Function at 0x1400a6300
Capabilities:
Access peb ldr_data
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x328
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2a0], 0xfffffffffffffffe
mov qword [rbp + 0x238], r9
mov r14, r8
mov qword [rbp + 0x240], rdx
mov rdi, rcx
mov qword [rbp + 0x220], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1c0], xmm0
lea rbx, [rbp - 0x50]
mov r8d, 0x200
mov rcx, rbx
xor edx, edx
call fcn.1400be7f0
lea rsi, [rbp - 0x4c]
mov rcx, rdi
call fcn.140053e10
mov qword [rbp + 0x1e8], rdi
mov rdi, qword [rdi + 0x10]
mov rcx, rsi
mov rdx, rax
mov r8, rdi
call fcn.1400be140
mov qword [rbp + 0x1c8], rbx
mov eax, dword [0x1400f28d0]
mov ecx, dword [0x1400f28d4]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x290]
mov edx, 0x9106a981
mov eax, 0x835fcb28
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x288]
cmovl eax, edx
mov edx, 0x45c09c98
mov ecx, 0xa9668c9e
nop
cmp edx, 0xa9668c9d
jg 0x1400a63f0
cmp edx, 0x835fcb28
je 0x1400a641d
cmp edx, 0x9106a981
jne 0x1400a63d0
jmp 0x1400a6428
cmp edx, 0xa9668c9e
je 0x1400a6424
cmp edx, 0x45c09c98
jne 0x1400a63d0
movzx ebx, byte [rbp + 0x290]
cmp byte [rbp + 0x288], 0
mov edx, 0x835fcb28
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400a63d0
mov edx, 0xa9668c9e
jmp 0x1400a63d0
mov edx, eax
jmp 0x1400a63d0
mov qword [rbp + 0x248], rdi
mov rax, qword [rbp + 0x248]
add eax, eax
add eax, 2
mov word [rbp + 0x1c0], ax
mov word [rbp + 0x1c2], 0
mov rbx, qword [rbp + 0x238]
mov qword [rbp + 0x290], rbx
mov rax, qword [rbp + 0x290]
mov ecx, dword [0x1400f2250]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1400f2254], 0xa
mov qword [rbp + 0x288], rax
setl al
or al, cl
mov edi, 0x102d1967
mov eax, 0x8db7957a
cmove edi, eax
mov ecx, 0x3bafd34b
cmove ecx, eax
cmp qword [rbx + 0x18], 8
mov eax, 0xbd16169
mov ebx, 0x729a50af
cmovae ebx, eax
mov eax, 0x643d93d1
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x3bafd34a
jg 0x1400a64f0
cmp eax, 0x8db7957a
je 0x1400a651a
cmp eax, 0xbd16169
je 0x1400a6528
cmp eax, 0x102d1967
jne 0x1400a64c0
mov eax, 0x729a50af
lea rdx, [rbp + 0x248]
mov rdx, qword [rdx]
jmp 0x1400a64c0
cmp eax, 0x729a50af
je 0x1400a653a
cmp eax, 0x643d93d1
je 0x1400a652c
cmp eax, 0x3bafd34b
jne 0x1400a64c0
mov rax, qword [rbp + 0x290]
mov rax, qword [rax]
mov qword [rbp + 0x248], rax
mov eax, edi
jmp 0x1400a64c0
mov rax, qword [rbp + 0x290]
mov eax, 0x3bafd34b
jmp 0x1400a64c0
mov eax, ecx
jmp 0x1400a64c0
lea rax, [rbp + 0x288]
mov rdx, qword [rax]
mov eax, ebx
jmp 0x1400a64c0
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
xor edi, edi
mov rcx, r14
xor r8d, r8d
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400a8b5b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rbp + 0x230], rax
test rax, rax
mov eax, 0x61232269
mov ecx, 0x3201e8a9
cmove ecx, eax
mov dword [rbp + 0x21c], ecx
mov eax, 0xe637a23d
mov r13d, 0x58a11e19
jmp 0x1400a65c0
mov eax, 0xc65e57a7
xor ecx, ecx
mov qword [rbp + 0x228], rcx
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0xfeaea4c4
jg 0x1400a6600
cmp eax, 0xc65e57a6
jle 0x1400a6760
cmp eax, 0xed6be930
jg 0x1400a679a
cmp eax, 0xc65e57a7
je 0x1400a8753
cmp eax, 0xe637a23d
jne 0x1400a65c0
mov eax, dword [rbp + 0x21c]
jmp 0x1400a65c0
cmp eax, 0x3fb5c33d
jg 0x1400a6720
cmp eax, 0x2b364ce9
jle 0x1400a67c4
cmp eax, 0x2b364cea
je 0x1400a65a4
cmp eax, 0x3201e8a9
jne 0x1400a65c0
lea rax, [rbp + 0x248]
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0x1d8]
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x248], rax
mov eax, dword [0x1400f2740]
mov ecx, dword [0x1400f2744]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x298]
sete r8b
cmp ecx, 0xa
setge cl
setl dl
setl byte [rbp + 0x290]
mov eax, edx
xor al, r8b
or dl, r8b
mov ebx, eax
xor bl, 1
or cl, r8b
and cl, bl
xor cl, dl
mov ebx, 0xf5647b0b
mov ecx, 0x1be0c2cb
cmovne ebx, ecx
test al, al
mov eax, 0xf5647b0b
cmovne ebx, eax
mov edx, 0x45f0e8c0
nop word [rax + rax]
cmp edx, 0x1be0c2ca
jg 0x1400a66d0
cmp edx, 0xd6cac8db
je 0x1400a6702
cmp edx, 0xf5647b0b
jne 0x1400a66b0
jmp 0x1400a8772
cmp edx, 0x1be0c2cb
je 0x1400a6714
cmp edx, 0x45f0e8c0
jne 0x1400a66b0
movzx eax, byte [rbp + 0x298]
cmp byte [rbp + 0x290], 0
mov edx, 0x1be0c2cb
mov edi, 0xd6cac8db
cmovne edx, edi
test al, al
cmovne edx, edi
jmp 0x1400a66b0
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
mov edx, ebx
jmp 0x1400a66b0
mov edx, 0xd6cac8db
jmp 0x1400a66b0
cmp eax, 0x3fb5c33e
je 0x1400a88a8
cmp eax, 0x5b770ae3
je 0x1400a65a4
cmp eax, 0x61232269
jne 0x1400a65c0
mov eax, 0x185ad0fd
xor ecx, ecx
mov qword [rbp + 0x1e0], rcx
jmp 0x1400a65c0
cmp eax, 0x8f7a6614
je 0x1400a88d6
cmp eax, 0x96b915c0
je 0x1400a88ea
cmp eax, 0xa1786689
jne 0x1400a65c0
mov eax, dword [rbp + 0x280]
add eax, 1
mov dword [rbp + 0x270], eax
mov eax, 0x3fb5c33e
jmp 0x1400a65c0
cmp eax, 0xed6be931
je 0x1400a892f
cmp eax, 0xf75e1bd1
jne 0x1400a65c0
mov eax, 0x3fb5c33e
mov dword [rbp + 0x270], 0
jmp 0x1400a65c0
cmp eax, 0xfeaea4c5
jne 0x1400a8979
mov ecx, dword [0x1400f2738]
mov eax, dword [0x1400f273c]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete r8b
cmp eax, 0xa
setl r9b
mov ecx, r9d
xor cl, r8b
mov ebx, edx
and bl, r9b
xor bl, cl
mov ebx, 0x17954bb8
mov esi, 0x9b012d00
cmovne ebx, esi
test edx, edx
mov edi, 0x9b012d00
cmove edi, ebx
cmp eax, 0xa
