Function at 0x14007a030
Capabilities:
Create device object

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
movups xmmword [rbp + 0x20], xmm6
mov qword [rbp - 0x80], rcx
mov eax, dword [0x140098b5c]
imul ecx, dword [0x140096898], 0x9ee509bc
imul edx, dword [0x14009689c], 0xad0693aa
add ecx, edx
add ecx, 0x8fd4a3b5
xor ecx, eax
imul ecx, eax
mov eax, dword [0x1400968a0]
mov edx, dword [0x1400968a4]
shrd edx, eax, 5
xor edx, 0xdf0fd4f
and edx, ecx
imul eax, dword [0x1400968a8], 0xfc74456a
imul ecx, dword [0x1400968ac], 0xc5afe78f
add eax, ecx
add eax, 0x6a2dad44
mov ecx, dword [0x1400968b0]
mov r8d, dword [0x1400968b4]
shrd r8d, ecx, 0x11
imul ecx, dword [0x1400968b8], 0x4fcfb559
imul r9d, dword [0x1400968bc], 0xf8c8b31a
mov r10d, dword [0x1400968c0]
mov r11d, dword [0x1400968c4]
shrd r11d, r10d, 0xd
xor r8d, 0xf18e553
xor r11d, 0x2615b500
cmp edx, eax
mov eax, r9d
lea eax, [rcx + rax - 0x5d9fe3ed]
cmove r11d, eax
cmp dword [0x140098b60], r8d
cmovl r11d, eax
mov dword [rbp - 0x74], r11d
xorps xmm6, xmm6
mov edi, 0x2cb67286
mov edx, edi
mov edi, ecx
mov r8d, esi
mov byte [rbp + 0x1c], bl
mov rax, r14
mov qword [rbp - 0x30], r15
mov rcx, qword [rbp + 8]
mov qword [rbp - 0x38], rcx
mov r12, qword [rbp]
mov rsi, qword [rbp - 8]
mov r11, qword [rbp - 0x10]
mov r9, qword [rbp - 0x18]
mov r13, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x28]
mov r15b, byte [rbp + 0x1f]
mov r10b, byte [rbp + 0x1e]
mov r14b, byte [rbp + 0x1d]
cmp edx, 0x21965286
jle 0x14007a310
cmp edx, 0x469628aa
jg 0x14007a429
cmp edx, 0x2cb67285
jg 0x14007a882
cmp edx, 0x28e0921c
jle 0x14007ae25
cmp edx, 0x2a151f6c
jg 0x14007ba80
cmp edx, 0x28e0921d
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x40], rcx
je 0x14007c64b
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov qword [rbp - 0x68], rax
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x290dd118
jne 0x14007a11c
mov rdx, r12
mov r13, r9
mov r12d, r10d
imul eax, dword [0x140096e70], 0xe65f84b8
imul ecx, dword [0x140096e6c], 0x161e1f6d
add eax, ecx
add eax, 0xc103f69d
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140096e78]
mov rsi, rdx
mov edx, dword [0x140096e74]
shrd ecx, edx, 0xe
xor ecx, 0x559bc1f1
and ecx, eax
mov eax, dword [0x140096e80]
mov edx, dword [0x140096e7c]
shrd eax, edx, 2
mov edx, dword [0x140096e98]
mov edi, r8d
mov r8d, dword [0x140096e94]
shrd edx, r8d, 2
xor eax, 0x1ee5838b
xor edx, 0xc7e92ff
imul r8d, dword [0x140096e84], 0xed338940
imul r9d, dword [0x140096e88], 0x31272fec
imul r10d, dword [0x140096e8c], 0x68a2aef7
mov rbx, r11
imul r11d, dword [0x140096e90], 0xcefccbdf
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x6b9b91d6]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x37524d2f]
cmove edx, ecx
cmp dword [0x140098b60], eax
cmovl edx, ecx
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r12b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], rbx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], rsi
jmp 0x14007ba66
cmp edx, 0xe6fc623d
jle 0x14007a77c
cmp edx, 0x51bacf2
jg 0x14007ab78
cmp edx, 0xee14c553
jle 0x14007b735
cmp edx, 0xf8124e7a
jg 0x14007bea7
cmp edx, 0xee14c554
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x58], r13
je 0x14007ce9f
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0xefdb9e84
jne 0x14007a11c
mov r10, rax
mov eax, dword [r12]
mov dword [r10], eax
mov byte [rbp + 0x1d], r13b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, r11
mov r14, r10
mov ebx, r9d
mov esi, r8d
mov ecx, dword [rbp + 0x14]
mov edi, 0x3c35ae71
jmp 0x14007a11c
cmp edx, 0x6224c434
jg 0x14007aa16
cmp edx, 0x5899e6f6
jle 0x14007af2b
cmp edx, 0x5f8d3fea
jg 0x14007bb7f
cmp edx, 0x5899e6f7
je 0x14007c4f9
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r15, qword [rbp - 0x30]
mov r14, rax
mov qword [rbp - 0x68], rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x5c6a2b7d
jne 0x14007a11c
mov rdx, r12
mov r12, r13
mov r13, r11
mov rcx, qword [0x140098d10]
sub rsp, 0x20
mov byte [rbp + 0x1a], r8b
mov r8d, 0x1000
mov qword [rbp - 0x70], rdx
xor edx, edx
mov qword [rbp - 0x48], r9
mov r14d, r10d
call fcn.140088640
mov r8d, 0x1fe
mov rcx, r12
xor edx, edx
call fcn.140088640
add rsp, 0x20
mov rax, qword [0x140096b70]
movabs rcx, 0x4554cb6878853ce3
imul rax, rcx
mov rcx, qword [0x140096b78]
movabs rdx, 0x6c23287bbc3ed0ae
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0x9a514e7f1a7c79b7
add rdx, rax
sub rsp, 0x20
mov rcx, r12
lea r8, [0x1400884d6]
mov r9, r13
call fcn.14007e153
add rsp, 0x20
mov rcx, qword [0x140098d10]
sub rsp, 0x20
mov rdx, r12
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
mov eax, dword [0x140096b80]
mov ecx, dword [0x140096b84]
shrd ecx, eax, 7
mov r8d, ecx
xor r8d, 0xb74c60f4
mov eax, dword [0x140096b88]
mov ecx, dword [0x140096b8c]
shrd ecx, eax, 0x15
xor ecx, 0xd4d2eb2d
sub rsp, 0x30
mov dword [rsp + 0x20], ecx
lea rcx, [0x140088244]
lea rdx, [0x1400884f6]
mov r9, r13
call fcn.14001491d
add rsp, 0x30
imul eax, dword [0x140096b90], 0x680573b2
imul edx, dword [0x140096b94], 0xa8c5b4f9
mov r15, qword [rbp - 0x30]
mov rcx, qword [r15]
mov r8d, dword [0x140096b98]
mov r9d, dword [0x140096b9c]
shrd r9d, r8d, 2
add edx, eax
add edx, 0xf67e7298
xor r9d, 0x9f44d550
mov eax, dword [0x140096ba0]
mov r8d, dword [0x140096ba4]
shrd r8d, eax, 0xd
xor r8d, 0xf880379c
mov al, byte [0x140096ba8]
mov r10b, byte [0x140096ba9]
shr r10b, 6
shl al, 2
or al, r10b
xor al, 0x73
sub rsp, 0x40
lea r10, [0x140098cf8]
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x20], r8d
mov byte [rsp + 0x28], al
lea r8, [0x140098d00]
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
add rsp, 0x40
mov rbx, qword [rbp - 0x38]
mov dword [rbx], eax
imul ecx, dword [0x140096bac], 0xf7dd90db
imul edx, dword [0x140096bb0], 0x9f8ec46
add ecx, edx
add ecx, 0xb1c1d21b
cmp eax, ecx
mov ecx, dword [0x140096bb8]
setg al
mov edx, dword [0x140096bb4]
shrd ecx, edx, 0x16
mov edx, dword [0x140098b5c]
xor ecx, edx
xor ecx, 0x45ccfcef
imul ecx, edx
mov edx, dword [0x140096bc0]
mov r8d, dword [0x140096bbc]
shrd edx, r8d, 0xc
xor edx, 0x29ce118c
and edx, ecx
imul ecx, dword [0x140096bc8], 0xed0c7f26
imul r8d, dword [0x140096bc4], 0xee45aadf
add ecx, r8d
add ecx, 0xee5839f6
mov edi, dword [0x140096be0]
mov r9d, dword [0x140096bdc]
shrd edi, r9d, 0x13
xor edi, 0xb42d7882
imul r9d, dword [0x140096bcc], 0xc3b50072
imul r10d, dword [0x140096bd0], 0x1b4cf0a
imul r11d, dword [0x140096bd4], 0x972b7a0
imul esi, dword [0x140096bd8], 0xf4fd2af2
cmp edx, ecx
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx - 0x33e9b174]
mov edx, esi
mov r9d, r11d
lea edx, [r9 + rdx + 0x49fcf6a0]
cmove edi, edx
cmp dword [0x140098b60], ecx
cmovl edi, edx
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r14b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r12
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], r13
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], rbx
jmp 0x14007dbf6
cmp edx, 0xbbb40d21
jle 0x14007ac80
cmp edx, 0xccce93ca
jle 0x14007b341
cmp edx, 0xde2be4b0
jg 0x14007bd96
cmp edx, 0xccce93cb
je 0x14007ce3c
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov qword [rbp - 0x48], r9
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0xcd63fbe0
jne 0x14007a11c
mov r10, rax
mov byte [rbp + 0x1d], r13b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, r11
mov r14, r10
mov ebx, r9d
mov esi, r8d
mov ecx, dword [rbp + 0x14]
mov edi, 0x92d005e2
jmp 0x14007a11c
cmp edx, 0x37eba4d7
jle 0x14007b02b
cmp edx, 0x3c5cdba0
jg 0x14007bc06
cmp edx, 0x37eba4d8
je 0x14007c4a8
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r11
mov qword [rbp - 0x70], r12
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x3c35ae71
jne 0x14007a11c
mov r12, rax
mov rdx, r13
mov r13d, r10d
mov eax, dword [r11]
mov r14, r12
mov dword [r12], eax
mov eax, dword [0x1400969dc]
mov ecx, dword [0x1400969d8]
shrd eax, ecx, 0xf
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x95bf6c06
mov rbx, rdx
mov edx, eax
imul edx, ecx
mov eax, dword [0x1400969e4]
mov ecx, dword [0x1400969e0]
shrd eax, ecx, 0xc
xor eax, 0xb88d2fd1
and eax, edx
imul ecx, dword [0x1400969ec], 0xaa29f29
imul edx, dword [0x1400969e8], 0xd121ba5b
add ecx, edx
add ecx, 0xf67b1ec9
mov edx, dword [0x1400969f4]
mov r12d, r8d
mov r8d, dword [0x1400969f0]
shrd edx, r8d, 0x15
mov r8d, dword [0x1400969fc]
mov rsi, r9
mov r9d, dword [0x1400969f8]
shrd r8d, r9d, 0xa
mov edi, dword [0x140096a04]
mov r10d, dword [0x140096a00]
shrd edi, r10d, 0x1e
xor edx, 0xa9391331
xor r8d, 0xafaf8ed9
xor edi, 0xcab48453
cmp eax, ecx
cmove edi, r8d
cmp dword [0x140098b60], edx
cmovl edi, r8d
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r13b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rsi
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r11
jmp 0x14007b8d1
cmp edx, 0x78fedb56
mov qword [rbp - 0x40], rcx
jle 0x14007b26e
cmp edx, 0x7ba8a162
jg 0x14007bd13
cmp edx, 0x78fedb57
mov dword [rbp + 0x14], edi
mov qword [rbp - 0x68], rax
je 0x14007c714
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov byte [rbp + 0x18], r14b
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, edx
cmp edx, 0x7a1955fb
jne 0x14007a11c
mov rdx, r13
mov r13d, r10d
imul eax, dword [0x140096f40], 0xa23b165
imul ecx, dword [0x140096f3c], 0x6e05106d
add eax, ecx
add eax, 0x393837e0
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140096f50]
mov r14, rdx
mov edx, dword [0x140096f4c]
shrd ecx, edx, 0x1a
imul edx, dword [0x140096f48], 0x13f6bd8f
mov rsi, r12
mov r12d, r8d
imul r8d, dword [0x140096f44], 0x86be8e89
add edx, r8d
add edx, 0x5bff190b
mov r8d, dword [0x140096f58]
mov rbx, r9
mov r9d, dword [0x140096f54]
shrd r8d, r9d, 2
mov r9d, dword [0x140096f60]
mov r10d, dword [0x140096f5c]
shrd r9d, r10d, 0x1f
and edx, eax
xor ecx, 0x2ec4754a
xor r8d, 0x3f2681e0
imul eax, dword [0x140096f64], 0xb41cd09f
xor r9d, 0x8e7950c2
imul r10d, dword [0x140096f68], 0xeba89f1d
cmp edx, ecx
mov ecx, r10d
lea edi, [rax + rcx - 0x57dbd624]
cmove edi, r9d
cmp dword [0x140098b60], r8d
cmovl edi, r9d
jmp 0x14007addd
cmp edx, 0xd9fd7e6
jle 0x14007b8e3
cmp edx, 0x135ce012
jg 0x14007bf89
cmp edx, 0xd9fd7e7
mov qword [rbp - 0x68], rax
je 0x14007cf87
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0xf4f98c9
jne 0x14007a11c
mov rdx, r13
mov r13d, r10d
mov rcx, qword [0x140098cf8]
sub rsp, 0x20
mov edi, r8d
mov rsi, r11
mov rbx, r9
mov r15, rdx
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
add rsp, 0x20
mov eax, dword [r12]
mov r14, qword [rbp - 0x68]
mov dword [r14], eax
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r13b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rsi
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, qword [rbp - 0x30]
mov bl, byte [rbp + 0x1c]
mov esi, edi
mov ecx, dword [rbp + 0x14]
mov edi, 0x3386ae5f
jmp 0x14007a11c
cmp edx, 0x936ec178
jle 0x14007b5a3
cmp edx, 0xb2dbbd0b
jg 0x14007c4ed
cmp edx, 0x936ec179
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x40], rcx
je 0x14007c53e
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r11, qword [rbp - 0x30]
mov r15, r11
mov byte [rbp + 0x18], r14b
mov qword [rbp - 0x68], rax
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x9a8b9127
jne 0x14007a11c
mov rdx, r13
mov r13d, r10d
imul eax, dword [0x140096e10], 0x99695a6d
imul ecx, dword [0x140096e0c], 0xa3740ddd
add eax, ecx
add eax, 0x8a143ddf
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x140096e18], 0x795cb555
mov r14, rdx
imul edx, dword [0x140096e14], 0x3e56ed83
add ecx, edx
add ecx, 0x96d55d33
and ecx, eax
imul eax, dword [0x140096e20], 0xb0d91b98
imul edx, dword [0x140096e1c], 0xdd6581a5
add eax, edx
add eax, 0xf83296bd
mov edx, dword [0x140096e30]
mov rsi, r12
mov r12d, r8d
mov r8d, dword [0x140096e2c]
shrd edx, r8d, 0x1b
mov edi, dword [0x140096e38]
mov rbx, r9
mov r9d, dword [0x140096e34]
shrd edi, r9d, 7
xor edx, 0x2536015b
imul r9d, dword [0x140096e24], 0xfd36d884
xor edi, 0xdd8c75ca
imul r10d, dword [0x140096e28], 0xd9884603
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0x64b2d655]
cmove edi, edx
cmp dword [0x140098b60], eax
cmovl edi, edx
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r13b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rbx
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], rsi
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, r11
mov r14, qword [rbp - 0x68]
jmp 0x14007b8d5
cmp edx, 0x21965287
je 0x14007d6a5
cmp edx, 0x251a458d
je 0x14007d1d1
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov qword [rbp - 0x48], r9
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x27c43397
jne 0x14007a11c
mov r10, rax
mov eax, dword [0x140097054]
mov ecx, dword [0x140097050]
shrd eax, ecx, 5
xor eax, 0xac35bb15
mov dword [r10], eax
mov byte [rbp + 0x1d], r13b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, r11
mov r14, r10
mov ebx, r9d
mov esi, r8d
mov ecx, dword [rbp + 0x14]
mov edi, 0xe7ac1cee
jmp 0x14007a11c
cmp edx, 0x469628ab
je 0x14007d79e
cmp edx, 0x4f90e3f4
je 0x14007d21d
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov qword [rbp - 0x68], rax
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x57e80b1f
jne 0x14007a11c
mov rdx, r13
mov r13d, r10d
mov rcx, qword [0x140098d10]
sub rsp, 0x20
mov r14, rdx
lea rdx, [0x140098d00]
mov edi, r8d
mov rsi, r11
mov rbx, r9
call qword [sym.imp.ntoskrnl.exe_IoCreateSymbolicLink]
add rsp, 0x20
mov dword [r12], eax
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r13b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rsi
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov esi, edi
mov ecx, dword [rbp + 0x14]
mov edi, 0x51bacf3
jmp 0x14007a11c
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x58], r13
mov r13, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r13
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x30]
mov r15, r12
mov qword [rbp - 0x60], r11
mov r11, rax
mov byte [rbp + 0x18], r14b
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov rax, rcx
mov ecx, edi
mov byte [rbp + 0x1a], r8b
mov r8d, edi
mov edi, dword [rbp - 0x74]
cmp edx, 0x2cb67286
je 0x14007a11c
mov qword [rbp - 0x40], rax
mov bl, byte [rbp + 0x18]
mov r15d, r10d
mov qword [rbp - 0x48], r9
mov r14, r11
mov dword [rbp + 0x14], r8d
cmp edx, 0x3386ae5f
je 0x14007d294
mov byte [rbp + 0x1d], bl
mov byte [rbp + 0x19], r15b
mov byte [rbp + 0x1e], r15b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov r10, r13
mov qword [rbp + 8], r13
mov r11, r12
mov r15, r12
mov r8b, byte [rbp + 0x1c]
mov ebx, r8d
mov r13b, byte [rbp + 0x1a]
mov esi, r13d
mov r12d, dword [rbp + 0x14]
mov ecx, r12d
mov edi, edx
cmp edx, 0x35ad8b3c
jne 0x14007a11c
mov r9, r14
mov rax, qword [r11]
lea rcx, [0x14007f4c0]
mov qword [rax + 0xe0], rcx
imul eax, dword [0x140096f08], 0x5e2c24b8
imul ecx, dword [0x140096f04], 0xa89e8bef
add eax, ecx
add eax, 0xc65f304e
mov dword [r14], eax
mov eax, dword [0x140096f10]
mov ecx, dword [0x140096f0c]
shrd eax, ecx, 0x1a
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x70a49572
imul eax, ecx
mov ecx, dword [0x140096f20]
mov edx, dword [0x140096f1c]
shrd ecx, edx, 7
imul edx, dword [0x140096f18], 0x846fc9c6
mov ebx, r8d
imul r8d, dword [0x140096f14], 0x2e518597
add edx, r8d
add edx, 0x1363848
mov r8d, dword [0x140096f28]
mov r9d, dword [0x140096f24]
shrd r8d, r9d, 0x18
mov r9d, dword [0x140096f30]
mov rsi, r10
mov r10d, dword [0x140096f2c]
shrd r9d, r10d, 0x1a
and edx, eax
mov edi, dword [0x140096f38]
mov r10d, dword [0x140096f34]
shrd edi, r10d, 1
xor ecx, 0x95d3f58c
xor r8d, 0xed0ece7a
xor r9d, 0x5e42e726
xor edi, 0xa46655fd
cmp edx, ecx
cmove edi, r9d
cmp dword [0x140098b60], r8d
cmovl edi, r9d
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], rsi
mov r15, r11
mov esi, r13d
mov ecx, r12d
jmp 0x14007a11c
cmp edx, 0x6224c435
mov qword [rbp - 0x48], r9
mov byte [rbp + 0x19], r10b
je 0x14007d8b4
cmp edx, 0x6e0aba22
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x60], r11
je 0x14007d3c7
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov ebx, r15d
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x18], r14b
mov r14, rax
mov r9b, byte [rbp + 0x1c]
mov r13d, ebx
mov ebx, r9d
mov esi, r8d
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x78cacb78
jne 0x14007a11c
mov r10, rax
mov eax, dword [0x14009699c]
mov ecx, dword [0x140096998]
shrd eax, ecx, 0x10
mov edi, dword [0x1400969a4]
mov edx, dword [0x1400969a0]
shrd edi, edx, 0xa
xor eax, 0x2d4b5d88
xor edi, 0xda9c91f1
test r13b, 1
cmovne edi, eax
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r13b
jmp 0x14007be5f
cmp edx, 0xbbb40d22
mov qword [rbp - 0x40], rcx
je 0x14007da3d
cmp edx, 0xbe0b69b4
mov byte [rbp + 0x1a], r8b
je 0x14007d5dd
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov qword [rbp - 0x68], rax
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0xc6354223
jne 0x14007a11c
mov rdx, r12
mov r12, r13
mov r13, r11
mov rcx, qword [0x140098d10]
sub rsp, 0x20
mov r8d, 0x1000
mov rbx, rdx
xor edx, edx
mov r14, r9
mov edi, r10d
call fcn.140088640
mov r8d, 0x1fe
mov rcx, r12
xor edx, edx
call fcn.140088640
add rsp, 0x20
mov rax, qword [0x140097058]
mov rcx, qword [0x140097060]
shrd rcx, rax, 0x3a
mov rdx, rcx
movabs rax, 0x56e7e0a75fb62e69
xor rdx, rax
sub rsp, 0x20
mov rcx, r12
lea r8, [0x1400884d6]
mov r9, r13
call fcn.14007e153
add rsp, 0x20
mov rcx, qword [0x140098d10]
sub rsp, 0x20
mov rdx, r12
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x140097068], 0x132b693f
imul ecx, dword [0x14009706c], 0xa7958670
lea r8d, [rax + rcx]
add r8d, 0x18f2d8db
mov eax, dword [0x140097070]
mov ecx, dword [0x140097074]
shrd ecx, eax, 0x1e
xor ecx, 0xe01acb12
sub rsp, 0x30
mov dword [rsp + 0x20], ecx
lea rcx, [0x140088244]
lea rdx, [0x1400884f6]
mov r9, r13
call fcn.14001491d
add rsp, 0x30
imul eax, dword [0x140097078], 0x22d6d250
imul edx, dword [0x14009707c], 0xe2508deb
mov r15, qword [rbp - 0x30]
mov rcx, qword [r15]
add edx, eax
add edx, 0xdcab69de
imul eax, dword [0x140097080], 0xf09dc64
imul r8d, dword [0x140097084], 0x4f3c4f42
imul r10d, dword [0x140097088], 0x1e8b0a23
lea r9d, [rax + r8]
add r9d, 0x2cc45e64
imul eax, dword [0x14009708c], 0x9888ad7e
mov r8d, r10d
add eax, r8d
add eax, 0xcd24fb88
mov r8b, byte [0x140097090]
mov r10b, byte [0x140097091]
shr r10b, 3
shl r8b, 5
or r8b, r10b
xor r8b, 0x56
sub rsp, 0x40
lea r10, [0x140098cf8]
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x20], eax
mov byte [rsp + 0x28], r8b
lea r8, [0x140098d00]
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
add rsp, 0x40
mov rsi, qword [rbp - 0x38]
mov dword [rsi], eax
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], dil
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r13
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], rbx
mov qword [rbp + 8], rsi
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, dword [rbp + 0x14]
mov edi, 0x5c6a2b7d
jmp 0x14007a11c
cmp edx, 0x84f66fa7
mov qword [rbp - 0x40], rcx
je 0x14007dd2d
cmp edx, 0x91bc0bdb
je 0x14007d9c8
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov qword [rbp - 0x68], rax
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov ecx, edi
mov esi, r8d
mov edi, edx
cmp edx, 0x92d005e2
jne 0x14007a11c
mov rdx, r12
mov r12d, r10d
mov eax, dword [0x140096f70]
mov ecx, dword [0x140096f6c]
shrd eax, ecx, 0xb
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0xb3500316
imul eax, ecx
mov ecx, dword [0x140096f78]
mov rsi, rdx
mov edx, dword [0x140096f74]
shrd ecx, edx, 8
xor ecx, 0xd35b7b6d
and ecx, eax
mov eax, dword [0x140096f80]
mov edx, dword [0x140096f7c]
shrd eax, edx, 0x16
mov edx, dword [0x140096f90]
mov r15, r13
mov r13d, r8d
mov r8d, dword [0x140096f8c]
shrd edx, r8d, 0x1d
xor eax, 0x152686a4
xor edx, 0xddd8bc5a
imul r8d, dword [0x140096f84], 0xd65413db
mov r14, r9
imul r9d, dword [0x140096f88], 0x4b2e8d0f
imul r10d, dword [0x140096f94], 0x2c9f23c5
mov rbx, r11
imul r11d, dword [0x140096f98], 0x867a541f
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x59dca213]
mov ecx, r11d
mov r8d, r10d
lea edi, [r8 + rcx - 0x3ee1a13e]
cmove edi, edx
cmp dword [0x140098b60], eax
cmovl edi, edx
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r12b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rbx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], rsi
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov ecx, dword [r14]
mov bl, byte [rbp + 0x1c]
mov esi, r13d
jmp 0x14007a11c
cmp edx, 0xe6fc623e
mov qword [rbp - 0x68], rax
je 0x14007de49
cmp edx, 0xe75ae334
mov dword [rbp + 0x14], edi
mov qword [rbp - 0x50], rsi
je 0x14007dabb
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov edi, edx
cmp edx, 0xe7ac1cee
jne 0x14007a11c
mov rdx, r12
mov eax, dword [0x140096b0c]
mov ecx, dword [0x140096b08]
shrd eax, ecx, 0x1f
xor eax, 0xc7298acb
mov r14, qword [rbp - 0x68]
mov dword [r14], eax
mov eax, dword [0x140096b14]
mov ecx, dword [0x140096b10]
shrd eax, ecx, 0xb
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x1524ee20
imul eax, ecx
mov ecx, dword [0x140096b1c]
mov qword [rbp - 0x70], r12
mov edx, dword [0x140096b18]
shrd ecx, edx, 0x10
xor ecx, 0x8d45362
and ecx, eax
mov eax, dword [0x140096b24]
mov edx, dword [0x140096b20]
shrd eax, edx, 0x16
mov edx, dword [0x140096b2c]
mov r12d, r8d
mov r8d, dword [str.s_Nr_]
shrd edx, r8d, 3
xor eax, 0x499caaf2
xor edx, 0x7fd7faad
imul r8d, dword [0x140096b30], 0xccd5b01f
mov r15, r9
imul r9d, dword [0x140096b34], 0xb71517be
mov ebx, r10d
imul r10d, dword [0x140096b38], 0xa6f70f41
mov rsi, r11
imul r11d, dword [0x140096b3c], 0xe1b3b42
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0xbcda541]
mov ecx, r11d
mov r8d, r10d
lea edi, [r8 + rcx - 0xfa23c3a]
cmove edi, eax
cmp dword [0x140098b60], edx
cmovl edi, eax
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], bl
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], rsi
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov bl, byte [rbp + 0x1c]
mov esi, r12d
mov ecx, dword [rbp + 0x14]
jmp 0x14007a11c
cmp edx, 0x51bacf3
mov qword [rbp - 0x40], rcx
je 0x14007df84
cmp edx, 0xc238fc0
je 0x14007dc09
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov r15, qword [rbp - 0x30]
mov byte [rbp + 0x18], r14b
mov qword [rbp - 0x68], rax
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0xc734a8a
mov qword [rbp - 0x58], r13
jne 0x14007a11c
mov rdx, r12
mov r13, r9
mov r12d, r10d
mov eax, dword [0x140096a0c]
mov ecx, dword [0x140096a08]
shrd eax, ecx, 0x1c
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0xe6ba073e
imul eax, ecx
mov ecx, dword [0x140096a14]
mov rbx, rdx
mov edx, dword [0x140096a10]
shrd ecx, edx, 0x11
xor ecx, 0x3e7f18dd
and ecx, eax
mov eax, dword [0x140096a1c]
mov edx, dword [0x140096a18]
shrd eax, edx, 2
imul edx, dword [0x140096a20], 0x213b8dc3
mov edi, r8d
imul r8d, dword [0x140096a24], 0x8b05c290
imul r9d, dword [0x140096a28], 0x57913466
imul r10d, dword [0x140096a2c], 0x329ad81d
mov r14, r11
imul r11d, dword [0x140096a30], 0x7ac850b3
imul esi, dword [0x140096a34], 0xd8358b8a
xor eax, 0xcb05fa6d
cmp ecx, eax
mov eax, r8d
mov ecx, edx
lea eax, [rcx + rax - 0x4101993b]
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx - 0x28378c87]
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx + 0x5f18a869]
cmove edx, ecx
cmp dword [0x140098b60], eax
cmovl edx, ecx
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov byte [rbp + 0x1e], r12b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r14
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], rbx
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov esi, edi
jmp 0x14007c49e
cmp edx, 0x2a151f6d
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x48], r9
mov byte [rbp + 0x19], r10b
je 0x14007ca29
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x18], r14b
mov r14, rax
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov r13, rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x2be6fa33
jne 0x14007a11c
mov r10, rax
imul eax, dword [0x140097094], 0x9fbc97d5
imul ecx, dword [0x140097098], 0x88fa3e9e
add eax, ecx
add eax, 0xa1981e28
mov dword [r13], eax
mov al, byte [rbp + 0x18]
mov byte [rbp + 0x1d], al
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov qword [rbp - 0x28], r13
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, r11
mov r14, r10
mov ebx, r9d
mov esi, r8d
mov ecx, dword [rbp + 0x14]
mov edi, 0xe75ae334
jmp 0x14007a11c
cmp edx, 0x5f8d3feb
je 0x14007cb49
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov qword [rbp - 0x48], r9
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x6041bb7d
je 0x14007bf29
jmp 0x14007a11c
cmp edx, 0x3c5cdba1
je 0x14007cb8e
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov qword [rbp - 0x48], r9
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x46240652
jne 0x14007a11c
mov r10, rax
imul eax, dword [0x140096e00], 0x57be66d
imul ecx, dword [0x140096dfc], 0x9e9a4cc0
add eax, ecx
add eax, 0xbd2eb376
imul ecx, dword [0x140096e08], 0x597aee0
imul edx, dword [0x140096e04], 0xe06d769c
lea edi, [rdx + rcx]
add edi, 0x1e3e7f1b
test r8b, 1
cmovne edi, eax
mov byte [rbp + 0x1d], r13b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
jmp 0x14007be93
cmp edx, 0x7ba8a163
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x48], r9
mov byte [rbp + 0x19], r10b
je 0x14007cbd3
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov r13d, r14d
mov r14, rax
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x7d432388
je 0x14007bf29
jmp 0x14007a11c
cmp edx, 0xde2be4b1
je 0x14007c4a8
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x50], rsi
mov rsi, qword [rbp - 0x38]
mov qword [rbp + 8], rsi
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov qword [rbp - 0x48], r9
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0xe4a6e2e8
jne 0x14007a11c
mov r10, rax
imul eax, dword [0x140096be8], 0x95eb5b55
imul ecx, dword [0x140096be4], 0x14b810fa
add eax, ecx
add eax, 0x7e070012
mov edi, dword [0x140096bf0]
mov edx, dword [0x140096bec]
shrd edi, edx, 0x15
xor edi, 0xfb5d5fed
test r13b, 1
cmovne edi, eax
mov byte [rbp + 0x1d], r13b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, r11
mov r14, r10
mov ebx, r9d
mov esi, r8d
mov ecx, dword [rbp + 0x14]
jmp 0x14007a11c
cmp edx, 0xf8124e7b
je 0x14007d0a4
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1b], r15b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp - 0x70], r12
mov r12, qword [rbp - 0x38]
mov qword [rbp - 0x50], rsi
mov qword [rbp + 8], r12
mov qword [rbp - 0x60], r11
mov r11, qword [rbp - 0x30]
mov r15, r11
mov qword [rbp - 0x58], r13
mov byte [rbp + 0x19], r10b
mov r13d, r14d
mov r14, rax
mov qword [rbp - 0x48], r9
mov r9b, byte [rbp + 0x1c]
mov ebx, r9d
mov esi, r8d
mov qword [rbp - 0x40], rcx
mov ecx, edi
mov dword [rbp + 0x14], edi
mov edi, edx
cmp edx, 0x3d8b5c
jne 0x14007a11c
mov r10, rax
mov byte [rbp + 0x1d], r13b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r12
mov r15, r11
mov r14, r10
mov ebx, r9d
mov esi, r8d
mov ecx, dword [rbp + 0x14]
mov edi, 0x7a1955fb
jmp 0x14007a11c
cmp edx, 0x135ce013
mov byte [rbp + 0x1a], r8b
je 0x14007d110
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rcx
mov r15, qword [rbp - 0x30]
mov r11d, r14d
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov r12d, edi
mov edi, edx
cmp edx, 0x1a07b467
jne 0x14007a11c
mov eax, dword [0x1400968c8]
mov ecx, dword [0x1400968cc]
shrd ecx, eax, 0x16
xor ecx, 0x7feb26f1
mov eax, ecx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, dword [0x1400968d0]
mov ecx, dword [0x1400968d4]
shrd ecx, eax, 0xf
xor ecx, 0x12194369
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdx, rsp
mov qword [rbp - 0x38], rdx
mov eax, dword [0x1400968d8]
mov ecx, dword [0x1400968dc]
shrd ecx, eax, 5
xor ecx, 0x88fcaa21
mov eax, ecx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r9, rsp
mov qword [rbp + 8], r9
imul eax, dword [0x1400968e0], 0x8ced534a
imul ecx, dword [0x1400968e4], 0xef76551d
add eax, ecx
add eax, 0x98a3b3d7
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rcx, rsp
mov qword [rbp], rcx
mov eax, dword [0x1400968e8]
mov r8d, dword [0x1400968ec]
shrd r8d, eax, 0x16
xor r8d, 0xb6e16d4a
mov eax, r8d
shl rax, 4
lea rax, [rax + rax*2]
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r8, rsp
imul eax, dword [0x1400968f0], 0x6a55ebaa
mov byte [rbp + 0x19], r10b
imul r10d, dword [0x1400968f4], 0x93caca47
add eax, r10d
add eax, 0x66f79364
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r10, rsp
mov eax, dword [0x1400968f8]
mov dword [rbp + 0x14], r12d
mov r12d, r11d
mov r11d, dword [0x1400968fc]
shrd r11d, eax, 0x11
xor r11d, 0x1a43e6b2
mov eax, r11d
shl rax, 4
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r11, rsp
mov eax, dword [str.z_j]
mov esi, dword [0x140096904]
shrd esi, eax, 0xe
xor esi, 0xedee6d72
mov eax, esi
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r15, rsp
imul eax, dword [0x140096908], 0x88a02d91
imul esi, dword [0x14009690c], 0xe3107d14
add eax, esi
add eax, 0x2880a040
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
movabs rdi, 0x3fffffffff0
and rax, rdi
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r14, rsp
imul eax, dword [0x140096910], 0xe1255e88
imul esi, dword [0x140096914], 0x637dad2d
add eax, esi
add eax, 0xc6771e7d
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
and rax, rdi
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rbx, rsp
mov eax, dword [0x140096918]
mov esi, dword [0x14009691c]
shrd esi, eax, 6
xor esi, 0xfcbf9957
mov eax, esi
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
and rax, rdi
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdi, rsp
mov eax, dword [0x140096920]
mov esi, dword [0x140096924]
shrd esi, eax, 0x17
xor esi, 0x2e144bb2
mov eax, esi
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rsi, rsp
mov rax, qword [rbp - 0x80]
mov qword [rdx], rax
mov eax, dword [0x140096928]
mov edx, dword [0x14009692c]
shrd edx, eax, 0x1a
xor edx, 0x8de63ee7
mov dword [r9], edx
movzx eax, word [0x140096930]
movzx edx, word [0x140096932]
shrd dx, ax, 4
mov eax, edx
xor eax, 0xc8a4
movzx edx, word [0x140096934]
movzx r9d, word [0x140096936]
shrd r9w, dx, 2
mov word [r11], ax
mov eax, r9d
xor eax, 0xc37f
mov word [r11 + 2], ax
imul eax, dword [0x140096938], 0xd7b7a1c0
lea rdx, [0x140088244]
mov qword [r11 + 8], rdx
imul edx, dword [0x14009693c], 0x36fda5ac
add eax, edx
add eax, 0x1a95c838
mov dword [r8], eax
xor eax, eax
mov qword [r8 + 8], rax
mov edx, dword [0x140096940]
mov r9d, dword [0x140096944]
shrd r9d, edx, 0x16
xor r9d, 0x467aa4f0
mov dword [r8 + 0x18], r9d
mov qword [r8 + 0x10], r11
imul edx, dword [0x140096948], 0xa62ce200
movups xmmword [r8 + 0x20], xmm6
imul r9d, dword [0x14009694c], 0xda3f350d
add edx, r9d
add edx, 0x7e398e89
mov r9d, dword [0x140096950]
mov r11d, dword [0x140096954]
shrd r11d, r9d, 0x1f
mov r9d, r11d
xor r9d, 0x98dc1fa5
mov r11d, dword [0x140096958]
mov r13d, dword [0x14009695c]
shrd r13d, r11d, 0x15
xor r13d, 0x83f4f9df
sub rsp, 0x40
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ntoskrnl.exe_ZwCreateKey]
add rsp, 0x40
imul ecx, dword [0x140096960], 0xd85745c8
imul edx, dword [0x140096964], 0x70431dd1
add ecx, edx
add ecx, 0x75006e6a
cmp eax, ecx
setg al
imul ecx, dword [0x14009696c], 0x1aea7239
imul edx, dword [0x140096968], 0x63744fba
add ecx, edx
add ecx, 0xc06848f0
mov edx, dword [0x140098b5c]
xor ecx, edx
imul ecx, edx
mov edx, dword [0x140096974]
mov r8d, dword [0x140096970]
shrd edx, r8d, 8
xor edx, 0x1a907bef
and edx, ecx
imul ecx, dword [0x14009697c], 0x8626b61c
imul r8d, dword [0x140096978], 0x1a69500e
add ecx, r8d
add ecx, 0x3820a488
mov r8d, dword [0x140096984]
mov r9d, dword [0x140096980]
shrd r8d, r9d, 0xe
mov r9d, dword [0x140096994]
mov r10d, dword [0x140096990]
shrd r9d, r10d, 0xc
xor r8d, 0xcefcc98d
imul r10d, dword [0x140096988], 0x6a2ec006
xor r9d, 0xfc0827a4
imul r11d, dword [0x14009698c], 0xa124ec8
cmp edx, ecx
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx - 0x5a10dd0e]
cmove r9d, ecx
cmp dword [0x140098b60], r8d
mov edx, r9d
cmovl edx, ecx
mov byte [rbp + 0x1d], r12b
mov cl, byte [rbp + 0x19]
mov byte [rbp + 0x1e], cl
mov byte [rbp + 0x1f], al
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r15
mov r15, qword [rbp - 0x38]
mov r14, qword [rbp - 0x30]
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, dword [rbp + 0x14]
mov edi, edx
jmp 0x14007a11c
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rcx
mov r15, qword [rbp - 0x30]
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0x84f66fa7
jmp 0x14007a11c
cmp edx, 0xb2dbbd0c
jne 0x14007e0f3
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rcx
mov r15, qword [rbp - 0x30]
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0x7a1955fb
jmp 0x14007a11c
mov rbx, rax
mov eax, dword [0x140096c58]
mov ecx, dword [0x140096c54]
shrd eax, ecx, 0x1b
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x29c7c5d2
imul eax, ecx
imul ecx, dword [0x140096c60], 0x53feacd3
imul edx, dword [0x140096c5c], 0x4adc63a9
add ecx, edx
add ecx, 0x7eb1d5ca
and ecx, eax
mov eax, dword [0x140096c68]
mov edx, dword [0x140096c64]
shrd eax, edx, 0x1c
imul edx, dword [0x140096c6c], 0x447f7ed2
mov byte [rbp + 0x1a], r8b
imul r8d, dword [0x140096c70], 0xcb713eae
mov qword [rbp - 0x48], r9
imul r9d, dword [0x140096c74], 0xe88debb3
mov byte [rbp + 0x19], r10b
imul r10d, dword [0x140096c78], 0x9e4a45c
imul r11d, dword [0x140096c7c], 0x69cf8172
imul esi, dword [0x140096c80], 0xb6ad4943
xor eax, 0xdaf173d5
cmp ecx, eax
mov eax, r8d
mov ecx, edx
lea eax, [rcx + rax + 0x47d6bb92]
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx + 0x1afb2fc7]
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx + 0x4daf04d6]
cmove edx, ecx
cmp dword [0x140098b60], eax
cmovl edx, ecx
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
jmp 0x14007dd0a
mov rbx, rax
mov eax, dword [0x140096d30]
mov ecx, dword [0x140096d2c]
shrd eax, ecx, 0xc
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0xb2ef4887
mov edx, eax
imul edx, ecx
mov eax, dword [0x140096d38]
mov ecx, dword [0x140096d34]
shrd eax, ecx, 4
xor eax, 0x96d32b18
and eax, edx
imul ecx, dword [0x140096d40], 0x577fd80d
imul edx, dword [0x140096d3c], 0x2f93d646
add ecx, edx
add ecx, 0x2ac85fc5
mov edx, dword [0x140096d48]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096d44]
shrd edx, r8d, 0xd
mov r8d, dword [0x140096d50]
mov qword [rbp - 0x48], r9
mov r9d, dword [0x140096d4c]
shrd r8d, r9d, 0x19
mov r9d, dword [0x140096d58]
mov r13d, r10d
mov r10d, dword [0x140096d54]
shrd r9d, r10d, 7
xor edx, 0x3ba73365
xor r8d, 0x410fb1e8
xor r9d, 0x8e0458fc
cmp eax, ecx
cmove r9d, r8d
cmp dword [0x140098b60], edx
mov ecx, edi
mov edi, r9d
cmovl edi, r8d
jmp 0x14007d77d
mov rcx, qword [r12]
sub rsp, 0x20
mov byte [rbp + 0x1a], r8b
mov rbx, r11
mov qword [rbp - 0x48], r9
call qword [sym.imp.ntoskrnl.exe_ZwClose]
add rsp, 0x20
mov rax, qword [0x140096a38]
movabs rcx, 0xf722b683ed6f2dcd
imul rax, rcx
mov rcx, qword [0x140096a40]
movabs rdx, 0x9780862285e05098
imul rcx, rdx
add rcx, rax
movabs rax, 0xcade344385eca63c
add rcx, rax
mov qword [rsi], rcx
movabs rax, 0xfffff78000000014
mov rax, qword [rax]
mov qword [rsi], rax
sub rsp, 0x20
mov rcx, rsi
call fcn.14000420b
add rsp, 0x20
mov dword [0x140098d18], eax
imul eax, dword [0x140096a48], 0xf2b6de26
imul ecx, dword [0x140096a4c], 0x10aad960
lea r8d, [rax + rcx]
add r8d, 0x3107da56
mov eax, dword [0x140096a50]
mov ecx, dword [0x140096a54]
shrd ecx, eax, 0x12
xor ecx, 0x37a24af3
sub rsp, 0x30
mov dword [rsp + 0x20], ecx
lea rcx, [0x140088244]
lea rdx, [0x1400882a8]
lea r9, [0x140098d18]
call fcn.14001491d
add rsp, 0x10
mov r8d, 0x1fe
mov rcx, rbx
lea rdx, [0x1400882c0]
call fcn.140088740
add rsp, 0x20
mov rax, qword [0x140096a58]
mov rcx, qword [0x140096a60]
shrd rcx, rax, 0x15
mov rdx, rcx
movabs rax, 0x4d7d484cbe5fcd71
xor rdx, rax
sub rsp, 0x20
mov rcx, rbx
call fcn.140002e3f
mov r8d, 0x1fe
mov rdi, qword [rbp - 0x48]
mov rcx, rdi
xor edx, edx
call fcn.140088640
add rsp, 0x20
mov rax, qword [0x140096a68]
movabs rcx, 0xb307c90a9fbf07b5
imul rax, rcx
mov rcx, qword [0x140096a70]
movabs rdx, 0xcc1e0012a2a0e6e9
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xb6bf70a1a4a73dbc
add rdx, rax
sub rsp, 0x20
mov rcx, rdi
lea r8, [0x1400884be]
mov r9, rbx
call fcn.14007e153
lea rcx, [0x140098d00]
mov rdx, rdi
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
mov eax, dword [0x140096a78]
mov ecx, dword [0x140096a7c]
shrd ecx, eax, 0x1c
xor ecx, 0x623f106e
mov rax, qword [0x140096a80]
mov rdx, qword [0x140096a88]
shrd rdx, rax, 0x2b
movabs rax, 0xa85c8f7bfd1cefec
xor rdx, rax
mov eax, dword [0x140096a90]
mov r8d, dword [0x140096a94]
shrd r8d, eax, 0xf
xor r8d, 0x3bf16505
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
add rsp, 0x20
mov rcx, rax
test rax, rax
mov qword [rbp - 0x58], r13
setne r13b
imul edx, dword [0x140096a9c], 0xa4233d41
imul r8d, dword [0x140096a98], 0xad6419b5
add edx, r8d
add edx, 0x8927afc1
mov r8d, dword [0x140098b5c]
xor edx, r8d
imul edx, r8d
imul r8d, dword [0x140096aa4], 0xd138db3d
imul r9d, dword [0x140096aa0], 0xb2145232
add r8d, r9d
add r8d, 0xdb2520e8
and r8d, edx
imul edx, dword [0x140096aac], 0x1a607e9c
imul r9d, dword [0x140096aa8], 0x894adf44
add edx, r9d
add edx, 0x160cafd4
mov r9d, dword [0x140096ab4]
mov r10d, dword [0x140096ab0]
shrd r9d, r10d, 6
mov edi, dword [0x140096ac4]
mov r11d, dword [0x140096ac0]
shrd edi, r11d, 0x14
xor r9d, 0x298ac01c
imul r11d, dword [0x140096ab8], 0xa1856861
xor edi, 0xec6726ad
mov rax, rsi
imul esi, dword [0x140096abc], 0x68fc3175
cmp r8d, edx
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx - 0x21f31d30]
cmove edi, edx
cmp dword [0x140098b60], r9d
mov qword [0x140098d10], rcx
cmovl edi, edx
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov rdx, qword [rbp - 0x40]
mov qword [rbp - 0x28], rdx
mov rcx, qword [rbp - 0x58]
mov qword [rbp - 0x20], rcx
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rbx
jmp 0x14007dbe2
mov rbx, rax
mov eax, dword [0x140096b44]
mov qword [rbp - 0x40], rcx
mov ecx, dword [0x140096b40]
shrd eax, ecx, 0x10
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0xde263912
imul eax, ecx
imul ecx, dword [0x140096b4c], 0x87db9eea
imul edx, dword [0x140096b48], 0x27498f55
add ecx, edx
add ecx, 0xd2c4670a
and ecx, eax
mov eax, dword [0x140096b54]
mov edx, dword [0x140096b50]
shrd eax, edx, 8
mov edx, dword [0x140096b64]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096b60]
shrd edx, r8d, 0x13
xor eax, 0x17a67abb
xor edx, 0xff3f0a38
imul r8d, dword [0x140096b58], 0x103009a3
imul r9d, dword [0x140096b5c], 0x9121216b
imul r10d, dword [0x140096b68], 0xaeb47e99
imul r11d, dword [0x140096b6c], 0xd5e98e3e
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x7c241c30]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x48726c49]
cmove ecx, edx
cmp dword [0x140098b60], eax
mov r8d, edi
mov edi, ecx
cmovl edi, edx
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, r8d
jmp 0x14007a11c
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rcx
mov r15, qword [rbp - 0x30]
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0x290dd118
jmp 0x14007a11c
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rcx
mov r15, qword [rbp - 0x30]
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0xe6fc623e
jmp 0x14007a11c
mov rcx, qword [r12]
sub rsp, 0x20
mov byte [rbp + 0x1a], r8b
mov rbx, r11
mov qword [rbp - 0x68], rax
call qword [sym.imp.ntoskrnl.exe_ZwClose]
add rsp, 0x20
mov rax, qword [0x140096ff0]
movabs rcx, 0xc018f280bc38652f
imul rax, rcx
mov rcx, qword [0x140096ff8]
movabs rdx, 0x69fab96abcbc0f5b
imul rcx, rdx
add rcx, rax
movabs rax, 0x24ebe71af6c24f47
add rcx, rax
mov qword [rsi], rcx
movabs rax, 0xfffff78000000014
mov rax, qword [rax]
mov qword [rsi], rax
sub rsp, 0x20
mov rcx, rsi
call fcn.14000420b
add rsp, 0x20
mov dword [0x140098d18], eax
imul eax, dword [0x140097000], 0xd6a7e3a8
imul ecx, dword [0x140097004], 0x9a61989a
imul edx, dword [0x140097008], 0x1b32cd67
imul r9d, dword [0x14009700c], 0xaf951069
lea r8d, [rax + rcx]
add r8d, 0xe5180504
mov eax, r9d
mov ecx, edx
add eax, ecx
add eax, 0x31ae889f
sub rsp, 0x30
mov dword [rsp + 0x20], eax
lea rcx, [0x140088244]
lea rdx, [0x1400882a8]
lea r9, [0x140098d18]
call fcn.14001491d
add rsp, 0x10
mov r8d, 0x1fe
mov rcx, rbx
lea rdx, [0x1400882c0]
call fcn.140088740
add rsp, 0x20
mov rax, qword [0x140097010]
mov rcx, qword [0x140097018]
shrd rcx, rax, 0xb
mov rdx, rcx
movabs rax, 0xf331086b457c31b7
xor rdx, rax
sub rsp, 0x20
mov rcx, rbx
call fcn.140002e3f
mov r8d, 0x1fe
mov rbx, qword [rbp - 0x48]
mov rcx, rbx
xor edx, edx
call fcn.140088640
add rsp, 0x20
mov rax, qword [0x140097020]
movabs rcx, 0xa672630cbc05c33e
imul rax, rcx
mov rcx, qword [0x140097028]
movabs rdx, 0x57d56b9164ea65aa
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xe73a16b9c67bc8ec
add rdx, rax
sub rsp, 0x20
mov rcx, rbx
lea r8, [0x1400884be]
mov r9, qword [rbp - 0x60]
call fcn.14007e153
lea rcx, [0x140098d00]
mov rdx, rbx
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
mov eax, dword [0x140097030]
mov ecx, dword [0x140097034]
shrd ecx, eax, 8
xor ecx, 0x97fc33e5
mov rax, qword [0x140097038]
mov rdx, qword [0x140097040]
shrd rdx, rax, 0x27
imul eax, dword [0x140097048], 0x5832d8d8
imul r8d, dword [0x14009704c], 0xd0708d26
movabs r9, 0x4e075ba7ec3fe120
xor rdx, r9
add r8d, eax
add r8d, 0xeaac1878
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
add rsp, 0x20
mov qword [0x140098d10], rax
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], rbx
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, edi
mov edi, 0x78fedb57
jmp 0x14007a11c
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov rbx, rcx
movsxd rcx, dword [rcx]
lea rdx, [0x14007f1c8]
mov qword [rax + rcx*8 + 0x70], rdx
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0xd9fd7e7
jmp 0x14007a11c
mov qword [rbp - 0x68], rax
mov eax, dword [0x140096ea0]
mov rbx, rcx
mov ecx, dword [0x140096e9c]
shrd eax, ecx, 1
xor eax, 0x28d9aafc
add dword [rbx], eax
mov eax, dword [0x140096ea8]
mov ecx, dword [0x140096ea4]
shrd eax, ecx, 0xb
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x6d3c8dfb
imul eax, ecx
mov ecx, dword [0x140096eb8]
mov edx, dword [0x140096eb4]
shrd ecx, edx, 0xf
imul edx, dword [0x140096eb0], 0xeff9f7d8
mov byte [rbp + 0x1a], r8b
imul r8d, dword [0x140096eac], 0x667ea88a
add edx, r8d
add edx, 0x22dd93d5
mov r8d, dword [0x140096ec0]
mov r9d, dword [0x140096ebc]
shrd r8d, r9d, 0xb
mov r9d, dword [0x140096ed0]
mov r13d, r10d
mov r10d, dword [0x140096ecc]
shrd r9d, r10d, 0x14
and edx, eax
xor ecx, 0xac2bae6c
xor r8d, 0x5dabd506
imul eax, dword [0x140096ec4], 0x39f2634a
xor r9d, 0xd5493df9
imul r10d, dword [0x140096ec8], 0xecde6c0e
cmp edx, ecx
mov ecx, r10d
lea eax, [rax + rcx - 0x32996971]
cmove r9d, eax
cmp dword [0x140098b60], r8d
mov ecx, edi
mov edi, r9d
cmovl edi, eax
jmp 0x14007d06b
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov rbx, rcx
movsxd rcx, dword [rcx]
lea rdx, [0x14007f1c8]
mov qword [rax + rcx*8 + 0x70], rdx
mov eax, dword [0x140096e40]
mov ecx, dword [0x140096e3c]
shrd eax, ecx, 0x14
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x625a00f0
imul eax, ecx
mov ecx, dword [0x140096e48]
mov edx, dword [0x140096e44]
shrd ecx, edx, 9
xor ecx, 0xeba42a69
and ecx, eax
imul eax, dword [0x140096e50], 0xa56e424a
imul edx, dword [0x140096e4c], 0xf6312a41
add eax, edx
add eax, 0xb5df5f24
mov edx, dword [0x140096e60]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096e5c]
shrd edx, r8d, 0x16
mov r8d, dword [0x140096e68]
mov qword [rbp - 0x48], r9
mov r9d, dword [0x140096e64]
shrd r8d, r9d, 0xa
xor edx, 0x91cbf2fa
imul r9d, dword [0x140096e54], 0x463f4903
xor r8d, 0xed0d65d3
mov qword [rbp - 0x58], r13
mov r13d, r10d
imul r10d, dword [0x140096e58], 0x3918ecd6
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0x6ece22a6]
cmove r8d, edx
cmp dword [0x140098b60], eax
mov ecx, edi
mov edi, r8d
cmovl edi, edx
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rbx
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
jmp 0x14007d9b4
mov rbx, rax
imul eax, dword [0x1400970a0], 0xc270859c
mov rdx, rcx
imul ecx, dword [0x14009709c], 0xfae98755
add eax, ecx
mov ecx, dword [rdx]
add eax, ecx
add eax, 0x8cd5be33
mov dword [rdx], eax
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0xee14c554
jmp 0x14007a11c
mov rbx, rax
mov eax, dword [0x140096cd0]
mov qword [rbp - 0x40], rcx
mov ecx, dword [0x140096ccc]
shrd eax, ecx, 4
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x2f0dcf04
imul eax, ecx
mov ecx, dword [0x140096cd8]
mov edx, dword [0x140096cd4]
shrd ecx, edx, 0x12
xor ecx, 0x43a90733
and ecx, eax
imul eax, dword [0x140096ce0], 0x704074a3
imul edx, dword [0x140096cdc], 0x3cc6ec7a
add eax, edx
add eax, 0xa99d5266
mov edx, dword [0x140096cf0]
mov r8d, dword [0x140096cec]
shrd edx, r8d, 0x1d
mov r8d, dword [0x140096cf8]
mov qword [rbp - 0x48], r9
mov r9d, dword [0x140096cf4]
shrd r8d, r9d, 0xf
xor edx, 0xba9b763b
imul r9d, dword [0x140096ce4], 0x7b58fdd
xor r8d, 0xcc606215
mov qword [rbp - 0x58], r13
mov r13d, r10d
imul r10d, dword [0x140096ce8], 0x3c907301
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0x5455f785]
jmp 0x14007d76b
mov rdx, rax
mov rbx, qword [rbp - 0x38]
mov eax, dword [rbx]
mov dword [rdx], eax
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp + 8], rbx
mov r15, qword [rbp - 0x30]
mov r14, rdx
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0x6224c435
jmp 0x14007a11c
mov rdx, rax
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov rbx, rcx
lea rcx, [0x14007f4c0]
mov qword [rax + 0xe0], rcx
mov eax, dword [0x1400970a8]
mov ecx, dword [0x1400970a4]
shrd eax, ecx, 0x1c
xor eax, 0x33076d9b
mov dword [rdx], eax
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rdx
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov edi, 0x35ad8b3c
jmp 0x14007a11c
mov rcx, qword [0x140098cf8]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
add rsp, 0x20
mov eax, dword [r13]
mov dword [r14], eax
mov eax, dword [0x140096d00]
mov ecx, dword [0x140096cfc]
shrd eax, ecx, 8
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0xa44278e9
imul eax, ecx
imul ecx, dword [0x140096d08], 0x7831c25c
imul edx, dword [0x140096d04], 0x2104fef6
add ecx, edx
add ecx, 0xeeb82823
and ecx, eax
imul eax, dword [0x140096d10], 0x431a8448
imul edx, dword [0x140096d0c], 0xf3adaba1
imul r8d, dword [0x140096d14], 0xc2c51e27
imul r9d, dword [0x140096d18], 0x37151a82
imul r10d, dword [0x140096d1c], 0xce1a59fe
imul r11d, dword [0x140096d20], 0x46f57ae0
imul esi, dword [0x140096d24], 0xa11bb94
imul edi, dword [0x140096d28], 0xa30a3a5f
add eax, edx
add eax, 0x53818e2a
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x3c2b32d5]
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx + 0x3db32a1b]
mov edx, edi
mov r8d, esi
lea edi, [r8 + rdx + 0x7388ecf1]
cmove edi, ecx
cmp dword [0x140098b60], eax
cmovl edi, ecx
mov byte [rbp + 0x1d], bl
mov byte [rbp + 0x1e], r15b
mov al, byte [rbp + 0x1b]
mov byte [rbp + 0x1f], al
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp], rax
mov qword [rbp + 8], r13
mov r15, r12
jmp 0x14007dbfa
mov rbx, rax
mov eax, dword [0x140096f9c]
mov ecx, dword [0x140096fa0]
shrd ecx, eax, 0xe
xor ecx, 0x99cb15c2
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rcx, rsp
mov eax, dword [0x140096fa4]
mov edx, dword [0x140096fa8]
shrd edx, eax, 0x14
xor edx, 0x2d576949
mov eax, edx
shl rax, 4
lea rax, [rax + rax*2]
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov byte [rbp + 0x1a], r8b
mov r8, rsp
imul eax, dword [0x140096fac], 0xf09124a2
imul edx, dword [0x140096fb0], 0x59168671
add eax, edx
add eax, 0xdde02014
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r10, rsp
mov eax, dword [0x140096fb4]
mov edx, dword [str.e_iGCN]
shrd edx, eax, 6
xor edx, 0x811da4b1
mov eax, edx
shl rax, 4
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
movzx edx, word [0x140096fbc]
movzx r9d, word [0x140096fbe]
shrd r9w, dx, 8
mov edx, r9d
xor edx, 0x43df
mov word [rax], dx
movzx edx, word [0x140096fc0]
movzx r9d, word [0x140096fc2]
imul edx, edx, 0xffff8604
imul r9d, r9d, 0x69e2
add edx, r9d
add edx, 0xfffffaf6
mov word [rax + 2], dx
lea rdx, [0x140088244]
mov qword [rax + 8], rdx
mov edx, dword [0x140096fc4]
mov r9d, dword [0x140096fc8]
shrd r9d, edx, 0x13
xor r9d, 0x9b99cc0c
mov dword [r8], r9d
xor r11d, r11d
imul edx, dword [0x140096fcc], 0x6ef46f70
imul r9d, dword [0x140096fd0], 0xe15f30e3
mov qword [r8 + 8], r11
add edx, r9d
add edx, 0xfbc95dab
mov dword [r8 + 0x18], edx
mov qword [r8 + 0x10], rax
movups xmmword [r8 + 0x20], xmm6
mov eax, dword [0x140096fd4]
mov edx, dword [0x140096fd8]
shrd edx, eax, 0xa
xor edx, 0x1b6a8e86
mov eax, dword [0x140096fdc]
mov r9d, dword [0x140096fe0]
shrd r9d, eax, 6
xor r9d, 0x1e42056c
mov eax, dword [0x140096fe4]
mov esi, dword [0x140096fe8]
shrd esi, eax, 0xb
xor esi, 0xfc6b555f
sub rsp, 0x40
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r11
call qword [sym.imp.ntoskrnl.exe_ZwCreateKey]
add rsp, 0x40
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, edi
mov edi, 0x1a07b467
jmp 0x14007a11c
mov rbx, rax
imul eax, dword [0x1400969ac], 0xcc0da5f
imul ecx, dword [0x1400969a8], 0xf29fd532
add eax, ecx
add eax, 0x5e22c73d
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x1400969b4]
mov edx, dword [0x1400969b0]
shrd ecx, edx, 4
xor ecx, 0xedb9d08a
and ecx, eax
mov eax, dword [0x1400969bc]
mov edx, dword [0x1400969b8]
shrd eax, edx, 0x12
mov edx, dword [0x1400969d4]
mov r8d, dword [0x1400969d0]
shrd edx, r8d, 8
xor eax, 0xd0a6a93d
xor edx, 0x3e958b52
imul r8d, dword [0x1400969c0], 0x2bb29574
mov qword [rbp - 0x48], r9
imul r9d, dword [0x1400969c4], 0xcb3791dc
mov byte [rbp + 0x19], r10b
imul r10d, dword [0x1400969c8], 0x1729aef2
mov qword [rbp - 0x60], r11
imul r11d, dword [0x1400969cc], 0x10bdf004
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x13741316]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x3018a1d]
jmp 0x14007dcd0
mov rbx, rax
imul eax, dword [0x140096ed8], 0x94d8582f
mov qword [rbp - 0x40], rcx
imul ecx, dword [0x140096ed4], 0xf4247b4a
add eax, ecx
add eax, 0x34e8a124
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140096ee0]
mov edx, dword [0x140096edc]
shrd ecx, edx, 0x1b
xor ecx, 0x59478374
and ecx, eax
imul eax, dword [0x140096ee8], 0xa69b4bf3
imul edx, dword [0x140096ee4], 0xb128e79d
add eax, edx
add eax, 0xe7ea05de
mov edx, dword [0x140096ef8]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096ef4]
shrd edx, r8d, 0x1f
mov r8d, dword [0x140096f00]
mov qword [rbp - 0x48], r9
mov r9d, dword [0x140096efc]
shrd r8d, r9d, 0x16
xor edx, 0x7a2f098c
imul r9d, dword [0x140096eec], 0xd529e59e
xor r8d, 0x3d02f411
mov qword [rbp - 0x58], r13
mov r13d, r10d
imul r10d, dword [0x140096ef0], 0xf4d95c25
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0x347f9c85]
cmove r8d, edx
cmp dword [0x140098b60], eax
mov ecx, edi
mov edi, r8d
cmovl edi, edx
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
jmp 0x14007d88c
mov rbx, rax
mov eax, dword [0x140096ae4]
mov qword [rbp - 0x40], rcx
mov ecx, dword [0x140096ae0]
shrd eax, ecx, 8
imul ecx, dword [0x140096adc], 0x65882158
imul edx, dword [0x140096ad8], 0xe26ad3b0
add ecx, edx
add ecx, 0x77a161ef
mov edx, dword [0x140096aec]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096ae8]
shrd edx, r8d, 0xe
mov r8d, dword [0x140096afc]
mov qword [rbp - 0x48], r9
mov r9d, dword [0x140096af8]
shrd r8d, r9d, 6
mov r9d, dword [0x140096b04]
mov byte [rbp + 0x19], r10b
mov r10d, dword [0x140096b00]
shrd r9d, r10d, 0x16
mov r10d, dword [0x140098b5c]
xor ecx, r10d
imul ecx, r10d
xor eax, 0x843e9cd6
and eax, ecx
xor edx, 0x5443083c
xor r8d, 0xa9f116b8
imul ecx, dword [0x140096af0], 0x4215489e
xor r9d, 0x3765eedb
imul r10d, dword [0x140096af4], 0x3eddf329
cmp eax, edx
mov eax, r10d
lea eax, [rcx + rax + 0x6f439370]
cmove r9d, r8d
cmp dword [0x140098b60], eax
mov ecx, edi
mov edi, r9d
cmovl edi, r8d
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
jmp 0x14007d9bc
mov rdx, rax
mov qword [rbp - 0x68], rax
mov rbx, qword [rbp - 0x38]
mov eax, dword [rbx]
mov dword [rdx], eax
mov eax, dword [0x140096c28]
mov ecx, dword [0x140096c24]
shrd eax, ecx, 2
mov ecx, dword [0x140096c30]
mov edx, dword [0x140096c2c]
shrd ecx, edx, 7
mov edx, dword [0x140096c38]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096c34]
shrd edx, r8d, 0x13
mov r8d, dword [0x140096c40]
mov r9d, dword [0x140096c3c]
shrd r8d, r9d, 0x1c
mov r9d, dword [0x140096c48]
mov r10d, dword [0x140096c44]
shrd r9d, r10d, 0xc
mov r10d, dword [0x140098b5c]
xor eax, r10d
xor eax, 0x8aac949f
imul eax, r10d
xor ecx, 0x396ae60e
and ecx, eax
xor edx, 0xc4805b33
xor r8d, 0x52b7d3ed
imul eax, dword [0x140096c4c], 0x82973978
xor r9d, 0xab61bd46
imul r10d, dword [0x140096c50], 0x5216dc09
cmp ecx, edx
mov ecx, r10d
lea eax, [rax + rcx - 0x1dd9a655]
cmove eax, r9d
cmp dword [0x140098b60], r8d
mov ecx, edi
mov edi, eax
cmovl edi, r9d
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp + 8], rbx
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
jmp 0x14007a11c
mov rbx, rax
mov eax, dword [0x140096acc]
mov ecx, dword [0x140096ac8]
shrd eax, ecx, 0x1f
mov ecx, dword [0x140096ad4]
mov edx, dword [0x140096ad0]
shrd ecx, edx, 0x11
xor eax, 0x77648f8
xor ecx, 0xa3fdb27e
test r10b, 1
mov edx, edi
mov edi, ecx
cmovne edi, eax
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
mov bl, byte [rbp + 0x1c]
jmp 0x14007dab1
mov qword [rbp - 0x68], rax
mov eax, dword [str.6__V]
mov ecx, dword [0x140096cbc]
shrd eax, ecx, 0x16
mov ecx, dword [0x140096cc8]
mov edx, dword [0x140096cc4]
shrd ecx, edx, 0xe
xor eax, 0xb6d58b45
xor ecx, 0x2f0718b5
mov bl, byte [rbp + 0x1c]
test bl, 1
mov edx, edi
mov edi, ecx
cmovne edi, eax
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov esi, r8d
mov ecx, edx
jmp 0x14007a11c
mov eax, dword [0x140096d60]
mov rbx, rcx
mov ecx, dword [0x140096d5c]
shrd eax, ecx, 6
xor eax, 0xf2b5fb86
mov dword [rbx], eax
imul eax, dword [0x140096d68], 0x37a6dcb5
imul ecx, dword [0x140096d64], 0x30f0d15
add eax, ecx
add eax, 0xd5b73b90
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140096d70]
mov edx, dword [0x140096d6c]
shrd ecx, edx, 0xc
xor ecx, 0x668dcb90
and ecx, eax
imul eax, dword [0x140096d78], 0x63066aac
imul edx, dword [0x140096d74], 0x9b32f527
mov byte [rbp + 0x1a], r8b
imul r8d, dword [0x140096d7c], 0x3a64552d
mov qword [rbp - 0x48], r9
imul r9d, dword [0x140096d80], 0xd2af0642
mov qword [rbp - 0x58], r13
mov r13d, r10d
imul r10d, dword [0x140096d84], 0xcc71f32c
mov qword [rbp - 0x60], r11
imul r11d, dword [0x140096d88], 0x526227ae
imul esi, dword [0x140096d8c], 0xd45e4eb3
imul edi, dword [0x140096d90], 0xccf078ae
add eax, edx
add eax, 0x42796c84
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0xc47e109]
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx - 0x72e5feda]
mov edx, edi
mov r8d, esi
lea edi, [r8 + rdx + 0x73b70093]
cmove edi, ecx
cmp dword [0x140098b60], eax
cmovl edi, ecx
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rbx
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, dword [rbp + 0x14]
jmp 0x14007a11c
mov rbx, rax
mov eax, dword [0x140096bf8]
mov ecx, dword [0x140096bf4]
shrd eax, ecx, 3
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x46f646ec
imul eax, ecx
imul ecx, dword [0x140096c00], 0xde9a834c
imul edx, dword [0x140096bfc], 0x2fabf8a4
add ecx, edx
add ecx, 0xc3e3ff31
and ecx, eax
mov eax, dword [0x140096c08]
mov edx, dword [0x140096c04]
shrd eax, edx, 0x1c
mov edx, dword [0x140096c20]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096c1c]
shrd edx, r8d, 0x10
xor eax, 0x1420bb1
xor edx, 0x40c34894
imul r8d, dword [0x140096c0c], 0x91ab1d55
mov qword [rbp - 0x48], r9
imul r9d, dword [0x140096c10], 0x981ee564
mov byte [rbp + 0x19], r10b
imul r10d, dword [0x140096c14], 0x4e8da740
mov qword [rbp - 0x60], r11
imul r11d, dword [0x140096c18], 0x5ceeac50
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x3720cfc8]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x7e69d275]
cmove edx, ecx
cmp dword [0x140098b60], eax
cmovl edx, ecx
mov byte [rbp + 0x1d], r14b
mov al, byte [rbp + 0x19]
mov byte [rbp + 0x1e], al
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, edi
mov edi, edx
jmp 0x14007a11c
mov rbx, rax
mov eax, dword [0x140096d98]
mov ecx, dword [0x140096d94]
shrd eax, ecx, 0xd
mov ecx, dword [0x140098b5c]
xor eax, ecx
xor eax, 0x91636c65
imul eax, ecx
mov ecx, dword [0x140096da0]
mov edx, dword [0x140096d9c]
shrd ecx, edx, 0xd
xor ecx, 0xe7afba5e
and ecx, eax
mov eax, dword [0x140096da8]
mov edx, dword [0x140096da4]
shrd eax, edx, 6
mov edx, dword [0x140096db0]
mov byte [rbp + 0x1a], r8b
mov r8d, dword [0x140096dac]
shrd edx, r8d, 4
xor eax, 0x92cde354
xor edx, 0x5da90102
imul r8d, dword [0x140096db4], 0x54a9f56e
mov qword [rbp - 0x48], r9
imul r9d, dword [0x140096db8], 0x86399ff3
mov qword [rbp - 0x58], r13
mov r13d, r10d
imul r10d, dword [0x140096dbc], 0x461ba4ec
mov qword [rbp - 0x60], r11
imul r11d, dword [0x140096dc0], 0x3d9e5697
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x1b8a7119]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x4588f24e]
cmove ecx, eax
cmp dword [0x140098b60], edx
mov edx, edi
mov edi, ecx
cmovl edi, eax
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, rbx
jmp 0x14007df76
mov eax, dword [0x140096dc8]
mov rbx, rcx
mov ecx, dword [0x140096dc4]
shrd eax, ecx, 0xc
xor eax, 0xfef48753
cmp dword [rbx], eax
mov ecx, dword [str.__gy]
setl byte [rbp + 0x1a]
mov edx, dword [0x140096dcc]
shrd ecx, edx, 1
mov edx, dword [0x140098b5c]
xor ecx, edx
xor ecx, 0x41cc6eed
imul ecx, edx
mov edx, dword [0x140096dd8]
mov r8d, dword [0x140096dd4]
shrd edx, r8d, 3
xor edx, 0x34945688
and edx, ecx
imul ecx, dword [0x140096de0], 0x9945ba9c
imul r8d, dword [str.Y__5_], 0xca96c2b1
add ecx, r8d
add ecx, 0x5b35020b
mov r8d, dword [0x140096de8]
mov qword [rbp - 0x48], r9
mov r9d, dword [0x140096de4]
shrd r8d, r9d, 8
mov r9d, dword [0x140096df0]
mov qword [rbp - 0x58], r13
mov r13d, r10d
mov r10d, dword [0x140096dec]
shrd r9d, r10d, 2
xor r8d, 0x6a702d83
imul r10d, dword [0x140096df4], 0xafc6f77b
xor r9d, 0x4803fa55
mov rax, r11
imul r11d, dword [0x140096df8], 0x4a08ae41
cmp edx, ecx
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx - 0x429abca0]
cmove ecx, r9d
cmp dword [0x140098b60], r8d
mov edx, edi
mov edi, ecx
cmovl edi, r9d
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rbx
mov rcx, qword [rbp - 0x58]
mov qword [rbp - 0x20], rcx
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov bl, byte [rbp + 0x1c]
mov sil, byte [rbp + 0x1a]
mov ecx, edx
jmp 0x14007a11c
mov rcx, qword [0x140098d10]
sub rsp, 0x20
lea rdx, [0x140098d00]
mov byte [rbp + 0x1a], r8b
mov qword [rbp - 0x60], r11
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x58], r13
mov r13d, r10d
mov qword [rbp - 0x68], rax
call qword [sym.imp.ntoskrnl.exe_IoCreateSymbolicLink]
add rsp, 0x20
mov rbx, qword [rbp - 0x38]
mov dword [rbx], eax
imul ecx, dword [0x140096c84], 0x793a91fb
imul edx, dword [0x140096c88], 0x64058682
add ecx, edx
add ecx, 0xa3465b10
cmp eax, ecx
setg r11b
imul eax, dword [0x140096c90], 0x3d3b54c2
imul ecx, dword [0x140096c8c], 0x578275aa
add eax, ecx
add eax, 0x7cc44679
mov ecx, dword [0x140098b5c]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x140096c98], 0x3b042038
imul edx, dword [0x140096c94], 0x174fc60b
add ecx, edx
add ecx, 0x31489277
and ecx, eax
imul eax, dword [0x140096ca0], 0x32bf1b36
imul edx, dword [0x140096c9c], 0xa9626aa6
add eax, edx
add eax, 0x95c690a
mov edx, dword [0x140096ca8]
mov r8d, dword [0x140096ca4]
shrd edx, r8d, 3
mov r8d, dword [0x140096cb0]
mov r9d, dword [0x140096cac]
shrd r8d, r9d, 1
xor edx, 0x2e4f9d04
imul r9d, dword [0x140096cb4], 0x5ea1a658
xor r8d, 0x6b10fec
imul r10d, dword [0x140096cb8], 0x3cc4bdc5
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0x71189020]
cmove eax, r8d
cmp dword [0x140098b60], edx
mov ecx, edi
mov edi, eax
cmovl edi, r8d
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r13b
mov byte [rbp + 0x1f], r15b
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov qword [rbp + 8], rbx
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x68]
mov ebx, r11d
mov sil, byte [rbp + 0x1a]
jmp 0x14007a11c
mov byte [rbp + 0x1d], r14b
mov byte [rbp + 0x1e], r10b
mov byte [rbp + 0x1f], r15b
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x10], r11
mov qword [rbp - 8], rsi
mov qword [rbp], r12
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rcx
mov r15, qword [rbp - 0x30]
mov r14, rax
mov bl, byte [rbp + 0x1c]
mov esi, r8d
mov ecx, edi
mov eax, edi
mov edi, edx
cmp edx, 0xb91a0ed2
jne 0x14007a11c
movups xmm6, xmmword [rbp + 0x20]
lea rsp, [rbp + 0x38]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret