Function at 0x14000c790
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x718
mov ecx, 5
call fcn.14002e2c0
lea rax, [0x141d9a662]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xa086c5609ab8c912
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006cd0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x141db1a30]
mov edx, 0x1d
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0xd258c56c
mov edx, esi
shr edx, 8
movabs rcx, 0x985c73fd24dbd744
xor rdi, rcx
movabs rcx, 0x22972c4bebf61d00
xor r14, rcx
movabs rcx, 0x2d5df4e09008aa40
xor r15, rcx
xor bl, 0xd6
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], sil
shr esi, 0x18
mov byte [rax + 0x1b], sil
mov word [rax + 0x19], dx
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x168]
mov r8d, 0x1d
mov qword [rsp + 0x670], rax
mov rdx, rax
call fcn.1400324e0
cmp dword [rsp + 0x168], 2
jne 0x1400109e3
mov rsi, qword [rsp + 0x170]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000c8ff
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000c8c6
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000c8ed
cmp qword [rbx + 0x10], 0x11
jb 0x14000c8db
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141d9c91c]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x8a092dedc147b0e4
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400074f0
movabs rcx, 0x1d6d13334682f546
xor rcx, qword [rax]
movabs rdx, 0xad27e2265e6eba76
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x77
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xc0], rdx
mov byte [rsp + 0xc8], al
lea rax, [rsp + 0xc9]
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x170], rax
mov word [rsp + 0x178], 0
mov dword [rsp + 0x180], 1
lea rcx, [rsp + 0x50]
lea rdi, [rsp + 0x168]
mov rdx, rdi
call fcn.14002c910
mov qword [rsp + 0x168], 0
mov dword [rsp + 0xf0], 0
mov rsi, qword [rsp + 0x58]
lea r15, [rsp + 0xf0]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, eax
test eax, eax
je 0x14000cbd0
mov rdi, rbx
shl rdi, 0x20
or rdi, 2
cmp qword [rsp + 0x50], 0
je 0x14000ca53
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebx, ebx
je 0x14000cbe9
lea rax, [0x141d9809a]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x4494897ad8e3b522
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006d00
movabs rcx, 0xfa7289371de8d021
xor rcx, qword [rax]
movabs rdx, 0x32bef1c7c1d3af3d
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 4
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rdx
mov byte [rsp + 0x100], al
lea rax, [rsp + 0x101]
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rax
mov word [rsp + 0x178], 0
mov dword [rsp + 0x180], 1
lea rcx, [rsp + 0x50]
lea rsi, [rsp + 0x168]
mov rdx, rsi
call fcn.14002c910
mov qword [rsp + 0x168], 0
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebp, eax
mov rsi, qword [rsp + 0x168]
cmp qword [rsp + 0x50], 0
je 0x14000cb6e
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
jne 0x1400109e1
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000cbec
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000cb95
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000cbbc
cmp qword [r14 + 0x10], 0x11
jb 0x14000cbaa
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000cbec
mov rdi, qword [rsp + 0x168]
cmp qword [rsp + 0x50], 0
jne 0x14000ca41
jmp 0x14000ca53
mov rsi, rdi
lea rax, [0x141d9024a]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x63304b1996ed1805
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006940
mov ecx, 0x9ca83af0
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x6b
mov dword [rsp + 0xf0], ecx
mov byte [rsp + 0xf4], al
lea rax, [rsp + 0xf5]
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rax
mov word [rsp + 0x178], 0
mov dword [rsp + 0x180], 1
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x168]
call fcn.14002c910
mov dword [rsp + 0xd8], 0x800
mov dword [rsp + 0xb8], 0
movzx eax, byte [0x141db1a30]
mov ebx, 0x800
mov edx, 0x800
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r14, rax
mov qword [rsp + 0x168], 0x800
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0
mov r12, qword [rsp + 0x58]
xor ebp, ebp
mov rdi, qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov r13, rbx
sub r13, rbp
nop word [rax + rax]
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, rsi
mov rdx, r12
xor r8d, r8d
lea r9, [rsp + 0xb8]
call rdi
cmp eax, 0xea
jne 0x14000cd72
mov r8d, dword [rsp + 0xd8]
cmp r13, r8
jae 0x14000cd00
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0x168]
mov rdx, rbp
call fcn.1400580b0
mov rbx, qword [rsp + 0x168]
mov r14, qword [rsp + 0x170]
mov rbp, qword [rsp + 0x178]
jmp 0x14000ccf4
mov r15d, eax
test eax, eax
jne 0x14000ce01
mov ebp, dword [rsp + 0xd8]
mov qword [rsp + 0x178], rbp
mov edi, dword [rsp + 0xb8]
movabs r15, 0xde00000002
cmp edi, 0xb
jbe 0x14000cdc6
test rbx, rbx
je 0x14000cdb9
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rbx, 0x8000000000000000
mov r14, r15
cmp qword [rsp + 0x50], 0
je 0x14000cde0
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp rbx, rax
jne 0x14000ce10
mov rbp, r14
lea r12, [rsp + 0xf0]
lea r13, [rsp + 0x50]
jmp 0x14000ce72
shl r15, 0x20
or r15, 2
test rbx, rbx
jne 0x14000cda7
jmp 0x14000cdb9
mov r15b, 1
cmp dil, 5
lea r12, [rsp + 0xf0]
je 0x14000ce2e
movzx eax, dil
cmp eax, 4
jne 0x14001099c
cmp rbp, 4
jne 0x14000ce43
xor r15d, r15d
lea r13, [rsp + 0x50]
test rbx, rbx
jne 0x14000ce57
jmp 0x14000ce69
movabs rbp, 0xd00000002
lea r13, [rsp + 0x50]
test rbx, rbx
je 0x14000ce69
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r15b, r15b
je 0x1400109e8
mov eax, ebp
and eax, 3
cmp eax, 1
jne 0x14000ceca
mov r14, qword [rbp - 1]
mov rdi, qword [rbp + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000ce91
mov rcx, r14
call rax
dec rbp
cmp qword [rdi + 8], 0
je 0x14000ceb8
cmp qword [rdi + 0x10], 0x11
jb 0x14000cea6
mov r14, qword [r14 - 8]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141d9d5bb]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x59df54f80357c29e
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400067a0
movabs rcx, 0xff02198afa2f6b6b
xor rcx, qword [rax]
movabs rdx, 0xd95b47253a53f5f3
xor rdx, qword [rax + 8]
movabs r8, 0x45b7b535864840ba
xor r8, qword [rax + 0x10]
movabs r9, 0x8138d830d138db1d
xor r9, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
xor al, 0xcf