cmovl edi, esi
test cl, cl
cmove edi, ebx
test edx, edx
mov edx, 0x581f37f0
mov ecx, 0x17954bb8
cmovne edx, ecx
mov ebx, edi
cmove ebx, esi
cmp eax, 0xa
mov eax, dword [0x1400f2710]
mov esi, dword [0x1400f2714]
mov ecx, 0x581f37f0
cmovl edx, ecx
mov dword [rbp + 0x20c], edx
cmovge ebx, edi
mov dword [rbp + 0x210], ebx
lea edi, [rax - 1]
imul edi, eax
mov dword [rbp + 0x26c], edi
and edi, 1
sete r10b
mov dword [rbp + 0x268], esi
cmp esi, 0xa
setge al
setl r11b
mov ebx, r11d
xor bl, r10b
mov edx, ebx
xor dl, 1
and dil, r11b
or dil, dl
xor dil, bl
mov edx, edi
xor dl, 1
and al, r10b
or al, dl
or r11b, r10b
xor r11b, bl
mov ebx, r11d
xor bl, al
mov edx, ebx
not dl
mov ecx, r11d
not cl
and cl, al
or cl, dl
xor al, 1
or al, r11b
xor cl, al
test cl, 1
mov edx, 0x8353906e
mov esi, 0x71946ac1
cmovne edx, esi
test bl, 1
mov ebx, 0x71946ac1
cmovne ebx, edx
test al, 1
cmove ebx, edx
test cl, 1
mov eax, dword [rbp + 0x280]
mov rcx, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov esi, 0x8353906e
cmovne ebx, esi
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov r10d, dword [rdx + rax*4]
add r10, rcx
test dil, dil
mov eax, 0x8353906e
cmovne eax, ebx
test r11b, r11b
cmove eax, ebx
mov dword [rbp + 0x264], eax
or r9b, r8b
mov ecx, 0x7694ece2
mov eax, 0xe59fd857
cmovne ecx, eax
mov dword [rbp + 0x214], ecx
mov ecx, 0x7694ece2
mov eax, 0x9fdcb46a
cmovne ecx, eax
mov dword [rbp + 0x218], ecx
mov eax, 0xbd0b03e6
mov r11d, 0x811c9dc5
jmp 0x1400a6970
mov rax, qword [rbp + 0x288]
mov rax, qword [rbp + 0x288]
mov eax, 0x9b012d00
nop word cs:[rax + rax]
nop
cmp eax, 0x17954bb7
jg 0x1400a84b0
cmp eax, 0xbd0b03e5
jg 0x1400a8620
cmp eax, 0x87ce9d3c
je 0x1400a86f6
cmp eax, 0x9b012d00
je 0x1400a8671
cmp eax, 0x9fdcb46a
jne 0x1400a6970
mov dword [rbp + 0x208], r11d
mov dword [rbp + 0x204], edi
mov dword [rbp + 0x200], r8d
mov dword [rbp + 0x1fc], esi
mov dword [rbp + 0x1f8], r9d
mov qword [rbp + 0x1b0], r10
test byte [rbp + 0x26c], 1
movsx r9d, byte [rbp + 0x29f]
mov eax, dword [rbp + 0x27c]
mov dword [rbp + 0x278], eax
sete byte [rbp + 0x29e]
cmp dword [rbp + 0x268], 0xa
setl byte [rbp + 0x29d]
mov eax, 0x462bec05
jmp 0x1400a6a20
cmp byte [rbp + 0x29c], 0
mov eax, 0x22c0f4b1
cmovne eax, r13d
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x3117fdc3
jle 0x1400a6a70
cmp eax, 0x58a11e18
jg 0x1400a7450
cmp eax, 0x3117fdc4
je 0x1400a7484
cmp eax, 0x462bec05
jne 0x1400a6a20
movzx ecx, byte [rbp + 0x29e]
cmp byte [rbp + 0x29d], 0
mov eax, 0x71946ac1
mov edx, 0x3117fdc4
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1400a6a20
cmp eax, 0x1f53ad1a
jg 0x1400a746c
cmp eax, 0x8353906e
je 0x1400a6a02
cmp eax, 0xb9e70da7
jne 0x1400a6a20
mov r11d, dword [rbp + 0x298]
mov eax, r11d
and eax, 0x300d32eb
or eax, 0x8922c414
mov ecx, r11d
and ecx, 0xcff2cd14
xor ecx, eax
mov eax, ecx
xor eax, 0x76dd3beb
mov edx, ecx
xor edx, 0x8922c414
or edx, eax
xor ecx, 0x9f2d3869
and ecx, edx
xor ecx, 0x160ffc7d
and ecx, edx
mov eax, ecx
and eax, 0xe1770bb
mov r12d, ecx
and r12d, 0xf1e88f44
or r12d, 0x6022002
xor r12d, eax
xor r12d, 0x81550b9
or r12d, ecx
mov eax, r11d
and eax, 0x6098fcd3
or eax, 0xf210028
mov edx, r11d
and edx, 0x9f67032c
xor edx, eax
mov eax, edx
xor eax, 0x1367093
mov ecx, edx
or ecx, 0xf1e88f44
xor ecx, 0xffe98f6c
or ecx, eax
mov eax, edx
xor eax, 0xfec98f6c
or eax, ecx
xor ecx, edx
xor ecx, 0x1367093
and ecx, eax
mov edx, r12d
and edx, 0xee181f2d
mov edi, r12d
and edi, 0x11e7e0d2
or edi, 0x6000808
xor edi, edx
mov edx, ecx
mov eax, ecx
not r12d
and r12d, ecx
xor ecx, 0x11e7e0d2
xor edx, 0xb4b1d84f
and edx, ecx
or eax, 0x5aa9c762
xor eax, 0xfeb9df6f
or eax, edx
mov ecx, edi
xor ecx, 0x4d4e2fb8
xor edi, 0xb2b1d047
and edi, eax
not eax
and eax, ecx
or r12d, eax
or r12d, edi
not r12d
mov eax, r12d
and eax, 0xa4519b98
and r12d, 0x5bae6467
or r12d, 0x84109000
xor r12d, eax
mov eax, r12d
xor eax, 0xdfbef467
mov r10d, r12d
and r10d, 0x5dfaf697
xor r12d, 0x824402f0
and r12d, eax
mov eax, r10d
xor eax, r12d
xor eax, 0x400290
xor r10d, 0x400290
and r10d, r12d
or r10d, eax
mov r8d, r10d
xor r8d, 0xf7bc1db4
mov ecx, r10d
or ecx, 0xe66cfdeb
mov eax, ecx
xor eax, 0xee6fffeb
mov edx, r10d
and edx, 0x19930214
xor edx, 0x8030200
mov esi, r10d
xor esi, 0x11d0e05f
or esi, edx
mov edx, esi
not edx
and edx, eax
and ecx, 0xc2df5143
and eax, 0x19000214
or eax, ecx
xor eax, esi
mov ecx, edx
xor ecx, eax
xor ecx, 0x3db0aebc
xor eax, 0x19900214
and eax, edx
mov edx, ecx
and edx, 0xe66cfdeb
and ecx, 0x19930214
or ecx, eax
or ecx, edx
mov edx, ecx
and edx, 0xecc1695
mov edi, ecx
xor edi, 0xe8a0eb7e
mov r15d, edx
xor r15d, 0xf9b3eb7e
mov eax, ecx
xor eax, 0x175f1481
mov ebx, edx
xor ebx, 0x844653a6
and ebx, r15d
or edx, 0x820a4727
mov esi, ecx
or esi, 0x7df5b8d8
xor esi, 0x7fffbcd9
mov r14d, ecx
xor r14d, 0x6aaaac59
and r14d, edi
or r14d, esi
mov esi, edx
and esi, 0x888217a6
and ecx, 0x4440010
or ecx, esi
xor edx, 0x864e57a7
and edx, ebx
and ebx, 0xecc5695
xor ebx, ecx
xor ebx, 0x4441684
or edx, ebx
xor edx, r14d
or eax, r15d
mov ecx, eax
and ecx, 0xecc1695
xor ecx, edx
xor ecx, 0xecc1695
not eax
and eax, edx
or eax, ecx
mov ecx, eax
and ecx, 0x3d6ad4f5
mov r15d, eax
and r15d, 0xc2940808
mov edx, eax
or edx, 0xc2952b0a
mov esi, eax
and esi, 0xc2952b0a
mov r14d, ecx
xor r14d, 0x1501f783
and r14d, edx
xor ecx, 0x3d6ad4f5
mov edi, ecx
and edi, 0x354014c4
and edx, 0x4a2ee339
or edx, edi
or ecx, esi
xor edx, esi
not esi
mov edi, eax
or edi, 0xeaff2b7e
and esi, 0x286b2376
or esi, r15d
mov ebx, edi
and ebx, 0x8febd69e
and eax, 0x10000001
or eax, ebx
not edi
and edi, r14d
and r14d, 0x3d6af7f5
xor r14d, eax
xor r14d, 0x9fead69d
or edi, r14d
xor edi, esi
xor edx, 0xb5d11cc6
and edx, ecx
or edx, edi
mov eax, edx
and eax, 0xd25c9294
or eax, 0x28034442
and edx, 0x2da36d6b
xor edx, eax
mov eax, edx
xor eax, 0x156990b7
mov ecx, edx
xor ecx, 0xea966f48
or ecx, eax
xor edx, 0x60a362d4
and edx, ecx
mov eax, edx
xor eax, 0x8a350d9c
or eax, ecx
xor edx, ecx
xor edx, 0x75caf263
and edx, eax
mov eax, r11d
and eax, 0xbae01e84
mov ecx, r11d
and ecx, 0x451fe17b
or ecx, 0x98801e04
xor ecx, eax
mov eax, r11d
and eax, 0x80000
mov esi, ecx
and esi, 0xb4240811
and ecx, 0x4bd3f7ee
add eax, esi
add eax, 0x52e686
xor eax, ecx
and r11d, 0xf133e96a
mov ecx, r11d
xor r11d, eax
xor eax, 0x9012e802
xor ecx, 0xf133e96a
and ecx, eax
xor r11d, 0x672d077d
or ecx, r11d
mov r14d, ecx
not r14d
and r14d, edx
mov r15d, edx
or r15d, 0x8e000724
mov edi, edx
and edi, 0x8e000724
and r11d, 0xc000004
mov eax, ecx
and eax, 0x82000720
or eax, r11d
mov esi, edx
xor esi, 0x8a000104
and esi, edi
not edi
mov r11d, r15d
and r11d, 0xfb0fa016
mov ebx, edi
and ebx, 0xea028104
or esi, ebx
mov ebx, edx
and ebx, 0xf058c9
or ebx, r11d
xor ebx, esi
xor ebx, 0x11fd79db
mov esi, edx
and esi, 0x609ee042
and r15d, 0x9f611a9d
or r15d, esi
mov esi, edx
and esi, 0x520
and edi, 0x9f611a9d
add edi, esi
add edi, 0x609ee042
xor edi, r15d
xor edx, 0x8e000724
or edx, edi
not edx
or edx, ebx
mov ebx, eax
and ebx, 0x6000000
and ecx, 0x71fff8db
or ecx, ebx
or eax, 0x262e5009
xor eax, ecx
mov ecx, eax
xor ecx, 0xa82e572d
xor eax, 0x57d1a8d2
and eax, edx
not edx
and edx, ecx
or eax, edx
mov edx, r14d
and edx, 0xc64177d6
or edx, 0x39268801
mov ecx, r14d
and ecx, 0x39be8829
xor ecx, edx
mov edx, ecx
xor edx, 0xff67ffd7
mov ebx, eax
xor ebx, 0x39be8829
or ebx, edx
xor ecx, eax
xor ecx, 0x39268801
and ecx, edx
xor ecx, ebx
not ecx
and eax, r14d
mov ebx, eax
and ebx, 0xa32261d0
or ebx, 0x10999806
mov edx, eax
and edx, 0x5cdd9e2f
xor edx, ebx
xor edx, ecx
and eax, ecx
mov ecx, edx
xor ecx, eax
xor ecx, 0x10999806
xor edx, 0x10999806
and edx, eax
or edx, ecx
mov eax, edx
mov r11d, edx
mov ecx, edx
mov r14d, edx
mov edi, edx
and edi, 0x310718ea
or edi, 0x6f8a511
mov r15d, edx
and r15d, 0xcef8e715
xor r15d, edi
mov edi, r15d
xor edi, 0xf7cb4c5b
or edi, edx
xor r15d, edx
and edx, 0x190a9b13
or eax, 0xe6f564ec
and r11d, 0xe6f564ec
mov esi, edx
xor esi, 0xc026d4ea
and esi, eax
or ecx, 0xfffd6ffd
mov ebx, ecx
and ebx, 0xb0495454
and r14d, 0x28002
or r14d, ebx
not ecx
and ecx, esi
and esi, 0x592e9bbb
xor esi, r14d
xor esi, 0x304b9016
or ecx, esi
xor ecx, r11d
xor ecx, 0xd92c4ff9
xor edx, 0x190a9b13
mov esi, edx
and esi, 0x21101
and eax, 0xddf8ce1a
or eax, esi
or edx, r11d
xor eax, r11d
xor eax, 0x220731e5
and eax, edx
or eax, ecx
mov ecx, eax
xor ecx, 0x190a9b13
xor eax, 0x17c68da6
or eax, ecx
xor r15d, 0x834b3a4
and r15d, edi
mov ecx, eax
not ecx
and ecx, r15d
xor r15d, eax
xor r15d, ecx
mov ecx, r10d
xor ecx, 0x843e24b
mov ebx, r10d
mov r11d, r10d
mov r14d, r10d
mov esi, r10d
and esi, 0xf4e5e31e
xor r10d, 0x359feaa
and r10d, r8d
mov edi, esi
xor edi, r10d
xor edi, 0x41e20a
xor esi, 0x41e20a
and esi, r10d
or esi, edi
mov edi, esi
xor edi, 0x6653709e
and edi, ecx
or ecx, r8d
and r12d, 0x82000820
and ebx, 0x1098338a
or ebx, r12d
and r11d, 0x6d67c455
or r11d, ebx
mov ebx, r11d
xor ebx, 0x6524261e
mov edx, ecx
and edx, 0x6d67c455
xor r14d, ecx
and ecx, 0x92983baa
or ecx, 0x64244445
xor ecx, edx
mov edx, ecx
xor edx, 0xf6bc7fef
xor r11d, 0x9adbd9e1
and r11d, edx
xor ecx, 0x9438010
and ecx, ebx
xor r14d, 0xf7bc1db4
or r14d, r8d
not r14d
or r14d, ecx
or r14d, r11d
mov ecx, r14d
not ecx
mov ebx, r14d
and ebx, 0x6d496c7f
mov edx, esi
xor edx, 0x99ac8f61
and edx, r8d
or edx, edi
xor esi, edx
xor esi, 0x6653709e
and esi, edx
mov edx, r14d
xor edx, 0x5014c23
and edx, ebx
and ebx, esi
mov eax, r14d
and eax, 0x5014c23
xor eax, edx
xor eax, 0x85b5cfa3
and edx, 0x5014c23
or edx, eax
mov eax, esi
and eax, 0x85b5cfa3
or eax, 0x840004c
and esi, 0x7a4a305c
xor esi, eax
xor esi, edx
mov eax, esi
mov edx, ebx
xor edx, esi
xor edx, 0x720a3010
mov edi, edx
and edi, ebx
xor esi, 0x60082010
and esi, ebx
not ebx
xor eax, 0x8df5cfef
and eax, ebx
or eax, esi
xor eax, edi
and esi, edx
or esi, eax
mov ebx, ecx
and ebx, r14d
and r14d, 0x29086950
and ecx, 0xd6f7968f
or ecx, r14d
xor ecx, 0xd6f7968f
and ebx, 0xffffffdf
or ebx, ecx
mov r10d, esi
xor r10d, 0x6d496c5f
lea r8d, [rbx + 0x20]
mov eax, esi
xor eax, 0xe8f03d9b
mov edx, esi
xor edx, 0x92b693a0
or edx, eax
mov edi, esi
or edi, 0x7a46ae3b
xor edi, 0x7f4fee7f
or eax, edi
mov r11d, ebx
and r11d, 0x85b951c4
mov ecx, ebx
xor ecx, 0x85b951e4
or ecx, r11d
not edx
and edx, edi
xor edx, eax
mov edi, ecx
and edi, 0xffffffdf
mov eax, edi
xor eax, 0x6727c902
xor ebx, 0x291100
and ebx, r11d
mov r14d, eax
xor edi, 0xffffffdf
mov r12d, edi
and r12d, 0x1bcc4c01
and eax, 0xe433b3de
or eax, r12d
or edi, r11d
xor eax, r11d
or r11d, 0x8594c8c6
xor ebx, r11d
or r14d, 0x8594c8c6
or ecx, 0x7a6b3739
xor ecx, r14d
mov r11d, ecx
xor r11d, 0x81000
and r11d, ebx
not ebx
xor ecx, 0xe7b341e4
and ecx, ebx
or ecx, r11d
xor eax, 0x7fefcd03
and eax, edi
or eax, ecx
mov ecx, edx
xor ecx, 0x1ac5778a
mov ebx, eax
and ebx, 0xe53a8875
or ebx, 0x8453780
and eax, 0x1ac5778a
xor eax, ebx
mov ebx, eax
xor ebx, 0xed7fbff5
xor edx, 0xe53a8875
and edx, ebx
xor eax, 0x1280400a
and eax, ecx
or eax, edx
and r10d, r8d
xor esi, r8d
xor esi, 0x6d496c5f
or esi, r10d
mov edi, eax
and edi, 0x5bce1f7c
xor edi, esi
mov ecx, eax
xor ecx, esi
not esi
or esi, eax
and eax, 0xa431e083
or eax, 0x1ac01b00
xor edi, eax
and esi, ecx
mov eax, edi
xor eax, esi
xor eax, 0xe53fe4ff
xor edi, 0xe53fe4ff
and edi, esi
or edi, eax
mov ecx, edi
and ecx, 0x563e2c9a
or ecx, 0x9005300
mov eax, edi
and eax, 0xa9c1d365
xor eax, ecx
mov edx, edi
xor edx, eax
xor eax, 0xf6ffacff
or eax, edi
xor edx, 0x9005300
and eax, edx
mov ecx, eax
xor ecx, edi
and ecx, edx
mov edx, edi
and edx, 0xa4a3d9c2
and edi, 0x5b5c263d
or edi, 0xa0a01800
xor edi, edx
mov edx, edi
xor edx, 0xfbfc3e3d
mov ebx, eax
and ebx, 0xa4a3d9c2
or ebx, 0x4354221d
and eax, 0x5b5c263d
xor eax, ebx
mov ebx, eax
xor ebx, 0xe7f7fbdf
xor edi, 0x403c1c2
and edi, ebx
xor eax, 0x18080420
and eax, edx
or eax, ecx
or eax, edi
mov ecx, eax
not ecx
and ecx, r15d
mov r10d, r15d
xor r10d, eax
xor r10d, ecx
mov r8d, r15d
and r8d, 0x9903995d
mov ecx, eax
or ecx, 0x66fc66a2
mov esi, ecx
not esi
mov r11d, eax
and r11d, 0x66fc66a2
and r15d, 0x66fc66a2
or r15d, 0x98008855
and ecx, 0xae0a6a3c
mov edi, esi
and edi, 0x11019141
or edi, ecx
mov ebx, edi
xor ebx, 0x51f595c3
mov ecx, edi
xor edi, 0xae0a6a3c
mov r14d, edi
or edi, r11d
not r11d
xor ecx, 0xc263434a
and ecx, ebx
and esi, 0x91029009
or esi, ecx
mov ecx, eax
and ecx, 0x60080022
mov edx, r11d
and edx, 0xc602114
add ecx, edx
add ecx, 0x3020681
mov edx, eax
and edx, 0x2944680
xor edx, ecx
mov ecx, edx
xor ecx, 0x630b0ee3
xor edx, 0x9cf4f11c
and edx, esi
not esi
and esi, ecx
or edx, esi
and r14d, 0x89021805
and ebx, 0x10ddc158
or ebx, r14d
and eax, 0x662026a2
and r11d, 0x10ddc158
or r11d, eax
xor r11d, ebx
not r11d
and r11d, edi
or r11d, edx
xor r11d, r8d
xor r11d, r15d
mov eax, r11d
xor eax, 0x1031108
mov ecx, r10d
xor r11d, 0xfefceef7
and r11d, r10d
xor r10d, 0x6ee49458
mov edx, eax
and edx, 0x6ee49458
and eax, 0x911b6ba7
or eax, 0x26e40458
xor eax, edx
mov edx, eax
xor edx, 0xb7ff6fff
xor ecx, 0x911b6ba7
and ecx, edx
xor eax, 0x48009000
and eax, r10d
or r11d, eax
or r11d, ecx
mov eax, 0x1f53ad1b
jmp 0x1400a6a20
cmp eax, 0x58a11e19
je 0x1400a74a6
cmp eax, 0x71946ac1
jne 0x1400a6a20
mov eax, 0x3117fdc4
jmp 0x1400a6a20
cmp eax, 0x22c0f4b1
jne 0x1400a74c1
mov eax, 0x1f53ad1b
mov r11d, dword [rbp + 0x298]
jmp 0x1400a6a20
mov dword [rbp + 0x298], r9d
mov eax, dword [rbp + 0x298]
cmp eax, 0x41
setge byte [rbp + 0x29c]
mov eax, dword [rbp + 0x264]
jmp 0x1400a6a20
mov eax, dword [rbp + 0x298]
cmp eax, 0x5b
mov eax, 0x22c0f4b1
mov ecx, 0xb9e70da7
cmovl eax, ecx
jmp 0x1400a6a20
cmp eax, 0x1f53ad1b
jne 0x1400a6a20
mov esi, dword [rbp + 0x278]
mov eax, esi
and eax, 0xa06206ca
mov ecx, esi
and ecx, 0x5f9df935
or ecx, 0x620008
xor ecx, eax
mov edx, ecx
xor edx, 0xff9dfff7
mov ebx, ecx
xor ebx, 0x3c382075
and ebx, edx
mov eax, ecx
and eax, 0xc3a5df82
xor eax, 0x200000
or eax, ebx
xor ecx, 0x620008
or ecx, edx
xor eax, 0xc3a5df82
and eax, ecx
mov edx, eax
and edx, 0x1ba9fcee
mov ecx, eax
xor ecx, 0xa0020200
and ecx, eax
mov ebx, eax
or ebx, 0xe4560311
xor edx, 0xb1aab604
and edx, ebx
mov r9d, eax
or r9d, 0xee574bfb
mov ebx, eax
and ebx, 0xa0020200
xor ebx, 0xaa034aea
and ecx, 0xe4560311
or ecx, ebx
mov ebx, r9d
and ebx, 0x921be1fb
and eax, 0x1a01404
or eax, ebx
not r9d
and r9d, edx
and edx, 0x3ba9feee
xor edx, eax
xor edx, 0x13b9f5ff
or r9d, edx
xor r9d, ecx
mov eax, r9d
and eax, 0x8b181a5c
or eax, 0x34434021
and r9d, 0x74e7e5a3
xor r9d, eax
mov eax, r9d
xor eax, 0x2feabccf
mov ecx, r9d
xor ecx, 0xd0154330
mov edx, r9d
or edx, 0x2769e20a
xor edx, 0xf77de33a
xor r9d, 0xf77ca13a
and r9d, eax
or r9d, edx
or ecx, eax
xor r9d, 0x2769e20a
and r9d, ecx
mov eax, r9d
xor eax, 0x2e69652b
mov ecx, eax
and ecx, 0xe043fd87
or ecx, 0xaa80010
mov r15d, eax
and r15d, 0x1fbc0278
xor r15d, ecx
and eax, 0x2e69652b
mov ecx, eax
xor ecx, r15d
xor ecx, 0x24c1653b
xor r15d, 0x2441652b
and r15d, eax
or r15d, ecx
mov eax, esi
and eax, 0xfb1401a1
or eax, 0x688008
mov r10d, esi
and r10d, 0x4ebfe5e
xor r10d, eax
mov eax, r10d
xor eax, 0xbaad4363
or r10d, 0x453a3c94
xor r10d, 0x457abc9c
or r10d, eax
mov eax, esi
and eax, 0xbac5c36b
mov ecx, r10d
xor ecx, 0x29379af7
mov edx, esi
and edx, 0x92c04108
or edx, 0x29151af2
mov ebx, esi
and ebx, 0x28058263
xor ebx, edx
mov edx, ebx
xor edx, 0xffdd7ffa
mov edi, r10d
xor edi, 0xd6c86508
and edi, edx
xor ebx, 0x228005
and ebx, ecx
or ebx, edi
mov ecx, r10d
xor ecx, eax
not r10d
or r10d, eax
and r10d, ecx
or r10d, ebx
mov eax, esi
and eax, 0x3e90666b
mov ecx, esi
and ecx, 0xc16f9994
or ecx, 0x2a106008
xor ecx, eax
xor ecx, r10d
mov eax, r10d
xor eax, esi
xor eax, 0x94aca640
xor r10d, 0x94aca640
and r10d, esi
or r10d, eax
mov eax, ecx
xor eax, 0x414339b7
or eax, r10d
xor r10d, ecx
xor r10d, 0xbebcc648
and r10d, eax
mov r12d, r11d
not r12d
mov ebx, r11d
and ebx, 0x437fed4a
mov eax, r11d
and eax, 0xbc8012b5
or eax, 0x4127600a
xor eax, ebx
xor eax, 0x2588d40
or eax, r11d
mov edi, r11d
and edi, 0x25b4148
xor edi, 0xadb43e9
mov esi, r11d
xor esi, 0xbedb53fd
and esi, ebx
mov ebx, eax
and ebx, 0xadb43e9
and eax, 0xf524bc16
or eax, 0x8004140
xor eax, ebx
mov ecx, esi
not ecx
or ecx, r11d
not ecx
and ecx, 0x25b4148
or esi, edi
or esi, ecx
mov ecx, esi
xor ecx, eax
xor ecx, 0x4924ed42
and ecx, esi
xor eax, 0x25b0008
or eax, esi
xor eax, ecx
mov ecx, eax
not ecx
mov edi, eax
xor edi, 0x8801225
and edi, ecx
mov ecx, eax
or ecx, 0x437fed4a
and edi, 0xbc8012b5
mov esi, eax
and esi, 0x437fed4a
lea r8d, [rsi - 0x4bffff70]
mov edx, eax
and edx, 0x14000010
mov ebx, ecx
and ebx, 0xa0448dc0
or ebx, edx
xor ebx, edi
lea edx, [rbx + 0x1384000]
mov edi, eax
and edi, 0x28800011
and ecx, 0x9729dbac
or ecx, edi
xor ecx, esi
xor esi, 0x4a83322f
and esi, edx
xor ebx, 0xf647adda
and ebx, r8d
or ebx, esi
xor ecx, 0xbfa9dbbd
xor eax, 0x437fed4a
or eax, ecx
not eax
or eax, ebx
mov ecx, eax
xor ecx, 0xb735624
mov edx, eax
or edx, 0xbf61617e
mov ebx, eax
xor ebx, 0x4bedc8a5
and ebx, ecx
mov ecx, edx
and ecx, 0xab6bb319
and eax, 0x40940c80
or eax, ecx
xor eax, ebx
xor eax, 0xebeda999
xor edx, 0xffede9ff
and edx, ebx
or edx, eax
mov ecx, edx
xor ecx, 0xb412375a
mov ebx, edx
and ebx, 0x41963a78
xor ebx, 0x41840820
mov eax, edx
xor eax, 0xf5840d22
and eax, ecx
or eax, ebx
mov ecx, eax
xor ecx, 0xbe69c587
mov ebx, eax
and ebx, 0xc7ae538e
xor ebx, 0x41861208
mov edi, eax
xor edi, 0x863869f6
or edi, ebx
mov ebx, edx
xor ebx, 0x73bc64d4
xor edx, 0x4bedc8a5
or edx, ebx
and edx, edi
mov ebx, eax
xor ebx, 0x9000a0ac
and ebx, ecx
mov ecx, eax
xor ecx, ebx
xor ecx, 0x6fff5f53
xor eax, 0x6fff5f53
and eax, ebx
or eax, ecx
mov ebx, edx
xor ebx, 0x1638c95a
mov esi, edx
xor esi, 0xdba443a
and esi, ebx
mov edi, edx
or edi, 0xe47d729f
mov r8d, edi
and r8d, 0x160e96b2
mov ecx, edx
and ecx, 0x9800940
or ecx, r8d
xor ecx, esi
xor ecx, 0xd8e16b2
xor edi, 0xedff76bf
and edi, esi
or edi, ecx
xor edi, eax
xor edx, eax
xor edx, 0x1638c95a
and ebx, eax
or ebx, edx
mov esi, edi
xor esi, 0xe47d729f
xor edi, ebx
xor edi, 0xe47d729f
or esi, ebx
not esi
or esi, edi
mov eax, esi
and eax, 0x6ec3b5e4
or eax, 0x80801
and esi, 0x913c4a1b
or esi, 0x28c13164
xor esi, eax
mov eax, esi
xor eax, 0xd736c69a
mov ecx, esi
or ecx, 0xfb4c88f1
xor ecx, 0xfbcdb9f5
mov edx, esi
xor edx, 0xd385b194
and edx, eax
or edx, ecx
xor esi, edx
xor edx, 0x4b3770e
or edx, eax
xor esi, 0x2c7a4e6b
and esi, edx
or r12d, 0xd1969ad4
mov eax, r11d
and eax, 0x248000a
mov ecx, r12d
and ecx, 0x98b14025
or ecx, eax
mov r14d, r12d
and r14d, 0x25043500
or r14d, ecx
mov eax, r14d
and eax, 0xb2a41504
xor eax, 0x20280c0
xor r14d, 0xf0ec1f1e
or r14d, eax
and r11d, 0x22000528
and r12d, 0x5debeac7
or r12d, r11d
mov eax, r12d
and eax, 0xc49602b
xor eax, 0xc496003
xor r12d, 0x10b280fc
or r12d, eax
mov eax, r14d
and eax, 0xfffdff3f
xor eax, 0x1aaf6d2c
and eax, r14d
mov ecx, r14d
and ecx, 0x1aad6dac
or ecx, 0x24001052
mov edx, r12d
and edx, 0x64400203
or r14d, r12d
and r12d, 0xa296d28
or r12d, 0x64528243
xor r12d, edx
xor r12d, ecx
xor r12d, eax
xor r12d, 0x41429241
not r14d
or r14d, r12d
mov r11d, r10d
mov r8d, r10d
mov edi, r10d
mov ecx, r10d
mov ebx, r10d
mov edx, r10d
and edx, 0x100108
mov eax, r10d
or eax, 0x3bac76d0
mov r12d, r10d
xor r12d, 0xc453892f
or r12d, eax
and eax, 0xfc6bc837
or eax, edx
mov edx, r10d
xor eax, r10d
and r10d, 0x8d80cfea
xor r11d, 0x1008060
and r11d, r10d
and r8d, 0x70663010
and edi, 0x2190005
or edi, 0x7c006010
xor edi, r8d
and ecx, 0x1008060
or ecx, 0x4804600
xor ecx, r11d
xor ecx, edi
xor ecx, 0xaff1605
and ebx, 0x727f3015
or ebx, 0x8000cf62
xor ebx, r10d
xor ebx, 0xf27fff77
xor edx, 0x8d80cfea
or edx, ebx
not edx
or edx, ecx
mov r11d, edx
xor r11d, 0x727f3015
mov ecx, edx
xor ecx, 0xb62cb93a
and ecx, r11d
mov r8d, edx
xor r8d, 0x49d346c5
or r8d, ecx
xor eax, 0x38284010
and eax, r12d
mov ecx, r15d
xor ecx, 0x40008000
and ecx, r15d
and r9d, 0x40008000
xor r9d, 0x4a849408
and ecx, 0x44018902
or ecx, r9d
mov edi, r15d
mov r9d, r15d
mov ebx, r15d
and ebx, 0x8010000c
and edi, 0x420021
or edi, 0x45880090
xor edi, ecx
and r9d, 0x3bac76d0
xor r9d, 0x8afe54bd
xor ebx, edi
xor ebx, 0x1a04008
and ebx, r9d
xor edi, 0x41a14902
or edi, r9d
xor edi, ebx
mov r9d, r8d
mov ecx, r8d
and ecx, 0xb2e0d7b3
and r9d, 0x4d1f284c
or r9d, 0x22804682
xor r9d, ecx
mov ecx, r9d
xor ecx, 0x6f9f6ece
mov ebx, eax
and ebx, 0xb2e0d7b3
or ebx, 0x45082048
mov r12d, eax
and r12d, 0x4d1f284c
xor r12d, ebx
mov r10d, r9d
xor r10d, 0x98385838
and r10d, ecx
mov ecx, r12d
xor ecx, 0x8170804
mov ebx, r12d
xor ebx, 0x4fc10d
and ebx, ecx
mov ecx, r9d
or ecx, 0x858c909
or r12d, 0xf7a736f6
xor r12d, 0xf7eff7ff
or r12d, ebx
mov ebx, ecx
and ebx, 0x8899f000
and r9d, 0x772606f6
or r9d, ebx
mov ebx, r8d
xor r9d, r10d
xor ecx, 0x9878d939
and ecx, r10d
mov r10d, r8d
and ebx, 0x9e366bbf
xor ebx, eax
xor r10d, eax
not eax
or eax, r8d
xor r9d, 0x9838d030
or ecx, r9d
mov r9d, r15d
xor ecx, r12d
mov r12d, r15d
and r8d, 0x61c99440
or r8d, 0x21040b3
xor ebx, r8d
and eax, r10d
mov r8d, ebx
xor r8d, eax
xor r8d, 0xfdefbf4c
xor ebx, 0xfdefbf4c
and ebx, eax
or ebx, r8d
mov eax, ebx
and eax, 0xc0508439
or eax, 0x892802
and ebx, 0x3faf7bc6
xor ebx, eax
mov r10d, ebx
xor r10d, 0x892802
mov r8d, ecx
and r8d, 0x4e3f9ca4
mov eax, r10d
and eax, 0xb1c0635b
xor eax, r8d
mov r8d, r10d
xor r10d, ecx
xor ebx, 0xff76d7fd
or ebx, ecx
and ecx, 0xb1c0635b
or ecx, 0xc081c80
xor eax, ecx
and r8d, 0x4e3f9ca4
or r8d, 0xb040624a
xor r8d, eax
xor r8d, 0x43b78135
and ebx, r10d
or ebx, r8d
mov eax, ebx
not eax
mov ecx, ebx
and ecx, 0x4de1c672
mov r8d, ebx
or r8d, 0x4de1c672
mov r10d, r8d
and r10d, 0x26011ca7
and eax, 0x901e2108
or eax, r10d
mov r10d, ebx
xor r10d, 0x4010422
and r10d, ecx
not ecx
xor r10d, eax
mov eax, ebx
and eax, 0x420
xor r8d, ecx
and ecx, 0x26010887
add eax, ecx
add eax, 0xd1f0c210
xor eax, r10d
mov ecx, edx
mov r10d, edx
xor r12d, edx
xor edx, 0x8d80cfea
and edx, r15d
xor edi, 0x4de1c672
xor eax, 0xd1f0d630
xor ebx, 0x4de1c672
or ebx, r8d
not ebx
or ebx, eax
mov eax, edi
and eax, 0xb7fb9257
or eax, 0x42d28
and edi, 0x48046da8
xor edi, eax
mov r8d, edi
mov eax, ebx
and eax, 0xb7fb9257
or eax, 0x40004d08
and ebx, 0x48046da8
xor ebx, eax
mov eax, ebx
xor eax, 0xf7fbdf5f
xor edi, 0x48004080
and edi, eax
mov eax, esi
not eax
xor r8d, 0xb7ffbf7f
xor ebx, 0x80420a0
and ebx, r8d
mov r8d, r14d
xor r8d, 0xb2a695c4
or ebx, edi
and ecx, 0xa631f20f
xor ecx, 0x8400c20a
xor r10d, 0x2bb13de5
and r9d, 0x59ce0df0
or r9d, 0x86009003
and r15d, 0xa631f20f
xor r15d, r9d
and ecx, r11d
or ecx, r10d
mov edi, r15d
xor r15d, 0xdfce9df3
and r15d, ecx
not ecx
xor edi, ecx
xor edi, 0xdfce9df3
and edi, ecx
or r15d, edi
mov ecx, r12d
xor ecx, 0x8d80cfea
or edx, ecx
mov ecx, r12d
xor ecx, 0x727f3015
xor r12d, edx
xor r12d, 0x727f3015
or ecx, edx
not ecx
or ecx, r12d
mov edx, ecx
and edx, 0xcde4750
or edx, 0x21209829
and ecx, 0xf321b8af
xor ecx, edx
mov edx, ecx
xor edx, 0xdedf67d6
and edx, r15d
xor ecx, r15d
xor ecx, 0xdedf67d6
or ecx, edx
mov edx, ecx
and edx, 0xa94c8ce7
lea r10d, [rdx + 0x42217110]
xor edx, 0xa94c8ce7
mov r9d, r10d
and r9d, 0x4804a0a0
mov r11d, ecx
xor r11d, 0x81480c46
and r11d, edx
and edx, 0x20000001
or edx, r9d
mov r9d, edx
and r9d, 0x600080a1
and r10d, 0x8042000
lea edi, [r10 + r9]
add edi, 0x5021e54
xor edi, r11d
xor edi, 0x33805e5d
xor edx, 0x20000001
and edx, r11d
or edx, edi
and ecx, 0x56b37318
xor ecx, edx
mov edx, ecx
xor edx, 0x283593b1
mov edi, ecx
xor edi, 0xd7ca6c4e
and edi, edx
xor ecx, edi
xor ecx, 0xd7ca6c4e
or ecx, edi
mov edx, ecx
and edx, 0xab469b10
or edx, 0x50b0608d
and ecx, 0x54b964ef
xor ecx, edx
mov edx, ecx
xor edx, 0xaf4f9f72
mov edi, ebx
not edi
and edi, edx
xor ecx, 0x50b0608d
and ecx, ebx
or edi, ecx
and ecx, edx
and edx, ebx
xor edi, edx
xor ecx, edi
mov ebx, esi
and ebx, 0x4093dba5
or ebx, 0x3e64205a
mov edx, esi
and edx, 0xbf6c245a
xor edx, ebx
mov r15d, edx
xor r15d, 0xc19bdfa5
mov edi, r14d
xor edi, 0x4d596a3b
xor edx, 0x3e64205a
mov ebx, edx
or ebx, r8d
and edx, edi
and r15d, r8d
or r15d, edx
xor r15d, ebx
mov r8d, r15d
not r8d
mov edx, esi
and edx, 0xd240d802
or edx, 0x2049
or eax, 0xde6c8a14
and eax, 0xff7c8ab4
xor eax, edx
mov edx, eax
xor edx, 0xca20210
and esi, 0xcaf275d
lea ebx, [rsi - 0x2dbf27fe]
xor eax, 0xd754f
and eax, ebx
xor esi, 0x2d3107b0
and esi, edx
or esi, eax
mov r12d, r14d
xor r12d, 0x41f64d66
mov eax, r12d
and eax, 0x84a6247d
mov edx, esi
and edx, 0x84afa47d
or edx, 0x29001a80
and esi, 0x7b505b82
and r14d, 0x98000
add eax, r14d
add eax, 0x19105080
and r12d, 0x7b505b82
xor r12d, eax
xor r12d, esi
xor r12d, edx
mov r9d, r12d
xor r9d, 0xcfefb5ff
mov r14d, r9d
and r14d, 0x260dd63e
mov esi, r12d
and esi, 0xd9f229c1
mov r10d, r8d
mov edx, r8d
mov r11d, r9d
or r9d, r8d
and r8d, 0x20cc21a
or r8d, 0x332424
and r10d, 0x90c00100
or r10d, 0x10
and edx, 0x493228c1
or edx, 0x8080440c
xor edx, r10d
mov ebx, r15d
or ebx, 0xdbfeebdb
xor ebx, r8d
xor ebx, edx
xor ebx, 0xa6beb606
mov edx, r15d
xor edx, 0xd9f229c1
xor r15d, 0x260dd63e
or r15d, edx
not r15d
or r15d, ebx
mov edx, r14d
not edx
mov eax, esi
xor eax, 0xefeff7ff
mov ebx, r12d
xor ebx, 0x200c436
and ebx, r14d
mov edi, esi
xor edi, 0xcd3d5188
and edi, eax
or esi, 0xdd2d5988
and r11d, 0x91008
xor r14d, eax
xor eax, edx
and edx, 0xc5044100
add edx, r11d
add edx, 0x2082a441
xor edx, ebx
mov ebx, esi
and ebx, 0x451651c1
and r12d, 0xc02000
or r12d, ebx
xor esi, 0xdd3d5988
and esi, edi
and edi, 0xd9fb29c9
xor edi, r12d
xor edi, 0x41100180
or esi, edi
xor esi, edx
xor esi, 0x38abbcc9
or eax, r14d
not eax
or eax, esi
xor eax, r15d
mov edx, r9d
not edx
and edx, eax
xor r9d, eax
xor r9d, edx
mov esi, ecx
and esi, 0x1f489344
lea r15d, [rsi + 0x60b00cb3]
mov edx, esi
xor edx, 0x1f489344
mov ebx, ecx
and ebx, 0xd338e252
or ebx, 0x2c47198d
mov edi, ecx
and edi, 0x2cc71dad
xor edi, ebx
mov ebx, edi
xor ebx, 0x330f8ac9
mov eax, ecx
not eax
xor edi, 0xccf07536
and edi, eax
mov r14d, ebx
and r14d, ecx
or r14d, edi
and r14d, ebx
mov r10d, r9d
and r10d, 0xe0b76cbb
lea eax, [r10 + 0x1c000300]
mov ebx, r9d
and ebx, 0x1f489344
xor ebx, eax
mov dword [rbp + 0x278], ebx
mov eax, r15d
and eax, 0x12086e0
xor ecx, 0x8480104
and ecx, edx
and edx, 0x16001000
or edx, eax
xor edx, 0x96027819
or ecx, edx
mov eax, ecx
xor eax, 0x8540002
and eax, 0x8d56825a
mov edx, ecx
and edx, 0x12287da5
or edx, eax
xor edx, 0xb557ca28
mov r11d, ecx
xor r11d, 0x9722fef9
mov eax, r11d
and eax, 0xa001040
or eax, edx
and r15d, 0x55d88b24
xor esi, 0x3569a797
or esi, r15d
mov edx, esi
xor edx, 0x7f79bff7
and edx, eax
not eax
mov edi, r14d
and edi, 0x2a2134d3
mov ebx, esi
xor ebx, 0x7ff8bff7
or esi, 0x80064008
and esi, eax
or edx, esi
and esi, ebx
and ebx, eax
xor edx, ebx
or esi, edx
mov ebx, r14d
and ebx, 0xd5decb2c
mov r12d, ebx
xor r12d, 0x4912a796
mov edx, r12d
or edx, 0x5d4314bb
mov eax, r14d
or eax, 0xaabdffd7
xor eax, edx
mov r15d, r14d
xor r15d, 0x22202040
and r15d, edi
xor ebx, 0xd5decb2c
mov edx, ebx
or ebx, edi
not edi
mov r13d, r14d
and r13d, 0x20200000
mov r8d, edi
and r8d, 0x2006240
add r8d, r13d
add r8d, 0x4c400028
xor r8d, r15d
mov r15d, r8d
xor r15d, 0xecfc892c
mov r13d, eax
xor eax, 0x2a3197d7
and eax, r15d
xor r13d, 0x6000
xor r8d, 0x130376d3
and r8d, r13d
mov r13d, 0x58a11e19
or r8d, eax
mov r15d, dword [rbp + 0x278]
xor r15d, 0xfcb76fbb
and r15d, r9d
xor r10d, 0xe0b76cbb
and edx, 0x504a8308
and r12d, 0x859448b4
or r12d, edx
mov eax, r14d
and eax, 0xa203442
and edi, 0xa59548b5
or edi, eax
xor edi, r12d
xor edi, 0xdeeefffa
and edi, ebx
or edi, r8d
mov eax, esi
xor eax, 0x4625c679
mov edx, edi
and edx, 0x4625c679
or edx, 0x21981982
and edi, 0xb9da3986
xor edi, edx
mov edx, edi
xor edx, 0x67bddffb
xor esi, 0xb9da3986
and esi, edx
xor edi, 0x98422004
and edi, eax
mov eax, ecx
xor eax, 0x130881e4
and eax, r11d
mov edx, ecx
or edx, 0xdbd780fa
mov ebx, edx
and ebx, 0xc51ea4c
and ecx, 0x281501
or ecx, ebx
xor ecx, eax
xor ecx, 0x2859814c
xor edx, 0xfbdf81fe
and edx, eax
or edx, ecx
mov eax, r14d
and eax, 0xdbd780fa
or r11d, r14d
and r14d, 0x24287f05
or r14d, 0x43d68078
xor r14d, eax
xor r14d, edx
xor r14d, 0x98010082
and r14d, r11d
or r14d, edi
or r14d, esi
mov eax, r9d
and eax, 0x3089a
mov ecx, r10d
and ecx, 0x804000
or ecx, eax
xor ecx, 0x10804204
xor r9d, 0xe0342421
and r9d, r10d
or r9d, ecx
mov edi, r9d
xor edi, 0xef7cb561
mov edx, r9d
and edx, 0x30240e
mov eax, edi
and eax, 0xf1cfcab1
or eax, edx
mov edx, eax
xor edx, 0xe303540
mov ebx, edx
and ebx, 0x74b34cb1
and eax, 0x814ca20e
or eax, ebx
or edx, 0xa45bbedf
mov esi, eax
xor esi, 0x51a47060
and esi, edx
mov edx, r15d
and edx, 0xa45bbedf
or edx, 0x1b044100
mov r8d, r15d
and r8d, 0x5ba44120
xor r8d, edx
mov edx, esi
not edx
and eax, 0x18000
mov r11d, esi
and r11d, 0x10c048b0
mov ecx, edx
and ecx, 0xec26020a
mov ebx, esi
and ebx, 0x1182445
or ebx, eax
lea eax, [rcx + r11]
add ecx, r11d
add ecx, 0x2018000
and r10d, 0x40a44020
xor ecx, ebx
mov ebx, r10d
xor ebx, 0xfce65bba
xor eax, 0xec26120a
and eax, ebx
mov ebx, esi
and ebx, 0x718c06f1
and edx, 0x8473e80e
or edx, ebx
or esi, r10d
xor edx, r10d
lea ebx, [r10 + 0x319a445]
xor ecx, 0x281c020
and ebx, ecx
xor edx, 0x718c06f1
and edx, esi
or edx, eax
or edx, ebx
mov eax, r8d
xor eax, 0xbf5fffdf
xor r8d, 0x40a00020
and r8d, edx
not edx
and edx, eax
mov eax, r9d
and r9d, 0xc09208a5
and edi, 0x3a25f71a
or edi, r9d
xor eax, r15d
xor edi, r15d
mov ebx, r15d
not ebx
or edx, r8d
xor eax, 0xef7cb561
and eax, ebx
xor edi, 0x3aa7ff9e
or edi, eax
mov eax, edi
and eax, 0xd49ab90b
mov ecx, edi
and ecx, 0x2b6546f4
or ecx, 0x4412a808
xor ecx, eax
mov eax, ecx
xor eax, 0x6f77eefc
mov ebx, edx
xor ebx, 0x2b6546f4
and ebx, eax
not edi
and edi, edx
xor edx, 0xd49ab90b
xor ecx, 0x90881103
and ecx, edx
or edi, ecx
or edi, ebx
xor edi, r14d
imul eax, edi, 0x1000193
mov dword [rbp + 0x1f4], eax
mov eax, dword [rbp + 0x214]
mov r10, qword [rbp + 0x1b0]
mov r9d, dword [rbp + 0x1f8]
mov esi, dword [rbp + 0x1fc]
mov r8d, dword [rbp + 0x200]
mov edi, dword [rbp + 0x204]
mov r11d, dword [rbp + 0x208]
jmp 0x1400a6970
cmp eax, 0x581f37ef
jle 0x1400a8650
cmp eax, 0x581f37f0
je 0x1400a8712
cmp eax, 0x5c59f878
je 0x1400a86ab
cmp eax, 0x7694ece2
jne 0x1400a6970
test byte [rbp + 0x26c], 1
movsx eax, byte [rbp + 0x29f]
mov ecx, dword [rbp + 0x27c]
sete byte [rbp + 0x29e]
cmp dword [rbp + 0x268], 0xa
setl byte [rbp + 0x29d]
mov ecx, 0x462bec05
jmp 0x1400a8523
cmp ecx, 0x22c0f4b1
jne 0x1400a8609
mov ecx, dword [rbp + 0x298]
mov ecx, 0x1f53ad1b
cmp ecx, 0x3117fdc3
jle 0x1400a8570
cmp ecx, 0x58a11e18
jg 0x1400a8590
cmp ecx, 0x3117fdc4
je 0x1400a85ca
cmp ecx, 0x462bec05
jne 0x1400a8523
movzx edx, byte [rbp + 0x29e]
cmp byte [rbp + 0x29d], 0
mov ebx, 0x3117fdc4
mov ecx, 0x3117fdc4
jne 0x1400a8566
mov ecx, 0x71946ac1
test dl, dl
cmovne ecx, ebx
jmp 0x1400a8523
cmp ecx, 0x1f53ad1a
jg 0x1400a850c
cmp ecx, 0x8353906e
je 0x1400a85ae
cmp ecx, 0xb9e70da7
je 0x1400a8518
jmp 0x1400a8523
cmp ecx, 0x58a11e19
je 0x1400a85eb
cmp ecx, 0x71946ac1
jne 0x1400a8523
mov ecx, 0x3117fdc4
jmp 0x1400a8523
cmp byte [rbp + 0x29c], 0
mov ecx, 0x58a11e19
jne 0x1400a8523
mov ecx, 0x22c0f4b1
jmp 0x1400a8523
mov dword [rbp + 0x298], eax
mov ecx, dword [rbp + 0x298]
cmp ecx, 0x41
setge byte [rbp + 0x29c]
mov ecx, dword [rbp + 0x264]
jmp 0x1400a8523
mov edx, dword [rbp + 0x298]
mov ecx, 0xb9e70da7
cmp edx, 0x5b
jl 0x1400a8523
mov ecx, 0x22c0f4b1
jmp 0x1400a8523
cmp ecx, 0x1f53ad1b
jne 0x1400a8523
mov eax, 0x9fdcb46a
jmp 0x1400a6970
cmp eax, 0xbd0b03e6
je 0x1400a86d6
cmp eax, 0xe59fd857
jne 0x1400a872b
mov r9d, dword [rbp + 0x1f4]
mov eax, 0x5c59f878
xor esi, esi
mov edi, dword [rbp + 0x1f0]
jmp 0x1400a6970
cmp eax, 0x17954bb8
je 0x1400a6951
cmp eax, 0x2f530768
jne 0x1400a6970
mov eax, dword [rbp + 0x218]
jmp 0x1400a6970
mov rax, qword [rbp + 0x288]
add rax, 1
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x288]
mov al, byte [rax]
mov byte [rbp + 0x29f], al
cmp byte [rbp + 0x29f], 0
setne byte [rbp + 0x287]
mov eax, dword [rbp + 0x20c]
jmp 0x1400a6970
mov dword [rbp + 0x260], edi
test esi, esi
mov eax, 0xc6b502bf
mov ecx, 0xbd0b03e6
cmove eax, ecx
mov r10, qword [rbp + 0x290]
mov r8d, dword [rbp + 0x260]
mov r11d, r9d
jmp 0x1400a6970
mov dword [rbp + 0x1f0], r8d
mov dword [rbp + 0x27c], r11d
mov qword [rbp + 0x288], r10
mov eax, dword [rbp + 0x210]
jmp 0x1400a6970
mov r9d, dword [rbp + 0x27c]
mov eax, 0x5c59f878
mov esi, 1
mov edi, dword [rbp + 0x27c]
jmp 0x1400a6970
cmp byte [rbp + 0x287], 0
mov eax, 0x87ce9d3c
mov ecx, 0x2f530768
cmovne eax, ecx
jmp 0x1400a6970
cmp eax, 0xc6b502bf
jne 0x1400a6970
mov eax, dword [rbp + 0x260]
cmp eax, 0x9dc82fc1
mov eax, 0xa1786689
mov ecx, 0x96b915c0
cmove eax, ecx
jmp 0x1400a65c0
mov rax, qword [rbp + 0x1d8]
mov eax, 0x185ad0fd
mov rcx, qword [rbp + 0x228]
mov qword [rbp + 0x1e0], rcx
jmp 0x1400a65c0
mov qword [rbp + 0x288], rcx
mov rcx, qword [rbp + 0x288]
mov r8d, dword [rcx + 0x88]
mov r9d, dword [rcx + 0x8c]
mov r10, r8
add r10, qword [rbp + 0x230]
mov ebx, dword [0x1400f2748]
mov edi, dword [0x1400f274c]
lea esi, [rbx - 1]
imul esi, ebx
and esi, 1
sete bl
sete byte [rbp + 0x298]
cmp edi, 0xa
setge al
setl byte [rbp + 0x290]
setl dl
mov ecx, edx
or sil, dl
and dl, bl
xor cl, bl
and al, bl
xor al, cl
mov ebx, esi
xor bl, 1
and bl, al
xor al, 1
test sil, sil
movzx eax, al
movzx ecx, cl
cmove ecx, eax
or bl, cl
mov eax, edx
or al, bl
and cl, dl
xor cl, dl
xor cl, al
mov eax, edx
xor al, bl
test cl, 1
mov ecx, 0x80d5946
mov edi, 0xbfa4195b
cmovne ecx, edi
mov qword [rbp + 0x250], r10
test bl, bl
mov ebx, ecx
mov esi, 0x80d5946
cmovne ebx, esi
mov dword [rbp + 0x258], r9d
test dl, dl
cmovne ebx, ecx
test al, 1
cmovne ebx, edi
mov ecx, 0x97bfe48f
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xfb599b2d
jg 0x1400a8860
cmp ecx, 0x97bfe48f
je 0x1400a8877
cmp ecx, 0xbfa4195b
jne 0x1400a8840
jmp 0x1400a8956
cmp ecx, 0xfb599b2e
je 0x1400a88a4
cmp ecx, 0x80d5946
jne 0x1400a8840
mov ecx, 0xfb599b2e
jmp 0x1400a8840
movzx eax, byte [rbp + 0x298]
movzx ecx, byte [rbp + 0x290]
mov edx, eax
xor dl, cl
test cl, cl
mov ecx, 0x80d5946
mov edi, 0xfb599b2e
cmovne ecx, edi
test al, al
cmovne ecx, edi
test dl, dl
cmovne ecx, edi
jmp 0x1400a8840
mov ecx, ebx
jmp 0x1400a8840
mov eax, dword [rbp + 0x270]
mov dword [rbp + 0x280], eax
mov rax, qword [rbp + 0x250]
mov ecx, dword [rbp + 0x280]
cmp ecx, dword [rax + 0x18]
mov eax, 0xfeaea4c5
mov ecx, 0x8f7a6614
cmove eax, ecx
jmp 0x1400a65c0
mov eax, 0xed6be931
mov dword [rbp + 0x274], 2
jmp 0x1400a65c0
mov eax, dword [rbp + 0x280]
mov rcx, qword [rbp + 0x248]
mov rdx, qword [rbp + 0x250]
mov ebx, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
add rbx, rcx
add rdx, rcx
movzx eax, word [rdx + rax*2]
mov eax, dword [rbx + rax*4]
add rax, rcx
mov qword [rbp + 0x1b8], rax
mov eax, 0xed6be931
mov dword [rbp + 0x274], 1
jmp 0x1400a65c0
cmp dword [rbp + 0x274], 2
mov eax, 0xc65e57a7
mov ecx, 0x5b770ae3
cmove eax, ecx
mov rcx, qword [rbp + 0x1b8]
mov qword [rbp + 0x228], rcx
jmp 0x1400a65c0
test r8d, r8d
setne byte [rbp + 0x288]
cmp byte [rbp + 0x288], 0
mov eax, 0x2b364cea
mov ecx, 0xf75e1bd1
cmovne eax, ecx
jmp 0x1400a65c0
cmp eax, 0x185ad0fd
jne 0x1400a65c0
mov rbx, qword [rbp + 0x240]
mov qword [rbp + 0x290], rbx
mov rax, qword [rbp + 0x290]
mov ecx, dword [0x1400f2250]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1400f2254], 0xa
setl dl
or dl, cl
mov esi, 0x102d1967
mov ecx, 0x8db7957a
cmove esi, ecx
mov edi, 0x3bafd34b
cmove edi, ecx
mov qword [rbp + 0x288], rax
cmp qword [rbx + 0x18], 8
mov eax, 0xbd16169
mov ebx, 0x729a50af
cmovae ebx, eax
mov eax, 0x643d93d1
nop word [rax + rax]
cmp eax, 0x3bafd34a
jg 0x1400a8a20
cmp eax, 0x8db7957a
je 0x1400a8a4a
cmp eax, 0xbd16169
je 0x1400a8a58
cmp eax, 0x102d1967
jne 0x1400a89f0
mov eax, 0x729a50af
lea rcx, [rbp + 0x248]
mov rcx, qword [rcx]
jmp 0x1400a89f0
cmp eax, 0x729a50af
je 0x1400a8a6a
cmp eax, 0x643d93d1
je 0x1400a8a5c
cmp eax, 0x3bafd34b
jne 0x1400a89f0
mov rax, qword [rbp + 0x290]
mov rax, qword [rax]
mov qword [rbp + 0x248], rax
mov eax, esi
jmp 0x1400a89f0
mov rax, qword [rbp + 0x290]
mov eax, 0x3bafd34b
jmp 0x1400a89f0
mov eax, edi
jmp 0x1400a89f0
lea rax, [rbp + 0x288]
mov rcx, qword [rax]
mov eax, ebx
jmp 0x1400a89f0
call fcn.1400c6910
mov rcx, qword [rbp + 0x240]
mov qword [rbp + 0x290], rcx
mov rcx, qword [rbp + 0x290]
mov qword [rbp + 0x288], rcx
mov ecx, 0x643d93d1
cmp ecx, 0x3bafd34a
jg 0x1400a8ad0
cmp ecx, 0x8db7957a
je 0x1400a8afd
cmp ecx, 0xbd16169
je 0x1400a8b0b
cmp ecx, 0x102d1967
jne 0x1400a8a90
mov ecx, 0x729a50af
lea rdx, [rbp + 0x248]
mov rdx, qword [rdx]
jmp 0x1400a8a90
cmp ecx, 0x729a50af
je 0x1400a8b20
cmp ecx, 0x643d93d1
je 0x1400a8b0f
cmp ecx, 0x3bafd34b
jne 0x1400a8a90
mov rcx, qword [rbp + 0x290]
mov rcx, qword [rcx]
mov qword [rbp + 0x248], rcx
mov ecx, esi
jmp 0x1400a8a90
mov rcx, qword [rbp + 0x290]
mov ecx, 0x3bafd34b
jmp 0x1400a8a90
mov ecx, edi
jmp 0x1400a8a90
lea rcx, [rbp + 0x288]
mov rdx, qword [rcx]
mov ecx, ebx
jmp 0x1400a8a90
add eax, eax
mov rcx, qword [rbp + 0x220]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdx
lea rdx, [rbp + 0x1c0]
xor r8d, r8d
mov r9d, 1
call qword [rbp + 0x1e0]
test eax, eax
sete dil
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp + 0x1e8]
call fcn.14006e3a0
mov rcx, qword [rbp + 0x240]
call fcn.14006e3a0
mov rcx, qword [rbp + 0x238]
call fcn.14006e3a0
mov eax, edi
add rsp, 0x328
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret