Function at 0x140002070
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x318
mov ecx, 5
call fcn.14002a530
lea rax, [0x1427f0494]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x328ba4e4f1707fce
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036160
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x142802108]
mov edx, 0x1d
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r12, rax
xor bl, 0x67
xor esi, 0xe8bcbe3a
movabs rax, 0xa71713cd4629852b
xor rdi, rax
movabs rax, 0x5c93fddfb283743d
xor r14, rax
movabs rax, 0xcecf11e445298788
xor r15, rax
mov qword [r12], r15
mov qword [r12 + 8], r14
mov qword [r12 + 0x10], rdi
mov dword [r12 + 0x18], esi
mov byte [r12 + 0x1c], bl
lea rcx, [rsp + 0x50]
mov r8d, 0x1d
mov rdx, r12
call fcn.14002c070
cmp dword [rsp + 0x50], 2
jne 0x140004d76
mov rsi, qword [rsp + 0x58]
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400021bd
test rax, rax
je 0x1400021bd
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x140002186
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x1400021ac
cmp qword [rbx + 0x10], 0x11
jb 0x14000219b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1427eae45]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc356ee5162e5e6f6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036120
movabs rcx, 0xb63afab766842105
xor rcx, qword [rax]
movabs rdx, 0xd59b20d3c4e1ae21
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x73
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov byte [rsp + 0x150], al
lea rax, [rsp + 0x151]
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x120]
lea rsi, [rsp + 0x50]
mov rdx, rsi
call fcn.14003c2c0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x158], 0
mov rdi, qword [rsp + 0x128]
lea r15, [rsp + 0x158]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebx, eax
test eax, eax
je 0x1400023e4
mov rsi, rbx
shl rsi, 0x20
or rsi, 2
cmp qword [rsp + 0x120], 0
je 0x1400022f4
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
je 0x1400023fd
lea rax, [0x1427f2098]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xeb6effd858a2b26d
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036300
movabs rcx, 0xf1358bf9df40b43a
xor rcx, qword [rax]
movabs rdx, 0xd51d1154491bf05c
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x2f
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], rdx
mov byte [rsp + 0x168], al
lea rax, [rsp + 0x169]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x120]
lea rbx, [rsp + 0x50]
mov rdx, rbx
call fcn.14003c2c0
mov qword [rsp + 0x50], 0
mov rdi, qword [rsp + 0x128]
mov qword [rsp + 0x20], rbx
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
mov r9d, 2
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebx, eax
test eax, eax
jne 0x14000240d
mov r14, qword [rsp + 0x50]
cmp qword [rsp + 0x120], 0
jne 0x140002423
jmp 0x140002434
mov rsi, qword [rsp + 0x50]
cmp qword [rsp + 0x120], 0
jne 0x1400022e3
jmp 0x1400022f4
mov qword [rsp + 0x188], rsi
mov r14, rsi
jmp 0x1400024ac
mov r14, rbx
shl r14, 0x20
or r14, 2
cmp qword [rsp + 0x120], 0
je 0x140002434
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test ebx, ebx
jne 0x140004d74
mov qword [rsp + 0x188], r14
mov eax, esi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400024ac
test rax, rax
je 0x1400024ac
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000246d
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x140002493
cmp qword [rbx + 0x10], 0x11
jb 0x140002482
mov rdi, qword [rdi - 8]
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsp + 0x188]
mov qword [rsp + 0x1b0], r12
lea rax, [0x1427ecd8c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc472bf3390fabc4e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400361d0
mov ecx, 0x1427a495
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x2f
mov dword [rsp + 0x158], ecx
mov byte [rsp + 0x15c], al
lea rax, [rsp + 0x15d]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x50]
call fcn.14003c2c0
mov dword [rsp + 0x178], 0x800
mov dword [rsp + 0x140], 0
movzx eax, byte [0x142802108]
mov edx, 0x800
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r15, rax
movabs rbp, 0x8000000000000001
mov qword [rsp + 0x50], 0x800
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0
mov r12, qword [rsp + 0x128]
lea rdi, [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x60]
sub rsi, r13
nop word cs:[rax + rax]
lea rax, [rsp + 0x178]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov rcx, r14
mov rdx, r12
xor r8d, r8d
lea r9, [rsp + 0x140]
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x1400025fe
mov r8d, dword [rsp + 0x178]
cmp rsi, r8
jae 0x1400025b0
mov rcx, rdi
mov rdx, r13
call fcn.140042510
mov r15, qword [rsp + 0x58]
jmp 0x140002599
mov ebx, eax
test eax, eax
jne 0x140002675
movabs rbx, 0xde00000002
mov r15d, dword [rsp + 0x178]
mov qword [rsp + 0x60], r15
mov r12d, dword [rsp + 0x140]
cmp r12d, 0xb
ja 0x14000267d
mov rdi, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
lea rsi, [rbp - 1]
cmp qword [rsp + 0x120], 0
je 0x140002658
mov r8, qword [rsp + 0x128]
mov rcx, qword [0x142802058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp rdi, rsi
jne 0x1400026cb
mov rbx, r14
lea r14, [rsp + 0x158]
lea r12, [rsp + 0x120]
jmp 0x14000272e
shl rbx, 0x20
or rbx, 2
cmp qword [rsp + 0x50], 0
lea r14, [rsp + 0x158]
lea r12, [rsp + 0x120]
je 0x1400026a8
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x142802058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x120], 0
je 0x14000272e
mov r8, qword [rsp + 0x128]
mov rcx, qword [0x142802058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14000272e
cmp r12b, 5
je 0x1400026da
movzx eax, r12b
cmp eax, 4
jne 0x1400026fc
cmp r15d, 4
lea r12, [rsp + 0x120]
jne 0x1400026ed
mov r15b, 1
jmp 0x140002707
xor r15d, r15d
movabs rbx, 0xd00000002
jmp 0x140002707
xor r15d, r15d
lea r12, [rsp + 0x120]
test rdi, rdi
je 0x14000271d
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test r15b, r15b
lea r14, [rsp + 0x158]
jne 0x140004d7b
mov eax, ebx
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x14000278e
test rax, rax
je 0x14000278e
mov rdi, qword [rbx - 1]
mov rsi, qword [rbx + 7]
mov rax, qword [rsi]
test rax, rax
je 0x140002757
mov rcx, rdi
call rax
dec rbx
cmp qword [rsi + 8], 0
je 0x14000277d
cmp qword [rsi + 0x10], 0x11
jb 0x14000276c
mov rdi, qword [rdi - 8]
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1427f0b1e]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4cb156212371ff72
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036a40
movabs rcx, 0x45da4ad349e98043
xor rcx, qword [rax]
mov edx, 0x9c85bef3
xor edx, dword [rax + 8]
movzx r8d, byte [rax + 0xe]
movzx eax, word [rax + 0xc]
mov r9d, eax
shr r9d, 8
xor al, 0x9e
xor r9b, 0xa0
xor r8b, 0x22
mov qword [rsp + 0x140], rcx
mov dword [rsp + 0x148], edx
mov byte [rsp + 0x14c], al
mov byte [rsp + 0x14d], r9b
mov byte [rsp + 0x14e], r8b
lea rax, [rsp + 0x140]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], 0xf
mov qword [rsp + 0x158], r12
lea rax, [0x14003fae0]
mov qword [rsp + 0x160], rax
lea rax, [0x1427fc788]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.14002ab70
lea rax, [0x1427ef1de]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1bca56983db63d94
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400368f0
mov ecx, 0xe6e3646e
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x79
mov dword [rsp + 0x50], ecx
mov byte [rsp + 0x54], al
lea r9, [0x1427f799c]
lea rcx, [rsp + 0x188]
lea rdx, [rsp + 0x50]
mov r8d, 5
call fcn.14003d5e0
test rax, rax
jne 0x140004d74
movabs rax, 0xffffffff7fffffff
mov rcx, qword [rsp + 0x188]
cmp rcx, rax
ja 0x14000290d
call sub.ADVAPI32.dll_RegCloseKey
lea rax, [0x1427f164e]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2fad1ee46a7bba3c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036340
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov ecx, esi
shr ecx, 8
xor cl, 0x1f
xor sil, 0x45
movabs rdx, 0xe555015a89119f64
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xa
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
dec rbp
mov qword [rsp + 0x88], rbp
mov word [rsp + 0x114], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x110], 0x8000000
lea rax, [0x1427eeefb]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x77d41ba75e2a5042
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140036ba0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x142802108]
mov edx, 0x1c
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rsi, rax
lea rcx, [rsp + 0x70]
xor edi, 0x564eca16
movabs rax, 0xaa0336bcfae4a62c
xor rbx, rax
movabs rax, 0x4e989d33e6f91578
xor r14, rax
movabs rax, 0x30f602216a0de99e
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.1400254c0
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0x50]
call fcn.140001450
mov ecx, 5
call fcn.14002a530
lea rax, [0x1427f01eb]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4b19cb8d84b8b95d
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036490
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov ecx, esi
shr ecx, 8
xor cl, 0x42
xor sil, 0x51
movabs rdx, 0xd093d9a2a434da5d
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x50], 0xa
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0xa
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
mov qword [rsp + 0x80], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
mov word [rsp + 0xf0], 0
mov qword [rsp + 0x88], rbp
mov word [rsp + 0x114], 0
mov dword [rsp + 0xa8], 6
mov dword [rsp + 0xb8], 6
mov dword [rsp + 0xc8], 6
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x110], 0x8000000
lea rax, [0x1427e802d]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x281095583ae9ac3a
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140036c30
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x142802108]
mov edx, 0x15
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rsi, rax
lea rcx, [rsp + 0x70]
xor bl, 0xc4
xor edi, 0x84033627
movabs rax, 0x5fbd128daa92bc0
xor r14, rax
movabs rax, 0x649732a18614ef7c
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov dword [rsi + 0x10], edi
mov byte [rsi + 0x14], bl
call fcn.1400254c0
mov rax, qword [rsp + 0x78]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x80], 1
lea rcx, [rsp + 0x50]
call fcn.140001450
mov ecx, 5
call fcn.14002a530
lea rax, [0x1427f1b06]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x37ec9fdcd600b031
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035fc0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142802108]
mov edx, 0x11
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r15, rax
movabs rax, 0x74dd481726e3be60
xor rsi, rax
movabs rax, 0x3c474cedebef501
xor rdi, rax
xor bl, 0xf8
mov qword [r15], rdi
mov qword [r15 + 8], rsi
mov byte [r15 + 0x10], bl
lea rax, [0x1427e9a90]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x919d6dbaa3a762d7
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036010
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r12, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x94
mov ecx, esi
shr ecx, 8
xor cl, 0x76
xor sil, 0xf1
movabs rdx, 0x9ab910859f73e5c0
xor rdi, rdx
mov qword [r12], rdi
mov byte [r12 + 8], sil
mov byte [r12 + 9], cl
mov byte [r12 + 0xa], al
lea rax, [0x1427f3b9c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xe70b295926b93e4f
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036620
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r13, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x92
mov ecx, esi
shr ecx, 8
xor cl, 0xc4
xor sil, 7
movabs rdx, 0x470fe53386c8c034
xor rdi, rdx
mov qword [r13], rdi
mov byte [r13 + 8], sil
mov byte [r13 + 9], cl
mov byte [r13 + 0xa], al
lea rax, [0x1427f240a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x38ec8850d46ece03
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036090
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r14, rax
mov eax, esi
shr eax, 8
xor al, 0xcc
xor sil, 0x96
movabs rcx, 0x3a7129f102f0df5c
xor rdi, rcx
mov qword [r14], rdi
mov byte [r14 + 8], sil
mov byte [r14 + 9], al
lea rax, [0x1427e8d8a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x87fa01b7e67b1a0a
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035cd0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rbp, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 0x28
mov ecx, esi
shr ecx, 8
xor cl, 0x56
xor sil, 0x91
movabs rdx, 0xcd644221b2ba1af3
xor rdi, rdx
mov qword [rbp], rdi
mov byte [rbp + 8], sil
mov byte [rbp + 9], cl
mov byte [rbp + 0xa], al
lea rax, [0x1427f58af]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x88032ad76312d8be
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035d40
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 3
mov ecx, esi
shr ecx, 8
xor cl, 0x58
xor sil, 0xb0
movabs rdx, 0xc9b1d719d7c0385c
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x290], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1427f4bcb]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x730187e9c446c938
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036290
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142802108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0x989aab3b
movabs rcx, 0x9e5178fc116e5a6d
xor rdi, rcx
xor bl, 0x65
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x288], rax
mov byte [rax + 0xc], bl
lea rax, [0x1427f64b4]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf7f76a13df871f79
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036c90
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0xe8fa72d7e8a46605
xor rsi, rcx
xor edi, 0x72b8f167
mov qword [rax], rsi
mov qword [rsp + 0x280], rax
mov dword [rax + 8], edi
lea rax, [0x1427ea4d9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xcd4bbc46e300076e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036800
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142802108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0x4dda60fb
movabs rcx, 0x41c6b8f70454d56b
xor rdi, rcx
xor bl, 0x39
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x278], rax
mov byte [rax + 0xc], bl
lea rax, [0x1427e9f5a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x61452dd8d90bb10e
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036510
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142802108]
mov edx, 0x12
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0xead60b9849216aa2
xor rsi, rcx
movabs rcx, 0xe2368f09533647ce
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xd7
xor bl, 0xa
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x270], rax
mov byte [rax + 0x11], cl
lea rax, [0x1427ec35c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2a34924b327a4a82
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400360e0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov edx, esi
shr edx, 8
xor dl, 0xb9
xor sil, 0x19
movabs rcx, 0x1abede8ee98a2192
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x268], rax
mov byte [rax + 9], dl
lea rax, [0x1427e8a8f]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x92423ae5bc4be5d4
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400362d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov edx, esi
shr edx, 8
xor dl, 0xd0
xor sil, 0xce
movabs rcx, 0x6c6ff8b27905a077
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x260], rax
mov byte [rax + 9], dl
lea rax, [0x1427f419e]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x56542ba7bbaf0af5
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036aa0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142802108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0x56fee53e
movabs rcx, 0xfa6aad1ac4875109
xor rdi, rcx
xor bl, 0x52
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x258], rax
mov byte [rax + 0xc], bl
lea rax, [0x1427f139b]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7826632bfa2af5bb
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036600
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov qword [rsp + 0x298], rbp
mov qword [rsp + 0x180], r14
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
add r8b, 0x80
mov ecx, esi
shr ecx, 8
xor cl, 0x4d
xor sil, 0xa1
movabs rdx, 0x3a2822bee127c1f2
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x250], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1427f796c]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1939c37cee64c9e2
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036a20
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142802108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0xc4292d
movabs rcx, 0x8af8f2dcd800141d
xor rdi, rcx
xor bl, 0x7d
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x248], rax
mov byte [rax + 0xc], bl
lea rax, [0x1427f13e8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x1d835b84a1c6f6c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035cf0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142802108]
mov edx, 0xf
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x94
mov ecx, esi
shr ecx, 8
xor cl, 0xd1
xor sil, 0x5d
xor edi, 0x5059db67
movabs rdx, 0x7e20bf6188b4def4
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x240], rax
mov byte [rax + 0xe], r8b
lea rax, [0x1427f4e0a]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x710f87cdb93b367b
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036cb0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x142802108]
mov edx, 0x1c
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0x8a066a63
movabs rcx, 0xef454932d18887ca
xor rdi, rcx
movabs rcx, 0x18f426b0944ad7e
xor rbx, rcx
movabs rcx, 0x318ffda3bc090b70
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x238], rax
mov dword [rax + 0x18], esi
lea rax, [0x1427ee515]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xd5e41f20bf5881db
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035d70
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x142802108]
mov edx, 0x19
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r14, rax
movabs rax, 0x89f2b7a1b5154df
xor rsi, rax
movabs rax, 0xd10be5e4ddcb34cd
xor rdi, rax
movabs rax, 0x67a91b0947a8f2d0
xor rbx, rax
xor bpl, 0xc2
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x1427f72a0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xb3ff4f64aba6e809
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400369c0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xa
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rbp, rax
mov eax, esi
shr eax, 8
xor al, 0xe3
xor sil, 0xaf
movabs rcx, 0x5b8bf80a9143e792
xor rdi, rcx
mov qword [rbp], rdi
mov byte [rbp + 8], sil
mov byte [rbp + 9], al
lea rax, [0x1427f3e83]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x5a3d3590ef87355c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036460
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0x1d51d3a69283e8ad
xor rsi, rcx
xor edi, 0xc38506b4
mov qword [rax], rsi
mov qword [rsp + 0x230], rax
mov dword [rax + 8], edi
lea rax, [0x1427efb17]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc7a2458e33adef40
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036530
mov rsi, qword [rax]
movzx eax, byte [0x142802108]
mov edx, 8
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rdi, rax
movabs rax, 0x184b42f02cebf5d8
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x1427ea3f5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x91f13743cbf54842
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036a70
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 9
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov qword [rsp + 0x228], rdi
xor bl, 0x68
movabs rcx, 0xb13364bad93c7062
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x220], rax
mov byte [rax + 8], bl
lea rax, [0x1427ed248]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf989970083f1dc98
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035b90
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 9
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov qword [rsp + 0x218], rbp
xor bl, 0x1f
movabs rcx, 0xdf857ed0c8a8008c
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x210], rax
mov byte [rax + 8], bl
lea rax, [0x1427f5519]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x20a609fe2ff1bc28
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035e10
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0x2d6597f93d61642b
xor rsi, rcx
xor edi, 0x6cc5feb4
mov qword [rax], rsi
mov qword [rsp + 0x208], rax
mov dword [rax + 8], edi
lea rax, [0x1427f5638]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xe5bfb6ea47c06038
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036400
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142802108]
mov edx, 0xf
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov qword [rsp + 0x200], r14
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0xe6
mov ecx, esi
shr ecx, 8
xor cl, 0x21
xor sil, 0x4d
xor edi, 0xfa10b85
movabs rdx, 0x795b8b3bbbe23e4e
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x1f8], rax
mov byte [rax + 0xe], r8b
lea rax, [0x1427ec8fa]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x495e7e6fcbda3cd6
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035bb0
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx eax, byte [0x142802108]
mov edx, 0xc
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0x239d9022543fc21
xor rsi, rcx
xor edi, 0x1a29344e
mov qword [rax], rsi
mov qword [rsp + 0x1f0], rax
mov dword [rax + 8], edi
lea rax, [0x1427ef612]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x178fc2ac5be6d4c8
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036430
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
mov r14, qword [rsp + 0x180]
mov rbp, qword [rsp + 0x298]
je 0x140004d74
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x2c
mov ecx, esi
shr ecx, 8
xor cl, 0x91
xor sil, 0x28
movabs rdx, 0xe945dd5f5fbe6355
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x1e8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1427e98eb]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2be3085ddf214632
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400366f0
mov rsi, qword [rax]
movzx eax, byte [0x142802108]
mov edx, 8
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0xe8ad3139718c0a78
xor rsi, rcx
mov qword [rsp + 0x1e0], rax
mov qword [rax], rsi
lea rax, [0x1427e947b]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x2742bab370a95693
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035ca0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142802108]
mov edx, 0x11
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0xf7fe4b7f2793d635
xor rsi, rcx
movabs rcx, 0xf3e658e8ea4c77b5
xor rdi, rcx
xor bl, 0xd7
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x1d8], rax
mov byte [rax + 0x10], bl
lea rax, [0x1427f5986]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc6a069093904522b
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400368c0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142802108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0xa6e74238
movabs rcx, 0xbc654ff58a86eef9
xor rdi, rcx
xor bl, 0x68
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x1d0], rax
mov byte [rax + 0xc], bl
lea rax, [0x1427f52db]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xf2d61e8d5966bb4b
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035f50
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142802108]
mov edx, 0xb
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 4
mov ecx, esi
shr ecx, 8
xor cl, 0xa9
xor sil, 0xc8
movabs rdx, 0xa23eab616960bc32
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x1c8], rax
mov byte [rax + 0xa], r8b
lea rax, [0x1427ea7c5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xea99ca827386bef2
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036d40
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142802108]
mov edx, 0xd
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
xor esi, 0xed25379f
movabs rcx, 0xb27b98ce3c339ef8
xor rdi, rcx
xor bl, 0xf4
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x1c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x1427eadf0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x242ddb0801d05e60
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.1400365c0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142802108]
mov edx, 0x12
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0xbe804ff2256fb005
xor rsi, rcx
movabs rcx, 0x4adf76a06234fc7d
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0xdd
xor bl, 0xed
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x1b8], rax
mov byte [rax + 0x11], cl
lea rax, [0x1427f4f74]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xebd5f148509a5a14
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036650
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x142802108]
mov edx, 7
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xea
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x9b
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0xe9
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x9f108510
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x142802108]
mov edx, 0x220
xor ecx, ecx
mov rdi, r8
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rsi, rax
mov qword [rsp + 0x1a8], r15
mov qword [rax], r15
mov qword [rax + 8], 0x11
mov qword [rsp + 0x2b0], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xb
mov qword [rsp + 0x2a8], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], 0xb
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], 0xa
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], 0xb
mov rax, qword [rsp + 0x290]
mov qword [rsi + 0x50], rax
mov qword [rsi + 0x58], 0xb
mov rax, qword [rsp + 0x288]
mov qword [rsi + 0x60], rax
mov qword [rsi + 0x68], 0xd
mov rax, qword [rsp + 0x280]
mov qword [rsi + 0x70], rax
mov qword [rsi + 0x78], 0xc
mov rax, qword [rsp + 0x278]
mov qword [rsi + 0x80], rax
mov qword [rsi + 0x88], 0xd
mov rax, qword [rsp + 0x270]
mov qword [rsi + 0x90], rax
mov qword [rsi + 0x98], 0x12
mov rax, qword [rsp + 0x268]
mov qword [rsi + 0xa0], rax
mov qword [rsi + 0xa8], 0xa
mov rax, qword [rsp + 0x260]
mov qword [rsi + 0xb0], rax
mov qword [rsi + 0xb8], 0xa
mov rax, qword [rsp + 0x258]
mov qword [rsi + 0xc0], rax
mov qword [rsi + 0xc8], 0xd
mov rax, qword [rsp + 0x250]
mov qword [rsi + 0xd0], rax
mov qword [rsi + 0xd8], 0xb
mov rax, qword [rsp + 0x248]
mov qword [rsi + 0xe0], rax
mov qword [rsi + 0xe8], 0xd
mov rax, qword [rsp + 0x240]
mov qword [rsi + 0xf0], rax
mov qword [rsi + 0xf8], 0xf
mov rax, qword [rsp + 0x238]
mov qword [rsi + 0x100], rax
mov qword [rsi + 0x108], 0x1c
mov rax, qword [rsp + 0x200]
mov qword [rsi + 0x110], rax
mov qword [rsi + 0x118], 0x19
mov rax, qword [rsp + 0x218]
mov qword [rsi + 0x120], rax
mov qword [rsi + 0x128], 0xa
mov rax, qword [rsp + 0x230]
mov qword [rsi + 0x130], rax
mov qword [rsi + 0x138], 0xc
mov rax, qword [rsp + 0x228]
mov qword [rsi + 0x140], rax
mov qword [rsi + 0x148], 8
mov rax, qword [rsp + 0x220]
mov qword [rsi + 0x150], rax
mov qword [rsi + 0x158], 9
mov rax, qword [rsp + 0x210]
mov qword [rsi + 0x160], rax
mov qword [rsi + 0x168], 9
mov rax, qword [rsp + 0x208]
mov qword [rsi + 0x170], rax
mov qword [rsi + 0x178], 0xc
mov rax, qword [rsp + 0x1f8]
mov qword [rsi + 0x180], rax
mov qword [rsi + 0x188], 0xf
mov rax, qword [rsp + 0x1f0]
mov qword [rsi + 0x190], rax
mov qword [rsi + 0x198], 0xc
mov rax, qword [rsp + 0x1e8]
mov qword [rsi + 0x1a0], rax
mov qword [rsi + 0x1a8], 0xb
mov rax, qword [rsp + 0x1e0]
mov qword [rsi + 0x1b0], rax
mov qword [rsi + 0x1b8], 8
mov rax, qword [rsp + 0x1d8]
mov qword [rsi + 0x1c0], rax
mov qword [rsi + 0x1c8], 0x11
mov rax, qword [rsp + 0x1d0]
mov qword [rsi + 0x1d0], rax
mov qword [rsi + 0x1d8], 0xd
mov rax, qword [rsp + 0x1c8]
mov qword [rsi + 0x1e0], rax
mov qword [rsi + 0x1e8], 0xb
mov rax, qword [rsp + 0x1c0]
mov qword [rsi + 0x1f0], rax
mov qword [rsi + 0x1f8], 0xd
mov rax, qword [rsp + 0x1b8]
mov qword [rsi + 0x200], rax
mov qword [rsi + 0x208], 0x12
mov qword [rsp + 0x2a0], rdi
mov qword [rsi + 0x210], rdi
mov qword [rsi + 0x218], 7
lea rax, [0x1427f41b9]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xa2b4ce15e8cf96e7
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140035c50
movabs rcx, 0xfb64dbab15f28031
xor rcx, qword [rax]
movabs rdx, 0xc6cc84cf6220ffc3
xor rdx, qword [rax + 8]
movabs r8, 0x5816d7ef9cfcb345
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0xda
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], rdx
mov qword [rsp + 0x168], r8
mov byte [rsp + 0x170], al
mov dword [rsp + 0x1a4], 0x41888887
lea rax, [0x1427f0bed]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x67949fc85c8fba40
mov qword [rsp + 0x50], rax
lea rbp, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036370
mov rcx, qword [rax]
mov qword [rsp + 0x2b8], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x2c0], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x2c8], rcx
mov r13, qword [rax + 0x18]
mov r12, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rbx, qword [rax + 0x38]
mov rdi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x11f], al
movzx eax, byte [0x142802108]
mov edx, 0x49
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
movabs rcx, 0x242305b118167c5f
xor rdi, rcx
movabs rcx, 0x3befe8c44102448d
xor rbx, rcx
movabs rcx, 0xb9670d4adecc8bd1
xor r14, rcx
movabs rcx, 0xbbcca23466b461f1
xor r15, rcx
movabs rcx, 0xe9e82dfacec03e39
xor r12, rcx
movabs rcx, 0xa69bf1406ac0e200
xor r13, rcx
movabs rcx, 0x5a11d22a87363f01
mov rdx, qword [rsp + 0x2c8]
xor rdx, rcx
movabs rcx, 0x2b0b16f2a57639d
mov r8, qword [rsp + 0x2c0]
xor r8, rcx
movabs rcx, 0x1f5e83a82d5c4442
mov r9, qword [rsp + 0x2b8]
xor r9, rcx
movzx ecx, byte [rsp + 0x11f]
xor cl, 0x9b
mov qword [rax], r9
mov qword [rax + 8], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rbx
mov qword [rax + 0x40], rdi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x188], 0x49
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], 0x49
xor r14d, r14d
jmp 0x140004521
add r14, 0x10
cmp r14, 0x220
je 0x140004824
lea rax, [rsi + r14]
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x188]
mov qword [rsp + 0x120], rax
lea rax, [0x140001da0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x178]
mov qword [rsp + 0x130], rax
lea rax, [0x14003fb00]
mov qword [rsp + 0x138], rax
lea rax, [0x1427f79a0]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
lea rdi, [rsp + 0x120]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 2
lea rbx, [rsp + 0x140]
mov rcx, rbx
mov rdx, rbp
call fcn.140006f70
mov r15, qword [rsp + 0x140]
mov r13, qword [rsp + 0x148]
mov rax, qword [rsp + 0x150]
add rax, r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], rax
mov word [rsp + 0x60], 0
mov dword [rsp + 0x68], 1
mov rcx, rdi
mov rdx, rbp
call fcn.14003c2c0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x140], 0
mov rdi, qword [rsp + 0x128]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov r12d, eax
test eax, eax
je 0x1400046e0
mov rbx, r12
shl rbx, 0x20
or rbx, 2
cmp qword [rsp + 0x120], 0
je 0x140004677
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
test r12d, r12d
jne 0x1400046f6
mov qword [rsp + 0x50], rbx
mov r8d, 0x19
mov rcx, rbp
lea rdx, [rsp + 0x158]
lea r9, [rsp + 0x1a4]
call fcn.14003d5e0
test rax, rax
jne 0x140004722
movabs rax, 0xffffffff7fffffff
cmp rbx, rax
ja 0x1400046bb
mov rcx, rbx
call sub.ADVAPI32.dll_RegCloseKey
test r15, r15
je 0x140004510
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
jmp 0x140004510
mov rbx, qword [rsp + 0x50]
cmp qword [rsp + 0x120], 0
jne 0x140004666
jmp 0x140004677
movzx eax, byte [0x142802108]
mov edx, 8
xor ecx, ecx
call fcn.1400259b0
test rax, rax
je 0x140004d74
mov rdi, rax
mov qword [rax], rbx
mov rbp, qword [rsp + 0x180]
jmp 0x140004766
mov r14, rax
movzx eax, byte [0x142802108]
mov edx, 8
xor ecx, ecx
call fcn.1400259b0
test rax, rax
mov rbp, qword [rsp + 0x180]
je 0x140004d74
mov rdi, rax
mov qword [rax], r14
movabs rax, 0xffffffff7fffffff
cmp rbx, rax
ja 0x140004766
mov rcx, rbx
call sub.ADVAPI32.dll_RegCloseKey
test r15, r15
je 0x14000477c
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x188], 0
je 0x14000479d
mov r8, qword [rsp + 0x190]
mov rcx, qword [0x142802058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rdi]
mov eax, r14d
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
mov r12, qword [rsp + 0x1b0]
mov r13, qword [rsp + 0x1a8]
jb 0x140004811
test rax, rax
je 0x140004811
mov r15, qword [r14 - 1]
mov rbx, qword [r14 + 7]
mov rax, qword [rbx]
test rax, rax
je 0x1400047da
mov rcx, r15
call rax
dec r14
cmp qword [rbx + 8], 0
je 0x140004800
cmp qword [rbx + 0x10], 0x11
jb 0x1400047ef
mov r15, qword [r15 - 8]
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x14000485d
cmp qword [rsp + 0x188], 0
je 0x140004845
mov r8, qword [rsp + 0x190]
mov rcx, qword [0x142802058]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r12, qword [rsp + 0x1b0]
mov r13, qword [rsp + 0x1a8]
mov rbp, qword [rsp + 0x180]
lea rax, [0x141b558c4]
mov qword [rsp + 0x28], rax
lea rax, [0x141b558b8]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005aa88]
lea r9, [0x141b55898]
lea r15, [rsp + 0x2d0]
mov r8d, 0x1afae10
mov rcx, r15
call fcn.140016fe0
lea rax, [0x141ccc920]
mov qword [rsp + 0x28], rax
lea rax, [0x141ccc914]
mov qword [rsp + 0x20], rax
lea rdx, [0x141b558e4]
lea r9, [0x141ccc8f4]
lea r14, [rsp + 0x2e8]
mov r8d, 0x177010
mov rcx, r14
call fcn.140016fe0
lea rax, [0x1427f797c]
mov qword [rsp + 0x28], rax
lea rax, [0x1427f7970]
mov qword [rsp + 0x20], rax
lea rdx, [0x141ccc940]
lea r9, [0x1427f7950]
lea rdi, [rsp + 0x300]
mov r8d, 0xb2b010
mov rcx, rdi
call fcn.140016fe0
lea rax, [0x1427eb6e6]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x574b118b8ad6845c
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036060
movabs rcx, 0x39ea2ecd3d1585bc
xor rcx, qword [rax]
movabs rdx, 0xaeeeb7b3fa45aa54
xor rdx, qword [rax + 8]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
lea rdx, [rsp + 0x50]
mov r8d, 0x10
mov rcx, r15
call fcn.140005230
lea rax, [0x1427efb96]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xc700873d4c56b728
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036750
movabs rcx, 0x2cc2cfcaf83e46fa
xor rcx, qword [rax]
mov edx, 0xd24d1fb7
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x2a
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x58], edx
mov byte [rsp + 0x5c], al
lea rdx, [rsp + 0x50]
mov r8d, 0xd
mov rcx, r14
call fcn.140005230
lea rax, [0x1427e8592]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0xbcb0a42db24b7612
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036200
movabs rcx, 0x2c3417d23610f182
xor rcx, qword [rax]
mov edx, 0x770e1615
xor edx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
xor al, 0x93
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x58], edx
mov byte [rsp + 0x5c], al
lea rdx, [rsp + 0x50]
mov r8d, 0xd
mov rcx, rdi
call fcn.140005230
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x2b0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x298]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x290]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x288]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x280]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x278]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x270]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x268]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x260]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x258]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x250]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x248]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x240]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x238]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x200]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x218]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x230]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x228]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x220]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x210]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x208]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1f8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1f0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1e8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1e0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1d8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1d0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1c8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1c0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x1b8]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x142802058]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x318
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
call fcn.14002ae00
lea rax, [0x1427eeda5]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
movabs rax, 0x7512bdd3ec8f5104
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x50]
call fcn.140036b00
movabs rcx, 0x49e8f7e95d90eeef
xor rcx, qword [rax]
movabs rdx, 0x8ee7d716b5aa7003
xor rdx, qword [rax + 8]
movabs r8, 0x4f1dda9df4a08f94
xor r8, qword [rax + 0x10]
movabs r9, 0x515000027d8e17fa
xor r9, qword [rax + 0x18]
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov qword [rsp + 0x158], r12
mov qword [rsp + 0x160], 0x20
mov qword [rsp + 0x140], r14
lea rax, [0x14003fae0]
mov qword [rsp + 0x148], rax
lea rax, [0x1427fc788]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.14002ab70
call fcn.14002ae00
int3