Function at 0x140002090
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x6f8
mov ecx, 5
call fcn.140031800
lea rax, [0x141d8187f]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x173c27fd765d972
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400391d0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x141d94108]
mov edx, 0x1d
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor bl, 0x73
xor esi, 0x9a329882
movabs rcx, 0xcf1ccbf35e67e822
xor rdi, rcx
movabs rcx, 0x4477dbe787867f37
xor r14, rcx
movabs rcx, 0x3421c3f86763f04d
xor r15, rcx
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov dword [rax + 0x18], esi
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x160]
mov r8d, 0x1d
mov qword [rsp + 0x6b8], rax
mov rdx, rax
call fcn.1400367d0
cmp dword [rsp + 0x160], 2
jne 0x140006887
mov rsi, qword [rsp + 0x168]
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400021f6
test rax, rax
je 0x1400021f6
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x1400021bf
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x1400021e5
cmp qword [rbx + 0x10], 0x11
jb 0x1400021d4
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x141d85faf]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x692a453009a021c2
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400394d0
movabs rcx, 0xc579d45218b8f51f
xor rcx, qword [rax]
movabs rdx, 0x98a56be0018e9ecb
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x8c
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xc0], rdx
mov byte [rsp + 0xc8], al
lea rax, [rsp + 0xc9]
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 0
mov dword [rsp + 0x178], 1
lea rcx, [rsp + 0x50]
lea rsi, [rsp + 0x160]
mov rdx, rsi
call fcn.14003ed50
mov qword [rsp + 0x160], 0
mov dword [rsp + 0xf0], 0
mov rdi, qword [rsp + 0x58]
lea r15, [rsp + 0xf0]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebx, eax
test eax, eax
je 0x140002456
mov rsi, rbx
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x50], 0
je 0x140002348
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
je 0x14000246f
lea rax, [0x141d7d35b]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x7540e0e9012d6b45
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039350
movabs rcx, 0xfbfee014b2d4a1e0
xor rcx, qword [rax]
movabs rdx, 0xad474d59d8720eaa
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0xcf
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rdx
mov byte [rsp + 0x100], al
lea rax, [rsp + 0x101]
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 0
mov dword [rsp + 0x178], 1
lea rcx, [rsp + 0x50]
lea rbx, [rsp + 0x160]
mov rdx, rbx
call fcn.14003ed50
mov qword [rsp + 0x160], 0
mov rdi, qword [rsp + 0x58]
mov qword [rsp + 0x20], rbx
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
mov r9d, 2
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebx, eax
test eax, eax
jne 0x14000247f
mov r14, qword [rsp + 0x160]
cmp qword [rsp + 0x50], 0
jne 0x140002492
jmp 0x1400024a3
mov rsi, qword [rsp + 0x160]
cmp qword [rsp + 0x50], 0
jne 0x140002337
jmp 0x140002348
mov qword [rsp + 0xd8], rsi
mov r14, rsi
jmp 0x14000251b
mov r14, rbx
shl r14, 0x20
or r14, 2
cmp qword [rsp + 0x50], 0
je 0x1400024a3
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
jne 0x140006885
mov qword [rsp + 0xd8], r14
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14000251b
test rax, rax
je 0x14000251b
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x1400024dc
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x140002502
cmp qword [rbx + 0x10], 0x11
jb 0x1400024f1
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsp + 0xd8]
lea rax, [0x141d8948e]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x2b0048b31f75e28
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400387a0
mov ecx, 0xef0be82a
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x8d
mov dword [rsp + 0xf0], ecx
mov byte [rsp + 0xf4], al
lea rax, [rsp + 0xf5]
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 0
mov dword [rsp + 0x178], 1
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x160]
call fcn.14003ed50
mov dword [rsp + 0x568], 0x800
mov dword [rsp + 0xb8], 0
movzx eax, byte [0x141d94108]
mov edx, 0x800
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov r15, rax
mov qword [rsp + 0x160], 0x800
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 0
mov r12, qword [rsp + 0x58]
lea rdi, [rsp + 0xb8]
lea r13, [rsp + 0x160]
mov rsi, qword [rsp + 0x160]
mov rbp, qword [rsp + 0x170]
sub rsi, rbp
nop dword [rax + rax]
lea rax, [rsp + 0x568]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, r12
xor r8d, r8d
mov r9, rdi
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x14000268c
mov r8d, dword [rsp + 0x568]
cmp rsi, r8
jae 0x140002640
mov rcx, r13
mov rdx, rbp
call fcn.1400451c0
mov r15, qword [rsp + 0x168]
jmp 0x140002625
mov ebx, eax
test eax, eax
jne 0x140002707
movabs rbx, 0xde00000002
mov r12d, dword [rsp + 0x568]
mov qword [rsp + 0x170], r12
mov ebp, dword [rsp + 0xb8]
cmp ebp, 0xb
ja 0x14000270f
mov r15, qword [rsp + 0x160]
mov r14, qword [rsp + 0x168]
cmp qword [rsp + 0x50], 0
je 0x1400026e3
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x14000275a
mov rbx, r14
lea r15, [rsp + 0xf0]
lea r12, [rsp + 0x50]
jmp 0x1400027b0
shl rbx, 0x20
or rbx, 2
lea r15, [rsp + 0xf0]
cmp qword [rsp + 0x160], 0
lea r12, [rsp + 0x50]
je 0x14000273d
mov r8, qword [rsp + 0x168]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x50], 0
je 0x1400027b0
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400027b0
cmp bpl, 5
je 0x140002769
movzx eax, bpl
cmp eax, 4
jne 0x140002782
cmp r12d, 4
jne 0x140002774
mov bpl, 1
jmp 0x140002784
xor ebp, ebp
movabs rbx, 0xd00000002
jmp 0x140002784
xor ebp, ebp
lea r12, [rsp + 0x50]
test r15, r15
je 0x14000279f
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test bpl, bpl
lea r15, [rsp + 0xf0]
jne 0x14000688c
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140002810
test rax, rax
je 0x140002810
mov r14, qword [rbx - 1]
mov rsi, qword [rbx + 7]
mov rax, qword [rsi]
test rax, rax
je 0x1400027d9
mov rcx, r14
call rax
dec rbx
cmp qword [rsi + 8], 0
je 0x1400027ff
cmp qword [rsi + 0x10], 0x11
jb 0x1400027ee
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x141d89056]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x39079fd9bba54eab
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038e50
movabs rcx, 0x2f58211c061cdc57
xor rcx, qword [rax]
mov edx, 0x440d2081
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x6f
xor r9b, 0x61
xor r8b, 0xb3
mov qword [rsp + 0xb8], rcx
mov dword [rsp + 0xc0], edx
mov byte [rsp + 0xc4], al
mov byte [rsp + 0xc5], r9b
mov byte [rsp + 0xc6], r8b
