Function at 0x1400a5e50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1fc8]
mov eax, 0x20c8
call fcn.140247340
sub rsp, rax
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov r12, rcx
mov rdi, qword [rcx + 0x1340]
mov rdi, qword [rdi]
cmp dword [rcx + 0x127c], 0
jne 0x1400a8124
mov r15d, 1
movzx esi, byte [rbp + 0x2010]
xor r14d, r14d
cmp rdi, qword [r12 + 0x1340]
je 0x1400a8124
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140038b60
mov qword [rsp + 0x50], rax
mov edx, 0xffffffff
mov rcx, qword [r12 + 0x1290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rbx, [r12 + 0x28]
mov r10, qword [rbx]
mov eax, dword [r12 + 0x14e4]
or eax, 9
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8, qword [rdi + 0x28]
mov rdx, qword [rdi + 0x18]
mov rcx, rbx
call qword [r10 + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
jne 0x1400a80ae
cmp dword [rdi + 0x38], eax
je 0x1400a75bc
mov r13d, r14d
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x1bb0]
call fcn.140249b10
cmp dword [r12 + 0x127c], r14d
jne 0x1400a638a
nop
mov rax, qword [rbx]
mov dword [rsp + 0x20], 0x410
lea r9, [rbp + 0x1bb0]
mov r8d, r13d
mov rdx, qword [rbp - 0x20]
mov rcx, rbx
call qword [rax + 0x30]
test eax, eax
jne 0x1400a638a
mov edx, 0xffffffff
mov rcx, qword [r12 + 0x1290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [r12 + 0x12d8]
mov rax, qword [rcx]
mov r9d, 2
lea r8, [rbp + 0x1bb0]
mov edx, 0x402
call qword [rax + 0x20]
mov qword [rbp], r14
mov qword [rbp + 8], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rbp]
call fcn.1400b2840
mov qword [rbp], rax
lea r8, [rbp]
lea rdx, [rbp + 0x1bb0]
mov rcx, r12
call fcn.140085a90
mov r12, qword [rbp]
test eax, eax
je 0x1400a61bd
mov rbx, qword [r12]
cmp rbx, r12
je 0x1400a62e9
lea rax, vtable.CScannerRegistryKey.0
mov qword [rbp - 0x70], rax
lea rax, vtable.CSABString.0
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x58], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov r15, rax
mov qword [rbp - 0x60], rax
xor eax, eax
mov qword [r15], rax
mov qword [r15 + 8], rax
mov dword [rbp - 0x54], 1
lea rax, vtable.CSABString.0
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r14
mov dword [rbp - 0x40], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x3c], 1
test rax, rax
je 0x1400a606d
mov rcx, rax
call fcn.140247060
mov qword [rbp - 0x48], r14
lea rcx, [rbp + 0x1bb0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400a6080
mov dword [rbp - 0x40], eax
inc eax
mov r14d, eax
mov ecx, eax
call fcn.140247068
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1400a60b3
mov r8d, r14d
lea rdx, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1402496a0
mov r14, qword [rbx + 0x38]
test r15, r15
je 0x1400a60cc
mov rcx, r15
call fcn.140247060
xor eax, eax
mov qword [rbp - 0x60], rax
jmp 0x1400a60ce
xor eax, eax
test r14, r14
je 0x1400a6111
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a60e0
mov dword [rbp - 0x58], eax
lea ecx, [rax + 1]
mov r15d, ecx
call fcn.140247068
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400a612b
mov r8d, r15d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a612b
mov dword [rbp - 0x58], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x60], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x38], 1
mov r14, qword [rsp + 0x50]
mov r15, qword [r14 + 8]
lea r9, [rbp - 0x70]
mov r8, r15
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.14007a860
movabs rcx, 0x333333333333332
mov rdx, qword [rsp + 0x58]
sub rcx, rdx
cmp rcx, 1
jb 0x1400a8138
inc rdx
mov qword [rsp + 0x58], rdx
mov qword [r14 + 8], rax
mov qword [r15], rax
cmp dword [rbp - 0x3c], 1
jne 0x1400a618e
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400a618e
call fcn.140247060
cmp dword [rbp - 0x54], 1
jne 0x1400a61a2
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x1400a61a2
call fcn.140247060
mov rbx, qword [rbx]
cmp rbx, r12
mov r14d, 0
jne 0x1400a5ff0
lea r15d, [r14 + 1]
jmp 0x1400a62e9
lea rax, vtable.CScannerRegistryKey.0
mov qword [rbp - 0x70], rax
lea rbx, vtable.CSABString.0
mov qword [rbp - 0x68], rbx
mov dword [rbp - 0x58], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x60], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x54], r15d
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], r14
mov dword [rbp - 0x40], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x3c], r15d
test rax, rax
je 0x1400a622a
mov rcx, rax
call fcn.140247060
mov qword [rbp - 0x48], r14
lea rcx, [rbp + 0x1bb0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400a6240
mov dword [rbp - 0x40], eax
inc eax
mov ebx, eax
mov ecx, eax
call fcn.140247068
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1400a6272
mov r8d, ebx
lea rdx, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1402496a0
mov dword [rbp - 0x38], r14d
mov rbx, qword [rsp + 0x50]
mov r14, qword [rbx + 8]
lea r9, [rbp - 0x70]
mov r8, r14
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.14007a860
movabs rcx, 0x333333333333332
mov rdx, qword [rsp + 0x58]
sub rcx, rdx
cmp rcx, 1
jb 0x1400a8145
inc rdx
mov qword [rsp + 0x58], rdx
mov qword [rbx + 8], rax
mov qword [r14], rax
cmp dword [rbp - 0x3c], 1
jne 0x1400a62d2
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400a62d2
call fcn.140247060
cmp dword [rbp - 0x54], 1
jne 0x1400a62e6
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x1400a62e6
call fcn.140247060
xor r14d, r14d
inc r13d
mov rbx, qword [r12]
mov qword [r12], r12
mov qword [r12 + 8], r12
mov qword [rbp + 8], r14
cmp rbx, r12
je 0x1400a6362
lea rsi, vtable.CSABString.0
nop dword [rax]
mov r14, qword [rbx]
mov qword [rbx + 0x30], rsi
add dword [rbx + 0x44], 0xffffffff
jne 0x1400a632b
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1400a632b
call fcn.140247060
mov qword [rbx + 0x10], rsi
add dword [rbx + 0x24], 0xffffffff
jne 0x1400a6343
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1400a6343
call fcn.140247060
mov edx, 0x48
mov rcx, rbx
call fcn.140247060
mov rbx, r14
cmp r14, r12
jne 0x1400a6310
movzx esi, byte [rbp + 0x2010]
xor r14d, r14d
mov edx, 0x48
mov rcx, r12
call fcn.140247060
mov r12, qword [rbp + 0x2010]
cmp dword [r12 + 0x127c], 0
lea rbx, [r12 + 0x28]
je 0x1400a5f50
mov byte [rbp + 0x2018], sil
mov r8, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2018]
mov qword [rsp + 0x20], rax
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14007b1b0
mov qword [rbp + 0x10], r14
xor eax, eax
mov r13d, eax
mov dword [rbp + 0x2018], eax
mov qword [rbp - 0x28], rax
mov r15d, eax
mov dword [rbp + 0x2020], eax
mov rax, qword [rsp + 0x50]
mov rbx, qword [rax]
cmp dword [r12 + 0x127c], r13d
jne 0x1400a75ae
mov esi, r13d
cmp rbx, rax
je 0x1400a758a
lea rcx, [rbp + 0x8d0]
call fcn.1400270b0
nop
mov edx, 0xffffffff
mov rcx, qword [r12 + 0x1290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test r14, r14
je 0x1400a6467
mov r8, qword [rbx + 0x20]
mov rax, r14
sub r8, r14
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400a6443
inc rax
test ecx, ecx
jne 0x1400a6430
test edx, edx
jne 0x1400a6467
test r15d, r15d
je 0x1400a645d
lea rcx, [rbp + 0x8d0]
call fcn.140027e10
jmp 0x1400a7572
xor eax, eax
mov r15d, eax
jmp 0x1400a6500
mov r14, qword [rbx + 0x20]
mov qword [rbp + 0x10], r14
lea rcx, [r12 + 0x1578]
mov r9d, 0xffffffff
mov r8d, r9d
mov rdx, r14
call fcn.140089d20
test eax, eax
je 0x1400a64ab
mov eax, 1
mov r15d, eax
mov dword [rbp + 0x2020], eax
lea rcx, [rbp + 0x8d0]
call fcn.140027e10
jmp 0x1400a7572
xor r14d, r14d
mov dword [rbp + 0x2020], r14d
mov ecx, 1
mov r15d, ecx
mov esi, r14d
mov dword [rbp + 0x2018], r14d
test r13, r13
je 0x1400a64db
mov rax, qword [r13]
mov edx, ecx
mov rcx, r13
call qword [rax + 0x228]
mov ecx, 0x648
call fcn.14018ef40
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400a64fb
mov rcx, rax
call fcn.1400270b0
mov r13, rax
jmp 0x1400a64fe
mov r13, r14
xor eax, eax
mov r14, qword [rbx + 0x38]
mov rcx, qword [rbp + 0x938]
test rcx, rcx
je 0x1400a651e
call fcn.140247060
xor eax, eax
mov qword [rbp + 0x938], rax
test r14, r14
je 0x1400a656b
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a6530
mov dword [rbp + 0x940], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0x938], rax
test rax, rax
je 0x1400a658b
mov r8d, dword [rbp + 0x940]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a658b
mov dword [rbp + 0x940], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x938], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov r14, qword [rdi + 0x28]
mov rcx, qword [rbp + 0x988]
test rcx, rcx
je 0x1400a65ab
call fcn.140247060
xor eax, eax
mov qword [rbp + 0x988], rax
jmp 0x1400a65ad
xor eax, eax
test r14, r14
je 0x1400a65fb
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a65c0
mov dword [rbp + 0x990], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0x988], rax
test rax, rax
je 0x1400a661b
mov r8d, dword [rbp + 0x990]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a661b
mov dword [rbp + 0x990], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x988], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov r14, qword [rdi + 0x50]
mov rcx, qword [rbp + 0xa18]
test rcx, rcx
je 0x1400a663b
call fcn.140247060
xor eax, eax
mov qword [rbp + 0xa18], rax
jmp 0x1400a663d
xor eax, eax
test r14, r14
je 0x1400a668b
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a6650
mov dword [rbp + 0xa20], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0xa18], rax
test rax, rax
je 0x1400a66ab
mov r8d, dword [rbp + 0xa20]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a66ab
mov dword [rbp + 0xa20], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0xa18], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov rax, qword [rdi + 0x18]
cmp rax, 0xffffffff80000000
jne 0x1400a66c2
lea r14, [0x14028be38]
xor eax, eax
jmp 0x1400a66fe
cmp rax, 0xffffffff80000002
jne 0x1400a66d5
lea r14, str.HKEY_LOCAL_MACHINE
xor eax, eax
jmp 0x1400a66fe
cmp rax, 0xffffffff80000001
jne 0x1400a66e8
lea r14, str.HKEY_CURRENT_USER
xor eax, eax
jmp 0x1400a66fe
lea r14, str.HKEY_USERS
cmp rax, 0xffffffff80000003
mov eax, 0
cmovne r14, rax
mov rcx, qword [rbp + 0x9b8]
test rcx, rcx
je 0x1400a6718
call fcn.140247060
xor eax, eax
mov qword [rbp + 0x9b8], rax
test r14, r14
je 0x1400a675f
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a6724
mov dword [rbp + 0x9c0], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0x9b8], rax
test rax, rax
je 0x1400a677f
mov r8d, dword [rbp + 0x9c0]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a677f
mov dword [rbp + 0x9c0], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x9b8], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov eax, dword [r12 + 0x14e8]
mov dword [rbp + 0xa2c], eax
mov rcx, qword [r12 + 0x12d8]
test rcx, rcx
je 0x1400a67b2
mov rax, qword [rcx]
mov r9d, 2
lea r8, [rbp + 0x8d0]
mov edx, 0x402
call qword [rax + 0x28]
mov r14, qword [rbx + 0x20]
mov rcx, qword [rbp + 0x908]
test rcx, rcx
je 0x1400a67d2
call fcn.140247060
xor eax, eax
mov qword [rbp + 0x908], rax
jmp 0x1400a67d4
xor eax, eax
test r14, r14
je 0x1400a681b
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a67e0
mov dword [rbp + 0x910], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0x908], rax
test rax, rax
je 0x1400a683b
mov r8d, dword [rbp + 0x910]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a683b
mov dword [rbp + 0x910], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x908], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov r14, qword [rbx + 0x20]
mov rcx, qword [rbp + 0xb88]
test rcx, rcx
je 0x1400a685b
call fcn.140247060
xor eax, eax
mov qword [rbp + 0xb88], rax
jmp 0x1400a685d
xor eax, eax
test r14, r14
je 0x1400a68ab
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a6870
mov dword [rbp + 0xb90], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0xb88], rax
test rax, rax
je 0x1400a68cb
mov r8d, dword [rbp + 0xb90]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a68cb
mov dword [rbp + 0xb90], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0xb88], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov eax, dword [rbx + 0x48]
mov dword [rbp + 0x2028], eax
cmp qword [r13 + 0x88], 0
jne 0x1400a6abc
test r15d, r15d
je 0x1400a6abc
lea rax, vtable.CSABString.0
mov qword [rsp + 0x60], rax
mov r15, qword [rbx + 0x20]
test r15, r15
je 0x1400a69c3
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x1400a6910
mov dword [rsp + 0x70], eax
inc eax
mov r12d, eax
mov ecx, eax
call fcn.140247068
mov r14, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400a6945
mov r8d, r12d
mov rdx, r15
mov rcx, rax
call fcn.1402496a0
xor r15d, r15d
mov r12, qword [rbp + 0x2010]
mov eax, 1
mov dword [rsp + 0x74], eax
lea rdx, [0x14029aff8]
mov rcx, r14
call fcn.140248db4
test rax, rax
je 0x1400a696f
mov byte [rax], 0
mov rcx, qword [r13 + 0x38]
test rcx, rcx
je 0x1400a6981
call fcn.140247060
mov qword [r13 + 0x38], r15
test r14, r14
je 0x1400a69e8
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x1400a6990
mov dword [r13 + 0x40], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [r13 + 0x38], rax
test rax, rax
je 0x1400a6a03
mov r8d, dword [r13 + 0x40]
inc r8d
mov rdx, r14
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a6a03
mov dword [rsp + 0x70], r15d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov r14, rax
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [r14], rax
mov qword [r14 + 8], rax
jmp 0x1400a694f
mov dword [r13 + 0x40], r15d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [r13 + 0x38], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov r15, qword [rbx + 0x20]
mov rcx, qword [r13 + 0x2b8]
test rcx, rcx
je 0x1400a6a23
call fcn.140247060
xor eax, eax
mov qword [r13 + 0x2b8], rax
jmp 0x1400a6a25
xor eax, eax
test r15, r15
je 0x1400a6a6d
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], 0
jne 0x1400a6a31
mov dword [r13 + 0x2c0], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [r13 + 0x2b8], rax
test rax, rax
je 0x1400a6a8e
mov r8d, dword [r13 + 0x2c0]
inc r8d
mov rdx, r15
mov rcx, rax
call fcn.1402496a0
jmp 0x1400a6a8e
mov dword [r13 + 0x2c0], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [r13 + 0x2b8], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov r15d, 1
mov dword [r13 + 0x80], r15d
xor r9d, r9d
mov r8, r13
mov rdx, r14
mov rcx, r12
call fcn.1400876f0
nop
test r14, r14
je 0x1400a6ac2
mov rcx, r14
call fcn.140247060
jmp 0x1400a6ac2
mov r15d, 1
xor r14d, r14d
mov dword [rbp + 0x950], r14d
mov eax, dword [r13 + 0x158]
mov dword [rbp + 0xa28], eax
mov eax, dword [r13 + 0x94]
mov dword [rbp + 0x964], eax
mov eax, dword [r13 + 0x7c]
mov dword [rbp + 0x94c], eax
mov eax, dword [r13 + 0x94]
mov dword [rbp + 0x964], eax
mov eax, dword [r13 + 0x90]
mov dword [rbp + 0x960], eax
lea rdx, [r13 + 0x98]
lea rcx, [rbp + 0x968]
call fcn.140004780
mov rax, qword [r13 + 0x88]
mov qword [rbp + 0x958], rax
mov eax, dword [r13 + 0x158]
mov dword [rbp + 0xa28], eax
lea rdx, [r13 + 0x190]
lea rcx, [rbp + 0xa60]
call fcn.140004780
lea rdx, [r13 + 0x1a8]
lea rcx, [rbp + 0xa78]
call fcn.140004780
lea rdx, [r13 + 0x1c0]
lea rcx, [rbp + 0xa90]
call fcn.140004780
lea rdx, [r13 + 0x1d8]
lea rcx, [rbp + 0xaa8]
call fcn.140004780
lea rdx, [r13 + 0x1f0]
lea rcx, [rbp + 0xac0]
call fcn.140004780
lea rdx, [r13 + 0x208]
lea rcx, [rbp + 0xad8]
call fcn.140004780
lea rdx, [r13 + 0x220]
lea rcx, [rbp + 0xaf0]
call fcn.140004780
lea rdx, [r13 + 0x238]
lea rcx, [rbp + 0xb08]
call fcn.140004780
lea rdx, [r13 + 0x250]
lea rcx, [rbp + 0xb20]
call fcn.140004780
lea rdx, [r13 + 0x268]
lea rcx, [rbp + 0xb38]
call fcn.140004780
lea rdx, [r13 + 0x280]
lea rcx, [rbp + 0xb50]
call fcn.140004780
lea rdx, [r13 + 0x298]
lea rcx, [rbp + 0xb68]
call fcn.140004780
lea rdx, [r13 + 0x178]
lea rcx, [rbp + 0xa48]
call fcn.140004780
cmp dword [rbp + 0x960], r14d
jne 0x1400a6c90
mov dword [rbp + 0x960], r15d
mov rcx, qword [rbp + 0x970]
test rcx, rcx
je 0x1400a6c57
call fcn.140247060
mov qword [rbp + 0x970], r14
mov dword [rbp + 0x978], 4
mov ecx, 5
call fcn.140247068
mov qword [rbp + 0x970], rax
test rax, rax
je 0x1400a6c90
mov r8d, dword [rbp + 0x978]
inc r8d
lea rdx, [0x14028b498]
mov rcx, rax
call fcn.1402496a0
inc dword [r12 + 0x12a0]
mov dword [rbp + 0x950], r15d
mov eax, 1
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r14d
mov eax, dword [r12 + 0x12c4]
mov dword [rsp + 0x20], eax
lea r9, [r12 + 0x13e0]
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x8d0]
mov rcx, qword [r12 + 0x12c8]
call fcn.140017e00
test eax, eax
mov eax, 1
cmovne r14d, eax
cmp dword [rdi + 0x40], 0
je 0x1400a6dc3
test r14d, r14d
jne 0x1400a6dc3
test esi, esi
jne 0x1400a6db8
xor esi, esi
mov qword [rbp - 0x30], rsi
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov eax, dword [r12 + 0x12c4]
mov dword [rsp + 0x20], eax
lea r9, [r12 + 0x13e0]
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x8d0]
mov rcx, qword [r12 + 0x12c8]
call fcn.140017e00
test eax, eax
je 0x1400a6daf
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400a6d9d
lea rcx, [rbp + 0xf20]
call fcn.1400279f0
nop
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0xf30]
call fcn.1400284d0
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp + 0x1578]
call fcn.14000db90
mov dword [rbp + 0xfb0], esi
mov qword [rbp + 0xfb8], rsi
lea rcx, [rbp + 0xf20]
call fcn.1400283f0
mov eax, 1
mov r14d, eax
mov dword [rbp + 0x2018], eax
mov esi, eax
jmp 0x1400a6dc3
mov eax, 1
mov esi, eax
jmp 0x1400a6dc3
cmp dword [rbp + 0x2018], 0
cmovne r14d, eax
xor r15d, r15d
mov dword [rbp + 0x950], r15d
test r14d, r14d
je 0x1400a755b
lea r14, vtable.CSASDescriptor.0
mov qword [rbp + 0x50], r14
lea r12, vtable.CSASDescriptor.1.0
mov qword [rbp + 0x58], r12
lea rcx, [rbp + 0x60]
call fcn.1400270b0
nop
lea rcx, [rbp + 0x6a8]
call fcn.14000cb90
nop
lea rcx, [rbp + 0x868]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x880]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x898]
call fcn.14000ce10
mov dword [rbp + 0x858], r15d
mov qword [rbp + 0x860], r15
mov qword [rbp + 0x8b8], r15
mov dword [rbp + 0x8b0], r15d
mov qword [rbp + 0xf20], r14
mov qword [rbp + 0xf28], r12
lea rcx, [rbp + 0xf30]
call fcn.1400270b0
nop
lea rcx, [rbp + 0x1578]
call fcn.14000cb90
nop
lea rcx, [rbp + 0x1738]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x1750]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x1768]
call fcn.14000ce10
mov dword [rbp + 0x1728], r15d
mov qword [rbp + 0x1730], r15
mov qword [rbp + 0x1788], r15
mov dword [rbp + 0x1780], r15d
lea rax, vtable.CSABString.0
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x28], r15d
lea ecx, [r15 + 0x10]
call fcn.140247068
mov r12, rax
mov qword [rbp + 0x20], rax
xor eax, eax
mov qword [r12], rax
mov qword [r12 + 8], rax
mov r14d, 1
mov dword [rbp + 0x2c], r14d
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0x60]
call fcn.1400284d0
mov dword [rbp + 0xe0], r15d
mov qword [rbp + 0xe8], r15
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp + 0x6a8]
call fcn.14000db90
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0xf30]
call fcn.1400284d0
lea rdx, [rbp + 0x6a8]
lea rcx, [rbp + 0x1578]
call fcn.14000db90
mov eax, dword [rbp + 0x850]
mov dword [rbp + 0x1720], eax
mov eax, dword [rbp + 0x854]
mov dword [rbp + 0x1724], eax
mov eax, dword [rbp + 0x858]
mov dword [rbp + 0x1728], eax
mov rax, qword [rbp + 0x860]
mov qword [rbp + 0x1730], rax
lea rdx, [rbp + 0x868]
lea rcx, [rbp + 0x1738]
call fcn.140004780
lea rdx, [rbp + 0x880]
lea rcx, [rbp + 0x1750]
call fcn.140004780
lea rdx, [rbp + 0x898]
lea rcx, [rbp + 0x1768]
call fcn.140004780
mov eax, dword [rbp + 0x8b0]
mov dword [rbp + 0x1780], eax
mov rax, qword [rbp + 0x8b8]
mov qword [rbp + 0x1788], rax
mov rax, qword [rbp + 0x8c0]
mov qword [rbp + 0x1790], rax
mov r15, qword [rbp + 0x2010]
mov eax, dword [r15 + 0x14e8]
mov dword [rbp + 0x108c], eax
mov r8d, 0xffffffff
mov rdx, qword [rdi + 0x28]
lea rcx, [rbp + 0xfe0]
call fcn.140005600
lea rax, vtable.CSABString.0
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x70], r14d
lea ecx, [r14 + 1]
call fcn.140247068
mov r14, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400a7022
movzx ecx, word [0x140287e84]
mov word [rax], cx
mov eax, 1
mov dword [rsp + 0x74], eax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xfe0]
call fcn.140081fe0
nop
test r14, r14
je 0x1400a704a
mov rcx, r14
call fcn.140247060
mov rdx, qword [rbx + 0x38]
lea rcx, [rsp + 0x78]
call fcn.140006f70
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xfe0]
call fcn.140081fe0
nop
cmp dword [rbp - 0x74], 1
jne 0x1400a707f
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400a707f
call fcn.140247060
mov r8d, 0xffffffff
mov rdx, r12
lea rcx, [rbp + 0xf90]
call fcn.140005600
lea r8, [rbp + 0xf20]
mov edx, 0x402
mov rcx, r15
call fcn.14007e430
cmp dword [rbp + 0x2028], 0
je 0x1400a73a4
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x1400a70d2
call fcn.140247060
xor r14d, r14d
mov qword [rbp + 0x148], r14
jmp 0x1400a70d5
xor r14d, r14d
mov dword [rbp + 0x150], reloc.COMCTL32.dll_InitCommonControls
mov ecx, send
call fcn.140247068
mov qword [rbp + 0x148], rax
test rax, rax
je 0x1400a710e
mov r8d, dword [rbp + 0x150]
inc r8d
lea rdx, [0x14028be38]
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x1400a7126
call fcn.140247060
mov qword [rbp + 0x118], r14
mov dword [rbp + 0x120], 5
mov ecx, 6
call fcn.140247068
mov qword [rbp + 0x118], rax
test rax, rax
je 0x1400a715f
mov r8d, dword [rbp + 0x120]
inc r8d
lea rdx, [0x140298f00]
mov rcx, rax
call fcn.1402496a0
lea r8, [rbp + 0x50]
mov edx, 0x402
mov rcx, r15
call fcn.14007e430
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0xf30]
call fcn.1400284d0
lea rdx, [rbp + 0x6a8]
lea rcx, [rbp + 0x1578]
call fcn.14000db90
mov eax, dword [rbp + 0x850]
mov dword [rbp + 0x1720], eax
mov eax, dword [rbp + 0x854]
mov dword [rbp + 0x1724], eax
mov eax, dword [rbp + 0x858]
mov dword [rbp + 0x1728], eax
mov rax, qword [rbp + 0x860]
mov qword [rbp + 0x1730], rax
lea rdx, [rbp + 0x868]
lea rcx, [rbp + 0x1738]
call fcn.140004780
lea rdx, [rbp + 0x880]
lea rcx, [rbp + 0x1750]
call fcn.140004780
lea rdx, [rbp + 0x898]
lea rcx, [rbp + 0x1768]
call fcn.140004780
mov eax, dword [rbp + 0x8b0]
mov dword [rbp + 0x1780], eax
mov rax, qword [rbp + 0x8b8]
mov qword [rbp + 0x1788], rax
mov rax, qword [rbp + 0x8c0]
mov qword [rbp + 0x1790], rax
lea rax, vtable.CSABString.0
mov qword [rbp - 0x18], rax
mov dword [rbp - 8], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov r15, rax
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [r15], rax
mov qword [r15 + 8], rax
mov eax, 1
mov dword [rbp - 4], eax
lea rax, vtable.CSABString.0
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x70], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rsp + 0x68], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov r14d, 1
mov dword [rsp + 0x74], r14d
mov r8d, 0xffffffff
mov rdx, qword [rbp + 0xf98]
lea rcx, [rsp + 0x60]
call fcn.140005600
lea rax, vtable.CSABString.0
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x78], r14d
lea ecx, [r14 + 1]
call fcn.140247068
mov r14, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400a72d1
movzx ecx, word [0x140287e84]
mov word [rax], cx
mov eax, 1
mov dword [rbp - 0x74], eax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xfe0]
call fcn.140081fe0
nop
test r14, r14
je 0x1400a72f8
mov rcx, r14
call fcn.140247060
lea rdx, [rbp + 0xf90]
lea rcx, [rbp + 0xfe0]
call fcn.140081fe0
mov r8d, 0xffffffff
mov rdx, r15
lea rcx, [rbp + 0x1040]
call fcn.140005600
mov r8d, 0xffffffff
mov rdx, r15
lea rcx, [rbp + 0xf90]
call fcn.140005600
mov eax, 1
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xf20]
mov r8, qword [rbp + 0xfe8]
mov rdx, 0xffffffff80000000
mov rcx, qword [rbp + 0x2010]
call fcn.140095720
lea r8, [rbp + 0xf20]
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov rcx, qword [rbp + 0x2010]
call fcn.140093ec0
nop
cmp dword [rsp + 0x74], 1
jne 0x1400a7390
test r14, r14
je 0x1400a7390
mov rcx, r14
call fcn.140247060
nop
test r15, r15
je 0x1400a739d
mov rcx, r15
call fcn.140247060
mov r15, qword [rbp + 0x2010]
cmp dword [rbp + 0xa0], 0
je 0x1400a7427
lea rax, vtable.CSABString.0
mov qword [rbp - 0x18], rax
xor eax, eax
mov dword [rbp - 8], eax
lea ecx, [rax + 0x10]
call fcn.140247068
mov r14, rax
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [r14], rax
mov qword [r14 + 8], rax
mov eax, 1
mov dword [rbp - 4], eax
mov r8d, 0xffffffff
mov rdx, r14
lea rcx, [rbp + 0xc0]
call fcn.140005600
mov r8d, 0xffffffff
mov rdx, r14
lea rcx, [rbp + 0x110]
call fcn.140005600
lea r8, [rbp + 0x50]
mov edx, 0x400
mov rcx, r15
call fcn.14007e430
nop
test r14, r14
je 0x1400a7427
mov rcx, r14
call fcn.140247060
nop
test r12, r12
je 0x1400a7435
mov rcx, r12
call fcn.140247060
nop
lea r15, vtable.CSASDescriptor.0
mov qword [rbp + 0xf20], r15
lea r12, vtable.CSASDescriptor.1.0
mov qword [rbp + 0xf28], r12
lea r14, vtable.CSABString.0
mov qword [rbp + 0x1768], r14
add dword [rbp + 0x177c], 0xffffffff
jne 0x1400a7479
mov rcx, qword [rbp + 0x1770]
test rcx, rcx
je 0x1400a7479
call fcn.140247060
mov qword [rbp + 0x1750], r14
add dword [rbp + 0x1764], 0xffffffff
jne 0x1400a749a
mov rcx, qword [rbp + 0x1758]
test rcx, rcx
je 0x1400a749a
call fcn.140247060
mov qword [rbp + 0x1738], r14
add dword [rbp + 0x174c], 0xffffffff
jne 0x1400a74bb
mov rcx, qword [rbp + 0x1740]
test rcx, rcx
je 0x1400a74bb
call fcn.140247060
lea rcx, [rbp + 0x1578]
call fcn.14000d760
lea rcx, [rbp + 0xf30]
call fcn.140027e10
nop
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x898], r14
add dword [rbp + 0x8ac], 0xffffffff
jne 0x1400a74fd
mov rcx, qword [rbp + 0x8a0]
test rcx, rcx
je 0x1400a74fd
call fcn.140247060
mov qword [rbp + 0x880], r14
add dword [rbp + 0x894], 0xffffffff
jne 0x1400a751e
mov rcx, qword [rbp + 0x888]
test rcx, rcx
je 0x1400a751e
call fcn.140247060
mov qword [rbp + 0x868], r14
add dword [rbp + 0x87c], 0xffffffff
jne 0x1400a753f
mov rcx, qword [rbp + 0x870]
test rcx, rcx
je 0x1400a753f
call fcn.140247060
lea rcx, [rbp + 0x6a8]
call fcn.14000d760
lea rcx, [rbp + 0x60]
call fcn.140027e10
mov r12, qword [rbp + 0x2010]
lea rcx, [rbp + 0x8d0]
call fcn.140027e10
mov r14, qword [rbp + 0x10]
mov r15d, dword [rbp + 0x2020]
mov rbx, qword [rbx]
cmp dword [r12 + 0x127c], 0
jne 0x1400a758a
mov rax, qword [rsp + 0x50]
jmp 0x1400a63f5
test r13, r13
movzx esi, byte [rbp + 0x2010]
mov r15d, 1
je 0x1400a75b4
mov rax, qword [r13]
mov edx, r15d
mov rcx, r13
call qword [rax + 0x228]
jmp 0x1400a75b4
mov r15d, 1
lea rbx, [r12 + 0x28]
xor r14d, r14d
cmp dword [rdi + 0x3c], 0
je 0x1400a809b
mov r13d, r14d
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x17a0]
call fcn.140249b10
mov dword [rbp + 0x2018], 0x410
cmp dword [r12 + 0x127c], 0
jne 0x1400a809b
lea rsi, vtable.CSABString.0
nop dword [rax]
mov rax, qword [rbx]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
lea rcx, [rbp + 0x2018]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x17a0]
mov r8d, r13d
mov rdx, qword [rbp - 0x20]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
jne 0x1400a8094
mov edx, 0xffffffff
mov rcx, qword [r12 + 0x1290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, [rbp + 0x8d0]
call fcn.1400270b0
nop
mov edx, 0xffffffff
mov rcx, qword [r12 + 0x1290]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x938]
test rcx, rcx
je 0x1400a768a
call fcn.140247060
mov qword [rbp + 0x938], r14
lea rcx, [rbp + 0x17a0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400a76a0
mov dword [rbp + 0x940], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0x938], rax
test rax, rax
je 0x1400a76dc
mov r8d, dword [rbp + 0x940]
inc r8d
lea rdx, [rbp + 0x17a0]
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [rbp + 0x9e8]
test rcx, rcx
je 0x1400a76f4
call fcn.140247060
mov qword [rbp + 0x9e8], r14
lea rcx, [rbp + 0x17a0]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400a7702
mov dword [rbp + 0x9f0], eax
lea ecx, [rax + 1]
call fcn.140247068
mov qword [rbp + 0x9e8], rax
test rax, rax
je 0x1400a773e
mov r8d, dword [rbp + 0x9f0]
inc r8d
lea rdx, [rbp + 0x17a0]
mov rcx, rax
call fcn.1402496a0
mov r8d, 0xffffffff
mov rdx, qword [rdi + 0x28]
lea rcx, [rbp + 0x980]
call fcn.140005600
mov dword [rbp + 0x950], r15d
mov r8d, 0xffffffff
mov rdx, qword [rdi + 0x50]
lea rcx, [rbp + 0xa10]
call fcn.140005600
mov rcx, qword [r12 + 0x12d8]
test rcx, rcx
je 0x1400a7796
mov rax, qword [rcx]
mov r9d, 2
lea r8, [rbp + 0x8d0]
mov edx, 0x402
call qword [rax + 0x28]
mov rax, qword [rdi + 0x18]
cmp rax, 0xffffffff80000000
jne 0x1400a77ab
lea rdx, [0x14028be38]
jmp 0x1400a77de
cmp rax, 0xffffffff80000002
jne 0x1400a77bc
lea rdx, str.HKEY_LOCAL_MACHINE
jmp 0x1400a77de
cmp rax, 0xffffffff80000001
jne 0x1400a77cd
lea rdx, str.HKEY_CURRENT_USER
jmp 0x1400a77de
lea rdx, str.HKEY_USERS
cmp rax, 0xffffffff80000003
cmovne rdx, r14
mov r8d, 0xffffffff
lea rcx, [rbp + 0x9b0]
call fcn.140005600
lea r8, [rbp + 0x8d0]
lea rdx, [rbp + 0x17a0]
mov rcx, r12
call fcn.140085160
mov r15d, eax
mov qword [rbp + 0x2020], r14
inc dword [r12 + 0x12a0]
mov ebx, r14d
mov eax, 1
lea r9, [r12 + 0x13e0]
lea r8, [rbp + 0x2020]
lea rdx, [rbp + 0x8d0]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r12
cmp dword [rdi + 0x40], 0
je 0x1400a7934
xor eax, eax
mov dword [rsp + 0x28], eax
mov ecx, dword [r12 + 0x12c4]
mov dword [rsp + 0x20], ecx
mov rcx, qword [r12 + 0x12c8]
call fcn.140017e00
test eax, eax
jne 0x1400a792b
xor eax, eax
mov qword [rbp + 0x2028], rax
mov eax, 1
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov eax, dword [r12 + 0x12c4]
mov dword [rsp + 0x20], eax
lea r9, [r12 + 0x13e0]
lea r8, [rbp + 0x2028]
lea rdx, [rbp + 0x8d0]
mov rcx, qword [r12 + 0x12c8]
call fcn.140017e00
test eax, eax
je 0x1400a795e
mov rax, qword [rbp + 0x2028]
mov qword [rbp + 0x2020], rax
test rax, rax
je 0x1400a792b
lea rcx, [rbp + 0xf20]
call fcn.1400279f0
nop
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0xf30]
call fcn.1400284d0
mov rdx, qword [rbp + 0x2028]
lea rcx, [rbp + 0x1578]
call fcn.14000db90
xor r14d, r14d
mov dword [rbp + 0xfb0], r14d
mov qword [rbp + 0xfb8], r14
lea rcx, [rbp + 0xf20]
call fcn.1400283f0
lea ebx, [r14 + 1]
jmp 0x1400a7961
xor r14d, r14d
lea ebx, [r14 + 1]
jmp 0x1400a7961
mov dword [rsp + 0x28], r14d
mov eax, dword [r12 + 0x12c4]
mov dword [rsp + 0x20], eax
mov rcx, qword [r12 + 0x12c8]
call fcn.140017e00
test eax, eax
mov eax, 1
cmovne ebx, eax
jmp 0x1400a7961
xor r14d, r14d
test ebx, ebx
je 0x1400a8061
lea rbx, vtable.CSASDescriptor.0
mov qword [rbp + 0x50], rbx
lea r12, vtable.CSASDescriptor.1.0
mov qword [rbp + 0x58], r12
lea rcx, [rbp + 0x60]
call fcn.1400270b0
nop
lea rcx, [rbp + 0x6a8]
call fcn.14000cb90
nop
lea rcx, [rbp + 0x868]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x880]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x898]
call fcn.14000ce10
mov dword [rbp + 0x858], r14d
mov qword [rbp + 0x860], r14
mov qword [rbp + 0x8b8], r14
mov dword [rbp + 0x8b0], r14d
mov qword [rbp + 0xf20], rbx
mov qword [rbp + 0xf28], r12
lea rcx, [rbp + 0xf30]
call fcn.1400270b0
nop
lea rcx, [rbp + 0x1578]
call fcn.14000cb90
nop
lea rcx, [rbp + 0x1738]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x1750]
call fcn.14000ce10
nop
lea rcx, [rbp + 0x1768]
call fcn.14000ce10
mov dword [rbp + 0x1728], r14d
mov qword [rbp + 0x1730], r14
mov qword [rbp + 0x1788], r14
mov dword [rbp + 0x1780], r14d
mov qword [rbp - 0x18], rsi
mov dword [rbp - 8], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov r12, rax
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [r12], rax
mov qword [r12 + 8], rax
mov eax, 1
mov dword [rbp - 4], eax
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0x60]
call fcn.1400284d0
mov dword [rbp + 0xe0], r14d
mov qword [rbp + 0xe8], r14
mov rdx, qword [rbp + 0x2020]
lea rcx, [rbp + 0x6a8]
call fcn.14000db90
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0xf30]
call fcn.1400284d0
lea rdx, [rbp + 0x6a8]
lea rcx, [rbp + 0x1578]
call fcn.14000db90
mov eax, dword [rbp + 0x850]
mov dword [rbp + 0x1720], eax
mov eax, dword [rbp + 0x854]
mov dword [rbp + 0x1724], eax
mov eax, dword [rbp + 0x858]
mov dword [rbp + 0x1728], eax
mov rax, qword [rbp + 0x860]
mov qword [rbp + 0x1730], rax
lea rdx, [rbp + 0x868]
lea rcx, [rbp + 0x1738]
call fcn.140004780
lea rdx, [rbp + 0x880]
lea rcx, [rbp + 0x1750]
call fcn.140004780
lea rdx, [rbp + 0x898]
lea rcx, [rbp + 0x1768]
call fcn.140004780
mov eax, dword [rbp + 0x8b0]
mov dword [rbp + 0x1780], eax
mov rax, qword [rbp + 0x8b8]
mov qword [rbp + 0x1788], rax
mov rax, qword [rbp + 0x8c0]
mov qword [rbp + 0x1790], rax
mov r8d, 0xffffffff
mov rdx, r12
lea rcx, [rbp + 0xf90]
call fcn.140005600
lea r8, [rbp + 0xf20]
mov edx, 0x402
mov rbx, qword [rbp + 0x2010]
mov rcx, rbx
call fcn.14007e430
test r15d, r15d
je 0x1400a7eac
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x1400a7ba6
call fcn.140247060
mov qword [rbp + 0x148], r14
mov dword [rbp + 0x150], reloc.COMCTL32.dll_InitCommonControls
mov ecx, send
call fcn.140247068
mov qword [rbp + 0x148], rax
test rax, rax
je 0x1400a7bdf
mov r8d, dword [rbp + 0x150]
inc r8d
lea rdx, [0x14028be38]
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x1400a7bf7
call fcn.140247060
mov qword [rbp + 0x118], r14
mov dword [rbp + 0x120], 5
mov ecx, 6
call fcn.140247068
mov qword [rbp + 0x118], rax
test rax, rax
je 0x1400a7c30
mov r8d, dword [rbp + 0x120]
inc r8d
lea rdx, [0x140298f00]
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [rbp + 0x178]
test rcx, rcx
je 0x1400a7c48
call fcn.140247060
mov qword [rbp + 0x178], r14
mov dword [rbp + 0x180], r14d
mov r15d, 1
mov ecx, r15d
call fcn.140247068
mov qword [rbp + 0x178], rax
test rax, rax
je 0x1400a7c82
mov r8d, dword [rbp + 0x180]
inc r8d
lea rdx, [0x140286ae1]
mov rcx, rax
call fcn.1402496a0
lea r8, [rbp + 0x50]
mov edx, 0x402
mov rcx, rbx
call fcn.14007e430
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0xf30]
call fcn.1400284d0
lea rdx, [rbp + 0x6a8]
lea rcx, [rbp + 0x1578]
call fcn.14000db90
mov eax, dword [rbp + 0x850]
mov dword [rbp + 0x1720], eax
mov eax, dword [rbp + 0x854]
mov dword [rbp + 0x1724], eax
mov eax, dword [rbp + 0x858]
mov dword [rbp + 0x1728], eax
mov rax, qword [rbp + 0x860]
mov qword [rbp + 0x1730], rax
lea rdx, [rbp + 0x868]
lea rcx, [rbp + 0x1738]
call fcn.140004780
lea rdx, [rbp + 0x880]
lea rcx, [rbp + 0x1750]
call fcn.140004780
lea rdx, [rbp + 0x898]
lea rcx, [rbp + 0x1768]
call fcn.140004780
mov eax, dword [rbp + 0x8b0]
mov dword [rbp + 0x1780], eax
mov rax, qword [rbp + 0x8b8]
mov qword [rbp + 0x1788], rax
mov rax, qword [rbp + 0x8c0]
mov qword [rbp + 0x1790], rax
mov qword [rbp + 0x18], rsi
mov dword [rbp + 0x28], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov r14, rax
mov qword [rbp + 0x20], rax
xor eax, eax
mov qword [r14], rax
mov qword [r14 + 8], rax
mov dword [rbp + 0x2c], r15d
mov qword [rsp + 0x78], rsi
mov dword [rbp - 0x78], r15d
lea ecx, [rax + 2]
call fcn.140247068
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400a7d96
movzx ecx, word [0x140287e84]
mov word [rax], cx
mov dword [rbp - 0x74], r15d
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xfe0]
call fcn.140081fe0
nop
test rbx, rbx
je 0x1400a7db9
mov rcx, rbx
call fcn.140247060
mov qword [rsp + 0x78], rsi
lea rcx, [rbp + 0x17a0]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400a7dd0
mov dword [rbp - 0x78], eax
inc eax
mov r15d, eax
mov ecx, eax
call fcn.140247068
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400a7e06
mov r8d, r15d
lea rdx, [rbp + 0x17a0]
mov rcx, rax
call fcn.1402496a0
mov r15d, 1
mov dword [rbp - 0x74], r15d
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xfe0]
call fcn.140081fe0
nop
test rbx, rbx
je 0x1400a7e2f
mov rcx, rbx
call fcn.140247060
mov r8d, 0xffffffff
mov rdx, r14
lea rcx, [rbp + 0x1040]
call fcn.140005600
mov r8d, 0xffffffff
mov rdx, r14
lea rcx, [rbp + 0xf90]
call fcn.140005600
mov dword [rsp + 0x20], r15d
lea r9, [rbp + 0xf20]
mov r8, qword [rbp + 0xfe8]
mov rdx, 0xffffffff80000000
mov rcx, qword [rbp + 0x2010]
call fcn.140095720
lea r8, [rbp + 0xf20]
lea rdx, [rbp + 0x17a0]
mov rcx, qword [rbp + 0x2010]
call fcn.140093ec0
nop
test r14, r14
je 0x1400a7ea7
mov rcx, r14
call fcn.140247060
xor r14d, r14d
jmp 0x1400a7eb2
mov r15d, 1
cmp dword [rbp + 0xa0], 0
je 0x1400a7f34
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x70], r14d
xor edx, edx
mov r8d, 0xffffffff
lea rcx, [rsp + 0x60]
call fcn.140005600
mov dword [rsp + 0x74], r15d
mov r8d, 0xffffffff
mov rbx, qword [rsp + 0x68]
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.140005600
mov r8d, 0xffffffff
mov rdx, rbx
lea rcx, [rbp + 0x110]
call fcn.140005600
lea r8, [rbp + 0x50]
mov edx, 0x400
mov rcx, qword [rbp + 0x2010]
call fcn.14007e430
nop
test rbx, rbx
je 0x1400a7f34
mov rcx, rbx
call fcn.140247060
nop
test r12, r12
je 0x1400a7f42
mov rcx, r12
call fcn.140247060
nop
lea rbx, vtable.CSASDescriptor.0
mov qword [rbp + 0xf20], rbx
lea r15, vtable.CSASDescriptor.1.0
mov qword [rbp + 0xf28], r15
mov qword [rbp + 0x1768], rsi
add dword [rbp + 0x177c], 0xffffffff
jne 0x1400a7f7f
mov rcx, qword [rbp + 0x1770]
test rcx, rcx
je 0x1400a7f7f
call fcn.140247060
mov qword [rbp + 0x1750], rsi
add dword [rbp + 0x1764], 0xffffffff
jne 0x1400a7fa0
mov rcx, qword [rbp + 0x1758]
test rcx, rcx
je 0x1400a7fa0
call fcn.140247060
mov qword [rbp + 0x1738], rsi
add dword [rbp + 0x174c], 0xffffffff
jne 0x1400a7fc1
mov rcx, qword [rbp + 0x1740]
test rcx, rcx
je 0x1400a7fc1
call fcn.140247060
lea rcx, [rbp + 0x1578]
call fcn.14000d760
lea rcx, [rbp + 0xf30]
call fcn.140027e10
nop
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x898], rsi
add dword [rbp + 0x8ac], 0xffffffff
jne 0x1400a8003
mov rcx, qword [rbp + 0x8a0]
test rcx, rcx
je 0x1400a8003
call fcn.140247060
mov qword [rbp + 0x880], rsi
add dword [rbp + 0x894], 0xffffffff
jne 0x1400a8024
mov rcx, qword [rbp + 0x888]
test rcx, rcx
je 0x1400a8024
call fcn.140247060
mov qword [rbp + 0x868], rsi
add dword [rbp + 0x87c], 0xffffffff
jne 0x1400a8045
mov rcx, qword [rbp + 0x870]
test rcx, rcx
je 0x1400a8045
call fcn.140247060
lea rcx, [rbp + 0x6a8]
call fcn.14000d760
lea rcx, [rbp + 0x60]
call fcn.140027e10
mov r12, qword [rbp + 0x2010]
inc r13d
mov dword [rbp + 0x2018], 0x410
lea rcx, [rbp + 0x8d0]
call fcn.140027e10
cmp dword [r12 + 0x127c], 0
lea rbx, [r12 + 0x28]
mov r15d, 1
je 0x1400a7600
movzx esi, byte [rbp + 0x2010]
mov rax, qword [rbx]
mov rdx, qword [rbp - 0x20]
mov rcx, rbx
call qword [rax + 0x28]
mov r15d, 1
mov rax, qword [rsp + 0x50]
mov r14, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x50]
mov qword [rax + 8], rax
xor eax, eax
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x50]
cmp r14, rcx
je 0x1400a8108
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [r14]
lea rcx, [r14 + 0x10]
mov rax, qword [rcx]
xor edx, edx
call qword [rax]
mov edx, 0x50
mov rcx, r14
call fcn.140247060
mov r14, rbx
mov rcx, qword [rsp + 0x50]
cmp rbx, rcx
jne 0x1400a80e0
mov edx, 0x50
call fcn.140247060
mov rdi, qword [rdi]
cmp dword [r12 + 0x127c], 0
je 0x1400a5ea5
add rsp, 0x20c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, str.list_T__too_long
call fcn.1402453d0
nop
lea rcx, str.list_T__too_long
call fcn.1402453d0
int3