Function at 0x140002070
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x328
mov ecx, 5
call fcn.14002a5e0
lea rax, [0x142f40ef4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x328ba4e4f1707fce
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036250
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x142f53108]
mov edx, 0x1d
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r12, rax
xor bl, 0x67
xor esi, 0xe8bcbe3a
movabs rax, 0xa71713cd4629852b
xor rdi, rax
movabs rax, 0x5c93fddfb283743d
xor r14, rax
movabs rax, 0xcecf11e445298788
xor r15, rax
mov qword [r12], r15
mov qword [r12 + 8], r14
mov qword [r12 + 0x10], rdi
mov dword [r12 + 0x18], esi
mov byte [r12 + 0x1c], bl
lea rcx, [rsp + 0x48]
mov r8d, 0x1d
mov rdx, r12
call fcn.14002c120
cmp dword [rsp + 0x48], 2
jne 0x140004e18
mov rsi, qword [rsp + 0x50]
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400021bd
test rax, rax
je 0x1400021bd
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x140002186
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x1400021ac
cmp qword [rbx + 0x10], 0x11
jb 0x14000219b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x142f3b8a5]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc356ee5162e5e6f6
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036210
movabs rcx, 0xb63afab766842105
xor rcx, qword [rax]
movabs rdx, 0xd59b20d3c4e1ae21
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x73
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rdx
mov byte [rsp + 0x148], al
lea rax, [rsp + 0x149]
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x118]
lea rsi, [rsp + 0x48]
mov rdx, rsi
call fcn.14003c3b0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x150], 0
mov rdi, qword [rsp + 0x120]
lea r15, [rsp + 0x150]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebx, eax
test eax, eax
je 0x1400023e4
mov rsi, rbx
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x118], 0
je 0x1400022f4
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
je 0x1400023fd
lea rax, [0x142f42af8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xeb6effd858a2b26d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400363f0
movabs rcx, 0xf1358bf9df40b43a
xor rcx, qword [rax]
movabs rdx, 0xd51d1154491bf05c
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x2f
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rdx
mov byte [rsp + 0x160], al
lea rax, [rsp + 0x161]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x118]
lea rbx, [rsp + 0x48]
mov rdx, rbx
call fcn.14003c3b0
mov qword [rsp + 0x48], 0
mov rdi, qword [rsp + 0x120]
mov qword [rsp + 0x20], rbx
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
mov r9d, 2
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebx, eax
test eax, eax
jne 0x14000240d
mov r14, qword [rsp + 0x48]
cmp qword [rsp + 0x118], 0
jne 0x140002423
jmp 0x140002434
mov rsi, qword [rsp + 0x48]
cmp qword [rsp + 0x118], 0
jne 0x1400022e3
jmp 0x1400022f4
mov qword [rsp + 0x178], rsi
mov r14, rsi
jmp 0x1400024ac
mov r14, rbx
shl r14, 0x20
or r14, 2
cmp qword [rsp + 0x118], 0
je 0x140002434
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
jne 0x140004e16
mov qword [rsp + 0x178], r14
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400024ac
test rax, rax
je 0x1400024ac
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000246d
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x140002493
cmp qword [rbx + 0x10], 0x11
jb 0x140002482
mov rdi, qword [rdi - 8]
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsp + 0x178]
mov qword [rsp + 0x1a0], r12
lea rax, [0x142f3d7ec]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc472bf3390fabc4e
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400362c0
mov ecx, 0x1427a495
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x2f
mov dword [rsp + 0x150], ecx
mov byte [rsp + 0x154], al
lea rax, [rsp + 0x155]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x118]
lea rdx, [rsp + 0x48]
call fcn.14003c3b0
mov dword [rsp + 0x170], 0x800
mov dword [rsp + 0x138], 0
movzx eax, byte [0x142f53108]
mov edx, 0x800
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r15, rax
movabs rbp, 0x8000000000000001
mov qword [rsp + 0x48], 0x800
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0
mov r12, qword [rsp + 0x120]
lea r13, [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x58]
sub rsi, rdi
nop word cs:[rax + rax]
lea rax, [rsp + 0x170]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, r12
xor r8d, r8d
lea r9, [rsp + 0x138]
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x1400025fe
mov r8d, dword [rsp + 0x170]
cmp rsi, r8
jae 0x1400025b0
mov rcx, r13
mov rdx, rdi
call fcn.140042600
mov r15, qword [rsp + 0x50]
jmp 0x140002599
mov ebx, eax
test eax, eax
jne 0x140002675
movabs rbx, 0xde00000002
mov r15d, dword [rsp + 0x170]
mov qword [rsp + 0x58], r15
mov r12d, dword [rsp + 0x138]
cmp r12d, 0xb
ja 0x14000267d
mov rdi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rsi, [rbp - 1]
cmp qword [rsp + 0x118], 0
je 0x140002658
mov r8, qword [rsp + 0x120]
mov rcx, qword [0x142f53058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp rdi, rsi
jne 0x1400026cb
mov rbx, r14
lea rdi, [rsp + 0x150]
lea r12, [rsp + 0x118]
jmp 0x14000272e
shl rbx, 0x20
or rbx, 2
cmp qword [rsp + 0x48], 0
lea rdi, [rsp + 0x150]
lea r12, [rsp + 0x118]
je 0x1400026a8
mov r8, qword [rsp + 0x50]
mov rcx, qword [0x142f53058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x118], 0
je 0x14000272e
mov r8, qword [rsp + 0x120]
mov rcx, qword [0x142f53058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14000272e
cmp r12b, 5
je 0x1400026da
movzx eax, r12b
cmp eax, 4
jne 0x1400026fc
cmp r15d, 4
lea r12, [rsp + 0x118]
jne 0x1400026ed
mov r15b, 1
jmp 0x140002707
xor r15d, r15d
movabs rbx, 0xd00000002
jmp 0x140002707
xor r15d, r15d
lea r12, [rsp + 0x118]
test rdi, rdi
je 0x14000271d
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test r15b, r15b
lea rdi, [rsp + 0x150]
jne 0x140004e1d
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14000278e
test rax, rax
je 0x14000278e
mov r14, qword [rbx - 1]
mov rsi, qword [rbx + 7]
mov rax, qword [rsi]
test rax, rax
je 0x140002757
mov rcx, r14
call rax
dec rbx
cmp qword [rsi + 8], 0
je 0x14000277d
cmp qword [rsi + 0x10], 0x11
jb 0x14000276c
mov r14, qword [r14 - 8]
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x142f4157e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x4cb156212371ff72
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036b30
movabs rcx, 0x45da4ad349e98043
xor rcx, qword [rax]
mov edx, 0x9c85bef3
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x9e
xor r9b, 0xa0
xor r8b, 0x22
mov qword [rsp + 0x138], rcx
mov dword [rsp + 0x140], edx
mov byte [rsp + 0x144], al
mov byte [rsp + 0x145], r9b
mov byte [rsp + 0x146], r8b
lea rax, [rsp + 0x138]
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x120], 0xf
mov qword [rsp + 0x150], r12
lea rax, [0x14003fbd0]
mov qword [rsp + 0x158], rax
lea rax, [0x142f4d1f8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.14002ac20
lea rax, [0x142f3fc3e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1bca56983db63d94
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400369e0
mov ecx, 0xe6e3646e
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x79
mov dword [rsp + 0x48], ecx
mov byte [rsp + 0x4c], al
lea r9, [0x142f483f8]
lea rcx, [rsp + 0x178]
lea rdx, [rsp + 0x48]
mov r8d, 5
call fcn.14003d6d0
test rax, rax
jne 0x140004e16
movabs rax, 0xffffffff7fffffff
mov rcx, qword [rsp + 0x178]
cmp rcx, rax
ja 0x14000290d
call sub.ADVAPI32.dll_RegCloseKey
lea rax, [0x142f420ae]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x2fad1ee46a7bba3c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036430
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xa
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov ecx, esi
shr ecx, 8
xor cl, 0x1f
xor sil, 0x45
movabs rdx, 0xe555015a89119f64
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
dec rbp
mov qword [rsp + 0x80], rbp
mov word [rsp + 0x10c], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x108], 0x8000000
lea rax, [0x142f3f95b]
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x118]
mov rcx, qword [rsp + 0x118]
movabs rax, 0x77d41ba75e2a5042
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x118]
mov rdx, qword [rsp + 0x118]
call fcn.140036c90
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x142f53108]
mov edx, 0x1c
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0x564eca16
movabs rax, 0xaa0336bcfae4a62c
xor rbx, rax
movabs rax, 0x4e989d33e6f91578
xor r14, rax
movabs rax, 0x30f602216a0de99e
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.140025570
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140001450
mov ecx, 5
call fcn.14002a5e0
lea rax, [0x142f40c4b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x4b19cb8d84b8b95d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036580
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xa
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov ecx, esi
shr ecx, 8
xor cl, 0x42
xor sil, 0x51
movabs rdx, 0xd093d9a2a434da5d
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
mov qword [rsp + 0x80], rbp
mov word [rsp + 0x10c], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x108], 0x8000000
lea rax, [0x142f38a8d]
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x118]
mov rcx, qword [rsp + 0x118]
movabs rax, 0x281095583ae9ac3a
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x118]
mov rdx, qword [rsp + 0x118]
call fcn.140036d20