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0xf0], r12
lea rax, [0x140043250]
mov qword [rsp + 0xf8], rax
lea rax, [0x141d8e788]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 2
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x170], r15
mov qword [rsp + 0x178], 1
lea rcx, [rsp + 0x160]
call fcn.140031f20
lea rax, [0x141d80e14]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x9ab536bb52ce46f
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400383a0
mov ecx, 0x517b8bc6
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x27
mov dword [rsp + 0x160], ecx
mov byte [rsp + 0x164], al
lea r9, [0x141d89720]
lea rcx, [rsp + 0xd8]
lea rdx, [rsp + 0x160]
mov r8d, 5
call fcn.140043290
test rax, rax
jne 0x140006885
movabs rax, 0xffffffff7fffffff
mov rcx, qword [rsp + 0xd8]
cmp rcx, rax
ja 0x1400029c0
call sub.ADVAPI32.dll_RegCloseKey
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 2
mov qword [rsp + 0x100], 0
mov r8d, 0x200
mov ebp, 2
xor ebx, ebx
mov r13d, 0xffffffff
xor r14d, r14d
cmp r8, 0x201
jae 0x140002a40
jmp 0x140002a1f
jae 0x140002af7
cmp r8, 0x201
jae 0x140002a40
mov edi, 0x200
lea r15, [rsp + 0x160]
mov r12, r8
jmp 0x140002a70
sub r8, r14
mov rax, rbx
sub rax, r14
cmp r8, rax
ja 0x140002ad2
cmp rbx, r13
mov r14d, 0xffffffff
cmovb r14, rbx
mov qword [rsp + 0x100], r14
mov rdi, r14
mov r15, rbp
mov r12, r14
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rax, qword [0x14005b028]
mov ecx, r12d
mov rdx, r15
call rax
mov esi, eax
test eax, eax
jne 0x140002a99
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x140002b82
mov r8d, esi
cmp r12, r8
jne 0x140002a10
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140006885
add r12, r12
cmp r12, r13
cmovae r12, r13
mov r8, r12
cmp r8, 0x201
jb 0x140002a1f
jmp 0x140002a40
lea rcx, [rsp + 0xf0]
mov rdx, r14
call fcn.140045090
mov rbx, qword [rsp + 0xf0]
mov rbp, qword [rsp + 0xf8]
jmp 0x140002a52
cmp rdi, r8
jb 0x140006885
lea rcx, [rsp + 0x50]
mov rdx, r15
call fcn.140030540
cmp qword [rsp + 0xf0], 0
je 0x140002b2e
mov r8, qword [rsp + 0xf8]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x50]
movabs rax, 0x8000000000000000
cmp r13, rax
je 0x140006885
mov r12, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
movzx ebx, byte [rsp + 0x68]
test rdi, rdi
je 0x140002bb7
js 0x140006885
movzx eax, byte [0x141d94108]
xor ecx, ecx
mov rdx, rdi
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rsi, rax
mov r14, rdi
jmp 0x140002bbf
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x58], rax
movabs rax, 0x8000000000000000
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0xf0], 0
jne 0x140002b18
jmp 0x140002b2e
mov esi, 1
xor r14d, r14d
mov rcx, rsi
mov rdx, r12
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xd0], bl
lea rax, [0x141d81748]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xfe6cb2dabe4b1827
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038d90
movabs rcx, 0xd5f552dfd664977a
xor rcx, qword [rax]
movabs rdx, 0x903d65178a7f2c08
xor rdx, qword [rax + 8]
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x168], rdx
lea rcx, [rsp + 0xb8]
lea rdx, [rsp + 0x160]
mov r8d, 0x10
call fcn.14002a890
mov rbx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
lea rcx, [rsp + 0x160]
mov rdx, rbx
mov r8, rdi
call fcn.1400367d0
cmp dword [rsp + 0x160], 2
jne 0x140002f55
mov rdi, qword [rsp + 0x168]
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140002d11
test rax, rax
je 0x140002d11
mov rsi, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x140002cda
mov rcx, rsi
call rax
dec rdi
cmp qword [rbx + 8], 0
je 0x140002d00
cmp qword [rbx + 0x10], 0x11
jb 0x140002cef
mov rsi, qword [rsi - 8]
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1400f8f54]
mov qword [rsp + 0x28], rax
lea rax, [0x1400f8f48]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005f118]
lea r9, [0x1400f8f28]
lea rcx, [rsp + 0x50]
mov r8d, 0x99e10
call fcn.140018b20
mov r15, qword [rsp + 0x50]
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x140002dc9
lea rax, [0x141d89710]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 1
mov qword [rsp + 0x170], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
lea rcx, [rsp + 0x160]
call fcn.140031f20
cmp qword [rsp + 0xb8], 0
je 0x140002dbb
mov r8, qword [rsp + 0xc0]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test r13, r13
jne 0x140006849
jmp 0x14000685a
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
mov dword [rsp + 0x160], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
mov dword [rsp + 0x178], 7
mov qword [rsp + 0x17c], 0
mov word [rsp + 0x184], 0
mov byte [rsp + 0x181], 1
mov byte [rsp + 0x184], 1
mov byte [rsp + 0x183], 1
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
lea r8, [rsp + 0x160]
call fcn.140036360
mov rsi, rax
mov rbx, rdx
lea rax, [0x141d8800c]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xc0eb843e3c5dc16f
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400388c0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
test rsi, rsi
jne 0x140006885
mov qword [rsp + 0xf0], rbx
lea rcx, [rsp + 0xf0]
mov rdx, rdi
mov r8, r14
call fcn.140041af0
mov rsi, rax
lea rax, [0x141d7ef0a]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x317d8f4b37e767b1
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038460
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
test rsi, rsi
jne 0x140006885
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r15, r15
je 0x140002f45
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
test rdi, rdi
mov qword [rsp + 0x6b0], r12
mov qword [rsp + 0x6a8], r13
je 0x140002f92
js 0x140006885
movzx eax, byte [0x141d94108]
xor ecx, ecx
mov rdx, rdi
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rsi, rax
mov r14, rdi
jmp 0x140002f9a
mov esi, 1
xor r14d, r14d
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x160], r14
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x170], rdi
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
mov dword [rsp + 0xf0], 0
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x160]
lea r8, [rsp + 0xf0]
call fcn.14002be60
mov rdi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
cmp rbp, 2
jne 0x14000310d
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140003168
test rax, rax
je 0x140003168
mov rsi, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x1400030d4
mov rcx, rsi
call rax
dec rdi
cmp qword [rbx + 8], 0
je 0x1400030fa
cmp qword [rbx + 0x10], 0x11
jb 0x1400030e9
mov rsi, qword [rsi - 8]
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x140003168
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
mov r12, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
je 0x14000314e
