Function at 0x14003ca10
Capabilities:
Create thread
Delete registry key
Delete registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1400c24b8]
xor rax, rsp
mov qword [rbp + 0x228], rax
mov qword [rsp + 0x60], r8
mov r13d, edx
mov dword [rsp + 0x50], edx
mov rax, rcx
mov qword [rbp - 0x78], rcx
xor sil, sil
xor ecx, ecx
mov qword [rsp + 0x58], rcx
lea rdx, [rsp + 0x58]
mov rcx, rax
call fcn.140045b80
mov ebx, eax
movzx eax, ax
mov dword [rsp + 0x68], eax
test eax, eax
je 0x14003d6b6
xor edx, edx
mov ecx, 0x10c
call fcn.140011230
test r13d, r13d
jne 0x14003caa4
mov r13d, ebx
and r13d, 0xffff0000
mov eax, 0x3f00000
cmove r13d, eax
mov dword [rsp + 0x50], r13d
mov rcx, qword [0x1400ca5a8]
add rcx, 0x50
call fcn.140012b00
mov rcx, qword [0x1400ca5a8]
add rcx, 0x9214
call fcn.140012d00
mov eax, ebx
and eax, 0x20
je 0x14003cada
bt r13d, 0x14
jae 0x14003cada
mov r14b, 1
jmp 0x14003cae1
xor r14b, r14b
test eax, eax
je 0x14003caed
bt r13d, 0x18
jae 0x14003caed
mov dil, 1
jmp 0x14003caf4
xor dil, dil
test eax, eax
je 0x14003cb00
bt r13d, 0x15
jae 0x14003cb00
mov r15b, 1
jmp 0x14003cb07
xor r15b, r15b
test eax, eax
je 0x14003cb13
bt r13d, 0x17
jae 0x14003cb13
mov r12b, 1
jmp 0x14003cb16
xor r12b, r12b
mov byte [rsp + 0x39], r12b
test bl, 0x40
je 0x14003cb2c
bt r13d, 0x16
mov byte [rsp + 0x38], 1
jb 0x14003cb31
mov byte [rsp + 0x38], sil
xor ebx, ebx
test r14b, r14b
je 0x14003cc1a
mov qword [rsp + 0x40], rbx
mov r8d, 0x2001f
lea rdx, [rsp + 0x40]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nView
call fcn.14004fc60
test eax, eax
jne 0x14003cc1a
lea rdx, str.DesktopManagement
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.DesktopManagement
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003cc0f
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0xf003f
lea r8, [rsp + 0x48]
lea rdx, str.DesktopManagement
mov rcx, qword [rsp + 0x40]
call fcn.14004f980
test eax, eax
jne 0x14003cc04
xor r9d, r9d
mov r8, qword [rsp + 0x48]
xor edx, edx
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.SHLWAPI.dll_SHCopyKeyW]
mov ecx, eax
mov r9d, 0x172
lea r8, str.D:uworkspace_nViewBranchBuilder_sw_nview_v200_nView_nViewMainProfileManager.cpp
lea rdx, str.ProfileManager::load
call fcn.14004ed00
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test dil, dil
je 0x14003ccc2
mov qword [rsp + 0x40], rbx
mov r8d, 0x2001f
lea rdx, [rsp + 0x40]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nView
call fcn.14004fc60
test eax, eax
jne 0x14003ccc2
lea rdx, str.GridsV2
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov rcx, qword [rsp + 0x58]
call fcn.14004fb70
mov rbx, rax
test rax, rax
je 0x14003ccb7
mov rcx, qword [rsp + 0x40]
call fcn.14004fb70
mov rsi, rax
test rax, rax
je 0x14003ccae
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_SHCopyKeyW]
mov ecx, eax
mov r9d, 0x189
lea r8, str.D:uworkspace_nViewBranchBuilder_sw_nview_v200_nView_nViewMainProfileManager.cpp
lea rdx, str.ProfileManager::load
call fcn.14004ed00
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test r14b, r14b
jne 0x14003cccc
test dil, dil
je 0x14003ccfb
call fcn.140015f40
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
test dil, dil
je 0x14003ccfb
xor r9d, r9d
xor r8d, r8d
mov edx, 0x486
mov rcx, qword [0x1400ca5a8]
mov rcx, qword [rcx + 0x38]
call qword [sym.imp.USER32.dll_PostMessageW]
xor r14d, r14d
test r15b, r15b
je 0x14003cdfb
mov qword [rsp + 0x40], r14
mov r8d, 0x2001f