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x142f53108]
mov edx, 0x15
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov rsi, rax
lea rcx, [rsp + 0x68]
xor bl, 0xc4
xor edi, 0x84033627
movabs rax, 0x5fbd128daa92bc0
xor r14, rax
movabs rax, 0x649732a18614ef7c
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov dword [rsi + 0x10], edi
mov byte [rsi + 0x14], bl
call fcn.140025570
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140001450
mov ecx, 5
call fcn.14002a5e0
lea rax, [0x142f42566]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x37ec9fdcd600b031
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400360b0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142f53108]
mov edx, 0x11
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r15, rax
movabs rax, 0x74dd481726e3be60
xor rsi, rax
movabs rax, 0x3c474cedebef501
xor rdi, rax
xor bl, 0xf8
mov qword [r15], rdi
mov qword [r15 + 8], rsi
mov byte [r15 + 0x10], bl
lea rax, [0x142f3a4f0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x919d6dbaa3a762d7
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036100
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r12, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x94
mov ecx, esi
shr ecx, 8
xor cl, 0x76
xor sil, 0xf1
movabs rdx, 0x9ab910859f73e5c0
xor rdi, rdx
mov qword [r12], rdi
mov byte [r12 + 8], sil
mov byte [r12 + 9], cl
mov byte [r12 + 0xa], al
lea rax, [0x142f445fc]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xe70b295926b93e4f
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036710
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r13, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x92
mov ecx, esi
shr ecx, 8
xor cl, 0xc4
xor sil, 7
movabs rdx, 0x470fe53386c8c034
xor rdi, rdx
mov qword [r13], rdi
mov byte [r13 + 8], sil
mov byte [r13 + 9], cl
mov byte [r13 + 0xa], al
lea rax, [0x142f42e6a]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x38ec8850d46ece03
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036180
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xa
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov edx, esi
shr edx, 8
xor dl, 0xcc
xor sil, 0x96
movabs rcx, 0x3a7129f102f0df5c
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x288], rax
mov byte [rax + 9], dl
lea rax, [0x142f397ea]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x87fa01b7e67b1a0a
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035d80
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x28
mov ecx, esi
shr ecx, 8
xor cl, 0x56
xor sil, 0x91
movabs rdx, 0xcd644221b2ba1af3
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x280], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142f4630f]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x88032ad76312d8be
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035df0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 3
mov ecx, esi
shr ecx, 8
xor cl, 0x58
xor sil, 0xb0
movabs rdx, 0xc9b1d719d7c0385c
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x278], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142f4562b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x730187e9c446c938
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036380
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142f53108]
mov edx, 0xd
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0x989aab3b
movabs rcx, 0x9e5178fc116e5a6d
xor rdi, rcx
xor bl, 0x65
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x270], rax
mov byte [rax + 0xc], bl
lea rax, [0x142f46f14]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf7f76a13df871f79
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036d80
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xc
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0xe8fa72d7e8a46605
xor rsi, rcx
xor edi, 0x72b8f167
mov qword [rax], rsi
mov qword [rsp + 0x268], rax
mov dword [rax + 8], edi
lea rax, [0x142f3af39]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xcd4bbc46e300076e
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400368f0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142f53108]
mov edx, 0xd
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0x4dda60fb
movabs rcx, 0x41c6b8f70454d56b
xor rdi, rcx
xor bl, 0x39
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x260], rax
mov byte [rax + 0xc], bl
lea rax, [0x142f3a9ba]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x61452dd8d90bb10e
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036600
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142f53108]
mov edx, 0x12
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0xead60b9849216aa2
xor rsi, rcx
movabs rcx, 0xe2368f09533647ce
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xd7
xor bl, 0xa
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x258], rax
mov byte [rax + 0x11], cl
lea rax, [0x142f3cdbc]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x2a34924b327a4a82
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400361d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xa
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov edx, esi
shr edx, 8
xor dl, 0xb9
xor sil, 0x19
movabs rcx, 0x1abede8ee98a2192
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x250], rax
mov byte [rax + 9], dl
lea rax, [0x142f394ef]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x92423ae5bc4be5d4
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400363c0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xa
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov edx, esi
shr edx, 8
xor dl, 0xd0
xor sil, 0xce
movabs rcx, 0x6c6ff8b27905a077
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x248], rax
mov byte [rax + 9], dl
lea rax, [0x142f44bfe]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x56542ba7bbaf0af5
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036b90
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142f53108]
mov edx, 0xd
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0x56fee53e
movabs rcx, 0xfa6aad1ac4875109
xor rdi, rcx
xor bl, 0x52
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x240], rax
mov byte [rax + 0xc], bl
lea rax, [0x142f41dfb]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7826632bfa2af5bb
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400366f0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
add r8b, 0x80
mov ecx, esi
shr ecx, 8
xor cl, 0x4d
xor sil, 0xa1
movabs rdx, 0x3a2822bee127c1f2
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x238], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142f483cc]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1939c37cee64c9e2
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036b10
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142f53108]
mov edx, 0xd
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0xc4292d
movabs rcx, 0x8af8f2dcd800141d
xor rdi, rcx
xor bl, 0x7d
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x230], rax
mov byte [rax + 0xc], bl
lea rax, [0x142f41e48]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1d835b84a1c6f6c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035da0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142f53108]
mov edx, 0xf
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x94
mov ecx, esi
shr ecx, 8
xor cl, 0xd1
xor sil, 0x5d
xor edi, 0x5059db67
movabs rdx, 0x7e20bf6188b4def4
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x228], rax
mov byte [rax + 0xe], r8b
lea rax, [0x142f4586a]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x710f87cdb93b367b
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036da0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x142f53108]
mov edx, 0x1c
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0x8a066a63
movabs rcx, 0xef454932d18887ca
xor rdi, rcx
movabs rcx, 0x18f426b0944ad7e
xor rbx, rcx
movabs rcx, 0x318ffda3bc090b70
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x220], rax
mov dword [rax + 0x18], esi
lea rax, [0x142f3ef75]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xd5e41f20bf5881db
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035e20
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x142f53108]
mov edx, 0x19
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r14, rax
movabs rax, 0x89f2b7a1b5154df
xor rsi, rax
movabs rax, 0xd10be5e4ddcb34cd
xor rdi, rax
movabs rax, 0x67a91b0947a8f2d0
xor rbx, rax
xor bpl, 0xc2
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x142f47d00]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xb3ff4f64aba6e809
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036ab0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xa
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov rbx, rax
mov eax, esi
shr eax, 8
xor al, 0xe3
xor sil, 0xaf
movabs rcx, 0x5b8bf80a9143e792
xor rdi, rcx
mov qword [rbx], rdi
mov byte [rbx + 8], sil
mov byte [rbx + 9], al
lea rax, [0x142f448e3]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x5a3d3590ef87355c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036550
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xc
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov qword [rsp + 0x218], rbx
movabs rcx, 0x1d51d3a69283e8ad
xor rsi, rcx
xor edi, 0xc38506b4
mov qword [rax], rsi
mov qword [rsp + 0x210], rax
mov dword [rax + 8], edi
lea rax, [0x142f40577]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc7a2458e33adef40
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036620
mov rsi, qword [rax]
movzx eax, byte [0x142f53108]
mov edx, 8
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov rdi, rax