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
test r13, r13
je 0x14000315b
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x140003168
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x160]
call fcn.140001470
lea rax, [0x141d839ef]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x93bacfa9ce62f79e
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038d00
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov ecx, esi
shr ecx, 8
xor cl, 0x88
xor sil, 0x27
movabs rdx, 0xc24f23dd7a84dcf0
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x160], 0xa
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 0xa
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
lea rax, [0x141d7ea79]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xfb678fab8f01a98e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038150
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x141d94108]
mov edx, 0x1c
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rsi, rax
lea rcx, [rsp + 0x180]
xor edi, 0xeab1a2d1
movabs rax, 0x8daf4eca98e212d6
xor rbx, rax
movabs rax, 0x9eacd266b44a7b30
xor r14, rax
movabs rax, 0xee70a0085867d038
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.1400276c0
mov rax, qword [rsp + 0x188]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x190], 1
lea rcx, [rsp + 0x160]
call fcn.140001470
mov ecx, 5
call fcn.140031800
lea rax, [0x141d7cf09]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xbbdb508eec527d7f
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038e10
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov ecx, esi
shr ecx, 8
xor cl, 0xf8
not sil
movabs rdx, 0x3586ab6a3ba09a5f
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x160], 0xa
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 0xa
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
lea rax, [0x141d85303]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xd897a14f236db67a
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038b70
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141d94108]
mov edx, 0x15
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rsi, rax
lea rcx, [rsp + 0x180]
xor bl, 0xae
xor edi, 0xa2bf5cfe
movabs rax, 0x9b8471e2b92909ac
xor r14, rax
movabs rax, 0xa85eb3302447bcde
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov dword [rsi + 0x10], edi
mov byte [rsi + 0x14], bl
call fcn.1400276c0
mov rax, qword [rsp + 0x188]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x190], 1
lea rcx, [rsp + 0x160]
call fcn.140001470
mov ecx, 5
call fcn.140031800
lea rax, [0x141d7abbd]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xf0850d624727e1e9
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039390
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d94108]
mov edx, 0x11
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov r15, rax
movabs rax, 0x92d7351484af9c03
xor rsi, rax
movabs rax, 0x676003ed29e43d69
xor rdi, rax
xor bl, 0xee
mov qword [r15], rdi
mov qword [r15 + 8], rsi
mov byte [r15 + 0x10], bl
lea rax, [0x141d86411]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xb1ced75dd0b45df9
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400391f0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov r12, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x49
mov ecx, esi
shr ecx, 8
xor cl, 0xb2
xor sil, 0x5e
movabs rdx, 0x6fedaca2394e2eaf
xor rdi, rdx
mov qword [r12], rdi
mov byte [r12 + 8], sil
mov byte [r12 + 9], cl
mov byte [r12 + 0xa], al
lea rax, [0x141d79d9d]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x887f072b77c5f573
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400391a0
mov rsi, qword [rax]
movzx ebx, word [rax + 8]
movzx edi, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl edi, 0x10
or ebx, edi
mov edx, ebx
shr edx, 0x10
xor dl, 0xcc
xor bl, 0xb0
movabs rcx, 0xa121f9bb2ef7eb11
xor rsi, rcx
mov qword [rax], rsi
mov byte [rax + 8], bl
mov byte [rax + 9], bh
mov qword [rsp + 0x660], rax
mov byte [rax + 0xa], dl
lea rax, [0x141d7ccf0]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x4213640d680a9aea
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038ee0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov r13, rax
mov eax, esi
shr eax, 8
xor al, 0x3c
xor sil, 0x55
movabs rcx, 0xb4185d2bcd0f8a6a
xor rdi, rcx
mov qword [r13], rdi
mov byte [r13 + 8], sil
mov byte [r13 + 9], al
lea rax, [0x141d7c6ef]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x7d4134ccc48584a9
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038210
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x25
mov ecx, esi
shr ecx, 8
xor cl, 0xd1
xor sil, 9
movabs rdx, 0xb006a64e23651748
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x658], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d87150]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x1eb9e28e3105287c
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038b20
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x83
mov ecx, esi
shr ecx, 8
xor cl, 0x41
xor sil, 0xd6
movabs rdx, 0xa583ef250328b545
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x650], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d7c0ff]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xbc25ea58e25798c5
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038770
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0x2723490e
movabs rcx, 0xea7063caf92c2cd1
xor rdi, rcx
xor bl, 0xef
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x648], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d8964b]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xdaf6fa9af3745a1d
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038be0
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0x521d569c5d261a2d
xor rsi, rcx
xor edi, 0xe11bf59b
mov qword [rax], rsi
mov qword [rsp + 0x640], rax
mov dword [rax + 8], edi
lea rax, [0x141d7993c]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xd4198b73144560a4
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400380f0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0x87acf609
movabs rcx, 0xa9c1716cde99202
xor rdi, rcx
xor bl, 0x5f
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x638], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d7df7e]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x4e41e1b7a9a3bb52
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038ab0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d94108]
mov edx, 0x12
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0x82005ab0aefc5e2c
xor rsi, rcx
movabs rcx, 0x31f1214022276eb8
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xdd
xor bl, 0x7b
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x630], rax
