Function at 0x14007b160
Capabilities:
Create device object

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
movups xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x78], rcx
mov eax, dword [0x140099cc0]
mov ecx, dword [0x140097a90]
mov edx, dword [0x140097a94]
shrd edx, ecx, 0xa
xor edx, eax
xor edx, 0x6fd22c69
imul ecx, dword [0x140097a98], 0x7168fe74
imul r8d, dword [0x140097a9c], 0x6aa938e9
imul edx, eax
mov eax, r8d
add eax, ecx
add eax, 0x4833b27b
and eax, edx
imul ecx, dword [0x140097aa0], 0x5d191af7
imul edx, dword [0x140097aa4], 0xdec5c6d3
imul r8d, dword [0x140097aa8], 0xc0369c8d
imul r9d, dword [0x140097aac], 0xfdb11221
imul r10d, dword [0x140097ab0], 0xb6e770ef
imul r11d, dword [0x140097ab4], 0xc28c4ae3
imul esi, dword [0x140097ab8], 0x628cb0ab
imul edi, dword [0x140097abc], 0xf27eef4f
add ecx, edx
add ecx, 0xaecc87f2
cmp eax, ecx
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x2dc6c93c]
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx - 0x2257e25]
mov edx, edi
mov r8d, esi
lea edx, [r8 + rdx - 0x57eb4d37]
cmove edx, ecx
cmp dword [0x140099cc4], eax
cmovl edx, ecx
mov dword [rbp - 0x6c], edx
xorps xmm6, xmm6
mov ebx, 0x49c8f954
mov edx, ebx
mov ebx, ecx
mov byte [rbp - 0x14], r13b
mov rcx, r14
mov qword [rbp - 0x28], r15
mov r14, r12
mov r12, rdi
mov rdi, r9
mov r9b, byte [rbp - 0x11]
mov r13b, byte [rbp - 0x12]
mov r15b, byte [rbp - 0x13]
cmp edx, 0x78e822
jle 0x14007b381
cmp edx, 0x477185ee
jg 0x14007b51c
cmp edx, 0x255f1d66
jg 0x14007b70a
cmp edx, 0x1455737b
jle 0x14007bbb0
cmp edx, 0x1cd29826
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
jg 0x14007c775
cmp edx, 0x1455737c
je 0x14007d322
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov byte [rbp - 0x15], al
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0x15dd8bb8
jne 0x14007b261
mov r12, qword [rbp - 0x30]
mov eax, dword [r12]
mov r14, qword [rbp - 0x38]
mov dword [r14], eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r15, qword [rbp - 0x28]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0xaa1a032f
jmp 0x14007b261
cmp edx, 0xbfa481f6
jg 0x14007b5b3
cmp edx, 0xa17139dc
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
jg 0x14007b93c
cmp edx, 0x8d6e1abd
jle 0x14007c4b6
cmp edx, 0x99ac06fe
jg 0x14007cc13
cmp edx, 0x8d6e1abe
je 0x14007d886
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov rbx, r12
mov r12, r14
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov rdi, rbx
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, dword [rbp - 0x1c]
mov ebx, edx
cmp edx, 0x949f9205
jne 0x14007b261
imul eax, dword [0x140098168], 0x6d6f8dda
imul ecx, dword [0x140098164], 0x7860769c
add eax, ecx
add eax, 0x7db4ac2b
mov ecx, dword [0x140099cc0]
xor eax, ecx
mov edx, eax
imul edx, ecx
imul eax, dword [0x140098170], 0xdd01c766
imul ecx, dword [0x14009816c], 0x51d3a2e8
add eax, ecx
add eax, 0x44e6592b
and eax, edx
imul ecx, dword [0x140098178], 0x92d1dc97
imul edx, dword [0x140098174], 0x782f979f
add ecx, edx
add ecx, 0x5e74721a
mov edx, dword [0x140098180]
mov r8d, dword [0x14009817c]
shrd edx, r8d, 0xf
mov r8d, dword [0x140098188]
mov r9d, dword [0x140098184]
shrd r8d, r9d, 0x17
mov ebx, dword [0x140098190]
mov r10d, dword [0x14009818c]
shrd ebx, r10d, 9
xor edx, 0xd7bf5901
xor r8d, 0xad1ac8c2
xor ebx, 0xc3d95007
cmp eax, ecx
cmove ebx, r8d
cmp dword [0x140099cc4], edx
cmovl ebx, r8d
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov ecx, dword [r14]
jmp 0x14007e8ee
cmp edx, 0x565b4421
jg 0x14007b84d
cmp edx, 0x4bede98b
jle 0x14007bc9e
cmp edx, 0x52e742de
jg 0x14007c81e
cmp edx, 0x4bede98c
je 0x14007d1cd
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov byte [rbp - 0x15], al
mov ecx, ebx
mov ebx, edx
cmp edx, 0x4f74f873
je 0x14007b9bb
jmp 0x14007b261
cmp edx, 0xdf67d031
jg 0x14007ba05
cmp edx, 0xc82c3489
jle 0x14007c2bc
cmp edx, 0xd1521b4f
jg 0x14007cb3a
cmp edx, 0xc82c348a
je 0x14007d792
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov byte [rbp - 0x15], al
mov ecx, ebx
mov ebx, edx
cmp edx, 0xcd72993d
jne 0x14007b261
imul eax, dword [0x140097f28], 0xc86b29af
imul ecx, dword [0x140097f24], 0x9abd99c1
add eax, ecx
add eax, 0xccac3ab7
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x140097f30], 0x63fe270a
imul edx, dword [0x140097f2c], 0xfa2d26b1
add ecx, edx
add ecx, 0x816df089
and ecx, eax
imul eax, dword [0x140097f38], 0x610852ef
imul edx, dword [0x140097f34], 0xe647ce1d
add eax, edx
add eax, 0xe26337e7
mov edx, dword [0x140097f48]
mov r8d, dword [0x140097f44]
shrd edx, r8d, 0x16
xor edx, 0x768b52fc
imul r8d, dword [0x140097f3c], 0xf050a6eb
imul r9d, dword [0x140097f40], 0x2bc1719b
imul r10d, dword [0x140097f4c], 0x8fb6158b
imul r11d, dword [0x140097f50], 0x3db2a5e6
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x6d1db425]
mov ecx, r11d
mov r8d, r10d
lea ebx, [r8 + rcx - 0x384ff52b]
jmp 0x14007c2ab
cmp edx, 0x3072e9c8
mov byte [rbp - 0x15], al
jle 0x14007be4b
cmp edx, 0x46ed5d80
jg 0x14007c8d6
mov qword [rbp - 0x30], r14
cmp edx, 0x3072e9c9
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x50], r10
je 0x14007d432
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x68], r12
mov rdi, r12
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0x424d35b5
jne 0x14007b261
mov eax, dword [0x140097d3c]
mov ecx, dword [0x140097d38]
shrd eax, ecx, 8
mov ecx, dword [0x140097d44]
mov edx, dword [0x140097d40]
shrd ecx, edx, 0x1e
mov edx, dword [0x140097d4c]
mov r8d, dword [0x140097d48]
shrd edx, r8d, 4
mov r8d, dword [0x140097d54]
mov r9d, dword [0x140097d50]
shrd r8d, r9d, 2
mov r9d, dword [0x140097d5c]
mov r10d, dword [0x140097d58]
shrd r9d, r10d, 0x15
mov r10d, dword [0x140099cc0]
xor eax, r10d
xor eax, 0x3c979a82
imul eax, r10d
xor ecx, 0x64095e5b
and ecx, eax
xor edx, 0xdd8ce49b
xor r8d, 0x723013c0
imul eax, dword [0x140097d60], 0x743b15a7
xor r9d, 0xed40810f
imul r10d, dword [0x140097d64], 0xbbf0dcfc
cmp ecx, edx
mov ecx, r10d
lea ebx, [rax + rcx - 0x7ac3b664]
cmove ebx, r9d
cmp dword [0x140099cc4], r8d
cmovl ebx, r9d
jmp 0x14007caf5
cmp edx, 0x70db9d28
jle 0x14007c183
cmp edx, 0x792dafd2
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
jg 0x14007c9c0
mov qword [rbp - 0x30], r14
cmp edx, 0x70db9d29
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
je 0x14007d525
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0x761c8e92
jne 0x14007b261
imul eax, dword [0x14009828c], 0x54d470ee
imul ecx, dword [0x140098290], 0x6967aa5e
add eax, ecx
add eax, 0x1575009e
mov r8, qword [rbp - 0x40]
mov dword [r8], eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0x49ce19ce
jmp 0x14007b261
cmp edx, 0xb165e3b9
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x50], r10
jle 0x14007c5ef
cmp edx, 0xbbe50823
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x48], r11
jg 0x14007d114
cmp edx, 0xb165e3ba
mov dword [rbp - 0x1c], ebx
je 0x14007d8d6
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0xb2ec5697
jne 0x14007b261
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0x832ff8f0
jmp 0x14007b261
cmp edx, 0xedf24367
jg 0x14007c3f5
cmp edx, 0xe5da8f91
jle 0x14007d1f9
mov qword [rbp - 0x30], r14
cmp edx, 0xe5da8f92
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
je 0x14007d23d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0xe80dde26
jne 0x14007b261
mov r15, qword [rbp - 0x28]
mov rax, qword [r15]
lea rcx, [0x14007ffa3]
mov qword [rax + 0xe0], rcx
mov eax, dword [0x140098100]
mov ecx, dword [0x1400980fc]
shrd eax, ecx, 0x13
xor eax, 0x9767d0f8
mov r14, qword [rbp - 0x38]
mov dword [r14], eax
mov eax, dword [0x140098108]
mov ecx, dword [0x140098104]
shrd eax, ecx, 0x1d
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0xd44636ba
imul eax, ecx
imul ecx, dword [0x140098110], 0xa1aa4159
imul edx, dword [0x14009810c], 0x11a8ebfd
add ecx, edx
add ecx, 0x6a07dd69
and ecx, eax
mov eax, dword [0x140098118]
mov edx, dword [0x140098114]
shrd eax, edx, 0xa
mov edx, dword [0x140098120]
mov r8d, dword [0x14009811c]
shrd edx, r8d, 0x17
xor eax, 0xd46137df
xor edx, 0x9f861ed0
imul r8d, dword [0x140098124], 0xa34951d9
imul r9d, dword [0x140098128], 0x9975a864
imul r10d, dword [0x14009812c], 0x81083ec7
imul r11d, dword [0x140098130], 0xd4993152
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0xa247ad]
mov ecx, r11d
mov r8d, r10d
lea ebx, [r8 + rcx - 0x70b706d4]
cmove ebx, eax
cmp dword [0x140099cc4], edx
cmovl ebx, eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
jmp 0x14007cb2b
cmp edx, 0x78e823
je 0x14007c749
mov qword [rbp - 0x30], r14
cmp edx, 0x608e9e9
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x50], r10
je 0x14007dd1d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0xa31955e
jne 0x14007b261
mov r15, qword [rbp - 0x28]
mov rax, qword [r15]
lea rcx, [0x14007ffa3]
mov qword [rax + 0xe0], rcx
mov eax, dword [0x1400982a0]
mov ecx, dword [0x14009829c]
shrd eax, ecx, 0x19
xor eax, 0xe1390a15
mov r14, qword [rbp - 0x38]
mov dword [r14], eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0xe80dde26
jmp 0x14007b261
mov qword [rbp - 0x30], r14
cmp edx, 0x477185ef
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x50], r10
je 0x14007e229
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, dword [rbp - 0x6c]
cmp edx, 0x49c8f954
je 0x14007b261
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, edx
cmp edx, 0x49ce19ce
jne 0x14007b261
mov eax, dword [0x140097f58]
mov ecx, dword [0x140097f54]
shrd eax, ecx, 9
xor eax, 0x7d1aa1ee
mov rsi, qword [rbp - 0x40]
mov dword [rsi], eax
mov eax, dword [str.k_jt]
mov ecx, dword [0x140097f5c]
shrd eax, ecx, 0x1e
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0x20b95766
imul eax, ecx
mov ecx, dword [0x140097f68]
mov edx, dword [0x140097f64]
shrd ecx, edx, 0xd
xor ecx, 0x33a1fd47
and ecx, eax
mov eax, dword [str._vTCh]
mov edx, dword [0x140097f6c]
shrd eax, edx, 4
mov edx, dword [0x140097f80]
mov r8d, dword [0x140097f7c]
shrd edx, r8d, 0x1f
xor eax, 0xc6843540
xor edx, 0xea5e329f
imul r8d, dword [0x140097f74], 0x828afffd
imul r9d, dword [0x140097f78], 0xd872ae92
imul r10d, dword [0x140097f84], 0xaf83ce4e
imul r11d, dword [0x140097f88], 0x620e2ea2
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x641a5903]
mov ecx, r11d
mov r8d, r10d
lea ebx, [r8 + rcx - 0x83a51a6]
cmove ebx, edx
cmp dword [0x140099cc4], eax
cmovl ebx, edx
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, rsi
jmp 0x14007cb0b
cmp edx, 0x255f1d67
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
je 0x14007e328
cmp edx, 0x26f535bf
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x50], r10
je 0x14007dee9
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r15, r14
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0x304cefed
jne 0x14007b261
mov rcx, qword [0x140099e70]
sub rsp, 0x20
mov r8d, 0x1000
xor edx, edx
call fcn.140089200
mov r8d, 0x1fe
mov r13, qword [rbp - 0x58]
mov rcx, r13
xor edx, edx
call fcn.140089200
add rsp, 0x20
mov rax, qword [0x140097d68]
mov rcx, qword [0x140097d70]
shrd rcx, rax, 0x3e
mov rdx, rcx
movabs rax, 0x3a79f25850916fbb
xor rdx, rax
sub rsp, 0x20
mov rcx, r13
lea r8, [0x140089096]
mov r14, qword [rbp - 0x48]
mov r9, r14
call fcn.14007ebda
add rsp, 0x20
mov rcx, qword [0x140099e70]
sub rsp, 0x20
mov rdx, r13
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x140097d78], 0xc2ac3b7c
imul ecx, dword [0x140097d7c], 0xf79ffa46
imul edx, dword [0x140097d80], 0xb019b729
imul r9d, dword [0x140097d84], 0x444ba724
lea r8d, [rax + rcx]
add r8d, 0xb13b5555
mov eax, r9d
mov ecx, edx
add eax, ecx
add eax, 0x576f2b71
sub rsp, 0x30
mov dword [rsp + 0x20], eax
lea rcx, [0x140088e00]
lea rdx, [0x1400890b6]
mov r9, r14
call fcn.1400155d9
add rsp, 0x30
mov r15, qword [rbp - 0x28]
mov rcx, qword [r15]
imul eax, dword [0x140097d88], 0x281ce19d
imul edx, dword [0x140097d8c], 0xfb152606
imul r8d, dword [0x140097d90], 0xd21eadeb
imul r9d, dword [0x140097d94], 0xf676f979
add edx, eax
add edx, 0xcffe9542
mov eax, r9d
mov r9d, dword [0x140097d98]
mov r10d, dword [0x140097d9c]
shrd r10d, r9d, 5
lea r9d, [r8 + rax]
add r9d, 0xf41abfa3
xor r10d, 0xb8635c4e
movzx eax, byte [0x140097da0]
movzx r8d, byte [0x140097da1]
mov r11d, eax
shl r11d, 4
add r11d, eax
imul r8d, r8d, 0xffffffb9
add r8b, r11b
add r8b, 0xc8
sub rsp, 0x40
lea rax, [0x140099e58]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x20], r10d
mov byte [rsp + 0x28], r8b
lea r8, [0x140099e60]
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
add rsp, 0x40
mov r12, qword [rbp - 0x30]
mov dword [r12], eax
mov ecx, dword [0x140097da8]
mov edx, dword [0x140097da4]
shrd ecx, edx, 0x1a
xor ecx, 0x5c84ed26
cmp eax, ecx
setg al
imul ecx, dword [0x140097db0], 0x3c80c48e
imul edx, dword [0x140097dac], 0x80343fed
add ecx, edx
add ecx, 0x33894898
mov edx, dword [0x140099cc0]
xor ecx, edx
imul ecx, edx
imul edx, dword [0x140097db8], 0x333805b7
imul r8d, dword [0x140097db4], 0x91df0114
add edx, r8d
add edx, 0x570731b0
and edx, ecx
imul ecx, dword [0x140097dc0], 0xadb4b5
imul r8d, dword [0x140097dbc], 0xf7c5a68c
imul r9d, dword [0x140097dc4], 0xa8a3855e
imul r10d, dword [0x140097dc8], 0x3c6fbeec
imul r11d, dword [0x140097dcc], 0x2c169450
imul esi, dword [0x140097dd0], 0xaf832ec4
imul edi, dword [0x140097dd4], 0xfd6ad4c9
imul ebx, dword [0x140097dd8], 0xfe7db505
add ecx, r8d
add ecx, 0xd195e155
cmp edx, ecx
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx + 0x69a19bb8]
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx - 0x5cd21e97]
mov r8d, ebx
mov r9d, edi
lea ebx, [r9 + r8 - 0x9aee467]
cmove ebx, edx
cmp dword [0x140099cc4], ecx
cmovl ebx, edx
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, r13
mov r10, qword [rbp - 0x50]
mov r11, r14
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
jmp 0x14007cb27
cmp edx, 0x565b4422
je 0x14007c749
cmp edx, 0x5a97dbe7
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x50], r10
