Function at 0x140028b70
Capabilities:
Encode data using base64
Encode data using xor
Query or enumerate registry value

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x568
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x4d0], xmm6
mov eax, dword [0x141dc68e8]
add eax, dword [0x141dc68ec]
or eax, 0xf78cbfaa
shr eax, 1
imul rax, rax, 0x40199965
shr rax, 0x3d
cmp eax, 0xc8e810f7
je 0x140028c50
mov eax, dword [0x141dc68f0]
add eax, dword [0x141dc68f4]
or eax, 0xbf36f230
imul ecx, eax, 0x24f29fe5
add ecx, 0x13064692
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rax, rsp
cmp ecx, 0xd9256f04
jbe 0x140028cb0
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
jmp 0x140028bbb
mov qword [rbp + 0x2b8], rsi
mov qword [rbp + 0x2b0], r11
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x430], r10
mov qword [rbp + 0x3d8], r9
mov qword [rbp + 0x2c8], r8
mov qword [rbp + 0x328], rdx
mov eax, dword [0x141dc68f8]
or eax, dword [0x141dc68fc]
and eax, 0x8ca71e44
cmp eax, 0xf149eb49
jne 0x1400291e0
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x60
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x60
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x70
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
nop dword [rax]
mov eax, dword [0x141dc6900]
sub eax, dword [0x141dc6904]
add eax, 0x743eba85
or eax, 0x32dc7019
mov dword [rbp + 0x3e0], eax
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x2d8], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x2d0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x428], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x4b8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x340], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3b8], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x478], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x490], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x4b0], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x488], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x108], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x308], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x100], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x4a8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x2f8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x4a0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xa0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x318], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x320], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3c0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3c8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x2f0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x220], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x230], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x228], rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x238], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xa8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xb8], rsp
mov eax, 0x30
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xc0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3d0], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x4c8], rsp
mov eax, 0x60
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x4c0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1d8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1e0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1e8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1f0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1f8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x200], rsp
mov eax, 0x60
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x208], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x210], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x218], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1a8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1b0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1b8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1c0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1c8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1d0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x1a0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x180], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x188], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x190], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x348], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x198], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x170], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x178], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x140], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x148], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x150], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x158], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x160], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x168], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x110], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x118], rsp
mov eax, 0x70
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x120], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x310], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x128], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x130], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x138], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x370], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x420], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xf0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xf8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r10, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rcx, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov r9, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rax, rsp
cmp dword [rbp + 0x3e0], 0xd9d7edb4
je 0x1400291e0
mov qword [rbp + 0x278], rax
mov qword [rbp + 0x270], r9
mov qword [rbp + 0x268], r8
mov qword [rbp + 0x260], rdx
mov qword [rbp + 0x258], r13
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x280], r15
mov qword [rbp + 0x248], r14
mov qword [rbp + 0x240], rcx
mov qword [rbp + 0x298], rbx
mov qword [rbp + 0x290], rdi
mov qword [rbp + 0x288], rsi
mov qword [rbp + 0x2a8], r11
mov qword [rbp + 0x2a0], r10
mov eax, dword [0x141dc6908]
xor edx, edx
div dword [0x141dc690c]
add eax, 0xa9389cc0
imul rax, rax, 0x39a80ddd
shr rax, 0x3d
cmp eax, 0xca8727d1
je 0x140029f50
mov eax, dword [0x141dc6910]
xor eax, dword [0x141dc6914]
or eax, 0xaef916c3
xor eax, 0x72a2cd49
imul rax, rax, 0xc0bb28f
shr rax, 0x3a
mov qword [rbp + 0x470], rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x398], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x468], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x438], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x440], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3a0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3a8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3b0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x418], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x360], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x368], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x388], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x390], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x480], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x498], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x458], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x460], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x408], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x410], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x448], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x450], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3e8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3f0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3f8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x400], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xd8], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xc8], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xe0], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xe8], rsp
mov eax, 0x60
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x2e8], rsp
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x380], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x300], rsp
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x378], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0xd0], rsp
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x358], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x70
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x2e0], rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x3e0], rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov qword [rbp + 0x350], rsp
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov r15, rsp
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
sub rsp, 0x20
mov ecx, 5
call fcn.14008e740
add rsp, 0x20
lea rax, [0x141dabd5f]
mov qword [rbx], rax
mov rcx, qword [rbx]
movabs rax, 0x44f6c3cb1fd41a51
mov qword [rdi], rax
mov rdx, qword [rdi]
sub rsp, 0x20
call fcn.1400194d0
add rsp, 0x20
mov r12, qword [rax]
mov r13, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx r14d, byte [rax + 0x1c]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x1d
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp dword [rbp + 0x470], 0xeb5c310b
jbe 0x14002a32b
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0x60
call fcn.1400f1350
sub rsp, rax
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x70
call fcn.1400f1350
sub rsp, rax
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
mov eax, 0xd0
call fcn.1400f1350
sub rsp, rax
sub rsp, 0x20
mov ecx, 5
call fcn.14008e740
add rsp, 0x20
lea rax, [0x141dabd5f]
mov qword [rdi], rax
mov rcx, qword [rdi]
movabs rax, 0x44f6c3cb1fd41a51
mov qword [rsi], rax
mov rdx, qword [rsi]
sub rsp, 0x20
call fcn.1400194d0
add rsp, 0x20
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x1d
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
jmp 0x1400299d0
mov qword [rbp + 0x470], rsi
mov qword [rbp + 0x338], r15
test rax, rax
je 0x14002a39a
mov r9, r13
mov rsi, rax
mov r11d, r14d
xor r11b, 0x68
movabs rcx, 0xcc88a9782c0b007a
movabs rax, 0x8d3ffe41ae851465
mov r8d, dword [0x141dc6928]
sub r8d, dword [0x141dc692c]
movabs rdx, 0x834d7acfca72d760
or r8d, 0xfd7f9ddf
imul r8d, r8d, 0xa4d8fd47
cmp r8d, 0x2066a3ca
mov r13, qword [rbp + 0x80]
mov r15, r9
jbe 0x14002a3e5
jmp 0x14002a3f6
mov eax, dword [0x141dc6918]
sub eax, dword [0x141dc691c]
or eax, 0x43c5eb
add eax, 0xdf6035f
or eax, 0xf2c9a10a
cmp eax, 0x45891e52
jb 0x14002a3df
mov eax, dword [0x141dc6920]
xor eax, dword [0x141dc6924]
mov ecx, 0xa72c4561
imul rcx, rax
shr rcx, 0x3c
ud2
ud2
ud2
mov r8, r12
xor r8, rdx
mov qword [rsi], r8
xor r8d, r8d
test r8b, r8b
je 0x14002a401
mov r8, r12
xor r8, rdx
mov qword [rsi], r8
jmp 0x14002a3e5
xor edi, 0xed5f70cb
xor rbx, rcx
xor r15, rax
mov eax, dword [0x141dc6930]
or eax, dword [0x141dc6934]
imul eax, eax, 0x50080b2a
cmp eax, 0x45dfe924
jne 0x14002a460
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
mov byte [rsi + 0x1c], r11b
sub rsp, 0x20
mov r8d, 0x1d
mov rcx, qword [rbp + 0x4c0]
mov rdx, rsi
mov r14d, r11d
call fcn.14009fc00
mov r11d, r14d
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dc6938]
xor eax, dword [0x141dc693c]
xor eax, 0x48488128
and eax, 0xd949a52c
imul r14d, eax, 0x7e3ec082
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
mov byte [rsi + 0x1c], r11b
sub rsp, 0x20
mov r8d, 0x1d
mov rcx, qword [rbp + 0x4c0]
mov rdx, rsi
mov r12, r15
mov r15d, r11d
call fcn.14009fc00
mov r11d, r15d
mov r15, r12
mov rcx, qword [rbp + 0x4c0]
add rsp, 0x20
cmp r14d, 0xe238c77e
je 0x14002a460
mov rax, qword [rcx]
cmp eax, 2
jne 0x14002a5a5
mov rax, qword [rcx + 8]
mov ecx, eax
and ecx, 3
mov r14, qword [rbp + 0x2f8]
mov rdi, qword [rbp + 0x4a8]
mov r8, qword [rbp + 0x2f0]
mov rbx, qword [rbp + 0x4c8]
nop word cs:[rax + rax]
mov edx, dword [0x141dc6940]
xor edx, dword [0x141dc6944]
or edx, 0x456c884d
xor edx, 0xb6119e3
imul edx, edx, 0xf9f3c796
cmp edx, 0xbd3f16dc
jb 0x14002a500
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x14002a7ad
test rcx, rcx
je 0x14002a7ad
cmp ecx, 1
jne 0x14002a5ae
lea rcx, [rax - 1]
mov qword [rbp + 0x4c0], rcx
mov r15, qword [rax - 1]
mov rdi, qword [rax + 7]
mov rbx, qword [rdi]
nop dword [rax + rax]
mov eax, dword [0x141dc6948]
or eax, dword [0x141dc694c]
xor eax, 0x8020000
or eax, 0x8614c240
and eax, 0xee16c240
cmp eax, 0xa0b7874f
jb 0x14002a560
test rbx, rbx
je 0x14002a640
mov eax, dword [0x141dc6950]
xor eax, dword [0x141dc6954]
add eax, 0xf41f6ece
cmp eax, 0xa2cdc1b
jae 0x14002a5b9
jmp 0x14002a5ec
sub rsp, 0x20
call fcn.1400c2810
xor eax, eax
test al, al
jne 0x14002a5b0
jmp 0x14002a3e3
mov eax, dword [0x141dc6958]
and eax, dword [0x141dc695c]
add eax, 0x6587e670
or eax, 0x84c9dfec
imul r14d, eax, 0x4fed4215
sub rsp, 0x20
mov rcx, r15
call rbx
add rsp, 0x20
cmp r14d, 0x8b2aaf0b
jne 0x14002a5fb
sub rsp, 0x20
mov rcx, r15
call rbx
add rsp, 0x20
jmp 0x14002a5b9
mov r14, qword [rbp + 0x2f8]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6960]
xor edx, edx
div dword [0x141dc6964]
shr eax, 1
imul rax, rax, 0x5ed0a9ed
shr rax, 0x3b
imul eax, eax, 0x1f92a5a9
cmp eax, 0x244bfd5a
je 0x14002a610
nop dword [rax + rax]
mov eax, dword [0x141dc6968]
sub eax, dword [0x141dc696c]
add eax, 0x63c65c66
xor eax, 0xf883af6f
cmp eax, 0xa9df03d9
jb 0x14002a640
nop dword [rax]
mov eax, dword [0x141dc6970]
sub eax, dword [0x141dc6974]
imul eax, eax, 0x7276dadb
or eax, 0x1a0218a
and eax, 0x45bd3b9f
cmp eax, 0x3ca11b1b
ja 0x14002a660
mov rcx, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
nop dword [rax + rax]
mov edx, dword [0x141dc6978]
sub edx, dword [0x141dc697c]
imul edx, edx, 0xa5158ccb
add edx, 0xaed9d392
and edx, 0x3d86a08a
cmp edx, 0xc1e61136
ja 0x14002a690
test rcx, rcx
je 0x14002a72a
cmp rax, 0x11
jb 0x14002a6c5
mov r15, qword [r15 - 8]
xor eax, eax
test al, al
je 0x14002a6e5
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dc6980]
add eax, dword [0x141dc6984]
and eax, 0x402d2280
or eax, 0x2252dc7d
imul ebx, eax, 0xb04210d3
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call rdi
add rsp, 0x20
cmp ebx, 0x3cdc0a6c
ja 0x14002a6f0
mov eax, dword [0x141dc6988]
imul eax, dword [0x141dc698c]
imul eax, eax, 0xc4922fbe
or eax, 0x68d1c266
cmp eax, 0x4f1167b7
jb 0x14002a778
mov eax, dword [0x141dc6990]
and eax, dword [0x141dc6994]
and eax, 0x4f7bff7b
add eax, 0xb7eeb645
imul rax, rax, 0x12da2c9f
shr rax, 0x3a
mov rcx, qword [0x141dde6e0]
cmp eax, 0xf4cc498c
jne 0x14002a781
mov rax, qword [0x141dde6e0]
jmp 0x14002a749
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x4c0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [rbp + 0x4a8]
mov r8, qword [rbp + 0x2f0]
mov rbx, qword [rbp + 0x4c8]
lea rax, [0x141dada28]
mov qword [r13], rax
mov rcx, qword [r13]
movabs rax, 0x7d92d8286e2e030c
mov qword [r8], rax
mov rdx, qword [r8]
sub rsp, 0x20
call fcn.14001ac90
add rsp, 0x20
mov rcx, rax
mov r8, qword [rax]
movabs r9, 0x10bbf3d1aba32a88
movabs r10, 0x233e4dc515ee965
mov eax, dword [0x141dc6998]
xor edx, edx
div dword [0x141dc699c]
or eax, 0x3348a003
and eax, 0xb3c8b003
cmp eax, 0x55b1e47f
ja 0x14002a8a9
mov eax, dword [0x141dc69a0]
xor eax, dword [0x141dc69a4]
and eax, 0x7b27810b
imul rax, rax, 0x5630e129
shr rax, 0x3d
imul eax, eax, 0x8cceb568
mov rdx, qword [rcx + 8]
xor rdx, r9
movzx r11d, byte [rcx + 0x10]
mov rdi, r8
xor rdi, r10
xor r11b, 0x91
mov rbx, qword [rbp + 0x4c8]
add rbx, 0x11
mov r13, qword [rbp + 0x4c8]
mov qword [r13], rdi
mov rdi, qword [rbp + 0x4a8]
mov r13, qword [rbp + 0x4c8]
mov qword [r13 + 8], rdx
mov rdx, qword [rbp + 0x4c8]
mov byte [rdx + 0x10], r11b
mov rdx, qword [rbp + 0x4c8]
mov qword [rdi], rdx
mov qword [rdi + 8], rbx
mov rbx, qword [rbp + 0x4c8]
mov word [rdi + 0x10], 0
mov word [rdi + 0x18], 1
cmp eax, 0xbf79bdcb
jne 0x14002a8e3
mov rax, qword [rcx + 8]
xor rax, r9
movzx edx, byte [rcx + 0x10]
mov r11, r8
xor r11, r10
xor dl, 0x91
mov qword [rbx], r11
mov qword [rbx + 8], rax
mov byte [rbx + 0x10], dl
lea rax, [rbx + 0x11]
mov qword [rdi], rbx
mov qword [rdi + 8], rax
mov word [rdi + 0x10], 0
mov word [rdi + 0x18], 1
jmp 0x14002a816
mov word [rdi + 0x1a], 0
sub rsp, 0x20
mov rcx, r14
mov rdx, rdi
call fcn.140086180
add rsp, 0x20
mov r15, qword [rbp + 0x68]
mov qword [r15], 0
mov rax, qword [rbp + 0x70]
mov dword [rax], 0
mov r12, qword [r14 + 8]
sub rsp, 0x50
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
add rsp, 0x50
mov edi, eax
test eax, eax
je 0x14002ab09
movsxd r15, edi
shl r15, 0x20
mov rbx, qword [rbp + 0x308]
nop
mov eax, dword [0x141dc69b0]
or eax, dword [0x141dc69b4]
imul rax, rax, 0x715dab93
shr rax, 0x3e
add eax, 0xb0be47ef
cmp eax, 0x268311f4
jb 0x14002a970
mov eax, 0xdb9fb899
or r15, 2
nop dword [rax]
mov ecx, dword [0x141dc69b8]
sub ecx, dword [0x141dc69bc]
imul ecx, ecx, 0x1af44da6
imul rcx, rax
shr rcx, 0x3f
add ecx, 0x9502d3c7
cmp ecx, 0x27a27b30
jb 0x14002a9a0
cmp qword [r14], 0
je 0x14002a9e8
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test edi, edi
mov rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x60]
mov rdi, qword [rbp + 0x78]
mov qword [rbp + 0x2c0], rsi
je 0x14002ab3f
mov eax, 0xbb48c6f1
nop dword [rax + rax]
mov ecx, dword [0x141dc69c0]
or ecx, dword [0x141dc69c4]
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x7d5dd4ba
je 0x14002aa10
lea rax, [0x141da8dca]
mov qword [r8], rax
mov rcx, qword [r8]
movabs rax, 0xe0c788b119bc1cd3
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.140019ac0
add rsp, 0x20
movabs rcx, 0xb0eb7465d4cd17de
xor rcx, qword [rax]
movabs rdx, 0x1ce0ad271290d196
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x25
mov qword [rdi], rcx
mov qword [rdi + 8], rdx
mov byte [rdi + 0x10], al
mov rax, rdi
add rax, 0x11
mov rdx, qword [rbp + 0x108]
mov qword [rdx], rdi
mov qword [rdx + 8], rax
mov word [rdx + 0x10], 0
mov dword [rdx + 0x18], 1
sub rsp, 0x20
mov r14, qword [rbp + 0x100]
mov rcx, r14
call fcn.140086180
add rsp, 0x20
mov qword [rbx], 0
mov r12, qword [r14 + 8]
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, 0xffffffff80000002
mov rdx, r12
xor r8d, r8d
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
add rsp, 0x30
mov edi, eax
mov r13, qword [rbx]
cmp qword [r14], 0
je 0x14002abc3
mov r14, qword [0x141dde6e0]
xor eax, eax
test al, al
je 0x14002ab47
jmp 0x14002ab80
mov rbx, qword [rbp + 0x308]
mov eax, dword [0x141dc69a8]
sub eax, dword [0x141dc69ac]
or eax, 0xb7fafadf
and eax, 0xbffbfbff
cmp eax, 0x7837b71c
jb 0x14002ab10
mov r15, qword [r15]
cmp qword [r14], 0
jne 0x14002a9ce
jmp 0x14002a9e8
mov r12, r15
jmp case.0x14002ac0b.0
mov eax, dword [0x141dc69c8]
mov ecx, dword [0x141dc69cc]
lea ebx, [rax + rcx]
add ebx, 0xe584fb3c
or ebx, 0xfceffaff
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x54d90686
jae 0x14002aba0
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14002ab47
mov eax, dword [0x141dc69d0]
add eax, dword [0x141dc69d4]
xor eax, 0xc005191e
imul eax, eax, 0xd09cf9f8
add eax, 0xb7a98248
cmp eax, 0xd14ce4dc
jb 0x14002aba0
test edi, edi
jne 0x14002a3e3
mov r12, r13
nop
mov eax, dword [0x141dc6ab8]
xor eax, dword [0x141dc6abc]
and eax, 0xb038c93c
add eax, 0xc77459c8
cmp eax, 0x53add2e3
jb 0x14002abd0
mov eax, r15d
and eax, 3
cmp rax, 3
ja case.default.0x14002ac0b
lea rcx, [0x141dbc4cc]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rdi, [r15 - 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6ac8]
imul eax, dword [0x141dc6acc]
or eax, 0xfdeb9ff7
and eax, 0xfdfbffff
cmp eax, 0x935764bc
jb 0x14002ac20
mov r12, qword [rdi]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6ad0]
or eax, dword [0x141dc6ad4]
or eax, 0x41014690
and eax, 0x61394ff2
imul eax, eax, 0x71c624df
cmp eax, 0x49df4eaa
jb 0x14002ac50
mov rbx, qword [r15 + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14002ac90
sub rsp, 0x20
mov rcx, r12
call rax
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dc6ad8]
xor edx, edx
div dword [0x141dc6adc]
xor eax, 0xbd11b4af
imul eax, eax, 0x4c98c229
cmp eax, 0x2580de85
je 0x14002ac90
mov rax, qword [rbx + 8]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc6ae0]
sub ecx, dword [0x141dc6ae4]
add ecx, 0xd3d00e85
cmp ecx, 0x742ae388
ja 0x14002acc0
test rax, rax
je 0x14002bc26
cmp qword [rbx + 0x10], 0x11
jb 0x14002acf9
xor eax, eax
nop dword [rax]
test al, al
jne 0x14002acf0
mov r12, qword [r12 - 8]
mov eax, dword [0x141dc6ae8]
or eax, dword [0x141dc6aec]
xor eax, 0x2803a0f
or eax, 0x356f40d0
mov ecx, 0xfbd2aac9
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x56db2290
jbe 0x14002bbd0
jmp 0x14002bc0a
mov eax, dword [0x141dc6ac0]
xor eax, dword [0x141dc6ac4]
imul rax, rax, 0x176a9c01
shr rax, 0x3b
add eax, 0x1617d205
xor eax, 0x2aad38d2
cmp eax, 0x5b14adf3
ja case.0x14002ac0b.3
xor eax, eax
mov rsi, qword [rbp + 0x3b8]
mov rdi, qword [rbp + 0x3c0]
mov rbx, qword [rbp + 0x3c8]
mov r15, qword [rbp + 0x3d0]
nop word cs:[rax + rax]
test al, al
jne 0x14002ad80
jmp 0x14002ad99
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x14002ad90
jmp 0x14002a3e3
mov qword [rbp + 0x4c0], r12
movabs r14, 0xed5572516afc2e29
mov eax, dword [0x141dc69d8]
and eax, dword [0x141dc69dc]
imul eax, eax, 0x77051c18
add eax, 0x696399a0
or eax, 0x9aa0b308
cmp eax, 0x7da0a806
jae 0x14002ae6c
lea rax, [0x141dac23e]
mov qword [rbx], rax
mov rcx, qword [rbx]
mov qword [rdi], r14
mov rdx, qword [rdi]
sub rsp, 0x20
call fcn.140018160
add rsp, 0x20
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xaa
mov edx, 0xd8847c6e
xor rdx, rcx
mov byte [r15 + 4], al
mov dword [r15], edx
lea rax, [r15 + 5]
mov qword [rsi], r15
mov qword [rsi + 8], rax
mov word [rsi + 0x10], 0
mov dword [rsi + 0x18], 1
sub rsp, 0x20
mov rcx, qword [rbp + 0x488]
mov rdx, rsi
call fcn.140086180
add rsp, 0x20
mov rax, qword [rbp + 0x4b0]
mov dword [rax], 0x800
mov rax, qword [rbp + 0x490]
mov dword [rax], 0
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x800
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
mov r12, r15
add r12, 5
nop word cs:[rax + rax]
mov eax, dword [0x141dc69e0]
or eax, dword [0x141dc69e4]
imul r13d, eax, 0xb48e3c98
add r13d, 0xa3d76d0
lea rax, [0x141dac23e]
mov qword [rbx], rax
mov rcx, qword [rbx]
mov qword [rdi], r14
mov rdx, qword [rdi]
sub rsp, 0x20
call fcn.140018160
add rsp, 0x20
mov ecx, dword [rax]
mov edx, 0xd8847c6e
xor rcx, rdx
movzx eax, byte [rax + 4]
xor al, 0xaa
mov byte [r15 + 4], al
mov dword [r15], ecx
mov qword [rsi], r15
mov qword [rsi + 8], r12
mov word [rsi + 0x10], 0
mov dword [rsi + 0x18], 1
sub rsp, 0x20
mov rcx, qword [rbp + 0x488]
mov rdx, rsi
call fcn.140086180
add rsp, 0x20
mov rax, qword [rbp + 0x4b0]
mov dword [rax], 0x800
mov rax, qword [rbp + 0x490]
mov dword [rax], 0
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x800
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp r13d, 0xa99a17e4
ja 0x14002ae80
test rax, rax
je 0x14002affb
mov r12, rax
mov eax, dword [0x141dc69f8]
or eax, dword [0x141dc69fc]
add eax, 0x19eee74f
cmp eax, 0x60b3c8e8
mov r8, qword [rbp + 0x478]
mov r14, qword [rbp + 0x4c0]
mov r9, qword [rbp + 0x488]
jbe 0x14002af80
mov qword [r8], 0x800
nop
mov eax, dword [0x141dc6a00]
xor eax, dword [0x141dc6a04]
imul eax, eax, 0x905314f4
add eax, 0x2af2ad54
mov qword [r8], 0x800
cmp eax, 0x91016f13
jb 0x14002af80
nop word cs:[rax + rax]
mov eax, dword [0x141dc6a08]
or eax, dword [0x141dc6a0c]
or eax, 0x4ae6a518
xor eax, 0xb490a860
shr eax, 2
imul rax, rax, 0x130f58ff
shr rax, 0x39
cmp eax, 0xf5838514
ja 0x14002afb0
mov eax, dword [0x141dc6a10]
xor edx, edx
div dword [0x141dc6a14]
imul eax, eax, 0x4b2825db
cmp eax, 0xeb467440
jne 0x14002b053
jmp 0x14002b08c
mov eax, dword [0x141dc69e8]
or eax, dword [0x141dc69ec]
imul rax, rax, 0x2c1d9fc7
shr rax, 0x3d
cmp eax, 0x4ee42669
jne 0x14002b020
ud2
mov eax, dword [0x141dc69f0]
or eax, dword [0x141dc69f4]
add eax, 0x90b518
imul rcx, rax, 0x2e7d1c4b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
ud2
mov eax, dword [0x141dc6a18]
sub eax, dword [0x141dc6a1c]
imul eax, eax, 0x34e03f14
mov ecx, 0xf66425fb
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x81847623
mov qword [r8 + 8], r12
mov qword [r8 + 0x10], 0
cmp ecx, 0x47d2c67e
jae 0x14002b09a
mov qword [r8 + 8], r12
mov qword [r8 + 0x10], 0
jmp 0x14002b053
mov rax, qword [r9 + 8]
mov qword [rbp + 0x4c8], rax
mov r13d, 0x800
xor ebx, ebx
xor eax, eax
mov rcx, rax
mov qword [rbp + 0x4a8], r13
sub r13, rax
mov rsi, qword [rbp + 0x490]
mov rax, qword [rbp + 0x4b0]
nop word [rax + rax]
mov r15, rcx
sub rsp, 0x30
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov rcx, r14
mov rdx, qword [rbp + 0x4c8]
xor r8d, r8d
mov r9, rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
add rsp, 0x30
cmp eax, 0xea
jne 0x14002b1fc
mov eax, dword [0x141dc6a30]
add eax, dword [0x141dc6a34]
xor eax, 0x9f1768a9
imul eax, eax, 0x1552108d
cmp eax, 0xf0eb866c
ja 0x14002b106
mov rax, qword [rbp + 0x4b0]
mov edi, dword [rax]
mov rcx, r15
test bl, bl
jne 0x14002b130
cmp r13, rdi
jae 0x14002b0d0
mov eax, dword [0x141dc6a48]
add eax, dword [0x141dc6a4c]
and eax, 0x899d4dfc
add eax, 0x4483c85a
imul rax, rax, 0x43ea57c1
shr rax, 0x3c
cmp eax, 0x1282650b
je 0x14002b1ce
mov eax, dword [0x141dc6a50]
mov ecx, dword [0x141dc6a54]
lea r13d, [rax + rcx]
add r13d, 0xc7bf8af
xor r13d, 0x24888981
or r13d, 0x1a77765a
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rsi, qword [rbp + 0x478]
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.1400f2140
add rsp, 0x30
mov rcx, qword [rsi]
mov r12, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
cmp r13d, 0xba01cbe9
mov r13, rcx
jbe 0x14002b161
jmp 0x14002b0af
sub rsp, 0x30
mov qword [rsp + 0x20], 1
mov r9d, 1
mov rcx, qword [rbp + 0x478]
mov rdx, r15
mov r8, rdi
call fcn.1400f2140
add rsp, 0x30
jmp 0x14002b161
mov edi, eax
test eax, eax
jne 0x14002b2c0
mov eax, dword [0x141dc6a20]
and eax, dword [0x141dc6a24]
add eax, 0xce85a8db
or eax, 0xb9f8571c
cmp eax, 0x5edb5e87
movabs rsi, 0x8000000000000000
mov rcx, qword [rbp + 0x478]
mov rdx, qword [rbp + 0x4b0]
mov r14, qword [rbp + 0x4a8]
jne 0x14002b250
mov eax, dword [rdx]
mov qword [rcx + 0x10], rax
nop dword [rax + rax]
mov eax, dword [0x141dc6a28]
add eax, dword [0x141dc6a2c]
mov edi, dword [rdx]
mov qword [rcx + 0x10], rdi
cmp eax, 0x3d30de6d
je 0x14002b250
mov rax, qword [rbp + 0x490]
mov ebx, dword [rax]
cmp ebx, 0xb
jbe 0x14002b290
movabs rdi, 0xde00000002
jmp 0x14002b2d9
mov eax, dword [0x141dc6a38]
and eax, dword [0x141dc6a3c]
xor eax, 0xaeaf8ffe
imul eax, eax, 0x5721eeca
cmp eax, 0x501ab536
je 0x14002b290
mov rax, qword [rbp + 0x488]
cmp qword [rax], 0
jne 0x14002b322
jmp 0x14002b35e
shl rdi, 0x20
or rdi, 2
movabs rsi, 0x8000000000000000
mov r14, qword [rbp + 0x4a8]
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x14002b2e0
test r14, r14
je 0x14002b31b
mov r14, qword [0x141dde6e0]
mov eax, dword [0x141dc6a58]
add eax, dword [0x141dc6a5c]
or eax, 0x24e0102
and eax, 0xe74e3592
xor eax, 0x9222848a
cmp eax, 0xff8e79d
jae 0x14002b8df
jmp 0x14002b91c
xor ebx, ebx
jmp 0x14002b934
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x4c8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dc6a40]
or eax, dword [0x141dc6a44]
imul eax, eax, 0xca365231
add eax, 0x5b62b9c2
cmp eax, 0xb2856944
ja 0x14002b340
movabs r15, 0xde00000002
mov eax, 0x8f73ca6d
nop dword [rax]
mov ecx, dword [0x141dc6a68]
and ecx, dword [0x141dc6a6c]
imul ecx, ecx, 0x658f6ddf
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xe1935f0f
ja 0x14002b370
cmp r14, rsi
jne 0x14002b39f
mov r15, r12
jmp 0x14002b540
cmp bl, 5
je 0x14002b400
movzx eax, bl
cmp eax, 4
jne 0x14002b49f
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14002b3c0
nop word cs:[rax + rax]
mov eax, dword [0x141dc6a70]
sub eax, dword [0x141dc6a74]
or eax, 0x312305ca
add eax, 0x9ea16cbc
or eax, 0x198e3fd2
cmp eax, 0xeed11123
ja 0x14002b3d0
jmp 0x14002b42d
mov eax, dword [0x141dc6a78]
add eax, dword [0x141dc6a7c]
imul rcx, rax, 0xb5d2e23
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x8d851e08
cmp eax, 0xc5f3f93a
ja 0x14002b400
cmp rdi, 4
jne 0x14002b491
nop word cs:[rax + rax]
mov eax, dword [0x141dc6a80]
or eax, dword [0x141dc6a84]
add eax, 0xba848baf
and eax, 0x99e3f849
cmp eax, 0xfb2f616e
je 0x14002b440
nop dword [rax]
mov eax, dword [0x141dc6a88]
or eax, dword [0x141dc6a8c]
add eax, 0x8aa8b352
imul rcx, rax, 0x12e43a97
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xd0838a48
ja 0x14002b460
mov dil, 1
jmp 0x14002b4b0
xor edi, edi
movabs r15, 0xd00000002
jmp 0x14002b4b0
xor edi, edi
nop word cs:[rax + rax]
mov eax, dword [0x141dc6a90]
xor eax, dword [0x141dc6a94]
shr eax, 2
imul rax, rax, 0x2d14adf9
shr rax, 0x39
add eax, 0x7acee58e
cmp eax, 0x53c939ba
jb 0x14002b4b0
shl r14, 1
test r14, r14
je 0x14002b9b0
nop word cs:[rax + rax]
mov eax, dword [0x141dc6a98]
xor eax, dword [0x141dc6a9c]
imul eax, eax, 0xc8dd9e90
or eax, 0xc5165031
cmp eax, 0xc03a4399
jb 0x14002b4f0
mov eax, dword [0x141dc6aa0]
sub eax, dword [0x141dc6aa4]
imul eax, eax, 0xda4d858a
xor eax, 0x9804002
and eax, 0xfbacb22
cmp eax, 0xe526384f
jbe 0x14002b950
jmp 0x14002b985
mov eax, dword [0x141dc6b30]
xor eax, dword [0x141dc6b34]
add eax, 0xe1cd3c14
or eax, 0x35b69d6a
xor eax, 0xca46f1d5
cmp eax, 0x2c924429
jb 0x14002b540
mov eax, r15d
and eax, 3
cmp rax, 3
ja case.default.0x14002b580
lea rcx, [0x141dbc4dc]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rdi, [r15 - 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6b48]
xor edx, edx
div dword [0x141dc6b4c]
add eax, 0x96cdb82e
or eax, 0x94000046
and eax, 0x9430cfee
cmp eax, 0x3e55d469
jb 0x14002b590
nop word cs:[rax + rax]
mov eax, dword [0x141dc6b50]
imul eax, dword [0x141dc6b54]
add eax, 0x9106751e
xor eax, 0x41881833
add eax, 0x1700bde2
cmp eax, 0x8d82de71
ja 0x14002b5c0
mov rsi, qword [r15 - 1]
xor eax, eax
nop dword [rax]
test al, al
jne 0x14002b5f0
mov rbx, qword [r15 + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14002b640
sub rsp, 0x20
mov rcx, rsi
call rax
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dc6b58]
imul eax, dword [0x141dc6b5c]
imul eax, eax, 0x16aa3d60
imul rax, rax, 0x65876851
shr rax, 0x3e
cmp eax, 0x7d1d1ed4
ja 0x14002b610
nop word cs:[rax + rax]
mov eax, dword [0x141dc6b60]
imul eax, dword [0x141dc6b64]
and eax, 0x53a51fd
add eax, 0xba2a91f3
or eax, 0xd0b572eb
cmp eax, 0x976c4946
je 0x14002b640
nop word cs:[rax + rax]
mov eax, dword [0x141dc6b68]
sub eax, dword [0x141dc6b6c]
xor eax, 0x390d0822
or eax, 0xc672f5d4
cmp eax, 0x4f327a03
jb 0x14002b670
cmp qword [rbx + 8], 0
je 0x14002b790
mov rax, qword [rbx + 0x10]
nop dword [rax]
mov ecx, dword [0x141dc6b70]
xor ecx, dword [0x141dc6b74]
add ecx, 0xdd5743c9
cmp ecx, 0x2b13a0c3
ja 0x14002b6a0
nop word [rax + rax]
mov ecx, dword [0x141dc6b78]
and ecx, dword [0x141dc6b7c]
xor ecx, 0x5d4f7497
cmp ecx, 0x647a8c1b
ja 0x14002b6c0
cmp rax, 0x11
jb 0x14002b707
mov eax, dword [0x141dc6b80]
xor eax, dword [0x141dc6b84]
add eax, 0x44e1c1b7
imul rax, rax, 0x2d2dde2b
shr rax, 0x3b
cmp eax, 0x103c75ad
je 0x14002b6e0
mov rsi, qword [rsi - 8]
mov eax, dword [0x141dc6b88]
imul eax, dword [0x141dc6b8c]
xor eax, 0x1503081
or eax, 0x1e2f4630
xor eax, 0xa7edb5f9
cmp eax, 0xb5d97622
jae 0x14002b744
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dc6b90]
xor edx, edx
div dword [0x141dc6b94]
xor eax, 0xaca4874c
imul r14d, eax, 0x6abfb91
add r14d, 0xcd1b018c
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp r14d, 0x98d8793c
ja 0x14002b750
mov r12, qword [0x141dde6e0]
mov eax, dword [0x141dc6b98]
xor edx, edx
div dword [0x141dc6b9c]
shr eax, 1
imul rax, rax, 0x212339fd
shr rax, 0x3b
imul eax, eax, 0xb1271e57
or eax, 0x4a5691ab
cmp eax, 0x193beba
jae 0x14002b7da
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov r14d, dword [0x141dc6ba0]
xor r14d, dword [0x141dc6ba4]
or r14d, 0xd04c9820
xor r14d, 0xae205b2
add r14d, 0x1863e17e
sub rsp, 0x20
mov rcx, r12
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r14d, 0x618edda2
jb 0x14002b7f0
jmp case.0x14002b580.0
mov eax, dword [0x141dc6b40]
add eax, dword [0x141dc6b44]
xor eax, 0x34a0000
and eax, 0xf37b8382
xor eax, 0xbb691755
cmp eax, 0x53686fca
jbe case.0x14002b580.3
mov eax, dword [0x141dc6ba8]
xor edx, edx
div dword [0x141dc6bac]
imul eax, eax, 0x41f15598
and eax, 0xcf1f9df0
add eax, 0xbc68be57
cmp eax, 0xd4cee778
mov rdi, qword [rbp + 0x98]
mov rsi, qword [rbp + 0xa0]
mov r14, qword [rbp + 0xa8]
mov r15, qword [rbp + 0xb0]
mov r12, qword [rbp + 0xb8]
mov rbx, qword [rbp + 0xc0]
jbe 0x14002bcf1
jmp 0x14002be06
mov eax, dword [0x141dc6b38]
mov ecx, dword [0x141dc6b3c]
add eax, ecx
add eax, 0x312109d
xor eax, 0x49c80388
imul rax, rax, 0x4a37f4a7
shr rax, 0x3d
cmp eax, 0x4b56cfa
je case.default.0x14002b580
jmp 0x14002a3e3
mov r15d, dword [0x141dc6a60]
sub r15d, dword [0x141dc6a64]
add r15d, 0x84b2f04a
or r15d, 0xff2debff
sub rsp, 0x20
xor ebx, ebx
mov rcx, r14
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r15d, 0xe73fc7f8
ja 0x14002b934
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14002b8df
mov r14, rsi
mov r12, rdi
mov rax, qword [rbp + 0x488]
cmp qword [rax], 0
jne 0x14002b322
jmp 0x14002b35e
mov eax, dword [0x141dc6aa8]
mov ecx, dword [0x141dc6aac]
add eax, ecx
add eax, 0x7ee27e9f
mov edx, 0xa639d001
imul rdx, rax
shr rdx, 0x3f
or edx, 0xadf6501a
mov rcx, qword [0x141dde6e0]
cmp edx, 0xeeea2d38
jbe 0x14002b98e
mov rax, qword [0x141dde6e0]
jmp 0x14002b950
sub rsp, 0x20
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dc6ab0]
and eax, dword [0x141dc6ab4]
xor eax, 0x93cd56b
imul eax, eax, 0x83403521
add eax, 0xa70f6292
cmp eax, 0x2e640b47
jb 0x14002b9b0
test dil, dil
je 0x14002b540
movabs rsi, 0x26235929db028556
mov eax, dword [0x141dc6b10]
mov ecx, dword [0x141dc6b14]
add eax, ecx
add eax, 0xd7c0071c
xor eax, 0xde5f3338
cmp eax, 0xee29e062
jbe 0x14002ba3a
lea rax, [0x141db1bf8]
mov rcx, qword [rbp + 0x320]
mov qword [rcx], rax
mov rcx, qword [rcx]
mov rax, qword [rbp + 0x318]
mov qword [rax], rsi
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.140019040
add rsp, 0x20
mov rcx, qword [rax]
mov rax, qword [rax + 8]
movabs rdi, 0x887e05dc14c4621f
lea rbx, [0x141db1bf8]
mov r15, qword [rbp + 0x318]
mov r12, qword [rbp + 0x320]
nop dword [rax]
mov eax, dword [0x141dc6b18]
xor eax, dword [0x141dc6b1c]
and eax, 0x6454c781
imul r14d, eax, 0x40c5c9fd
mov qword [r12], rbx
mov rcx, qword [r12]
mov qword [r15], rsi
mov rdx, qword [r15]
sub rsp, 0x20
call fcn.140019040
add rsp, 0x20
mov rcx, qword [rax]
xor rcx, rdi
mov rdx, qword [rax + 8]
cmp r14d, 0xba5910e2
je 0x14002ba60
movabs r8, 0x357283015071967e
mov r9d, dword [0x141dc6b20]
and r9d, dword [0x141dc6b24]
imul r9d, r9d, 0x8fc68751
imul r9, r9, 0x747fda29
shr r9, 0x3e
or r9d, 0xb1054b94
cmp r9d, 0x10701a83
jae 0x14002bae4
mov r9, qword [rax + 0x10]
movabs r9, 0xb968ed20c740a088
xor rdx, r8
nop word cs:[rax + rax]
mov r10d, dword [0x141dc6b28]
or r10d, dword [0x141dc6b2c]
and r10d, 0xc84046
mov r8, qword [rax + 0x10]
xor r8, r9
cmp r10d, 0x314ea3c2
je 0x14002bb00
movabs r9, 0xa2dc36333d5b5786
xor r9, qword [rax + 0x18]
mov r10d, 0xa752c3fe
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0x68
shr eax, 8
xor al, 0xf1
mov rsi, qword [rbp + 0x220]
mov qword [rsi], rcx
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], r8
mov qword [rsi + 0x18], r9
mov dword [rsi + 0x20], r10d
mov byte [rsi + 0x24], r11b
mov byte [rsi + 0x25], al
mov rax, qword [rbp + 0x230]
mov qword [rax], rsi
mov qword [rax + 8], 0x26
mov rdx, qword [rbp + 0x228]
mov qword [rdx], rax
lea rax, [0x14000cf60]
mov qword [rdx + 8], rax
lea rax, [0x140104eb0]
mov rcx, qword [rbp + 0x238]
mov qword [rcx], rax
mov qword [rcx + 8], 2
mov qword [rcx + 0x20], 0
mov qword [rcx + 0x10], rdx
mov qword [rcx + 0x18], 1
sub rsp, 0x20
call fcn.1400a21c0
call fcn.1400c2810
mov ebx, dword [0x141dc6af0]
xor ebx, dword [0x141dc6af4]
xor ebx, 0x89302c
and ebx, 0x258b382c
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp ebx, 0x55bfdf9
jne 0x14002bc26
mov rcx, qword [0x141dde6e0]
sub rsp, 0x20
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14002bbd0
mov r14, qword [0x141dde6e0]
mov eax, dword [0x141dc6af8]
and eax, dword [0x141dc6afc]
imul eax, eax, 0x5f78d897
cmp eax, 0x96906ee0
jne 0x14002bc5c
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, r13
nop word cs:[rax + rax]
mov r15d, dword [0x141dc6b00]
imul r15d, dword [0x141dc6b04]
and r15d, 0x3cc13411
add r15d, 0x4ed6705a
or r15d, 0xc6d8454b
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r15d, 0x56bd5904
je 0x14002bc70
nop
mov eax, dword [0x141dc6b08]
and eax, dword [0x141dc6b0c]
or eax, 0x24
xor eax, 0x8c414000
and eax, 0xed435067
cmp eax, 0xf25fbda4
jae 0x14002bcb0
mov rsi, qword [rbp + 0x3b8]
mov rdi, qword [rbp + 0x3c0]
mov rbx, qword [rbp + 0x3c8]
mov r15, qword [rbp + 0x3d0]
jmp 0x14002ad99
mov eax, dword [0x141dc6bb0]
imul eax, dword [0x141dc6bb4]
and eax, 0xf6afe5be
imul r13d, eax, 0x860b4555
add r13d, 0x698549e1
lea rax, [0x141db5720]
mov qword [rsi], rax
mov rcx, qword [rsi]
movabs rax, 0x33536d3b785d71a5
mov qword [rdi], rax
mov rdx, qword [rdi]
sub rsp, 0x20
call fcn.14001b350
add rsp, 0x20
mov rcx, qword [rax]
movabs rdx, 0x99a9ae2a5545f6a2
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x878a0bd821fbbb9c
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x7e4ed78418dc7ca0
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0x719c310f337ebebb
xor r9, r10
movzx eax, byte [rax + 0x20]
xor al, 0xf1
mov qword [r14], rcx
mov qword [r14 + 8], rdx
mov qword [r14 + 0x10], r8
mov qword [r14 + 0x18], r9
mov byte [r14 + 0x20], al
mov qword [r15], r14
mov qword [r15 + 8], 0x21
mov qword [r12], r15
lea rax, [0x14000cf60]
mov qword [r12 + 8], rax
lea rax, [0x140104eb0]
mov qword [rbx], rax
mov qword [rbx + 8], 2
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rcx, rbx
call fcn.1400a21c0
add rsp, 0x20
lea rax, [0x141daed74]
mov rcx, qword [rbp + 0x4a0]
mov qword [rcx], rax
cmp r13d, 0x780ca9f6
jbe 0x14002bef3
lea rax, [0x141db5720]
mov qword [rsi], rax
mov rcx, qword [rsi]
movabs rax, 0x33536d3b785d71a5
mov qword [rdi], rax
mov rdx, qword [rdi]
sub rsp, 0x20
call fcn.14001b350
add rsp, 0x20
mov rcx, qword [rax]
movabs rdx, 0x99a9ae2a5545f6a2
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x878a0bd821fbbb9c
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x7e4ed78418dc7ca0
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0x719c310f337ebebb
xor r9, r10
movzx eax, byte [rax + 0x20]
xor al, 0xf1
mov qword [r14], rcx
mov qword [r14 + 8], rdx
mov qword [r14 + 0x10], r8
mov qword [r14 + 0x18], r9
mov byte [r14 + 0x20], al
mov qword [r15], r14
mov qword [r15 + 8], 0x21
mov qword [r12], r15
lea rax, [0x14000cf60]
mov qword [r12 + 8], rax
lea rax, [0x140104eb0]
mov qword [rbx], rax
mov qword [rbx + 8], 2
mov qword [rbx + 0x20], 0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 1
sub rsp, 0x20
mov rcx, rbx
call fcn.1400a21c0
add rsp, 0x20
lea rax, [0x141daed74]
mov rcx, qword [rbp + 0x4a0]
mov qword [rcx], rax
jmp 0x14002bcf1
movabs rdi, 0x4386d87d7524156
mov eax, dword [0x141dc6bb8]
xor eax, dword [0x141dc6bbc]
or eax, 0x7db7feff
cmp eax, 0xbd8ecab3
mov rsi, qword [rbp + 0x88]
mov r14, qword [rbp + 0x4a0]
mov r15, qword [rbp + 0x90]
mov r12, qword [rbp + 0x4c0]
ja 0x14002bfa9
mov eax, dword [0x141dc6bc0]
and eax, dword [0x141dc6bc4]
add eax, 0x4e6e983f
mov ebx, 0xbb2c62cd
imul rbx, rax
shr rbx, 0x3d
add ebx, 0xabad83d4
mov rcx, qword [r14]
mov qword [rsi], rdi
mov rdx, qword [rsi]
sub rsp, 0x20
call fcn.140019660
add rsp, 0x20
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xe9
xor rcx, 0x3201cb7e
mov byte [r15 + 4], al
mov dword [r15], ecx
sub rsp, 0x20
lea r9, [0x140104e98]
mov r8d, 5
mov rcx, r12
mov rdx, r15
call fcn.14001b6f0
add rsp, 0x20
cmp ebx, 0x877d7bb3
jae 0x14002bffa
mov rcx, qword [r14]
mov qword [rsi], rdi
mov rdx, qword [rsi]
sub rsp, 0x20
call fcn.140019660
add rsp, 0x20
mov ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xe9
xor rcx, 0x3201cb7e
mov byte [r15 + 4], al
mov dword [r15], ecx
sub rsp, 0x20
lea r9, [0x140104e98]
mov r8d, 5
mov rcx, r12
mov rdx, r15
call fcn.14001b6f0
add rsp, 0x20
jmp 0x14002bf31
test rax, rax
mov r13, qword [rbp + 0x3f0]
jne 0x14002c072
nop word cs:[rax + rax]
mov eax, dword [0x141dc6bd8]
add eax, dword [0x141dc6bdc]
and eax, 0x20e9156b
cmp eax, 0xa2d4b95d
je 0x14002c010
nop dword [rax + rax]
mov eax, dword [0x141dc6be0]
mov ecx, dword [0x141dc6be4]
add eax, ecx
add eax, 0x959c6a5b
xor eax, 0x8004404a
or eax, 0x2f689f91
cmp eax, 0xcc1c829e
jb 0x14002c030
movabs rax, 0xffffffff7fffffff
cmp r12, rax
ja 0x14002c113
xor eax, eax
test al, al
je 0x14002c0cf
jmp 0x14002c100
mov eax, dword [0x141dc6bc8]
and eax, dword [0x141dc6bcc]
add eax, 0x4408ce0
and eax, 0x6f270c06
imul eax, eax, 0xa3497393
cmp eax, 0x7f8f260e
jbe 0x14002c0a0
ud2
mov eax, dword [0x141dc6bd0]
and eax, dword [0x141dc6bd4]
add eax, 0xec37266a
imul rax, rax, 0x51b3c5e9
shr rax, 0x3b
add eax, 0x5eb45823
ud2
mov edi, dword [0x141dc6be8]
add edi, dword [0x141dc6bec]
xor edi, 0x3a94f4d5
add edi, 0x44164e93
sub rsp, 0x20
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
add rsp, 0x20
cmp edi, 0x934c870d
jae 0x14002c113
sub rsp, 0x20
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
add rsp, 0x20
jmp 0x14002c0cf
mov eax, dword [0x141dc6bf0]
and eax, dword [0x141dc6bf4]
add eax, 0xc3d24c2d
or eax, 0xd798a7f6
imul rax, rax, 0x50236b31
shr rax, 0x3d
cmp eax, 0x552f97a5
mov rdx, qword [rbp + 0x400]
jbe 0x14002c14c
lea rax, [0x141db0aeb]
mov qword [rdx], rax
lea rax, [0x141db0aeb]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc6bf8]
or ecx, dword [0x141dc6bfc]
xor ecx, 0x21ad43d9
imul ecx, ecx, 0xb212639f
add ecx, 0xe26fa145
mov qword [rdx], rax
cmp ecx, 0x9de43a1d
ja 0x14002c160
mov rdi, qword [rdx]
movabs r15, 0x2fad1ee46a7bba3c
xor eax, eax
test al, al
mov rsi, qword [rbp + 0x3f8]
jne 0x14002c202
mov eax, dword [0x141dc6c00]
and eax, dword [0x141dc6c04]
xor eax, 0x1120404
and eax, 0x21363cc4
imul r12d, eax, 0x3c19adeb
mov qword [rsi], r15
mov rdx, qword [rsi]
sub rsp, 0x20
mov rcx, rdi
call fcn.1400185f0
add rsp, 0x20
mov rbx, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xa
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp r12d, 0x683a607d
jae 0x14002c23f
mov qword [rsi], r15
mov rdx, qword [rsi]
sub rsp, 0x20
mov rcx, rdi
call fcn.1400185f0
add rsp, 0x20
mov rcx, qword [rax]
movzx eax, word [rax + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xa
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
jmp 0x14002c1a3
test rax, rax
je 0x14002a3e3
movabs rcx, 0xe555015a89119f64
mov edx, dword [0x141dc6c08]
sub edx, dword [0x141dc6c0c]
imul rdx, rdx, 0x26f89963
shr rdx, 0x3c
xor edx, 0xd9754f63
add edx, 0xdb42851b
cmp edx, 0xe60cd74b
mov rdi, qword [rbp + 0x470]
movabs rsi, 0x8000000000000000
ja 0x14002c32c
mov edx, dword [0x141dc6c10]
and edx, dword [0x141dc6c14]
imul rdx, rdx, 0x1d21edd3
shr rdx, 0x3b
or edx, 0x90e63b3e
mov r8d, r14d
shr r8d, 8
xor r8b, 0x1f
mov r9d, r14d
xor r9b, 0x45
mov r10, rbx
xor r10, rcx
mov qword [rax], r10
mov byte [rax + 8], r9b
mov byte [rax + 9], r8b
mov qword [rdi], 0xa
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], 0xa
mov byte [rdi + 0x18], 0
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x28], 8
mov qword [rdi + 0x30], 0
mov qword [rdi + 0x88], 0
mov qword [rdi + 0x98], 0
mov word [rdi + 0xa0], 0
mov qword [rdi + 0x38], rsi
cmp edx, 0xa914c8d8
jne 0x14002c3a3
mov edx, r14d
shr edx, 8
xor dl, 0x1f
mov r8d, r14d
xor r8b, 0x45
mov r9, rbx
xor r9, rcx
mov qword [rax], r9
mov byte [rax + 8], r8b
mov byte [rax + 9], dl
mov qword [rdi], 0xa
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], 0xa
mov byte [rdi + 0x18], 0
mov qword [rdi + 0x20], 0
mov qword [rdi + 0x28], 8
mov qword [rdi + 0x30], 0
mov qword [rdi + 0x88], 0
mov qword [rdi + 0x98], 0
mov word [rdi + 0xa0], 0
mov qword [rdi + 0x38], rsi
jmp 0x14002c292
mov rax, rdi
add rax, 0x20
mov qword [rbp + 0x4c8], rax
mov eax, dword [0x141dc6c18]
or eax, dword [0x141dc6c1c]
add eax, 0x86e0cc9d
mov ecx, 0xe4d56791
imul rcx, rax
shr rcx, 0x3e
and ecx, 1
cmp ecx, 0xd10624ef
mov rsi, qword [rbp + 0x3e8]
ja 0x14002c483
mov eax, dword [0x141dc6c20]
xor edx, edx
div dword [0x141dc6c24]
mov ebx, eax
or ebx, 0x8218191
and ebx, 0x5825819d
mov word [rdi + 0xc0], 0
mov word [rdi + 0xc8], 0
mov dword [rdi + 0x58], 6
mov dword [rdi + 0x68], 6
mov dword [rdi + 0x78], 6
mov qword [rdi + 0xa8], 0
mov qword [rdi + 0xb8], 0
mov dword [rdi + 0xc4], 0x8000000
lea rax, [0x141dae398]
mov qword [r13], rax
mov rcx, qword [r13]
movabs rax, 0x77d41ba75e2a5042
mov qword [rsi], rax
mov rdx, qword [rsi]
sub rsp, 0x20
call fcn.14001b470
add rsp, 0x20
mov r15, qword [rax]
mov r14, qword [rax + 8]
cmp ebx, 0x431ad94d
jne 0x14002c502
mov word [rdi + 0xc0], 0
mov word [rdi + 0xc8], 0
mov dword [rdi + 0x58], 6
mov dword [rdi + 0x68], 6
mov dword [rdi + 0x78], 6
mov qword [rdi + 0xa8], 0
mov qword [rdi + 0xb8], 0
mov dword [rdi + 0xc4], 0x8000000
lea rax, [0x141dae398]
mov qword [r13], rax
mov rcx, qword [r13]
movabs rax, 0x77d41ba75e2a5042
mov qword [rsi], rax
mov rdx, qword [rsi]
sub rsp, 0x20
call fcn.14001b470
add rsp, 0x20
mov rcx, qword [rax]
mov rax, qword [rax + 8]
jmp 0x14002c3e5
mov r12, rax
mov eax, dword [0x141dc6c28]
sub eax, dword [0x141dc6c2c]
imul eax, eax, 0xc95521
and eax, 0x2a3b948
xor eax, 0x9a5f58c6
cmp eax, 0xfbe386ea
jbe 0x14002c550
mov rax, qword [r12 + 0x10]
mov eax, dword [r12 + 0x18]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x1c
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dc6c30]
sub eax, dword [0x141dc6c34]
or eax, 0x7b77efff
imul esi, eax, 0xd9c4683e
mov r13, qword [r12 + 0x10]
mov edi, dword [r12 + 0x18]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x1c
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp esi, 0x82936450
jb 0x14002c550
mov rbx, rax
test rax, rax
je 0x14002c5ae
xor eax, eax
test al, al
mov rsi, qword [rbp + 0x470]
je 0x14002c5d2
jmp 0x14002c693
ud2
mov r12d, dword [0x141dc6c40]
sub r12d, dword [0x141dc6c44]
add r12d, 0x4e264add
or r12d, 0x764aa21d
mov rax, r15
movabs rcx, 0x30f602216a0de99e
xor rax, rcx
mov rcx, r14
movabs rdx, 0x4e989d33e6f91578
xor rcx, rdx
mov rdx, r13
movabs r8, 0xaa0336bcfae4a62c
xor rdx, r8
mov r8d, edi
xor r8d, 0x564eca16
mov qword [rbx], rax
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], rdx
mov dword [rbx + 0x18], r8d
sub rsp, 0x20
mov rcx, qword [rbp + 0x4c8]
call fcn.1400c2b30
add rsp, 0x20
mov rax, qword [rsi + 0x28]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsi + 0x30], 1
sub rsp, 0x20
mov rcx, rsi
call fcn.14000d6f0
add rsp, 0x20
cmp r12d, 0x9051606c
jbe 0x14002c730
mov rax, r15
movabs rcx, 0x30f602216a0de99e
xor rax, rcx
mov rcx, r14
movabs rdx, 0x4e989d33e6f91578
xor rcx, rdx
mov rdx, r13
movabs r8, 0xaa0336bcfae4a62c
xor rdx, r8
mov r8d, edi
xor r8d, 0x564eca16
mov qword [rbx], rax
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], rdx
mov dword [rbx + 0x18], r8d
sub rsp, 0x20
mov rcx, qword [rbp + 0x4c8]
call fcn.1400c2b30
add rsp, 0x20
mov rax, qword [rsi + 0x28]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsi + 0x30], 1
sub rsp, 0x20
mov rcx, rsi
call fcn.14000d6f0
add rsp, 0x20
jmp 0x14002c5d2
xor eax, eax
test al, al
jne 0x14002c76c
mov eax, dword [0x141dc6c48]
and eax, dword [0x141dc6c4c]
and eax, 0xe9bc4447
imul rsi, rax, 0x543a213f
shr rsi, 0x3e
sub rsp, 0x20
mov ecx, 5
call fcn.14008e740
add rsp, 0x20
cmp esi, 0x4b30fa94
jne 0x14002c780
sub rsp, 0x20
mov ecx, 5
call fcn.14008e740
add rsp, 0x20
jmp 0x14002c736
movabs rsi, 0x4b19cb8d84b8b95d
xor eax, eax
lea rdi, [0x141daf688]
test al, al
je 0x14002c7e0
mov rax, qword [rbp + 0x450]
mov qword [rax], rdi
mov rcx, qword [rax]
mov rax, qword [rbp + 0x448]
mov qword [rax], rsi
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14001a2a0
add rsp, 0x20
mov rcx, qword [rax]
movzx eax, word [rax + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xa
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
xor r15d, r15d
mov r13, qword [rbp + 0x448]
mov r12, qword [rbp + 0x450]
nop word cs:[rax + rax]
mov qword [r12], rdi
mov rcx, qword [r12]
mov qword [r13], rsi
mov rdx, qword [r13]
sub rsp, 0x20
call fcn.14001a2a0
add rsp, 0x20
mov r14, qword [rax]
movzx ebx, word [rax + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xa
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test r15b, r15b
jne 0x14002c800
test rax, rax
je 0x14002cb21
mov ecx, ebx
shr ecx, 8
xor cl, 0x42
xor bl, 0x51
movabs rdx, 0xd093d9a2a434da5d
xor r14, rdx
mov qword [rax], r14
mov byte [rax + 8], bl
mov byte [rax + 9], cl
mov r9, qword [rbp + 0x338]
mov qword [r9], 0xa
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], 0xa
mov byte [r9 + 0x18], 0
mov qword [r9 + 0x20], 0
mov qword [r9 + 0x28], 8
mov qword [r9 + 0x30], 0
mov qword [r9 + 0x88], 0
mov qword [r9 + 0x98], 0
mov eax, dword [0x141dc6c60]
xor edx, edx
div dword [0x141dc6c64]
or eax, 0x60890460
and eax, 0x6089cc60
cmp eax, 0x48d2317b
mov r8, qword [rbp + 0x410]
movabs r10, 0x8000000000000000
jae 0x14002c946
mov word [r9 + 0xa0], 0
mov qword [r9 + 0x38], r10
mov word [r9 + 0xc0], 0
mov word [r9 + 0xc8], 0
mov dword [r9 + 0x58], 6
mov dword [r9 + 0x68], 6
mov dword [r9 + 0x78], 6
mov qword [r9 + 0xa8], 0
mov qword [r9 + 0xb8], 0
mov dword [r9 + 0xc4], 0x8000000
mov rsi, r9
add rsi, 0x20
mov eax, 0xf714eed5
mov rdx, qword [rbp + 0x408]
nop dword [rax]
mov ecx, dword [0x141dc6c68]
sub ecx, dword [0x141dc6c6c]
and ecx, 0x77b5c6cf
imul ecx, ecx, 0xf2a837ee
imul rcx, rax
shr rcx, 0x3d
mov word [r9 + 0xa0], 0
mov qword [r9 + 0x38], r10
mov word [r9 + 0xc0], 0
mov word [r9 + 0xc8], 0
mov dword [r9 + 0x58], 6
mov dword [r9 + 0x68], 6
mov dword [r9 + 0x78], 6
mov qword [r9 + 0xa8], 0
mov qword [r9 + 0xb8], 0
mov dword [r9 + 0xc4], 0x8000000
cmp ecx, 0x5f859154
je 0x14002c960
lea rax, [0x141da74ca]
mov qword [r8], rax
mov rcx, qword [r8]
movabs rax, 0x281095583ae9ac3a
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.14001b090
add rsp, 0x20
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14d, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0x15
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x14002cb41
mov rdi, rax
xor bl, 0xc4
xor r14d, 0x84033627
movabs rax, 0x5fbd128daa92bc0
xor r15, rax
movabs rax, 0x649732a18614ef7c
xor r12, rax
mov qword [rdi], r12
mov qword [rdi + 8], r15
mov dword [rdi + 0x10], r14d
mov byte [rdi + 0x14], bl
sub rsp, 0x20
mov rcx, rsi
call fcn.1400c2b30
add rsp, 0x20
mov rcx, qword [rbp + 0x338]
mov rax, qword [rcx + 0x28]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rcx + 0x30], 1
sub rsp, 0x20
call fcn.14000d6f0
mov ecx, 5
call fcn.14008e740
add rsp, 0x20
lea rax, [0x141dad8bf]
mov rcx, qword [rbp + 0x460]
mov qword [rcx], rax
mov rsi, qword [rcx]
movabs rax, 0x4d76fd48afe0dc26
mov r12, qword [rbp + 0x458]
mov qword [r12], rax
mov eax, dword [0x141dc6c80]
xor eax, dword [0x141dc6c84]
xor eax, 0x49045473
or eax, 0x96e9ab08
cmp eax, 0xeed50b35
jbe 0x14002cbe2
jmp 0x14002cc4a
mov eax, dword [0x141dc6c50]
and eax, dword [0x141dc6c54]
imul eax, eax, 0x7115e2b0
or eax, 0x6df83ec8
cmp eax, 0xf3665123
jne 0x14002cbad
jmp 0x14002cbb5
mov eax, dword [0x141dc6c70]
and eax, dword [0x141dc6c74]
add eax, 0x21feb445
and eax, 0x9cc3a0f9
add eax, 0xde00a0f0
cmp eax, 0x127cd383
jae 0x14002cb65
ud2
xor eax, eax
nop word [rax + rax]
ud2
ud2
ud2
mov r15d, dword [0x141dc6c88]
imul r15d, dword [0x141dc6c8c]
add r15d, 0x156a7d40
and r15d, 0x479ba9dd
add r15d, 0x5d2ef490
mov rdx, qword [r12]
sub rsp, 0x20
mov rcx, rsi
call fcn.14001adc0
add rsp, 0x20
mov rbx, qword [rax]
movzx edi, word [rax + 8]
movzx r14d, byte [rax + 0xa]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xb
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp r15d, 0xcdddc15f
jbe 0x14002cc89
mov rdx, qword [r12]
sub rsp, 0x20
mov rcx, rsi
call fcn.14001adc0
add rsp, 0x20
mov rcx, qword [rax]
movzx ecx, byte [rax + 0xa]
movzx eax, word [rax + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xb
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
jmp 0x14002cbe2
test rax, rax
je 0x14002cd5a
shl r14d, 0x10
or edi, r14d
movabs rdx, 0xf7b034afc4965aae
mov ecx, dword [0x141dc6c98]
and ecx, dword [0x141dc6c9c]
or ecx, 0xe141b7a7
add ecx, 0xcba759c2
xor ecx, 0xfcd6839a
cmp ecx, 0x7e31dc18
jbe 0x14002ccd2
mov rcx, rbx
xor rcx, rdx
mov qword [rax], rcx
mov ecx, 0x8496b587
mov r15d, edi
shr r15d, 0x10
mov r12d, edi
shr r12d, 8
xor rbx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc6ca0]
add edx, dword [0x141dc6ca4]
imul rdx, rcx
shr rdx, 0x3f
imul edx, edx, 0xb32d8f3b
and edx, 0xe4789dc3
mov qword [rax], rbx
cmp edx, 0xb0a5662
ja 0x14002ccf0
xor r15b, 0x90
xor r12b, 0x2b
xor dil, 0x9d
mov ecx, dword [0x141dc6ca8]
or ecx, dword [0x141dc6cac]
imul ecx, ecx, 0xf6f406f0
add ecx, 0x7099ba10
cmp ecx, 0x1a7706de
mov r13, rax
mov rbx, qword [rbp + 0x480]
mov r14, qword [rbp + 0x498]
jae 0x14002cd83
jmp 0x14002cdc8
ud2
mov byte [r13 + 8], dil
mov byte [r13 + 9], r12b
mov byte [r13 + 0xa], r15b
lea rax, [0x141db4452]
mov qword [r14], rax
mov rcx, qword [r14]
movabs rax, 0x8ab122334d23e5de
mov qword [rbx], rax
mov rdx, qword [rbx]
sub rsp, 0x20
call fcn.140019360
add rsp, 0x20
mov rsi, rax
mov rcx, qword [rax]
mov edx, dword [rax + 8]
xor eax, eax
test al, al
je 0x14002ce09
mov byte [r13 + 8], dil
mov byte [r13 + 9], r12b
mov byte [r13 + 0xa], r15b
lea rax, [0x141db4452]
mov qword [r14], rax
mov rcx, qword [r14]
movabs rax, 0x8ab122334d23e5de
mov qword [rbx], rax
mov rdx, qword [rbx]
sub rsp, 0x20
call fcn.140019360
add rsp, 0x20
mov rcx, qword [rax]
mov eax, dword [rax + 8]
jmp 0x14002cd83
mov dword [rbp + 0x4c8], edx
mov r14, rcx
mov qword [rbp + 0x4a8], r13
mov eax, dword [0x141dc6cb0]
add eax, dword [0x141dc6cb4]
imul eax, eax, 0xce502659
add eax, 0x67056b95
cmp eax, 0xf7baf25a
jbe 0x14002ce56
movzx eax, byte [rsi + 0xc]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
mov r15d, 0x96f0c721
mov r13, qword [rbp + 0x418]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6cb8]
or eax, dword [0x141dc6cbc]
imul eax, eax, 0xe9a9416
imul rax, r15
shr rax, 0x3f
imul r12d, eax, 0x6d8731ed
movzx edi, byte [rsi + 0xc]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp r12d, 0x51d40792
jb 0x14002ce70
test rax, rax
je 0x14002cfb4
mov edx, dword [0x141dc6cc8]
add edx, dword [0x141dc6ccc]
movabs rcx, 0xa15038b444238463
xor edx, 0x59212fb2
add edx, 0x461f8c5c
cmp edx, 0x1ba87df0
mov r10d, dword [rbp + 0x4c8]
jbe 0x14002cf08
mov r8, r14
xor r8, rcx
mov edx, r10d
xor edx, 0x6e9b9977
mov qword [rax], r8
mov dword [rax + 8], edx
mov edx, 0x987d7bcb
xor dil, 0xd
xor r14, rcx
xor r10d, 0x6e9b9977
mov r12, qword [rbp + 0x360]
mov r8, qword [rbp + 0x388]
mov r9, qword [rbp + 0x390]
mov ecx, dword [0x141dc6cd0]
add ecx, dword [0x141dc6cd4]
imul rcx, rdx
shr rcx, 0x3f
or ecx, 0xcfcfd44a
mov qword [rax], r14
mov dword [rax + 8], r10d
cmp ecx, 0x3614c37e
je 0x14002cf30
mov qword [rbp + 0x470], rax
mov byte [rax + 0xc], dil
lea rax, [0x141daca20]
mov qword [r9], rax
mov rcx, qword [r9]
movabs rax, 0xbd8a3b64f56efb5
mov qword [r8], rax
mov rdx, qword [r8]
sub rsp, 0x20
call fcn.140018790
add rsp, 0x20
mov rsi, rax
mov rbx, qword [rax]
mov eax, dword [0x141dc6cd8]
or eax, dword [0x141dc6cdc]
imul eax, eax, 0x2d0b1b0d
and eax, 0xd6c6001d
cmp eax, 0x2a625d9d
jne 0x14002cfe3
jmp 0x14002d020
ud2
mov eax, dword [0x141dc6ce0]
xor edx, edx
div dword [0x141dc6ce4]
mov edi, eax
or edi, 0xc9c9fe2a
mov r14d, dword [rsi + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xc
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp edi, 0x90fcd118
jne 0x14002d040
mov eax, dword [rsi + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xc
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
jmp 0x14002cfe3
mov r15, rax
test rax, rax
je 0x14002d2fd
xor r14d, 0x11c0763
movabs rax, 0x33f09783d49576c5
xor rbx, rax
mov qword [r15], rbx
mov dword [r15 + 8], r14d
lea rax, [0x141daeba4]
mov rcx, qword [rbp + 0x368]
mov qword [rcx], rax
mov rcx, qword [rcx]
movabs rax, 0x57980ab5dce31923
mov qword [r12], rax
mov rdx, qword [r12]
sub rsp, 0x20
call fcn.140018310
add rsp, 0x20
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x14002d2c6
mov r12, rax
movabs rax, 0x16282595cb64ca25
mov ecx, dword [0x141dc6d00]
or ecx, dword [0x141dc6d04]
and ecx, 0x7de6c4b7
imul ecx, ecx, 0x120a4c12
and ecx, 0x4e5c63b4
cmp ecx, 0xe6115e08
jbe 0x14002d112
mov rcx, rsi
xor rcx, rax
mov edx, edi
xor edx, 0x41cb17d8
mov qword [r12], rcx
mov dword [r12 + 8], edx
xor bl, 0x40
xor rsi, rax
xor edi, 0x41cb17d8
mov r14, qword [rbp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6d08]
add eax, dword [0x141dc6d0c]
imul eax, eax, 0x8d447ac8
add eax, 0x8d05b630
mov qword [r12], rsi
mov dword [r12 + 8], edi
cmp eax, 0x189538c2
ja 0x14002d130
mov qword [rbp + 0x388], r15
movabs r8, 0x4951ed28cb6953f3
mov eax, dword [0x141dc6d10]
xor edx, edx
div dword [0x141dc6d14]
add eax, 0x2cee6b59
or eax, 0x1620431
and eax, 0x5e644b5
cmp eax, 0xa47aacc5
jne 0x14002d1bc
mov byte [r12 + 0xc], bl
lea rax, [0x141db2a0c]
mov qword [r13], rax
mov rcx, qword [r13]
mov qword [r14], r8
mov rdx, qword [r14]
sub rsp, 0x20
mov rsi, r8
call fcn.14001a910
mov r8, rsi
add rsp, 0x20
mov rax, qword [rax]
lea r15, [0x141db2a0c]
nop word cs:[rax + rax]
mov eax, dword [0x141dc6d18]
xor edx, edx
div dword [0x141dc6d1c]
mov esi, eax
mov byte [r12 + 0xc], bl
mov qword [r13], r15
mov rcx, qword [r13]
mov qword [r14], r8
mov rdx, qword [r14]
sub rsp, 0x20
mov rdi, r8
call fcn.14001a910
mov r8, rdi
add rsp, 0x20
mov rdi, qword [rax]
cmp esi, 0x9e5c0d05
je 0x14002d1d0
movzx esi, word [rax + 8]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xa
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x14002d34d
mov edx, esi
shr edx, 8
xor dl, 0x27
xor sil, 0xeb
movabs rcx, 0xdc0ad5d381d5305c
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rbp + 0x478], rax
mov byte [rax + 9], dl
lea rax, [0x141dad03f]
mov rcx, qword [rbp + 0x38]
mov qword [rcx], rax
mov rcx, qword [rcx]
movabs rax, 0xa57d689b91da1f62
mov rdx, qword [rbp + 0x30]
mov qword [rdx], rax
mov rdx, qword [rdx]
sub rsp, 0x20
call fcn.14001b660
add rsp, 0x20
mov rcx, rax
mov rsi, qword [rax]
mov eax, dword [0x141dc6d30]
xor eax, dword [0x141dc6d34]
add eax, 0xb3e2bc16
and eax, 0xbcb146fd
xor eax, 0x22661c4
cmp eax, 0x6c35aa7d
jae 0x14002d395
jmp 0x14002d3cb
ud2
xor eax, eax
test al, al
je 0x14002d310
ud2
mov eax, dword [0x141dc6ce8]
sub eax, dword [0x141dc6cec]
or eax, 0x5759e92c
imul eax, eax, 0xdc5d0f80
ud2
mov eax, dword [0x141dc6d20]
add eax, dword [0x141dc6d24]
and eax, 0x6fde03cc
imul eax, eax, 0x41d146d9
cmp eax, 0x4202b67b
jne 0x14002d370
ud2
mov eax, dword [0x141dc6d28]
imul eax, dword [0x141dc6d2c]
or eax, 0x33be4d12
xor eax, 0x9d7027d9
ud2
mov eax, dword [str.9af]
xor edx, edx
div dword [0x141dc6d3c]
imul eax, eax, 0xefb81713
imul rax, rax, 0xf305f9
shr rax, 0x37
add eax, 0xda6fd83b
movzx edi, word [rcx + 8]
movzx edx, byte [0x141dde6f8]
cmp eax, 0x98cf6a07
jae 0x14002d3d8
movzx eax, word [rcx + 8]
movzx eax, byte [0x141dde6f8]
jmp 0x14002d395
sub rsp, 0x20
mov edx, 0xa
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
mov r14, qword [rbp + 0x18]
je 0x14002d457
mov edx, edi
shr edx, 8
xor dl, 0x3d
xor dil, 0xba
movabs rcx, 0xdb8f3cf2a8a85b53
xor rsi, rcx
mov qword [rax], rsi
mov byte [rax + 8], dil
mov qword [rbp + 0x448], rax
mov byte [rax + 9], dl
mov ecx, dword [0x141dc6d58]
imul ecx, dword [0x141dc6d5c]
movabs rax, 0x94d73b2fab7b64bf
and ecx, 0x48508857
imul ecx, ecx, 0x38b64ce2
cmp ecx, 0x7fd44f57
mov r8, qword [rbp + 0x20]
mov r9, qword [rbp + 0x28]
jne 0x14002d4cf
jmp 0x14002d4ff
mov eax, dword [0x141dc6d40]
sub eax, dword [0x141dc6d44]
imul eax, eax, 0x431c149d
add eax, 0xb07a7046
and eax, 0x9fb53287
cmp eax, 0xedaf7c65
ja 0x14002d49e
mov eax, dword [0x141dc6d48]
xor eax, dword [0x141dc6d4c]
add eax, 0x5fd7b910
xor eax, 0xc60a5890
add eax, 0xa16f9e49
ud2
ud2
mov edx, dword [0x141dc6d60]
xor edx, dword [0x141dc6d64]
or edx, 0xe11fa4e4
add edx, 0x8bd67f80
lea rcx, [0x141daa63a]
mov qword [r9], rcx
mov rcx, qword [r9]
mov qword [r8], rax
cmp edx, 0x1844ee76
jae 0x14002d50e
lea rcx, [0x141daa63a]
mov qword [r9], rcx
mov qword [r8], rax
jmp 0x14002d4cf
mov rdx, qword [r8]
sub rsp, 0x20
call fcn.14001b4a0
add rsp, 0x20
mov rsi, qword [rax]
mov edi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x14002d5f6
xor bl, 0xb9
movabs rcx, 0xc552e31be61ba524
xor rsi, rcx
xor edi, 0xbf083fe3
mov qword [rax], rsi
mov dword [rax + 8], edi
mov byte [rax + 0xc], bl
lea rcx, [0x141da82d2]
mov qword [r14], rcx
mov rsi, qword [r14]
mov ecx, dword [0x141dc6d80]
or ecx, dword [0x141dc6d84]
movabs rdx, 0xd67b2daffc7ebd35
imul rcx, rcx, 0x40b4db6b
shr rcx, 0x3e
cmp ecx, 0xb1ea8159
mov r8, qword [rbp + 0x10]
jne 0x14002d5a8
mov qword [r8], rdx
mov qword [rbp + 0x450], rax
mov qword [rbp + 0x390], r12
xor ecx, ecx
nop dword [rax + rax]
mov qword [r8], rdx
test cl, cl
jne 0x14002d5c0
mov rdi, qword [r8]
mov eax, dword [0x141dc6d88]
and eax, dword [0x141dc6d8c]
imul eax, eax, 0x379f5f69
add eax, 0x3d0157d9
xor eax, 0x7399e892
cmp eax, 0xd7c1edd8
jbe 0x14002d678
jmp 0x14002d6dc
mov eax, dword [0x141dc6d68]
or eax, dword [0x141dc6d6c]
imul eax, eax, 0x70df6f72
xor eax, 0x80348127
mov ecx, 0xb76b177f
imul rcx, rax
shr rcx, 0x39
cmp ecx, 0x4b1f2b94
ja 0x14002d648
mov eax, dword [0x141dc6d70]
xor edx, edx
div dword [0x141dc6d74]
and eax, 0x94a85400
or eax, 0x200323ed
xor eax, 0x66a5f70b
ud2
ud2
mov eax, dword [0x141dc6d90]
mov ecx, dword [0x141dc6d94]
add eax, ecx
add eax, 0x357de39b
mov r12d, 0x91b4a445
imul r12, rax
shr r12, 0x3e
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.140019270
add rsp, 0x20
mov rbx, qword [rax]
mov r14d, dword [rax + 8]
movzx r15d, byte [rax + 0xc]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
cmp r12d, 0xbee2effa
jne 0x14002d719
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.140019270
add rsp, 0x20
mov rcx, qword [rax]
mov ecx, dword [rax + 8]
movzx eax, byte [rax + 0xc]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xd
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
jmp 0x14002d678
test rax, rax
je 0x14002d759
movabs r10, 0x729317a56cbfdc93
mov ecx, dword [0x141dc6da0]
add ecx, dword [0x141dc6da4]
or ecx, 0x2033d048
xor ecx, 0x43592333
imul rcx, rcx, 0x1d8c425f
shr rcx, 0x3c
cmp ecx, 0xd0d75b
mov r11, qword [rbp + 8]
jbe 0x14002d786
jmp 0x14002d7cd
mov eax, dword [0x141dc6d98]
or eax, dword [0x141dc6d9c]
and eax, 0x6bade8bf
add eax, 0x5351b23b
cmp eax, 0xc57cb528
ja 0x14002d782
ud2
ud2
mov ecx, dword [0x141dc6da8]
and ecx, dword [0x141dc6dac]
xor ecx, 0xf3f52dab
mov edx, 0xabc1054d
imul rdx, rcx
shr rdx, 0x3f
mov ecx, r15d
xor cl, 0xab
mov r8, rbx
xor r8, r10
mov r9d, r14d
xor r9d, 0x1c904d56
mov qword [rax], r8
mov dword [rax + 8], r9d
mov byte [rax + 0xc], cl
cmp edx, 0x4c3aaedc
jne 0x14002d7ef
mov ecx, r15d
xor cl, 0xab
mov rdx, rbx
xor rdx, r10
mov r8d, r14d
xor r8d, 0x1c904d56
mov qword [rax], rdx
mov dword [rax + 8], r8d
mov byte [rax + 0xc], cl
jmp 0x14002d786
movabs r9, 0xd1dbdfd2871e42a
mov ecx, dword [0x141dc6db0]
sub ecx, dword [0x141dc6db4]
xor ecx, 0x26a124c2
add ecx, 0xc1fd8d9a
imul rcx, rcx, 0x31c089f7
shr rcx, 0x3d
cmp ecx, 0xce4bfa23
mov r10, qword [rbp + 0x3b0]
jbe 0x14002d838
lea rcx, [0x141db4650]
mov qword [r11], rcx
mov qword [r10], r9
mov qword [rbp + 0x3e8], rax
lea rdx, [0x141db4650]
xor r8d, r8d
nop dword [rax]
mov qword [r11], rdx
mov rcx, qword [r11]
mov qword [r10], r9
test r8b, r8b
jne 0x14002d850
mov rdx, qword [r10]
sub rsp, 0x20
call fcn.140019f50
add rsp, 0x20
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx r14d, byte [rax + 0xe]
movzx eax, byte [0x141dde6f8]
sub rsp, 0x20
mov edx, 0xf
xor ecx, ecx
call fcn.1400c29b0
add rsp, 0x20
test rax, rax
je 0x14002df3a
mov r10, rax
shl r14d, 0x10
or esi, r14d
mov eax, dword [0x141dc6dc8]
xor edx, edx
div dword [0x141dc6dcc]
mov r8, qword [rbp + 0x3a0]
mov r9, qword [rbp + 0x3a8]
mov eax, esi
and eax, 0xff0000
shr eax, 0x10
nop word cs:[rax + rax]
mov ecx, dword [0x141dc6dd0]
sub ecx, dword [0x141dc6dd4]
add ecx, 0xfcab94d
or ecx, 0xb6c3a7a4
imul ecx, ecx, 0xea61f3a3
cmp ecx, 0x6f0fb18c
je 0x14002d8e0
xor al, 0x63
mov ecx, esi
shr ecx, 8
xor cl, 0xc9
xor sil, 0x42
xor edi, 0xe8c56bdd
movabs rdx, 0x2e09cf8173f7314e
xor rbx, rdx
mov qword [r10], rbx
mov dword [r10 + 8], edi
mov byte [r10 + 0xc], sil
mov byte [r10 + 0xd], cl
mov qword [rbp + 0x3b0], r10
mov byte [r10 + 0xe], al
lea rax, [0x141db41b6]
mov qword [r9], rax
mov rcx, qword [r9]
movabs rax, 0x6dab30fef4cbf0d3
mov qword [r8], rax
mov rdx, qword [r8]
sub rsp, 0x20
call fcn.14001b600
add rsp, 0x20
mov rsi, rax
mov eax, dword [0x141dc6dd8]
xor edx, edx
div dword [0x141dc6ddc]
or eax, 0x20efbe91
imul eax, eax, 0x964b0570
cmp eax, 0xc24739a3
jbe 0x14002d9c0
mov eax, dword [0x141dc6db8]
xor edx, edx
div dword [0x141dc6dbc]
and eax, 0x4cf9445
or eax, 0x9a3023a8
imul eax, eax, 0xbf013273
cmp eax, 0x74577cfb
jbe 0x14002e0a5
jmp 0x14002e0c8
mov eax, dword [0x141dc6dc0]
and eax, dword [0x141dc6dc4]
xor eax, 0xa2232a05
or eax, 0x415c9440
ud2