mov byte [rax + 0x11], cl
lea rax, [0x141d88434]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x9b0d8fe1e8dd6a29
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039430
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov edx, esi
shr edx, 8
xor dl, 0x8c
xor sil, 0xc0
movabs rcx, 0xa9610837b9defd0
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x628], rax
mov byte [rax + 9], dl
lea rax, [0x141d81355]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xa9e7d45022ce0e89
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038d60
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov edx, esi
shr edx, 8
add dl, 0x80
xor sil, 0x3f
movabs rcx, 0x14a0108789b23b0e
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x620], rax
mov byte [rax + 9], dl
lea rax, [0x141d814f5]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xacd2763a087ff1b4
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400388f0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0x3affb6c8
movabs rcx, 0x320c71d36573277d
xor rdi, rcx
xor bl, 0xbb
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x618], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d810ca]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x9cfd7a6dc01dc0d8
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400394a0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xf0
mov ecx, esi
shr ecx, 8
xor cl, 0xc2
xor sil, 0xba
movabs rdx, 0x94f18f75cdccdede
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x610], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d82abd]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xc162ef250da342ed
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038560
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0x42875a9d
movabs rcx, 0xad26e5f1f3a77113
xor rdi, rcx
xor bl, 0x97
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x608], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d7c7b7]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x2f72712173d4c325
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038ec0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d94108]
mov edx, 0xf
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x34
mov ecx, esi
shr ecx, 8
xor cl, 0x46
add sil, 0x80
xor edi, 0x7928c673
movabs rdx, 0xd4704a8347fcbef2
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x600], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141d7ffb1]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x3c401ca378a23ad0
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400383d0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x141d94108]
mov edx, 0x1c
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0x10b21598
movabs rcx, 0x4be7306d1ced9e5e
xor rdi, rcx
movabs rcx, 0x8e457d6a9affafaf
xor rbx, rcx
movabs rcx, 0xf4d3e2067cd804e4
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x5f8], rax
mov dword [rax + 0x18], esi
lea rax, [0x141d7e2c9]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x46670b2918ae15e9
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400386c0
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x141d94108]
mov edx, 0x19
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov r14, rax
movabs rax, 0x8aabb1f4c0a4f024
xor rsi, rax
movabs rax, 0xbe665e705ddcf186
xor rdi, rax
movabs rax, 0xd19d45d56bdf4a39
xor rbx, rax
xor bpl, 0x7e
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x141d815e4]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xa2246a5c336c5fba
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039400
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rbx, rax
mov eax, esi
shr eax, 8
xor al, 0xd1
xor sil, 0xe3
movabs rcx, 0x33efa2513d4edf24
xor rdi, rcx
mov qword [rbx], rdi
mov byte [rbx + 8], sil
mov byte [rbx + 9], al
lea rax, [0x141d7a1bc]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x4152593834f08f82
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400389e0
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov qword [rsp + 0x5f0], rbx
movabs rcx, 0x545135e3a157c9b3
xor rsi, rcx
xor edi, 0x2f40fe35
mov qword [rax], rsi
mov qword [rsp + 0x5e8], rax
mov dword [rax + 8], edi
lea rax, [0x141d7e8cf]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xd3ac20e4a306f779
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400395d0
mov rsi, qword [rax]
movzx eax, byte [0x141d94108]
mov edx, 8
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
movabs rax, 0x79dd87341057e7e1
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x141d80608]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x22a214dd27dddaab
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038500
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 9
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov qword [rsp + 0x5e0], rdi
xor bl, 0x2d
movabs rcx, 0xa7564753927db33e
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x5d8], rax
mov byte [rax + 8], bl
lea rax, [0x141d83437]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xac30b9ecd075efe8
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039300
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 9
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor bl, 0xe8
movabs rcx, 0x41fbf236d4db9f6d
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x5d0], rax
mov byte [rax + 8], bl
lea rax, [0x141d7f2b5]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xa9ddbb796d1f6e48
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038b40
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0x7cad8cf896c18091
xor rsi, rcx
xor edi, 0x6b6fa641
mov qword [rax], rsi
mov qword [rsp + 0x5c8], rax
mov dword [rax + 8], edi
lea rax, [0x141d7e0fa]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x73a6cfe30798ce90
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038c90
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d94108]
mov edx, 0xf
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xb3
mov ecx, esi
shr ecx, 8
xor cl, 0x19
xor sil, 0xa0
xor edi, 0xfec4fd13
movabs rdx, 0x49b9ad783bda96fa
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x5c0], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141d800f8]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x118fb461fe4c58a1
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038330
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d94108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rbp, rax
movabs rax, 0xc6f02d95376255d9
xor rsi, rax
xor edi, 0xab1f6ab4
mov qword [rbp], rsi
mov dword [rbp + 8], edi
lea rax, [0x141d840d0]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xe21fd1f8005c1ff6
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400392d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x1a
mov ecx, esi
shr ecx, 8
xor cl, 0x56
xor sil, 5
movabs rdx, 0xd29b5e0817dd268e
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x5b8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d85a75]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x2d94c246c0c8b55
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038d20
mov rsi, qword [rax]
movzx eax, byte [0x141d94108]
mov edx, 8
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0xd0e952e35b059667
xor rsi, rcx
mov qword [rsp + 0x5b0], rax
mov qword [rax], rsi
lea rax, [0x141d845d8]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x2bce5af502774f52
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400390e0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d94108]
mov edx, 0x11
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0xab243a96991ef3e7
xor rsi, rcx
movabs rcx, 0x1664f741d7b2992a
xor rdi, rcx
xor bl, 0xd
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x5a8], rax
mov byte [rax + 0x10], bl
lea rax, [0x141d83477]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xfc4ca8cdae17e9fd
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038400
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0x8ef7f712
movabs rcx, 0x90c18dec2a132714
xor rdi, rcx
xor bl, 0x18
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x5a0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d834ac]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x63e7ad59a85c0112
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039140
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d94108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x79
mov ecx, esi
shr ecx, 8
xor cl, 0x22
xor sil, 0xc2
movabs rdx, 0x43de1249eff28099
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x598], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d883f5]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xe84e4481a5db630d
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038240
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
xor esi, 0xab6952ca
movabs rcx, 0xe990daec518e96c7
xor rdi, rcx
xor bl, 0x12
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x590], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d87d13]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xf880244849fa4dc3
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038f60
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d94108]
mov edx, 0x12
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0xb798903ea5d9a764
xor rsi, rcx
movabs rcx, 0xdba6712517380ab2
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x5c
xor bl, 0xd1
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x588], rax
mov byte [rax + 0x11], cl
lea rax, [0x141d8344f]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x7b8e36fd6ff76f18
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400382e0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d94108]
mov edx, 7
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xc4
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 6
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0xc1
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x1618276
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x141d94108]
mov edx, 0x220
xor ecx, ecx
mov rsi, r8
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rcx, rax
mov qword [rsp + 0x688], r15
mov qword [rax], r15
mov qword [rax + 8], 0x11
mov qword [rsp + 0x680], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xb
mov rax, qword [rsp + 0x660]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], 0xb
mov qword [rsp + 0x698], r13
mov qword [rcx + 0x30], r13
mov qword [rcx + 0x38], 0xa
mov rax, qword [rsp + 0x658]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xb
mov rax, qword [rsp + 0x650]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xb
mov rax, qword [rsp + 0x648]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x640]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xc
mov rax, qword [rsp + 0x638]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xd
mov rax, qword [rsp + 0x630]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x12
mov rax, qword [rsp + 0x628]
mov qword [rcx + 0xa0], rax
mov qword [rcx + 0xa8], 0xa
mov rax, qword [rsp + 0x620]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x618]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xd
mov rax, qword [rsp + 0x610]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 0xb
mov rax, qword [rsp + 0x608]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 0xd
mov rax, qword [rsp + 0x600]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 0xf
mov rax, qword [rsp + 0x5f8]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0x1c
mov qword [rsp + 0x678], r14
mov qword [rcx + 0x110], r14
mov qword [rcx + 0x118], 0x19
mov rax, qword [rsp + 0x5f0]
mov qword [rcx + 0x120], rax
mov qword [rcx + 0x128], 0xa
mov rax, qword [rsp + 0x5e8]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xc
mov rax, qword [rsp + 0x5e0]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 8
mov rax, qword [rsp + 0x5d8]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 9
mov rax, qword [rsp + 0x5d0]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 9
mov rax, qword [rsp + 0x5c8]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xc
mov rax, qword [rsp + 0x5c0]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xf
mov qword [rsp + 0x690], rbp
mov qword [rcx + 0x190], rbp
mov qword [rcx + 0x198], 0xc
mov rax, qword [rsp + 0x5b8]
mov qword [rcx + 0x1a0], rax
mov qword [rcx + 0x1a8], 0xb
mov rax, qword [rsp + 0x5b0]
mov qword [rcx + 0x1b0], rax
mov qword [rcx + 0x1b8], 8
mov rax, qword [rsp + 0x5a8]
mov qword [rcx + 0x1c0], rax
mov qword [rcx + 0x1c8], 0x11
mov rax, qword [rsp + 0x5a0]
mov qword [rcx + 0x1d0], rax
mov qword [rcx + 0x1d8], 0xd
mov rax, qword [rsp + 0x598]
mov qword [rcx + 0x1e0], rax
mov qword [rcx + 0x1e8], 0xb
mov rax, qword [rsp + 0x590]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], 0xd
mov rax, qword [rsp + 0x588]
mov qword [rcx + 0x200], rax
mov qword [rcx + 0x208], 0x12
mov qword [rsp + 0x670], rsi
mov qword [rcx + 0x210], rsi
mov qword [rsp + 0x668], rcx
mov qword [rcx + 0x218], 7
lea rax, [0x141d7ef1a]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x576eb747bddce434
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400381b0
movabs rcx, 0x73ab572e89593d9b
xor rcx, qword [rax]
movabs rdx, 0x34d905ed309deaa9
xor rdx, qword [rax + 8]
movabs r8, 0xfcab4d8498f1543f
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x29
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], r8
mov byte [rsp + 0x108], al
mov dword [rsp + 0x584], 0x41888887
lea rax, [0x141d87e3f]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xad2eb979989653dc
mov qword [rsp + 0x160], rax
lea r15, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039270
mov rcx, qword [rax]
mov qword [rsp + 0x6a0], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x560], rcx
mov r12, qword [rax + 0x10]
mov rbp, qword [rax + 0x18]
mov r13, qword [rax + 0x20]
mov r14, qword [rax + 0x28]
mov rbx, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x4f], al
movzx eax, byte [0x141d94108]
mov edx, 0x49
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
movabs rcx, 0x3d714daa07e7cfe7
xor rsi, rcx
movabs rcx, 0x6978d6d6f143f38f
xor rdi, rcx
movabs rcx, 0x7695fa8d2876a106
xor rbx, rcx
movabs rcx, 0x10f101a4b5656906
xor r14, rcx
movabs rcx, 0xc8ff638141ad0707
xor r13, rcx
movabs rcx, 0xe540c5162f47f705
xor rbp, rcx
movabs rcx, 0x10584f7e2c47d3a7
xor r12, rcx
movabs rcx, 0x435d286f96a631c0
mov rdx, qword [rsp + 0x560]
xor rdx, rcx
movabs rcx, 0x369b46e329435757
mov r8, qword [rsp + 0x6a0]
xor r8, rcx
movzx ecx, byte [rsp + 0x4f]
xor cl, 0xc8
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], r14
mov qword [rax + 0x30], rbx
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x568], 0x49
mov qword [rsp + 0x570], rax
mov qword [rsp + 0x578], 0x49
xor edi, edi
lea r12, [rsp + 0x50]
jmp 0x140005041
add rdi, 0x10
cmp rdi, 0x220
je 0x1400052d6
mov rax, qword [rsp + 0x668]
add rax, rdi
mov qword [rsp + 0x6c0], rax
lea rax, [rsp + 0x568]
mov qword [rsp + 0x50], rax
lea rax, [0x140001dc0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x60], rax
lea rax, [0x140043270]
mov qword [rsp + 0x68], rax
lea rax, [0x141d89728]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 2
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 2
lea rbx, [rsp + 0xd8]
mov rcx, rbx
mov rdx, r15
call fcn.1400088d0
mov r13, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xe8]
add rax, rbp
mov qword [rsp + 0x160], rbp
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 0
mov dword [rsp + 0x178], 1
mov rcx, r12
mov rdx, r15
call fcn.14003ed50
mov qword [rsp + 0x160], 0
mov dword [rsp + 0xd8], 0
mov rsi, qword [rsp + 0x58]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov r14d, eax
test eax, eax
je 0x140005210
mov rbx, r14
shl rbx, 0x20
or rbx, 2
cmp qword [rsp + 0x50], 0
je 0x1400051a2
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test r14d, r14d
jne 0x140005229
mov qword [rsp + 0x160], rbx
mov r8d, 0x19
mov rcx, r15
lea rdx, [rsp + 0xf0]
lea r9, [rsp + 0x584]
call fcn.140043290
test rax, rax
jne 0x14000524d
movabs rax, 0xffffffff7fffffff
cmp rbx, rax
ja 0x1400051ed
mov rcx, rbx
call sub.ADVAPI32.dll_RegCloseKey
test r13, r13
je 0x140005030
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
jmp 0x140005030
mov rbx, qword [rsp + 0x160]
cmp qword [rsp + 0x50], 0
jne 0x140005191
jmp 0x1400051a2
movzx eax, byte [0x141d94108]
mov edx, 8
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rsi, rax
mov qword [rax], rbx
jmp 0x140005289
mov rdi, rax
movzx eax, byte [0x141d94108]
mov edx, 8
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rsi, rax
mov qword [rax], rdi
movabs rax, 0xffffffff7fffffff
cmp rbx, rax
ja 0x140005289
mov rcx, rbx
call sub.ADVAPI32.dll_RegCloseKey
test r13, r13
je 0x14000529f
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x568], 0
je 0x1400052c0
mov r8, qword [rsp + 0x570]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rcx, rsi
call fcn.140040720
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, rsi
jmp 0x1400052f2
cmp qword [rsp + 0x568], 0
je 0x1400052f7
mov r8, qword [rsp + 0x570]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, 3
call fcn.140031800
lea rax, [0x141d7b455]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x1a35ef5b92b6c179
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140039080
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx eax, byte [0x141d94108]
mov edx, 0xe
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov ecx, esi
shr ecx, 8
xor cl, 0xd8
xor sil, 0x5c
xor edi, 0x93108273
movabs rdx, 0xa0329993a6ffc80c
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x160], 0xe
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 0xe
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
lea rax, [0x141d79ed7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xd55d003e1cb3bb86
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038120
mov rbx, qword [rax]
movzx eax, byte [0x141d94108]
mov edx, 8
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
lea rsi, [rsp + 0x180]
movabs rax, 0x43b60cc360100829
xor rbx, rax
mov qword [rdi], rbx
mov rcx, rsi
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx], 0
mov qword [rbx + 8], 8
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 8
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x190], 1
lea rax, [0x141d8635f]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x24222ac89e8b9284
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038c30
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0xb0], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400f8f74]
nop dword [rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x58], r8
add rcx, 8
cmp rcx, 0x60
jb 0x140005590
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x150], rax
movaps xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x140], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x130], xmm0
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x120], xmm3
movaps xmmword [rsp + 0x110], xmm2
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
movzx eax, byte [0x141d94108]
mov edx, 0x68
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
mov rax, qword [rsp + 0x150]
mov qword [rdi + 0x60], rax
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rdi + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rdi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
movaps xmm2, xmmword [rsp + 0x110]
movaps xmm3, xmmword [rsp + 0x120]
movups xmmword [rdi + 0x30], xmm3
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
cmp qword [rsp + 0x180], 1
jne 0x14000569d
mov rcx, rsi
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x68
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x68
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x190], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x160]
call fcn.140028b20
lea rax, [0x141d88ae2]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov rcx, qword [rsp + 0xd8]
movabs rax, 0x4ee576ee74668543
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov rdx, qword [rsp + 0xd8]
call fcn.140039540
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
movzx eax, word [rax + 0x28]
cmp dword [rsp + 0x50], 0
jne 0x140006885
lea rcx, [rsp + 0x160]
call fcn.140001470
lea rax, [0x141d850d2]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0xe33af03e8cc983a3
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038810
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d94108]
mov edx, 7
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x54
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x9a
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x74
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x9e47f49e
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x160], 7
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 7
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
lea rax, [0x141d85ab9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x8fbc5eb6a21da8ab
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140039470
movzx esi, word [rax]
movzx eax, byte [0x141d94108]
mov edx, 2
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
lea rcx, [rsp + 0x180]
xor esi, 0x508f
mov word [rax], si
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x190], 1
lea rax, [0x141d7a2d7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x866264cf4a3d8fde
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400390a0
mov rsi, qword [rax]
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov r14, qword [rax + 0x20]
mov ebp, dword [rax + 0x28]
movzx eax, byte [0x141d94108]
mov edx, 0x2c
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
xor ebp, 0x415d7f1
movabs rax, 0x90d3be5dc4d603ac
xor r14, rax
movabs rax, 0x179b94abc022e3e4
xor r15, rax
movabs rax, 0xb12bcb45807907a3
xor r12, rax
movabs rax, 0x8a14f59079ef0bda
xor r13, rax
movabs rax, 0xc839e2ac014d52a0
xor rsi, rax
mov qword [rdi], rsi
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], r14
mov dword [rdi + 0x28], ebp
cmp qword [rsp + 0x180], 1
jne 0x140005a57
lea rcx, [rsp + 0x180]
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x2c
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x2c
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x190], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x160]
call fcn.140028b20
lea rax, [0x141d82c56]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rcx, qword [rsp + 0xf0]
movabs rax, 0x6263a40d39527aa
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.1400385e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
cmp dword [rsp + 0x50], 0
jne 0x140006885
lea rcx, [rsp + 0x160]
call fcn.140001470
lea rax, [0x141d7d3cd]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x4fdea34f6d03d28
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038e90
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d94108]
mov edx, 7
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x91
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x56
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xfe
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x881f6301
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x160], 7
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 7
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
lea rax, [0x141d7e1f2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xeed4d423c9b97c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038a30
movzx esi, word [rax]
movzx eax, byte [0x141d94108]
mov edx, 2
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
lea rcx, [rsp + 0x180]
xor esi, 0xd41b
mov word [rax], si
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x190], 1
lea rax, [0x141d7a76f]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x200000d2ea37f00d
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400386f0
mov rcx, qword [rax]
mov qword [rsp + 0x560], rcx
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov r14d, dword [rax + 0x20]
movzx ebp, word [rax + 0x24]
movzx esi, byte [rax + 0x26]
movzx eax, byte [0x141d94108]
mov edx, 0x27
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
shl esi, 0x10
or ebp, esi
mov eax, ebp
shr eax, 0x10
xor al, 0x17
mov ecx, ebp
shr ecx, 8
xor cl, 0x84
xor bpl, 0xe8
xor r14d, 0x9bddaee8
movabs rdx, 0x6ea88c7b6d061819
xor r15, rdx
movabs rdx, 0x837d4a25bea550da
xor r12, rdx
movabs rdx, 0x241a54dab4e1497d
xor r13, rdx
movabs rdx, 0x3490809c683fe99a
mov r8, qword [rsp + 0x560]
xor r8, rdx
mov qword [rdi], r8
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r15
mov dword [rdi + 0x20], r14d
mov byte [rdi + 0x24], bpl
mov byte [rdi + 0x25], cl
mov byte [rdi + 0x26], al
cmp qword [rsp + 0x180], 1
jne 0x140005e2d
lea rcx, [rsp + 0x180]
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x27
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x27
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x190], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x160]
call fcn.140028b20
lea rax, [0x141d824ec]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rcx, qword [rsp + 0xf0]
movabs rax, 0xa101c69c6296718a
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.140039210
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
cmp dword [rsp + 0x50], 0
mov r12, qword [rsp + 0x6b0]
mov r14, qword [rsp + 0x6a8]
mov r15, qword [rsp + 0x698]
mov r13, qword [rsp + 0x690]
jne 0x140006885
lea rcx, [rsp + 0x160]
call fcn.140001470
lea rax, [0x141d83319]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x437ca7418107633
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038440
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d94108]
mov edx, 7
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 7
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x28
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xbe
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xc5bffa01
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x160], 7
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], 7
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 8
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f8], 0
mov word [rsp + 0x200], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x198], rax
mov word [rsp + 0x224], 0
mov dword [rsp + 0x1b8], 6
mov dword [rsp + 0x1c8], 6
mov dword [rsp + 0x1d8], 6
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x218], 0
mov dword [rsp + 0x220], 0x8000000
lea rax, [0x141d79d27]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x5f4ae05e0ff7f798
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400380d0
movzx ebx, word [rax]
movzx eax, byte [0x141d94108]
mov edx, 2
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
lea rsi, [rsp + 0x180]
xor ebx, 0xff61
mov word [rax], bx
mov rcx, rsi
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x190], 1
lea rax, [0x141d8558b]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xdfbc2e50d7951d4
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140039050
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0xa0], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400f8fdc]
nop dword [rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x58], r8
add rcx, 8
cmp rcx, 0x50
jb 0x140006190
movzx eax, byte [rax + 0x58]
xor al, 0x6d
mov byte [rsp + 0xa8], al
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0x110], xmm2
movaps xmmword [rsp + 0x120], xmm3
movaps xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x130], xmm0
mov rax, qword [rsp + 0x99]
mov qword [rsp + 0x139], rax
mov eax, dword [rsp + 0xa1]
mov dword [rsp + 0x141], eax
movzx eax, word [rsp + 0xa5]
mov word [rsp + 0x145], ax
movzx eax, byte [rsp + 0xa7]
mov byte [rsp + 0x147], al
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x148], al
movzx eax, byte [0x141d94108]
mov edx, 0x59
xor ecx, ecx
call fcn.1400321b0
test rax, rax
je 0x140006885
mov rdi, rax
movups xmm0, xmmword [rsp + 0x139]
movups xmmword [rax + 0x49], xmm0
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rax + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
movaps xmm2, xmmword [rsp + 0x110]
movaps xmm3, xmmword [rsp + 0x120]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x180], 1
jne 0x1400062ca
mov rcx, rsi
call fcn.1400276c0
mov rbx, qword [rsp + 0x188]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x59
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x59
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x190], 2
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x160]
call fcn.140028b20
lea rax, [0x141d7a847]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov rcx, qword [rsp + 0xd8]
movabs rax, 0xc4526857bd1e88d0
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov rdx, qword [rsp + 0xd8]
call fcn.1400387e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx ecx, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
cmp dword [rsp + 0x50], 0
jne 0x140006885
lea rcx, [rsp + 0x160]
call fcn.140001470
mov ecx, 2
call fcn.140031800
lea rax, [0x141c16071]
mov qword [rsp + 0x28], rax
lea rax, [0x141c16065]
mov qword [rsp + 0x20], rax
lea rdx, [0x1400f9035]
lea r9, [0x141c16045]
lea rdi, [rsp + 0x6c8]
mov r8d, 0x1b1d010
mov rcx, rdi
call fcn.140018b20
lea rax, [0x141d896cd]
mov qword [rsp + 0x28], rax
lea rax, [0x141d896c1]
mov qword [rsp + 0x20], rax
lea rdx, [0x141c16091]
lea r9, [0x141d896a1]
lea rsi, [rsp + 0x6e0]
mov r8d, 0x173610
mov rcx, rsi
call fcn.140018b20
lea rax, [0x141d7c093]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x4a6fa5dd7ffe6444
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038a10
movabs rcx, 0x6a6dffded743cb0f
xor rcx, qword [rax]
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xb5
xor r8b, 0xf7
xor dl, 0x5c
mov qword [rsp + 0x160], rcx
mov byte [rsp + 0x168], al
mov byte [rsp + 0x169], r8b
mov byte [rsp + 0x16a], dl
lea rdx, [rsp + 0x160]
mov r8d, 0xb
mov rcx, rdi
call fcn.140006d50
lea rax, [0x141d88cf4]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x893ac22a9e4163a0
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.1400382a0
movabs rcx, 0x5ae15e22e4677723
xor rcx, qword [rax]
mov edx, 0x5581f0b0
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x1b
mov qword [rsp + 0x160], rcx
mov dword [rsp + 0x168], edx
mov byte [rsp + 0x16c], al
lea rdx, [rsp + 0x160]
mov r8d, 0xd
mov rcx, rsi
call fcn.140006d50
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x668]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x688]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x680]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x660]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x658]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x650]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x648]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x640]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x638]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x630]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x628]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x620]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x618]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x610]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x608]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x600]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5f8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x678]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5f0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5e8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5e0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5d8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5d0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5c8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5c0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5b8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5b0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5a8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x5a0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x598]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x590]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x588]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x670]
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0xb8], 0
je 0x140006844
mov r8, qword [rsp + 0xc0]
mov rcx, qword [0x141d940e8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test r14, r14
je 0x14000685a
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d940e8]
xor edx, edx
mov r8, qword [rsp + 0x6b8]
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x6f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
call fcn.140028c20
lea rax, [0x141d83dae]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rcx, qword [rsp + 0x160]
movabs rax, 0x4a9e4ef34b5ae078
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
call fcn.140038cc0
movabs rcx, 0x3c742ef16d3aa8c0
xor rcx, qword [rax]
movabs rdx, 0x48aee67e8ce016a4
xor rdx, qword [rax + 8]
movabs r8, 0x1b5199f0184ce58e
xor r8, qword [rax + 0x10]
movabs r9, 0x846e33fa259e3527
xor r9, qword [rax + 0x18]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], r9
mov qword [rsp + 0xf0], r12
mov qword [rsp + 0xf8], 0x20
mov qword [rsp + 0xb8], r15
lea rax, [0x140043250]
mov qword [rsp + 0xc0], rax
lea rax, [0x141d8e788]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 2
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], 1
lea rcx, [rsp + 0x160]
call fcn.140031f20
call fcn.140028c20
int3