je 0x14007e00d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x68], r12
mov rdi, r12
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0x6c643e70
jne 0x14007b261
mov eax, dword [0x1400980d0]
mov ecx, dword [str.Z_n_k]
shrd eax, ecx, 0x1d
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0xa527ad2d
imul eax, ecx
mov ecx, dword [0x1400980d8]
mov edx, dword [0x1400980d4]
shrd ecx, edx, 8
xor ecx, 0x8606471b
and ecx, eax
mov eax, dword [0x1400980e0]
mov edx, dword [0x1400980dc]
shrd eax, edx, 6
mov edx, dword [0x1400980f0]
mov r8d, dword [0x1400980ec]
shrd edx, r8d, 5
xor eax, 0x9fda7901
xor edx, 0x87ff952c
imul r8d, dword [0x1400980e4], 0x5dffe5c9
imul r9d, dword [0x1400980e8], 0x51314be3
imul r10d, dword [0x1400980f4], 0x7bceb125
imul r11d, dword [0x1400980f8], 0xc9bbf57f
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x7eb1b46d]
mov ecx, r11d
mov r8d, r10d
lea ebx, [r8 + rcx + 0x21f1b2d7]
cmove ebx, edx
cmp dword [0x140099cc4], eax
cmovl ebx, edx
jmp 0x14007caf5
cmp edx, 0xbfa481f7
je 0x14007e48d
cmp edx, 0xc23bd5d5
je 0x14007c749
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov byte [rbp - 0x15], al
mov ecx, ebx
mov ebx, edx
cmp edx, 0xc5b3b736
jne 0x14007b261
imul eax, dword [0x140098068], 0x6a7e4cbc
imul ecx, dword [0x140098064], 0xf894df7a
add eax, ecx
add eax, 0x53c48a1d
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x140098070], 0xb4f78b68
imul edx, dword [0x14009806c], 0xbb3eb1a6
add ecx, edx
add ecx, 0x369dd09
and ecx, eax
mov eax, dword [0x140098078]
mov edx, dword [0x140098074]
shrd eax, edx, 0x18
mov ebx, dword [0x140098090]
mov r8d, dword [0x14009808c]
shrd ebx, r8d, 0xa
xor eax, 0xa65db29b
xor ebx, 0xca91d2dd
imul r8d, dword [0x14009807c], 0x99a5106a
imul r9d, dword [0x140098080], 0xf6b5807a
imul r10d, dword [0x140098084], 0xa9c67be6
imul r11d, dword [0x140098088], 0x19796d6f
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x205e777c]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x3bad8fd6]
jmp 0x14007cae9
cmp edx, 0xedf24368
je 0x14007e8fa
mov dword [rbp - 0x1c], ebx
mov rbx, r14
cmp edx, 0xf52be817
je 0x14007e444
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x30], rbx
mov r12, rbx
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov byte [rbp - 0x15], al
mov ecx, dword [rbp - 0x1c]
mov ebx, edx
cmp edx, 0xffb59401
jne 0x14007b261
mov eax, dword [0x140097de0]
mov ecx, dword [0x140097ddc]
shrd eax, ecx, 0x1e
imul ecx, dword [0x140097de8], 0xf612b347
imul edx, dword [0x140097de4], 0xfecf1c27
lea ebx, [rdx + rcx]
add ebx, 0x7efdee5e
xor eax, 0xa32a48a7
mov dl, byte [rbp - 0x18]
test dl, 1
cmovne ebx, eax
mov byte [rbp - 0x13], dl
jmp 0x14007cafb
cmp edx, 0x8090dad1
mov qword [rbp - 0x30], r14
je 0x14007ea0c
cmp edx, 0x81d596db
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x58], rdi
je 0x14007e4de
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0x832ff8f0
jne 0x14007b261
imul eax, dword [0x140098138], 0xef02d5be
imul ecx, dword [0x140098134], 0x37e0018f
add eax, ecx
add eax, 0xff0d5cef
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140098140]
mov edx, dword [0x14009813c]
shrd ecx, edx, 0x10
xor ecx, 0xd6afdf49
and ecx, eax
mov eax, dword [0x140098148]
mov edx, dword [0x140098144]
shrd eax, edx, 8
mov edx, dword [0x140098150]
mov r8d, dword [0x14009814c]
shrd edx, r8d, 2
xor eax, 0xa066a07f
xor edx, 0x4c64cb30
imul r8d, dword [0x140098154], 0x9bb269ea
imul r9d, dword [0x140098158], 0x5f223b79
imul r10d, dword [0x14009815c], 0x6ea91280
imul r11d, dword [0x140098160], 0x8bec1cc7
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x1135d749]
mov ecx, r11d
mov r8d, r10d
lea ebx, [r8 + rcx - 0x3bb8e0b6]
cmove ebx, eax
cmp dword [0x140099cc4], edx
cmovl ebx, eax
jmp 0x14007caf5
cmp edx, 0xa17139dd
je 0x14007ea7a
mov qword [rbp - 0x30], r14
cmp edx, 0xa348c5be
je 0x14007e5c7
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0xaa1a032f
jne 0x14007b261
mov r12, qword [rbp - 0x30]
mov eax, dword [r12]
mov r14, qword [rbp - 0x38]
mov dword [r14], eax
mov eax, dword [0x140097e20]
mov ecx, dword [str.R_txL_n]
shrd eax, ecx, 0x1f
mov edx, dword [0x140097e28]
mov ecx, dword [0x140097e24]
shrd edx, ecx, 0x1d
mov ecx, dword [0x140097e30]
mov r8d, dword [0x140097e2c]
shrd ecx, r8d, 0x1e
mov r8d, dword [0x140097e38]
mov r9d, dword [0x140097e34]
shrd r8d, r9d, 0xb
mov r9d, dword [0x140097e40]
mov r10d, dword [0x140097e3c]
shrd r9d, r10d, 0x1b
mov r10d, dword [0x140099cc0]
xor eax, r10d
xor eax, 0xfedab5a
imul eax, r10d
xor edx, 0xede8252e
and edx, eax
mov ebx, dword [str.ZQjk]
mov r10d, dword [0x140097e44]
shrd ebx, r10d, 0x19
xor ecx, 0x2f06f1c1
xor r8d, 0x3392e5ac
xor r9d, 0xf7ac5be8
xor ebx, 0x6785db0d
cmp edx, ecx
cmove ebx, r9d
cmp dword [0x140099cc4], r8d
cmovl ebx, r9d
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r15, qword [rbp - 0x28]
jmp 0x14007cb2b
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, 0x832ff8f0
jmp 0x14007b261
cmp edx, 0x1cd29827
mov byte [rbp - 0x15], al
mov qword [rbp - 0x58], rdi
je 0x14007d60d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0x2030484a
jne 0x14007b261
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0x1455737c
jmp 0x14007b261
cmp edx, 0x52e742df
je 0x14007d1cd
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov byte [rbp - 0x15], al
mov ecx, ebx
mov ebx, edx
cmp edx, 0x53aaf8bd
jne 0x14007b261
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0xc5b3b736
jmp 0x14007b261
cmp edx, 0x46ed5d81
je 0x14007d708
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0x47698eb9
jne 0x14007b261
mov eax, dword [0x140097ff8]
mov ecx, dword [0x140097ff4]
shrd eax, ecx, 5
imul ecx, dword [0x140098000], 0x23be4424
imul edx, dword [0x140097ffc], 0xdbd52a22
lea ebx, [rdx + rcx]
add ebx, 0x49c4327c
xor eax, 0x4f729ca5
mov dl, byte [rbp - 0x15]
test dl, 1
cmovne ebx, eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov eax, edx
mov ecx, dword [rbp - 0x1c]
jmp 0x14007b261
cmp edx, 0x792dafd3
je 0x14007d752
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0x7fbe7fb3
jne 0x14007b261
mov eax, dword [0x140097ba4]
mov ecx, dword [0x140097ba0]
shrd eax, ecx, 0x16
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0x5136967
imul eax, ecx
imul ecx, dword [0x140097bac], 0x5a153285
imul edx, dword [0x140097ba8], 0xf4e6b5b1
add ecx, edx
add ecx, 0xbd17bfb2
and ecx, eax
imul eax, dword [0x140097bb4], 0x2faa007e
imul edx, dword [0x140097bb0], 0x59579504
imul r8d, dword [0x140097bb8], 0xaba083d7
imul r9d, dword [0x140097bbc], 0xe318476e
imul r10d, dword [0x140097bc0], 0xfa430b92
imul r11d, dword [0x140097bc4], 0xab194f38
imul esi, dword [0x140097bc8], 0x23af1719
imul edi, dword [0x140097bcc], 0x9729b64c
add eax, edx
add eax, 0x5e3a04ea
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x6cf3d1b5]
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx + 0x6d67f3bb]
mov edx, edi
mov r8d, esi
lea ebx, [r8 + rdx + 0x4a902c04]
cmove ebx, ecx
cmp dword [0x140099cc4], eax
cmovl ebx, ecx
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
jmp 0x14007b261
mov qword [rbp - 0x30], r14
cmp edx, 0xd1521b50
mov byte [rbp - 0x15], al
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x16], r9b
mov qword [rbp - 0x58], rdi
je 0x14007d7be
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov qword [rbp - 0x50], r10
mov qword [rbp - 0x48], r11
mov qword [rbp - 0x68], r12
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, qword [rbp - 0x30]
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0xd1cda8a6
jne 0x14007b261
mov rcx, qword [0x140099e70]
sub rsp, 0x20
lea rdx, [0x140099e60]
call qword [sym.imp.ntoskrnl.exe_IoCreateSymbolicLink]
add rsp, 0x20
mov r12, qword [rbp - 0x30]
mov dword [r12], eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0x26f535bf
jmp 0x14007b261
cmp edx, 0x99ac06ff
mov dword [rbp - 0x1c], ebx
je 0x14007db14
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0x9d085ee4
jne 0x14007b261
mov eax, dword [0x140097ac0]
mov ecx, dword [0x140097ac4]
shrd ecx, eax, 9
xor ecx, 0xcedba303
mov eax, ecx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
imul eax, dword [0x140097ac8], 0x954ed96d
imul ecx, dword [0x140097acc], 0xce7ad209
add eax, ecx
add eax, 0xc488d27
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdx, rsp
mov qword [rbp - 0x38], rdx
mov eax, dword [0x140097ad0]
mov ecx, dword [0x140097ad4]
shrd ecx, eax, 0x15
xor ecx, 0x5ac21d87
mov eax, ecx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r9, rsp
mov qword [rbp - 0x30], r9
imul eax, dword [0x140097ad8], 0x80a49ca1
imul ecx, dword [0x140097adc], 0x5ae55e1e
add eax, ecx
add eax, 0xf899f450
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rcx, rsp
mov r12, rcx
imul eax, dword [0x140097ae0], 0x6642e268
imul r8d, dword [0x140097ae4], 0x9d79653f
add eax, r8d
add eax, 0xaabed065
shl rax, 4
lea rax, [rax + rax*2]
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r8, rsp
imul eax, dword [0x140097ae8], 0x18f8f467
imul r10d, dword [0x140097aec], 0x56dc5a2
add eax, r10d
add eax, 0x30af6faf
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r10, rsp
mov eax, dword [0x140097af0]
mov r11d, dword [0x140097af4]
shrd r11d, eax, 0x1d
xor r11d, 0xfaef2072
mov eax, r11d
shl rax, 4
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r11, rsp
imul eax, dword [0x140097af8], 0x6428d5c5
imul esi, dword [0x140097afc], 0xe0bced03
add eax, esi
add eax, 0x7db1baf
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r15, rsp
imul eax, dword [0x140097b00], 0xaa5259da
imul esi, dword [0x140097b04], 0x7d84c098
add eax, esi
add eax, 0x2de54e25
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
movabs rdi, 0x3fffffffff0
and rax, rdi
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r14, rsp
imul eax, dword [0x140097b08], 0xe5e0d89a
imul esi, dword [0x140097b0c], 0x8dc6db09
add eax, esi
add eax, 0xf5440026
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
and rax, rdi
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r13, rsp
mov eax, dword [0x140097b10]
mov esi, dword [0x140097b14]
shrd esi, eax, 9
xor esi, 0x5da43f71
mov eax, esi
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
and rax, rdi
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdi, rsp
mov eax, dword [0x140097b18]
mov esi, dword [0x140097b1c]
shrd esi, eax, 0xb
xor esi, 0x1b90bdfb
mov eax, esi
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rsi, rsp
mov rax, qword [rbp - 0x78]
mov qword [rdx], rax
mov eax, dword [0x140097b20]
mov edx, dword [0x140097b24]
shrd edx, eax, 4
xor edx, 0x5b46750d
mov dword [r9], edx
movzx eax, word [0x140097b28]
movzx edx, word [0x140097b2a]
imul eax, eax, 0x4dce
imul edx, edx, 0x7dab
add eax, edx
add eax, 0x2af2
mov word [r11], ax
movzx eax, word [0x140097b2c]
movzx edx, word [0x140097b2e]
shl eax, 4
lea eax, [rax + rax*2]
imul edx, edx, 0x4486
add eax, edx
add eax, 0x4dd0
mov word [r11 + 2], ax
mov eax, dword [0x140097b30]
mov edx, dword [0x140097b34]
shrd edx, eax, 0x10
lea rax, [0x140088e00]
mov qword [r11 + 8], rax
xor edx, 0x2675b71a
mov dword [r8], edx
imul eax, dword [0x140097b38], 0xe58b8aa9
imul edx, dword [0x140097b3c], 0xccfe4459
xor ebx, ebx
mov qword [r8 + 8], rbx
add eax, edx
add eax, 0x1c2438c
mov dword [r8 + 0x18], eax
mov qword [r8 + 0x10], r11
movups xmmword [r8 + 0x20], xmm6
mov eax, dword [0x140097b40]
mov edx, dword [0x140097b44]
shrd edx, eax, 0xb
imul eax, dword [0x140097b48], 0x833f9373
imul r9d, dword [0x140097b4c], 0x46c86ef2
add r9d, eax
add r9d, 0x1dc0902d
imul eax, dword [0x140097b50], 0xf98e53f4
imul r11d, dword [0x140097b54], 0x689fe534
xor edx, 0x83f58e80
add eax, r11d
add eax, 0x87b729b8
sub rsp, 0x40
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ntoskrnl.exe_ZwCreateKey]
add rsp, 0x40
mov ecx, dword [0x140097b5c]
mov edx, dword [0x140097b58]
shrd ecx, edx, 6
xor ecx, 0x481d38e9
cmp eax, ecx
setg bl
imul ecx, dword [0x140097b64], 0x5b35f3f
imul edx, dword [0x140097b60], 0xcb9d4d9
add ecx, edx
add ecx, 0x470b8cfd
mov edx, dword [0x140099cc0]
xor ecx, edx
imul ecx, edx
mov edx, dword [0x140097b6c]
mov r8d, dword [0x140097b68]
shrd edx, r8d, 4
xor edx, 0xad7d8c73
and edx, ecx
mov ecx, dword [0x140097b74]
mov r8d, dword [0x140097b70]
shrd ecx, r8d, 6
mov r8d, dword [0x140097b7c]
mov r9d, dword [0x140097b78]
shrd r8d, r9d, 0x15
xor ecx, 0xe133579f
xor r8d, 0x40a0a3bd
imul r9d, dword [0x140097b80], 0xad4c4470
imul r10d, dword [0x140097b84], 0xcde8331f
imul r11d, dword [0x140097b88], 0x42c18730
imul eax, dword [0x140097b8c], 0xd85b533d
cmp edx, ecx
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx + 0x5a2a7dfa]
mov edx, r11d
lea eax, [rdx + rax - 0x22e31c6d]
cmove eax, ecx
cmp dword [0x140099cc4], r8d
mov edx, eax
cmovl edx, ecx
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov byte [rbp - 0x11], bl
mov r8, rsi
mov r9, rdi
mov r10, r13
mov r11, r14
mov rdi, r15
mov rsi, r12
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x38]
mov r14, qword [rbp - 0x28]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, edx
jmp 0x14007b261
cmp edx, 0xbbe50824
je 0x14007dc13
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov dword [rbp - 0x1c], ebx
mov qword [rbp - 0x58], rdi
mov r9, rdi
mov rdi, r12
mov qword [rbp - 0x60], rsi
mov r12, r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x18], r15b
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov byte [rbp - 0x17], r13b
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, edx
cmp edx, 0xbf82a686
jne 0x14007b261
mov rcx, qword [0x140099e58]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
add rsp, 0x20
mov r12, qword [rbp - 0x30]
mov eax, dword [r12]
mov r14, qword [rbp - 0x38]
mov dword [r14], eax
mov al, byte [rbp - 0x18]
mov byte [rbp - 0x13], al
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x60]
