Function at 0x140034a40
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xbb8]
sub rsp, 0xc90
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140131c08]
xor rax, rsp
mov qword [rbp + 0xb70], rax
xor r15d, r15d
mov dword [rsp + 0x30], r15d
movabs rax, 0xcaffb45a3ce3dad2
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rbp - 0x60], rax
movabs rax, 0x4905d42a4617914f
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rbp - 0x58], rax
movabs rbx, 0x8e9ec03b7891aea1
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x760], rax
movabs r13, 0x4905d42a4617e326
mov qword [rsp + 0x38], r13
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x768], rax
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp + 0x760]
movdqa xmmword [rbp - 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
mov qword [rbp + 0x5f8], r15
mov qword [rbp + 0x600], r15
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], r15b
jne 0x140034b20
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x5e8]
call fcn.140031c90
nop
movabs rax, 0xeab0b45e14fdcfd6
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rbp - 0x70], rax
movabs rax, 0x4905d42a46179747
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x730], rax
mov qword [rsp + 0x38], r13
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x738], rax
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x730]
movdqa xmmword [rbp - 0x70], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rbp + 0x5b0], r15
mov qword [rbp + 0x5b8], r15
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140034bc1
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x5a0]
call fcn.140031c90
nop
mov rsi, qword [0x1401384d0]
mov r14, qword [0x1401384d8]
cmp rsi, r14
je 0x140036209
lea r12, [0x140131d90]
mov edi, dword [rsp + 0x30]
lea rcx, [0x140131f20]
movabs r9, 0x4905d42a4617e37a
movabs r8, 0xcbcc816c2cd7e1f2
movabs rdx, 0x8e9ec03b78e5ff8c
mov eax, dword [rsi]
cmp eax, 3
jne 0x1400355ed
mov qword [rsp + 0x38], rdx
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x38], r13
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x740], rax
mov qword [rsp + 0x38], r13
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x748], rax
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x740]
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rsp + 0x38], r8
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x750], rax
mov qword [rsp + 0x38], r13
mov rax, qword [rsp + 0x38]
mov qword [rbp + 0x758], rax
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x750]
movdqa xmmword [rbp + 0x30], xmm0
lea rbx, [rsi + 8]
mov r8, rbx
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x190]
call fcn.1400442d0
nop
mov r8d, 1
lea rdx, [0x140116b40]
mov rcx, rax
call fcn.140042aa0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov edi, dword [rsp + 0x30]
or edi, 1
mov dword [rsp + 0x30], edi
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x140034d41
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140042aa0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 2
mov dword [rsp + 0x30], edi
lea r8, [rbp + 0x40]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x658]
call fcn.140043ba0
nop
and edi, 0xfffffffd
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140034dd8
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034dd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362ff
call fcn.1400ab870
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
and edi, 0xfffffffe
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140034e2a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034e25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036305
call fcn.1400ab870
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x140034e7b
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034e76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003630b
call fcn.1400ab870
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], 0xf
mov byte [rbp + 0x190], 0
mov qword [rbp + 0x568], r15
mov dword [rbp + 0x560], 0x400
mov dword [rbp + 0x5c0], 0xf003f
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
or edi, 0x20
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x658]
cmp qword [rbp + 0x670], 0x10
cmovae rdx, qword [rbp + 0x658]
lea rax, [rbp + 0x568]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140034fea
lea rdx, [rbp + 0x5e8]
cmp qword [rbp + 0x600], 0x10
cmovae rdx, qword [rbp + 0x5e8]
lea rax, [rbp + 0x560]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x770]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x5c0]
xor r8d, r8d
mov rcx, qword [rbp + 0x568]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140034fea
mov r8d, dword [rbp + 0x560]
dec r8d
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0x10]
call fcn.140031c90
nop
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x70]
call fcn.140041a00
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140034fda
