Function at 0x1400a3bb0
Capabilities:
Access peb ldr_data
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x328
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2a0], 0xfffffffffffffffe
mov qword [rbp + 0x238], r8
mov r14, rdx
mov rdi, rcx
mov qword [rbp + 0x228], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1d0], xmm0
lea rbx, [rbp - 0x50]
mov r8d, 0x200
mov rcx, rbx
xor edx, edx
call fcn.1400be7f0
lea rsi, [rbp - 0x4c]
mov rcx, rdi
call fcn.140053e10
mov qword [rbp + 0x1f0], rdi
mov rdi, qword [rdi + 0x10]
mov rcx, rsi
mov rdx, rax
mov r8, rdi
call fcn.1400be140
mov qword [rbp + 0x1d8], rbx
mov eax, dword [0x1400f28d0]
mov ecx, dword [0x1400f28d4]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x280]
mov edx, 0x9106a981
mov eax, 0x835fcb28
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x288]
cmovl eax, edx
mov edx, 0x45c09c98
mov ecx, 0xa9668c9e
nop dword [rax + rax]
cmp edx, 0xa9668c9d
jg 0x1400a3ca0
cmp edx, 0x835fcb28
je 0x1400a3ccd
cmp edx, 0x9106a981
jne 0x1400a3c80
jmp 0x1400a3cd8
cmp edx, 0xa9668c9e
je 0x1400a3cd4
cmp edx, 0x45c09c98
jne 0x1400a3c80
movzx ebx, byte [rbp + 0x280]
cmp byte [rbp + 0x288], 0
mov edx, 0x835fcb28
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400a3c80
mov edx, 0xa9668c9e
jmp 0x1400a3c80
mov edx, eax
jmp 0x1400a3c80
mov qword [rbp + 0x240], rdi
mov rax, qword [rbp + 0x240]
add eax, eax
add eax, 2
mov word [rbp + 0x1d0], ax
mov word [rbp + 0x1d2], 0
mov rbx, qword [rbp + 0x238]
mov qword [rbp + 0x280], rbx
mov rax, qword [rbp + 0x280]
mov ecx, dword [0x1400f2250]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1400f2254], 0xa
mov qword [rbp + 0x288], rax
setl al
or al, cl
mov esi, 0x102d1967
mov eax, 0x8db7957a
cmove esi, eax
mov ecx, 0x3bafd34b
cmove ecx, eax
cmp qword [rbx + 0x18], 8
mov eax, 0xbd16169
mov ebx, 0x729a50af
cmovae ebx, eax
mov eax, 0x643d93d1
lea rdi, [rbp + 0x288]
nop dword [rax + rax]
cmp eax, 0x3bafd34a
jg 0x1400a3da0
cmp eax, 0x8db7957a
je 0x1400a3dca
cmp eax, 0xbd16169
je 0x1400a3dd8
cmp eax, 0x102d1967
jne 0x1400a3d70
mov eax, 0x729a50af
lea rdx, [rbp + 0x240]
mov rdx, qword [rdx]
jmp 0x1400a3d70
cmp eax, 0x729a50af
je 0x1400a3de3
cmp eax, 0x643d93d1
je 0x1400a3ddc
cmp eax, 0x3bafd34b
jne 0x1400a3d70
mov rax, qword [rbp + 0x280]
mov rax, qword [rax]
mov qword [rbp + 0x240], rax
mov eax, esi
jmp 0x1400a3d70
mov rax, qword [rbp + 0x280]
mov eax, 0x3bafd34b
jmp 0x1400a3d70
mov eax, ecx
jmp 0x1400a3d70
mov rdx, qword [rdi]
mov eax, ebx
jmp 0x1400a3d70
lea rax, [rbp + 0x228]
mov qword [rsp + 0x20], rax
xor edi, edi
mov rcx, r14
xor r8d, r8d
mov r9d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400a627d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
mov r11, qword [rax + 0x30]
test r11, r11
mov eax, 0x479a4a96
mov ecx, 0xd49d5206
cmove ecx, eax
mov dword [rbp + 0x224], ecx
mov eax, 0xfe6f1b33
mov r15d, 0x58a11e19
mov qword [rbp + 0x1c8], r11
jmp 0x1400a3e70
cmp eax, 0x6244243b
je 0x1400a5f43
cmp eax, 0x76bc4af0
jne 0x1400a3e70
mov eax, 0x5794338f
xor ecx, ecx
mov qword [rbp + 0x230], rcx
nop dword [rax]
cmp eax, 0x22ca07ee
jle 0x1400a3ec0
cmp eax, 0x5794338e
jle 0x1400a5ef0
cmp eax, 0x6244243a
jg 0x1400a3e4d
cmp eax, 0x5794338f
je 0x1400a5f88
cmp eax, 0x60bc07e3
jne 0x1400a3e70
mov eax, dword [rbp + 0x27c]
add eax, 1
mov dword [rbp + 0x26c], eax
mov eax, 0xaa4750b7
jmp 0x1400a3e70
cmp eax, 0xd49d5205
jle 0x1400a3ef0
cmp eax, 0x235c5f8
jg 0x1400a5f24
cmp eax, 0xd49d5206
je 0x1400a5fa7
cmp eax, 0xfe6f1b33
jne 0x1400a3e70
mov eax, dword [rbp + 0x224]
jmp 0x1400a3e70
cmp eax, 0xa229dfd0
je 0x1400a6094
cmp eax, 0xaa4750b7
je 0x1400a60a8
cmp eax, 0xc9f26509
jne 0x1400a3e70
mov ecx, dword [0x1400f2738]
mov eax, dword [0x1400f273c]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete r8b
cmp eax, 0xa
setl r9b
mov ecx, r9d
xor cl, r8b
mov ebx, edx
and bl, r9b
xor bl, cl
mov ebx, 0x17954bb8
mov esi, 0x9b012d00
cmovne ebx, esi
test edx, edx
mov edi, 0x9b012d00
cmove edi, ebx
cmp eax, 0xa
cmovl edi, esi
test cl, cl
cmove edi, ebx
test edx, edx
mov edx, 0x581f37f0
mov ecx, 0x17954bb8
cmovne edx, ecx
mov ebx, edi
cmove ebx, esi
cmp eax, 0xa
mov eax, dword [0x1400f2710]
mov esi, dword [0x1400f2714]
mov ecx, 0x581f37f0
cmovl edx, ecx
mov dword [rbp + 0x214], edx
cmovge ebx, edi
mov dword [rbp + 0x218], ebx
lea edi, [rax - 1]
imul edi, eax
mov dword [rbp + 0x268], edi
and edi, 1
sete r10b
mov dword [rbp + 0x264], esi
cmp esi, 0xa
setge al
setl r11b
mov ebx, r11d
xor bl, r10b
mov edx, ebx
xor dl, 1
and dil, r11b
or dil, dl
xor dil, bl
mov edx, edi
xor dl, 1
and al, r10b
or al, dl
or r11b, r10b
xor r11b, bl
mov ebx, r11d
xor bl, al
mov edx, ebx
not dl
mov ecx, r11d
not cl
and cl, al
or cl, dl
xor al, 1
or al, r11b
xor cl, al
test cl, 1
mov edx, 0x8353906e
mov esi, 0x71946ac1
cmovne edx, esi
test bl, 1
mov ebx, 0x71946ac1
cmovne ebx, edx
test al, 1
cmove ebx, edx
test cl, 1
mov eax, dword [rbp + 0x27c]
mov rcx, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
mov esi, 0x8353906e
cmovne ebx, esi
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov r10d, dword [rdx + rax*4]
add r10, rcx
test dil, dil
mov eax, 0x8353906e
cmovne eax, ebx
test r11b, r11b
cmove eax, ebx
mov dword [rbp + 0x260], eax
or r9b, r8b
mov ecx, 0x7694ece2
mov eax, 0xe59fd857
cmovne ecx, eax
mov dword [rbp + 0x21c], ecx
mov ecx, 0x7694ece2
mov eax, 0x9fdcb46a
cmovne ecx, eax
mov dword [rbp + 0x220], ecx
mov eax, 0xbd0b03e6
mov r11d, 0x811c9dc5
jmp 0x1400a40b0
mov rax, qword [rbp + 0x288]
mov rax, qword [rbp + 0x288]
mov eax, 0x9b012d00
nop word cs:[rax + rax]
cmp eax, 0x17954bb7
jg 0x1400a5c40
cmp eax, 0xbd0b03e5
jg 0x1400a5db0
cmp eax, 0x87ce9d3c
je 0x1400a5e86
cmp eax, 0x9b012d00
je 0x1400a5e01
cmp eax, 0x9fdcb46a
jne 0x1400a40b0
mov dword [rbp + 0x210], r11d
mov dword [rbp + 0x20c], edi
mov dword [rbp + 0x208], r8d
mov dword [rbp + 0x204], esi
mov dword [rbp + 0x200], r9d
mov qword [rbp + 0x1b8], r10
test byte [rbp + 0x268], 1
movsx r10d, byte [rbp + 0x29f]
mov eax, dword [rbp + 0x278]
mov dword [rbp + 0x274], eax
sete byte [rbp + 0x29e]
cmp dword [rbp + 0x264], 0xa
setl byte [rbp + 0x29d]
mov eax, 0x462bec05
jmp 0x1400a4160
cmp byte [rbp + 0x29c], 0
mov eax, 0x22c0f4b1
cmovne eax, r15d
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x3117fdc3
jle 0x1400a41b0
cmp eax, 0x58a11e18
jg 0x1400a4b90
cmp eax, 0x3117fdc4
je 0x1400a4bc4
cmp eax, 0x462bec05
jne 0x1400a4160
movzx ecx, byte [rbp + 0x29e]
cmp byte [rbp + 0x29d], 0
mov eax, 0x71946ac1
mov edx, 0x3117fdc4
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1400a4160
cmp eax, 0x1f53ad1a
jg 0x1400a4bac
cmp eax, 0x8353906e
je 0x1400a4142
cmp eax, 0xb9e70da7
jne 0x1400a4160
mov r9d, dword [rbp + 0x298]
mov eax, r9d
and eax, 0x300d32eb
or eax, 0x8922c414
mov ecx, r9d
and ecx, 0xcff2cd14
xor ecx, eax
mov eax, ecx
xor eax, 0x76dd3beb
mov edx, ecx
xor edx, 0x8922c414
or edx, eax
xor ecx, 0x9f2d3869
and ecx, edx
xor ecx, 0x160ffc7d
and ecx, edx
mov edx, ecx
and edx, 0xe1770bb
mov r12d, ecx
and r12d, 0xf1e88f44
or r12d, 0x6022002
xor r12d, edx
xor r12d, 0x81550b9
or r12d, ecx
mov ecx, r9d
and ecx, 0x6098fcd3
or ecx, 0xf210028
mov eax, r9d
and eax, 0x9f67032c
xor eax, ecx
mov ebx, eax
xor ebx, 0x1367093
mov edx, eax
or edx, 0xf1e88f44
xor edx, 0xffe98f6c
or edx, ebx
mov ebx, eax
xor ebx, 0xfec98f6c
or ebx, edx
xor edx, eax
xor edx, 0x1367093
and edx, ebx
mov eax, r12d
and eax, 0xee181f2d
mov ebx, r12d
and ebx, 0x11e7e0d2
or ebx, 0x6000808
xor ebx, eax
mov eax, edx
mov ecx, edx
not r12d
and r12d, edx
xor edx, 0x11e7e0d2
xor eax, 0xb4b1d84f
and eax, edx
or ecx, 0x5aa9c762
xor ecx, 0xfeb9df6f
or ecx, eax
mov eax, ebx
xor eax, 0x4d4e2fb8
xor ebx, 0xb2b1d047
and ebx, ecx
not ecx
and ecx, eax
or r12d, ecx
or r12d, ebx
not r12d
mov eax, r12d
and eax, 0xa4519b98
and r12d, 0x5bae6467
or r12d, 0x84109000
xor r12d, eax
mov eax, r12d
xor eax, 0xdfbef467
mov r11d, r12d
and r11d, 0x5dfaf697
xor r12d, 0x824402f0
and r12d, eax
mov eax, r11d
xor eax, r12d
xor eax, 0x400290
xor r11d, 0x400290
and r11d, r12d
or r11d, eax
mov r8d, r11d
xor r8d, 0xf7bc1db4
mov eax, r11d
or eax, 0xe66cfdeb
mov edx, eax
xor edx, 0xee6fffeb
mov ecx, r11d
and ecx, 0x19930214
xor ecx, 0x8030200
mov esi, r11d
xor esi, 0x11d0e05f
or esi, ecx
mov edi, esi
not edi
and edi, edx
and eax, 0xc2df5143
and edx, 0x19000214
or edx, eax
xor edx, esi
mov ecx, edi
xor ecx, edx
xor ecx, 0x3db0aebc
xor edx, 0x19900214
and edx, edi
mov eax, ecx
and eax, 0xe66cfdeb
and ecx, 0x19930214
or ecx, edx
or ecx, eax
mov edx, ecx
and edx, 0xecc1695
mov eax, ecx
xor eax, 0xe8a0eb7e
mov r14d, edx
xor r14d, 0xf9b3eb7e
mov esi, ecx
xor esi, 0x175f1481
mov ebx, edx
xor ebx, 0x844653a6
and ebx, r14d
or edx, 0x820a4727
mov edi, ecx
or edi, 0x7df5b8d8
xor edi, 0x7fffbcd9
mov r13d, ecx
xor r13d, 0x6aaaac59
and r13d, eax
or r13d, edi
mov eax, edx
and eax, 0x888217a6
and ecx, 0x4440010
or ecx, eax
xor edx, 0x864e57a7
and edx, ebx
and ebx, 0xecc5695
xor ebx, ecx
xor ebx, 0x4441684
or edx, ebx
xor edx, r13d
or esi, r14d
mov eax, esi
and eax, 0xecc1695
xor eax, edx
xor eax, 0xecc1695
not esi
and esi, edx
or esi, eax
mov ecx, esi
and ecx, 0x3d6ad4f5
mov r14d, esi
and r14d, 0xc2940808
mov edi, esi
or edi, 0xc2952b0a
mov edx, esi
and edx, 0xc2952b0a
mov r13d, ecx
xor r13d, 0x1501f783
and r13d, edi
xor ecx, 0x3d6ad4f5
mov eax, ecx
and eax, 0x354014c4
and edi, 0x4a2ee339
or edi, eax
or ecx, edx
xor edi, edx
not edx
mov eax, esi
or eax, 0xeaff2b7e
and edx, 0x286b2376
or edx, r14d
mov ebx, eax
and ebx, 0x8febd69e
and esi, 0x10000001
or esi, ebx
not eax
and eax, r13d
and r13d, 0x3d6af7f5
xor r13d, esi
xor r13d, 0x9fead69d
or eax, r13d
xor eax, edx
xor edi, 0xb5d11cc6
and edi, ecx
or edi, eax
mov eax, edi
and eax, 0xd25c9294
or eax, 0x28034442
and edi, 0x2da36d6b
xor edi, eax
mov eax, edi
xor eax, 0x156990b7
mov ecx, edi
xor ecx, 0xea966f48
or ecx, eax
xor edi, 0x60a362d4
and edi, ecx
mov eax, edi
xor eax, 0x8a350d9c
or eax, ecx
xor edi, ecx
xor edi, 0x75caf263
and edi, eax
mov eax, r9d
and eax, 0xbae01e84
mov ecx, r9d
and ecx, 0x451fe17b
or ecx, 0x98801e04
xor ecx, eax
mov eax, r9d
and eax, 0x80000
mov edx, ecx
and edx, 0xb4240811
and ecx, 0x4bd3f7ee
add eax, edx
add eax, 0x52e686
xor eax, ecx
and r9d, 0xf133e96a
mov edx, r9d
xor r9d, eax
xor eax, 0x9012e802
xor edx, 0xf133e96a
and edx, eax
xor r9d, 0x672d077d
or edx, r9d
mov r14d, edx
not r14d
and r14d, edi
mov r13d, edi
or r13d, 0x8e000724
mov eax, edi
and eax, 0x8e000724
and r9d, 0xc000004
mov ecx, edx
and ecx, 0x82000720
or ecx, r9d
mov ebx, edi
xor ebx, 0x8a000104
and ebx, eax
not eax
mov r9d, r13d
and r9d, 0xfb0fa016
mov esi, eax
and esi, 0xea028104
or ebx, esi
mov esi, edi
and esi, 0xf058c9
or esi, r9d
xor esi, ebx
xor esi, 0x11fd79db
mov ebx, edi
and ebx, 0x609ee042
and r13d, 0x9f611a9d
or r13d, ebx
mov ebx, edi
and ebx, 0x520
and eax, 0x9f611a9d
add eax, ebx
add eax, 0x609ee042
xor eax, r13d
xor edi, 0x8e000724
or edi, eax
not edi
or edi, esi
mov eax, ecx
and eax, 0x6000000
and edx, 0x71fff8db
or edx, eax
or ecx, 0x262e5009
xor ecx, edx
mov eax, ecx
xor eax, 0xa82e572d
xor ecx, 0x57d1a8d2
and ecx, edi
not edi
and edi, eax
or ecx, edi
mov eax, r14d
and eax, 0xc64177d6
or eax, 0x39268801
mov edx, r14d
and edx, 0x39be8829
xor edx, eax
mov eax, edx
xor eax, 0xff67ffd7
mov ebx, ecx
xor ebx, 0x39be8829
or ebx, eax
xor edx, ecx
xor edx, 0x39268801
and edx, eax
xor edx, ebx
not edx
and ecx, r14d
mov eax, ecx
and eax, 0xa32261d0
or eax, 0x10999806
mov esi, ecx
and esi, 0x5cdd9e2f
xor esi, eax
xor esi, edx
and ecx, edx
mov eax, esi
xor eax, ecx
xor eax, 0x10999806
xor esi, 0x10999806
and esi, ecx
or esi, eax
mov ebx, esi
mov r9d, esi
mov edx, esi
mov r13d, esi
mov eax, esi
and eax, 0x310718ea
or eax, 0x6f8a511
mov r14d, esi
and r14d, 0xcef8e715
xor r14d, eax
mov eax, r14d
xor eax, 0xf7cb4c5b
or eax, esi
xor r14d, esi
and esi, 0x190a9b13
or ebx, 0xe6f564ec
and r9d, 0xe6f564ec
mov ecx, esi
xor ecx, 0xc026d4ea
and ecx, ebx
or edx, 0xfffd6ffd
mov edi, edx
and edi, 0xb0495454
and r13d, 0x28002
or r13d, edi
not edx
and edx, ecx
and ecx, 0x592e9bbb
xor ecx, r13d
xor ecx, 0x304b9016
or edx, ecx
xor edx, r9d
xor edx, 0xd92c4ff9
xor esi, 0x190a9b13
mov ecx, esi
and ecx, 0x21101
and ebx, 0xddf8ce1a
or ebx, ecx
or esi, r9d
xor ebx, r9d
xor ebx, 0x220731e5
and ebx, esi
or ebx, edx
mov ecx, ebx
xor ecx, 0x190a9b13
xor ebx, 0x17c68da6
or ebx, ecx
xor r14d, 0x834b3a4
and r14d, eax
mov eax, ebx
not eax
and eax, r14d
xor r14d, ebx
xor r14d, eax
mov r9d, r11d
xor r9d, 0x843e24b
mov ebx, r11d
mov edi, r11d
mov r13d, r11d
mov eax, r11d
and eax, 0xf4e5e31e
xor r11d, 0x359feaa
and r11d, r8d
mov edx, eax
xor edx, r11d
xor edx, 0x41e20a
xor eax, 0x41e20a
and eax, r11d
or eax, edx
mov edx, eax
xor edx, 0x6653709e
and edx, r9d
or r9d, r8d
and r12d, 0x82000820
and ebx, 0x1098338a
or ebx, r12d
and edi, 0x6d67c455
or edi, ebx
mov ecx, edi
xor ecx, 0x6524261e
mov ebx, r9d
and ebx, 0x6d67c455
xor r13d, r9d
and r9d, 0x92983baa
or r9d, 0x64244445
xor r9d, ebx
mov ebx, r9d
xor ebx, 0xf6bc7fef
xor edi, 0x9adbd9e1
and edi, ebx
xor r9d, 0x9438010
and r9d, ecx
xor r13d, 0xf7bc1db4
or r13d, r8d
not r13d
or r13d, r9d
or r13d, edi
mov ebx, r13d
not ebx
mov ecx, r13d
and ecx, 0x6d496c7f
mov edi, eax
xor edi, 0x99ac8f61
and edi, r8d
or edi, edx
xor eax, edi
xor eax, 0x6653709e
and eax, edi
mov edx, r13d
xor edx, 0x5014c23
and edx, ecx
and ecx, eax
mov esi, r13d
and esi, 0x5014c23
xor esi, edx
xor esi, 0x85b5cfa3
and edx, 0x5014c23
or edx, esi
mov edi, eax
and edi, 0x85b5cfa3
or edi, 0x840004c
and eax, 0x7a4a305c
xor eax, edi
xor eax, edx
mov edx, eax
mov edi, ecx
xor edi, eax
xor edi, 0x720a3010
mov esi, edi
and esi, ecx
xor eax, 0x60082010
and eax, ecx
not ecx
xor edx, 0x8df5cfef
and edx, ecx
or edx, eax
xor edx, esi
and eax, edi
or eax, edx
mov ecx, ebx
and ecx, r13d
and r13d, 0x29086950
and ebx, 0xd6f7968f
or ebx, r13d
xor ebx, 0xd6f7968f
and ecx, 0xffffffdf
or ecx, ebx
mov r9d, eax
xor r9d, 0x6d496c5f
lea r8d, [rcx + 0x20]
mov edi, eax
xor edi, 0xe8f03d9b
mov esi, eax
xor esi, 0x92b693a0
or esi, edi
mov ebx, eax
or ebx, 0x7a46ae3b
xor ebx, 0x7f4fee7f
or edi, ebx
mov r11d, ecx
and r11d, 0x85b951c4
mov edx, ecx
xor edx, 0x85b951e4
or edx, r11d
not esi
and esi, ebx
xor esi, edi
mov edi, edx
and edi, 0xffffffdf
mov ebx, edi
xor ebx, 0x6727c902
xor ecx, 0x291100
and ecx, r11d
mov r12d, ebx
xor edi, 0xffffffdf
mov r13d, edi
and r13d, 0x1bcc4c01
and ebx, 0xe433b3de
or ebx, r13d
or edi, r11d
xor ebx, r11d
or r11d, 0x8594c8c6
xor ecx, r11d
or r12d, 0x8594c8c6
or edx, 0x7a6b3739
xor edx, r12d
mov r11d, edx
xor r11d, 0x81000
and r11d, ecx
not ecx
xor edx, 0xe7b341e4
and edx, ecx
or edx, r11d
xor ebx, 0x7fefcd03
and ebx, edi
or ebx, edx
mov ecx, esi
xor ecx, 0x1ac5778a
mov edx, ebx
and edx, 0xe53a8875
or edx, 0x8453780
and ebx, 0x1ac5778a
xor ebx, edx
mov edx, ebx
xor edx, 0xed7fbff5
xor esi, 0xe53a8875
and esi, edx
xor ebx, 0x1280400a
and ebx, ecx
or ebx, esi
and r9d, r8d
xor eax, r8d
xor eax, 0x6d496c5f
or eax, r9d
mov ecx, ebx
and ecx, 0x5bce1f7c
xor ecx, eax
mov edx, ebx
xor edx, eax
not eax
or eax, ebx
and ebx, 0xa431e083
or ebx, 0x1ac01b00
xor ecx, ebx
and eax, edx
mov edx, ecx
xor edx, eax
xor edx, 0xe53fe4ff
xor ecx, 0xe53fe4ff
and ecx, eax
or ecx, edx
mov edx, ecx
and edx, 0x563e2c9a
or edx, 0x9005300
mov eax, ecx
and eax, 0xa9c1d365
xor eax, edx
mov ebx, ecx
xor ebx, eax
xor eax, 0xf6ffacff
or eax, ecx
xor ebx, 0x9005300
and eax, ebx
mov edx, eax
xor edx, ecx
and edx, ebx
mov ebx, ecx
and ebx, 0xa4a3d9c2
and ecx, 0x5b5c263d
or ecx, 0xa0a01800
xor ecx, ebx
mov ebx, ecx
xor ebx, 0xfbfc3e3d
mov edi, eax
and edi, 0xa4a3d9c2
or edi, 0x4354221d
and eax, 0x5b5c263d
xor eax, edi
mov edi, eax
xor edi, 0xe7f7fbdf
xor ecx, 0x403c1c2
and ecx, edi
xor eax, 0x18080420
and eax, ebx
or eax, edx
or eax, ecx
mov edx, eax
not edx
and edx, r14d
mov r11d, r14d
xor r11d, eax
xor r11d, edx
mov r9d, r14d
and r9d, 0x9903995d
mov edx, eax
or edx, 0x66fc66a2
mov esi, edx
not esi
mov r8d, eax
and r8d, 0x66fc66a2
and r14d, 0x66fc66a2
or r14d, 0x98008855
and edx, 0xae0a6a3c
mov edi, esi
and edi, 0x11019141
or edi, edx
mov ebx, edi
xor ebx, 0x51f595c3
mov edx, edi
xor edi, 0xae0a6a3c
mov r12d, edi
or edi, r8d
not r8d
xor edx, 0xc263434a
and edx, ebx
and esi, 0x91029009
or esi, edx
mov edx, eax
and edx, 0x60080022
mov ecx, r8d
and ecx, 0xc602114
add ecx, edx
add ecx, 0x3020681
mov edx, eax
and edx, 0x2944680
xor edx, ecx
mov ecx, edx
xor ecx, 0x630b0ee3
xor edx, 0x9cf4f11c
and edx, esi
not esi
and esi, ecx
or edx, esi
and r12d, 0x89021805
and ebx, 0x10ddc158
or ebx, r12d
and eax, 0x662026a2
and r8d, 0x10ddc158
or r8d, eax
xor r8d, ebx
not r8d
and r8d, edi
or r8d, edx
xor r8d, r9d
xor r8d, r14d
mov eax, r8d
xor eax, 0x1031108
mov ecx, r11d
xor r8d, 0xfefceef7
and r8d, r11d
xor r11d, 0x6ee49458
mov edx, eax
and edx, 0x6ee49458
and eax, 0x911b6ba7
or eax, 0x26e40458
xor eax, edx
mov edx, eax
xor edx, 0xb7ff6fff
xor ecx, 0x911b6ba7
and ecx, edx
xor eax, 0x48009000
and eax, r11d
or r8d, eax
or r8d, ecx
mov eax, 0x1f53ad1b
jmp 0x1400a4160
cmp eax, 0x58a11e19
je 0x1400a4be6
cmp eax, 0x71946ac1
jne 0x1400a4160
mov eax, 0x3117fdc4
jmp 0x1400a4160
cmp eax, 0x22c0f4b1
jne 0x1400a4c01
mov eax, 0x1f53ad1b
mov r8d, dword [rbp + 0x298]
jmp 0x1400a4160
mov dword [rbp + 0x298], r10d
mov eax, dword [rbp + 0x298]
cmp eax, 0x41
setge byte [rbp + 0x29c]
mov eax, dword [rbp + 0x260]
jmp 0x1400a4160
mov eax, dword [rbp + 0x298]
cmp eax, 0x5b
mov eax, 0x22c0f4b1
mov ecx, 0xb9e70da7
cmovl eax, ecx
jmp 0x1400a4160
cmp eax, 0x1f53ad1b
jne 0x1400a4160
mov r10d, dword [rbp + 0x274]
mov eax, r10d
and eax, 0xa06206ca
mov ecx, r10d
and ecx, 0x5f9df935
or ecx, 0x620008
xor ecx, eax
mov edx, ecx
xor edx, 0xff9dfff7
mov ebx, ecx
xor ebx, 0x3c382075
and ebx, edx
mov eax, ecx
and eax, 0xc3a5df82
xor eax, 0x200000
or eax, ebx
xor ecx, 0x620008
or ecx, edx
xor eax, 0xc3a5df82
and eax, ecx
mov edx, eax
and edx, 0x1ba9fcee
mov ecx, eax
xor ecx, 0xa0020200
and ecx, eax
mov ebx, eax
or ebx, 0xe4560311
xor edx, 0xb1aab604
and edx, ebx
mov r11d, eax
or r11d, 0xee574bfb
mov ebx, eax
and ebx, 0xa0020200
xor ebx, 0xaa034aea
and ecx, 0xe4560311
or ecx, ebx
mov ebx, r11d
and ebx, 0x921be1fb
and eax, 0x1a01404
or eax, ebx
not r11d
and r11d, edx
and edx, 0x3ba9feee
xor edx, eax
xor edx, 0x13b9f5ff
or r11d, edx
xor r11d, ecx
mov eax, r11d
and eax, 0x8b181a5c
or eax, 0x34434021
and r11d, 0x74e7e5a3
xor r11d, eax
mov eax, r11d
xor eax, 0x2feabccf
mov ecx, r11d
xor ecx, 0xd0154330
mov edx, r11d
or edx, 0x2769e20a
xor edx, 0xf77de33a
xor r11d, 0xf77ca13a
and r11d, eax
or r11d, edx
or ecx, eax
xor r11d, 0x2769e20a
and r11d, ecx
mov eax, r11d
xor eax, 0x2e69652b
mov ecx, eax
and ecx, 0xe043fd87
or ecx, 0xaa80010
mov ebx, eax
and ebx, 0x1fbc0278
xor ebx, ecx
and eax, 0x2e69652b
mov ecx, eax
xor ecx, ebx
xor ecx, 0x24c1653b
xor ebx, 0x2441652b
and ebx, eax
or ebx, ecx
mov eax, r10d
and eax, 0xfb1401a1
or eax, 0x688008
mov r9d, r10d
and r9d, 0x4ebfe5e
xor r9d, eax
mov eax, r9d
xor eax, 0xbaad4363
or r9d, 0x453a3c94
xor r9d, 0x457abc9c
or r9d, eax
mov eax, r10d
and eax, 0xbac5c36b
mov ecx, r9d
xor ecx, 0x29379af7
mov edx, r10d
and edx, 0x92c04108
or edx, 0x29151af2
mov esi, r10d
and esi, 0x28058263
xor esi, edx
mov edx, esi
xor edx, 0xffdd7ffa
mov edi, r9d
xor edi, 0xd6c86508
and edi, edx
xor esi, 0x228005
and esi, ecx
or esi, edi
mov ecx, r9d
xor ecx, eax
not r9d
or r9d, eax
and r9d, ecx
or r9d, esi
mov eax, r10d
and eax, 0x3e90666b
mov ecx, r10d
and ecx, 0xc16f9994
or ecx, 0x2a106008
xor ecx, eax
xor ecx, r9d
mov eax, r9d
xor eax, r10d
xor eax, 0x94aca640
xor r9d, 0x94aca640
and r9d, r10d
or r9d, eax
mov eax, ecx
xor eax, 0x414339b7
or eax, r9d
xor r9d, ecx
xor r9d, 0xbebcc648
and r9d, eax
mov r12d, r8d
not r12d
mov edx, r8d
and edx, 0x437fed4a
mov eax, r8d
and eax, 0xbc8012b5
or eax, 0x4127600a
xor eax, edx
xor eax, 0x2588d40
or eax, r8d
mov edi, r8d
and edi, 0x25b4148
xor edi, 0xadb43e9
mov ecx, r8d
xor ecx, 0xbedb53fd
and ecx, edx
mov edx, eax
and edx, 0xadb43e9
and eax, 0xf524bc16
or eax, 0x8004140
xor eax, edx
mov edx, ecx
not edx
or edx, r8d
not edx
and edx, 0x25b4148
or ecx, edi
or ecx, edx
mov edx, ecx
xor edx, eax
xor edx, 0x4924ed42
and edx, ecx
xor eax, 0x25b0008
or eax, ecx
xor eax, edx
mov ecx, eax
not ecx
mov edi, eax
xor edi, 0x8801225
and edi, ecx
mov ecx, eax
or ecx, 0x437fed4a
and edi, 0xbc8012b5
mov r14d, eax
and r14d, 0x437fed4a
lea r10d, [r14 - 0x4bffff70]
mov esi, eax
and esi, 0x14000010
mov edx, ecx
and edx, 0xa0448dc0
or edx, esi
xor edx, edi
lea esi, [rdx + 0x1384000]
mov edi, eax
and edi, 0x28800011
and ecx, 0x9729dbac
or ecx, edi
xor ecx, r14d
mov edi, r14d
xor edi, 0x4a83322f
and edi, esi
xor edx, 0xf647adda
and edx, r10d
or edx, edi
xor ecx, 0xbfa9dbbd
xor eax, 0x437fed4a
or eax, ecx
not eax
or eax, edx
mov edx, eax
xor edx, 0xb735624
mov edi, eax
or edi, 0xbf61617e
mov ecx, eax
xor ecx, 0x4bedc8a5
and ecx, edx
mov edx, edi
and edx, 0xab6bb319
and eax, 0x40940c80
or eax, edx
xor eax, ecx
xor eax, 0xebeda999
xor edi, 0xffede9ff
and edi, ecx
or edi, eax
mov edx, edi
xor edx, 0xb412375a
mov ecx, edi
and ecx, 0x41963a78
xor ecx, 0x41840820
mov eax, edi
xor eax, 0xf5840d22
and eax, edx
or eax, ecx
mov edx, eax
xor edx, 0xbe69c587
mov ecx, eax
and ecx, 0xc7ae538e
xor ecx, 0x41861208
mov esi, eax
xor esi, 0x863869f6
or esi, ecx
mov ecx, edi
xor ecx, 0x73bc64d4
xor edi, 0x4bedc8a5
or edi, ecx
and edi, esi
mov ecx, eax
xor ecx, 0x9000a0ac
and ecx, edx
mov edx, eax
xor edx, ecx
xor edx, 0x6fff5f53
xor eax, 0x6fff5f53
and eax, ecx
or eax, edx
mov r14d, edi
xor r14d, 0x1638c95a
mov esi, edi
xor esi, 0xdba443a
and esi, r14d
mov edx, edi
or edx, 0xe47d729f
mov r10d, edx
and r10d, 0x160e96b2
mov ecx, edi
and ecx, 0x9800940
or ecx, r10d
xor ecx, esi
xor ecx, 0xd8e16b2
xor edx, 0xedff76bf
and edx, esi
or edx, ecx
xor edx, eax
xor edi, eax
xor edi, 0x1638c95a
and r14d, eax
or r14d, edi
mov ecx, edx
xor ecx, 0xe47d729f
xor edx, r14d
xor edx, 0xe47d729f
or ecx, r14d
not ecx
or ecx, edx
mov eax, ecx
and eax, 0x6ec3b5e4
or eax, 0x80801
and ecx, 0x913c4a1b
or ecx, 0x28c13164
xor ecx, eax
mov eax, ecx
xor eax, 0xd736c69a
mov edx, ecx
or edx, 0xfb4c88f1
xor edx, 0xfbcdb9f5
mov edi, ecx
xor edi, 0xd385b194
and edi, eax
or edi, edx
xor ecx, edi
xor edi, 0x4b3770e
or edi, eax
xor ecx, 0x2c7a4e6b
and ecx, edi
or r12d, 0xd1969ad4
mov eax, r8d
and eax, 0x248000a
mov edx, r12d
and edx, 0x98b14025
or edx, eax
mov eax, r12d
and eax, 0x25043500
or eax, edx
mov edx, eax
and edx, 0xb2a41504
xor edx, 0x20280c0
xor eax, 0xf0ec1f1e
or eax, edx
and r8d, 0x22000528
and r12d, 0x5debeac7
or r12d, r8d
mov edx, r12d
and edx, 0xc49602b
xor edx, 0xc496003
xor r12d, 0x10b280fc
or r12d, edx
mov edx, eax
and edx, 0xfffdff3f
xor edx, 0x1aaf6d2c
and edx, eax
mov edi, eax
and edi, 0x1aad6dac
or edi, 0x24001052
mov esi, r12d
and esi, 0x64400203
or eax, r12d
and r12d, 0xa296d28
or r12d, 0x64528243
xor r12d, esi
xor r12d, edi
xor r12d, edx
xor r12d, 0x41429241
not eax
or eax, r12d
mov r10d, r9d
mov r15d, r9d
mov r14d, r9d
mov esi, r9d
mov edx, r9d
mov edi, r9d
and edi, 0x100108
mov r13d, r9d
or r13d, 0x3bac76d0
mov r12d, r9d
xor r12d, 0xc453892f
or r12d, r13d
and r13d, 0xfc6bc837
or r13d, edi
mov r8d, r9d
xor r13d, r9d
and r9d, 0x8d80cfea
xor r10d, 0x1008060
and r10d, r9d
and r15d, 0x70663010
and r14d, 0x2190005
or r14d, 0x7c006010
xor r14d, r15d
and esi, 0x1008060
or esi, 0x4804600
xor esi, r10d
xor esi, r14d
xor esi, 0xaff1605
and edx, 0x727f3015
or edx, 0x8000cf62
xor edx, r9d
xor edx, 0xf27fff77
xor r8d, 0x8d80cfea
or r8d, edx
not r8d
or r8d, esi
mov r15d, r8d
xor r15d, 0x727f3015
mov edi, r8d
xor edi, 0xb62cb93a
and edi, r15d
mov r14d, r8d
xor r14d, 0x49d346c5
or r14d, edi
xor r13d, 0x38284010
and r13d, r12d
mov edi, ebx
xor edi, 0x40008000
and edi, ebx
and r11d, 0x40008000
xor r11d, 0x4a849408
and edi, 0x44018902
or edi, r11d
mov esi, ebx
mov r9d, ebx
mov edx, ebx
and edx, 0x8010000c
and esi, 0x420021
or esi, 0x45880090
xor esi, edi
and r9d, 0x3bac76d0
xor r9d, 0x8afe54bd
xor edx, esi
xor edx, 0x1a04008
and edx, r9d
xor esi, 0x41a14902
or esi, r9d
xor esi, edx
mov r9d, r14d
mov edx, r14d
and edx, 0xb2e0d7b3
and r9d, 0x4d1f284c
or r9d, 0x22804682
xor r9d, edx
mov edx, r9d
xor edx, 0x6f9f6ece
mov edi, r13d
and edi, 0xb2e0d7b3
or edi, 0x45082048
mov r12d, r13d
and r12d, 0x4d1f284c
xor r12d, edi
mov r10d, r9d
xor r10d, 0x98385838
and r10d, edx
mov edx, r12d
xor edx, 0x8170804
mov edi, r12d
xor edi, 0x4fc10d
and edi, edx
mov r11d, r9d
or r11d, 0x858c909
or r12d, 0xf7a736f6
xor r12d, 0xf7eff7ff
or r12d, edi
mov edx, r11d
and edx, 0x8899f000
and r9d, 0x772606f6
or r9d, edx
mov edi, r14d
xor r9d, r10d
xor r11d, 0x9878d939
and r11d, r10d
mov r10d, r14d
and edi, 0x9e366bbf
xor edi, r13d
xor r10d, r13d
not r13d
or r13d, r14d
xor r9d, 0x9838d030
or r11d, r9d
mov r9d, ebx
xor r11d, r12d
mov r12d, ebx
and r14d, 0x61c99440
or r14d, 0x21040b3
xor edi, r14d
and r13d, r10d
mov edx, edi
xor edx, r13d
xor edx, 0xfdefbf4c
xor edi, 0xfdefbf4c
and edi, r13d
or edi, edx
mov edx, edi
and edx, 0xc0508439
or edx, 0x892802
and edi, 0x3faf7bc6
xor edi, edx
mov r14d, edi
xor r14d, 0x892802
mov r10d, r11d
and r10d, 0x4e3f9ca4
mov r13d, r14d
and r13d, 0xb1c0635b
xor r13d, r10d
mov edx, r14d
xor r14d, r11d
xor edi, 0xff76d7fd
or edi, r11d
and r11d, 0xb1c0635b
or r11d, 0xc081c80
xor r13d, r11d
and edx, 0x4e3f9ca4
or edx, 0xb040624a
xor edx, r13d
xor edx, 0x43b78135
and edi, r14d
or edi, edx
mov r10d, edi
not r10d
mov edx, edi
and edx, 0x4de1c672
mov r11d, edi
or r11d, 0x4de1c672
mov r14d, r11d
and r14d, 0x26011ca7
and r10d, 0x901e2108
or r10d, r14d
mov r14d, edi
xor r14d, 0x4010422
and r14d, edx
not edx
xor r14d, r10d
mov r10d, edi
and r10d, 0x420
xor r11d, edx
and edx, 0x26010887
add r10d, edx
add r10d, 0xd1f0c210
xor r10d, r14d
mov r13d, r8d
mov r14d, r8d
xor r12d, r8d
xor r8d, 0x8d80cfea
and r8d, ebx
xor esi, 0x4de1c672
xor r10d, 0xd1f0d630
xor edi, 0x4de1c672
or edi, r11d
not edi
or edi, r10d
mov edx, esi
and edx, 0xb7fb9257
or edx, 0x42d28
and esi, 0x48046da8
xor esi, edx
mov r10d, esi
mov edx, edi
and edx, 0xb7fb9257
or edx, 0x40004d08
and edi, 0x48046da8
xor edi, edx
mov edx, edi
xor edx, 0xf7fbdf5f
xor esi, 0x48004080
and esi, edx
mov r11d, ecx
not r11d
xor r10d, 0xb7ffbf7f
xor edi, 0x80420a0
and edi, r10d
mov r10d, eax
xor r10d, 0xb2a695c4
or edi, esi
and r13d, 0xa631f20f
xor r13d, 0x8400c20a
xor r14d, 0x2bb13de5
and r9d, 0x59ce0df0
or r9d, 0x86009003
and ebx, 0xa631f20f
xor ebx, r9d
and r13d, r15d
or r13d, r14d
mov edx, ebx
xor ebx, 0xdfce9df3
and ebx, r13d
not r13d
xor edx, r13d
xor edx, 0xdfce9df3
and edx, r13d
or ebx, edx
mov edx, r12d
xor edx, 0x8d80cfea
or r8d, edx
mov r15d, r12d
xor r15d, 0x727f3015
xor r12d, r8d
xor r12d, 0x727f3015
or r15d, r8d
not r15d
or r15d, r12d
mov edx, r15d
and edx, 0xcde4750
or edx, 0x21209829
and r15d, 0xf321b8af
xor r15d, edx
mov edx, r15d
xor edx, 0xdedf67d6
and edx, ebx
xor r15d, ebx
xor r15d, 0xdedf67d6
or r15d, edx
mov edx, r15d
and edx, 0xa94c8ce7
lea r9d, [rdx + 0x42217110]
xor edx, 0xa94c8ce7
mov r8d, r9d
and r8d, 0x4804a0a0
mov esi, r15d
xor esi, 0x81480c46
and esi, edx
and edx, 0x20000001
or edx, r8d
mov ebx, edx
and ebx, 0x600080a1
and r9d, 0x8042000
add ebx, r9d
add ebx, 0x5021e54
xor ebx, esi
xor ebx, 0x33805e5d
xor edx, 0x20000001
and edx, esi
or edx, ebx
and r15d, 0x56b37318
xor r15d, edx
mov edx, r15d
xor edx, 0x283593b1
mov ebx, r15d
xor ebx, 0xd7ca6c4e
and ebx, edx
xor r15d, ebx
xor r15d, 0xd7ca6c4e
or r15d, ebx
mov edx, r15d
and edx, 0xab469b10
or edx, 0x50b0608d
and r15d, 0x54b964ef
xor r15d, edx
mov edx, r15d
xor edx, 0xaf4f9f72
mov ebx, edi
not ebx
and ebx, edx
xor r15d, 0x50b0608d
and r15d, edi
or ebx, r15d
and r15d, edx
and edx, edi
xor ebx, edx
xor r15d, ebx
mov edx, ecx
and edx, 0x4093dba5
or edx, 0x3e64205a
mov edi, ecx
and edi, 0xbf6c245a
xor edi, edx
mov r9d, edi
xor r9d, 0xc19bdfa5
mov edx, eax
xor edx, 0x4d596a3b
xor edi, 0x3e64205a
mov ebx, edi
or ebx, r10d
and edi, edx
and r9d, r10d
or r9d, edi
xor r9d, ebx
mov r8d, r9d
not r8d
mov edx, ecx
and edx, 0xd240d802
or edx, 0x2049
or r11d, 0xde6c8a14
and r11d, 0xff7c8ab4
xor r11d, edx
mov edx, r11d
xor edx, 0xca20210
and ecx, 0xcaf275d
lea ebx, [rcx - 0x2dbf27fe]
xor r11d, 0xd754f
and r11d, ebx
xor ecx, 0x2d3107b0
and ecx, edx
or ecx, r11d
mov r12d, eax
xor r12d, 0x41f64d66
mov edx, r12d
and edx, 0x84a6247d
mov edi, ecx
and edi, 0x84afa47d
or edi, 0x29001a80
and ecx, 0x7b505b82
and eax, 0x98000
add eax, edx
add eax, 0x19105080
and r12d, 0x7b505b82
xor r12d, eax
xor r12d, ecx
xor r12d, edi
mov r14d, r12d
xor r14d, 0xcfefb5ff
mov r11d, r14d
and r11d, 0x260dd63e
mov eax, r12d
and eax, 0xd9f229c1
mov r10d, r8d
mov ecx, r8d
mov r13d, r14d
or r14d, r8d
and r8d, 0x20cc21a
or r8d, 0x332424
and r10d, 0x90c00100
or r10d, 0x10
and ecx, 0x493228c1
or ecx, 0x8080440c
xor ecx, r10d
mov esi, r9d
or esi, 0xdbfeebdb
xor esi, r8d
xor esi, ecx
xor esi, 0xa6beb606
mov ecx, r9d
xor ecx, 0xd9f229c1
xor r9d, 0x260dd63e
or r9d, ecx
not r9d
or r9d, esi
mov ecx, r11d
not ecx
mov edx, eax
xor edx, 0xefeff7ff
mov ebx, r12d
xor ebx, 0x200c436
and ebx, r11d
mov edi, eax
xor edi, 0xcd3d5188
and edi, edx
or eax, 0xdd2d5988
and r13d, 0x91008
xor r11d, edx
xor edx, ecx
and ecx, 0xc5044100
add ecx, r13d
add ecx, 0x2082a441
xor ecx, ebx
mov ebx, eax
and ebx, 0x451651c1
and r12d, 0xc02000
or r12d, ebx
xor eax, 0xdd3d5988
and eax, edi
and edi, 0xd9fb29c9
xor edi, r12d
xor edi, 0x41100180
or eax, edi
xor eax, ecx
xor eax, 0x38abbcc9
or edx, r11d
not edx
or edx, eax
xor edx, r9d
mov eax, r14d
not eax
and eax, edx
xor r14d, edx
xor r14d, eax
mov edx, r15d
and edx, 0x1f489344
lea r12d, [rdx + 0x60b00cb3]
mov ecx, edx
xor ecx, 0x1f489344
mov ebx, r15d
and ebx, 0xd338e252
or ebx, 0x2c47198d
mov edi, r15d
and edi, 0x2cc71dad
xor edi, ebx
mov ebx, edi
xor ebx, 0x330f8ac9
mov esi, r15d
not esi
xor edi, 0xccf07536
and edi, esi
mov r11d, ebx
and r11d, r15d
or r11d, edi
and r11d, ebx
mov r9d, r14d
and r9d, 0xe0b76cbb
lea ebx, [r9 + 0x1c000300]
mov eax, r14d
and eax, 0x1f489344
xor eax, ebx
mov dword [rbp + 0x274], eax
mov eax, r12d
and eax, 0x12086e0
xor r15d, 0x8480104
and r15d, ecx
and ecx, 0x16001000
or ecx, eax
xor ecx, 0x96027819
or r15d, ecx
mov eax, r15d
xor eax, 0x8540002
and eax, 0x8d56825a
mov ecx, r15d
and ecx, 0x12287da5
or ecx, eax
xor ecx, 0xb557ca28
mov r10d, r15d
xor r10d, 0x9722fef9
mov eax, r10d
and eax, 0xa001040
or eax, ecx
and r12d, 0x55d88b24
xor edx, 0x3569a797
or edx, r12d
mov ecx, edx
xor ecx, 0x7f79bff7
and ecx, eax
not eax
mov ebx, r11d
and ebx, 0x2a2134d3
mov esi, edx
xor esi, 0x7ff8bff7
or edx, 0x80064008
and edx, eax
or ecx, edx
and edx, esi
and esi, eax
xor ecx, esi
or edx, ecx
mov ecx, r11d
and ecx, 0xd5decb2c
mov eax, ecx
xor eax, 0x4912a796
mov esi, eax
or esi, 0x5d4314bb
mov edi, r11d
or edi, 0xaabdffd7
xor edi, esi
mov r12d, r11d
xor r12d, 0x22202040
and r12d, ebx
xor ecx, 0xd5decb2c
mov r13d, ecx
or ecx, ebx
not ebx
mov esi, r11d
and esi, 0x20200000
mov r8d, ebx
and r8d, 0x2006240
add esi, r8d
add esi, 0x4c400028
xor esi, r12d
mov r8d, esi
xor r8d, 0xecfc892c
mov r12d, edi
xor edi, 0x2a3197d7
and edi, r8d
xor r12d, 0x6000
xor esi, 0x130376d3
and esi, r12d
or esi, edi
mov r12d, dword [rbp + 0x274]
xor r12d, 0xfcb76fbb
and r12d, r14d
xor r9d, 0xe0b76cbb
and r13d, 0x504a8308
and eax, 0x859448b4
or eax, r13d
mov edi, r11d
and edi, 0xa203442
and ebx, 0xa59548b5
or ebx, edi
xor ebx, eax
xor ebx, 0xdeeefffa
and ebx, ecx
or ebx, esi
mov eax, edx
xor eax, 0x4625c679
mov ecx, ebx
and ecx, 0x4625c679
or ecx, 0x21981982
and ebx, 0xb9da3986
xor ebx, ecx
mov ecx, ebx
xor ecx, 0x67bddffb
xor edx, 0xb9da3986
and edx, ecx
xor ebx, 0x98422004
and ebx, eax
mov eax, r15d
xor eax, 0x130881e4
and eax, r10d
mov ecx, r15d
or ecx, 0xdbd780fa
mov edi, ecx
and edi, 0xc51ea4c
and r15d, 0x281501
or r15d, edi
xor r15d, eax
xor r15d, 0x2859814c
xor ecx, 0xfbdf81fe
and ecx, eax
or ecx, r15d
mov r15d, 0x58a11e19
mov eax, r11d
and eax, 0xdbd780fa
or r10d, r11d
and r11d, 0x24287f05
or r11d, 0x43d68078
xor r11d, eax
xor r11d, ecx
xor r11d, 0x98010082
and r11d, r10d
or r11d, ebx
or r11d, edx
mov eax, r14d
and eax, 0x3089a
mov ecx, r9d
and ecx, 0x804000
or ecx, eax
xor ecx, 0x10804204
xor r14d, 0xe0342421
and r14d, r9d
or r14d, ecx
mov edx, r14d
xor edx, 0xef7cb561
mov eax, r14d
and eax, 0x30240e
mov ecx, edx
and ecx, 0xf1cfcab1
or ecx, eax
mov ebx, ecx
xor ebx, 0xe303540
mov eax, ebx
and eax, 0x74b34cb1
and ecx, 0x814ca20e
or ecx, eax
or ebx, 0xa45bbedf
mov edi, ecx
xor edi, 0x51a47060
and edi, ebx
mov ebx, r12d
and ebx, 0xa45bbedf
or ebx, 0x1b044100
mov r8d, r12d
and r8d, 0x5ba44120
xor r8d, ebx
mov ebx, edi
not ebx
and ecx, 0x18000
mov r10d, edi
and r10d, 0x10c048b0
mov esi, ebx
and esi, 0xec26020a
mov eax, edi
and eax, 0x1182445
or eax, ecx
lea ecx, [rsi + r10]
add esi, r10d
add esi, 0x2018000
and r9d, 0x40a44020
xor esi, eax
mov eax, r9d
xor eax, 0xfce65bba
xor ecx, 0xec26120a
and ecx, eax
mov eax, edi
and eax, 0x718c06f1
and ebx, 0x8473e80e
or ebx, eax
or edi, r9d
xor ebx, r9d
lea eax, [r9 + 0x319a445]
xor esi, 0x281c020
and eax, esi
xor ebx, 0x718c06f1
and ebx, edi
or ebx, ecx
or ebx, eax
mov eax, r8d
xor eax, 0xbf5fffdf
xor r8d, 0x40a00020
and r8d, ebx
not ebx
and ebx, eax
mov eax, r14d
and r14d, 0xc09208a5
and edx, 0x3a25f71a
or edx, r14d
xor eax, r12d
xor edx, r12d
mov ecx, r12d
not ecx
or ebx, r8d
xor eax, 0xef7cb561
and eax, ecx
xor edx, 0x3aa7ff9e
or edx, eax
mov eax, edx
and eax, 0xd49ab90b
mov ecx, edx
and ecx, 0x2b6546f4
or ecx, 0x4412a808
xor ecx, eax
mov eax, ecx
xor eax, 0x6f77eefc
mov edi, ebx
xor edi, 0x2b6546f4
and edi, eax
not edx
and edx, ebx
xor ebx, 0xd49ab90b
xor ecx, 0x90881103
and ecx, ebx
or edx, ecx
or edx, edi
xor edx, r11d
imul eax, edx, 0x1000193
mov dword [rbp + 0x1fc], eax
mov eax, dword [rbp + 0x21c]
mov r10, qword [rbp + 0x1b8]
mov r9d, dword [rbp + 0x200]
mov esi, dword [rbp + 0x204]
mov r8d, dword [rbp + 0x208]
mov edi, dword [rbp + 0x20c]
mov r11d, dword [rbp + 0x210]
jmp 0x1400a40b0
cmp eax, 0x581f37ef
jle 0x1400a5de0
cmp eax, 0x581f37f0
je 0x1400a5ea2
cmp eax, 0x5c59f878
je 0x1400a5e3b
cmp eax, 0x7694ece2
jne 0x1400a40b0
test byte [rbp + 0x268], 1
movsx eax, byte [rbp + 0x29f]
mov ecx, dword [rbp + 0x278]
sete byte [rbp + 0x29e]
cmp dword [rbp + 0x264], 0xa
setl byte [rbp + 0x29d]
mov ecx, 0x462bec05
jmp 0x1400a5cb3
cmp ecx, 0x22c0f4b1
jne 0x1400a5d99
mov ecx, dword [rbp + 0x298]
mov ecx, 0x1f53ad1b
cmp ecx, 0x3117fdc3
jle 0x1400a5d00
cmp ecx, 0x58a11e18
jg 0x1400a5d20
cmp ecx, 0x3117fdc4
je 0x1400a5d5a
cmp ecx, 0x462bec05
jne 0x1400a5cb3
movzx edx, byte [rbp + 0x29e]
cmp byte [rbp + 0x29d], 0
mov ebx, 0x3117fdc4
mov ecx, 0x3117fdc4
jne 0x1400a5cf6
mov ecx, 0x71946ac1
test dl, dl
cmovne ecx, ebx
jmp 0x1400a5cb3
cmp ecx, 0x1f53ad1a
jg 0x1400a5c9c
cmp ecx, 0x8353906e
je 0x1400a5d3e
cmp ecx, 0xb9e70da7
je 0x1400a5ca8
jmp 0x1400a5cb3
cmp ecx, 0x58a11e19
je 0x1400a5d7b
cmp ecx, 0x71946ac1
jne 0x1400a5cb3
mov ecx, 0x3117fdc4
jmp 0x1400a5cb3
cmp byte [rbp + 0x29c], 0
mov ecx, 0x58a11e19
jne 0x1400a5cb3
mov ecx, 0x22c0f4b1
jmp 0x1400a5cb3
mov dword [rbp + 0x298], eax
mov ecx, dword [rbp + 0x298]
cmp ecx, 0x41
setge byte [rbp + 0x29c]
mov ecx, dword [rbp + 0x260]
jmp 0x1400a5cb3
mov edx, dword [rbp + 0x298]
mov ecx, 0xb9e70da7
cmp edx, 0x5b
jl 0x1400a5cb3
mov ecx, 0x22c0f4b1
jmp 0x1400a5cb3
cmp ecx, 0x1f53ad1b
jne 0x1400a5cb3
mov eax, 0x9fdcb46a
jmp 0x1400a40b0
cmp eax, 0xbd0b03e6
je 0x1400a5e66
cmp eax, 0xe59fd857
jne 0x1400a5ebb
mov r9d, dword [rbp + 0x1fc]
mov eax, 0x5c59f878
xor esi, esi
mov edi, dword [rbp + 0x1f8]
jmp 0x1400a40b0
cmp eax, 0x17954bb8
je 0x1400a4093
cmp eax, 0x2f530768
jne 0x1400a40b0
mov eax, dword [rbp + 0x220]
jmp 0x1400a40b0
mov rax, qword [rbp + 0x288]
add rax, 1
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x288]
mov al, byte [rax]
mov byte [rbp + 0x29f], al
cmp byte [rbp + 0x29f], 0
setne byte [rbp + 0x297]
mov eax, dword [rbp + 0x214]
jmp 0x1400a40b0
mov dword [rbp + 0x25c], edi
test esi, esi
mov eax, 0xc6b502bf
mov ecx, 0xbd0b03e6
cmove eax, ecx
mov r10, qword [rbp + 0x280]
mov r8d, dword [rbp + 0x25c]
mov r11d, r9d
jmp 0x1400a40b0
mov dword [rbp + 0x1f8], r8d
mov dword [rbp + 0x278], r11d
mov qword [rbp + 0x288], r10
mov eax, dword [rbp + 0x218]
jmp 0x1400a40b0
mov r9d, dword [rbp + 0x278]
mov eax, 0x5c59f878
mov esi, 1
mov edi, dword [rbp + 0x278]
jmp 0x1400a40b0
cmp byte [rbp + 0x297], 0
mov eax, 0x87ce9d3c
mov ecx, 0x2f530768
cmovne eax, ecx
jmp 0x1400a40b0
cmp eax, 0xc6b502bf
jne 0x1400a40b0
mov eax, dword [rbp + 0x25c]
cmp eax, 0x6fd0cf9c
mov eax, 0x60bc07e3
mov ecx, 0x6244243b
cmove eax, ecx
mov r11, qword [rbp + 0x1c8]
jmp 0x1400a3e70
cmp eax, 0x22ca07ef
je 0x1400a60d6
cmp eax, 0x25cf8aa3
je 0x1400a3e5f
cmp eax, 0x479a4a96
jne 0x1400a3e70
mov eax, 0x235c5f9
xor ecx, ecx
mov qword [rbp + 0x1e8], rcx
jmp 0x1400a3e70
cmp eax, 0xa31138a
jne 0x1400a624b
mov eax, 0x22ca07ef
mov dword [rbp + 0x270], 2
jmp 0x1400a3e70
mov eax, dword [rbp + 0x27c]
mov rcx, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
mov ebx, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
add rbx, rcx
add rdx, rcx
movzx eax, word [rdx + rax*2]
mov eax, dword [rbx + rax*4]
add rax, rcx
mov qword [rbp + 0x1c0], rax
mov eax, 0x22ca07ef
mov dword [rbp + 0x270], 1
jmp 0x1400a3e70
mov rax, qword [rbp + 0x1e0]
mov eax, 0x235c5f9
mov rcx, qword [rbp + 0x230]
mov qword [rbp + 0x1e8], rcx
jmp 0x1400a3e70
lea rax, [rbp + 0x240]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x240], r11
mov eax, dword [0x1400f2740]
mov ecx, dword [0x1400f2744]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x298]
sete r8b
cmp ecx, 0xa
setge cl
setl dl
setl byte [rbp + 0x280]
mov eax, edx
xor al, r8b
or dl, r8b
mov ebx, eax
xor bl, 1
or cl, r8b
and cl, bl
xor cl, dl
mov ebx, 0xf5647b0b
mov ecx, 0x1be0c2cb
cmovne ebx, ecx
test al, al
mov eax, 0xf5647b0b
cmovne ebx, eax
mov edx, 0x45f0e8c0
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x1be0c2ca
jg 0x1400a6050
cmp edx, 0xd6cac8db
je 0x1400a6082
cmp edx, 0xf5647b0b
jne 0x1400a6030
jmp 0x1400a60fd
cmp edx, 0x1be0c2cb
je 0x1400a608d
cmp edx, 0x45f0e8c0
jne 0x1400a6030
movzx eax, byte [rbp + 0x298]
cmp byte [rbp + 0x280], 0
mov edx, 0x1be0c2cb
mov edi, 0xd6cac8db
cmovne edx, edi
test al, al
cmovne edx, edi
jmp 0x1400a6030
movsxd rcx, dword [r11 + 0x3c]
add rcx, r11
mov edx, ebx
jmp 0x1400a6030
mov edx, 0xd6cac8db
jmp 0x1400a6030
mov eax, 0xaa4750b7
mov dword [rbp + 0x26c], 0
jmp 0x1400a3e70
mov eax, dword [rbp + 0x26c]
mov dword [rbp + 0x27c], eax
mov rax, qword [rbp + 0x248]
mov ecx, dword [rbp + 0x27c]
cmp ecx, dword [rax + 0x18]
mov eax, 0xc9f26509
mov ecx, 0xa31138a
cmove eax, ecx
jmp 0x1400a3e70
cmp dword [rbp + 0x270], 2
mov eax, 0x5794338f
mov ecx, 0x25cf8aa3
cmove eax, ecx
mov rcx, qword [rbp + 0x1c0]
mov qword [rbp + 0x230], rcx
jmp 0x1400a3e70
mov qword [rbp + 0x288], rcx
mov rcx, qword [rbp + 0x288]
mov r8d, dword [rcx + 0x88]
mov r9d, dword [rcx + 0x8c]
mov r10, r8
add r10, r11
mov ebx, dword [0x1400f2748]
mov edi, dword [0x1400f274c]
lea esi, [rbx - 1]
imul esi, ebx
and esi, 1
sete bl
sete byte [rbp + 0x298]
cmp edi, 0xa
setge al
setl byte [rbp + 0x280]
setl dl
mov ecx, edx
or sil, dl
and dl, bl
xor cl, bl
and al, bl
xor al, cl
mov ebx, esi
xor bl, 1
and bl, al
xor al, 1
test sil, sil
movzx eax, al
movzx ecx, cl
cmove ecx, eax
or bl, cl
mov eax, edx
or al, bl
and cl, dl
xor cl, dl
xor cl, al
mov eax, edx
xor al, bl
test cl, 1
mov ecx, 0x80d5946
mov esi, 0xbfa4195b
cmovne ecx, esi
mov qword [rbp + 0x248], r10
test bl, bl
mov ebx, ecx
mov edi, 0x80d5946
cmovne ebx, edi
mov dword [rbp + 0x250], r9d
test dl, dl
cmovne ebx, ecx
test al, 1
cmovne ebx, esi
mov ecx, 0x97bfe48f
nop dword [rax]
cmp ecx, 0xfb599b2d
jg 0x1400a61e0
cmp ecx, 0x97bfe48f
je 0x1400a61f7
cmp ecx, 0xbfa4195b
jne 0x1400a61c0
jmp 0x1400a6228
cmp ecx, 0xfb599b2e
je 0x1400a6224
cmp ecx, 0x80d5946
jne 0x1400a61c0
mov ecx, 0xfb599b2e
jmp 0x1400a61c0
movzx eax, byte [rbp + 0x298]
movzx ecx, byte [rbp + 0x280]
mov edx, eax
xor dl, cl
test cl, cl
mov ecx, 0x80d5946
mov edi, 0xfb599b2e
cmovne ecx, edi
test al, al
cmovne ecx, edi
test dl, dl
cmovne ecx, edi
jmp 0x1400a61c0
mov ecx, ebx
jmp 0x1400a61c0
test r8d, r8d
setne byte [rbp + 0x288]
cmp byte [rbp + 0x288], 0
mov eax, 0x76bc4af0
mov ecx, 0xa229dfd0
cmovne eax, ecx
jmp 0x1400a3e70
cmp eax, 0x235c5f9
jne 0x1400a3e70
mov rcx, qword [rbp + 0x228]
lea rdx, [rbp + 0x1d0]
call qword [rbp + 0x1e8]
test eax, eax
sete dil
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0x1f0]
call fcn.14006e3a0
mov rcx, qword [rbp + 0x238]
call fcn.14006e3a0
mov eax, edi
add rsp, 0x328
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret