Function at 0x14000c7d0
Capabilities:
Authenticate hmac
Encode data using xor
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3c8
mov ecx, 5
call fcn.14002d010
lea rax, [0x141ce3c83]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x3b809a03
mov edx, dword [rsp + 0x48]
call fcn.1400071f0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x141d049e0]
mov edx, 0x1d
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0x797dfbb0
mov edx, esi
shr edx, 8
movabs rcx, 0x2e3d4e4a227b4a9e
xor rdi, rcx
movabs rcx, 0x8bb5d9158f9d916d
xor r14, rcx
movabs rcx, 0xf7f5cfcba941d338
xor r15, rcx
xor bl, 0x15
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], sil
shr esi, 0x18
mov byte [rax + 0x1b], sil
mov word [rax + 0x19], dx
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x48]
mov r8d, 0x1d
mov qword [rsp + 0x320], rax
mov rdx, rax
call fcn.1400311f0
cmp dword [rsp + 0x48], 2
jne 0x14000fb63
mov rsi, qword [rsp + 0x50]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000c917
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000c8de
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000c905
cmp qword [rbx + 0x10], 0x11
jb 0x14000c8f3
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141ceb076]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xedd4535a
mov edx, dword [rsp + 0x48]
call fcn.140006c30
movabs rcx, 0x14d954b932085b2f
xor rcx, qword [rax]
movabs rdx, 0x59ad15af783185e
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0xc2
mov qword [rsp + 0x188], rcx
mov qword [rsp + 0x190], rdx
mov byte [rsp + 0x198], al
lea rax, [rsp + 0x199]
lea rcx, [rsp + 0x188]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rdi, [rsp + 0x48]
mov rdx, rdi
call fcn.140007f30
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x1a0], 0
mov rsi, qword [rsp + 0x128]
lea r15, [rsp + 0x1a0]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, eax
test eax, eax
je 0x14000cb95
mov rdi, rbx
shl rdi, 0x20
or rdi, 2
cmp qword [rsp + 0x120], 0
je 0x14000ca43
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebx, ebx
je 0x14000cbae
lea rax, [0x141cea540]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x94b1ef50
mov edx, dword [rsp + 0x48]
call fcn.140006a90
movabs rcx, 0x82a7b580aa5300a3
xor rcx, qword [rax]
movabs rdx, 0x1e5b4cb6f6e67eeb
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x50
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov byte [rsp + 0x1b0], al
lea rax, [rsp + 0x1b1]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rsi, [rsp + 0x48]
mov rdx, rsi
call fcn.140007f30
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x128]
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebp, eax
mov rsi, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
je 0x14000cb33
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
jne 0x14000fb61
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000cbb1
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000cb5a
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000cb81
cmp qword [r14 + 0x10], 0x11
jb 0x14000cb6f
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000cbb1
mov rdi, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
jne 0x14000ca31
jmp 0x14000ca43
mov rsi, rdi
lea rax, [0x141ce5c16]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x9beb44af
mov edx, dword [rsp + 0x48]
call fcn.140006af0
mov ecx, 0x339eca3
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x55
mov dword [rsp + 0x1a0], ecx
mov byte [rsp + 0x1a4], al
lea rax, [rsp + 0x1a5]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.140007f30
mov dword [rsp + 0x218], 0x800
mov dword [rsp + 0x188], 0
movzx eax, byte [0x141d049e0]
mov ebx, 0x800
mov edx, 0x800
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov r14, rax
mov qword [rsp + 0x48], 0x800
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0
mov r15, qword [rsp + 0x128]
xor r13d, r13d
mov r12, qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rdi, rbx
sub rdi, r13
nop
lea rax, [rsp + 0x218]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, rsi
mov rdx, r15
xor r8d, r8d
lea r9, [rsp + 0x188]
call r12
cmp eax, 0xea
jne 0x14000ccf7
mov r8d, dword [rsp + 0x218]
cmp rdi, r8
jae 0x14000cc90
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0x48]
mov rdx, r13
call fcn.140052410
mov rbx, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
jmp 0x14000cc89
mov ebp, eax
test eax, eax
jne 0x14000cd29
mov r12d, dword [rsp + 0x218]
mov qword [rsp + 0x58], r12
mov r13d, dword [rsp + 0x188]
cmp r13d, 0xb
jbe 0x14000cd55
movabs rbp, 0xde00000002
test rbx, rbx
jne 0x14000cd36
jmp 0x14000cd48
shl rbp, 0x20
or rbp, 2
test rbx, rbx
je 0x14000cd48
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rbx, 0x8000000000000000
mov r14, rbp
cmp qword [rsp + 0x120], 0
je 0x14000cd72
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp rbx, rax
jne 0x14000cd96
mov r15, r14
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x120]
jmp 0x14000cdfd
mov bpl, 1
cmp r13b, 5
je 0x14000cdac
movzx eax, r13b
cmp eax, 4
jne 0x14000fb39
cmp r12, 4
lea r13, [rsp + 0x120]
jne 0x14000cdcb
xor ebp, ebp
lea r12, [rsp + 0x1a0]
test rbx, rbx
jne 0x14000cde2
jmp 0x14000cdf4
movabs r15, 0xd00000002
lea r12, [rsp + 0x1a0]
test rbx, rbx
je 0x14000cdf4
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test bpl, bpl
je 0x14000fb68
mov eax, r15d
and eax, 3
cmp eax, 1
jne 0x14000ce56
mov r14, qword [r15 - 1]
mov rdi, qword [r15 + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000ce1d
mov rcx, r14
call rax
dec r15
cmp qword [rdi + 8], 0
je 0x14000ce44
cmp qword [rdi + 0x10], 0x11
jb 0x14000ce32
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141ce5903]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x791f6306
mov edx, dword [rsp + 0x48]
call fcn.140006800
movabs rcx, 0xdc208a412a769af5
xor rcx, qword [rax]
movabs rdx, 0xd413e4860715255
xor rdx, qword [rax + 8]
movabs r8, 0x8948dfa27b8d4a8c
xor r8, qword [rax + 0x10]
movabs r9, 0x8538e478c526097c
xor r9, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
xor al, 0xc3
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov byte [rsp + 0x140], al
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], 0x21
mov qword [rsp + 0x188], r12
lea rax, [0x1400042d0]
mov qword [rsp + 0x190], rax
lea rax, [0x1400586d8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.140031ac0
lea rax, [0x141ce9566]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x1ab0e620
mov edx, dword [rsp + 0x48]
call fcn.140007720
mov ecx, 0xbcdac07a
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x10
mov dword [rsp + 0x48], ecx
mov byte [rsp + 0x4c], al
lea r9, [0x1400586c0]
lea rdx, [rsp + 0x48]
mov r8d, 5
mov rcx, rsi
call fcn.140007740
test rax, rax
jne 0x14000fb61
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000cfc1
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [0x141ce7276]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x32baab22
mov edx, dword [rsp + 0x48]
call fcn.140006950
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov ecx, esi
shr ecx, 8
xor cl, 0x36
xor sil, 0x39
movabs rdx, 0x9023c11991004a18
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce226b]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x3b3b30c3
mov edx, dword [rsp + 0x120]
call fcn.140007150
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x141d049e0]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0x351f9eb0
movabs rax, 0x2b143ed7d222ba8e
xor rbx, rax
movabs rax, 0x2002a9d2c838780e
xor r14, rax
movabs rax, 0x5eea86d6659271c3
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.14003c220
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 5
call fcn.14002d010
lea rax, [0x141ce6924]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xbbd7c4e8
mov edx, dword [rsp + 0x48]
call fcn.140006fc0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov ecx, esi
shr ecx, 8
xor cl, 0x49
xor sil, 0x23
movabs rdx, 0xd36df78d2b5fda20
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cf1295]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x495e46d5
mov edx, dword [rsp + 0x120]
call fcn.1400067d0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141d049e0]
mov edx, 0x15
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
lea rcx, [rsp + 0x68]
xor bl, 0x45
xor edi, 0x48fa9e7f
mov eax, edi
shr eax, 8
movabs rdx, 0x8c1d3810e9757939
xor r14, rdx
movabs rdx, 0x48823d800a2ce6f9
xor r15, rdx
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov byte [rsi + 0x10], dil
shr edi, 0x18
mov byte [rsi + 0x13], dil
mov word [rsi + 0x11], ax
mov byte [rsi + 0x14], bl
call fcn.14003c220
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 5
call fcn.14002d010
lea rax, [0x141ce65c5]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xf06b09e4
mov edx, dword [rsp + 0x48]
call fcn.1400076f0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d049e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov r15, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0xd
mov ecx, esi
shr ecx, 8
xor cl, 0x30
xor sil, 0xcf
movabs rdx, 0x67d5f950fd7ff2c3
xor rdi, rdx
mov qword [r15], rdi
mov byte [r15 + 8], sil
mov byte [r15 + 9], cl
mov byte [r15 + 0xa], al
lea rax, [0x141ce9536]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x20206487
mov edx, dword [rsp + 0x48]
call fcn.1400070e0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov r12, rax
xor esi, 0xc09988eb
movabs rax, 0x80eb4d2c663bd6dc
xor rdi, rax
xor bl, 9
mov qword [r12], rdi
mov dword [r12 + 8], esi
mov byte [r12 + 0xc], bl
lea rax, [0x141ce3de7]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xd85024a5
mov edx, dword [rsp + 0x48]
call fcn.140007010
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov r13, rax
xor esi, 0x21761d27
movabs rax, 0x81c82756e1019cdb
xor rdi, rax
mov qword [r13], rdi
mov dword [r13 + 8], esi
lea rax, [0x141ceb545]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x5e6a59b0
mov edx, dword [rsp + 0x48]
call fcn.140006bb0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0xc5d3f3ce
movabs rcx, 0xa1b246bca8be3603
xor rdi, rcx
xor bl, 0x7b
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2d8], rax
mov byte [rax + 0xc], bl
lea rax, [0x141ce55d2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x6a114652
mov edx, dword [rsp + 0x48]
call fcn.140006890
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov edx, esi
shr edx, 8
xor dl, 0x8b
xor sil, 0xf4
movabs rcx, 0x921ff34f12797812
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2d0], rax
mov byte [rax + 9], dl
lea rax, [0x141cf0ac4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x827523
mov edx, dword [rsp + 0x48]
call fcn.140006620
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov edx, esi
shr edx, 8
xor dl, 0xc8
xor sil, 0x9b
movabs rcx, 0x1eac7f58da76d421
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2c8], rax
mov byte [rax + 9], dl
lea rax, [0x141ce8c0c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xd66bf4e7
mov edx, dword [rsp + 0x48]
call fcn.140006f70
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0xa261f6cb
movabs rcx, 0x9ea1b783465f7f3f
xor rdi, rcx
xor bl, 0x77
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cf000f]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xf5488a38
mov edx, dword [rsp + 0x48]
call fcn.140007390
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0xed39a25
movabs rcx, 0xa922b540a23959c0
xor rdi, rcx
xor bl, 0x2e
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2b8], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cebd95]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xc9d1f2d0
mov edx, dword [rsp + 0x48]
call fcn.140007350
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d049e0]
mov edx, 0xf
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x91
mov ecx, esi
shr ecx, 8
xor cl, 0xcc
xor sil, 0x1e
xor edi, 0x46fb8c65
movabs rdx, 0x749c4a2972e38ad5
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x2b0], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141cec36e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xd1010c95
mov edx, dword [rsp + 0x48]
call fcn.1400072b0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x141d049e0]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0xdcda1185
movabs rcx, 0xe8bcef83c3443154
xor rdi, rcx
movabs rcx, 0x3e7904a2a7b5f47f
xor rbx, rcx
movabs rcx, 0xf1b7a515897bcbb3
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x2a8], rax
mov dword [rax + 0x18], esi
lea rax, [0x141ce5cb5]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x202b72ab
mov edx, dword [rsp + 0x48]
call fcn.140006930
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x141d049e0]
mov edx, 0x19
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov r14, rax
movabs rax, 0x1c4f64826cadd7ea
xor rsi, rax
movabs rax, 0xa7b94524dfb6970f
xor rdi, rax
movabs rax, 0xce76c1c837a8032e
xor rbx, rax
xor bpl, 0x4d
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x141ce250f]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xdd287d74
mov edx, dword [rsp + 0x48]
call fcn.1400068b0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov edx, esi
shr edx, 8
xor dl, 0x90
xor sil, 0xcb
movabs rcx, 0x6295ea45e5e0c89c
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2a0], rax
mov byte [rax + 9], dl
lea rax, [0x141cea4e6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xb5dda5de
mov edx, dword [rsp + 0x48]
call fcn.140006970
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0xf3b03019
movabs rcx, 0x46e3404c4ee32c7a
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x298], rax
mov dword [rax + 8], esi
lea rax, [0x141ce35e2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x69b3ea53
mov edx, dword [rsp + 0x48]
call fcn.1400066a0
mov rsi, qword [rax]
movzx eax, byte [0x141d049e0]
mov edx, 8
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rdi, rax
movabs rax, 0xaeb372be65bdf0aa
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x141cefe8b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xffa8aa33
mov edx, dword [rsp + 0x48]
call fcn.140007640
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 9
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov qword [rsp + 0x290], rdi
xor bl, 0xe0
movabs rcx, 0x652e3cbc8bbaf1fe
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x288], rax
mov byte [rax + 8], bl
lea rax, [0x141ce4cdb]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xab9f1c5e
mov edx, dword [rsp + 0x48]
call fcn.1400069e0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 9
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor bl, 0x5f
movabs rcx, 0xfc504f617a60f523
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x280], rax
mov byte [rax + 8], bl
lea rax, [0x141ce64b6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x1d3c7bb1
mov edx, dword [rsp + 0x48]
call fcn.140006b20
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0x9b4c1bb0
movabs rcx, 0x1088278cd3f40f06
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x278], rax
mov dword [rax + 8], esi
lea rax, [0x141ce9ad6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xa93de5a
mov edx, dword [rsp + 0x48]
call fcn.140006910
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d049e0]
mov edx, 0xf
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x26
mov ecx, esi
shr ecx, 8
xor cl, 0x38
xor sil, 0x35
xor edi, 0xc6cd5c30
movabs rdx, 0x3a38e9b7ceb08cc3
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x270], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141ce6115]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x809ae3de
mov edx, dword [rsp + 0x48]
call fcn.140007130
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d049e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rbp, rax
xor esi, 0x8beff036
movabs rax, 0x929e61a3da4e73d9
xor rdi, rax
mov qword [rbp], rdi
mov dword [rbp + 8], esi
lea rax, [0x141ce2d3f]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x7622159b
mov edx, dword [rsp + 0x48]
call fcn.140006ac0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d049e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xba
mov ecx, esi
shr ecx, 8
xor cl, 0x94
xor sil, 0x9b
movabs rdx, 0x878ce6586cbc7cca
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x268], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141ceafce]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xb718fd8d
mov edx, dword [rsp + 0x48]
call fcn.140006e90
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d049e0]
mov edx, 0x11
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
movabs rcx, 0xc28f9f70f4cc0bac
xor rsi, rcx
movabs rcx, 0x5017531699d5147b
xor rdi, rcx
xor bl, 0xc0
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x260], rax
mov byte [rax + 0x10], bl
lea rax, [0x141ce2083]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xdc3a92a0
mov edx, dword [rsp + 0x48]
call fcn.140007520
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d049e0]
mov edx, 7
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rdx, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0x1f
movzx eax, al
mov byte [rdx + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 6
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0xa5
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x55093f76
mov dword [rdx], esi
shr rax, 0x20
mov qword [rsp + 0x258], rdx
mov word [rdx + 4], ax
lea rax, [0x141ce44b2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xa32e234c
mov edx, dword [rsp + 0x48]
call fcn.140006d60
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0x287a3847
movabs rcx, 0x6d83a060009e2ec3
xor rdi, rcx
xor bl, 0x3e
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x250], rax
mov byte [rax + 0xc], bl
lea rax, [0x141ce6dd5]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x5e805926
mov edx, dword [rsp + 0x48]
call fcn.140006680
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d049e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xc0
mov ecx, esi
shr ecx, 8
xor cl, 0x11
xor sil, 0x67
movabs rdx, 0xee60f925dc3ccb29
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x248], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141cef7dd]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xdca3454d
mov edx, dword [rsp + 0x48]
call fcn.140006ca0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
xor esi, 0xcf4780
movabs rcx, 0x36f6487c4ab1028c
xor rdi, rcx
xor bl, 0x7f
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x240], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cefc8c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xb81e8988
mov edx, dword [rsp + 0x48]
call fcn.1400069c0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d049e0]
mov edx, 0x12
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
movabs rcx, 0xf5605ad3782a339f
xor rsi, rcx
movabs rcx, 0x78ab99b1c863f0aa
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xfc
xor bl, 0xe
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x238], rax
mov byte [rax + 0x11], cl
lea rax, [0x141ce3c5e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xb2f942ad
mov edx, dword [rsp + 0x48]
call fcn.140006a30
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d049e0]
mov edx, 7
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0x88
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0xbd
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0xf8
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x97bac572
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x141d049e0]
mov edx, 0x1b0
xor ecx, ecx
mov rsi, r8
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rcx, rax
mov qword [rsp + 0x310], r15
mov qword [rax], r15
mov qword [rax + 8], 0xb
mov qword [rsp + 0x308], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xd
mov qword [rsp + 0x300], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], 0xc
mov rax, qword [rsp + 0x2d8]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], 0xd
mov rax, qword [rsp + 0x2d0]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xa
mov rax, qword [rsp + 0x2c8]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xa
mov rax, qword [rsp + 0x2c0]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x2b8]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xd
mov rax, qword [rsp + 0x2b0]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xf
mov rax, qword [rsp + 0x2a8]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x1c
mov qword [rsp + 0x2f0], r14
mov qword [rcx + 0xa0], r14
mov qword [rcx + 0xa8], 0x19
mov rax, qword [rsp + 0x2a0]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x298]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xc
mov rax, qword [rsp + 0x290]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 8
mov rax, qword [rsp + 0x288]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 9
mov rax, qword [rsp + 0x280]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 9
mov rax, qword [rsp + 0x278]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0xc
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x110], rax
mov qword [rcx + 0x118], 0xf
mov qword [rsp + 0x2f8], rbp
mov qword [rcx + 0x120], rbp
mov qword [rcx + 0x128], 0xc
mov rax, qword [rsp + 0x268]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xb
mov rax, qword [rsp + 0x260]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 0x11
mov rax, qword [rsp + 0x258]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 7
mov rax, qword [rsp + 0x250]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 0xd
mov rax, qword [rsp + 0x248]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xb
mov rax, qword [rsp + 0x240]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xd
mov rax, qword [rsp + 0x238]
mov qword [rcx + 0x190], rax
mov qword [rcx + 0x198], 0x12
mov qword [rsp + 0x2e8], rsi
mov qword [rcx + 0x1a0], rsi
mov qword [rsp + 0x2e0], rcx
mov qword [rcx + 0x1a8], 7
lea rax, [0x141ce2589]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x1f08c829
mov edx, dword [rsp + 0x48]
call fcn.140006990
movabs rcx, 0x7d204484411bd918
xor rcx, qword [rax]
movabs rdx, 0x87804d96c3af35dc
xor rdx, qword [rax + 8]
movabs r8, 0x5bcabb6c486b9b6f
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0xdf
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov qword [rsp + 0x1b0], r8
mov byte [rsp + 0x1b8], al
mov dword [rsp + 0x230], 0x41888887
lea rax, [0x141cf088e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xa4e428eb
lea r12, [rsp + 0x48]
mov edx, dword [rsp + 0x48]
call fcn.1400072d0
mov rcx, qword [rax]
mov qword [rsp + 0x318], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x210], rcx
mov rbx, qword [rax + 0x10]
mov rbp, qword [rax + 0x18]
mov r13, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x11f], al
movzx eax, byte [0x141d049e0]
mov edx, 0x49
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
movabs rcx, 0xbec089109d0863ae
xor rsi, rcx
movabs rcx, 0xb3dbcb30b9a145bb
xor rdi, rcx
movabs rcx, 0x9856fd2221fc0184
xor r14, rcx
movabs rcx, 0x15375e7825579a74
xor r15, rcx
movabs rcx, 0xa12cd2f2d102043
xor r13, rcx
movabs rcx, 0x84d8cae1748a0804
xor rbp, rcx
movabs rcx, 0x26a338503d37d1d6
xor rbx, rcx
movabs rcx, 0xfab33d96f1dbd292
mov rdx, qword [rsp + 0x210]
xor rdx, rcx
movabs rcx, 0xd880c81308c60233
mov r8, qword [rsp + 0x318]
xor r8, rcx
movzx ecx, byte [rsp + 0x11f]
xor cl, 0xc1
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x218], 0x49
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 0x49
xor edi, edi
movabs rbx, 0xffffffff7fffffff
jmp 0x14000e5d1
add rdi, 0x10
cmp rdi, 0x1b0
je 0x14000e89f
mov rax, qword [rsp + 0x2e0]
add rax, rdi
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x120], rax
lea rax, [0x1400064c0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x130], rax
lea rax, [0x1400042f0]
mov qword [rsp + 0x138], rax
lea rax, [0x141cf16c8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rsi, [rsp + 0x120]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 2
lea rcx, [rsp + 0x188]
mov rdx, r12
call fcn.140011650
mov r15, qword [rsp + 0x188]
mov r14, qword [rsp + 0x190]
mov rax, qword [rsp + 0x198]
add rax, r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
mov rcx, rsi
mov rdx, r12
call fcn.140007f30
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x234], 0
mov r13, qword [rsp + 0x128]
lea rax, [rsp + 0x234]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
test eax, eax
je 0x14000e790
mov rbp, rsi
shl rbp, 0x20
or rbp, 2
cmp qword [rsp + 0x120], 0
je 0x14000e734
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
test esi, esi
jne 0x14000e7a6
mov r8d, 0x19
mov rcx, rbp
lea rdx, [rsp + 0x1a0]
lea r9, [rsp + 0x230]
call fcn.140007740
test rax, rax
jne 0x14000e7ca
cmp rbp, rbx
ja 0x14000e769
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14000e5c0
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000e5c0
mov rbp, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
jne 0x14000e722
jmp 0x14000e734
movzx eax, byte [0x141d049e0]
mov edx, 8
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rdi, rax
mov qword [rax], rbp
jmp 0x14000e7fd
mov rsi, rax
movzx eax, byte [0x141d049e0]
mov edx, 8
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rdi, rax
mov qword [rax], rsi
cmp rbp, rbx
ja 0x14000e7fd
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14000e814
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x218], 0
je 0x14000e836
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d049c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rdi]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000e891
mov r14, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000e858
mov rcx, r14
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000e87f
cmp qword [rbx + 0x10], 0x11
jb 0x14000e86d
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rdi
jmp 0x14000e8bb
cmp qword [rsp + 0x218], 0
je 0x14000e8c1
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d049c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 3
call fcn.14002d010
lea rax, [0x141cebe89]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xd7922e27
mov edx, dword [rsp + 0x48]
call fcn.140006ec0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx eax, byte [0x141d049e0]
mov edx, 0xe
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov ecx, esi
shr ecx, 8
xor cl, 0xc8
xor sil, 0xfd
xor edi, 0x5fefd1b1
movabs rdx, 0xc42045dc67bb0d54
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x48], 0xe
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xe
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ceb0aa]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x7bd8308
mov edx, dword [rsp + 0x120]
call fcn.140007320
mov rbx, qword [rax]
movzx eax, byte [0x141d049e0]
mov edx, 8
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
lea rdi, [rsp + 0x68]
movabs rax, 0xda0aef8ddee5d8d2
xor rbx, rax
mov qword [rsi], rbx
mov rcx, rdi
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 8
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141cea286]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x270c0da
mov edx, dword [rsp + 0x120]
call fcn.140006a70
xorps xmm0, xmm0
movaps xmmword [rsp + 0x170], xmm0
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x180], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x140058748]
nop dword [rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x128], r8
add rcx, 8
cmp rcx, 0x60
jb 0x14000eb30
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x200], rax
movaps xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmm0, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x1e0], xmm0
movaps xmm0, xmmword [rsp + 0x120]
movaps xmm1, xmmword [rsp + 0x130]
movaps xmm2, xmmword [rsp + 0x140]
movaps xmm3, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x1d0], xmm3
movaps xmmword [rsp + 0x1c0], xmm2
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
movzx eax, byte [0x141d049e0]
mov edx, 0x68
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
mov rax, qword [rsp + 0x200]
mov qword [rsi + 0x60], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rsi + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmm1, xmmword [rsp + 0x1b0]
movaps xmm2, xmmword [rsp + 0x1c0]
movaps xmm3, xmmword [rsp + 0x1d0]
movups xmmword [rsi + 0x30], xmm3
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp qword [rsp + 0x68], 1
jne 0x14000ec43
mov rcx, rdi
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x68
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x68
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003c080
lea rax, [0x141ce6cdc]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x188]
mov rcx, qword [rsp + 0x188]
mov dword [rsp + 0x188], 0x4c5ca31c
mov edx, dword [rsp + 0x188]
call fcn.140006d20
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
test byte [rsp + 0x120], 1
jne 0x14000fb61
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141cec1e9]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x2d41670e
mov edx, dword [rsp + 0x48]
call fcn.140006ee0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d049e0]
mov edx, 7
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x9e
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0xbd
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xd6
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xf444eb8c
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce274a]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0xebf3fae3
mov edx, dword [rsp + 0x120]
call fcn.1400070c0
movzx edi, word [rax]
movzx eax, byte [0x141d049e0]
mov edx, 2
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0xa4f3
mov word [rax], di
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ceac16]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x3303a893
mov edx, dword [rsp + 0x120]
call fcn.140006f00
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov r13, qword [rax + 0x10]
mov r12, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
mov ebx, dword [rax + 0x28]
movzx eax, byte [0x141d049e0]
mov edx, 0x2c
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
xor ebx, 0xdc665790
movabs rax, 0xd83b180dde05df5a
xor r15, rax
movabs rax, 0x1a31effdcb8f1093
xor r12, rax
movabs rax, 0x569dbe580043c9e7
xor r13, rax
movabs rax, 0x8987d0c816ce20a5
xor rbp, rax
movabs rax, 0xadf253c0829e6c4b
xor rdi, rax
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r12
mov qword [rsi + 0x20], r15
mov dword [rsi + 0x28], ebx
cmp qword [rsp + 0x68], 1
jne 0x14000efb0
lea rcx, [rsp + 0x68]
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x2c
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x2c
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003c080
lea rax, [0x141ce622c]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xaa311e34
mov edx, dword [rsp + 0x1a0]
call fcn.1400067b0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov rcx, qword [rax + 0x28]
movzx eax, byte [rax + 0x30]
test byte [rsp + 0x120], 1
jne 0x14000fb61
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141ce795c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x96bb55b8
mov edx, dword [rsp + 0x48]
call fcn.140006830
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d049e0]
mov edx, 7
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x51
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x4a
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xa9
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x16ae11c2
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cef668]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0xfdb0d65d
mov edx, dword [rsp + 0x120]
call fcn.140006b90
movzx edi, word [rax]
movzx eax, byte [0x141d049e0]
mov edx, 2
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0xcac0
mov word [rax], di
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ce6f3f]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x38c6efeb
mov edx, dword [rsp + 0x120]
call fcn.140006de0
mov rcx, qword [rax]
mov qword [rsp + 0x210], rcx
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov ebp, dword [rax + 0x20]
movzx ebx, word [rax + 0x24]
movzx edi, byte [rax + 0x26]
movzx eax, byte [0x141d049e0]
mov edx, 0x27
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
shl edi, 0x10
or ebx, edi
mov eax, ebx
shr eax, 0x10
xor al, 0x29
mov ecx, ebx
shr ecx, 8
xor cl, 0x6e
xor bl, 0x70
xor ebp, 0x3f630f32
movabs rdx, 0xe35166b1d3572fc6
xor r15, rdx
movabs rdx, 0x5746ae413517086c
xor r12, rdx
movabs rdx, 0xd68e3d7c3671c59d
xor r13, rdx
movabs rdx, 0xb5e25d1d948c887c
mov r8, qword [rsp + 0x210]
xor r8, rdx
mov qword [rsi], r8
mov qword [rsi + 8], r13
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r15
mov dword [rsi + 0x20], ebp
mov byte [rsi + 0x24], bl
mov byte [rsi + 0x25], cl
mov byte [rsi + 0x26], al
cmp qword [rsp + 0x68], 1
jne 0x14000f348
lea rcx, [rsp + 0x68]
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x27
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x27
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003c080
lea rax, [0x141ce7829]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0x4c801c46
mov edx, dword [rsp + 0x1a0]
call fcn.140006790
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov eax, dword [rax + 0x18]
test byte [rsp + 0x120], 1
mov r15, qword [rsp + 0x310]
mov r12, qword [rsp + 0x308]
mov r13, qword [rsp + 0x300]
mov rbp, qword [rsp + 0x2f8]
jne 0x14000fb61
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141ce238c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xc4613db8
mov edx, dword [rsp + 0x48]
call fcn.140007080
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d049e0]
mov edx, 7
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x39
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x5c
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xa4
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xf151991d
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce4b7e]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0x8837ea2a
mov edx, dword [rsp + 0x120]
call fcn.140006650
movzx ebx, word [rax]
movzx eax, byte [0x141d049e0]
mov edx, 2
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
lea rdi, [rsp + 0x68]
xor ebx, 0x466c
mov word [rax], bx
mov rcx, rdi
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ce441c]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x120], 0xf3af8b49
mov edx, dword [rsp + 0x120]
call fcn.140006860
xorps xmm0, xmm0
movaps xmmword [rsp + 0x330], xmm0
movaps xmmword [rsp + 0x340], xmm0
movaps xmmword [rsp + 0x350], xmm0
movaps xmmword [rsp + 0x360], xmm0
movaps xmmword [rsp + 0x370], xmm0
mov qword [rsp + 0x380], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400587b0]
nop
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x338], r8
add rcx, 8
cmp rcx, 0x50
jb 0x14000f670
movzx eax, byte [rax + 0x58]
xor al, 0x97
mov byte [rsp + 0x388], al
movzx eax, byte [0x141d049e0]
mov edx, 0x59
xor ecx, ecx
call fcn.14003c1f0
test rax, rax
je 0x14000fb61
mov rsi, rax
movups xmm0, xmmword [rsp + 0x379]
movups xmmword [rax + 0x49], xmm0
movaps xmm0, xmmword [rsp + 0x370]
movups xmmword [rax + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x330]
movaps xmm1, xmmword [rsp + 0x340]
movaps xmm2, xmmword [rsp + 0x350]
movaps xmm3, xmmword [rsp + 0x360]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x68], 1
jne 0x14000f714
mov rcx, rdi
call fcn.14003c220
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x59
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x59
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003c080
lea rax, [0x141cf0298]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
mov dword [rsp + 0x1a0], 0xcd742f9a
mov edx, dword [rsp + 0x1a0]
call fcn.140006760
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx ecx, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
test byte [rsp + 0x120], 1
jne 0x14000fb61
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 2
call fcn.14002d010
lea rax, [0x141b80645]
mov qword [rsp + 0x28], rax
lea rax, [0x141b80639]
mov qword [rsp + 0x20], rax
lea rdx, [0x140058809]
lea r9, [0x141b80619]
lea rsi, [rsp + 0x398]
mov r8d, 0x1b27e10
mov rcx, rsi
call fcn.1400222d0
lea rax, [0x141cf16a1]
mov qword [rsp + 0x28], rax
lea rax, [0x141cf1695]
mov qword [rsp + 0x20], rax
lea rdx, [0x141b80665]
lea r9, [0x141cf1675]
lea rdi, [rsp + 0x3b0]
mov r8d, 0x171010
mov rcx, rdi
call fcn.1400222d0
lea rax, [0x141ceccd7]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0x446f3a0b
mov edx, dword [rsp + 0x48]
call fcn.1400066d0
movabs rcx, 0x1475fc523cd3770b
xor rcx, qword [rax]
movabs rdx, 0x7fe4424cd402dc0d
xor rdx, qword [rax + 8]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdx
lea rdx, [rsp + 0x48]
mov r8d, 0x10
mov rcx, rsi
call fcn.140010550
lea rax, [0x141ce90a4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xebb21388
mov edx, dword [rsp + 0x48]
call fcn.1400068d0
movabs rcx, 0x5cedd3e0320a9f14
xor rcx, qword [rax]
mov edx, 0x34a5b5a8
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xa0
shr eax, 8
xor al, 0x60
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], edx
mov byte [rsp + 0x54], r8b
mov byte [rsp + 0x55], al
lea rdx, [rsp + 0x48]
mov r8d, 0xe
mov rcx, rdi
call fcn.140010550
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2e0]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r15
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r12
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, r13
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2d8]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2d0]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2c8]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2c0]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2b8]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2b0]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2f0]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x298]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x290]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x288]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x280]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x278]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x270]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, rbp
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x268]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x260]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x258]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x250]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x248]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x240]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x238]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x2e8]
call rsi
mov rcx, qword [0x141d049c8]
xor edx, edx
mov r8, qword [rsp + 0x320]
call rsi
nop
add rsp, 0x3c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs r15, 0xde00000002
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x120]
test rbx, rbx
jne 0x14000cde2
jmp 0x14000cdf4
ud2
call fcn.14003c180
lea rax, [0x141ce3120]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x48], 0xc9ff42ae
mov edx, dword [rsp + 0x48]
call fcn.140006e70
movabs rcx, 0xabf513e510196518
xor rcx, qword [rax]
movabs rdx, 0x893c57ae38bf5301
xor rdx, qword [rax + 8]
movabs r8, 0x3258e7677afb5f0a
xor r8, qword [rax + 0x10]
movabs r9, 0x6270f51ff836179d
xor r9, qword [rax + 0x18]
mov r10d, 0xe6b645b6
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0x76
shr eax, 8
xor al, 0xc4
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov dword [rsp + 0x140], r10d
mov byte [rsp + 0x144], r11b
mov byte [rsp + 0x145], al
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], 0x26
mov qword [rsp + 0x188], r12
lea rax, [0x1400042d0]
mov qword [rsp + 0x190], rax
lea rax, [0x1400586d8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.140031ac0
call fcn.14003c180
int3