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034fd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036311
call fcn.1400ab870
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
mov rcx, qword [rbp + 0x568]
test rcx, rcx
je 0x140034ffc
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rbp + 0x5c8]
mov qword [rbp + 0x3e0], rax
lea rax, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rax, qword [rsp + 0x70]
mov qword [rbp + 0x140], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x148], rax
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x5c8]
call fcn.14004dc20
or edi, 8
mov dword [rsp + 0x30], edi
and edi, 0xfffffff7
mov dword [rsp + 0x30], edi
and edi, 0xffffffdf
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140035090
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003508b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036317
call fcn.1400ab870
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
cmp qword [rbp + 0x5d8], 0
je 0x14003552e
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x460]
call fcn.1400302e0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2b0], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x130], ecx
mov qword [rbp + 0x138], r12
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x690], xmm0
mov eax, dword [rbp + 0x2b0]
test eax, eax
je 0x14003510d
mov dword [rbp + 0x690], r15d
mov qword [rbp + 0x698], r12
cmp eax, 1
setne al
jmp 0x140035117
xor al, al
test ecx, ecx
jne 0x14003634a
test al, al
je 0x14003552e
lea rax, [rbp + 0x70]
mov qword [rbp + 0x3e8], rax
lea rax, [rbp + 0x5a0]
cmp qword [rbp + 0x5b8], 0x10
cmovae rax, qword [rbp + 0x5a0]
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x70]
call fcn.14004dc20
bts edi, 0xa
mov dword [rsp + 0x30], edi
btr edi, 0xa
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x5c8]
call fcn.14002eb90
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x1400351ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400351c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003631d
call fcn.1400ab870
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], 7
mov word [rbp + 0x70], r15w
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x450]
call fcn.1400302e0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2e0], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x120], ecx
mov qword [rbp + 0x128], r12
movaps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x680], xmm0
mov eax, dword [rbp + 0x2e0]
test eax, eax
je 0x14003523f
mov dword [rbp + 0x680], r15d
mov qword [rbp + 0x688], r12
cmp eax, 1
setne al
jmp 0x140035249
xor al, al
test ecx, ecx
jne 0x14003632f
test al, al
je 0x14003552e
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x6b0]
call fcn.140078760
nop
cmp byte [rbp + 0x6d0], 0
je 0x140035521
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x380], xmm0
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x608]
call fcn.140042740
bts edi, 0x16
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x390]
mov qword [rbp + 0x3f0], rax
lea rdx, [rbp + 0x5a0]
cmp qword [rbp + 0x5b8], 0x10
cmovae rdx, qword [rbp + 0x5a0]
mov r8, qword [rbp + 0x5b0]
lea rcx, [rbp + 0xb0]
call fcn.140043f40
bts edi, 0x17
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x390]
call fcn.140044210
mov rbx, rax
mov qword [rbp + 0x3f8], rax
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x400], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], r15
mov r8d, 8
lea rdx, str.filename
lea rcx, [rbp + 0x1b0]
call fcn.140031c90
nop
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x608]
call fcn.140040a70
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.140042c90
btr edi, 0x17
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x1400353b6
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400353b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036323
call fcn.1400ab870
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
lea rax, [rsp + 0x40]
mov qword [rbp + 0x408], rax
cmp byte [rbp + 0x6d0], 0
je 0x140036329
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x6b0]
lea rcx, [rsp + 0x40]
call fcn.140054080
nop
lea rax, [rsp + 0x40]
mov qword [rbp + 0x410], rax
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x418], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r15
mov r8d, 7
lea rdx, str.content
lea rcx, [rbp + 0x1d0]
call fcn.140031c90
nop
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x608]
call fcn.140040a70
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x40]
mov byte [rax], cl
mov byte [rsp + 0x40], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x48]
mov qword [rax + 8], rdx
mov qword [rsp + 0x48], rcx
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140042c90
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x420], rax
lea rdx, [0x140138b80]
lea rcx, [rbp + 0x4a0]
call fcn.140041a90
