Function at 0x14000e0e0
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x648
mov ecx, 5
call fcn.1400307f0
lea rax, [0x142477782]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xa086c5609ab8c912
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400072e0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x142486110]
mov edx, 0x1d
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0xd258c56c
mov edx, esi
shr edx, 8
movabs rcx, 0x985c73fd24dbd744
xor rdi, rcx
movabs rcx, 0x22972c4bebf61d00
xor r14, rcx
movabs rcx, 0x2d5df4e09008aa40
xor r15, rcx
xor bl, 0xd6
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], sil
shr esi, 0x18
mov byte [rax + 0x1b], sil
mov word [rax + 0x19], dx
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x128]
mov r8d, 0x1d
mov qword [rsp + 0x608], rax
mov rdx, rax
call fcn.140034b70
cmp dword [rsp + 0x128], 2
jne 0x14001132c
mov rsi, qword [rsp + 0x130]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000e24d
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000e216
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000e23c
cmp qword [rbx + 0x10], 0x11
jb 0x14000e22b
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rdi
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
lea rax, [0x142479a3c]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x8a092dedc147b0e4
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006c50
movabs rcx, 0x1d6d13334682f546
xor rcx, qword [rax]
movabs rdx, 0xad27e2265e6eba76
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x77
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rdx
mov byte [rsp + 0xd0], al
lea rax, [rsp + 0xd1]
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rax
mov word [rsp + 0x138], 0
mov dword [rsp + 0x140], 1
lea rcx, [rsp + 0x78]
lea rdi, [rsp + 0x128]
mov rdx, rdi
call fcn.140008530
mov qword [rsp + 0x128], 0
mov dword [rsp + 0x58], 0
mov rsi, qword [rsp + 0x80]
lea r15, [rsp + 0x58]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebx, eax
test eax, eax
je 0x14000e50c
mov rdi, rbx
shl rdi, 0x20
or rdi, 2
cmp qword [rsp + 0x78], 0
je 0x14000e39c
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
test ebx, ebx
je 0x14000e525
lea rax, [0x1424751ba]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x4494897ad8e3b522
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007070
movabs rcx, 0xfa7289371de8d021
xor rcx, qword [rax]
movabs rdx, 0x32bef1c7c1d3af3d
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 4
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rdx
mov byte [rsp + 0x68], al
lea rax, [rsp + 0x69]
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x130], rax
mov word [rsp + 0x138], 0
mov dword [rsp + 0x140], 1
lea rcx, [rsp + 0x78]
lea rsi, [rsp + 0x128]
mov rdx, rsi
call fcn.140008530
mov qword [rsp + 0x128], 0
mov rbx, qword [rsp + 0x80]
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 2
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebp, eax
mov rsi, qword [rsp + 0x128]
cmp qword [rsp + 0x78], 0
je 0x14000e4ac
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rbx
call fcn.14004d290
test ebp, ebp
jne 0x14001132a
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000e528
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000e4d3
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000e4f9
cmp qword [r14 + 0x10], 0x11
jb 0x14000e4e8
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rbx
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rdi
call fcn.14004d290
jmp 0x14000e528
mov rdi, qword [rsp + 0x128]
cmp qword [rsp + 0x78], 0
jne 0x14000e38b
jmp 0x14000e39c
mov rsi, rdi
lea rax, [0x14246d36a]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x63304b1996ed1805
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007c60
mov ecx, 0x9ca83af0
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x6b
mov dword [rsp + 0x58], ecx
mov byte [rsp + 0x5c], al
lea rax, [rsp + 0x5d]
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x130], rax
mov word [rsp + 0x138], 0
mov dword [rsp + 0x140], 1
lea rcx, [rsp + 0x78]
lea rdx, [rsp + 0x128]
call fcn.140008530
mov dword [rsp + 0x110], 0x800
mov dword [rsp + 0xc0], 0
movzx eax, byte [0x142486110]
mov edi, 0x800
mov edx, 0x800
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov r14, rax
mov qword [rsp + 0x128], 0x800
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], 0
mov r12, qword [rsp + 0x80]
xor ebp, ebp
lea rbx, [rsp + 0xc0]
mov r13, rdi
sub r13, rbp
nop word cs:[rax + rax]
lea rax, [rsp + 0x110]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, rsi
mov rdx, r12
xor r8d, r8d
mov r9, rbx
call sub.ADVAPI32.dll_RegQueryValueExW
cmp eax, 0xea
jne 0x14000e6b3
mov r8d, dword [rsp + 0x110]
cmp r13, r8
jae 0x14000e640
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0x128]
mov rdx, rbp
call fcn.1400315f0
mov rdi, qword [rsp + 0x128]
mov r14, qword [rsp + 0x130]
mov rbp, qword [rsp + 0x138]
jmp 0x14000e62b
mov r15d, eax
test eax, eax
jne 0x14000e73e
mov eax, dword [rsp + 0x110]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x138], rax
mov ebp, dword [rsp + 0xc0]
movabs r15, 0xde00000002
cmp ebp, 0xb
movabs r13, 0x8000000000000000
jbe 0x14000e711
test rdi, rdi
je 0x14000e70b
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r14
call fcn.14004d290
mov rdi, r13
mov r14, r15
cmp qword [rsp + 0x78], 0
je 0x14000e72a
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r12
call fcn.14004d290
cmp rdi, r13
jne 0x14000e757
mov rbp, r14
lea r12, [rsp + 0x58]
lea r13, [rsp + 0x78]
jmp 0x14000e7a8
shl r15, 0x20
or r15, 2
movabs r13, 0x8000000000000000
test rdi, rdi
jne 0x14000e6fa
jmp 0x14000e70b
mov r15b, 1
cmp bpl, 5
lea r12, [rsp + 0x58]
je 0x14000e772
movzx eax, bpl
cmp eax, 4
jne 0x1400112ed
cmp qword [rsp + 0xb8], 4
lea r13, [rsp + 0x78]
jne 0x1400112d5
xor r15d, r15d
test rdi, rdi
je 0x14000e79f
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r14
call fcn.14004d290
test r15b, r15b
je 0x140011331
mov eax, ebp
and eax, 3
cmp eax, 1
jne 0x14000e7fe
mov r14, qword [rbp - 1]
mov rdi, qword [rbp + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000e7c7
mov rcx, r14
call rax
dec rbp
cmp qword [rdi + 8], 0
je 0x14000e7ed
cmp qword [rdi + 0x10], 0x11
jb 0x14000e7dc
mov r14, qword [r14 - 8]
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r14
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rbp
call fcn.14004d290
lea rax, [0x14247a6db]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x59df54f80357c29e
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007620
movabs rcx, 0xff02198afa2f6b6b
xor rcx, qword [rax]
movabs rdx, 0xd95b47253a53f5f3
xor rdx, qword [rax + 8]
movabs r8, 0x45b7b535864840ba
xor r8, qword [rax + 0x10]
movabs r9, 0x8138d830d138db1d
xor r9, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
xor al, 0xcf
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x90], r9
mov byte [rsp + 0x98], al
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0x21
mov qword [rsp + 0xc0], r12
lea rax, [0x1400307a0]
mov qword [rsp + 0xc8], rax
lea rax, [0x140060ab8]
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], 2
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], 1
lea rcx, [rsp + 0x128]
call fcn.1400354d0
lea rax, [0x1424710dd]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x4672765dd57dc657
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400074c0
mov ecx, 0xb02a7ff2
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0x18
mov dword [rsp + 0x128], ecx
mov byte [rsp + 0x12c], al
lea r9, [0x140060aa0]
lea rdx, [rsp + 0x128]
mov r8d, 5
mov rcx, rsi
call fcn.140007d50
test rax, rax
jne 0x14001132a
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000e9b0
mov rcx, rsi
call sub.ADVAPI32.dll_RegCloseKey
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x68], 0
mov r8d, 0x200
mov r12d, 2
xor edi, edi
xor esi, esi
xor ebx, ebx
cmp r8, 0x201
jb 0x14000e9ff
jmp 0x14000ea20
jae 0x14000eae5
cmp r8, 0x201
jae 0x14000ea20
mov r13d, 0x200
lea r14, [rsp + 0x128]
mov r15, r8
jmp 0x14000ea51
sub r8, rbx
sub rsi, rbx
cmp r8, rsi
ja 0x14000eaba
mov eax, 0xffffffff
cmp rdi, rax
mov ebx, 0xffffffff
cmovb rbx, rdi
mov qword [rsp + 0x68], rbx
mov rsi, rdi
mov r13, rbx
mov r14, r12
mov r15, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rax, qword [0x14005d030]
mov ecx, r15d
mov rdx, r14
call rax
mov ebp, eax
test eax, eax
jne 0x14000ea7a
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14001130a
mov r8d, ebp
cmp r15, r8
jne 0x14000e9f0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x14001132a
lea r8, [r15 + r15]
cmp r15, 0x7fffffff
mov eax, 0xffffffff
cmova r8, rax
cmp r8, 0x201
jae 0x14000ea20
jmp 0x14000e9ff
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rsp + 0x58]
mov rdx, rbx
call fcn.1400315f0
mov rdi, qword [rsp + 0x58]
mov r12, qword [rsp + 0x60]
jmp 0x14000ea2f
cmp r13, r8
jb 0x14001132a
lea rsi, [rsp + 0x78]
mov rcx, rsi
mov rdx, r14
call fcn.1400308a0
cmp qword [rsp + 0x58], 0
movabs r13, 0x8000000000000000
je 0x14000eb23
mov r8, qword [rsp + 0x60]
mov rcx, qword [0x1424860d8]
xor edx, edx
call fcn.14004d290
mov rax, qword [rsp + 0x78]
cmp rax, r13
je 0x14001132a
mov rdi, qword [rsp + 0x88]
test rdi, rdi
js 0x14001132a
mov qword [rsp + 0x538], rax
mov r12, qword [rsp + 0x80]
movzx ebp, byte [rsp + 0x90]
je 0x14000eb7a
movzx eax, byte [0x142486110]
xor ecx, ecx
mov rdx, rdi
call fcn.14003f640
mov rbx, rax
test rax, rax
jne 0x14000eb7f
jmp 0x14001132a
mov ebx, 1
mov rcx, rbx
mov rdx, r12
mov r8, rdi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rdi
mov byte [rsp + 0x70], bpl
lea rax, [0x1424795d8]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xfc18fd0cbd62f9ac
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006a60
movabs rcx, 0x450cfe63f32dda36
xor rcx, qword [rax]
mov edx, 0x82de9363
xor edx, dword [rax + 8]
mov qword [rsp + 0x128], rcx
mov dword [rsp + 0x130], edx
lea rcx, [rsp + 0x58]
lea rdx, [rsp + 0x128]
mov r8d, 0xc
call fcn.140032d60
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
lea rcx, [rsp + 0x128]
mov rdx, rbx
mov r8, rdi
call fcn.140034b70
cmp dword [rsp + 0x128], 2
jne 0x14000efdb
mov rdi, qword [rsp + 0x130]
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000ecac
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000ec75
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000ec9b
cmp qword [r14 + 0x10], 0x11
jb 0x14000ec8a
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rbx
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rdi
call fcn.14004d290
lea rax, [0x1407c0764]
mov qword [rsp + 0x28], rax
lea rax, [0x1407c0758]
mov qword [rsp + 0x20], rax
lea rdx, [0x140060b28]
lea r9, [0x1407c0738]
lea rcx, [rsp + 0xc0]
mov r8d, 0x75fc10
call fcn.140024680
mov r15, qword [rsp + 0xc0]
cmp r15, r13
jne 0x14000ee55
lea rax, [0x14246ff7e]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xcf6c790c98adafa5
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007200
movabs rcx, 0xb0e169bb3d5c6ad8
xor rcx, qword [rax]
movabs rdx, 0xa42e554a271ead50
xor rdx, qword [rax + 8]
movabs r8, 0x92c36f6abe636329
xor r8, qword [rax + 0x10]
movabs r9, 0xf2fb7d9a1ae44f5d
xor r9, qword [rax + 0x18]
mov r10d, 0x344614fe
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0xd2
shr eax, 8
xor al, 0x5d
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x90], r9
mov dword [rsp + 0x98], r10d
mov byte [rsp + 0x9c], r11b
mov byte [rsp + 0x9d], al
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], 0x26
lea rax, [rsp + 0x110]
mov qword [rsp + 0xf8], rax
lea rax, [0x1400307a0]
mov qword [rsp + 0x100], rax
lea rax, [0x140060ab8]
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], 2
mov qword [rsp + 0x148], 0
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], 1
lea rcx, [rsp + 0x128]
call fcn.1400354d0
cmp qword [rsp + 0x58], 0
jne 0x14001127b
jmp 0x14001128e
mov rsi, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xd0]
mov dword [rsp + 0x128], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
mov dword [rsp + 0x140], 7
mov qword [rsp + 0x144], 0
mov word [rsp + 0x14c], 0
mov byte [rsp + 0x149], 1
mov byte [rsp + 0x14c], 1
mov byte [rsp + 0x14b], 1
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
lea r8, [rsp + 0x128]
call fcn.140032270
mov r14, rax
mov rdi, rdx
lea rax, [0x14246e7ca]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x7431b1edf09cf18e
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007cf0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
test r14, r14
jne 0x14001132a
mov qword [rsp + 0x78], rdi
lea rcx, [rsp + 0x78]
mov rdx, rsi
mov r8, rbx
call fcn.140001980
mov rbx, rax
lea rax, [0x14247b7f1]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xff214961fd2fc072
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006cf0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test rbx, rbx
jne 0x14001132a
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
test r15, r15
je 0x14000efd1
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
test rdi, rdi
js 0x14001132a
je 0x14000f004
movzx eax, byte [0x142486110]
xor ecx, ecx
mov rdx, rdi
call fcn.14003f640
mov rsi, rax
test rax, rax
jne 0x14000f009
jmp 0x14001132a
mov esi, 1
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], rdi
mov byte [rsp + 0x140], 0
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], 8
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1c0], 0
mov word [rsp + 0x1c8], 0
mov qword [rsp + 0x160], r13
mov word [rsp + 0x1e8], 0
mov word [rsp + 0x1f0], 0
mov dword [rsp + 0x180], 6
mov dword [rsp + 0x190], 6
mov dword [rsp + 0x1a0], 6
mov qword [rsp + 0x1d0], 0
mov qword [rsp + 0x1e0], 0
mov dword [rsp + 0x1ec], 0x8000000
mov dword [rsp + 0xc0], 0
lea rcx, [rsp + 0x78]
lea rdx, [rsp + 0x128]
lea r8, [rsp + 0xc0]
call fcn.140035ae0
mov rsi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x88]
cmp rbp, 2
jne 0x14000f174
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000f1f8
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000f138
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000f15e
cmp qword [rbx + 0x10], 0x11
jb 0x14000f14d
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rdi
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
jmp 0x14000f1f8
mov rdi, r12
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0x90]
mov r13, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
je 0x14000f1cc
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
test r13, r13
je 0x14000f1d9
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r12, r12
mov r12, rdi
movabs r13, 0x8000000000000000
je 0x14000f1f8
mov rcx, qword [rsp + 0xb8]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x128]
call fcn.140004700
lea rax, [0x142471fe5]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x11258b45848eec19
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007a60
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xa
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov ecx, esi
shr ecx, 8
xor cl, 0x6c
xor sil, 0x13
movabs rdx, 0xda5b5af111ea6ec8
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x128], 0xa
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], 0xa
mov byte [rsp + 0x140], 0
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], 8
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1c0], 0
mov word [rsp + 0x1c8], 0
mov qword [rsp + 0x160], r13
mov word [rsp + 0x1e8], 0
mov word [rsp + 0x1f0], 0
mov dword [rsp + 0x180], 6
mov dword [rsp + 0x190], 6
mov dword [rsp + 0x1a0], 6
mov qword [rsp + 0x1d0], 0
mov qword [rsp + 0x1e0], 0
mov dword [rsp + 0x1ec], 0x8000000
lea rax, [0x142475712]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x78]
mov rcx, qword [rsp + 0x78]
movabs rax, 0x9a6bac43929657d9
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x78]
mov rdx, qword [rsp + 0x78]
call fcn.140006ee0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x142486110]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov rsi, rax
lea rcx, [rsp + 0x148]
xor edi, 0xdcf6d8d1
movabs rax, 0xfb4b0beacf90f602
xor rbx, rax
movabs rax, 0xeca86ef963668ca0
xor r14, rax
movabs rax, 0xc75cf44abc6e4fc1
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.14003f6a0
mov rax, qword [rsp + 0x150]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x158], 1
lea rcx, [rsp + 0x128]
call fcn.140004700
mov ecx, 5
call fcn.1400307f0
lea rax, [0x142476fa0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x8796d2c67c06969f
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007790
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xa
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov ecx, esi
shr ecx, 8
add cl, 0x80
xor sil, 0x17
movabs rdx, 0x6ba26df95b3cb043
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x128], 0xa
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], 0xa
mov byte [rsp + 0x140], 0
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], 8
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1c0], 0
mov word [rsp + 0x1c8], 0
mov qword [rsp + 0x160], r13
mov word [rsp + 0x1e8], 0
mov word [rsp + 0x1f0], 0
mov dword [rsp + 0x180], 6
mov dword [rsp + 0x190], 6
mov dword [rsp + 0x1a0], 6
mov qword [rsp + 0x1d0], 0
mov qword [rsp + 0x1e0], 0
mov dword [rsp + 0x1ec], 0x8000000
lea rax, [0x1424706e4]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x78]
mov rcx, qword [rsp + 0x78]
movabs rax, 0x34af40f5051cf519
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x78]
mov rdx, qword [rsp + 0x78]
call fcn.1400078f0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x142486110]
mov edx, 0x15
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov rsi, rax
lea rcx, [rsp + 0x148]
xor bl, 0x6a
xor edi, 0x2ced58d1
mov eax, edi
shr eax, 8
movabs rdx, 0x7f6055f86ac7681
xor r14, rdx
movabs rdx, 0x2cc6fb7573d5e65a
xor r15, rdx
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov byte [rsi + 0x10], dil
shr edi, 0x18
mov byte [rsi + 0x13], dil
mov word [rsi + 0x11], ax
mov byte [rsi + 0x14], bl
call fcn.14003f6a0
mov rax, qword [rsp + 0x150]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x158], 1
lea rcx, [rsp + 0x128]
call fcn.140004700
mov ecx, 5
call fcn.1400307f0
lea rax, [0x142479b2d]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x88032ad76312d8be
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006e70
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142486110]
mov edx, 0xb
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov r15, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 3
mov ecx, esi
shr ecx, 8
xor cl, 0x58
xor sil, 0xb0
movabs rdx, 0xc9b1d719d7c0385c
xor rdi, rdx
mov qword [r15], rdi
mov byte [r15 + 8], sil
mov byte [r15 + 9], cl
mov byte [r15 + 0xa], al
lea rax, [0x142478e49]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x730187e9c446c938
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007940
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142486110]
mov edx, 0xd
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov r13, rax
xor esi, 0x989aab3b
movabs rax, 0x9e5178fc116e5a6d
xor rdi, rax
xor bl, 0x65
mov qword [r13], rdi
mov dword [r13 + 8], esi
mov byte [r13 + 0xc], bl
lea rax, [0x14247a732]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xf7f76a13df871f79
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400071a0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xc
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0x72b8f167
movabs rcx, 0xe8fa72d7e8a46605
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0xb8], rax
mov dword [rax + 8], esi
lea rax, [0x14246e757]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xcd4bbc46e300076e
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006de0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142486110]
mov edx, 0xd
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0x4dda60fb
movabs rcx, 0x41c6b8f70454d56b
xor rdi, rcx
xor bl, 0x39
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x5d8], rax
mov byte [rax + 0xc], bl
lea rax, [0x142471755]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x37225754b661b267
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006a90
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xa
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov edx, esi
shr edx, 8
xor dl, 0x8b
xor sil, 4
movabs rcx, 0xcba0d362a7f40491
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x5d0], rax
mov byte [rax + 9], dl
lea rax, [0x14246f503]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xf27f9199be3f9248
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400074f0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xa
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov edx, esi
shr edx, 8
xor dl, 0xea
xor sil, 0x8c
movabs rcx, 0x14c4abd3729315a0
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x5c8], rax
mov byte [rax + 9], dl
lea rax, [0x1424721b8]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xc14e47bf3bc06c17
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007350
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142486110]
mov edx, 0xd
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0x92b05382
movabs rcx, 0x1c6c63c8e582c44d
xor rdi, rcx
xor bl, 0xa2
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x5c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x14247a002]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xf708bec68b990e49
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007c40
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142486110]
mov edx, 0xd
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0x6103f3fd
movabs rcx, 0xe2be8113f2b0531a
xor rdi, rcx
xor bl, 0x23
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x5b8], rax
mov byte [rax + 0xc], bl
lea rax, [0x14247b5f9]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xa7cc3120061aa6bc
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007370
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142486110]
mov edx, 0xf
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x90
mov ecx, esi
shr ecx, 8
xor cl, 0x2a
xor sil, 0x4a
xor edi, 0xd713dd56
movabs rdx, 0x5af9b97d533a0bff
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x5b0], rax
mov byte [rax + 0xe], r8b
lea rax, [0x1424787b5]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x489ef6701ce4b247
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400075c0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x142486110]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0x111a95b
movabs rcx, 0xe72e77560b62f79
xor rdi, rcx
movabs rcx, 0x7a7da28937f06f8
xor rbx, rcx
movabs rcx, 0xa80b7c4577d04b1
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x5a8], rax
mov dword [rax + 0x18], esi
lea rax, [0x142477fe8]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x63b91ac2bbaa2ee6
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007690
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x142486110]
mov edx, 0x19
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov r14, rax
movabs rax, 0x71dec9e7ecd94bd6
xor rsi, rax
movabs rax, 0x5913fa3c1ec86491
xor rdi, rax
movabs rax, 0xeea88d36040f23cd
xor rbx, rax
xor bpl, 0x56
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x14247537c]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x9ffb68df378f639a
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006d30
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xa
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov rbx, rax
mov eax, esi
shr eax, 8
xor al, 0x50
xor sil, 0x57
movabs rcx, 0x8c2955fccc336ac9
xor rdi, rcx
mov qword [rbx], rdi
mov byte [rbx + 8], sil
mov byte [rbx + 9], al
lea rax, [0x14246dabb]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x9c07a1f9227ec0a9
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007920
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xc
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov qword [rsp + 0x5a0], rbx
xor esi, 0x2cb9bb11
movabs rcx, 0x2563b4ccfa5f99fc
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x598], rax
mov dword [rax + 8], esi
lea rax, [0x14246f4c2]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xafc535d71a984ce1
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007720
mov rsi, qword [rax]
movzx eax, byte [0x142486110]
mov edx, 8
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov rdi, rax
movabs rax, 0xd838e067bfb1a92
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x14246fc47]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xae3ef32128030afc
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006db0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 9
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov qword [rsp + 0x590], rdi
xor bl, 0x5a
movabs rcx, 0x593b819e1f7f50ef
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x588], rax
mov byte [rax + 8], bl
lea rax, [0x14246dd83]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x7b8b16d77403bb53
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007280
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 9
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor bl, 0x13
movabs rcx, 0xca847defc52586f2
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x580], rax
mov byte [rax + 8], bl
lea rax, [0x1424774e6]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xfb5159874fcbdaf2
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400073d0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xc
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0xf1f42fde
movabs rcx, 0x8de08fe548e416f
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x578], rax
mov dword [rax + 8], esi
lea rax, [0x14247bd67]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x8969fc4fe86a6f5d
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400077d0
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x142486110]
mov edx, 0xf
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x57
mov ecx, esi
shr ecx, 8
xor cl, 0x40
xor sil, 0xd7
xor edi, 0xc59b51e4
movabs rdx, 0x64f80fe639d4bc0c
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x570], rax
mov byte [rax + 0xe], r8b
lea rax, [0x14247a500]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x91bacf06393ce66a
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400073a0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x142486110]
mov edx, 0xc
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov rbp, rax
xor esi, 0x60d9d582
movabs rax, 0x54978e8157bf050
xor rdi, rax
mov qword [rbp], rdi
mov dword [rbp + 8], esi
lea rax, [0x142479ccb]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x61dfe93c8b853a5c
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007750
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142486110]
mov edx, 0xb
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x8c
mov ecx, esi
shr ecx, 8
xor cl, 0x29
xor sil, 0xd0
movabs rdx, 0x23482073163a6ff1
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x568], rax
mov byte [rax + 0xa], r8b
lea rax, [0x142475ee9]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x315e184b02123fcf
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006e00
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x142486110]
mov edx, 0x11
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
movabs rcx, 0xf5b58b63afc27b57
xor rsi, rcx
movabs rcx, 0x6286d1eaf76fe10d
xor rdi, rcx
xor bl, 0xef
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x560], rax
mov byte [rax + 0x10], bl
lea rax, [0x1424750f4]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xc9bfbe083d524b1d
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400070a0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142486110]
mov edx, 0xd
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0xb300f11d
movabs rcx, 0xb76ba77f2ab223f9
xor rdi, rcx
xor bl, 0xc
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x558], rax
mov byte [rax + 0xc], bl
lea rax, [0x14247612d]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x7b5de2cd380169d3
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007230
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x142486110]
mov edx, 0xb
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x19
mov ecx, esi
shr ecx, 8
xor cl, 7
xor sil, 0x7c
movabs rdx, 0x3ff02551f3fab91d
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x550], rax
mov byte [rax + 0xa], r8b
lea rax, [0x14246df30]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0xb4e9a6b574fe2e36
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007490
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x142486110]
mov edx, 0xd
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
xor esi, 0x6ff4baa4
movabs rcx, 0x38962069d0393272
xor rdi, rcx
xor bl, 0x74
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x548], rax
mov byte [rax + 0xc], bl
lea rax, [0x14246d979]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x8a8d5a2664c8d81d
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006c90
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x142486110]
mov edx, 0x12
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
movabs rcx, 0xf7bbd7a5f9bc6d0b
xor rsi, rcx
movabs rcx, 0xcf4607b374dcad6b
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x11
xor bl, 0x42
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x540], rax
mov byte [rax + 0x11], cl
lea rax, [0x14246c0c5]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x28a45ece7d57bf1c
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006ac0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x142486110]
mov edx, 7
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov r8, rax
mov qword [rsp + 0x530], r12
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0xde
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x4b
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0x30
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x4a8f9161
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x142486110]
mov edx, 0x1a0
xor ecx, ecx
mov rsi, r8
call fcn.14003f640
test rax, rax
je 0x14001132a
mov rbx, rax
mov qword [rsp + 0xe8], r15
mov qword [rax], r15
mov qword [rax + 8], 0xb
mov qword [rsp + 0x5e8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xd
mov rax, qword [rsp + 0xb8]
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x28], 0xc
mov rax, qword [rsp + 0x5d8]
mov qword [rbx + 0x30], rax
mov qword [rbx + 0x38], 0xd
mov rax, qword [rsp + 0x5d0]
mov qword [rbx + 0x40], rax
mov qword [rbx + 0x48], 0xa
mov rax, qword [rsp + 0x5c8]
mov qword [rbx + 0x50], rax
mov qword [rbx + 0x58], 0xa
mov rax, qword [rsp + 0x5c0]
mov qword [rbx + 0x60], rax
mov qword [rbx + 0x68], 0xd
mov rax, qword [rsp + 0x5b8]
mov qword [rbx + 0x70], rax
mov qword [rbx + 0x78], 0xd
mov rax, qword [rsp + 0x5b0]
mov qword [rbx + 0x80], rax
mov qword [rbx + 0x88], 0xf
mov rax, qword [rsp + 0x5a8]
mov qword [rbx + 0x90], rax
mov qword [rbx + 0x98], 0x1c
mov qword [rsp + 0x528], r14
mov qword [rbx + 0xa0], r14
mov qword [rbx + 0xa8], 0x19
mov rax, qword [rsp + 0x5a0]
mov qword [rbx + 0xb0], rax
mov qword [rbx + 0xb8], 0xa
mov rax, qword [rsp + 0x598]
mov qword [rbx + 0xc0], rax
mov qword [rbx + 0xc8], 0xc
mov rax, qword [rsp + 0x590]
mov qword [rbx + 0xd0], rax
mov qword [rbx + 0xd8], 8
mov rax, qword [rsp + 0x588]
mov qword [rbx + 0xe0], rax
mov qword [rbx + 0xe8], 9
mov rax, qword [rsp + 0x580]
mov qword [rbx + 0xf0], rax
mov qword [rbx + 0xf8], 9
mov rax, qword [rsp + 0x578]
mov qword [rbx + 0x100], rax
mov qword [rbx + 0x108], 0xc
mov rax, qword [rsp + 0x570]
mov qword [rbx + 0x110], rax
mov qword [rbx + 0x118], 0xf
mov qword [rsp + 0xe0], rbp
mov qword [rbx + 0x120], rbp
mov qword [rbx + 0x128], 0xc
mov rax, qword [rsp + 0x568]
mov qword [rbx + 0x130], rax
mov qword [rbx + 0x138], 0xb
mov rax, qword [rsp + 0x560]
mov qword [rbx + 0x140], rax
mov qword [rbx + 0x148], 0x11
mov rax, qword [rsp + 0x558]
mov qword [rbx + 0x150], rax
mov qword [rbx + 0x158], 0xd
mov rax, qword [rsp + 0x550]
mov qword [rbx + 0x160], rax
mov qword [rbx + 0x168], 0xb
mov rax, qword [rsp + 0x548]
mov qword [rbx + 0x170], rax
mov qword [rbx + 0x178], 0xd
mov rax, qword [rsp + 0x540]
mov qword [rbx + 0x180], rax
mov qword [rbx + 0x188], 0x12
mov qword [rsp + 0x5e0], rsi
mov qword [rbx + 0x190], rsi
mov qword [rbx + 0x198], 7
lea rax, [0x142471efa]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x1cc45ffb40ac285a
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007000
movabs rcx, 0xd10c2fe336f8c878
xor rcx, qword [rax]
movabs rdx, 0x545043aacafcd6fb
xor rdx, qword [rax + 8]
movabs r8, 0xb1281533d8809ab8
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x74
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], r8
mov byte [rsp + 0xd8], al
mov dword [rsp + 0xf0], 0x41888887
lea rax, [0x1424791de]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x974f177f66bf3234
mov qword [rsp + 0x128], rax
lea rbp, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140006b20
mov rcx, qword [rax]
mov qword [rsp + 0x5f0], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x5f8], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x600], rcx
mov r13, qword [rax + 0x18]
mov r12, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x57], al
movzx eax, byte [0x142486110]
mov edx, 0x49
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
movabs rcx, 0xeb5912cdf5d372ae
xor rsi, rcx
movabs rcx, 0x62f1798eaf0770c1
xor rdi, rcx
movabs rcx, 0x4b837ecc90836994
xor r14, rcx
movabs rcx, 0x152cef7579c28126
xor r15, rcx
movabs rcx, 0x2f8fd7544304a635
xor r12, rcx
movabs rcx, 0xbf64a134a2f242e3
xor r13, rcx
movabs rcx, 0xd16f6cfb09e038e5
mov rdx, qword [rsp + 0x600]
xor rdx, rcx
movabs rcx, 0x39fca6d64415176a
mov r8, qword [rsp + 0x5f8]
xor r8, rcx
movabs rcx, 0x8605efd5ae88f9ab
mov r9, qword [rsp + 0x5f0]
xor r9, rcx
movzx ecx, byte [rsp + 0x57]
xor cl, 0xed
mov qword [rax], r9
mov qword [rax + 8], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0xf8], 0x49
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 0x49
xor r13d, r13d
jmp 0x140010b21
add r13, 0x10
cmp r13, 0x1a0
je 0x140010e4c
lea rax, [rbx + r13]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x78], rax
lea rax, [0x140006900]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x610]
mov qword [rsp + 0x88], rax
lea rax, [0x140004550]
mov qword [rsp + 0x90], rax
lea rax, [0x14247b840]
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], 2
mov qword [rsp + 0x148], 0
lea rdi, [rsp + 0x78]
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x140], 2
lea rcx, [rsp + 0x110]
mov rdx, rbp
call fcn.140012db0
mov r12, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
add rax, rsi
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], rax
mov word [rsp + 0x138], 0
mov dword [rsp + 0x140], 1
mov rcx, rdi
mov rdx, rbp
call fcn.140008530
mov qword [rsp + 0x128], 0
mov dword [rsp + 0xf4], 0
mov r14, qword [rsp + 0x80]
lea rax, [rsp + 0xf4]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov edi, eax
test eax, eax
je 0x140010d00
mov r15, rdi
shl r15, 0x20
or r15, 2
cmp qword [rsp + 0x78], 0
je 0x140010c90
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r14
call fcn.14004d290
test edi, edi
jne 0x140010d19
mov r8d, 0x19
mov rcx, r15
lea rdx, [rsp + 0xc0]
lea r9, [rsp + 0xf0]
call fcn.140007d50
test rax, rax
jne 0x140010d4d
movabs rax, 0xffffffff7fffffff
cmp r15, rax
ja 0x140010cd6
mov rcx, r15
call sub.ADVAPI32.dll_RegCloseKey
test r12, r12
je 0x140010b10
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
jmp 0x140010b10
mov r15, qword [rsp + 0x128]
cmp qword [rsp + 0x78], 0
jne 0x140010c7f
jmp 0x140010c90
movzx eax, byte [0x142486110]
mov edx, 8
xor ecx, ecx
call fcn.14003f640
test rax, rax
je 0x14001132a
mov r14, rax
mov qword [rax], r15
mov r13, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0xe0]
jmp 0x140010d99
mov rdi, rax
movzx eax, byte [0x142486110]
mov edx, 8
xor ecx, ecx
call fcn.14003f640
test rax, rax
mov r13, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0xe0]
je 0x14001132a
mov r14, rax
mov qword [rax], rdi
movabs rax, 0xffffffff7fffffff
cmp r15, rax
ja 0x140010d99
mov rcx, r15
call sub.ADVAPI32.dll_RegCloseKey
test r12, r12
je 0x140010daf
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
cmp qword [rsp + 0xf8], 0
mov r12, qword [rsp + 0x530]
je 0x140010dd8
mov r8, qword [rsp + 0x100]
mov rcx, qword [0x1424860d8]
xor edx, edx
call fcn.14004d290
mov rsi, qword [r14]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x140010e31
mov rdi, qword [rsi - 1]
mov r15, qword [rsi + 7]
mov rax, qword [r15]
test rax, rax
je 0x140010dfa
mov rcx, rdi
call rax
dec rsi
cmp qword [r15 + 8], 0
je 0x140010e20
cmp qword [r15 + 0x10], 0x11
jb 0x140010e0f
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rdi
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rsi
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r14
call fcn.14004d290
mov r14, qword [rsp + 0x528]
jmp 0x140010e8d
cmp qword [rsp + 0xf8], 0
je 0x140010e6d
mov r8, qword [rsp + 0x100]
mov rcx, qword [0x1424860d8]
xor edx, edx
call fcn.14004d290
mov r12, qword [rsp + 0x530]
mov r13, qword [rsp + 0xe8]
mov r14, qword [rsp + 0x528]
mov rbp, qword [rsp + 0xe0]
mov ecx, 3
call fcn.1400307f0
lea rax, [0x14230a9c0]
mov qword [rsp + 0x28], rax
lea rax, [0x14230a9b4]
mov qword [rsp + 0x20], rax
lea rdx, [0x1407c0784]
lea r9, [0x14230a994]
lea rdi, [rsp + 0x618]
mov r8d, 0x1b4a210
mov rcx, rdi
call fcn.140024680
lea rax, [0x14247b81c]
mov qword [rsp + 0x28], rax
lea rax, [0x14247b810]
mov qword [rsp + 0x20], rax
lea rdx, [0x14230a9e0]
lea r9, [0x14247b7f0]
lea rsi, [rsp + 0x630]
mov r8d, 0x170e10
mov rcx, rsi
call fcn.140024680
lea rax, [0x1424781a3]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x579875c188e94fd0
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400079e0
movabs rcx, 0xaf56704a0575287
xor rcx, qword [rax]
movabs rdx, 0x41446ca364a335ce
xor rdx, qword [rax + 8]
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rdx
lea rdx, [rsp + 0x128]
mov r8d, 0x10
mov rcx, rdi
call fcn.140011bf0
lea rax, [0x1424798f1]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x6b00bcf9461980a4
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.140007d20
movabs rcx, 0xac2731b0d6540c5f
xor rcx, qword [rax]
mov edx, 0x83383b8
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xda
shr eax, 8
xor al, 0x4c
mov qword [rsp + 0x128], rcx
mov dword [rsp + 0x130], edx
mov byte [rsp + 0x134], r8b
mov byte [rsp + 0x135], al
lea rdx, [rsp + 0x128]
mov r8d, 0xe
mov rcx, rsi
call fcn.140011bf0
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rbx
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r13
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5e8]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0xb8]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5d8]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5d0]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5c8]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5c0]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5b8]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5b0]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5a8]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r14
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5a0]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x598]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x590]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x588]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x580]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x578]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x570]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, rbp
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x568]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x560]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x558]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x550]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x548]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x540]
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x5e0]
call fcn.14004d290
cmp qword [rsp + 0x58], 0
je 0x14001128e
mov r8, qword [rsp + 0x60]
mov rcx, qword [0x1424860d8]
xor edx, edx
call fcn.14004d290
cmp qword [rsp + 0x538], 0
je 0x1400112aa
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, r12
call fcn.14004d290
mov rcx, qword [0x1424860d8]
xor edx, edx
mov r8, qword [rsp + 0x608]
call fcn.14004d290
nop
add rsp, 0x648
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs rbp, 0xd00000002
test rdi, rdi
jne 0x14000e78e
jmp 0x14000e79f
lea r13, [rsp + 0x78]
movabs rbp, 0xde00000002
test rdi, rdi
jne 0x14000e78e
jmp 0x14000e79f
call sub.KERNEL32.dll_GetLastError
cmp qword [rsp + 0x58], 0
je 0x14001132a
mov r8, qword [rsp + 0x60]
mov rcx, qword [0x1424860d8]
xor edx, edx
call fcn.14004d290
ud2
call fcn.14003f5d0
lea rax, [0x142471619]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rcx, qword [rsp + 0x128]
movabs rax, 0x2bb270b1d0458147
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x128]
mov rdx, qword [rsp + 0x128]
call fcn.1400070f0
movabs rcx, 0xbd496520f0530990
xor rcx, qword [rax]
movabs rdx, 0x6beb0023ac489716
xor rdx, qword [rax + 8]
movabs r8, 0xb0c26da07603df54
xor r8, qword [rax + 0x10]
movabs r9, 0x6ad4aa6653b4707b
xor r9, qword [rax + 0x18]
mov r10d, 0xc9aa0ea
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0x89
shr eax, 8
xor al, 0x59
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x90], r9
mov dword [rsp + 0x98], r10d
mov byte [rsp + 0x9c], r11b
mov byte [rsp + 0x9d], al
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0x26
mov qword [rsp + 0xc0], r12
lea rax, [0x1400307a0]
mov qword [rsp + 0xc8], rax
lea rax, [0x140060ab8]
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], 2
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], 1
lea rcx, [rsp + 0x128]
call fcn.1400354d0
call fcn.14003f5d0
int3