Function at 0x14007e750
Capabilities:
Create device object

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
movups xmmword [rbp - 0x10], xmm6
mov eax, dword [0x14009cc10]
imul edx, dword [0x14009a958], 0xaa77c7fb
imul r8d, dword [0x14009a95c], 0x9294dbdc
add edx, r8d
add edx, 0x90fc08ca
xor edx, eax
imul edx, eax
mov eax, dword [0x14009a960]
mov r8d, dword [0x14009a964]
shrd r8d, eax, 0xa
xor r8d, 0xf8fe2ac0
and r8d, edx
mov eax, dword [0x14009a968]
mov edx, dword [0x14009a96c]
shrd edx, eax, 0x1a
xor edx, 0x8eb0d442
mov eax, dword [0x14009a970]
mov r9d, dword [0x14009a974]
shrd r9d, eax, 0xc
imul eax, dword [0x14009a978], 0xa536ba6b
imul r10d, dword [0x14009a97c], 0x2b2fd244
mov r11d, dword [0x14009a980]
mov esi, dword [0x14009a984]
shrd esi, r11d, 4
xor r9d, 0x2adef6f3
xor esi, 0xd7e475f2
cmp r8d, edx
mov edx, r10d
lea eax, [rax + rdx - 0x35807ed2]
cmove esi, eax
cmp dword [0x14009cc14], r9d
mov qword [rbp - 0x80], rcx
cmovl esi, eax
mov dword [rbp - 0x74], esi
xorps xmm6, xmm6
mov edx, 0x775df91f
mov r13d, edx
mov edx, ecx
mov ecx, eax
mov eax, r14d
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x30], rsi
mov rsi, rbx
mov qword [rbp - 0x40], r12
mov r14, rdi
mov qword [rbp - 0x48], r11
mov r11, r10
mov rdi, r8
mov r12b, byte [rbp - 0x11]
mov r15b, byte [rbp - 0x12]
mov bl, byte [rbp - 0x38]
cmp r13d, 0x15dc8f0d
jg 0x14007e96d
cmp r13d, 0xce5a1b2c
jg 0x14007ea65
cmp r13d, 0xbeeba1b3
jg 0x14007ec5f
cmp r13d, 0x97b1b373
mov byte [rbp - 0x13], cl
mov dword [rbp - 0x1c], edx
jle 0x14007f1e9
cmp r13d, 0xa34a8775
mov byte [rbp - 0x14], al
jg 0x14007f966
cmp r13d, 0x97b1b374
je 0x140080480
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x97bc21b2
jne 0x14007e839
mov rbx, qword [rbp - 0x68]
mov eax, dword [rbx]
mov r15, qword [rbp - 0x28]
mov dword [r15], eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x30]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x8667649b
jmp 0x14007e839
cmp r13d, 0x4eec6183
jle 0x14007eb63
cmp r13d, 0x6630f108
jg 0x14007ef04
cmp r13d, 0x533fad48
mov byte [rbp - 0x13], cl
mov byte [rbp - 0x14], al
jle 0x14007f7a9
cmp r13d, 0x5ba5be3b
mov dword [rbp - 0x1c], edx
jg 0x14007ffe9
cmp r13d, 0x533fad49
je 0x140080a2f
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x5b4cdc48
jne 0x14007e839
mov eax, dword [0x14009aa5c]
mov ecx, dword [0x14009aa58]
shrd eax, ecx, 0x15
imul ecx, dword [0x14009aa64], 0x7aafc39d
imul edx, dword [0x14009aa60], 0x69e97cf
add edx, ecx
add edx, 0xd27b4607
xor eax, 0xad753398
mov r8b, byte [rbp - 0x15]
test r8b, 1
cmovne edx, eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov byte [rbp - 0x11], r8b
jmp 0x14007ffc8
cmp r13d, 0xf6b9bd76
jg 0x14007edae
cmp r13d, 0xe9989757
jle 0x14007f2ad
cmp r13d, 0xf0e30ade
jg 0x14007faa0
cmp r13d, 0xe9989758
mov byte [rbp - 0x14], al
je 0x14008055e
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0xeb696ca9
jne 0x14007e839
mov rcx, qword [0x14009cda8]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
add rsp, 0x20
mov rbx, qword [rbp - 0x68]
mov eax, dword [rbx]
mov r15, qword [rbp - 0x28]
mov dword [r15], eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x30]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0xfef096bb
jmp 0x14007e839
cmp r13d, 0x35e7636f
mov byte [rbp - 0x13], cl
mov dword [rbp - 0x1c], edx
mov byte [rbp - 0x14], al
jle 0x14007f09a
cmp r13d, 0x3fff3810
jle 0x14007f57b
cmp r13d, 0x482255bf
jg 0x14007fe7b
cmp r13d, 0x3fff3811
mov qword [rbp - 0x50], r9
je 0x140080909
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x470fb69c
jne 0x14007e839
mov eax, dword [0x14009b158]
mov ecx, dword [0x14009b154]
shrd eax, ecx, 3
xor eax, 0x862a55b7
mov r8, qword [rbp - 0x70]
mov dword [r8], eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0xf3105bcd
jmp 0x14007e839
cmp r13d, 0xc81c4f74
jle 0x14007f375
cmp r13d, 0xc8e83e1e
mov byte [rbp - 0x14], al
jg 0x14007fc05
cmp r13d, 0xc81c4f75
mov dword [rbp - 0x1c], edx
je 0x14008059f
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov edx, r13d
cmp r13d, 0xc8d1a2ef
jne 0x14007e839
imul eax, dword [0x14009adf0], 0x7a43d5cb
imul ecx, dword [0x14009adec], 0xe376e300
add eax, ecx
add eax, 0xcf475df2
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009ae00]
mov edx, dword [0x14009adfc]
shrd ecx, edx, 1
imul edx, dword [0x14009adf8], 0xb3489328
imul r8d, dword [str._], 0x204fb33c
add edx, r8d
add edx, 0x1e0fa841
mov r8d, dword [0x14009ae08]
mov r9d, dword [0x14009ae04]
shrd r8d, r9d, 9
mov r9d, dword [0x14009ae10]
mov r10d, dword [0x14009ae0c]
shrd r9d, r10d, 0xa
and edx, eax
mov eax, dword [0x14009ae18]
mov r10d, dword [0x14009ae14]
shrd eax, r10d, 0xf
xor ecx, 0x99c25e93
xor r8d, 0x589e703a
xor r9d, 0x73da86cb
xor eax, 0x9f70ee37
cmp edx, ecx
mov edx, eax
cmove edx, r9d
cmp dword [0x14009cc14], r8d
cmovl edx, r9d
jmp 0x14007ffb6
cmp r13d, 0xfef096ba
jle 0x14007f43f
cmp r13d, 0x2437d18
jg 0x14007fcd1
cmp r13d, 0xfef096bb
mov byte [rbp - 0x13], cl
mov dword [rbp - 0x1c], edx
mov byte [rbp - 0x14], al
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x58], r11
je 0x140080612
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x149409c
jne 0x14007e839
imul eax, dword [0x14009aa6c], 0xa628c65f
imul ecx, dword [0x14009aa68], 0x5ff56535
add eax, ecx
add eax, 0xc1df9a49
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x14009aa74], 0x883d40a6
imul edx, dword [0x14009aa70], 0x71286c95
add ecx, edx
add ecx, 0x9909d061
and ecx, eax
mov eax, dword [0x14009aa7c]
mov edx, dword [0x14009aa78]
shrd eax, edx, 0x1c
imul edx, dword [0x14009aa80], 0x96b795e5
imul r8d, dword [0x14009aa84], 0x89222c33
imul r9d, dword [0x14009aa88], 0x90f1c4a9
imul r10d, dword [0x14009aa8c], 0x1df2ccbb
imul r11d, dword [0x14009aa90], 0x1e6eef7b
imul esi, dword [0x14009aa94], 0x9c5a8d98
xor eax, 0xd41c61ae
cmp ecx, eax
mov eax, r8d
mov ecx, edx
lea eax, [rcx + rax + 0x671ccf57]
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx + 0x64bd222c]
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx - 0x71531f68]
jmp 0x14007fa8f
cmp r13d, 0x7328dd88
jle 0x14007f86d
cmp r13d, 0x755b6ba2
jg 0x1400800b5
cmp r13d, 0x7328dd89
je 0x14007fe43
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov byte [rbp - 0x14], al
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0x747ee7db
jne 0x14007e839
mov rsi, qword [rbp - 0x30]
mov rax, qword [rsi]
mov r11, qword [rbp - 0x70]
movsxd rcx, dword [r11]
lea rdx, [0x14008330e]
mov qword [rax + rcx*8 + 0x70], rdx
imul eax, dword [0x14009af00], 0x952832f6
imul ecx, dword [0x14009aefc], 0x66450fad
add eax, ecx
add eax, 0xd7bb2bc7
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009af10]
mov edx, dword [0x14009af0c]
shrd ecx, edx, 4
imul edx, dword [0x14009af08], 0x41c8f933
imul r8d, dword [0x14009af04], 0xfa45653f
add edx, r8d
add edx, 0x8cc336cb
mov r8d, dword [0x14009af20]
mov r9d, dword [str._FlP_f_n]
shrd r8d, r9d, 3
mov r9d, dword [0x14009af28]
mov r10d, dword [0x14009af24]
shrd r9d, r10d, 0x16
and edx, eax
xor ecx, 0xa455ed87
xor r8d, 0xe2804ae2
imul eax, dword [0x14009af14], 0xa0b1d16b
xor r9d, 0x22ab2bb5
imul r10d, dword [0x14009af18], 0x575fac9c
cmp edx, ecx
mov ecx, r10d
lea eax, [rax + rcx + 0x630716aa]
mov edx, r9d
cmove edx, r8d
cmp dword [0x14009cc14], eax
cmovl edx, r8d
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, r11
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
jmp 0x14008161c
cmp r13d, 0x2302593d
jle 0x14007f6b9
cmp r13d, 0x2c63edab
mov qword [rbp - 0x50], r9
jg 0x1400801a8
cmp r13d, 0x2302593e
mov qword [rbp - 0x58], r11
je 0x140080277
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x267545e0
jne 0x14007e839
imul eax, dword [0x14009ad90], 0xebe5eb33
imul ecx, dword [0x14009ad8c], 0x1b461ce6
add eax, ecx
add eax, 0xbe67e954
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
imul ecx, dword [0x14009ad98], 0x1ad0eb07
imul edx, dword [0x14009ad94], 0xba7f0995
add ecx, edx
add ecx, 0xec95fdac
and ecx, eax
imul eax, dword [0x14009ada0], 0x3b840246
imul edx, dword [0x14009ad9c], 0x63b42929
add eax, edx
add eax, 0xab9a7473
mov edx, dword [0x14009ada8]
mov r8d, dword [str._f2gI]
shrd edx, r8d, 0x11
mov r8d, dword [0x14009adb8]
mov r9d, dword [0x14009adb4]
shrd r8d, r9d, 0x1a
xor edx, 0x99067b4a
imul r9d, dword [0x14009adac], 0x667d5092
xor r8d, 0x50d0953e
imul r10d, dword [0x14009adb0], 0x8708c85c
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax - 0x65dd9053]
cmove r8d, eax
cmp dword [0x14009cc14], edx
mov edx, r8d
jmp 0x14007ffb3
cmp r13d, 0x82035d71
mov qword [rbp - 0x50], r9
je 0x1400813ca
cmp r13d, 0x8667649b
mov byte [rbp - 0x14], al
je 0x140080bee
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x93dccf0e
jne 0x14007e839
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0xc8e83e1f
jmp 0x14007e839
cmp r13d, 0xce5a1b2d
mov dword [rbp - 0x1c], edx
je 0x1400814fc
mov qword [rbp - 0x60], r14
cmp r13d, 0xd9ed0c74
mov qword [rbp - 0x50], r9
je 0x140080cda
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov qword [rbp - 0x58], r11
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov byte [rbp - 0x14], al
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov edx, r13d
cmp r13d, 0xe420d8fe
jne 0x14007e839
mov eax, dword [0x14009ab8c]
mov ecx, dword [0x14009ab88]
shrd eax, ecx, 0xf
mov ecx, dword [0x14009ab94]
mov edx, dword [0x14009ab90]
shrd ecx, edx, 9
xor eax, 0xc0e487da
mov edx, ecx
xor edx, 0x9b59dab2
mov r8b, byte [rbp - 0x16]
test r8b, 1
cmovne edx, eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov byte [rbp - 0x12], r8b
jmp 0x14007ffc2
cmp r13d, 0xbeeba1b4
je 0x140080170
cmp r13d, 0xc3896a94
mov byte [rbp - 0x13], cl
mov dword [rbp - 0x1c], edx
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x14], al
mov qword [rbp - 0x50], r9
mov byte [rbp - 0x15], r12b
je 0x140080dee
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov qword [rbp - 0x58], r11
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0xc4b393f6
jne 0x14007e839
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0xd9ed0c74
jmp 0x14007e839
cmp r13d, 0xf6b9bd77
mov byte [rbp - 0x13], cl
mov dword [rbp - 0x1c], edx
mov byte [rbp - 0x14], al
je 0x140081629
cmp r13d, 0xf7b5a850
je 0x140081059
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0xf9b8642f
jne 0x14007e839
imul eax, dword [0x14009af30], 0xae9b547
imul ecx, dword [0x14009af2c], 0x929126c3
add eax, ecx
add eax, 0xbcf25806
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009af38]
mov edx, dword [0x14009af34]
shrd ecx, edx, 1
xor ecx, 0x9abc0503
and ecx, eax
mov eax, dword [0x14009af40]
mov edx, dword [0x14009af3c]
shrd eax, edx, 1
mov edx, dword [0x14009af48]
mov r8d, dword [0x14009af44]
shrd edx, r8d, 0x1b
xor eax, 0xe0257409
xor edx, 0x97adec0e
imul r8d, dword [0x14009af4c], 0x529b50f1
imul r9d, dword [0x14009af50], 0x61c859d5
imul r10d, dword [0x14009af54], 0x2fc1ea03
imul r11d, dword [0x14009af58], 0x6f73f50c
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x7f844b0a]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x7f890832]
jmp 0x14007ffa8
cmp r13d, 0x35e76370
mov qword [rbp - 0x58], r11
je 0x140081bdd
cmp r13d, 0x36c0d4ed
je 0x140081134
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x3952f668
jne 0x14007e839
mov eax, dword [0x14009acc0]
mov ecx, dword [0x14009acbc]
shrd eax, ecx, 0xa
imul ecx, dword [0x14009acb8], 0xb4ca0d56
imul edx, dword [0x14009acb4], 0x358af49a
add ecx, edx
add ecx, 0xd44fe883
mov edx, dword [0x14009acc8]
mov r8d, dword [0x14009acc4]
shrd edx, r8d, 0x1d
mov r8d, dword [0x14009acd8]
mov r9d, dword [0x14009acd4]
shrd r8d, r9d, 0x10
mov r9d, dword [0x14009ace0]
mov r10d, dword [0x14009acdc]
shrd r9d, r10d, 0x12
mov r10d, dword [0x14009cc10]
xor ecx, r10d
imul ecx, r10d
xor eax, 0x8dee4d1b
and eax, ecx
xor edx, 0x3a5c5474
xor r8d, 0xb2e6058b
imul ecx, dword [0x14009accc], 0xdb14d813
xor r9d, 0x4c44282
imul r10d, dword [0x14009acd0], 0xf41fe7c4
cmp eax, edx
mov eax, r10d
lea eax, [rcx + rax + 0x79a823f1]
mov edx, r9d
cmove edx, r8d
cmp dword [0x14009cc14], eax
cmovl edx, r8d
jmp 0x14007ffb6
cmp r13d, 0x15dc8f0e
je 0x14007fe43
cmp r13d, 0x19716d7a
mov byte [rbp - 0x16], r15b
je 0x14008171b
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x1cdca604
jne 0x14007e839
imul eax, dword [0x14009ad80], 0x34954430
imul ecx, dword [0x14009ad7c], 0xa888e0e9
add eax, ecx
add eax, 0xa05bdbb5
mov ecx, dword [0x14009ad88]
mov edx, dword [0x14009ad84]
shrd ecx, edx, 0xe
mov edx, ecx
xor edx, 0x94d73bef
mov r14b, byte [rbp - 0x14]
test r14b, 1
cmovne edx, eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
jmp 0x140081710
cmp r13d, 0x4eec6184
je 0x140082168
cmp r13d, 0x514be430
mov dword [rbp - 0x1c], edx
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x15], r12b
je 0x140081f29
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov byte [rbp - 0x16], r15b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x52cedd0f
jne 0x14007e839
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x2c63edac
jmp 0x14007e839
cmp r13d, 0x6630f109
je 0x140080170
cmp r13d, 0x6d1225e4
mov byte [rbp - 0x14], al
je 0x140082111
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0x72c2a274
jne 0x14007e839
mov rsi, qword [rbp - 0x30]
mov rax, qword [rsi]
lea rcx, [0x140083615]
mov qword [rax + 0xe0], rcx
imul eax, dword [0x14009b164], 0xce2430fc
imul ecx, dword [0x14009b168], 0x103bb629
add eax, ecx
add eax, 0x6587a5d8
mov r15, qword [rbp - 0x28]
mov dword [r15], eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0xce5a1b2d
jmp 0x14007e839
cmp r13d, 0xa34a8776
mov qword [rbp - 0x50], r9
je 0x14008071a
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0xa51ac9bc
jne 0x14007e839
mov eax, dword [0x14009aed0]
mov ecx, dword [0x14009aecc]
shrd eax, ecx, 0x1b
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0x6f758e35
imul eax, ecx
mov ecx, dword [0x14009aed8]
mov edx, dword [0x14009aed4]
shrd ecx, edx, 0x1f
xor ecx, 0xe9ff16e3
and ecx, eax
imul eax, dword [0x14009aee0], 0xc87ab4a3
imul edx, dword [0x14009aedc], 0xbf02c855
imul r8d, dword [0x14009aee4], 0x38e2b124
imul r9d, dword [0x14009aee8], 0xaa357729
imul r10d, dword [0x14009aeec], 0x7e2c606c
imul r11d, dword [0x14009aef0], 0x8803108
imul esi, dword [0x14009aef4], 0x26d376d2
imul edi, dword [0x14009aef8], 0xdd2d9271
add eax, edx
add eax, 0x90d242c6
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x33cca570]
mov ecx, r11d
mov edx, r10d
lea ecx, [rdx + rcx + 0x6a6bcf3]
mov edx, edi
mov r8d, esi
lea edx, [r8 + rdx + 0x17b7115a]
cmove edx, ecx
cmp dword [0x14009cc14], eax
cmovl edx, ecx
jmp 0x14007ffb6
cmp r13d, 0xf0e30adf
je 0x14007fe43
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov byte [rbp - 0x14], al
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0xf3105bcd
jne 0x14007e839
mov eax, dword [0x14009ae20]
mov ecx, dword [0x14009ae1c]
shrd eax, ecx, 0xc
xor eax, 0x708407b7
mov r11, qword [rbp - 0x70]
mov dword [r11], eax
mov eax, dword [0x14009ae28]
mov ecx, dword [0x14009ae24]
shrd eax, ecx, 0x1d
mov ecx, dword [0x14009ae30]
mov edx, dword [0x14009ae2c]
shrd ecx, edx, 0x1a
mov edx, dword [0x14009ae38]
mov r8d, dword [0x14009ae34]
shrd edx, r8d, 0x13
mov r8d, dword [0x14009ae48]
mov r9d, dword [0x14009ae44]
shrd r8d, r9d, 0xb
mov r9d, dword [0x14009ae50]
mov r10d, dword [0x14009ae4c]
shrd r9d, r10d, 0x19
mov r10d, dword [0x14009cc10]
xor eax, r10d
xor eax, 0xa61eb8c5
imul eax, r10d
xor ecx, 0x35041ccb
and ecx, eax
xor edx, 0x5927561d
xor r8d, 0x66a94a6b
imul eax, dword [0x14009ae3c], 0x72edbeef
xor r9d, 0xb4dff9c6
imul r10d, dword [0x14009ae40], 0xb1b33380
cmp ecx, edx
mov ecx, r10d
lea eax, [rax + rcx - 0x1afcebb3]
mov edx, r9d
cmove edx, r8d
cmp dword [0x14009cc14], eax
cmovl edx, r8d
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, r11
jmp 0x14007ffcc
cmp r13d, 0xc8e83e1f
mov byte [rbp - 0x13], cl
je 0x140080812
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0xca311c98
jne 0x14007e839
mov rsi, qword [rbp - 0x30]
mov rax, qword [rsi]
mov r8, qword [rbp - 0x70]
movsxd rcx, dword [r8]
lea rdx, [0x14008330e]
mov qword [rax + rcx*8 + 0x70], rdx
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x747ee7db
jmp 0x14007e839
cmp r13d, 0x2437d19
je 0x14007fe43
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov r15, rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x70], r15
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov byte [rbp - 0x14], al
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0x14ccab32
jne 0x14007e839
mov eax, dword [0x14009af60]
mov ecx, dword [0x14009af5c]
shrd eax, ecx, 0x19
xor eax, 0x3f80aa99
mov rdi, qword [rbp - 0x70]
add dword [rdi], eax
imul eax, dword [0x14009af68], 0xdc21508b
imul ecx, dword [0x14009af64], 0x7420a1e1
add eax, ecx
add eax, 0x72f47363
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009af70]
mov edx, dword [0x14009af6c]
shrd ecx, edx, 0xd
xor ecx, 0xbf7b301b
and ecx, eax
mov eax, dword [0x14009af78]
mov edx, dword [0x14009af74]
shrd eax, edx, 9
imul edx, dword [0x14009af7c], 0x4565bc04
imul r8d, dword [0x14009af80], 0xe3e15b16
imul r9d, dword [0x14009af84], 0xc7cc3819
imul r10d, dword [0x14009af88], 0x3487092
imul r11d, dword [0x14009af8c], 0x9e096d55
imul esi, dword [0x14009af90], 0x7ce10333
xor eax, 0xf264cfc7
cmp ecx, eax
mov eax, r8d
mov ecx, edx
lea eax, [rcx + rax - 0x4266756]
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx + 0x591446dd]
mov edx, esi
mov r8d, r11d
lea edx, [r8 + rdx + 0x6b2f6dcd]
cmove edx, ecx
cmp dword [0x14009cc14], eax
cmovl edx, ecx
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, rdi
jmp 0x14007ffcc
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, 0x2c63edac
jmp 0x14007e839
mov r10, rdi
mov r8d, r12d
mov rdi, r14
cmp r13d, 0x482255c0
mov qword [rbp - 0x58], r11
je 0x1400809c5
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r8b
mov byte [rbp - 0x11], r8b
mov r14, r10
mov r8, r10
mov qword [rbp - 0x50], r9
mov r10, r11
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x70], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x4ebebfac
jne 0x14007e839
imul eax, dword [0x14009ad18], 0x5402e6ec
imul ecx, dword [0x14009ad14], 0xacb0c712
add eax, ecx
add eax, 0x58e7f84d
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009ad20]
mov edx, dword [0x14009ad1c]
shrd ecx, edx, 0xe
xor ecx, 0xd4d20ea9
and ecx, eax
imul eax, dword [0x14009ad28], 0x5e92033e
imul edx, dword [0x14009ad24], 0xe14647f9
add eax, edx
add eax, 0x37e746d3
mov edx, dword [0x14009ad30]
mov r8d, dword [0x14009ad2c]
shrd edx, r8d, 8
xor edx, 0x3fce84bc
imul r8d, dword [0x14009ad34], 0xf72e3b34
imul r9d, dword [0x14009ad38], 0xcfcdc1ff
imul r10d, dword [0x14009ad3c], 0x8282192a
imul r11d, dword [0x14009ad40], 0xf099adfb
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x734b5f70]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x608aa0e9]
cmove ecx, eax
cmp dword [0x14009cc14], edx
mov edx, ecx
cmovl edx, eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
jmp 0x140081704
cmp r13d, 0x5ba5be3c
je 0x140080aee
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x624fc762
jne 0x14007e839
mov eax, dword [0x14009b160]
mov ecx, dword [0x14009b15c]
shrd eax, ecx, 0xe
xor eax, 0x96306ff3
mov r8, qword [rbp - 0x70]
add dword [r8], eax
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x14ccab32
jmp 0x14007e839
cmp r13d, 0x755b6ba3
je 0x140080bb6
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov qword [rbp - 0x50], r9
mov r10, r11
mov qword [rbp - 0x58], r11
mov byte [rbp - 0x16], r15b
mov byte [rbp - 0x15], r12b
mov qword [rbp - 0x70], rdi
mov rdi, r14
mov r11, qword [rbp - 0x48]
mov byte [rbp - 0x17], bl
mov qword [rbp - 0x60], r14
mov r12, qword [rbp - 0x40]
mov qword [rbp - 0x68], rsi
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov byte [rbp - 0x14], al
mov eax, ecx
mov byte [rbp - 0x13], cl
mov ecx, edx
mov dword [rbp - 0x1c], edx
mov edx, r13d
cmp r13d, 0x775df91f
jne 0x14007e839
mov al, byte [rbp - 0x17]
mov byte [rbp - 0x38], al
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, dword [rbp - 0x74]
jmp 0x14007e839
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, 0x3fff3811
jmp 0x14007e839
cmp r13d, 0x2c63edac
jne 0x1400821d4
imul eax, dword [0x14009b000], 0xa60c95bd
imul ecx, dword [0x14009affc], 0x55fa468b
add eax, ecx
add eax, 0xa60fa5bf
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009b008]
mov edx, dword [0x14009b004]
shrd ecx, edx, 0x1c
xor ecx, 0x9e11c88f
and ecx, eax
imul eax, dword [0x14009b010], 0x2f740e08
imul edx, dword [0x14009b00c], 0xa3e3c410
add eax, edx
add eax, 0xd293eba8
mov edx, dword [0x14009b028]
mov r8d, dword [0x14009b024]
shrd edx, r8d, 0x15
xor edx, 0x28488150
imul r8d, dword [0x14009b014], 0x76548e24
imul r9d, dword [0x14009b018], 0x1ffaf1e1
imul r10d, dword [0x14009b01c], 0x7ccbee45
mov r13, r11
imul r11d, dword [0x14009b020], 0x42ffec4a
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax + 0x47475e43]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x390d530f]
jmp 0x140080cb4
mov eax, dword [0x14009b05c]
mov ecx, dword [0x14009b060]
shrd ecx, eax, 7
xor ecx, 0xf59c4c6c
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rcx, rsp
imul eax, dword [0x14009b064], 0x4e5f966e
imul edx, dword [0x14009b068], 0x74650865
add eax, edx
add eax, 0xf232575e
shl rax, 4
lea rax, [rax + rax*2]
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r8, rsp
mov eax, dword [0x14009b06c]
mov edx, dword [0x14009b070]
shrd edx, eax, 0x1b
xor edx, 0xd479b996
mov eax, edx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r10, rsp
imul eax, dword [0x14009b074], 0xa8462b29
imul edx, dword [0x14009b078], 0xb19a2635
add eax, edx
add eax, 0xda9f8b89
shl rax, 4
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
movzx edx, word [0x14009b07c]
movzx r9d, word [0x14009b07e]
imul edx, edx, 0x2d4d
imul r9d, r9d, 0x319a
add edx, r9d
add edx, 0x1d90
mov word [rax], dx
movzx edx, word [0x14009b080]
movzx r9d, word [0x14009b082]
imul edx, edx, 0xffffefe1
imul r9d, r9d, 0xffff9866
add edx, r9d
add edx, 0x47c6
mov word [rax + 2], dx
imul edx, dword [0x14009b084], 0x37be6885
lea r9, [0x14008c73c]
mov qword [rax + 8], r9
imul r9d, dword [0x14009b088], 0xf84d83e0
add edx, r9d
add edx, 0xf0d23f71
mov dword [r8], edx
xor r11d, r11d
mov qword [r8 + 8], r11
mov edx, dword [0x14009b08c]
mov r9d, dword [0x14009b090]
shrd r9d, edx, 0xb
xor r9d, 0x4127d170
mov dword [r8 + 0x18], r9d
mov qword [r8 + 0x10], rax
movups xmmword [r8 + 0x20], xmm6
mov eax, dword [0x14009b094]
mov edx, dword [0x14009b098]
shrd edx, eax, 0x1f
xor edx, 0xa5b7dc91
mov eax, dword [0x14009b09c]
mov r9d, dword [0x14009b0a0]
shrd r9d, eax, 3
imul eax, dword [0x14009b0a4], 0xffb073af
mov r13, rsi
imul esi, dword [0x14009b0a8], 0x344b646c
xor r9d, 0xb5e7b832
add eax, esi
add eax, 0xba9259bc
sub rsp, 0x40
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r11
call qword [sym.imp.ntoskrnl.exe_ZwCreateKey]
add rsp, 0x40
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, r13
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x19716d7a
jmp 0x14007e839
mov eax, dword [0x14009abcc]
mov ecx, dword [0x14009abc8]
shrd eax, ecx, 9
xor eax, 0xe17396e6
mov rcx, qword [rbp - 0x28]
mov dword [rcx], eax
mov eax, dword [0x14009abd4]
mov ecx, dword [0x14009abd0]
shrd eax, ecx, 9
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0xc5ae6ec3
imul eax, ecx
mov ecx, dword [0x14009abe4]
mov edx, dword [0x14009abe0]
shrd ecx, edx, 0x13
imul edx, dword [0x14009abdc], 0x862dcec4
imul r8d, dword [0x14009abd8], 0x4a4ff628
add edx, r8d
add edx, 0x3606318d
mov r8d, dword [0x14009abec]
mov r13, r9
mov r9d, dword [0x14009abe8]
shrd r8d, r9d, 8
mov r9d, dword [0x14009abfc]
mov r10d, dword [0x14009abf8]
shrd r9d, r10d, 0x1e
and edx, eax
xor ecx, 0x5e187771
xor r8d, 0x7eb67d6c
imul eax, dword [0x14009abf0], 0x2e543b5e
xor r9d, 0x32832ca6
imul r10d, dword [0x14009abf4], 0x86f1687b
cmp edx, ecx
mov ecx, r10d
lea eax, [rax + rcx - 0x5ecbe8d4]
mov edx, r9d
cmove edx, eax
cmp dword [0x14009cc14], r8d
cmovl edx, eax
jmp 0x1400816e2
mov eax, dword [rsi]
mov r8d, r15d
mov r15, qword [rbp - 0x28]
mov dword [r15], eax
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r8b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r14b, byte [rbp - 0x14]
mov eax, ecx
mov ecx, edx
mov edx, 0x533fad49
jmp 0x14007e839
imul eax, dword [0x14009aec0], 0xfe4635e1
mov r13d, ecx
imul ecx, dword [0x14009aebc], 0xdf8ffabd
add eax, ecx
add eax, 0x73e5e6c5
mov ecx, dword [0x14009aec8]
mov edx, dword [str.bmZ3]
shrd ecx, edx, 0x19
mov edx, ecx
xor edx, 0x6d180f18
test r13b, 1
cmovne edx, eax
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov eax, r13d
mov ecx, dword [rbp - 0x1c]
jmp 0x14007e839
mov rcx, qword [0x14009cda8]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
add rsp, 0x20
mov eax, dword [rsi]
mov r13, qword [rbp - 0x28]
mov dword [r13], eax
mov eax, dword [0x14009adc0]
mov ecx, dword [0x14009adbc]
shrd eax, ecx, 6
mov ecx, dword [0x14009adc8]
mov edx, dword [0x14009adc4]
shrd ecx, edx, 0x15
mov edx, dword [0x14009add0]
mov r8d, dword [0x14009adcc]
shrd edx, r8d, 0x1b
mov r8d, dword [0x14009ade0]
mov r9d, dword [0x14009addc]
shrd r8d, r9d, 0xf
mov r9d, dword [0x14009ade8]
mov r10d, dword [0x14009ade4]
shrd r9d, r10d, 0x1a
mov r10d, dword [0x14009cc10]
xor eax, r10d
xor eax, 0x757c2944
imul eax, r10d
xor ecx, 0x7fde9b03
and ecx, eax
xor edx, 0x84926a81
xor r8d, 0xb1800411
imul eax, dword [0x14009add4], 0x23244947
xor r9d, 0x9a0ffb15
imul r10d, dword [0x14009add8], 0x803cbc8a
cmp ecx, edx
mov ecx, r10d
lea eax, [rax + rcx + 0x51fd0ee0]
mov edx, r9d
cmove edx, r8d
cmp dword [0x14009cc14], eax
cmovl edx, r8d
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, r13
jmp 0x14008170c
mov eax, dword [0x14009ab9c]
mov ecx, dword [0x14009ab98]
shrd eax, ecx, 0x10
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0x47631e67
imul eax, ecx
mov ecx, dword [0x14009aba4]
mov edx, dword [0x14009aba0]
shrd ecx, edx, 0x14
xor ecx, 0x4ecd8b60
and ecx, eax
imul eax, dword [0x14009abac], 0x11d4f836
imul edx, dword [0x14009aba8], 0xc961fe98
add eax, edx
add eax, 0x3ebe6c98
mov edx, dword [0x14009abbc]
mov r8d, dword [0x14009abb8]
shrd edx, r8d, 0xb
mov r8d, dword [0x14009abc4]
mov r9d, dword [0x14009abc0]
shrd r8d, r9d, 0x19
xor edx, 0x8e3243cf
imul r9d, dword [0x14009abb0], 0x31323deb
xor r8d, 0xc50ed62e
imul r10d, dword [0x14009abb4], 0xec66f353
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax - 0x570c3c89]
cmove r8d, edx
cmp dword [0x14009cc14], eax
mov r13d, r8d
cmovl r13d, edx
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, qword [rbp - 0x50]
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, r13d
jmp 0x14007e839
mov eax, dword [0x14009b030]
mov ecx, dword [0x14009b02c]
shrd eax, ecx, 0x18
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0x95d0c179
imul eax, ecx
mov ecx, dword [0x14009b040]
mov edx, dword [0x14009b03c]
shrd ecx, edx, 2
imul edx, dword [0x14009b038], 0x7548a94e
imul r8d, dword [0x14009b034], 0x223adc8a
add edx, r8d
add edx, 0xeed7b963
mov r8d, dword [0x14009b048]
mov r13, r9
mov r9d, dword [0x14009b044]
shrd r8d, r9d, 0x16
mov r9d, dword [0x14009b058]
mov r10d, dword [0x14009b054]
shrd r9d, r10d, 0x1e
and edx, eax
xor ecx, 0x4cc3f39e
xor r8d, 0xfe2ff3ef
imul eax, dword [0x14009b04c], 0x3e985736
xor r9d, 0x55de79ff
imul r10d, dword [0x14009b050], 0x9cad7164
cmp edx, ecx
mov ecx, r10d
lea eax, [rax + rcx - 0x2b59cb09]
mov edx, r9d
cmove edx, eax
cmp dword [0x14009cc14], r8d
cmovl edx, eax
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, r13
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov ecx, dword [r15]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
jmp 0x14007e839
imul eax, dword [0x14009ae58], 0xf92fc959
imul ecx, dword [0x14009ae54], 0x896b447e
add eax, ecx
add eax, 0xe4947eac
mov ecx, dword [0x14009cc10]
xor eax, ecx
imul eax, ecx
mov ecx, dword [0x14009ae60]
mov edx, dword [str._1.]
shrd ecx, edx, 0x13
xor ecx, 0x541c56db
and ecx, eax
mov eax, dword [0x14009ae68]
mov edx, dword [0x14009ae64]
shrd eax, edx, 0x1c
mov edx, dword [0x14009ae80]
mov r8d, dword [0x14009ae7c]
shrd edx, r8d, 0xc
xor eax, 0x904108d5
xor edx, 0x8acfbae9
imul r8d, dword [0x14009ae6c], 0xf14c6784
imul r9d, dword [0x14009ae70], 0x41592a11
imul r10d, dword [0x14009ae74], 0x9b363bef
mov r13, r11
imul r11d, dword [0x14009ae78], 0x32faf9cb
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x8d3056a]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx - 0x3e4a2733]
jmp 0x140080cb4
mov rcx, qword [0x14009cdc0]
sub rsp, 0x20
lea rdx, [0x14009cdb0]
mov r14, rsi
mov r12d, ebx
mov rsi, r10
mov ebx, r8d
mov r13, r9
call qword [sym.imp.ntoskrnl.exe_IoCreateSymbolicLink]
add rsp, 0x20
mov dword [r14], eax
mov byte [rbp - 0x38], r12b
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], bl
mov r8, rsi
mov r9, r13
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov r12, qword [rbp - 0x40]
mov rbx, r14
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x82035d71
jmp 0x14007e839
mov eax, dword [rsi]
mov r8, qword [rbp - 0x28]
mov dword [r8], eax
mov eax, dword [0x14009aa9c]
mov ecx, dword [0x14009aa98]
shrd eax, ecx, 4
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0x4a8c60d
mov edx, eax
imul edx, ecx
imul eax, dword [0x14009aaa4], 0x229b08a0
imul ecx, dword [0x14009aaa0], 0x1747ca49
add eax, ecx
add eax, 0xd2a62874
and eax, edx
imul ecx, dword [0x14009aaac], 0x21b5a905
imul edx, dword [0x14009aaa8], 0x72fb7766
mov r13d, ebx
mov rbx, rdi
lea edi, [rdx + rcx]
add edi, 0xb72858f9
mov edx, dword [0x14009aab4]
mov r8d, dword [0x14009aab0]
shrd edx, r8d, 0x13
mov r8d, dword [0x14009aabc]
mov rcx, r9
mov r9d, dword [0x14009aab8]
shrd r8d, r9d, 6
mov r9d, dword [0x14009aac4]
mov r10d, dword [0x14009aac0]
shrd r9d, r10d, 7
xor edx, 0x3c7b4e28
xor r8d, 0x70a7360a
xor r9d, 0xf7b57dce
jmp 0x14008110a
mov eax, dword [0x14009af98]
mov ecx, dword [0x14009af94]
shrd eax, ecx, 0x12
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0x6135ca09
imul eax, ecx
imul ecx, dword [0x14009afa0], 0xa3f08f64
imul edx, dword [0x14009af9c], 0x28f8a8bd
add ecx, edx
add ecx, 0xf260cd33
and ecx, eax
imul eax, dword [0x14009afa8], 0xd3b5062f
imul edx, dword [0x14009afa4], 0xedf8f512
add eax, edx
add eax, 0xb68bb5f3
mov edx, dword [0x14009afb0]
mov r8d, dword [0x14009afac]
shrd edx, r8d, 0xf
mov r8d, dword [0x14009afb8]
mov r13, r9
mov r9d, dword [0x14009afb4]
shrd r8d, r9d, 3
xor edx, 0x781449ea
imul r9d, dword [0x14009afbc], 0x977a202a
xor r8d, 0x1dd32ab6
imul r10d, dword [str.TrL6], 0x6826e787
cmp ecx, eax
mov eax, r10d
mov ecx, r9d
lea eax, [rcx + rax + 0xff793c8]
cmove eax, r8d
cmp dword [0x14009cc14], edx
mov edx, eax
cmovl edx, r8d
jmp 0x1400816e2
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, 0xf9b8642f
jmp 0x14007e839
mov eax, dword [rsi]
mov r8, qword [rbp - 0x28]
mov dword [r8], eax
mov eax, dword [0x14009ace8]
mov ecx, dword [str.g_CZ]
shrd eax, ecx, 0x19
mov ecx, dword [0x14009cc10]
xor eax, ecx
xor eax, 0xde6d4c63
imul eax, ecx
imul ecx, dword [0x14009acf0], 0xc2177c08
imul edx, dword [0x14009acec], 0x702bd0ef
add ecx, edx
add ecx, 0x9079919f
and ecx, eax
imul eax, dword [0x14009acf8], 0x512dd35a
imul edx, dword [0x14009acf4], 0x93a6fc0e
add eax, edx
add eax, 0x91e3bc48
mov edx, dword [0x14009ad10]
mov r8d, dword [0x14009ad0c]
shrd edx, r8d, 9
xor edx, 0xfce520b9
imul r8d, dword [0x14009acfc], 0x5ab7513d
imul r9d, dword [0x14009ad00], 0x50c796f3
imul r10d, dword [0x14009ad04], 0x48da7b7e
mov r13, r11
imul r11d, dword [0x14009ad08], 0x20d055db
cmp ecx, eax
mov eax, r9d
mov ecx, r8d
lea eax, [rcx + rax - 0x1ed6ff18]
mov ecx, r11d
mov r8d, r10d
lea ecx, [r8 + rcx + 0x6ee5279f]
cmove edx, ecx
cmp dword [0x14009cc14], eax
cmovl edx, ecx
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, qword [rbp - 0x50]
mov r10, r13
jmp 0x1400816f6
mov r13d, eax
mov eax, dword [0x14009ae88]
mov ecx, dword [0x14009ae84]
shrd eax, ecx, 4
xor eax, 0x2457748d
cmp dword [rdi], eax
mov ecx, dword [0x14009ae90]
setl byte [rbp - 0x13]
mov edx, dword [0x14009ae8c]
shrd ecx, edx, 0xe
mov edx, dword [0x14009cc10]
xor ecx, edx
xor ecx, 0xb6cfc1c4
imul ecx, edx
imul edx, dword [0x14009ae98], 0xb7e014c5
imul r8d, dword [0x14009ae94], 0x6cb4bc63
add edx, r8d
add edx, 0x3d25959e
and edx, ecx
mov ecx, dword [0x14009aea0]
mov r8d, dword [0x14009ae9c]
shrd ecx, r8d, 0x18
mov r8d, dword [0x14009aea8]
mov r9d, dword [0x14009aea4]
shrd r8d, r9d, 0x19
xor ecx, 0x293cb93
xor r8d, 0xdf881f35
imul r9d, dword [0x14009aeac], 0x79e5a130
imul r10d, dword [0x14009aeb0], 0x58b3207c
mov rax, r11
imul r11d, dword [0x14009aeb4], 0xe2785abf
mov r14, rsi
imul esi, dword [0x14009aeb8], 0x5af3ce12
cmp edx, ecx
mov ecx, r10d
mov edx, r9d
lea ecx, [rdx + rcx - 0x37a5afbf]
mov edx, esi
mov r9d, r11d
lea edx, [r9 + rdx + 0x6de4e4df]
cmove edx, ecx
cmp dword [0x14009cc14], r8d
cmovl edx, ecx
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, qword [rbp - 0x50]
mov r10, rax
mov r11, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x60]
mov r12, qword [rbp - 0x40]
mov rbx, r14
jmp 0x1400814ec
mov r15, qword [rbp - 0x40]
mov rcx, qword [r15]
sub rsp, 0x20
mov r13, r11
call qword [sym.imp.ntoskrnl.exe_ZwClose]
add rsp, 0x20
mov rax, qword [0x14009b0b0]
movabs rcx, 0xa93bc49642b37bf2
imul rax, rcx
mov rcx, qword [0x14009b0b8]
movabs rdx, 0xba8f7346bccc781c
imul rcx, rdx
add rcx, rax
movabs rax, 0xf469ce0e0084f53e
add rcx, rax
mov qword [r14], rcx
movabs rax, 0xfffff78000000014
mov rax, qword [rax]
mov qword [r14], rax
sub rsp, 0x20
mov rcx, r14
call fcn.1400042ae
add rsp, 0x20
mov dword [0x14009cdc8], eax
mov eax, dword [0x14009b0c0]
mov ecx, dword [0x14009b0c4]
shrd ecx, eax, 0xd
mov r8d, ecx
imul eax, dword [0x14009b0c8], 0x3962d689
imul ecx, dword [0x14009b0cc], 0x9e02ba9d
xor r8d, 0xa52bf18f
add eax, ecx
add eax, 0xc041784
sub rsp, 0x30
mov dword [rsp + 0x20], eax
lea rcx, [0x14008c73c]
lea rdx, [0x14008c7a0]
lea r9, [0x14009cdc8]
call fcn.140015109
add rsp, 0x10
mov r8d, 0x1fe
mov r12, rdi
mov rdi, qword [rbp - 0x48]
mov rcx, rdi
lea rdx, [0x14008c7c0]
call fcn.14008cc40
add rsp, 0x20
mov rax, qword [0x14009b0d0]
movabs rcx, 0xb27c468b516e60e2
imul rax, rcx
mov rcx, qword [0x14009b0d8]
movabs rdx, 0x25874752f2324842
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xf7f87330852c8702
add rdx, rax
sub rsp, 0x20
mov rcx, rdi
call fcn.140002ea7
mov r8d, 0x1fe
mov rcx, r13
xor edx, edx
call fcn.14008cb40
add rsp, 0x20
mov rax, qword [0x14009b0e0]
movabs rcx, 0x3c3f8f2f5889c121
imul rax, rcx
mov rcx, qword [0x14009b0e8]
movabs rdx, 0x735390bff00e731c
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xd2983a58b9e690ed
add rdx, rax
sub rsp, 0x20
mov rcx, r13
lea r8, [0x14008c9be]
mov r9, rdi
call fcn.14008222a
lea rcx, [0x14009cdb0]
mov rdx, r13
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x14009b0f0], 0x1521a944
imul ecx, dword [0x14009b0f4], 0xa69eb48b
add ecx, eax
add ecx, 0x3521a729
mov rax, qword [0x14009b0f8]
mov rdx, qword [0x14009b100]
shrd rdx, rax, 0x37
imul eax, dword [0x14009b108], 0xd5e5a04d
imul r8d, dword [0x14009b10c], 0xa7b264c
movabs r9, 0x5114a91b87433296
xor rdx, r9
add r8d, eax
add r8d, 0x228852cc
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
add rsp, 0x20
mov qword [0x14009cdc0], rax
mov byte [rbp - 0x38], bl
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, r12
mov r9, qword [rbp - 0x50]
mov r10, r13
mov r11, rdi
mov rdi, r14
mov r12, r15
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x35e76370
jmp 0x14007e839
imul eax, dword [0x14009aacc], 0x38b5677f
imul ecx, dword [0x14009aac8], 0xf8a04dee
add eax, ecx
add eax, 0x580aa3b5
mov ecx, dword [0x14009cc10]
xor eax, ecx
mov edx, eax
imul edx, ecx
mov eax, dword [str._Qe_r]
mov ecx, dword [0x14009aad0]
shrd eax, ecx, 1
xor eax, 0x86b2a896
and eax, edx
imul ecx, dword [0x14009aadc], 0x78c2da04
imul edx, dword [0x14009aad8], 0xa572a93d
mov r13d, ebx
mov rbx, rdi
lea edi, [rdx + rcx]
add edi, 0x9920dfcd
mov edx, dword [0x14009aae4]
mov r8d, dword [0x14009aae0]
shrd edx, r8d, 0x1d
mov r8d, dword [0x14009aaec]
mov rcx, r9
mov r9d, dword [0x14009aae8]
shrd r8d, r9d, 1
mov r9d, dword [0x14009aaf4]
mov r10d, dword [0x14009aaf0]
shrd r9d, r10d, 0xe
xor edx, 0xed16a2ff
xor r8d, 0x1afe2113
xor r9d, 0x944e463f
cmp eax, edi
cmove r9d, r8d
cmp dword [0x14009cc14], edx
mov edx, r9d
cmovl edx, r8d
mov byte [rbp - 0x38], r13b
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rbx
mov r9, rcx
jmp 0x1400816f3
mov rcx, qword [0x14009cdc0]
sub rsp, 0x20
mov r8d, 0x1000
xor edx, edx
mov r13, r9
call fcn.14008cb40
mov r8d, 0x1fe
mov rcx, r13
xor edx, edx
call fcn.14008cb40
add rsp, 0x20
mov rax, qword [0x14009ac30]
movabs rcx, 0xc415fd85753c69b7
imul rax, rcx
mov rcx, qword [0x14009ac38]
movabs rdx, 0xc44b3ed05bead5ce
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0xba97052d1a88ba9c
add rdx, rax
sub rsp, 0x20
mov rcx, r13
lea r8, [0x14008c9d6]
mov rbx, rdi
mov rdi, qword [rbp - 0x48]
mov r9, rdi
call fcn.14008222a
add rsp, 0x20
mov rcx, qword [0x14009cdc0]
sub rsp, 0x20
mov rdx, r13
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x14009ac40], 0xb39f6c49
imul ecx, dword [0x14009ac44], 0x1190b678
lea r8d, [rax + rcx]
add r8d, 0xac1a7863
mov eax, dword [0x14009ac48]
mov ecx, dword [0x14009ac4c]
shrd ecx, eax, 0xc
xor ecx, 0x7fb0265
sub rsp, 0x30
mov dword [rsp + 0x20], ecx
lea rcx, [0x14008c73c]
lea rdx, [0x14008c9f6]
mov r9, rdi
call fcn.140015109
add rsp, 0x30
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
mov eax, dword [0x14009ac50]
mov edx, dword [0x14009ac54]
shrd edx, eax, 0x1d
xor edx, 0x52536445
imul eax, dword [0x14009ac58], 0xc6926909
imul r8d, dword [0x14009ac5c], 0x59c25d37
lea r9d, [rax + r8]
add r9d, 0x680adfcd
mov eax, dword [0x14009ac60]
mov r8d, dword [0x14009ac64]
shrd r8d, eax, 3
xor r8d, 0xcf5866a2
mov al, byte [0x14009ac68]
mov r10b, byte [0x14009ac69]
shr r10b, 3
shl al, 5
or al, r10b
xor al, 0xf2
sub rsp, 0x40
lea r10, [0x14009cda8]
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x20], r8d
mov byte [rsp + 0x28], al
lea r8, [0x14009cdb0]
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
add rsp, 0x40
mov dword [rsi], eax
mov ecx, dword [0x14009ac70]
mov edx, dword [0x14009ac6c]
shrd ecx, edx, 0x1d
xor ecx, 0x30679e23
cmp eax, ecx
mov ecx, dword [0x14009ac78]
setg al
mov edx, dword [0x14009ac74]
shrd ecx, edx, 0xb
mov edx, dword [0x14009cc10]
xor ecx, edx
xor ecx, 0x30cf23d5
imul ecx, edx
imul edx, dword [0x14009ac80], 0xf63bb5ef
imul r8d, dword [0x14009ac7c], 0xde62785c
add edx, r8d
add edx, 0xbb94ed8
and edx, ecx
imul ecx, dword [0x14009ac88], 0x2c73b870
imul r8d, dword [str.__HN], 0x1d52a75e
add ecx, r8d
add ecx, 0x3223e036
mov r8d, dword [0x14009ac90]
mov r9d, dword [0x14009ac8c]
shrd r8d, r9d, 6
mov r9d, dword [0x14009ac98]
mov r10d, dword [0x14009ac94]
shrd r9d, r10d, 0x17
xor r8d, 0x2d623540
imul r10d, dword [0x14009ac9c], 0x7cdc6461
xor r9d, 0xf347c620
imul r11d, dword [0x14009aca0], 0x8e5fe36d
cmp edx, ecx
mov ecx, r11d
mov edx, r10d
lea edx, [rdx + rcx - 0x7e8d609c]
cmove edx, r9d
cmp dword [0x14009cc14], r8d
cmovl edx, r9d
mov byte [rbp - 0x38], al
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rbx
mov r9, r13
mov r10, qword [rbp - 0x58]
mov r11, rdi
jmp 0x1400816fa
mov rcx, qword [0x14009cdc0]
sub rsp, 0x20
lea rdx, [0x14009cdb0]
mov qword [rbp - 0x58], r11
call qword [sym.imp.ntoskrnl.exe_IoCreateSymbolicLink]
add rsp, 0x20
mov dword [rsi], eax
imul ecx, dword [0x14009ad44], 0x23cc005
imul edx, dword [0x14009ad48], 0x36672b1f
add ecx, edx
add ecx, 0x94b73cf8
cmp eax, ecx
setg r13b
imul eax, dword [0x14009ad50], 0x1700cc3a
imul ecx, dword [0x14009ad4c], 0xc30b003b
add eax, ecx
add eax, 0xeffcc721
mov ecx, dword [0x14009cc10]
xor eax, ecx
mov edx, eax
imul edx, ecx
mov eax, dword [0x14009ad58]
mov ecx, dword [0x14009ad54]
shrd eax, ecx, 1
xor eax, 0xae2322f5
and eax, edx
imul ecx, dword [0x14009ad60], 0x3ba8c818
imul edx, dword [0x14009ad5c], 0x28a79118
add ecx, edx
add ecx, 0xef05d978
mov edx, dword [0x14009ad68]
mov r8d, dword [0x14009ad64]
shrd edx, r8d, 3
mov r8d, dword [0x14009ad70]
mov r9d, dword [0x14009ad6c]
shrd r8d, r9d, 0x1c
mov r9d, dword [0x14009ad78]
mov r10d, dword [0x14009ad74]
shrd r9d, r10d, 4
xor edx, 0x613f3c25
xor r8d, 0x82435ee4
xor r9d, 0x3f0bc878
cmp eax, ecx
cmove r9d, r8d
cmp dword [0x14009cc14], edx
mov edx, r9d
cmovl edx, r8d
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, r13d
jmp 0x140081710
mov byte [rbp - 0x14], al
mov qword [rbp - 0x68], rsi
mov rsi, qword [rbp - 0x30]
mov rax, qword [rsi]
mov byte [rbp - 0x13], cl
lea rcx, [0x140083615]
mov qword [rax + 0xe0], rcx
imul eax, dword [0x14009afc8], 0x372e1e61
imul ecx, dword [0x14009afc4], 0x35d17ce5
add eax, ecx
add eax, 0x55ed19b1
mov rcx, qword [rbp - 0x28]
mov dword [rcx], eax
imul eax, dword [0x14009afd0], 0xcbb82619
imul ecx, dword [0x14009afcc], 0xba22dbfc
add eax, ecx
add eax, 0x6a9af6c2
mov ecx, dword [0x14009cc10]
xor eax, ecx
mov edx, eax
imul edx, ecx
mov eax, dword [0x14009afd8]
mov ecx, dword [0x14009afd4]
shrd eax, ecx, 0x15
xor eax, 0x2f3b2a79
and eax, edx
imul ecx, dword [0x14009afe0], 0x829a7e99
imul edx, dword [0x14009afdc], 0xdfc6d312
mov r13d, ebx
mov rbx, rdi
lea edi, [rdx + rcx]
add edi, 0xfc240364
mov edx, dword [0x14009afe8]
mov r8d, dword [0x14009afe4]
shrd edx, r8d, 0xd
mov r8d, dword [0x14009aff0]
mov rcx, r9
mov r9d, dword [0x14009afec]
shrd r8d, r9d, 8
mov r9d, dword [0x14009aff8]
mov r10d, dword [0x14009aff4]
shrd r9d, r10d, 0xc
xor edx, 0x129c0da2
xor r8d, 0x93376a42
xor r9d, 0xdc2c6b92
cmp eax, edi
cmove r9d, r8d
cmp dword [0x14009cc14], edx
mov edx, r9d
cmovl edx, r8d
mov byte [rbp - 0x38], r13b
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rbx
mov r9, rcx
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x68]
jmp 0x140081708
mov eax, dword [0x14009ac0c]
mov ecx, dword [0x14009ac08]
shrd eax, ecx, 0x17
imul ecx, dword [0x14009ac04], 0x946c2b55
imul edx, dword [0x14009ac00], 0x46934a
add edx, ecx
add edx, 0x1bce7d34
mov ecx, dword [0x14009ac14]
mov r8d, dword [0x14009ac10]
shrd ecx, r8d, 4
mov r8d, dword [0x14009ac1c]
mov r13, r9
mov r9d, dword [0x14009ac18]
shrd r8d, r9d, 0x13
mov r9d, dword [0x14009ac24]
mov r10d, dword [0x14009ac20]
shrd r9d, r10d, 0x1a
mov r10d, dword [0x14009cc10]
xor edx, r10d
imul edx, r10d
xor eax, 0x48412811
and eax, edx
mov edx, dword [0x14009ac2c]
mov r10d, dword [0x14009ac28]
shrd edx, r10d, 0xd
xor ecx, 0xb0af7cc8
xor r8d, 0xf2463074
xor r9d, 0x748b99ed
xor edx, 0xe8da6241
cmp eax, ecx
cmove edx, r9d
cmp dword [0x14009cc14], r8d
cmovl edx, r9d
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r9, r13
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
jmp 0x14007e839
mov eax, dword [0x14009a988]
mov ecx, dword [0x14009a98c]
shrd ecx, eax, 1
xor ecx, 0xe11220ef
mov eax, ecx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, dword [0x14009a990]
mov ecx, dword [0x14009a994]
shrd ecx, eax, 2
xor ecx, 0xc053c9bd
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdx, rsp
mov qword [rbp - 0x30], rdx
mov eax, dword [0x14009a998]
mov ecx, dword [0x14009a99c]
shrd ecx, eax, 0x1a
xor ecx, 0x53b37892
mov eax, ecx
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r9, rsp
mov qword [rbp - 0x48], r9
imul eax, dword [0x14009a9a0], 0xff63e3f6
imul ecx, dword [0x14009a9a4], 0x269c2ccf
add eax, ecx
add eax, 0x633900e4
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r15, rsp
mov qword [rbp - 0x40], r15
imul eax, dword [0x14009a9a8], 0x4c597be5
imul r8d, dword [0x14009a9ac], 0x59951298
add eax, r8d
add eax, 0xb7aa73e7
shl rax, 4
lea rax, [rax + rax*2]
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r8, rsp
mov eax, dword [0x14009a9b0]
mov r10d, dword [0x14009a9b4]
shrd r10d, eax, 2
xor r10d, 0xa4a595f9
mov eax, r10d
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r10, rsp
mov eax, dword [0x14009a9b8]
mov r11d, dword [0x14009a9bc]
shrd r11d, eax, 0x1c
xor r11d, 0xcd043a0e
mov eax, r11d
shl rax, 4
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r11, rsp
imul eax, dword [0x14009a9c0], 0x67584149
imul esi, dword [0x14009a9c4], 0xc6d2394
add eax, esi
add eax, 0x4eb876c1
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rcx, rsp
mov eax, dword [0x14009a9c8]
mov esi, dword [0x14009a9cc]
shrd esi, eax, 7
mov qword [rbp - 0x50], rcx
xor esi, 0xcbacca4c
mov eax, esi
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
movabs rcx, 0x3fffffffff0
and rax, rcx
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r14, rsp
mov eax, dword [0x14009a9d0]
mov esi, dword [0x14009a9d4]
shrd esi, eax, 0x1e
mov qword [rbp - 0x58], r14
xor esi, 0x1080bdc3
mov eax, esi
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
and rax, rcx
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r13, rsp
imul eax, dword [0x14009a9d8], 0xac276f73
imul esi, dword [0x14009a9dc], 0x7f32c560
add eax, esi
add eax, 0x8468cb3e
lea rsi, [rax + rax]
shl rax, 9
sub rax, rsi
add rax, 0xf
and rax, rcx
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov r14d, ebx
mov rdi, rsp
mov eax, dword [0x14009a9e0]
mov esi, dword [0x14009a9e4]
shrd esi, eax, 4
xor esi, 0x4e2b58f9
mov eax, esi
lea rax, [rax*4 + 0xf]
and rax, 0xfffffffffffffff0
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rsi, rsp
imul eax, dword [0x14009a9e8], 0x3bbd0867
mov rcx, qword [rbp - 0x80]
mov qword [rdx], rcx
imul edx, dword [0x14009a9ec], 0xf47a8419
add eax, edx
add eax, 0xbd7a914d
mov dword [r9], eax
movzx eax, word [0x14009a9f0]
movzx edx, word [0x14009a9f2]
shrd dx, ax, 0xb
mov eax, edx
xor eax, 0x3279
mov word [r11], ax
movzx eax, word [0x14009a9f4]
movzx edx, word [0x14009a9f6]
imul eax, eax, 0x10e3
imul edx, edx, 0xffff853d
add eax, edx
add eax, 0x7117
mov word [r11 + 2], ax
imul eax, dword [0x14009a9f8], 0xfec5cba4
lea rcx, [0x14008c73c]
mov qword [r11 + 8], rcx
imul edx, dword [0x14009a9fc], 0xae7e06af
add eax, edx
add eax, 0x2254d584
mov dword [r8], eax
xor ecx, ecx
mov qword [r8 + 8], rcx
mov edx, dword [0x14009aa00]
mov r9d, dword [0x14009aa04]
shrd r9d, edx, 7
xor r9d, 0xd8f2c16c
mov dword [r8 + 0x18], r9d
mov qword [r8 + 0x10], r11
movups xmmword [r8 + 0x20], xmm6
mov edx, dword [0x14009aa08]
mov r9d, dword [0x14009aa0c]
shrd r9d, edx, 6
imul r11d, dword [0x14009aa10], 0x419201
imul eax, dword [0x14009aa14], 0x48d09bbf
mov edx, r9d
mov r9d, r11d
add r9d, eax
add r9d, 0x63bf4f4
imul eax, dword [0x14009aa18], 0x35b8fdb3
imul r11d, dword [0x14009aa1c], 0xa1756829
xor edx, 0x3296af1
add eax, r11d
add eax, 0x74ac0822
sub rsp, 0x40
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov rcx, r15
call qword [sym.imp.ntoskrnl.exe_ZwCreateKey]
add rsp, 0x40
mov ecx, dword [0x14009aa24]
mov edx, dword [0x14009aa20]
shrd ecx, edx, 7
xor ecx, 0xdef293c8
cmp eax, ecx
setg bl
imul ecx, dword [0x14009aa2c], 0x30fbc1c7
imul edx, dword [0x14009aa28], 0xfd050920
add ecx, edx
add ecx, 0xd3b9c7c9
mov edx, dword [0x14009cc10]
xor ecx, edx
imul ecx, edx
mov edx, dword [0x14009aa34]
mov r8d, dword [0x14009aa30]
shrd edx, r8d, 0x19
xor edx, 0x3af5d252
and edx, ecx
mov ecx, dword [str.__Mw]
mov r8d, dword [0x14009aa38]
shrd ecx, r8d, 0xb
imul r8d, dword [0x14009aa40], 0xfd257ad4
imul r9d, dword [0x14009aa44], 0x7c212f9c
imul r10d, dword [0x14009aa48], 0x7e307d2e
imul r11d, dword [0x14009aa4c], 0x4ac3a166
imul r12d, dword [0x14009aa50], 0x68b4e87d
imul eax, dword [0x14009aa54], 0xe9353a10
xor ecx, 0x2aee9a4
cmp edx, ecx
mov ecx, r9d
mov edx, r8d
lea ecx, [rdx + rcx + 0x13e0094a]
mov edx, r11d
mov r8d, r10d
lea r9d, [r8 + rdx - 0x76e3e910]
mov r8d, r12d
lea edx, [r8 + rax - 0x3c799fb9]
cmove edx, r9d
cmp dword [0x14009cc14], ecx
cmovl edx, r9d
mov byte [rbp - 0x38], r14b
mov al, byte [rbp - 0x16]
mov byte [rbp - 0x12], al
mov byte [rbp - 0x11], bl
mov r8, rsi
mov r9, rdi
mov r10, r13
mov r11, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x50]
mov r12, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x48]
jmp 0x140081704
mov r13, qword [rbp - 0x40]
mov rcx, qword [r13]
sub rsp, 0x20
mov r15, r11
mov qword [rbp - 0x50], r9
call qword [sym.imp.ntoskrnl.exe_ZwClose]
add rsp, 0x20
mov rax, qword [0x14009aaf8]
movabs rcx, 0x2d2a333ebc795e3c
imul rax, rcx
mov rcx, qword [0x14009ab00]
movabs rdx, 0x25aba81fd51d3445
imul rcx, rdx
add rcx, rax
movabs rax, 0x2841d941fb0237ce
add rcx, rax
mov qword [r14], rcx
movabs rax, 0xfffff78000000014
mov rax, qword [rax]
mov qword [r14], rax
sub rsp, 0x20
mov rcx, r14
call fcn.1400042ae
add rsp, 0x20
mov dword [0x14009cdc8], eax
imul eax, dword [0x14009ab08], 0xad2ec707
imul ecx, dword [0x14009ab0c], 0x4006e41
imul edx, dword [0x14009ab10], 0xfc35a5e9
imul r9d, dword [0x14009ab14], 0xc1c5a719
lea r8d, [rax + rcx]
add r8d, 0xf49ba736
mov eax, r9d
mov ecx, edx
add eax, ecx
add eax, 0xee2d6a3c
sub rsp, 0x30
mov dword [rsp + 0x20], eax
lea rcx, [0x14008c73c]
lea rdx, [0x14008c7a0]
lea r9, [0x14009cdc8]
call fcn.140015109
add rsp, 0x10
mov r8d, 0x1fe
mov qword [rbp - 0x60], r14
mov r14, qword [rbp - 0x48]
mov rcx, r14
lea rdx, [0x14008c7c0]
call fcn.14008cc40
add rsp, 0x20
mov rax, qword [0x14009ab18]
movabs rcx, 0x46ce10caadb8d87c
imul rax, rcx
mov rcx, qword [0x14009ab20]
movabs rdx, 0x2acea340df234b69
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0x10acf01446d2564c
add rdx, rax
sub rsp, 0x20
mov rcx, r14
call fcn.140002ea7
mov r8d, 0x1fe
mov rcx, r15
xor edx, edx
call fcn.14008cb40
add rsp, 0x20
mov rax, qword [0x14009ab28]
mov rcx, qword [0x14009ab30]
shrd rcx, rax, 0xc
mov rdx, rcx
movabs rax, 0xf5430c0af8d93267
xor rdx, rax
sub rsp, 0x20
mov rcx, r15
lea r8, [0x14008c9be]
mov r9, r14
call fcn.14008222a
lea rcx, [0x14009cdb0]
mov rdx, r15
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x14009ab38], 0x51baf874
imul ecx, dword [0x14009ab3c], 0xf1a7ce73
add ecx, eax
add ecx, 0x70379fe0
mov rax, qword [0x14009ab40]
movabs rdx, 0x31223b5fc0c3f59b
imul rax, rdx
mov rdx, qword [0x14009ab48]
movabs r8, 0xf5930ac2fb5c9ce
imul rdx, r8
add rdx, rax
imul eax, dword [0x14009ab50], 0x3ab27504
imul r8d, dword [0x14009ab54], 0xa824b462
movabs r9, 0xa614410c539fa9a9
add rdx, r9
add r8d, eax
add r8d, 0x31576016
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
add rsp, 0x20
mov qword [rbp - 0x38], rax
test rax, rax
mov edx, dword [0x14009ab5c]
mov rcx, rsi
setne byte [rbp - 0x12]
mov r8d, dword [0x14009ab58]
shrd edx, r8d, 0x12
mov r8d, dword [0x14009cc10]
xor edx, r8d
xor edx, 0x225033fb
imul edx, r8d
mov r8d, dword [0x14009ab64]
mov r9d, dword [0x14009ab60]
shrd r8d, r9d, 1
xor r8d, 0xd3a3b418
and r8d, edx
imul edx, dword [0x14009ab6c], 0xa7937ead
imul r9d, dword [0x14009ab68], 0x63dfa64e
add edx, r9d
add edx, 0x8fd1c0f7
mov r9d, dword [0x14009ab84]
mov r10d, dword [0x14009ab80]
shrd r9d, r10d, 0x10
xor r9d, 0x88bbd13a
imul r10d, dword [0x14009ab70], 0x959ef36
imul r11d, dword [0x14009ab74], 0x9548c090
mov r15, r13
imul esi, dword [0x14009ab78], 0xc1136a16
mov rax, rdi
imul edi, dword [0x14009ab7c], 0x14dace8e
cmp r8d, edx
mov edx, r11d
mov r8d, r10d
lea edx, [r8 + rdx - 0x537e3482]
mov r8d, edi
mov r10d, esi
lea r8d, [r10 + r8 - 0x476e4876]
cmove r9d, r8d
cmp dword [0x14009cc14], edx
mov rdx, qword [rbp - 0x38]
mov qword [0x14009cdc0], rdx
mov edx, r9d
cmovl edx, r8d
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x11], r12b
mov r8, rax
mov r9, qword [rbp - 0x50]
mov r10, qword [rbp - 0x58]
mov r11, r14
mov rdi, qword [rbp - 0x60]
mov r12, r13
mov rbx, rcx
jmp 0x140081704
mov rcx, qword [0x14009cdc0]
sub rsp, 0x20
mov r8d, 0x1000
xor edx, edx
mov r13, r9
call fcn.14008cb40
mov r8d, 0x1fe
mov rcx, r13
xor edx, edx
call fcn.14008cb40
add rsp, 0x20
mov rax, qword [0x14009b118]
movabs rcx, 0x84b96ac00e73ed2f
imul rax, rcx
mov rcx, qword [0x14009b120]
movabs rdx, 0xe61bd3af217f7ca3
imul rcx, rdx
add rcx, rax
mov rdx, rcx
movabs rax, 0x5de455feee09d44f
add rdx, rax
sub rsp, 0x20
mov rcx, r13
lea r8, [0x14008c9d6]
mov r12, rdi
mov rdi, qword [rbp - 0x48]
mov r9, rdi
call fcn.14008222a
add rsp, 0x20
mov rcx, qword [0x14009cdc0]
sub rsp, 0x20
mov rdx, r13
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
imul eax, dword [0x14009b128], 0x5f1c75c1
imul ecx, dword [0x14009b12c], 0x5faa39ac
imul edx, dword [str.kkM], 0xc80f8ef2
imul r9d, dword [0x14009b134], 0xd0fe1a00
lea r8d, [rax + rcx]
add r8d, 0x880801cb
mov eax, r9d
mov ecx, edx
add eax, ecx
add eax, 0x50dfd01e
sub rsp, 0x30
mov dword [rsp + 0x20], eax
lea rcx, [0x14008c73c]
lea rdx, [0x14008c9f6]
mov r9, rdi
call fcn.140015109
add rsp, 0x30
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
mov eax, dword [0x14009b138]
mov edx, dword [0x14009b13c]
shrd edx, eax, 0x1b
mov eax, dword [0x14009b140]
mov r8d, dword [0x14009b144]
shrd r8d, eax, 0x10
xor edx, 0x6370b7cc
mov r9d, r8d
imul eax, dword [0x14009b148], 0x18fe5819
xor r9d, 0xdf769eec
imul r8d, dword [0x14009b14c], 0x121b921d
add eax, r8d
add eax, 0x431b16c5
movzx r8d, byte [0x14009b150]
movzx r10d, byte [0x14009b151]
imul r8d, r8d, 0xffffff8a
imul r10d, r10d, 0x7b
add r10b, r8b
add r10b, 0xda
sub rsp, 0x40
lea r8, [0x14009cda8]
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x20], eax
mov byte [rsp + 0x28], r10b
lea r8, [0x14009cdb0]
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
add rsp, 0x40
mov dword [rsi], eax
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov al, byte [rbp - 0x15]
mov byte [rbp - 0x11], al
mov r8, r12
mov r9, r13
mov r10, qword [rbp - 0x58]
mov r11, rdi
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, dword [rbp - 0x1c]
mov edx, 0x36c0d4ed
jmp 0x14007e839
mov eax, dword [0x14009b114]
mov r13d, ecx
mov ecx, dword [0x14009b110]
shrd eax, ecx, 0x19
xor eax, 0x7bb07199
mov ecx, r15d
mov r15, qword [rbp - 0x28]
mov dword [r15], eax
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], cl
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r14b, byte [rbp - 0x14]
mov eax, r13d
mov ecx, edx
mov edx, 0x97b1b374
jmp 0x14007e839
mov eax, dword [0x14009aca8]
mov ecx, dword [0x14009aca4]
shrd eax, ecx, 0xb
mov ecx, dword [0x14009acb0]
mov r13d, edx
mov edx, dword [0x14009acac]
shrd ecx, edx, 0x1b
xor eax, 0x99dcc7da
mov edx, ecx
xor edx, 0xec64e37b
test bl, 1
cmovne edx, eax
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14b, byte [rbp - 0x14]
mov al, byte [rbp - 0x13]
mov ecx, r13d
jmp 0x14007e839
mov byte [rbp - 0x38], bl
mov byte [rbp - 0x12], r15b
mov byte [rbp - 0x11], r12b
mov r8, rdi
mov r10, r11
mov r11, qword [rbp - 0x48]
mov rdi, r14
mov r12, qword [rbp - 0x40]
mov rbx, rsi
mov rsi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r14d, eax
mov eax, ecx
mov ecx, edx
mov edx, r13d
cmp r13d, 0x303e5ca5
jne 0x14007e839
mov eax, dword [rbp - 0x1c]
movups xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret