Function at 0x14001d9c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x420
mov rax, qword [0x1400f1200]
xor rax, rsp
mov qword [rsp + 0x410], rax
xor r14d, r14d
mov dword [rsp + 0x34], r14d
mov dword [r11 - 0x338], r14d
mov qword [r11 - 0x330], r14
mov qword [r11 - 0x328], r14
lea ecx, [r14 + 0x30]
call fcn.140078e70
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x118], r14
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], 7
mov qword [rsp + 0x138], 8
mov dword [rsp + 0x100], 0x3f800000
mov r8, rax
mov r12d, 0x10
mov edx, r12d
lea rcx, [rsp + 0x118]
call fcn.14001ee30
nop
mov dword [rsp + 0x150], r14d
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], r14
lea ecx, [r14 + 0x38]
call fcn.140078e70
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x168], r14
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], 7
mov qword [rsp + 0x188], 8
mov dword [rsp + 0x150], 0x3f800000
mov r8, rax
mov edx, r12d
lea rcx, [rsp + 0x168]
call fcn.14001ee30
nop
call fcn.140021770
mov rbx, qword [rax]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], r14b
jne 0x14001dcc9
lea r15, str.start_enabled_powertoys:_couldnt_read_the_gpo_rule_for_Powertoy_
lea r13, str.start_enabled_powertoys:_gpo_rule_for_Powertoy__is_set_to_an_unknown_value
nop word [rax + rax]
lea rdi, [rbx + 0x20]
mov rcx, qword [rdi + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x88]
mov esi, eax
mov r8, rdi
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x150]
call fcn.14001f9c0
mov rcx, qword [rax]
mov dword [rcx + 0x30], esi
cmp esi, 0xfffffffe
jne 0x14001dbc7
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], 0x43
mov qword [rsp + 0x1c8], r14
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1d0], r14
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0x320], xmm1
movsd xmm0, qword [rsp + 0x1d0]
movsd qword [rsp + 0x330], xmm0
lea r9, [rsp + 0x140]
lea rdx, [rsp + 0x320]
jmp 0x14001dc2c
cmp esi, 0xfffffffd
jne 0x14001dc43
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], 0x4c
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0xc0], xmm0
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xe0], xmm1
movsd xmm0, qword [rsp + 0x60]
movsd qword [rsp + 0xf0], xmm0
lea r9, [rsp + 0xc0]
lea rdx, [rsp + 0xe0]
mov qword [rsp + 0x20], rdi
mov r8d, 3
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
mov rcx, qword [rdi + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x80]
test al, al
jne 0x14001dc6c
mov r8, rdi
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x100]
call fcn.14001f190
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14001dc98
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14001dc93
cmp rbx, qword [rax + 0x10]
jne 0x14001dc93
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14001dc80
mov rbx, rax
jmp 0x14001dcbf
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14001dcbf
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14001dcb0
cmp byte [rbx + 0x19], 0
je 0x14001db20
lea rax, [0x1400fcc78]
mov qword [rsp + 0x350], rax
lock inc qword [0x1400fcc78]
cmp qword [0x1400fcc70], 0
je 0x14001dd12
lea rdx, [rsp + 0x40]
lea rcx, [0x1400fcc70]
call fcn.14001ef80
mov dword [rsp + 0x34], 0x30
lock dec qword [0x1400fcc78]
mov r12d, dword [rsp + 0x34]
jmp 0x14001dd3c
lock dec qword [0x1400fcc78]
lea rax, [0x14001a170]
mov qword [rsp + 0x190], rax
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0x40]
call fcn.14001a190
nop
lea rcx, [rsp + 0x80]
call fcn.14001bd10
mov rbx, rax
lea rax, [rsp + 0x40]
cmp rax, rbx
je 0x14001dd75
cmp qword [rsp + 0x40], 0
je 0x14001dd68
lea rcx, [rsp + 0x40]
call fcn.140019250
mov rcx, qword [rbx]
mov qword [rbx], r14
mov qword [rsp + 0x40], rcx
jmp 0x14001dd7a
mov rcx, qword [rsp + 0x40]
cmp qword [rsp + 0x80], 0
je 0x14001dd97
lea rcx, [rsp + 0x80]
call fcn.140019250
mov rcx, qword [rsp + 0x40]
mov dword [rsp + 0x2d8], 1
mov dword [rsp + 0x2dc], 7
lea rdi, str.enabled
mov qword [rsp + 0x2e8], rdi
lea rdx, [rsp + 0x2d8]
mov qword [rsp + 0x2d0], rdx
mov byte [rsp + 0x30], 0
mov dword [rsp + 0x280], 0x69
mov dword [rsp + 0x284], 9
lea rsi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
mov qword [rsp + 0x288], rsi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IMap_struct_winrt::Windows::Data::Json::JsonObject_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::HasKey_const_struct_winrt::param::hstring___const
mov qword [rsp + 0x290], rax
test rcx, rcx
jne 0x14001de12
mov rcx, r14
mov rbx, r14
jmp 0x14001de41
mov qword [rsp + 0x88], r14
mov rax, qword [rcx]
lea r8, [rsp + 0x88]
lea rdx, [0x1400c87f8]
call qword [rax]
mov rcx, qword [rsp + 0x88]
mov rbx, rcx
mov rdx, qword [rsp + 0x2d0]
mov qword [rsp + 0x90], rcx
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
call qword [rax + 0x40]
test eax, eax
js 0x14001eb29
test rbx, rbx
je 0x14001de6e
lea rcx, [rsp + 0x90]
call fcn.140019250
cmp byte [rsp + 0x30], 0
je 0x14001e7c8
mov dword [rsp + 0x2f8], 1
mov dword [rsp + 0x2fc], 7
mov qword [rsp + 0x308], rdi
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x98], r14
mov dword [rsp + 0x298], 0x4b
mov dword [rsp + 0x29c], 9
lea rax, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
mov qword [rsp + 0x2a0], rax
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonObject_struct_winrt::Windows::Data::Json::IJsonObject_::GetNamedObject_const_struct_winrt::param::hstring___const
mov qword [rsp + 0x2a8], rax
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x2f8]
call qword [rax + 0x40]
test eax, eax
js 0x14001eb39
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x78], rax
or r12d, 0x40
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x78]
call fcn.14001d7d0
nop
mov rdi, r14
mov qword [rsp + 0xb0], r14
movabs r13, 0x100000001b3
mov rax, qword [rsp + 0x38]
movabs r15, 0xcbf29ce484222325
lea rbx, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Key_void__const
cmp rax, rdi
je 0x14001e78d
test rax, rax
je 0x14001e00f
test rdi, rdi
je 0x14001e00f
mov qword [rsp + 0xa0], r14
mov rcx, qword [rax]
mov r9, qword [rcx]
lea r8, [rsp + 0xa0]
lea rdx, [0x1400c88d8]
mov rcx, rax
call r9
mov rbx, qword [rsp + 0xa0]
mov qword [rsp + 0x1a0], rbx
mov qword [rsp + 0xa8], r14
mov rax, qword [rdi]
lea r8, [rsp + 0xa8]
lea rdx, [0x1400c88d8]
mov rcx, rdi
call qword [rax]
mov rsi, qword [rsp + 0xa8]
mov qword [rsp + 0x198], rsi
test rsi, rsi
je 0x14001dfe1
lea rcx, [rsp + 0x198]
call fcn.140019250
test rbx, rbx
je 0x14001dff3
lea rcx, [rsp + 0x1a0]
call fcn.140019250
mov rax, qword [rsp + 0x38]
cmp rbx, rsi
je 0x14001e78d
lea rsi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
lea rbx, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Key_void__const
mov qword [rsp + 0x48], r14
or r12d, 2
mov dword [rsp + 0x34], r12d
mov dword [rsp + 0x208], 0x17
mov dword [rsp + 0x20c], 9
mov qword [rsp + 0x210], rsi
lea rcx, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IIterator_struct_winrt::Windows::Foundation::Collections::IIterator_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue____struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue___::Current_void__const
mov qword [rsp + 0x218], rcx
mov rcx, qword [rax]
mov r8, qword [rcx + 0x30]
lea rdx, [rsp + 0x48]
mov rcx, rax
call r8
test eax, eax
js 0x14001eb49
and r12d, 0xfffffffd
or r12d, 1
mov qword [rsp + 0x68], r14
or r12d, 4
mov dword [rsp + 0x34], r12d
mov dword [rsp + 0x220], 0x2f
mov dword [rsp + 0x224], 9
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], rbx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
call qword [rax + 0x30]
test eax, eax
js 0x14001eb59
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14001e0cc
mov rdx, qword [rax + 0x10]
mov r8d, dword [rax + 4]
jmp 0x14001e0d6
lea rdx, [0x1400c73d0]
mov r8, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov qword [rsp + 0x400], r14
mov qword [rsp + 0x408], r14
lea rcx, [rsp + 0x3f0]
call fcn.1400075d0
nop
and r12d, 0xfffffffb
mov dword [rsp + 0x34], r12d
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x14001e149
mov eax, 0xffffffff
lock xadd dword [rbx + 0x18], eax
sub eax, 1
jne 0x14001e208
call sub.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap
mov rcx, rax
mov r8, rbx
xor edx, edx
call sub.api_ms_win_core_heap_l1_1_0.dll_HeapFree
mov qword [rsp + 0x68], r14
mov rdi, qword [rsp + 0xb0]
mov r12d, dword [rsp + 0x34]
lea r8, [rsp + 0x3f0]
mov rbx, qword [rsp + 0x3f0]
mov rsi, qword [rsp + 0x408]
cmp rsi, 8
cmovae r8, rbx
mov rcx, r15
mov r10, qword [rsp + 0x400]
lea r9, [r10 + r10]
mov rdx, r14
test r9, r9
je 0x14001e194
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r13
inc rdx
cmp rdx, r9
jb 0x14001e180
and rcx, qword [rsp + 0x180]
add rcx, rcx
mov rax, qword [rsp + 0x168]
mov r9, qword [rax + rcx*8 + 8]
mov r15, qword [rsp + 0x158]
cmp r9, r15
je 0x14001e21e
mov r11, qword [rax + rcx*8]
nop dword [rax]
lea rcx, [r9 + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x14001e1d2
mov rcx, qword [rcx]
lea r8, [rsp + 0x3f0]
cmp rsi, 8
cmovae r8, rbx
cmp r10, rax
jne 0x14001e215
mov rdx, r10
test r10, r10
je 0x14001e221
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x14001e215
add rcx, 2
sub rdx, 1
jne 0x14001e1f2
jmp 0x14001e221
test eax, eax
js 0x14001eb69
jmp 0x14001e137
cmp r9, r11
jne 0x14001e784
mov r9, r14
test r9, r9
je 0x14001e2e9
cmp r9, r15
je 0x14001e2e9
lea r8, [rsp + 0x3f0]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x150]
call fcn.14001f9c0
mov rax, qword [rax]
cmp dword [rax + 0x30], 1
je 0x14001e27f
lea r8, [rsp + 0x3f0]
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x150]
call fcn.14001f9c0
mov rax, qword [rax]
cmp dword [rax + 0x30], 0
jne 0x14001e2e9
mov rdx, qword [rsp + 0x408]
cmp rdx, 8
jb 0x14001e2c7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e2c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001eb8e
call fcn.140078eb4
mov qword [rsp + 0x400], r14
mov qword [rsp + 0x408], 7
mov word [rsp + 0x3f0], r14w
jmp 0x14001e6ee
mov qword [rsp + 0x70], r14
or r12d, 8
mov dword [rsp + 0x34], r12d
mov dword [rsp + 0x238], 0x35
mov dword [rsp + 0x23c], 9
lea rax, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
mov qword [rsp + 0x240], rax
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Value_void__const
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
call qword [rax + 0x38]
test eax, eax
js 0x14001eb6f
mov byte [rsp + 0x31], 0
mov dword [rsp + 0x250], 0xb1
mov dword [rsp + 0x254], 9
lea rax, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
mov qword [rsp + 0x258], rax
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonValue_struct_winrt::Windows::Data::Json::IJsonValue_::GetBoolean_void__const
mov qword [rsp + 0x260], rax
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x31]
call qword [rax + 0x50]
test eax, eax
js 0x14001eb7e
cmp byte [rsp + 0x31], 0
sete bl
and r12d, 0xfffffff7
cmp qword [rsp + 0x70], 0
je 0x14001e3b2
lea rcx, [rsp + 0x70]
call fcn.140019250
test bl, bl
je 0x14001e471
lea rax, str.start_enabled_powertoys:_Powertoy__explicitly_disabled
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2c8], 0x38
mov qword [rsp + 0x1e0], r14
mov qword [rsp + 0x1d8], r14
mov qword [rsp + 0x1e8], r14
movaps xmm0, xmmword [rsp + 0x2c0]
movdqa xmmword [rsp + 0x340], xmm0
movups xmm1, xmmword [rsp + 0x1d8]
movaps xmmword [rsp + 0x390], xmm1
movsd xmm0, qword [rsp + 0x1e8]
movsd qword [rsp + 0x3a0], xmm0
lea rax, [rsp + 0x3f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x340]
mov r8d, 2
lea rdx, [rsp + 0x390]
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
lea r8, [rsp + 0x3f0]
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x100]
call fcn.14001f630
jmp 0x14001e6a2
lea r8, [rsp + 0x3f0]
mov r10, qword [rsp + 0x3f0]
mov r11, qword [rsp + 0x408]
cmp r11, 8
cmovae r8, r10
movabs rdx, 0xcbf29ce484222325
mov r15, qword [rsp + 0x400]
lea r9, [r15 + r15]
mov rcx, r14
test r9, r9
je 0x14001e4c4
nop
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r13
inc rcx
cmp rcx, r9
jb 0x14001e4b0
mov rax, qword [rsp + 0x130]
and rax, rdx
add rax, rax
mov rcx, qword [rsp + 0x118]
mov r8, qword [rcx + rax*8 + 8]
mov rsi, qword [rsp + 0x108]
cmp r8, rsi
je 0x14001e541
mov rbx, qword [rcx + rax*8]
lea rcx, [r8 + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x14001e502
mov rcx, qword [rcx]
lea r9, [rsp + 0x3f0]
cmp r11, 8
cmovae r9, r10
cmp r15, rax
jne 0x14001e538
mov rdx, r15
test r15, r15
je 0x14001e544
sub r9, rcx
movzx eax, word [r9 + rcx]
cmp ax, word [rcx]
jne 0x14001e538
add rcx, 2
sub rdx, 1
jne 0x14001e522
jmp 0x14001e544
cmp r8, rbx
jne 0x14001e77b
mov r8, r14
mov rbx, rsi
test r8, r8
cmovne rbx, r8
cmp rbx, rsi
je 0x14001e6b2
lea rax, str.start_enabled_powertoys:_Overriding_default_enabled_value_for__powertoy
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], 0x49
mov qword [rsp + 0x1f8], r14
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x200], r14
movaps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x380], xmm0
movups xmm1, xmmword [rsp + 0x1f0]
movaps xmmword [rsp + 0x360], xmm1
movsd xmm0, qword [rsp + 0x200]
movsd qword [rsp + 0x370], xmm0
lea rax, [rsp + 0x3f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x380]
mov r8d, 2
lea rdx, [rsp + 0x360]
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
mov r9, qword [rbx + 0x20]
lea r10, [rbx + 0x10]
cmp qword [rbx + 0x28], 8
jb 0x14001e5ff
mov r10, qword [rbx + 0x10]
movabs rcx, 0xcbf29ce484222325
add r9, r9
mov rdx, r14
je 0x14001e625
movzx eax, byte [rdx + r10]
xor rcx, rax
imul rcx, r13
inc rdx
cmp rdx, r9
jb 0x14001e611
and rcx, qword [rsp + 0x130]
add rcx, rcx
mov rdx, qword [rsp + 0x118]
mov rax, qword [rdx + rcx*8]
cmp qword [rdx + rcx*8 + 8], rbx
jne 0x14001e666
cmp rax, rbx
jne 0x14001e65b
mov rax, qword [rsp + 0x108]
mov qword [rdx + rcx*8], rax
mov qword [rdx + rcx*8 + 8], rax
jmp 0x14001e672
mov rax, qword [rbx + 8]
mov qword [rdx + rcx*8 + 8], rax
jmp 0x14001e672
cmp rax, rbx
jne 0x14001e672
mov rax, qword [rbx]
mov qword [rdx + rcx*8], rax
mov rdx, qword [rbx]
dec qword [rsp + 0x110]
mov rax, qword [rbx + 8]
mov qword [rax], rdx
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
lea rcx, [rbx + 0x10]
call fcn.1400073a0
mov edx, 0x30
mov rcx, rbx
call fcn.140078eb4
mov r10, qword [rsp + 0x3f0]
mov r11, qword [rsp + 0x408]
cmp r11, 8
jb 0x14001e6ee
lea rdx, [r11*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x14001e6e5
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001eb8e
mov rcx, r10
call fcn.140078eb4
nop
cmp qword [rsp + 0x48], 0
je 0x14001e700
lea rcx, [rsp + 0x48]
call fcn.140019250
mov byte [rsp + 0x32], 0
mov dword [rsp + 0x268], 0x23
mov dword [rsp + 0x26c], 9
lea rsi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
mov qword [rsp + 0x270], rsi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IIterator_struct_winrt::Windows::Foundation::Collections::IIterator_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue____struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue___::MoveNext_void__const
mov qword [rsp + 0x278], rax
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x32]
call qword [rax + 0x40]
test eax, eax
js 0x14001eb94
cmp byte [rsp + 0x32], 0
jne 0x14001df3c
cmp qword [rsp + 0x38], 0
je 0x14001e76e
lea rcx, [rsp + 0x38]
call fcn.140019250
mov rax, r14
mov qword [rsp + 0x38], rax
jmp 0x14001df41
mov r8, qword [r8 + 8]
jmp 0x14001e4f0
mov r9, qword [r9 + 8]
jmp 0x14001e1c0
test rdi, rdi
je 0x14001e7a4
lea rcx, [rsp + 0xb0]
call fcn.140019250
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x14001e7b4
lea rcx, [rsp + 0x38]
call fcn.140019250
nop
cmp qword [rsp + 0x78], 0
je 0x14001e7d2
lea rcx, [rsp + 0x78]
call fcn.140019250
jmp 0x14001e7d2
movabs r13, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
jmp 0x14001e7f5
call fcn.140021770
mov rbx, qword [rax]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x14001eac9
lea r12, str.start_enabled_powertoys:_GPO_sets_the_enabled_state_for__powertoy_as_
lea rdi, [rbx + 0x20]
mov r8, rdi
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x150]
call fcn.14001f510
mov rcx, qword [rsp + 0x158]
cmp qword [rax], rcx
je 0x14001e8f7
mov r8, rdi
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x150]
call fcn.14001f9c0
mov rcx, qword [rax]
cmp dword [rcx + 0x30], 1
ja 0x14001e8f7
sete byte [rsp + 0x33]
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], 0x49
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0xc0], xmm0
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xe0], xmm1
movsd xmm0, qword [rsp + 0x60]
movsd qword [rsp + 0xf0], xmm0
lea rax, [rsp + 0x33]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xc0]
lea rdx, [rsp + 0xe0]
mov rcx, qword [0x1400fc7f0]
call fcn.1400210e0
cmp byte [rsp + 0x33], 0
jne 0x14001e9d1
jmp 0x14001ea66
mov r10, qword [rdi + 0x10]
mov r8, rdi
mov r11, qword [rdi + 0x18]
cmp r11, 8
jb 0x14001e90b
mov r8, qword [rdi]
mov rcx, rsi
lea r9, [r10 + r10]
mov rdx, r14
test r9, r9
je 0x14001e934
nop word [rax + rax]
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r13
inc rdx
cmp rdx, r9
jb 0x14001e920
mov rax, qword [rsp + 0x130]
and rax, rcx
add rax, rax
mov rcx, qword [rsp + 0x118]
mov r9, qword [rcx + rax*8 + 8]
cmp r9, qword [rsp + 0x108]
je 0x14001e9c5
mov rsi, qword [rcx + rax*8]
nop dword [rax]
lea rcx, [r9 + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x14001e972
mov rcx, qword [rcx]
mov r8, rdi
cmp r11, 8
jb 0x14001e97e
mov r8, qword [rdi]
cmp r10, rax
jne 0x14001e9b0
mov rdx, r10
test r10, r10
je 0x14001e9a4
sub r8, rcx
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14001e9b0
add rcx, 2
sub rdx, 1
jne 0x14001e990
movabs rsi, 0xcbf29ce484222325
jmp 0x14001e9c8
cmp r9, rsi
je 0x14001e9bb
mov r9, qword [r9 + 8]
jmp 0x14001e960
movabs rsi, 0xcbf29ce484222325
mov r9, r14
test r9, r9
jne 0x14001ea66
lea rax, str.start_enabled_powertoys:_Enabling_powertoy_
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 0x2d
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
movaps xmm0, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0xc0], xmm0
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xe0], xmm1
movsd xmm0, qword [rsp + 0x60]
movsd qword [rsp + 0xf0], xmm0
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xc0]
mov r8d, 2
lea rdx, [rsp + 0xe0]
mov rcx, qword [0x1400fc7f0]
call fcn.14000e330
mov rcx, qword [rdi + 0x28]
mov rax, qword [rcx]
call qword [rax + 0x28]
lea rcx, [rdi + 0x20]
call fcn.140021ec0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14001ea98
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14001ea93
nop word [rax + rax]
cmp rbx, qword [rax + 0x10]
jne 0x14001ea93
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14001ea80
mov rbx, rax
jmp 0x14001eabf
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14001eabf
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14001eab0
cmp byte [rbx + 0x19], 0
je 0x14001e811
cmp qword [rsp + 0x40], 0
je 0x14001eadc
lea rcx, [rsp + 0x40]
call fcn.140019250
nop
lea rcx, [rsp + 0x150]
call fcn.14001ec40
nop
lea rcx, [rsp + 0x100]
call fcn.14001ebc0
mov rcx, qword [rsp + 0x410]
xor rcx, rsp
call fcn.140078e50
lea r11, [rsp + 0x420]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, [rsp + 0x280]
mov ecx, eax
call fcn.140019e90
nop
lea rdx, [rsp + 0x298]
mov ecx, eax
call fcn.140019e90
nop
lea rdx, [rsp + 0x208]
mov ecx, eax
call fcn.140019e90
nop
lea rdx, [rsp + 0x220]
mov ecx, eax
call fcn.140019e90
nop
call fcn.140085864
nop
lea rdx, [rsp + 0x238]
mov ecx, eax
call fcn.140019e90
lea rdx, [rsp + 0x250]
mov ecx, eax
call fcn.140019e90
nop
call fcn.14007fed8
nop
lea rdx, [rsp + 0x268]
mov ecx, eax
call fcn.140019e90
int3