lea rdx, [rsp + 0x40]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nView
call fcn.14004fc60
test eax, eax
jne 0x14003cdfb
lea rdx, str.Tweak
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov qword [rsp + 0x30], r14
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Tweak
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003cddb
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
mov r9d, 0xf003f
lea r8, [rsp + 0x48]
lea rdx, str.Tweak
mov rcx, qword [rsp + 0x40]
call fcn.14004f980
test eax, eax
jne 0x14003cdd0
xor r9d, r9d
mov r8, qword [rsp + 0x48]
xor edx, edx
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.SHLWAPI.dll_SHCopyKeyW]
mov ecx, eax
mov r9d, 0x1aa
lea r8, str.D:uworkspace_nViewBranchBuilder_sw_nview_v200_nView_nViewMainProfileManager.cpp
lea rdx, str.ProfileManager::load
call fcn.14004ed00
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [0x1400ca5a8]
add rcx, 0x50
mov rdx, qword [rsp + 0x40]
call fcn.1400128d0
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov rsi, r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x80], r14
test r12b, r12b
je 0x14003d079
mov qword [rsp + 0x40], r14
mov r8d, 0x2001f
lea rdx, [rsp + 0x40]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nView
call fcn.14004fc60
test eax, eax
jne 0x14003d079
mov edi, r14d
mov qword [rsp + 0x30], r14
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x30]
xor ecx, ecx
call fcn.140044f80
mov r12, qword [rsp + 0x78]
test eax, eax
je 0x14003cf83
mov rcx, qword [rbp - 0x50]
call fcn.14005f0a0
mov rbx, rax
test rax, rax
je 0x14003cf60
lea rdx, str.LoadProfile
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x14003ceb6
lea rdx, str.WorkspaceSave
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x14003ceb6
lea rdx, str.WorkspaceRest
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x14003cf60
cmp r12, rsi
je 0x14003cf46
mov rcx, r12
lea rax, [rbp - 0x60]
mov edx, 4
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003ced0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
mov rax, qword [rax + 0x20]
mov qword [rcx + 0x20], rax
add r12, 0x228
mov qword [rsp + 0x78], r12
jmp 0x14003cf60
lea r8, [rbp - 0x60]
mov rdx, r12
lea rcx, [rsp + 0x70]
call fcn.14003c170
mov rsi, qword [rbp - 0x80]
mov r12, qword [rsp + 0x78]
inc edi
mov qword [rsp + 0x30], r14
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x30]
mov ecx, edi
call fcn.140044f80
test eax, eax
jne 0x14003ce61
mov qword [rbp - 0x70], rsi
lea rdx, str.Hotkeys
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov qword [rsp + 0x48], r14
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Hotkeys
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003d033
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
mov r9d, 0xf003f
lea r8, [rsp + 0x30]
lea rdx, str.Hotkeys
mov rcx, qword [rsp + 0x40]
call fcn.14004f980
test eax, eax
jne 0x14003d028
xor r9d, r9d
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.SHLWAPI.dll_SHCopyKeyW]
mov ecx, eax
mov r9d, 0x1c9
lea r8, str.D:uworkspace_nViewBranchBuilder_sw_nview_v200_nView_nViewMainProfileManager.cpp
lea rdx, str.ProfileManager::load
call fcn.14004ed00
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x485
mov rcx, qword [0x1400ca5a8]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x485
lea r8d, [r9 + 1]
mov rcx, qword [0x1400ca5a8]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14003d07e
mov r12, qword [rsp + 0x78]
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r14w
mov rsi, 0xffffffffffffffff
cmp byte [rsp + 0x38], 0
je 0x14003d350
mov dword [rsp + 0x40], r14d
lea ecx, [rsi + 0x79]
call fcn.1400647cc
mov rdi, rax
test rax, rax
je 0x14003d104
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov qword [rax + 0x18], 7
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], 7
mov word [rax + 0x20], r14w
mov qword [rax + 0x60], r14
mov qword [rax + 0x68], r14
mov qword [rax + 0x70], r14
jmp 0x14003d107
mov rdi, r14
mov r8, rsi
mov rdx, qword [rbp - 0x78]
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14003d110
mov rcx, rdi
call fcn.14000a2d0
mov rax, qword [rsp + 0x60]
mov qword [rdi + 0x40], rax
mov eax, r13d
and eax, 0xffff0000
or eax, dword [rsp + 0x68]
mov dword [rdi + 0x48], eax
mov qword [rsp + 0x30], r14
mov r8d, 0x2001f
lea rdx, [rsp + 0x30]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
call fcn.14004fc60
test eax, eax
jne 0x14003d190
lea r8, [rbp + 0x1d0]
lea rdx, str.CurrentProfileApp
mov rcx, qword [rsp + 0x30]
call fcn.14004fe10
lea rdx, str.CurrentProfileApp
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r14, [rdi + 0x20]
lea rax, [rbp + 0x1d0]
cmp r14, rax
je 0x14003d2ce
lea rcx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 8
cmovae rcx, qword [rbp + 0x1d0]
mov qword [rsp + 0x60], rcx
mov r13, qword [rbp + 0x1e0]
mov r15, qword [r14 + 0x18]
cmp r13, r15
ja 0x14003d217
mov rax, r14
mov qword [rsp + 0x48], rax
cmp r15, 8
jb 0x14003d1e6
mov rax, qword [r14]
mov qword [rsp + 0x48], rax
mov qword [r14 + 0x10], r13
lea rbx, [r13*2]
mov r8, rbx
mov rdx, rcx
mov rcx, rax
call fcn.140066d60
mov rax, qword [rsp + 0x48]
xor r14d, r14d
mov word [rbx + rax], r14w
mov r13d, dword [rsp + 0x50]
jmp 0x14003d2d1
movabs rbx, 0x7ffffffffffffffe
cmp r13, rbx
ja 0x14003d6f7
mov rcx, r13
or rcx, 7
cmp rcx, rbx
ja 0x14003d255
mov rdx, r15
shr rdx, 1
mov rax, rbx
sub rax, rdx
cmp r15, rax
ja 0x14003d255
lea rax, [r15 + rdx]
mov rbx, rcx
cmp rcx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
mov rcx, r14
call fcn.14000a470
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], rbx
lea rbx, [r13*2]
mov r8, rbx
mov rdx, qword [rsp + 0x60]
mov r13, rax
mov rcx, rax
call fcn.140066d60
xor ecx, ecx
mov word [rbx + r13], cx
cmp r15, 8
jb 0x14003d2c6
mov rcx, qword [r14]
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x14003d2c1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003d6fd
mov rcx, r8
call fcn.140064808
mov qword [r14], r13
mov r13d, dword [rsp + 0x50]
xor r14d, r14d
mov qword [rdi + 0x50], r14
xor r9d, r9d
lea r8, [rdi + 0x50]
xor edx, edx
mov ecx, 0x2000
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
cmp qword [rdi + 0x50], 0
je 0x14003d306
mov r9d, 3
xor r8d, r8d
xor edx, edx
mov ecx, 0x2001
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov rdx, qword [rsp + 0x58]
mov rcx, rdi
cmp qword [rdi + 0x30], 0
je 0x14003d31c
call fcn.140033160
jmp 0x14003d32d
shr r13d, 0x19
and r13b, 1
movzx r8d, r13b
call fcn.1400332f0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rdi
lea r8, [0x14003e3b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, str.TempCopy
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
call fcn.14004fac0
mov ecx, eax
mov r9d, 0x202
lea r8, str.D:uworkspace_nViewBranchBuilder_sw_nview_v200_nView_nViewMainProfileManager.cpp
lea rdx, str.ProfileManager::load
call fcn.14004ed00
movabs r15, 0x76b981dae6076b99
mov rdi, qword [rsp + 0x70]
cmp qword [rbp + 0x1e0], 0
jne 0x14003d603
mov rbx, qword [rbp - 0x78]
mov rdx, rbx
lea rcx, str.nviewprivatedesktopstate
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x14003d48a
mov qword [rsp + 0x48], r14
xor r9d, r9d
mov r8d, 0xf003f
lea rdx, [rsp + 0x48]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
call fcn.14004f9e0
test eax, eax
jne 0x14003d48a
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r14w
inc rsi
cmp word [rbx + rsi*2], 0
jne 0x14003d403
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.14000a2d0
nop
lea r8, [rbp + 0x1f0]
lea rdx, str.LastProfile
mov rcx, qword [rsp + 0x48]
call fcn.140050020
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 8
jb 0x14003d48a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d485
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d703
call fcn.140064808
mov rdx, rbx
lea rcx, str.nviewprivatedesktopstate
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
mov rax, qword [0x1400ca5a8]
jne 0x14003d4ab
or dword [rax + 0x50], 0x20
jmp 0x14003d4af
and dword [rax + 0x50], 0xffffffdf
mov qword [rsp + 0x30], r14
mov r8d, 0xf003f
lea rdx, [rsp + 0x30]
lea rcx, str.SoftwareNVIDIA_CorporationGlobal_nView
call fcn.14004fc60
test eax, eax
jne 0x14003d507
mov rcx, qword [0x1400ca5a8]
add rcx, 0x50
mov rdx, qword [rsp + 0x30]
call fcn.1400128d0
mov rcx, qword [0x1400ca5a8]
add rcx, 0x9214
mov rdx, qword [rsp + 0x30]
call fcn.140012cf0
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [rsp + 0x39], 0
je 0x14003d59a
sub r12, rdi
mov rax, r15
imul r12
mov rsi, rdx
sar rsi, 8
mov rax, rsi
shr rax, 0x3f
add rsi, rax
je 0x14003d59a
mov ebx, r14d
test esi, esi
jle 0x14003d561
nop word [rax + rax]
mov qword [rsp + 0x60], r14
mov eax, ebx
imul rcx, rax, 0x228
add rcx, rdi
lea rdx, [rsp + 0x60]
call fcn.140044ee0
inc ebx
cmp ebx, esi
jl 0x14003d540
xor r9d, r9d
xor r8d, r8d
mov edx, 0x485
mov rcx, qword [0x1400ca5a8]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x485
lea r8d, [r9 + 1]
mov rcx, qword [0x1400ca5a8]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.USER32.dll_PostMessageW]
mov qword [rbp + 0x1f0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
movups xmmword [rbp + 0x208], xmm0
movups xmmword [rbp + 0x218], xmm0
xor r9d, r9d
lea r8d, [r9 + 9]
mov rax, qword [0x1400ca5a8]
mov edx, dword [rax + 0x28]
lea rcx, [rbp + 0x1f0]
call fcn.140061160
xor r9d, r9d
lea r8d, [r9 + 6]
mov rax, qword [0x1400ca5a8]
mov edx, dword [rax + 0x28]
lea rcx, [rbp + 0x1f0]
call fcn.140061160
xor edx, edx
mov ecx, 0x10a
call fcn.140011230
mov sil, 1
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 8
jb 0x14003d64c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d647
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d709
call fcn.140064808
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r14w
test rdi, rdi
je 0x14003d6b6
mov rcx, qword [rbp - 0x70]
sub rcx, rdi
mov rax, r15
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x228
mov rax, rdi
cmp rdx, 0x1000
jb 0x14003d6ae
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d6f1
mov rcx, rdi
call fcn.140064808
mov rcx, qword [0x1400ca5d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
movzx eax, sil
mov rcx, qword [rbp + 0x228]
xor rcx, rsp
call fcn.140064920
mov rbx, qword [rsp + 0x380]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14006b51c
nop
call fcn.140004b60
nop
call fcn.14006b51c
int3
call fcn.14006b51c
nop
call fcn.14006b51c
int3