Function at 0x140002090
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x398
mov ecx, 5
call fcn.14002f6b0
lea rax, [0x141d1b7b7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x173c27fd765d972
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400378e0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x141d2e108]
mov edx, 0x1d
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor bl, 0x73
xor esi, 0x9a329882
movabs rcx, 0xcf1ccbf35e67e822
xor rdi, rcx
movabs rcx, 0x4477dbe787867f37
xor r14, rcx
movabs rcx, 0x3421c3f86763f04d
xor r15, rcx
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov dword [rax + 0x18], esi
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x50]
mov r8d, 0x1d
mov qword [rsp + 0x360], rax
mov rdx, rax
call fcn.140032c70
cmp dword [rsp + 0x50], 2
jne 0x140005cfd
mov rsi, qword [rsp + 0x58]
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400021db
test rax, rax
je 0x1400021db
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x1400021a4
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x1400021ca
cmp qword [rbx + 0x10], 0x11
jb 0x1400021b9
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x141d1fee7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x692a453009a021c2
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400382e0
movabs rcx, 0xc579d45218b8f51f
xor rcx, qword [rax]
movabs rdx, 0x98a56be0018e9ecb
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x8c
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rdx
mov byte [rsp + 0x138], al
lea rax, [rsp + 0x139]
lea rcx, [rsp + 0x128]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x140]
lea rsi, [rsp + 0x50]
mov rdx, rsi
call fcn.14003dfb0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x1b0], 0
mov rdi, qword [rsp + 0x148]
lea r15, [rsp + 0x1b0]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebx, eax
test eax, eax
je 0x140002402
mov rsi, rbx
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x140], 0
je 0x140002312
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
je 0x14000241b
lea rax, [0x141d17293]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7540e0e9012d6b45
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400379b0
movabs rcx, 0xfbfee014b2d4a1e0
xor rcx, qword [rax]
movabs rdx, 0xad474d59d8720eaa
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0xcf
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x1b8], rdx
mov byte [rsp + 0x1c0], al
lea rax, [rsp + 0x1c1]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x140]
lea rbx, [rsp + 0x50]
mov rdx, rbx
call fcn.14003dfb0
mov qword [rsp + 0x50], 0
mov rdi, qword [rsp + 0x148]
mov qword [rsp + 0x20], rbx
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
mov r9d, 2
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebx, eax
test eax, eax
jne 0x14000242b
mov r14, qword [rsp + 0x50]
cmp qword [rsp + 0x140], 0
jne 0x140002441
jmp 0x140002452
mov rsi, qword [rsp + 0x50]
cmp qword [rsp + 0x140], 0
jne 0x140002301
jmp 0x140002312
mov qword [rsp + 0x218], rsi
mov r14, rsi
jmp 0x1400024ca
mov r14, rbx
shl r14, 0x20
or r14, 2
cmp qword [rsp + 0x140], 0
je 0x140002452
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
jne 0x140005cfb
mov qword [rsp + 0x218], r14
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400024ca
test rax, rax
je 0x1400024ca
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000248b
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x1400024b1
cmp qword [rbx + 0x10], 0x11
jb 0x1400024a0
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsp + 0x218]
lea rax, [0x141d233c6]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2b0048b31f75e28
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037a10
mov ecx, 0xef0be82a
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x8d
mov dword [rsp + 0x1b0], ecx
mov byte [rsp + 0x1b4], al
lea rax, [rsp + 0x1b5]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x50]
call fcn.14003dfb0
mov dword [rsp + 0x1a8], 0x800
mov dword [rsp + 0x128], 0
movzx eax, byte [0x141d2e108]
mov edx, 0x800
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov r15, rax
mov qword [rsp + 0x50], 0x800
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0
mov r12, qword [rsp + 0x148]
lea rdi, [rsp + 0x128]
lea r13, [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
sub rsi, rbp
nop word [rax + rax]
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, r12
xor r8d, r8d
mov r9, rdi
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x140002609
mov r8d, dword [rsp + 0x1a8]
cmp rsi, r8
jae 0x1400025c0
mov rcx, r13
mov rdx, rbp
call fcn.140031400
mov r15, qword [rsp + 0x58]
jmp 0x1400025ad
mov ebx, eax
test eax, eax
jne 0x140002684
movabs rbx, 0xde00000002
mov r12d, dword [rsp + 0x1a8]
mov qword [rsp + 0x60], r12
mov ebp, dword [rsp + 0x128]
cmp ebp, 0xb
ja 0x14000268c
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
cmp qword [rsp + 0x140], 0
je 0x14000265d
mov r8, qword [rsp + 0x148]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x1400026da
mov rbx, r14
lea r15, [rsp + 0x1b0]
lea r12, [rsp + 0x140]
jmp 0x140002733
shl rbx, 0x20
or rbx, 2
lea r15, [rsp + 0x1b0]
cmp qword [rsp + 0x50], 0
lea r12, [rsp + 0x140]
je 0x1400026b7
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x140], 0
je 0x140002733
mov r8, qword [rsp + 0x148]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140002733
cmp bpl, 5
je 0x1400026e9
movzx eax, bpl
cmp eax, 4
jne 0x140002702
cmp r12d, 4
jne 0x1400026f4
mov bpl, 1
jmp 0x140002704
xor ebp, ebp
movabs rbx, 0xd00000002
jmp 0x140002704
xor ebp, ebp
lea r12, [rsp + 0x140]
test r15, r15
je 0x140002722
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test bpl, bpl
lea r15, [rsp + 0x1b0]
jne 0x140005d02
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140002793
test rax, rax
je 0x140002793
mov r14, qword [rbx - 1]
mov rsi, qword [rbx + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14000275c
mov rcx, r14
call rax
dec rbx
cmp qword [rsi + 8], 0
je 0x140002782
cmp qword [rsi + 0x10], 0x11
jb 0x140002771
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x141d22f8e]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x39079fd9bba54eab
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037390
movabs rcx, 0x2f58211c061cdc57
xor rcx, qword [rax]
mov edx, 0x440d2081
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x6f
xor r9b, 0x61
xor r8b, 0xb3
mov qword [rsp + 0x128], rcx
mov dword [rsp + 0x130], edx
mov byte [rsp + 0x134], al
mov byte [rsp + 0x135], r9b
mov byte [rsp + 0x136], r8b
mov qword [rsp + 0x140], rdi
mov qword [rsp + 0x148], 0xf
mov qword [rsp + 0x1b0], r12
lea rax, [0x140042400]
mov qword [rsp + 0x1b8], rax
lea rax, [0x141d28648]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.140030de0
lea rax, [0x141d1ad4c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x9ab536bb52ce46f
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037cf0
mov ecx, 0x517b8bc6
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x27
mov dword [rsp + 0x50], ecx
mov byte [rsp + 0x54], al
lea r9, [0x141d23658]
lea rcx, [rsp + 0x218]
lea rdx, [rsp + 0x50]
mov r8d, 5
call fcn.14003ea50
test rax, rax
jne 0x140005cfb
movabs rax, 0xffffffff7fffffff
mov rcx, qword [rsp + 0x218]
cmp rcx, rax
ja 0x14000290a
call sub.ADVAPI32.dll_RegCloseKey
lea rax, [0x141d1d8d4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x93bacfa9ce62f79e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038330
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xa
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov ecx, esi
shr ecx, 8
xor cl, 0x88
xor sil, 0x27
movabs rdx, 0xc24f23dd7a84dcf0
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xa
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x88], rax
mov word [rsp + 0x110], 0
mov word [rsp + 0x118], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x114], 0x8000000
lea rax, [0x141d1895e]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0xfb678fab8f01a98e
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.1400371d0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x141d2e108]
mov edx, 0x1c
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rsi, rax
lea rcx, [rsp + 0x70]
xor edi, 0xeab1a2d1
movabs rax, 0x8daf4eca98e212d6
xor rbx, rax
movabs rax, 0x9eacd266b44a7b30
xor r14, rax
movabs rax, 0xee70a0085867d038
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.140031540
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0x50]
call fcn.140001470
mov ecx, 5
call fcn.14002f6b0
lea rax, [0x141d16dee]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xbbdb508eec527d7f
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037780
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xa
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov ecx, esi
shr ecx, 8
xor cl, 0xf8
not sil
movabs rdx, 0x3586ab6a3ba09a5f
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xa
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x88], rax
mov word [rsp + 0x110], 0
mov word [rsp + 0x118], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x114], 0x8000000
lea rax, [0x141d1f1e8]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0xd897a14f236db67a
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140038500
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141d2e108]
mov edx, 0x15
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rsi, rax
lea rcx, [rsp + 0x70]
xor bl, 0xae
xor edi, 0xa2bf5cfe
movabs rax, 0x9b8471e2b92909ac
xor r14, rax
movabs rax, 0xa85eb3302447bcde
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov dword [rsi + 0x10], edi
mov byte [rsi + 0x14], bl
call fcn.140031540
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0x50]
call fcn.140001470
mov ecx, 5
call fcn.14002f6b0
lea rax, [0x141d14aa2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf0850d624727e1e9
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037280
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d2e108]
mov edx, 0x11
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov r15, rax
movabs rax, 0x92d7351484af9c03
xor rsi, rax
movabs rax, 0x676003ed29e43d69
xor rdi, rax
xor bl, 0xee
mov qword [r15], rdi
mov qword [r15 + 8], rsi
mov byte [r15 + 0x10], bl
lea rax, [0x141d202f6]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xb1ced75dd0b45df9
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037c40
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov r12, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x49
mov ecx, esi
shr ecx, 8
xor cl, 0xb2
xor sil, 0x5e
movabs rdx, 0x6fedaca2394e2eaf
xor rdi, rdx
mov qword [r12], rdi
mov byte [r12 + 8], sil
mov byte [r12 + 9], cl
mov byte [r12 + 0xa], al
lea rax, [0x141d13c82]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x887f072b77c5f573
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037d50
mov rsi, qword [rax]
movzx ebx, word [rax + 8]
movzx edi, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl edi, 0x10
or ebx, edi
mov edx, ebx
shr edx, 0x10
xor dl, 0xcc
xor bl, 0xb0
movabs rcx, 0xa121f9bb2ef7eb11
xor rsi, rcx
mov qword [rax], rsi
mov byte [rax + 8], bl
mov byte [rax + 9], bh
mov qword [rsp + 0x318], rax
mov byte [rax + 0xa], dl
lea rax, [0x141d16bd5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4213640d680a9aea
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037d20
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xa
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov r13, rax
mov eax, esi
shr eax, 8
xor al, 0x3c
xor sil, 0x55
movabs rcx, 0xb4185d2bcd0f8a6a
xor rdi, rcx
mov qword [r13], rdi
mov byte [r13 + 8], sil
mov byte [r13 + 9], al
lea rax, [0x141d165d4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7d4134ccc48584a9
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038010
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x25
mov ecx, esi
shr ecx, 8
xor cl, 0xd1
xor sil, 9
movabs rdx, 0xb006a64e23651748
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x310], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d21035]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1eb9e28e3105287c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400376e0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x83
mov ecx, esi
shr ecx, 8
xor cl, 0x41
xor sil, 0xd6
movabs rdx, 0xa583ef250328b545
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x308], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d15fe4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xbc25ea58e25798c5
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037460
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xd
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0x2723490e
movabs rcx, 0xea7063caf92c2cd1
xor rdi, rcx
xor bl, 0xef
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x300], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d23530]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xdaf6fa9af3745a1d
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037b10
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xc
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0x521d569c5d261a2d
xor rsi, rcx
xor edi, 0xe11bf59b
mov qword [rax], rsi
mov qword [rsp + 0x2f8], rax
mov dword [rax + 8], edi
lea rax, [0x141d13821]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xd4198b73144560a4
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037df0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xd
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0x87acf609
movabs rcx, 0xa9c1716cde99202
xor rdi, rcx
xor bl, 0x5f
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2f0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d17e63]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4e41e1b7a9a3bb52
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400377f0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d2e108]
mov edx, 0x12
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0x82005ab0aefc5e2c
xor rsi, rcx
movabs rcx, 0x31f1214022276eb8
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xdd
xor bl, 0x7b
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x2e8], rax
mov byte [rax + 0x11], cl
lea rax, [0x141d22319]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x9b0d8fe1e8dd6a29
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037870
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xa
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov edx, esi
shr edx, 8
xor dl, 0x8c
xor sil, 0xc0
movabs rcx, 0xa9610837b9defd0
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2e0], rax
mov byte [rax + 9], dl
lea rax, [0x141d1b23a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa9e7d45022ce0e89
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038130
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xa
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov edx, esi
shr edx, 8
add dl, 0x80
xor sil, 0x3f
movabs rcx, 0x14a0108789b23b0e
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2d8], rax
mov byte [rax + 9], dl
lea rax, [0x141d1b3da]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xacd2763a087ff1b4
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037680
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xd
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0x3affb6c8
movabs rcx, 0x320c71d36573277d
xor rdi, rcx
xor bl, 0xbb
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2d0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d1afaf]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x9cfd7a6dc01dc0d8
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037a30
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xf0
mov ecx, esi
shr ecx, 8
xor cl, 0xc2
xor sil, 0xba
movabs rdx, 0x94f18f75cdccdede
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x2c8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d1c9a2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc162ef250da342ed
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037840
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xd
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0x42875a9d
movabs rcx, 0xad26e5f1f3a77113
xor rdi, rcx
xor bl, 0x97
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d1669c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2f72712173d4c325
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038490
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d2e108]
mov edx, 0xf
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x34
mov ecx, esi
shr ecx, 8
xor cl, 0x46
add sil, 0x80
xor edi, 0x7928c673
movabs rdx, 0xd4704a8347fcbef2
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x2b8], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141d19e96]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x3c401ca378a23ad0
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400373d0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x141d2e108]
mov edx, 0x1c
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0x10b21598
movabs rcx, 0x4be7306d1ced9e5e
xor rdi, rcx
movabs rcx, 0x8e457d6a9affafaf
xor rbx, rcx
movabs rcx, 0xf4d3e2067cd804e4
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x2b0], rax
mov dword [rax + 0x18], esi
lea rax, [0x141d181ae]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x46670b2918ae15e9
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037980
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x141d2e108]
mov edx, 0x19
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov r14, rax
movabs rax, 0x8aabb1f4c0a4f024
xor rsi, rax
movabs rax, 0xbe665e705ddcf186
xor rdi, rax
movabs rax, 0xd19d45d56bdf4a39
xor rbx, rax
xor bpl, 0x7e
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x141d1b4c9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa2246a5c336c5fba
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037e20
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xa
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rbx, rax
mov eax, esi
shr eax, 8
xor al, 0xd1
xor sil, 0xe3
movabs rcx, 0x33efa2513d4edf24
xor rdi, rcx
mov qword [rbx], rdi
mov byte [rbx + 8], sil
mov byte [rbx + 9], al
lea rax, [0x141d140a1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4152593834f08f82
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037250
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xc
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov qword [rsp + 0x2a8], rbx
movabs rcx, 0x545135e3a157c9b3
xor rsi, rcx
xor edi, 0x2f40fe35
mov qword [rax], rsi
mov qword [rsp + 0x2a0], rax
mov dword [rax + 8], edi
lea rax, [0x141d187b4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xd3ac20e4a306f779
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037900
mov rsi, qword [rax]
movzx eax, byte [0x141d2e108]
mov edx, 8
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
movabs rax, 0x79dd87341057e7e1
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x141d1a4ed]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x22a214dd27dddaab
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400384d0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 9
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov qword [rsp + 0x298], rdi
xor bl, 0x2d
movabs rcx, 0xa7564753927db33e
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x290], rax
mov byte [rax + 8], bl
lea rax, [0x141d1d31c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xac30b9ecd075efe8
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037430
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 9
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor bl, 0xe8
movabs rcx, 0x41fbf236d4db9f6d
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x288], rax
mov byte [rax + 8], bl
lea rax, [0x141d1919a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa9ddbb796d1f6e48
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037570
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xc
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0x7cad8cf896c18091
xor rsi, rcx
xor edi, 0x6b6fa641
mov qword [rax], rsi
mov qword [rsp + 0x280], rax
mov dword [rax + 8], edi
lea rax, [0x141d17fdf]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x73a6cfe30798ce90
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037490
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d2e108]
mov edx, 0xf
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xb3
mov ecx, esi
shr ecx, 8
xor cl, 0x19
xor sil, 0xa0
xor edi, 0xfec4fd13
movabs rdx, 0x49b9ad783bda96fa
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x278], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141d19fdd]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x118fb461fe4c58a1
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400371a0
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x141d2e108]
mov edx, 0xc
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rbp, rax
movabs rax, 0xc6f02d95376255d9
xor rsi, rax
xor edi, 0xab1f6ab4
mov qword [rbp], rsi
mov dword [rbp + 8], edi
lea rax, [0x141d1dfb5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xe21fd1f8005c1ff6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037d80
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x1a
mov ecx, esi
shr ecx, 8
xor cl, 0x56
xor sil, 5
movabs rdx, 0xd29b5e0817dd268e
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x270], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d1f95a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2d94c246c0c8b55
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037ad0
mov rsi, qword [rax]
movzx eax, byte [0x141d2e108]
mov edx, 8
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0xd0e952e35b059667
xor rsi, rcx
mov qword [rsp + 0x268], rax
mov qword [rax], rsi
lea rax, [0x141d1e4bd]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2bce5af502774f52
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037170
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d2e108]
mov edx, 0x11
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0xab243a96991ef3e7
xor rsi, rcx
movabs rcx, 0x1664f741d7b2992a
xor rdi, rcx
xor bl, 0xd
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x260], rax
mov byte [rax + 0x10], bl
lea rax, [0x141d1d35c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xfc4ca8cdae17e9fd
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037a60
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xd
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0x8ef7f712
movabs rcx, 0x90c18dec2a132714
xor rdi, rcx
xor bl, 0x18
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x258], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d1d391]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x63e7ad59a85c0112
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037540
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d2e108]
mov edx, 0xb
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x79
mov ecx, esi
shr ecx, 8
xor cl, 0x22
xor sil, 0xc2
movabs rdx, 0x43de1249eff28099
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x250], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141d222da]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xe84e4481a5db630d
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037920
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xd
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
xor esi, 0xab6952ca
movabs rcx, 0xe990daec518e96c7
xor rdi, rcx
xor bl, 0x12
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x248], rax
mov byte [rax + 0xc], bl
lea rax, [0x141d21bf8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf880244849fa4dc3
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037c60
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d2e108]
mov edx, 0x12
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0xb798903ea5d9a764
xor rsi, rcx
movabs rcx, 0xdba6712517380ab2
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x5c
xor bl, 0xd1
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x240], rax
mov byte [rax + 0x11], cl
lea rax, [0x141d1d334]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7b8e36fd6ff76f18
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400380a0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d2e108]
mov edx, 7
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xc4
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 6
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0xc1
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x1618276
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x141d2e108]
mov edx, 0x220
xor ecx, ecx
mov rsi, r8
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rcx, rax
mov qword [rsp + 0x350], r15
mov qword [rax], r15
mov qword [rax + 8], 0x11
mov qword [rsp + 0x348], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xb
mov rax, qword [rsp + 0x318]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], 0xb
mov qword [rsp + 0x340], r13
mov qword [rcx + 0x30], r13
mov qword [rcx + 0x38], 0xa
mov rax, qword [rsp + 0x310]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xb
mov rax, qword [rsp + 0x308]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xb
mov rax, qword [rsp + 0x300]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x2f8]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xc
mov rax, qword [rsp + 0x2f0]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xd
mov rax, qword [rsp + 0x2e8]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x12
mov rax, qword [rsp + 0x2e0]
mov qword [rcx + 0xa0], rax
mov qword [rcx + 0xa8], 0xa
mov rax, qword [rsp + 0x2d8]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x2d0]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xd
mov rax, qword [rsp + 0x2c8]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 0xb
mov rax, qword [rsp + 0x2c0]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 0xd
mov rax, qword [rsp + 0x2b8]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 0xf
mov rax, qword [rsp + 0x2b0]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0x1c
mov qword [rsp + 0x330], r14
mov qword [rcx + 0x110], r14
mov qword [rcx + 0x118], 0x19
mov rax, qword [rsp + 0x2a8]
mov qword [rcx + 0x120], rax
mov qword [rcx + 0x128], 0xa
mov rax, qword [rsp + 0x2a0]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xc
mov rax, qword [rsp + 0x298]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 8
mov rax, qword [rsp + 0x290]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 9
mov rax, qword [rsp + 0x288]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 9
mov rax, qword [rsp + 0x280]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xc
mov rax, qword [rsp + 0x278]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xf
mov qword [rsp + 0x338], rbp
mov qword [rcx + 0x190], rbp
mov qword [rcx + 0x198], 0xc
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x1a0], rax
mov qword [rcx + 0x1a8], 0xb
mov rax, qword [rsp + 0x268]
mov qword [rcx + 0x1b0], rax
mov qword [rcx + 0x1b8], 8
mov rax, qword [rsp + 0x260]
mov qword [rcx + 0x1c0], rax
mov qword [rcx + 0x1c8], 0x11
mov rax, qword [rsp + 0x258]
mov qword [rcx + 0x1d0], rax
mov qword [rcx + 0x1d8], 0xd
mov rax, qword [rsp + 0x250]
mov qword [rcx + 0x1e0], rax
mov qword [rcx + 0x1e8], 0xb
mov rax, qword [rsp + 0x248]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], 0xd
mov rax, qword [rsp + 0x240]
mov qword [rcx + 0x200], rax
mov qword [rcx + 0x208], 0x12
mov qword [rsp + 0x328], rsi
mov qword [rcx + 0x210], rsi
mov qword [rsp + 0x320], rcx
mov qword [rcx + 0x218], 7
lea rax, [0x141d18dff]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x576eb747bddce434
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037650
movabs rcx, 0x73ab572e89593d9b
xor rcx, qword [rax]
movabs rdx, 0x34d905ed309deaa9
xor rdx, qword [rax + 8]
movabs r8, 0xfcab4d8498f1543f
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x29
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x1b8], rdx
mov qword [rsp + 0x1c0], r8
mov byte [rsp + 0x1c8], al
mov dword [rsp + 0x238], 0x41888887
lea rax, [0x141d21d24]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xad2eb979989653dc
mov qword [rsp + 0x50], rax
lea rbp, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037400
mov rcx, qword [rax]
mov qword [rsp + 0x358], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x230], rcx
mov r13, qword [rax + 0x10]
mov r12, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
mov r14, qword [rax + 0x28]
mov rbx, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x127], al
movzx eax, byte [0x141d2e108]
mov edx, 0x49
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
movabs rcx, 0x3d714daa07e7cfe7
xor rsi, rcx
movabs rcx, 0x6978d6d6f143f38f
xor rdi, rcx
movabs rcx, 0x7695fa8d2876a106
xor rbx, rcx
movabs rcx, 0x10f101a4b5656906
xor r14, rcx
movabs rcx, 0xc8ff638141ad0707
xor r15, rcx
movabs rcx, 0xe540c5162f47f705
xor r12, rcx
movabs rcx, 0x10584f7e2c47d3a7
xor r13, rcx
movabs rcx, 0x435d286f96a631c0
mov rdx, qword [rsp + 0x230]
xor rdx, rcx
movabs rcx, 0x369b46e329435757
mov r8, qword [rsp + 0x358]
xor r8, rcx
movzx ecx, byte [rsp + 0x127]
xor cl, 0xc8
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r14
mov qword [rax + 0x30], rbx
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x218], 0x49
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 0x49
xor edi, edi
movabs r13, 0xffffffff7fffffff
jmp 0x140004531
add rdi, 0x10
cmp rdi, 0x220
je 0x1400047a9
mov rax, qword [rsp + 0x320]
add rax, rdi
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x140], rax
lea rax, [0x140001dc0]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x150], rax
lea rax, [0x1400423e0]
mov qword [rsp + 0x158], rax
lea rax, [0x141d23660]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
lea rsi, [rsp + 0x140]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 2
lea rcx, [rsp + 0x128]
mov rdx, rbp
call fcn.140007a40
mov rbx, qword [rsp + 0x128]
mov r12, qword [rsp + 0x130]
mov rax, qword [rsp + 0x138]
add rax, r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
mov rcx, rsi
mov rdx, rbp
call fcn.14003dfb0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x23c], 0
mov rsi, qword [rsp + 0x148]
lea rax, [rsp + 0x23c]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov r15d, eax
test eax, eax
je 0x1400046f0
mov r14, r15
shl r14, 0x20
or r14, 2
cmp qword [rsp + 0x140], 0
je 0x140004693
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test r15d, r15d
jne 0x140004706
mov qword [rsp + 0x50], r14
mov r8d, 0x19
mov rcx, rbp
lea rdx, [rsp + 0x1b0]
lea r9, [rsp + 0x238]
call fcn.14003ea50
test rax, rax
jne 0x14000472a
cmp r14, r13
ja 0x1400046cd
mov rcx, r14
call sub.ADVAPI32.dll_RegCloseKey
test rbx, rbx
je 0x140004520
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
jmp 0x140004520
mov r14, qword [rsp + 0x50]
cmp qword [rsp + 0x140], 0
jne 0x140004682
jmp 0x140004693
movzx eax, byte [0x141d2e108]
mov edx, 8
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rsi, rax
mov qword [rax], r14
jmp 0x14000475c
mov rdi, rax
movzx eax, byte [0x141d2e108]
mov edx, 8
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rsi, rax
mov qword [rax], rdi
cmp r14, r13
ja 0x14000475c
mov rcx, r14
call sub.ADVAPI32.dll_RegCloseKey
test rbx, rbx
je 0x140004772
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x218], 0
je 0x140004793
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rcx, rsi
call fcn.140040e80
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, rsi
jmp 0x1400047c5
cmp qword [rsp + 0x218], 0
je 0x1400047ca
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d2e0f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, 3
call fcn.14002f6b0
lea rax, [0x141d1533a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1a35ef5b92b6c179
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037bf0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx eax, byte [0x141d2e108]
mov edx, 0xe
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov ecx, esi
shr ecx, 8
xor cl, 0xd8
xor sil, 0x5c
xor edi, 0x93108273
movabs rdx, 0xa0329993a6ffc80c
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x50], 0xe
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xe
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x88], rax
mov word [rsp + 0x110], 0
mov word [rsp + 0x118], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x114], 0x8000000
lea rax, [0x141d13dbc]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0xd55d003e1cb3bb86
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140037fe0
mov rbx, qword [rax]
movzx eax, byte [0x141d2e108]
mov edx, 8
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
lea rsi, [rsp + 0x70]
movabs rax, 0x43b60cc360100829
xor rbx, rax
mov qword [rdi], rbx
mov rcx, rsi
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx], 0
mov qword [rbx + 8], 8
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 8
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x80], 1
lea rax, [0x141d20244]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0x24222ac89e8b9284
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140037f10
xorps xmm0, xmm0
movaps xmmword [rsp + 0x190], xmm0
movaps xmmword [rsp + 0x180], xmm0
movaps xmmword [rsp + 0x170], xmm0
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x1a0], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x14005e0dc]
nop dword [rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x148], r8
add rcx, 8
cmp rcx, 0x60
jb 0x140004a70
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x210], rax
movaps xmm0, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x200], xmm0
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmm2, xmmword [rsp + 0x160]
movaps xmm3, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x1e0], xmm3
movaps xmmword [rsp + 0x1d0], xmm2
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
movzx eax, byte [0x141d2e108]
mov edx, 0x68
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
mov rax, qword [rsp + 0x210]
mov qword [rdi + 0x60], rax
movaps xmm0, xmmword [rsp + 0x200]
movups xmmword [rdi + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rdi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x1b0]
movaps xmm1, xmmword [rsp + 0x1c0]
movaps xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [rdi + 0x30], xmm3
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
cmp qword [rsp + 0x70], 1
jne 0x140004b83
mov rcx, rsi
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x68
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x68
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x80], 2
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x50]
call fcn.140026e90
lea rax, [0x141d229c7]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x4ee576ee74668543
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140037750
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
movzx eax, word [rax + 0x28]
cmp dword [rsp + 0x140], 0
jne 0x140005cfb
lea rcx, [rsp + 0x50]
call fcn.140001470
lea rax, [0x141d1efb7]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xe33af03e8cc983a3
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038350
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d2e108]
mov edx, 7
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x54
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x9a
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x74
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x9e47f49e
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 7
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x88], rax
mov word [rsp + 0x110], 0
mov word [rsp + 0x118], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x114], 0x8000000
lea rax, [0x141d1f99e]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0x8fbc5eb6a21da8ab
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140037720
movzx esi, word [rax]
movzx eax, byte [0x141d2e108]
mov edx, 2
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
lea rcx, [rsp + 0x70]
xor esi, 0x508f
mov word [rax], si
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x80], 1
lea rax, [0x141d141bc]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0x866264cf4a3d8fde
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140037e80
mov rsi, qword [rax]
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov r14, qword [rax + 0x20]
mov ebp, dword [rax + 0x28]
movzx eax, byte [0x141d2e108]
mov edx, 0x2c
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
xor ebp, 0x415d7f1
movabs rax, 0x90d3be5dc4d603ac
xor r14, rax
movabs rax, 0x179b94abc022e3e4
xor r15, rax
movabs rax, 0xb12bcb45807907a3
xor r12, rax
movabs rax, 0x8a14f59079ef0bda
xor r13, rax
movabs rax, 0xc839e2ac014d52a0
xor rsi, rax
mov qword [rdi], rsi
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], r14
mov dword [rdi + 0x28], ebp
cmp qword [rsp + 0x70], 1
jne 0x140004f38
lea rcx, [rsp + 0x70]
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x2c
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x2c
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x80], 2
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x50]
call fcn.140026e90
lea rax, [0x141d1cb3b]
mov qword [rsp + 0x1b0], rax
lea rax, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b0]
movabs rax, 0x6263a40d39527aa
mov qword [rsp + 0x1b0], rax
lea rax, [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b0]
call fcn.140038100
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
cmp dword [rsp + 0x140], 0
jne 0x140005cfb
lea rcx, [rsp + 0x50]
call fcn.140001470
lea rax, [0x141d172b2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4fdea34f6d03d28
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140037b60
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d2e108]
mov edx, 7
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x91
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x56
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xfe
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x881f6301
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 7
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x88], rax
mov word [rsp + 0x110], 0
mov word [rsp + 0x118], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x114], 0x8000000
lea rax, [0x141d180d7]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0xeed4d423c9b97c
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140038040
movzx esi, word [rax]
movzx eax, byte [0x141d2e108]
mov edx, 2
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
lea rcx, [rsp + 0x70]
xor esi, 0xd41b
mov word [rax], si
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x80], 1
lea rax, [0x141d14654]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0x200000d2ea37f00d
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140037230
mov rcx, qword [rax]
mov qword [rsp + 0x230], rcx
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov r14d, dword [rax + 0x20]
movzx ebp, word [rax + 0x24]
movzx esi, byte [rax + 0x26]
movzx eax, byte [0x141d2e108]
mov edx, 0x27
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
shl esi, 0x10
or ebp, esi
mov eax, ebp
shr eax, 0x10
xor al, 0x17
mov ecx, ebp
shr ecx, 8
xor cl, 0x84
xor bpl, 0xe8
xor r14d, 0x9bddaee8
movabs rdx, 0x6ea88c7b6d061819
xor r15, rdx
movabs rdx, 0x837d4a25bea550da
xor r12, rdx
movabs rdx, 0x241a54dab4e1497d
xor r13, rdx
movabs rdx, 0x3490809c683fe99a
mov r8, qword [rsp + 0x230]
xor r8, rdx
mov qword [rdi], r8
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r15
mov dword [rdi + 0x20], r14d
mov byte [rdi + 0x24], bpl
mov byte [rdi + 0x25], cl
mov byte [rdi + 0x26], al
cmp qword [rsp + 0x70], 1
jne 0x140005309
lea rcx, [rsp + 0x70]
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x27
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x27
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x80], 2
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x50]
call fcn.140026e90
lea rax, [0x141d1c3d1]
mov qword [rsp + 0x1b0], rax
lea rax, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b0]
movabs rax, 0xa101c69c6296718a
mov qword [rsp + 0x1b0], rax
lea rax, [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1b0]
call fcn.140037360
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
cmp dword [rsp + 0x140], 0
mov r14, qword [rsp + 0x350]
mov r15, qword [rsp + 0x348]
mov r12, qword [rsp + 0x340]
mov r13, qword [rsp + 0x338]
jne 0x140005cfb
lea rcx, [rsp + 0x50]
call fcn.140001470
lea rax, [0x141d1d1fe]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x437ca7418107633
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038240
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d2e108]
mov edx, 7
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 7
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0x28
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xbe
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xc5bffa01
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 7
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x88], rax
mov word [rsp + 0x110], 0
mov word [rsp + 0x118], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x114], 0x8000000
lea rax, [0x141d13c0c]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0x5f4ae05e0ff7f798
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.1400374f0
movzx ebx, word [rax]
movzx eax, byte [0x141d2e108]
mov edx, 2
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
lea rsi, [rsp + 0x70]
xor ebx, 0xff61
mov word [rax], bx
mov rcx, rsi
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx], 0
mov qword [rbx + 8], 2
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 2
mov byte [rbx + 0x20], 0
mov qword [rsp + 0x80], 1
lea rax, [0x141d1f470]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
movabs rax, 0xdfbc2e50d7951d4
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
call fcn.140037fb0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x180], xmm0
movaps xmmword [rsp + 0x170], xmm0
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x190], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x14005e144]
nop word cs:[rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x148], r8
add rcx, 8
cmp rcx, 0x50
jb 0x140005680
movzx eax, byte [rax + 0x58]
xor al, 0x6d
mov byte [rsp + 0x198], al
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmm2, xmmword [rsp + 0x160]
movaps xmm3, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1d0], xmm2
movaps xmmword [rsp + 0x1e0], xmm3
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x1f0], xmm0
mov rax, qword [rsp + 0x189]
mov qword [rsp + 0x1f9], rax
mov eax, dword [rsp + 0x191]
mov dword [rsp + 0x201], eax
movzx eax, word [rsp + 0x195]
mov word [rsp + 0x205], ax
movzx eax, byte [rsp + 0x197]
mov byte [rsp + 0x207], al
movzx eax, byte [rsp + 0x198]
mov byte [rsp + 0x208], al
movzx eax, byte [0x141d2e108]
mov edx, 0x59
xor ecx, ecx
call fcn.140031680
test rax, rax
je 0x140005cfb
mov rdi, rax
movups xmm0, xmmword [rsp + 0x1f9]
movups xmmword [rax + 0x49], xmm0
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rax + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x1b0]
movaps xmm1, xmmword [rsp + 0x1c0]
movaps xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x70], 1
jne 0x1400057c0
mov rcx, rsi
call fcn.140031540
mov rbx, qword [rsp + 0x78]
mov qword [rbx + 0x28], 0
mov qword [rbx + 0x30], 0x59
mov qword [rbx + 0x38], rdi
mov qword [rbx + 0x40], 0x59
mov byte [rbx + 0x48], 0
mov qword [rsp + 0x80], 2
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x50]
call fcn.140026e90
lea rax, [0x141d1472c]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xc4526857bd1e88d0
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400378b0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx ecx, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
cmp dword [rsp + 0x140], 0
jne 0x140005cfb
lea rcx, [rsp + 0x50]
call fcn.140001470
mov ecx, 2
call fcn.14002f6b0
lea rax, [0x141baf5d9]
mov qword [rsp + 0x28], rax
lea rax, [0x141baf5cd]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005e19d]
lea r9, [0x141baf5ad]
lea rdi, [rsp + 0x368]
mov r8d, 0x1b51410
mov rcx, rdi
call fcn.140017e20
lea rax, [0x141d23635]
mov qword [rsp + 0x28], rax
lea rax, [0x141d23629]
mov qword [rsp + 0x20], rax
lea rdx, [0x141baf5f9]
lea r9, [0x141d23609]
lea rsi, [rsp + 0x380]
mov r8d, 0x174010
mov rcx, rsi
call fcn.140017e20
lea rax, [0x141d15f78]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4a6fa5dd7ffe6444
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038260
movabs rcx, 0x6a6dffded743cb0f
xor rcx, qword [rax]
movzx edx, byte [rax + 0xa]
movzx eax, word [rax + 8]
mov r8d, eax
shr r8d, 8
xor al, 0xb5
xor r8b, 0xf7
xor dl, 0x5c
mov qword [rsp + 0x50], rcx
mov byte [rsp + 0x58], al
mov byte [rsp + 0x59], r8b
mov byte [rsp + 0x5a], dl
lea rdx, [rsp + 0x50]
mov r8d, 0xb
mov rcx, rdi
call fcn.1400061b0
lea rax, [0x141d22bd9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x893ac22a9e4163a0
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400372c0
movabs rcx, 0x5ae15e22e4677723
xor rcx, qword [rax]
mov edx, 0x5581f0b0
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x1b
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x58], edx
mov byte [rsp + 0x5c], al
lea rdx, [rsp + 0x50]
mov r8d, 0xd
mov rcx, rsi
call fcn.1400061b0
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x320]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x318]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x310]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x308]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x300]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2f8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2f0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2e8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2e0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2d8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2d0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2c8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2c0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2b8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2b0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x330]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x298]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x290]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x288]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x280]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x278]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x270]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x268]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x260]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x258]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x250]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x248]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x240]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x328]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x141d2e0f8]
xor edx, edx
mov r8, qword [rsp + 0x360]
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x398
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
call fcn.140026f90
lea rax, [0x141d1dce6]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4a9e4ef34b5ae078
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140038200
movabs rcx, 0x3c742ef16d3aa8c0
xor rcx, qword [rax]
movabs rdx, 0x48aee67e8ce016a4
xor rdx, qword [rax + 8]
movabs r8, 0x1b5199f0184ce58e
xor r8, qword [rax + 0x10]
movabs r9, 0x846e33fa259e3527
xor r9, qword [rax + 0x18]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x158], r9
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 0x20
mov qword [rsp + 0x128], r15
lea rax, [0x140042400]
mov qword [rsp + 0x130], rax
lea rax, [0x141d28648]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.140030de0
call fcn.140026f90
int3