mov r15, qword [rbp - 0x28]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0xbbe50824
jmp 0x14007b261
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, 0x1cd29827
jmp 0x14007b261
cmp edx, 0xdf67d032
jne 0x14007eb8f
mov rdx, rcx
mov ecx, eax
mov eax, dword [r14]
mov dword [rdx], eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, rdx
mov r13b, byte [rbp - 0x14]
mov eax, ecx
mov ecx, ebx
mov ebx, 0x99ac06ff
jmp 0x14007b261
imul eax, dword [0x140097e50], 0xee8fc838
imul ecx, dword [0x140097e4c], 0xc4d9dd70
add eax, ecx
add eax, 0xcdebac67
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140097e58]
mov edx, dword [0x140097e54]
shrd ecx, edx, 9
xor ecx, 0x53eed9c2
and ecx, eax
imul eax, dword [0x140097e60], 0x16fb086f
imul edx, dword [0x140097e5c], 0x46637f2a
add eax, edx
add eax, 0xa1e39d8a
mov edx, dword [0x140097e68]
mov r8d, dword [0x140097e64]
shrd edx, r8d, 0xa
mov r8d, dword [0x140097e78]
mov r9d, dword [0x140097e74]
shrd r8d, r9d, 0x1e
xor edx, 0x26cf3e0c
imul r9d, dword [0x140097e6c], 0x857625dc
xor r8d, 0x588eed41
mov r14d, r13d
mov r13, r10
imul r10d, dword [0x140097e70], 0xe4ad364e
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0x5a5d0235]
cmove r8d, eax
cmp dword [0x140099cc4], edx
mov ecx, ebx
mov ebx, r8d
cmovl ebx, eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r14b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, r13
jmp 0x14007d605
imul eax, dword [0x140097fc0], 0xd92346a9
imul ecx, dword [0x140097fbc], 0x285a6614
add eax, ecx
add eax, 0x27068aad
cmp dword [r8], eax
mov ecx, dword [str.9__]
setl byte [rbp - 0x15]
mov edx, dword [0x140097fc4]
shrd ecx, edx, 6
mov edx, dword [0x140099cc0]
xor ecx, edx
xor ecx, 0xed589f4b
imul ecx, edx
mov edx, dword [0x140097fd0]
mov r8d, dword [0x140097fcc]
shrd edx, r8d, 0x14
xor edx, 0xc8029366
and edx, ecx
imul ecx, dword [0x140097fd8], 0x4861761c
imul r8d, dword [0x140097fd4], 0xb72cdff5
add ecx, r8d
add ecx, 0xaf4221a6
mov r8d, dword [0x140097fe0]
mov r9d, dword [0x140097fdc]
shrd r8d, r9d, 3
mov r9d, dword [0x140097fe8]
mov r14d, r13d
mov r13, r10
mov r10d, dword [0x140097fe4]
shrd r9d, r10d, 1
xor r8d, 0x2e86b439
imul r10d, dword [0x140097fec], 0xba5b8c75
xor r9d, 0x300a9845
mov rax, r11
imul r11d, dword [0x140097ff0], 0x7218dcdb
cmp edx, ecx
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx - 0x38c92943]
cmove ecx, r9d
cmp dword [0x140099cc4], r8d
mov edx, ebx
mov ebx, ecx
cmovl ebx, r9d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r14b
mov cl, byte [rbp - 0x16]
mov byte [rbp - 0x11], cl
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, r13
mov r11, rax
jmp 0x14007d6fc
mov eax, dword [0x140097cd4]
mov ecx, dword [0x140097cd0]
shrd eax, ecx, 0x1f
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0xcc2bf69e
imul eax, ecx
mov ecx, dword [0x140097cdc]
mov edx, dword [0x140097cd8]
shrd ecx, edx, 7
xor ecx, 0x8b26cfb5
and ecx, eax
imul eax, dword [0x140097ce4], 0xe7dda07d
imul edx, dword [0x140097ce0], 0x9b534c67
imul r8d, dword [0x140097ce8], 0xa215447c
imul r9d, dword [0x140097cec], 0x59be5340
imul r10d, dword [0x140097cf0], 0x7a69077f
imul r11d, dword [0x140097cf4], 0xa35c4bab
imul esi, dword [0x140097cf8], 0x2cdf96ca
imul r14d, dword [0x140097cfc], 0xf5ea7f5f
add eax, edx
add eax, 0xea24fe26
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0xb990a46]
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx - 0x22943a8e]
mov edx, r14d
mov r8d, esi
lea edx, [r8 + rdx + 0x5c35833a]
cmove edx, ecx
cmp dword [0x140099cc4], eax
cmovl edx, ecx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov rsi, qword [rbp - 0x60]
jmp 0x14007e43b
imul eax, dword [0x140097df0], 0x2f2f64b7
imul ecx, dword [str._vl], 0x31b366e2
add eax, ecx
add eax, 0x147e17c9
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140097df8]
mov edx, dword [0x140097df4]
shrd ecx, edx, 7
xor ecx, 0x7ebc4d8
and ecx, eax
imul eax, dword [0x140097e00], 0x212617c3
imul edx, dword [str.na__Wx_], 0xa1d2bdf9
add eax, edx
add eax, 0x49298abd
mov edx, dword [0x140097e08]
mov r8d, dword [0x140097e04]
shrd edx, r8d, 0x1c
mov r8d, dword [0x140097e18]
mov r9d, dword [0x140097e14]
shrd r8d, r9d, 7
xor edx, 0xf747d934
imul r9d, dword [0x140097e0c], 0xff7fa290
xor r8d, 0x2469afd5
mov r14, rdi
mov rdi, r10
imul r10d, dword [0x140097e10], 0x5e057e7a
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax - 0x7dd9ea91]
cmove r8d, eax
cmp dword [0x140099cc4], edx
mov ecx, ebx
mov ebx, r8d
cmovl ebx, eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, r14
mov r10, rdi
mov rdi, r12
jmp 0x14007e8e2
imul eax, dword [0x140097f90], 0xee5d6e52
imul ecx, dword [0x140097f8c], 0xd781d855
add eax, ecx
add eax, 0x67568d20
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x140097f98], 0x62718fea
imul edx, dword [0x140097f94], 0x61e90af
add ecx, edx
add ecx, 0x2d580fd7
and ecx, eax
mov eax, dword [0x140097fa0]
mov edx, dword [0x140097f9c]
shrd eax, edx, 0x18
mov edx, dword [0x140097fa8]
mov r8d, dword [0x140097fa4]
shrd edx, r8d, 0xe
xor eax, 0x4bd443d2
xor edx, 0xc8511c05
imul r8d, dword [0x140097fac], 0x801f0496
imul r9d, dword [0x140097fb0], 0xb8b5de00
mov r14d, r13d
mov r13, r10
imul r10d, dword [0x140097fb4], 0x5cfabc1b
mov rdi, r11
imul r11d, dword [0x140097fb8], 0xe377433
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x31c30248]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x3c16cc05]
cmove ecx, eax
cmp dword [0x140099cc4], edx
mov edx, ebx
mov ebx, ecx
cmovl ebx, eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r14b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, r13
mov r11, rdi
mov rdi, r12
mov r12, qword [rbp - 0x30]
jmp 0x14007eb79
mov eax, dword [0x140098298]
mov rdx, rcx
mov ecx, dword [0x140098294]
shrd eax, ecx, 0x13
xor eax, 0xee110b33
add dword [r8], eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, rdx
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, ebx
mov ebx, 0x255f1d67
jmp 0x14007b261
imul eax, dword [0x140097cc4], 0x7df37c00
imul ecx, dword [0x140097cc0], 0xc2dabe47
add eax, ecx
add eax, 0xb792e96b
imul ecx, dword [0x140097ccc], 0x3c46a586
imul edx, dword [0x140097cc8], 0xb61641b2
add ecx, edx
add ecx, 0x1643b277
test r13b, 1
jmp 0x14007d8bb
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov ebx, 0x949f9205
jmp 0x14007b261
imul eax, dword [0x140097ec8], 0xee9c6ffe
imul ecx, dword [0x140097ec4], 0xa1c964f0
add eax, ecx
add eax, 0x38aa6b97
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140097ed0]
mov edx, dword [0x140097ecc]
shrd ecx, edx, 0x11
xor ecx, 0x5525b2a
and ecx, eax
imul eax, dword [0x140097ed8], 0x375a0514
imul edx, dword [0x140097ed4], 0xb97f6c85
add eax, edx
add eax, 0xea505971
mov edx, dword [0x140097ef0]
mov r8d, dword [0x140097eec]
shrd edx, r8d, 1
xor edx, 0x8adf3664
imul r8d, dword [0x140097edc], 0x6ac57742
imul r9d, dword [0x140097ee0], 0xc5b2722f
mov r14d, r13d
mov r13, r10
imul r10d, dword [0x140097ee4], 0x18c33a61
mov rdi, r11
