax, [0x140006650]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x130], rax
lea rax, [0x1400042d0]
mov qword [rsp + 0x138], rax
lea rax, [0x141cf42c8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rsi, [rsp + 0x120]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 2
lea rcx, [rsp + 0x188]
mov rdx, r12
call fcn.140012330
mov r15, qword [rsp + 0x188]
mov r14, qword [rsp + 0x190]
mov rax, qword [rsp + 0x198]
add rax, r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
mov rcx, rsi
mov rdx, r12
call fcn.140008590
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x234], 0
mov r13, qword [rsp + 0x128]
lea rax, [rsp + 0x234]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
test eax, eax
je 0x14000f200
mov rbp, rsi
shl rbp, 0x20
or rbp, 2
cmp qword [rsp + 0x120], 0
je 0x14000f1a4
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
test esi, esi
jne 0x14000f216
mov r8d, 0x19
mov rcx, rbp
lea rdx, [rsp + 0x1a0]
lea r9, [rsp + 0x230]
call fcn.140007da0
test rax, rax
jne 0x14000f23a
cmp rbp, rbx
ja 0x14000f1d9
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14000f030
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000f030
mov rbp, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
jne 0x14000f192
jmp 0x14000f1a4
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rdi, rax
mov qword [rax], rbp
jmp 0x14000f26d
mov rsi, rax
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rdi, rax
mov qword [rax], rsi
cmp rbp, rbx
ja 0x14000f26d
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14000f284
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x218], 0
je 0x14000f2a6
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d069c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rdi]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000f301
mov r14, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000f2c8
mov rcx, r14
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000f2ef
cmp qword [rbx + 0x10], 0x11
jb 0x14000f2dd
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rdi
jmp 0x14000f32b
cmp qword [rsp + 0x218], 0
je 0x14000f331
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d069c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 3
call fcn.14002ddb0
lea rax, [0x141cf2836]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x257d628e4a44c9c6
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400073a0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xe
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov ecx, esi
shr ecx, 8
xor cl, 0x82
xor sil, 0x47
xor edi, 0x16e9e3ed
movabs rdx, 0x63a2d6f36596dbe6
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x48], 0xe
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xe
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cf27d9]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x7da968487cb113e1
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006b40
mov rbx, qword [rax]
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
lea rdi, [rsp + 0x68]
movabs rax, 0xe33190a04d946428
xor rbx, rax
mov qword [rsi], rbx
mov rcx, rdi
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 8
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141cf10c6]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x437c3b9527a51584
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007040
xorps xmm0, xmm0
movaps xmmword [rsp + 0x170], xmm0
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x180], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x140059748]
nop word [rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x128], r8
add rcx, 8
cmp rcx, 0x60
jb 0x14000f5d0
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x200], rax
movaps xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmm0, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x1e0], xmm0
movaps xmm0, xmmword [rsp + 0x120]
movaps xmm1, xmmword [rsp + 0x130]
movaps xmm2, xmmword [rsp + 0x140]
movaps xmm3, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x1d0], xmm3
movaps xmmword [rsp + 0x1c0], xmm2
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
movzx eax, byte [0x141d069e0]
mov edx, 0x68
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
mov rax, qword [rsp + 0x200]
mov qword [rsi + 0x60], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rsi + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmm1, xmmword [rsp + 0x1b0]
movaps xmm2, xmmword [rsp + 0x1c0]
movaps xmm3, xmmword [rsp + 0x1d0]
movups xmmword [rsi + 0x30], xmm3
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp qword [rsp + 0x68], 1
jne 0x14000f6e3
mov rcx, rdi
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x68
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x68
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003ce20
lea rax, [0x141cec738]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x188]
mov rcx, qword [rsp + 0x188]
movabs rax, 0xd32418e11e6f0780
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x188]
mov rdx, qword [rsp + 0x188]
call fcn.140006860
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
test byte [rsp + 0x120], 1
jne 0x1400106eb
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141ced3a2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x4e7e2eb5e378f144
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007500
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xe1
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x85
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xb1
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x570dc016
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cef120]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x1152b96b2efa6fdb
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007280
movzx edi, word [rax]
movzx eax, byte [0x141d069e0]
mov edx, 2
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0xb047
mov word [rax], di
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141cea5e9]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xc2fb84265c768ae3
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.1400074a0
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov r13, qword [rax + 0x10]
mov r12, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
mov ebx, dword [rax + 0x28]
movzx eax, byte [0x141d069e0]
mov edx, 0x2c
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
xor ebx, 0xfa363ee2
movabs rax, 0x8d1ae20f29671af3
xor r15, rax
movabs rax, 0x556e4640433e2d0f
xor r12, rax
movabs rax, 0x26632f386520382
xor r13, rax
movabs rax, 0xed1aa73c0553cefa
xor rbp, rax
movabs rax, 0x7a3737dc9249634c
xor rdi, rax
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r12
mov qword [rsi + 0x20], r15
mov dword [rsi + 0x28], ebx
cmp qword [rsp + 0x68], 1
jne 0x14000fa8d
lea rcx, [rsp + 0x68]
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x2c
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x2c
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003ce20
lea rax, [0x141cf438b]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
movabs rax, 0xab69e2b1e7a0deb2
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a0]
call fcn.140006ba0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov rcx, qword [rax + 0x28]
movzx eax, byte [rax + 0x30]
test byte [rsp + 0x120], 1
jne 0x1400106eb
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141cf2a42]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7c258a2111dbd7a6
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006fe0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xc4
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0xf6
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x33
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x750bbd06
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cf140a]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x2e43099481fd19d6
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007ab0
movzx edi, word [rax]
movzx eax, byte [0x141d069e0]
mov edx, 2
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0x1282
mov word [rax], di
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ce96b3]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xf8ee9d432d4157b2
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006cb0
mov rcx, qword [rax]
mov qword [rsp + 0x210], rcx
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov ebp, dword [rax + 0x20]
movzx ebx, word [rax + 0x24]
movzx edi, byte [rax + 0x26]
movzx eax, byte [0x141d069e0]
mov edx, 0x27
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
shl edi, 0x10
or ebx, edi
mov eax, ebx
shr eax, 0x10
xor al, 0x3b
mov ecx, ebx
shr ecx, 8
xor cl, 0x1a
xor bl, 0x41
xor ebp, 0x27cdbe61
movabs rdx, 0x78515f9000620d76
xor r15, rdx
movabs rdx, 0xd5276750e7fb682f
xor r12, rdx
movabs rdx, 0xee359f274930214b
xor r13, rdx
movabs rdx, 0x82fbfaf9c790a898
mov r8, qword [rsp + 0x210]
xor r8, rdx
mov qword [rsi], r8
mov qword [rsi + 8], r13
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r15
mov dword [rsi + 0x20], ebp
mov byte [rsi + 0x24], bl
mov byte [rsi + 0x25], cl
mov byte [rsi + 0x26], al
cmp qword [rsp + 0x68], 1
jne 0x14000fe62
lea rcx, [rsp + 0x68]
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x27
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x27
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003ce20
lea rax, [0x141cea6f2]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
movabs rax, 0xce5ba0acced9c2d9
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a0]
call fcn.140007760
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov eax, dword [rax + 0x18]
test byte [rsp + 0x120], 1
mov r15, qword [rsp + 0x310]
mov r12, qword [rsp + 0x308]
mov r13, qword [rsp + 0x300]
mov rbp, qword [rsp + 0x2f8]
jne 0x1400106eb
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141cf3f21]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa93428a2be75410d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006f30
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x3e
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x61
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x8f
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x278a1e4e
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ceaa23]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x5760a4d1b646e0dd
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007cf0
movzx ebx, word [rax]
movzx eax, byte [0x141d069e0]
mov edx, 2
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
lea rdi, [rsp + 0x68]
xor ebx, 0xb8c5
mov word [rax], bx
mov rcx, rdi
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ceab78]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xb9a4bc4b345709df
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006e90
xorps xmm0, xmm0
movaps xmmword [rsp + 0x330], xmm0
movaps xmmword [rsp + 0x340], xmm0
movaps xmmword [rsp + 0x350], xmm0
movaps xmmword [rsp + 0x360], xmm0
movaps xmmword [rsp + 0x370], xmm0
mov qword [rsp + 0x380], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400597b0]
nop word cs:[rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x338], r8
add rcx, 8
cmp rcx, 0x50
jb 0x1400101d0
movzx eax, byte [rax + 0x58]
xor al, 0x65
mov byte [rsp + 0x388], al
movzx eax, byte [0x141d069e0]
mov edx, 0x59
xor ecx, ecx
call fcn.14003cf90
test rax, rax
je 0x1400106eb
mov rsi, rax
movups xmm0, xmmword [rsp + 0x379]
movups xmmword [rax + 0x49], xmm0
movaps xmm0, xmmword [rsp + 0x370]
movups xmmword [rax + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x330]
movaps xmm1, xmmword [rsp + 0x340]
movaps xmm2, xmmword [rsp + 0x350]
movaps xmm3, xmmword [rsp + 0x360]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x68], 1
jne 0x140010274
mov rcx, rdi
call fcn.14003cfc0
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x59
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x59
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003ce20
lea rax, [0x141ce5a8e]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
movabs rax, 0x4a0ad6c66d920f24
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a0]
call fcn.140007470
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx ecx, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
test byte [rsp + 0x120], 1
jne 0x1400106eb
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 2
call fcn.14002ddb0
lea rax, [0x141b82c45]
mov qword [rsp + 0x28], rax
lea rax, [0x141b82c39]
mov qword [rsp + 0x20], rax
lea rdx, [0x140059809]
lea r9, [0x141b82c19]
lea rsi, [rsp + 0x398]
mov r8d, 0x1b29410
mov rcx, rsi
call fcn.140022fb0
lea rax, [0x141cf42a1]
mov qword [rsp + 0x28], rax
lea rax, [0x141cf4295]
mov qword [rsp + 0x20], rax
lea rdx, [0x141b82c65]
lea r9, [0x141cf4275]
lea rdi, [rsp + 0x3b0]
mov r8d, 0x171610
mov rcx, rdi
call fcn.140022fb0
lea rax, [0x141ced00b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x3f3d9068dfc24972
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007370
movabs rcx, 0x13ad1d8d788d371a
xor rcx, qword [rax]
movabs rdx, 0x9eb146ddb38055e3
xor rdx, qword [rax + 8]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdx
lea rdx, [rsp + 0x48]
mov r8d, 0x10
mov rcx, rsi
call fcn.140011170
lea rax, [0x141cf18bb]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xe31f31f5d419019d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007b70
movabs rcx, 0x1d3ca5ec00c4e668
xor rcx, qword [rax]
mov edx, 0xb9ad44ac
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x30
shr eax, 8
xor al, 0x4a
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], edx
mov byte [rsp + 0x54], r8b
mov byte [rsp + 0x55], al
lea rdx, [rsp + 0x48]
mov r8d, 0xe
mov rcx, rdi
call fcn.140011170
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2e0]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r15
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r12
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r13
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2d8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2d0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2c8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2c0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2b8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2b0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2f0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x298]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x290]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x288]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x280]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x278]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x270]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rbp
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x268]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x260]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x258]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x250]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x248]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x240]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x238]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2e8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x320]
call rsi
nop
add rsp, 0x3c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs r15, 0xde00000002
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x120]
test rbx, rbx
jne 0x14000d692
jmp 0x14000d6a4
ud2
call fcn.14003cf20
lea rax, [0x141ced4af]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa1bf8b19ee758bce
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007640
movabs rcx, 0x3bc0323ea4110f06
xor rcx, qword [rax]
movabs rdx, 0xa127e8758d7a735d
xor rdx, qword [rax + 8]
movabs r8, 0xe5fa3087d905aa41
xor r8, qword [rax + 0x10]
movabs r9, 0xe0c9f91cdebaaf32
xor r9, qword [rax + 0x18]
mov r10d, 0x22a8cbc9
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 1
shr eax, 8
xor al, 0x32
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov dword [rsp + 0x140], r10d
mov byte [rsp + 0x144], r11b
mov byte [rsp + 0x145], al
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], 0x26
mov qword [rsp + 0x188], r12
lea rax, [0x1400042f0]
mov qword [rsp + 0x190], rax
lea rax, [0x1400596d8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.140032860
call fcn.14003cf20
int3