movabs rax, 0x184b42f02cebf5d8
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x142f3ae55]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x91f13743cbf54842
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036b60
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 9
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov qword [rsp + 0x208], rdi
xor bl, 0x68
movabs rcx, 0xb13364bad93c7062
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x200], rax
mov byte [rax + 8], bl
lea rax, [0x142f3dca8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf989970083f1dc98
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035c40
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 9
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor bl, 0x1f
movabs rcx, 0xdf857ed0c8a8008c
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x1f8], rax
mov byte [rax + 8], bl
lea rax, [0x142f45f79]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x20a609fe2ff1bc28
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035ec0
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xc
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0x2d6597f93d61642b
xor rsi, rcx
xor edi, 0x6cc5feb4
mov qword [rax], rsi
mov qword [rsp + 0x1f0], rax
mov dword [rax + 8], edi
lea rax, [0x142f46098]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xe5bfb6ea47c06038
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400364f0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142f53108]
mov edx, 0xf
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xe6
mov ecx, esi
shr ecx, 8
xor cl, 0x21
xor sil, 0x4d
xor edi, 0xfa10b85
movabs rdx, 0x795b8b3bbbe23e4e
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x1e8], rax
mov byte [rax + 0xe], r8b
lea rax, [0x142f3d35a]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x495e7e6fcbda3cd6
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035c60
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142f53108]
mov edx, 0xc
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0x239d9022543fc21
xor rsi, rcx
xor edi, 0x1a29344e
mov qword [rax], rsi
mov qword [rsp + 0x1e0], rax
mov dword [rax + 8], edi
lea rax, [0x142f40072]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x178fc2ac5be6d4c8
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036520
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x2c
mov ecx, esi
shr ecx, 8
xor cl, 0x91
xor sil, 0x28
movabs rdx, 0xe945dd5f5fbe6355
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x1d8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142f3a34b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x2be3085ddf214632
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400367e0
mov rsi, qword [rax]
movzx eax, byte [0x142f53108]
mov edx, 8
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0xe8ad3139718c0a78
xor rsi, rcx
mov qword [rsp + 0x1d0], rax
mov qword [rax], rsi
lea rax, [0x142f39edb]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x2742bab370a95693
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035d50
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142f53108]
mov edx, 0x11
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0xf7fe4b7f2793d635
xor rsi, rcx
movabs rcx, 0xf3e658e8ea4c77b5
xor rdi, rcx
xor bl, 0xd7
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x1c8], rax
mov byte [rax + 0x10], bl
lea rax, [0x142f463e6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc6a069093904522b
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400369b0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142f53108]
mov edx, 0xd
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0xa6e74238
movabs rcx, 0xbc654ff58a86eef9
xor rdi, rcx
xor bl, 0x68
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x1c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x142f45d3b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf2d61e8d5966bb4b
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036000
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142f53108]
mov edx, 0xb
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 4
mov ecx, esi
shr ecx, 8
xor cl, 0xa9
xor sil, 0xc8
movabs rdx, 0xa23eab616960bc32
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x1b8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142f3b225]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xea99ca827386bef2
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036e30
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142f53108]
mov edx, 0xd
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
xor esi, 0xed25379f
movabs rcx, 0xb27b98ce3c339ef8
xor rdi, rcx
xor bl, 0xf4
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x1b0], rax
mov byte [rax + 0xc], bl