imul r11d, dword [0x140097ee8], 0xf8d45531
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0xf17db3b]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x5edd224d]
jmp 0x14007e410
imul eax, dword [0x140097b94], 0x13024423
imul ecx, dword [0x140097b90], 0xa8d280d0
add eax, ecx
add eax, 0xc78f5ef4
mov ecx, dword [0x140097b9c]
mov edx, dword [0x140097b98]
shrd ecx, edx, 0xa
xor ecx, 0x438ae812
test r9b, 1
mov edx, ebx
mov ebx, ecx
cmovne ebx, eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
jmp 0x14007eb73
mov rcx, qword [rsi]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ZwClose]
add rsp, 0x20
mov rax, qword [0x1400981e8]
movabs rcx, 0x68b4a04960c3a8c
imul rax, rcx
mov rcx, qword [0x1400981f0]
movabs rdx, 0x955d2dd90b7f6128
imul rcx, rdx
add rcx, rax
movabs rax, 0x57aef28651249990
add rcx, rax
mov qword [r12], rcx
movabs rax, 0xfffff78000000014
mov rax, qword [rax]
mov qword [r12], rax
sub rsp, 0x20
mov rcx, r12
call fcn.14000428b
add rsp, 0x20
mov dword [0x140099e78], eax
mov eax, dword [0x1400981f8]
mov ecx, dword [0x1400981fc]
shrd ecx, eax, 7
mov r8d, ecx
imul eax, dword [0x140098200], 0x2c44fdc1
imul ecx, dword [0x140098204], 0x44629188
xor r8d, 0x32b6adcd
add eax, ecx
add eax, 0x6e31da01
sub rsp, 0x30
mov dword [rsp + 0x20], eax
lea rcx, [0x140088e00]
lea rdx, [0x140088e64]
lea r9, [0x140099e78]
call fcn.1400155d9
add rsp, 0x10
mov r8d, 0x1fe
mov r12, qword [rbp - 0x48]
mov rcx, r12
lea rdx, [0x140088e80]
call fcn.140089300
add rsp, 0x20
mov rax, qword [0x140098208]
mov rcx, qword [0x140098210]
shrd rcx, rax, 0x2a
mov rdx, rcx
movabs rax, 0xd03dced420bf2d47
xor rdx, rax
sub rsp, 0x20
mov rcx, r12
call fcn.140002ee0
mov r8d, 0x1fe
mov rbx, qword [rbp - 0x50]
mov rcx, rbx
xor edx, edx
call fcn.140089200
add rsp, 0x20
mov rax, qword [0x140098218]
mov rcx, qword [0x140098220]
shrd rcx, rax, 0x26
mov rdx, rcx
movabs rax, 0x965413a653bde084
xor rdx, rax
sub rsp, 0x20
mov rcx, rbx
lea r8, [0x14008907e]
mov r9, r12
call fcn.14007ebda
lea rcx, [0x140099e60]
mov rdx, rbx
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
mov eax, dword [0x140098228]
mov ecx, dword [0x14009822c]
shrd ecx, eax, 1
xor ecx, 0x40619702
mov rax, qword [0x140098230]
movabs rdx, 0x1b59a50bec5c2775
imul rax, rdx
mov rdx, qword [0x140098238]
movabs r8, 0xbae8d42cb520895a
imul rdx, r8
add rdx, rax
movabs rax, 0x1cb0cfc368a5b333
add rdx, rax
mov eax, dword [0x140098240]
mov r8d, dword [0x140098244]
shrd r8d, eax, 0x15
xor r8d, 0xc457fc5b
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
add rsp, 0x20
mov qword [0x140099e70], rax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, rbx
mov r11, r12
mov rdi, qword [rbp - 0x68]
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, dword [rbp - 0x1c]
mov ebx, 0xa348c5be
jmp 0x14007b261
mov eax, dword [r14]
mov dword [rcx], eax
imul eax, dword [0x140097bd4], 0x9d921280
imul ecx, dword [0x140097bd0], 0x2157c128
add eax, ecx
add eax, 0x5c2d65af
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140097bdc]
mov edx, dword [0x140097bd8]
shrd ecx, edx, 7
xor ecx, 0x4c82b3fb
and ecx, eax
mov eax, dword [0x140097be4]
mov edx, dword [0x140097be0]
shrd eax, edx, 0xf
mov edx, dword [0x140097bf4]
mov qword [rbp - 0x40], r8
mov r8d, dword [0x140097bf0]
shrd edx, r8d, 0x1f
xor eax, 0x64b0066c
xor edx, 0x74b8eb06
imul r8d, dword [0x140097be8], 0x8d9d8841
mov byte [rbp - 0x16], r9b
imul r9d, dword [0x140097bec], 0x82932d94
mov qword [rbp - 0x50], r10
imul r10d, dword [0x140097bf8], 0x49b96150
mov qword [rbp - 0x48], r11
imul r11d, dword [0x140097bfc], 0xcf1b264b
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x3818f3d6]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x71b7213d]
cmove ecx, edx
cmp dword [0x140099cc4], eax
mov ebx, ecx
cmovl ebx, edx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov r12, r14
jmp 0x14007cb23
mov r12, rcx
mov rcx, qword [0x140099e58]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
add rsp, 0x20
mov eax, dword [r14]
mov dword [r12], eax
imul eax, dword [0x140097ef8], 0x1c904800
imul ecx, dword [0x140097ef4], 0xebba77cc
add eax, ecx
add eax, 0x979a811b
mov ecx, dword [0x140099cc0]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x140097f00]
mov edx, dword [0x140097efc]
shrd ecx, edx, 0x18
xor ecx, 0x29f0c3be
and ecx, eax
imul eax, dword [0x140097f08], 0xb2abfa3e
imul edx, dword [0x140097f04], 0x65ff32ef
add eax, edx
add eax, 0xc107365d
mov edx, dword [0x140097f18]
mov r8d, dword [0x140097f14]
shrd edx, r8d, 0x13
mov r8d, dword [0x140097f20]
mov r9d, dword [0x140097f1c]
shrd r8d, r9d, 0xe
xor edx, 0x9700b0eb
imul r9d, dword [0x140097f0c], 0xd6481eec
xor r8d, 0xf65a395a
imul r10d, dword [0x140097f10], 0xd62669c9
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax - 0x7321758e]
cmove r8d, edx
cmp dword [0x140099cc4], eax
mov ecx, ebx
mov ebx, r8d
cmovl ebx, edx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x68]
mov r12, r14
jmp 0x14007e8e6
mov rcx, qword [0x140099e70]
sub rsp, 0x20
mov r8d, 0x1000
xor edx, edx
mov r14, r11
call fcn.140089200
mov r8d, 0x1fe
mov rcx, rdi
xor edx, edx
call fcn.140089200
add rsp, 0x20
mov rax, qword [0x140098250]
movabs rcx, 0x556e59e93f31fa0b
imul rax, rcx
mov rcx, qword [0x140098258]
movabs rdx, 0xf2f9fd6ec5e9cd78
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xe673207f9ec9c9ba
add rdx, rax
sub rsp, 0x20
mov rcx, rdi
lea r8, [0x140089096]
mov r9, r14
call fcn.14007ebda
add rsp, 0x20
mov rcx, qword [0x140099e70]
sub rsp, 0x20
mov rdx, rdi
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x140098260], 0xc620ffec
imul ecx, dword [0x140098264], 0x37dc1840
lea r8d, [rax + rcx]
add r8d, 0x3373e411
mov eax, dword [0x140098268]
mov ecx, dword [0x14009826c]
shrd ecx, eax, 0x19
xor ecx, 0xe1c1f03a
sub rsp, 0x30
mov dword [rsp + 0x20], ecx
lea rcx, [0x140088e00]
lea rdx, [0x1400890b6]
mov r9, r14
call fcn.1400155d9
add rsp, 0x30
mov r14, qword [rbp - 0x28]
mov rcx, qword [r14]
mov eax, dword [0x140098270]
mov edx, dword [0x140098274]
shrd edx, eax, 0x18
mov eax, dword [0x140098278]
mov r8d, dword [0x14009827c]
shrd r8d, eax, 0x1a
xor edx, 0x3da6a71e
mov r9d, r8d
xor r9d, 0xcfc8cd02
mov eax, dword [0x140098280]
mov r8d, dword [0x140098284]
shrd r8d, eax, 0x1b
xor r8d, 0xe3177d8a
mov al, byte [0x140098288]
mov r10b, byte [0x140098289]
shr r10b, 7
add al, al
or al, r10b
xor al, 0x11
sub rsp, 0x40
lea r10, [0x140099e58]
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x20], r8d
mov byte [rsp + 0x28], al
lea r8, [0x140099e60]
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
add rsp, 0x40
mov rcx, qword [rbp - 0x30]
mov dword [rcx], eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov r12, rcx
mov r15, r14
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, ebx
mov ebx, 0x304cefed
jmp 0x14007b261
mov rcx, qword [0x140099e70]
sub rsp, 0x20
lea rdx, [0x140099e60]
call qword [sym.imp.ntoskrnl.exe_IoCreateSymbolicLink]