nop
mov rdx, rax
lea rcx, [0x140132110]
call fcn.140040a70
mov rbx, rax
lea rax, [rbp + 0x4c0]
mov qword [rbp + 0x378], rax
lea rdx, [rsi + 0x28]
lea rcx, [rbp + 0x4c0]
call fcn.140041a90
nop
mov rdx, rax
mov rcx, rbx
call fcn.140040a70
lea rdx, [rbp + 0x608]
mov rcx, rax
call fcn.140040990
btr edi, 0x16
mov dword [rsp + 0x30], edi
movzx edx, byte [rbp + 0x608]
lea rcx, [rbp + 0x610]
call fcn.140042c90
nop
lea rcx, [rbp + 0x6b0]
call fcn.140032b20
nop
mov rdx, qword [rbp + 0x5e0]
cmp rdx, 8
jb 0x140035574
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003556f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036365
call fcn.1400ab870
mov qword [rbp + 0x5d8], r15
mov qword [rbp + 0x5e0], 7
mov word [rbp + 0x5c8], r15w
mov rdx, qword [rbp + 0x670]
cmp rdx, 0x10
jb 0x1400355cf
inc rdx
mov rcx, qword [rbp + 0x658]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400355ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003636b
call fcn.1400ab870
mov qword [rbp + 0x668], r15
mov qword [rbp + 0x670], 0xf
mov byte [rbp + 0x658], 0
jmp 0x1400361f1
lea rdx, [0x140131f00]
cmp eax, 2
cmove rdx, rcx
lea rcx, [rbp + 0x570]
call fcn.140036b80
nop
lea rax, [rsi + 8]
lea rcx, [rbp + 0x90]
mov qword [rbp + 0x428], rcx
mov rcx, qword [rsi + 0x18]
cmp qword [rsi + 0x20], 0x10
jb 0x140035628
mov rax, qword [rax]
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rcx
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x90]
call fcn.14004dc20
or edi, 0x10
mov dword [rsp + 0x30], edi
and edi, 0xffffffef
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x570]
call fcn.14002eb90
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 8
jb 0x1400356b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400356ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036371
call fcn.1400ab870
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], 7
mov word [rbp + 0x90], r15w
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x480]
call fcn.1400302e0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2d0], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x180], ecx
mov qword [rbp + 0x188], r12
movaps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x6a0], xmm0
mov eax, dword [rbp + 0x2d0]
test eax, eax
je 0x140035729
mov dword [rbp + 0x6a0], r15d
mov qword [rbp + 0x6a8], r12
cmp eax, 1
setne al
jmp 0x140035733
xor al, al
test ecx, ecx
jne 0x1400363e7
test al, al
je 0x140036191
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x490]
call fcn.1400302e0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2f0], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rbp + 0x2f0]
test edx, edx
je 0x140035775
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140036377
cmp ecx, 3
jne 0x140035d39
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x590], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x590]
call fcn.140043d80
test eax, eax
jne 0x1400363b3
xorps xmm0, xmm0
movups xmmword [rbp + 0x638], xmm0
lea rax, [rbp + 0x60]
mov qword [rbp + 0x430], rax
movdqa xmmword [rbp + 0x60], xmm0
mov rcx, qword [rbp + 0x598]
test rcx, rcx
je 0x1400357d5
lock inc dword [rcx + 8]
mov edi, dword [rsp + 0x30]
movdqa xmm6, xmmword [rbp + 0x590]
movdqa xmmword [rbp + 0x60], xmm6
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x638]
call fcn.1400300b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x648], xmm0
lea rax, [rbp + 0x50]
mov qword [rbp + 0x438], rax
movdqa xmmword [rbp + 0x50], xmm0
mov rcx, qword [rbp + 0x598]
test rcx, rcx
je 0x140035829
lock inc dword [rcx + 8]
movdqa xmm6, xmmword [rbp + 0x590]
mov edi, dword [rsp + 0x30]
movdqa xmmword [rbp + 0x50], xmm6
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x648]
call fcn.140030190
nop
mov rax, qword [rbp + 0x638]
cmp rax, qword [rbp + 0x648]
je 0x140035c68
nop dword [rax]
nop word [rax + rax]
lea rbx, [rax + 0x20]
mov rdx, rbx
lea rcx, [rbp + 0x470]
call fcn.1400302e0
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2c0], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rbp + 0x2c0]
test edx, edx
je 0x14003589a
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14003638b
cmp ecx, 2
jne 0x140035c48
mov rdx, rbx
lea rcx, [rbp + 0x6d8]
call fcn.140078760
nop
cmp byte [rbp + 0x6f8], 0
je 0x140035c3c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3a0], xmm0
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x618]
call fcn.140042740
bts edi, 8
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x440], rax
lea rdx, [rbp + 0x150]
mov rcx, rbx
call fcn.14002ef50
nop
lea rdx, [rbp + 0x210]
mov rcx, rax
call fcn.14002ede0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140035922
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140043f40
bts edi, 9
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x3b0]
call fcn.140044210
mov rbx, rax
mov qword [rbp + 0x448], rax
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x300], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], r15
mov r8d, 8
lea rdx, str.filename
lea rcx, [rbp + 0x1f0]
call fcn.140031c90
nop
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x618]
call fcn.140040a70
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.140042c90
btr edi, 9
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140035a17
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035a12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003639b
call fcn.1400ab870
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x228]
cmp rdx, 0x10
jb 0x140035a71
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035a6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400363a1
call fcn.1400ab870
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], 0xf
mov byte [rbp + 0x210], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x140035ad0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035acb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400363a7
call fcn.1400ab870
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r15w
lea rax, [rsp + 0x60]
mov qword [rbp + 0x308], rax
cmp byte [rbp + 0x6f8], 0
je 0x1400363ad
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x6d8]
lea rcx, [rsp + 0x60]
call fcn.140054080
nop
lea rax, [rsp + 0x60]
mov qword [rbp + 0x310], rax
lea rax, [rbp + 0x230]
mov qword [rbp + 0x318], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r15
mov qword [rbp + 0x248], r15
mov r8d, 7
lea rdx, str.content
lea rcx, [rbp + 0x230]
call fcn.140031c90
nop
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x618]
call fcn.140040a70
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x60]
mov byte [rax], cl
mov byte [rsp + 0x60], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x68]
mov qword [rax + 8], rdx
mov qword [rsp + 0x68], rcx
movzx edx, byte [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140042c90
lea rax, [rbp + 0x4e0]
mov qword [rbp + 0x320], rax
lea rdx, [0x140138b80]
lea rcx, [rbp + 0x4e0]
call fcn.140041a90
nop
mov rdx, rax
lea rcx, [0x140132110]
call fcn.140040a70
mov rbx, rax
lea rax, [rbp + 0x500]
mov qword [rbp + 0x328], rax
lea rdx, [rsi + 0x28]
lea rcx, [rbp + 0x500]
call fcn.140041a90
nop
mov rdx, rax
mov rcx, rbx
call fcn.140040a70
lea rdx, [rbp + 0x618]
mov rcx, rax
call fcn.140040990
btr edi, 8
mov dword [rsp + 0x30], edi
movzx edx, byte [rbp + 0x618]
lea rcx, [rbp + 0x620]
call fcn.140042c90
nop
lea rcx, [rbp + 0x6d8]
call fcn.140032b20
lea rcx, [rbp + 0x638]
call fcn.14002ffa0
mov rax, qword [rbp + 0x638]
cmp rax, qword [rbp + 0x648]
jne 0x140035860
mov rbx, qword [rbp + 0x650]
test rbx, rbx
je 0x140035ca7
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140035ca3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140035ca3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
mov rbx, qword [rbp + 0x640]
test rbx, rbx
je 0x140035ce6
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140035ce2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140035ce2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
mov rcx, qword [rbp + 0x598]
test rcx, rcx
je 0x140036191
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140035d30
mov rbx, qword [rbp + 0x598]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140035d30
mov rcx, qword [rbp + 0x598]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x30]
jmp 0x140036191
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x700]
call fcn.140078760
nop
cmp byte [rbp + 0x720], 0
je 0x140036184
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3c0], xmm0
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x628]
call fcn.140042740
bts edi, 0x11
mov dword [rsp + 0x30], edi
lea rax, [rbp + 0x3d0]
mov qword [rbp + 0x330], rax
lea rcx, [rbp + 0x570]
cmp qword [rbp + 0x588], 8
cmovae rcx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x580]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.14002ea60
cmp rax, r11
je 0x140035dfb
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140035dcf
cmp cx, 0x2f
jne 0x140035dd8
add rax, 2
cmp rax, r11
jne 0x140035dc0
cmp rax, r11
je 0x140035dfb
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x140035dfb
cmp cx, 0x2f
je 0x140035dfb
mov r10, rdx
cmp rax, rdx
jne 0x140035de0
sub r11, r10
sar r11, 1
lea rax, [rbp - 0x50]
mov qword [rbp + 0x338], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov r8, r11
mov rdx, r10
lea rcx, [rbp - 0x50]
call fcn.140036900
bts edi, 0x14
mov dword [rsp + 0x30], edi
btr edi, 0x14
mov dword [rsp + 0x30], edi
bts edi, 0x13
mov dword [rsp + 0x30], edi
btr edi, 0x13
mov dword [rsp + 0x30], edi
bts edi, 0x12
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0x270]
lea rcx, [rbp - 0x50]
call fcn.14002ede0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140035e71
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.140043f40
bts edi, 0x15
mov dword [rsp + 0x30], edi
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x3d0]
call fcn.140044210
mov rbx, rax
mov qword [rbp + 0x340], rax
lea rax, [rbp + 0x250]
mov qword [rbp + 0x348], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
mov r8d, 8
lea rdx, str.filename
lea rcx, [rbp + 0x250]
call fcn.140031c90
nop
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x628]
call fcn.140040a70
nop
movzx edx, byte [rax]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov byte [rbx], dl
lea rcx, [rbx + 8]
mov rdx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rdx
movzx edx, byte [rbx]
call fcn.140042c90
btr edi, 0x15
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x140035f66
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035f61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400363c9
call fcn.1400ab870
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x288]
cmp rdx, 0x10
jb 0x140035fc0
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035fbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400363cf
call fcn.1400ab870
mov qword [rbp + 0x280], r15
mov qword [rbp + 0x288], 0xf
mov byte [rbp + 0x270], 0
btr edi, 0x12
mov dword [rsp + 0x30], edi
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140036021
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003601c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400363d5
call fcn.1400ab870
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r15w
lea rax, [rsp + 0x50]
mov qword [rbp + 0x350], rax
cmp byte [rbp + 0x720], 0
je 0x1400363db
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x700]
lea rcx, [rsp + 0x50]
call fcn.140054080
nop
lea rax, [rsp + 0x50]
mov qword [rbp + 0x358], rax
lea rax, [rbp + 0x290]
mov qword [rbp + 0x360], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r15
mov qword [rbp + 0x2a8], r15
mov r8d, 7
lea rdx, str.content
lea rcx, [rbp + 0x290]
call fcn.140031c90
nop
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x628]
call fcn.140040a70
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x50]
mov byte [rax], cl
mov byte [rsp + 0x50], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x58]
mov qword [rax + 8], rdx
mov qword [rsp + 0x58], rcx
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140042c90
lea rax, [rbp + 0x520]
mov qword [rbp + 0x368], rax
lea rdx, [0x140138b80]
lea rcx, [rbp + 0x520]
call fcn.140041a90
nop
mov rdx, rax
lea rcx, [0x140132110]
call fcn.140040a70
mov rbx, rax
lea rax, [rbp + 0x540]
mov qword [rbp + 0x370], rax
lea rdx, [rsi + 0x28]
lea rcx, [rbp + 0x540]
call fcn.140041a90
nop
mov rdx, rax
mov rcx, rbx
call fcn.140040a70
lea rdx, [rbp + 0x628]
mov rcx, rax
call fcn.140040990
btr edi, 0x11
mov dword [rsp + 0x30], edi
movzx edx, byte [rbp + 0x628]
lea rcx, [rbp + 0x630]
call fcn.140042c90
nop
lea rcx, [rbp + 0x700]
call fcn.140032b20
nop
mov rdx, qword [rbp + 0x588]
cmp rdx, 8
jb 0x1400361d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x570]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400361d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400363e1
call fcn.1400ab870
mov qword [rbp + 0x580], r15
mov qword [rbp + 0x588], 7
mov word [rbp + 0x570], r15w
add rsi, 0x48
cmp rsi, r14
je 0x140036209
movabs rbx, 0x8e9ec03b7891aea1
jmp 0x140034bfe
call fcn.140032f70
call fcn.140033c00
nop
mov rdx, qword [rbp + 0x5b8]
cmp rdx, 0x10
jb 0x140036255
inc rdx
mov rcx, qword [rbp + 0x5a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036250
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036402
call fcn.1400ab870
mov qword [rbp + 0x5b0], r15
mov qword [rbp + 0x5b8], 0xf
mov byte [rbp + 0x5a0], 0
mov rdx, qword [rbp + 0x600]
cmp rdx, 0x10
jb 0x1400362ab
inc rdx
mov rcx, qword [rbp + 0x5e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400362a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362f9
call fcn.1400ab870
mov qword [rbp + 0x5f8], r15
mov qword [rbp + 0x600], 0xf
mov byte [rbp + 0x5e8], 0
mov rcx, qword [rbp + 0xb70]
xor rcx, rsp
call fcn.1400ab850
lea r11, [rsp + 0xc90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
int3
call fcn.14008f288
nop
call fcn.14008f288
int3
call fcn.14002e950
nop
lea r8, [rbp + 0x5c8]
lea rdx, [rbp + 0x680]
lea rcx, str.exists
call fcn.14002fb10
int3
lea r8, [rbp + 0x5c8]
lea rdx, [rbp + 0x690]
lea rcx, str.exists
call fcn.14002fb10
nop
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
int3
lea r8, [rbp + 0x570]
lea rcx, str.status
call fcn.14002faa0
nop
mov r8, rbx
lea rcx, str.status
call fcn.14002faa0
nop
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
int3
call fcn.14002e950
nop
lea r8, [rbp + 0x570]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.14002faa0
nop
call fcn.14008f288
nop
call fcn.14008f288
nop
call fcn.14008f288
int3
call fcn.14002e950
nop
call fcn.14008f288
nop
lea r8, [rbp + 0x570]
lea rdx, [rbp + 0x6a0]
lea rcx, str.exists
call fcn.14002fb10
nop
call fcn.14008f288
int3