Function at 0x14000b400
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
movabs rax, 0xd1d90640deea1676
xor esi, esi
mov qword [rbp + 0xa0], rax
movabs r14, 0xa5b89f0b6b8c1503
movabs rax, 0x28b7c7a545b9fa7a
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0xa8], rax
movabs r15, 0x7c7a43d5f57f66fd
movabs rax, 0xaba18cf270c14aa0
mov qword [rbp + 0x80], r14
mov qword [rbp + 0xb0], rax
movabs r12, 0x7f94d6a806b4fd82
movabs rax, 0x527068adcd3dde6a
mov qword [rbp + 0x88], r15
mov qword [rbp + 0xb8], rax
movabs r13, 0xe66fa662a0d8dcc4
movabs rax, 0xadf685aa48e084fb
mov qword [rbp + 0x90], r12
mov qword [rbp + 0xc0], rax
mov ecx, esi
movabs rax, 0xe4822ad0eeee38fd
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xc8], rax
movabs rax, 0xe4e64ed2df3f504c
mov qword [rbp - 0x50], rax
movabs rax, 0x3913bb370d908814
mov qword [rbp - 0x48], rax
movabs rax, 0xf10bc485c669ec89
mov qword [rbp - 0x40], rax
movabs rax, 0x8a16d4b7ce989f
mov qword [rbp - 0x38], rax
movabs rax, 0xb6bf336f8fad2a45
mov qword [rbp - 0x30], rax
movabs rax, 0xd25ac4a0d82b5ab7
mov qword [rbp - 0x28], rax
movabs rax, 0xd88b9dfea41dfc07
mov qword [rbp - 0x20], rax
movabs rax, 0x1d37ca0d53ac27bf
mov qword [rbp - 0x18], rax
movabs rax, 0xf6adaa85e04895f0
mov qword [rbp - 0x10], rax
movabs rax, 0x82e4d02aeeeefd38
mov qword [rbp - 8], rax
movzx eax, word [rbp + rcx*2 - 0x50]
mov r10, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x50], ax
and r10d, 3
jne 0x14000b5ef
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
movzx eax, word [rbp + rcx*2 - 0x4e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x4e], ax
and edx, 3
jne 0x14000b651
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
movzx eax, word [rbp + rcx*2 - 0x4c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x4c], ax
and r8d, 3
jne 0x14000b67a
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
movzx eax, word [rbp + rcx*2 - 0x4a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x4a], ax
and r9d, 3
jne 0x14000b6a4
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
jmp 0x14000b6b2
cmp rcx, 4
jne 0x14000b57f
mov eax, dword [rbp - 0x46]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x46], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x4e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x4e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x4c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x4c], ax
movzx eax, word [rbp + rcx*2 - 0x4a]
rol ax, 8
mov word [rbp + rcx*2 - 0x4a], ax
movzx eax, word [rbp + rcx*2 - 0x48]
rol ax, 8
mov word [rbp + rcx*2 - 0x48], ax
jmp 0x14000b6dc
cmp rcx, 3
jne 0x14000b5a2
mov eax, dword [rbp - 0x46]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x46], eax
movzx eax, word [rbp + rcx*2 - 0x4c]
rol ax, 8
mov word [rbp + rcx*2 - 0x4c], ax
and r8d, ecx
jmp 0x14000b68c
cmp rcx, 2
jne 0x14000b5c6
mov eax, dword [rbp - 0x46]
bswap eax
mov dword [rbp - 0x46], eax
movzx eax, word [rbp + rcx*2 - 0x4a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x4a], ax
and r9d, 3
jmp 0x14000b6b2
cmp rcx, 1
jne 0x14000b6b2
mov eax, dword [rbp - 0x46]
bswap eax
mov dword [rbp - 0x46], eax
movzx eax, word [rbp + rcx*2 - 0x48]
rol ax, 8
mov word [rbp + rcx*2 - 0x48], ax
test r10, r10
jne 0x14000b6cf
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
jmp 0x14000b6dc
test rcx, rcx
jne 0x14000b6dc
mov eax, dword [rbp - 0x46]
bswap eax
mov dword [rbp - 0x46], eax
movzx eax, word [rbp + rcx*2 - 0x46]
rol ax, 8
mov word [rbp + rcx*2 - 0x46], ax
test rdx, rdx
jne 0x14000b6f9
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
jmp 0x14000b707
cmp rcx, 0xffffffffffffffff
jne 0x14000b707
mov eax, dword [rbp - 0x46]
bswap eax
mov dword [rbp - 0x46], eax
movzx eax, word [rbp + rcx*2 - 0x44]
rol ax, 8
mov word [rbp + rcx*2 - 0x44], ax
test r8, r8
jne 0x14000b724
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
jmp 0x14000b732
cmp rcx, 0xfffffffffffffffe
jne 0x14000b732
mov eax, dword [rbp - 0x46]
bswap eax
mov dword [rbp - 0x46], eax
movzx eax, word [rbp + rcx*2 - 0x42]
rol ax, 8
mov word [rbp + rcx*2 - 0x42], ax
test r9, r9
jne 0x14000b74f
mov eax, dword [rbp - 0x4e]
bswap eax
mov dword [rbp - 0x4e], eax
jmp 0x14000b75d
cmp rcx, 0xfffffffffffffffd
jne 0x14000b75d
mov eax, dword [rbp - 0x46]
bswap eax
mov dword [rbp - 0x46], eax
add rcx, 8
cmp rcx, 8
jb 0x14000b560
movdqa xmm0, xmmword [rbp + 0x80]
mov rcx, rsi
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
movzx eax, word [rbp + rcx*2 - 0x40]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x40], ax
and edi, 3
jne 0x14000b80e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3e], ax
and edx, 3
jne 0x14000b870
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, 3
jne 0x14000b899
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jne 0x14000b8c3
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14000b8d1
cmp rcx, 4
jne 0x14000b79e
mov eax, dword [rbp - 0x36]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x36], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x3e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x3e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x3c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
movzx eax, word [rbp + rcx*2 - 0x3a]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
jmp 0x14000b8fb
cmp rcx, 3
jne 0x14000b7c1
mov eax, dword [rbp - 0x36]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3c]
rol ax, 8
mov word [rbp + rcx*2 - 0x3c], ax
and r8d, ecx
jmp 0x14000b8ab
cmp rcx, 2
jne 0x14000b7e5
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x3a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x3a], ax
and r9d, 3
jmp 0x14000b8d1
cmp rcx, 1
jne 0x14000b8d1
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x38]
rol ax, 8
mov word [rbp + rcx*2 - 0x38], ax
test rdi, rdi
jne 0x14000b8ee
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14000b8fb
test rcx, rcx
jne 0x14000b8fb
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x36]
rol ax, 8
mov word [rbp + rcx*2 - 0x36], ax
test rdx, rdx
jne 0x14000b918
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14000b926
cmp rcx, 0xffffffffffffffff
jne 0x14000b926
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x34]
rol ax, 8
mov word [rbp + rcx*2 - 0x34], ax
test r8, r8
jne 0x14000b943
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14000b951
cmp rcx, 0xfffffffffffffffe
jne 0x14000b951
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
movzx eax, word [rbp + rcx*2 - 0x32]
rol ax, 8
mov word [rbp + rcx*2 - 0x32], ax
test r9, r9
jne 0x14000b96e
mov eax, dword [rbp - 0x3e]
bswap eax
mov dword [rbp - 0x3e], eax
jmp 0x14000b97c
cmp rcx, 0xfffffffffffffffd
jne 0x14000b97c
mov eax, dword [rbp - 0x36]
bswap eax
mov dword [rbp - 0x36], eax
add rcx, 8
cmp rcx, 8
jb 0x14000b780
movdqa xmm0, xmmword [rbp - 0x40]
mov rcx, rsi
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp - 0x40], xmm0
nop
movzx eax, word [rbp + rcx*2 - 0x30]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x30], ax
and edi, 3
jne 0x14000ba2e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2e], ax
and edx, 3
jne 0x14000ba90
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
and r8d, 3
jne 0x14000bab9
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
movzx eax, word [rbp + rcx*2 - 0x2a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
and r9d, 3
jne 0x14000bae3
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14000baf1
cmp rcx, 4
jne 0x14000b9be
mov eax, dword [rbp - 0x26]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x26], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x2e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x2e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x2c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
movzx eax, word [rbp + rcx*2 - 0x2a]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
movzx eax, word [rbp + rcx*2 - 0x28]
rol ax, 8
mov word [rbp + rcx*2 - 0x28], ax
jmp 0x14000bb1b
cmp rcx, 3
jne 0x14000b9e1
mov eax, dword [rbp - 0x26]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x2c]
rol ax, 8
mov word [rbp + rcx*2 - 0x2c], ax
and r8d, ecx
jmp 0x14000bacb
cmp rcx, 2
jne 0x14000ba05
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x2a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x2a], ax
and r9d, 3
jmp 0x14000baf1
cmp rcx, 1
jne 0x14000baf1
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x28]
rol ax, 8
mov word [rbp + rcx*2 - 0x28], ax
test rdi, rdi
jne 0x14000bb0e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14000bb1b
test rcx, rcx
jne 0x14000bb1b
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x26]
rol ax, 8
mov word [rbp + rcx*2 - 0x26], ax
test rdx, rdx
jne 0x14000bb38
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14000bb46
cmp rcx, 0xffffffffffffffff
jne 0x14000bb46
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x24]
rol ax, 8
mov word [rbp + rcx*2 - 0x24], ax
test r8, r8
jne 0x14000bb63
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14000bb71
cmp rcx, 0xfffffffffffffffe
jne 0x14000bb71
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
movzx eax, word [rbp + rcx*2 - 0x22]
rol ax, 8
mov word [rbp + rcx*2 - 0x22], ax
test r9, r9
jne 0x14000bb8e
mov eax, dword [rbp - 0x2e]
bswap eax
mov dword [rbp - 0x2e], eax
jmp 0x14000bb9c
cmp rcx, 0xfffffffffffffffd
jne 0x14000bb9c
mov eax, dword [rbp - 0x26]
bswap eax
mov dword [rbp - 0x26], eax
add rcx, 8
cmp rcx, 8
jb 0x14000b9a0
movdqa xmm0, xmmword [rbp - 0x30]
mov rcx, rsi
pxor xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x30], xmm0
nop
movzx eax, word [rbp + rcx*2 - 0x20]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x20], ax
and edi, 3
jne 0x14000bc4e
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
movzx eax, word [rbp + rcx*2 - 0x1e]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x1e], ax
and edx, 3
jne 0x14000bcb0
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
movzx eax, word [rbp + rcx*2 - 0x1c]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0x1c], ax
and r8d, 3
jne 0x14000bcd9
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
movzx eax, word [rbp + rcx*2 - 0x1a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x1a], ax
and r9d, 3
jne 0x14000bd03
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
jmp 0x14000bd11
cmp rcx, 4
jne 0x14000bbde
mov eax, dword [rbp - 0x16]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 0x16], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0x1e]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0x1e], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0x1c]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0x1c], ax
movzx eax, word [rbp + rcx*2 - 0x1a]
rol ax, 8
mov word [rbp + rcx*2 - 0x1a], ax
movzx eax, word [rbp + rcx*2 - 0x18]
rol ax, 8
mov word [rbp + rcx*2 - 0x18], ax
jmp 0x14000bd3b
cmp rcx, 3
jne 0x14000bc01
mov eax, dword [rbp - 0x16]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 0x16], eax
movzx eax, word [rbp + rcx*2 - 0x1c]
rol ax, 8
mov word [rbp + rcx*2 - 0x1c], ax
and r8d, ecx
jmp 0x14000bceb
cmp rcx, 2
jne 0x14000bc25
mov eax, dword [rbp - 0x16]
bswap eax
mov dword [rbp - 0x16], eax
movzx eax, word [rbp + rcx*2 - 0x1a]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0x1a], ax
and r9d, 3
jmp 0x14000bd11
cmp rcx, 1
jne 0x14000bd11
mov eax, dword [rbp - 0x16]
bswap eax
mov dword [rbp - 0x16], eax
movzx eax, word [rbp + rcx*2 - 0x18]
rol ax, 8
mov word [rbp + rcx*2 - 0x18], ax
test rdi, rdi
jne 0x14000bd2e
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
jmp 0x14000bd3b
test rcx, rcx
jne 0x14000bd3b
mov eax, dword [rbp - 0x16]
bswap eax
mov dword [rbp - 0x16], eax
movzx eax, word [rbp + rcx*2 - 0x16]
rol ax, 8
mov word [rbp + rcx*2 - 0x16], ax
test rdx, rdx
jne 0x14000bd58
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
jmp 0x14000bd66
cmp rcx, 0xffffffffffffffff
jne 0x14000bd66
mov eax, dword [rbp - 0x16]
bswap eax
mov dword [rbp - 0x16], eax
movzx eax, word [rbp + rcx*2 - 0x14]
rol ax, 8
mov word [rbp + rcx*2 - 0x14], ax
test r8, r8
jne 0x14000bd83
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
jmp 0x14000bd91
cmp rcx, 0xfffffffffffffffe
jne 0x14000bd91
mov eax, dword [rbp - 0x16]
bswap eax
mov dword [rbp - 0x16], eax
movzx eax, word [rbp + rcx*2 - 0x12]
rol ax, 8
mov word [rbp + rcx*2 - 0x12], ax
test r9, r9
jne 0x14000bdae
mov eax, dword [rbp - 0x1e]
bswap eax
mov dword [rbp - 0x1e], eax
jmp 0x14000bdbc
cmp rcx, 0xfffffffffffffffd
jne 0x14000bdbc
mov eax, dword [rbp - 0x16]
bswap eax
mov dword [rbp - 0x16], eax
add rcx, 8
cmp rcx, 8
jb 0x14000bbc0
movdqa xmm0, xmmword [rbp + 0xb0]
mov rcx, rsi
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm0
nop
movzx eax, word [rbp + rcx*2 - 0x10]
mov rdi, rcx
rol ax, 8
mov word [rbp + rcx*2 - 0x10], ax
and edi, 3
jne 0x14000be6e
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
movzx eax, word [rbp + rcx*2 - 0xe]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rbp + rcx*2 - 0xe], ax
and edx, 3
jne 0x14000bed0
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
movzx eax, word [rbp + rcx*2 - 0xc]
lea r8, [rcx - 2]
rol ax, 8
mov word [rbp + rcx*2 - 0xc], ax
and r8d, 3
jne 0x14000bef9
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
movzx eax, word [rbp + rcx*2 - 0xa]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0xa], ax
and r9d, 3
jne 0x14000bf23
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
jmp 0x14000bf31
cmp rcx, 4
jne 0x14000bdfe
mov eax, dword [rbp - 6]
lea rdx, [rcx + 1]
bswap eax
mov dword [rbp - 6], eax
lea r8, [rcx - 2]
movzx eax, word [rbp + rcx*2 - 0xe]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rbp + rcx*2 - 0xe], ax
and r8d, 3
movzx eax, word [rbp + rcx*2 - 0xc]
and r9d, 3
rol ax, 8
mov word [rbp + rcx*2 - 0xc], ax
movzx eax, word [rbp + rcx*2 - 0xa]
rol ax, 8
mov word [rbp + rcx*2 - 0xa], ax
movzx eax, word [rbp + rcx*2 - 8]
rol ax, 8
mov word [rbp + rcx*2 - 8], ax
jmp 0x14000bf5b
cmp rcx, 3
jne 0x14000be21
mov eax, dword [rbp - 6]
lea r8, [rcx - 2]
bswap eax
mov dword [rbp - 6], eax
movzx eax, word [rbp + rcx*2 - 0xc]
rol ax, 8
mov word [rbp + rcx*2 - 0xc], ax
and r8d, ecx
jmp 0x14000bf0b
cmp rcx, 2
jne 0x14000be45
mov eax, dword [rbp - 6]
bswap eax
mov dword [rbp - 6], eax
movzx eax, word [rbp + rcx*2 - 0xa]
lea r9, [rcx - 1]
rol ax, 8
mov word [rbp + rcx*2 - 0xa], ax
and r9d, 3
jmp 0x14000bf31
cmp rcx, 1
jne 0x14000bf31
mov eax, dword [rbp - 6]
bswap eax
mov dword [rbp - 6], eax
movzx eax, word [rbp + rcx*2 - 8]
rol ax, 8
mov word [rbp + rcx*2 - 8], ax
test rdi, rdi
jne 0x14000bf4e
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
jmp 0x14000bf5b
test rcx, rcx
jne 0x14000bf5b
mov eax, dword [rbp - 6]
bswap eax
mov dword [rbp - 6], eax
movzx eax, word [rbp + rcx*2 - 6]
rol ax, 8
mov word [rbp + rcx*2 - 6], ax
test rdx, rdx
jne 0x14000bf78
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
jmp 0x14000bf86
cmp rcx, 0xffffffffffffffff
jne 0x14000bf86
mov eax, dword [rbp - 6]
bswap eax
mov dword [rbp - 6], eax
movzx eax, word [rbp + rcx*2 - 4]
rol ax, 8
mov word [rbp + rcx*2 - 4], ax
test r8, r8
jne 0x14000bfa3
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
jmp 0x14000bfb1
cmp rcx, 0xfffffffffffffffe
jne 0x14000bfb1
mov eax, dword [rbp - 6]
bswap eax
mov dword [rbp - 6], eax
movzx eax, word [rbp + rcx*2 - 2]
rol ax, 8
mov word [rbp + rcx*2 - 2], ax
test r9, r9
jne 0x14000bfce
mov eax, dword [rbp - 0xe]
bswap eax
mov dword [rbp - 0xe], eax
jmp 0x14000bfdc
cmp rcx, 0xfffffffffffffffd
jne 0x14000bfdc
mov eax, dword [rbp - 6]
bswap eax
mov dword [rbp - 6], eax
add rcx, 8
cmp rcx, 8
jb 0x14000bde0
movdqa xmm0, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14000c087
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14000c087
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000c082
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000c060
cmp r8d, 0xe971d8a3
je 0x14000c08c
test r9d, r9d
jne 0x14000c040
mov rax, qword [rax]
jmp 0x14000c010
mov ecx, dword [rdi + 0x24]
lea r8, [rbp + 0x120]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp - 0x50]
add rax, r10
mov rcx, 0xffffffff80000002
call rax
movabs rax, 0xddf67eeded1f4570
mov qword [rbp], r14
mov qword [rsp + 0x30], rax
movabs r14, 0xf17fc1b2c674f498
mov qword [rbp + 8], r15
movabs rax, 0x933bb240b9c9812
movabs r15, 0x6fe662a6d8a0c4dc
mov qword [rsp + 0x38], rax
mov dword [rbp + 0x110], esi
mov rcx, rsi
mov dword [rbp + 0x118], 4
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r13
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r15
nop word [rax + rax]
movzx eax, word [rsp + rcx*2 + 0x30]
mov rdi, rcx
rol ax, 8
mov word [rsp + rcx*2 + 0x30], ax
and edi, 3
jne 0x14000c1ba
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
movzx eax, word [rsp + rcx*2 + 0x32]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x32], ax
and edx, 3
jne 0x14000c21e
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
movzx eax, word [rsp + rcx*2 + 0x34]
lea r8, [rcx - 2]
rol ax, 8
mov word [rsp + rcx*2 + 0x34], ax
and r8d, 3
jne 0x14000c249
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
movzx eax, word [rsp + rcx*2 + 0x36]
lea r9, [rcx - 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x36], ax
and r9d, 3
jne 0x14000c275
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
jmp 0x14000c285
cmp rcx, 4
jne 0x14000c144
mov eax, dword [rsp + 0x3a]
lea rdx, [rcx + 1]
bswap eax
mov dword [rsp + 0x3a], eax
lea r8, [rcx - 2]
movzx eax, word [rsp + rcx*2 + 0x32]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rsp + rcx*2 + 0x32], ax
and r8d, 3
movzx eax, word [rsp + rcx*2 + 0x34]
and r9d, 3
rol ax, 8
mov word [rsp + rcx*2 + 0x34], ax
movzx eax, word [rsp + rcx*2 + 0x36]
rol ax, 8
mov word [rsp + rcx*2 + 0x36], ax
movzx eax, word [rsp + rcx*2 + 0x38]
rol ax, 8
mov word [rsp + rcx*2 + 0x38], ax
jmp 0x14000c2b3
cmp rcx, 3
jne 0x14000c169
mov eax, dword [rsp + 0x3a]
lea r8, [rcx - 2]
bswap eax
mov dword [rsp + 0x3a], eax
movzx eax, word [rsp + rcx*2 + 0x34]
rol ax, 8
mov word [rsp + rcx*2 + 0x34], ax
and r8d, ecx
jmp 0x14000c25d
cmp rcx, 2
jne 0x14000c18f
mov eax, dword [rsp + 0x3a]
bswap eax
mov dword [rsp + 0x3a], eax
movzx eax, word [rsp + rcx*2 + 0x36]
lea r9, [rcx - 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x36], ax
and r9d, 3
jmp 0x14000c285
cmp rcx, 1
jne 0x14000c285
mov eax, dword [rsp + 0x3a]
bswap eax
mov dword [rsp + 0x3a], eax
movzx eax, word [rsp + rcx*2 + 0x38]
rol ax, 8
mov word [rsp + rcx*2 + 0x38], ax
test rdi, rdi
jne 0x14000c2a4
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
jmp 0x14000c2b3
test rcx, rcx
jne 0x14000c2b3
mov eax, dword [rsp + 0x3a]
bswap eax
mov dword [rsp + 0x3a], eax
movzx eax, word [rsp + rcx*2 + 0x3a]
rol ax, 8
mov word [rsp + rcx*2 + 0x3a], ax
test rdx, rdx
jne 0x14000c2d2
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
jmp 0x14000c2e2
cmp rcx, 0xffffffffffffffff
jne 0x14000c2e2
mov eax, dword [rsp + 0x3a]
bswap eax
mov dword [rsp + 0x3a], eax
movzx eax, word [rsp + rcx*2 + 0x3c]
rol ax, 8
mov word [rsp + rcx*2 + 0x3c], ax
test r8, r8
jne 0x14000c301
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
jmp 0x14000c311
cmp rcx, 0xfffffffffffffffe
jne 0x14000c311
mov eax, dword [rsp + 0x3a]
bswap eax
mov dword [rsp + 0x3a], eax
movzx eax, word [rsp + rcx*2 + 0x3e]
rol ax, 8
mov word [rsp + rcx*2 + 0x3e], ax
test r9, r9
jne 0x14000c330
mov eax, dword [rsp + 0x32]
bswap eax
mov dword [rsp + 0x32], eax
jmp 0x14000c340
cmp rcx, 0xfffffffffffffffd
jne 0x14000c340
mov eax, dword [rsp + 0x3a]
bswap eax
mov dword [rsp + 0x3a], eax
add rcx, 8
cmp rcx, 8
jb 0x14000c120
movdqa xmm0, xmmword [rsp + 0x30]
mov rcx, rsi
pxor xmm0, xmmword [rbp]
movdqa xmmword [rsp + 0x30], xmm0
movzx eax, word [rsp + rcx*2 + 0x40]
mov rdi, rcx
rol ax, 8
mov word [rsp + rcx*2 + 0x40], ax
and edi, 3
jne 0x14000c3fc
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
movzx eax, word [rsp + rcx*2 + 0x42]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x42], ax
and edx, 3
jne 0x14000c460
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
movzx eax, word [rsp + rcx*2 + 0x44]
lea r8, [rcx - 2]
rol ax, 8
mov word [rsp + rcx*2 + 0x44], ax
and r8d, 3
jne 0x14000c48b
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
movzx eax, word [rsp + rcx*2 + 0x46]
lea r9, [rcx - 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x46], ax
and r9d, 3
jne 0x14000c4b7
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
jmp 0x14000c4c7
cmp rcx, 4
jne 0x14000c386
mov eax, dword [rsp + 0x4a]
lea rdx, [rcx + 1]
bswap eax
mov dword [rsp + 0x4a], eax
lea r8, [rcx - 2]
movzx eax, word [rsp + rcx*2 + 0x42]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rsp + rcx*2 + 0x42], ax
and r8d, 3
movzx eax, word [rsp + rcx*2 + 0x44]
and r9d, 3
rol ax, 8
mov word [rsp + rcx*2 + 0x44], ax
movzx eax, word [rsp + rcx*2 + 0x46]
rol ax, 8
mov word [rsp + rcx*2 + 0x46], ax
movzx eax, word [rsp + rcx*2 + 0x48]
rol ax, 8
mov word [rsp + rcx*2 + 0x48], ax
jmp 0x14000c4f5
cmp rcx, 3
jne 0x14000c3ab
mov eax, dword [rsp + 0x4a]
lea r8, [rcx - 2]
bswap eax
mov dword [rsp + 0x4a], eax
movzx eax, word [rsp + rcx*2 + 0x44]
rol ax, 8
mov word [rsp + rcx*2 + 0x44], ax
and r8d, ecx
jmp 0x14000c49f
cmp rcx, 2
jne 0x14000c3d1
mov eax, dword [rsp + 0x4a]
bswap eax
mov dword [rsp + 0x4a], eax
movzx eax, word [rsp + rcx*2 + 0x46]
lea r9, [rcx - 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x46], ax
and r9d, 3
jmp 0x14000c4c7
cmp rcx, 1
jne 0x14000c4c7
mov eax, dword [rsp + 0x4a]
bswap eax
mov dword [rsp + 0x4a], eax
movzx eax, word [rsp + rcx*2 + 0x48]
rol ax, 8
mov word [rsp + rcx*2 + 0x48], ax
test rdi, rdi
jne 0x14000c4e6
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
jmp 0x14000c4f5
test rcx, rcx
jne 0x14000c4f5
mov eax, dword [rsp + 0x4a]
bswap eax
mov dword [rsp + 0x4a], eax
movzx eax, word [rsp + rcx*2 + 0x4a]
rol ax, 8
mov word [rsp + rcx*2 + 0x4a], ax
test rdx, rdx
jne 0x14000c514
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
jmp 0x14000c524
cmp rcx, 0xffffffffffffffff
jne 0x14000c524
mov eax, dword [rsp + 0x4a]
bswap eax
mov dword [rsp + 0x4a], eax
movzx eax, word [rsp + rcx*2 + 0x4c]
rol ax, 8
mov word [rsp + rcx*2 + 0x4c], ax
test r8, r8
jne 0x14000c543
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
jmp 0x14000c553
cmp rcx, 0xfffffffffffffffe
jne 0x14000c553
mov eax, dword [rsp + 0x4a]
bswap eax
mov dword [rsp + 0x4a], eax
movzx eax, word [rsp + rcx*2 + 0x4e]
rol ax, 8
mov word [rsp + rcx*2 + 0x4e], ax
test r9, r9
jne 0x14000c572
mov eax, dword [rsp + 0x42]
bswap eax
mov dword [rsp + 0x42], eax
jmp 0x14000c582
cmp rcx, 0xfffffffffffffffd
jne 0x14000c582
mov eax, dword [rsp + 0x4a]
bswap eax
mov dword [rsp + 0x4a], eax
add rcx, 8
cmp rcx, 8
jb 0x14000c362
movdqa xmm0, xmmword [rbp + 0x10]
lea rax, [rbp + 0x118]
pxor xmm0, xmmword [rsp + 0x40]
lea rdx, [rsp + 0x30]
mov rcx, qword [rbp + 0x120]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rax, [rbp + 0x110]
movdqa xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
movabs r12, 0xf132c1b2c674f498
movabs r13, 0x6fe662a6b3a0a5af
test eax, eax
jne 0x14000cb22
cmp dword [rbp + 0x110], 3
jne 0x14000cb22
movabs rax, 0xa5b89f0b6b8c1503
mov qword [rsp + 0x60], r12
mov qword [rbp + 0x20], rax
mov rcx, rsi
movabs rax, 0x7c7a43d5f57f66fd
mov qword [rsp + 0x68], r13
mov qword [rbp + 0x28], rax
movabs rax, 0x7f94d6a806b4fd82
mov qword [rbp + 0x30], rax
movabs rax, 0xe66fa662a0d8dcc4
mov qword [rbp + 0x38], rax
movabs rax, 0xddf67eeded1f4570
mov qword [rsp + 0x50], rax
movabs rax, 0x933bb240b9c9812
mov qword [rsp + 0x58], rax
nop dword [rax]
movzx eax, word [rsp + rcx*2 + 0x50]
mov rdi, rcx
rol ax, 8
mov word [rsp + rcx*2 + 0x50], ax
and edi, 3
jne 0x14000c6fa
mov eax, dword [rsp + 0x52]
bswap eax
mov dword [rsp + 0x52], eax
movzx eax, word [rsp + rcx*2 + 0x52]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x52], ax
and edx, 3
jne 0x14000c75e
mov eax, dword [rsp + 0x52]
bswap eax
mov dword [rsp + 0x52], eax
movzx eax, word [rsp + rcx*2 + 0x54]
lea r8, [rcx - 2]
rol ax, 8
mov word [rsp + rcx*2 + 0x54], ax
and r8d, 3
jne 0x14000c789
cmp rcx, 4
jne 0x14000c684
mov eax, dword [rsp + 0x5a]
lea rdx, [rcx + 1]
bswap eax
mov dword [rsp + 0x5a], eax
lea r8, [rcx - 2]
movzx eax, word [rsp + rcx*2 + 0x52]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rsp + rcx*2 + 0x52], ax
and r8d, 3
movzx eax, word [rsp + rcx*2 + 0x54]
and r9d, 3
rol ax, 8
mov word [rsp + rcx*2 + 0x54], ax
movzx eax, word [rsp + rcx*2 + 0x56]
rol ax, 8
mov word [rsp + rcx*2 + 0x56], ax
movzx eax, word [rsp + rcx*2 + 0x58]
rol ax, 8
mov word [rsp + rcx*2 + 0x58], ax
jmp 0x14000c7f3
cmp rcx, 3
jne 0x14000c6a9
movabs rax, 0xa5b89f0b6b8c1503
mov dword [rbp + 0x110], 3
mov qword [rbp + 0x40], rax
mov rcx, rsi
movabs rax, 0x7c7a43d5f57f66fd
mov qword [rbp - 0x80], r14
mov qword [rbp + 0x48], rax
movabs rax, 0x7f94d6a806b4fd82
mov qword [rbp + 0x50], rax
movabs rax, 0xe66fa662a0d8dcc4
mov qword [rbp + 0x58], rax
movabs rax, 0xddf67eeded1f4570
mov qword [rsp + 0x70], rax
movabs rax, 0x933bb240b9c9812
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], r15
nop dword [rax]
movzx eax, word [rsp + rcx*2 + 0x70]
mov rdi, rcx
rol ax, 8
mov word [rsp + rcx*2 + 0x70], ax
and edi, 3
jne 0x14000cc2a
mov eax, dword [rsp + 0x72]
bswap eax
mov dword [rsp + 0x72], eax
movzx eax, word [rsp + rcx*2 + 0x72]
lea rdx, [rcx + 1]
rol ax, 8
mov word [rsp + rcx*2 + 0x72], ax
and edx, 3
jne 0x14000cc8e
mov eax, dword [rsp + 0x72]
bswap eax
mov dword [rsp + 0x72], eax
movzx eax, word [rsp + rcx*2 + 0x74]
lea r8, [rcx - 2]
rol ax, 8
mov word [rsp + rcx*2 + 0x74], ax
and r8d, 3
jne 0x14000ccb9
cmp rcx, 4
jne 0x14000cbb4
mov eax, dword [rsp + 0x7a]
lea rdx, [rcx + 1]
bswap eax
mov dword [rsp + 0x7a], eax
lea r8, [rcx - 2]
movzx eax, word [rsp + rcx*2 + 0x72]
lea r9, [rcx - 1]
rol ax, 8
and edx, 3
mov word [rsp + rcx*2 + 0x72], ax
and r8d, 3
movzx eax, word [rsp + rcx*2 + 0x74]
and r9d, 3
rol ax, 8
mov word [rsp + rcx*2 + 0x74], ax
movzx eax, word [rsp + rcx*2 + 0x76]
rol ax, 8
mov word [rsp + rcx*2 + 0x76], ax
movzx eax, word [rsp + rcx*2 + 0x78]
rol ax, 8
mov word [rsp + rcx*2 + 0x78], ax
jmp 0x14000cd23
cmp rcx, 3
jne 0x14000cbd9
movzx eax, word [rsp + rcx*2 + 0x7a]
rol ax, 8
mov word [rsp + rcx*2 + 0x7a], ax
test rdx, rdx
jne 0x14000cd42