add rsp, 0x20
mov dword [r14], eax
mov ecx, dword [0x140097e80]
mov edx, dword [0x140097e7c]
shrd ecx, edx, 5
xor ecx, 0x8f918b45
cmp eax, ecx
mov eax, dword [0x140097e88]
mov r11d, r13d
setg r13b
mov ecx, dword [0x140097e84]
shrd eax, ecx, 0x11
mov edx, dword [0x140097e90]
mov ecx, dword [0x140097e8c]
shrd edx, ecx, 9
mov ecx, dword [0x140097e98]
mov r8d, dword [0x140097e94]
shrd ecx, r8d, 8
mov r8d, dword [0x140097ea0]
mov r9d, dword [0x140097e9c]
shrd r8d, r9d, 5
mov r9d, dword [0x140097ea8]
mov r10d, dword [0x140097ea4]
shrd r9d, r10d, 2
mov r10d, dword [0x140099cc0]
xor eax, r10d
xor eax, 0x739f4960
imul eax, r10d
xor edx, 0xd226ea42
and edx, eax
mov eax, dword [0x140097eb0]
mov r10d, dword [0x140097eac]
shrd eax, r10d, 1
xor ecx, 0x1137db4e
xor r8d, 0xe0ccf713
xor r9d, 0xccf8eb0c
xor eax, 0x9d9b2e7f
cmp edx, ecx
cmove eax, r9d
cmp dword [0x140099cc4], r8d
mov ecx, ebx
mov ebx, eax
cmovl ebx, r9d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r11b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov al, byte [rbp - 0x15]
jmp 0x14007b261
imul eax, dword [0x140098194], 0xcf284999
imul ecx, dword [0x140098198], 0x9cc7ed29
add eax, ecx
add eax, 0xc9a29ad8
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rcx, rsp
imul eax, dword [0x14009819c], 0x3ca8eba9
imul edx, dword [0x1400981a0], 0xf51d1d25
add eax, edx
add eax, 0xd63964e5
shl rax, 4
lea rax, [rax + rax*2]
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r8, rsp
imul eax, dword [0x1400981a4], 0x195297a5
imul edx, dword [0x1400981a8], 0x9525c4c9
add eax, edx
add eax, 0x2470e6a7
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r10, rsp
imul eax, dword [0x1400981ac], 0xe72c11fa
imul edx, dword [0x1400981b0], 0xb8f5d1b2
add eax, edx
add eax, 0x57e10b63
shl rax, 4
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
movzx edx, word [0x1400981b4]
movzx r9d, word [0x1400981b6]
imul edx, edx, 0x237c
imul r9d, r9d, 0x6b9a
add edx, r9d
add edx, 0xffffcdae
mov word [rax], dx
movzx edx, word [0x1400981b8]
movzx r9d, word [0x1400981ba]
imul edx, edx, 0x2864
imul r9d, r9d, 0x3d88
add edx, r9d
add edx, 0xffff9f40
mov word [rax + 2], dx
lea rdx, [0x140088e00]
mov qword [rax + 8], rdx
mov edx, dword [0x1400981bc]
mov r9d, dword [0x1400981c0]
shrd r9d, edx, 3
xor r9d, 0xc69fec01
mov dword [r8], r9d
xor r11d, r11d
imul edx, dword [0x1400981c4], 0x18f5450d
imul r9d, dword [0x1400981c8], 0x39d364de
mov qword [r8 + 8], r11
add edx, r9d
add edx, 0xa346407c
mov dword [r8 + 0x18], edx
mov qword [r8 + 0x10], rax
imul eax, dword [0x1400981cc], 0xc6788f03
imul edx, dword [0x1400981d0], 0x3d89b57a
imul r9d, dword [0x1400981d4], 0x5df5da3d
imul esi, dword [0x1400981d8], 0x8a4441f8
add edx, eax
add edx, 0x7264dc1d
mov eax, esi
add r9d, eax
add r9d, 0x7afa43d2
imul eax, dword [0x1400981dc], 0x7b489bc7
imul esi, dword [0x1400981e0], 0x5c0102e5
movups xmmword [r8 + 0x20], xmm6
add eax, esi
add eax, 0xa6f5451a
sub rsp, 0x40
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r11
call qword [sym.imp.ntoskrnl.exe_ZwCreateKey]
add rsp, 0x40
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov rsi, qword [rbp - 0x60]
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, ebx
mov ebx, 0x9d085ee4
jmp 0x14007b261
mov r14, qword [rbp - 0x28]
mov rax, qword [r14]
movsxd rcx, dword [r8]
lea rdx, [0x14007fcc7]
mov qword [rax + rcx*8 + 0x70], rdx
mov eax, dword [0x140098040]
mov ecx, dword [0x14009803c]
shrd eax, ecx, 7
imul ecx, dword [0x140098038], 0x9a7797e8
imul edx, dword [0x140098034], 0xb688b473
add ecx, edx
add ecx, 0xf95c11b9
mov edx, dword [0x140098048]
mov r8d, dword [0x140098044]
shrd edx, r8d, 0x1a
mov r8d, dword [0x140098050]
mov r9d, dword [0x14009804c]
shrd r8d, r9d, 0x15
mov r9d, dword [0x140098058]
mov r10d, dword [0x140098054]
shrd r9d, r10d, 0x11
mov r10d, dword [0x140099cc0]
xor ecx, r10d
imul ecx, r10d
xor eax, 0xbf452e31
and eax, ecx
xor edx, 0xb3ed1f18
xor r8d, 0x27168753
imul ecx, dword [0x14009805c], 0xe6131582
xor r9d, 0xce772dba
imul r10d, dword [0x140098060], 0x1f0b55f
cmp eax, edx
mov eax, r10d
lea eax, [rcx + rax + 0xfccd21f]
cmove eax, r9d
cmp dword [0x140099cc4], r8d
mov ecx, ebx
mov ebx, eax
cmovl ebx, r9d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov rdi, r12
mov r12, qword [rbp - 0x30]
mov r15, r14
jmp 0x14007e8ea
imul eax, dword [0x140098098], 0x3f817c3e
imul ecx, dword [0x140098094], 0x4c6796e
add eax, ecx
mov ecx, dword [r8]
add eax, ecx
add eax, 0xd870e7d1
mov dword [r8], eax
mov eax, dword [0x1400980a0]
mov ecx, dword [0x14009809c]
shrd eax, ecx, 0x1d
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0xdc52d794
imul eax, ecx
mov ecx, dword [str.e_._v_.]
mov edx, dword [0x1400980a4]
shrd ecx, edx, 0xe
xor ecx, 0xe8c330b9
and ecx, eax
imul eax, dword [0x1400980b0], 0xeeccb57a
imul edx, dword [0x1400980ac], 0x9cfcb706
add eax, edx
add eax, 0x8f7f3c9a
mov edx, dword [0x1400980c8]
mov r8d, dword [0x1400980c4]
shrd edx, r8d, 0x17
xor edx, 0xe2ac79ae
imul r8d, dword [0x1400980b4], 0xfd29b7e3
imul r9d, dword [0x1400980b8], 0xb4320dd9
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x30], r14
mov r14d, r13d
mov r13, r10
imul r10d, dword [0x1400980bc], 0x711dcc4a
mov rdi, r11
imul r11d, dword [0x1400980c0], 0xb1ec24a6
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x655d1f79]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x74658b61]
cmove edx, ecx
cmp dword [0x140099cc4], eax
cmovl edx, ecx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r14b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, r13
mov r11, rdi
mov rdi, r12
mov r12, qword [rbp - 0x30]
jmp 0x14007e9f4
mov edx, eax
mov eax, dword [0x14009824c]
mov r14, rcx
mov ecx, dword [0x140098248]
shrd eax, ecx, 0x14
xor eax, 0xdf05252b
mov dword [r14], eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, rbx
mov r15, qword [rbp - 0x28]
mov r13b, byte [rbp - 0x14]
mov eax, edx
mov ecx, dword [rbp - 0x1c]
mov ebx, 0xa17139dd
jmp 0x14007b261
mov byte [rbp - 0x15], al
mov qword [rbp - 0x30], r14
mov r14, qword [rbp - 0x28]
mov rax, qword [r14]
mov qword [rbp - 0x38], rcx
movsxd rcx, dword [r8]
lea rdx, [0x14007fcc7]
mov qword [rax + rcx*8 + 0x70], rdx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, qword [rbp - 0x30]
mov r15, r14
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, ebx
mov ebx, 0x477185ef
jmp 0x14007b261
mov eax, dword [0x140098008]
mov ecx, dword [0x140098004]
shrd eax, ecx, 0xa
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0x5f1e0e2a
imul eax, ecx
mov ecx, dword [0x140098010]
mov edx, dword [0x14009800c]
shrd ecx, edx, 0x10
xor ecx, 0xcb2ffbb9
and ecx, eax
mov eax, dword [0x140098018]
mov edx, dword [0x140098014]
shrd eax, edx, 5
mov edx, dword [0x140098028]
mov r8d, dword [0x140098024]
shrd edx, r8d, 0x18
xor eax, 0xb0cf948
xor edx, 0xea82aacf
imul r8d, dword [0x14009801c], 0xee5eae75
imul r9d, dword [0x140098020], 0xe968f10d
mov r14d, r13d
mov r13, r10
imul r10d, dword [0x14009802c], 0x155f2a16
mov rdi, r11
imul r11d, dword [0x140098030], 0x53996baa
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x1d1cdb16]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x2df21733]
cmove ecx, edx
cmp dword [0x140099cc4], eax
mov ebx, ecx
cmovl ebx, edx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r14b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x58]
mov r10, r13
mov r11, rdi
mov rdi, r12
jmp 0x14007cb1f
mov rcx, qword [rsi]
sub rsp, 0x20
mov r13, r11
mov r14, r10
call qword [sym.imp.ntoskrnl.exe_ZwClose]
add rsp, 0x20
mov rax, qword [0x140097c30]
mov rcx, qword [0x140097c38]
shrd rcx, rax, 0x28
movabs rax, 0xe79a226aef19f22d
xor rcx, rax
mov qword [r12], rcx
movabs rax, 0xfffff78000000014
mov rax, qword [rax]
mov qword [r12], rax
sub rsp, 0x20
mov rcx, r12
call fcn.14000428b
add rsp, 0x20
mov dword [0x140099e78], eax
mov eax, dword [0x140097c40]
mov ecx, dword [0x140097c44]
shrd ecx, eax, 0x16
mov r8d, ecx
xor r8d, 0xa5a8716d
mov eax, dword [0x140097c48]
mov ecx, dword [0x140097c4c]
shrd ecx, eax, 0x15
xor ecx, 0xcf61f6e7
sub rsp, 0x30
mov dword [rsp + 0x20], ecx
lea rcx, [0x140088e00]
lea rdx, [0x140088e64]
lea r9, [0x140099e78]
call fcn.1400155d9
add rsp, 0x10
mov r8d, 0x1fe
mov rcx, r13
lea rdx, [0x140088e80]
call fcn.140089300
add rsp, 0x20
mov rax, qword [0x140097c50]
movabs rcx, 0xba08caf5d067ca03
imul rax, rcx
mov rcx, qword [0x140097c58]
movabs rdx, 0x312e3c9ca1ac6ddd
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xc64594026dfebcbf
add rdx, rax
sub rsp, 0x20
mov rcx, r13
call fcn.140002ee0
mov r8d, 0x1fe
mov rcx, r14
xor edx, edx
call fcn.140089200
add rsp, 0x20
mov rax, qword [0x140097c60]
movabs rcx, 0xb9e761efec32393c
imul rax, rcx
mov rcx, qword [0x140097c68]
movabs rdx, 0x5045caa8a89fddb6
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xf0e8daf76fb0f7d0
add rdx, rax
sub rsp, 0x20
mov rcx, r14
lea r8, [0x14008907e]
mov r9, r13
call fcn.14007ebda
lea rcx, [0x140099e60]
mov rdx, r14
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x140097c70], 0x6560f6c
imul ecx, dword [0x140097c74], 0xc9261ee7
add ecx, eax
add ecx, 0xa3d61d91
mov rax, qword [0x140097c78]
movabs rdx, 0xbaaeb85a04e78600
imul rax, rdx
mov rdx, qword [0x140097c80]
movabs r8, 0xd823787226014164
imul rdx, r8
add rdx, rax
movabs rax, 0x90bf26184851b1dc
add rdx, rax
mov eax, dword [0x140097c88]
mov r8d, dword [0x140097c8c]
shrd r8d, eax, 0x12
xor r8d, 0xabd2f04c
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
add rsp, 0x20
mov rcx, rax
test rax, rax
setne r14b
imul edx, dword [0x140097c94], 0x5c05609e
imul r8d, dword [0x140097c90], 0xece2f0d3
add edx, r8d
add edx, 0x406f4787
mov r8d, dword [0x140099cc0]
xor edx, r8d
imul edx, r8d
mov r8d, dword [0x140097c9c]
mov r9d, dword [0x140097c98]
shrd r8d, r9d, 0xa
xor r8d, 0xc87d0c98
and r8d, edx
imul edx, dword [0x140097ca4], 0xb2566cc5
imul r9d, dword [0x140097ca0], 0x61fa3f35
add edx, r9d
add edx, 0x1f12e743
mov r9d, dword [0x140097cac]
mov r10d, dword [0x140097ca8]
shrd r9d, r10d, 0x1e
mov r10d, dword [0x140097cbc]
mov r11d, dword [0x140097cb8]
shrd r10d, r11d, 0x1b
xor r9d, 0xf0c21e8b
imul r11d, dword [0x140097cb0], 0xc4967443
xor r10d, 0xd4881520
mov rax, rsi
imul esi, dword [0x140097cb4], 0x178de4a8
cmp r8d, edx
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx - 0x351c5b9b]
cmove r10d, edx
cmp dword [0x140099cc4], r9d
mov qword [0x140099e70], rcx
mov ecx, ebx
mov ebx, r10d
cmovl ebx, edx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r14b
mov dl, byte [rbp - 0x16]
mov byte [rbp - 0x11], dl
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, r13
mov rdi, r12
mov rsi, rax
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
jmp 0x14007b261
mov byte [rbp - 0x15], al
mov eax, dword [0x140097c04]
mov qword [rbp - 0x38], rcx
mov ecx, dword [0x140097c00]
shrd eax, ecx, 0x19
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0x997aa028
imul eax, ecx
mov ecx, dword [0x140097c0c]
mov edx, dword [0x140097c08]
shrd ecx, edx, 0x13
xor ecx, 0xf93a33d2
and ecx, eax
imul eax, dword [0x140097c14], 0x7b2a52d7
imul edx, dword [0x140097c10], 0x76e0d6d0
add eax, edx
add eax, 0xfba5a70f
mov edx, dword [0x140097c2c]
mov qword [rbp - 0x40], r8
mov r8d, dword [0x140097c28]
shrd edx, r8d, 0xe
xor edx, 0x32f7c138
imul r8d, dword [str.fdfu], 0x4d493f5a
mov byte [rbp - 0x16], r9b
imul r9d, dword [0x140097c1c], 0x8896488b
mov qword [rbp - 0x50], r10
imul r10d, dword [0x140097c20], 0x8a75680e
mov qword [rbp - 0x48], r11
imul r11d, dword [0x140097c24], 0x12ae7d8e
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x2b132882]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x1c81cac8]
cmove edx, ecx
cmp dword [0x140099cc4], eax
cmovl edx, ecx
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, ebx
mov ebx, edx
jmp 0x14007b261
imul eax, dword [0x140097eb8], 0xe8da860d
imul ecx, dword [0x140097eb4], 0x2fee2e07
lea r14d, [rcx + rax]
add r14d, 0xb1a0c719
imul ecx, dword [0x140097ec0], 0x11d65902
imul edx, dword [0x140097ebc], 0x1cbbfdbc
add ecx, edx
add ecx, 0x16c4b544
mov al, byte [rbp - 0x14]
test al, 1
mov edx, ebx
mov ebx, ecx
cmovne ebx, r14d
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13d, eax
jmp 0x14007eb85
mov eax, dword [0x140097d04]
mov rdx, rcx
mov ecx, dword [0x140097d00]
shrd eax, ecx, 4
xor eax, 0xb4076cf5
mov dword [rdx], eax
mov eax, dword [0x140097d0c]
mov ecx, dword [0x140097d08]
shrd eax, ecx, 8
mov ecx, dword [0x140099cc0]
xor eax, ecx
xor eax, 0x7790f5cb
imul eax, ecx
mov ecx, dword [0x140097d14]
mov edx, dword [0x140097d10]
shrd ecx, edx, 0x19
xor ecx, 0x9d383fba
and ecx, eax
mov eax, dword [0x140097d1c]
mov edx, dword [0x140097d18]
shrd eax, edx, 0x13
mov edx, dword [0x140097d24]
mov r8d, dword [0x140097d20]
shrd edx, r8d, 3
xor eax, 0x5572495d
xor edx, 0x6e4f0675
imul r8d, dword [0x140097d28], 0xa0f405d1
imul r9d, dword [0x140097d2c], 0xcf7ffaa1
imul r10d, dword [0x140097d30], 0xf37f2f5d
mov qword [rbp - 0x48], r11
imul r11d, dword [0x140097d34], 0x5129e41d
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x803557b]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x317f8ac0]
cmove ecx, eax
cmp dword [0x140099cc4], edx
mov edx, ebx
mov ebx, ecx
cmovl ebx, eax
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x40]
mov r9, rdi
mov r10, qword [rbp - 0x50]
mov r11, qword [rbp - 0x48]
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, qword [rbp - 0x38]
mov r13b, byte [rbp - 0x14]
mov al, byte [rbp - 0x15]
mov ecx, edx
jmp 0x14007b261
mov byte [rbp - 0x13], r15b
mov byte [rbp - 0x12], r13b
mov byte [rbp - 0x11], r9b
mov r9, rdi
mov rdi, r12
mov r12, r14
mov r15, qword [rbp - 0x28]
mov r14, rcx
mov r13b, byte [rbp - 0x14]
mov ecx, ebx
mov dword [rbp - 0x1c], ebx
mov ebx, edx
cmp edx, 0xe47b88fa
jne 0x14007b261
mov eax, dword [rbp - 0x1c]
movups xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret