Function at 0x140002070
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x318
mov ecx, 5
call fcn.140033360
lea rax, [0x14280ea9f]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc5d569383608cc67
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036800
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x142822100]
mov edx, 0x1d
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r12, rax
xor bl, 0x83
xor esi, 0x5c5ef959
movabs rax, 0xeee2cdd58adb176e
xor rdi, rax
movabs rax, 0xa92dacf71c308887
xor r14, rax
movabs rax, 0xa31fc97f0af7c3d9
xor r15, rax
mov qword [r12], r15
mov qword [r12 + 8], r14
mov qword [r12 + 0x10], rdi
mov dword [r12 + 0x18], esi
mov byte [r12 + 0x1c], bl
lea rcx, [rsp + 0x50]
mov r8d, 0x1d
mov rdx, r12
call fcn.140033940
cmp dword [rsp + 0x50], 2
jne 0x140004d19
mov rsi, qword [rsp + 0x58]
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400021bd
test rax, rax
je 0x1400021bd
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x140002186
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x1400021ac
cmp qword [rbx + 0x10], 0x11
jb 0x14000219b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x14280a47d]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xb66e8870a4cc239a
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035ae0
movabs rcx, 0x8910a77fea78cd74
xor rcx, qword [rax]
movabs rdx, 0x40e729f7221e3980
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x7b
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov byte [rsp + 0x150], al
lea rax, [rsp + 0x151]
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x120]
lea rsi, [rsp + 0x50]
mov rdx, rsi
call fcn.14003c560
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x158], 0
mov rdi, qword [rsp + 0x128]
lea r15, [rsp + 0x158]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebx, eax
test eax, eax
je 0x1400023e4
mov rsi, rbx
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x120], 0
je 0x1400022f4
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
je 0x1400023fd
lea rax, [0x14280b500]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa61fc8de5cd8e430
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400360f0
movabs rcx, 0x32233e44599a822b
xor rcx, qword [rax]
movabs rdx, 0xd1a39874e8990291
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x62
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], rdx
mov byte [rsp + 0x168], al
lea rax, [rsp + 0x169]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x120]
lea rbx, [rsp + 0x50]
mov rdx, rbx
call fcn.14003c560
mov qword [rsp + 0x50], 0
mov rdi, qword [rsp + 0x128]
mov qword [rsp + 0x20], rbx
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
mov r9d, 2
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebx, eax
test eax, eax
jne 0x14000240d
mov r14, qword [rsp + 0x50]
cmp qword [rsp + 0x120], 0
jne 0x140002423
jmp 0x140002434
mov rsi, qword [rsp + 0x50]
cmp qword [rsp + 0x120], 0
jne 0x1400022e3
jmp 0x1400022f4
mov qword [rsp + 0x188], rsi
mov r14, rsi
jmp 0x1400024ac
mov r14, rbx
shl r14, 0x20
or r14, 2
cmp qword [rsp + 0x120], 0
je 0x140002434
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
jne 0x140004d17
mov qword [rsp + 0x188], r14
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400024ac
test rax, rax
je 0x1400024ac
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000246d
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x140002493
cmp qword [rbx + 0x10], 0x11
jb 0x140002482
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsp + 0x188]
mov qword [rsp + 0x2c8], r12
lea rax, [0x14280a30b]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf3c559075246503
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035d00
mov ecx, 0x6e2e03d2
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xf8
mov dword [rsp + 0x158], ecx
mov byte [rsp + 0x15c], al
lea rax, [rsp + 0x15d]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x50]
mov rdi, rcx
call fcn.14003c560
mov dword [rsp + 0x178], 0x800
mov dword [rsp + 0x140], 0
movzx eax, byte [0x142822100]
mov edx, 0x800
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r15, rax
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x50], 0x800
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0
mov r12, qword [rsp + 0x128]
mov rbp, qword [rsp + 0x50]
mov r13, qword [rsp + 0x60]
sub rbp, r13
nop word cs:[rax + rax]
lea rax, [rsp + 0x178]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, r12
xor r8d, r8d
lea r9, [rsp + 0x140]
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x140002600
mov r8d, dword [rsp + 0x178]
cmp rbp, r8
jae 0x1400025b0
lea rcx, [rsp + 0x50]
mov rdx, r13
call fcn.14003bb60