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], r9
mov byte [rsp + 0x70], al
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], 0x21
mov qword [rsp + 0xb8], r12
lea rax, [0x1400040e0]
mov qword [rsp + 0xc0], rax
lea rax, [0x14005a6d8]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 2
mov qword [rsp + 0x188], 0
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], 1
lea rcx, [rsp + 0x168]
call fcn.140032db0
lea rax, [0x141d93fbd]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x4672765dd57dc657
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007460
mov ecx, 0xb02a7ff2
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x18
mov dword [rsp + 0x168], ecx
mov byte [rsp + 0x16c], al
lea r9, [0x14005a6c0]
lea rdx, [rsp + 0x168]
mov r8d, 5
mov rcx, rsi
call fcn.140007aa0
test rax, rax
jne 0x1400109e1
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000d07f
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 2
mov qword [rsp + 0x100], 0
mov r8d, 0x200
mov edi, 2
xor r13d, r13d
xor r12d, r12d
xor ebx, ebx
cmp r8, 0x201
jae 0x14000d100
jmp 0x14000d0df
jae 0x14000d1d4
cmp r8, 0x201
jae 0x14000d100
mov esi, 0x200
lea r14, [rsp + 0x168]
mov r15, r8
jmp 0x14000d134
sub r8, rbx
sub r12, rbx
cmp r8, r12
ja 0x14000d1a0
mov eax, 0xffffffff
cmp r13, rax
mov ebx, 0xffffffff
cmovb rbx, r13
mov qword [rsp + 0x100], rbx
mov r12, r13
mov rsi, rbx
mov r14, rdi
mov r15, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x141db1010]
mov ecx, r15d
mov rdx, r14
call rax
mov ebp, eax
test eax, eax
jne 0x14000d15f
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400109b9
mov r8d, ebp
cmp r15, r8
jne 0x14000d0d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400109e1
lea r8, [r15 + r15]
cmp r15, 0x7fffffff
mov eax, 0xffffffff
cmova r8, rax
cmp r8, 0x201
jb 0x14000d0df
jmp 0x14000d100
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rsp + 0xf0]
mov rdx, rbx
call fcn.1400580b0
mov r13, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xf8]
jmp 0x14000d10f
cmp rsi, r8
jb 0x1400109e1
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov rdx, r14
call fcn.14002e370
cmp qword [rsp + 0xf0], 0
je 0x14000d20f
mov r8, qword [rsp + 0xf8]
mov rcx, qword [0x141db1a00]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x50]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1400109e1
mov rdi, qword [rsp + 0x60]
test rdi, rdi
js 0x1400109e1
mov qword [rsp + 0x590], rax
mov r12, qword [rsp + 0x58]
movzx ebp, byte [rsp + 0x68]
je 0x14000d267
movzx eax, byte [0x141db1a30]
xor ecx, ecx
mov rdx, rdi
call fcn.14003d220
mov rbx, rax
test rax, rax
jne 0x14000d26c
jmp 0x1400109e1
mov ebx, 1
mov rcx, rbx
mov rdx, r12
mov r8, rdi
call fcn.140053870
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xd0], bpl
lea rax, [0x141d9786f]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x3dc89c572f1056f8
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006b80
movabs rcx, 0xd9449a91ce2d5e43
xor rcx, qword [rax]
movabs rdx, 0xe91b0d508c56cda
xor rdx, qword [rax + 8]
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x170], rdx
lea rcx, [rsp + 0xb8]
lea rdx, [rsp + 0x168]
mov r8d, 0x10
call fcn.1400306d0
mov rbx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
lea rcx, [rsp + 0x168]
mov rdx, rbx
mov r8, rdi
call fcn.1400324e0
cmp dword [rsp + 0x168], 2
jne 0x14000d6ef
mov rdi, qword [rsp + 0x170]
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000d3b7
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000d37e
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000d3a5
cmp qword [r14 + 0x10], 0x11
jb 0x14000d393
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400feb84]
mov qword [rsp + 0x28], rax
lea rax, [0x1400feb78]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005a748]
lea r9, [0x1400feb58]
lea rcx, [rsp + 0xf0]
mov r8d, 0xa4410
call fcn.140023170
mov r15, qword [rsp + 0xf0]
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x14000d55b
lea rax, [0x141d92e62]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xcf6c790c98adafa5
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006820
movabs rcx, 0xb0e169bb3d5c6ad8
xor rcx, qword [rax]
movabs rdx, 0xa42e554a271ead50
xor rdx, qword [rax + 8]
movabs r8, 0x92c36f6abe636329
xor r8, qword [rax + 0x10]
movabs r9, 0xf2fb7d9a1ae44f5d
xor r9, qword [rax + 0x18]
mov r10d, 0x344614fe
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0xd2
shr eax, 8
xor al, 0x5d
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], r9
mov dword [rsp + 0x70], r10d
mov byte [rsp + 0x74], r11b
mov byte [rsp + 0x75], al
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe0], 0x26
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x578], rax
lea rax, [0x1400040e0]
mov qword [rsp + 0x580], rax
lea rax, [0x14005a6d8]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 2
mov qword [rsp + 0x188], 0
lea rax, [rsp + 0x578]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], 1
lea rcx, [rsp + 0x168]
call fcn.140032db0
cmp qword [rsp + 0xb8], 0
jne 0x14001093c
jmp 0x140010953
mov rsi, qword [rsp + 0xf8]
mov rbx, qword [rsp + 0x100]
mov dword [rsp + 0x168], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov dword [rsp + 0x180], 7
mov qword [rsp + 0x184], 0
mov word [rsp + 0x18c], 0
mov byte [rsp + 0x189], 1
mov byte [rsp + 0x18c], 1
mov byte [rsp + 0x18b], 1
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
lea r8, [rsp + 0x168]
call fcn.14002fbd0
mov r14, rax
mov rdi, rdx
lea rax, [0x141d916ae]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x7431b1edf09cf18e
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400075f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
test r14, r14
jne 0x1400109e1
mov qword [rsp + 0x50], rdi
lea rcx, [rsp + 0x50]
mov rdx, rsi
mov r8, rbx
call fcn.140001530
mov rbx, rax
lea rax, [0x141d9e6d5]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xff214961fd2fc072
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006e60
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test rbx, rbx
jne 0x1400109e1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15, r15
je 0x14000d6df
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
test rdi, rdi
js 0x1400109e1
je 0x14000d718
movzx eax, byte [0x141db1a30]
xor ecx, ecx
mov rdx, rdi
call fcn.14003d220
mov rsi, rax
test rax, rax
jne 0x14000d71d
jmp 0x1400109e1
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140053870
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rdi
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
mov dword [rsp + 0xf0], 0
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x168]
lea r8, [rsp + 0xf0]
call fcn.140033470
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
cmp rbp, 2
jne 0x14000d88e
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000d90d
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000d853
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000d87a
cmp qword [rbx + 0x10], 0x11
jb 0x14000d868
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000d90d
mov rbx, r12
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x158], rax
mov r12, qword [rsp + 0x80]
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x160], rax
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call rdi
mov rcx, r15
call rdi
test rbp, rbp
je 0x14000d8e4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13, r13
je 0x14000d8f7
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r12, r12
mov r12, rbx
je 0x14000d90d
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x168]
call fcn.1400042a0
lea rax, [0x141d94ec9]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x11258b45848eec19
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400066d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xa
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov ecx, esi
shr ecx, 8
xor cl, 0x6c
xor sil, 0x13
movabs rdx, 0xda5b5af111ea6ec8
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x168], 0xa
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0xa
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
lea rax, [0x141d985f6]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x9a6bac43929657d9
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400077f0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x141db1a30]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rsi, rax
lea rcx, [rsp + 0x188]
xor edi, 0xdcf6d8d1
movabs rax, 0xfb4b0beacf90f602
xor rbx, rax
movabs rax, 0xeca86ef963668ca0
xor r14, rax
movabs rax, 0xc75cf44abc6e4fc1
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.14003d250
mov rax, qword [rsp + 0x190]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x198], 1
lea rcx, [rsp + 0x168]
call fcn.1400042a0
mov ecx, 5
call fcn.14002e2c0
lea rax, [0x141d99e84]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x8796d2c67c06969f
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007250
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xa
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov ecx, esi
shr ecx, 8
add cl, 0x80
xor sil, 0x17
movabs rdx, 0x6ba26df95b3cb043
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x168], 0xa
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0xa
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
lea rax, [0x141d935c8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x34af40f5051cf519
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140007120
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141db1a30]
mov edx, 0x15
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rsi, rax
lea rcx, [rsp + 0x188]
xor bl, 0x6a
xor edi, 0x2ced58d1
mov eax, edi
shr eax, 8
movabs rdx, 0x7f6055f86ac7681
xor r14, rdx
movabs rdx, 0x2cc6fb7573d5e65a
xor r15, rdx
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov byte [rsi + 0x10], dil
shr edi, 0x18
mov byte [rsi + 0x13], dil
mov word [rsi + 0x11], ax
mov byte [rsi + 0x14], bl
call fcn.14003d250
mov rax, qword [rsp + 0x190]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x198], 1
lea rcx, [rsp + 0x168]
call fcn.1400042a0
mov ecx, 5
call fcn.14002e2c0
lea rax, [0x141d9ca11]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x88032ad76312d8be
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006970
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141db1a30]
mov edx, 0xb
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r15, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 3
mov ecx, esi
shr ecx, 8
xor cl, 0x58
xor sil, 0xb0
movabs rdx, 0xc9b1d719d7c0385c
xor rdi, rdx
mov qword [r15], rdi
mov byte [r15 + 8], sil
mov byte [r15 + 9], cl
mov byte [r15 + 0xa], al
lea rax, [0x141d9bd2d]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x730187e9c446c938
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006f30
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xd
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r13, rax
xor esi, 0x989aab3b
movabs rax, 0x9e5178fc116e5a6d
xor rdi, rax
xor bl, 0x65
mov qword [r13], rdi
mov dword [r13 + 8], esi
mov byte [r13 + 0xc], bl
lea rax, [0x141d9d616]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xf7f76a13df871f79
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400077a0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xc
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0x72b8f167
movabs rcx, 0xe8fa72d7e8a46605
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x158], rax
mov dword [rax + 8], esi
lea rax, [0x141d9163b]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xcd4bbc46e300076e
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007840
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xd
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0x4dda60fb
movabs rcx, 0x41c6b8f70454d56b
xor rdi, rcx
xor bl, 0x39
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x630], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d94639]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x37225754b661b267
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006ed0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xa
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov edx, esi
shr edx, 8
xor dl, 0x8b
xor sil, 4
movabs rcx, 0xcba0d362a7f40491
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x628], rax
mov byte [rax + 9], dl
lea rax, [0x141d923e7]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xf27f9199be3f9248
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006a70
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xa
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov edx, esi
shr edx, 8
xor dl, 0xea
xor sil, 0x8c
movabs rcx, 0x14c4abd3729315a0
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x620], rax
mov byte [rax + 9], dl
lea rax, [0x141d9509c]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xc14e47bf3bc06c17