lea rax, [0x142f3b850]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x242ddb0801d05e60
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400366b0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142f53108]
mov edx, 0x12
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0xbe804ff2256fb005
xor rsi, rcx
movabs rcx, 0x4adf76a06234fc7d
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xdd
xor bl, 0xed
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x1a8], rax
mov byte [rax + 0x11], cl
lea rax, [0x142f459d4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xebd5f148509a5a14
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036740
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x142f53108]
mov edx, 7
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xea
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x9b
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0xe9
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x9f108510
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x142f53108]
mov edx, 0x220
xor ecx, ecx
mov rdi, r8
call fcn.140025a60
test rax, rax
je 0x140004e16
mov rsi, rax
mov qword [rsp + 0x198], r15
mov qword [rax], r15
mov qword [rax + 8], 0x11
mov qword [rsp + 0x2a8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xb
mov qword [rsp + 0x2a0], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], 0xb
mov rax, qword [rsp + 0x288]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], 0xa
mov rax, qword [rsp + 0x280]
mov qword [rsi + 0x40], rax
mov qword [rsi + 0x48], 0xb
mov rax, qword [rsp + 0x278]
mov qword [rsi + 0x50], rax
mov qword [rsi + 0x58], 0xb
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x60], rax
mov qword [rsi + 0x68], 0xd
mov rax, qword [rsp + 0x268]
mov qword [rsi + 0x70], rax
mov qword [rsi + 0x78], 0xc
mov rax, qword [rsp + 0x260]
mov qword [rsi + 0x80], rax
mov qword [rsi + 0x88], 0xd
mov rax, qword [rsp + 0x258]
mov qword [rsi + 0x90], rax
mov qword [rsi + 0x98], 0x12
mov rax, qword [rsp + 0x250]
mov qword [rsi + 0xa0], rax
mov qword [rsi + 0xa8], 0xa
mov rax, qword [rsp + 0x248]
mov qword [rsi + 0xb0], rax
mov qword [rsi + 0xb8], 0xa
mov rax, qword [rsp + 0x240]
mov qword [rsi + 0xc0], rax
mov qword [rsi + 0xc8], 0xd
mov rax, qword [rsp + 0x238]
mov qword [rsi + 0xd0], rax
mov qword [rsi + 0xd8], 0xb
mov rax, qword [rsp + 0x230]
mov qword [rsi + 0xe0], rax
mov qword [rsi + 0xe8], 0xd
mov rax, qword [rsp + 0x228]
mov qword [rsi + 0xf0], rax
mov qword [rsi + 0xf8], 0xf
mov rax, qword [rsp + 0x220]
mov qword [rsi + 0x100], rax
mov qword [rsi + 0x108], 0x1c
mov qword [rsp + 0x298], r14
mov qword [rsi + 0x110], r14
mov qword [rsi + 0x118], 0x19
mov rax, qword [rsp + 0x218]
mov qword [rsi + 0x120], rax
mov qword [rsi + 0x128], 0xa
mov rax, qword [rsp + 0x210]
mov qword [rsi + 0x130], rax
mov qword [rsi + 0x138], 0xc
mov rax, qword [rsp + 0x208]
mov qword [rsi + 0x140], rax
mov qword [rsi + 0x148], 8
mov rax, qword [rsp + 0x200]
mov qword [rsi + 0x150], rax
mov qword [rsi + 0x158], 9
mov rax, qword [rsp + 0x1f8]
mov qword [rsi + 0x160], rax
mov qword [rsi + 0x168], 9
mov rax, qword [rsp + 0x1f0]
mov qword [rsi + 0x170], rax
mov qword [rsi + 0x178], 0xc
mov rax, qword [rsp + 0x1e8]
mov qword [rsi + 0x180], rax
mov qword [rsi + 0x188], 0xf
mov rax, qword [rsp + 0x1e0]
mov qword [rsi + 0x190], rax
mov qword [rsi + 0x198], 0xc
mov rax, qword [rsp + 0x1d8]
mov qword [rsi + 0x1a0], rax
mov qword [rsi + 0x1a8], 0xb
mov rax, qword [rsp + 0x1d0]
mov qword [rsi + 0x1b0], rax
mov qword [rsi + 0x1b8], 8
mov rax, qword [rsp + 0x1c8]
mov qword [rsi + 0x1c0], rax
mov qword [rsi + 0x1c8], 0x11
mov rax, qword [rsp + 0x1c0]
mov qword [rsi + 0x1d0], rax
mov qword [rsi + 0x1d8], 0xd
mov rax, qword [rsp + 0x1b8]
mov qword [rsi + 0x1e0], rax
mov qword [rsi + 0x1e8], 0xb
mov rax, qword [rsp + 0x1b0]
mov qword [rsi + 0x1f0], rax
mov qword [rsi + 0x1f8], 0xd
mov rax, qword [rsp + 0x1a8]
mov qword [rsi + 0x200], rax
mov qword [rsi + 0x208], 0x12
mov qword [rsp + 0x290], rdi
mov qword [rsi + 0x210], rdi
mov qword [rsi + 0x218], 7
lea rax, [0x142f44c19]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa2b4ce15e8cf96e7
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140035d00
movabs rcx, 0xfb64dbab15f28031
xor rcx, qword [rax]
movabs rdx, 0xc6cc84cf6220ffc3
xor rdx, qword [rax + 8]
movabs r8, 0x5816d7ef9cfcb345
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0xda
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rdx
mov qword [rsp + 0x160], r8
mov byte [rsp + 0x168], al
mov dword [rsp + 0x194], 0x41888887
lea rax, [0x142f4164d]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x67949fc85c8fba40
mov qword [rsp + 0x48], rax
lea r14, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036460
mov rcx, qword [rax]
mov qword [rsp + 0x2b0], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x2b8], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x2c0], rcx
mov rbp, qword [rax + 0x18]
mov r13, qword [rax + 0x20]
mov r12, qword [rax + 0x28]
mov r15, qword [rax + 0x30]
mov rbx, qword [rax + 0x38]
mov rdi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x117], al
movzx eax, byte [0x142f53108]
mov edx, 0x49
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
movabs rcx, 0x242305b118167c5f
xor rdi, rcx
movabs rcx, 0x3befe8c44102448d
xor rbx, rcx
movabs rcx, 0xb9670d4adecc8bd1
xor r15, rcx
movabs rcx, 0xbbcca23466b461f1
xor r12, rcx
movabs rcx, 0xe9e82dfacec03e39
xor r13, rcx
movabs rcx, 0xa69bf1406ac0e200
xor rbp, rcx
movabs rcx, 0x5a11d22a87363f01
mov rdx, qword [rsp + 0x2c0]
xor rdx, rcx
movabs rcx, 0x2b0b16f2a57639d
mov r8, qword [rsp + 0x2b8]
xor r8, rcx
movabs rcx, 0x1f5e83a82d5c4442
mov r9, qword [rsp + 0x2b0]
xor r9, rcx
movzx ecx, byte [rsp + 0x117]
xor cl, 0x9b
mov qword [rax], r9
mov qword [rax + 8], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], r15
mov qword [rax + 0x38], rbx
mov qword [rax + 0x40], rdi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x178], 0x49
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 0x49
xor r15d, r15d
jmp 0x140004511
add r15, 0x10
cmp r15, 0x220
je 0x140004803
lea rax, [rsi + r15]
mov qword [rsp + 0x170], rax
lea rax, [rsp + 0x178]
mov qword [rsp + 0x118], rax
lea rax, [0x140001da0]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x128], rax
lea rax, [0x14003fbf0]
mov qword [rsp + 0x130], rax
lea rax, [0x142f48400]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea r12, [rsp + 0x118]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 2
lea rdi, [rsp + 0x138]
mov rcx, rdi
mov rdx, r14
call fcn.140007020
mov rbx, qword [rsp + 0x138]
mov r13, qword [rsp + 0x140]
mov rax, qword [rsp + 0x148]
add rax, r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
mov rcx, r12
mov rdx, r14
call fcn.14003c3b0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x138], 0
mov rbp, qword [rsp + 0x120]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rbp
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov r12d, eax
test eax, eax
je 0x1400046d0
mov rdi, r12
shl rdi, 0x20
or rdi, 2
cmp qword [rsp + 0x118], 0
je 0x140004667
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
test r12d, r12d
jne 0x1400046e6
mov qword [rsp + 0x48], rdi
mov r8d, 0x19
mov rcx, r14
lea rdx, [rsp + 0x150]
lea r9, [rsp + 0x194]
call fcn.14003d6d0
test rax, rax
jne 0x14000470a
movabs rax, 0xffffffff7fffffff
cmp rdi, rax
ja 0x1400046ab
mov rcx, rdi
call sub.ADVAPI32.dll_RegCloseKey
test rbx, rbx
je 0x140004500
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
jmp 0x140004500
mov rdi, qword [rsp + 0x48]
cmp qword [rsp + 0x118], 0
jne 0x140004656
jmp 0x140004667
movzx eax, byte [0x142f53108]
mov edx, 8
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r15, rax
mov qword [rax], rdi
jmp 0x140004746
mov r14, rax
movzx eax, byte [0x142f53108]
mov edx, 8
xor ecx, ecx
call fcn.140025a60
test rax, rax
je 0x140004e16
mov r15, rax
mov qword [rax], r14
movabs rax, 0xffffffff7fffffff
cmp rdi, rax
ja 0x140004746
mov rcx, rdi
call sub.ADVAPI32.dll_RegCloseKey
test rbx, rbx
je 0x14000475c
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x178], 0
je 0x14000477d
mov r8, qword [rsp + 0x180]
mov rcx, qword [0x142f53058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [r15]
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
mov r12, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x198]
jb 0x1400047f0
test rax, rax
je 0x1400047f0
mov r14, qword [rbx - 1]
mov rdi, qword [rbx + 7]
mov rax, qword [rdi]
test rax, rax
je 0x1400047b9
mov rcx, r14
call rax
dec rbx
cmp qword [rdi + 8], 0
je 0x1400047df
cmp qword [rdi + 0x10], 0x11
jb 0x1400047ce
mov r14, qword [r14 - 8]
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
jmp 0x140004834
cmp qword [rsp + 0x178], 0
je 0x140004824
mov r8, qword [rsp + 0x180]
mov rcx, qword [0x142f53058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r12, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x198]
lea rax, [0x141b558c4]
mov qword [rsp + 0x28], rax
lea rax, [0x141b558b8]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005aa88]
lea r9, [0x141b55898]
lea r15, [rsp + 0x2c8]
mov r8d, 0x1afae10
mov rcx, r15
call fcn.140017090
lea rax, [0x141ccc920]
mov qword [rsp + 0x28], rax
lea rax, [0x141ccc914]
mov qword [rsp + 0x20], rax
lea rdx, [0x141b558e4]
lea r9, [0x141ccc8f4]
lea r14, [rsp + 0x2e0]
mov r8d, 0x177010
mov rcx, r14
call fcn.140017090
lea rax, [0x14241d37c]
mov qword [rsp + 0x28], rax
lea rax, [0x14241d370]
mov qword [rsp + 0x20], rax
lea rdx, [0x141ccc940]
lea r9, [0x14241d350]
lea rdi, [rsp + 0x2f8]
mov r8d, 0x750a10
mov rcx, rdi
call fcn.140017090
