Function at 0x2b365d5c0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1a8
mov eax, 0x500
movdqa xmm0, xmmword [str.ZwwtxzoZu]
movabs rdx, 0x726f7275527f755a
mov word [rsp + 0x9e], ax
mov rax, qword [0x2b3757230]
mov dword [rsp + 0x180], 0x1b
mov qword [rsp + 0x170], rax
movabs rax, 0x7e6f7a787477775a
mov qword [rsp + 0x184], rax
movabs rax, 0x7f72487e6172777a
mov qword [rsp + 0x18c], rdx
mov dword [rsp + 0x94], 0
mov qword [rsp + 0x194], rax
xor eax, eax
mov qword [rsp + 0xa0], 0
mov dword [rsp + 0x9a], 0
mov byte [rsp + 0x178], 0
mov byte [rsp + 0x19c], 0
movaps xmmword [rsp + 0x160], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x184]
mov ecx, dword [rsp + 0x180]
xor edx, ecx
mov byte [rsp + rax + 0x184], dl
add rax, 1
cmp rax, 0x18
jne 0x2b365d678
mov byte [rsp + 0x19c], 0
lea r14, [rsp + 0x144]
movq xmm0, qword [0x2b37571c0]
lea r13, [rsp + 0x140]
mov dword [rsp + 0x140], 0x79
mov edi, dword [rsp + 0x140]
mov r10d, dword [rsp + 0x140]
mov r11d, dword [rsp + 0x140]
mov byte [rsp + 0xbc], 0
mov esi, dword [rsp + 0x140]
mov ebp, dword [rsp + 0x140]
mov r12d, dword [rsp + 0x140]
add r11d, 2
add r10d, 1
mov r8d, dword [rsp + 0x140]
add ebp, 4
add esi, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x140]
add r8d, 6
add r12d, 5
movzx esi, sil
movzx r8d, r8b
mov r9d, dword [rsp + 0x140]
mov ebx, dword [rsp + 0x140]
add eax, 7
mov edx, dword [rsp + 0x140]
mov ecx, dword [rsp + 0x140]
movzx eax, al
add r9d, 8
add ebx, 9
shl rax, 8
xor r9d, 0x2e
add edx, 0xa
xor ebx, 0x64
or rax, r8
movzx r8d, r12b
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
or rax, r8
movzx r8d, bpl
shl edx, 0x10
lea r12, [rsp + 0x184]
shl rax, 8
shl ecx, 0x18
or rax, r8
movzx r8d, dil
shl rax, 8
or rax, rsi
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r8
movq xmm2, rax
xor eax, eax
mov al, r9b
pxor xmm2, xmm0
movq qword [rsp + 0x144], xmm2
mov ah, bl
movq qword [rsp + 0xb0], xmm2
movzx eax, ax
or eax, edx
or eax, ecx
mov rcx, r14
mov dword [rsp + 0x14c], eax
mov dword [rsp + 0xb8], eax
mov byte [rsp + 0x150], 0
movzx eax, byte [rsp + 0x144]
mov edx, dword [rsp + 0x140]
xor eax, edx
mov byte [rsp + 0x144], al
movzx edx, byte [rsp + 0x145]
mov eax, dword [rsp + 0x140]
add eax, 1
xor eax, edx
mov byte [rsp + 0x145], al
movzx edx, byte [rsp + 0x146]
mov eax, dword [rsp + 0x140]
add eax, 2
xor eax, edx
mov byte [rsp + 0x146], al
movzx edx, byte [rsp + 0x147]
mov eax, dword [rsp + 0x140]
add eax, 3
xor eax, edx
mov byte [rsp + 0x147], al
movzx edx, byte [rsp + 0x148]
mov eax, dword [rsp + 0x140]
add eax, 4
xor eax, edx
mov byte [rsp + 0x148], al
movzx edx, byte [rsp + 0x149]
mov eax, dword [rsp + 0x140]
add eax, 5
xor eax, edx
mov byte [rsp + 0x149], al
movzx edx, byte [rsp + 0x14a]
mov eax, dword [rsp + 0x140]
add eax, 6
xor eax, edx
mov byte [rsp + 0x14a], al
movzx edx, byte [rsp + 0x14b]
mov eax, dword [rsp + 0x140]
add eax, 7
xor eax, edx
mov byte [rsp + 0x14b], al
movzx edx, byte [rsp + 0x14c]
mov eax, dword [rsp + 0x140]
add eax, 8
xor eax, edx
mov byte [rsp + 0x14c], al
movzx edx, byte [rsp + 0x14d]
mov eax, dword [rsp + 0x140]
add eax, 9
xor eax, edx
mov byte [rsp + 0x14d], al
movzx edx, byte [rsp + 0x14e]
mov eax, dword [rsp + 0x140]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x14e], al
movzx edx, byte [rsp + 0x14f]
mov eax, dword [rsp + 0x140]
add eax, 0xb
xor eax, edx
mov rdx, r12
mov byte [rsp + 0x14f], al
mov byte [rsp + 0x150], 0
call fcn.2b3657510
lea rdx, [rsp + 0xa0]
mov dword [rsp + 0x48], 0
lea rcx, [rsp + 0x9a]
mov qword [rsp + 0x50], rdx
mov r9d, 0x220
mov r8d, 0x20
mov edx, 2
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
test eax, eax
jne 0x2b365e438
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov dword [rsp + 0x180], 0x2a
mov byte [rsp + 0xcc], 0
mov qword [rsp + 0xc0], rax
movabs rax, 0x6f5e594b665e4f6d
mov qword [rsp + 0x184], rax
mov dword [rsp + 0x18c], 0x58455858
mov byte [rsp + 0x190], 0
movzx eax, byte [rsp + 0x184]
mov edx, dword [rsp + 0x180]
mov dword [rsp + 0xc8], 0x58455858
xor eax, edx
mov byte [rsp + 0x184], al
movzx eax, byte [rsp + 0x185]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x185], al
movzx eax, byte [rsp + 0x186]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x186], al
movzx eax, byte [rsp + 0x187]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x187], al
movzx eax, byte [rsp + 0x188]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x188], al
movzx eax, byte [rsp + 0x189]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x189], al
movzx eax, byte [rsp + 0x18a]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18a], al
movzx eax, byte [rsp + 0x18b]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18b], al
movzx eax, byte [rsp + 0x18c]
mov edx, dword [rsp + 0x180]
mov byte [rsp + 0xdc], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x18c], al
movzx eax, byte [rsp + 0x18d]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18d], al
movzx eax, byte [rsp + 0x18e]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18e], al
movzx eax, byte [rsp + 0x18f]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18f], al
mov byte [rsp + 0x190], 0
mov dword [rsp + 0x140], 0x64
mov r8d, dword [rsp + 0x140]
mov r10d, dword [rsp + 0x140]
mov r11d, dword [rsp + 0x140]
mov esi, dword [rsp + 0x140]
mov edi, dword [rsp + 0x140]
movzx r8d, r8b
mov ebp, dword [rsp + 0x140]
add r11d, 2
add r10d, 1
mov r15d, dword [rsp + 0x140]
add edi, 4
add esi, 3
movzx r11d, r11b
movzx r10d, r10b
add r15d, 6
add ebp, 5
movzx edi, dil
movzx esi, sil
mov eax, dword [rsp + 0x140]
movzx r15d, r15b
movzx ebp, bpl
mov r9d, dword [rsp + 0x140]
mov ebx, dword [rsp + 0x140]
mov edx, dword [rsp + 0x140]
add eax, 7
mov ecx, dword [rsp + 0x140]
movzx eax, al
shl rax, 8
or rax, r15
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r8
add r9d, 8
add ebx, 9
add edx, 0xa
xor r9d, 0x2e
movq xmm3, rax
xor eax, eax
xor ebx, 0x64
mov al, r9b
xor edx, 0x6c
pxor xmm3, xmm0
add ecx, 0xb
mov ah, bl
movzx edx, dl
xor ecx, 0x6c
movq qword [rsp + 0x144], xmm3
shl edx, 0x10
movzx eax, ax
shl ecx, 0x18
movq qword [rsp + 0xd0], xmm3
or eax, edx
or eax, ecx
mov rcx, r14
mov dword [rsp + 0xd8], eax
mov dword [rsp + 0x14c], eax
mov byte [rsp + 0x150], 0
movzx eax, byte [rsp + 0x144]
mov edx, dword [rsp + 0x140]
xor eax, edx
mov byte [rsp + 0x144], al
movzx edx, byte [rsp + 0x145]
mov eax, dword [rsp + 0x140]
add eax, 1
xor eax, edx
mov byte [rsp + 0x145], al
movzx edx, byte [rsp + 0x146]
mov eax, dword [rsp + 0x140]
add eax, 2
xor eax, edx
mov byte [rsp + 0x146], al
movzx edx, byte [rsp + 0x147]
mov eax, dword [rsp + 0x140]
add eax, 3
xor eax, edx
mov byte [rsp + 0x147], al
movzx edx, byte [rsp + 0x148]
mov eax, dword [rsp + 0x140]
add eax, 4
xor eax, edx
mov byte [rsp + 0x148], al
movzx edx, byte [rsp + 0x149]
mov eax, dword [rsp + 0x140]
add eax, 5
xor eax, edx
mov byte [rsp + 0x149], al
movzx edx, byte [rsp + 0x14a]
mov eax, dword [rsp + 0x140]
add eax, 6
xor eax, edx
mov byte [rsp + 0x14a], al
movzx edx, byte [rsp + 0x14b]
mov eax, dword [rsp + 0x140]
add eax, 7
xor eax, edx
mov byte [rsp + 0x14b], al
movzx edx, byte [rsp + 0x14c]
mov eax, dword [rsp + 0x140]
add eax, 8
xor eax, edx
mov byte [rsp + 0x14c], al
movzx edx, byte [rsp + 0x14d]
mov eax, dword [rsp + 0x140]
add eax, 9
xor eax, edx
mov byte [rsp + 0x14d], al
movzx edx, byte [rsp + 0x14e]
mov eax, dword [rsp + 0x140]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x14e], al
movzx edx, byte [rsp + 0x14f]
mov eax, dword [rsp + 0x140]
add eax, 0xb
xor eax, edx
mov rdx, r12
mov byte [rsp + 0x14f], al
mov byte [rsp + 0x150], 0
call fcn.2b3657510
call rax
mov r14, qword [rsp + 0xa0]
mov ebx, eax
test r14, r14
je 0x2b365dff4
movabs rax, 0x6b705a6c6c794d
mov byte [rsp + 0xec], 0
mov rcx, r12
mov qword [rsp + 0x140], rax
movzx eax, byte [rsp + 0x140]
mov dword [rsp + 0xe8], 0x76767e34
sub eax, 7
mov byte [rsp + 0x140], al
movzx eax, byte [rsp + 0x141]
sub eax, 7
mov byte [rsp + 0x141], al
movzx eax, byte [rsp + 0x142]
sub eax, 7
mov byte [rsp + 0x142], al
movzx eax, byte [rsp + 0x143]
sub eax, 7
mov byte [rsp + 0x143], al
movzx eax, byte [rsp + 0x144]
sub eax, 7
mov byte [rsp + 0x144], al
movzx eax, byte [rsp + 0x145]
sub eax, 7
mov byte [rsp + 0x145], al
movzx eax, byte [rsp + 0x146]
sub eax, 7
mov byte [rsp + 0x146], al
mov rax, qword [str._ljs__LocalAllBL_GLE]
mov dword [rsp + 0x180], 0x1a
mov qword [rsp + 0xe0], rax
movabs rax, 0x2829736a7b6c7e5b
mov qword [rsp + 0x184], rax
mov dword [rsp + 0x18c], 0x76767e34
mov byte [rsp + 0x190], 0
movzx eax, byte [rsp + 0x184]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x184], al
movzx eax, byte [rsp + 0x185]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x185], al
movzx eax, byte [rsp + 0x186]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x186], al
movzx eax, byte [rsp + 0x187]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x187], al
movzx eax, byte [rsp + 0x188]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x188], al
movzx eax, byte [rsp + 0x189]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x189], al
movzx eax, byte [rsp + 0x18a]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18a], al
movzx eax, byte [rsp + 0x18b]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18b], al
movzx eax, byte [rsp + 0x18c]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18c], al
movzx eax, byte [rsp + 0x18d]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18d], al
movzx eax, byte [rsp + 0x18e]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18e], al
movzx eax, byte [rsp + 0x18f]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov rdx, r13
mov byte [rsp + 0x18f], al
mov byte [rsp + 0x190], 0
call fcn.2b3657510
mov rcx, r14
call rax
mov qword [rsp + 0xa0], 0
test ebx, ebx
jne 0x2b365eaa4
mov qword [rsp + 0x88], 0
mov dword [rsp + 0x180], 0x6c
mov eax, dword [rsp + 0x180]
mov r15d, dword [rsp + 0x180]
mov r11d, dword [rsp + 0x180]
mov byte [rsp + 0x154], 0
mov ebx, dword [rsp + 0x180]
mov dword [rsp + 0x84], eax
mov esi, dword [rsp + 0x180]
add r11d, 2
add r15d, 1
mov edi, dword [rsp + 0x180]
mov ebp, dword [rsp + 0x180]
add ebx, 3
movzx r11d, r11b
movzx r15d, r15b
mov eax, dword [rsp + 0x180]
add edi, 5
add esi, 4
movzx ebx, bl
mov ecx, dword [rsp + 0x180]
add ebp, 6
movzx edi, dil
movzx esi, sil
mov r14d, dword [rsp + 0x180]
add eax, 7
movzx ebp, bpl
mov dword [rsp + 0x80], ecx
mov ecx, dword [rsp + 0x180]
movzx eax, al
shl rax, 8
add r14d, 9
mov dword [rsp + 0x60], ecx
mov ecx, dword [rsp + 0x180]
or rax, rbp
movzx r14d, r14b
mov r8d, dword [rsp + 0x180]
mov r9d, dword [rsp + 0x180]
shl rax, 8
mov r10d, dword [rsp + 0x180]
or rax, rdi
add ecx, 0xb
mov r13d, dword [rsp + 0x180]
shl rax, 8
add r9d, 0xd
add r8d, 0xc
movzx ecx, cl
or rax, rsi
add r13d, 0xf
add r10d, 0xe
movzx r9d, r9b
shl rax, 8
movzx r13d, r13b
movzx r10d, r10b
movzx r8d, r8b
mov edx, dword [rsp + 0x180]
or rax, rbx
shl r13, 8
shl rax, 8
or r13, r10
mov dword [rsp + 0x7c], edx
mov edx, dword [rsp + 0x180]
or rax, r11
shl r13, 8
shl rax, 8
or r13, r9
mov dword [rsp + 0x78], edx
mov edx, dword [rsp + 0x180]
or rax, r15
shl rax, 8
mov dword [rsp + 0x74], edx
mov edx, dword [rsp + 0x180]
mov dword [rsp + 0x70], edx
movzx edx, byte [rsp + 0x80]
add edx, 8
mov byte [rsp + 0x80], dl
movzx edx, byte [rsp + 0x60]
movzx r11d, byte [rsp + 0x84]
movzx edi, byte [rsp + 0x7c]
add edx, 0xa
shl r13, 8
movzx esi, byte [rsp + 0x78]
movzx ebx, byte [rsp + 0x70]
or r13, r8
movzx edx, dl
or rax, r11
shl r13, 8
mov qword [rsp + 0x60], rax
xor eax, eax
or r13, rcx
lea ecx, [rbx + 0x13]
shl r13, 8
xor ecx, 0x70
or r13, rdx
movzx edx, byte [rsp + 0x80]
shl ecx, 0x18
shl r13, 8
or r13, r14
shl r13, 8
or r13, rdx
lea edx, [rdi + 0x10]
movzx edi, byte [rsp + 0x74]
xor edx, 0x73
mov qword [rsp + 0x68], r13
movdqa xmm0, xmmword [rsp + 0x60]
mov al, dl
lea edx, [rsi + 0x11]
pxor xmm0, xmmword [str.CheckTokenMember7]
xor edx, 0x68
mov ah, dl
lea edx, [rdi + 0x12]
movups xmmword [rsp + 0x184], xmm0
xor edx, 0x69
movzx eax, ax
movaps xmmword [rsp + 0x140], xmm0
movzx edx, dl
shl edx, 0x10
or eax, edx
or eax, ecx
mov dword [rsp + 0x194], eax
mov byte [rsp + 0x198], 0
mov dword [rsp + 0x150], eax
xor eax, eax
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x184]
mov edx, dword [rsp + 0x180]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x184], dl
add rax, 1
cmp rax, 0x14
jne 0x2b365e248
mov rax, qword [0x2b3757210]
mov byte [rsp + 0x198], 0
lea r13, [rsp + 0x124]
mov dword [rsp + 0x120], 0x76
mov rcx, r13
mov qword [rsp + 0xf0], rax
movabs rax, 0x44451f0617001237
mov qword [rsp + 0x124], rax
mov dword [rsp + 0x12c], 0x1a1a1258
mov byte [rsp + 0x130], 0
movzx eax, byte [rsp + 0x124]
mov edx, dword [rsp + 0x120]
mov byte [rsp + 0xfc], 0
mov dword [rsp + 0xf8], 0x1a1a1258
xor eax, edx
mov byte [rsp + 0x124], al
movzx eax, byte [rsp + 0x125]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x125], al
movzx eax, byte [rsp + 0x126]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x126], al
movzx eax, byte [rsp + 0x127]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x127], al
movzx eax, byte [rsp + 0x128]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x128], al
movzx eax, byte [rsp + 0x129]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x129], al
movzx eax, byte [rsp + 0x12a]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x12a], al
movzx eax, byte [rsp + 0x12b]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x12b], al
movzx eax, byte [rsp + 0x12c]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x12c], al
movzx eax, byte [rsp + 0x12d]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x12d], al
movzx eax, byte [rsp + 0x12e]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x12e], al
movzx eax, byte [rsp + 0x12f]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov rdx, r12
mov byte [rsp + 0x12f], al
mov byte [rsp + 0x130], 0
call fcn.2b3657510
xor ecx, ecx
mov rdx, qword [rsp + 0x88]
lea r8, [rsp + 0x94]
call rax
test eax, eax
je 0x2b365e450
mov eax, dword [rsp + 0x94]
add rsp, 0x1a8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x88], rax
jmp 0x2b365e008
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov dword [rsp + 0x180], 0x2a
mov byte [rsp + 0x10c], 0
mov qword [rsp + 0x100], rax
movabs rax, 0x6f5e594b665e4f6d
mov qword [rsp + 0x184], rax
mov dword [rsp + 0x18c], 0x58455858
mov byte [rsp + 0x190], 0
movzx eax, byte [rsp + 0x184]
mov edx, dword [rsp + 0x180]
mov dword [rsp + 0x108], 0x58455858
xor eax, edx
mov byte [rsp + 0x184], al
movzx eax, byte [rsp + 0x185]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x185], al
movzx eax, byte [rsp + 0x186]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x186], al
movzx eax, byte [rsp + 0x187]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x187], al
movzx eax, byte [rsp + 0x188]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x188], al
movzx eax, byte [rsp + 0x189]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x189], al
movzx eax, byte [rsp + 0x18a]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18a], al
movzx eax, byte [rsp + 0x18b]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18b], al
movzx eax, byte [rsp + 0x18c]
mov edx, dword [rsp + 0x180]
mov byte [rsp + 0x11c], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x18c], al
movzx eax, byte [rsp + 0x18d]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18d], al
movzx eax, byte [rsp + 0x18e]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18e], al
movzx eax, byte [rsp + 0x18f]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18f], al
mov byte [rsp + 0x190], 0
mov dword [rsp + 0x120], 0x64
mov r8d, dword [rsp + 0x120]
mov r10d, dword [rsp + 0x120]
mov r11d, dword [rsp + 0x120]
mov esi, dword [rsp + 0x120]
mov edi, dword [rsp + 0x120]
movzx r8d, r8b
mov ebp, dword [rsp + 0x120]
add r11d, 2
add r10d, 1
mov r14d, dword [rsp + 0x120]
add edi, 4
add esi, 3
movzx r11d, r11b
movzx r10d, r10b
add r14d, 6
add ebp, 5
movzx edi, dil
movzx esi, sil
mov eax, dword [rsp + 0x120]
movzx r14d, r14b
movzx ebp, bpl
mov r9d, dword [rsp + 0x120]
mov ebx, dword [rsp + 0x120]
mov edx, dword [rsp + 0x120]
add eax, 7
mov ecx, dword [rsp + 0x120]
movzx eax, al
shl rax, 8
or rax, r14
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r8
add r9d, 8
add ebx, 9
add edx, 0xa
xor r9d, 0x2e
movq xmm4, rax
xor eax, eax
xor ebx, 0x64
mov al, r9b
xor edx, 0x6c
pxor xmm4, xmm0
add ecx, 0xb
mov ah, bl
movzx edx, dl
xor ecx, 0x6c
movq qword [rsp + 0x124], xmm4
shl edx, 0x10
movzx eax, ax
shl ecx, 0x18
movq qword [rsp + 0x110], xmm4
or eax, edx
or eax, ecx
mov rcx, r13
mov dword [rsp + 0x118], eax
mov dword [rsp + 0x12c], eax
mov byte [rsp + 0x130], 0
movzx eax, byte [rsp + 0x124]
mov edx, dword [rsp + 0x120]
xor eax, edx
mov byte [rsp + 0x124], al
movzx edx, byte [rsp + 0x125]
mov eax, dword [rsp + 0x120]
add eax, 1
xor eax, edx
mov byte [rsp + 0x125], al
movzx edx, byte [rsp + 0x126]
mov eax, dword [rsp + 0x120]
add eax, 2
xor eax, edx
mov byte [rsp + 0x126], al
movzx edx, byte [rsp + 0x127]
mov eax, dword [rsp + 0x120]
add eax, 3
xor eax, edx
mov byte [rsp + 0x127], al
movzx edx, byte [rsp + 0x128]
mov eax, dword [rsp + 0x120]
add eax, 4
xor eax, edx
mov byte [rsp + 0x128], al
movzx edx, byte [rsp + 0x129]
mov eax, dword [rsp + 0x120]
add eax, 5
xor eax, edx
mov byte [rsp + 0x129], al
movzx edx, byte [rsp + 0x12a]
mov eax, dword [rsp + 0x120]
add eax, 6
xor eax, edx
mov byte [rsp + 0x12a], al
movzx edx, byte [rsp + 0x12b]
mov eax, dword [rsp + 0x120]
add eax, 7
xor eax, edx
mov byte [rsp + 0x12b], al
movzx edx, byte [rsp + 0x12c]
mov eax, dword [rsp + 0x120]
add eax, 8
xor eax, edx
mov byte [rsp + 0x12c], al
movzx edx, byte [rsp + 0x12d]
mov eax, dword [rsp + 0x120]
add eax, 9
xor eax, edx
mov byte [rsp + 0x12d], al
movzx edx, byte [rsp + 0x12e]
mov eax, dword [rsp + 0x120]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x12e], al
movzx edx, byte [rsp + 0x12f]
mov eax, dword [rsp + 0x120]
add eax, 0xb
xor eax, edx
mov rdx, r12
mov byte [rsp + 0x12f], al
mov byte [rsp + 0x130], 0
call fcn.2b3657510
call rax
mov r13, qword [rsp + 0xa0]
mov ebx, eax
test r13, r13
je 0x2b365ea9c
movabs rax, 0x6b705a6c6c794d
mov byte [rsp + 0x12c], 0
mov rcx, r12
mov qword [rsp + 0xa8], rax
movzx eax, byte [rsp + 0xa8]
mov dword [rsp + 0x128], 0x76767e34
sub eax, 7
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0xa9]
sub eax, 7
mov byte [rsp + 0xa9], al
movzx eax, byte [rsp + 0xaa]
sub eax, 7
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xab]
sub eax, 7
mov byte [rsp + 0xab], al
movzx eax, byte [rsp + 0xac]
sub eax, 7
mov byte [rsp + 0xac], al
movzx eax, byte [rsp + 0xad]
sub eax, 7
mov byte [rsp + 0xad], al
movzx eax, byte [rsp + 0xae]
sub eax, 7
mov byte [rsp + 0xae], al
mov rax, qword [str._ljs__LocalAllBL_GLE]
mov dword [rsp + 0x180], 0x1a
mov qword [rsp + 0x120], rax
movabs rax, 0x2829736a7b6c7e5b
mov qword [rsp + 0x184], rax
mov dword [rsp + 0x18c], 0x76767e34
mov byte [rsp + 0x190], 0
movzx eax, byte [rsp + 0x184]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x184], al
movzx eax, byte [rsp + 0x185]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x185], al
movzx eax, byte [rsp + 0x186]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x186], al
movzx eax, byte [rsp + 0x187]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x187], al
movzx eax, byte [rsp + 0x188]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x188], al
movzx eax, byte [rsp + 0x189]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x189], al
movzx eax, byte [rsp + 0x18a]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18a], al
movzx eax, byte [rsp + 0x18b]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18b], al
movzx eax, byte [rsp + 0x18c]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18c], al
movzx eax, byte [rsp + 0x18d]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18d], al
movzx eax, byte [rsp + 0x18e]
mov edx, dword [rsp + 0x180]
xor eax, edx
mov byte [rsp + 0x18e], al
movzx eax, byte [rsp + 0x18f]
mov edx, dword [rsp + 0x180]
xor eax, edx
lea rdx, [rsp + 0xa8]
mov byte [rsp + 0x18f], al
mov byte [rsp + 0x190], 0
call fcn.2b3657510
mov rcx, r13
call rax
mov qword [rsp + 0xa0], 0
test ebx, ebx
je 0x2b365e419
mov ecx, 4
call fcn.2b3752210
mov rdx, qword [0x2b375eba0]
xor r8d, r8d
mov dword [rax], ebx
mov rcx, rax
call fcn.2b3752910
nop
nop word cs:[rax + rax]
nop
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1d8
mov eax, 0x62
movdqa xmm0, xmmword [0x2b3757140]
movabs rdx, 0x6274727e6341657f
movabs rsi, 0x12134c454e52454b
mov word [rsp + 0x160], ax
movabs rax, 0x7463636452657456
lea r13, [rsp + 0x1b4]
lea r12, [rsp + 0x194]
mov dword [rsp + 0x1b0], 0x11
mov rcx, r12
lea r14, [rsp + 0x190]
mov qword [rsp + 0x1b4], rax
mov qword [rsp + 0x1bc], rdx
mov edx, 0x62
mov word [rsp + 0x1c4], dx
movzx eax, byte [rsp + 0x1b4]
mov edx, dword [rsp + 0x1b0]
movaps xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x80], 0
xor eax, edx
mov byte [rsp + 0x1b4], al
movzx eax, byte [rsp + 0x1b5]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b5], al
movzx eax, byte [rsp + 0x1b6]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b6], al
movzx eax, byte [rsp + 0x1b7]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b7], al
movzx eax, byte [rsp + 0x1b8]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b8], al
movzx eax, byte [rsp + 0x1b9]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b9], al
movzx eax, byte [rsp + 0x1ba]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1ba], al
movzx eax, byte [rsp + 0x1bb]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bb], al
movzx eax, byte [rsp + 0x1bc]
mov edx, dword [rsp + 0x1b0]
mov byte [rsp + 0xbc], 0
xor eax, edx
mov byte [rsp + 0x1bc], al
movzx eax, byte [rsp + 0x1bd]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bd], al
movzx eax, byte [rsp + 0x1be]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1be], al
movzx eax, byte [rsp + 0x1bf]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bf], al
movzx eax, byte [rsp + 0x1c0]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c0], al
movzx eax, byte [rsp + 0x1c1]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c1], al
movzx eax, byte [rsp + 0x1c2]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c2], al
movzx eax, byte [rsp + 0x1c3]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c3], al
movzx eax, byte [rsp + 0x1c4]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c4], al
mov rax, qword [0x2b3757150]
mov byte [rsp + 0x1c5], 0
mov qword [rsp + 0xb0], rax
movabs rax, 0x1918474e45594e40
mov dword [rsp + 0x190], 0x2b
mov dword [rsp + 0xb8], 0x47474f05
mov qword [rsp + 0x194], rax
mov dword [rsp + 0x19c], 0x47474f05
mov byte [rsp + 0x1a0], 0
movzx eax, byte [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x194], al
movzx eax, byte [rsp + 0x195]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x195], al
movzx eax, byte [rsp + 0x196]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x196], al
movzx eax, byte [rsp + 0x197]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x197], al
movzx eax, byte [rsp + 0x198]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x198], al
movzx eax, byte [rsp + 0x199]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x199], al
movzx eax, byte [rsp + 0x19a]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19a], al
movzx eax, byte [rsp + 0x19b]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19b], al
movzx eax, byte [rsp + 0x19c]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19c], al
movzx eax, byte [rsp + 0x19d]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19d], al
movzx eax, byte [rsp + 0x19e]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19e], al
movzx eax, byte [rsp + 0x19f]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov rdx, r13
mov byte [rsp + 0x19f], al
lea rax, [rsp + 0x1b0]
mov byte [rsp + 0x1a0], 0
mov qword [rsp + 0x68], rax
call fcn.2b3657510
call rax
movdqa xmm0, xmmword [0x2b3757160]
mov byte [rsp + 0x140], 0
mov rcx, r12
movabs rdx, 0x19121c1823040412
mov r15, rax
movabs rax, 0x1418052719120738
mov dword [rsp + 0x1b0], 0x77
mov qword [rsp + 0x1b4], rax
mov qword [rsp + 0x1bc], rdx
mov byte [rsp + 0x1c4], 0
movzx eax, byte [rsp + 0x1b4]
mov edx, dword [rsp + 0x1b0]
movaps xmmword [rsp + 0x130], xmm0
xor eax, edx
mov byte [rsp + 0x1b4], al
movzx eax, byte [rsp + 0x1b5]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b5], al
movzx eax, byte [rsp + 0x1b6]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b6], al
movzx eax, byte [rsp + 0x1b7]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b7], al
movzx eax, byte [rsp + 0x1b8]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b8], al
movzx eax, byte [rsp + 0x1b9]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b9], al
movzx eax, byte [rsp + 0x1ba]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1ba], al
movzx eax, byte [rsp + 0x1bb]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bb], al
movzx eax, byte [rsp + 0x1bc]
mov edx, dword [rsp + 0x1b0]
mov byte [rsp + 0xcc], 0
mov dword [rsp + 0xc8], 0x4c4c440e
xor eax, edx
mov byte [rsp + 0x1bc], al
movzx eax, byte [rsp + 0x1bd]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bd], al
movzx eax, byte [rsp + 0x1be]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1be], al
movzx eax, byte [rsp + 0x1bf]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bf], al
movzx eax, byte [rsp + 0x1c0]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c0], al
movzx eax, byte [rsp + 0x1c1]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c1], al
movzx eax, byte [rsp + 0x1c2]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c2], al
movzx eax, byte [rsp + 0x1c3]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1c3], al
mov rax, qword [str.KERNEL]
mov byte [rsp + 0x1c4], 0
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x190], 0x20
mov qword [rsp + 0x194], rsi
mov dword [rsp + 0x19c], 0x4c4c440e
mov byte [rsp + 0x1a0], 0
movzx eax, byte [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x194], al
movzx eax, byte [rsp + 0x195]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x195], al
movzx eax, byte [rsp + 0x196]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x196], al
movzx eax, byte [rsp + 0x197]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x197], al
movzx eax, byte [rsp + 0x198]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x198], al
movzx eax, byte [rsp + 0x199]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x199], al
movzx eax, byte [rsp + 0x19a]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19a], al
movzx eax, byte [rsp + 0x19b]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19b], al
movzx eax, byte [rsp + 0x19c]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19c], al
movzx eax, byte [rsp + 0x19d]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19d], al
movzx eax, byte [rsp + 0x19e]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x19e], al
movzx eax, byte [rsp + 0x19f]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov rdx, r13
mov byte [rsp + 0x19f], al
mov byte [rsp + 0x1a0], 0
call fcn.2b3657510
lea r8, [rsp + 0x80]
mov edx, 8
mov rcx, r15
call rax
test eax, eax
jne 0x2b365fd90
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov byte [rsp + 0xdc], 0
movabs rsi, 0x6f5e594b665e4f6d
mov dword [rsp + 0x1b0], 0x2a
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x1b4], rsi
mov dword [rsp + 0x1bc], 0x58455858
mov byte [rsp + 0x1c0], 0
movzx eax, byte [rsp + 0x1b4]
mov edx, dword [rsp + 0x1b0]
mov dword [rsp + 0xd8], 0x58455858
xor eax, edx
mov byte [rsp + 0x1b4], al
movzx eax, byte [rsp + 0x1b5]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b5], al
movzx eax, byte [rsp + 0x1b6]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b6], al
movzx eax, byte [rsp + 0x1b7]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b7], al
movzx eax, byte [rsp + 0x1b8]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b8], al
movzx eax, byte [rsp + 0x1b9]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b9], al
movzx eax, byte [rsp + 0x1ba]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1ba], al
movzx eax, byte [rsp + 0x1bb]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bb], al
movzx eax, byte [rsp + 0x1bc]
mov edx, dword [rsp + 0x1b0]
mov byte [rsp + 0xec], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x1bc], al
movzx eax, byte [rsp + 0x1bd]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bd], al
movzx eax, byte [rsp + 0x1be]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1be], al
movzx eax, byte [rsp + 0x1bf]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bf], al
mov byte [rsp + 0x1c0], 0
mov dword [rsp + 0x190], 0x64
mov r15d, dword [rsp + 0x190]
mov r10d, dword [rsp + 0x190]
mov r11d, dword [rsp + 0x190]
mov ebx, dword [rsp + 0x190]
mov esi, dword [rsp + 0x190]
movzx r15d, r15b
mov edi, dword [rsp + 0x190]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x190]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x190]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x190]
add eax, 7
mov r8d, dword [rsp + 0x190]
mov edx, dword [rsp + 0x190]
movzx eax, al
mov ecx, dword [rsp + 0x190]
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r15
add r9d, 8
add edx, 0xa
xor ebx, 0x64
xor r9d, 0x2e
movq xmm3, rax
xor eax, eax
xor edx, 0x6c
mov al, r9b
add ecx, 0xb
pxor xmm3, xmm0
movzx edx, dl
mov ah, bl
shl edx, 0x10
xor ecx, 0x6c
movq qword [rsp + 0x194], xmm3
movq qword [rsp + 0xe0], xmm3
movzx eax, ax
shl ecx, 0x18
or eax, edx
or eax, ecx
mov rcx, r12
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0x19c], eax
mov byte [rsp + 0x1a0], 0
movzx eax, byte [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x194], al
movzx edx, byte [rsp + 0x195]
mov eax, dword [rsp + 0x190]
add eax, 1
xor eax, edx
mov byte [rsp + 0x195], al
movzx edx, byte [rsp + 0x196]
mov eax, dword [rsp + 0x190]
add eax, 2
xor eax, edx
mov byte [rsp + 0x196], al
movzx edx, byte [rsp + 0x197]
mov eax, dword [rsp + 0x190]
add eax, 3
xor eax, edx
mov byte [rsp + 0x197], al
movzx edx, byte [rsp + 0x198]
mov eax, dword [rsp + 0x190]
add eax, 4
xor eax, edx
mov byte [rsp + 0x198], al
movzx edx, byte [rsp + 0x199]
mov eax, dword [rsp + 0x190]
add eax, 5
xor eax, edx
mov byte [rsp + 0x199], al
movzx edx, byte [rsp + 0x19a]
mov eax, dword [rsp + 0x190]
add eax, 6
xor eax, edx
mov byte [rsp + 0x19a], al
movzx edx, byte [rsp + 0x19b]
mov eax, dword [rsp + 0x190]
add eax, 7
xor eax, edx
mov byte [rsp + 0x19b], al
movzx edx, byte [rsp + 0x19c]
mov eax, dword [rsp + 0x190]
add eax, 8
xor eax, edx
mov byte [rsp + 0x19c], al
movzx edx, byte [rsp + 0x19d]
mov eax, dword [rsp + 0x190]
add eax, 9
xor eax, edx
mov byte [rsp + 0x19d], al
movzx edx, byte [rsp + 0x19e]
mov eax, dword [rsp + 0x190]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x19e], al
movzx edx, byte [rsp + 0x19f]
mov eax, dword [rsp + 0x190]
add eax, 0xb
xor eax, edx
mov rdx, r13
mov byte [rsp + 0x19f], al
mov byte [rsp + 0x1a0], 0
call fcn.2b3657510
call rax
mov r15, qword [rsp + 0x80]
mov ebx, eax
test r15, r15
je 0x2b365f867
mov rax, qword [0x2b3757188]
mov rdx, r14
movabs rdi, 0x786b526f7d79764d
mov dword [rsp + 0x90], 0x6f766e
mov qword [rsp + 0x190], rdi
movabs rdi, 0x3e3f78717a7e7177
mov dword [rsp + 0x198], 0x6f766e
mov qword [rsp + 0x88], rax
movzx eax, byte [rsp + 0x190]
mov dword [rsp + 0xf8], 0x7878703a
sub eax, 0xa
mov byte [rsp + 0xfc], 0
mov byte [rsp + 0x190], al
movzx eax, byte [rsp + 0x191]
sub eax, 0xa
mov byte [rsp + 0x191], al
movzx eax, byte [rsp + 0x192]
sub eax, 0xa
mov byte [rsp + 0x192], al
movzx eax, byte [rsp + 0x193]
sub eax, 0xa
mov byte [rsp + 0x193], al
movzx eax, byte [rsp + 0x194]
sub eax, 0xa
mov byte [rsp + 0x194], al
movzx eax, byte [rsp + 0x195]
sub eax, 0xa
mov byte [rsp + 0x195], al
movzx eax, byte [rsp + 0x196]
sub eax, 0xa
mov byte [rsp + 0x196], al
movzx eax, byte [rsp + 0x197]
sub eax, 0xa
mov byte [rsp + 0x197], al
movzx eax, byte [rsp + 0x198]
sub eax, 0xa
mov byte [rsp + 0x198], al
movzx eax, byte [rsp + 0x199]
sub eax, 0xa
mov byte [rsp + 0x199], al
movzx eax, byte [rsp + 0x19a]
sub eax, 0xa
mov byte [rsp + 0x19a], al
mov rax, qword [0x2b3757190]
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x1b8], 0x7878703a
mov rcx, qword [rsp + 0x68]
mov byte [rsp + 0x1bc], 0
movzx eax, byte [rsp + 0x1b0]
sub eax, 0xc
mov byte [rsp + 0x1b0], al
movzx eax, byte [rsp + 0x1b1]
sub eax, 0xc
mov byte [rsp + 0x1b1], al
movzx eax, byte [rsp + 0x1b2]
sub eax, 0xc
mov byte [rsp + 0x1b2], al
movzx eax, byte [rsp + 0x1b3]
sub eax, 0xc
mov byte [rsp + 0x1b3], al
movzx eax, byte [rsp + 0x1b4]
sub eax, 0xc
mov byte [rsp + 0x1b4], al
movzx eax, byte [rsp + 0x1b5]
sub eax, 0xc
mov byte [rsp + 0x1b5], al
movzx eax, byte [rsp + 0x1b6]
sub eax, 0xc
mov byte [rsp + 0x1b6], al
movzx eax, byte [rsp + 0x1b7]
sub eax, 0xc
mov byte [rsp + 0x1b7], al
movzx eax, byte [rsp + 0x1b8]
sub eax, 0xc
mov byte [rsp + 0x1b8], al
movzx eax, byte [rsp + 0x1b9]
sub eax, 0xc
mov byte [rsp + 0x1b9], al
movzx eax, byte [rsp + 0x1ba]
sub eax, 0xc
mov byte [rsp + 0x1ba], al
movzx eax, byte [rsp + 0x1bb]
sub eax, 0xc
mov byte [rsp + 0x1bb], al
call fcn.2b3657510
mov rcx, r15
call rax
mov qword [rsp + 0x80], 0
test ebx, ebx
jne 0x2b3660410
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x1b0], 0x43
mov eax, dword [rsp + 0x1b0]
mov r15d, dword [rsp + 0x1b0]
mov r14d, dword [rsp + 0x1b0]
mov byte [rsp + 0x183], 0
mov r10d, dword [rsp + 0x1b0]
mov dword [rsp + 0x5c], eax
mov r11d, dword [rsp + 0x1b0]
add r14d, 2
add r15d, 1
mov ebx, dword [rsp + 0x1b0]
mov esi, dword [rsp + 0x1b0]
add r10d, 3
movzx r14d, r14b
movzx r15d, r15b
mov eax, dword [rsp + 0x1b0]
add ebx, 5
add r11d, 4
movzx r10d, r10b
mov edi, dword [rsp + 0x1b0]
add esi, 6
movzx ebx, bl
movzx r11d, r11b
mov ecx, dword [rsp + 0x1b0]
add eax, 7
movzx esi, sil
mov dword [rsp + 0x58], edi
mov edi, dword [rsp + 0x1b0]
movzx eax, al
mov dword [rsp + 0x54], ecx
mov ecx, dword [rsp + 0x1b0]
shl rax, 8
mov r8d, dword [rsp + 0x1b0]
mov dword [rsp + 0x30], edi
or rax, rsi
mov r9d, dword [rsp + 0x1b0]
shl rax, 8
add ecx, 0xb
mov edi, dword [rsp + 0x1b0]
mov ebp, dword [rsp + 0x1b0]
mov edx, dword [rsp + 0x1b0]
or rax, rbx
movzx ecx, cl
shl rax, 8
add edi, 0xe
add r9d, 0xd
add r8d, 0xc
mov dword [rsp + 0x50], edx
or rax, r11
add ebp, 0xf
movzx edi, dil
shl rax, 8
movzx ebp, bpl
movzx r9d, r9b
movzx r8d, r8b
mov edx, dword [rsp + 0x1b0]
or rax, r10
shl rbp, 8
shl rax, 8
or rbp, rdi
mov dword [rsp + 0x4c], edx
mov edx, dword [rsp + 0x1b0]
or rax, r14
shl rbp, 8
shl rax, 8
or rbp, r9
mov dword [rsp + 0x48], edx
movzx edx, byte [rsp + 0x58]
or rax, r15
shl rax, 8
add edx, 8
mov byte [rsp + 0x58], dl
movzx edx, byte [rsp + 0x54]
add edx, 9
mov byte [rsp + 0x54], dl
movzx edx, byte [rsp + 0x30]
movzx r10d, byte [rsp + 0x5c]
add edx, 0xa
shl rbp, 8
or rbp, r8
movzx edx, dl
or rax, r10
shl rbp, 8
mov qword [rsp + 0x30], rax
movzx eax, byte [rsp + 0x50]
or rbp, rcx
shl rbp, 8
add eax, 0x10
or rbp, rdx
movzx edx, byte [rsp + 0x54]
xor eax, 0x69
shl rbp, 8
or rbp, rdx
movzx edx, byte [rsp + 0x58]
shl rbp, 8
or rbp, rdx
xor edx, edx
mov dl, al
movzx eax, byte [rsp + 0x4c]
mov qword [rsp + 0x38], rbp
movdqa xmm0, xmmword [rsp + 0x30]
pxor xmm0, xmmword [str.GetTokenInformatAdvapi32N]
add eax, 0x11
xor eax, 0x6f
movups xmmword [rsp + 0x1b4], xmm0
mov dh, al
movzx eax, byte [rsp + 0x48]
movaps xmmword [rsp + 0x170], xmm0
mov word [rsp + 0x180], dx
add eax, 0x12
xor eax, 0x6e
mov byte [rsp + 0x182], al
mov eax, dword [rsp + 0x180]
mov dword [rsp + 0x1c4], eax
xor eax, eax
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x1b4]
mov edx, dword [rsp + 0x1b0]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x1b4], dl
add rax, 1
cmp rax, 0x13
jne 0x2b365fa90
mov byte [rsp + 0x1c7], 0
movq xmm0, qword [0x2b37571c0]
mov dword [rsp + 0x190], 0x7a
mov r14d, dword [rsp + 0x190]
mov r10d, dword [rsp + 0x190]
mov r11d, dword [rsp + 0x190]
mov byte [rsp + 0x10c], 0
mov ebx, dword [rsp + 0x190]
mov esi, dword [rsp + 0x190]
movzx r14d, r14b
mov edi, dword [rsp + 0x190]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x190]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x190]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x190]
add eax, 7
mov r8d, dword [rsp + 0x190]
mov edx, dword [rsp + 0x190]
movzx eax, al
add r9d, 8
mov ecx, dword [rsp + 0x190]
shl rax, 8
xor r9d, 0x2e
add edx, 0xa
or rax, rbp
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
shl edx, 0x10
or rax, rdi
shl ecx, 0x18
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
xor ebx, 0x64
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r14
movq xmm2, rax
xor eax, eax
mov al, r9b
pxor xmm2, xmm0
movq qword [rsp + 0x194], xmm2
mov ah, bl
movq qword [rsp + 0x100], xmm2
movzx eax, ax
or eax, edx
or eax, ecx
mov rcx, r12
mov dword [rsp + 0x19c], eax
mov dword [rsp + 0x108], eax
mov byte [rsp + 0x1a0], 0
movzx eax, byte [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x194], al
movzx edx, byte [rsp + 0x195]
mov eax, dword [rsp + 0x190]
add eax, 1
xor eax, edx
mov byte [rsp + 0x195], al
movzx edx, byte [rsp + 0x196]
mov eax, dword [rsp + 0x190]
add eax, 2
xor eax, edx
mov byte [rsp + 0x196], al
movzx edx, byte [rsp + 0x197]
mov eax, dword [rsp + 0x190]
add eax, 3
xor eax, edx
mov byte [rsp + 0x197], al
movzx edx, byte [rsp + 0x198]
mov eax, dword [rsp + 0x190]
add eax, 4
xor eax, edx
mov byte [rsp + 0x198], al
movzx edx, byte [rsp + 0x199]
mov eax, dword [rsp + 0x190]
add eax, 5
xor eax, edx
mov byte [rsp + 0x199], al
movzx edx, byte [rsp + 0x19a]
mov eax, dword [rsp + 0x190]
add eax, 6
xor eax, edx
mov byte [rsp + 0x19a], al
movzx edx, byte [rsp + 0x19b]
mov eax, dword [rsp + 0x190]
add eax, 7
xor eax, edx
mov byte [rsp + 0x19b], al
movzx edx, byte [rsp + 0x19c]
mov eax, dword [rsp + 0x190]
add eax, 8
xor eax, edx
mov byte [rsp + 0x19c], al
movzx edx, byte [rsp + 0x19d]
mov eax, dword [rsp + 0x190]
add eax, 9
xor eax, edx
mov byte [rsp + 0x19d], al
movzx edx, byte [rsp + 0x19e]
mov eax, dword [rsp + 0x190]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x19e], al
movzx edx, byte [rsp + 0x19f]
mov eax, dword [rsp + 0x190]
add eax, 0xb
xor eax, edx
mov rdx, r13
mov byte [rsp + 0x19f], al
mov byte [rsp + 0x1a0], 0
call fcn.2b3657510
lea rdx, [rsp + 0x7c]
mov rcx, qword [rsp + 0x60]
mov r9d, 4
mov qword [rsp + 0x20], rdx
lea r8, [rsp + 0x78]
mov edx, 0x14
call rax
test eax, eax
je 0x2b365fda8
mov eax, dword [rsp + 0x78]
add rsp, 0x1d8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
jmp 0x2b365f878
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov dword [rsp + 0x1b0], 0x2a
mov byte [rsp + 0x11c], 0
mov qword [rsp + 0x110], rax
movabs rax, 0x6f5e594b665e4f6d
mov qword [rsp + 0x1b4], rax
mov dword [rsp + 0x1bc], 0x58455858
mov byte [rsp + 0x1c0], 0
movzx eax, byte [rsp + 0x1b4]
mov edx, dword [rsp + 0x1b0]
mov dword [rsp + 0x118], 0x58455858
xor eax, edx
mov byte [rsp + 0x1b4], al
movzx eax, byte [rsp + 0x1b5]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b5], al
movzx eax, byte [rsp + 0x1b6]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b6], al
movzx eax, byte [rsp + 0x1b7]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b7], al
movzx eax, byte [rsp + 0x1b8]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b8], al
movzx eax, byte [rsp + 0x1b9]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1b9], al
movzx eax, byte [rsp + 0x1ba]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1ba], al
movzx eax, byte [rsp + 0x1bb]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bb], al
movzx eax, byte [rsp + 0x1bc]
mov edx, dword [rsp + 0x1b0]
mov byte [rsp + 0x12c], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x1bc], al
movzx eax, byte [rsp + 0x1bd]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bd], al
movzx eax, byte [rsp + 0x1be]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1be], al
movzx eax, byte [rsp + 0x1bf]
mov edx, dword [rsp + 0x1b0]
xor eax, edx
mov byte [rsp + 0x1bf], al
mov byte [rsp + 0x1c0], 0
mov dword [rsp + 0x190], 0x64
mov r8d, dword [rsp + 0x190]
mov r10d, dword [rsp + 0x190]
mov r11d, dword [rsp + 0x190]
mov esi, dword [rsp + 0x190]
mov edi, dword [rsp + 0x190]
movzx r8d, r8b
mov ebp, dword [rsp + 0x190]
add r11d, 2
add r10d, 1
mov r14d, dword [rsp + 0x190]
add edi, 4
add esi, 3
movzx r11d, r11b
movzx r10d, r10b
add r14d, 6
add ebp, 5
movzx edi, dil
movzx esi, sil
mov eax, dword [rsp + 0x190]
movzx r14d, r14b
movzx ebp, bpl
mov r9d, dword [rsp + 0x190]
mov ebx, dword [rsp + 0x190]
mov edx, dword [rsp + 0x190]
add eax, 7
mov ecx, dword [rsp + 0x190]
movzx eax, al
shl rax, 8
or rax, r14
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r8
add r9d, 8
add ebx, 9
add edx, 0xa
xor r9d, 0x2e
movq xmm4, rax
xor eax, eax
xor ebx, 0x64
mov al, r9b
xor edx, 0x6c
pxor xmm4, xmm0
add ecx, 0xb
mov ah, bl
movzx edx, dl
xor ecx, 0x6c
movq qword [rsp + 0x194], xmm4
shl edx, 0x10
movzx eax, ax
shl ecx, 0x18
movq qword [rsp + 0x120], xmm4
or eax, edx
or eax, ecx
mov rcx, r12
mov dword [rsp + 0x128], eax
mov dword [rsp + 0x19c], eax
mov byte [rsp + 0x1a0], 0
movzx eax, byte [rsp + 0x194]
mov edx, dword [rsp + 0x190]
xor eax, edx
mov byte [rsp + 0x194], al
movzx edx, byte [rsp + 0x195]
mov eax, dword [rsp + 0x190]
add eax, 1
xor eax, edx
mov byte [rsp + 0x195], al
movzx edx, byte [rsp + 0x196]
mov eax, dword [rsp + 0x190]
add eax, 2
xor eax, edx
mov byte [rsp + 0x196], al
movzx edx, byte [rsp + 0x197]
mov eax, dword [rsp + 0x190]
add eax, 3
xor eax, edx
mov byte [rsp + 0x197], al
movzx edx, byte [rsp + 0x198]
mov eax, dword [rsp + 0x190]
add eax, 4
xor eax, edx
mov byte [rsp + 0x198], al
movzx edx, byte [rsp + 0x199]
mov eax, dword [rsp + 0x190]
add eax, 5
xor eax, edx
mov byte [rsp + 0x199], al
movzx edx, byte [rsp + 0x19a]
mov eax, dword [rsp + 0x190]
add eax, 6
xor eax, edx
mov byte [rsp + 0x19a], al
movzx edx, byte [rsp + 0x19b]
mov eax, dword [rsp + 0x190]
add eax, 7
xor eax, edx
mov byte [rsp + 0x19b], al
movzx edx, byte [rsp + 0x19c]
mov eax, dword [rsp + 0x190]
add eax, 8
xor eax, edx
mov byte [rsp + 0x19c], al
movzx edx, byte [rsp + 0x19d]
mov eax, dword [rsp + 0x190]
add eax, 9
xor eax, edx
mov byte [rsp + 0x19d], al
movzx edx, byte [rsp + 0x19e]
mov eax, dword [rsp + 0x190]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x19e], al
movzx edx, byte [rsp + 0x19f]
mov eax, dword [rsp + 0x190]
add eax, 0xb
xor eax, edx
mov rdx, r13
mov byte [rsp + 0x19f], al
mov byte [rsp + 0x1a0], 0
call fcn.2b3657510
call rax
mov r12, qword [rsp + 0x80]
mov ebx, eax
test r12, r12
je 0x2b3660408
mov rax, qword [0x2b3757188]
mov byte [rsp + 0x19c], 0
lea rdx, [rsp + 0xa4]
mov dword [rsp + 0xa0], 0x6f766e
mov qword [rsp + 0x98], rax
movabs rax, 0x786b526f7d79764d
mov qword [rsp + 0xa4], rax
mov dword [rsp + 0xac], 0x6f766e
movzx eax, byte [rsp + 0xa4]
mov dword [rsp + 0x198], 0x7878703a
sub eax, 0xa
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0xa5]
sub eax, 0xa
mov byte [rsp + 0xa5], al
movzx eax, byte [rsp + 0xa6]
sub eax, 0xa
mov byte [rsp + 0xa6], al
movzx eax, byte [rsp + 0xa7]
sub eax, 0xa
mov byte [rsp + 0xa7], al
movzx eax, byte [rsp + 0xa8]
sub eax, 0xa
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0xa9]
sub eax, 0xa
mov byte [rsp + 0xa9], al
movzx eax, byte [rsp + 0xaa]
sub eax, 0xa
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xab]
sub eax, 0xa
mov byte [rsp + 0xab], al
movzx eax, byte [rsp + 0xac]
sub eax, 0xa
mov byte [rsp + 0xac], al
movzx eax, byte [rsp + 0xad]
sub eax, 0xa
mov byte [rsp + 0xad], al
movzx eax, byte [rsp + 0xae]
sub eax, 0xa
mov byte [rsp + 0xae], al
mov rax, qword [0x2b3757190]
mov qword [rsp + 0x190], rax
movabs rax, 0x3e3f78717a7e7177
mov qword [rsp + 0x1b0], rax
mov dword [rsp + 0x1b8], 0x7878703a
mov rcx, qword [rsp + 0x68]
mov byte [rsp + 0x1bc], 0
movzx eax, byte [rsp + 0x1b0]
sub eax, 0xc
mov byte [rsp + 0x1b0], al
movzx eax, byte [rsp + 0x1b1]
sub eax, 0xc
mov byte [rsp + 0x1b1], al
movzx eax, byte [rsp + 0x1b2]
sub eax, 0xc
mov byte [rsp + 0x1b2], al
movzx eax, byte [rsp + 0x1b3]
sub eax, 0xc
mov byte [rsp + 0x1b3], al
movzx eax, byte [rsp + 0x1b4]
sub eax, 0xc
mov byte [rsp + 0x1b4], al
movzx eax, byte [rsp + 0x1b5]
sub eax, 0xc
mov byte [rsp + 0x1b5], al
movzx eax, byte [rsp + 0x1b6]
sub eax, 0xc
mov byte [rsp + 0x1b6], al
movzx eax, byte [rsp + 0x1b7]
sub eax, 0xc
mov byte [rsp + 0x1b7], al
movzx eax, byte [rsp + 0x1b8]
sub eax, 0xc
mov byte [rsp + 0x1b8], al
movzx eax, byte [rsp + 0x1b9]
sub eax, 0xc
mov byte [rsp + 0x1b9], al
movzx eax, byte [rsp + 0x1ba]
sub eax, 0xc
mov byte [rsp + 0x1ba], al
movzx eax, byte [rsp + 0x1bb]
sub eax, 0xc
mov byte [rsp + 0x1bb], al
call fcn.2b3657510
mov rcx, r12
call rax
mov qword [rsp + 0x80], 0
test ebx, ebx
je 0x2b365fd72
mov ecx, 4
call fcn.2b3752210
mov rdx, qword [0x2b375eba0]
xor r8d, r8d
mov dword [rax], ebx
mov rcx, rax
call fcn.2b3752910
nop
nop
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x310], xmm6
movaps xmmword [rsp + 0x320], xmm7
movaps xmmword [rsp + 0x330], xmm8
mov r8d, 0x62
movdqa xmm0, xmmword [0x2b3757140]
mov ecx, 0x62
movabs rax, 0x7463636452657456
movabs rdx, 0x6274727e6341657f
movabs rsi, 0x12134c454e52454b
movaps xmmword [rsp + 0x250], xmm0
lea r14, [rsp + 0x2f4]
lea r15, [rsp + 0x2d4]
mov word [rsp + 0x260], cx
mov rcx, r15
lea r13, [rsp + 0x2f0]
mov dword [rsp + 0x2f0], 0x11
mov qword [rsp + 0x2f4], rax
mov qword [rsp + 0x2fc], rdx
mov word [rsp + 0x304], r8w
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
mov qword [rsp + 0x98], 0
mov dword [rsp + 0x94], 0
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x10c], 0
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
movzx eax, byte [rsp + 0x300]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x300], al
movzx eax, byte [rsp + 0x301]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x301], al
movzx eax, byte [rsp + 0x302]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x302], al
movzx eax, byte [rsp + 0x303]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x303], al
movzx eax, byte [rsp + 0x304]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x304], al
mov rax, qword [0x2b3757150]
mov byte [rsp + 0x305], 0
mov qword [rsp + 0x100], rax
movabs rax, 0x1918474e45594e40
mov dword [rsp + 0x2d0], 0x2b
mov dword [rsp + 0x108], 0x47474f05
mov qword [rsp + 0x2d4], rax
mov dword [rsp + 0x2dc], 0x47474f05
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2da], al
movzx eax, byte [rsp + 0x2db]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2db], al
movzx eax, byte [rsp + 0x2dc]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx eax, byte [rsp + 0x2dd]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx eax, byte [rsp + 0x2de]
mov edx, dword [rsp + 0x2d0]
mov qword [rsp + 0x88], r13
xor eax, edx
mov byte [rsp + 0x2de], al
movzx eax, byte [rsp + 0x2df]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
lea rax, [rsp + 0x2d0]
mov byte [rsp + 0x2e0], 0
mov qword [rsp + 0x80], rax
call fcn.2b3657510
call rax
movdqa xmm0, xmmword [0x2b3757160]
mov byte [rsp + 0x240], 0
mov rcx, r15
movabs rdx, 0x19121c1823040412
mov r12, rax
movabs rax, 0x1418052719120738
mov dword [rsp + 0x2f0], 0x77
mov qword [rsp + 0x2f4], rax
mov qword [rsp + 0x2fc], rdx
mov byte [rsp + 0x304], 0
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
movaps xmmword [rsp + 0x230], xmm0
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x11c], 0
mov dword [rsp + 0x118], 0x4c4c440e
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
movzx eax, byte [rsp + 0x300]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x300], al
movzx eax, byte [rsp + 0x301]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x301], al
movzx eax, byte [rsp + 0x302]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x302], al
movzx eax, byte [rsp + 0x303]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x303], al
mov rax, qword [str.KERNEL]
mov byte [rsp + 0x304], 0
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x2d0], 0x20
mov qword [rsp + 0x2d4], rsi
mov dword [rsp + 0x2dc], 0x4c4c440e
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2da], al
movzx eax, byte [rsp + 0x2db]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2db], al
movzx eax, byte [rsp + 0x2dc]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx eax, byte [rsp + 0x2dd]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx eax, byte [rsp + 0x2de]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2de], al
movzx eax, byte [rsp + 0x2df]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
lea r8, [rsp + 0x98]
mov edx, 8
mov rcx, r12
call rax
test eax, eax
jne 0x2b3662780
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov byte [rsp + 0x12c], 0
movabs rsi, 0x6f5e594b665e4f6d
mov dword [rsp + 0x2f0], 0x2a
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x2f4], rsi
mov dword [rsp + 0x2fc], 0x58455858
mov byte [rsp + 0x300], 0
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
mov dword [rsp + 0x128], 0x58455858
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x13c], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
mov dword [rsp + 0x2d0], 0x64
mov r12d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r12d, r12b
mov edi, dword [rsp + 0x2d0]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x2d0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x2d0]
add eax, 7
mov r8d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
movzx eax, al
mov ecx, dword [rsp + 0x2d0]
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r12
add r9d, 8
add edx, 0xa
xor ebx, 0x64
xor r9d, 0x2e
movq xmm5, rax
xor eax, eax
xor edx, 0x6c
mov al, r9b
add ecx, 0xb
pxor xmm5, xmm0
movzx edx, dl
mov ah, bl
shl edx, 0x10
xor ecx, 0x6c
movq qword [rsp + 0x2d4], xmm5
movq qword [rsp + 0x130], xmm5
movzx eax, ax
shl ecx, 0x18
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x138], eax
mov dword [rsp + 0x2dc], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
call rax
mov r12, qword [rsp + 0x98]
mov ebx, eax
test r12, r12
je 0x2b36611fb
mov rax, qword [0x2b3757188]
mov rcx, r13
movabs rsi, 0x786b526f7d79764d
movabs rdi, 0x3e3f78717a7e7177
mov qword [rsp + 0x2d0], rsi
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x2d8], 0x6f766e
movzx eax, byte [rsp + 0x2d0]
mov dword [rsp + 0xc8], 0x6f766e
sub eax, 0xa
mov byte [rsp + 0x14c], 0
mov byte [rsp + 0x2d0], al
movzx eax, byte [rsp + 0x2d1]
mov dword [rsp + 0x148], 0x7878703a
sub eax, 0xa
mov byte [rsp + 0x2d1], al
movzx eax, byte [rsp + 0x2d2]
sub eax, 0xa
mov byte [rsp + 0x2d2], al
movzx eax, byte [rsp + 0x2d3]
sub eax, 0xa
mov byte [rsp + 0x2d3], al
movzx eax, byte [rsp + 0x2d4]
sub eax, 0xa
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
sub eax, 0xa
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
sub eax, 0xa
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
sub eax, 0xa
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
sub eax, 0xa
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
sub eax, 0xa
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
sub eax, 0xa
mov byte [rsp + 0x2da], al
mov rax, qword [0x2b3757190]
mov qword [rsp + 0x2f0], rdi
mov qword [rsp + 0x140], rax
mov dword [rsp + 0x2f8], 0x7878703a
mov rdx, qword [rsp + 0x80]
mov byte [rsp + 0x2fc], 0
movzx eax, byte [rsp + 0x2f0]
sub eax, 0xc
mov byte [rsp + 0x2f0], al
movzx eax, byte [rsp + 0x2f1]
sub eax, 0xc
mov byte [rsp + 0x2f1], al
movzx eax, byte [rsp + 0x2f2]
sub eax, 0xc
mov byte [rsp + 0x2f2], al
movzx eax, byte [rsp + 0x2f3]
sub eax, 0xc
mov byte [rsp + 0x2f3], al
movzx eax, byte [rsp + 0x2f4]
sub eax, 0xc
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
sub eax, 0xc
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
sub eax, 0xc
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
sub eax, 0xc
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
sub eax, 0xc
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
sub eax, 0xc
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
sub eax, 0xc
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
sub eax, 0xc
mov byte [rsp + 0x2fb], al
call fcn.2b3657510
mov rcx, r12
call rax
mov qword [rsp + 0x98], 0
test ebx, ebx
jne 0x2b3662dec
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x2f0], 0x43
mov eax, dword [rsp + 0x2f0]
mov r11d, dword [rsp + 0x2f0]
mov ebx, dword [rsp + 0x2f0]
mov byte [rsp + 0x2a3], 0
mov esi, dword [rsp + 0x2f0]
mov edi, dword [rsp + 0x2f0]
mov dword [rsp + 0x64], eax
mov ebp, dword [rsp + 0x2f0]
add ebx, 2
add r11d, 1
mov r12d, dword [rsp + 0x2f0]
mov edx, dword [rsp + 0x2f0]
add edi, 4
add esi, 3
movzx ebx, bl
add r12d, 6
add ebp, 5
movzx edi, dil
movzx esi, sil
add edx, 7
movzx r12d, r12b
movzx ebp, bpl
movzx r11d, r11b
mov ecx, dword [rsp + 0x2f0]
mov r8d, dword [rsp + 0x2f0]
movzx edx, dl
mov r13d, dword [rsp + 0x2f0]
shl rdx, 8
mov dword [rsp + 0x60], ecx
mov ecx, dword [rsp + 0x2f0]
or rdx, r12
mov dword [rsp + 0x5c], r8d
shl rdx, 8
add r13d, 0xa
mov r8d, dword [rsp + 0x2f0]
mov eax, dword [rsp + 0x2f0]
or rdx, rbp
add ecx, 0xb
movzx r13d, r13b
mov r10d, dword [rsp + 0x2f0]
shl rdx, 8
add r8d, 0xc
movzx ecx, cl
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x2f0]
or rdx, rdi
movzx r8d, r8b
mov r9d, dword [rsp + 0x2f0]
shl rdx, 8
add r10d, 0xe
add eax, 0xf
or rdx, rsi
movzx r10d, r10b
mov dword [rsp + 0x58], r9d
mov r9d, dword [rsp + 0x2f0]
movzx eax, al
shl rdx, 8
shl rax, 8
or rdx, rbx
mov dword [rsp + 0x50], r9d
mov r9d, dword [rsp + 0x2f0]
or rax, r10
shl rdx, 8
shl rax, 8
or rdx, r11
mov dword [rsp + 0x48], r9d
movzx r9d, byte [rsp + 0x60]
shl rdx, 8
add r9d, 8
mov byte [rsp + 0x60], r9b
movzx r9d, byte [rsp + 0x5c]
add r9d, 9
mov byte [rsp + 0x5c], r9b
movzx r9d, byte [rsp + 0x30]
movzx r11d, byte [rsp + 0x64]
movdqa xmm7, xmmword [str.GetTokenInformatAdvapi32N]
add r9d, 0xd
movzx r9d, r9b
or rax, r9
shl rax, 8
or rdx, r11
or rax, r8
mov qword [rsp + 0x30], rdx
xor edx, edx
shl rax, 8
or rax, rcx
movzx ecx, byte [rsp + 0x5c]
shl rax, 8
or rax, r13
shl rax, 8
or rax, rcx
movzx ecx, byte [rsp + 0x60]
shl rax, 8
or rax, rcx
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0x58]
movdqa xmm0, xmmword [rsp + 0x30]
add eax, 0x10
xor eax, 0x69
pxor xmm0, xmm7
mov dl, al
movzx eax, byte [rsp + 0x50]
movups xmmword [rsp + 0x2f4], xmm0
movaps xmmword [rsp + 0x290], xmm0
add eax, 0x11
xor eax, 0x6f
mov dh, al
movzx eax, byte [rsp + 0x48]
mov word [rsp + 0x2a0], dx
add eax, 0x12
xor eax, 0x6e
mov byte [rsp + 0x2a2], al
mov eax, dword [rsp + 0x2a0]
mov dword [rsp + 0x304], eax
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x2f4]
mov edx, dword [rsp + 0x2f0]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x2f4], dl
add rax, 1
cmp rax, 0x13
jne 0x2b3661438
mov byte [rsp + 0x307], 0
movq xmm6, qword [0x2b37571c0]
mov dword [rsp + 0x2d0], 0x7a
mov r12d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov byte [rsp + 0x15c], 0
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r12d, r12b
mov edi, dword [rsp + 0x2d0]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x2d0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x2d0]
add eax, 7
mov r8d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
movzx eax, al
add r9d, 8
mov ecx, dword [rsp + 0x2d0]
shl rax, 8
xor r9d, 0x2e
add edx, 0xa
or rax, rbp
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
shl edx, 0x10
or rax, rdi
shl ecx, 0x18
lea rdi, [rsp + 0x94]
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
xor ebx, 0x64
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r12
movq xmm2, rax
xor eax, eax
mov al, r9b
pxor xmm2, xmm6
movq qword [rsp + 0x2d4], xmm2
mov ah, bl
movq qword [rsp + 0x150], xmm2
movzx eax, ax
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x2dc], eax
mov dword [rsp + 0x158], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x20], rdi
mov rcx, qword [rsp + 0x68]
mov edx, 0x19
call rax
test eax, eax
jne 0x2b3661b3b
mov rdi, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov byte [rsp + 0x16c], 0
movabs rax, 0x6f5e594b665e4f6d
mov dword [rsp + 0x2f0], 0x2a
mov qword [rsp + 0x2f4], rax
mov dword [rsp + 0x2fc], 0x58455858
mov byte [rsp + 0x300], 0
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
mov qword [rsp + 0x160], rdi
mov dword [rsp + 0x168], 0x58455858
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x17c], 0
movq xmm8, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
mov dword [rsp + 0x2d0], 0x64
mov r13d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r13d, r13b
mov ebp, dword [rsp + 0x2d0]
add r11d, 2
add r10d, 1
mov r12d, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
add r12d, 6
add ebp, 5
movzx esi, sil
movzx ebx, bl
mov eax, dword [rsp + 0x2d0]
movzx r12d, r12b
movzx ebp, bpl
mov r9d, dword [rsp + 0x2d0]
mov r8d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
add eax, 7
mov ecx, dword [rsp + 0x2d0]
movzx eax, al
shl rax, 8
or rax, r12
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r13
add r9d, 8
add edx, 0xa
xor ebx, 0x64
xor r9d, 0x2e
movq xmm2, rax
xor eax, eax
xor edx, 0x6c
mov al, r9b
add ecx, 0xb
pxor xmm2, xmm8
movzx edx, dl
mov ah, bl
shl edx, 0x10
xor ecx, 0x6c
movq qword [rsp + 0x2d4], xmm2
movq qword [rsp + 0x170], xmm2
movzx eax, ax
shl ecx, 0x18
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x178], eax
mov dword [rsp + 0x2dc], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
call rax
cmp eax, 0x7a
jne 0x2b3662798
mov r12d, dword [rsp + 0x94]
mov byte [rsp + 0xba], 0
mov dword [rsp + 0x2d0], 0x35
mov edi, dword [rsp + 0x2d0]
mov r8d, dword [rsp + 0x2d0]
mov r9d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
movzx edi, dil
mov r11d, dword [rsp + 0x2d0]
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
add r9d, 2
add r8d, 1
add r11d, 4
add r10d, 3
movzx r9d, r9b
movzx r8d, r8b
add esi, 6
add ebx, 5
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x2d0]
movzx esi, sil
movzx ebx, bl
mov ecx, dword [rsp + 0x2d0]
movq xmm0, qword [0x2b3757240]
mov edx, dword [rsp + 0x2d0]
add eax, 7
add ecx, 8
movzx eax, al
xor ecx, 0x6f
add edx, 9
shl rax, 8
xor edx, 0x63
or rax, rsi
shl rax, 8
or rax, rbx
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rdi
movq xmm3, rax
xor eax, eax
mov al, cl
pxor xmm3, xmm0
mov rcx, r14
movq qword [rsp + 0x2d4], xmm3
mov ah, dl
mov word [rsp + 0x2dc], ax
mov word [rsp + 0xb8], ax
mov byte [rsp + 0x2de], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
movq qword [rsp + 0xb0], xmm3
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
mov byte [rsp + 0x1bc], 0
mov dword [rsp + 0x1b8], 0x45454d07
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
mov rax, qword [0x2b3757248]
mov byte [rsp + 0x2de], 0
mov qword [rsp + 0x1b0], rax
movabs rax, 0x1b1a454c475b4c42
mov dword [rsp + 0x2f0], 0x29
mov qword [rsp + 0x2f4], rax
mov dword [rsp + 0x2fc], 0x45454d07
mov byte [rsp + 0x300], 0
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov rdx, r15
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
call fcn.2b3657510
mov rdx, r12
mov ecx, 0x40
call rax
mov rsi, qword [rsp + 0x98]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rsi
test rax, rax
je 0x2b3662e10
mov eax, dword [rsp + 0x94]
mov byte [rsp + 0x2c3], 0
mov dword [rsp + 0x2f0], 0x43
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x2f0]
mov ebx, dword [rsp + 0x2f0]
mov esi, dword [rsp + 0x2f0]
mov edi, dword [rsp + 0x2f0]
mov ebp, dword [rsp + 0x2f0]
mov dword [rsp + 0x74], eax
mov r12d, dword [rsp + 0x2f0]
add esi, 2
add ebx, 1
mov r13d, dword [rsp + 0x2f0]
mov edx, dword [rsp + 0x2f0]
add ebp, 4
add edi, 3
movzx ebx, bl
add r13d, 6
add r12d, 5
movzx ebp, bpl
movzx edi, dil
add edx, 7
movzx r13d, r13b
movzx r12d, r12b
movzx esi, sil
mov ecx, dword [rsp + 0x2f0]
mov r8d, dword [rsp + 0x2f0]
movzx edx, dl
shl rdx, 8
mov dword [rsp + 0x70], ecx
mov ecx, dword [rsp + 0x2f0]
or rdx, r13
mov dword [rsp + 0x68], r8d
mov r8d, dword [rsp + 0x2f0]
shl rdx, 8
mov eax, dword [rsp + 0x2f0]
or rdx, r12
add ecx, 0xa
mov r10d, dword [rsp + 0x2f0]
mov r11d, dword [rsp + 0x2f0]
shl rdx, 8
add r8d, 0xb
movzx ecx, cl
mov dword [rsp + 0x30], eax
or rdx, rbp
add r10d, 0xd
movzx r8d, r8b
mov eax, dword [rsp + 0x2f0]
shl rdx, 8
add r11d, 0xe
movzx r10d, r10b
mov r9d, dword [rsp + 0x2f0]
or rdx, rdi
movzx r11d, r11b
add eax, 0xf
shl rdx, 8
mov dword [rsp + 0x64], r9d
mov r9d, dword [rsp + 0x2f0]
movzx eax, al
or rdx, rsi
shl rax, 8
shl rdx, 8
mov dword [rsp + 0x60], r9d
mov r9d, dword [rsp + 0x2f0]
or rax, r11
or rdx, rbx
shl rax, 8
shl rdx, 8
mov dword [rsp + 0x5c], r9d
movzx r9d, byte [rsp + 0x70]
or rax, r10
add r9d, 8
mov byte [rsp + 0x70], r9b
movzx r9d, byte [rsp + 0x68]
movzx ebx, byte [rsp + 0x74]
add r9d, 9
mov byte [rsp + 0x68], r9b
movzx r9d, byte [rsp + 0x30]
add r9d, 0xc
shl rax, 8
or rdx, rbx
movzx r9d, r9b
mov qword [rsp + 0x30], rdx
xor edx, edx
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rcx
movzx ecx, byte [rsp + 0x68]
shl rax, 8
or rax, rcx
movzx ecx, byte [rsp + 0x70]
shl rax, 8
or rax, rcx
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0x64]
movdqa xmm0, xmmword [rsp + 0x30]
add eax, 0x10
xor eax, 0x69
pxor xmm0, xmm7
mov dl, al
movzx eax, byte [rsp + 0x60]
movups xmmword [rsp + 0x2f4], xmm0
movaps xmmword [rsp + 0x2b0], xmm0
add eax, 0x11
xor eax, 0x6f
mov dh, al
movzx eax, byte [rsp + 0x5c]
mov word [rsp + 0x2c0], dx
add eax, 0x12
xor eax, 0x6e
mov byte [rsp + 0x2c2], al
mov eax, dword [rsp + 0x2c0]
mov dword [rsp + 0x304], eax
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x2f4]
mov edx, dword [rsp + 0x2f0]
add edx, eax
xor edx, ecx
mov byte [rsp + rax + 0x2f4], dl
add rax, 1
cmp rax, 0x13
jne 0x2b3662140
mov byte [rsp + 0x307], 0
mov dword [rsp + 0x2d0], 0x7a
mov r12d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov byte [rsp + 0x1fc], 0
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r12d, r12b
mov edi, dword [rsp + 0x2d0]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x2d0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x2d0]
add eax, 7
mov r8d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
movzx eax, al
add r9d, 8
mov ecx, dword [rsp + 0x2d0]
shl rax, 8
xor r9d, 0x2e
add edx, 0xa
or rax, rbp
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
shl edx, 0x10
or rax, rdi
shl ecx, 0x18
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
xor ebx, 0x64
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r12
movq xmm4, rax
xor eax, eax
mov al, r9b
pxor xmm4, xmm6
movq qword [rsp + 0x2d4], xmm4
mov ah, bl
movq qword [rsp + 0x1f0], xmm4
movzx eax, ax
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x2dc], eax
mov dword [rsp + 0x1f8], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
mov rdi, qword [rsp + 0x78]
mov r9d, dword [rsp + 0x58]
mov edx, 0x19
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x20], rdi
call rax
test eax, eax
je 0x2b3663488
mov rax, qword [rsp + 0x48]
movdqa xmm0, xmmword [0x2b3757260]
movabs rdx, 0x223924233f3e0a29
mov byte [rsp + 0x282], 0
mov r12, qword [rax]
mov eax, 0x323f
movaps xmmword [rsp + 0x270], xmm0
mov word [rsp + 0x280], ax
movabs rax, 0x3e182f22183f2e0c
mov dword [rsp + 0x2f0], 0x4b
mov qword [rsp + 0x2f4], rax
xor eax, eax
mov qword [rsp + 0x2fc], rdx
mov edx, 0x323f
mov word [rsp + 0x304], dx
mov byte [rsp + 0x306], 0
movzx edx, byte [rsp + rax + 0x2f4]
mov ecx, dword [rsp + 0x2f0]
xor edx, ecx
mov byte [rsp + rax + 0x2f4], dl
add rax, 1
cmp rax, 0x12
jne 0x2b3662490
mov byte [rsp + 0x306], 0
mov dword [rsp + 0x2d0], 0x49
mov r13d, dword [rsp + 0x2d0]
mov r8d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov byte [rsp + 0x22c], 0
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r13d, r13b
mov edi, dword [rsp + 0x2d0]
add r11d, 2
add r8d, 1
mov ebp, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r8d, r8b
mov eax, dword [rsp + 0x2d0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r10d, dword [rsp + 0x2d0]
add eax, 7
mov r9d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
movzx eax, al
add r10d, 8
mov ecx, dword [rsp + 0x2d0]
shl rax, 8
xor r10d, 0x2e
add edx, 0xa
or rax, rbp
xor edx, 0x6c
add ecx, 0xb
shl rax, 8
movzx edx, dl
xor ecx, 0x6c
shl edx, 0x10
or rax, rdi
shl ecx, 0x18
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r9 + 9]
shl rax, 8
xor ebx, 0x64
or rax, r11
shl rax, 8
or rax, r8
shl rax, 8
or rax, r13
movq xmm5, rax
xor eax, eax
mov al, r10b
pxor xmm6, xmm5
movq qword [rsp + 0x2d4], xmm6
mov ah, bl
movq qword [rsp + 0x220], xmm6
movzx eax, ax
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x2dc], eax
mov dword [rsp + 0x228], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
xor edx, edx
mov rcx, r12
call rax
nop
movaps xmm6, xmmword [rsp + 0x310]
movaps xmm7, xmmword [rsp + 0x320]
movaps xmm8, xmmword [rsp + 0x330]
mov eax, dword [rax]
add rsp, 0x348
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x68], rax
jmp 0x2b366120c
mov dword [rsp + 0x2f0], 0x2a
mov qword [rsp + 0x2f4], rdi
mov dword [rsp + 0x2fc], 0x58455858
mov byte [rsp + 0x300], 0
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
mov qword [rsp + 0x180], rdi
mov byte [rsp + 0x18c], 0
mov dword [rsp + 0x188], 0x58455858
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x19c], 0
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
mov dword [rsp + 0x2d0], 0x64
mov r12d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r12d, r12b
mov edi, dword [rsp + 0x2d0]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x2d0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x2d0]
add eax, 7
mov r8d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
movzx eax, al
mov ecx, dword [rsp + 0x2d0]
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r12
add r9d, 8
add edx, 0xa
xor ebx, 0x64
movq xmm4, rax
xor r9d, 0x2e
xor eax, eax
xor edx, 0x6c
mov al, r9b
add ecx, 0xb
pxor xmm8, xmm4
movzx edx, dl
mov ah, bl
shl edx, 0x10
xor ecx, 0x6c
movq qword [rsp + 0x2d4], xmm8
movq qword [rsp + 0x190], xmm8
movzx eax, ax
shl ecx, 0x18
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x2dc], eax
mov dword [rsp + 0x198], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
call rax
mov r12, qword [rsp + 0x98]
mov ebx, eax
test r12, r12
je 0x2b3662de4
mov rax, qword [0x2b3757188]
mov byte [rsp + 0x1ac], 0
mov dword [rsp + 0xd8], 0x6f766e
mov qword [rsp + 0xd0], rax
movabs rax, 0x786b526f7d79764d
mov qword [rsp + 0x2d0], rax
mov dword [rsp + 0x2d8], 0x6f766e
movzx eax, byte [rsp + 0x2d0]
mov dword [rsp + 0x1a8], 0x7878703a
sub eax, 0xa
mov byte [rsp + 0x2d0], al
movzx eax, byte [rsp + 0x2d1]
sub eax, 0xa
mov byte [rsp + 0x2d1], al
movzx eax, byte [rsp + 0x2d2]
sub eax, 0xa
mov byte [rsp + 0x2d2], al
movzx eax, byte [rsp + 0x2d3]
sub eax, 0xa
mov byte [rsp + 0x2d3], al
movzx eax, byte [rsp + 0x2d4]
sub eax, 0xa
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
sub eax, 0xa
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
sub eax, 0xa
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
sub eax, 0xa
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
sub eax, 0xa
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
sub eax, 0xa
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
sub eax, 0xa
mov byte [rsp + 0x2da], al
mov rax, qword [0x2b3757190]
mov qword [rsp + 0x1a0], rax
movabs rax, 0x3e3f78717a7e7177
mov qword [rsp + 0x2f0], rax
mov dword [rsp + 0x2f8], 0x7878703a
mov rdx, qword [rsp + 0x80]
mov byte [rsp + 0x2fc], 0
movzx eax, byte [rsp + 0x2f0]
mov rcx, qword [rsp + 0x88]
sub eax, 0xc
mov byte [rsp + 0x2f0], al
movzx eax, byte [rsp + 0x2f1]
sub eax, 0xc
mov byte [rsp + 0x2f1], al
movzx eax, byte [rsp + 0x2f2]
sub eax, 0xc
mov byte [rsp + 0x2f2], al
movzx eax, byte [rsp + 0x2f3]
sub eax, 0xc
mov byte [rsp + 0x2f3], al
movzx eax, byte [rsp + 0x2f4]
sub eax, 0xc
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
sub eax, 0xc
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
sub eax, 0xc
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
sub eax, 0xc
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
sub eax, 0xc
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
sub eax, 0xc
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
sub eax, 0xc
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
sub eax, 0xc
mov byte [rsp + 0x2fb], al
call fcn.2b3657510
mov rcx, r12
call rax
mov qword [rsp + 0x98], 0
test ebx, ebx
je 0x2b3661b3b
mov ecx, 4
call fcn.2b3752210
mov rdx, qword [0x2b375eba0]
xor r8d, r8d
mov dword [rax], ebx
mov rcx, rax
call fcn.2b3752910
nop word [rax + rax]
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov dword [rsp + 0x2f0], 0x2a
mov byte [rsp + 0x1cc], 0
mov qword [rsp + 0x1c0], rax
movabs rax, 0x6f5e594b665e4f6d
mov qword [rsp + 0x2f4], rax
mov dword [rsp + 0x2fc], 0x58455858
mov byte [rsp + 0x300], 0
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
mov dword [rsp + 0x1c8], 0x58455858
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x1dc], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
mov dword [rsp + 0x2d0], 0x64
mov r12d, dword [rsp + 0x2d0]
mov r10d, dword [rsp + 0x2d0]
mov r11d, dword [rsp + 0x2d0]
mov ebx, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
movzx r12d, r12b
mov edi, dword [rsp + 0x2d0]
add r11d, 2
add r10d, 1
mov ebp, dword [rsp + 0x2d0]
add esi, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0x2d0]
add ebp, 6
add edi, 5
movzx ebx, bl
movzx ebp, bpl
movzx edi, dil
movzx esi, sil
mov r9d, dword [rsp + 0x2d0]
add eax, 7
mov r8d, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
movzx eax, al
mov ecx, dword [rsp + 0x2d0]
shl rax, 8
or rax, rbp
shl rax, 8
or rax, rdi
shl rax, 8
or rax, rsi
shl rax, 8
or rax, rbx
lea ebx, [r8 + 9]
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r12
add r9d, 8
add edx, 0xa
xor ebx, 0x64
xor r9d, 0x2e
movq xmm3, rax
xor eax, eax
xor edx, 0x6c
mov al, r9b
add ecx, 0xb
pxor xmm3, xmm0
movzx edx, dl
mov ah, bl
shl edx, 0x10
xor ecx, 0x6c
movq qword [rsp + 0x2d4], xmm3
movq qword [rsp + 0x1d0], xmm3
movzx eax, ax
shl ecx, 0x18
or eax, edx
or eax, ecx
mov rcx, r15
mov dword [rsp + 0x1d8], eax
mov dword [rsp + 0x2dc], eax
mov byte [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
call rax
mov r12, qword [rsp + 0x98]
mov ebx, eax
test r12, r12
je 0x2b3663472
mov rax, qword [0x2b3757188]
mov byte [rsp + 0x1ec], 0
mov dword [rsp + 0xe8], 0x6f766e
mov qword [rsp + 0xe0], rax
movabs rax, 0x786b526f7d79764d
mov qword [rsp + 0x2d0], rax
mov dword [rsp + 0x2d8], 0x6f766e
movzx eax, byte [rsp + 0x2d0]
mov dword [rsp + 0x1e8], 0x7878703a
sub eax, 0xa
mov byte [rsp + 0x2d0], al
movzx eax, byte [rsp + 0x2d1]
sub eax, 0xa
mov byte [rsp + 0x2d1], al
movzx eax, byte [rsp + 0x2d2]
sub eax, 0xa
mov byte [rsp + 0x2d2], al
movzx eax, byte [rsp + 0x2d3]
sub eax, 0xa
mov byte [rsp + 0x2d3], al
movzx eax, byte [rsp + 0x2d4]
sub eax, 0xa
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
sub eax, 0xa
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
sub eax, 0xa
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
sub eax, 0xa
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
sub eax, 0xa
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
sub eax, 0xa
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
sub eax, 0xa
mov byte [rsp + 0x2da], al
mov rax, qword [0x2b3757190]
mov qword [rsp + 0x1e0], rax
movabs rax, 0x3e3f78717a7e7177
mov qword [rsp + 0x2f0], rax
mov dword [rsp + 0x2f8], 0x7878703a
mov rdx, qword [rsp + 0x80]
mov byte [rsp + 0x2fc], 0
movzx eax, byte [rsp + 0x2f0]
mov rcx, qword [rsp + 0x88]
sub eax, 0xc
mov byte [rsp + 0x2f0], al
movzx eax, byte [rsp + 0x2f1]
sub eax, 0xc
mov byte [rsp + 0x2f1], al
movzx eax, byte [rsp + 0x2f2]
sub eax, 0xc
mov byte [rsp + 0x2f2], al
movzx eax, byte [rsp + 0x2f3]
sub eax, 0xc
mov byte [rsp + 0x2f3], al
movzx eax, byte [rsp + 0x2f4]
sub eax, 0xc
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
sub eax, 0xc
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
sub eax, 0xc
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
sub eax, 0xc
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
sub eax, 0xc
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
sub eax, 0xc
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
sub eax, 0xc
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
sub eax, 0xc
mov byte [rsp + 0x2fb], al
call fcn.2b3657510
mov rcx, r12
call rax
mov qword [rsp + 0x98], 0
test ebx, ebx
jne 0x2b3662dec
mov qword [rsp + 0x50], 0
jmp 0x2b3661f12
mov rax, qword [str.mOfKYokernel32MvyoRkxwqzqx__GetVersi_b]
mov ecx, 0xd
mov dword [rsp + 0x2f0], 0x2a
lea rsi, [rsp + 0x200]
mov byte [rsp + 0x20c], 0
mov rdi, r14
mov qword [rsp + 0x200], rax
mov dword [rsp + 0x208], 0x58455858
rep movsb byte [rdi], byte [rsi]
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
mov byte [rsp + 0x21c], 0
movq xmm0, qword [0x2b3757180]
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
mov dword [rsp + 0x2d0], 0x64
mov ebx, dword [rsp + 0x2d0]
mov edi, dword [rsp + 0x2d0]
mov esi, dword [rsp + 0x2d0]
mov r8d, dword [rsp + 0x2d0]
mov r9d, dword [rsp + 0x2d0]
movzx ebx, bl
mov r10d, dword [rsp + 0x2d0]
add esi, 2
add edi, 1
mov r11d, dword [rsp + 0x2d0]
add r9d, 4
add r8d, 3
movzx esi, sil
movzx edi, dil
add r11d, 6
add r10d, 5
movzx r9d, r9b
movzx r8d, r8b
mov eax, dword [rsp + 0x2d0]
movzx r11d, r11b
movzx r10d, r10b
mov ecx, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d0]
mov ebp, dword [rsp + 0x2d0]
add eax, 7
mov r12d, dword [rsp + 0x2d0]
movzx eax, al
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rsi
lea rsi, [rsp + 0x210]
shl rax, 8
or rax, rdi
mov rdi, r15
shl rax, 8
or rax, rbx
add ecx, 8
add edx, 9
xor ecx, 0x2e
movq xmm7, rax
xor eax, eax
xor edx, 0x64
mov al, cl
lea ecx, [r12 + 0xb]
pxor xmm0, xmm7
movq qword [rsp + 0x210], xmm0
mov ah, dl
lea edx, [rbp + 0xa]
xor ecx, 0x6c
xor edx, 0x6c
movzx eax, ax
shl ecx, 0x18
movzx edx, dl
shl edx, 0x10
or eax, edx
or eax, ecx
mov ecx, 0xd
mov dword [rsp + 0x218], eax
rep movsb byte [rdi], byte [rsi]
mov rcx, r15
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx edx, byte [rsp + 0x2d5]
mov eax, dword [rsp + 0x2d0]
add eax, 1
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx edx, byte [rsp + 0x2d6]
mov eax, dword [rsp + 0x2d0]
add eax, 2
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx edx, byte [rsp + 0x2d7]
mov eax, dword [rsp + 0x2d0]
add eax, 3
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx edx, byte [rsp + 0x2d8]
mov eax, dword [rsp + 0x2d0]
add eax, 4
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx edx, byte [rsp + 0x2d9]
mov eax, dword [rsp + 0x2d0]
add eax, 5
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx edx, byte [rsp + 0x2da]
mov eax, dword [rsp + 0x2d0]
add eax, 6
xor eax, edx
mov byte [rsp + 0x2da], al
movzx edx, byte [rsp + 0x2db]
mov eax, dword [rsp + 0x2d0]
add eax, 7
xor eax, edx
mov byte [rsp + 0x2db], al
movzx edx, byte [rsp + 0x2dc]
mov eax, dword [rsp + 0x2d0]
add eax, 8
xor eax, edx
mov byte [rsp + 0x2dc], al
movzx edx, byte [rsp + 0x2dd]
mov eax, dword [rsp + 0x2d0]
add eax, 9
xor eax, edx
mov byte [rsp + 0x2dd], al
movzx edx, byte [rsp + 0x2de]
mov eax, dword [rsp + 0x2d0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0x2de], al
movzx edx, byte [rsp + 0x2df]
mov eax, dword [rsp + 0x2d0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0x2df], al
mov byte [rsp + 0x2e0], 0
call fcn.2b3657510
call rax
mov r12, qword [rsp + 0x98]
mov ebx, eax
test r12, r12
je 0x2b3663ac3
mov rax, qword [0x2b3757188]
mov byte [rsp + 0x22c], 0
lea rsi, [rsp + 0x220]
mov ecx, 0xd
mov dword [rsp + 0xf8], 0x6f766e
mov rdi, qword [rsp + 0x88]
mov qword [rsp + 0xf0], rax
movabs rax, 0x786b526f7d79764d
mov qword [rsp + 0x2d0], rax
mov dword [rsp + 0x2d8], 0x6f766e
movzx eax, byte [rsp + 0x2d0]
mov dword [rsp + 0x228], 0x7878703a
sub eax, 0xa
mov byte [rsp + 0x2d0], al
movzx eax, byte [rsp + 0x2d1]
sub eax, 0xa
mov byte [rsp + 0x2d1], al
movzx eax, byte [rsp + 0x2d2]
sub eax, 0xa
mov byte [rsp + 0x2d2], al
movzx eax, byte [rsp + 0x2d3]
sub eax, 0xa
mov byte [rsp + 0x2d3], al
movzx eax, byte [rsp + 0x2d4]
sub eax, 0xa
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
sub eax, 0xa
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
sub eax, 0xa
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
sub eax, 0xa
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
sub eax, 0xa
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
sub eax, 0xa
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
sub eax, 0xa
mov byte [rsp + 0x2da], al
mov rax, qword [0x2b3757190]
mov qword [rsp + 0x220], rax
rep movsb byte [rdi], byte [rsi]
movzx eax, byte [rsp + 0x2f0]
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
sub eax, 0xc
mov byte [rsp + 0x2f0], al
movzx eax, byte [rsp + 0x2f1]
sub eax, 0xc
mov byte [rsp + 0x2f1], al
movzx eax, byte [rsp + 0x2f2]
sub eax, 0xc
mov byte [rsp + 0x2f2], al
movzx eax, byte [rsp + 0x2f3]
sub eax, 0xc
mov byte [rsp + 0x2f3], al
movzx eax, byte [rsp + 0x2f4]
sub eax, 0xc
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
sub eax, 0xc
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
sub eax, 0xc
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
sub eax, 0xc
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
sub eax, 0xc
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
sub eax, 0xc
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
sub eax, 0xc
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
sub eax, 0xc
mov byte [rsp + 0x2fb], al
call fcn.2b3657510
mov rcx, r12
call rax
mov qword [rsp + 0x98], 0
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x2b3663d78
mov rax, qword [0x2b3757250]
mov ecx, 0xd
mov rdi, r14
mov dword [rsp + 0x2d0], 0x3c
mov word [rsp + 0xa8], 0x59
lea rsi, [rsp + 0x270]
mov qword [rsp + 0xa0], rax
movabs rax, 0x594e7a505d5f5370
mov qword [rsp + 0x2d4], rax
mov word [rsp + 0x2dc], 0x59
movzx eax, byte [rsp + 0x2d4]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d4], al
movzx eax, byte [rsp + 0x2d5]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d5], al
movzx eax, byte [rsp + 0x2d6]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d6], al
movzx eax, byte [rsp + 0x2d7]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d7], al
movzx eax, byte [rsp + 0x2d8]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d8], al
movzx eax, byte [rsp + 0x2d9]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2d9], al
movzx eax, byte [rsp + 0x2da]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2da], al
movzx eax, byte [rsp + 0x2db]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2db], al
movzx eax, byte [rsp + 0x2dc]
mov edx, dword [rsp + 0x2d0]
xor eax, edx
mov byte [rsp + 0x2dc], al
mov rax, qword [0x2b3757258]
mov byte [rsp + 0x2dd], 0
mov qword [rsp + 0x270], rax
mov dword [rsp + 0x2f0], 0x6d
mov byte [rsp + 0x27c], 0
mov dword [rsp + 0x278], 0x1010943
rep movsb byte [rdi], byte [rsi]
lea rcx, [rsp + 0x2f4]
movzx eax, byte [rsp + 0x2f4]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f4], al
movzx eax, byte [rsp + 0x2f5]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f5], al
movzx eax, byte [rsp + 0x2f6]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f6], al
movzx eax, byte [rsp + 0x2f7]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f7], al
movzx eax, byte [rsp + 0x2f8]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f8], al
movzx eax, byte [rsp + 0x2f9]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2f9], al
movzx eax, byte [rsp + 0x2fa]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fa], al
movzx eax, byte [rsp + 0x2fb]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fb], al
movzx eax, byte [rsp + 0x2fc]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fc], al
movzx eax, byte [rsp + 0x2fd]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fd], al
movzx eax, byte [rsp + 0x2fe]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov byte [rsp + 0x2fe], al
movzx eax, byte [rsp + 0x2ff]
mov edx, dword [rsp + 0x2f0]
xor eax, edx
mov rdx, r15
mov byte [rsp + 0x2ff], al
mov byte [rsp + 0x300], 0
call fcn.2b3657510
mov rcx, rbp
call rax
mov dword [rsp + 0x94], 0
test ebx, ebx
jne 0x2b3662dec
mov rax, qword [pe_dos_header]
ud2