mov r15, qword [rsp + 0x58]
jmp 0x140002597
mov ebx, eax
test eax, eax
jne 0x140002671
movabs rbx, 0xde00000002
mov r15d, dword [rsp + 0x178]
mov qword [rsp + 0x60], r15
mov r12d, dword [rsp + 0x140]
cmp r12d, 0xb
mov r13, rsi
ja 0x14000267c
mov rbp, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
cmp qword [rsp + 0x120], 0
mov rsi, rdi
je 0x14000265c
mov r8, qword [rsp + 0x128]
mov rcx, qword [0x1428220c8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp rbp, r13
jne 0x1400026c5
mov rbx, r14
lea r15, [rsp + 0x158]
jmp 0x140002718
shl rbx, 0x20
or rbx, 2
mov r13, rsi
mov rsi, rdi
cmp qword [rsp + 0x50], 0
lea r15, [rsp + 0x158]
je 0x1400026a2
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x1428220c8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x120], 0
je 0x140002718
mov r8, qword [rsp + 0x128]
mov rcx, qword [0x1428220c8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140002718
cmp r12b, 5
je 0x1400026d4
movzx eax, r12b
cmp eax, 4
jne 0x1400026ee
cmp r15d, 4
jne 0x1400026df
mov r15b, 1
jmp 0x1400026f1
xor r15d, r15d
movabs rbx, 0xd00000002
jmp 0x1400026f1
xor r15d, r15d
test rbp, rbp
je 0x140002707
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test r15b, r15b
lea r15, [rsp + 0x158]
jne 0x140004d1e
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140002778
test rax, rax
je 0x140002778
mov rdi, qword [rbx - 1]
mov r14, qword [rbx + 7]
mov rax, qword [r14]
test rax, rax
je 0x140002741
mov rcx, rdi
call rax
dec rbx
cmp qword [r14 + 8], 0
je 0x140002767
cmp qword [r14 + 0x10], 0x11
jb 0x140002756
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x142813bc7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x130f6a0bd87e1df6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036500
movabs rcx, 0xf167f503c33f6e1d
xor rcx, qword [rax]
mov edx, 0xf735cee0
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x14
xor r9b, 0xdb
xor r8b, 0xd4
mov qword [rsp + 0x140], rcx
mov dword [rsp + 0x148], edx
mov byte [rsp + 0x14c], al
mov byte [rsp + 0x14d], r9b
mov byte [rsp + 0x14e], r8b
lea rax, [rsp + 0x140]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], 0xf
mov qword [rsp + 0x158], rsi
lea rax, [0x140040630]
mov qword [rsp + 0x160], rax
lea rax, [0x14281bd50]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.14002a7d0
lea rax, [0x1428140f0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7014eaf3d501b1ff
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035840
mov ecx, 0x1dae2266
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x77
mov dword [rsp + 0x50], ecx
mov byte [rsp + 0x54], al
lea r9, [0x142816f0c]
lea rcx, [rsp + 0x188]
lea rdx, [rsp + 0x50]
mov r8d, 5
call fcn.140040670
test rax, rax
jne 0x140004d17
movabs rax, 0xffffffff7fffffff
mov rcx, qword [rsp + 0x188]
cmp rcx, rax
ja 0x1400028f7
call sub.ADVAPI32.dll_RegCloseKey
lea rax, [0x1428112d4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xff17700a5c08bf96
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035e90
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xa
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov ecx, esi
shr ecx, 8
xor cl, 0xd1
xor sil, 0xae
movabs rdx, 0x4b470958430eed0f
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xa
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
mov qword [rsp + 0x88], r13
mov word [rsp + 0x114], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x110], 0x8000000
lea rax, [0x14280a91d]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x32a5dd3953367bb
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140035a20
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x142822100]
mov edx, 0x1c
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov rsi, rax
lea rcx, [rsp + 0x70]
xor edi, 0xa5607154
movabs rax, 0xfcef8d746ac2609c
xor rbx, rax
movabs rax, 0xd49be5d726180c1
xor r14, rax
movabs rax, 0x3edc47f0e1064da9
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.140029940
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0x50]
call fcn.140001450
mov ecx, 5
call fcn.140033360
lea rax, [0x14280d37e]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x432ed4ae69bb95d
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400358a0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xa
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov ecx, esi
shr ecx, 8
xor cl, 7
xor sil, 0xbf
movabs rdx, 0xa7d096da49322330
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xa
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
mov qword [rsp + 0x88], r13
mov word [rsp + 0x114], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x110], 0x8000000
lea rax, [0x14280a8f0]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xb7f59a802cf5a181
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140036550
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x142822100]
mov edx, 0x15
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov rsi, rax
lea rcx, [rsp + 0x70]
xor bl, 0xcb
xor edi, 0xb38a760e
movabs rax, 0x93cdf9b319c02ded
xor r14, rax
movabs rax, 0x7ce87de7e7da4a4e
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov dword [rsi + 0x10], edi
mov byte [rsi + 0x14], bl
call fcn.140029940
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0x50]
call fcn.140001450
mov ecx, 5
call fcn.140033360
lea rax, [0x142811bdd]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2e247894dbcb3e49
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036630
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142822100]
mov edx, 0x11
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r15, rax
movabs rax, 0xaad1efb34eda9b0e
xor rsi, rax
movabs rax, 0xf3336d8f0a5f1400
xor rdi, rax
xor bl, 0x20
mov qword [r15], rdi
mov qword [r15 + 8], rsi
mov byte [r15 + 0x10], bl
lea rax, [0x14280a665]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x50aee80699978b99
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036340
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r12, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x53
mov ecx, esi
shr ecx, 8
xor cl, 0xa
xor sil, 5
movabs rdx, 0x8b48b00189a29966
xor rdi, rdx
mov qword [r12], rdi
mov byte [r12 + 8], sil
mov byte [r12 + 9], cl
mov byte [r12 + 0xa], al
lea rax, [0x14280ffd9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x5f7cdb3d0671c322
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400358d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r13, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0xc4
mov ecx, esi
shr ecx, 8
xor cl, 0x29
xor sil, 0x26
movabs rdx, 0x9edb4e6da6a2ae7b
xor rdi, rdx
mov qword [r13], rdi
mov byte [r13 + 8], sil
mov byte [r13 + 9], cl
mov byte [r13 + 0xa], al
lea rax, [0x1428125b2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x6ba798d078539ec8
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400359f0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xa
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r14, rax
mov eax, esi
shr eax, 8
xor al, 0xb7
xor sil, 0xab
movabs rcx, 0xb829ec1e16a43f7b
xor rdi, rcx
mov qword [r14], rdi
mov byte [r14 + 8], sil
mov byte [r14 + 9], al
lea rax, [0x14280e98e]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xad0755daa935a32e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035be0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov rbp, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x23
mov ecx, esi
shr ecx, 8
xor cl, 0xf5
xor sil, 0x36
movabs rdx, 0xbeeb04cf1eda0ea8
xor rdi, rdx
mov qword [rbp], rdi
mov byte [rbp + 8], sil
mov byte [rbp + 9], cl
mov byte [rbp + 0xa], al
lea rax, [0x142816f21]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7076006cd148496e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035c90
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xa5
mov ecx, esi
shr ecx, 8
xor cl, 0x45
xor sil, 0x5f
movabs rdx, 0xf8d4a49cda8a4eb2
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x288], rax
mov byte [rax + 0xa], r8b
lea rax, [0x14281238d]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xbfd8e21c9b813c42
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035a50
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142822100]
mov edx, 0xd
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0x128ec09a
movabs rcx, 0x80992906f63c4e3b
xor rdi, rcx
xor bl, 0x54
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x280], rax
mov byte [rax + 0xc], bl
lea rax, [0x142813e7d]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa8850c10abd9af6b
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035d80
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xc
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x6027ea755932d159
xor rsi, rcx
xor edi, 0x30499ce1
mov qword [rax], rsi
mov qword [rsp + 0x278], rax
mov dword [rax + 8], edi
lea rax, [0x14280c690]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4d885bd1514176b4
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400367d0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142822100]
mov edx, 0xd
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0xab65512d
movabs rcx, 0xf9f059eb1de5f9e7
xor rdi, rcx
xor bl, 0x2d
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x270], rax
mov byte [rax + 0xc], bl
lea rax, [0x14280cc03]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4f967e43e5a1162e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400368e0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142822100]
mov edx, 0x12
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x9f4c8f65260ac844
xor rsi, rcx
movabs rcx, 0x844902cc2861a52e
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x2e
xor bl, 0x95
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x268], rax
mov byte [rax + 0x11], cl
lea rax, [0x142813b4b]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x944e7a90ee8e72e1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400364d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xa
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov edx, esi
shr edx, 8
xor dl, 0x1a
xor sil, 0x52
movabs rcx, 0x4981be098b8e5e2
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x260], rax
mov byte [rax + 9], dl
lea rax, [0x142810573]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc2323f220855bdf5
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036120
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xa
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov edx, esi
shr edx, 8
xor dl, 0x43
xor sil, 0xfa
movabs rcx, 0xd2101c75e4e2bf51
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x258], rax
mov byte [rax + 9], dl
lea rax, [0x142807c93]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x42a8412ea90e95f3
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400360c0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142822100]
mov edx, 0xd
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0x5673ce62
movabs rcx, 0x8e44e333b7c831ad
xor rdi, rcx
xor bl, 0x1d
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x250], rax
mov byte [rax + 0xc], bl
lea rax, [0x142808f62]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4ec382d22d4f87c1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035ff0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov qword [rsp + 0x290], rbp
mov qword [rsp + 0x180], r14
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 4
mov ecx, esi
shr ecx, 8
xor cl, 0xe1
xor sil, 0x99
movabs rdx, 0x91516898fb504211
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x248], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142816885]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x395221a403427659
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035790
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142822100]
mov edx, 0xd
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0x1cb617de
movabs rcx, 0xbb25180c2fe3861c
xor rdi, rcx
xor bl, 0xf8
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x240], rax
mov byte [rax + 0xc], bl
lea rax, [0x14280b10d]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x34efd3ee88cb95ea
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036190
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142822100]
mov edx, 0xf
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x72
mov ecx, esi
shr ecx, 8
xor cl, 0xf
xor sil, 0xbb
xor edi, 0x70dd95eb
movabs rdx, 0xe21beb35e7122895
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x238], rax
mov byte [rax + 0xe], r8b
lea rax, [0x14280ed07]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x8b20b20339a8e33c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035ab0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x142822100]
mov edx, 0x1c
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0x2284fd0
movabs rcx, 0xe783dbab6c35ae32
xor rdi, rcx
movabs rcx, 0x1ecf9672b06c088c
xor rbx, rcx
movabs rcx, 0x15fc65a8ef9c6171
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x230], rax
mov dword [rax + 0x18], esi
lea rax, [0x14280fb7b]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2be28b5c83ffc8fb
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400357c0
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x142822100]
mov edx, 0x19
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r14, rax
movabs rax, 0x9acd36ee43b40b8
xor rsi, rax
movabs rax, 0x1e225d7ec670819f
xor rdi, rax
movabs rax, 0xe4318d3061d583e
xor rbx, rax
xor bpl, 0x4e
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x142813cbd]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xec5f42680724310
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400367a0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xa
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov rbp, rax
mov eax, esi
shr eax, 8
xor al, 0x2c
xor sil, 0xde
movabs rcx, 0xf064bce2ace0b58a
xor rdi, rcx
mov qword [rbp], rdi
mov byte [rbp + 8], sil
mov byte [rbp + 9], al
lea rax, [0x1428157fe]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x91bacf06393ce66a
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035a80
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xc
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x54978e8157bf050
xor rsi, rcx
xor edi, 0x60d9d582
mov qword [rax], rsi
mov qword [rsp + 0x228], rax
mov dword [rax + 8], edi
lea rax, [0x14280c5b4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc891d00975b32557
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035d30
mov rsi, qword [rax]
movzx eax, byte [0x142822100]
mov edx, 8
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov rdi, rax
movabs rax, 0x9da870d1122261ff
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x14280b3ea]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x70bb72e3d0f8d39b
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035c60
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 9
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov qword [rsp + 0x220], rdi
xor bl, 0xf2
movabs rcx, 0x1d048211ebda32f3
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x218], rax
mov byte [rax + 8], bl
lea rax, [0x1428113f7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xd4b6af3b3893c973
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036870
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 9
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov qword [rsp + 0x210], rbp
xor bl, 0x9c
movabs rcx, 0x57730c632990d592
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x208], rax
mov byte [rax + 8], bl
lea rax, [0x142809592]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x8ef17a86d080b57c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400366d0
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xc
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0xd94456ff69b96a8
xor rsi, rcx
xor edi, 0x22051993
mov qword [rax], rsi
mov qword [rsp + 0x200], rax
mov dword [rax + 8], edi
lea rax, [0x14280ebfa]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x114802e4dc00aaa6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400362a0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142822100]
mov edx, 0xf
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov qword [rsp + 0x1f8], r14
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x61
mov ecx, esi
shr ecx, 8
xor cl, 0x2c
xor sil, 0x1f
xor edi, 0xa524017a
movabs rdx, 0xf5503f6415c15cc8
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x1f0], rax
mov byte [rax + 0xe], r8b
lea rax, [0x14280bac9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7ed86d1de030b8d6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036660
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142822100]
mov edx, 0xc
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x665b3467a605ad50
xor rsi, rcx
xor edi, 0x1a2d558c
mov qword [rax], rsi
mov qword [rsp + 0x1e8], rax
mov dword [rax + 8], edi
lea rax, [0x14281634a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x64f1a899e7a1cf16
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035cc0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
mov r14, qword [rsp + 0x180]
mov rbp, qword [rsp + 0x290]
je 0x140004d17
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x81
mov ecx, esi
shr ecx, 8
xor cl, 0x64
xor sil, 0xbc
movabs rdx, 0xe83cbcecee9ddb9b
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x1e0], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142809e89]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc857e4919ec1674c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035f00
mov rsi, qword [rax]
movzx eax, byte [0x142822100]
mov edx, 8
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x8f81aa0585fe1d82
xor rsi, rcx
mov qword [rsp + 0x1d8], rax
mov qword [rax], rsi
lea rax, [0x142809b3f]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa4820071207c97a4
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400363a0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142822100]
mov edx, 0x11
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x9c7aa8e2f6348f4c
xor rsi, rcx
movabs rcx, 0xc3b85233754464ba
xor rdi, rcx
xor bl, 0x71
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x1d0], rax
mov byte [rax + 0x10], bl
lea rax, [0x1428093a8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x8dfd4221e52098df
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035d60
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142822100]
mov edx, 0xd
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0xb2fef85c
movabs rcx, 0xae27c84bfaf9cc9e
xor rdi, rcx
xor bl, 0x66
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x1c8], rax
mov byte [rax + 0xc], bl
lea rax, [0x142807d7f]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x211d9a0d6bbea149
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035fc0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142822100]
mov edx, 0xb
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xf8
mov ecx, esi
shr ecx, 8
xor cl, 0xa6
xor sil, 0x11
movabs rdx, 0x5edc2d875e255bc9
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x1c0], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142816218]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf71148a767f3b955
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035f60
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142822100]
mov edx, 0xd
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
xor esi, 0xb95ea76e
movabs rcx, 0xbe017a0eadfabede
xor rdi, rcx
xor bl, 0x57
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x1b8], rax
mov byte [rax + 0xc], bl
lea rax, [0x1428094ea]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x712c3c1d81120ce7
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035900
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142822100]
mov edx, 0x12
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x2a7b3d5cfdf43b9f
xor rsi, rcx
movabs rcx, 0x2bb710ae3df712be
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xed
xor bl, 0x34
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x1b0], rax
mov byte [rax + 0x11], cl
lea rax, [0x14280b234]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1c609b0ed182454
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035f30
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x142822100]
mov edx, 7
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0x99
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x29
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0x4e
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x425a1821
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x142822100]
mov edx, 0x220
xor ecx, ecx
mov rsi, r8
call fcn.140032080
test rax, rax
je 0x140004d17
mov rbx, rax
mov qword [rsp + 0x2a8], r15
mov qword [rax], r15
mov qword [rax + 8], 0x11
mov qword [rsp + 0x2a0], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xb
mov qword [rsp + 0x1a0], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], 0xb
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], 0xa
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], 0xb
mov rax, qword [rsp + 0x288]
mov qword [rbx + 0x50], rax
mov qword [rbx + 0x58], 0xb
mov rax, qword [rsp + 0x280]
mov qword [rbx + 0x60], rax
mov qword [rbx + 0x68], 0xd
mov rax, qword [rsp + 0x278]
mov qword [rbx + 0x70], rax
mov qword [rbx + 0x78], 0xc
mov rax, qword [rsp + 0x270]
mov qword [rbx + 0x80], rax
mov qword [rbx + 0x88], 0xd
mov rax, qword [rsp + 0x268]
mov qword [rbx + 0x90], rax
mov qword [rbx + 0x98], 0x12
mov rax, qword [rsp + 0x260]
mov qword [rbx + 0xa0], rax
mov qword [rbx + 0xa8], 0xa
mov rax, qword [rsp + 0x258]
mov qword [rbx + 0xb0], rax
mov qword [rbx + 0xb8], 0xa
mov rax, qword [rsp + 0x250]
mov qword [rbx + 0xc0], rax
mov qword [rbx + 0xc8], 0xd
mov rax, qword [rsp + 0x248]
mov qword [rbx + 0xd0], rax
mov qword [rbx + 0xd8], 0xb
mov rax, qword [rsp + 0x240]
mov qword [rbx + 0xe0], rax
mov qword [rbx + 0xe8], 0xd
mov rax, qword [rsp + 0x238]
mov qword [rbx + 0xf0], rax
mov qword [rbx + 0xf8], 0xf
mov rax, qword [rsp + 0x230]
mov qword [rbx + 0x100], rax
mov qword [rbx + 0x108], 0x1c
mov rax, qword [rsp + 0x1f8]
mov qword [rbx + 0x110], rax
mov qword [rbx + 0x118], 0x19
mov rax, qword [rsp + 0x210]
mov qword [rbx + 0x120], rax
mov qword [rbx + 0x128], 0xa
mov rax, qword [rsp + 0x228]
mov qword [rbx + 0x130], rax
mov qword [rbx + 0x138], 0xc
mov rax, qword [rsp + 0x220]
mov qword [rbx + 0x140], rax
mov qword [rbx + 0x148], 8
mov rax, qword [rsp + 0x218]
mov qword [rbx + 0x150], rax
mov qword [rbx + 0x158], 9
mov rax, qword [rsp + 0x208]
mov qword [rbx + 0x160], rax
mov qword [rbx + 0x168], 9
mov rax, qword [rsp + 0x200]
mov qword [rbx + 0x170], rax
mov qword [rbx + 0x178], 0xc
mov rax, qword [rsp + 0x1f0]
mov qword [rbx + 0x180], rax
mov qword [rbx + 0x188], 0xf
mov rax, qword [rsp + 0x1e8]
mov qword [rbx + 0x190], rax
mov qword [rbx + 0x198], 0xc
mov rax, qword [rsp + 0x1e0]
mov qword [rbx + 0x1a0], rax
mov qword [rbx + 0x1a8], 0xb
mov rax, qword [rsp + 0x1d8]
mov qword [rbx + 0x1b0], rax
mov qword [rbx + 0x1b8], 8
mov rax, qword [rsp + 0x1d0]
mov qword [rbx + 0x1c0], rax
mov qword [rbx + 0x1c8], 0x11
mov rax, qword [rsp + 0x1c8]
mov qword [rbx + 0x1d0], rax
mov qword [rbx + 0x1d8], 0xd
mov rax, qword [rsp + 0x1c0]
mov qword [rbx + 0x1e0], rax
mov qword [rbx + 0x1e8], 0xb
mov rax, qword [rsp + 0x1b8]
mov qword [rbx + 0x1f0], rax
mov qword [rbx + 0x1f8], 0xd
mov rax, qword [rsp + 0x1b0]
mov qword [rbx + 0x200], rax
mov qword [rbx + 0x208], 0x12
mov qword [rsp + 0x298], rsi
mov qword [rbx + 0x210], rsi
mov qword [rbx + 0x218], 7
lea rax, [0x14280d5d0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x260bc0d52fe5a919
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036600
movabs rcx, 0x61af64ed86284af6
xor rcx, qword [rax]
movabs rdx, 0x2d72c4ca2b62ccf4
xor rdx, qword [rax + 8]
movabs r8, 0xb350fb8cc89c79df
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x1c
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], rdx
mov qword [rsp + 0x168], r8
mov byte [rsp + 0x170], al
mov dword [rsp + 0x1ac], 0x41888887
lea rax, [0x1428138f0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x28b88b74830e5616
mov qword [rsp + 0x50], rax
lea rbp, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035930
mov rcx, qword [rax]
mov qword [rsp + 0x2b0], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x2b8], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x2c0], rcx
mov r13, qword [rax + 0x18]
mov r12, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x11f], al
movzx eax, byte [0x142822100]
mov edx, 0x49
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
movabs rcx, 0x3eeff2f240fd73f3
xor rsi, rcx
movabs rcx, 0x46c264b907eed9f1
xor rdi, rcx
movabs rcx, 0x75cb2b8c2917e08f
xor r14, rcx
movabs rcx, 0xbc5e7400a984ee20
xor r15, rcx
movabs rcx, 0x8f0e85f88171c622
xor r12, rcx
movabs rcx, 0x76fadcd2d4108c5f
xor r13, rcx
movabs rcx, 0x38068f48751ba6af
mov rdx, qword [rsp + 0x2c0]
xor rdx, rcx
movabs rcx, 0x474ec0e6e07abfe5
mov r8, qword [rsp + 0x2b8]
xor r8, rcx
movabs rcx, 0xd27fe07d1269ec2b
mov r9, qword [rsp + 0x2b0]
xor r9, rcx
movzx ecx, byte [rsp + 0x11f]
xor cl, 0xea
mov qword [rax], r9
mov qword [rax + 8], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x188], 0x49
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], 0x49
xor r13d, r13d
jmp 0x140004511
add r13, 0x10
cmp r13, 0x220
je 0x1400047b8
lea rax, [rbx + r13]
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x188]
mov qword [rsp + 0x120], rax
lea rax, [0x140001da0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x178]
mov qword [rsp + 0x130], rax
lea rax, [0x140040650]
mov qword [rsp + 0x138], rax
lea rax, [0x142816f10]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
lea rdi, [rsp + 0x120]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 2
lea rsi, [rsp + 0x140]
mov rcx, rsi
mov rdx, rbp
call fcn.140006d60
mov r12, qword [rsp + 0x140]
mov r14, qword [rsp + 0x148]
mov rax, qword [rsp + 0x150]
add rax, r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
mov rcx, rdi
mov rdx, rbp
call fcn.14003c560
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x140], 0
mov rdi, qword [rsp + 0x128]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov r15d, eax
test eax, eax
je 0x1400046d0
mov rsi, r15
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x120], 0
je 0x140004667
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test r15d, r15d
jne 0x1400046e6
mov qword [rsp + 0x50], rsi
mov r8d, 0x19
mov rcx, rbp
lea rdx, [rsp + 0x158]
lea r9, [rsp + 0x1ac]
call fcn.140040670
test rax, rax
jne 0x14000471a
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x1400046af
mov rcx, rsi
call sub.ADVAPI32.dll_RegCloseKey
test r12, r12
je 0x140004500
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
jmp 0x140004500
mov rsi, qword [rsp + 0x50]
cmp qword [rsp + 0x120], 0
jne 0x140004656
jmp 0x140004667
movzx eax, byte [0x142822100]
mov edx, 8
xor ecx, ecx
call fcn.140032080
test rax, rax
je 0x140004d17
mov rdi, rax
mov qword [rax], rsi
mov r13, qword [rsp + 0x1a0]
mov rbp, qword [rsp + 0x180]
jmp 0x140004766
mov r15, rax
movzx eax, byte [0x142822100]
mov edx, 8
xor ecx, ecx
call fcn.140032080
test rax, rax
mov r13, qword [rsp + 0x1a0]
mov rbp, qword [rsp + 0x180]
je 0x140004d17
mov rdi, rax
mov qword [rax], r15
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x140004766
mov rcx, rsi
call sub.ADVAPI32.dll_RegCloseKey
test r12, r12
je 0x14000477c
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x188], 0
je 0x14000479d
mov r8, qword [rsp + 0x190]
mov rcx, qword [0x1428220c8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rcx, rdi
call fcn.14003f0d0
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x1400047e9
cmp qword [rsp + 0x188], 0
je 0x1400047d9
mov r8, qword [rsp + 0x190]
mov rcx, qword [0x1428220c8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x1a0]
mov rbp, qword [rsp + 0x180]
lea rax, [0x141b70c34]
mov qword [rsp + 0x28], rax
lea rax, [0x141b70c28]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005bdf8]
lea r9, [0x141b70c08]
lea r12, [rsp + 0x2d0]
mov r8d, 0x1b14e10
mov rcx, r12
call fcn.140015f80
lea rax, [0x141ce9290]
mov qword [rsp + 0x28], rax
lea rax, [0x141ce9284]
mov qword [rsp + 0x20], rax
lea rdx, [0x141b70c54]
lea r9, [0x141ce9264]
lea r14, [rsp + 0x2e8]
mov r8d, 0x178610
mov rcx, r14
call fcn.140015f80
lea rax, [0x142816eec]
mov qword [rsp + 0x28], rax
lea rax, [0x142816ee0]
mov qword [rsp + 0x20], rax
lea rdx, [0x141ce92b0]
lea r9, [0x142816ec0]
lea rdi, [rsp + 0x300]
mov r8d, 0xb2dc10
mov rcx, rdi
call fcn.140015f80
lea rax, [0x14280e11a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x3cd31dd469d791c1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036210
movabs rcx, 0xa25c4c9fc9a207d3
xor rcx, qword [rax]
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0x78
xor r8b, 0x96
xor dl, 0x38
mov qword [rsp + 0x50], rcx
mov byte [rsp + 0x58], al
mov byte [rsp + 0x59], r8b
mov byte [rsp + 0x5a], dl
lea rdx, [rsp + 0x50]
mov r8d, 0xb
mov rcx, r12
call fcn.1400051d0
lea rax, [0x14280f5d5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x56bf43328b5885f1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035c30
movabs rcx, 0x8b464dcea0f5e251
xor rcx, qword [rax]
mov edx, 0x1d0a3a91
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x1d
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x58], edx
mov byte [rsp + 0x5c], al
lea rdx, [rsp + 0x50]
mov r8d, 0xd
mov rcx, r14
call fcn.1400051d0
lea rax, [0x1428081a4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x9b611870debe15c2
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036680
movabs rcx, 0x1f7fdcf6d584bb40
xor rcx, qword [rax]
mov edx, 0x78ccbe46
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x44
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x58], edx
mov byte [rsp + 0x5c], al
lea rdx, [rsp + 0x50]
mov r8d, 0xd
mov rcx, rdi
call fcn.1400051d0
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x290]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x288]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x280]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x278]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x270]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x268]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x260]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x258]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x250]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x248]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x240]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x238]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x230]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1f8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x210]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x228]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x220]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x218]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x208]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x200]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1f0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1e8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1e0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1d8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1d0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1c8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1c0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1b8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x1b0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x298]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1428220c8]
xor edx, edx
mov r8, qword [rsp + 0x2c8]
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x318
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
call fcn.140032cb0
lea rax, [0x142807df5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4532c47db03de0f0
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035b50
movabs rcx, 0xf20d086e8f7ab103
xor rcx, qword [rax]
movabs rdx, 0xbbb04422331cdc2e
xor rdx, qword [rax + 8]
movabs r8, 0x35f7274cd5bfeab8
xor r8, qword [rax + 0x10]
movabs r9, 0x9258eafaf2c737a3
xor r9, qword [rax + 0x18]
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], 0x20
mov qword [rsp + 0x140], r15
lea rax, [0x140040630]
mov qword [rsp + 0x148], rax
lea rax, [0x14281bd50]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.14002a7d0
call fcn.140032cb0
int3