Function at 0x14000cfa0
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3c8
mov ecx, 5
call fcn.14002dd10
lea rax, [0x141ce9587]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x44f6c3cb1fd41a51
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006c80
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x141d069e0]
mov edx, 0x1d
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0xed5f70cb
mov edx, esi
shr edx, 8
movabs rcx, 0xcc88a9782c0b007a
xor rdi, rcx
movabs rcx, 0x8d3ffe41ae851465
xor r14, rcx
movabs rcx, 0x834d7acfca72d760
xor r15, rcx
xor bl, 0x68
mov qword [rax], r15
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdi
mov byte [rax + 0x18], sil
shr esi, 0x18
mov byte [rax + 0x1b], sil
mov word [rax + 0x19], dx
mov byte [rax + 0x1c], bl
lea rcx, [rsp + 0x48]
mov r8d, 0x1d
mov qword [rsp + 0x320], rax
mov rdx, rax
call fcn.140031ef0
cmp dword [rsp + 0x48], 2
jne 0x14001064d
mov rsi, qword [rsp + 0x50]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000d0f4
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000d0bb
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000d0e2
cmp qword [rbx + 0x10], 0x11
jb 0x14000d0d0
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141ceb250]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7d92d8286e2e030c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400071b0
movabs rcx, 0x233e4dc515ee965
xor rcx, qword [rax]
movabs rdx, 0x10bbf3d1aba32a88
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x91
mov qword [rsp + 0x188], rcx
mov qword [rsp + 0x190], rdx
mov byte [rsp + 0x198], al
lea rax, [rsp + 0x199]
lea rcx, [rsp + 0x188]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rdi, [rsp + 0x48]
mov rdx, rdi
call fcn.1400084f0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x1a0], 0
mov rsi, qword [rsp + 0x128]
lea r15, [rsp + 0x1a0]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, eax
test eax, eax
je 0x14000d38c
mov rdi, rbx
shl rdi, 0x20
or rdi, 2
cmp qword [rsp + 0x120], 0
je 0x14000d22d
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebx, ebx
je 0x14000d3a5
lea rax, [0x141ce65f2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xe0c788b119bc1cd3
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006dd0
movabs rcx, 0xb0eb7465d4cd17de
xor rcx, qword [rax]
movabs rdx, 0x1ce0ad271290d196
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x25
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov byte [rsp + 0x1b0], al
lea rax, [rsp + 0x1b1]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rsi, [rsp + 0x48]
mov rdx, rsi
call fcn.1400084f0
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x128]
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebp, eax
mov rsi, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
je 0x14000d32a
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
jne 0x14001064b
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000d3a8
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000d351
mov rcx, rbx
call rax
dec rdi
cmp qword [r14 + 8], 0
je 0x14000d378
cmp qword [r14 + 0x10], 0x11
jb 0x14000d366
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000d3a8
mov rdi, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
jne 0x14000d21b
jmp 0x14000d22d
mov rsi, rdi
lea rax, [0x141ce9a66]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xed5572516afc2e29
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400074e0
mov ecx, 0xd8847c6e
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xaa
mov dword [rsp + 0x1a0], ecx
mov byte [rsp + 0x1a4], al
lea rax, [rsp + 0x1a5]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.1400084f0
mov dword [rsp + 0x218], 0x800
mov dword [rsp + 0x188], 0
movzx eax, byte [0x141d069e0]
mov ebx, 0x800
mov edx, 0x800
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov r14, rax
mov qword [rsp + 0x48], 0x800
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0
mov r15, qword [rsp + 0x128]
xor r13d, r13d
mov r12, qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rdi, rbx
sub rdi, r13
nop word cs:[rax + rax]
lea rax, [rsp + 0x218]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, rsi
mov rdx, r15
xor r8d, r8d
lea r9, [rsp + 0x188]
call r12
cmp eax, 0xea
jne 0x14000d507
mov r8d, dword [rsp + 0x218]
cmp rdi, r8
jae 0x14000d4a0
mov qword [rsp + 0x20], 1
mov r9d, 1
lea rcx, [rsp + 0x48]
mov rdx, r13
call fcn.140055d60
mov rbx, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
jmp 0x14000d48d
mov ebp, eax
test eax, eax
jne 0x14000d539
mov r12d, dword [rsp + 0x218]
mov qword [rsp + 0x58], r12
mov r13d, dword [rsp + 0x188]
cmp r13d, 0xb
jbe 0x14000d565
movabs rbp, 0xde00000002
test rbx, rbx
jne 0x14000d546
jmp 0x14000d558
shl rbp, 0x20
or rbp, 2
test rbx, rbx
je 0x14000d558
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rbx, 0x8000000000000000
mov r14, rbp
cmp qword [rsp + 0x120], 0
je 0x14000d582
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp rbx, rax
jne 0x14000d5a6
mov r15, r14
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x120]
jmp 0x14000d60d
mov bpl, 1
cmp r13b, 5
je 0x14000d5bc
movzx eax, r13b
cmp eax, 4
jne 0x140010623
cmp r12, 4
lea r13, [rsp + 0x120]
jne 0x14000d5db
xor ebp, ebp
lea r12, [rsp + 0x1a0]
test rbx, rbx
jne 0x14000d5f2
jmp 0x14000d604
movabs r15, 0xd00000002
lea r12, [rsp + 0x1a0]
test rbx, rbx
je 0x14000d604
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
test bpl, bpl
je 0x140010652
mov eax, r15d
and eax, 3
cmp eax, 1
jne 0x14000d666
mov r14, qword [r15 - 1]
mov rdi, qword [r15 + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000d62d
mov rcx, r14
call rax
dec r15
cmp qword [rdi + 8], 0
je 0x14000d654
cmp qword [rdi + 0x10], 0x11
jb 0x14000d642
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x141cf2f48]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x33536d3b785d71a5
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400069e0
movabs rcx, 0x99a9ae2a5545f6a2
xor rcx, qword [rax]
movabs rdx, 0x878a0bd821fbbb9c
xor rdx, qword [rax + 8]
movabs r8, 0x7e4ed78418dc7ca0
xor r8, qword [rax + 0x10]
movabs r9, 0x719c310f337ebebb
xor r9, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
xor al, 0xf1
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov byte [rsp + 0x140], al
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], 0x21
mov qword [rsp + 0x188], r12
lea rax, [0x1400042f0]
mov qword [rsp + 0x190], rax
lea rax, [0x1400596d8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.1400327c0
lea rax, [0x141cec59c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x4386d87d7524156
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400067b0
mov ecx, 0x3201cb7e
xor ecx, dword [rax]
movzx eax, byte [rax + 4]
xor al, 0xe9
mov dword [rsp + 0x48], ecx
mov byte [rsp + 0x4c], al
lea r9, [0x1400596c0]
lea rdx, [rsp + 0x48]
mov r8d, 5
mov rcx, rsi
call fcn.140007d00
test rax, rax
jne 0x14001064b
movabs rax, 0xffffffff7fffffff
cmp rsi, rax
ja 0x14000d7eb
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [0x141cea9f0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x11258b45848eec19
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006c50
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov ecx, esi
shr ecx, 8
xor cl, 0x6c
xor sil, 0x13
movabs rdx, 0xda5b5af111ea6ec8
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cee11d]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x9a6bac43929657d9
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007970
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx eax, byte [0x141d069e0]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0xdcf6d8d1
movabs rax, 0xfb4b0beacf90f602
xor rbx, rax
movabs rax, 0xeca86ef963668ca0
xor r14, rax
movabs rax, 0xc75cf44abc6e4fc1
xor r15, rax
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], edi
call fcn.14003cf20
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x1c
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x1c
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 5
call fcn.14002dd10
lea rax, [0x141cef9ab]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x8796d2c67c06969f
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400076c0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov ecx, esi
shr ecx, 8
add cl, 0x80
xor sil, 0x17
movabs rdx, 0x6ba26df95b3cb043
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x48], 0xa
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xa
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce90ef]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x34af40f5051cf519
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006da0
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov edi, dword [rax + 0x10]
movzx ebx, byte [rax + 0x14]
movzx eax, byte [0x141d069e0]
mov edx, 0x15
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
lea rcx, [rsp + 0x68]
xor bl, 0x6a
xor edi, 0x2ced58d1
mov eax, edi
shr eax, 8
movabs rdx, 0x7f6055f86ac7681
xor r14, rdx
movabs rdx, 0x2cc6fb7573d5e65a
xor r15, rdx
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov byte [rsi + 0x10], dil
shr edi, 0x18
mov byte [rsi + 0x13], dil
mov word [rsi + 0x11], ax
mov byte [rsi + 0x14], bl
call fcn.14003cf20
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
mov qword [rax + 8], 0x15
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0x15
mov byte [rax + 0x20], 0
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 5
call fcn.14002dd10
lea rax, [0x141cf2538]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x88032ad76312d8be
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007450
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d069e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov r15, rax
shl ebx, 0x10
or esi, ebx
mov eax, esi
shr eax, 0x10
xor al, 3
mov ecx, esi
shr ecx, 8
xor cl, 0x58
xor sil, 0xb0
movabs rdx, 0xc9b1d719d7c0385c
xor rdi, rdx
mov qword [r15], rdi
mov byte [r15 + 8], sil
mov byte [r15 + 9], cl
mov byte [r15 + 0xa], al
lea rax, [0x141cf1854]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x730187e9c446c938
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400077c0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov r12, rax
xor esi, 0x989aab3b
movabs rax, 0x9e5178fc116e5a6d
xor rdi, rax
xor bl, 0x65
mov qword [r12], rdi
mov dword [r12 + 8], esi
mov byte [r12 + 0xc], bl
lea rax, [0x141cf313d]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf7f76a13df871f79
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007ab0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov r13, rax
xor esi, 0x72b8f167
movabs rax, 0xe8fa72d7e8a46605
xor rdi, rax
mov qword [r13], rdi
mov dword [r13 + 8], esi
lea rax, [0x141ce7162]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xcd4bbc46e300076e
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006eb0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x4dda60fb
movabs rcx, 0x41c6b8f70454d56b
xor rdi, rcx
xor bl, 0x39
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2d8], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cea160]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x37225754b661b267
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007ad0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov edx, esi
shr edx, 8
xor dl, 0x8b
xor sil, 4
movabs rcx, 0xcba0d362a7f40491
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2d0], rax
mov byte [rax + 9], dl
lea rax, [0x141ce7f0e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf27f9199be3f9248
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400068d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov edx, esi
shr edx, 8
xor dl, 0xea
xor sil, 0x8c
movabs rcx, 0x14c4abd3729315a0
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2c8], rax
mov byte [rax + 9], dl
lea rax, [0x141ceabc3]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc14e47bf3bc06c17
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006b50
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x92b05382
movabs rcx, 0x1c6c63c8e582c44d
xor rdi, rcx
xor bl, 0xa2
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2c0], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cf2a0d]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf708bec68b990e49
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007210
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x6103f3fd
movabs rcx, 0xe2be8113f2b0531a
xor rdi, rcx
xor bl, 0x23
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x2b8], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cf4004]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa7cc3120061aa6bc
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006a90
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d069e0]
mov edx, 0xf
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x90
mov ecx, esi
shr ecx, 8
xor cl, 0x2a
xor sil, 0x4a
xor edi, 0xd713dd56
movabs rdx, 0x5af9b97d533a0bff
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x2b0], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141cf11c0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x489ef6701ce4b247
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006af0
mov r14, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov esi, dword [rax + 0x18]
movzx eax, byte [0x141d069e0]
mov edx, 0x1c
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x111a95b
movabs rcx, 0xe72e77560b62f79
xor rdi, rcx
movabs rcx, 0x7a7da28937f06f8
xor rbx, rcx
movabs rcx, 0xa80b7c4577d04b1
xor r14, rcx
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x2a8], rax
mov dword [rax + 0x18], esi
lea rax, [0x141cf09f3]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x63b91ac2bbaa2ee6
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007230
mov rbx, qword [rax]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
movzx ebp, byte [rax + 0x18]
movzx eax, byte [0x141d069e0]
mov edx, 0x19
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov r14, rax
movabs rax, 0x71dec9e7ecd94bd6
xor rsi, rax
movabs rax, 0x5913fa3c1ec86491
xor rdi, rax
movabs rax, 0xeea88d36040f23cd
xor rbx, rax
xor bpl, 0x56
mov qword [r14], rbx
mov qword [r14 + 8], rdi
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], bpl
lea rax, [0x141cedd87]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x9ffb68df378f639a
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006790
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xa
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov edx, esi
shr edx, 8
xor dl, 0x50
xor sil, 0x57
movabs rcx, 0x8c2955fccc336ac9
xor rdi, rcx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov qword [rsp + 0x2a0], rax
mov byte [rax + 9], dl
lea rax, [0x141ce64c6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x9c07a1f9227ec0a9
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007a90
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x2cb9bb11
movabs rcx, 0x2563b4ccfa5f99fc
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x298], rax
mov dword [rax + 8], esi
lea rax, [0x141ce7ecd]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xafc535d71a984ce1
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007c40
mov rsi, qword [rax]
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rdi, rax
movabs rax, 0xd838e067bfb1a92
xor rsi, rax
mov qword [rdi], rsi
lea rax, [0x141ce8652]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xae3ef32128030afc
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006bf0
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 9
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov qword [rsp + 0x290], rdi
xor bl, 0x5a
movabs rcx, 0x593b819e1f7f50ef
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x288], rax
mov byte [rax + 8], bl
lea rax, [0x141ce678e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7b8b16d77403bb53
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007660
mov rsi, qword [rax]
movzx ebx, byte [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 9
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor bl, 0x13
movabs rcx, 0xca847defc52586f2
xor rsi, rcx
mov qword [rax], rsi
mov qword [rsp + 0x280], rax
mov byte [rax + 8], bl
lea rax, [0x141cefef1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xfb5159874fcbdaf2
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007130
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0xf1f42fde
movabs rcx, 0x8de08fe548e416f
xor rdi, rcx
mov qword [rax], rdi
mov qword [rsp + 0x278], rax
mov dword [rax + 8], esi
lea rax, [0x141cf4772]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x8969fc4fe86a6f5d
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006f90
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx ebp, byte [rax + 0xe]
movzx eax, byte [0x141d069e0]
mov edx, 0xf
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebp, 0x10
or esi, ebp
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x57
mov ecx, esi
shr ecx, 8
xor cl, 0x40
xor sil, 0xd7
xor edi, 0xc59b51e4
movabs rdx, 0x64f80fe639d4bc0c
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x270], rax
mov byte [rax + 0xe], r8b
lea rax, [0x141cf2f0b]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x91bacf06393ce66a
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007040
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x141d069e0]
mov edx, 0xc
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rbp, rax
xor esi, 0x60d9d582
movabs rax, 0x54978e8157bf050
xor rdi, rax
mov qword [rbp], rdi
mov dword [rbp + 8], esi
lea rax, [0x141cf26d6]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x61dfe93c8b853a5c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007150
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d069e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x8c
mov ecx, esi
shr ecx, 8
xor cl, 0x29
xor sil, 0xd0
movabs rdx, 0x23482073163a6ff1
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x268], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141cee8f4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x315e184b02123fcf
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007cb0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, byte [rax + 0x10]
movzx eax, byte [0x141d069e0]
mov edx, 0x11
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
movabs rcx, 0xf5b58b63afc27b57
xor rsi, rcx
movabs rcx, 0x6286d1eaf76fe10d
xor rdi, rcx
xor bl, 0xef
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x260], rax
mov byte [rax + 0x10], bl
lea rax, [0x141cecf2d]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xdaaa1e35dbf392f7
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400068b0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rdx, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0x75
movzx eax, al
mov byte [rdx + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x1d
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 8
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x1f8da95b
mov dword [rdx], esi
shr rax, 0x20
mov qword [rsp + 0x258], rdx
mov word [rdx + 4], ax
lea rax, [0x141cebcd2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x69df818366621d80
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007a30
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x31bef134
movabs rcx, 0x1d6f188b3f470ae6
xor rdi, rcx
xor bl, 0xf8
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x250], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cf4333]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x9dde373a0be12c7
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400075d0
mov rdi, qword [rax]
movzx esi, word [rax + 8]
movzx ebx, byte [rax + 0xa]
movzx eax, byte [0x141d069e0]
mov edx, 0xb
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebx, 0x10
or esi, ebx
mov r8d, esi
shr r8d, 0x10
xor r8b, 0x8c
mov ecx, esi
shr ecx, 8
xor cl, 0x29
xor sil, 0x67
movabs rdx, 0xf1a9763076d57c93
xor rdi, rdx
mov qword [rax], rdi
mov byte [rax + 8], sil
mov byte [rax + 9], cl
mov qword [rsp + 0x248], rax
mov byte [rax + 0xa], r8b
lea rax, [0x141cf1e8a]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xb9a7ce67c0233b39
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400071e0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, byte [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xd
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
xor esi, 0x55981ce7
movabs rcx, 0xf7e5f872405e1fe3
xor rdi, rcx
xor bl, 0x45
mov qword [rax], rdi
mov dword [rax + 8], esi
mov qword [rsp + 0x240], rax
mov byte [rax + 0xc], bl
lea rax, [0x141cec1c1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x76348e3a7ab5d06c
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006fc0
mov rdi, qword [rax]
mov rsi, qword [rax + 8]
movzx ebx, word [rax + 0x10]
movzx eax, byte [0x141d069e0]
mov edx, 0x12
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
movabs rcx, 0x38bad8e70d092c47
xor rsi, rcx
movabs rcx, 0x5a9672c049e468b9
xor rdi, rcx
mov ecx, ebx
shr ecx, 8
xor cl, 0x2f
xor bl, 0xb4
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov byte [rax + 0x10], bl
mov qword [rsp + 0x238], rax
mov byte [rax + 0x11], cl
lea rax, [0x141ce4c6e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xb6570f4898a91075
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007b90
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov r8, rax
shl ebx, 0x10
or edi, ebx
mov eax, edi
shr eax, 0x10
xor al, 0x58
movzx eax, al
mov byte [r8 + 6], al
shl rax, 0x30
mov ecx, edi
shr ecx, 8
xor cl, 0x51
movzx ecx, cl
shl rcx, 0x28
or rcx, rax
xor dil, 0x78
movzx eax, dil
shl rax, 0x20
or rax, rcx
xor esi, 0x87a61c6d
mov dword [r8], esi
shr rax, 0x20
mov word [r8 + 4], ax
movzx eax, byte [0x141d069e0]
mov edx, 0x1b0
xor ecx, ecx
mov rsi, r8
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rcx, rax
mov qword [rsp + 0x310], r15
mov qword [rax], r15
mov qword [rax + 8], 0xb
mov qword [rsp + 0x308], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xd
mov qword [rsp + 0x300], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], 0xc
mov rax, qword [rsp + 0x2d8]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], 0xd
mov rax, qword [rsp + 0x2d0]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xa
mov rax, qword [rsp + 0x2c8]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xa
mov rax, qword [rsp + 0x2c0]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xd
mov rax, qword [rsp + 0x2b8]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xd
mov rax, qword [rsp + 0x2b0]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 0xf
mov rax, qword [rsp + 0x2a8]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0x1c
mov qword [rsp + 0x2f0], r14
mov qword [rcx + 0xa0], r14
mov qword [rcx + 0xa8], 0x19
mov rax, qword [rsp + 0x2a0]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xa
mov rax, qword [rsp + 0x298]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xc
mov rax, qword [rsp + 0x290]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 8
mov rax, qword [rsp + 0x288]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 9
mov rax, qword [rsp + 0x280]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 9
mov rax, qword [rsp + 0x278]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0xc
mov rax, qword [rsp + 0x270]
mov qword [rcx + 0x110], rax
mov qword [rcx + 0x118], 0xf
mov qword [rsp + 0x2f8], rbp
mov qword [rcx + 0x120], rbp
mov qword [rcx + 0x128], 0xc
mov rax, qword [rsp + 0x268]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xb
mov rax, qword [rsp + 0x260]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 0x11
mov rax, qword [rsp + 0x258]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 7
mov rax, qword [rsp + 0x250]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 0xd
mov rax, qword [rsp + 0x248]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xb
mov rax, qword [rsp + 0x240]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xd
mov rax, qword [rsp + 0x238]
mov qword [rcx + 0x190], rax
mov qword [rcx + 0x198], 0x12
mov qword [rsp + 0x2e8], rsi
mov qword [rcx + 0x1a0], rsi
mov qword [rsp + 0x2e0], rcx
mov qword [rcx + 0x1a8], 7
lea rax, [0x141cea29e]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x687e9045f52c89fb
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400079a0
movabs rcx, 0x24a130a6cf5d295d
xor rcx, qword [rax]
movabs rdx, 0x954f4b5e540bce7c
xor rdx, qword [rax + 8]
movabs r8, 0xde53ea79f8b21ccc
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x17
mov qword [rsp + 0x1a0], rcx
mov qword [rsp + 0x1a8], rdx
mov qword [rsp + 0x1b0], r8
mov byte [rsp + 0x1b8], al
mov dword [rsp + 0x230], 0x41888887
lea rax, [0x141cf1be9]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x974f177f66bf3234
mov qword [rsp + 0x48], rax
lea r12, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400070c0
mov rcx, qword [rax]
mov qword [rsp + 0x318], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x210], rcx
mov rbx, qword [rax + 0x10]
mov rbp, qword [rax + 0x18]
mov r13, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
mov r14, qword [rax + 0x30]
mov rdi, qword [rax + 0x38]
mov rsi, qword [rax + 0x40]
movzx eax, byte [rax + 0x48]
mov byte [rsp + 0x11f], al
movzx eax, byte [0x141d069e0]
mov edx, 0x49
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
movabs rcx, 0xeb5912cdf5d372ae
xor rsi, rcx
movabs rcx, 0x62f1798eaf0770c1
xor rdi, rcx
movabs rcx, 0x4b837ecc90836994
xor r14, rcx
movabs rcx, 0x152cef7579c28126
xor r15, rcx
movabs rcx, 0x2f8fd7544304a635
xor r13, rcx
movabs rcx, 0xbf64a134a2f242e3
xor rbp, rcx
movabs rcx, 0xd16f6cfb09e038e5
xor rbx, rcx
movabs rcx, 0x39fca6d64415176a
mov rdx, qword [rsp + 0x210]
xor rdx, rcx
movabs rcx, 0x8605efd5ae88f9ab
mov r8, qword [rsp + 0x318]
xor r8, rcx
movzx ecx, byte [rsp + 0x11f]
xor cl, 0xed
mov qword [rax], r8
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rsi
mov byte [rax + 0x48], cl
mov qword [rsp + 0x218], 0x49
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 0x49
xor edi, edi
movabs rbx, 0xffffffff7fffffff
jmp 0x14000efa1
add rdi, 0x10
cmp rdi, 0x1b0
je 0x14000f26f
mov rax, qword [rsp + 0x2e0]
add rax, rdi
mov qword [rsp + 0x328], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x120], rax
lea rax, [0x140006650]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x328]
mov qword [rsp + 0x130], rax
lea rax, [0x1400042d0]
mov qword [rsp + 0x138], rax
lea rax, [0x141cf42c8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rsi, [rsp + 0x120]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 2
lea rcx, [rsp + 0x188]
mov rdx, r12
call fcn.140012290
mov r15, qword [rsp + 0x188]
mov r14, qword [rsp + 0x190]
mov rax, qword [rsp + 0x198]
add rax, r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], 0
mov dword [rsp + 0x60], 1
mov rcx, rsi
mov rdx, r12
call fcn.1400084f0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x234], 0
mov r13, qword [rsp + 0x128]
lea rax, [rsp + 0x234]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
test eax, eax
je 0x14000f160
mov rbp, rsi
shl rbp, 0x20
or rbp, 2
cmp qword [rsp + 0x120], 0
je 0x14000f104
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
test esi, esi
jne 0x14000f176
mov r8d, 0x19
mov rcx, rbp
lea rdx, [rsp + 0x1a0]
lea r9, [rsp + 0x230]
call fcn.140007d00
test rax, rax
jne 0x14000f19a
cmp rbp, rbx
ja 0x14000f139
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14000ef90
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000ef90
mov rbp, qword [rsp + 0x48]
cmp qword [rsp + 0x120], 0
jne 0x14000f0f2
jmp 0x14000f104
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rdi, rax
mov qword [rax], rbp
jmp 0x14000f1cd
mov rsi, rax
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rdi, rax
mov qword [rax], rsi
cmp rbp, rbx
ja 0x14000f1cd
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r15, r15
je 0x14000f1e4
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x218], 0
je 0x14000f206
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d069c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rdi]
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000f261
mov r14, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000f228
mov rcx, r14
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000f24f
cmp qword [rbx + 0x10], 0x11
jb 0x14000f23d
mov r14, qword [r14 - 8]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rdi
jmp 0x14000f28b
cmp qword [rsp + 0x218], 0
je 0x14000f291
mov r8, qword [rsp + 0x220]
mov rcx, qword [0x141d069c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 3
call fcn.14002dd10
lea rax, [0x141ce5701]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xf7f91a028da43be2
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007800
mov rbx, qword [rax]
mov edi, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx eax, byte [0x141d069e0]
mov edx, 0xe
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov ecx, esi
shr ecx, 8
xor cl, 0x4c
xor sil, 0x55
xor edi, 0x8d50bfa7
movabs rdx, 0x2813304a8af32612
xor rbx, rdx
mov qword [rax], rbx
mov dword [rax + 8], edi
mov byte [rax + 0xc], sil
mov byte [rax + 0xd], cl
mov qword [rsp + 0x48], 0xe
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xe
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cf30b7]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x28bdd6fc75244759
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006b20
mov rbx, qword [rax]
movzx eax, byte [0x141d069e0]
mov edx, 8
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
lea rdi, [rsp + 0x68]
movabs rax, 0xa382df1998f56265
xor rbx, rax
mov qword [rsi], rbx
mov rcx, rdi
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 8
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 8
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ceb3d3]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xc5eaa5f17f69925e
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.1400074b0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x170], xmm0
movaps xmmword [rsp + 0x160], xmm0
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x180], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x140059748]
nop word [rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x128], r8
add rcx, 8
cmp rcx, 0x60
jb 0x14000f530
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x200], rax
movaps xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmm0, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x1e0], xmm0
movaps xmm0, xmmword [rsp + 0x120]
movaps xmm1, xmmword [rsp + 0x130]
movaps xmm2, xmmword [rsp + 0x140]
movaps xmm3, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x1d0], xmm3
movaps xmmword [rsp + 0x1c0], xmm2
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
movzx eax, byte [0x141d069e0]
mov edx, 0x68
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
mov rax, qword [rsp + 0x200]
mov qword [rsi + 0x60], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rsi + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmm1, xmmword [rsp + 0x1b0]
movaps xmm2, xmmword [rsp + 0x1c0]
movaps xmm3, xmmword [rsp + 0x1d0]
movups xmmword [rsi + 0x30], xmm3
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp qword [rsp + 0x68], 1
jne 0x14000f643
mov rcx, rdi
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x68
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x68
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003cd80
lea rax, [0x141ceb2cc]
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x188]
mov rcx, qword [rsp + 0x188]
movabs rax, 0x4e7b2093d01baf08
mov qword [rsp + 0x188], rax
lea rax, [rsp + 0x188]
mov rdx, qword [rsp + 0x188]
call fcn.140007bc0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
test byte [rsp + 0x120], 1
jne 0x14001064b
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141cebd80]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x7af8131bd842bcea
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.1400069a0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xea
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0xd
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0x47
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xa62d1b01
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce4d11]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xedffa86f539e6b50
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007530
movzx edi, word [rax]
movzx eax, byte [0x141d069e0]
mov edx, 2
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0x7e6d
mov word [rax], di
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141cedbb8]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x2ad1d3c861749d16
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006d40
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov r13, qword [rax + 0x10]
mov r12, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
mov ebx, dword [rax + 0x28]
movzx eax, byte [0x141d069e0]
mov edx, 0x2c
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
xor ebx, 0x4ee39b52
movabs rax, 0x73519928938614a1
xor r15, rax
movabs rax, 0xca53982ab7171f10
xor r12, rax
movabs rax, 0x5d29690dc795f59
xor r13, rax
movabs rax, 0xb5fd5f70c9c472b9
xor rbp, rax
movabs rax, 0xb87bc1bf65b3c4ca
xor rdi, rax
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r12
mov qword [rsi + 0x20], r15
mov dword [rsi + 0x28], ebx
cmp qword [rsp + 0x68], 1
jne 0x14000f9ed
lea rcx, [rsp + 0x68]
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x2c
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x2c
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003cd80
lea rax, [0x141ce8fd0]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
movabs rax, 0xa20b03aa57af8da4
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a0]
call fcn.1400069c0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov rcx, qword [rax + 0x28]
movzx eax, byte [rax + 0x30]
test byte [rsp + 0x120], 1
jne 0x14001064b
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141ce5b61]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xebb50276d84893a7
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007420
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xc8
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
add dl, 0x80
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xc5
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0x544b3511
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141cf178c]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x221e933f0b5479dc
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.1400075f0
movzx edi, word [rax]
movzx eax, byte [0x141d069e0]
mov edx, 2
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
lea rcx, [rsp + 0x68]
xor edi, 0x1a5b
mov word [rax], di
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141cf36c1]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0xd5c67426f6b00c39
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140007c10
mov rcx, qword [rax]
mov qword [rsp + 0x210], rcx
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov ebp, dword [rax + 0x20]
movzx ebx, word [rax + 0x24]
movzx edi, byte [rax + 0x26]
movzx eax, byte [0x141d069e0]
mov edx, 0x27
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
shl edi, 0x10
or ebx, edi
mov eax, ebx
shr eax, 0x10
xor al, 0xab
mov ecx, ebx
shr ecx, 8
xor cl, 0xe7
xor bl, 0xea
xor ebp, 0xc3f94724
movabs rdx, 0x866a33ab9eb64188
xor r15, rdx
movabs rdx, 0x60becc162d955548
xor r12, rdx
movabs rdx, 0xc9836e6fbfd82247
xor r13, rdx
movabs rdx, 0x142259243096fa4b
mov r8, qword [rsp + 0x210]
xor r8, rdx
mov qword [rsi], r8
mov qword [rsi + 8], r13
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r15
mov dword [rsi + 0x20], ebp
mov byte [rsi + 0x24], bl
mov byte [rsi + 0x25], cl
mov byte [rsi + 0x26], al
cmp qword [rsp + 0x68], 1
jne 0x14000fdc2
lea rcx, [rsp + 0x68]
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x27
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x27
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003cd80
lea rax, [0x141ceb138]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
movabs rax, 0xae214ef4ddb4e05b
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a0]
call fcn.140007be0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov eax, dword [rax + 0x18]
test byte [rsp + 0x120], 1
mov r15, qword [rsp + 0x310]
mov r12, qword [rsp + 0x308]
mov r13, qword [rsp + 0x300]
mov rbp, qword [rsp + 0x2f8]
jne 0x14001064b
lea rcx, [rsp + 0x48]
call fcn.140004490
lea rax, [0x141cef543]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0xc82121a3483dbdfd
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006860
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x141d069e0]
mov edx, 7
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0x4f
movzx ecx, cl
mov byte [rax + 6], cl
shl rcx, 0x30
mov edx, edi
shr edx, 8
xor dl, 0xae
movzx edx, dl
shl rdx, 0x28
or rdx, rcx
xor dil, 0xa9
movzx ecx, dil
shl rcx, 0x20
or rcx, rdx
xor esi, 0xdb09466b
mov dword [rax], esi
shr rcx, 0x20
mov word [rax + 4], cx
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 7
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xe0], 0
mov word [rsp + 0xe8], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
mov word [rsp + 0x108], 0
mov word [rsp + 0x110], 0
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0xb0], 6
mov dword [rsp + 0xc0], 6
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x10c], 0x8000000
lea rax, [0x141ce4df3]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x9d5e0f35f7dcd3e7
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006ed0
movzx ebx, word [rax]
movzx eax, byte [0x141d069e0]
mov edx, 2
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
lea rdi, [rsp + 0x68]
xor ebx, 0x8bdf
mov word [rax], bx
mov rcx, rdi
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14], 0
mov qword [r14 + 8], 2
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 2
mov byte [r14 + 0x20], 0
mov qword [rsp + 0x78], 1
lea rax, [0x141ce5523]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rcx, qword [rsp + 0x120]
movabs rax, 0x85e7a8df4b5a6069
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x120]
mov rdx, qword [rsp + 0x120]
call fcn.140006e70
xorps xmm0, xmm0
movaps xmmword [rsp + 0x330], xmm0
movaps xmmword [rsp + 0x340], xmm0
movaps xmmword [rsp + 0x350], xmm0
movaps xmmword [rsp + 0x360], xmm0
movaps xmmword [rsp + 0x370], xmm0
mov qword [rsp + 0x380], 0
mov rcx, 0xfffffffffffffff8
lea rdx, [0x1400597b0]
nop word cs:[rax + rax]
mov r8, qword [rcx + rdx + 8]
xor r8, qword [rax + rcx + 8]
mov qword [rsp + rcx + 0x338], r8
add rcx, 8
cmp rcx, 0x50
jb 0x140010130
movzx eax, byte [rax + 0x58]
xor al, 0xe5
mov byte [rsp + 0x388], al
movzx eax, byte [0x141d069e0]
mov edx, 0x59
xor ecx, ecx
call fcn.14003cef0
test rax, rax
je 0x14001064b
mov rsi, rax
movups xmm0, xmmword [rsp + 0x379]
movups xmmword [rax + 0x49], xmm0
movaps xmm0, xmmword [rsp + 0x370]
movups xmmword [rax + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x330]
movaps xmm1, xmmword [rsp + 0x340]
movaps xmm2, xmmword [rsp + 0x350]
movaps xmm3, xmmword [rsp + 0x360]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x68], 1
jne 0x1400101d4
mov rcx, rdi
call fcn.14003cf20
mov r14, qword [rsp + 0x70]
mov qword [r14 + 0x28], 0
mov qword [r14 + 0x30], 0x59
mov qword [r14 + 0x38], rsi
mov qword [r14 + 0x40], 0x59
mov byte [r14 + 0x48], 0
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x48]
call fcn.14003cd80
lea rax, [0x141cedaa0]
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a0]
movabs rax, 0x8774aa9299e87688
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x1a0]
call fcn.140007370
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx ecx, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
test byte [rsp + 0x120], 1
jne 0x14001064b
lea rcx, [rsp + 0x48]
call fcn.140004490
mov ecx, 2
call fcn.14002dd10
lea rax, [0x141b82c45]
mov qword [rsp + 0x28], rax
lea rax, [0x141b82c39]
mov qword [rsp + 0x20], rax
lea rdx, [0x140059809]
lea r9, [0x141b82c19]
lea rsi, [rsp + 0x398]
mov r8d, 0x1b29410
mov rcx, rsi
call fcn.140022f10
lea rax, [0x141cf42a1]
mov qword [rsp + 0x28], rax
lea rax, [0x141cf4295]
mov qword [rsp + 0x20], rax
lea rdx, [0x141b82c65]
lea r9, [0x141cf4275]
lea rdi, [rsp + 0x3b0]
mov r8d, 0x171610
mov rcx, rdi
call fcn.140022f10
lea rax, [0x141ceb63a]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x9dead5e55456eefd
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007a10
movabs rcx, 0x4a12a1a0ee2531a8
xor rcx, qword [rax]
movabs rdx, 0x8c106c7daf378d3
xor rdx, qword [rax + 8]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdx
lea rdx, [rsp + 0x48]
mov r8d, 0x10
mov rcx, rsi
call fcn.1400110d0
lea rax, [0x141cf0ee0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x1acb9b6896015593
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140007560
movabs rcx, 0x69f653a2a5e7e323
xor rcx, qword [rax]
mov edx, 0xd3ca0e03
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0xc6
shr eax, 8
xor al, 0xc7
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x50], edx
mov byte [rsp + 0x54], r8b
mov byte [rsp + 0x55], al
lea rdx, [rsp + 0x48]
mov r8d, 0xe
mov rcx, rdi
call fcn.1400110d0
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2e0]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r15
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r12
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, r13
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2d8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2d0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2c8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2c0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2b8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2b0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2a8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2f0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2a0]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x298]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x290]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x288]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x280]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x278]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x270]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, rbp
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x268]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x260]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x258]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x250]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x248]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x240]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x238]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x2e8]
call rsi
mov rcx, qword [0x141d069c8]
xor edx, edx
mov r8, qword [rsp + 0x320]
call rsi
nop
add rsp, 0x3c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs r15, 0xde00000002
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x120]
test rbx, rbx
jne 0x14000d5f2
jmp 0x14000d604
ud2
call fcn.14003ce80
lea rax, [0x141cef420]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
movabs rax, 0x26235929db028556
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
call fcn.140006800
movabs rcx, 0x887e05dc14c4621f
xor rcx, qword [rax]
movabs rdx, 0x357283015071967e
xor rdx, qword [rax + 8]
movabs r8, 0xb968ed20c740a088
xor r8, qword [rax + 0x10]
movabs r9, 0xa2dc36333d5b5786
xor r9, qword [rax + 0x18]
mov r10d, 0xa752c3fe
xor r10d, dword [rax + 0x20]
movzx eax, word [rax + 0x24]
mov r11d, eax
xor r11b, 0x68
shr eax, 8
xor al, 0xf1
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x138], r9
mov dword [rsp + 0x140], r10d
mov byte [rsp + 0x144], r11b
mov byte [rsp + 0x145], al
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], 0x26
mov qword [rsp + 0x188], r12
lea rax, [0x1400042f0]
mov qword [rsp + 0x190], rax
lea rax, [0x1400596d8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x48]
call fcn.1400327c0
call fcn.14003ce80
int3