lea rax, [0x142f483d8]
mov qword [rsp + 0x28], rax
lea rax, [0x142f483cc]
mov qword [rsp + 0x20], rax
lea rdx, [0x14241d39c]
lea r9, [0x142f483ac]
lea rbx, [rsp + 0x310]
mov r8d, 0xb2b010
mov rcx, rbx
call fcn.140017090
lea rax, [0x142f3c146]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x574b118b8ad6845c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036150
movabs rcx, 0x39ea2ecd3d1585bc
xor rcx, qword [rax]
movabs rdx, 0xaeeeb7b3fa45aa54
xor rdx, qword [rax + 8]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdx
lea rdx, [rsp + 0x48]
mov r8d, 0x10
mov rcx, r15
mov r9b, 1
call fcn.1400052d0
lea rax, [0x142f405f6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc700873d4c56b728
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036840
movabs rcx, 0x2cc2cfcaf83e46fa
xor rcx, qword [rax]
mov edx, 0xd24d1fb7
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x2a
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], edx
mov byte [rsp + 0x54], al
lea rdx, [rsp + 0x48]
mov r8d, 0xd
mov rcx, r14
mov r9b, 1
call fcn.1400052d0
lea rax, [0x142f38ff2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xbcb0a42db24b7612
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400362f0
movabs rcx, 0x2c3417d23610f182
xor rcx, qword [rax]
mov edx, 0x770e1615
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x93
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], edx
mov byte [rsp + 0x54], al
lea rdx, [rsp + 0x48]
mov r8d, 0xd
mov rcx, rbx
mov r9b, 1
call fcn.1400052d0
lea rax, [0x142f42919]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x168c8fa422da201c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036070
movabs rcx, 0xe3436761bcebefc8
xor rcx, qword [rax]
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x76
xor r8b, 0x16
xor dl, 0x4f
mov qword [rsp + 0x48], rcx
mov byte [rsp + 0x50], al
mov byte [rsp + 0x51], r8b
mov byte [rsp + 0x52], dl
lea rdx, [rsp + 0x48]
mov r8d, 0xb
mov rcx, rdi
xor r9d, r9d
call fcn.1400052d0
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x288]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x280]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x278]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x270]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x268]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x260]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x258]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x250]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x248]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x240]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x238]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x230]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x228]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x220]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x298]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x218]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x210]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x208]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x200]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1f8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1f0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1e8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1e0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1d8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1d0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1c8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1c0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1b8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1b0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x1a8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, qword [rsp + 0x290]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142f53058]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x328
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
call fcn.14002aeb0
lea rax, [0x142f3f805]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7512bdd3ec8f5104
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140036bf0
movabs rcx, 0x49e8f7e95d90eeef
xor rcx, qword [rax]
movabs rdx, 0x8ee7d716b5aa7003
xor rdx, qword [rax + 8]
movabs r8, 0x4f1dda9df4a08f94
xor r8, qword [rax + 0x10]
movabs r9, 0x515000027d8e17fa
xor r9, qword [rax + 0x18]
mov qword [rsp + 0x118], rcx
mov qword [rsp + 0x120], rdx
mov qword [rsp + 0x128], r8
mov qword [rsp + 0x130], r9
mov qword [rsp + 0x150], r12
mov qword [rsp + 0x158], 0x20
mov qword [rsp + 0x138], rdi
lea rax, [0x14003fbd0]
mov qword [rsp + 0x140], rax
lea rax, [0x142f4d1f8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x138]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.14002ac20
call fcn.14002aeb0
int3