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006a90
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xd
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0x92b05382
movabs rcx, 0x1c6c63c8e582c44d
xor rdi, rcx
xor bl, 0xa2
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x618], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d9cee6]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xf708bec68b990e49
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006fd0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xd
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0x6103f3fd
movabs rcx, 0xe2be8113f2b0531a
xor rdi, rcx
xor bl, 0x23
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x610], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d9e4dd]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xa7cc3120061aa6bc
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006670
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141db1a30]
mov edx, 0xf
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x90
mov ecx, esi
shr ecx, 8
xor cl, 0x2a
xor sil, 0x4a
xor edi, 0xd713dd56
movabs rdx, 0x5af9b97d533a0bff
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x608], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141d9b699]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x489ef6701ce4b247
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007670
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x141db1a30]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0x111a95b
movabs rcx, 0xe72e77560b62f79
xor rdi, rcx
movabs rcx, 0x7a7da28937f06f8
xor rbx, rcx
movabs rcx, 0xa80b7c4577d04b1
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x600], rax
mov dword [rax + 0x18], esi
lea rax, [0x141d9aecc]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x63b91ac2bbaa2ee6
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400074c0
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x141db1a30]
mov edx, 0x19
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r14, rax
movabs rax, 0x71dec9e7ecd94bd6
xor rsi, rax
movabs rax, 0x5913fa3c1ec86491
xor rdi, rax
movabs rax, 0xeea88d36040f23cd
xor rbx, rax
xor bpl, 0x56
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x141d98260]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x9ffb68df378f639a
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007820
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xa
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rbx, rax
mov eax, esi
shr eax, 8
xor al, 0x50
xor sil, 0x57
movabs rcx, 0x8c2955fccc336ac9
xor rdi, rcx
mov qword [rbx], rdi
mov byte [rbx + 8], sil
mov byte [rbx + 9], al
lea rax, [0x141d9099f]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x9c07a1f9227ec0a9
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007620
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xc
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov qword [rsp + 0x5f8], rbx
xor esi, 0x2cb9bb11
movabs rcx, 0x2563b4ccfa5f99fc
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x5f0], rax
mov dword [rax + 8], esi
lea rax, [0x141d923a6]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xafc535d71a984ce1
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006b00
mov rsi, qword [rax]
movzx eax, byte [0x141db1a30]
mov edx, 8
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
movabs rax, 0xd838e067bfb1a92
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x141d92b2b]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xae3ef32128030afc
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400077c0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 9
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov qword [rsp + 0x5e8], rdi
xor bl, 0x5a
movabs rcx, 0x593b819e1f7f50ef
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x5e0], rax
mov byte [rax + 8], bl
lea rax, [0x141d90c67]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x7b8b16d77403bb53
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006e10
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 9
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor bl, 0x13
movabs rcx, 0xca847defc52586f2
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x5d8], rax
mov byte [rax + 8], bl
lea rax, [0x141d9a3ca]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xfb5159874fcbdaf2
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006b60
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xc
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0xf1f42fde
movabs rcx, 0x8de08fe548e416f
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x5d0], rax
mov dword [rax + 8], esi
lea rax, [0x141d9ec4b]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x8969fc4fe86a6f5d
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400066a0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141db1a30]
mov edx, 0xf
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x57
mov ecx, esi
shr ecx, 8
xor cl, 0x40
xor sil, 0xd7
xor edi, 0xc59b51e4
movabs rdx, 0x64f80fe639d4bc0c
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x5c8], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141d9d3e4]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x91bacf06393ce66a
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006ba0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141db1a30]
mov edx, 0xc
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rbp, rax
xor esi, 0x60d9d582
movabs rax, 0x54978e8157bf050
xor rdi, rax
mov qword [rbp], rdi
mov dword [rbp + 8], esi
lea rax, [0x141d9cbaf]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x61dfe93c8b853a5c
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400072b0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141db1a30]
mov edx, 0xb
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x8c
mov ecx, esi
shr ecx, 8
xor cl, 0x29
xor sil, 0xd0
movabs rdx, 0x23482073163a6ff1
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x5c0], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d98dcd]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x315e184b02123fcf
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007920
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141db1a30]
mov edx, 0x11
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
movabs rcx, 0xf5b58b63afc27b57
xor rsi, rcx
movabs rcx, 0x6286d1eaf76fe10d
xor rdi, rcx
xor bl, 0xef
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x5b8], rax
mov byte [rax + 0x10], bl
lea rax, [0x141d97fd8]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xc9bfbe083d524b1d
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006c30
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xd
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0xb300f11d
movabs rcx, 0xb76ba77f2ab223f9
xor rdi, rcx
xor bl, 0xc
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x5b0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d99011]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x7b5de2cd380169d3
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400067e0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141db1a30]
mov edx, 0xb
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x19
mov ecx, esi
shr ecx, 8
xor cl, 7
xor sil, 0x7c
movabs rdx, 0x3ff02551f3fab91d
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x5a8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d90e14]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xb4e9a6b574fe2e36
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007590
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xd
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
xor esi, 0x6ff4baa4
movabs rcx, 0x38962069d0393272
xor rdi, rcx
xor bl, 0x74
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x5a0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d9085d]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x8a8d5a2664c8d81d
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006700
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141db1a30]
mov edx, 0x12
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
movabs rcx, 0xf7bbd7a5f9bc6d0b
xor rsi, rcx
movabs rcx, 0xcf4607b374dcad6b
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x11
xor bl, 0x42
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x598], rax
mov byte [rax + 0x11], cl
lea rax, [0x141d8efa9]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x28a45ece7d57bf1c
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006730
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141db1a30]
mov edx, 7
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r8, rax
mov qword [rsp + 0x660], r12
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xde
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x4b
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0x30
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x4a8f9161
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x141db1a30]
mov edx, 0x1a0
xor ecx, ecx
mov rsi, r8
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rcx, rax
mov qword [rsp + 0x658], r15
mov qword [rax], r15
mov qword [rax + 8], 0xb
mov qword [rsp + 0x650], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xd
mov rax, qword [rsp + 0x158]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], 0xc
mov rax, qword [rsp + 0x630]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], 0xd
mov rax, qword [rsp + 0x628]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xa
mov rax, qword [rsp + 0x620]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xa
mov rax, qword [rsp + 0x618]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x610]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xd
mov rax, qword [rsp + 0x608]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xf
mov rax, qword [rsp + 0x600]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x1c
mov qword [rsp + 0x640], r14
mov qword [rcx + 0xa0], r14
mov qword [rcx + 0xa8], 0x19
mov rax, qword [rsp + 0x5f8]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x5f0]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xc
mov rax, qword [rsp + 0x5e8]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 8
mov rax, qword [rsp + 0x5e0]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 9
mov rax, qword [rsp + 0x5d8]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 9
mov rax, qword [rsp + 0x5d0]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0xc
mov rax, qword [rsp + 0x5c8]
mov qword [rcx + 0x110], rax
mov qword [rcx + 0x118], 0xf
mov qword [rsp + 0x648], rbp
mov qword [rcx + 0x120], rbp
mov qword [rcx + 0x128], 0xc
mov rax, qword [rsp + 0x5c0]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xb
mov rax, qword [rsp + 0x5b8]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 0x11
mov rax, qword [rsp + 0x5b0]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 0xd
mov rax, qword [rsp + 0x5a8]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 0xb
mov rax, qword [rsp + 0x5a0]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xd
mov rax, qword [rsp + 0x598]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0x12
mov qword [rsp + 0x638], rsi
mov qword [rcx + 0x190], rsi
mov qword [rsp + 0x160], rcx
mov qword [rcx + 0x198], 7
lea rax, [0x141d94dde]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x1cc45ffb40ac285a
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007100
movabs rcx, 0xd10c2fe336f8c878
xor rcx, qword [rax]
movabs rdx, 0x545043aacafcd6fb
xor rdx, qword [rax + 8]
movabs r8, 0xb1281533d8809ab8
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x74
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], r8
mov byte [rsp + 0x108], al
mov dword [rsp + 0x570], 0x41888887
lea rax, [0x141d9c0c2]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x974f177f66bf3234
mov qword [rsp + 0x168], rax
lea r12, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400069a0
mov rcx, qword [rax]
mov qword [rsp + 0x668], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x568], rcx
mov rbp, qword [rax + 0x10]
mov r13, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
mov r14, qword [rax + 0x28]
mov rbx, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x4f], al
movzx eax, byte [0x141db1a30]
mov edx, 0x49
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
movabs rcx, 0xeb5912cdf5d372ae
xor rsi, rcx
movabs rcx, 0x62f1798eaf0770c1
xor rdi, rcx
movabs rcx, 0x4b837ecc90836994
xor rbx, rcx
movabs rcx, 0x152cef7579c28126
xor r14, rcx
movabs rcx, 0x2f8fd7544304a635
xor r15, rcx
movabs rcx, 0xbf64a134a2f242e3
xor r13, rcx
movabs rcx, 0xd16f6cfb09e038e5
xor rbp, rcx
movabs rcx, 0x39fca6d64415176a
mov rdx, qword [rsp + 0x568]
xor rdx, rcx
movabs rcx, 0x8605efd5ae88f9ab
mov r8, qword [rsp + 0x668]
xor r8, rcx
movzx ecx, byte [rsp + 0x4f]
xor cl, 0xed
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r14
mov qword [rax + 0x30], rbx
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x578], 0x49
mov qword [rsp + 0x580], rax
mov qword [rsp + 0x588], 0x49
xor r15d, r15d
lea rdi, [rsp + 0x570]
jmp 0x14000f251
add r15, 0x10
cmp r15, 0x1a0
je 0x14000f539
mov rax, qword [rsp + 0x160]
add rax, r15
mov qword [rsp + 0x678], rax
lea rax, [rsp + 0x578]
mov qword [rsp + 0x50], rax
lea rax, [0x140006460]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x678]
mov qword [rsp + 0x60], rax
lea rax, [0x140004100]
mov qword [rsp + 0x68], rax
lea rax, [0x141d9e720]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 2
mov qword [rsp + 0x188], 0
lea rsi, [rsp + 0x50]
mov qword [rsp + 0x178], rsi
mov qword [rsp + 0x180], 2
lea rcx, [rsp + 0xd8]
mov rdx, r12
call fcn.140012110
mov rbp, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xe8]
add rax, rbx
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x170], rax
mov word [rsp + 0x178], 0
mov dword [rsp + 0x180], 1
mov rcx, rsi
mov rdx, r12
call fcn.14002c910
mov qword [rsp + 0x168], 0
mov dword [rsp + 0x574], 0
mov r14, qword [rsp + 0x58]
lea rax, [rsp + 0x574]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov r13d, eax
test eax, eax
je 0x14000f420
mov rsi, r13
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x50], 0
je 0x14000f3be
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r13d, r13d
jne 0x14000f436
mov r8d, 0x19
mov rcx, rsi
lea rdx, [rsp + 0xf0]
mov r9, rdi
call fcn.140007aa0
test rax, rax
jne 0x14000f45a
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000f3f9
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test rbp, rbp
je 0x14000f240
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000f240
mov rsi, qword [rsp + 0x168]
cmp qword [rsp + 0x50], 0
jne 0x14000f3ac
jmp 0x14000f3be
movzx eax, byte [0x141db1a30]
mov edx, 8
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r14, rax
mov qword [rax], rsi
jmp 0x14000f497
mov rdi, rax
movzx eax, byte [0x141db1a30]
mov edx, 8
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov r14, rax
mov qword [rax], rdi
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000f497
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test rbp, rbp
je 0x14000f4ae
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x578], 0
je 0x14000f4d0
mov r8, qword [rsp + 0x580]
mov rcx, qword [0x141db1a00]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [r14]
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000f52b
mov rbx, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14000f4f2
mov rcx, rbx
call rax
dec rdi
cmp qword [rsi + 8], 0
je 0x14000f519
cmp qword [rsi + 0x10], 0x11
jb 0x14000f507
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r14
jmp 0x14000f555
cmp qword [rsp + 0x578], 0
je 0x14000f55b
mov r8, qword [rsp + 0x580]
mov rcx, qword [0x141db1a00]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 3
call fcn.14002e2c0
lea rax, [0x141d9cd08]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x257d628e4a44c9c6
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007890
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx eax, byte [0x141db1a30]
mov edx, 0xe
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov ecx, esi
shr ecx, 8
xor cl, 0x82
xor sil, 0x47
xor edi, 0x16e9e3ed
movabs rdx, 0x63a2d6f36596dbe6
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x168], 0xe
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 0xe
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
lea rax, [0x141d9ccab]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7da968487cb113e1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400078f0
mov rbx, qword [rax]
movzx eax, byte [0x141db1a30]
mov edx, 8
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
lea rsi, [rsp + 0x188]
movabs rax, 0xe33190a04d946428
xor rbx, rax
mov qword [rdi], rbx
mov rcx, rsi
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx], 0
mov qword [rbx + 8], 8
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 8
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x198], 1
lea rax, [0x141d9b598]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x437c3b9527a51584
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140007290
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0xb0], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400feba4]
nop word cs:[rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x58], r8
add rcx, 8
cmp rcx, 0x60
jb 0x14000f800
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x150], rax
movaps xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x140], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x130], xmm0
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x120], xmm3
movaps xmmword [rsp + 0x110], xmm2
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
movzx eax, byte [0x141db1a30]
mov edx, 0x68
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
mov rax, qword [rsp + 0x150]
mov qword [rdi + 0x60], rax
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rdi + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rdi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
movaps xmm2, xmmword [rsp + 0x110]
movaps xmm3, xmmword [rsp + 0x120]
movups xmmword [rdi + 0x30], xmm3
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
cmp qword [rsp + 0x188], 1
jne 0x14000f90d
mov rcx, rsi
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x68
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x68
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x198], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x168]
call fcn.14003d0b0
lea rax, [0x141d96c0a]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov rcx, qword [rsp + 0xd8]
movabs rax, 0xd32418e11e6f0780
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov rdx, qword [rsp + 0xd8]
call fcn.1400071a0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
test byte [rsp + 0x50], 1
jne 0x1400109e1
lea rcx, [rsp + 0x168]
call fcn.1400042a0
lea rax, [0x141d97874]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x4e7e2eb5e378f144
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006d30
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141db1a30]
mov edx, 7
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xe1
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x85
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xb1
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x570dc016
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 7
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
lea rax, [0x141d995f2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1152b96b2efa6fdb
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400079e0
movzx esi, word [rax]
movzx eax, byte [0x141db1a30]
mov edx, 2
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
lea rcx, [rsp + 0x188]
xor esi, 0xb047
mov word [rax], si
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x198], 1
lea rax, [0x141d94abb]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc2fb84265c768ae3
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140006ff0
mov rsi, qword [rax]
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov r14, qword [rax + 0x20]
mov ebp, dword [rax + 0x28]
movzx eax, byte [0x141db1a30]
mov edx, 0x2c
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
xor ebp, 0xfa363ee2
movabs rax, 0x8d1ae20f29671af3
xor r14, rax
movabs rax, 0x556e4640433e2d0f
xor r15, rax
movabs rax, 0x26632f386520382
xor r12, rax
movabs rax, 0xed1aa73c0553cefa
xor r13, rax
movabs rax, 0x7a3737dc9249634c
xor rsi, rax
mov qword [rdi], rsi
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], r14
mov dword [rdi + 0x28], ebp
cmp qword [rsp + 0x188], 1
jne 0x14000fccd
lea rcx, [rsp + 0x188]
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x2c
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x2c
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x198], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x168]
call fcn.14003d0b0
lea rax, [0x141d9e85d]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rcx, qword [rsp + 0xf0]
movabs rax, 0xab69e2b1e7a0deb2
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.1400071c0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov rcx, qword [rax + 0x28]
movzx eax, byte [rax + 0x30]
test byte [rsp + 0x50], 1
jne 0x1400109e1
lea rcx, [rsp + 0x168]
call fcn.1400042a0
lea rax, [0x141d9cf14]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x7c258a2111dbd7a6
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006600
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141db1a30]
mov edx, 7
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xc4
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0xf6
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x33
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x750bbd06
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 7
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
lea rax, [0x141d9b8dc]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2e43099481fd19d6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140006f00
movzx esi, word [rax]
movzx eax, byte [0x141db1a30]
mov edx, 2
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
lea rcx, [rsp + 0x188]
xor esi, 0x1282
mov word [rax], si
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x198], 1
lea rax, [0x141d93b85]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf8ee9d432d4157b2
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140007530
mov rcx, qword [rax]
mov qword [rsp + 0x568], rcx
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov r14d, dword [rax + 0x20]
movzx ebp, word [rax + 0x24]
movzx esi, byte [rax + 0x26]
movzx eax, byte [0x141db1a30]
mov edx, 0x27
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
shl esi, 0x10
or ebp, esi
mov eax, ebp
shr eax, 0x10
xor al, 0x3b
mov ecx, ebp
shr ecx, 8
xor cl, 0x1a
xor bpl, 0x41
xor r14d, 0x27cdbe61
movabs rdx, 0x78515f9000620d76
xor r15, rdx
movabs rdx, 0xd5276750e7fb682f
xor r12, rdx
movabs rdx, 0xee359f274930214b
xor r13, rdx
movabs rdx, 0x82fbfaf9c790a898
mov r8, qword [rsp + 0x568]
xor r8, rdx
mov qword [rdi], r8
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r15
mov dword [rdi + 0x20], r14d
mov byte [rdi + 0x24], bpl
mov byte [rdi + 0x25], cl
mov byte [rdi + 0x26], al
cmp qword [rsp + 0x188], 1
jne 0x1400100bd
lea rcx, [rsp + 0x188]
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x27
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x27
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x198], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x168]
call fcn.14003d0b0
lea rax, [0x141d94bc4]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rcx, qword [rsp + 0xf0]
movabs rax, 0xce5ba0acced9c2d9
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.1400073f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov eax, dword [rax + 0x18]
test byte [rsp + 0x50], 1
mov r12, qword [rsp + 0x660]
mov r14, qword [rsp + 0x658]
mov r15, qword [rsp + 0x650]
mov r13, qword [rsp + 0x648]
jne 0x1400109e1
lea rcx, [rsp + 0x168]
call fcn.1400042a0
lea rax, [0x141d9e3f3]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xa93428a2be75410d
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140007150
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141db1a30]
mov edx, 7
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x3e
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x61
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x8f
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x278a1e4e
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 7
mov byte [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 8
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x200], 0
mov word [rsp + 0x208], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x1a0], rax
mov word [rsp + 0x228], 0
mov word [rsp + 0x230], 0
mov dword [rsp + 0x1c0], 6
mov dword [rsp + 0x1d0], 6
mov dword [rsp + 0x1e0], 6
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov dword [rsp + 0x22c], 0x8000000
lea rax, [0x141d94ef5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x5760a4d1b646e0dd
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140006650
movzx ebx, word [rax]
movzx eax, byte [0x141db1a30]
mov edx, 2
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
lea rsi, [rsp + 0x188]
xor ebx, 0xb8c5
mov word [rax], bx
mov rcx, rsi
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x198], 1
lea rax, [0x141d9504a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xb9a4bc4b345709df
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400068b0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x680], xmm0
movaps xmmword [rsp + 0x690], xmm0
movaps xmmword [rsp + 0x6a0], xmm0
movaps xmmword [rsp + 0x6b0], xmm0
movaps xmmword [rsp + 0x6c0], xmm0
mov qword [rsp + 0x6d0], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400fec0c]
nop
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x688], r8
add rcx, 8
cmp rcx, 0x50
jb 0x140010430
movzx eax, byte [rax + 0x58]
xor al, 0x65
mov byte [rsp + 0x6d8], al
movzx eax, byte [0x141db1a30]
mov edx, 0x59
xor ecx, ecx
call fcn.14003d220
test rax, rax
je 0x1400109e1
mov rdi, rax
movups xmm0, xmmword [rsp + 0x6c9]
movups xmmword [rax + 0x49], xmm0
movaps xmm0, xmmword [rsp + 0x6c0]
movups xmmword [rax + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x680]
movaps xmm1, xmmword [rsp + 0x690]
movaps xmm2, xmmword [rsp + 0x6a0]
movaps xmm3, xmmword [rsp + 0x6b0]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x188], 1
jne 0x1400104da
mov rcx, rsi
call fcn.14003d250
mov rbx, qword [rsp + 0x190]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x59
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x59
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x198], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x168]
call fcn.14003d0b0
lea rax, [0x141d8ff60]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rcx, qword [rsp + 0xf0]
movabs rax, 0x4a0ad6c66d920f24
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.140006620
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx ecx, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
test byte [rsp + 0x50], 1
jne 0x1400109e1
lea rcx, [rsp + 0x168]
call fcn.1400042a0
mov ecx, 2
call fcn.14002e2c0
lea rax, [0x141c2dea1]
mov qword [rsp + 0x28], rax
lea rax, [0x141c2de95]
mov qword [rsp + 0x20], rax
lea rdx, [0x1400fec65]
lea r9, [0x141c2de75]
lea rdi, [rsp + 0x6e8]
mov r8d, 0x1b2f210
mov rcx, rdi
call fcn.140023170
lea rax, [0x141d9e6fd]
mov qword [rsp + 0x28], rax
lea rax, [0x141d9e6f1]
mov qword [rsp + 0x20], rax
lea rdx, [0x141c2dec1]
lea r9, [0x141d9e6d1]
lea rsi, [rsp + 0x700]
mov r8d, 0x170810
mov rcx, rsi
call fcn.140023170
lea rax, [0x141d9b90f]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0xbeff22751455cf72
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006a10
movabs rcx, 0xbed886d86b179147
xor rcx, qword [rax]
movabs rdx, 0x37fa8e2a6e79eaf9
xor rdx, qword [rax + 8]
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x170], rdx
lea rdx, [rsp + 0x168]
mov r8d, 0x10
mov rcx, rdi
call fcn.140010f50
lea rax, [0x141d94b39]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x57d54e5b017a0dd8
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.1400068e0
movabs rcx, 0x89f919851348fb32
xor rcx, qword [rax]
mov edx, 0xf3f470c1
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xd7
shr eax, 8
xor al, 0xa8
mov qword [rsp + 0x168], rcx
mov dword [rsp + 0x170], edx
mov byte [rsp + 0x174], r8b
mov byte [rsp + 0x175], al
lea rdx, [rsp + 0x168]
mov r8d, 0xe
mov rcx, rsi
call fcn.140010f50
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x160]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r14
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r15
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x158]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x630]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x628]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x620]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x618]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x610]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x608]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x600]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x640]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5f8]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5f0]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5e8]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5e0]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5d8]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5d0]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5c8]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r13
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5c0]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5b8]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5b0]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5a8]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x5a0]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x598]
call rsi
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x638]
call rsi
cmp qword [rsp + 0xb8], 0
je 0x140010953
mov r8, qword [rsp + 0xc0]
mov rcx, qword [0x141db1a00]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x590], 0
je 0x140010970
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141db1a00]
xor edx, edx
mov r8, qword [rsp + 0x670]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
add rsp, 0x718
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r13, [rsp + 0x50]
movabs rbp, 0xde00000002
test rbx, rbx
jne 0x14000ce57
jmp 0x14000ce69
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xf0], 0
je 0x1400109e1
mov r8, qword [rsp + 0xf8]
mov rcx, qword [0x141db1a00]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
ud2
call fcn.14003d1b0
lea rax, [0x141d944f9]
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rcx, qword [rsp + 0x168]
movabs rax, 0x2bb270b1d0458147
mov qword [rsp + 0x168], rax
lea rax, [rsp + 0x168]
mov rdx, qword [rsp + 0x168]
call fcn.140006880
movabs rcx, 0xbd496520f0530990
xor rcx, qword [rax]
movabs rdx, 0x6beb0023ac489716
xor rdx, qword [rax + 8]
movabs r8, 0xb0c26da07603df54
xor r8, qword [rax + 0x10]
movabs r9, 0x6ad4aa6653b4707b
xor r9, qword [rax + 0x18]
mov r10d, 0xc9aa0ea
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0x89
shr eax, 8
xor al, 0x59
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], r9
mov dword [rsp + 0x70], r10d
mov byte [rsp + 0x74], r11b
mov byte [rsp + 0x75], al
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], 0x26
mov qword [rsp + 0xb8], r12
lea rax, [0x1400040e0]
mov qword [rsp + 0xc0], rax
lea rax, [0x14005a6d8]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 2
mov qword [rsp + 0x188], 0
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], 1
lea rcx, [rsp + 0x168]
call fcn.140032db0
call fcn.14003d1b0
int3